About
I build secure, multi-tenant backend systems and ship them to production.
At Folowise I architected and built FoloEngine, a licensed multi-tenant commerce engine (Laravel 12, PHP 8.4) shipped as a Composer package + control-plane and now powering multiple live storefronts and a marketplace.
I work across Java / Kotlin (Spring Boot, Ktor), Laravel / PHP, and TypeScript / Node, owning architecture end to end: API contracts, data modeling, HMAC-signed APIs, RBAC, security hardening, CI/CD, and releases.
I work in an AI-driven workflow (Claude Code, Codex, Cursor) and build AI into products: RAG and tool-using agents. Bilingual EN / AR.
Selected work
FoloEngine
Multi-tenant licensed commerce engine powering multiple live storefronts and a marketplace. Composer package + control-plane with HMAC-signed APIs (nonce/replay protection), a fail-closed capability gate over 19+ features, and append-only loyalty / gift-card ledgers.
EchoFlow
Free, offline English and Arabic voice to text desktop app for Windows. Local Whisper (whisper.cpp via whisper-rs) runs on CPU, no cloud and no paid APIs. Push to talk plus a global hotkey, translate / clean / prompt modes, searchable transcript history, and one click auto update. Tauri 2 Rust core with a React / TypeScript webview.
Folowise Souq
Multi-vendor local marketplace on three-role RBAC (admin / store-owner / customer) with a store-approval workflow, one-order-per-store checkout split, verified-buyer reviews, and search APIs. Live with real orders.
FoloPrint
Custom-apparel storefront and the flagship FoloEngine host: variable / bundle products, tiered pricing, COD / CliQ payments, Continue-with-Google, Web Push, bilingual EN/AR. Lighthouse SEO 100, CI/CD to VPS.
qrfolo
Dynamic QR + URL-shortener SaaS with geo / device / language targeting and split testing. Sync click counting with an async analytics consumer (NATS → TimescaleDB) and a redirect-rules engine. 230/230 tests green.
FoloPrint Design Studio
Printful-class browser editor that places artwork and text on garments and generates print-ready files plus realistic mockups, with a shared geometry package keeping editor and server output in parity. Server SVG → sharp render pipeline with a concurrency limiter.
Pet E-Commerce
Pet-supply store delivered in two builds: WordPress / WooCommerce and a Laravel rebuild on FoloEngine. The Laravel build was the first production tenant proving the engine: engine-wired catalog, a 16-page owner admin, and license / capability provisioning. AR-first RTL + SEO.
Spring Boot JWT Starter
Production-leaning auth backend: stateless JWT, role-based access, single-use refresh-token rotation with reuse detection, and per-IP rate limiting. 28 tests + green CI.
URL Shortener
Short links with a Redis-cached redirect hot path and click analytics. Postgres is the source of truth; Redis serves cache-aside lookups and an atomic counter. 18 tests + green CI.
Java 21 Auth Starter
The same hardened auth baseline rebuilt in modern, record-driven Java 21 with no Lombok. Docker, CI, and a full integration suite verified against real Postgres.
folowise.com
Bilingual EN/AR corporate site for the Folowise consultancy and its Academy: localized routing with RTL, server-rendered pages, optimized media, and full SEO / AEO with JSON-LD.
BuildNova
Client construction website built and maintained on WordPress + Elementor: responsive pages with targeted custom CSS, plus full structured QA, logging UI issues by severity and re-testing after each fix.
Stack
Languages
- JavaJVM
- KotlinJVM
- PHP 8.4Laravel
- TypeScriptNode
- SQLPostgres
Backend & Arch
- Spring Boot / KtorJVM
- Laravel 12 / FilamentPHP
- REST · JWT / Sanctumauth
- HMAC signing · RBACsecurity
- Multi-tenant enginesarch
Data & Infra
- PostgreSQL / MySQLdata
- Redis / TimescaleDBcache · TS
- Docker · GitHub ActionsCI/CD
- Nginx · Linux VPSdeploy
- Stripe · Sentrypay · obs