Act VI — Platform, Auth & Commerce

The backbone that ships a product: multi-provider auth, RBAC + user management, the admin/platform-admin control planes, audit + event tracking, rate limiting, transactional email, bookings, payments (DOKU/Midtrans), guest-cart checkout, and cross-tab sync.

npx rahman-resources add <slug>

Act V — Content

Identity & access

Who can do what: @convex-dev/auth (no Clerk), the RBAC engine with permission gates, and full user/team/invite management.

Convex Auth — Multi-Provider Sign-in

convex-authnpx rahman-resources add convex-auth

RBAC — Roles & Permissions

rbac-rolesnpx rahman-resources add rbac-roles

User Management

user-managementnpx rahman-resources add user-management

Control planes

Run the product: the admin shell, the 17-section admin panel, and the platform-admin tenant console.

Admin — generic shell + composed console

adminnpx rahman-resources add admin

Admin Panel — Unified Product Admin

admin-panelnpx rahman-resources add admin-panel

Platform Admin — Multi-Tenant Control Plane

platform-adminnpx rahman-resources add platform-admin

Observability & limits

Keep it healthy: the audit log, the event-tracking SDK, and the multi-replica rate limiter.

Audit Log — Workspace Events

audit-lognpx rahman-resources add audit-log

Event Tracking — P0 Instrumentation

event-trackingnpx rahman-resources add event-tracking

Rate Limit

rate-limitnpx rahman-resources add rate-limit

Convex-backed per-key request counter. Atomic check-and-increment via `consume` mutation; expired rows pruned by `_pruneExpired` internalMutation wired to a 5-min cron. Replaces single-replica in-memory Map so multi-replica Next deployments share buckets. Limits live in an in-code POLICY map keyed by namespace prefix (admin-login:<ip>, mcp:<ip>) — never caller-supplied; optional RATE_LIMIT_SERVER_KEY env gates anonymous calls. Lifted 2026-05-16 from rahmanef.com; hardened 2026-06-07.

Commerce & comms (bring your keys)

Money and messages, each previewing env-free but needing a provider key to go live: transactional/newsletter email, bookings, DOKU & Midtrans payments — plus the env-free guest checkout cart and cross-tab sync.

Resend — Transactional & Newsletter

resend-newsletternpx rahman-resources add resend-newsletter

Demo mode· needs RESEND_API_KEY for live double-opt-in email

Try with your key — add the slice, set RESEND_API_KEY, and the live action runs in your own backend.

Cal.com Booking

cal-com-bookingnpx rahman-resources add cal-com-booking

Demo mode· needs a Cal.com username + CALCOM_WEBHOOK_SECRET for live embedded bookings

Try with your key — add the slice, set a Cal.com username + CALCOM_WEBHOOK_SECRET, and the live action runs in your own backend.

Payment — Indonesia PSP (DOKU · Midtrans)

paymentnpx rahman-resources add payment

Demo mode· needs a provider key for live the live action

Try with your key — add the slice, set a provider key, and the live action runs in your own backend.

Storefront Checkout — guest cart + checkout composition

storefront-checkoutnpx rahman-resources add storefront-checkout

BroadcastChannel — Cross-tab Sync

broadcast-channel-syncnpx rahman-resources add broadcast-channel-sync

All acts