What it is
A TypeScript monorepo with an Expo app and a NestJS 11 API on Prisma and PostgreSQL, sharing one Zod contract between the API and the forms.
Security
JWT with rotating refresh tokens, argon2id hashing, rate limiting, per-resource access control and direct-to-S3 uploads.
Testing
Jest, a Supertest access-control matrix and Maestro flows on iOS and Android, all in GitHub Actions. Built AI-first with Claude Code and MCP servers driving the iOS simulator.