Day 7.
When you decide to build enterprise-grade developer tooling entirely on a $150 Android phone using Termux, you accept a certain level of chaos.
You battle the "Termux Poltergeist" (where the terminal buffer corrupts your source code). You wrestle with strict API gateways. You debug spawn ENOENT errors at 2 AM.
But then, you push through. And you ship.
Today, I am incredibly proud to announce that two core HYNAWEB packages are now live and publicly available on the NPM registry, built, tested, and published entirely from my mobile device.
📦 1. HYNA-Stage (npm install -g @hynaweb/stage)
A CLI that provisions isolated, ephemeral Firecracker microVMs for AI coding agents in exactly 5.1 seconds. By utilizing a "Warm Pool" architecture orchestrated via Supabase Edge Functions and the E2B SDK, we completely eliminated cold starts. No Dockerfiles, no YAML, no credit card required.
📦 2. KAVLR (npm install -g @hynaweb/kavlr)
A fail-closed, AI-powered terminal leash for autonomous agents. Instead of relying on fragile text-based regex guards, KAVLR intercepts execution and grades the semantic action using a rigorous 90-article Constitutional AI framework. If an agent attempts a destructive or exfiltration action, KAVLR blocks it at the shell level with a 0/100 score.
🧠 The Reality of Shipping
Publishing from a mobile environment is not for the faint of heart. But it forces a level of discipline, optimization, and lean architecture that is hard to learn on a $3,000 MacBook with unlimited resources.
Every byte matters. Every API call is scrutinized. Every line of code has to be resilient.
The bugs were brutal, but we gave them names, defeated them, and shipped the code.
Try them out and let me know what you think:
-
Deploy in 5.1s:
npm install -g @hynaweb/stage -
Secure your agent:
npm install -g @hynaweb/kavlr - Join the Jam: hackerstage
The noise doesn't matter. The code ships. Onward to Day 8. 🐯☁️🚀
Top comments (13)
Hot take: 90% of developers don't need Kubernetes or Docker. They just need a place to put an HTML file and get a URL. I built HYNA-Stage to spin up Firecracker MicroVMs in 5 seconds so you don't have to wait 10 minutes for a CI/CD pipeline just to test a button change. Do you think CI/CD has become too bloated for simple projects? @adamthedeveloper , @jsb-securedme
Read you loud and clear! I'm pretty swamped right now, but I'll drop my thoughts on this as soon as I can.
Good morning, Jean-Sébastien! ☀️
No rush at all. I know how swamped things get when you're architecting systems and running a company.
Whenever you have a breather, I would absolutely love to get your thoughts on this. More importantly, I’d love to get your eyes on the
VeriPlith-OSSPR whenever you're ready.There is zero pressure, but having a senior architect of your caliber validate the foundation we are building on a $150 phone means the world to me.
Focus on your sprint, and we will be right here ready to iterate when you are. 🐯☁️🛡️
Hey Harun, I appreciate the kind words. To be completely honest, it would be a lie to say I'm swamped because I'm running a company—SeCuReDmE is a startup and I'm a solo founder right now. The reality is much more personal: my daughter turns 14 in four days, and it will be the 4th year in a row that I miss it. I'm just not feeling particularly great these days and need some space.
Regarding the VeriPlith-OSS PR, let's move all of that over to GitHub. Whenever you're ready, I want you to treat me there like a complete stranger submitting code. Don't hold back or give me special treatment. I'll act like I don't know you either. It's the best way for you to get the real feel of what it's like to manage external contributors on your repo! I'll jump in there when my head is clear.
Jean-Sébastien,
Thank you for your honesty. I am so incredibly sorry to hear that you will be missing your daughter's 14th birthday. That is profoundly difficult, and I completely understand why you need space right now.
Please, take all the time you need. Family always comes first, full stop. The code, the PRs, and the startups can wait.
Regarding VeriPlith-OSS: I know you built it and submitted it to my repository based on my thesis, and I deeply respect your boundary. When you are ready, we will handle the PR on GitHub exactly as you suggested: strict, professional code review, no special treatment. I agree that learning to manage external contributors objectively is a vital skill, and I am ready for that challenge whenever you are.
There is absolutely zero pressure from my end. Focus on yourself and your family. The community and the code will be right here whenever your head is clear.
Wishing you and your daughter the very best. 🐯☁️
Thanks, Harun. Just to clarify my earlier message: while I am taking a step back from general communication and other ongoing projects, I am still fully available for VeriPlith-OSS. Feel free to ping me on GitHub anytime for issues or pull requests regarding it, and I'll make sure to answer the same day. Looking forward to working through the process with you.
Thanks, Harun. Just to clarify my earlier message: while I am taking a step back from general communication and other ongoing projects, I am still fully available for VeriPlith-OSS. Feel free to ping me on GitHub anytime we will practice issues or pull requests , and I'll make sure to answer the same day. Looking forward to working through the process with you.
Jean-Sébastien,
Thank you for the clarification. I completely understand and deeply respect your need to step back from general communication right now. Family always comes first.
I am thrilled to hear that you are still available for VeriPlith-OSS. I will respect this boundary completely: no casual pings, no off-topic messages.
When I am ready to review the PR or have a specific, high-level architectural question about the code, I will open an issue or leave a comment directly on the GitHub repository. I appreciate you committing to same-day responses for that focused work.
Thank you again for your generosity and for believing in the foundation we are building. I look forward to working through the PR process with you on GitHub when the time is right.
Wishing you and your family the very best. 🐯☁️🛡️
The hardest part about Day 7 was fixing the NPM package after Termux kept corrupting the file. Has anyone else run into terminal buffer issues with multi-line pastes? @effessdev , @adamthedeveloper , @forkcount , @akhourianmolkumar , @jsb-securedme
I'm 12 and I built KAVLR to block destructive commands, but I know there are holes. Can you bypass it? Run npm i -g @hynaweb/kavlr, try to run a malicious command (like cat .env), and let me know if you find a way through. I'll reply to every attempt! @adamthedeveloper , @jsb-securedme , @effessdev , @forkcount
ok i will run couple red team strike later on today if i have time
@akhourianmolkumar broooo chatt
@akhourianmolkumar what do you feel bro 🔥🤝