A composable, local-first platform for collaborative knowledge work, democratic governance, and programmable economic flows.
rStack combines self-sovereign identity, Automerge CRDTs, x402 micropayments, and wallet-abstracted multi-chain treasuries into a cohesive foundation. 25+ composable modules render on a spatial canvas. One passkey, one data layer — no vendor lock-in, no surveillance, no kill switch.
Every app is source-available. Read the code, fork it, audit it, contribute back. No black boxes.
Run on your server, a community VPS, or a Raspberry Pi. Your hardware, your rules, your data.
Passkey-based auth with on-device key derivation. The server never sees your private material.
End-to-end encrypted. CRDT-synced. Your community's data stays yours — by architecture, not policy.
Three layers, one coherent platform. Each layer is independently useful but gains power through composition. The cheapest layer with sufficient guarantees always wins — most operations never touch a blockchain. Read the full ontology →
Each module implements a standard interface with typed feeds (data, economic, governance, creative) and renders as a shape on the canvas. Modules communicate through flows, not hard-wired integrations — a vote in rVote references a budget in rFunds without either knowing the other's internals.
The unification layer. Spaces are collaborative contexts (teams, projects, communities) with role-based access. The FolkJS spatial canvas positions modules as interactive shapes. Inter-module flows (data, economic, trust, governance) connect everything. Each space is itself an Automerge CRDT — collaborative, offline-capable, conflict-free.
No module implements its own auth, sync, or payments. EncryptID derives all keys from a single passkey. Automerge CRDTs provide local-first sync with Byzantine fault tolerance. x402 micropayments make any HTTP endpoint payable. Gnosis Safe wallets abstract multi-chain treasuries.
Twenty-six apps organized into seven functional areas. Each area solves a core challenge of community coordination. Use the apps you need — they work independently or as an integrated suite.
The creative workspace. Infinite canvases, real-time documents, video, publishing, and merch — everything your community needs to make things together.
Spatial and temporal coordination for groups. Schedule events across time zones, plan trips collaboratively, and map your community's presence across the world.
Real-time and asynchronous communication channels. Encrypted chat for immediate coordination, shared inboxes for email workflows, and forums for long-form discourse.
Democratic decision-making tools for any group. From lightweight polls to weighted conviction voting, with cryptographically signed ballots that are verifiable but private.
Community economics without crypto literacy. Pool resources, track budgets, run auctions, and manage treasuries — all through the same biometric login, with smart wallets handling the complexity underneath.
Privacy-respecting analytics that your community controls. No third-party trackers, no data brokers, no surveillance capitalism.
A single identity layer that turns a fingerprint or face scan into full-stack access — encrypted storage, signed votes, community treasury, and more — without passwords, seed phrases, or cloud accounts.
Built on WebAuthn passkeys — the same standard behind Face ID and fingerprint unlock. Your identity is bound to your device's secure hardware (TPM / Secure Enclave). Nothing to type, nothing to remember, nothing that can be phished.
Authentication derives a full set of cryptographic keys entirely on your device using HKDF. Encryption keys for files, signing keys for votes, DID keys for portable identity — all generated locally. The server is a relay, never an authority.
Lost your phone? Designate trusted guardians (friends, family, community leaders). Any 3 of 5 guardians can approve recovery after a 48-hour time-lock. No seed phrases, no email resets. Guardians never see each other's identities or your private keys.
Your passkey derives a secp256k1 EOA that signs for Gnosis Safe multisig wallets across 12+ EVM chains. No MetaMask, no hardware wallet — the passkey is the wallet. Rollup-first (Base, Optimism) for sub-cent transactions, settle to L1 when needed.
Passkey (biometric / PIN on device)
→ PRF extension yields hardware-bound salt
→ HKDF Master Key (256-bit)
├→ AES-256-GCM — encrypt documents, files, backups
├→ Ed25519 — DID (did:key:z6Mk...) for identity
├→ ECDSA P-256 — TLS-grade signing
└→ secp256k1 — Ethereum EOA → Gnosis Safe wallet
├→ Multi-chain treasury (12+ EVM chains)
├→ x402 micropayment signing
└→ Threshold confirm → execute
Auth Levels (time-decaying, re-escalated by fresh passkey tap):
Basic → Standard (<15m) → Elevated (wallet ops) → Critical (key ops)
Four layers of economic infrastructure. Use the cheapest layer that provides sufficient guarantees — most operations never touch a blockchain.
HTTP 402 Payment Required as a first-class protocol.
Any route can require payment by adding middleware. The client receives a 402
with requirements (payTo, amount, network), signs with their passkey-derived wallet,
and re-requests with an X-PAYMENT header. Settled on EVM L2 rollups
(Base, Optimism) for sub-cent transaction costs. Use cases: file upload gates,
AI generation costs, premium content, per-query API access.
Tokens built on Byzantine Fault Tolerant CRDTs — peer-to-peer, conflict-free, no central mint. Membership tokens gate access, contribution credits reward participation. Bridge to ERC-20 when you need DeFi composability.
Spaces can have multi-sig treasuries via Gnosis Safe. Funding proposals from rFunds flow into Safe wallets. Threshold signing by space admins. Same Safe address across L1 and 12+ L2 chains.
Module-minted ERC-20 tokens via the canvas. Voting power in rVote tied to token holdings or delegation. Quadratic funding in rFunds weighted by token-gated participation.
Data consensus via Automerge CRDT (off-chain, free, instant). Payment settlement on L2 rollups (~$0.001/tx). Governance finality on L1/L2 when needed. Token issuance on L2 for low-cost deployment.
rStack doesn't reinvent wheels. Every app is assembled from battle-tested open-source projects — the latest and greatest tools, composed into a cohesive platform.
Spatial canvas engine powering rSpace. Web components positioned, connected, and composed on an infinite 2D surface.
CanvasLocal-first CRDTs for real-time sync. Peer-to-peer, offline-capable, Byzantine fault tolerant. The data layer for every rApp.
Sync LayerW3C standard for passwordless authentication. Hardware-backed passkeys via TPM and Secure Enclave.
IdentityThe leading open-source discussion platform. Trust levels, moderation, and rich threading for rForum.
CommunityOpen-source mapping with OpenStreetMap tiles. Powers rMaps, rCal's spatial view, and rTrips route planning.
MappingDecentralized, end-to-end encrypted messaging standard. Interoperable federation for rChats.
MessagingModern typesetting system that's fast, ergonomic, and beautiful. Powers rPubs' document pipeline.
PublishingHigh-performance self-hosted photo management. AI-powered tagging, facial recognition, and mobile backup. Powers rPhotos.
PhotosFederated video hosting with ActivityPub. No algorithms, no ads, no surveillance. Powers rTube.
VideoPrivacy-friendly analytics. No cookies, GDPR compliant, lightweight. Powers rData.
AnalyticsMulti-sig wallet standard. Passkey-derived EOA as signer. Threshold signing for community treasuries across 12+ EVM chains.
WalletContainer orchestration with automatic service discovery and TLS. The deployment backbone of every app.
InfrastructureEdge-first web framework with HTTP 402 micropayment middleware. Any route can require payment — settled on EVM L2 rollups.
FrameworkEvery r-Stack app ships as a Docker container. Clone, configure, deploy. The whole suite runs on a VPS, a home server, or community-shared infrastructure.
$ git clone https://git.rstack.online/rstack $ cd rstack $ cp .env.example .env # set your domain + secrets $ docker compose up -d # that's it ✓ rSpace → space.yourdomain.org ✓ rNotes → notes.yourdomain.org ✓ rVote → vote.yourdomain.org ✓ rFunds → funds.yourdomain.org ✓ rFiles → files.yourdomain.org ✓ rMaps → maps.yourdomain.org ✓ rIDs → id.yourdomain.org ...and every other app in the suite
No SaaS subscription, no per-seat pricing, no usage caps. Run the entire stack for your 5-person co-op or your 500-person organization on a single $10/month VPS. Scale by adding hardware, not upgrading a pricing tier.
Don't want to manage a server? Join a community-hosted instance. Multiple organizations can share infrastructure costs while maintaining isolated, encrypted data spaces. Federate across instances when you're ready.
Need a custom voting algorithm? A different map provider? A branded theme? Fork the repo, change what you need, deploy. Every app is designed to be modified. No permission required.
SaaS tools disappear when the company pivots or shuts down. Self-hosted open-source tools keep running as long as you want them to. Your community's infrastructure doesn't depend on anyone else's business model.
Explore each app independently or see how they work together as a suite. Every app is live and ready to try.
Jump into rSpace and start collaborating on an infinite, real-time canvas
Create a poll in rVote and see cryptographic ballot signing in action
Drop a document into rPubs and generate a print-ready PDF in seconds
Explore rCal's spatiotemporal calendar with ten zoom levels
Pin locations and draw regions on a collaborative open-source map
Explore the community photo commons with AI-powered search and shared albums
Register with a passkey and see zero-knowledge identity in action