Basel Draz

Founder and full-stack developer

Octopus • Autônomo

Dec 2024 - Present • 1 yr 9 mos

I design, build and run a multi-tenant point-of-sale and inventory platform for retail shops, on Next.js and Supabase. Around ninety migrations, live in real shops with real money going through it every day. What I built: - FIFO inventory batches, so every unit sold carries its own purchase price and cost of goods sold is a real number rather than an average. - Recipe-based composite items: a prepared drink or meal deducts its ingredients from stock automatically. - Staff permissions enforced in the database with row level security, not in the interface. Purchase price is hidden from cashiers at the column level, not by hiding it from the screen. - Thermal receipt printing at 58mm and 80mm, tax on the invoice, and a daily close showing sales, expenses, cost of goods sold and profit. - Subscription billing through an online payment provider, with the rule that no endpoint ever accepts an amount from the request body; prices are read on the server. I also run security reviews on it. Three passes over six weeks found six real holes, every one of them past RLS policies that were correct as written. The catalog checks that found them are published as an open-source, read-only SQL script with a full write-up in English and Arabic. That work is the basis of the audit service I offer here.