Multi-tenant contact management SaaS with workspace isolation, member access, and password-protected guest share links.

• Implemented PostgreSQL Row Level Security (RLS) and Supabase Auth for secure, multi-tenant data isolation.
• Built mobile-first search, favorites, and share flows for households and small businesses.

AI-powered GitHub repository discovery tool that turns natural-language briefs into ranked repository results.

• Built keyword extraction, multi-strategy search, README enrichment, and streaming API responses.
• Integrated Gemini and OpenAI with provider abstraction, cost controls, and a stateless architecture.

Chrome extension for uploading images, videos, and files from the web directly to Google Drive.

• Implemented a persistent upload queue that survives Manifest V3 service worker restarts.
• Designed a storage provider interface with Google Drive as the first integration.

Internal admin dashboard for portfolio operations, including share pages, hire forms, leads, and approvals.

• Shared a Supabase database with the public portfolio for hire, share, and lead workflows.
• Built manager draft-to-admin publish flows with role-based access control and real-time inbox updates.

Production portfolio website with PWA support, theme customization, motion-driven UI, and on-site AI chat.

• Built a semantic design system, scroll animations, and performance-focused marketing pages.
• Implemented public share pages and hire intake on a shared Supabase backend.

Portfolio voice assistant with server-minted ephemeral Gemini Live tokens and Z-dark noir UX on ai.zohaibnawaz.dev.

• Minted single-use Live auth tokens server-side so API keys never reach the browser.
• Aligned system prompts and read-only memories with the main portfolio hiring narrative.

Registry-first catalog to browse UI effects, preview them in an isolated app, and copy validated source.

• Split catalog and preview runtimes so WebGL/R3F demos cannot crash the main site.
• Shipped effect:validate scaffolding and disk loaders backed by a shared manifest schema.

Offline Pakistani CNIC validation and parsing library with checksum rules and dual ESM/CJS packaging.

• Implemented weighted mod-10 checksum and province-aware parse paths with Vitest coverage.
• Published tree-shakeable builds with explicit non-NADRA scope for privacy-sensitive forms.

Reusable AI SaaS foundation with workspaces, SSE assistant, secure attachments, and pgvector knowledge retrieval.

• Shipped chat idempotency, magic-byte uploads, and workspace-scoped RAG with injection-aware prompts.
• Split platform into @znpak packages so future vertical apps ship config—not duplicated auth or orchestration.