Full-stack engineer turned company builder.
Most of my work lives in private repos, but here's the gist:
| Domain | Stack |
|---|---|
| BROWSER EXTENSIONS | Chrome MV3 Firefox MV3 TypeScript Userscripts Vite/esbuild |
| SERVERLESS SAAS | Next.js Hono Edge SQL Drizzle ORM Turborepo |
| EDGE SITES & DEPLOYS | Astro Static Assets Serverless Workers i18n Zero Trust |
| DATA & TRADING BOTS | TypeScript Serverless Cron Edge SQL Python Backtesting |
| SELF-HOSTED INFRA | k3s Helm Helmfile Docker Secure Tunnel Shell |
| CI/CD AUTOMATION | GitHub Actions Reusable Flows Docker Helm Deploys Store Publishing |
| AI ENGINEERING | FastAPI MCP RAG Local LLMs llama.cpp |
| DEVELOPER TOOLING | TypeScript CLI Node.js Git Hooks Markdown Claude Code |
| SECURITY & MONITORING | Rust Advisories OSV Telegram Bot Python Secret Scanning |
| ANDROID & PROTOCOLS | Kotlin Jetpack Compose Protobuf TLS Car App Library |
- Manifest V3 extensions that automate the web - Five public TypeScript extensions shipped to Chrome and Firefox, including chrome-group-discard, discord-purge, uninsta, filelist-ext and series-auto-skip, built with Vite or esbuild, tested with Vitest and CDP e2e, and in some cases also shipped as Tampermonkey userscripts.
- Multi-tenant SaaS on edge workers - Private TypeScript SaaS products, a fleet-management app and a two-sided business-registration marketplace, built on Next.js 16 with OpenNext and Hono APIs, deployed to Cloudflare Workers with D1, KV and R2 and using Drizzle ORM, Stripe Connect and org-scoped server actions.
- Sites and tools published at the edge - A six-locale Astro corporate site with the EmDash CMS and LLM-driven blog automation, an assets-only internal tools directory, and a deploy-only WASM PDF toolkit, all served from Cloudflare Workers behind Access with R2 and KV where needed.
- Scheduled bots and research pipelines - Cron-driven TypeScript workers that rank and track money-making opportunities, such as the public gw2roi crafting-profit board on Hono and D1, alongside a private investment tracker with a broker sync job, a live trend bot and a Python backtest pipeline.
- Homelab Kubernetes as code - A single-node WSL2 k3s platform defined by pinned Helmfile releases, raw manifests, ARC runner bootstrap and a rebuild runbook, with the public nextcloud repo deploying Nextcloud, Valkey and cert-manager over a Cloudflare WARP mesh, plus age-encrypted nightly backups of a self-hosted password manager.
- Shared CI and deployment workflows - The public shared-workflows repo provides reusable workflow_call pipelines for Node and Python test gates, Cloudflare Worker and Kubernetes/Helm deploys, Claude Code review and Chrome/Firefox store publishing, backed by a custom runner image.
- Self-hosted AI workspaces and local inference - The public odysseus project is a FastAPI and JavaScript AI workspace with agents, RAG, MCP, email and calendar, social-update summarises Claude Code sessions into LinkedIn drafts on k3s, and private benchmarks run a Qwen mixture-of-experts model on a consumer GPU via llama.cpp and Ollama.
- Local-first tools for my own workflow - The public deckrun is a TypeScript CLI and browser editor for Markdown slide decks with PDF export, complemented by private tooling that versions Claude Code configuration, skills and hooks behind a gitleaks pre-commit scan, plus planning and ADR automation for a remote desktop product.
- Security data and device alerting - A public fork of the RustSec advisory database with OSV export for cargo-audit, and device-activity-telegram-bot, a Python bot built on httpx and Pydantic that reports device logins and unlocks and can remotely halt machines.
- Android Auto protocol reimplementation - AARE is an open-source Kotlin implementation of the Android Auto phone side, covering the AAP protocol over TLS, Car App Library hosting, media and messaging, and testing against a desktop head-unit simulator.
📡 Currently exploring Local mixture-of-experts LLM inference and Claude Code-driven automation pipelines