Authz
Roles, scopes and grants for multi-user modules: wildcard permissions, role inheritance, scope trees, expiring grants, invite links, an audit log and row-level security, with no privilege escalation.
All submodules
Cron
Schedules recurring tasks in a SpacetimeDB module using calendar expressions or fixed intervals. Supports time zones, per-job arguments, failure limits, and runtime schedule changes.
Crypto
Hashing, encoding conversion, and webhook signature verification for Stripe, Svix, and GitHub. Includes timing-safe byte comparison and hex/base64 helpers.
History
An audit log, per-person undo/redo and point-in-time reads for your tables. Every change is recorded in the same transaction: who made it, the action, and the row before and after.
IDC
Databases that push messages to each other, with no polling: a transactional outbox, signed delivery that retries until it lands, and exactly-once apply on the other side. Rust and C# speak it too.
OAuth
Link Twitch, Discord, Google, GitHub or Spotify accounts to SpacetimeDB identities: authorization code + PKCE, a private token vault, and scheduled refresh, with no auth server on the side.
Rate Limit
Controls how often each user or service can perform an action within a rolling time window. Tracks usage per actor and scope, reports remaining capacity, and cleans up expired records automatically.
Relations
Foreign keys for SpacetimeDB: restrict, cascade or set-null deletes with previews, multi-column unique constraints, orphan check and repair, and cursor and live pagination.
Resend
Sends transactional email through Resend and stores delivery status in your database. Webhook events update each message's state from queued through delivered, bounced, or failed.
Retry
Schedules failed background tasks for automatic retry, with configurable attempt limits and exponential backoff. Admins can inspect pending tasks and attempt history.
VoIP
Voice chat with no media server: rooms and proximity voice that run inside your module. Opus packets travel through an event table, and row-level security delivers each one only to its listeners.
Webhooks
Verified inbound webhooks (GitHub, Twitch EventSub, Stripe, Discord, Standard Webhooks) handled exactly once, and signed outbound webhooks from a transactional outbox with retries.