Every layer, already written.
111 packages in 8 domains: every layer a SaaS needs, written, tested and in one repository. Each domain is below, with how it fits together and every package it holds.
AI Runtime & Agent Substrate
A production AI domain with agent loops, tool protocols, RAG, local execution, provider metadata, and multimodal pipelines kept out of app code.
42 packages, 319 source files and 162 test files in packages/ai.
- @nebutra/agent-runtimedurable turns, tools, commands, hooks, subagents
- @nebutra/knowledge-ragretrieval, chunking, local embeddings, content-store
- @nebutra/mcptool catalog and protocol bridge
- @nebutra/reeltyped media graph and storyboard execution
- @nebutra/sandbox-runtimeexecution providers behind one router
- @nebutra/ai-providersmetadata only; runtime remains in agents
3d-pipelineagent-runtimeagentsai-primitivesai-providersatelier-canvasaudio-pipelinebrand-genesisbrowser-controlcinemacode-executioncode-indexcofounder-matchcontent-storedocument-pipelineecosystem-safetyevent-logexecution-policyforge-dns-leakforge-runtimefounder-cemeterygeneration-contextidea-plazaimage-pipelineknowledge-baseknowledge-graphknowledge-raglanding-builderlocal-embeddingmcpoutreach-engineplay-loaderplay-marketplacereelsandbox-runtimestartup-ossupport-deflectortime-machinetool-registryvideo-pipelinevoice-realtimeworkflow-runtime
Platform Control Plane
The lowest shared layer: database, config, provider selection, tenant locks, gateway-core contracts, health, rate limits, traces, and repository boundaries.
21 packages, 377 source files and 81 test files in packages/platform.
- @nebutra/dbPrisma v7, schema policy, generation scripts
- @nebutra/tenant-storeper-tenant serialization and scoped stores
- @nebutra/provider-factoryexplicit/env/detect/fallback provider resolution
- @nebutra/gateway-coreshared gateway contracts below the Hono backend
- @nebutra/trace-storeasync traces for agents, tools, and LLM spans
alertinganalyticsbrowser-utilscapability-kitconfigdberrorsfeature-flagsgateway-coregraph-modelhealthi18nloggerprepaid-walletprovider-factoryrate-limitrepositoriesrouter-supplystatustenant-storetrace-store
Identity, Access & Tenant Trust
Authentication on Better Auth, tenant context, permission gates, audit, captcha, OAuth, and encrypted vault behavior live in one trust boundary.
8 packages, 98 source files and 37 test files in packages/iam.
- @nebutra/authBetter Auth on Postgres, session-based
- @nebutra/tenanttenant context and organization scoping
- @nebutra/permissionsRBAC and resource-action scopes
- @nebutra/auditsensitive operation trail
- @nebutra/vaultlocal and KMS-backed secret storage
Design System Supply Chain
Brand assets, DTCG tokens, Tailwind v4 theme exports, Geist icons, UI primitives, registry builds, and git-only/design-md sync operate as a pipeline.
9 packages, 1475 source files and 87 test files in packages/design.
- @nebutra/design-tokensW3C DTCG source of truth
- @nebutra/tokensCSS variables and ThemeProvider entry
- @nebutra/themeTailwind v4 @theme and data-theme selectors
- @nebutra/iconsGeist icon React package
- @nebutra/uiprimitives, layouts, registry, governance tests
{
"color.brand.primary": {
"$value": "hsl(var(--primary))",
"$type": "color"
}
}- brand.primary
- brand.accent
- status.success
Style Dictionary 4multi-platform output
branddesign-syncdesign-tokensfontsiconsthemetokenstypelens-catalogui
Integration Runtime Layer
Queues, cache, event bus, email, uploads, storage, search, SMS, notifications, webhooks, collaboration, and provider vaults share one adapter lane.
17 packages, 94 source files and 37 test files in packages/integrations.
- @nebutra/queuedurable delivery and worker contracts
- @nebutra/cachecache provider boundary
- @nebutra/emailResend, Console transports
- @nebutra/uploadsupload validation and storage handoff
- @nebutra/webhookssignature verification and delivery
- @nebutra/collabtenant-partitioned CRDT rooms
admin-toolingcachecollabemailevent-busintegration-vaultnotificationsonboardingqueuesagasearchsmsstoragettsuploadsvideo-composewebhooks
Commercial System of Record
Access gates, billing providers, subscriptions, usage, credits, metering, licenses, contracts, legal content, marketing, and waitlists form the commercial domain.
9 packages, 94 source files and 33 test files in packages/commerce.
- @nebutra/access-gateinvite lifecycle for controlled SaaS access
- @nebutra/billingCreem, ChinaPay, credits, manual
- @nebutra/meteringusage records and billing handoff
- @nebutra/licenseissuance, validation, lifecycle events
- @nebutra/legalpolicy content and compliance surfaces
access-gatebillingblogcontractslegallicensemarketingmeteringwaitlist
Typed API Gateway Boundary
The Hono backend owns request context, security middleware, tenant extraction, idempotency, usage metering, route groups, OpenAPI generation, and async Inngest jobs.
1 backend, 137 source files and 70 test files in backends/gateway.
- requestContexttrace IDs, correlation, dependency injection
- security + rateLimitheaders, dynamic CORS, token buckets
- tenant + idempotencytenant extraction, mutation dedupe
- route groupsadmin, ai, billing, events, legal, webhooks
- OpenAPI + Inngesttyped clients and background sync jobs
Operations
The nebutra CLI, create-sailor, presets, Sanity helpers and China compliance
Start from all of it
One command gives you the repository, with every package on this page already wired together.
$ npx create-sailor@latest