The full stack,mapped in one repo.

Dependency-free auth on Web Crypto. Signed sessions with KV revocation and a sessions page (rename, revoke, sign out the others), PBKDF2 passwords, OAuth2 + PKCE, magic links. Provider tokens are never stored.

Fat models ORM built on Drizzle. A chainable query builder with nested eager loading, auto-migrations, relationships, fail-closed RLS, default-deny CRUD API generation. The core of Ottabase.

Permission + scope authorization, never role names. Multi-tenant roles, wildcards, two-level request + KV cache with O(1) invalidation.

The package contract. One manifest declares a package's tables, models, policies, routes, cron, queue, events, nav, env and health; one registry wires them in, throws at boot on a clash, and shows every setting and health check on /admin.

Typed wrappers for all Cloudflare bindings: D1, KV, R2, Images, Hyperdrive, Queues, Secret Store, Rate Limiting, Vectorize, Workers AI, Browser Rendering, Workflows, DO alarms, plus a Turnstile bot check for every public form.

Zero-dependency Workers router. Order-free precedence, onion middleware, gated mounts, typed params, null fall-through.

Typed in-process event bus with queue fan-out for slow subscribers. A package announces what happened; others subscribe without either importing the other.

WebSocket pub/sub on Cloudflare Actors (Durable Objects). A Pusher-style API without the Pusher bill.

Job queue built on Cloudflare Queues. Dispatch, handlers, deduplication, chaining, and priority levels.

Cron handlers on one Cron Trigger: static code-defined tasks plus a database scheduler you pause and edit from the admin.

Drizzle D1 driver for OttaORM: createD1Driver() plus a typed raw-SQL helper for the queries an ORM shouldn't write.

Backups, restore and per-tenant export: every D1 table to R2 as NDJSON, restored in one transaction, with a nightly schedule and retention.

The free package that makes an app watchable: one report with packages, versions, the build it runs, license states, health, cron status and the newest backup, behind one token.

Operator alerts from every package to email, Slack, Discord, Telegram, PagerDuty or a signed webhook: a cooldown for repeats, an hourly limit per channel, daily digests, retries. Your Worker errors included.

API keys for your app's own customers: hashed at rest, scoped, expiring, revocable, shown once, verified in one lookup, with a per-key rate-limit hook.

Audit logging with full change tracking, RBAC context, and queryable history. Compliance-ready.

Cloudflare Analytics Engine wrapper. Track custom events with dimensions and metrics at edge speed.

Structured logging with zero runtime dependencies. Console, HTTP, Sentry, memory, and buffered transports; child loggers with context.

HTML-to-PDF on Cloudflare Browser Rendering. Static DOM capture, bounded Puppeteer, safe download headers, PDF metadata injection.

Layout types, 10 presets, path resolver, and React slot system. From sidebar to fullscreen, covered.

Menu types and renderers: six built-in patterns (sidebar, flyout, mega, navbar, and more) plus tree utilities for nested and dynamic menus.

Design-token engine: 8 presets plus two full design-system ports. Edge-injected CSS with zero FOUC, effects, scopes, email branding.

React bindings for Brand Engine: BrandProvider hydrated from the edge, LayoutResolver, BrandPathSync, and the useBrand() hook.

URL shortener with custom slugs, interstitial pages, expiry dates, and Cloudflare Analytics tracking.

Referral tracking: every user gets a link at /r/{username}, 90-day first-touch attribution, clicks in Analytics Engine, and a conversion record per signup.

Notifications for your users: in-app (WebSocket) and email. Per-user preferences, read state, priorities, queue-backed delivery. Operator alerts are @ottabase/alerts.

Threaded comment system, polymorphic (attach to anything), nestable, reactions. Signed-out visitors can comment after a bot check, and their comments wait in a moderation queue.

Auto-generated CRUD forms from OttaORM model metadata, and CrudHub: admin data screens for any model that opts in, with search, row actions and related records.

Entitlements: plans with features and limits, per-tenant overrides in D1, 402 guards on routes and a fail-closed React gate. The plan comes from PayPort, a column, or a default.

Usage credits per tenant and meter. One conditional D1 UPDATE takes the credits or does not, so two requests cannot both win the last one. Top-ups, periods, a ledger, a 402 guard.

Terms, Privacy (GDPR and CCPA clauses), Cookies, Acceptable Use, Refunds and Sub-processors from one config. Clause toggles and overrides; served from the Worker or rendered in React.

Paid-package framework: manifests, offline license verification, entitlements, lifecycle hooks, gated routes, drop-in admin UI.

Outbound webhooks for your customers: HMAC-signed deliveries, endpoint health and a delivery log.

Blog/CMS engine: articles, blurbs, photo journals, series, and multilingual posts with localized slugs. Archives, RSS, sitemap, import/export.

EditorJS with 30 plugins (13 core + 17 custom): tables, code, embeds, maps, layout, FAQ, CTA. Every custom block shares one kit with an Edit / Preview switch drawn by the real renderer, a block palette, an inline spoiler, undo/redo, JSON and Markdown export.

Renders editor JSON to React with its own renderer: one map of block renderers you spread to add or replace one, a rhythm wrapper per block, unique heading ids, and inline text through an allowlist parser with no DOM, so it runs in Workers too.

One files system on R2: public, private and backup buckets, the type read from the file itself, photo metadata stripped before storing, WebP variants at upload, quotas per organization, signed private links and quarantine. Drag-and-drop with progress on the client.

Media library primitives and viewers. Browse, search, and select assets; a lightbox and a draggable, immersive public gallery.

Database-backed landing sites: typed sections, three themes, draft previews, lead forms with an admin inbox, OG images, and sitemaps.

AI-readable by default. One product facts object becomes a robots.txt that names the AI search crawlers, a sitemap, JSON-LD and /.well-known/otta.json. The file's schema ships alone as @ottabase/context, with no dependencies, for any tool that reads it.

The image behind every shared link: a 1200 by 630 card in the brand's colors, drawn once by Browser Rendering, kept in R2 and served from a URL the app signs.

The UI kit: Radix primitives on the Design System tokens, plus ConfirmDialog, a resizable SplitPane, a JSON editor, status chips, stat tiles, a timeline, a tree view, and ratings.

Headless TanStack Table v8 wrapper with sorting, filtering, pagination and selection, a column menu, stale rows kept under a loading overlay, and dates in each user's timezone.

Zero-dependency SVG charts on the brand tokens: line, area, bar, combo, donut, funnel, sankey, heatmap, tracker and more. Headless geometry engine, keyboard and touch, PNG/SVG export.

Command palette / spotlight search. Keyboard-driven, debounced and abortable queries, custom trigger key. Like Raycast for your app.

Date picker with range, datetime, and fuzzy dates ("Summer 1998" still stores a real range). Timezone-aware, no moment.js.

Image cropper with zero dependencies and no React: a fixed frame with the photo panning, pinching, zooming, rotating, straightening and flipping under it, crisp on any display and themeable. Square, rect or circle.

Select with single and multi-select, search, keyboard navigation, and create-on-type, plus a tags input that takes pasted lists. CrudHub-aware.

Syntax highlighting on highlight.js core: TS, JS, HTML, CSS, JSON, SQL, Python, shell, and more. Copy button, line numbers, GitHub light/dark.

One Tailwind CSS v4 stylesheet, configured in CSS: every design token mapped onto utilities, dark mode, typography. No tailwind.config.

Mantine provider with pre-built themes and dark mode. Drop in, configure once, works everywhere.

One pnpm otta command for the whole monorepo: scaffold web, worker or landing apps, add a package to an app, deploy to Cloudflare from a terminal, Workers Builds or GitHub Actions with one command, start any app or Wrangler env locally, build, test, and lint.

Markdown documentation viewer component. Renders .md files with syntax highlighting and TOC generation.

Command-line helpers: cf:setup, cf:validate, env:secrets, clean:*. Provisions Cloudflare and generates every local secret.

Email templating and mailer. Resend, AWS SES, and MailChannels run at the edge; SMTP via Nodemailer for Node; a dev trap for local.

The half of email that is not sending: inbound mail via Cloudflare Email Routing, a suppression list, signed one-click unsubscribe, and Resend/SES bounce and complaint webhooks.

Automated screenshots over the Chrome DevTools Protocol: png, jpeg or webp, viewport and scale, light or dark, wait-for and click/scroll/type steps, an optimization pass. Node or Browser Rendering.

i18next wrapper with built-in support for English, Spanish, French, and German, following each user's chosen language. Type-safe translations.

Tenant BYOK AI: user, org, or platform keys encrypted at rest. Text and image input, JSON output, embeddings, over Cloudflare AI Gateway.

Type-safe API client with request deduplication, retry logic, error normalization, and JSON, text, or blob responses.

Jotai atoms for theme, user session, sidebar state, and organization context, behind one app-state provider.

Dates and numbers in each user's timezone and locale, URL notices, responsive image sources for stored files, user-content link marking, string, file, URL and git helpers. Check before reinventing.

Application configuration, environment variable helpers, and storage key utilities. Typed, validated.