CodePilot
Controlled AI coding workflows with bounded changes, repair attempts, and verification tied to the exact workspace revision.
BUILD · AUTOMATE · IMPROVETRIPOLI, LEBANON
Malek El Najjar/ 2026
I build websites
and software
that saves time.
I’m Malek, a full-stack developer and Computer Engineering student. I build web applications, automations, and AI integrations. My projects include a lead dashboard, a coding agent, and tools for email and calendar workflows.
WORKING WITHNext.jsReactPythonPostgreSQLn8nOpenAI
MALEK.DEV / SYSTEMS PORTFOLIO ONLINE
FIELD NOTES / 001TRIPOLI · LB
Ideas into working systems.
From the first interface to the integrations, automation, and verification behind it.
Explore the buildsFLAGSHIP SYSTEMS03CodePilot · AutoFlow · OpsPilot
LIVE CLIENT WORK01B&R Auto Repair
LOCATIONLBTripoli · Remote worldwide
OPEN TO REMOTE WORKWEB / AUTOMATION / AI
WEBfull-stack products
AUTOn8n · Make · Zapier
APIREST · webhooks · integrationsPYPython · bots · tooling3×Arabic · English · French
01 / SELECTED PRODUCTS
Built to work.
Designed to last.
Three production-minded systems, built around real workflows, reliable integrations, and clear user control. Explore a demo or dig into the engineering.
AutoFlow
Lead intake, structured AI scoring, secure API write-back, and retry-safe notifications coordinated through n8n.
OpsPilot
AI-proposed actions with human approval, permission checks, verified provider writes, and a persistent audit trail.
REAL SYSTEMS. DOCUMENTED LIMITS. INTERACTIVE DEMOS.Go deeper into the engineering ↘
REAL CLIENT WORK / 2024—NOW
B&R Auto Repair
A live website for B&R Auto Repair & Transmission Center in Minnesota. Customers can browse services and find the shop’s contact details.
02 / TECHNICAL DEEP DIVES
WEB APPLICATIONS · AUTOMATION · AI
Under the hood.
Proof, not promises.
AGENTIC SOFTWARE ENGINEERING
CodePilot
A coding agent that edits files, runs configured checks, and attempts repairs when validation fails.
TypeScriptNext.jsPostgreSQLPrismaDockerOpenAIAnthropicGitHub Actions
Configured checks. Validation commands come from trusted workspace configuration, not model-controlled arguments.
Edit limits. File, line, byte, and repair-attempt budgets are checked before mutation.
Verification records. Verification is persisted only when the exact validated workspace and config still match.
CodePilotExplore demo ↗
Inspect the patch. Follow the failure and repair.
How the system works
RUN / DEMO-001VERIFICATION TRACE
Inspect repositoryREAD ONLY
Apply bounded edit2 FILES
Validation failedEXIT 1
Repair patch1 / 3
Validation passedEXIT 0
Revision reboundHASH MATCH
workspaceRevisionHash
62c7e3d19a0b…9af1
✓ VERIFIED
AI AUTOMATION / BUSINESS OPERATIONS
AutoFlow
A lead operations platform where n8n coordinates intake, AI scoring, authenticated write-back, and outbound notifications.
n8nNext.js 16React 19Neon PostgresPrisma 7OpenAIDiscordResend
Lead processing. A webhook enters n8n, gets validated, scored through structured AI output, written back through an authenticated internal API, then routed to notifications.
Duplicate prevention. Notification paths are idempotent so a workflow retry does not duplicate outbound alerts.
Read-only demo. The browser demo is synthetic and read-only, with no path to production data or side effects.
AutoFlowExplore demo ↗
See the lead, AI analysis, and complete activity trail.
How the system works
WORKFLOW / LEAD-INGESTLIVE PIPELINE
01Leadwebhook intake
02n8norchestration
03AIstructured scoring
04APIsecure write-back
05ADiscordHOT lead alert
05BEmailevery lead
IDEMPOTENT NOTIFICATIONSSTRICT JSON OUTPUTSECRET-AUTH API
AI OPERATIONS CONTROL PLANE
OpsPilot
An AI operations app that connects CRM, Gmail, and Google Calendar, with approval checkpoints for actions that change data.
Next.jsTypeScriptPostgreSQLOpenAIGmailGoogle CalendarCRMAudit Trail
Permission checks. Tool registration, agent visibility, integration state, workspace policy, and human approval are checked before execution.
CRM, email, and calendar. One task can search CRM, read mail, draft a response, pause for approval, and schedule a meeting.
Verified writes. External writes are checked against a fresh provider read and recorded in an append-only audit trail.
OpsPilotExplore demo ↗
Review the action before the system executes it.
How the system works
CONTROL PLANE / ACTION-42POLICY TRACE
MODELproposesgmail.createDraft
→
POLICYchecksallowed + connected
→
HUMANapprovesexact rendered input
→
SYSTEMexecutesprovider adapter
MODEL_PROPOSALgmail.createDraft proposed
POLICYapproval required
USERapproved
SYSTEMexecuted + verified
PROFILE
A LITTLE CONTEXT
Computer Engineering at BAU.
I’m currently studying Computer Engineering at Beirut Arab University. Outside university, I spend most of my time building websites, automations, bots, integrations, and small software tools.
Before freelancing, I worked customer-facing jobs in finance, technology retail, and hospitality. That experience still affects how I build: the interface and workflow have to make sense to the person using them.
Freelance Web & Automation DeveloperWebsites · AI workflows · bots · integrations
B.E. Computer Engineering · BAUBeirut Arab University · Tripoli
Smart Gate + BOB FinanceTechnology sales · customer service · cashier operations
Qortoba RoasteriesCustomer support
CAPABILITIES
AI / AGENTSOpenAI API · Anthropic / Claude · Claude Code · tool calling · structured output · prompt engineering
AUTOMATIONn8n · Make · Zapier · workflow state · retries · idempotency · human approval
INTEGRATIONSREST APIs · JSON · webhooks · OAuth · Gmail · Google Calendar · Discord · email
APPLICATIONTypeScript · JavaScript · React · Next.js · Node.js · Python · FastAPI
DATA / DELIVERYPostgreSQL · Prisma · SQL · Git · GitHub Actions · Docker · Vercel · testing · CI/CD
LANGUAGESArabic · English · French
CONTACT