2026 on Ricky

Articles

Wed, 15 Apr 2026 09:22:42 +0800

SingleFlight
macOS 奇怪的安全扫码机制
Agentic Design Patterns
你不知道的 Claude Code：架构、治理与工程实践
你不知道的 Agent：原理、架构与工程实践
rtk: CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies
difftastic: a structural diff that understands syntax
I Ditched Elasticsearch for Meilisearch. Here’s What Nobody Tells You.
策展島嶼的深度敘事: https://github.com/frank890417/taiwan-md
Linux 中网络包的一生
Gitingest: Turn any Git repository into a prompt-friendly text ingest for LLMs.
7 More Common Mistakes in Architecture Diagrams
Use Cases
Superpowers: Superpowers is a complete software development workflow for your coding agents, built on top of a set of composable “skills” and some initial instructions that make sure your agent uses them.
everything-claude-code: The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
Agency Agents: A complete AI agency at your fingertips - From frontend wizards to Reddit community ninjas, from whimsy injectors to reality checkers. Each agent is a specialized expert with personality, processes, and proven deliverables.
MiroFish: A Simple and Universal Swarm Intelligence Engine, Predicting Anything.
Lightpanda Browser: the headless browser designed for AI and automation
Anatomy of the .claude/ Folder
Cocoa-Way: Native macOS Wayland Compositor written in Rust using Smithay. Experience seamless Linux app streaming on macOS without XQuartz.
Pretext: Fast, accurate & comprehensive text measurement & layout
Ghostmoon.app: A Swiss Army Knife for your macOS menu bar
CodingFont: A game to help you pick a coding font
The Git Commands I Run Before Reading Any Code
Winhance: Application designed to optimize, customize and enhance your Windows experience.
Native Instant Space Switching on MacOS
FluidCAD: Write CAD models in JavaScript. See the result in real time.
Awesome DESIGN.md: Copy a DESIGN.md into your project, tell your AI agent “build me a page that looks like this” and get pixel-perfect UI that actually matches.
graphify: AI coding assistant skill (Claude Code, Codex, OpenCode, Cursor, Gemini CLI, GitHub Copilot CLI, OpenClaw, Factory Droid, Trae, Google Antigravity). Turn any folder of code, docs, papers, images, or videos into a queryable knowledge graph

SingleFlight

package analyzer

import (
 "context"
 "sync"

 "golang.org/x/sync/singleflight"
 "github.com/nathan/stock_bot/internal/storage"
)

type AnalysisService struct {
 genai *GenAIClient
 d1Client *storage.D1Client
 stockCache map[string]*StockAnalysisResult
 mu sync.RWMutex
 sf singleflight.Group
}

func (s *AnalysisService) analyzeStock(ctx context.Context, code, name string) (*StockAnalysisResult, error) {
 // 1. 第一層防護：檢查記憶體快取 (L1 Cache)
 s.mu.RLock()
 if result, ok := s.stockCache[code]; ok {
 s.mu.RUnlock()
 return result, nil
 }
 s.mu.RUnlock()

 // 2. 第二層防護：Singleflight (請求合併)
 key := "stock:" + code
 v, err, _ := s.sf.Do(key, func() (interface{}, error) {
 // 3. 執行昂貴的邏輯 (DB + Gemini API)
 result, err := s.doAnalyzeStock(ctx, code, name)
 if err != nil {
 return nil, err
 }

 // 4. 寫入快取 (務必在 singleflight 內部完成，防止下一波瞬間擊穿)
 s.mu.Lock()
 s.stockCache[code] = result
 s.mu.Unlock()

 return result, nil
 })

 if err != nil {
 return nil, err
 }
 return v.(*StockAnalysisResult), nil
}
func (s *AnalysisService) doAnalyzeStock(ctx context.Context, code, name string) (*StockAnalysisResult, error) {
 // 建立一個子 Context 用於內部的多個非同步任務
 g, ctx := errgroup.WithContext(ctx)

 var dbData string
 var aiResult string

 // 任務 1：查資料庫
 g.Go(func() error {
 // 隨時檢查 Context 是否已取消
 select {
 case <-ctx.Done():
 return ctx.Err()
 default:
 // 模擬資料庫查詢
 dbData = "Historical Data"
 return nil
 }
 })

 // 任務 2：呼叫 Gemini API
 g.Go(func() error {
 // 將 ctx 傳入 API 客戶端，讓它能跟隨整體的超時控制
 res, err := s.genai.Generate(ctx, "Analyze this: "+code)
 if err != nil {
 return err
 }
 aiResult = res
 return nil
 })

 // 等待所有任務完成或其中一個出錯
 if err := g.Wait(); err != nil {
 return nil, err
 }

 return &StockAnalysisResult{Data: dbData, Analysis: aiResult}, nil
}
func (s *AnalysisService) analyzeStockWithMetrics(ctx context.Context, code string) (*StockAnalysisResult, error) {
 key := "stock:" + code
 v, err, shared := s.sf.Do(key, func() (interface{}, error) {
 return s.doAnalyzeStock(ctx, code, "Name")
 })

 // 紀錄監控指標：分辨是「原始呼叫」還是「共享結果」
 status := "original"
 if shared {
 status = "shared"
 }

 s.sfCounter.Add(ctx, 1, metric.WithAttributes(
 attribute.String("stock_code", code),
 attribute.String("type", status),
 ))

 if err != nil {
 return nil, err
 }
 return v.(*StockAnalysisResult), nil
}

macOS 奇怪的安全扫码机制

# 查看最近的 syspolicyd 扫描记录
log show --predicate 'subsystem == "com.apple.syspolicy.exec"' --last 5m --style compact | grep performScan

System Settings → Privacy & Security → Full Disk Access，给 VS Code 完全磁盘访问权限有效

Tools

Sun, 15 Mar 2026 17:52:24 +0800

tirith: Tirith guards the gate and intercepts suspicious URLs, ANSI injection, and pipe-to-shell attacks before they execute.
subtrace: Inspect HTTP requests in any server with just a single command.
prek: ⚡ Better pre-commit, re-engineered in Rust
sandbox-exec: macOS’s Little-Known Command-Line Sandboxing Tool
babyshark: Flows-first PCAP TUI (case files, gorgeous UX).
llmfit: A terminal tool that right-sizes LLM models to your system’s RAM, CPU, and GPU. Detects your hardware, scores each model across quality, speed, fit, and context dimensions, and tells you which ones will actually run well on your machine.

sandbox-exec(Deprecated)

sandbox-exec -f profile.sb command_to_run

Articles

Fri, 13 Mar 2026 18:30:42 +0800

It’s 2026, Just Use Postgres

The “Use the Right Tool” Trap

You’ve heard the advice: “Use the right tool for the right job.”

Sounds wise. So you end up with:

Elasticsearch for search
Pinecone for vectors
Redis for caching
MongoDB for documents
Kafka for queues
InfluxDB for time-series
PostgreSQL for… the stuff that’s left

Here’s what most people don’t realize: Postgres extensions use the same or better algorithms as specialized databases (in many cases).

Selectively Disabling HTTP/1.0 and HTTP/1.1

Tue, 03 Feb 2026 09:41:12 +0800

Selectively Disabling HTTP/1.0 and HTTP/1.1

http {

 ...

 # Check for text-based browsers
 map $http_user_agent $is_text_browser {
 default 0;

 # Text-Based Browsers (not exhaustive)
 "~*^w3m" 1;
 "~*^Links" 1;
 "~*^ELinks" 1;
 "~*^lynx" 1;

 # Bots (not exhaustive)
 "~*Googlebot" 1;
 "~*bingbot" 1;
 "~*Yahoo! Slurp" 1;
 "~*DuckDuckBot" 1;
 "~*YandexBot" 1;
 "~*Kagibot" 1;
 }

 # Check if request is HTTP/1.X
 map $server_protocol $is_http1 {
 default 0;
 "HTTP/1.0" 1;
 "HTTP/1.1" 1;
 }

 # If Request is not text-based browser,
 # and is HTTP/1.X, set the http1_and_unknown variable
 # to 1, which is equivalent to "true"
 map "$is_http1:$is_text_browser" $http1_and_unknown {
 default 0;
 "1:0" 1;
 }

 ...

}

Go Tool Trace

Tue, 27 Jan 2026 09:54:42 +0800

Trace is an “event timeline”, not “sampling statistics”

go tool trace: used to inspect runtime traces. Its essence is a time-ordered event stream, including:
- goroutine lifecycle/states: create / runnable / running / waiting / syscall
- scheduler (G/M/P) related events, scheduling latency
- blocking time distribution (net / sync / syscall)
- GC events, STW, heap changes (visible in the trace viewer)
Use pprof to find hot spots: who burns CPU, who allocates a lot
Use trace to find latency causes: why it’s stuck (scheduling? locks? network? syscalls? GC?)

Quick intuition:

I Replaced Redis with PostgreSQL (And It's Faster)

Mon, 19 Jan 2026 15:45:23 +0800

I Replaced Redis with PostgreSQL (And It’s Faster)

Before the change, Redis handled three things:

Caching (70% of usage)
Pub/Sub (20% of usage)
Background Job Queue (10% of usage)

The pain points:

Two databases to backup
Redis uses RAM (expensive at scale)
Redis persistence is… complicated
Network hop between Postgres and Redis

PostgreSQL Feature

1: Caching with UNLOGGED Tables

Redis

await redis.set("session:abc123", JSON.stringify(sessionData), "EX", 3600);

PostgreSQL

CREATE UNLOGGED TABLE cache (
 key TEXT PRIMARY KEY,
 value JSONB NOT NULL,
 expires_at TIMESTAMPTZ NOT NULL
);

CREATE INDEX idx_cache_expires ON cache(expires_at);

Insert

Taiwanese Minnan Input Method App Launched: Mobile Devices Can Now Type Taiwanese

Thu, 15 Jan 2026 21:10:20 +0800

The “Taiwanese Minnan Input Method” supports both phonetic input and voice input, allowing users to convert speech into text.

Replace Watchtower with WUD: Build a Controlled Docker Auto-Update Plan

Sun, 11 Jan 2026 15:22:11 +0800

Replace Watchtower with WUD: Build a Controlled Docker Auto-Update Plan

WUD (What’s Up Docker)

services:
 wud:
 image: getwud/wud:latest
 container_name: wud
 restart: unless-stopped
 ports:
 - "3000:3000"
 volumes:
 - /var/run/docker.sock:/var/run/docker.sock
 - ./store:/store
 environment:
 - TZ=Asia/Shanghai

 # Local Docker watcher
 - WUD_WATCHER_LOCAL_SOCKET=/var/run/docker.sock

 # Key: do not watch any containers by default
 - WUD_WATCHER_LOCAL_WATCHBYDEFAULT=false

 # Scan every 12 hours
 - WUD_WATCHER_LOCAL_CRON=0 */12 * * *

 # Auto update + prune old images after update
 - WUD_TRIGGER_DOCKER_AUTO_PRUNE=true # Equivalent to `watchtower --cleanup`

Monitor only (no auto update)

labels:
 - "wud.watch=true"

Appears in the WUD UI
Shows update hints
Does not auto-restart

Monitor + auto update (Watchtower equivalent)

labels:
 - "wud.watch=true"
 - "wud.trigger.include=docker.auto"

What Happened To WebAssembly

Sun, 11 Jan 2026 15:22:11 +0800

How Terminals Work

Fri, 09 Jan 2026 16:11:33 +0800

How Terminals Work

Python Numbers Every Programmer Should Know

Sun, 04 Jan 2026 07:06:28 +0800

Python Numbers Every Programmer Should Know