Projects

Modern portfolio website built with Astro featuring internationalization (EN/ES/PT), View Transitions for SPA-like navigation, AOS animations, and comprehensive SEO with Open Graph and JSON-LD structured data. Deployed on Netlify with CI/CD.

Django-based interactive wizard guiding higher education institutions through NSSE (National Survey of Student Engagement) data analysis. Built 8-step guided workflow with session-based progress tracking, dynamic PDF generation with xhtml2pdf, and email delivery via SendGrid. Manages hierarchical content branching across 16 institutional challenges with 73 comprehensive tests.

Enterprise-grade open-source PHP library for Canvas LMS API integration with 85% API coverage. Architected using Active Record + DTO patterns with PSR-12 compliance. Achieved 95%+ test coverage with 964 tests and 4,430 assertions.

Spec-gated CLI factory: point it at any REST API and it forges a complete, production-grade Go + Cobra command-line tool — OS keyring auth, named profiles, a resilient client with adaptive rate limiting, an MCP server, an agent guard, CI/CD, and cosign-signed releases with Homebrew and Scoop packaging. It rides the native /goal loop of Claude Code or Codex and drives the build to a deterministic acceptance gate (make verify), so done means provably done, not asserted done. Used to build tgctl and lsqueezy and to harden n8nctl and alegra-cli.

A transport-agnostic channel for Claude Code that turns external events into agent turns. It opens a local, secret-gated /inject endpoint, so any process (a cron, a file watcher, another agent) can POST an event and have it show up as a turn in a running session. No polling: the session sleeps for free and reacts only when something real happens. Injected events arrive marked as system data, not commands, which is the built-in defense against prompt injection. Implemented as an MCP stdio server with per-session state files and cross-platform process handling.

Powerful command-line interface for Canvas LMS built with Go. Features OAuth 2.0 with PKCE authentication, system keyring integration, multi-instance support, adaptive rate limiting, and 280+ commands covering all Canvas LMS resources. Includes interactive REPL mode with command history and completion.

Command-line interface for the Alegra accounting API, built with Go and the same architecture as Canvas CLI. Covers most of the API (contacts, items, invoices, payments, bills, reports, and DIAN/SAT electronic invoicing) with OS keyring credential storage and a --dry-run flag on every command. Destructive actions can be locked behind hooks so an AI agent cannot run them, and it ships with a Claude Code skill so agents use it correctly from the first try.

Fast, single-binary Go CLI for the n8n workflow-automation API that manages workflows, executions, and credentials across many instances via named profiles with API keys stored in the OS keyring. Treats workflows as code with GitOps apply, lint, diff, and convert, snapshots and promotes workflows across instances (backup, restore, sync), and lets AI agents drive n8n safely through an MCP server, an agent guard, and a lint-enforcing proxy. Distributed via Homebrew and Scoop with cosign-signed releases.

gh-style command-line tool for the Telegram Bot API, built with Go: send messages and media, manage chats, members, webhooks, and the bot command menu, and poll updates with table/JSON/YAML/CSV output. Supports named profiles for multiple bots with tokens stored in the OS keyring, and ships an MCP server plus an agent guard so AI agents can drive Telegram safely. Distributed via Homebrew and Scoop with signed releases.

Command-line tool and live event stream for Slack, built with Go. Connects over Socket Mode or RTM, records every event to a local SQLite store, and adds search, tail, and stats over that history. Credentials live in the OS keyring, output is scriptable (table/json/yaml with a --jq filter), and it ships an MCP server plus an agent guard so AI agents can drive Slack safely. Built with the cliwright playbook.

Command-line interface for the full Chatwoot API (144 operations): conversations, contacts, agents, teams, inboxes, reports, and automations, plus backup/restore and cross-instance sync. Built in Go with named profiles, keyring auth, scriptable table/json/yaml output, an MCP server, and an agent guard so AI agents can drive Chatwoot safely. Built with the cliwright playbook.

Claude Code channel that bridges a Telegram bot to a live Claude Code session: drive a persistent agent from your phone with text, polls, buttons, media, reactions, and tool-permission approvals. Implemented as a small MCP stdio server that gates senders through pairing or an allowlist and runs every Telegram operation through the tgctl CLI, so it reimplements no Bot API logic and never holds the token itself.

Comprehensive personal finance management application designed for contractors in Colombia. Features multi-currency tracking, credit card debt optimization, tax calculations, and financial goal planning with React frontend and FastAPI backend.

AI-powered chatbot platform for ACUE using hybrid RAG search with vector similarity and BM25 keyword matching. Features automated knowledge base ingestion, visual workflow engine with n8n, security guardrails, and multi-bot support powered by Google Vertex AI.

Self-serve digital invitation SaaS targeting the Spanish-speaking LATAM market. Astro 5 SSR + React 19 islands (Three.js, motion). AI stack on Vertex (Gemini + Imagen 4 Fast) and DeepInfra — in-builder Asistente with patch / undo / image-edit tools, step-by-step creation wizard, inspire prompt, and paste-and-parse guest importer; circuit breaker, cost caps, PII filter, per-tier rate limits. Data-driven payment router via capability matrix: Wompi for COP (card / PSE / Nequi / Bre-B QR) plus Lemon Squeezy internationally, hybrid subscription × per-event model with reconciliation cron and past_due webhook. Feature-flag system (ai / payment / kill-switch / experiment) with admin toggle and audit log. Custom domains via DNS verifier + Traefik auto-TLS. PostgreSQL + Drizzle (forward-only migrations, audit triggers), Better-Auth, R2 storage, @vercel/og share previews, Sentry + Pino observability. 4-layer permissions (auth → role → resource → action) with a capability dictionary and a scoped DB factory that injects the host filter at query time. Vitest (unit) + Playwright (e2e against a Postgres 17 service); pre-commit gate runs lint-staged (ESLint + Prettier), typecheck, and units. Staged CI: typecheck + build + a Drizzle journal monotonic guard → e2e → zero-downtime rolling deploy on green main (Coolify Dockerfile pack with a container HEALTHCHECK, deploy coalescing so only the current HEAD ships, and automatic rollback if a migration fails while the old container keeps serving). Self-hosted on a VPS.