---
title: Everything here survived production.
description: The tools, frameworks, and infrastructure I reach for daily.
section: vault
tags: [uses, stack]
genre: reference
stability: stable
lastUpdated: 2026-04-17
url: https://fardiniqbal.com/docs/vault/stack
---


Nothing is here because it's popular — only because, after trying the
alternatives, it's what I kept reaching for.

## Editor & Terminal [#editor--terminal]

**Cursor + Claude Code** — Claude Code for thinking and building. Cursor
for seeing and debugging. One AI-native CLI, one AI-native editor —
between them, every mode of development is covered.

**Warp Terminal** — GPU-rendered, block-based output, AI-suggested
commands. The terminal reimagined for how developers actually work.

**Biome** — One Rust binary replaces ESLint and Prettier. Fifteen times
faster. Formats and lints in a single pass. Zero config drift.

## Frontend [#frontend]

**Next.js 16 + React 19** — Server Components, Server Actions, App
Router. A full-stack React framework that lets me ship without
maintaining a separate API server.

**Tailwind CSS v4** — Utility-first CSS with OKLCH color tokens. Version
4 runs native CSS — no PostCSS chain, just an import.

**Framer Motion** — The animation library I reach for when movement
needs to feel intentional. Enter, exit, scroll-driven, layout — all
declarative.

**shadcn/ui + Radix** — Not a component library — a collection of
accessible primitives I own and shape to fit each project.

## Backend & Data [#backend--data]

**Rails 8.1** — Powers Tiny Thoughts. Convention over configuration,
Turbo for real-time, Solid Queue for background work. Mature,
opinionated, proven.

**Convex** — Powers Tiny Time Keeper. Real-time database with TypeScript
schemas, automatic WebSocket subscriptions, and built-in scheduling.

**PostgreSQL (Neon)** — For everything that touches patient data.
Serverless Postgres with branching, autoscaling, and a HIPAA BAA.
Drizzle for type-safe queries.

**Bun** — Package management and script execution. Faster installs,
native TypeScript, and a runtime that stays out of the way.

## Infrastructure [#infrastructure]

**Vercel** — For Next.js apps. Push code, get a deployment. Tiny Time
Keeper runs production at zero dollars a month.

**Fly.io** — For Rails and anything that needs a persistent server.
Global edge deployment with volumes and built-in Postgres.

**GitHub Actions** — Lint, typecheck, E2E test, deploy. Every push runs
the gauntlet. Nothing reaches production without passing.

## AI & Tooling [#ai--tooling]

**Claude Code + Custom Skills** — Thirty-plus custom skills for
research, code review, and workflow automation. The AI doesn't just
assist — it remembers, specializes, and improves.

**Google Gemini 2.5 Flash** — Powers the Email Scraper. A six-hundred-line
extraction prompt that understands healthcare referrals. Processes 150+
per month at near-zero cost.

**WebLLM / WebGPU** — Powers TinyToes Auditor. A 3.8B-parameter model
running entirely in the browser. The AI never sees the cloud. Patient
data never leaves the device.

**Playwright** — End-to-end testing across every production app. Five
hundred thirty-seven tests on Tiny Time Keeper alone. Visual regression,
cross-browser, mobile viewports.

## Security & Compliance [#security--compliance]

**Splunk (SIEM)** — Security event monitoring from NYCHA. Log
aggregation, correlation rules, and the discipline of knowing what
normal looks like so you can spot what isn't.

**CrowdStrike Falcon (EDR)** — Endpoint detection and response.
Real-time threat analysis and incident response — the security
equivalent of watching every door at once.

**HIPAA Compliance Stack** — Row-level security, AES-256-GCM encryption
at rest, audit logging, credential lockout, 2FA. Over five thousand
logged events on Tiny Steps alone.