Frak Labs

Why we plugged the wallet straight into a regulated e-money issuer instead of building our own rails, and how the integration actually works: browser-side OAuth2 with PKCE, an nginx proxy that defeats a broken CORS preflight, ERC-1271 address linking, delegated KYC, and a signed SEPA off-ramp

How we gave Frak's self-custodial smart-account wallet a real IBAN by integrating Monerium, a licensed e-money institution: a backend-free OAuth2 + PKCE connect flow, token refresh coalescing, an nginx CORS workaround for Tauri, ERC-1271 wallet linking with deploy-before-sign, fully delegated KYC, and a signed EURe redeem off-ramp.

Why we moved merchant-editable text out of metafields and into a merchant-owned metaobject, how a three-tier Liquid cascade resolves it, and the self-healing sync that never overwrites a merchant's edits

How we localized Frak's Shopify app across a storefront banner, a product-page share button, and a post-purchase checkout card (three runtimes reading two different Shopify APIs) by making a single merchant-owned frak_i18n metaobject the source of truth, wired into Shopify's native Translate & Adapt.

Killing Dockerfile.base, sharing cache mounts across six images, and what really moves the needle in Docker build pipelines

How the wallet's deploy pipeline went from a 9-minute build to a 4-minute cold run and 2-minute cached run by killing a monolithic Dockerfile.base, moving BuildKit in-cluster, wiring a Zot registry cache, and sharing apt + bun caches across six images.

In-cluster GitHub runners, mTLS BuildKit, an OCI cache nobody pays egress for, and the pulumi-Bun saga

How we stood up a Hetzner-based platform (ARC runners, remote BuildKit over mTLS, an in-cluster Zot OCI registry, a Verdaccio NPM mirror, and a Kyverno policy that rewrites every pod's NPM_REGISTRY), and what we'd do differently after fighting Pulumi for two days.

Preact, vanilla-TS bootstraps, headless RPC, and the discipline of a 3-chunk eager bundle

How we redesigned the listener iframe's boot so partner websites pay a 3-chunk price for our wallet on first paint, then preload the rest lazily: by migrating from React to Preact, splitting the app into eager and lazy rings, and teaching the SDK to predict which lazy chunks to fetch.

Typed activity items on iOS, FileProvider thumbnails on Android, and a 2-second race against the share sheet

How we built a native Tauri share plugin for iOS and Android that surfaces proper URL cards, LPLinkMetadata preview tiles, and FileProvider-backed thumbnails, with a bounded image race so the share sheet never stalls.

iCloud KV + Keychain on iOS, Google Block Store + SharedPreferences on Android, and never storing anything sensitive

How we shipped a cross-platform Tauri plugin that persists a tiny recovery hint through app uninstalls and new-device setups, without ever touching a private key. A tour through NSUbiquitousKeyValueStore, iCloud Keychain, Google Block Store, and Android Auto Backup.

Context-aware bootstrapping, manifest-based block registration, delegating webhooks to WooCommerce's native pipeline, and deleting every line of code we didn't need

How we shipped a production WordPress + WooCommerce plugin that loads almost nothing per request, registers three Gutenberg blocks without scanning the disk, and offloads webhook delivery to WooCommerce's native engine with fingerprint-based orphan adoption.

One lingering collection, zero cloud lock-in

How we retired our last MongoDB dependency at Frak Labs by running sqld (libSQL) and RustFS on Kubernetes, with bottomless replication, a bidirectional sync safety net, and a 7-line Drizzle schema.

Two-pass builds, forced GC, --smol flags, and a health endpoint that lies to Kubernetes

3 days debugging a Bun RSS memory leak on a Elysia.js backend. The fix was a scheduled pod restart via a health endpoint that lies to Kubernetes: and why we couldn't do anything else.

Replacing simplewebauthn with platform-native passkey APIs - and surviving iOS attestation objects

A step-by-step look at building a custom Tauri plugin for WebAuthn/passkeys on iOS and Android - including CBOR parsing, COSE key extraction, SPKI DER reconstruction, and the mobile dev TLS workaround.

From Next.js to TanStack Start, Rollup to Rolldown, and 5-minute builds to 30 seconds

A technical deep-dive into migrating our entire monorepo from Next.js to TanStack Start, adopting Rolldown across the stack, unifying on Vitest, and achieving a complete deployment pipeline in under 4 minutes.

From Jotai to Zustand, AWS to Kubernetes, and achieving faster load times without a CDN

A deep-dive into the architectural and infrastructure optimizations that reduced our listener app size by 30%, migrated from AWS S3 to self-hosted Nginx, and achieved faster load times without a CDN.

Escaping the HCL Trap

A deep dive into Frak's infrastructure stack, detailing why we abandoned HCL for TypeScript, how we architect multi-cloud deployments with SST, and managing GKE clusters with Pulumi.