Platform Capabilities

Everything you need to ship with confidence.

Nebutra is a full-stack SaaS platform—AI, billing, multi-tenancy, observability, and security baked in from day one. Stop rebuilding the platform layer.

packages/ai

artifact

AI Runtime & Agent Substrate

A production AI domain with agent loops, tool protocols, RAG, local execution, provider metadata, and multimodal pipelines kept out of app code.

agent.tstypescript

1import { Agent, tool } from "@nebutra/agents";

2import { z } from "zod";

4const agent = new Agent({

5 model: "claude-sonnet-4-6",

6 tools: {

7 search: tool({

8 description: "Search internal docs",

typedscopedready

packages/platform

artifact

Platform Control Plane

The lowest shared layer: database, config, provider selection, tenant locks, gateway-core contracts, health, rate limits, traces, and repository boundaries.

platform.tstypescript

1import { prisma } from "@nebutra/db";

2import { getCurrentTenant } from "@nebutra/tenant";

4const tenant = getCurrentTenant();

6const posts = await prisma.post.findMany({

7 where: { tenantId: tenant.tenantId, published: true },

8 orderBy: { publishedAt: "desc" },

typedscopedready

packages/iam

artifact

Identity, Access & Tenant Trust

Provider-agnostic authentication, tenant context, permission gates, audit, captcha, OAuth, and encrypted vault behavior live in one trust boundary.

permissions.tstypescript

1import { ability } from "@nebutra/permissions";

2import { requirePermission } from "@nebutra/permissions/server";

4await requirePermission("user.invite", { orgId });

6const can = ability(currentUser);

7if (can("delete", "Project", project)) {

8 await deleteProject(project.id);

typedscopedready

packages/design

artifact

Design System Supply Chain

Brand assets, DTCG tokens, Tailwind v4 theme exports, Geist icons, UI primitives, registry builds, and Figma/Penpot sync operate as a pipeline.

theme.csscss

1@import "@nebutra/tokens/styles.css";

3.cta {

4 background: var(--brand-gradient);

5 color: var(--neutral-1);

6 border-radius: var(--radius-md);

7 padding: var(--space-3) var(--space-5);

8}

typedscopedready

packages/integrations

artifact

Integration Runtime Layer

Queues, cache, event bus, email, uploads, storage, search, SMS, notifications, webhooks, collaboration, and provider vaults share one adapter lane.

queue.tstypescript

1import { getQueue, createJob } from "@nebutra/queue";

3const queue = await getQueue();

5await queue.enqueue(

6 createJob("email", "send", {

7 to: "[email protected]",

8 template: "welcome",

typedscopedready

packages/commerce

artifact

Commercial System of Record

Access gates, billing providers, subscriptions, usage, credits, metering, licenses, contracts, legal content, marketing, and waitlists form the commercial domain.

checkout.tstypescript

1import { createCheckoutSession } from "@nebutra/billing";

3const session = await createCheckoutSession({

4 customerId: orgId,

5 priceId: "price_pro_monthly",

6 successUrl: `${origin}/billing/success`,

7});

typedscopedready

backends/gateway

artifact

Typed API Gateway Boundary

The Hono backend owns request context, security middleware, tenant extraction, idempotency, usage metering, route groups, OpenAPI generation, and async Inngest jobs.

router.tstypescript

1import { createApp } from "@nebutra/gateway-core";

2import { tenancy, rateLimit } from "@nebutra/gateway-core/middleware";

4const app = createApp()

5 .use(tenancy())

6 .use(rateLimit({ rps: 100 }));

8app.get("/v1/posts", async (c) => {

typedscopedready

Platform Capabilities

Everything you need to ship with confidence.

Nebutra is a full-stack SaaS platform—AI, billing, multi-tenancy, observability, and security baked in from day one. Stop rebuilding the platform layer.

packages/ai

artifact

AI Runtime & Agent Substrate

A production AI domain with agent loops, tool protocols, RAG, local execution, provider metadata, and multimodal pipelines kept out of app code.

agent.tstypescript

1import { Agent, tool } from "@nebutra/agents";

2import { z } from "zod";

4const agent = new Agent({

5 model: "claude-sonnet-4-6",

6 tools: {

7 search: tool({

8 description: "Search internal docs",

typedscopedready

packages/platform

artifact

Platform Control Plane

The lowest shared layer: database, config, provider selection, tenant locks, gateway-core contracts, health, rate limits, traces, and repository boundaries.

platform.tstypescript

1import { prisma } from "@nebutra/db";

2import { getCurrentTenant } from "@nebutra/tenant";

4const tenant = getCurrentTenant();

6const posts = await prisma.post.findMany({

7 where: { tenantId: tenant.tenantId, published: true },

8 orderBy: { publishedAt: "desc" },

typedscopedready

packages/iam

artifact

Identity, Access & Tenant Trust

Provider-agnostic authentication, tenant context, permission gates, audit, captcha, OAuth, and encrypted vault behavior live in one trust boundary.

permissions.tstypescript

1import { ability } from "@nebutra/permissions";

2import { requirePermission } from "@nebutra/permissions/server";

4await requirePermission("user.invite", { orgId });

6const can = ability(currentUser);

7if (can("delete", "Project", project)) {

8 await deleteProject(project.id);

typedscopedready

packages/design

artifact

Design System Supply Chain

Brand assets, DTCG tokens, Tailwind v4 theme exports, Geist icons, UI primitives, registry builds, and Figma/Penpot sync operate as a pipeline.

theme.csscss

1@import "@nebutra/tokens/styles.css";

3.cta {

4 background: var(--brand-gradient);

5 color: var(--neutral-1);

6 border-radius: var(--radius-md);

7 padding: var(--space-3) var(--space-5);

8}

typedscopedready

packages/integrations

artifact

Integration Runtime Layer

Queues, cache, event bus, email, uploads, storage, search, SMS, notifications, webhooks, collaboration, and provider vaults share one adapter lane.

queue.tstypescript

1import { getQueue, createJob } from "@nebutra/queue";

3const queue = await getQueue();

5await queue.enqueue(

6 createJob("email", "send", {

7 to: "[email protected]",

8 template: "welcome",

typedscopedready

packages/commerce

artifact

Commercial System of Record

Access gates, billing providers, subscriptions, usage, credits, metering, licenses, contracts, legal content, marketing, and waitlists form the commercial domain.

checkout.tstypescript

1import { createCheckoutSession } from "@nebutra/billing";

3const session = await createCheckoutSession({

4 customerId: orgId,

5 priceId: "price_pro_monthly",

6 successUrl: `${origin}/billing/success`,

7});

typedscopedready

backends/gateway

artifact

Typed API Gateway Boundary

The Hono backend owns request context, security middleware, tenant extraction, idempotency, usage metering, route groups, OpenAPI generation, and async Inngest jobs.

router.tstypescript

1import { createApp } from "@nebutra/gateway-core";

2import { tenancy, rateLimit } from "@nebutra/gateway-core/middleware";

4const app = createApp()

5 .use(tenancy())

6 .use(rateLimit({ rps: 100 }));

8app.get("/v1/posts", async (c) => {

typedscopedready

Everything you need to ship with confidence.ship with confidence.

AI Runtime & Agent Substrate

Platform Control Plane

Identity, Access & Tenant Trust

Design System Supply Chain

Integration Runtime Layer

Commercial System of Record

Typed API Gateway Boundary

Everything you need to ship with confidence.ship with confidence.

AI Runtime & Agent Substrate

Platform Control Plane

Identity, Access & Tenant Trust

Design System Supply Chain

Integration Runtime Layer

Commercial System of Record

Typed API Gateway Boundary

Everything you need to ship with confidence.

Everything you need to ship with confidence.