Salah Mohsen

• Modeled the institute's domain in 29 Payload collections: cycles, courses, programmes and cohorts, people kept separate from login accounts, enrollments, events, articles, publications, press and newsletters, with ten architecture decision records behind the hard calls.

• Built role-based access control for super admin, admin, fellow, member and student, with per-role admin views, ownership rules and a draft, review and publish workflow.

• Shipped application forms with private file uploads and an admin review flow that creates the account, person record and enrollment, then sends the acceptance email through Resend, protected by a honeypot and optional Turnstile.

• Designed Spaces, private community areas for community, cohort and course audiences whose access is derived from enrollment and membership records, with posts, comments, reactions, polls, events with RSVPs, moderation, private file serving, notifications and web push.

• Implemented bilingual Typesense search for public content plus a server-mediated private search that re-checks the requester's access on every request.

• Delivered English and Arabic routes with RTL layouts and localized CMS content, a poster-style card system with motion across the site, light and dark themes, and responsive live previews.

• Wrote a Weebly archive importer that turns the old site into reviewable drafts with one redirect per legacy URL, and a security audit with fixes for a draft-preview authorization bypass and an open-redirect case.

• Containerised and deployed on Dokploy behind CI that gates deploys, with PostgreSQL, Cloudflare R2 storage, cookieless PostHog analytics, and Vitest and Playwright coverage.

Open-source career platform for job seekers who want one system instead of a portfolio site, a resume tool, a spreadsheet CRM, and a Gmail inbox.

Public surface: path-based portfolios (/{profileName}) or verified custom domains, with opt-in evidence and a tenant-scoped public GitHub repo browser.

Private dashboard: CRUD for experiences, projects, and stacks; resume PDF import and generation; kanban applications CRM; Career Inbox (Gmail sync, classify, job-digest harvest, reply assist); review queue for AI drafts; settings for profile, domain, invites, connections, AI providers, job preferences, smart rules, and notifications.

Architecture: pnpm monorepo with shared domain contracts in Zod (packages/core), Postgres/Drizzle repositories, typed oRPC APIs, BullMQ workers, and Mastra multi-step AI workflows. MIT, Docker/Dokploy-first, no platform-funded LLM or mail budget.

• Top contributor on a 5-person frontend team (595 of 1,298 commits, about 70% of surviving lines by blame). Authored the initial architecture on Next.js 16 App Router, React 19 and TypeScript: shared UI, form, data-table, command-palette and i18n layers.

• Built a reusable data-table framework on TanStack Table with URL-synced filtering, sorting and pagination through nuqs, and expandable rows.

• Built a schema-driven form system on TanStack Form and Zod with a field registry, reused across the admin, customer, company, center and space modules.

• Standardized the typed REST layer: an Axios fetcher with error normalization, an endpoint registry, TanStack Query queryOptions, server prefetch with hydration and mutation-driven cache invalidation.

• Implemented authentication and authorization: JOSE-encrypted session cookies, middleware token refresh, redirect-after-login, and role-based access with about 188 permissions driving route guards and a permission-gated sidebar.

• Owned the dashboard home with KPI cards and charts, administration (admins and roles), customers and groups, companies, centers with floors, doors and access logs using Google Maps selection, and spaces with types, amenities, layouts and pricing. Contributed to the multi-step booking flow, news with a TipTap editor, and push notifications.

• Delivered English and Arabic interfaces with next-intl, typed messages, RTL direction handling and message-audit scripts, plus a command palette and an FCM-backed notification inbox.

• Codified conventions as Cursor rules and an AGENTS.md used across the team, with Sentry instrumentation, Husky hooks and Bun-based tooling.

• Top contributor on the admin frontend (about 595 of 1,391 commits on the main line) of a Next.js 15, React 19, strict TypeScript and Tailwind 4 app with 98 routes.

• Owned the tenants module (about 94% of its lines), settings (98%), notifications (100%) with an outbound composer and Firebase push, riders (75%), services (60%) and the application shell, and wrote the tenants pattern used as the reference feature structure.

• Standardized the data layer: centralized endpoint contracts, a typed fetcher, TanStack Query queryOptions and mutation helpers across the backend's domains, with server prefetch on detail pages.

• Built the shared form system on TanStack Form and Zod (used across 65 files) and the reusable data-table system with TanStack Table and URL-synced filters through nuqs.

• Implemented authentication and authorization: encrypted session cookies, middleware token refresh, a role and permission matrix editor, and permission-gated sidebar and actions.

• Delivered English and Arabic interfaces with RTL support and typed message files, plus public policy pages with localisation.

• Contributed to drivers, vehicles, routes and shifts with map views, trips, requests, contracts and reports.

• Maintained the team's engineering rules as Cursor rules and Taskmaster docs, with migration guides for pagination and the UI system.

• Top contributor on both frontends: 223 of 620 commits in the dealer dashboard and 154 of 591 in the buyer site, about 46% of surviving source lines in each, working in teams of 8 to 10 contributors.

• Dealer dashboard: main author of inventory (agent and private stock with filters), bidding, leads, settings, sidebar, landing KPIs and the auth and session layer. Buyer site: price history charts, official price lists, car details and my-deals, plus a large share of the shared components.

• Standardized frontend architecture across both apps with feature folders, an API path registry, a shared axios fetcher, ESLint-enforced module boundaries and Cursor rules.

• Built a typed REST layer with TanStack Query queryOptions and, in the buyer site, server prefetch with dehydrate, and schema-first multi-step forms on TanStack Form and Zod.

• Implemented authentication and authorization: encrypted session cookies, token refresh, middleware route protection and permission-gated UI with roles in the dealer dashboard, plus Google and Facebook login in the buyer site.

• Delivered English and Arabic with next-intl, direction switching and RTL-aware styling, with URL-synced filters through nuqs.

• Built ad creation as a multi-step form with presigned S3 media upload and drag-sort ordering, a car comparison of up to four vehicles with a sortable grouped table, and Firebase push notifications.