34 posts
StickyCalmBar 2.6: fourteen small macOS utilities in one menu bar panel
CalmBar is a macOS utility suite that lives in the menu bar. Version 2.6.1 covers fan and thermal control, a charge limit, per-app audio, screen recording, AI translation, launch item management and developer cache cleanup — fourteen features, written in Swift 6, with no network traffic except the updater.
DeepSeek Open-Sourced an Agent Framework That Turns Everything Into a Plugin
What makes DeepSeek Harness special is that it turns the model adapter, the tools, and the session log — even the core loop — into plugins. This piece starts with what it is, then takes apart how it is assembled, its core loop, and its event log, to explain exactly what problem "everything is a plugin" solves.
Money Deducted, Inventory Not: How Distributed Transactions Clean Up the Mess
An operation that spans two services leaves inconsistency behind if any step in the middle fails. This post lays out three fallback approaches — TCC, the local message table, and MQ transactional messages — and where each of them springs a leak.
What MySQL Locks Actually Lock
Starting from two withdrawals that happen at the same time, this explains MySQL read and write locks, why row locks sit on indexes, how gap locks produce a deadlock, and how to read one with SHOW ENGINE INNODB STATUS.
A Hundred Messages In, How Does the Model Still Remember the First?
Starting from how a large model generates text, this explains what KV Cache is, why it is expensive, and how DeepSeek compressed that memory to one eighth, from V2's MLA to V4.1's CED.
ZCode's Silent Full Git Upload - The Official Response, and My Questions
ZCode has responded to the silent upload of entire Git histories, and I raise my questions point by point; ferstar's original piece follows, reconstructing from a 313MB encrypted bundle stuck in pending how ZCode silently packages and uploads your whole workspace (complete .git history included), plus a one-command defense using a file system immutable lock.
Claude Code and ZCode Both Leaked Security Problems, So I Read Through Open Source opencode's Source Code
Recently, Claude Code and ZCode have both been hit by security problems one after another. These tools need to read your code and run your commands, so when something goes wrong the cost is high—and with closed-source products, you basically can't see what they actually do. Open source agent assistants are a bit more reassuring, because at least you can read the source. Today we'll look at how opencode edits code for you.
Agent, Harness, LLM: Which Layer Do These Products Actually Live On?
Breaking the LLM, Agent, Harness, and Agent Product into four layers, then comparing the common agent products on the market to make clear which layer each one stands on.
Quick CI/CD Deployment for Solo Developers: GitHub Actions + Alibaba Cloud ACR + Servers Pulling Images Automatically
The most carefree deployment pipeline for a personal project: Actions builds the image and pushes it to Alibaba Cloud ACR, and watchtower on the server watches :latest and pulls updates automatically. Includes the complete workflow, the compose config, and how to handle dependency version mismatches, ACR rejecting provenance manifests, and multi-arch images.
I Don't Want to Play the PT Game, I Just Want to Watch a Show
Last year I sold my Synology and switched to a Mac mini as the home server, with two 2TB drives attached. The night I got Jellyfin set up again, I remembered a tool I used to run on the Synology and went looking to bring it back — it had already stopped being maintained.
A Guide to Running Custom Scripts Before macOS Apps Launch
On macOS, many developers and power users want to run some pre-launch scripts (such as clearing caches, switching network proxies, syncing configs, or resetting the environment) before starting an app like Navicat, Docker, or an IDE. This document records in detail the complete approach to **running custom scripts automatically before launch** on macOS, along with the core principles and a guide to avoiding permission and code-signing pitfalls.
Skipping VPN TUN for Antigravity IDE on Windows with ProxyBridge Per-Process Proxying
When using Antigravity IDE on Windows, you don't need to enable VPN TUN mode. ProxyBridge can proxy a specific process instead. Just configure a SOCKS5 proxy and proxy Antigravity.exe and language_server.exe, and AI chat, Google OAuth, and Code Assist will connect normally without affecting other apps on the system.
%20%E8%AE%BE%E5%A4%87%E4%B8%8A%EF%BC%8C%E9%80%9A%E8%BF%87%20Sikarugir%20(Wine)%20%E5%AE%8C%E7%BE%8E%E8%BF%90%E8%A1%8C%20Windows%20%E7%89%88%20Steam/3c199f0b-e757-45b5-8f38-5ded40b1fbff.webp)
Free and Flawless! Run Genuine Steam Games Smoothly on M-Series Macs with Sikarugir
This guide is a complete set of ultimate tuning and pitfall-avoidance tips for running the Windows version of Steam and games perfectly on Mac Apple Silicon (M-series chips) via Sikarugir (Wine).
🔌 Connecting OpenClaw Browser Relay over the LAN
How to solve the problem of not being able to connect directly to Browser Relay when OpenClaw is deployed in a LAN environment and needs to reuse the local Chrome cookies and user identity information.
Set Up a WireGuard VPN with wg-easy in Five Minutes and Reach Your Home LAN from Anywhere
Want to reach your home NAS, printer, or router from anywhere? WireGuard is the most popular VPN protocol today, and wg-easy makes deployment easier than ever. This article walks you through setting up a WireGuard VPN with Docker so you can securely reach your home LAN over the public internet.
Emergency Guide to OpenClaw “Going Offline” After an Update — Two “Workaround” Solutions for LAN Access
OpenClaw recently updated its security protocol, mandating a more secure access method and directly disabling traditional direct HTTP LAN connections. This has little impact on devices with a local browser, but for NAS systems like Synology and FnOS that run server-side and are mainly managed through a web console, it is practically a "dimensional strike": since you cannot open a browser from inside the NAS to visit http://localhost, and external LAN devices are blocked by the security protocol, the control end is left disconnected.
OpenClaw Containerized Deployment Guide
This guide will help you quickly set up an OpenClaw environment via Docker, including the main program, the CLI management tool, and a headless browser.
SpaceShift — A Chrome Profile Management Powerhouse Built on Tauri + Vue 3
SpaceShift leverages Chrome's underlying `--user-data-dir` parameter to ensure each profile's cookies, cache, history, bookmarks, and extensions are completely independent. No more worrying about mixing up accounts or polluting your environment.
Say Goodbye to Splash Ads: A Deep Dive into GKD, a High-Star Open-Source GitHub Project
In the Android ecosystem, "Li Tiaotiao" was once synonymous with skipping app splash ads. After it stopped being updated for legal reasons, many users were left with "ad anxiety." But the open-source community is powerful, and GKD (short for "Gao Kuai Dian") burst onto the scene. It not only perfectly took over the baton of automatic ad skipping, but also, with its powerful custom rules and subscription mechanism, became the most hardcore and powerful automation tool on Android today.
Telegram Login Shows "SMS Fee" and Wants Payment? Here's the Free Way Around It
Recently, many long-time Telegram users have run into a blocking screen they had never seen before when switching to a new phone or logging in on a new Android device — the "SMS Fee."
/8864b5a7-bb27-446c-9991-5ba497fb91f6.webp)
Mac Docker Performance Savior: How to Losslessly Migrate Local Mounts to Docker Volumes (Using OrbStack as an Example)
As a macOS developer, have you ever run into this: your Docker container is clearly allocated only 2GB of memory, yet in macOS Activity Monitor the Docker background process (such as `OrbStack Helper` or `com.docker.hyperkit`) is using 6GB or even more memory?
/50266ff9-67b1-4e58-bae0-a59af5ee925b.webp)
🚀 Mac M4 Local AI Background Removal Service Deployment Guide (BiRefNet)
Goal: Deploy the BiRefNet SOTA background-removal model on macOS Hardware requirements: Apple Silicon Mac (M1/M2/M3/M4) Final result: a Web UI (port 8860) + API endpoint, using the NPU/GPU for lightning-fast matting.
🚀 Caddy Gateway: The Ultimate Answer for a Hybrid-Cloud Homelab
After several iterations, I built a hybrid network architecture based on Mac Mini (OrbStack) + VPS (FRP) + Cloudflare. With Caddy Gateway as the unified entry point, it achieves intelligent traffic tiering and efficient management.
🚀 Hands-On Guide: Building a High-Speed Tunnel with VPS + Frp + Docker
This tutorial aims to solve the following pain points: 1. Home broadband has no public IP, or ports 80/443 are blocked, so you cannot host a site directly. 2. Accessing home services in China from overseas is slow, and Cloudflare's free plan performs poorly inside China. 3. No ICP filing is required — use a VPS with a high-performance China-bound route for low-latency access.
Say Goodbye to Subscriptions! I Run 20+ Docker Services on One Mini PC, Covering Media, Productivity, and Security
I picked up a home mini PC and tinkered with more than 20 Docker services. From organizing movie poster walls to processing PDFs locally, this little machine that runs 24/7 has completely changed my habits. Sharing my personal container list in the hope it gives your HomeLab some inspiration.
📱 Play TikTok on Android Without Root or Removing the SIM Card: A Practical Guide
When you access TikTok from an Android phone in mainland China, you usually run into a "black screen" or "content won't load" problem. This is because TikTok checks the phone's SIM carrier code (MCC), and once it identifies a Chinese carrier (code 460), it blocks the content. This tutorial shows you how to use Shizuku together with the Nrfr tool to spoof the carrier information and fully unlock TikTok without Root and without removing the SIM card.
🚀 Fixing the -352 Verification Failure When Calling Bilibili's API
When writing crawlers or third-party apps that call Bilibili APIs (such as fetching the trending video list), you often hit error code -352.
Nginx SPA Refresh 404 on Static Routes and How to Fix It
When deploying single-page applications (SPA) built with Vue, React, or Angular, you usually run into this problem: the home page loads fine and in-app navigation works too. But if you refresh the browser on a sub-route, or paste that link straight into the address bar, Nginx returns 404 Not Found.
Qinglong Panel Automatic Check-in
Deploy the Qinglong panel with Docker to automate check-ins
Mac Displays "App Is Damaged" When Installing Software
🛠️ The ultimate guide to fixing the macOS "App Is Damaged" or "Cannot Be Opened" error when installing software
🚀 Mac in Practice: Exposing an Android Emulator's ADB Port to the LAN
When doing Android remote debugging or device-farm development, we often need other computers on the LAN (or a CI/CD server) to connect to an Android emulator running on a Mac.
🛠️ The Right Way to Change the Default SSH Port (22) on macOS
On macOS, we sometimes need to change SSH's default port (22). Common reasons include: Port conflicts: for example, tools like OrbStack or GitLab Runner occupy the local port 22. Security: to avoid being scanned on the public internet, you may want a non-standard port (like 2222).
How to Get Free v2ray Nodes
Using the FOFA cyberspace mapping engine together with Excel batch processing to quickly generate and filter hundreds or thousands of usable nodes.
Setting Up Virtual Swap Memory
I bought a 2-core 4GB server on Alibaba Cloud to set up a Don't Starve game server, found the memory was insufficient, and solved it with swap memory.
No articles yet
All loaded