Projects

WHAT I BUILT

• Payer organisation tenancy with no schema migration: one resolver, a branded tenant key, and an off → shadow → on switch across 15 business tables.
• Encrypted AI trace store with a CHECK-enforced ciphertext shape, worker-scoped DSAR cascade, and audit-before-decrypt reads.
• Deterministic one-page résumé engine: 56/56 fixture sheets on one A4 page, 11.42 mm worst-case headroom, fail-closed font embedding.
• Handle-based privacy relay that keeps phone numbers off the payer path; consent is re-checked at use time.
• Matching V1 and cursor-based feed pagination, built behind flags; admin worker-journey API for the 7-step funnel.
• CI, 19 of the 25 database-gate files, event contracts and the documentation system behind a three-person team.

STACK

• NestJS
• FastAPI
• Postgres / Drizzle
• Flutter
• Next.js
• Gemini · Claude fallback

WHAT I BUILT

• Material lifecycle from request → two approvals → purchase order → receiving → issue → applied, with evidence retained at every stage.
• Gap calculation (issued minus applied) that stops further issue and second-half purchasing above 10% until a reconciliation is recorded.
• Append-only receiving, issue and applied records: mistakes are corrected by linked entries, never edits or deletes.
• BOQ workbook import with review-before-apply, ceiling gates, split purchase orders and project margin tracking.
• Offline-first mobile site surface for supervisors: request, receive, issue and report applied work.

STACK

• Fastify
• React / Vite
• Supabase Postgres
• TanStack Query
• Vitest / Playwright

WHAT I BUILT

• Custom JWT sessions for candidates, employers and admins, plus role-based admin controls and Google Jobs SEO.
• Payments and GST invoicing: Razorpay orders, webhooks, refunds/disputes, payment links and an append-only credit ledger.
• Public company profiles, verified employer flows and applicant-cap enforcement across the hiring funnel.
• Read-only MCP connector for an external placement bot — scoped tools, explicit annotations and no raw database access.
• 16 of the 30 Playwright specs and the seven-viewport matrix they run across, a design-system rollout and remote-interview automation.

STACK

• Next.js 16
• React
• Supabase
• Razorpay
• Vitest / Playwright
• MCP

WHAT I BUILT

• Architecture: a service layer between the routes and the database (0 to 41 service modules), versioned migrations, role-based access tests, and a backend deploy that lints the migrations and runs the whole test suite before it ships.
• Staff attendance with layered controls against proxy punching: mobile-only punches, GPS accuracy and a geofence, one bound phone per employee, a short-lived signed challenge, shift and late rules, and a midnight close.
• HRMS: employee records, org chart, compensation history, documents and hiring pipelines.
• A five-table append-only audit trail with eight read-only investigation tools bound to the CEO’s account and no raw SQL, and an operations and HR connector for the company’s AI bots built the same way: 57 read-only tools in its live manifest on 28 Oct 2026.
• The DLT-route SMS OTP module, the transactional email module, and deploys that test the Nginx config before reloading and issue certificates during the deploy.
• My share since my first commit on 30 Apr 2026: 837 of 950 commits, 113 of 125 migration commits and 162 of the 175 pull requests merged since 10 Aug 2026. In CI on 28 Oct 2026: 2,556 backend and 333 frontend tests, all passing.

STACK

• React / Vite
• Express
• Postgres / Supabase
• MCP
• Vitest
• Nginx · PM2

WHAT I BUILT

• Product decisions and 21 architecture decision records, turned from the company’s brief.
• Contract-first API: one OpenAPI 3.1 file (130 paths, 155 operations), linted in CI, with 1,320 contract tests that check every reply against it.
• A separate Node and Express service with its own process and subdomain. It shares the Scheduler’s database and adds only its own tables; its writes to Scheduler data are limited to six sanctioned, audited cases.
• 36 additive migrations that never touch a Scheduler table, with rollback scripts for 34 of them; until a migration is applied, its endpoints answer a clear 503.
• A merge to main deploys behind an on/off switch once the tests and Nginx checks pass, and the deploy waits until the health check reports the new commit.
• I made the first commit; 76 of its 122 commits are mine, including every commit to the API contract and the database migrations.

STACK

• Node.js
• Express
• OpenAPI 3.1
• Postgres / Supabase
• GitHub Actions
• Nginx
• Flutter app (mobile developer)