I'm a software engineer based in Saudi Arabia. I build things end-to-end — from the database schema and the API to the UI and the infrastructure that runs it all. Most of what I make is either a production SaaS product or an AI tool that solves a specific, real problem.
A loyalty platform built for the Saudi market. Merchants issue and manage loyalty points through a branded portal; customers track their balance, tier status, and transaction history through a separate portal. The whole system runs on AWS — Fastify on Lambda, DynamoDB, CloudFront — managed with Terraform and deployed as a monorepo. I designed the data model, built both dashboards in Next.js, and wrote all the infrastructure.
A product discovery and aggregation platform for Saudi e-commerce. Merchants on Salla and Zid connect their stores and their products surface in a single unified shelf — searchable, filterable, and sorted by what's actually trending. The goal was to give small Saudi merchants the kind of visibility that usually requires a paid ad budget.
A developer tool for anyone using AI coding agents. It indexes every Claude Code session — every tool call, file edit, and decision — into a local SQLite database you can query however you like. The idea came from my own frustration of watching agents repeat the same mistakes across sessions with no memory of what went wrong last time.
An Arabic-speaking navigation assistant for visually impaired users, built with zero-shot vision-language models. The Arabic-first design was intentional — most accessibility tools in this space assume English. This started as a university project and ended up being something I was genuinely proud of shipping.
A RAG-powered support companion for drug awareness, using Llama 3.1. Built to feel like a conversation rather than a lookup table — the goal was approachability for people who wouldn't otherwise seek out information on their own.
Bug fixes and features shipped to production open-source projects:
| Project | What I fixed / added |
|---|---|
| module-federation/vite | Fixed startup crash on acyclic shared-singleton graphs by generalizing the eager-vs-lazy workspace singleton predicate ✅ merged |
| perses/perses | Fixed provisioning silently writing resources to non-existent projects; ensured projects are always sorted before their children in same-batch provisioning |
| perses/perses | Fixed percli dac build -d crashing on directories containing non-package main Go files |
| CodeWithCJ/SparkyFitness | Fixed food search returning 500 when Open Food Facts returns pagination fields as strings instead of numbers |
| OpenCTI-Platform/connectors | Fixed CVE connector rate-limiter bursting at every backfill chunk boundary by preserving request history across asyncio.run() calls |
| OpenCTI-Platform/connectors | Fixed taxii-post connector forwarding author identity objects even when delete_created_by_ref is enabled |
| netscaler/ansible-collection-netscaleradc | Fixed cspolicylabel_cspolicy_binding failing with NITRO error "Required argument missing [labelName]" |
| konflux-ci/mintmaker | Fixed renovate-config ConfigMap changes being silently ignored until pod restart by dropping the process-lifetime singleton cache |
| hashview/hashview | Fixed search export crashing on two compounding name errors: wrong variable passed to export_results and strIO vs str_io throughout |
| leanprover/vscode-lean4 | Fixed infoview display settings (e.g. "reverse tactic state") being ignored for goals rendered inside diagnostic messages |
| lugassawan/rimba | Fixed clean --merged force-deleting freshly-created worktrees that had no own commits |
| hungson175/vnfin | Fixed GoldApiSource silently coercing date-only strings into midnight-UTC timestamps for the updatedAt freshness field |
| dns3l/dns3l-core | Fixed DELETE /api/v1/crt/<cert> reporting failure on successful deletion due to misplaced nil-check in DeleteCertificatesAllCA |
| murongg/markra | Fixed numeric chapter prefixes (e.g. ## 1. Overview) being stripped from heading outlines and breaking outline navigation |
| kensanata/mastodon-archive | Fixed save() printing "Backing up" but never actually creating the backup file on the very first save |
| excaliburjs/Excalibur | Fixed PointerEventReceiver event arrays growing unbounded (memory leak) when PointerSystem is removed from a scene |
| Borewit/music-metadata | Fixed ID3v2.3 frames being parsed with the v2.4 bit layout, corrupting APIC cover art frame data |
| Borewit/music-metadata | Fixed ADTS files with sampling-frequency escape index reporting negative bitrate and sampleRate: -1 |
| mfarragher/obsidiantools | Fixed UnicodeDecodeError during vault gather swallowing the filename of the offending file |
| mfarragher/obsidiantools | Fixed URL fragments in markdown links (e.g. #hot-module-replacement) being parsed as spurious tags |
| chrisrogers37/storydump | Fixed Cloudinary cleanup silently stopping after 500 uploads by paginating through all result pages |
| OpenNingia/l5r-character-manager-3 | Fixed AttributeError crash on reload when a saved character had pending wildcard skill choices |
| pewdiepie-archdaemon/odysseus | Fixed web search sources never appearing in agent mode due to looking up the wrong key in the tool result dict |
| SebastianNagl/benger-platform | Fixed cost estimate over-counting judge calls ~200× due to wrong runs multiplier and metric-keyed skip set |
| bookorbit/bookorbit | Fixed container startup crash when POSTGRES_PASSWORD contains URL-reserved characters like # |
| puddletag/puddletag | Fixed FLAC cover art being written with width: 0 / height: 0 by deriving real pixel dimensions from image bytes at write time |
| superegodev/superego | Fixed Markdown field onChange coercing "" to null even for non-nullable fields |
| OneSignal/onesignal-vue3 | Fixed init() hanging forever on browsers without Web Push support or when the SDK script fails to load |
| Dave-London/Pare | Fixed parseLabelList crashing with "Unexpected end of JSON input" when gh label list matches zero labels |
| Just-Bamford/Stellar-Royalty-Splitter | Added inline validation for basis point inputs that previously accepted any out-of-range value without error |
| kmich/ha_ws_core | Fixed blocking synchronous manifest.json reads inside the HA event loop and wrong state_class for wind direction sensor |
| blakeembrey/change-case | Fixed changeKeys destroying Date and other non-plain objects by incorrectly treating them as plain objects to recurse into |
| coqui-ai/TTS | Fixed server.py crashing on directory-based models (xtts_v2, bark, tortoise) by passing model_dir instead of a None config path |
| joewalker/loop-the-loop | Fixed $-special-pattern corruption in expandPrompt by using the function-replacement form of replaceAll |
| jerryhillRVA/BlinkV2 | Added missing workspaceName validation (required, max 100 chars) on POST /api/onboarding/sessions |
| brooksmcmillin/mcp-authflow | Replaced assert guards (stripped under python -O) with explicit RuntimeError in Redis authentication paths |
| PracticalMind/graver | Fixed changes() outputting a misleading +0 / -0 diff for identical versions instead of a clear "No changes" message |
| banisterious/obsidian-charted-roots | Fixed calendar showing events from wrong years by missing a year equality check in getEventsForMonth |
| AlsoTheZv3n/tldraw-fix | Fixed three primitive bugs: args spread in Timers, wrong axis check in Vec.Slope, and read-after-write in Vec.cross |
| pallets/click | Added missing skipif markers to surrogate-filename tests that failed on non-UTF-8 filesystems |
| scrapy/scrapy | Fixed pathlib.Path feed URIs being URL-encoded, breaking %-format specifiers in filenames |
| aio-libs/aiohttp | Fixed BodyPartReader.read() returning bytearray instead of bytes, breaking JSON serialization |
| marshmallow-code/marshmallow | Fixed get_value raising TypeError on out-of-range integer indexes instead of returning the default |
| open-telemetry/opentelemetry-js | Fixed timeInputToHrTime misclassifying epoch-ms timestamps as relative readings due to clock skew |
| open-webui/open-webui | Fixed silent failure when LLM calls a non-existent tool name — now returns structured error feedback |
| sveltejs/language-tools | Fixed optional properties completing without ? in the completion label |
| dask/distributed | Replaced wall-clock boundary in get_task_stream context manager with a monotonic append index |
| mozilla/pilo | Added inactivity timeout to LLM stream consumption, preventing silent hangs on stalled providers |
| Lightning-AI/litData | Fixed lexicographic chunk ordering in train_test_split corrupting datasets with 10+ chunks |
| elevenlabs/packages | Fixed PingEvent.ping_ms type to allow null; added missing Ping wrapper to exports barrel |
| excaliburjs/Excalibur | Fixed per-particle z config being ignored when ParticleTransform.Global is set |
| unjs/ofetch | Fixed instanceof guards running after value.buffer check in isJSONSerializable |
| apache/solr-orbit | Added fallback to Cores API when delete-collection runs against standalone (non-cloud) Solr |
| openwisp/openwisp-notifications | Fixed get_user_email_preference ignoring the notification type default for org-less shared targets |
| barebaric/rayforge | Fixed ValueError crash when deleting the currently active machine |
| snw-mint/fluent-new-tab | Fixed hardcoded English <title> not being wired into the extension's i18n system |
| go-via/via | Added reason label (client/shutdown/ttl) to the via.sse.disconnect metrics counter |
| NEAR-DevHub/trezu | Fixed bulk payment amounts ~1000× too small when input used comma as thousands separator |
| pewdiepie-archdaemon/odysseus | Added GET /api/history/stats endpoint for zero-config token and session usage aggregation |
| 0b01001001/spectree | Fixed NameError crash on TYPE_CHECKING-only return annotations in annotations=True mode |
| OWASP/cve-lite-cli | Added 100% test coverage for validate.ts; extracted pluralize utility across 8 files |
| repowise-dev/repowise | Fixed structlog output polluting --format json stdout |
| 404-PF/commit-echo | Fixed git error swallowing, dollar-sign corruption in prompt expansion, bullet-list parsing |
