Tooling

Everything I can build

This page is the long inventory — every service, system, and technique I've put into production. If you're technical, read it. If you're not, the short version is right below and you can skip the rest with nothing lost.

The short version

Nearly everyone who calls me wants one of these:

  • Take payments and manage subscriptions
  • Book appointments and dispatch a crew
  • Quote a job and send an invoice
  • Give customers a login where their stuff lives
  • Work on a phone with no signal, and sync when it's back
  • Pull data out of the software you already pay for
  • Turn the spreadsheet everything currently depends on into actual software

All of that is in the list below, along with a great deal you'll never need. The list is there so you can check for yourself instead of having to ask.

AI & LLM integration

Anthropic Claude API (server-side SDK)Multi-model routing by taskCost/quality model tieringVision & image analysis pipelinesEphemeral prompt cachingDomain system-prompt librariesStructured JSON output contractsMalformed-response retry logicMulti-turn conversational stateContent-guard pre-screeningNSFW & off-domain rejectionPer-feature AI cost attributionToken usage loggingTemperature & max-token tuningAI-assisted matching engines

Payments, billing & payouts

Stripe Checkout subscriptionsStripe webhooksStripe Connect (Express onboarding)Outbound transfers & disbursementIdempotent payout runsRevenueCat subscription infrastructureUnified multi-app webhook routingEntitlement lifecycle modelingFree-tier quota enforcementTeam & seat-based billingPay-upfront booking flowsRevenue-share payout enginesCompletion-weighted revenue poolsLargest-remainder split mathRecoupable advances with capsInteger-cent money handlingPrice-drift guards against StripeMerchant-of-record modelingMoney-transmission posture & ADRAppend-only obligations ledgersPayout redistribution logicApplication-fee revenue splits

Realtime, audio & mobile

WebRTC peer connectionsWeb Audio APITone.jsBrowser-based DAWMultitrack recording & mixingAudio effects processingReal-time multi-user collaborationiOS & Android app deliveryPush notificationsGPS / geolocation discoveryIn-app messagingShared calendarsProgressive web appsOffline-first mobile capture

Data architecture

PostgreSQLDb2 (LUW)OracleMicrosoft SQL ServerTeradataSupabase PostgresRow-level security policiesSchema-per-tenant multi-tenancyTenant-context middleware injectionTenant isolation designSequential migration managementDatabase triggersWrite-once immutable recordsState-transition guards in SQLServer-authoritative event streamsPer-type dedupe indexingRetention pruningCascade deletionConnection poolingOLTP & OLAP designETL pipelinesData warehousing (Inmon & Kimball)Star & snowflake schemasQuery tuning & explain plansIndex & memory managementHigh availability & clusteringHADR & log shippingBackup, recovery & DR

Authentication & access control

Supabase AuthEmail/password & magic linkGoogle OAuthJWT verification middlewareServer-side session verificationCookie-based SSR sessionsRole-based access controlPer-action authorizationAdmin allowlist gatingService-role key isolationPrivilege-escalation remediationscrypt PIN hashingHMAC unlock cookiesRoute-level middleware gatesGuest & low-friction access tiersNo-public-signup provisioning

Compliance, privacy & safety

COPPA-compliant data modelingVerifiable parental consentConsent versioning & revocationPIN-gated parent controlsData export on requestAccount deletion cascadesFirst-party-only CSPNo-tracker guard testsProfanity filtering & moderationContent takedown workflowsAdmin review queuesExecutable compliance controlsCIS benchmark crosswalksFDA, HIPAA & SOX environmentsBanking audit & regulatory supportTokenized PII vault designStorage isolation hardeningTOCTOU race remediationE-signature & contract locking

Frontend engineering

Next.js App RouterReact 18 & 19TypeScript (strict)Vite SPA buildsReact RouterTailwind v4CSS-variable design tokensMulti-brand theming systemsReact Flow node graph editorsService worker shell cachingClient-side image compressionNative camera capture inputsResponsive layout systemsReduced-motion supportKeyboard & focus accessibilityLoading, empty & error states

Offline & resilience

IndexedDB offline queuesQueue-and-replay on reconnectOptimistic queued-state UINetwork-failure fallbacksDuplicate-submission toleranceDeferred completion notifications

Backend & infrastructure

Express.js on NodeServerless function deploymentVercel hosting & edge configNext.js Server ActionsMultipart upload handlingObject storage bucketsSigned-URL deliveryEntitlement-gated asset servingRate limitingHoneypot spam protectionTransactional email (Resend)SMS & multi-channel fan-outBatch & scheduled jobsEnvironment & secret separationMulti-repo architectureGit submodulesWindows Server, Linux & AIXPowerShell & shell scripting

Testing, CI & quality

Vitest unit testingpgTAP database testingGitHub Actions CISeparate database CI jobsZod schema validationInvariant testsBuild-failing vocabulary guardsArchitecture decision recordsStop-and-verify delivery checkpointsAcceptance-criteria specsObservability & error tracking design

Product engines & domain systems

Ink narrative scriptingCompiled story runtimesStructured-to-Ink compilersPortable dependency-free runtimesSingle-source validatorsBundle import/export with dry-runCondition-aware rule checkingCustom rich-text tokenizersDeclarative unlock rule enginesAchievement & collection systemsProgress aggregationSpaced-repetition schedulingExam & practice-test enginesReadiness scoringCertification content pipelinesJurisdiction-specific content at scaleMatching & recommendation logicMarketplace listing & application flowsNegotiation enginesRatings & reputation systemsBooking & confirmation workflowsVoting & contribution mechanicsGroup & band formationAvailability-based scheduling & assignmentDocument generation from templatesAdmin dashboards & aggregationCSV export

Systems architecture & specification

Multi-tenant SaaS architecture100+ tenant isolation designSubdomain tenant resolutionShared-DB vs per-tenant analysisBuild-vs-buy evaluationVendor selection & scoringPhased build planningCost & effort modelingModule decompositionOpenAPI specification & versioningRate limits, quotas & edge cachingPayments regulatory analysisData model specificationInfrastructure requirements docsVideo streaming architectureCMS & headless commerce evaluationClient technical vetting

Growth, SEO & analytics

Puppeteer build-time prerenderingHeadless Chromium in CIStatic route generationLead capture & funnelsEmail capture with dedupeConversion-oriented landing pagesSocial post automationUsage & cost dashboardsMarketplace health metrics

Game & 3D

Unreal Engine 5 (C++)UCLASS/UPROPERTY class designWorld PartitionLandscape stamp workflowsBiome & path toolingMultiplayer systems designVisual Studio 2022

Commercial & advisory

Financial modelingMulti-scenario revenue models10-year enterprise projectionsCap table modelingMarket selection scoringSeller & deal diligence reviewEntity structuringInvestor & partner decksTerm-sheet draftingOnboarding funnel designPricing & tier designUnit economics analysis

Leadership & delivery

Executive IT strategy & budgetingVendor & consultant managementChange advisory boardsGovernance & SOP authoringTeam leadership up to 18Mentoring & standards settingRequirements gatheringPhased scoping with explicit non-goalsClient handoff documentationITIL v3Lean Six Sigma (Green Belt)

248 capabilities, and the list keeps growing. If the thing you need isn't on it, ask anyway — the answer is usually that I've built something close enough.