Writing

RSS

Every essay and deep dive I have published, aggregated here and from Dev.to.(27 on this site, 12 on Dev.to)

Dev.toApril 23, 2026

Claude Code Felt Off for a Month. Here Is What Broke.

For about four weeks in March and April, Claude Code felt noticeably worse. I was not imagining it. Sessions got repetitive. Tool calls chose weird paths. My usage limits emptied faster than the work I got out of them....

Dev.toApril 23, 2026

The Token Tab: A Developer's Audit of the AI Hype Stack

A GitHub repo I starred in January does not run anymore. The tutorial I followed in February has a pinned issue that says "keys getting banned." The Mac mini I was going to buy is still on the wish list, which turns out...

On this siteApril 22, 20267 min read

Local-First Is Here, Loudly: Why Three of My Products Made the Switch

For years I dismissed local-first as a correctness-obsessed ideology. In the last twelve months three of my products adopted it, and the reasons were not what the manifestos said they would be.

Local-FirstArchitectureCRDTSync
On this siteApril 19, 20267 min read

The Pricing Tier I Deleted and What Happened Next

I had a $9 Starter tier on one of my tools for eighteen months. Deleting it was the best pricing decision I made last year. Here is the math, the customer impact, and the lesson I am now applying to every other product.

PricingProductGlinckerSolo Founder
Dev.toApril 18, 2026

I replaced Auth0 with an open source library in 30 minutes. Here is what broke.

My Auth0 bill last month was $427. For 12,000 monthly active users on a side project that makes roughly $0 in revenue. I spent a Saturday moving off it. This is what happened. The bill Auth0's pricing jumps at the 1,000...

Dev.toApril 18, 2026

How to build a secure password reset flow in Next.js (the short version)

Last month I reviewed a friend's side project. He had 200 paying users, Stripe set up, a working dashboard. The password reset flow sent a reset token in a query string, stored it in plain text in Postgres, and never...

Dev.toApril 18, 2026

How to build a login flow in Next.js 15 (sessions, cookies, CSRF, and the timing attack nobody talks about)

This is part 4. Today: login. Form, server endpoint, session cookie, CSRF, and a real look at timing defense. This is the endpoint attackers probe the most, so it is the one we harden the hardest. The flow +-------+...

Dev.toApril 18, 2026

How to build a register user flow in Next.js 15 (frontend, backend, database, email)

This is part 3 of the series on building an auth system from scratch. Today: the register user flow. By the end you will have a working signup page, a server endpoint, a users table, and a verification email getting...

Dev.toApril 18, 2026

The 8 tables behind a real auth system (Postgres schema, explained column by column)

This is day 2 of the series. Yesterday I showed the architecture diagram. Today we are looking at the database that sits underneath it. Every table, every column, every index, and the reason each one exists. If you are...

Dev.toApril 18, 2026

I've built auth six times. Here's the system I would build today

I am writing this series because I have built authentication from scratch six times, and every time I got it about 80 percent right and discovered the last 20 percent at 2am when a user said something weird happened....

On this siteApril 18, 20267 min read

The Auth Tax: Why I Stopped Rebuilding Login Flows for Every Product

Every product I shipped in year one reimplemented auth. Year two I started extracting it. Year three I built my own service. Here is what that path actually cost, and when you should follow it.

AuthKavachosArchitectureSolo Founder
On this siteApril 16, 20266 min read

MCP Is the Actually Interesting AI Protocol of 2026

Everyone's chasing foundation models and agent frameworks. The quieter story is a protocol that's becoming the USB-C of AI tooling, and most devs are still sleeping on it.

MCPAIProtocolsAgents
Dev.toApril 15, 2026

Checking TLS cert expiry across your infrastructure

A cert expired on one of our staging services last month. Nobody noticed for two hours because our monitoring only checked HTTP 200s, and the TLS error happened before HTTP even got involved. The load balancer just...

Dev.toApril 15, 2026

I stopped memorizing openssl flags

Every few weeks I need to do something with a certificate. Check when it expires. Look at what SANs are on it. Generate a self-signed one for local dev. Create a CSR. Convert between formats. And every single time, I...

Dev.toApril 15, 2026

Your terminal is mass, here are 280+ tools to fix it

I mass-replaced every classic Unix tool in my dotfiles. It took a few years of stumbling into alternatives, and at some point I realized the list was absurdly long. So I organized it. thegdsks / awesome-modern-cli A...

On this siteApril 15, 20265 min read

I Built a List of 284+ Modern CLI Tools (and What I Learned)

How I went from bookmarking random GitHub repos to curating a list that hit 150+ stars on day one.

Open SourceCLIRustDeveloper Tools
Dev.toApril 13, 2026

Your VS Code Extensions Are a Supply Chain Attack Surface

Last week a VS Code extension called specstudio.code-wakatime-activity-tracker was caught dropping a Zig-compiled binary onto developer machines. It looked like WakaTime. It tracked your activity alright, just not in...

On this siteApril 11, 20267 min read

Humanizing AI-Written Content: What a Rule Engine Actually Catches

I built a six-rule engine that scans my own blog drafts for AI-writing patterns. Three months in, here is what it catches that human editors miss, and why the rules are smaller than you would expect.

AIWritingHumanizerContent
On this siteApril 8, 20266 min read

Building Filagram: 28 File Tools That Never Touch a Server

How I built a browser-based file toolkit where everything runs client-side. No uploads, no server processing, no data leaves your browser.

Next.jsTypeScriptWASMPrivacy
On this siteApril 5, 20266 min read

Building Kavachos: Auth for AI Agents and Humans

Why I built Kavachos, an authentication system designed for the AI-native era with OAuth, MCP auth, and delegation chains.

AuthTypeScriptAIMCP
On this siteApril 1, 20266 min read

Building BreathFlow: A Native iOS Breathing App with SwiftUI

Why I built a guided breathing app for iOS, and what I learned shipping SwiftUI with HealthKit, CloudKit, and SwiftData.

SwiftUIiOSHealthKitApple
On this siteMarch 25, 20265 min read

Building Stacklit: AI-Agent-Ready Codebase Indexes in 4k Tokens

How Stacklit compresses entire codebases into compact indexes that AI agents can actually use, replacing 400k+ token file dumps.

GoCLIAIDeveloper Tools
On this siteMarch 20, 20266 min read

Building Swift-Llama: Running LLMs Locally on Apple Silicon

How I wrapped llama.cpp in a native Swift API with Metal GPU acceleration for on-device LLM inference.

SwiftLLMMetalApple
On this siteMarch 13, 202610 min read

Building Glin-Profanity: A Multilingual Profanity Filter for 24+ Languages

How I built glin-profanity, a fast profanity detection library supporting 24+ languages with context-aware filtering, severity scoring, and MCP server integration.

TypeScriptNLPOpen Sourcenpm
On this siteMarch 13, 20269 min read

Publishing 15+ npm Packages as a Solo Developer: What I Learned

Hard-won lessons from publishing across three npm scopes: monorepo trade-offs, versioning, CI/CD, MCP servers, and the download numbers that surprised me.

npmOpen SourceTypeScriptDeveloper Tools
On this siteMarch 12, 20269 min read

Building profClaw: An AI Agent Engine from Scratch

Why I built profClaw, a local-first AI agent engine that runs on Docker, VPS, or your laptop. Architecture decisions, deployment modes, and what I learned about agentic AI.

AITypeScriptAgentprofClaw
On this siteMarch 10, 202611 min read

Generative Engine Optimization: Auditing Websites for AI-Readiness

What GEO is, why it matters for the AI search era, and how I built GeoKit to audit any website's AI-readiness with a 0-100 score.

SEOAIGEOTypeScript
On this siteMarch 8, 20265 min read

Launching theSVG: The Open SVG Brand Library

Why I built theSVG.org, a free library of 5,600+ brand SVGs with variants, an npm ecosystem, and an MCP server for AI assistants.

Open SourceSVGTypeScriptNext.js
On this siteMarch 8, 20267 min read

The One-Person Studio Playbook: 15 Products In, Here Is What Actually Works

After shipping fifteen products solo across OSS and SaaS, the advice that looks good on Twitter keeps losing to the unglamorous parts. This is what I actually do, with the tradeoffs named.

Solo FounderOSSProductivityIndie Hacking
On this siteMarch 5, 20264 min read

Building FeaturedDrop: Feature Announcements That Don't Suck

Why I built FeaturedDrop, a lightweight library for in-app feature announcements and changelog drops.

Open SourceTypeScriptReactnpm
On this siteFebruary 28, 20266 min read

Why I Archive Repos Aggressively

The GitHub archive button is underrated. Archiving a dead repo is a gift to future-you, to every potential user who finds it, and to the repo itself. Here is the 60-second ritual I use.

GitHubOSSMaintenanceSolo Founder
On this siteFebruary 22, 20266 min read

The Case for Boring Stacks: Why I Keep Reaching for Next.js and SQLite

Every product I have shipped in the last two years runs on the same boring stack. That is not a failure of curiosity. That is the point.

StackProductivityNext.jsSQLite
On this siteFebruary 16, 20264 min read

Building Type-Safe APIs with Next.js and Zod

How I structure full-stack TypeScript APIs with runtime validation, type inference, and zero duplication between client and server.

TypeScriptNext.jsZodAPI Design
On this siteFebruary 16, 20262 min read

Rebuilding My Portfolio in 2026

Why I rebuilt my portfolio from scratch with Next.js 15, and lessons learned from shipping a modern developer portfolio.

Next.jsPortfolioWeb Development
On this siteJanuary 20, 20268 min read

AI in Production: Building AskVerdict from Zero to Launch

How I went from idea to shipping an AI-powered verdict engine: model selection, prompt engineering, hallucination handling, and the cost lessons that humbled me.

AIAskVerdictLLMProduction
On this siteNovember 3, 20253 min read

Microservices Migration: What Nobody Tells You

Real-world lessons from migrating a monolith to microservices: the wins, the pain points, and what I'd do differently.

MicroservicesArchitectureDevOpsSpring Boot
On this siteSeptember 15, 20256 min read

Scaling GLINCKER: Architecture Decisions That Shaped Our Platform

A case study in building a social platform from scratch: the stack choices, real-time trade-offs, moderation pipeline, and what I'd change if I started over.

ArchitectureGLINCKERSpring BootScaling
On this siteAugust 12, 20252 min read

My Open Source Journey: From Side Projects to 10+ npm Packages

How building open-source tools at GLINCKER taught me more about software engineering than any job ever could.

Open SourcenpmTypeScriptGLINCKER
On this siteMay 20, 20252 min read

Enterprise to Startup: Lessons from Building at Both Scales

What I learned switching between enterprise systems at Ameriprise and building a startup from scratch with GLINCKER.

ArchitectureStartupEnterpriseCareer
Contact