Rudra Sanandiya

Keystone

Full-Stack SaaS — Client Lifecycle Management Platform

Production-grade multi-tenant SaaS platform with 55 REST APIs, 18 database tables with RLS, atomic lead-to-client conversion, real-time workspace sync, and a three-layer security architecture. Built solo during my internship at Fireflyz Tech.

Next.js 16React 19TypeScriptSupabase PostgreSQLTailwind CSS v4TiptapPuppeteerNodemailerGoogle Drive APISWRZodRecharts

A full-stack SaaS platform for end-to-end client lifecycle management — from lead capture through document generation, project delivery, invoicing, and collections. Independently designed, developed, and delivered during a 6-week internship at Fireflyz Tech. The platform replaces scattered spreadsheets and disconnected tools with a unified, multi-tenant system featuring role-based access control and real-time collaboration.

                      55 REST APIs
                      Powering the entire application
                    

                      18 Database Tables
                      Row-level security on every tenant table
                    

                      Atomic Conversion
                      Lead-to-client in one PostgreSQL transaction
                    

                      7 Document Types
                      Rich-text editor, PDF gen, email & Drive archival
                    

                      Three-Layer Security
                      Middleware auth, API role checks, database RLS
                    

                      Admin Analytics
                      Win rates, lead funnel, CAC, efficiency scoring
                    

                      Real-Time Sync
                      Instant cross-user workspace updates
                    

                      45 Unit Tests
                      Critical business logic coverage
                    

%%{init: {'theme': 'dark', 'themeVariables': { 'background': '#111111' }}}%% graph TD User(["👤 Browser Client"]):::client subgraph FRONTEND["FRONTEND LAYER"] direction TB NEXT["Next.js 16 App Router
React 19 · TypeScript · :3000"]:::edgeN MW["Middleware Auth Gate
Route Protection · Tenant Resolution"]:::edgeN end subgraph API["API LAYER — 55 REST Endpoints"] direction LR subgraph CORE_API["Core Business"] direction LR LEADS["Leads API
11-Status Pipeline"]:::svcN CLIENTS["Clients API
Lifecycle Management"]:::svcN PROJECTS["Projects API
Delivery Tracking"]:::svcN DOCS["Documents API
7 Doc Types"]:::svcN end subgraph SUPPORT_API["Supporting"] direction LR FINANCE["Finance API
Invoicing & Collections"]:::supN ANALYTICS["Analytics API
Dashboards & Reports"]:::supN SETTINGS["Settings API
Team & Tenant Config"]:::supN end end subgraph DATA["DATA & SERVICES LAYER"] direction LR SUPA[("Supabase PostgreSQL
18 Tables · RLS")]:::dbN DRIVE["☁ Google Drive
Document Archival"]:::extN EMAIL["✉ Nodemailer
Email Delivery"]:::extN PDF["📄 Puppeteer
PDF Generation"]:::extN end User --> NEXT NEXT --> MW MW --> LEADS MW --> CLIENTS MW --> PROJECTS MW --> DOCS MW --> FINANCE MW --> ANALYTICS MW --> SETTINGS LEADS --> SUPA CLIENTS --> SUPA PROJECTS --> SUPA DOCS --> SUPA FINANCE --> SUPA DOCS --> PDF DOCS --> EMAIL DOCS --> DRIVE classDef client fill:#1e3a5f,stroke:#3b82f6,color:#dbeafe,stroke-width:2px classDef edgeN fill:#312e81,stroke:#818cf8,color:#e0e7ff,stroke-width:2px classDef svcN fill:#4c1d95,stroke:#a78bfa,color:#ede9fe,stroke-width:2px classDef supN fill:#134e4a,stroke:#2dd4bf,color:#ccfbf1,stroke-width:2px classDef dbN fill:#064e3b,stroke:#34d399,color:#d1fae5,stroke-width:2px classDef extN fill:#164e63,stroke:#22d3ee,color:#cffafe,stroke-width:2px style FRONTEND fill:#1e1b4b,stroke:#4338ca,color:#c7d2fe,stroke-width:2px style API fill:#1a1a2e,stroke:#6d28d9,color:#ddd6fe,stroke-width:2px style CORE_API fill:#2e1065,stroke:#7c3aed,color:#ddd6fe,stroke-width:1px style SUPPORT_API fill:#0f3b3b,stroke:#0d9488,color:#ccfbf1,stroke-width:1px style DATA fill:#0c1f17,stroke:#059669,color:#a7f3d0,stroke-width:2px

Frontend

Next.js 16 React 19 TypeScript Tailwind CSS v4 SWR Recharts Tiptap Editor

Backend & Database

Next.js API Routes Supabase PostgreSQL Zod Validation Row-Level Security

Integrations

Google Drive API Nodemailer Puppeteer PDF Vitest

11-status lead pipeline with validated state machine transitions
Atomic lead-to-client conversion — single PostgreSQL transaction creating project, 5 documents, financials, and team assignments
7 document types with rich-text editing, server-side PDF generation, email delivery, and Google Drive archival
Self-healing document pipeline that auto-reverts stuck operations
Financial engine with server-side computed totals to prevent client-side tampering
Admin analytics: deal/company win rates, conversion funnel, CAC, efficiency scoring, revenue vs cost
Real-time workspace sync via Supabase subscriptions
Three-layer security: middleware auth, API role checks, database RLS
Deployment validation scripts and 11 incremental PostgreSQL migrations
45 unit tests across critical business logic paths

Heavenly

Microservices Property Rental Platform

Distributed rental platform with 7 microservices, API Gateway, event-driven RabbitMQ workflows, Razorpay payments, Kubernetes deployment & Prometheus/Grafana observability.

Node.jsExpress 5MongoDBRedisRabbitMQDockerKubernetesRazorpayCloudinaryPrometheusGrafana

A distributed property rental platform re-architected from a monolith into 7 Node.js/Express 5 microservices with an API Gateway and server-rendered BFF. Features JWT authentication with Redis token blacklist, event-driven workflows via RabbitMQ, Razorpay payment integration, Cloudinary media management, MapLibre GL JS maps, and a full admin dashboard. Orchestrated with Docker Compose for local dev and Kubernetes (Minikube) for production-shape deployment with NGINX Ingress, HPA autoscaling, and a complete Prometheus + Grafana + Loki observability stack.

                      Microservices
                      7 services + Gateway + BFF
                    

                      JWT Auth
                      Access/Refresh + Redis blacklist
                    

                      Event-Driven
                      RabbitMQ async workflows
                    

                      Payments
                      Razorpay integration + refunds
                    

                      Kubernetes
                      Minikube + Ingress + HPA
                    

                      Observability
                      Prometheus + Grafana + Loki
                    

%%{init: {'theme': 'dark', 'themeVariables': { 'background': '#111111' }}}%% graph TD User(["👤 Browser Client"]):::client subgraph EDGE["EDGE LAYER"] direction TB BFF["BFF · Express + EJS\n:8080"]:::edgeN GW["API Gateway\nJWT · Rate Limit · CORS · :3000"]:::edgeN end subgraph SERVICES["APPLICATION SERVICES"] direction LR subgraph CORE["Core Domain"] direction LR AUTH["Auth\n:3001"]:::svcN LST["Listing\n:3002"]:::svcN REV["Review\n:3003"]:::svcN BKG["Booking\n:3004"]:::svcN end subgraph SUPPORT["Supporting"] direction LR MDA["Media\n:3005"]:::supN SRC["Search\n:3006"]:::supN ADM["Admin\n:3007"]:::supN end end subgraph INFRA["DATA & MESSAGING LAYER"] direction LR RDS[("Redis\nCache · Token Blacklist")]:::dbN MDB[("MongoDB\nDocument Store")]:::dbN RMQ{{"RabbitMQ\nheavenly.events"}}:::mqN end CLD["☁ Cloudinary\nImage CDN"]:::extN RPY["💳 Razorpay\nPayment Gateway"]:::extN %% ── Primary Traffic Flow ── User --> BFF BFF -->|REST| GW GW --> AUTH GW --> LST GW --> REV GW --> BKG GW --> MDA GW --> SRC GW --> ADM %% ── Data Persistence ── AUTH --> MDB LST --> MDB REV --> MDB BKG --> MDB %% ── Cache & Session ── AUTH --> RDS GW --> RDS SRC --> RDS %% ── Async Event Flows ── AUTH -.->|"user.*"| RMQ LST -.->|"listing.*"| RMQ REV -.->|"review.*"| RMQ BKG -.->|"booking.*"| RMQ RMQ -.->|consumes| SRC %% ── External Integrations ── MDA -->|Upload API| CLD BKG -->|Payment API| RPY %% ── Styles ── classDef client fill:#1e3a5f,stroke:#3b82f6,color:#dbeafe,stroke-width:2px classDef edgeN fill:#312e81,stroke:#818cf8,color:#e0e7ff,stroke-width:2px classDef svcN fill:#4c1d95,stroke:#a78bfa,color:#ede9fe,stroke-width:2px classDef supN fill:#134e4a,stroke:#2dd4bf,color:#ccfbf1,stroke-width:2px classDef dbN fill:#064e3b,stroke:#34d399,color:#d1fae5,stroke-width:2px classDef mqN fill:#451a03,stroke:#fbbf24,color:#fef3c7,stroke-width:2px classDef extN fill:#164e63,stroke:#22d3ee,color:#cffafe,stroke-width:2px style EDGE fill:#1e1b4b,stroke:#4338ca,color:#c7d2fe,stroke-width:2px style SERVICES fill:#1a1a2e,stroke:#6d28d9,color:#ddd6fe,stroke-width:2px style CORE fill:#2e1065,stroke:#7c3aed,color:#ddd6fe,stroke-width:1px style SUPPORT fill:#0f3b3b,stroke:#0d9488,color:#ccfbf1,stroke-width:1px style INFRA fill:#0c1f17,stroke:#059669,color:#a7f3d0,stroke-width:2px

graph TD BROWSER[Browser - heavenly.local]:::client INGRESS[NGINX Ingress Controller]:::ingress subgraph EDGE_K["Edge Tier"] K_BFF[BFF Deployment - 8080]:::edgeK K_GW[Gateway Deployment - 3000]:::edgeK end subgraph BACKEND_K["Backend Tier"] K_AUTH[Auth - 3001]:::svcK K_LST[Listing - 3002]:::svcK K_REV[Review - 3003]:::svcK K_BKG[Booking - 3004]:::svcK K_MDA[Media - 3005]:::svcK K_SRC[Search - 3006]:::svcK K_ADM[Admin - 3007]:::svcK end subgraph INFRA_K["Infrastructure Tier"] K_MDB[(MongoDB - 10Gi)]:::dbK K_RDS[(Redis - 1Gi)]:::dbK K_RMQ[(RabbitMQ - 5Gi)]:::mqK end subgraph PLATFORM_K["Platform Resources"] K_CM[ConfigMap - heavenly-config]:::cfgK K_SEC[Secret - heavenly-secrets]:::cfgK K_HPA[HPA - CPU 70%]:::cfgK K_NP[NetworkPolicy - firewall]:::cfgK end subgraph METRICS_K["Metrics Pipeline"] K_PROM[Prometheus - Metrics]:::monK K_GRAF[Grafana - Dashboards]:::monK K_AM[Alertmanager]:::monK end subgraph LOGS_K["Logging Pipeline"] K_LOKI[Loki - Logs]:::monK K_PT[Promtail - DaemonSet]:::monK end BROWSER --> INGRESS INGRESS --> K_BFF K_BFF --> K_GW K_GW --> K_AUTH K_GW --> K_LST K_GW --> K_REV K_GW --> K_BKG K_GW --> K_MDA K_GW --> K_SRC K_GW --> K_ADM K_AUTH --> K_MDB K_LST --> K_MDB K_REV --> K_MDB K_BKG --> K_MDB K_AUTH --> K_RDS K_GW --> K_RDS K_SRC --> K_RDS K_AUTH --> K_RMQ K_LST --> K_RMQ K_REV --> K_RMQ K_BKG --> K_RMQ K_SRC --> K_RMQ K_PROM -.-> K_BFF K_PROM -.-> K_GW K_PT -.-> K_LOKI K_GRAF --> K_PROM K_GRAF --> K_LOKI K_PROM --> K_AM K_CM -.-> K_BFF K_SEC -.-> K_BFF K_HPA -.-> K_BFF K_HPA -.-> K_GW classDef client fill:#1e3a5f,stroke:#3b82f6,color:#dbeafe,stroke-width:2px classDef ingress fill:#1e3a5f,stroke:#60a5fa,color:#dbeafe,stroke-width:2px classDef edgeK fill:#312e81,stroke:#818cf8,color:#e0e7ff,stroke-width:2px classDef svcK fill:#4c1d95,stroke:#a78bfa,color:#ede9fe,stroke-width:2px classDef dbK fill:#064e3b,stroke:#34d399,color:#d1fae5,stroke-width:2px classDef mqK fill:#451a03,stroke:#fbbf24,color:#fef3c7,stroke-width:2px classDef cfgK fill:#1f2937,stroke:#6b7280,color:#d1d5db,stroke-width:1px classDef monK fill:#4c0519,stroke:#fb7185,color:#ffe4e6,stroke-width:2px

BFF Service :8080

Server-rendered EJS UI, user-facing routes, browser sessions

BFF Tier · Online

API Gateway :3000

JWT validation, rate limiting, CORS management, service routing proxy

Gateway Tier · Online

Auth Service :3001

User profiles, authentications, JWT lifecycle, Redis-backed blacklist

Core Service · Online

Listing Service :3002

Property listings metadata, CRUD operations, host verification

Core Service · Online

Review Service :3003

Property review submission, aggregated rating computations

Core Service · Online

Booking Service :3004

Reservations logic, Razorpay APIs, automatic cancel & refunds

Core Service · Online

Media Service :3005

Cloudinary uploads/deletes, responsive image formatting

Support Tier · Online

Search Service :3006

Listing full-text search, geocoding via Redis caching

Support Tier · Online

Admin Service :3007

Cross-service admin aggregations & management panel dashboard

Support Tier · Online

MongoDB :27017

Persistent document store database for persistent service data states

Database Tier · Online

Redis Store :6379

Data caching layer, JWT blacklist store, geocoding lat/lng cache

Database Tier · Online

RabbitMQ :5672

Asynchronous event message broker routing event-driven workflows

Message Broker · Online

Frontend & BFF

EJS Views ejs-mate MapLibre GL JS OpenStreetMap

Core Backend

Node.js Express 5 Redis Cache RabbitMQ Events MongoDB

DevOps & Cloud

Docker Compose Kubernetes NGINX Ingress HPA Autoscaling

Observability

Prometheus Grafana Loki Logs Promtail Daemon

Cloud Integrations

Razorpay Gateway Cloudinary Media

Kubernetes Cluster Local Minikube production-shape deployment

Containerization Docker Compose orchestrating local dev lifecycle

Ingress Controller NGINX Ingress managing reverse-proxy and path routing

Horizontal Scaling HPA scaling listing & auth pods based on CPU limits

Metrics Stack Prometheus scraping all pods + custom dashboards in Grafana

Centralized Logging Loki and Promtail DaemonSet aggregation for all stdout logs

Relay

Zero-Knowledge E2EE Real-Time Chat Application

End-to-end encrypted messaging where the server never sees your messages — powered by NaCl cryptography & real-time Socket.IO.

ReactNode.jsExpress.jsMongoDBSocket.IONaClBIP39

A production-ready, full-stack real-time messaging platform with true zero-knowledge end-to-end encryption. Messages are encrypted client-side using NaCl box (X25519 + XSalsa20-Poly1305) before transmission — the server never sees plaintext. Features BIP39 recovery phrases, contact request system, and real-time presence.

                      Zero-Knowledge E2EE
                      NaCl box + BIP39 recovery
                    

                      Real-Time
                      Socket.IO + typing indicators
                    

                      Arcjet Security
                      Bot detection + rate limiting
                    

                      Email Verification
                      OTP + password reset flow
                    

DocuVault

Cloud Document Management System with AI-Powered RAG

AWS-powered document vault with drag & drop uploads, smart sharing, real-time analytics, and an AI Document Q&A system using Retrieval-Augmented Generation — powered by Groq's Llama 3.3 70B.

ReactNode.jsFastAPIMongoDBGroq AIQdrantAWSHuggingFace

AWS-powered document vault with drag & drop uploads, smart sharing via password-protected links, real-time access analytics, and an AI document Q&A system using Retrieval-Augmented Generation (RAG). Ask natural language questions about your documents and get cited answers powered by Groq's Llama 3.3 70B LLM.

                      AI Document Q&A (RAG)
                      HuggingFace BGE-M3 embeddings, Qdrant vector search, Groq Llama 3.3 70B with source
                        citations
                    

                      AWS Production Architecture
                      Amplify + Elastic Beanstalk + EC2 (c7i-flex.large) + CloudFront CDN + S3 + CloudWatch
                    

                      Smart Sharing
                      Password-protected links with granular permissions, expiration controls, and access
                        analytics
                    

                      Multi-Format Support
                      In-app preview for 18+ formats with intelligent AI processing pipelines per file type
                    

%%{init: {'theme': 'dark', 'themeVariables': { 'background': '#111111' }}}%% graph TD User(["👤 End Users"]):::client subgraph CDN_FRONTEND["FRONTEND & EDGE LAYER"] AMP["⚛️ AWS Amplify\nReact Frontend · Auto-deploy"]:::edgeN CF["🌐 AWS CloudFront\nCDN & HTTPS Reverse Proxy"]:::edgeN end subgraph BACKEND_SERVICES["APPLICATION LAYER"] EBS["🟢 AWS Elastic Beanstalk\nNode.js Express API · t3.micro"]:::svcN EC2["🧠 AWS EC2\nFastAPI AI Service · c7i‑flex.large"]:::aiN end subgraph DATA_PERSISTENCE["PERSISTENCE & PIPELINES"] MDB[("🍃 MongoDB Atlas\nM0 Shared Cluster")]:::dbN S3[("📦 AWS S3\nDocument Files Store")]:::dbN CW[("📊 CloudWatch\nJSON Application Logs")]:::logsN end subgraph AI_SERVICES["AI & VECTOR LAYER"] QDR[("🔍 Qdrant Cloud\nVector Database")]:::vectorN HF[("🤗 HuggingFace\nBGE‑M3 Embedding Service")]:::aiExtN GROQ[("⚡ Groq Cloud\nMeta‑Llama 3.3 70B LLM")]:::aiExtN end %% ── Application Traffic & Operations ── User -->|HTTPS| AMP User -->|HTTPS| CF CF -->|HTTPS → HTTP| EBS EBS -->|HTTP| EC2 %% ── Backend Data Persistence ── EBS --> MDB EBS --> S3 EBS --> CW %% ── AI RAG Pipeline ── EC2 -->|HTTP| QDR EC2 -->|HTTP| HF EC2 -->|HTTP| GROQ %% ── Styles ── classDef client fill:#1e3a5f,stroke:#3b82f6,color:#dbeafe,stroke-width:2px classDef edgeN fill:#312e81,stroke:#818cf8,color:#e0e7ff,stroke-width:2px classDef svcN fill:#4c1d95,stroke:#a78bfa,color:#ede9fe,stroke-width:2px classDef aiN fill:#5b21b6,stroke:#c084fc,color:#faf5ff,stroke-width:2px classDef dbN fill:#064e3b,stroke:#34d399,color:#d1fae5,stroke-width:2px classDef logsN fill:#1f2937,stroke:#6b7280,color:#f3f4f6,stroke-width:2px classDef vectorN fill:#134e4a,stroke:#2dd4bf,color:#ccfbf1,stroke-width:2px classDef aiExtN fill:#451a03,stroke:#fbbf24,color:#fef3c7,stroke-width:2px style CDN_FRONTEND fill:#1e1b4b,stroke:#4338ca,color:#c7d2fe,stroke-width:2px style BACKEND_SERVICES fill:#1a1a2e,stroke:#6d28d9,color:#ddd6fe,stroke-width:2px style DATA_PERSISTENCE fill:#0c1f17,stroke:#059669,color:#a7f3d0,stroke-width:2px style AI_SERVICES fill:#2c1b0c,stroke:#d97706,color:#fef3c7,stroke-width:2px

Frontend

React Vite Tailwind CSS

Backend

Node.js Express.js MongoDB Atlas

AI Microservice

FastAPI Python Groq AI HuggingFace Qdrant

Cloud Infrastructure

AWS Amplify Elastic Beanstalk EC2 S3 CloudFront CloudWatch

JWT authentication with bcrypt encryption
Real-time AI processing status tracking
Drag & drop file uploads to S3
Chat interface with markdown rendering
Vector similarity search with user isolation
Automatic document chunking and embedding
Access analytics dashboard
XSS protection and input sanitization
Cascade deletion for share links
Mobile-responsive glassmorphism UI

Frontend AWS Amplify (auto-deploy from Git)

Backend API AWS Elastic Beanstalk (t3.micro, auto-scaling)

AI Service AWS EC2 Ubuntu (c7i-flex.large, systemd)

CDN AWS CloudFront (HTTPS proxy)

Database MongoDB Atlas (M0 Free Tier)

Storage AWS S3 (20GB)

Vector DB Qdrant Cloud (1GB Free Tier)

Monitoring AWS CloudWatch (JSON logs)

PetPooja Revenue Intelligence

AI-powered Restaurant Analytics Platform

AI-driven analytics that boost restaurant revenue with smart ordering via Llama 3, multi-channel voice commands & dynamic pricing.

Node.jsExpress.jsReactMongoDBLlama 3Twilio

Full-stack platform for restaurant analytics, AI-powered ordering, and revenue optimization. Features a custom analytics engine using BCG classification and association rule mining, AI ordering with Meta-Llama 3, and multi-channel ordering via Twilio Voice & Web Speech API.

                      AI Ordering
                      Meta-Llama 3 + fuzzy search
                    

                      Analytics Engine
                      BCG + association mining
                    

                      Multi-channel
                      Chat, Voice, Phone (Twilio)
                    

                      Revenue Boost
                      Dynamic pricing + upsell
                    

FleetFlow

Modular Fleet & Logistics Management System

Smart logistics hub with automated fleet state machines, fuel analytics, ROI tracking & role-based access for 4 user types.

ReactNode.jsExpress.jsMongoDBRechartsJWT

A centralized, rule-based digital hub for delivery fleet management. Features automated vehicle/driver state machines, cargo weight validation, license compliance checks, fuel efficiency analytics (km/L), vehicle ROI tracking, and CSV/PDF export — all with role-based access for 4 user types.

                      Fleet Lifecycle
                      Automated state machine
                    

                      RBAC
                      4 roles with middleware guards
                    

                      Analytics
                      ROI, cost/km, fuel efficiency
                    

                      Validation
                      Cargo weight + license expiry
                    

Diffie-Hellman Key Exchange

Cryptographic Protocol Simulation in C++

Secure key exchange from scratch — implementing the classic DH protocol with modular arithmetic & clean CMake architecture.

C++CMakeCryptographyModular Arithmetic

A modular C++ implementation of the Diffie-Hellman key exchange protocol. Simulates how two parties establish a shared secret over an insecure channel without revealing private keys. Features manual modular exponentiation, clean header/source separation, and cross-platform CMake build support.

                      Key Exchange
                      Discrete logarithm problem
                    

                      Math Engine
                      Manual modular exponentiation
                    

                      Build System
                      CMake cross-platform
                    

                      Clean Architecture
                      Header/source separation
                    

About Me.

Projects.

Keystone

Heavenly

Relay

DocuVault

PetPooja Revenue Intelligence

FleetFlow

Diffie-Hellman Key Exchange

Skills & Expertise.

Languages

Databases

Frontend

Backend

Core CS

Tools

Experience.

Software Developer Intern

Teaching & Community Volunteer

B.Tech in Computer Science & Engineering

Class XII (PCM)

Achievements.

Tata Imagination Challenge 2025

HACKaMINeD Hackathon

LeetCode

Codeforces

Get In Touch.