Mirza Munawar

Welcome to

Mirza Portfolio

Backend engineer · Node.js · TypeScript · PostgreSQL

I build production backends: multi-tenant APIs, payment and payout flows, and LLM pipelines that verify every citation before they publish.

Scroll to follow the request

Physics lab
Spacetime
Core size ℓ Past 0.77 M the horizon disappears and light passes through the core. Past 0.95 M the shadow goes too.
Spin a = J/M

C++23 · Qt 6.8 · CMake 4.0

Reqloom

Postman is an HTTP client. Reqloom is an API workflow engine.

Describe each actor and endpoint once in YAML, with its prerequisites. Reqloom builds the dependency graph, sorts it, and runs the whole chain from one command: logins, prerequisite calls, then the target, with extracted IDs passed along automatically.

Tests passing
852
Full suite
7.2 s
Release platforms
3
Lines of C++ & QML
~80k

Describe each actor and endpoint once in YAML, with its prerequisites. Reqloom builds the dependency graph, sorts it, and runs the whole chain from one command: logins, prerequisite calls, then the target, with extracted IDs passed along automatically.

Decisions worth asking about

  • The UI boundary is enforced three times

    A CMake link guard, a CI grep gate and a pImpl-only public header surface keep the engine free of Qt UI code. Architectural rules that no machine checks tend to decay.

  • One error vocabulary

    Every public entry point returns std::expected<T, ErrorCode>. Parallel error enums are banned, so a new failure mode extends one list, with is_retryable() built in.

  • CI down from 45–90 minutes to 10–15

    Building Qt from source through vcpkg blew past the free runners' 60-minute cap. Switching to pre-built, signature-checked aqtinstall artifacts fixed it. A dependency choice made on measured cost, not preference.

Source on GitHub Documentation

TypeScript · React 19 · Bun · MongoDB · Tauri

Memento

A notes and credentials vault where the server only ever sees noise.

Everything is encrypted on the device with libsodium (XChaCha20-Poly1305, keys derived with Argon2id) before it leaves. Plaintext and keys never reach the server. One TypeScript monorepo ships a React web app, a Bun/Express API, a Tauri desktop app and a browser extension.

Clients, one monorepo
4
REST route groups + GraphQL
27+
Plaintext on the server
0 B

Everything is encrypted on the device with libsodium (XChaCha20-Poly1305, keys derived with Argon2id) before it leaves. Plaintext and keys never reach the server. One TypeScript monorepo ships a React web app, a Bun/Express API, a Tauri desktop app and a browser extension.

  • Real-time sync without giving up encryption

    Socket.io and MongoDB Change Streams move encrypted changes between devices; Yjs CRDTs resolve collaborative edits automatically.

  • Offline first

    Encrypted local cache in IndexedDB (Dexie) and a PWA service worker, so the vault opens without a network.

  • Serious about sign-in

    WebAuthn passkeys, TOTP two-factor, Google OAuth, rate limiting and a tamper-evident audit log.

Live app Private repository, walkthrough on request.

Python 3.10+ · SQLite · Published on PyPI

PaperTrade‑India

No Indian broker offers a paper-trading API, so I built the broker.

An installable package that simulates NSE and BSE execution the way it actually hits your P&L: statutory fees (STT, GST, stamp duty, SEBI charges), T+1 settlement, tick, lot and price-band rules, slippage and market impact, behind an Alpaca-style API.

Tests, incl. property-based
~540
Market-data providers
15+
Order types, full OCO
5

An installable package that simulates NSE and BSE execution the way it actually hits your P&L: statutory fees (STT, GST, stamp duty, SEBI charges), T+1 settlement, tick, lot and price-band rules, slippage and market impact, behind an Alpaca-style API. 

from papertrade_india import IndiaPaperBroker

broker = IndiaPaperBroker(initial_capital=1_000_000)
order = broker.buy("RELIANCE", 10)
print(order.filled_avg_price, order.fees_paid)

  • Data that fails over instead of falling over

    Per-provider circuit breakers, median aggregation across sources and a first-wins failover feed.

  • A ledger that can't drift

    Thread-safe SQLite in WAL mode, versioned migrations, idempotency keys and an immutable cash ledger with an invariant check, verified by Hypothesis across generated inputs.

  • Built for agents too

    An optional MCP server lets LLM agents trade through tool calls.

Source on GitHub PyPI package Simulated broker. Places no real trades.

More work

  • SnapHaul

    Swift · C · libusb

    Native macOS–Android file transfer. A custom MTP stack in C, a four-stream ADB engine, checksum-verified automated ingest and Finder integration. No Electron.

  • Aereo

    Swift 6 · AVFoundation · SwiftUI

    Hardware-accelerated video wallpapers for macOS, including lock-screen video through user-space Aerial manifest injection. Signed, notarized and on Homebrew.

  • EMERGENCE

    Python · Textual

    Artificial life in the terminal: creatures with neural-network brains learn by reinforcement and evolve by genetic algorithm.

  • Terminal Theatre

    Python

    An ASCII noir game with branching stories: 84 scenes, 60+ choices, 23 endings.

Contact

Enough HTTP. Let's switch to a conversation: email is the fastest way to reach me.

GET /api/v1/mirza-portfolio/contact · Upgrade: human 101 · sealed
based_in
Telangana, India