02 — Module catalog

Modules your agent can inspect, compose, and customize.

Not a black box, not arbitrary generated code. Each module ships maturity labels, schema, routes, permissions, events, tests, and typed hooks — read before your agent composes. Maturity is taken straight from the public registry; nothing is overstated.

experimental

Admin Shell

Schema-driven admin CRUD over your existing D1 tables: a resource registry plus generic list/get/create/update/delete with RBAC, soft-delete, search/pagination, and audit hooks. UI is host-rendered.

2 hooks · 3 events
experimental

Audit Log

Append-only audit trail. Pure event sink: records domain events from a signed queue or direct calls.

2 hooks · 2 events
experimental

Auth

EdDSA service-token mint/verify, scope checks, and JWKS for auth-gated inter-service communication.

2 hooks · 2 events
experimental

Billing & Subscriptions

Recurring plans and subscription state on top of Stripe: a complete status state machine, idempotent webhook application, plan changes, metered usage, and dunning hooks.

3 hooks · 5 events
experimental

Booking

Service booking, availability, booking records, domain events, and booking admin data access.

4 hooks · 3 events
experimental

Google Calendar

Google Calendar sync for Cloudflare Workers + D1: single-flight OAuth token refresh, watch-channel renewal before the ~7-day expiry, incremental syncToken sync with 410-Gone full-resync fallback, pure RRULE expansion, and push+poll dedup.

3 hooks · 6 events
experimental

Customer

Customer profiles, contact fields, notes, lifecycle events, and customer admin data access.

2 hooks · 2 events
experimental

Email

Transactional email module with provider-neutral ports and Resend and StackSuite (AWS SES) HTTP adapters.

3 hooks · 3 events
experimental

File & Media

R2-backed file uploads with tenant-scoped keys, validated upload tickets, orphan cleanup, and soft-deletes. Async image variants fan out through jobs-workflows.

3 hooks · 4 events
experimental

Forms & Intake

Dynamic form builder + intake: serializable field schemas with validation rules and conditional visibility, pure submission validation, idempotent submissions, optional Turnstile spam protection, and content-type/size-validated attachment references.

2 hooks · 4 events
experimental

Gateway

Public trust boundary: API-key authentication, rate limiting, scope narrowing, and token exchange via auth.

2 hooks · 2 events
experimental

Invoice

Invoices with gapless atomic numbering, per-line tax, an enforced draft->open->paid->void lifecycle, idempotent payment application, and dunning hooks.

3 hooks · 5 events
experimental

Jobs & Workflows

Durable background jobs with idempotent execution, exponential-backoff retries, a dead-letter sink, and catch-up scheduling. The async backbone other modules build on.

3 hooks · 5 events
experimental

In-App Notifications

Per-user in-app notification feed: user-scoped lists/counts, read/unread state, polymorphic typed payloads, reconnect catch-up (listSince), and idempotent delivery via dedupKey. Owns persistence; the realtime push layer is the host's concern.

2 hooks · 2 events
experimental

Org, Team & RBAC

Multi-tenant organizations, memberships, roles, and invitations with a permission-resolution gate. Enforces tenant isolation and single-use, expiring invites — the B2B foundation other modules scope against.

2 hooks · 5 events
experimental

Payment

Stripe-backed payment provider: create payment intents, record payments, and verify signed Stripe webhooks. Emits payment lifecycle events.

2 hooks · 4 events
experimental

Webhook Delivery

Outbound mirror of the event bus: registers external endpoints (per-endpoint signing secret), delivers HMAC-signed domain events, and logs delivery attempts.

2 hooks · 2 events

Planned modules have no public registry listing yet — they appear here for roadmap clarity, not as available code.