AccountAuthz is the authorization layer for multi-tenant apps. The app declares a fixed catalog of capabilities (permission + metric keys) in code; accounts manage roles as data that bundle those capabilities; AccountAuthz resolves what a member may do (can?) and which metrics they may see (approved_metrics) from their roles, and plugs into Pundit for enforcement.

A mountable Rails engine for managing photo galleries with responsive focal-point cropping, named galleries, and an API for uploads.

DashKit provides a presentation layer for building reusable dashboards. Register widgets, persist user configuration, and render dashboards without coupling to any specific data backend.

A companion engine for keystone_ui that provides preset themes and per-user color palette persistence.

Notey is the notification layer for multi-tenant apps. Noticed delivers a notification on whatever channels a notifier declares; Notey stores which channels each person wants per notification type, gives them screens to set that, scopes an inbox to the account they are in, and groups notifications into digests instead of sending each one as it happens.

SettingsHub owns a settings page, the list of sections on it, the route each section is served at, and the check for who may see a section. It ships user sections itself, and other gems and the app register their own. Each thing a person can do is a plain object a page or an API can call.