Biome Aura — App & Admin Dashboard

01 — OVERVIEW

Biome Aura is a social platform for verified creators. Users publish posts, reels and stories, earn a BMID (Biome ID) through verification, and submit original content or external social links for admin review and community voting. The product has two clients over one Firebase project: an Expo / React Native app for iOS and Android, and a Next.js admin dashboard backed by Firebase Admin APIs.

02 — MY ROLE: FULL-STACK ENGINEER (APP & DASHBOARD)

Built major features end to end on both clients: the BMID Content and BMID Box workflows, Share/Duality requests with multiple tagged users, the voting system, the notification system, public link sharing, and the admin review dashboard with moderation, email and platform-data monitoring.

03 — NOTIFICATION SYSTEM

Designed a dual-channel model: every event writes an in-app notification document and also sends a device push. Android registers native FCM tokens delivered through Firebase Admin; iOS registers Expo tokens delivered through Expo's APNs path. Delivery de-duplicates per device and removes stale tokens. Push and in-app taps share one routing layer, with deferred navigation until auth is ready and protection against stale cold-start notifications.

04 — CONTENT, BOX AND VOTING ARCHITECTURE

BMID Content uses separate request, duality and voting-session collections; BMID Box stores external URLs with sanitized previews and keeps vote counts inline. The dashboard merges both into one voting monitor. The voting endpoint accepts an admin token or a Firebase ID token and derives the voter from the verified token, never the request body, to prevent impersonation.

05 — LINK SHARING

The app shares canonical URLs for posts, reels and public BMID profiles. The dashboard serves those routes as crawler-friendly pages with Open Graph metadata and generated video thumbnails, and hosts the Apple App Site Association and Android Asset Links files so the same URL opens the native screen when the app is installed.

06 — KEY FEATURES

1. 01Home feed redesign with All, Content and Box tabs and Accept / Ignore / Refuse voting
2. 02BMID Content submission with Own and Share/Duality flows
3. 03BMID Box submission for external social URLs with platform validation, preview and verified-user tagging
4. 04Multi-tagged-user Share/Duality requests with per-user responses
5. 05Request lists with status pills, pull-to-refresh, cancellation and custom modals
6. 06Verified-user picker searchable by name, email or BMID
7. 07Dual-channel notifications: Firestore in-app history plus FCM (Android) and Expo/APNs (iOS) push
8. 08Push token registration, de-duplication and stale-token cleanup
9. 09Centralized notification tap routing with cold-start stale-tap protection
10. 10Deep links and universal links for posts, reels and public BMID profiles
11. 11Guided onboarding walkthroughs with spotlight overlay and pause/resume
12. 12Two-factor authentication flow
13. 13Profile reporting with child-safety-critical handling
14. 14Reel paging fixes, preload windows and smoother scroll settling on Android and iOS
15. 15Firestore rules for request ownership, vote ownership and anti-spoofing
16. 16Next.js admin dashboard: users, verification, content, BMID Box, duality, voting, moderation, reports, audit and settings
17. 17Admin API-token guard plus Firebase ID-token guard for user portal endpoints
18. 18Unified voting monitor merging Content and Box voting
19. 19Email notifications via Gmail OAuth with content- and box-specific templates
20. 20Social preview for TikTok, YouTube, Meta and generic links with URL sanitization
21. 21Public share pages with Open Graph rendering for posts, reels and BMID profiles
22. 22Platform-data monitoring for Meta security audit events and incidents
23. 23Reusable dashboard UI: tables, drawers, filters, confirm modals, metric cards and bulk delete
24. 24Seed and backfill scripts for BMID data and user snapshots