# Playstack

> Composable TypeScript packages, UI, and integrations for building software applications.

Playstack is in private preview. Documentation describes source contracts, not a guarantee of registry availability or production readiness. Check [release availability](https://playstack.dev/docs/packages#release-availability) before installing.

[Product and documentation index](https://playstack.dev/llms.txt) · [Full offering and documentation text](https://playstack.dev/llms-full.txt)

## Product and access

- [Playstack](https://playstack.dev/index.md): TypeScript packages for authentication, billing, storage, and more. Add what you need to the framework you already use.
- [Pricing and access](https://playstack.dev/pricing.md): Compare Playstack Free, Plus and Pro access and the intended licence model.
- [Frequently asked questions](https://playstack.dev/faq.md): Common questions about Playstack packages, preview access, installation, licensing and updates.
- [Licensing](https://playstack.dev/licensing.md): The MIT licence for Free Playstack packages and the current draft status of the Pro commercial licence.

## Features

- [Features](https://playstack.dev/features.md): Explore Playstack features.
- [Authentication](https://playstack.dev/features/authentication.md): Compose credentials, magic links, sessions, passkeys, MFA, and connected-provider access without handing application identity to a framework.
- [Accounts and tenancy](https://playstack.dev/features/accounts-tenancy.md): Model organizations, memberships, invitations, ownership, active-account switching, and fail-closed data scope.
- [Email delivery](https://playstack.dev/features/email-delivery.md): Render typed application email and deliver it through explicit SES, Mailgun, Postmark, Resend, SendGrid, SMTP, or capture-test providers.
- [Events and workflows](https://playstack.dev/features/events-workflows.md): Carry typed domain events, operation context, transactional delivery, and replay-safe processing across application boundaries.
- [Feeds and syndication](https://playstack.dev/features/feeds-syndication.md): Publish RSS, Atom, JSON Feed, sitemaps, and related discovery surfaces from portable feed contracts.
- [Rate limiting](https://playstack.dev/features/rate-limiting.md): Apply fail-closed limits with trustworthy subjects and explicit Redis, Prisma, or Durable Object storage.
- [Analytics](https://playstack.dev/features/analytics.md): Collect consent-aware application events and deliver them through explicit browser and server boundaries.
- [Connections](https://playstack.dev/features/connections.md): Authorize, encrypt, refresh, and revoke third-party credentials without moving provider APIs or product workflows into a generic abstraction.
- [Devices and trusted sessions](https://playstack.dev/features/devices.md): Register application devices, manage push destinations, establish bounded trust, and revoke device-backed access from one explicit identity boundary.
- [Client authentication](https://playstack.dev/features/client-authentication.md): Authenticate browser extensions, CLIs, desktop apps, and mobile clients through system-browser authorization, PKCE, rotation, and device-aware revocation.
- [Device pairing](https://playstack.dev/features/device-pairing.md): Establish same-user peer trust across mobile, desktop, and extension surfaces through a versioned protocol with selectable discovery and transport profiles.
- [Browser extensions](https://playstack.dev/features/browser-extensions.md): Build Playstack-connected browser extensions with MV3-safe runtime state, typed messaging, portable storage, and system-browser authentication.
- [Billing and entitlements](https://playstack.dev/features/billing-entitlements.md): Synchronize subscription state, project purchased access into stable grants, and enforce capabilities without scattering plan-name checks through application code.
- [API keys and audit trails](https://playstack.dev/features/api-access-audit.md): Issue scoped machine credentials, authenticate them at the server boundary, and record security-relevant actions without turning logs into policy.
- [Commerce](https://playstack.dev/features/commerce.md): Compose server-authored products, one-time checkout, finite stock, immutable orders, and physical fulfillment without turning one provider into the domain model.
- [Notifications and delivery](https://playstack.dev/features/notifications-delivery.md): Define typed notifications, resolve recipient preferences, deliver across explicit channels, and retain one provider-independent history of every send.
- [Audiences and subscriber lifecycle](https://playstack.dev/features/audiences.md): Build waitlists, newsletters, release lists, and preference centers with explicit consent, segmentation, confirmation, and delivery boundaries.
- [Content and AI](https://playstack.dev/features/content-ai.md): Model portable content operations and compose AI-assisted generation through explicit providers, schemas, policy, and application-owned publication workflows.
- [Caching](https://playstack.dev/features/caching.md): Use namespaced portable caches with typed serialization, tag invalidation, and explicit stampede-protection capabilities across Redis, Workers, and local runtimes.
- [File storage](https://playstack.dev/features/file-storage.md): Store and retrieve application objects through explicit filesystem, S3, or R2 providers with validated keys, metadata, streaming bodies, and signed access.
- [Search](https://playstack.dev/features/search.md): Build product-specific search on portable query, ranking, transport, and framework contracts without coupling records to a provider.
- [Local-first](https://playstack.dev/features/local-first.md): Share durable local mutations and synchronization semantics across web, Expo, and desktop clients while keeping product policy explicit.
- [Webhooks](https://playstack.dev/features/webhooks.md): Verify provider requests from raw bytes, claim events transactionally, enqueue normalized work exactly once, and keep provider parsing outside domain handlers.
- [Error handling](https://playstack.dev/features/error-handling.md): Carry stable application errors across server and client boundaries, report normalized failures, and retain framework-native recovery without leaking sensitive context.
- [GitHub App access](https://playstack.dev/features/github-apps.md): Authenticate GitHub App installations and compose application-owned repository access workflows with scoped, short-lived tokens.
- [Realtime and WebRTC](https://playstack.dev/features/realtime-webrtc.md): Compose authenticated realtime channels, resumable client state, WebRTC session control, and ICE or relay infrastructure without conflating events, signalling, and media.
- [Licensing](https://playstack.dev/features/licensing.md): Issue signed licenses, activate device-bound seats, verify access offline, rotate refresh credentials, and revoke grants without coupling product policy to the token protocol.
- [Progressive web apps](https://playstack.dev/features/progressive-web-apps.md): Compose installability, application-shell caching, update coordination, and push registration without confusing a service worker with local-first application data.
- [Application interfaces](https://playstack.dev/features/application-ui.md): Compose application-owned React and Next surfaces from Chakra themes, controlled App UI and scoped account/audience operator sections.
- [Localization](https://playstack.dev/features/localization.md): Share locale policy and message catalogs across application UI, APIs and delivery without choosing a translation vendor.

## Frameworks

- [Frameworks](https://playstack.dev/frameworks.md): Explore Playstack frameworks.
- [React](https://playstack.dev/frameworks/react.md): Headless domain bindings plus optional Chakra application and admin compositions, with server authority kept outside the client.
- [Next.js](https://playstack.dev/frameworks/nextjs.md): Compose Playstack server contracts, React bindings, SSR handoff, and route adapters at the Next.js application edge.
- [NestJS](https://playstack.dev/frameworks/nestjs.md): Connect portable Playstack capabilities to dependency injection, guards, decorators, request context, workers, and lifecycle hooks.
- [Expo](https://playstack.dev/frameworks/expo.md): Use Playstack authentication and local-first contracts with Expo SecureStore, SQLite, and React Native lifecycle adapters.
- [Cloudflare Workers](https://playstack.dev/frameworks/cloudflare-workers.md): Run portable contracts in Web-standard runtimes with explicit Workers KV, R2, Queues and Durable Object adapters.

## Integrations

- [Integrations](https://playstack.dev/integrations.md): Explore Playstack integrations.
- [Auth.js](https://playstack.dev/integrations/authjs.md): Bridge Auth.js provider callbacks into Playstack identity and session contracts while retaining application-owned provider configuration.
- [Prisma](https://playstack.dev/integrations/prisma.md): Persist Playstack capabilities through explicit application-owned Prisma clients, transactions, and managed schema fragments.
- [Redis](https://playstack.dev/integrations/redis.md): Use Redis for distributed caches, rate-limit counters, and BullMQ-backed jobs while keeping application policy portable.
- [Postmark](https://playstack.dev/integrations/postmark.md): Deliver rendered Playstack mail or Postmark provider templates through an explicit driver and native client escape hatch.
- [SMTP](https://playstack.dev/integrations/smtp.md): Deliver portable rendered email through an application-configured Nodemailer transport.
- [Resend](https://playstack.dev/integrations/resend.md): Deliver transactional mail and synchronize consent-aware audience contacts through explicit Resend adapters.
- [Inngest](https://playstack.dev/integrations/inngest.md): Dispatch portable Playstack queue jobs through Inngest and serve the generated functions from Next.js, NestJS, or another supported framework.
- [Fathom Analytics](https://playstack.dev/integrations/fathom.md): Send consent-aware pageviews and named events to an application-initialized Fathom client.
- [Plausible Analytics](https://playstack.dev/integrations/plausible.md): Send pageviews and custom events with non-null properties through an application-initialized Plausible client.
- [Basemarks](https://playstack.dev/integrations/basemarks.md): Adapt Basemarks track events with explicit property mapping; supply an application-owned transport for error reporting.
- [Sentry](https://playstack.dev/integrations/sentry.md): Report scrubbed Playstack errors through an initialized Sentry client without hiding SDK configuration or instrumentation.
- [Mailgun](https://playstack.dev/integrations/mailgun.md): Deliver rendered messages or stored Mailgun templates through an explicit regional provider client.
- [SendGrid](https://playstack.dev/integrations/sendgrid.md): Deliver rendered messages and dynamic templates through an isolated SendGrid mail client.
- [Amazon SES](https://playstack.dev/integrations/amazon-ses.md): Deliver rendered messages and SES templates through an application-configured AWS SDK client.
- [Cloudflare Queues](https://playstack.dev/integrations/cloudflare-queues.md): Typed Worker jobs with per-message acknowledgements, bounded batches, retries and explicit terminal-failure handling.
- [GitHub](https://playstack.dev/integrations/github.md): Connect OAuth credentials, GitHub App installation tokens, and verified webhook delivery through explicit Playstack boundaries.
- [Stripe](https://playstack.dev/integrations/stripe.md): Create hosted subscription and one-time checkout, then reconcile verified Stripe events into separate billing and payment projections.
- [Argon2](https://playstack.dev/integrations/argon2.md): Use Playstack's Node.js authentication entrypoint with application-configured Argon2id password hashing.
- [SimpleWebAuthn](https://playstack.dev/integrations/simplewebauthn.md): Verify passkey registration and authentication ceremonies through Playstack's optional Node.js WebAuthn adapter.
- [BullMQ](https://playstack.dev/integrations/bullmq.md): Dispatch and process typed Playstack jobs through BullMQ with explicit Redis ownership and native queue access.
- [AT Protocol](https://playstack.dev/integrations/at-protocol.md): Use the official AT Protocol OAuth client while keeping discovery, PAR, PKCE, DPoP, nonces, and session storage intact.
- [Cloudflare Workers KV](https://playstack.dev/integrations/cloudflare-kv.md): Use an application-supplied Workers KV binding for namespaced cache storage with explicitly eventual capabilities.
- [Cloudflare R2](https://playstack.dev/integrations/cloudflare-r2.md): Store portable Playstack objects through a structural R2 binding with explicit public and signed URL capabilities.
- [MiniSearch](https://playstack.dev/integrations/minisearch.md): Back Playstack's product-defined search protocol with a compact in-memory full-text index.
- [Amazon S3](https://playstack.dev/integrations/amazon-s3.md): Store portable Playstack objects and issue bounded signed URLs through an application-configured AWS SDK client.
- [Zod](https://playstack.dev/integrations/zod.md): Reuse Zod schemas across Playstack content, React forms, wire validation, and NestJS request boundaries.
- [Chakra UI](https://playstack.dev/integrations/chakra-ui.md): React DOM themes and application compositions on Chakra v3.
- [Queuebert](https://playstack.dev/integrations/queuebert.md): Connect existing named BullMQ queues to an application-authorized Queuebert installation.
- [Relaypath](https://playstack.dev/integrations/relaypath.md): Optional Relaypath-backed outbound webhook dispatch without making it a required transport.
- [OAuth 2 providers](https://playstack.dev/integrations/oauth2.md): Configurable OAuth 2 credential lifecycle for provider APIs, separate from application login.
- [LinkedIn](https://playstack.dev/integrations/linkedin.md): A packaged LinkedIn connection adapter with application-owned scopes and product operations.
- [Mastodon](https://playstack.dev/integrations/mastodon.md): A packaged Mastodon connection adapter with explicit instance and credential ownership.
- [X](https://playstack.dev/integrations/x.md): A packaged X OAuth 2 connection adapter with explicit application permissions.
- [IndexedDB](https://playstack.dev/integrations/indexeddb.md): Browser persistence and Web Locks coordination for the local-first engine.
- [Apple Push Notification service](https://playstack.dev/integrations/apns.md): An APNs delivery seam with application-owned provider credentials and device selection.
- [Firebase Cloud Messaging](https://playstack.dev/integrations/fcm.md): An FCM delivery seam with explicit provider transport and target lifecycle.
- [Web Push](https://playstack.dev/integrations/web-push.md): A Web Push delivery seam without requiring an application notification inbox.

## Documentation

- [@playstack/audiences](https://playstack.dev/docs/packages/communication/audiences.md): Local-authoritative lists, consent evidence, subscriptions, signed preference flows, tags, and data-only segments.
- [Configuration](https://playstack.dev/docs/cli/configuration.md): Configure Playstack artifact targets, lint adoption, Skills installation, and managed updates in one committed file.
- [Foundation](https://playstack.dev/docs/packages/foundation.md): Shared primitives, validation, security, and diagnostics used across Playstack capabilities.
- [Playstack documentation](https://playstack.dev/docs.md): Build application capabilities from small, portable packages with explicit integration boundaries.
- [@playstack/audiences-react](https://playstack.dev/docs/packages/communication/audiences-react.md): Headless React subscription and preference-center state with explicit clients, cache boundaries, and safe errors.
- [@playstack/auth](https://playstack.dev/docs/packages/identity/auth.md): Framework-independent identity and opaque session primitives for Node and Workers.
- [@playstack/cache](https://playstack.dev/docs/packages/infrastructure/cache.md): JSON caching with millisecond TTLs, tag generations, stampede-safe reads, and explicit capabilities.
- [@playstack/catalog](https://playstack.dev/docs/packages/commerce/catalog.md): Portable products, variants, immutable offers, and provider-instance-aware quote resolution.
- [@playstack/chakra](https://playstack.dev/docs/packages/ui/chakra.md): Chakra v3 theme composition, semantic tokens and neutral/warm presets.
- [@playstack/content](https://playstack.dev/docs/packages/content-intelligence/content.md): Framework- and loader-independent content transforms, schema fields, and array resolution helpers.
- [@playstack/core](https://playstack.dev/docs/packages/foundation/core.md): Dependency-free errors, results, clocks, identifiers, and portable operation-context contracts.
- [@playstack/events](https://playstack.dev/docs/packages/events-operations/events.md): Typed in-process domain events for dependency inversion between Playstack packages.
- [Artifact synchronization](https://playstack.dev/docs/cli/artifact-synchronization.md): Preview, write, and verify package-owned database-schema, email, content, and translation artifacts.
- [Getting started](https://playstack.dev/docs/getting-started.md): Try a small storage example, then choose the package and framework guide for your application.
- [Getting started with NestJS](https://playstack.dev/docs/frameworks/nestjs/getting-started.md): Compose Playstack authentication, account scope, and entitlement guards into a NestJS API with explicit dependency order.
- [Getting started with Next.js](https://playstack.dev/docs/frameworks/nextjs/getting-started.md): Add Playstack authentication and client session state to a Next.js application, then extend it with route-level capabilities.
- [Getting started with React](https://playstack.dev/docs/frameworks/react/getting-started.md): Compose Playstack auth state and error reporting around a React application using application-owned transports and recovery UI.
- [Getting started with Workers](https://playstack.dev/docs/frameworks/workers/getting-started.md): Compose Worker-compatible Playstack crypto and feed primitives with Web platform APIs and explicit environment bindings.
- [Identity and access](https://playstack.dev/docs/packages/identity.md): Authentication, tenancy, devices, credentials, MFA, third-party connections, and audit boundaries.
- [Next.js](https://playstack.dev/docs/frameworks/nextjs.md): Compose Playstack server contracts, React bindings, and route adapters into Next.js applications without moving product policy into the framework.
- [@playstack/app-ui](https://playstack.dev/docs/packages/ui/app-ui.md): Controlled application shells, navigation, collections, commands, Kanban and resizable layouts.
- [@playstack/auth-contracts](https://playstack.dev/docs/packages/identity/auth-contracts.md): Client-safe session contracts for adopting Playstack React and Next.js bindings against any authentication backend.
- [@playstack/auth-react](https://playstack.dev/docs/packages/identity/auth-react.md): React session state, client auth actions, revalidation, and cross-tab synchronization.
- [@playstack/cache-next](https://playstack.dev/docs/packages/infrastructure/cache-next.md): Shared Next.js incremental caching, Cache Components, and signed on-demand revalidation over Playstack Cache.
- [@playstack/content-next](https://playstack.dev/docs/packages/content-intelligence/content-next.md): Explicit Next.js Pages and App Router helpers for resolving portable content collections.
- [@playstack/errors](https://playstack.dev/docs/packages/foundation/errors.md): Runtime-neutral error capture with scrubbing, trace correlation, grouping hints, and isolated backend fan-out.
- [@playstack/events-prisma](https://playstack.dev/docs/packages/events-operations/events-prisma.md): Transactional Postgres outbox storage for Playstack events using a structural Prisma boundary.
- [@playstack/feeds](https://playstack.dev/docs/packages/content-intelligence/feeds.md): Streaming RSS, Atom, JSON Feed, sitemap, and generate-to-storage primitives for Node and Workers.
- [@playstack/nest-audiences](https://playstack.dev/docs/packages/communication/nest-audiences.md): Guarded NestJS audience routes and a validated remote-authority command consumer.
- [@playstack/payments](https://playstack.dev/docs/packages/commerce/payments.md): Provider-instance-aware one-time checkout, payment, refund, dispute, and reconciliation projections.
- [@playstack/storage](https://playstack.dev/docs/packages/infrastructure/storage.md): Runtime-neutral object storage with streaming, conditional writes, listing, copy, ranges, multipart upload, and integrity checks.
- [Commerce](https://playstack.dev/docs/packages/commerce.md): Catalog, one-time payments, inventory, orders, fulfillment, and their NestJS application boundaries.
- [Existing schema adoption](https://playstack.dev/docs/cli/existing-schema-adoption.md): Compare Playstack Prisma artifacts with a mature application schema and choose explicit managed or application-owned persistence.
- [NestJS](https://playstack.dev/docs/frameworks/nestjs.md): Compose Playstack capabilities through explicit NestJS modules, guards, decorators, and lifecycle bindings.
- [Playstack CLI](https://playstack.dev/docs/cli.md): Capability adoption, artifact synchronization, drift detection, merge orchestration, and authenticated application controls.
- [@playstack/admin-ui](https://playstack.dev/docs/packages/ui/admin-ui.md): Host-composed account and audience operator sections with scoped, localized controls.
- [@playstack/audiences-resend](https://playstack.dev/docs/packages/communication/audiences-resend.md): Resend Contacts and Segments as an explicit remote authority for Playstack audiences.
- [@playstack/auth-next](https://playstack.dev/docs/packages/identity/auth-next.md): Next.js Pages and App Router session handoff and server-side protection helpers.
- [@playstack/errors-react](https://playstack.dev/docs/packages/foundation/errors-react.md): React context and resettable error boundaries for an existing Playstack error reporter.
- [@playstack/feeds-next](https://playstack.dev/docs/packages/content-intelligence/feeds-next.md): Next.js App Router request handlers for Playstack feeds using Web platform primitives.
- [@playstack/inventory](https://playstack.dev/docs/packages/commerce/inventory.md): Transactionally correct finite inventory, locations, reservations, terminal stock transitions, and adjustments.
- [@playstack/mail](https://playstack.dev/docs/packages/infrastructure/mail.md): Portable typed mail rendering, envelope validation, provider templates, and delivery contracts.
- [@playstack/nest-events](https://playstack.dev/docs/packages/events-operations/nest-events.md): NestJS lifecycle and queue bindings for Playstack domain events.
- [@playstack/notifications](https://playstack.dev/docs/packages/communication/notifications.md): Typed user-directed notifications across queued mail, push delivery, and a persisted in-app inbox.
- [Events and operations](https://playstack.dev/docs/packages/events-operations.md): Domain events, event sourcing, rate limiting, analytics, persistence bridges, and framework delivery.
- [Frameworks](https://playstack.dev/docs/frameworks.md): Start with the application stack you already use, then compose the Playstack capabilities and adapters that fit its boundaries.
- [Integration planning](https://playstack.dev/docs/cli/integration-planning.md): Inspect package-authored application requirements and ejectable wiring before a repository generator writes code.
- [React](https://playstack.dev/docs/frameworks/react.md): Add Playstack session, account, audience, notification, analytics, and error state to React without treating client providers as security boundaries.
- [Using Playstack with Megamono](https://playstack.dev/docs/megamono.md): Let Megamono shape the repository while Playstack installs capability closures, checks database compatibility, and materializes package artifacts.
- [@playstack/event-store](https://playstack.dev/docs/packages/events-operations/event-store.md): Castore-based event sourcing with injected time, upcasting, concurrency, projections, and checkpoints.
- [@playstack/fulfillment](https://playstack.dev/docs/packages/commerce/fulfillment.md): Encrypted, provider-neutral fulfillment requests and physical-order delivery progress.
- [@playstack/nest-auth](https://playstack.dev/docs/packages/identity/nest-auth.md): NestJS guards and request decorators for Playstack sessions and CSRF transport.
- [@playstack/nest-errors](https://playstack.dev/docs/packages/foundation/nest-errors.md): NestJS dependency injection and exception filtering for an existing Playstack error reporter.
- [@playstack/nest-feeds](https://playstack.dev/docs/packages/content-intelligence/nest-feeds.md): NestJS scheduling, regeneration, and queue-consumer bindings for Playstack feeds.
- [@playstack/notifications-react](https://playstack.dev/docs/packages/communication/notifications-react.md): Headless React state for a persisted notification inbox, unread counts, pagination, and optimistic mutations.
- [@playstack/queues](https://playstack.dev/docs/packages/infrastructure/queues.md): Typed jobs with progress, scheduling, inspection, cancellation, retries, and NestJS lifecycle bindings.
- [Accounts, registry tokens, and upgrades](https://playstack.dev/docs/registry-access.md): Prepare a Free project, protect its registry credentials, and add paid access without replacing the token.
- [Communication](https://playstack.dev/docs/packages/communication.md): Audience consent, notification orchestration, outbound delivery, durable history, and verified inbound webhooks.
- [Ejection and merging](https://playstack.dev/docs/cli/ejection-merging.md): Transfer an eligible artifact to application ownership while retaining a reviewable path for upstream changes.
- [Packages](https://playstack.dev/docs/packages.md): Explore Playstack by product capability, then choose the access tier and adapter surface that fit your application.
- [Workers](https://playstack.dev/docs/frameworks/workers.md): Use Playstack's Web-standard domain contracts and edge adapters in Cloudflare Workers and other constrained runtimes.
- [@playstack/accounts](https://playstack.dev/docs/packages/identity/accounts.md): Framework-independent tenancy, membership, ownership, invitations, and fail-closed account scoping.
- [@playstack/ai](https://playstack.dev/docs/packages/content-intelligence/ai.md): Tenant-aware keys, preflight, metering, telemetry, and cache context around the Vercel AI SDK.
- [@playstack/commerce](https://playstack.dev/docs/packages/commerce/commerce.md): Provider-neutral order and one-off checkout orchestration across commerce domains.
- [@playstack/local-first](https://playstack.dev/docs/packages/infrastructure/local-first.md): Runtime-neutral atomic local mutations, durable outbox state, cursor pulls, conflicts, retries, and synchronization leases.
- [@playstack/nest-event-store](https://playstack.dev/docs/packages/events-operations/nest-event-store.md): Thin NestJS dependency-injection and worker wiring for the Playstack event store.
- [@playstack/nest-notifications](https://playstack.dev/docs/packages/communication/nest-notifications.md): NestJS dependency injection and validated queue-consumer binding for portable notifications.
- [@playstack/validation](https://playstack.dev/docs/packages/foundation/validation.md): Zod-backed shared schemas and one portable HTTP validation-error contract.
- [Free packages](https://playstack.dev/docs/free.md): Explore the MIT-licensed core of Playstack and its preview access policy.
- [Infrastructure and delivery](https://playstack.dev/docs/packages/infrastructure.md): Portable cache, object storage, mail, and queue contracts with explicit provider ownership.
- [Lint and Skills](https://playstack.dev/docs/cli/lint-skills.md): Combine deterministic Playstack checks with versioned, repository-local guidance for contextual decisions.
- [@playstack/accounts-react](https://playstack.dev/docs/packages/identity/accounts-react.md): React account-list and active-account state for Playstack accounts.
- [@playstack/crypto](https://playstack.dev/docs/packages/foundation/crypto.md): Workers-compatible encryption, digests, signatures, verification, and secure token generation.
- [@playstack/delivery](https://playstack.dev/docs/packages/communication/delivery.md): Queued outbound dispatch with shared suppression policy and independently configured provider slots.
- [@playstack/local-first-indexeddb](https://playstack.dev/docs/packages/infrastructure/local-first-indexeddb.md): IndexedDB transactions, browser lifecycle events, Web Locks, and cross-tab wake-ups for Playstack Local First.
- [@playstack/nest-catalog](https://playstack.dev/docs/packages/commerce/nest-catalog.md): Authorization-gated NestJS catalog administration with explicit operation context.
- [@playstack/rate-limit](https://playstack.dev/docs/packages/events-operations/rate-limit.md): Workers-compatible token buckets, private subject keys, and an atomic multi-bucket storage contract.
- [@playstack/search](https://playstack.dev/docs/packages/content-intelligence/search.md): Runtime-neutral mapped search, deterministic lexical ranking, validated protocols, and HTTP provider contracts.
- [Content and intelligence](https://playstack.dev/docs/packages/content-intelligence.md): Portable content transforms, public feeds, framework delivery, scheduled regeneration, and AI execution context.
- [Paid packages](https://playstack.dev/docs/paid.md): Team accounts, commerce, the private registry, application UI and every other paid capability.
- [Plus packages](https://playstack.dev/docs/plus.md): The planned middle tier for teams that need more than the portable Free surface.
- [Updates and CI](https://playstack.dev/docs/cli/updates-ci.md): Update fixed Playstack package versions, reconcile owned output, and generate a review-first scheduled workflow.
- [@playstack/delivery-history](https://playstack.dev/docs/packages/communication/delivery-history.md): Durable provider-neutral delivery timelines, feedback transitions, support queries, and retention.
- [@playstack/local-first-expo](https://playstack.dev/docs/packages/infrastructure/local-first-expo.md): Expo SQLite persistence and injected mobile lifecycle coordination for Playstack Local First.
- [@playstack/nest-accounts](https://playstack.dev/docs/packages/identity/nest-accounts.md): NestJS request scope and role guards for Playstack accounts.
- [@playstack/nest-payments](https://playstack.dev/docs/packages/commerce/nest-payments.md): NestJS bindings for verified one-off payment events, refunds, and provider reconciliation.
- [@playstack/rate-limit-redis](https://playstack.dev/docs/packages/events-operations/rate-limit-redis.md): Atomic Redis storage for Playstack rate-limit policies.
- [@playstack/search-minisearch](https://playstack.dev/docs/packages/content-intelligence/search-minisearch.md): Fuzzy and prefix matching through MiniSearch without exposing provider types in Playstack search contracts.
- [Pro packages](https://playstack.dev/docs/pro.md): Every paid Playstack capability and composition, for individuals and teams.
- [@playstack/devices](https://playstack.dev/docs/packages/identity/devices.md): Registered device identity, encrypted push targets, trust state, and atomic revocation.
- [@playstack/nest-delivery](https://playstack.dev/docs/packages/communication/nest-delivery.md): NestJS delivery queue consumer and safe one-click unsubscribe endpoints.
- [@playstack/nest-inventory](https://playstack.dev/docs/packages/commerce/nest-inventory.md): Authorization-gated NestJS inventory administration and queue-neutral reservation expiry.
- [@playstack/nest-queues](https://playstack.dev/docs/packages/infrastructure/nest-queues.md): Named NestJS queue injection, typed handler discovery, worker startup, and shutdown lifecycle.
- [@playstack/prisma-runtime](https://playstack.dev/docs/packages/foundation/prisma-runtime.md): Explicit runtime selection for application-owned generated Prisma clients.
- [@playstack/rate-limit-prisma](https://playstack.dev/docs/packages/events-operations/rate-limit-prisma.md): Postgres and Prisma storage for Playstack rate-limit policies.
- [@playstack/search-next](https://playstack.dev/docs/packages/content-intelligence/search-next.md): Next.js App and Pages Router adapters for Playstack search protocols and request context.
- [@playstack/skills](https://playstack.dev/docs/packages/foundation/skills.md): Versioned, repository-installed guidance for composing Playstack packages safely.
- [Application UI](https://playstack.dev/docs/packages/ui.md): Themes, controlled application compositions and initial account-admin sections.
- [Architecture](https://playstack.dev/docs/architecture.md): Compose Playstack from portable domain contracts toward explicit framework and infrastructure edges.
- [@playstack/lint](https://playstack.dev/docs/packages/foundation/lint.md): Deterministic ESLint rules for portable cores, event ownership, browser extensions, and semantic design tokens.
- [@playstack/mfa](https://playstack.dev/docs/packages/identity/mfa.md): Passkey-first MFA, TOTP, recovery codes, recent-auth proofs, and trusted-device decisions.
- [@playstack/nest-fulfillment](https://playstack.dev/docs/packages/commerce/nest-fulfillment.md): Headless NestJS fulfillment administration and queue-neutral transition workers.
- [@playstack/nest-search](https://playstack.dev/docs/packages/content-intelligence/nest-search.md): Named NestJS search endpoints, transport-neutral execution, and optional dependency readiness checks.
- [@playstack/nest-storage](https://playstack.dev/docs/packages/infrastructure/nest-storage.md): Named NestJS dependency-injection bindings for portable object stores and their native provider capabilities.
- [@playstack/rate-limit-do](https://playstack.dev/docs/packages/events-operations/rate-limit-do.md): Cloudflare Durable Object storage for Playstack rate-limit policies.
- [@playstack/webhooks](https://playstack.dev/docs/packages/communication/webhooks.md): Verified inbound webhook receipt plus direct, durable, and Relaypath-backed outbound dispatch.
- [Compatibility and support](https://playstack.dev/docs/compatibility.md): The runtimes, frameworks and infrastructure versions Playstack packages target, and how to validate an adoption.
- [@playstack/api-keys](https://playstack.dev/docs/packages/identity/api-keys.md): Opaque customer API-key issuance, hashing, verification, scopes, usage, and revocation.
- [@playstack/i18n](https://playstack.dev/docs/packages/foundation/i18n.md): Portable locale policy, typed flat message catalogs, fallback metadata and native Intl formatting.
- [@playstack/nest-commerce](https://playstack.dev/docs/packages/commerce/nest-commerce.md): Headless NestJS checkout, order access, cancellation, and verified payment-projection bindings.
- [@playstack/nest-rate-limit](https://playstack.dev/docs/packages/events-operations/nest-rate-limit.md): NestJS rate-limit declarations, trusted client-IP resolution, guards, and response headers.
- [Native and multi-account authentication](https://playstack.dev/docs/native-authentication.md): Compose native credential storage, refresh ownership, account selection, and recovery without confusing adapters with device-wide coordination.
- [@playstack/analytics](https://playstack.dev/docs/packages/events-operations/analytics.md): Runtime-neutral analytics fan-out with consent, PII scrubbing, and explicit provider capabilities.
- [@playstack/i18n-react](https://playstack.dev/docs/packages/foundation/i18n-react.md): Isolated React locale providers, typed catalog hooks and shared UI message composition.
- [@playstack/nest-api-keys](https://playstack.dev/docs/packages/identity/nest-api-keys.md): NestJS metadata, dependency injection, and request guarding for Playstack API keys.
- [Durable security decisions and projections](https://playstack.dev/docs/durable-security-projections.md): Commit credential revocation with canonical audit and durable intent, then recover downstream projections without restoring access.
- [@playstack/analytics-react](https://playstack.dev/docs/packages/events-operations/analytics-react.md): React analytics context, consent controls, and router-neutral route tracking.
- [@playstack/connections](https://playstack.dev/docs/packages/identity/connections.md): Durable, refreshable, encrypted credentials for acting against third-party APIs.
- [@playstack/nest-i18n](https://playstack.dev/docs/packages/foundation/nest-i18n.md): Stateless Nest request and recipient locale resolution with explicit dependency injection.
- [@playstack/registry](https://playstack.dev/docs/packages/infrastructure/registry.md): Portable private package registry core: immutable releases, exact reads, and host-owned access decisions.
- [Data-only background sync hints](https://playstack.dev/docs/background-sync-hints.md): Compose Devices and durable Delivery without a notification inbox while keeping content and recipient authority in the application.
- [Localizing App UI and Admin UI](https://playstack.dev/docs/frameworks/ui-localization.md): Compose editable English source catalogs with application-owned translations and an ICU formatter.
- [@playstack/atproto](https://playstack.dev/docs/packages/identity/atproto.md): AT Protocol OAuth lifecycle through the official client without flattening DPoP and PAR into conventional bearer tokens.
- [@playstack/audit](https://playstack.dev/docs/packages/identity/audit.md): Append-only, per-scope tamper-evident audit chains for Node and Workers.
- [@playstack/nest-analytics](https://playstack.dev/docs/packages/events-operations/nest-analytics.md): Queued NestJS delivery for server-originated Playstack analytics events.
- [@playstack/registry-swift](https://playstack.dev/docs/packages/infrastructure/registry-swift.md): Swift Package Manager registry v1 read protocol over the registry core.
- [@playstack/feedback](https://playstack.dev/docs/packages/events-operations/feedback.md): Durable intake contract for product feedback and failed-command reports sent by the CLI.
- [@playstack/nest-audit](https://playstack.dev/docs/packages/identity/nest-audit.md): Explicit application-route audit declarations for NestJS.
- [@playstack/nest-registry](https://playstack.dev/docs/packages/infrastructure/nest-registry.md): NestJS binding for the read-only npm registry protocol with an ejectable controller.
- [@playstack/auth-authjs](https://playstack.dev/docs/packages/identity/auth-authjs.md): Router-neutral Auth.js callback bridge for Playstack identity and safe session projections.
- [@playstack/nest-feedback](https://playstack.dev/docs/packages/events-operations/nest-feedback.md): NestJS route for the anonymous feedback intake used by the CLI.
- [@playstack/billing](https://playstack.dev/docs/packages/identity/billing.md): Provider-neutral subscription projection, hosted billing actions, and entitlement synchronization.
- [@playstack/entitlements](https://playstack.dev/docs/packages/identity/entitlements.md): Source-projected boolean capabilities and numeric limits with explicit subject enforcement.
- [@playstack/github-app](https://playstack.dev/docs/packages/identity/github-app.md): GitHub App JWT and scoped installation-token lifecycle with explicit cache and webhook boundaries.
- [@playstack/client-auth](https://playstack.dev/docs/packages/identity/client-auth.md): PKCE authorization-code clients, credential rotation, and authenticated request retry for extensions, desktop, mobile, and CLI applications.
- [@playstack/nest-billing](https://playstack.dev/docs/packages/identity/nest-billing.md): NestJS account-context binding for authenticated billing checkout, portals, and verified reconciliation.
- [@playstack/extension](https://playstack.dev/docs/packages/identity/extension.md): MV3-safe authentication, typed messaging, validated storage, permissions, and refresh coordination for browser extensions.
- [@playstack/nest-entitlements](https://playstack.dev/docs/packages/identity/nest-entitlements.md): NestJS guards for explicit Playstack entitlement and limit enforcement.
- [@playstack/extension-react](https://playstack.dev/docs/packages/identity/extension-react.md): React authorization and restored-session state for extension popup and options surfaces.
- [@playstack/nest-github-app](https://playstack.dev/docs/packages/identity/nest-github-app.md): Explicit NestJS dependency-injection binding for a configured GitHub App token service.
- [@playstack/licensing](https://playstack.dev/docs/packages/identity/licensing.md): Portable signed-license parsing, offline validation, device binding, revocation checks, and Ed25519 verification.
- [@playstack/licensing-issuer](https://playstack.dev/docs/packages/identity/licensing-issuer.md): Server-side license issuance, activation codes, device seats, refresh rotation, deactivation, and revocation.
- [@playstack/nest-licensing](https://playstack.dev/docs/packages/identity/nest-licensing.md): NestJS client and administration composition for an application-owned license issuer.