Open to full-stack engineering roles

Rushil Gorasia

I build the infrastructure other features stand on: identity systems, real-time pipelines, and AI-native products, engineered from spec to production — not stitched together from someone else's SDK.

About

I'd rather build the primitive than import it.

Most of my work starts by asking what's actually happening underneath an abstraction I'm about to reach for — which is how a hackathon polling app turned into real-time state management at speed, and a "Sign in" button turned into implementing the OpenID Connect Authorization Code flow, PKCE, and RS256 token signing from the specification up.

Lately that same instinct has moved toward AI-native products: agentic copilots, semantic search over vector embeddings, and the retrieval, billing, and multi-tenant infrastructure that turn a demo into something people can actually rely on.

Frontend
HTMLCSSJavaScriptReactNext.js
Backend
Node.jsExpresstRPC
Data
PostgreSQLSQLpgvectorDrizzle ORM
Auth & Security
OpenID ConnectOAuth 2.0PKCERS256JWT
Tooling
PythonDockerAzureVercelTurborepo
Selected Work

Projects

Singularity
AI-powered Gmail & Calendar workspace

STACK // Next.js 15 · tRPC v11 · Mastra · pgvector/HNSW

A multi-tenant workspace that unifies Gmail and Calendar across up to three accounts per user, with an agentic AI copilot handling triage, drafting, and bulk actions — backed by a multi-model fallback chain so it keeps working even when one provider doesn't.

  • Multi-tenant Next.js 15 / tRPC v11 architecture with encrypted OAuth token storage and real-time Gmail webhook processing
  • Agentic AI copilot built on Mastra with MCP tool calling, for triage, drafting, and bulk inbox actions
  • Multi-model fallback chain (DeepSeek, Gemini) keeps the copilot resilient to single-provider outages
  • Sub-second semantic search across cached emails and events via PostgreSQL pgvector with HNSW indexing
  • Premium billing tiers via Dodo Payments with webhook-driven subscription management
Axemoth OIDC
Self-hosted OpenID Connect identity provider

PROTOCOL // OAuth 2.0 · OIDC Core 1.0 · PKCE (RFC 7636) · RS256

A production-grade, self-hosted identity provider and SSO platform — a private "Sign in with Google," built from the specification up with no shortcuts on the cryptography.

  • Full OIDC Authorization Code flow with PKCE enforcement — every authorization is cryptographically verified
  • RS256 asymmetric token signing — tokens are verifiable by third parties without a shared secret
  • Standard discovery endpoints (/.well-known/openid-configuration, JWKS) plus a developer dashboard for client registration
  • bcrypt password hashing, single-use auth codes, and CORS protection
  • Deployed on Azure App Service (backend) and Vercel (frontend)
AxeForm
Full-stack SaaS form builder

STACK // Next.js · tRPC · Drizzle ORM · Turborepo

A form builder shipped as a pnpm/Turborepo monorepo, supporting nine field types with dynamic Zod validation, conditional logic, and DFS-based cycle detection so validation graphs can't loop forever.

AxePoll
Real-time polling application

STACK // JavaScript · WebSockets

Live polling and voting with WebSocket-driven state — results update instantly for every participant, with clean handling of concurrent votes on both desktop and mobile.

A few smaller builds and experiments live in the rest of my repos. Explore GitHub ↗
Get in Touch

Let's talk about what you're building.

Open to full-stack roles, collaborations, and conversations about auth protocols, real-time systems, or AI infrastructure.