David Szakacs

I designed and built Arlopass, an open-source zero-trust AI access platform that lets web apps use a user's own AI providers—local or cloud—without ever touching their API keys. The system replaces the insecure "paste your key" pattern with a browser extension wallet, a local native messaging bridge, and a typed SDK that gives developers streaming AI chat in around 10 lines of code. I architected the platform as a TypeScript/ESM pnpm monorepo spanning 15+ packages:
1. A canonical wire protocol with version negotiation and capability scoping
2. A Chrome Manifest V3 extension with consent-gated approval flows
3. A local bridge daemon handling HMAC handshake auth, session keys, anti-replay nonces, and default-deny policy evaluation
4. A pluggable adapter runtime with Ed25519-signed manifests for providers like Ollama, OpenAI, Claude, and Gemini; and React bindings plus a Vercel AI SDK transport layer for seamless framework integration and more.

Key contributions include the dual-enforcement security model (extension preflight and authoritative bridge gate), the signed policy bundle system for enterprise governance, privacy-preserving audit logging with JSONL/OTLP export, and the end-to-end streaming protocol design.

Excalimate is an open-source web application that turns hand-drawn Excalidraw diagrams into keyframe animations. I architected and built the entire product: a React 19 SPA featuring a custom animation engine (opacity, position,
scale, rotation, draw-on effects), a timeline UI with per-element tracks and interpolation curves, and an export pipeline using WebCodecs for MP4/WebM, gif.js for GIFs, and programmatic SVG animation.

A standout feature is the MCP server—a Node.js/Express service with 23 tools that enable AI agents (GitHub Copilot, Claude, and Cursor) to create and animate diagrams programmatically, with a real-time live preview via SSE. I also authored 16 AI skill definitions that dramatically improve output quality for specific diagram types.

Sharing uses end-to-end AES-256-GCM encryption via the Web Crypto API—the server never sees the key. Deployed on Cloudflare Pages/Workers/R2.

STACK
React 19, TypeScript, Zustand, Mantine 8, Tailwind CSS, Excalidraw, Vite, Cloudflare

Created a web end-to-end testing tool with a GUI that makes it easy for the user to create complete test flows without the need for knowledge of testing libraries like Cypress. I have implemented the back end as REST APIs, and the front end was a desktop application written in Next.js and using Electron.

Made a website that visualizes the data from national exams results. The product gathered the data using web scraping techniques and then passed it through a data cleaning pipeline. After processing the information, it was displayed on a website together with graphs and visualizations about it.