Full Next.js platforms
App Router or Pages Router. Server-rendered or static-generated. Edge middleware for routing, CSP, and i18n. TypeScript-strict by default.
- App Router or Pages Router
- Edge middleware for routing + CSP
- TypeScript-strict + verbatimModuleSyntax
- 18-language i18n built in
- Server-side data fetching with revalidate
Stripe payments end-to-end
Checkout Sessions, Payment Element, Connect for marketplaces, subscriptions, restartable refund queues, signed webhooks, idempotency keys.
- Checkout Sessions + Payment Element
- Connect (Accounts v2 + controllers)
- Subscriptions + proration
- Refund queue + drainer worker
- Webhook signature verification + replay defense
Multilingual SaaS
Day-1 EN+AR or any 18 langs. RTL layouts, proper hreflang per page, locale-aware dates/currencies, content audits to catch English-only drift.
- Custom i18n provider or next-intl
- Per-page hreflang + canonical
- RTL CSS + bidirectional layout patterns
- Locale-aware date / currency / number formats
- Content drift audit script
End-to-end booking flows
Inventory search, holds with TTL, payment 3DS2, confirmations, post-purchase modifications, virtual interlining, refund queues with manual review.
- Inventory search + filtering
- Hold with TTL + lazy expiry
- Payment 3DS2 + capture confirmation
- Self-service cancel + modify
- Virtual-interlining + flexibility tiers
360° + virtual experiences
Google Street View embeds, custom panorama galleries, vision search via pgvector + CLIP embeddings, CSP/iframe wiring done right.
- Google Maps Embed API integration
- Custom panorama gallery components
- Vision search via pgvector + CLIP
- CSP frame-src path-gating per route
- Public Street View deep-links as fallback
Production-grade infra
Postgres + MinIO + Redis + Docker Compose. Schema migrations table. Replicas with read-only assertion. Blue-green deploys. Backup verification harnesses.
- Postgres primary + read replica
- MinIO S3-compatible object store
- Redis for sessions / rate limit
- Docker Compose dev/prod parity
- Schema migration runner + checksums
Analytics + observability
Self-hosted Umami (cookieless), ClickHouse warehouses for product analytics, OpenTelemetry traces, Grafana dashboards, SLO budgets.
- Self-hosted Umami (no cookies, no GDPR popup)
- ClickHouse warehouse for product analytics
- OpenTelemetry traces (Jaeger UI)
- Prometheus + Grafana stack
- SLO budgets + status page
Test harnesses + zero-trust audits
Per-phase shell harnesses with N/N PASS gating. Zero-trust audits at every deploy. Browser-verified before "done" claim, never just 200-OK.
- Per-phase shell harnesses (N/N PASS gating)
- Zero-trust audits at every deploy
- Browser-verified end-to-end (Puppeteer)
- Schema-drift detection across replicas
- Banned-strings + brand contract enforcement