stack

what the automation, the English-to-Arabic publishing pipelines and the Arabic-first client sites are built with — and how far each one goes.

31 entries, 25 with something public behind them — the green links open it.

web development

TypeScript: React 19, and without a framework; coaching site clinic page crypto queue
Astro: prerendered pages + one Cloudflare Worker routedcmusclecommunity.com; coaching site
Vite: custom plugin renders the page at build time; clinic page
CSS: design tokenslogical propertiesno framework; coaching site clinic page
Arabic RTL: bidi isolationlogical propertiesbuilt Arabic-first, twice; coaching site clinic page
mobile-first UI: built at 390px, widened afterscroll-snap rails; coaching site clinic page
multi-step forms: one fieldset per questionworks with JavaScript off; coaching site
web fonts: self-hostedsubset- and weight-specificpreloaded above the fold; coaching site clinic page
static-first pages: no backendzero external requestsworks with JS off; clinic page
Open Graph: link cards that render in Telegram and WhatsApp; coaching site
Canvas API: Arabic shaped and drawn on the devicephotos re-encoded, EXIF gone; coaching site
PDF by hand: catalog, page tree, JPEG pages — written in the browser, no library; coaching site
Cloudflare Workers: static assets + one server routePages for this siteshipped, not a tutorial; coaching site this site
Elysia: routing and handlers; nothing public yet
Drizzle ORM: schema and queries; nothing public yet

structured output: the prompt returns a publishable object, not prosepublish-ready JSON; crypto queue
LLM pipelines: rewritededuphuman review queue; crypto queue
Claude Code: main build tool9k-line TypeScript project; coaching site crypto queue

Python: markdown, jinja2, pygments — this site; this site
Notion API: dedup storereview queue; nothing public yet
Blogger · WordPress: automated publishing, including without an API; crypto queue
Telegram Bot API: a Worker route that forwards one file and stores nothing; coaching site

security headers: hash-strict CSP from default-src 'none'HSTSno-referrer; coaching site
nothing stored: no databaseEXIF dropped on the deviceautofill off; coaching site clinic page
abuse control: honeypotfill-time checkper-IP budget — no CAPTCHA; coaching site
secrets: Worker secret storegitignored locallynever in a client bundle; coaching site

Arch Linux: daily driverKDE on Waylandnvidia-dkmsno dual-boot; nothing public yet
Windows · Mint · Ubuntu: comfortable across all three; nothing public yet
VirtualBox: alpinedebian minimalthrowaway environments; nothing public yet
shell & CLI: find, grep, strings, ssh, nc, openssl, cronthe whole of Bandit, levels 0 through 33; bandit
git: daily, on everything here; bandit this site