rahman-resources 1.2.0 → 1.5.1

package/lib/manifest.json

@@ -1,6 +1,6 @@
 {
   "version": 2,
-  "generatedAt": "2026-05-16T12:03:28.553Z",
+  "generatedAt": "2026-05-16T15:42:08.348Z",
   "repo": "rahmanef63/resource-site",
   "branch": "main",
   "layouts": [
@@ -1341,11 +1341,102 @@
         "resend"
       ]
     },
+    {
+      "slug": "ai-chat",
+      "title": "AI Chat — Workbench / Sidebar / Search",
+      "category": "ai",
+      "description": "One conversational AI feature, three render modes. Same Convex backend (threads + streaming + tool calls + RAG), pick the surface via prop:\n\n  • workbench — Claude.ai / ChatGPT three-column page (default)\n  • sidebar — collapsible copilot panel inside another CRUD app\n  • search — single-question + answer + citations (Perplexity)\n\nUse cases:\n  – Customer-support chatbot embedded in your marketing site\n  – Developer copilot in your PR/docs admin\n  – Knowledge-base search over your blog + docs corpus\n  – Internal AI assistant in your dashboard\n\nWhat it ships: multi-provider (Anthropic / OpenAI / Google / Mistral / Ollama), multimodal (text + image + PDF + audio), typed tool calls with inline inspector, agent mode (plan→execute→reflect), branching threads, RAG citations, resumable streams, usage telemetry. Public surface = consumer chat; admin surface = persona, fallback, guardrails per-bot.",
+      "source": "rahmanef63/resource-site",
+      "docsUrl": "https://sdk.vercel.ai/docs",
+      "install": "npm i ai @ai-sdk/anthropic @ai-sdk/openai",
+      "npmPackages": [
+        "ai",
+        "@ai-sdk/anthropic",
+        "@ai-sdk/openai"
+      ],
+      "exampleCode": "",
+      "agentRecipe": "Run `npx rr add ai-chat`. Pick `mode=\"workbench\" | \"sidebar\" | \"search\"` on `<AIChat />` (or use the convenience exports `<AIChatWorkbench />`, `<AIChatSidebar />`, `<AIChatSearch />`). Same backend tables + streaming action for all three.",
+      "tags": [
+        "ai",
+        "ai:chat",
+        "streaming",
+        "multimodal",
+        "tool-calls",
+        "agent-mode",
+        "rag",
+        "citations",
+        "branching",
+        "history"
+      ]
+    },
+    {
+      "slug": "ai-studio",
+      "title": "AI Studio — Generation Canvas",
+      "category": "ai",
+      "description": "AI is the primary UI — single big prompt input → live-streaming output → variation grid → version tree. Suno / Midjourney / Lovable / v0 pattern. Output kinds: text, code, image, audio (configurable per template).\n\nUse cases:\n  – AI image generation product (creative output)\n  – AI logo / banner / social-post studio\n  – AI code-snippet generator (component scaffolder)\n  – AI music / voiceover producer\n  – AI blog-draft factory (text)\n\nFeatures: prompt history, branch + compare outputs, like + favorite, share-to-link, templates from ai-admin.",
+      "source": "rahmanef63/resource-site",
+      "install": "",
+      "npmPackages": [],
+      "exampleCode": "",
+      "agentRecipe": "Run `npx rr add ai-studio`. Mount `<GeneratorCanvas />` at /. Use case: prompt → output IS the entire product. Wire your output renderer (text/image/code/audio) via the OutputSlot adapter. Templates loaded from ai-admin.studio.templates.",
+      "tags": [
+        "ai",
+        "ai:studio",
+        "generation",
+        "streaming",
+        "history",
+        "branching",
+        "image-gen"
+      ]
+    },
+    {
+      "slug": "ai-agents",
+      "title": "AI Agents — Autonomous Workers",
+      "category": "ai",
+      "description": "Background AI workers. Define an agent (skill × model × tools × max-iter), trigger it on-demand or on a cron schedule, watch the step-by-step trace as it runs. Devin / Replit-Agent / Manus pattern.\n\nUse cases:\n  – Nightly audit-bp on the codebase (PR-reviewer style)\n  – Weekly SEO crawl + content suggestions\n  – Auto-moderate comment queue\n  – Scheduled data ingestion + summarization\n  – Long-form research task with multi-source citations\n\nFeatures: queue + live trace, per-step retry policy, hard cost cap, shareable trace URLs, full audit-log integration.",
+      "source": "rahmanef63/resource-site",
+      "install": "",
+      "npmPackages": [],
+      "exampleCode": "",
+      "agentRecipe": "Run `npx rr add ai-agents`. Mount `<RunnerDashboard />` at /agents. Trigger runs via `runAgent({agentSlug, input, scheduleAt?})`. Cron scheduler via Convex cron — wire if you need scheduled runs. Agent definitions managed in ai-admin.",
+      "tags": [
+        "ai",
+        "ai:agents",
+        "agent-mode",
+        "tool-calls",
+        "async",
+        "queue",
+        "traces"
+      ]
+    },
+    {
+      "slug": "ai-admin",
+      "title": "AI Admin — Console (Instructions · Skills · Tools · Agents · Providers)",
+      "category": "ai",
+      "description": "Central operator console for the whole AI stack. Every other ai-* feature reads its registries from here. Tabs ordered to match the build-flow:\n\n  1. Providers   — register Anthropic / OpenAI / Google / Mistral / Ollama (API keys AES-encrypted at rest)\n  2. Models      — per-provider catalog (capabilities, context window, pricing)\n  3. Instructions — custom system-prompt library (Claude Projects-style)\n  4. Skills      — named instruction + model default + tool defaults (consumed by chat + studio)\n  5. Tools       — JSON-schema function specs + impl (http / convex / shell) + sandbox flag\n  6. Agents      — skill × model × tools × max-iter (consumed by ai-agents)\n  7. Budgets     — per-workspace cost caps + alerts + hard kill\n  8. Audit       — every AI call: actor / agent / tokens / cost / latency / outcome\n\nIncludes Create-Agent / Create-Skill / Create-Tool / Create-Instruction wizards.",
+      "source": "rahmanef63/resource-site",
+      "install": "",
+      "npmPackages": [],
+      "exampleCode": "",
+      "agentRecipe": "Run `npx rr add ai-admin`. Adds an `AI` section to the admin-panel ADMIN_SECTIONS registry. Sub-tabs ordered to match build-flow: Providers → Models → Instructions → Skills → Tools → Agents → Budgets → Audit. Includes Create-* wizards for instructions / skills / tools / agents. API keys AES-encrypted via AI_ADMIN_ENCRYPTION_KEY env. The instruction / skill / tool / agent registries are SSOTs consumed by every ai-* consumer slice (chat + studio + agents).",
+      "tags": [
+        "ai",
+        "ai:admin",
+        "instructions",
+        "skills",
+        "tools",
+        "agents",
+        "providers",
+        "models",
+        "budgets",
+        "audit"
+      ]
+    },
     {
       "slug": "ai-router",
-      "title": "AI Router (OpenRouter)",
+      "title": "AI Router — Backend Provider Proxy",
       "category": "ai",
-      "description": "Tier-routed LLM access via OpenRouter — nano (Haiku) for classification, mid (Sonnet) for chat, flagship (Opus) for deep reasoning. Per-call usage log.",
+      "description": "Backend infrastructure (no UI). Single proxy that every other ai-* feature calls. Tier-routed — nano (Haiku) for classification, mid (Sonnet) for chat, flagship (Opus) for deep reasoning. Per-call usage log + cost guard. Works with direct provider keys or OpenRouter umbrella.\n\nNot something you mount — installed automatically as a peer when you add ai-chat / ai-studio / ai-agents.",
       "source": "rahmanef63/resource-site",
       "docsUrl": "https://sdk.vercel.ai/docs",
       "install": "npm i ai @openrouter/ai-sdk-provider",
@@ -1354,12 +1445,12 @@
         "@openrouter/ai-sdk-provider"
       ],
       "exampleCode": "",
-      "agentRecipe": "Wrap every AI call through ai-router action. Pick tier based on workload: nano for spam-flag/headline-suggest, mid for chat/draft, flagship for methodology-review. Log token usage to ai_usage table for cost dashboard.",
+      "agentRecipe": "Wrap every AI call through ai-router. Tiers: nano = quick classification (spam-flag, headline-suggest), mid = chat / draft, flagship = methodology-review / deep-think. Token usage logs to ai_usage table for the cost dashboard.",
       "tags": [
         "ai",
-        "llm",
-        "openrouter",
-        "tier-routing"
+        "ai:backend",
+        "tier-routing",
+        "cost-guard"
       ]
     },
     {
@@ -1621,9 +1712,9 @@
     },
     {
       "slug": "icon-picker",
-      "title": "Notion-Style Icon Picker",
+      "title": "Icon Picker",
       "category": "ui",
-      "description": "Emoji + lucide icon picker with search, 10-color Notion palette, Twemoji/native toggle, recents tracking. One string stores emoji OR lucide:Name OR with ?c=hex tint — backwards-compat with raw-emoji fields. Two variants: Popover (compact trigger) and Inline (full sheet/dialog use). Lifted 2026-05-16 from notion-page-clone — full implementation (19 files) including emoji-keywords search index, twemoji renderer, lucide-catalog, recents store, style-pref hook.",
+      "description": "Emoji + lucide icon picker with search, 10-color palette, Twemoji/native toggle, recents tracking. One string stores emoji OR lucide:Name OR with ?c=hex tint — backwards-compat with raw-emoji fields. Two variants: Popover (compact trigger) and Inline (full sheet/dialog use). Lifted 2026-05-16 from notion-page-clone — full implementation (19 files) including emoji-keywords search index, twemoji renderer, lucide-catalog, recents store, style-pref hook.",
       "source": "notion-page-clone",
       "install": "npx rahman-resources add icon-picker",
       "npmPackages": [],
@@ -1656,6 +1747,26 @@
         "brutalist"
       ]
     },
+    {
+      "slug": "hero",
+      "title": "Hero",
+      "category": "ui",
+      "description": "Editorial split-grid landing hero — eyebrow pill + large serif H1 + italic pull-quote + 1-2 button CTA row + right-column portrait card with optional caption. Fully props-driven (title/quote/ctas/image). Sanitized from rahmanef.com on 2026-05-16: SITE_CONFIG hardcode dropped, custom Heading/Section primitives replaced with raw semantic elements + stock Tailwind tracking-widest so the slice ships without consumer preset utilities.",
+      "source": "rahmanef.com",
+      "install": "npx rahman-resources add hero",
+      "npmPackages": [],
+      "exampleCode": "",
+      "agentRecipe": "Run `npx rr add hero`. <HeroView title eyebrow quote ctas image imageCaption /> — all props optional except title. Pass `image={undefined}` for text-only hero (auto-collapses to single 12-column row). Pairs visually with cta slice (same brutalist border + serif scale).",
+      "tags": [
+        "ui",
+        "hero",
+        "marketing",
+        "landing",
+        "section",
+        "editorial",
+        "brutalist"
+      ]
+    },
     {
       "slug": "rate-limit",
       "title": "Rate Limit",
@@ -1674,6 +1785,102 @@
         "throttle"
       ]
     },
+    {
+      "slug": "subscribers",
+      "title": "Subscribers",
+      "category": "email",
+      "description": "Newsletter list with honeypot + per-email rate-limit + token-based unsubscribe + admin remove. Public `subscribe` returns status strings (`created` / `already` / `resubscribed` / `honeypot`); admin `listAll` / `count` queries gated by `requireAdmin` (rr `_shared/auth`). Lifted 2026-05-16 from rahmanef.com; sanitized: token args dropped, sibling `analyticsEvents` insert removed — wrap subscribe in a consumer action if you want funnel telemetry.",
+      "source": "rahmanef.com",
+      "install": "npx rahman-resources add subscribers",
+      "npmPackages": [],
+      "exampleCode": "",
+      "agentRecipe": "Run `npx rr add subscribers`. Compose `subscribersTables` into root convex/schema.ts. Public form posts `api.features.subscribers.mutations.subscribe({ email, source, website })` — `website` is the honeypot, leave it `\"\"` from the form. Render unsubscribe link `/unsubscribe?t=<token>` and call `unsubscribe({ token })`.",
+      "tags": [
+        "email",
+        "newsletter",
+        "subscribers",
+        "convex",
+        "backend"
+      ]
+    },
+    {
+      "slug": "testimonials",
+      "title": "Testimonials",
+      "category": "content",
+      "description": "Quote/name/role rotator backend. Public `listAll` + `get` (no auth — testimonials are public), admin CRUD via `requireAdmin`, internal `seed` for one-shot bootstrap. Indexed by `order` so carousel/grid keeps stable rotation. Lifted 2026-05-16 from rahmanef.com; token-based admin gate swapped for rr `_shared/auth`.",
+      "source": "rahmanef.com",
+      "install": "npx rahman-resources add testimonials",
+      "npmPackages": [],
+      "exampleCode": "",
+      "agentRecipe": "Run `npx rr add testimonials`. Compose `testimonialsTables` into root schema. Bootstrap via `npx convex run internal.features.testimonials.mutations.seed '{\"items\":[{\"quote\":\"...\",\"name\":\"...\",\"role\":\"...\",\"order\":1}]}'`. Render with `useQuery(api.features.testimonials.queries.listAll)`.",
+      "tags": [
+        "content",
+        "testimonials",
+        "convex",
+        "backend",
+        "marketing"
+      ]
+    },
+    {
+      "slug": "services",
+      "title": "Services",
+      "category": "content",
+      "description": "Service offerings backend — title + summary + deliverables array + sort order. Public read, admin CRUD, internal seed. Pairs with a frontend services grid/list (consumer-side). Lifted 2026-05-16 from rahmanef.com; token-based admin gate swapped for rr `_shared/auth`.",
+      "source": "rahmanef.com",
+      "install": "npx rahman-resources add services",
+      "npmPackages": [],
+      "exampleCode": "",
+      "agentRecipe": "Run `npx rr add services`. Compose `servicesTables` into root schema. Use `useQuery(api.features.services.queries.listAll)` from a server component / route to render service cards. CRUD via admin UI calling `create` / `update` / `remove` after `requireAdmin` passes.",
+      "tags": [
+        "content",
+        "services",
+        "convex",
+        "backend",
+        "marketing",
+        "agency"
+      ]
+    },
+    {
+      "slug": "socials",
+      "title": "Socials",
+      "category": "content",
+      "description": "Single source of truth for profile/social links. Powers JSON-LD `Person.sameAs` (Google entity graph), IndieWeb `<link rel=\"me\">` tags, and footer/contact/about UI surfaces. URL-deduped, ordered, `visible` / `featured` / `relMe` / `sameAs` flags. Lifted 2026-05-16 from rahmanef.com; token-based admin gate swapped, baked-in 14-platform rahmanef seed dropped — `seed` now takes items via args so each adopter ships their own list.",
+      "source": "rahmanef.com",
+      "install": "npx rahman-resources add socials",
+      "npmPackages": [],
+      "exampleCode": "",
+      "agentRecipe": "Run `npx rr add socials`. Compose `socialsTables` into root schema. Bootstrap with `npx convex run internal.features.socials.mutations.seed '{\"items\":[{\"platform\":\"github\",\"url\":\"https://github.com/<you>\",\"order\":1,\"visible\":true,\"featured\":true,\"sameAs\":true,\"relMe\":true}]}'`. Wire `useQuery(api.features.socials.queries.listVisible)` into footer for entity-graph SEO.",
+      "tags": [
+        "content",
+        "socials",
+        "seo",
+        "indieweb",
+        "convex",
+        "backend"
+      ]
+    },
+    {
+      "slug": "create-your-mcp",
+      "title": "Create Your MCP",
+      "category": "ai",
+      "description": "Turn any rr-based app into an MCP server that ChatGPT custom apps, Claude.ai connectors, Cursor MCP, and other AI clients authenticate to. OAuth 2.1 + PKCE flow with code → bearer exchange, env-configured vendor-host allowlist, single-use codes, 1-year bearer tokens, scope-tagged tools, opaque error collapsing, constant-time token compare. Static MCP_API_KEY fallback for service-account / CI scripts. Sanitized 2026-05-16 from rahmanef.com's production MCP integration — vendor literals (chatgpt.com / OpenAI paths) replaced with MCP_OAUTH_ALLOWED_HOSTS + MCP_OAUTH_ALLOWED_PATH_PREFIXES env vars so the slice ships portable.",
+      "source": "rahmanef.com",
+      "install": "npx rahman-resources add create-your-mcp",
+      "npmPackages": [],
+      "exampleCode": "",
+      "agentRecipe": "Run `npx rr add create-your-mcp`. Compose `createYourMcpTables` into root schema. Move `slices/create-your-mcp/routes/mcp.route.ts` → `app/api/mcp/route.ts` and `oauth-token.route.ts` → `app/api/oauth/token/route.ts`. Set MCP_OAUTH_ALLOWED_HOSTS (CSV vendor domains). Mount `<McpAdminView />` at /admin/mcp. Connect ChatGPT/Claude/Cursor via the setup form rendered by the admin view.",
+      "tags": [
+        "ai",
+        "mcp",
+        "oauth",
+        "pkce",
+        "chatgpt",
+        "claude",
+        "cursor",
+        "convex",
+        "integration"
+      ]
+    },
     {
       "slug": "contact-form-resend",
       "title": "Contact Form + Resend",
@@ -2017,13 +2224,285 @@
       ],
       "agentRecipe": "Use Resend Audiences API for newsletter — store subscriber emails in Convex too for segmentation. Double opt-in: subscriber.create with status 'pending' → click link → status 'confirmed'."
     },
+    {
+      "slug": "ai-chat",
+      "title": "AI Chat — Workbench / Sidebar / Search",
+      "category": "ai",
+      "kind": "full",
+      "version": "0.1.0",
+      "description": "One conversational AI feature, three render modes. Same Convex backend (threads + streaming + tool calls + RAG), pick the surface via prop:\n\n  • workbench — Claude.ai / ChatGPT three-column page (default)\n  • sidebar — collapsible copilot panel inside another CRUD app\n  • search — single-question + answer + citations (Perplexity)\n\nUse cases:\n  – Customer-support chatbot embedded in your marketing site\n  – Developer copilot in your PR/docs admin\n  – Knowledge-base search over your blog + docs corpus\n  – Internal AI assistant in your dashboard\n\nWhat it ships: multi-provider (Anthropic / OpenAI / Google / Mistral / Ollama), multimodal (text + image + PDF + audio), typed tool calls with inline inspector, agent mode (plan→execute→reflect), branching threads, RAG citations, resumable streams, usage telemetry. Public surface = consumer chat; admin surface = persona, fallback, guardrails per-bot.",
+      "source": "rahmanef63/resource-site",
+      "slicePath": "frontend/slices/ai-chat",
+      "convexPaths": [
+        "convex/features/ai-chat"
+      ],
+      "npm": [
+        "ai@^4.0.0",
+        "@ai-sdk/anthropic@^0.0.50",
+        "@ai-sdk/openai@^0.0.60"
+      ],
+      "shadcn": [
+        "button",
+        "card",
+        "badge",
+        "avatar",
+        "scroll-area",
+        "select",
+        "separator",
+        "slider",
+        "switch",
+        "textarea",
+        "tabs",
+        "command",
+        "sheet"
+      ],
+      "env": [
+        {
+          "name": "ANTHROPIC_API_KEY",
+          "scope": "convex",
+          "required": false
+        },
+        {
+          "name": "OPENAI_API_KEY",
+          "scope": "convex",
+          "required": false
+        },
+        {
+          "name": "GOOGLE_GENERATIVE_AI_API_KEY",
+          "scope": "convex",
+          "required": false
+        }
+      ],
+      "peers": [
+        {
+          "slug": "convex-auth",
+          "range": "^0.1",
+          "reason": "Thread ownership requires authenticated user."
+        },
+        {
+          "slug": "ai-router",
+          "range": "^0.1",
+          "reason": "Routes provider calls through tiered proxy."
+        },
+        {
+          "slug": "ai-admin",
+          "range": "^0.1",
+          "reason": "Reads instructions / skills / tools / models from ai-admin registry."
+        },
+        {
+          "slug": "vector-search",
+          "range": "^0.1",
+          "reason": "Optional — RAG / search modes pull workspace embeddings."
+        }
+      ],
+      "providers": [],
+      "tags": [
+        "ai",
+        "ai:chat",
+        "streaming",
+        "multimodal",
+        "tool-calls",
+        "agent-mode",
+        "rag",
+        "citations",
+        "branching",
+        "history"
+      ],
+      "agentRecipe": "Run `npx rr add ai-chat`. Pick `mode=\"workbench\" | \"sidebar\" | \"search\"` on `<AIChat />` (or use the convenience exports `<AIChatWorkbench />`, `<AIChatSidebar />`, `<AIChatSearch />`). Same backend tables + streaming action for all three."
+    },
+    {
+      "slug": "ai-studio",
+      "title": "AI Studio — Generation Canvas",
+      "category": "ai",
+      "kind": "full",
+      "version": "0.1.0",
+      "description": "AI is the primary UI — single big prompt input → live-streaming output → variation grid → version tree. Suno / Midjourney / Lovable / v0 pattern. Output kinds: text, code, image, audio (configurable per template).\n\nUse cases:\n  – AI image generation product (creative output)\n  – AI logo / banner / social-post studio\n  – AI code-snippet generator (component scaffolder)\n  – AI music / voiceover producer\n  – AI blog-draft factory (text)\n\nFeatures: prompt history, branch + compare outputs, like + favorite, share-to-link, templates from ai-admin.",
+      "source": "rahmanef63/resource-site",
+      "slicePath": "frontend/slices/ai-studio",
+      "convexPaths": [
+        "convex/features/ai-studio"
+      ],
+      "npm": [
+        "ai@^4.0.0"
+      ],
+      "shadcn": [
+        "button",
+        "card",
+        "badge",
+        "textarea",
+        "tabs",
+        "tooltip",
+        "scroll-area",
+        "select"
+      ],
+      "env": [],
+      "peers": [
+        {
+          "slug": "convex-auth",
+          "range": "^0.1",
+          "reason": "Generation history per user."
+        },
+        {
+          "slug": "ai-router",
+          "range": "^0.1",
+          "reason": "All generation calls flow through router."
+        },
+        {
+          "slug": "ai-admin",
+          "range": "^0.1",
+          "reason": "Templates + few-shot library + moderation rules live in ai-admin."
+        }
+      ],
+      "providers": [],
+      "tags": [
+        "ai",
+        "ai:studio",
+        "generation",
+        "streaming",
+        "history",
+        "branching",
+        "image-gen"
+      ],
+      "agentRecipe": "Run `npx rr add ai-studio`. Mount `<GeneratorCanvas />` at /. Use case: prompt → output IS the entire product. Wire your output renderer (text/image/code/audio) via the OutputSlot adapter. Templates loaded from ai-admin.studio.templates."
+    },
+    {
+      "slug": "ai-agents",
+      "title": "AI Agents — Autonomous Workers",
+      "category": "ai",
+      "kind": "full",
+      "version": "0.1.0",
+      "description": "Background AI workers. Define an agent (skill × model × tools × max-iter), trigger it on-demand or on a cron schedule, watch the step-by-step trace as it runs. Devin / Replit-Agent / Manus pattern.\n\nUse cases:\n  – Nightly audit-bp on the codebase (PR-reviewer style)\n  – Weekly SEO crawl + content suggestions\n  – Auto-moderate comment queue\n  – Scheduled data ingestion + summarization\n  – Long-form research task with multi-source citations\n\nFeatures: queue + live trace, per-step retry policy, hard cost cap, shareable trace URLs, full audit-log integration.",
+      "source": "rahmanef63/resource-site",
+      "slicePath": "frontend/slices/ai-agents",
+      "convexPaths": [
+        "convex/features/ai-agents"
+      ],
+      "npm": [
+        "ai@^4.0.0"
+      ],
+      "shadcn": [
+        "button",
+        "card",
+        "badge",
+        "table",
+        "tabs",
+        "scroll-area",
+        "progress"
+      ],
+      "env": [],
+      "peers": [
+        {
+          "slug": "convex-auth",
+          "range": "^0.1",
+          "reason": "Per-user agent run ownership."
+        },
+        {
+          "slug": "ai-router",
+          "range": "^0.1",
+          "reason": "Step calls flow through router."
+        },
+        {
+          "slug": "ai-admin",
+          "range": "^0.1",
+          "reason": "Agent definitions live in ai-admin → Agents."
+        },
+        {
+          "slug": "audit-log",
+          "range": "^0.1",
+          "reason": "Every step logged."
+        }
+      ],
+      "providers": [],
+      "tags": [
+        "ai",
+        "ai:agents",
+        "agent-mode",
+        "tool-calls",
+        "async",
+        "queue",
+        "traces"
+      ],
+      "agentRecipe": "Run `npx rr add ai-agents`. Mount `<RunnerDashboard />` at /agents. Trigger runs via `runAgent({agentSlug, input, scheduleAt?})`. Cron scheduler via Convex cron — wire if you need scheduled runs. Agent definitions managed in ai-admin."
+    },
+    {
+      "slug": "ai-admin",
+      "title": "AI Admin — Console (Instructions · Skills · Tools · Agents · Providers)",
+      "category": "ai",
+      "kind": "full",
+      "version": "0.2.0",
+      "description": "Central operator console for the whole AI stack. Every other ai-* feature reads its registries from here. Tabs ordered to match the build-flow:\n\n  1. Providers   — register Anthropic / OpenAI / Google / Mistral / Ollama (API keys AES-encrypted at rest)\n  2. Models      — per-provider catalog (capabilities, context window, pricing)\n  3. Instructions — custom system-prompt library (Claude Projects-style)\n  4. Skills      — named instruction + model default + tool defaults (consumed by chat + studio)\n  5. Tools       — JSON-schema function specs + impl (http / convex / shell) + sandbox flag\n  6. Agents      — skill × model × tools × max-iter (consumed by ai-agents)\n  7. Budgets     — per-workspace cost caps + alerts + hard kill\n  8. Audit       — every AI call: actor / agent / tokens / cost / latency / outcome\n\nIncludes Create-Agent / Create-Skill / Create-Tool / Create-Instruction wizards.",
+      "source": "rahmanef63/resource-site",
+      "slicePath": "frontend/slices/ai-admin",
+      "convexPaths": [
+        "convex/features/ai-admin"
+      ],
+      "npm": [],
+      "shadcn": [
+        "card",
+        "button",
+        "badge",
+        "tabs",
+        "table",
+        "dialog",
+        "input",
+        "label",
+        "select",
+        "textarea",
+        "switch",
+        "command"
+      ],
+      "env": [
+        {
+          "name": "AI_ADMIN_ENCRYPTION_KEY",
+          "scope": "convex",
+          "required": true,
+          "description": "Encrypts stored provider API keys at rest."
+        }
+      ],
+      "peers": [
+        {
+          "slug": "convex-auth",
+          "range": "^0.1",
+          "reason": "requireAdmin gate."
+        },
+        {
+          "slug": "rbac-roles",
+          "range": "^0.1",
+          "reason": "Section gated by ai.* permissions (manage_providers, manage_skills, etc)."
+        },
+        {
+          "slug": "admin-panel",
+          "range": "^0.1",
+          "reason": "Lives as a registered admin section."
+        },
+        {
+          "slug": "audit-log",
+          "range": "^0.1",
+          "reason": "Every config change + AI call routes through audit-log."
+        }
+      ],
+      "providers": [],
+      "tags": [
+        "ai",
+        "ai:admin",
+        "instructions",
+        "skills",
+        "tools",
+        "agents",
+        "providers",
+        "models",
+        "budgets",
+        "audit"
+      ],
+      "agentRecipe": "Run `npx rr add ai-admin`. Adds an `AI` section to the admin-panel ADMIN_SECTIONS registry. Sub-tabs ordered to match build-flow: Providers → Models → Instructions → Skills → Tools → Agents → Budgets → Audit. Includes Create-* wizards for instructions / skills / tools / agents. API keys AES-encrypted via AI_ADMIN_ENCRYPTION_KEY env. The instruction / skill / tool / agent registries are SSOTs consumed by every ai-* consumer slice (chat + studio + agents)."
+    },
     {
       "slug": "ai-router",
-      "title": "AI Router (OpenRouter)",
+      "title": "AI Router — Backend Provider Proxy",
       "category": "ai",
       "kind": "backend",
       "version": "0.1.0",
-      "description": "Tier-routed LLM access via OpenRouter — nano (Haiku) for classification, mid (Sonnet) for chat, flagship (Opus) for deep reasoning. Per-call usage log.",
+      "description": "Backend infrastructure (no UI). Single proxy that every other ai-* feature calls. Tier-routed — nano (Haiku) for classification, mid (Sonnet) for chat, flagship (Opus) for deep reasoning. Per-call usage log + cost guard. Works with direct provider keys or OpenRouter umbrella.\n\nNot something you mount — installed automatically as a peer when you add ai-chat / ai-studio / ai-agents.",
       "source": "rahmanef63/resource-site",
       "slicePath": "frontend/slices/ai-router",
       "convexPaths": [
@@ -2047,11 +2526,11 @@
       "providers": [],
       "tags": [
         "ai",
-        "llm",
-        "openrouter",
-        "tier-routing"
+        "ai:backend",
+        "tier-routing",
+        "cost-guard"
       ],
-      "agentRecipe": "Wrap every AI call through ai-router action. Pick tier based on workload: nano for spam-flag/headline-suggest, mid for chat/draft, flagship for methodology-review. Log token usage to ai_usage table for cost dashboard."
+      "agentRecipe": "Wrap every AI call through ai-router. Tiers: nano = quick classification (spam-flag, headline-suggest), mid = chat / draft, flagship = methodology-review / deep-think. Token usage logs to ai_usage table for the cost dashboard."
     },
     {
       "slug": "vector-search",
@@ -2462,11 +2941,11 @@
     },
     {
       "slug": "icon-picker",
-      "title": "Notion-Style Icon Picker",
+      "title": "Icon Picker",
       "category": "ui",
       "kind": "ui",
       "version": "0.2.0",
-      "description": "Emoji + lucide icon picker with search, 10-color Notion palette, Twemoji/native toggle, recents tracking. One string stores emoji OR lucide:Name OR with ?c=hex tint — backwards-compat with raw-emoji fields. Two variants: Popover (compact trigger) and Inline (full sheet/dialog use). Lifted 2026-05-16 from notion-page-clone — full implementation (19 files) including emoji-keywords search index, twemoji renderer, lucide-catalog, recents store, style-pref hook.",
+      "description": "Emoji + lucide icon picker with search, 10-color palette, Twemoji/native toggle, recents tracking. One string stores emoji OR lucide:Name OR with ?c=hex tint — backwards-compat with raw-emoji fields. Two variants: Popover (compact trigger) and Inline (full sheet/dialog use). Lifted 2026-05-16 from notion-page-clone — full implementation (19 files) including emoji-keywords search index, twemoji renderer, lucide-catalog, recents store, style-pref hook.",
       "source": "notion-page-clone",
       "slicePath": "frontend/slices/icon-picker",
       "convexPaths": [],
@@ -2517,6 +2996,34 @@
       ],
       "agentRecipe": "Run `npx rr add cta`. <CtaView eyebrow title body href ctaLabel /> renders the full section; <CtaButton href label /> drops a standalone arrow button anywhere. Override tracking-brutal utilities in tailwind.config or swap for tracking-wide if your design system has no brutal preset."
     },
+    {
+      "slug": "hero",
+      "title": "Hero",
+      "category": "ui",
+      "kind": "ui",
+      "version": "0.1.0",
+      "description": "Editorial split-grid landing hero — eyebrow pill + large serif H1 + italic pull-quote + 1-2 button CTA row + right-column portrait card with optional caption. Fully props-driven (title/quote/ctas/image). Sanitized from rahmanef.com on 2026-05-16: SITE_CONFIG hardcode dropped, custom Heading/Section primitives replaced with raw semantic elements + stock Tailwind tracking-widest so the slice ships without consumer preset utilities.",
+      "source": "rahmanef.com",
+      "slicePath": "frontend/slices/hero",
+      "convexPaths": [],
+      "npm": [
+        "lucide-react@^0.400.0"
+      ],
+      "shadcn": [],
+      "env": [],
+      "peers": [],
+      "providers": [],
+      "tags": [
+        "ui",
+        "hero",
+        "marketing",
+        "landing",
+        "section",
+        "editorial",
+        "brutalist"
+      ],
+      "agentRecipe": "Run `npx rr add hero`. <HeroView title eyebrow quote ctas image imageCaption /> — all props optional except title. Pass `image={undefined}` for text-only hero (auto-collapses to single 12-column row). Pairs visually with cta slice (same brutalist border + serif scale)."
+    },
     {
       "slug": "rate-limit",
       "title": "Rate Limit",
@@ -2543,6 +3050,222 @@
       ],
       "agentRecipe": "Run `npx rr add rate-limit`. Compose `rateLimitTables` into root convex/schema.ts. Wire `internal.features.rate_limit.mutations._pruneExpired` into convex/crons.ts every 5 min. Call `api.features.rate_limit.mutations.consume({ key, limit, windowMs })` from server-side handlers — keep a fail-open wrapper so a Convex outage doesn't 503 the route."
     },
+    {
+      "slug": "subscribers",
+      "title": "Subscribers",
+      "category": "email",
+      "kind": "backend",
+      "version": "0.1.0",
+      "description": "Newsletter list with honeypot + per-email rate-limit + token-based unsubscribe + admin remove. Public `subscribe` returns status strings (`created` / `already` / `resubscribed` / `honeypot`); admin `listAll` / `count` queries gated by `requireAdmin` (rr `_shared/auth`). Lifted 2026-05-16 from rahmanef.com; sanitized: token args dropped, sibling `analyticsEvents` insert removed — wrap subscribe in a consumer action if you want funnel telemetry.",
+      "source": "rahmanef.com",
+      "slicePath": "frontend/slices/subscribers",
+      "convexPaths": [
+        "convex/features/subscribers"
+      ],
+      "npm": [],
+      "shadcn": [],
+      "env": [
+        {
+          "name": "SUPER_ADMIN_EMAIL",
+          "scope": "convex",
+          "required": false,
+          "description": "Optional super-admin gate for admin queries."
+        }
+      ],
+      "peers": [
+        {
+          "slug": "convex-auth",
+          "range": "^0.1",
+          "reason": "requireAdmin uses getAuthUserId from @convex-dev/auth."
+        }
+      ],
+      "providers": [],
+      "tags": [
+        "email",
+        "newsletter",
+        "subscribers",
+        "convex",
+        "backend"
+      ],
+      "agentRecipe": "Run `npx rr add subscribers`. Compose `subscribersTables` into root convex/schema.ts. Public form posts `api.features.subscribers.mutations.subscribe({ email, source, website })` — `website` is the honeypot, leave it `\"\"` from the form. Render unsubscribe link `/unsubscribe?t=<token>` and call `unsubscribe({ token })`."
+    },
+    {
+      "slug": "testimonials",
+      "title": "Testimonials",
+      "category": "content",
+      "kind": "backend",
+      "version": "0.1.0",
+      "description": "Quote/name/role rotator backend. Public `listAll` + `get` (no auth — testimonials are public), admin CRUD via `requireAdmin`, internal `seed` for one-shot bootstrap. Indexed by `order` so carousel/grid keeps stable rotation. Lifted 2026-05-16 from rahmanef.com; token-based admin gate swapped for rr `_shared/auth`.",
+      "source": "rahmanef.com",
+      "slicePath": "frontend/slices/testimonials",
+      "convexPaths": [
+        "convex/features/testimonials"
+      ],
+      "npm": [],
+      "shadcn": [],
+      "env": [
+        {
+          "name": "SUPER_ADMIN_EMAIL",
+          "scope": "convex",
+          "required": false
+        }
+      ],
+      "peers": [
+        {
+          "slug": "convex-auth",
+          "range": "^0.1",
+          "reason": "requireAdmin uses getAuthUserId from @convex-dev/auth."
+        }
+      ],
+      "providers": [],
+      "tags": [
+        "content",
+        "testimonials",
+        "convex",
+        "backend",
+        "marketing"
+      ],
+      "agentRecipe": "Run `npx rr add testimonials`. Compose `testimonialsTables` into root schema. Bootstrap via `npx convex run internal.features.testimonials.mutations.seed '{\"items\":[{\"quote\":\"...\",\"name\":\"...\",\"role\":\"...\",\"order\":1}]}'`. Render with `useQuery(api.features.testimonials.queries.listAll)`."
+    },
+    {
+      "slug": "services",
+      "title": "Services",
+      "category": "content",
+      "kind": "backend",
+      "version": "0.1.0",
+      "description": "Service offerings backend — title + summary + deliverables array + sort order. Public read, admin CRUD, internal seed. Pairs with a frontend services grid/list (consumer-side). Lifted 2026-05-16 from rahmanef.com; token-based admin gate swapped for rr `_shared/auth`.",
+      "source": "rahmanef.com",
+      "slicePath": "frontend/slices/services",
+      "convexPaths": [
+        "convex/features/services"
+      ],
+      "npm": [],
+      "shadcn": [],
+      "env": [
+        {
+          "name": "SUPER_ADMIN_EMAIL",
+          "scope": "convex",
+          "required": false
+        }
+      ],
+      "peers": [
+        {
+          "slug": "convex-auth",
+          "range": "^0.1",
+          "reason": "requireAdmin uses getAuthUserId from @convex-dev/auth."
+        }
+      ],
+      "providers": [],
+      "tags": [
+        "content",
+        "services",
+        "convex",
+        "backend",
+        "marketing",
+        "agency"
+      ],
+      "agentRecipe": "Run `npx rr add services`. Compose `servicesTables` into root schema. Use `useQuery(api.features.services.queries.listAll)` from a server component / route to render service cards. CRUD via admin UI calling `create` / `update` / `remove` after `requireAdmin` passes."
+    },
+    {
+      "slug": "socials",
+      "title": "Socials",
+      "category": "content",
+      "kind": "backend",
+      "version": "0.1.0",
+      "description": "Single source of truth for profile/social links. Powers JSON-LD `Person.sameAs` (Google entity graph), IndieWeb `<link rel=\"me\">` tags, and footer/contact/about UI surfaces. URL-deduped, ordered, `visible` / `featured` / `relMe` / `sameAs` flags. Lifted 2026-05-16 from rahmanef.com; token-based admin gate swapped, baked-in 14-platform rahmanef seed dropped — `seed` now takes items via args so each adopter ships their own list.",
+      "source": "rahmanef.com",
+      "slicePath": "frontend/slices/socials",
+      "convexPaths": [
+        "convex/features/socials"
+      ],
+      "npm": [],
+      "shadcn": [],
+      "env": [
+        {
+          "name": "SUPER_ADMIN_EMAIL",
+          "scope": "convex",
+          "required": false
+        }
+      ],
+      "peers": [
+        {
+          "slug": "convex-auth",
+          "range": "^0.1",
+          "reason": "requireAdmin uses getAuthUserId from @convex-dev/auth."
+        }
+      ],
+      "providers": [],
+      "tags": [
+        "content",
+        "socials",
+        "seo",
+        "indieweb",
+        "convex",
+        "backend"
+      ],
+      "agentRecipe": "Run `npx rr add socials`. Compose `socialsTables` into root schema. Bootstrap with `npx convex run internal.features.socials.mutations.seed '{\"items\":[{\"platform\":\"github\",\"url\":\"https://github.com/<you>\",\"order\":1,\"visible\":true,\"featured\":true,\"sameAs\":true,\"relMe\":true}]}'`. Wire `useQuery(api.features.socials.queries.listVisible)` into footer for entity-graph SEO."
+    },
+    {
+      "slug": "create-your-mcp",
+      "title": "Create Your MCP",
+      "category": "ai",
+      "kind": "full",
+      "version": "0.1.0",
+      "description": "Turn any rr-based app into an MCP server that ChatGPT custom apps, Claude.ai connectors, Cursor MCP, and other AI clients authenticate to. OAuth 2.1 + PKCE flow with code → bearer exchange, env-configured vendor-host allowlist, single-use codes, 1-year bearer tokens, scope-tagged tools, opaque error collapsing, constant-time token compare. Static MCP_API_KEY fallback for service-account / CI scripts. Sanitized 2026-05-16 from rahmanef.com's production MCP integration — vendor literals (chatgpt.com / OpenAI paths) replaced with MCP_OAUTH_ALLOWED_HOSTS + MCP_OAUTH_ALLOWED_PATH_PREFIXES env vars so the slice ships portable.",
+      "source": "rahmanef.com",
+      "slicePath": "frontend/slices/create-your-mcp",
+      "convexPaths": [
+        "convex/features/create-your-mcp"
+      ],
+      "npm": [],
+      "shadcn": [],
+      "env": [
+        {
+          "name": "MCP_API_KEY",
+          "scope": "server",
+          "required": false,
+          "description": "Static bearer for service-account / CI access. Min 32 chars. Must match Convex env."
+        },
+        {
+          "name": "MCP_OAUTH_ALLOWED_HOSTS",
+          "scope": "convex",
+          "required": false,
+          "description": "CSV vendor domains for redirect_uri (chatgpt.com,claude.ai,cursor.sh)."
+        },
+        {
+          "name": "MCP_OAUTH_ALLOWED_PATH_PREFIXES",
+          "scope": "convex",
+          "required": false,
+          "description": "CSV path prefixes under allowed hosts (/aip/,/connector/,/oauth/)."
+        },
+        {
+          "name": "NEXT_PUBLIC_SITE_URL",
+          "scope": "next-public",
+          "required": true,
+          "description": "Public site origin for WWW-Authenticate challenge."
+        }
+      ],
+      "peers": [
+        {
+          "slug": "convex-auth",
+          "range": "^0.1",
+          "reason": "requireAdmin uses getAuthUserId from @convex-dev/auth."
+        }
+      ],
+      "providers": [],
+      "tags": [
+        "ai",
+        "mcp",
+        "oauth",
+        "pkce",
+        "chatgpt",
+        "claude",
+        "cursor",
+        "convex",
+        "integration"
+      ],
+      "agentRecipe": "Run `npx rr add create-your-mcp`. Compose `createYourMcpTables` into root schema. Move `slices/create-your-mcp/routes/mcp.route.ts` → `app/api/mcp/route.ts` and `oauth-token.route.ts` → `app/api/oauth/token/route.ts`. Set MCP_OAUTH_ALLOWED_HOSTS (CSV vendor domains). Mount `<McpAdminView />` at /admin/mcp. Connect ChatGPT/Claude/Cursor via the setup form rendered by the admin view."
+    },
     {
       "slug": "contact-form-resend",
       "title": "Contact Form + Resend",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rahman-resources",
-  "version": "1.2.0",
+  "version": "1.5.1",
   "description": "Rahman Resources (rr) — shadcn-style installer for vertical slices. `npx resources add <slug>` copies slice into your project's `slices/<slug>/`. You own the files.",
   "type": "module",
   "license": "MIT",