Ma Hui's personal site: writing and indie work.https://mahui.me/https://mahui.me/en/blog/lynsi-certificate-in-qr/https://mahui.me/en/blog/lynsi-certificate-in-qr/Lynsi's phone and Mac talk over TLS 1.3, but the certificate chain simply doesn't exist in this setting. The fix: put the certificate itself into the pairing QR code, and have the phone trust exactly that one from then on. Three decisions — P-256 over RSA, generating the certificate in-process instead of shelling out to openssl (and what happened in the sandbox when we didn't), and why the QR code is safe to photograph.Sun, 23 Aug 2026 00:00:00 GMThttps://mahui.me/en/blog/lynsi-handshake-gate/https://mahui.me/en/blog/lynsi-handshake-gate/TLS gives you a private channel; it doesn't tell you who is on the other end of it. Lynsi's Mac receiver used to process every frame the moment TCP came up — an unpaired peer could write its clipboard. This is the design of the gate that fixed it: unauthenticated connections may send exactly one kind of frame, get five seconds, and receive nothing back — plus the two bugs in my own verification script, each of which made the test results the exact opposite of the truth.Sun, 23 Aug 2026 00:00:00 GMThttps://mahui.me/en/blog/lynsi-harmony-acl-rejection/https://mahui.me/en/blog/lynsi-harmony-acl-rejection/Lynsi applied for two restricted HarmonyOS permissions. READ_PASTEBOARD passed; READ_IMAGEVIDEO came back rejected: 'scenario does not meet the permission's usage requirements.' On reflection, the rejection was correct — the feature is backup, but every line of copy said 'browse.' This is the full story of the reapplication: spending 256 characters in the order the reviewer judges, answering the PhotoViewPicker suggestion head-on, and the rule above all others — every promise in the application must actually be true in the code.Sun, 23 Aug 2026 00:00:00 GMThttps://mahui.me/en/blog/lynsi-pricing-against-free/https://mahui.me/en/blog/lynsi-pricing-against-free/Lynsi's direct competitor is Huawei's own SuperHub: free, and first-party. This is how the paid boundary was drawn — everything the official app does for free stays free, and walls stand only on capabilities it doesn't have. Why mirroring and video streaming share one 10-minute daily pool, why the allowance is per-day rather than per-session, how gallery saving got reclassified from free to Pro, and three schemes that were rejected — each of which nearly shipped.Sun, 23 Aug 2026 00:00:00 GMThttps://mahui.me/en/blog/flick-catalyst-section-header-hit-testing/https://mahui.me/en/blog/flick-catalyst-section-header-hit-testing/Flick's range picker had a sort control that worked fine on iPhone and was completely dead on Mac. It rendered correctly, compiled without warnings, and shared one code path across both platforms. The only difference was that clicks never reached it. The cause: it lived in a List Section header.Thu, 06 Aug 2026 00:00:00 GMThttps://mahui.me/en/blog/shellby-mosh-clean-room/https://mahui.me/en/blog/shellby-mosh-clean-room/Official mosh is GPLv3; Shellby is a closed-source commercial app, so reading or copying it was off the table. I re-derived the SSP protocol from the paper plus my own packet captures: every field number came from measurement, guessing one wrong crashes mosh-server outright, and the same protocol had to be byte-identical across Swift and Dart.Thu, 06 Aug 2026 00:00:00 GMThttps://mahui.me/en/blog/shellby-mosh-rtt-misdiagnosis/https://mahui.me/en/blog/shellby-mosh-rtt-misdiagnosis/Shellby's from-scratch mosh-compatible transport shipped and was unusably laggy. I had just made a deliberate throughput-sacrificing tradeoff — stop-and-wait state sync — so it was the obvious suspect. But one metric didn't fit, and it exonerated the architecture. The real culprit was a mis-filled timestamp that made the server throttle itself to one packet per 100ms.Thu, 06 Aug 2026 00:00:00 GMThttps://mahui.me/en/blog/keydo-deterministic-timing/https://mahui.me/en/blog/keydo-deterministic-timing/A KeyDo postmortem: practice time was Date.now()'s end - start, so AFK, tab-switching, and wall-clock rollback all counted. Changed to accumulate 'accepted gaps between keystrokes,' dropping any gap over 60 seconds whole, layered with IME guards, a monotonic clock, and idempotent settlement so the number is both accurate and unfarmable.Fri, 17 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/keydo-offline-sync/https://mahui.me/en/blog/keydo-offline-sync/A KeyDo postmortem: score reporting was fire-and-forget, lost when offline or on failure; the public API had no size limit, origin check, or rate limiting. This time: PWA offline, a dual-side-idempotent score-sync outbox, and a Worker request-boundary pipeline where 'the order is the layers of protection.'Fri, 17 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/shellby-derived-sync-transcript/https://mahui.me/en/blog/shellby-derived-sync-transcript/A Shellby postmortem: syncing AI conversation history between Apple and Flutter stacks. A conversation has both raw messages and a step transcript, but only the raw messages should sync — the steps are derived, rebuilt on each stack from the messages. Plus a 'HarmonyOS receives nothing' version-field pit.Fri, 17 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/shellby-snippet-library/https://mahui.me/en/blog/shellby-snippet-library/A Shellby postmortem: a command tool bar at the top of the terminal, tap and it sends. After shipping, that interaction was judged unsafe and refactored into a 'view before executing' snippet library. Plus the pits of building this across six platforms — mobile terminals have no menu-injection hook, macOS's self-drawn context menu gets grayed out by the system, and you can't blindly inject into a full-screen program.Fri, 17 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/keydo-cas-cloud-save/https://mahui.me/en/blog/keydo-cas-cloud-save/A KeyDo postmortem: anonymous, no login, multiple devices practicing offline — how do you keep the save eventually consistent without lost updates? The answer is splitting responsibility: the Worker does only versioned atomic access (CAS), and the frontend does a deterministic merge that is commutative, associative, and idempotent.Thu, 16 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/keydo-city-rankings/https://mahui.me/en/blog/keydo-city-rankings/A KeyDo postmortem: adding city-level region labels to an anonymous leaderboard, on the condition of collecting no precise location, no third-party IP geolocation, and never storing a byte of IP in the business DB. Read only Cloudflare's edge-injected country/province/city fields, degrade level by level, gate the format with a DB CHECK constraint, plus let only a complete run enter the ranking and keep ranks stable via three-segment COUNT.Thu, 16 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/shellby-command-parsing-security/https://mahui.me/en/blog/shellby-command-parsing-security/A Shellby postmortem: the AI Agent grades commands read-only / mutating / destructive before executing, and the verdict rests entirely on parsing the real command name from the line. And sudo options, su elevation, env-assignment prefixes, a pipe inside quotes — each can fool a naive parser. Why the parser itself is the security boundary, and why the right default when it can't parse is 'deny'.Thu, 16 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/shellby-cross-stack-sync/https://mahui.me/en/blog/shellby-cross-stack-sync/A Shellby postmortem: a six-platform SSH client needs cross-ecosystem sync (Apple is SwiftData, Flutter is drift), over the user's own third-party storage, no server, end-to-end encrypted. The hard part is making 'the same data consistent after sync on both stacks' — and mid-implementation, one zlib detail overturned the 'byte-identical ciphertext' contract.Thu, 16 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/shellby-qr-pairing/https://mahui.me/en/blog/shellby-qr-pairing/A Shellby postmortem: a new device joining cross-stack sync has to type a pile of sensitive config. Encode it into a passphrase-encrypted pairing code, render it as a QR, scan once. The key design is that the passphrase isn't in the code — it's only the decryption key — so the code is useless when photographed; plus HarmonyOS white-screen QR and desktop pick-image decode.Thu, 16 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/shellby-s3-compatible-oss/https://mahui.me/en/blog/shellby-s3-compatible-oss/A Shellby postmortem: sync supports bring-your-own S3 storage, and one user filling in Alibaba OSS made sync fail. Tracing a 403 with an empty body led to four pits — addressing, conditional writes, connection resets — each a facet of 'S3-compatible ≠ S3'.Thu, 16 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/shellby-delete-resurrection/https://mahui.me/en/blog/shellby-delete-resurrection/A Shellby postmortem: adding per-conversation deletion to AI chat history, and it comes right back after deletion. The culprit is the session's own auto-persistence callback — abort triggers one last state change that upserts the deleted record back, then CloudKit resurrects it across every device. The fix is one line, but its position is everything.Mon, 13 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/pier-safe-restart-recovery/https://mahui.me/en/blog/pier-safe-restart-recovery/A Pier 3.0 postmortem: after stopping a dev server, restarting it looks simple and is deeply trapped. Why the button is 'Try restart' and not 'Undo,' why restart must never go through a shell, and a recovery design that tolerates both its own crash and a corrupt ledger.Sun, 12 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/pier-fail-closed-classification/https://mahui.me/en/blog/pier-fail-closed-classification/A Pier 3.0 postmortem: one-click cleanup only includes 'green' items, and for a process to go green it has to clear a whole row of hard guards at once. On designing deterministic rules, why green defaults to 'not qualified,' and a list of 'safety invariants' that pin these rules as release gates.Sat, 11 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/pier-safe-stop-toctou/https://mahui.me/en/blog/pier-safe-stop-toctou/A Pier 3.0 postmortem: the green verdict uses a snapshot from the moment of diagnosis, but between the user clicking cleanup and the signal firing, the process can grow new connections and new children. On shrinking that check-to-use window to the minimum with continuous checkpoints, a 2-second evidence deadline, and re-verifying the kernel start time right before the signal.Sat, 11 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/pier-cleanup-safety-first/https://mahui.me/en/blog/pier-cleanup-safety-first/A Pier 3.0 postmortem: repositioning from 'developer resource monitor' to 'local cleanup assistant for after AI coding.' The basic unit shifts from port/process to project/session, and the core question becomes 'what did my AI tools leave running, and what can I safely stop.' And why, for a cleanup tool aimed at non-expert developers, safety isn't a selling point — it's the product itself.Fri, 10 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/astro-bilingual-seo-head/https://mahui.me/en/blog/astro-bilingual-seo-head/Adding a full SEO head to a bilingual Astro site. The interesting parts: hreflang group correctness (self-reference + reciprocal + x-default — pointing only at the other language is wrong), not emitting hreflang for posts with no translation, and which JSON-LD an article page versus the home page should emit.Thu, 09 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/og-image-headless-chrome/https://mahui.me/en/blog/og-image-headless-chrome/You need a 1200×630 social share image. No design tool, no third-party OG service, no dynamic generation — write an HTML file with the site's own CSS variables and screenshot it with headless Chrome. And why a static default first, deferring per-article generation until it's actually needed.Thu, 09 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/pier-device-seats/https://mahui.me/en/blog/pier-device-seats/A Pier postmortem: a perpetual license caps activation at 5 devices, but if 'deactivate' only clears local state, the server-side seat stays occupied forever, and after a few machine changes users hit the wall and email you to free them by hand. The fix: deactivation must release the seat server-side, and on failure would rather not release than quietly leak.Thu, 09 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/subdomain-seo-architecture/https://mahui.me/en/blog/subdomain-seo-architecture/A main site plus six product subdomains, and the sitemap only covers the main site. Why one sitemap can't cover the constellation, whether to use a Domain property or verify each origin, and a Cloudflare Pages .html trap that turns every sitemap entry into a redirect.Thu, 09 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/pier-notarization-blind-spot/https://mahui.me/en/blog/pier-notarization-blind-spot/A Pier 2.0.0 postmortem: one restricted entitlement, added to remove a keychain prompt, sailed through notarization — and got the app SIGKILLed on every user's Mac. Rolled back in 2.0.1 the same night.Wed, 08 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/pier-pay-what-you-want/https://mahui.me/en/blog/pier-pay-what-you-want/The free promo is over. Pier is now pay what you want: from $0.99, suggested $6.99, one-time purchase. On where to draw the paywall line, why PWYW, and what existing users get.Wed, 08 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/shellby-terminal-encoding/https://mahui.me/en/blog/shellby-terminal-encoding/A Shellby postmortem: one bug garbles every keystroke after pasting into vim, rooted in concurrent writes to the SSH channel losing their order; the other turns Chinese into escape gibberish on remote macOS, rooted in the sshd session having no LANG. Both go wrong on the path bytes travel to the remote — but one is order, the other is environment.Wed, 08 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/keydo-launch/https://mahui.me/en/blog/keydo-launch/A retro arcade-style web typing game: four training modes, martial-arts belt ranks, a global leaderboard, purely frontend and playable offline. How it's built, and the trade-offs behind a pile of technical choices.Tue, 07 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/llm-bridge-launch/https://mahui.me/en/blog/llm-bridge-launch/Putting Claude Code, Codex, and Antigravity behind one OpenAI-compatible API. What it does — and what it deliberately doesn't.Mon, 06 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/open-council-launch/https://mahui.me/en/blog/open-council-launch/A local multi-model debate orchestrator: several AI models debate one question, peer-review each other, and reach a measured consensus for an answer more reliable than any single model. How it works, and where it fits.Mon, 06 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/keydo-leaderboard-anti-cheat/https://mahui.me/en/blog/keydo-leaderboard-anti-cheat/A KeyDo postmortem: WPM is computed in the browser, so how does a global leaderboard stop someone from just POSTing a 9999? Cap validation, one row per person per mode, best-score logic in SQL.Sun, 05 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/vibetrail-search-anchor/https://mahui.me/en/blog/vibetrail-search-anchor/Search anchors on physical lines, the timeline renders logical messages--and the fold operation dropped the mapping between the two.Sun, 05 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/vibetrail-resume-degrade/https://mahui.me/en/blog/vibetrail-resume-degrade/AppleScript crashes, TCC silent denials, a dead-click investigation — the permission reefs of macOS automation, and the path that was in plain sight all along.Sat, 04 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/hello-world/https://mahui.me/en/blog/hello-world/Tech choices, directory structure, and deployment, all in one post.Fri, 03 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/keydo-falling-words-loop/https://mahui.me/en/blog/keydo-falling-words-loop/A KeyDo postmortem: words fall from the sky, requestAnimationFrame advances the physics each frame. Calling setState every frame in React grinds to a halt — state goes in a ref, rendering is triggered by an empty tick.Fri, 03 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/shellby-ai-agent-safety/https://mahui.me/en/blog/shellby-ai-agent-safety/A Shellby postmortem: the hard part of an AI agent that runs commands isn't getting it to work — it's keeping it from wrecking things.Fri, 03 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/shellby-agent-context/https://mahui.me/en/blog/shellby-agent-context/A Shellby postmortem: an agent that autonomously runs commands resends its whole accumulated history every step, so tokens and time-to-first-token climb linearly with step count. Three fixes — Anthropic prompt caching breakpoints, monotonically-frozen history folding, and SSE streaming — orthogonal and stackable.Thu, 02 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/shellby-dual-track-sync/https://mahui.me/en/blog/shellby-dual-track-sync/A Shellby postmortem: syncing an SSH client across devices, the hardest constraint is that passwords and private keys must never reach the cloud in plaintext.Thu, 02 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/vibetrail-ripgrep/https://mahui.me/en/blog/vibetrail-ripgrep/No database, no index--just compile the grep engine straight into a Rust app.Thu, 02 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/keydo-web-audio-sfx/https://mahui.me/en/blog/keydo-web-audio-sfx/A KeyDo postmortem: hit, miss, kill, level-up, game-over — a full set of 8-bit sound effects, zero audio assets, all synthesized live by Web Audio oscillators.Wed, 01 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/shellby-server-monitoring/https://mahui.me/en/blog/shellby-server-monitoring/A Shellby postmortem: no collector agent, pulling CPU/memory/disk/load over plain SSH, packing five metric classes into one command.Wed, 01 Jul 2026 00:00:00 GMThttps://mahui.me/en/blog/shellby-port-forwarding/https://mahui.me/en/blog/shellby-port-forwarding/A Shellby postmortem: local forward, remote forward, dynamic SOCKS, multi-hop jump — four forms, one unified tunnel model, plus a NIO trap.Tue, 30 Jun 2026 00:00:00 GMThttps://mahui.me/en/blog/keydo-typing-engine/https://mahui.me/en/blog/keydo-typing-engine/A KeyDo postmortem: typing is a high-frequency keyboard event, and shoving it straight into React state gets you burned by StrictMode and async setState. Keep the truth in a ref, commit a snapshot to render.Sun, 28 Jun 2026 00:00:00 GMThttps://mahui.me/en/blog/shellby-liveness-token/https://mahui.me/en/blog/shellby-liveness-token/A Shellby postmortem: when an SSH connection silently hangs, 'the command returned' says nothing about whether the connection is still alive.Sun, 28 Jun 2026 00:00:00 GMThttps://mahui.me/en/blog/diskly-four-million-files/https://mahui.me/en/blog/diskly-four-million-files/75s to 2.2s, 6.46TB of phantom usage, one change saving 150MB, more threads running slower — every intuition has to survive the numbers.Sat, 27 Jun 2026 00:00:00 GMThttps://mahui.me/en/blog/shellby-cross-platform/https://mahui.me/en/blog/shellby-cross-platform/A Shellby postmortem: command broadcast, split view, ⌘W — one codebase serving the Mac's keyboard, the iPad's multitasking, the iPhone's one-handed use.Fri, 26 Jun 2026 00:00:00 GMThttps://mahui.me/en/blog/shellby-keychain-popups/https://mahui.me/en/blog/shellby-keychain-popups/A Shellby postmortem: the same password-storing code popped a permission dialog on every connect on macOS — switching keychains fixed it.Wed, 24 Jun 2026 00:00:00 GMThttps://mahui.me/en/blog/llm-bridge-reasoning-effort/https://mahui.me/en/blog/llm-bridge-reasoning-effort/An LLM-Bridge postmortem: OpenAI gives one unified reasoning_effort field, but the three backends accept depth in completely different ways — an SDK option, a config override, encoded in the model name.Tue, 23 Jun 2026 00:00:00 GMThttps://mahui.me/en/blog/mac-app-distribution/https://mahui.me/en/blog/mac-app-distribution/How Pier and Diskly ship independently: Developer ID, notarytool, Sparkle, and a Homebrew tap.Sat, 20 Jun 2026 00:00:00 GMThttps://mahui.me/en/blog/open-council-api-convergence/https://mahui.me/en/blog/open-council-api-convergence/An Open Council postmortem: from a wide access matrix of CLI / OAuth / subscription / middleware down to just anthropic + openai standard APIs. Why subtract, and how to subtract honestly.Thu, 18 Jun 2026 00:00:00 GMThttps://mahui.me/en/blog/pier-network-monitor-postmortem/https://mahui.me/en/blog/pier-network-monitor-postmortem/A Pier postmortem: block buffering, the CRLF grapheme, a spin-looping nettop, a private framework that crashes on sight — and how to do the math on deleting a feature.Sun, 14 Jun 2026 00:00:00 GMThttps://mahui.me/en/blog/flick-group-stability/https://mahui.me/en/blog/flick-group-stability/A Flick postmortem: analysis streams in results while the Groups screen has cards appearing, vanishing, and reappearing in a loop. The culprit was three stacked layers of nondeterminism plus a window anchor that drifts over time. The fix: make the same set of photos compute a bit-identical grouping on every rebuild.Fri, 12 Jun 2026 00:00:00 GMThttps://mahui.me/en/blog/pier-no-backend-license/https://mahui.me/en/blog/pier-no-backend-license/A Pier postmortem: one-time purchase, 5 devices, refund revocation — the whole licensing system is under 200 lines of client-side Swift with no server and no embedded secrets. The interesting parts: where state lives, and who to believe when validation fails.Fri, 12 Jun 2026 00:00:00 GMThttps://mahui.me/en/blog/shellby-two-ssh-backends/https://mahui.me/en/blog/shellby-two-ssh-backends/A Shellby postmortem: iOS has no system SSH library. Pure Swift or C — I walked both roads.Fri, 12 Jun 2026 00:00:00 GMThttps://mahui.me/en/blog/flick-cooperative-pool/https://mahui.me/en/blog/flick-cooperative-pool/A Flick postmortem: 4 "compute start", 0 "compute done" — the contract of cooperative scheduling, and three ways to break it.Wed, 10 Jun 2026 00:00:00 GMThttps://mahui.me/en/blog/pier-launchagent-badge/https://mahui.me/en/blog/pier-launchagent-badge/A Pier postmortem: LaunchAgents fail silently, always. Treat plist files as the source of truth, backfill state from launchctl, light a red dot on a nonzero exit code, refresh every 5 minutes — monitoring earns its keep precisely when you're not looking.Tue, 09 Jun 2026 00:00:00 GMThttps://mahui.me/en/blog/llm-bridge-subprocess-invariants/https://mahui.me/en/blog/llm-bridge-subprocess-invariants/An LLM-Bridge postmortem: a gateway's job is really 'safely shelling out someone else's CLI.' stdin, stderr, finally-kill — three invariants, and dropping one leaks processes or deadlocks.Mon, 08 Jun 2026 00:00:00 GMThttps://mahui.me/en/blog/pier-port-fingerprint/https://mahui.me/en/blog/pier-port-fingerprint/A Pier postmortem: the ports list was all node, python, com.docker.backend. Fingerprinting 40 dev services from full argv, pulling working directories via proc_pidinfo, and resolving container names through docker ps — three signals that answer what a port actually is.Sat, 06 Jun 2026 00:00:00 GMThttps://mahui.me/en/blog/on-device-photo-similarity/https://mahui.me/en/blog/on-device-photo-similarity/Analyzing the photo library entirely on device with Vision feature prints, Laplacian variance, and a SQLite cache.Fri, 05 Jun 2026 00:00:00 GMThttps://mahui.me/en/blog/yuwei-constraints-as-tripwires/https://mahui.me/en/blog/yuwei-constraints-as-tripwires/A Yuwei postmortem: 23514, 23P01, and a batch of ghost seats--constraints aren't just defenses, they're the most honest alarms.Thu, 28 May 2026 00:00:00 GMThttps://mahui.me/en/blog/open-council-presynthesis-compression/https://mahui.me/en/blog/open-council-presynthesis-compression/An Open Council postmortem: multi-model × multi-round debate produces text that blows past the chairman's context. Preserve the core, truncate the periphery, never touch code blocks — plus an honest 'ship determinism first, leave LLM summarization for v2' trade-off.Fri, 22 May 2026 00:00:00 GMThttps://mahui.me/en/blog/prevent-overselling/https://mahui.me/en/blog/prevent-overselling/Yuwei's inventory safety design: row locks, optimistic locking, and database constraints -- all three are essential.Sat, 16 May 2026 00:00:00 GMThttps://mahui.me/en/blog/llm-bridge-provider-adapters/https://mahui.me/en/blog/llm-bridge-provider-adapters/An LLM-Bridge postmortem: outward it's one tidy OpenAI format, inward it's a three-headed beast — SDK message stream, line-delimited JSON, plain text. Normalization all happens in the adapter layer.Mon, 11 May 2026 00:00:00 GMThttps://mahui.me/en/blog/open-council-routing-roles/https://mahui.me/en/blog/open-council-routing-roles/An Open Council postmortem: how to decide how many rounds a question needs, who to send in, and what role each model plays. Starting from a classic regex trap where `\b` killed every Chinese routing keyword.Thu, 30 Apr 2026 00:00:00 GMThttps://mahui.me/en/blog/llm-bridge-no-token-extraction/https://mahui.me/en/blog/llm-bridge-no-token-extraction/An LLM-Bridge postmortem: pulling OAuth tokens out of the CLI to hit the backend directly is the shortest path — and the first to die. Why it all fell back to official harnesses.Tue, 14 Apr 2026 00:00:00 GMThttps://mahui.me/en/blog/open-council-consensus/https://mahui.me/en/blog/open-council-consensus/An Open Council postmortem: several models score each other, and the scores become a 0-1 consensus. Half from score dispersion, half from ranking agreement — plus a bug that nearly made the debate never stop.Wed, 08 Apr 2026 00:00:00 GMT