Enterprise Operations Platform
⚠️ Active Development — This platform is under active construction. APIs, module interfaces, and features may change without prior notice. For production use, rely only on tagged releases (vX.Y.Z).
NLA Fullstack is an Enterprise Operations Platform currently in development that enables asynchronous business automation through conversational AI. It combines an AI Agent with comprehensive content and commerce management, allowing enterprises to self-manage operations, schedule tasks, and automate workflows within a unified codebase.
The platform enables AI-driven interactions with structured business data across multiple domains: products, courses, orders, articles, accounting, and more. All operations follow Zero Trust security principles with Row Level Security (RLS) enforcement. Built on Next.js 16, TypeScript, and Supabase.
The Agent provides natural language interactions with streaming responses and can execute actions like searching products, creating orders, and fetching data. It has contextual awareness of regional settings (language, country, currency), user roles, and visibility rules. Tools respect RBAC and only expose data the user is authorized to access.
Modules include: Products (catalog with variants, pricing, inventory, ratings), Courses (learning platform with lessons, quizzes, progress), Orders (lifecycle, tracking, payments), Content (articles, news, pages with multi-language support), Users (authentication, profiles, role-based permissions), Accounting (invoices, financial tracking), Contacts (CRM functionality), and Services (professional services management).
Security: Zero Trust architecture, RLS policies, dual auth (JWT + API Keys). Performance: Next.js 16 caching with strategic revalidation, Supabase Realtime. Scalability: Modular service architecture, separation of concerns. Internationalization: Multi-language (ES, EN, AR) with RTL support. Analytics: Event tracking, audit logging. File Management: Secure storage with signed URLs, access control.
Backend powered by Next.js 16 with TypeScript 5.7+ strict mode. Database: Supabase PostgreSQL with Row Level Security. AI integration via Vercel AI SDK with GPT-5 models. Frontend built with Tailwind CSS and Base UI components. Testing with Vitest. Infrastructure on Vercel with multi-platform Docker builds (amd64, arm64).
Infrastructure: PostgreSQL schema with RLS (15+ tables, 20+ policies), dual auth (JWT + API Keys), context-aware caching, secure file storage (15 buckets), audit logging, rate limiting.
Modules: 4 in advanced stages (Products, Courses, Contents, Orders), 11 in progress (Banking, Contacts, Projects, Services, Certificates, Settings, Dashboard, Agents, Security, Devices, and others).
Our Changelog contains a comprehensive timeline of all versions, featuring detailed changelogs, feature announcements, deprecation notices, and migration guides for each release cycle. This documentation helps users understand what has changed, what is new, and how to properly upgrade between versions. Changelog
Prerequisites: Node.js 24.0.0+ LTS, pnpm, Supabase account, and Vercel account. Clone the repository, install dependencies with pnpm install, configure .env with credentials, then run pnpm dev for local development.
Our Contribution Guidelines document provides comprehensive guidance on how to participate in the project, including instructions for reporting bugs, suggesting new features, submitting pull requests, coding standards, commit conventions, and the pull request review process. This guide ensures consistency and quality across all contributions. Contribution Guidelines
The Technical Documentation index contains the full architecture reference: stack details, module status, agent tools registry, media operators, OG image rules, commit conventions, and per-module documentation stubs ready to be filled as modules complete. Technical Documentation
Our Security Policy document outlines our Zero Trust architecture implementation, detailed RLS policy explanations, role-based access control mechanisms, caching strategies for performance optimization, vulnerability disclosure procedures, and security best practices for deployment and operation. This document also contains contact information for reporting security issues responsibly. Security Policy
NLA Fullstack uses a Dual License Model. Option 1: Natuleadan Free License for small organizations (revenue less than $100k per year) is free with annual attestation. Option 2: Natuleadan Business License (revenue greater than or equal to $100k per year) has custom pricing.
Our License Terms and Conditions document provides the complete legal framework including all license conditions, ethical restrictions that must be followed, business licensing terms and pricing structure, developer protections and warranties, limitation of liability, and governing law provisions. This document is the authoritative source for understanding your rights and obligations when using NLA Fullstack. License Terms and Conditions
The Natuleadan Free License document grants rights to organizations meeting the revenue threshold (less than $100k/year), subject to annual attestation and compliance obligations. Natuleadan Free License
The Natuleadan Business License document provides specific licensing arrangements for organizations with annual gross revenue equal to or exceeding $100k, including custom pricing, support SLAs, and access to confidential modules (.ee). Natuleadan Business License
The License Forms document contains all necessary forms for license compliance, including the annual attestation form required for Natuleadan Free License users to certify their eligibility, application forms for business licensing, and other compliance documentation needed to formally document your license status. Annual License Form
Important: The Natuleadan Free License does not include technical support, advisory services, or warranties. The Natuleadan Business License may optionally include these services (Warranty, SLA, Accelerated Security Updates, Specialized Advisory) via separately negotiated agreements — they are not included by default. See License Terms and Conditions Section 8 for details.
Our Code of Conduct document establishes ethical restrictions and prohibited uses, defining the behavioral expectations for all participants and outlining what activities are not permitted under the project licenses. Combined with the License Terms, these documents create a complete framework for acceptable use. Code of Conduct
Our Copyright document provides complete details on ownership of the project, intellectual property rights, contributor rights and how they are managed, the licensing chain explaining how different components are licensed, attribution requirements, and the overall legal structure of the project's ownership. Copyright
NLA Fullstack is built by volunteers. All contributions are unpaid and voluntary.
Our Contribution Guidelines document provides detailed instructions on how to report bugs effectively, suggest new features, submit code through pull requests, and follow our coding standards and commit message conventions. This ensures all contributions meet our quality requirements. Contribution Guidelines
The Code of Conduct document establishes the community values and conduct expectations, defining the respectful and professional environment we maintain. It outlines how members should interact, resolve disagreements, and contribute positively to the community. Code of Conduct
Our Contributors document explains how contributors are recognized, the acknowledgment process, and how the community celebrates individual contributions to the project. Contributors
The Contributor License Agreement document is a legal requirement before contributing. This agreement transfers all intellectual property rights in your contributions to the code owner, ensuring clear ownership and preventing future disputes. You must read and accept this agreement before your first contribution is accepted. Contributor License Agreement
Key guidelines: Reference existing patterns for consistency. Target greater than 80% test coverage as a quality requirement. Pass lint and build as non-negotiable checks. Maintain separation between lib/ (data) and design/ (UI). Document new patterns to help future developers. Respect security rules including RLS, visibility, and authentication.
Follow a modular approach: plan changes, update database schema, define types with Zod, implement repository queries with RLS, add service logic with caching, expose APIs as needed, integrate agent tools, build UI components, write tests (greater than 80% coverage), and pass quality checks.
Code organization: lib/ contains business logic (data source of truth), design/ contains UI components, feature orchestration, data assemblers, and metadata. Never access Supabase directly outside repositories; always pass userRole to services.
For common issues, consult the troubleshooting documentation or open an issue on GitHub.
Our Security Policy document contains specific procedures for reporting security vulnerabilities, responsible disclosure guidelines, and contact information for security-related issues. If you discover a security issue, this document explains how to report it properly. Security Policy
Our License Terms and Conditions document is the authoritative source for all legal aspects of using NLA Fullstack, containing complete license terms, conditions, ethical restrictions, commercial licensing details, developer protections, warranty disclaimers, limitation of liability, and governing law provisions. This document should be your primary reference for any legal question about the project. License Terms and Conditions
The Copyright document provides the ownership and responsibility structure, explaining who owns the project, how intellectual property is managed, contributor rights, and the overall legal framework supporting the project. Copyright
The License Terms document also contains governing law and venue provisions, establishing which jurisdiction's laws apply and where legal disputes should be resolved. License Terms and Conditions
The Code of Conduct and License Terms documents together define all ethical restrictions and prohibited uses, establishing what activities are not permitted and the consequences for violations. These documents ensure the project is used responsibly and ethically. Code of Conduct License Terms and Conditions
See CONTRIBUTING.md for guidelines and how to submit PRs. AI/vibe-coded PRs welcome! 🤖
Thanks to all contributors:
