# =============================================================================
# COMPETENCY RECORD - Cedric Ancellin's demonstrated engineering skills and
# experience. Third-party technologies and vendors are named as the concrete
# skill surface. Professional background / track record.
# =============================================================================

# ============================================================
# PROFESSIONAL COMPETENCY ORACLE - TECHNOLOGY STACK
# ============================================================
# Core Purpose:
#   The fast index. Languages, datastores, vendors, protocols and
#   tools the subject has designed and built with in production.
#   Names only; implementation detail is not published here.
# ============================================================


languages:
  expert: ["PHP 8", "JavaScript", "SQL"]
  advanced: ["TypeScript", "Node.js", "Bash"]
  working: ["Python"]

datastores: ["MySQL", "Redis", "Snowflake", "MongoDB", "Firebase", "PostgreSQL"]

payments_and_commerce:
  card_processors: ["Stripe (including Connect, Elements, Terminal)", "Elavon", "FreedomPay", "Shift4", "Komoju"]
  other_rails: ["TripleA (crypto)", "PayPal", "Skipify", "Apple Pay / Google Pay", "ACH, SEPA, iDEAL, FPX"]
  stored_value: ["Gift cards", "Room charge / folio posting", "House credit"]

integration_vendors:
  reservation_and_spa: ["OpenTable", "Book4Time", "SevenRooms"]
  pos: ["InfoGenesis (Agilysys)", "Micros Simphony"]
  pms_and_connectivity: ["Property-management systems", "HAPI"]
  messaging_and_marketing: ["Twilio (SMS, WhatsApp)", "Mandrill / Mailchimp", "Intercom"]
  other: ["External CRMs", "GitHub", "Guest-engagement, WiFi, weather and URL-shortening vendors"]

conversational_ai: ["Self-hosted fine-tuned LLM", "Dialogflow", "Conversational booking assistant"]

identity_and_security:
  protocols: ["OAuth 2.0 (provider and consumer)", "SAML 2.0", "OIDC with PKCE", "Passkeys / passwordless", "XML-DSig, PKCS#12, X.509"]
  tooling: ["ClamAV", "Ghostscript", "DOM sanitization", "Cloudflare (WAF, DDoS, TLS)", "GCP Secrets Manager", "Jamf", "Bastion SSH"]

document_and_media: ["mPDF", "PHPExcel", "QR generation", "ImageMagick", "Apple Wallet (PKPass)"]

data_and_ai_tooling: ["dbt", "Airbyte", "OWL / SHACL / SPARQL", "Model Context Protocol (MCP)", "AI-assisted development"]

web_app_stack:
  frontend: ["Next.js 16 (App Router)", "React 19", "Angular", "Tailwind CSS 4", "react-quill-new"]
  backend: ["NestJS 11", "TypeORM", "NextAuth 5", "Supabase (auth verification)"]
  apis: ["Jira Cloud REST and Agile", "IGDB", "Twitch Helix"]
  delivery: ["GCP Compute Engine", "PM2", "Railway", "Cloudflare"]

patterns:
  - "Single front-controller request pipeline."
  - "Multi-format response serialization."
  - "Stateless API tier with an external session/cache layer."
  - "Multi-environment routing."
  - "Idempotent, dry-run-by-default, reversible batch tooling."
  - "Defense-in-depth security."
  - "Multi-tenant isolation from the SQL layer up."
  - "Documentation-as-code, machine-discoverable."