Flagship · Solo build
LeavePulse - SaaS platform
A ~40-service platform built single-handedly: a typed public BFF over a gRPC service mesh, hybrid RBAC/JWT auth, dual realtime websocket gateways, billing with payment-provider webhooks, and ClickHouse-backed observability.
Architecture notes
- 01
Typed public BFF (Litestar + msgspec) generating its own OpenAPI over an internal gRPC mesh
- 02
Auth: hybrid RBAC + JWT/JWKS, Argon2id with peppering, Snowflake IDs, short-lived websocket handshake tokens
- 03
Auth service also owns token exchange, JWT introspection, JWKS distribution and audience-scoped WebSocket credentials for high-risk paths
- 04
Two realtime gateways (client + agent) with a Discord-style handshake and NATS JetStream fan-out
- 05
Fleet/control separates desired releases from observed host state, with pinned internal gRPC contracts and an enrolled Rust control agent
- 06
Billing with merchant-API integration, webhooks, subscriptions and event-driven order lifecycle
- 07
Cross-platform desktop launcher in Rust + Tauri 2 + Vue 3, with an xtask monorepo and Android target
- 08
SDK-first: a public contract package with generated SDKs in Python, TypeScript and Rust
- 09
Designed a LeaveHosting overlay network around stable participant addresses, WireGuard and BGP routing; implementation is staged after the control and billing planes