Tags

Bolderdash
Technical

One API Client, Two Authentication Channels

The web uses an HTTP-only cookie, the CLI uses a bearer token. The server checks both in one middleware, and each shell injects its own way of producing credentials — so feature code never learns which platform it is on.


Next.js Is Just a Shell, Peer to Electron

The easiest mistake in a multi-client monorepo is treating the Next.js app as the product and everything else as a port. Demote it to a shell and the package boundaries fall out — especially the one the CLI forces on you.


Cross-Package Imports Are Type-Only, Runtime Goes Through ctx

import type compiles to nothing, so it creates no runtime dependency edge. That is how dozens of UI packages can know each other's types while never loading each other — the plugin boundary lives in one keyword.


Judge Your Judge Twice Before You Trust It

I used a large model as a judge to fact-check SFT data. Judging the same note twice gave zero errors on one run and a dozen on the next. A single verdict is a coin flip.


Prometheus Behind NAT: Scraping Without Open Ports

How a pull-based monitor reaches a machine with no public IP. The tunnel is a phone line, not a mailbox — and nothing exists until someone asks for it.


Load Leveling vs Load Balancing: The Fan-Out Pattern

Two queues, one event. Load balancing splits work across identical workers. Load leveling spreads work across time, so a slow consumer never blocks a fast one.


Speculative Decoding and MTP: Why Guessing Is Free

A forward pass over five tokens costs about the same as over one. That gap is the entire speedup, and MTP is how the model drafts guesses to fill it.


What special: true Actually Changes

It changes nothing when you tokenize. It changes everything when you detokenize, and only if skip_special_tokens is on. Measured against GLM 5.2's tokenizer.


After the Hexo Skill, a Plugin for Tone

My first Claude Code skill has 700+ downloads on ClawHub, which surprised me enough to write another. This one holds the voices I post in, and it will keep growing.


What Actually Gets Tokenized in SFT

The model never sees your messages list, only the rendered string. Once that clicks, add_generation_prompt, loss masks and the double-BOS bug all line up behind it.


Multi-level Account and User Design: One User, One Account

A three-level account and user model — legal entity, account, user. Why we rejected this design, then shipped it two months later when one rule changed.


Using the blog-hexo skill

Draft + publish workflow in one place