Skip to main content
codescarlett, home

Open source

Tools I'm giving back.

Leave it better than you found it applies to the ecosystem, too.

  • TweakTags logo

    TweakTags

    Live

    Self-hosted inline CMS for Next.js, React and plain HTML.

    Bolt a CMS onto a site you already have instead of rebuilding the site around one. Put a data-tweaktags-* attribute on any element, sign in, flip on edit mode and change text, rich text, images and video right on the live page. Content saves to your own database and every visitor sees the saved version, with no rebuild and no redeploy. Under the hood it's a framework-agnostic browser engine, pluggable database and auth adapters, and a security model built like a payments system: rotating refresh tokens, CSRF protection and server-enforced roles.

    Type
    Inline CMS / visual editor
    Runs on
    Next.js · React · plain HTML
    Databases
    Postgres · MySQL · MariaDB · SQLite
    Auth
    Built-in JWT or AWS Cognito
    Packages
    15 on npm (@tweaktags)
    License
    MIT
    • TypeScript
    • React
    • Next.js
    • Node.js
    • PostgreSQL
    • MySQL
    • SQLite
    • +3 more
    Docs
  • Frankie Stealth Record

    Open sourcing soon

    Private meeting recorder with speaker-labeled transcripts.

    • Python
    • Android
    • PowerShell
    • Bash
    • AWS S3
  • VM Tool (working title)

    Open sourcing soon

    Tooling for spinning up and managing virtual machines.

    • TBD

01 / 03Live

TweakTags

TweakTags logo

Self-hosted inline CMS for Next.js, React and plain HTML.

01Overview

Bolt a CMS onto a site you already have instead of rebuilding the site around one. Put a data-tweaktags-* attribute on any element, sign in, flip on edit mode and change text, rich text, images and video right on the live page. Content saves to your own database and every visitor sees the saved version, with no rebuild and no redeploy. Under the hood it's a framework-agnostic browser engine, pluggable database and auth adapters, and a security model built like a payments system: rotating refresh tokens, CSRF protection and server-enforced roles.

  • One attribute makes an element editable: no dashboard to learn, no content model to design, no rebuild.
  • Self-hosted: content and users live in your database, not a third-party service.
  • Published on npm with a live, no-signup demo and a full documentation site.

02Screens

TweakTags demo in edit mode: every editable heading, paragraph and price on a sample lumber yard site has a dashed outline, with the edit bar docked at the bottom right.
Edit mode on a live page. Every dashed outline is a tag.Item 01 / 04

03Spec sheet

Type
Inline CMS / visual editor
Runs on
Next.js · React · plain HTML
Databases
Postgres · MySQL · MariaDB · SQLite
Auth
Built-in JWT or AWS Cognito
Packages
15 on npm (@tweaktags)
License
MIT

04Editing

  • Edit in place on the live page, in a full-screen popup editor that lists every tag, or from a traditional full-page admin panel.
  • Plain text, rich text and media tags: images and video sources swap in, and containers get cover backgrounds.
  • A draggable edit bar with batch save, confirmations and in-page help. Superusers create tags and manage users from the same bar.
  • The optional <Editable> React component is sugar; the attribute alone works on any HTML.

05Architecture

  • TypeScript
  • Node.js
  • React
  • A framework-agnostic browser engine crawls the page and watches for new nodes, so client-side routing just works. The React and vanilla JS UIs both sit on top of it.
  • Pluggable database adapters for Postgres, MySQL, MariaDB and SQLite, each tested in CI against real servers across every supported version.
  • Multi-tenant: many sites can share one database and user pool, and the tenant is decided by the server so a browser can never pick or fake one.
  • Serverless-aware connection pooling, and presigned S3 uploads so files go straight from the browser to your bucket.
  • Split into 15 scoped packages, so an app installs only the driver, auth and UI it actually uses.

06Security

  • Short-lived access tokens with rotating refresh tokens. Replaying a used refresh token revokes the whole login family, and strict mode blocks revoked sessions immediately.
  • Tokens in httpOnly cookies with double-submit CSRF protection on every write.
  • Server-enforced roles: editors can only change existing content, and the last superuser can't lock everyone out.
  • bcrypt password hashing, parameterized queries, and script and injection filtering on saved content.
  • Optional AWS Cognito login for teams that already have a user pool.

07Stack

  • TypeScript
  • React
  • Next.js
  • Node.js
  • PostgreSQL
  • MySQL
  • SQLite
  • AWS Cognito
  • AWS S3
  • npm

08Links

02 / 03Open sourcing soon

Frankie Stealth Record

Private meeting recorder with speaker-labeled transcripts.

01Overview

Automatically records Teams, Zoom, Google Meet, Slack huddles, Webex, Discord and OBS calls and writes a transcript with each speaker's name next to what they said. Everything stays on your machine unless you choose to sync to your own S3 bucket. No account, no cloud service. Includes an Android app for phone calls.

  • Detects call start and stop on its own; no buttons to remember.
  • Local-first: recordings and transcripts never leave the device by default.
  • One install script per OS that sets up Python and audio tooling automatically.

02Stack

  • Python
  • Android
  • PowerShell
  • Bash
  • AWS S3

Repository and final details will be published when this project goes public.

03Links

03 / 03Open sourcing soon

VM Tool (working title)

Tooling for spinning up and managing virtual machines.

01Overview

Placeholder: a developer tool for provisioning, managing and tearing down virtual machines. Final name, description and repository will be published when the project is open sourced.

  • Details coming soon.

02Stack

  • TBD

Repository and final details will be published when this project goes public.

03Links

Try

Use the Up and Down keys to move and Enter to open.