P-41
WorkingFull Stack Developer
September 2025 – Present
Remote (Remote)
Technologies & Tools
- Next.js
- NestJS 11
- TypeORM
- PostgreSQL
- TypeScript
- Tailwind CSS
- Redux
- Vitest
- Playwright
- Supertest
- Swagger
What I've done
- Built the Synemi community management platform end-to-end — frontend with reusable UI components and backend API following layered architecture with clear separation of concerns.
- Designed and implemented granular permission system with token-based authentication, role-based guards, and view/edit/admin access levels enforced across all API endpoints.
- Built a full document manager with tree navigation, search/sort/filter, bulk move, drag-and-drop, conflict rename, and per-row permission-scoped access.
- Implemented authentication flows including secure token and refresh cookie handling, switch-persona, invitation system with auto-accept, and registration pipelines.
- Created 50+ reusable UI components with consistent patterns, shared mutation helpers, and standardized loading/empty/error states across all features.
Project: Synemi
Full-stack community management platform.
- Web: responsive UI with reusable and feature components, state orchestration, use cases, data repositories, and server routes.
- API: layered architecture with auth guards, permission guards, data mappers, database repositories, API documentation, and end-to-end tests.
Authentication & Session Model Epic
- Web: Middleware-based session validation, automatic redirect on expiry, and centralized auth state.
- API: Authentication endpoints with credential validation, secure token and refresh cookie handling, session refresh/logout/switch-persona, registration for multiple user types, and forgot/reset password flows. Structured error handling surfaces clear status codes.
Invitation Flow Epic
- Web: Invitation landing page with validate and accept UX, centralized invitation state, and login auto-accept.
- API: Invitation endpoints scoped to each association with token-based auth and role-based permission checks. Edit access required for create/bulk/resend. Public paths for validate, accept, and register.
Document Manager Epic
- Web: Document management layer with tree navigation, search/sort/filter, bulk move, drag-and-drop, preview, and conflict resolution UX.
- API: Document endpoints with granular view/edit/admin access per association. Operations: folder create, file upload with conflict handling, paginated listing, rename, bulk move, path resolution, and delete.
Architecture Request Epic
- Web: Architecture request management with dynamic forms, file attachments, draft support, and staff workflow UI.
- API: Architecture request endpoints with comments, settings, categories, voting, and expiry handling. Transactional operations, field validation, response snapshots, skip-to-voting, and audit logs. Comprehensive end-to-end test coverage.
Permissions & Route Access Epic
- Web: Permissions layer loads user permissions through a use case, server route, and API call. Centralized permission state with access-level checks, admin bypass, and route-level redirect for unauthorized users.
- API: Role-based permission guard enforces none/view/edit/admin access levels consistently across all endpoints.
Reusable UI Epic
- Feature work sits on a shared layer of reusable UI primitives (buttons, dialogs, tables, loaders, inputs) with consistent coding standards, and domain-specific feature screens that compose those primitives. Cross-feature helpers include shared mutation utilities, toast notifications, and consistent loading/empty/error patterns.
Testing
- Web: Unit tests on use cases, repositories, and context; Playwright browser-based tests for end-user flows.
- API: End-to-end test framework with data loaders against a dedicated test database; HTTP-level tests against the real API surface; co-located test files at the presentation layer; pre-commit and pre-push hooks run tests, lint, and build.
