Skip to content
View mahmud035's full-sized avatar
🎯
Focusing
🎯
Focusing

Block or report mahmud035

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
mahmud035/README.md

Md. Mahamudul Hasan Pavel

AI-native Full-Stack Developer  ·  React · TypeScript · Node · MongoDB

Portfolio LinkedIn Resume Email X


About

Full-stack developer with 2+ years building and shipping production-grade, type-safe web applications — I architect, build, and operate a live UK e-commerce platform end to end, solo. I care about clean feature-driven architecture, API contracts that break TypeScript at compile time (not runtime), and payment systems resilient enough to survive a forced processor migration with zero downtime.

  • Currently building: an AI support/knowledge SaaS (RAG over MongoDB Atlas Vector Search + Gemini) and a real-time live-auction platform (Socket.io + Redis)
  • Focus: React 19 · TypeScript · RAG pipelines · real-time systems · payment architecture
  • Open to: full-stack roles (local + remote) and freelance work

Featured Projects

Halal Aura — Premium Halal Fragrance E-Commerce (UK)

React 19 · TypeScript · Node · Express 5 · MongoDB · TanStack Query v5 · Tailwind v4 · Square · Vercel · Railway

  • Architected a provider-agnostic payment layer that absorbed two processor migrations (Stripe → Mollie → Square) with zero schema changes, containing a forced shutdown to a 4-day driver swap — storefront never down.
  • Built and operate the entire three-service platform solo — an Express / MongoDB API plus a React storefront and admin dashboard — with subdomain-scoped HTTP-only-cookie auth, guest checkout, and real production orders.
  • Engineered idempotent payment processing with retrying MongoDB transactions, an in-transaction PAID re-check, and a send-then-mark email pattern to prevent duplicate charges and confirmation emails under webhook replay.
  • Enforced a feature-driven architecture across all three codebases with frontend types mirroring API responses, so any contract change breaks at TypeScript compile time rather than in production.
  • Achieved Lighthouse Accessibility 100, SEO 100, Best Practices 100 across storefront routes, with desktop Core Web Vitals in Google's "Good" range (LCP 1.94s, INP 88ms, CLS 0.04).

Live →  ·  Case Study → (case study — source private)

রাঁধুনি (Recipe-Note) — AI Recipe Extractor

React 19 · TypeScript · Google Gemini · Express 5 · Mongoose · Zod · Docker · GitHub Actions

  • Shipped a full-stack AI app end-to-end — React + Express / MongoDB API — that turns Bengali YouTube cooking videos into editable, structured recipes via Google Gemini, for a real non-technical user on a $0 inference budget.
  • Designed a fault-tolerant asynchronous job pipeline (fire-and-forget + client polling) with wall-clock timeouts, status-gated race guards, and startup orphan-recovery, so a hung or rate-limited AI call can never crash the server.
  • Anchored the system on a single Zod schema serving four consumers (AI response, Mongoose model, API envelope, and client type), so backend changes break the frontend at compile time, not runtime.
  • Owned split-origin deployment: multi-stage Docker image → GitHub Actions → GHCR → self-hosted box behind a Cloudflare Tunnel, with auto-deploying CI/CD, an atomic daily-budget guard, and per-IP rate limiting.

Live →  ·  Code →  ·  Infra Docs →

Mini ERP — Role-Based Inventory & Sales Management

React 19 · TypeScript · Express 5 · MongoDB · TanStack Query v5 · Socket.IO · Zod · Tailwind v4 · Vercel · Railway

  • Engineered a fully DB-driven RBAC layer resolved per request behind a single authorization guard with zero hardcoded role names, so editing a role's permission set takes effect on the user's next request — no re-login, no redeploy.
  • Made multi-line sales transactional and race-safe with a Mongoose session and a guarded atomic stock decrement per line item, so two sales racing for the last unit resolve all-or-nothing with server-computed totals — a failed line rolls the entire sale back, never a phantom decrement.
  • Solved first-party cookie auth across two different-origin deployments (Vercel + Railway) with a same-origin /api/* proxy and a single-flight refresh interceptor that queues concurrent 401s and replays each once — then authenticated the WebSocket, which can't ride that proxy, with an in-memory access token: one auth model, two transports.
  • Delivered real-time low-stock alerts over Socket.IO scoped to a permission-gated room only product:update holders join, with the broadcast isolated from the committing sale transaction so a socket failure can never delay or roll back a sale.

Live →  ·  Code →

Aston CS Research Portal — Research Discovery Platform

React 19 · TypeScript · Express 5 · MongoDB · TanStack Query v5 · Zod

  • Modeled co-authorship as an interactive force-directed collaboration graph over a computed aggregation — deduping mirror author-pairs by a sorted canonical key and weighting each edge by shared-publication count.
  • Structured a feature-driven full-stack architecture mirroring frontend features 1:1 to backend modules with a shared typed API contract, so any response-shape change breaks TypeScript at compile time, not runtime.
  • Wired debounced keyword search spanning faculty and publications in a single round-trip, with case-insensitive backend matching, Zod-validated params, and highlighted matches showing why each result surfaced.

Live →  ·  Code →

More shipped work, live demos, and case studies on my portfolio →


Tech Stack

What I use

  • Frontend: React 19 · TypeScript · Tailwind CSS v4 · TanStack Query v5 · React Hook Form · Axios · Vite · Motion
  • Backend: Node.js · Express 5 · MongoDB · Mongoose · REST APIs · JWT (HTTP-only cookies) · Zod
  • Payments / Media / AI: Square · Stripe · Mollie · Cloudinary · Google Gemini
  • DevOps & Tools: Docker · GitHub Actions (CI/CD) · Git · Vercel · Railway · Postman · Figma · Linux
  • Testing: Vitest · React Testing Library

Also worked with: PostgreSQL · Prisma · Python · Firebase · Supabase


GitHub Stats

Md. Mahamudul Hasan Pavel's GitHub stats GitHub streak

Most used languages

Pinned Loading

  1. halal-aura halal-aura Public

    A live, UK-based premium halal fragrance store serving UK customers, with international fulfilment built in — built and operated end-to-end as a three-service system (storefront, admin, API).

  2. recipe-note recipe-note Public

    A single-screen web app that turns Bangla cooking videos into structured recipe notes, built for one real, non-technical user — a Bengali home cook on a phone — and run end-to-end on a $0 hosting a…

    TypeScript 4 1

  3. mini-erp-client mini-erp-client Public

    Role-aware Inventory & Sales ERP frontend — React 19 + TypeScript SPA with dynamic RBAC, TanStack Query, and real-time Socket.IO low-stock alerts.

    TypeScript

  4. aston-cs-research-portal aston-cs-research-portal Public

    A full-stack, department-specific research discovery platform for the Aston University Computer Science Department.

    TypeScript

  5. practices practices Public

    A structured, self-directed engineering curriculum — C, Python, JavaScript, TypeScript, React, Next.js, Node.js, Docker, Cloudinary, DSA, testing, and full-stack applied projects.

    TypeScript 1

  6. devops-lab devops-lab Public

    Self-hosted homelab + zero-click CI/CD pipeline on a borrowed 2-core laptop for $0 — sanitized ops docs, architecture, and real debugging war-stories.

    Mermaid