# Anurag Gupta — Software Engineer

> End-to-end software engineer across product, infrastructure, and applied AI systems. Scaled systems at a YC-backed startup, built open-source tooling for scientific workflows, and spoken internationally on cloud interoperability.

## About

Anurag Gupta (also written anuragxd; canonical domain https://anuragxd.com) is a software engineer based in India. He has scaled systems at Farmako (YC S20), built platform infrastructure for biomedical research at Pacific Analytics, and maintains open-source tooling for scientific workflows. He is a Google Summer of Code contributor (2021) and mentor (2022-2025), and has spoken at the GA4GH Plenary Meeting in Sweden on federated systems and cloud interoperability.

## Links

- Website: https://anuragxd.com
- GitHub: https://github.com/anuragxxd
- LinkedIn: https://www.linkedin.com/in/anurag-gupta-1201/
- Email: me@anuragxd.com

## Pages

- [Home](https://anuragxd.com/): https://anuragxd.com/index.md
- [Work](https://anuragxd.com/work): https://anuragxd.com/work.md
- [Projects](https://anuragxd.com/projects): https://anuragxd.com/projects.md
- [Blogs](https://anuragxd.com/blogs): https://anuragxd.com/blogs.md
- [Developers](https://anuragxd.com/developers): https://anuragxd.com/developers.md

## Blog posts

- [Managing Kubernetes from my phone](https://anuragxd.com/blogs/crow-kubernetes-from-your-phone): Crow is a native SwiftUI iOS client for Kubernetes. mTLS via PKCS#12, generic CRD browsing, WebSocket log streaming, and RBAC-gated mutations.
- [End-to-end user identity across a research platform with Istio, OPA, and token exchange](https://anuragxd.com/blogs/zero-trust-auth-istio-opa-keycloak): How we made the user's JWT travel through every service-to-service call, across Kubernetes and HPC, using mesh-level validation, per-service OPA policies, and chained RFC 8693 token exchange.
- [Building a workflow execution service from scratch in Go](https://anuragxd.com/blogs/building-conquest): Conquest implements GA4GH WES/TES on Kubernetes. Adapter pattern for multi-language support, Postgres state machines, and the file staging problem.
- [A filesystem-to-S3 sync daemon that doesn't poll](https://anuragxd.com/blogs/redrush-filesystem-s3-sync): RedRush uses inotify/kqueue for event-driven uploads to S3-compatible storage. Debouncing, recursive watch registration, and the Kubernetes sidecar pattern.
- [Using Gemini to list gemstones on Etsy for my mom](https://anuragxd.com/blogs/gemstone-listing-generator): Structured output from Gemini's multimodal API, JSON schema constraints, marketplace-safe description generation, and automated product image grids.
- [I wrote the same pipeline in Nextflow, Snakemake, and WDL](https://anuragxd.com/blogs/nextflow-snakemake-wdl): Three tiny repos, one variant-calling workflow, and what each language's execution model actually does to your code.
- [Building a TUI database browser with React (yes, React)](https://anuragxd.com/blogs/dataslip-tui-postgres): DataSlip is a terminal-first Postgres client built with Bun, React, and OpenTUI. Component architecture, focus management, and terminal rendering performance.
- [Popy: a 500 KB clipboard manager because every other one is an Electron app](https://anuragxd.com/blogs/popy-500kb-clipboard-manager): Writing a native Swift macOS menu bar app. NSPasteboard polling, Keychain storage, global hotkeys via CGEvent, and universal binary CI.
- [ConOps: I wanted Argo CD without the Kubernetes](https://anuragxd.com/blogs/conops-gitops-without-kubernetes): Building a GitOps controller for Docker Compose in Go. Reconciliation loops, config hashing for drift detection, go-git for in-process clones, and an embedded web UI.
- [Migrating live auth from SuperTokens to Keycloak](https://anuragxd.com/blogs/supertokens-to-keycloak): Custom SPI for phone-OTP in Java, gradual user adoption via login-time import, dual-session logout, and the oidc-client-ts cutover.
- [The month we self-hosted everything](https://anuragxd.com/blogs/self-hosting-typesense-metabase): Moving Typesense and Metabase onto GKE. StatefulSet tuning, alias-swapped re-indexing, SAML attribute mapping, and the OOM that Prometheus caught.
- [Small PRs to scientific infrastructure](https://anuragxd.com/blogs/contributing-to-ga4gh-oss): Shipping a streaming zip endpoint to trs-filer, adding S3-compatible storage via boto3, and patching FOCA's MongoDB connection URI handling.

## Open source projects

- [conops](https://github.com/anuragxxd/conops): GitOps controller for Docker Compose
- [Conquest](https://github.com/anuragxxd/conquest): Workflow execution service for scientists
- [DataSlip](https://github.com/anuragxxd/dataslip): Terminal-first PostgreSQL browser
- [Popy](https://github.com/anuragxxd/popy): macOS clipboard history in the menu bar
- [fikrr.in](https://fikrr.in): AI-powered business analytics

## API

- [API index](https://anuragxd.com/api/index.json): Discovery document listing every available endpoint, the API version, and links to the OpenAPI spec and llms.txt.
- [Profile](https://anuragxd.com/api/profile.json): Name, headline, location, contact address, social profiles, and the technology list published as schema.org `knowsAbout`.
- [Work history](https://anuragxd.com/api/work.json): Every role, with company, URL, period, summary, highlights, and stack.
- [Projects](https://anuragxd.com/api/projects.json): Open-source and side projects, with tagline, description, repository URL, and proof-of-traction where it exists.
- [Talks and open source](https://anuragxd.com/api/talks.json): Conference talks, mentorship, and open-source programme work.
- [Blog post index](https://anuragxd.com/api/posts.json): All published posts, newest first, with slug, title, date, description, and both the HTML and Markdown URLs.
- [Single blog post](https://anuragxd.com/api/posts/{slug}.json): One post including its full Markdown body. `slug` comes from `/api/posts.json`.
- [OpenAPI 3.1 spec](https://anuragxd.com/openapi.json): machine-readable description of the API above

## Optional

- [Sitemap](https://anuragxd.com/sitemap.xml)
- [RSS feed](https://anuragxd.com/rss.xml)

## Notes

- Every page is also served as Markdown. Send `Accept: text/markdown`, or append `.md` to any page URL.
- Unknown paths return a real HTTP 404 (never a 200 shell), with an HTML or Markdown body depending on `Accept`.
- No authentication is required for anything on this domain.