rahman-resources 0.9.1 → 0.11.1

package/bin/cli.js

@@ -58,6 +58,9 @@ async function main() {
       return runInit(rest);
     case "add":
       return runAdd(rest);
+    case "update":
+    case "update-slice":
+      return runUpdate(rest);
     case "add-skill":
       return runAddSkill(rest);
     case "scaffold-slice":
@@ -435,6 +438,35 @@ async function runAdd(rest) {
   if (kind === "recipe") return addRecipe(entry);
 }
 
+/**
+ * `update <slug> [target] [--dry-run]` — re-pull a slice from the kitab into
+ * an existing consumer directory. Use after `@rahman/shared` bumps or when
+ * the source slice has shipped patches. `--dry-run` previews changes via
+ * `runLift`'s built-in diff.
+ *
+ * For slices only (not layouts/features/recipes — those use `add`).
+ */
+async function runUpdate(rest) {
+  const { positional, flags } = parseFlags(rest);
+  const [slug, targetArg = "."] = positional;
+  if (!slug) {
+    console.error(kleur.red("Missing slug. Usage: rahman-resources update <slug> [target] [--dry-run]"));
+    process.exit(1);
+  }
+  const found = findEntry(slug);
+  if (!found) throw new Error(`"${slug}" not found. Run ${kleur.cyan("npx rahman-resources list slices")}.`);
+  const { kind, entry } = found;
+  if (kind !== "slice") {
+    console.error(kleur.red(`update only supported for slices. "${slug}" is a ${kind} — use \`add\` instead.`));
+    process.exit(1);
+  }
+  console.log(kleur.bold(`\n→ Re-pulling ${kleur.cyan(entry.slug)} into ${kleur.dim(targetArg)}\n`));
+  const liftArgs = [`rahman:${entry.slug}`];
+  if (targetArg !== ".") liftArgs.push("--target", targetArg);
+  if (flags["dry-run"]) liftArgs.push("--dry-run");
+  return runLift(liftArgs);
+}
+
 async function addLayout(t, target, targetArg, flags = {}) {
   console.log(kleur.bold(`\n→ Installing ${kleur.cyan(t.title)} into ${kleur.dim(target)}\n`));
   if (!t.pullPaths || t.pullPaths.length === 0) {

package/lib/manifest.json

@@ -1,6 +1,6 @@
 {
   "version": 2,
-  "generatedAt": "2026-05-10T04:09:55.146Z",
+  "generatedAt": "2026-05-13T13:37:06.031Z",
   "repo": "rahmanef63/resource-site",
   "branch": "main",
   "layouts": [
@@ -804,151 +804,7 @@
       "primaryFile": "app/preview/riset-kit/public/page.tsx"
     }
   ],
-  "recipes": [
-    {
-      "slug": "block-editor",
-      "title": "Notion-Style Block Editor",
-      "description": "21-block contenteditable editor with slash command menu, markdown shortcuts, drag handles. Real-time via Convex.",
-      "source": "notion-page-clone",
-      "files": [
-        "frontend/slices/notion/slices/editor/BlockEditor.tsx",
-        "frontend/slices/notion/slices/editor/SlashMenu.tsx",
-        "frontend/slices/notion/slices/editor/blockSpecs.ts"
-      ],
-      "exampleCode": "import { BlockEditor } from \"@/frontend/slices/notion/slices/editor/BlockEditor\";\n\n<BlockEditor pageId={pageId} />",
-      "agentRecipe": "Already copied at frontend/slices/notion/slices/editor/. See PORT-NOTION.md for Vite→Next port checklist (routing rewrite, use-client markers, Convex API surface rename).",
-      "tags": [
-        "editor",
-        "notion",
-        "blocks",
-        "real-time"
-      ]
-    },
-    {
-      "slug": "page-tree-sidebar",
-      "title": "Page Tree Sidebar",
-      "description": "Hierarchical workspace sidebar with @dnd-kit drag-drop reordering, favorites, recents.",
-      "source": "notion-page-clone",
-      "files": [
-        "frontend/slices/notion/slices/workspace-sidebar/components/WorkspaceSidebar.tsx",
-        "frontend/slices/notion/slices/workspace-sidebar/components/SortablePageRow.tsx"
-      ],
-      "exampleCode": "import { WorkspaceSidebar } from \"@/frontend/slices/notion/slices/workspace-sidebar/components/WorkspaceSidebar\";\n\n<WorkspaceSidebar />",
-      "agentRecipe": "Mount WorkspaceSidebar inside the left slot of <ThreeColumnLayout>. State backed by Zustand store at frontend/slices/notion/shared/lib/store.tsx.",
-      "tags": [
-        "sidebar",
-        "tree",
-        "dnd-kit",
-        "navigation"
-      ]
-    },
-    {
-      "slug": "multi-block-selection",
-      "title": "Multi-Block Selection",
-      "description": "Marquee + click+shift selection of editor blocks with floating toolbar. Bulk actions: delete, duplicate, convert.",
-      "source": "notion-page-clone",
-      "files": [
-        "frontend/slices/notion/slices/block-selection/components/BlockSelectionProvider.tsx",
-        "frontend/slices/notion/slices/block-selection/components/MarqueeOverlay.tsx"
-      ],
-      "exampleCode": "import { BlockSelectionProvider } from \"@/frontend/slices/notion/slices/block-selection/components/BlockSelectionProvider\";\n\n<BlockSelectionProvider>\n  <BlockEditor />\n</BlockSelectionProvider>",
-      "agentRecipe": "Wrap BlockEditor with BlockSelectionProvider. The marquee overlay attaches to document; toolbar floats above the selection bounding box.",
-      "tags": [
-        "selection",
-        "editor",
-        "bulk",
-        "marquee"
-      ]
-    },
-    {
-      "slug": "database-views",
-      "title": "Database Views (11 types)",
-      "description": "Properties+rows database with 11 view types: table, board, calendar, timeline, chart, gallery, map. Per-view filter/sort/group.",
-      "source": "notion-page-clone",
-      "files": [
-        "frontend/slices/notion/slices/databases/DatabaseBlock.tsx",
-        "frontend/slices/notion/slices/databases/views/TableView.tsx",
-        "frontend/slices/notion/slices/databases/views/BoardView.tsx"
-      ],
-      "exampleCode": "import { DatabaseBlock } from \"@/frontend/slices/notion/slices/databases/DatabaseBlock\";\n\n<DatabaseBlock databaseId={dbId} />",
-      "agentRecipe": "DatabaseBlock auto-routes to the active view component. Add custom property types by extending PropertyCell.tsx.",
-      "tags": [
-        "database",
-        "views",
-        "table",
-        "kanban",
-        "calendar"
-      ]
-    },
-    {
-      "slug": "command-palette",
-      "title": "Command Palette (⌘K)",
-      "description": "Cmd+K modal: feature navigation, workspace switching, theme, sign-out, custom commands. Auto-builds from feature registry.",
-      "source": "kitab-core + notion-page-clone",
-      "files": [
-        "frontend/shared/foundation/utils/system/command-menu/components.tsx"
-      ],
-      "exampleCode": "import { CommandMenu } from \"@/frontend/shared/foundation/utils/system/command-menu/components\";\n\n<CommandMenu actions={customActions} />",
-      "agentRecipe": "Mount CommandMenu once at the app shell level. It listens for Cmd+K globally. Pass extra commands via the actions prop or register via the command-registry.",
-      "tags": [
-        "palette",
-        "cmd-k",
-        "navigation"
-      ]
-    },
-    {
-      "slug": "comments-threaded",
-      "title": "Threaded Comments",
-      "description": "Page + block-level threaded comments with resolved state. Real-time via Convex.",
-      "source": "notion-page-clone",
-      "files": [
-        "frontend/slices/notion/slices/comments/components/BlockCommentsPopover.tsx",
-        "frontend/slices/notion/slices/comments/hooks/useComments.ts"
-      ],
-      "exampleCode": "import { BlockCommentsPopover } from \"@/frontend/slices/notion/slices/comments/components/BlockCommentsPopover\";\n\n<BlockCommentsPopover blockId={blockId} pageId={pageId} />",
-      "agentRecipe": "Anchor comments by passing pageId (always) and optional blockId. Use useComments(blockId) hook for the reactive list.",
-      "tags": [
-        "comments",
-        "real-time",
-        "threading"
-      ]
-    },
-    {
-      "slug": "theme-preset-switcher",
-      "title": "Theme Preset Switcher",
-      "description": "Runtime theme swap (colors + fonts + shadows + tracking). OKLch CSS vars per preset. Persists to localStorage + Convex.",
-      "source": "rahmanef.com",
-      "files": [
-        "frontend/shared/theme/theme-presets.ts",
-        "frontend/shared/ui/components/theme-preset-switcher.tsx"
-      ],
-      "exampleCode": "import { ThemePresetSwitcher } from \"@/frontend/shared/ui/components/theme-preset-switcher\";\n\n<ThemePresetSwitcher />",
-      "agentRecipe": "Add a new preset by appending a CSS block in app/globals.css with [data-theme=\"<name>\"], then register in preset-groups.ts.",
-      "tags": [
-        "theme",
-        "presets",
-        "oklch",
-        "design-system"
-      ]
-    },
-    {
-      "slug": "contact-form-resend",
-      "title": "Contact Form + Resend",
-      "description": "Contact form posting to Resend email API. Server Action + Zod input validation.",
-      "source": "cescadesigns",
-      "files": [
-        "recipes/contact-form-resend/src/page.tsx"
-      ],
-      "exampleCode": "// app/api/contact/route.ts\nimport { Resend } from \"resend\";\nconst resend = new Resend(process.env.RESEND_API_KEY!);\n\nexport async function POST(req: Request) {\n  const data = await req.formData();\n  await resend.emails.send({\n    from: \"form@yourdomain.com\",\n    to: \"you@yourdomain.com\",\n    subject: `From ${data.get(\"name\")}`,\n    html: `<p>${data.get(\"message\")}</p>`,\n  });\n  return Response.json({ ok: true });\n}",
-      "agentRecipe": "Wire ContactForm.tsx (form action /api/contact) to the route handler. Always validate inputs with Zod server-side.",
-      "tags": [
-        "form",
-        "email",
-        "resend",
-        "server-action"
-      ]
-    }
-  ],
+  "recipes": [],
   "features": [
     {
       "slug": "convex-auth",
@@ -972,6 +828,27 @@
         "no-clerk"
       ]
     },
+    {
+      "slug": "doku-payment",
+      "title": "DOKU — Indonesia Payment",
+      "category": "payment",
+      "description": "Pembayaran lokal Indonesia via DOKU — Checkout (hosted) + Direct (VA / QRIS / e-Wallet / PayLater / Minimarket / Kartu). HMAC-signed REST + signature-verified webhook + idempotent retries. Sibling slice to midtrans-payment dengan paymentOrders schema yang dishare.",
+      "source": "rahmanef63/resource-site",
+      "docsUrl": "https://sandbox.doku.com/integration",
+      "install": "",
+      "npmPackages": [],
+      "exampleCode": "",
+      "agentRecipe": "DOKU dual-mode: Checkout (hosted, all channels) atau Direct (single channel, returns VA/QRIS/deeplink). Webhook di /webhooks/doku verify HMAC-SHA256 (canonical: Client-Id + Request-Id + Request-Timestamp + Request-Target + Digest). Idempotency by request_id index. Server-only — no NEXT_PUBLIC_*. Sandbox default (api-sandbox.doku.com); flip DOKU_IS_PRODUCTION=true for live.",
+      "tags": [
+        "payment",
+        "doku",
+        "indonesia",
+        "qris",
+        "virtual-account",
+        "ewallet",
+        "checkout"
+      ]
+    },
     {
       "slug": "midtrans-payment",
       "title": "Midtrans — Indonesia Payment",
@@ -1099,6 +976,107 @@
         "bookings"
       ]
     },
+    {
+      "slug": "full-width-toggle",
+      "title": "Full Width Toggle",
+      "category": "ui",
+      "description": "Page-container width toggle (contained / wide / full). Per-device localStorage + cross-tab sync. Ships useFullWidth hook + FullWidthToggle button (icon/button/segment variants) + WidthContainer wrapper. Zero backend, zero env.",
+      "source": "rahmanef63/resource-site",
+      "docsUrl": "",
+      "install": "",
+      "npmPackages": [],
+      "exampleCode": "",
+      "agentRecipe": "Drop <WidthContainer> around page content, <FullWidthToggle variant='icon' /> in topbar. Variant 'segment' best for settings page. Hook useFullWidth() returns [mode, setMode, cycle]. SSR-safe — defaults to 'contained' until hydrate.",
+      "tags": [
+        "ui",
+        "layout",
+        "preference",
+        "localstorage",
+        "dashboard"
+      ]
+    },
+    {
+      "slug": "command-menu",
+      "title": "Command Menu (⌘K)",
+      "category": "ui",
+      "description": "Global ⌘K command palette. Auto-builds entries from your feature registry (defineFeature) + custom actions. Fuzzy search via cmdk. Mount once at app shell; listens globally. Facade slice — pulls from template-base/frontend/slices/command-menu which re-exports shared/foundation/utils/system/command-menu.",
+      "source": "superspace + kitab-core",
+      "docsUrl": "https://cmdk.paco.me",
+      "install": "npm i cmdk",
+      "npmPackages": [
+        "cmdk"
+      ],
+      "exampleCode": "",
+      "agentRecipe": "Mount <CommandMenu actions={...} /> once at the dashboard shell level. Listens for Cmd+K globally. Actions auto-build from feature registry + workspace + theme/sign-out. Add custom commands via actions prop or by registering in command-registry.ts.",
+      "tags": [
+        "ui",
+        "palette",
+        "cmd-k",
+        "navigation",
+        "keyboard"
+      ]
+    },
+    {
+      "slug": "motion-primitives",
+      "title": "Motion Primitives (8)",
+      "category": "ui",
+      "description": "Eight ready-to-style motion components: marquee, kinetic-heading, magnetic, cursor-spotlight, stat-counter, reading-progress, grain, lightbox. Framer-Motion-powered, tree-shakeable. Facade slice — pulls from template-base/frontend/slices/motion-primitives.",
+      "source": "rahmanef.com",
+      "docsUrl": "",
+      "install": "npm i framer-motion",
+      "npmPackages": [
+        "framer-motion"
+      ],
+      "exampleCode": "",
+      "agentRecipe": "Each primitive is independently importable from @/features/motion-primitives. Use marquee for logo strips, kinetic-heading for hero text, magnetic for CTA buttons, cursor-spotlight for hover-reveal panels, stat-counter for animated numbers, reading-progress for blog top bar, grain for film texture, lightbox for image gallery.",
+      "tags": [
+        "ui",
+        "motion",
+        "animation",
+        "marquee",
+        "framer-motion"
+      ]
+    },
+    {
+      "slug": "responsive-dialog",
+      "title": "Responsive Dialog (Sheet ↔ Modal)",
+      "category": "ui",
+      "description": "ResponsiveDialog — auto-switches between bottom Sheet (mobile) and centered Dialog (desktop) at the md breakpoint. Same API as shadcn Dialog. Kitab forbids raw <dialog>; use this everywhere. Facade slice — pulls from template-base/frontend/slices/responsive-dialog.",
+      "source": "superspace",
+      "docsUrl": "",
+      "install": "",
+      "npmPackages": [],
+      "exampleCode": "",
+      "agentRecipe": "Drop-in for shadcn Dialog. Use <ResponsiveDialog><ResponsiveDialogTrigger>…</ResponsiveDialogTrigger><ResponsiveDialogContent>…</ResponsiveDialogContent></ResponsiveDialog>. On mobile renders as Sheet sliding from bottom; on desktop as centered Dialog. Threshold via useMediaQuery('(min-width: 768px)').",
+      "tags": [
+        "ui",
+        "dialog",
+        "modal",
+        "sheet",
+        "responsive",
+        "primitive"
+      ]
+    },
+    {
+      "slug": "dashboard-shell",
+      "title": "Dashboard Shell — Responsive",
+      "category": "ui",
+      "description": "ResponsiveDashboardShell — desktop sidebar + topbar, mobile dock + sheet sidebar, breakpoint-aware. Ports superspace's layout/dashboard/{Desktop,Mobile,Responsive}DashboardShell + sidebar primary/secondary slots. Facade slice — pulls from template-base/frontend/slices/dashboard-shell.",
+      "source": "superspace",
+      "docsUrl": "",
+      "install": "",
+      "npmPackages": [],
+      "exampleCode": "",
+      "agentRecipe": "Wraps app/(admin) routes. <ResponsiveDashboardShell sidebar={<AppSidebar />} topbar={<TopBar />}>{children}</ResponsiveDashboardShell>. Mobile: sidebar collapses to <Sheet>. Desktop: persistent sidebar + topbar. Embed FullWidthToggle in topbar for instant container resize.",
+      "tags": [
+        "ui",
+        "layout",
+        "dashboard",
+        "sidebar",
+        "topbar",
+        "responsive"
+      ]
+    },
     {
       "slug": "broadcast-channel-sync",
       "title": "BroadcastChannel — Cross-tab Sync",
@@ -1116,6 +1094,115 @@
         "broadcast-channel",
         "demo-pattern"
       ]
+    },
+    {
+      "slug": "rbac-roles",
+      "title": "RBAC — Tiered System Roles",
+      "category": "auth",
+      "description": "Workspace-scoped RBAC with 6 system roles (owner/admin/manager/staff/client/guest) and three tier presets — solo, influencer, organization. Env-based platform admin bypass via PLATFORM_ADMIN_EMAILS. checkPermission / requirePermission helpers, role seeding mutation, @convex-dev/auth aware (no Clerk).",
+      "source": "superspace",
+      "install": "npx rahman-resources add rbac-roles",
+      "npmPackages": [],
+      "exampleCode": "",
+      "agentRecipe": "Three tier presets pick which system roles to seed: solo (owner+admin), influencer (+manager), organization (6 roles). Platform admin via env PLATFORM_ADMIN_EMAILS bypasses all checks. Resolution: platform admin → workspace owner → membership.additionalPermissions → role.permissions.",
+      "tags": [
+        "rbac",
+        "auth",
+        "permissions",
+        "roles",
+        "workspaces"
+      ]
+    },
+    {
+      "slug": "admin-panel",
+      "title": "Admin Panel — Unified Product Admin",
+      "category": "infra",
+      "description": "17-section admin surface (events, funnels, attribution, users, A/B, flags, pricing, CMS, email, audit, ...) gated by RBAC. Auto-filters sidebar by tier (solo/influencer/organization) and user permissions. Single backend resolver (getMyAdminAccess) mirrors frontend gate so UI can never leak.",
+      "source": "superspace + spec",
+      "install": "npx rahman-resources add admin-panel",
+      "npmPackages": [],
+      "exampleCode": "",
+      "agentRecipe": "Wrap pages with <AdminPage workspaceId tier>. AccessGate hides UI for non-admins, AdminShell renders 2-col layout with sidebar filtered by tier+perms. ADMIN_SECTIONS in config.ts is SSOT (17 entries). Personal-brand-os = tier 'solo' = owner sees everything.",
+      "tags": [
+        "admin",
+        "owner",
+        "platform",
+        "rbac",
+        "instrumentation",
+        "panel"
+      ]
+    },
+    {
+      "slug": "event-tracking",
+      "title": "Event Tracking — P0 Instrumentation",
+      "category": "data",
+      "description": "Client SDK + Convex ingestion endpoint for structured product events. Auto-captures page_view/signup/login + UTM/referrer/first-touch attribution. Batched flush via requestIdleCallback. Targets <100ms p99 ingestion.",
+      "source": "spec + superspace analytics",
+      "install": "npx rahman-resources add event-tracking",
+      "npmPackages": [],
+      "exampleCode": "",
+      "agentRecipe": "Writes to analyticsEvents table (no new schema). Anonymous page_view allowed pre-signup; other events require workspaceId. Session id per tab (sessionStorage), first-touch UTM in localStorage. Flush every ~500ms via requestIdleCallback. Cap retry queue at 500.",
+      "tags": [
+        "events",
+        "analytics",
+        "instrumentation",
+        "attribution",
+        "utm",
+        "p0"
+      ]
+    },
+    {
+      "slug": "theme-preset-switcher",
+      "title": "Theme Preset Switcher",
+      "category": "ui",
+      "description": "Runtime theme swap (colors + fonts + shadows + tracking). OKLch CSS vars per preset. Persists to localStorage + Convex. Add a new preset by appending a CSS block in app/globals.css with [data-theme=\"<name>\"], then register in preset-groups.ts.",
+      "source": "rahmanef.com",
+      "install": "npx rahman-resources add theme-preset-switcher",
+      "npmPackages": [],
+      "exampleCode": "",
+      "agentRecipe": "Import ThemePresetSwitcher from @/frontend/shared/ui/components/theme-preset-switcher and mount in the topbar. Presets live in theme-presets.ts; preset-groups.ts groups them for the picker UI.",
+      "tags": [
+        "theme",
+        "presets",
+        "oklch",
+        "design-system"
+      ]
+    },
+    {
+      "slug": "icon-picker",
+      "title": "Notion-Style Icon Picker",
+      "category": "ui",
+      "description": "Emoji + lucide icon picker with search, 10-color Notion palette, Twemoji/native toggle. One string stores emoji OR lucide:Name OR with ?c=hex tint — backwards-compat with raw-emoji fields. Single icon field stores emoji or 'lucide:Name' plus optional '?c=hex'.",
+      "source": "notion-page-clone",
+      "install": "npx rahman-resources add icon-picker",
+      "npmPackages": [],
+      "exampleCode": "",
+      "agentRecipe": "parseIconValue() decodes; lucideValue()/withColor() build. Add 'icon: v.string()' to Convex table — no migration needed for existing emoji fields. Popover variant for inline UI, Inline for sheets/dialogs.",
+      "tags": [
+        "icon",
+        "emoji",
+        "lucide",
+        "picker",
+        "twemoji",
+        "notion"
+      ]
+    },
+    {
+      "slug": "contact-form-resend",
+      "title": "Contact Form + Resend",
+      "category": "email",
+      "description": "Contact form posting to Resend email API. Server Action + Zod input validation. Convex mutation for storage + Resend send.",
+      "source": "cescadesigns",
+      "install": "npx rahman-resources add contact-form-resend",
+      "npmPackages": [],
+      "exampleCode": "",
+      "agentRecipe": "Wire contactMessages.send mutation in convex/. Server emails via Resend from form@yourdomain.com. Always validate inputs with Zod or v.* server-side. Anonymous allowed.",
+      "tags": [
+        "form",
+        "email",
+        "resend",
+        "convex"
+      ]
     }
   ],
   "slices": [
@@ -1123,6 +1210,7 @@
       "slug": "convex-auth",
       "title": "Convex Auth — Email Magic Link",
       "category": "auth",
+      "kind": "backend",
       "version": "0.1.0",
       "description": "@convex-dev/auth with email magic link via Resend. Self-hosted Convex friendly. Hard mandate per kitab CLAUDE.md (no Clerk).",
       "source": "rahmanef63/resource-site",
@@ -1171,10 +1259,75 @@
       ],
       "agentRecipe": "Run `rr add convex-auth`. Then create convex/auth.ts using the kitab pattern (Resend provider). Set env via `npx convex env set` for self-hosted."
     },
+    {
+      "slug": "doku-payment",
+      "title": "DOKU — Indonesia Payment",
+      "category": "payment",
+      "kind": "full",
+      "version": "0.1.0",
+      "description": "Pembayaran lokal Indonesia via DOKU — Checkout (hosted) + Direct (VA / QRIS / e-Wallet / PayLater / Minimarket / Kartu). HMAC-signed REST + signature-verified webhook + idempotent retries. Sibling slice to midtrans-payment dengan paymentOrders schema yang dishare.",
+      "source": "rahmanef63/resource-site",
+      "slicePath": "frontend/slices/doku-payment",
+      "convexPaths": [
+        "convex/features/payment"
+      ],
+      "npm": [],
+      "shadcn": [
+        "card",
+        "button",
+        "dialog",
+        "input",
+        "label",
+        "select",
+        "badge",
+        "skeleton"
+      ],
+      "env": [
+        {
+          "name": "DOKU_CLIENT_ID",
+          "scope": "convex",
+          "required": true
+        },
+        {
+          "name": "DOKU_SECRET_KEY",
+          "scope": "convex",
+          "required": true
+        },
+        {
+          "name": "DOKU_IS_PRODUCTION",
+          "scope": "convex"
+        },
+        {
+          "name": "DOKU_NOTIFY_PATH",
+          "scope": "convex"
+        }
+      ],
+      "peers": [
+        {
+          "slug": "convex-auth",
+          "range": "^0.1",
+          "reason": "Order ownership requires authenticated user."
+        }
+      ],
+      "providers": [
+        "doku"
+      ],
+      "tags": [
+        "payment",
+        "doku",
+        "indonesia",
+        "qris",
+        "virtual-account",
+        "ewallet",
+        "checkout"
+      ],
+      "agentRecipe": "DOKU dual-mode: Checkout (hosted, all channels) atau Direct (single channel, returns VA/QRIS/deeplink). Webhook di /webhooks/doku verify HMAC-SHA256 (canonical: Client-Id + Request-Id + Request-Timestamp + Request-Target + Digest). Idempotency by request_id index. Server-only — no NEXT_PUBLIC_*. Sandbox default (api-sandbox.doku.com); flip DOKU_IS_PRODUCTION=true for live."
+    },
     {
       "slug": "midtrans-payment",
       "title": "Midtrans — Indonesia Payment",
       "category": "payment",
+      "kind": "full",
       "version": "0.1.0",
       "description": "Pembayaran lokal Indonesia via Midtrans Snap (BCA, Mandiri, BRI, e-wallet GoPay/OVO/Dana, QRIS). Webhook untuk konfirmasi. Provider-isolated under components/providers/midtrans + actions/midtrans so Doku/Stripe land as siblings.",
       "source": "rahmanef63/resource-site",
@@ -1231,6 +1384,7 @@
       "slug": "resend-newsletter",
       "title": "Resend — Transactional & Newsletter",
       "category": "email",
+      "kind": "backend",
       "version": "0.1.0",
       "description": "Transactional email + newsletter blast via Resend. Double opt-in flow + audience segmentation. Magic-link delivery for Convex Auth.",
       "source": "rahmanef63/resource-site",
@@ -1273,6 +1427,7 @@
       "slug": "ai-router",
       "title": "AI Router (OpenRouter)",
       "category": "ai",
+      "kind": "backend",
       "version": "0.1.0",
       "description": "Tier-routed LLM access via OpenRouter — nano (Haiku) for classification, mid (Sonnet) for chat, flagship (Opus) for deep reasoning. Per-call usage log.",
       "source": "rahmanef63/resource-site",
@@ -1308,6 +1463,7 @@
       "slug": "vector-search",
       "title": "Convex Vector Search",
       "category": "search",
+      "kind": "full",
       "version": "0.1.0",
       "description": "Embeddings-based search via Convex's built-in vector index. Embed via OpenAI text-embedding-3-small (1536-dim), query via vectorIndex().",
       "source": "rahmanef63/resource-site",
@@ -1344,6 +1500,7 @@
       "slug": "mdx-blog",
       "title": "MDX Blog",
       "category": "content",
+      "kind": "ui",
       "version": "0.1.0",
       "description": "Markdown-with-JSX untuk blog post. File-based under content/blog/*.mdx. Auto-generate ToC, reading-time, syntax highlight, plus embed React components inline.",
       "source": "rahmanef63/resource-site",
@@ -1372,6 +1529,7 @@
       "slug": "cal-com-booking",
       "title": "Cal.com Booking",
       "category": "data",
+      "kind": "full",
       "version": "0.1.0",
       "description": "Embedded Cal.com booking widget + webhook receiver to mirror bookings into Convex.",
       "source": "rahmanef63/resource-site",
@@ -1407,10 +1565,156 @@
       ],
       "agentRecipe": "Embed Cal.com via @calcom/embed-react di halaman services. Configure webhook di Cal.com dashboard → POST ke /api/cal-webhook → upsert booking di Convex."
     },
+    {
+      "slug": "full-width-toggle",
+      "title": "Full Width Toggle",
+      "category": "ui",
+      "kind": "ui",
+      "version": "0.1.0",
+      "description": "Page-container width toggle (contained / wide / full). Per-device localStorage + cross-tab sync. Ships useFullWidth hook + FullWidthToggle button (icon/button/segment variants) + WidthContainer wrapper. Zero backend, zero env.",
+      "source": "rahmanef63/resource-site",
+      "slicePath": "frontend/slices/full-width-toggle",
+      "convexPaths": [],
+      "npm": [],
+      "shadcn": [
+        "button"
+      ],
+      "env": [],
+      "peers": [],
+      "providers": [],
+      "tags": [
+        "ui",
+        "layout",
+        "preference",
+        "localstorage",
+        "dashboard"
+      ],
+      "agentRecipe": "Drop <WidthContainer> around page content, <FullWidthToggle variant='icon' /> in topbar. Variant 'segment' best for settings page. Hook useFullWidth() returns [mode, setMode, cycle]. SSR-safe — defaults to 'contained' until hydrate."
+    },
+    {
+      "slug": "command-menu",
+      "title": "Command Menu (⌘K)",
+      "category": "ui",
+      "kind": "ui",
+      "version": "0.1.0",
+      "description": "Global ⌘K command palette. Auto-builds entries from your feature registry (defineFeature) + custom actions. Fuzzy search via cmdk. Mount once at app shell; listens globally. Facade slice — pulls from template-base/frontend/slices/command-menu which re-exports shared/foundation/utils/system/command-menu.",
+      "source": "superspace + kitab-core",
+      "slicePath": "template-base/frontend/slices/command-menu",
+      "convexPaths": [],
+      "npm": [
+        "cmdk@^1.0.0"
+      ],
+      "shadcn": [
+        "command",
+        "dialog"
+      ],
+      "env": [],
+      "peers": [],
+      "providers": [],
+      "tags": [
+        "ui",
+        "palette",
+        "cmd-k",
+        "navigation",
+        "keyboard"
+      ],
+      "agentRecipe": "Mount <CommandMenu actions={...} /> once at the dashboard shell level. Listens for Cmd+K globally. Actions auto-build from feature registry + workspace + theme/sign-out. Add custom commands via actions prop or by registering in command-registry.ts."
+    },
+    {
+      "slug": "motion-primitives",
+      "title": "Motion Primitives (8)",
+      "category": "ui",
+      "kind": "ui",
+      "version": "0.1.0",
+      "description": "Eight ready-to-style motion components: marquee, kinetic-heading, magnetic, cursor-spotlight, stat-counter, reading-progress, grain, lightbox. Framer-Motion-powered, tree-shakeable. Facade slice — pulls from template-base/frontend/slices/motion-primitives.",
+      "source": "rahmanef.com",
+      "slicePath": "template-base/frontend/slices/motion-primitives",
+      "convexPaths": [],
+      "npm": [
+        "framer-motion@^11.0.0"
+      ],
+      "shadcn": [],
+      "env": [],
+      "peers": [],
+      "providers": [],
+      "tags": [
+        "ui",
+        "motion",
+        "animation",
+        "marquee",
+        "framer-motion"
+      ],
+      "agentRecipe": "Each primitive is independently importable from @/features/motion-primitives. Use marquee for logo strips, kinetic-heading for hero text, magnetic for CTA buttons, cursor-spotlight for hover-reveal panels, stat-counter for animated numbers, reading-progress for blog top bar, grain for film texture, lightbox for image gallery."
+    },
+    {
+      "slug": "responsive-dialog",
+      "title": "Responsive Dialog (Sheet ↔ Modal)",
+      "category": "ui",
+      "kind": "ui",
+      "version": "0.1.0",
+      "description": "ResponsiveDialog — auto-switches between bottom Sheet (mobile) and centered Dialog (desktop) at the md breakpoint. Same API as shadcn Dialog. Kitab forbids raw <dialog>; use this everywhere. Facade slice — pulls from template-base/frontend/slices/responsive-dialog.",
+      "source": "superspace",
+      "slicePath": "template-base/frontend/slices/responsive-dialog",
+      "convexPaths": [],
+      "npm": [],
+      "shadcn": [
+        "dialog",
+        "sheet"
+      ],
+      "env": [],
+      "peers": [],
+      "providers": [],
+      "tags": [
+        "ui",
+        "dialog",
+        "modal",
+        "sheet",
+        "responsive",
+        "primitive"
+      ],
+      "agentRecipe": "Drop-in for shadcn Dialog. Use <ResponsiveDialog><ResponsiveDialogTrigger>…</ResponsiveDialogTrigger><ResponsiveDialogContent>…</ResponsiveDialogContent></ResponsiveDialog>. On mobile renders as Sheet sliding from bottom; on desktop as centered Dialog. Threshold via useMediaQuery('(min-width: 768px)')."
+    },
+    {
+      "slug": "dashboard-shell",
+      "title": "Dashboard Shell — Responsive",
+      "category": "ui",
+      "kind": "ui",
+      "version": "0.1.0",
+      "description": "ResponsiveDashboardShell — desktop sidebar + topbar, mobile dock + sheet sidebar, breakpoint-aware. Ports superspace's layout/dashboard/{Desktop,Mobile,Responsive}DashboardShell + sidebar primary/secondary slots. Facade slice — pulls from template-base/frontend/slices/dashboard-shell.",
+      "source": "superspace",
+      "slicePath": "template-base/frontend/slices/dashboard-shell",
+      "convexPaths": [],
+      "npm": [],
+      "shadcn": [
+        "sheet",
+        "scroll-area",
+        "separator",
+        "tooltip"
+      ],
+      "env": [],
+      "peers": [
+        {
+          "slug": "full-width-toggle",
+          "range": "^0.1",
+          "reason": "Topbar surfaces the width toggle when this is mounted."
+        }
+      ],
+      "providers": [],
+      "tags": [
+        "ui",
+        "layout",
+        "dashboard",
+        "sidebar",
+        "topbar",
+        "responsive"
+      ],
+      "agentRecipe": "Wraps app/(admin) routes. <ResponsiveDashboardShell sidebar={<AppSidebar />} topbar={<TopBar />}>{children}</ResponsiveDashboardShell>. Mobile: sidebar collapses to <Sheet>. Desktop: persistent sidebar + topbar. Embed FullWidthToggle in topbar for instant container resize."
+    },
     {
       "slug": "broadcast-channel-sync",
       "title": "BroadcastChannel — Cross-tab Sync",
       "category": "realtime",
+      "kind": "ui",
       "version": "0.1.0",
       "description": "Same-origin cross-tab + cross-iframe state sync via BroadcastChannel API. Tiny, no backend, no install.",
       "source": "Web Platform — BroadcastChannel API",
@@ -1428,6 +1732,211 @@
         "demo-pattern"
       ],
       "agentRecipe": "Use BroadcastChannel only for demo / cross-iframe state mirroring. Production data still goes through Convex realtime. Use the useBroadcastSync(channelName, initial) hook from @/features/broadcast-channel-sync."
+    },
+    {
+      "slug": "rbac-roles",
+      "title": "RBAC — Tiered System Roles",
+      "category": "auth",
+      "kind": "backend",
+      "version": "0.1.0",
+      "description": "Workspace-scoped RBAC with 6 system roles (owner/admin/manager/staff/client/guest) and three tier presets — solo, influencer, organization. Env-based platform admin bypass via PLATFORM_ADMIN_EMAILS. checkPermission / requirePermission helpers, role seeding mutation, @convex-dev/auth aware (no Clerk).",
+      "source": "superspace",
+      "slicePath": "",
+      "convexPaths": [
+        "template-base/convex/lib/rbac"
+      ],
+      "npm": [],
+      "shadcn": [],
+      "env": [
+        {
+          "name": "PLATFORM_ADMIN_EMAILS",
+          "scope": "convex",
+          "description": "Comma-separated emails granted cross-workspace admin."
+        }
+      ],
+      "peers": [
+        {
+          "slug": "convex-auth",
+          "range": "^0.1",
+          "reason": "RBAC checks the authed user identity."
+        }
+      ],
+      "providers": [],
+      "tags": [
+        "rbac",
+        "auth",
+        "permissions",
+        "roles",
+        "workspaces"
+      ],
+      "agentRecipe": "Three tier presets pick which system roles to seed: solo (owner+admin), influencer (+manager), organization (6 roles). Platform admin via env PLATFORM_ADMIN_EMAILS bypasses all checks. Resolution: platform admin → workspace owner → membership.additionalPermissions → role.permissions."
+    },
+    {
+      "slug": "admin-panel",
+      "title": "Admin Panel — Unified Product Admin",
+      "category": "infra",
+      "kind": "full",
+      "version": "0.1.0",
+      "description": "17-section admin surface (events, funnels, attribution, users, A/B, flags, pricing, CMS, email, audit, ...) gated by RBAC. Auto-filters sidebar by tier (solo/influencer/organization) and user permissions. Single backend resolver (getMyAdminAccess) mirrors frontend gate so UI can never leak.",
+      "source": "superspace + spec",
+      "slicePath": "template-base/frontend/slices/admin-panel",
+      "convexPaths": [
+        "template-base/convex/features/admin-panel"
+      ],
+      "npm": [],
+      "shadcn": [
+        "card",
+        "badge",
+        "button"
+      ],
+      "env": [],
+      "peers": [
+        {
+          "slug": "rbac-roles",
+          "range": "^0.1",
+          "reason": "Admin sections require RBAC perms — must seed roles first."
+        }
+      ],
+      "providers": [],
+      "tags": [
+        "admin",
+        "owner",
+        "platform",
+        "rbac",
+        "instrumentation",
+        "panel"
+      ],
+      "agentRecipe": "Wrap pages with <AdminPage workspaceId tier>. AccessGate hides UI for non-admins, AdminShell renders 2-col layout with sidebar filtered by tier+perms. ADMIN_SECTIONS in config.ts is SSOT (17 entries). Personal-brand-os = tier 'solo' = owner sees everything."
+    },
+    {
+      "slug": "event-tracking",
+      "title": "Event Tracking — P0 Instrumentation",
+      "category": "data",
+      "kind": "full",
+      "version": "0.1.0",
+      "description": "Client SDK + Convex ingestion endpoint for structured product events. Auto-captures page_view/signup/login + UTM/referrer/first-touch attribution. Batched flush via requestIdleCallback. Targets <100ms p99 ingestion.",
+      "source": "spec + superspace analytics",
+      "slicePath": "template-base/frontend/slices/admin-panel/slices/events",
+      "convexPaths": [
+        "template-base/convex/features/admin-panel",
+        "template-base/convex/features/analytics"
+      ],
+      "npm": [],
+      "shadcn": [],
+      "env": [],
+      "peers": [
+        {
+          "slug": "admin-panel",
+          "range": "^0.1",
+          "reason": "Lives under admin slice events subfolder."
+        }
+      ],
+      "providers": [],
+      "tags": [
+        "events",
+        "analytics",
+        "instrumentation",
+        "attribution",
+        "utm",
+        "p0"
+      ],
+      "agentRecipe": "Writes to analyticsEvents table (no new schema). Anonymous page_view allowed pre-signup; other events require workspaceId. Session id per tab (sessionStorage), first-touch UTM in localStorage. Flush every ~500ms via requestIdleCallback. Cap retry queue at 500."
+    },
+    {
+      "slug": "theme-preset-switcher",
+      "title": "Theme Preset Switcher",
+      "category": "ui",
+      "kind": "ui",
+      "version": "0.1.0",
+      "description": "Runtime theme swap (colors + fonts + shadows + tracking). OKLch CSS vars per preset. Persists to localStorage + Convex. Add a new preset by appending a CSS block in app/globals.css with [data-theme=\"<name>\"], then register in preset-groups.ts.",
+      "source": "rahmanef.com",
+      "slicePath": "template-base/frontend/shared/theme",
+      "convexPaths": [],
+      "npm": [],
+      "shadcn": [],
+      "env": [],
+      "peers": [],
+      "providers": [],
+      "tags": [
+        "theme",
+        "presets",
+        "oklch",
+        "design-system"
+      ],
+      "agentRecipe": "Import ThemePresetSwitcher from @/frontend/shared/ui/components/theme-preset-switcher and mount in the topbar. Presets live in theme-presets.ts; preset-groups.ts groups them for the picker UI."
+    },
+    {
+      "slug": "icon-picker",
+      "title": "Notion-Style Icon Picker",
+      "category": "ui",
+      "kind": "ui",
+      "version": "0.1.0",
+      "description": "Emoji + lucide icon picker with search, 10-color Notion palette, Twemoji/native toggle. One string stores emoji OR lucide:Name OR with ?c=hex tint — backwards-compat with raw-emoji fields. Single icon field stores emoji or 'lucide:Name' plus optional '?c=hex'.",
+      "source": "notion-page-clone",
+      "slicePath": "template-base/frontend/slices/notion/slices/icon-picker",
+      "convexPaths": [],
+      "npm": [],
+      "shadcn": [
+        "popover",
+        "button",
+        "input"
+      ],
+      "env": [],
+      "peers": [],
+      "providers": [],
+      "tags": [
+        "icon",
+        "emoji",
+        "lucide",
+        "picker",
+        "twemoji",
+        "notion"
+      ],
+      "agentRecipe": "parseIconValue() decodes; lucideValue()/withColor() build. Add 'icon: v.string()' to Convex table — no migration needed for existing emoji fields. Popover variant for inline UI, Inline for sheets/dialogs."
+    },
+    {
+      "slug": "contact-form-resend",
+      "title": "Contact Form + Resend",
+      "category": "email",
+      "kind": "full",
+      "version": "0.1.0",
+      "description": "Contact form posting to Resend email API. Server Action + Zod input validation. Convex mutation for storage + Resend send.",
+      "source": "cescadesigns",
+      "slicePath": "template-base/frontend/slices/contact-form-resend",
+      "convexPaths": [],
+      "npm": [
+        "resend@^4.0.0",
+        "framer-motion@^11.0.0"
+      ],
+      "shadcn": [
+        "card",
+        "button",
+        "input",
+        "label",
+        "textarea"
+      ],
+      "env": [
+        {
+          "name": "RESEND_API_KEY",
+          "scope": "convex",
+          "required": true
+        }
+      ],
+      "peers": [
+        {
+          "slug": "convex-auth",
+          "range": "^0.1",
+          "reason": "Optional — anonymous submission works without auth."
+        }
+      ],
+      "providers": [],
+      "tags": [
+        "form",
+        "email",
+        "resend",
+        "convex"
+      ],
+      "agentRecipe": "Wire contactMessages.send mutation in convex/. Server emails via Resend from form@yourdomain.com. Always validate inputs with Zod or v.* server-side. Anonymous allowed."
     }
   ]
 }

package/lib/slice-schema.json

@@ -43,6 +43,11 @@
         "infra"
       ]
     },
+    "kind": {
+      "type": "string",
+      "enum": ["ui", "backend", "full"],
+      "description": "Slice shape — ui (no convex), backend (no UI), full (both)."
+    },
     "title": { "type": "string", "minLength": 3 },
     "description": { "type": "string", "minLength": 10 },
     "namespace": {
@@ -53,12 +58,11 @@
     "convex": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["rootPaths"],
       "properties": {
         "tablesExport": {
           "type": "string",
-          "pattern": "^[a-zA-Z][a-zA-Z0-9_]*$",
-          "description": "Name of the table-fragment export in schema.ts (e.g., midtransTables)."
+          "pattern": "^([a-zA-Z][a-zA-Z0-9_]*)?$",
+          "description": "Name of the table-fragment export in schema.ts (e.g., midtransTables). Empty for ui-only slices."
         },
         "schemaPath": {
           "type": "string",
@@ -66,25 +70,25 @@
         },
         "rootPaths": {
           "type": "array",
-          "minItems": 1,
           "items": { "type": "string" },
-          "description": "Convex folders the lift pulls into the consumer's convex/."
+          "description": "Convex folders the lift pulls into the consumer's convex/. Empty for ui-only slices."
         }
       }
     },
     "frontend": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["slicePath", "configExport"],
+      "required": ["slicePath"],
       "properties": {
         "slicePath": {
           "type": "string",
-          "pattern": "^frontend/slices/[a-z0-9_/-]+$"
+          "pattern": "^(template-base/)?frontend/slices/[a-z0-9_/-]+$",
+          "description": "Portable home → frontend/slices/<slug>. Foundation home → template-base/frontend/slices/<slug>."
         },
         "configExport": {
           "type": "string",
-          "pattern": "^[a-zA-Z][a-zA-Z0-9_]*$",
-          "description": "Name of the defineFeature(...) export the registry generators look for."
+          "pattern": "^([a-zA-Z][a-zA-Z0-9_]*)?$",
+          "description": "Name of the defineFeature(...) export the registry generators look for. Empty for ui-only slices."
         }
       }
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rahman-resources",
-  "version": "0.9.1",
+  "version": "0.11.1",
   "description": "Scaffolder + installer for Rahman Resources kitab — npx rahman-resources init/add/lift/scaffold-slice/publish-slice. Tier-3 portable feature slices + manifest + skills + CRUD workflows.",
   "type": "module",
   "license": "MIT",
@@ -26,9 +26,12 @@
     "gen": "node scripts/gen-manifest.mjs",
     "validate": "node scripts/validate.mjs",
     "validate:slices": "node scripts/validate-slice.mjs",
+    "validate:parity": "node scripts/validate-slice-parity.mjs",
+    "validate:structure": "node scripts/validate-structure.mjs",
+    "validate:all": "node scripts/validate.mjs && node scripts/validate-slice.mjs --check && node scripts/validate-slice-parity.mjs && node scripts/validate-structure.mjs",
     "sync:skills": "node scripts/sync-skills.mjs",
     "sync:skills:check": "node scripts/sync-skills.mjs --check",
-    "prepublishOnly": "node scripts/sync-skills.mjs --check && node scripts/validate.mjs && node scripts/validate-slice.mjs --check"
+    "prepublishOnly": "node scripts/sync-skills.mjs --check && node scripts/validate.mjs && node scripts/validate-slice.mjs --check && node scripts/validate-slice-parity.mjs && node scripts/validate-structure.mjs"
   },
   "dependencies": {
     "kleur": "^4.1.5",