惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

宝玉的分享
宝玉的分享
WordPress大学
WordPress大学
博客园 - 司徒正美
美团技术团队
酷 壳 – CoolShell
酷 壳 – CoolShell
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
小众软件
小众软件
量子位
阮一峰的网络日志
阮一峰的网络日志
Apple Machine Learning Research
Apple Machine Learning Research
有赞技术团队
有赞技术团队
博客园 - 【当耐特】
博客园 - Franky
Jina AI
Jina AI
人人都是产品经理
人人都是产品经理
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
T
Threat Research - Cisco Blogs
D
Darknet – Hacking Tools, Hacker News & Cyber Security
F
Fox-IT International blog
T
ThreatConnect
A
Arctic Wolf
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
Last Week in AI
Last Week in AI
C
CERT Recently Published Vulnerability Notes
P
Palo Alto Networks Blog
李成银的技术随笔
Project Zero
Project Zero
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
The Register - Security
The Register - Security
F
Full Disclosure
H
Hacker News: Front Page
雷峰网
雷峰网
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
S
SegmentFault 最新的问题
S
Schneier on Security
T
Tor Project blog
博客园_首页
月光博客
月光博客
大猫的无限游戏
大猫的无限游戏
博客园 - 聂微东
S
Securelist
C
Comments on: Blog
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
Attack and Defense Labs
Attack and Defense Labs
IT之家
IT之家
博客园 - 叶小钗
J
Java Code Geeks
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events

DEV Community

One Soul, Any Model: Portable Memory for Open-Source Agents with .klickd MonoGame - A Game Engine for Those Who Love Reinventing the Wheel Mastering Node.js HTTP Module: Build Servers, REST APIs, and Handle Requests RP2040 Wristwatch Tells Time With a Vintage VU Meter Needle observations about models / 2026, may AI Agent Dev Environment Guide — Real Experience from an AI Living Inside a Server How I Run 7 AI Models 24/7: Multi-Agent Architecture in Practice What exactly changes with the Claude Max plan? I Revived a Broken MLOps Platform — Now It's Self-Service, Policy-Guarded, and Operationally Credible OpenAI's $2M-tokens-for-equity YC deal, decoded Why DMX Infrastructure is Still Stuck in the 90s Agent Series (2): ReAct — The Most Important Agent Reasoning Paradigm Open Source Project (No.73): Sub2API - All-in-One Claude/OpenAI/Gemini Subscription-to-API Relay I Made the Wrong Bet on Event Streaming in Our Treasure Hunt Engine #ai #productivity #chatgpt #python Symbolic Constant Conundrum From Manual RAG to Real Retrieval — Embedding-Based RAG with NVIDIA NIM Building an outbound-only WebSocket bridge for local AI agents Our System's Sins in Ghana: Why We Had to Rethink Digital Product Sales Execution Governance, AI Drift, and the Security Paradox of Runtime Enforcement Differential Pair Impedance: Why USB and HDMI Routing Is a Geometry Problem Small AI database questions can become big scans Claude Code 2.1 Agent View & /goal: Autonomous Dev Guide 2026 Your AI database agent should not see every column Rust's Low-Latency Conquest: Why We Ditched C++ for a Treasure Hunt Engine Floating-point will quietly corrupt your emissions math, and 0.1 + 0.2 already warned you Autonomous Agents: what breaks first (and why that's the real product) [2026-05-23] Agent payments are the new cloud bill footgun ORA-00069 오류 원인과 해결 방법 완벽 가이드 How I Built a Local, Multimodal Gemma 4 Visual Regression & Patch Agent: Closed-Loop Validation, Canvas Pixel Diffing, and Reproducible Benchmarks Pressure-testing Ota on Supabase: from setup prose to executable repo readiness VPC CNI en EKS: cómo dejar de pagar nodos que no usás The Future of Text Analysis: Introducing TechnoHelps Semantic Engine I built a Chrome Extension that saves product images + context directly to Google Drive & Sheets 95+ browser-based dev tools that never touch a server Running Qwen 2.5 Coder 14B Locally in Cursor with Ollama From a 10,000-line OpenSearch export script to a log analysis tool Ghost Bugs Cost $40K: A Neural Debugging Postmortem SECPAC: A Lightweight CLI Tool to Password-Protect Your Environment Variables 🚀 PasteCheck v1.7 + v1.8 — Hints that tell you what to fix, and a nudge panel that tells you where to start 8 Real Ways Developers Make Money in 2026 (Ranked by Effort) I built a free AI-powered Git CLI that writes your commit messages for you sds-converter: Converting Safety Data Sheets to MHLW Standard JSON with Rust and LLMs OpenLiDARViewer: A Browser-Based LiDAR and Point-Cloud Viewer Local-First Browser Tools: What You Should Not Upload Online Why most freelancers undercharge (and the maths behind fixing it) We built a mahjong dangerous-tile predictor calibrated on 4.97M real hands Building a Chord Progression Generator in the Browser — Music Theory in JS, Sound via Web Audio API tutorial #10: 148 Opens, 0 Replies — How My Forge Cold Email v1 Completely Failed 9 in 10 Docker Compose files skip the basic security flags How to Forward Android SMS to Telegram Automatically I built the first security scanner for MCP servers — here's what I found Building an Interplanetary Quantum Logic Engine in Rust/Ovie From AI Code Generation to AI System Investigation I gave Gemini 3.5 Flash a CVE-fix PR to review. It found another bug in the same file. When I Realized We Were Throwing Away Half Our Engine's Potential TokenJuice and the 20-Minute Cron: Inside OpenHuman’s Aggressive Context-Harvesting Engine CodeDNA: AI Codebase Archaeologist Built with Gemma 4 Thinking Mode Building a semantic search API in Go with Meilisearch April 2026 DigitalOcean Tutorials: Inference Optimization and AI Infrastructure Looking for DTMF transceiver module Moving Beyond "Tribal Software": Why the Singularity Demands the Interplanetary Hybrid Human Use SVGIcons as a Claude Custom Connector to Find Icons Faster DMARC Is Now a Proper Internet Standard: What Changed in RFC 9989/9990/9991 OpenTelemetry Is Now a CNCF Graduate — and It's Coming for Your AI Stack OpenHuman Follows OpenClaw’s Rise, But With an Obsidian Brain O erro mais caro em programas Solana: PDA sem bump check Build a Live Flight Radar in a Single HTML File DuckDB 1.5.3 Adds Quack Client-Server, SQLite Gets Cypher Graph Extension Custom Copilot Agents: Building Domain-Expert AI Teammates with Skills, MCP Tools, and Custom Knowledge RTX 5090 Cooling, BeeLlama VRAM Opts, Resizable BAR Performance Gains This week in Cursor + .NET — 3 rules + 4 essays (week ending May 22, 2026) RAG Architecture with n8n + PostgreSQL (pgvector) + Ollama Gemma4 on AWS EC2 Keep Your Taste I Built chanprobe Because My Go Queues Were Invisible Building a Live Solana TPS Meter with OrbitFlare's TypeScript SDK Using Gemma 4 to Analyze Bitcoin’s Next 5, 15, and 60 Minutes Security news weekly round-up - 22nd May 2026 When Stress Disguises Itself as Rational Planning (Bite-size Article) A Domain-Driven Notification Microservice — Patterns From Production I Built KubeCrash: Learn Kubernetes by Diagnosing Real Incidents The Real-World Test: How Gemini’s New Interface Won Over My Wife and Mother-in-Law (Who Are Totally Non-Tech) Running a Full Multi-Stage Intrusion Simulation. Every Detection Fired. Spec sheets aren't capabilities: a Day-1 Gemma 4 eval on Telugu vision Design a Clean Form with Floating Labels in Bootstrap 5 Your MCP Server Is Probably Overprivileged - Here's a Scanner For It I built a free developer tools site that works entirely in your browser Maatru: An agentic Telugu literacy app for kids, built with Gemma 4 GitHub confirms internal repository breach via poisoned VS Code extension Gemma 4 Is Not Just Another Open Model — It Changes What Developers Can Build Locally OpenVibe: An Open-Source AI Coding IDE That Works With Any Model I Inspected the System Program and It Looked Just Like My Wallet Hermes vs OpenClaw: The Two Most-Starred AI Agent Frameworks of 2026 Stop retraining YOLO: a developer’s guide to zero-shot object detection with generative VLMs AI, the New UI, Not the New API Sensors and Guides: Two Ways Your Harness Talks to Your Agent Fixing Google BigQuery Auth Proxying We didn't ship a feature, we shipped an agentic opt-in beta Wake-Up Call: Why AI Safety Guardrails Break Under Pressure 🧩 Handling 1,000+ Inputs with Angular Reactive Forms: An Enterprise Architecture Breakdown
Building a Privacy-First Resume Editor with Typst WASM and React
Kakuti XYZ · 2026-05-23 · via DEV Community

The Problem

Most online resume builders fall into two camps:

  1. SaaS tools that upload your resume to a server for PDF generation — your most sensitive personal data leaves your machine.
  2. LaTeX/Typst templates that produce great output but require a local toolchain, package manager, and CLI fluency.

For non-technical users, option 2 is inaccessible. For privacy-conscious users, option 1 is unacceptable. SmartResume tries to solve both: professional typesetting quality, entirely in the browser.

You can try it at resume.kakuti.site. The source is on GitHub.
SmartResume editor screenshot

Architecture at a Glance

┌─────────────────────────────────────────────────┐
│                   Browser (SPA)                   │
│                                                   │
│  ┌──────────┐   ┌───────────┐   ┌─────────────┐ │
│  │  React   │──▶│  Editor   │──▶│  IndexedDB   │ │
│  │  Pages   │   │  State    │   │ (localforage)│ │
│  └──────────┘   └───────────┘   └─────────────┘ │
│                       │                           │
│                       ▼                           │
│              ┌─────────────────┐                  │
│              │   Web Worker    │                  │
│              │  ┌────────────┐ │                  │
│              │  │ Typst WASM │ │                  │
│              │  │ Compiler + │ │                  │
│              │  │ Renderer   │ │                  │
│              │  └────────────┘ │                  │
│              └─────────────────┘                  │
└─────────────────────────────────────────────────┘
                      │
                ┌─────▼──────┐
                │   Vercel   │
                │  /api/     │  ← Discord webhook
                │  feedback  │     (optional)
                └────────────┘

Enter fullscreen mode Exit fullscreen mode

The application is a single-page app (React 18 + Vite 5 + TypeScript). There is one serverless function for optional feedback — everything else runs client-side.

How Typst Runs in the Browser

Typst is a modern typesetting language, like LaTeX but with a cleaner syntax and faster compilation. The key insight is that Typst's compiler and renderer can be compiled to WebAssembly via @myriaddreamin/typst.ts.

Two WASM binaries handle the pipeline:

Binary Purpose Size
typst_ts_web_compiler_bg.wasm Parses .typ source, produces a document AST ~8 MB
typst_ts_renderer_bg.wasm Renders the AST to PDF bytes and SVG elements ~5 MB

Both run inside a Web Worker to avoid blocking the main thread. This is critical — Typst compilation can take 200-400ms even for a single-page resume, and you don't want that on the UI thread.

Worker Initialization

// frontend/src/features/template-renderer/hooks/useTypstCompiler.ts
const workerRef = useRef<Worker>();

useEffect(() => {
  const worker = new Worker(
    new URL('../worker/typst.worker.ts', import.meta.url),
    { type: 'module' }
  );

  worker.postMessage({ type: 'init' });
  workerRef.current = worker;

  return () => worker.terminate();
}, []);

Enter fullscreen mode Exit fullscreen mode

The worker loads the WASM binaries, fetches font files from CDN (Roboto, NotoSansCJK, Font Awesome), and preloads Typst template files from the /public/templates/ directory.

Compilation Message Protocol

The main thread and worker communicate via a simple message protocol:

Main Thread                    Web Worker
     │                              │
     │──── set_source ────────────▶ │  (update .typ source)
     │──── compile (id: 7) ───────▶ │  (trigger compilation)
     │                              │
     │  ... user types, triggers    │
     │      another compile ...     │
     │──── compile (id: 8) ───────▶ │
     │                              │
     │◀─── compile_done (id: 7) ─── │  ← stale, ignored
     │◀─── compile_done (id: 8) ─── │  ← current, rendered

Enter fullscreen mode Exit fullscreen mode

Each compile message carries a monotonically incrementing ID. When the worker finishes, it echoes the ID back. If the ID doesn't match the latest request, the result is discarded — a simple form of stale-result rejection without AbortController.

Template Mock Injection

Typst templates typically use #import directives to reference other files. In the WASM sandbox, there's no file system access, so the worker strips these imports and injects mock implementations:

// Injected into each template's source before compilation:
#let fa-icon(name, fill: black) = {
  // Unicode character mapping — no external font needed
  let icons = (
    "github": "\u{f09b}",
    "linkedin": "\u{f08c}",
    "envelope": "\u{f0e0}",
    // ...
  )
  text(fill: fill, raw(icons.at(name, default: "")))
}

#let linguify(key, default: none, ..args) = { default }

Enter fullscreen mode Exit fullscreen mode

The Editor: ContentEditable Meets Markdown

The editing experience is block-based — similar to Notion. Each block is a heading, list item, or paragraph. The twist is that every block supports two editing modes:

WYSIWYG Mode (contentEditable)

A contenteditable div with formatting (bold, color, font size). The challenge with contentEditable is selection preservation across React re-renders. The solution:

// frontend/src/features/editor/utils/domUtils.ts
function saveSelection(container: HTMLElement): SelectionState | null {
  const selection = window.getSelection();
  if (!selection || !selection.rangeCount) return null;

  // Walk the DOM tree to find the caret position by character offset
  const nodeStack: Node[] = [];
  const walker = document.createTreeWalker(
    container,
    NodeFilter.SHOW_TEXT,
    null
  );
  // ... build path to current node and offset within it
  return { nodePath, offset };
}

function restoreSelection(
  container: HTMLElement,
  state: SelectionState
): void {
  // Walk the stored path through child nodes to reach the target
  // Then set the caret at the stored offset
}

Enter fullscreen mode Exit fullscreen mode

Raw Markdown Mode

A hidden <textarea> activates when you click or press Enter in the margin zone next to a block. Type raw markdown, commit with Enter, cancel with Escape.

# Experience | 2020 - Present
**Senior Engineer** at Acme Corp
- Led a team of **5 engineers**
- Built [the platform]{#0075de}

Enter fullscreen mode Exit fullscreen mode

The format uses custom extensions: [text]{#color} for colored text and [text]{size:14pt} for font sizing. These map to Tailwind-style inline styles in the rendered output and to Typst markup in the generated source.

Auto-Detection on Input

Typing #, ##, ###, or - at the start of a block converts its type automatically — no toolbar clicks needed.

Typst Code Generation

The editor state (a tree of blocks) is converted to Typst source code via template-specific generators:

// frontend/src/features/template-renderer/generators/westernResume.ts
export function generateWesternResume(state: EditorState): string {
  const lines: string[] = [];

  // Header with personal info
  lines.push(`#set page(margin: (top: 1.5cm, bottom: 1.5cm))`);
  lines.push(`#align(center)[`);
  lines.push(`  = ${escape(state.personalInfo.name)}`);
  lines.push(`  ${escape(state.personalInfo.email)} | ${escape(state.personalInfo.phone)}`);
  lines.push(`]`);

  // Sections (h1) → entries (h2) → roles (h3)
  for (const section of state.sections) {
    lines.push(`== ${escape(section.title)}`);
    for (const entry of section.entries) {
      lines.push(`#resume-entry(`);
      lines.push(`  title: [${escape(entry.title)}],`);
      lines.push(`  right: [${escape(entry.right)}],`);
      lines.push(`)`);
      // Rich text items as Typst markup
      for (const item of entry.items) {
        lines.push(`  - ${renderRichText(item.content)}`);
      }
    }
  }

  return lines.join('\n');
}

Enter fullscreen mode Exit fullscreen mode

The generator translates rich text formatting into native Typst markup:

Editor Format Typst Output
**bold text** #strong[bold text]
[colored text]{#0075de} #text(fill: rgb("#0075de"))[colored text]
[text]{size:14pt} #text(size: 14pt)[text]

Persistent State Without a Backend

All state lives in IndexedDB via localforage:

// frontend/src/shared/utils/storage.ts
import localforage from 'localforage';

const STATE_KEY = 'current_resume_state_v2';
const PHOTO_KEY = 'current_resume_photo';

export async function saveState(state: EditorState): Promise<void> {
  await localforage.setItem(STATE_KEY, state);
}

export async function loadState(): Promise<EditorState | null> {
  return await localforage.getItem(STATE_KEY);
}

export async function savePhoto(blob: Blob): Promise<void> {
  await localforage.setItem(PHOTO_KEY, blob);
}

Enter fullscreen mode Exit fullscreen mode

Photos are stored separately from state to stay within IndexedDB per-key value limits (large blobs in the same record can cause performance issues). Auto-save fires on every state change with an 800ms debounce — frequent enough to feel instant, sparse enough to avoid thrashing.

PDF Resume Import

Upload an existing PDF resume and SmartResume parses it back into editable blocks. This is a multi-step pipeline:

PDF File
  │
  ▼
pdfjs-dist text extraction ─── text items with (x, y, font, size)
  │
  ▼
Line grouping ──────────────── group text items by y-position proximity
  │
  ▼
Header/footer removal ─────── detect and strip repeating page elements
  │
  ▼
Line categorization ────────── classify as h1, h2, h3, bullet, or body
  │
  ▼
Structure analysis ─────────── group into sections → entries → items
  │
  ▼
Markdown assembly ──────────── reconstruct clean markdown from structure
  │
  ▼
Editor state ───────────────── populate blocks in the editor

Enter fullscreen mode Exit fullscreen mode

The parser uses heuristics rather than ML: font size thresholds for heading detection, position alignment for section boundaries, pattern matching for personal info (email regex, phone number patterns). Each template type (western, Japanese rirekisho, Japanese shokumukeirekisho) has its own parser strategy.

Design System: Notion-Inspired Warm Neutrals

The visual design is modeled after Notion's philosophy: a blank canvas that gets out of your way. Key choices:

  • Warm grays (#f6f5f4, #31302e) with yellow-brown undertones instead of cold blue-grays
  • Near-black text at rgba(0,0,0,0.95) — softer than #000 without sacrificing readability
  • Whisper borders: 1px solid rgba(0,0,0,0.1) everywhere — structure without visual weight
  • Multi-layer shadows with individual opacities never exceeding 0.05 — depth that's felt, not seen

The full design spec is in markdown/DESIGN.md.

Trade-offs and Limitations

What Works Well

  • Privacy: No data leaves the browser. You can verify this in DevTools Network tab — zero requests contain resume content.
  • PDF quality: Typst output is genuinely professional, on par with LaTeX.
  • Startup speed: No account, no signup. The app loads and you start editing.

What Could Be Better

  • WASM binary size: The two .wasm files total ~13 MB. First load on slow connections is noticeable. HTTP caching and service worker pre-caching mitigate this after the first visit.
  • Font loading: Typst needs fonts available in the virtual filesystem. The worker fetches them from CDN on init — on a bad network, this can take tens of seconds. There's a 60-second timeout with a user-facing error about VPN/network issues.
  • contentEditable: Like every contentEditable-based editor, there are edge cases with selection, IME input, and copy-paste. The dual-mode (WYSIWYG + raw markdown) is a pragmatic escape hatch: if the rich text editor misbehaves, drop into markdown mode.
  • No collaboration: This is deliberate. Real-time collaboration requires a server (or WebRTC signaling), which reintroduces the privacy problem.

Try It Yourself

git clone https://github.com/Bowen7/smart-resume.git
cd smart-resume
npm install
npm run dev

Enter fullscreen mode Exit fullscreen mode

Open http://localhost:5173. The app requires no environment variables for basic use — only the optional /api/feedback endpoint needs a DISCORD_WEBHOOK_URL.


Have you built something with WASM in the browser? What challenges did you hit with Web Workers or contentEditable? I'd appreciate your feedback on the approach.