Aharon Bruchim · Jerusalem
Two years shipping React and TypeScript on the front, Node, Express and MongoDB behind it, inside an elite technology unit. Now moving deeper into AI and LLM engineering: retrieval, agents, and model-based systems that run for real.
Two production systems, documented the way I would want to read them: the problem, the constraints, what I built, and what I traded away.
Identity Provider · OAuth2 Authorization Server
A self-hostable central authentication server in TypeScript, Express and MongoDB — OAuth2 with PKCE, JWKS-published rotating keys, refresh-token rotation with reuse detection, RBAC and a full audit log.
Private repository — source not public
Read the case studyNonprofit Platform for At-Risk Youth
An end-to-end learning platform: a secure video LMS with signed-token playback and per-user moving watermarks, progress tracking, donations, certificates, full Hebrew/English RTL support and WCAG AA compliance.
Private repository — source not public
Read the case studyTools I built because I needed them. One line each — the READMEs say the rest.
A fully-local autonomous coding agent on Ollama: one engine behind a CLI, a browser GUI, a VS Code extension and a Telegram bot.
Layered local RAG for Hebrew and English documents — classify, extract, then SQL or hybrid vector search behind a router.
A RAG pipeline measured against the FinanceBench dataset rather than against vibes.
Claude Code Skills: LangGraph agents, MCP integration and knowledge-graph memory.
A Node.js service template: Express, strict TypeScript, MongoDB, Zod, Winston, Helmet, Docker and Vitest.
An uptime monitor that records only status transitions, so the history stays readable.
S3-compatible file storage with MinIO, MongoDB and Docker Compose.
A microservice template on Bun: Hono, tRPC, MongoDB, Zod and Pino.
Freelance and contract work, scoped so you know what you are getting.
React and TypeScript on the front, Node, Express and MongoDB behind it. Typed end to end, tested, and deployed somewhere you can actually watch it run.
OAuth2 and OIDC flows, token rotation, RBAC, session handling and audit trails. I have built an identity provider from scratch and run it in production.
Retrieval that answers the question actually asked, agents that finish the task, and evaluation so you know when a change made things worse.
The feature that was handed back twice. I would rather learn the thing properly than route around it, which is usually what it takes.
For a decade I studied Talmud twelve hours a day before I wrote a single line of code. It turned out to be the best debugging training I could have asked for.
I take the problems that get handed back. More than once I have cracked something experienced teams had already given up on — not by being faster, but by learning the thing properly instead of working around it. A decade of arguing with a text until it makes sense turns out to transfer directly to a stack trace that makes no sense.
Tell me what you are building. I answer every message.