Bruno Cordeiro

strict mode + noUncheckedIndexedAccess across ~570 files in Link Charts; TS end to end since 2020

ES6+ since 2016 — promises, async/await, closures

10 years following the language's evolution; Laravel 12 in production

Blue/green deploy scripts (176 lines) and operations

Semantic markup and modern CSS (SASS/SCSS, LESS, Tailwind, CSS-in-JS) in production at Link Charts and on client sites

CSR, SSR, SSG, ISR, PPR — applied in corporate systems (G4F: SPA, SSG and SSR routes) and in Link Charts (ISR 300s + revalidateTag)

Controller → Service → Repository — DI by interface, DTOs, Strategy/Registry, Orchestrator, Observer, ADRs; 145 PHP files, ~28k lines at Link Charts

/api/v1 routes with Scramble at Link Charts and Swagger at Basis; correct HTTP semantics and consistent versioning

Eloquent, TypeORM, Prisma, Propel, Lucid (Adonis), DenoDB — the category as a concept, not a memorized library

OOP, SOLID, PSRs, MVC — DI by interface, DTOs (Laravel/NestJS), Strategy, Registry, Observer, Orchestrator

Redis, ISR/cache tags, idempotency (dedup_key), queues, signed webhooks (hash_equals), auth (JWT, OAuth/Auth0), i18n

JWT httpOnly, hash_equals, 16 rate limiters, anti-spoofing (Cloudflare), PII redaction, anti-fraud scoring, LGPD

Integration with gov.br's Login Único (federal SSO/OIDC) in a large-scale public-sector consular system (G4F)

G4F

Auth service separated from the core in a large-scale public-sector consular system (G4F)

G4F

Per-request CSP, HSTS, DOMPurify and hCaptcha on a large-scale public-sector system

G4F

App Router, Server Components, ISR + cache tags, Turbopack at Link Charts; 13/14 and React 17/18 in production at G4F

Foundation of the entire Link Charts frontend, with Server Components

strict mode with noUncheckedIndexedAccess enabled in production at Link Charts

10 features in production at Link Charts

SSR, light/dark themes, custom design system

Formerly React Query — 36 call sites, centralized query keys at Link Charts

Layered form validation across the Link Charts frontend

30 ApexCharts chart components, choropleth/heatmap maps with Leaflet, tables with material-react-table

i18next library — 13 namespaces in production at Link Charts; corporate multi-language i18n at G4F

Metadata API, JSON-LD, programmatic sitemap/robots, llms.txt

next/font, optimizePackageImports, dynamic imports

312 uses of aria-*, prefers-reduced-motion, layout validated at 320px

State management in corporate projects (G4F, Basis)

G4F · Basis

Data fetching and async state sync for the G4F consular system

G4F

CSS-in-JS (Styled Components) and SASS across corporate interfaces (G4F, Basis)

G4F · Basis

GOVBR-DS and jsx-a11y on a multi-language federal public product

G4F

Reactive Vue.js components with Bootstrap/LESS in Laravel admin screens — maintained legacy SPAs for ~3 years

Ordem Social

Utility-first CSS with custom tokens and theme — shipped responsive landing pages

side projects · this site

Declarative entrance and scroll animations on a published solo landing page

side projects

PHP 8.2, in production at Link Charts since 2025

JWT httpOnly, Sanctum, Auth0 token exchange

16 named rate limiters

13 jobs, retry/backoff, dedup_key UNIQUE + insertOrIgnore

Observers, factories, seeders at Link Charts

5 tasks with withoutOverlapping

8 channels, request_id propagated to workers

Google Safe Browsing, Brevo, Auth0, GeoIP MaxMind, Yasumi — third-party services integrated into the Link Charts backend

IP anonymization, account deletion, signed unsubscribe

Complete front+back flow at Link Charts

Public sector (G4F): microservices, gov.br SSO (OIDC), Prisma 6; TypeORM and Passport/JWT in the hotel project backend

G4F · side projects

@nestjs/websockets + socket.io in a large-scale public-sector consular system (G4F)

G4F

REST APIs with Express and AdonisJS (Lucid ORM) for corporate services at G4F

G4F

Type-safe modeling and migrations with Prisma in a NestJS microservice at G4F

G4F

Deno runtime with OAK for routing and DenoDB as ORM in a corporate service at G4F

G4F

Eloquent and Propel ORMs, Swagger docs and PSR standards since 2016; Laravel 8.1 MVC for an internal Basis system

Basis · Ordem Social · Plug Digital

CI ≠ Release, tag-based deploy, rollback via workflow_dispatch, concurrency groups

Immutable images, retention for rollback

Measured downtime: ~5min → 0s; custom bash scripts (176 lines): warm-up, health check, graceful nginx cutover, drain, abort

Multi-stage, Alpine with compiled extensions, 3 compose stacks by lifecycle

Worker process manager at Link Charts

DigitalOcean — nginx reverse proxy/LB, Let's Encrypt, Cloudflare real-ip, ufw

Automated guard (MigrationSafetyTest) in CI

Tail sampling, Grafana Cloud/Alloy, Faro RUM, Pyroscope, dashboards + alert rules as code, uptime probe that opens an issue

918 502 responses → blue/green; --build-arg bug → CI guard; spoofable IP → Cloudflare real-ip

Container orchestration on a large-scale public-sector consular system

G4F

Corporate build and deploy pipelines (Basis, G4F)

G4F · Basis

Container orchestration and private registry in corporate environments

Basis

Linux web server operations, from my own VPS to corporate infra

Link Charts · Ordem Social

Microsoft's boards and CI/CD pipelines on a frontend project at VegaIT

VegaIT

PHPUnit 11 — ~902 tests: unit, feature, snapshot, characterization

Full suite run on SQLite AND against real PostgreSQL 15

Larastan on Laravel, with a versioned baseline

Multi-viewport E2E: 320/375/desktop, 6 projects, authenticated storage state

IP spoofing, rate limiting, queue retry

ESLint --max-warnings=0, Prettier and Laravel Pint blocking CI on Link Charts and on this site

Static quality gate in corporate pipelines (Basis, G4F)

G4F · Basis

Unit tests and API mocking across corporate projects and the solo hotel project

G4F · Basis · side projects

56 migrations, performance indexes, backfill, UNIQUE for idempotency

Cache, queues, sliding-window for viral rank

Custom dialect layer (SqlDateExpr) for SQLite and PostgreSQL

PL/SQL and schema design for corporate databases behind large internal systems

Basis · Transoft

Relational modeling and queries for party-management and legal-case systems

Ordem Social

Spec-driven dev, multi-agent orchestration — ~1,929 solo commits/17 months, keeping 902 tests, PHPStan, E2E gates

A 22KB CLAUDE.md versioned in the repo (agent onboarding), ADRs and postmortems that feed that context, llms.txt on the frontend

Configured MCP servers (browser/Playwright, PostgreSQL, Redis, GitHub, Vercel), git worktrees for isolated agent execution

Husky, commitlint/commitizen, repo-versioned hooks and Conventional Commits across all projects

MADR format; architecture decisions documented in docs/adr/, with versioned diagrams

AdSense Consent Mode v2, Google Ads with conversion tracking, GA4

Brevo/SendGrid — weekly digest, milestone, winback, onboarding

Scrum ceremonies, Kanban boards, and Jira backlog management in corporate teams (G4F, Basis)

G4F · Basis

Stakeholder interviews and functional specs for party-management systems

Ordem Social