saas

Plugin saas from marketplace rene-roscher-skills in Rene-Roscher/skills. Commands read from the repo's manifest — 5 days ago.

Skills (14)

• async-reliability

  Makes background work safe under redelivery: idempotent handlers with a stable key, backoff with jitter, dead-letter with replay, unique and overlap locks, timeouts below the redelivery window, dispatch after commit, urgency-split queues, capped paid or paging sends, kill switches, lag alerts. Use w

• authorization-rbac

  Designs and reviews server-side authorization for multi-tenant SaaS: one typed permission catalog, custom roles per tenant, an owner with every right, scoped API tokens, and no escalation on any grant path. Use when touching policies, gates, permissions, roles, invitations, API tokens or admin flags

• billing-eu-b2b

  Engineers subscription billing for EU and German B2B SaaS with the provider behind an adapter: integer money, reverse charge with proof, idempotent webhooks, proration, dunning, race-free limits, EN 16931 e-invoices. Use when touching checkout, subscriptions, invoices, payment webhooks (Mollie, Stri

• build-vs-buy

  Decides what a SaaS builds in-house and what it buys, and how to depend on vendors safely: business rules in-house, payments, mail, SMS and storage behind an own interface with a fake, contract tests and an exit. Use when adding a Composer, npm, Go or Python dependency or a SaaS provider, designing

• domain-design

  Applies domain-driven design where it pays and refuses it where it is ceremony: bounded contexts as modules fenced by an arch test, a context map, glossary-backed terms, small aggregates, domain versus integration events published after commit, sagas with timeouts, anti-corruption layers. Use when a

• dual-key-identifiers

  Designs and audits record IDs in multi-tenant SaaS: a bigint key for joins plus an opaque public ID (NanoID by default) for everything clients see, one 404 for foreign and missing IDs, a build check against leaks. Use when adding a table, model, route, serializer, export or webhook, choosing UUID, U

• egress-and-webhooks

  Secures server-side requests to user-supplied URLs and webhooks both ways: SSRF defense with a pinned IP, IPv4 and IPv6 blocklists, connect-time and per-redirect checks; Standard Webhooks signing, secret rotation, retries and auto-disable; raw-body verification and dedup for incoming hooks; encrypte

• eu-de-legal-baseline

  Spots when a SaaS change touches German or EU law and routes it: Impressum, cookies, consumer sign-up, AGB, UWG claims, reviews and § 7 outreach, BFSG accessibility, DSA, Data Act switching, NIS2, CRA, AI Act, retention. Use when planning a launch, sign-up, pricing, marketing claim, outreach, user c

• gdpr-engineering

  Builds GDPR (DSGVO) compliance into EU SaaS features: controller or processor role, when to update the VVT, AVV, subprocessor list, TOM, privacy notice or DPIA, deletion, retention and export in code. Use when a change adds personal data, a third-party service or SDK, a retention period, data leavin

• localization

  Builds every user-facing text for localization from the start, UI and backend feedback alike (validation, API errors, toasts, notifications, mail, exports, PDFs): CLDR plural forms instead of 'Server(s)', one sentence per key with named placeholders, Intl formatting, error codes instead of raw excep

• plan-entitlements

  Designs plan limits and features for B2B SaaS: one typed entitlement schema, one resolver (plan, custom plan, override with reason and expiry, add-ons), race-free quota checks, soft and hard limits, downgrades that keep data, per-cycle resets, usage in the UI. Use when adding a limit, feature gate,

• service-boundaries

  Decides whether to move work from a PHP/Laravel monolith into Go, Rust or Node on measured numbers, and designs the boundary: dumb workers, smart control plane, pull-only links, versioned contracts, per-service keys. Use when someone proposes a microservice, worker or rewrite, PHP seems too slow, AP

• tenancy-model

  Designs the tenant hierarchy of B2B SaaS: organization as root tenant, optional projects and teams, memberships (one user, many orgs), owner and ownership transfer, invitations, tenant deletion, moving projects between orgs. Use when adding a tenant level, workspaces, teams or invites, or asked whic

• tenant-isolation

  Enforces tenant isolation in B2B SaaS on every path (web, API, jobs, caches, exports, webhooks, realtime): a fail-closed tenant context, scoped input IDs, scoping versus PostgreSQL RLS, cross-tenant probe tests. Use when adding a tenant-owned model, endpoint, job, cache key or export, or asked wheth

Similar plugins