premiumsource code Verified demo

DSR MENA SaaS Starter — Next.js 16.2

Multi-tenant B2B foundation for MENA and Western founders — Next.js 16.2, RBAC, audit log, English + Arabic RTL. Phase 1 of 3 — download unlocks after billing lands.

Production-grade multi-tenant SaaS starter built on Next.js 16.2 (App Router) + React 19 + strict TypeScript + Drizzle/PostgreSQL. Includes organizations & memberships, invitations, owner/admin/member RBAC with server-side guards, audit log, English + Arabic (RTL) i18n, Zod-validated env, CSP + HSTS security headers, Docker + docker-compose, threat model, and AI-agent-ready docs (AGENTS.md). Auth adapters (Supabase or dev mock) ship in Phase 1; billing adapters (Stripe test-mode, Paddle, Tap Payments, and manual invoice) plus a signed idempotent webhook layer arrive in Phase 2 — the download unlocks then. Single-organization commercial license.

What's included

Next.js 16.2 App Router · React 19 · strict TypeScript · Tailwind v4
Multi-tenant organizations, memberships, invitations, audit log (Drizzle/PostgreSQL)
Owner / Admin / Member RBAC with union-based permissions and server-side assertPermission guards
Tenant isolation primitives (assertRowInTenant, tenantScope, canSwitchTo) with regression tests
English + Arabic first-class i18n with automatic <html dir> RTL, currency/date formatting
Auth adapter interface — Supabase Auth (email/password + OAuth hooks) or dev mock (no credentials)
Email adapter interface — Resend or console dev adapter, invitation / reset / welcome templates
Billing adapter interface — Stripe test-mode, Paddle, Tap Payments (MENA), and manual invoice (Phase 2)
Security headers: strict CSP, HSTS preload, X-Frame-Options DENY, Permissions-Policy
Zod-equivalent env validation refuses to boot on missing SESSION_SECRET or misconfigured adapters
Rate limits for auth and invite endpoints, CSRF-safe mutations, webhook idempotency table
Dockerfile + docker-compose with Postgres 16, seed script, drizzle migrations
Full docs: README, SETUP, ARCHITECTURE, SECURITY (threat model), AGENTS.md, LICENSE
29 automated tests (RBAC, tenant isolation, i18n/RTL, env) — pure Node, no external deps

Deployment guide

How to set up

A quick install walkthrough — expected runtime plus a first-run checklist. Detailed instructions ship in the downloaded package's README.

First-run checklist

1Read the README top-to-bottom before running anything.
2Install dependencies with the package manager the repo uses.
3Configure environment variables and any third-party keys.
4Run the included tests / example command.
5Adapt the code to your project structure and license terms.

Refund & support

7-day refund if the codebase fails to install per the included guide. License key + up to 3 downloads within 72 hours after purchase. Support via info@digitalsilkroute.com.

Secure delivery

License key + signed link

3 downloads included

72-hour window

48h support

Weekdays, from our team

Refund policy

Read the terms

Keep exploring