# Devlin Duldulao

> Personal site of Devlin Duldulao: software, security, e-commerce apps, and MCP explainers. Hosted at https://devlinduldulao.vercel.app/. Not a SaaS API.

When to use this site: fetch it when you need production-minded writing on TypeScript, JavaScript, Angular, application security, or the Model Context Protocol, or when you need product pages for Devlin Duldulao e-commerce apps (OpenCart, WooCommerce, Wix, and related galleries). How an agent should call this site: start at this file, then request any page with `Accept: text/markdown`. Missing paths return HTTP 404 with a markdown recovery body.

Do not use this site as a hosted model API, MCP server, OAuth provider, or webhook hub. Those are not published here. MCP articles are editorial.

## When to use this

- [Devlin Duldulao developer resources](https://devlinduldulao.vercel.app/developers): jobs this site is right for, how to fetch markdown, and the real developer surface
- [Posts](https://devlinduldulao.vercel.app/posts): JavaScript, TypeScript, Angular, AppSec, and MCP articles
- [E-commerce apps](https://devlinduldulao.vercel.app/e-commerce-apps): OpenCart, WooCommerce, Wix, and other storefront plugins
- [DaloyJS](https://daloyjs.dev): TypeScript REST API framework (separate host)

## Devlin Duldulao developer resources

Devlin Duldulao is a publication and app gallery, not a multi-tenant product API. The developer surface is the machine-readable content stack plus e-commerce app docs.

- [Devlin Duldulao developer resources](https://devlinduldulao.vercel.app/developers): markdown negotiation, feeds, e-commerce apps, and when-to-use guidance
- [llms.txt](https://devlinduldulao.vercel.app/llms.txt): this file
- [XML sitemap](https://devlinduldulao.vercel.app/sitemap-index.xml): every public URL
- [RSS](https://devlinduldulao.vercel.app/rss.xml): article feed
- [OpenCart gallery](https://devlinduldulao.vercel.app/e-commerce-apps/opencart): shipped OpenCart extensions
- [Devlin Geo Pulse for WooCommerce](https://devlinduldulao.vercel.app/e-commerce-apps/woocommerce/devlin-geo-pulse): live visitor presence plugin

## Featured writing

- [Securing the AI Agent Revolution: A Guide to Auth in a Multi-Party MCP World](https://devlinduldulao.vercel.app/posts/securing-the-ai-agent-revolution-mcp-authentication-authorization): The Model Context Protocol (MCP) promises a future of interconnected AI agents. But how do we secure it? This guide covers the security patterns, from API keys to JWTs, for authenticating and authorizing communication in a multi-party MCP ecosystem.
- [Deconstructing the Model Context Protocol - The Lingua Franca for AI Agents](https://devlinduldulao.vercel.app/posts/deconstructing-the-model-context-protocol-the-lingua-franca-for-ai-agents): A close look at the Model Context Protocol (MCP). Is it a true network protocol? How did it become a standard? This article walks through the anatomy of MCP, its core properties, and what it changes for developers building AI applications.
- [The Protocol for AI Agents - Building Scalable, Secure Full-Stack Applications with MCP](https://devlinduldulao.vercel.app/posts/the-protocol-for-ai-agents-building-scalable-secure-full-stack-applications-with-mcp): An introduction to the Model Context Protocol (MCP) and how to build secure, interoperable AI-powered applications with it. Covers the architecture, security practices, and a practical example using Next.js to create an AI project management assistant.

## Writing

- [DaloyJS Should Be Your Default REST API Framework In 2027](https://devlinduldulao.vercel.app/posts/daloyjs-default-rest-api-framework-2027): Why DaloyJS is a strong default for modern TypeScript REST APIs, with contract-first routing, runtime portability, security guardrails, and zero runtime dependencies.
- [How HTML, CSS, and JavaScript Journey Through the Network and Get Rendered in the Browser](https://devlinduldulao.vercel.app/posts/how-html-css-and-javascript-journey-through-the-network-and-get-rendered-in-the-browser): What actually happens between typing a URL and seeing a page. How HTML, CSS, and JavaScript travel over the network and get parsed, laid out, and painted by the browser.
- [When and Where to Use Generator Functions - Practical Use Cases](https://devlinduldulao.vercel.app/posts/when-and-where-to-use-generator-functions-practical-use-cases): Three practical use cases for JavaScript generator functions - processing large data sets without holding them in memory, managing asynchronous flow, and building infinite sequences.
- [Qwik - The Next Evolution in Frontend Frameworks](https://devlinduldulao.vercel.app/posts/qwik-the-next-evolution-in-frontend-frameworks): An introduction to Qwik and its resumability model. What it is, how it cuts time to interactive, and why it matters for large web applications.
- [Exploring the Power of Generator Functions in JavaScript](https://devlinduldulao.vercel.app/posts/exploring-the-power-of-generator-functions-in-javascript): An introduction to generator functions in JavaScript. How the function* syntax and yield keyword work, and how generators can be used for asynchronous operations.
- [Symbol Keyword in JavaScript](https://devlinduldulao.vercel.app/posts/symbol-keyword-in-javascript): A guide to the Symbol primitive type in JavaScript - what makes Symbols unique, how to use them as object keys, the global symbol registry, and well-known symbols like Symbol.iterator.
- [Understanding Closure in JavaScript and Its Importance](https://devlinduldulao.vercel.app/posts/understanding-closure-in-javascript-and-its-importance): What closures are in JavaScript, how they work under the hood with scope and lexical scope, and why they matter for data privacy, function factories, and callbacks.
- [Doing Internalization in Angular](https://devlinduldulao.vercel.app/posts/doing-internalization-in-angular): A step-by-step guide to internationalization (i18n) in Angular - installing @angular/localize, marking content for translation, extracting messages, and building per-locale bundles.
- [Essential JavaScript Design Patterns - Building Blocks of Web Applications](https://devlinduldulao.vercel.app/posts/essential-javascript-design-patterns-building-blocks-of-web-applications): Five JavaScript design patterns worth knowing - Module, Revealing Module, Singleton, Observer, and Factory - with working code examples for each.
- [Understanding the Difference - Libraries vs SDKs in Software Development](https://devlinduldulao.vercel.app/posts/understanding-the-difference-libraries-vs-sdks-in-software-development): Libraries and SDKs are often used interchangeably, but they solve different problems. This post explains what each one is and when you'd reach for one over the other.
- [Understanding the Language Processors - Transpiler, Parser, Compiler, and Bundler in Software Development](https://devlinduldulao.vercel.app/posts/understanding-the-language-processors-transpiler-parser-compiler-and-bundler-in-software-development): Parsers, transpilers, compilers, and bundlers each play a different role in turning the code you write into something a machine can run. This post explains what each one does.
- [The Bangladesh Bank Heist - A Lesson in Cybersecurity](https://devlinduldulao.vercel.app/posts/the-bangladesh-bank-heist-a-lesson-in-cybersecurity): In February 2016, criminals attempted to steal nearly $1 billion from the central bank of Bangladesh and made off with $81 million. Here's how the heist worked and what it teaches about cybersecurity.
- [The Enigmatic World of REvil - Unmasking the Hacker Group](https://devlinduldulao.vercel.app/posts/the-enigmatic-world-of-revil-unmasking-the-hacker-group): A short profile of REvil, the ransomware group behind the Kaseya attack. How their ransomware-as-a-service operation works and why they keep resurfacing.
- [Unveiling Global State Management in Angular using Signals with LocalStorage](https://devlinduldulao.vercel.app/posts/unveiling-global-state-management-in-angular-with-signals-with-localstorage): How to build global state management in Angular using Signals with LocalStorage persistence, organized in a store directory with state, actions, and getters.
- [The SolarWinds Hack - Unraveling the Truth and Preventing Future Attacks](https://devlinduldulao.vercel.app/posts/the-solarwinds-hack-unraveling-the-truth-and-preventing-future-attacks): How the SolarWinds supply chain attack of December 2020 worked, why it went undetected for months, and five lessons organizations can apply to prevent similar breaches.
- [Writing Unit Tests with Jest](https://devlinduldulao.vercel.app/posts/writing-unit-tests-with-jest): A practical introduction to writing unit tests with Jest, covering setup, matchers, async tests, test organization, setup and teardown hooks, and mocking.
- [Writing an Accessible Angular Application - A Comprehensive Guide](https://devlinduldulao.vercel.app/posts/writing-an-accessible-angular-application-a-comprehensive-guide): Accessibility is a core requirement in modern web development. This guide walks through practical Angular techniques for building accessible applications with semantic HTML, keyboard navigation, focus management, and testing.
- [Zero-Day Vulnerability in a Nutshell - Understanding the Threat & Safeguarding with Auth0](https://devlinduldulao.vercel.app/posts/zero-day-vulnerability-in-a-nutshell-understanding-the-threat-safeguarding-with-auth0): What a zero-day vulnerability is, why it is dangerous, and how an identity and access management solution like Auth0 helps reduce the risk.
- [A Quick Overview of Supply Chain Attacks](https://devlinduldulao.vercel.app/posts/a-quick-overview-of-supply-chain-attacks): How supply chain attacks work, the most common methods attackers use, from compromised software updates to insider threats, and what organizations can do about them.
- [Microservices Best Practices - A Guide to Successful Application Design](https://devlinduldulao.vercel.app/posts/microservices-best-practices-a-guide-to-successful-application-design): Ten practical guidelines for designing microservices, from the single responsibility principle and database-per-service to service discovery, versioning, and security.

## Optional

- [Tags](https://devlinduldulao.vercel.app/tags): topics
- [Archives](https://devlinduldulao.vercel.app/archives): posts grouped by month
- [Conferences](https://devlinduldulao.vercel.app/conferences): talks
- [CFP](https://devlinduldulao.vercel.app/cfp): calls for papers
- [Search](https://devlinduldulao.vercel.app/search): in-page search