Stack
Links marked “referral” earn a commission if you sign up. They are marked in the list, tagged rel="sponsored" in the markup, and nothing is listed here that is not already in production. Everything else is an ordinary link and earns nothing.
What serves nyk.dev. Every claim here is checkable against this repository.
Server components by default. The hero is fully server-rendered so the largest paint ships no client JS, and the plate parallax runs on CSS scroll timelines rather than a scroll listener.
Check it: src/components/hero/hero.tsx
Hosting and analytics. Its VERCEL_ENV is the hard override that makes production refuse to be coerced into Stripe test mode by an environment variable.
Check it: src/lib/stripe-commerce-mode.ts
Order store and rate limiting. Holds the product-order records that decide whether a download is served, and the per-scope limiters on checkout, download and recovery routes.
Check it: src/lib/server/product-orders.ts, src/lib/rate-limit.ts
Four digital products sell through this path. It is the part of the site with the least tolerance for being approximately right.
Payment Links with Managed Payments as merchant of record, so Stripe carries the VAT liability. The purchase contract pins price ID, currency and amount exactly — a mismatch is refused rather than fulfilled, because the failure it prevents is a buyer paying and receiving nothing.
Check it: src/lib/stripe-product-contract.ts
Delivery email. Dispatch is keyed by an idempotency key derived from the checkout session, so a replayed webhook cannot send a second copy of the same purchase.
Check it: src/app/api/webhooks/stripe/route.ts
What the ventures run on, outside this repository.
Proxy access, in production use.
Check it: Not in this repository — venture infrastructure.
The tools that decide whether something ships. Listed because the gate is the product claim: kits sold here are built by this pipeline.
The public and commerce suites. Includes the hero legibility check that measures real composited pixels rather than CSS colours, after a token-only check passed while hero copy was actually at 2.87:1.
Check it: e2e/hero-contrast.spec.ts
Package manager, with lifecycle scripts restricted by default. Third-party install hooks are treated as supply-chain input, not convenience.
Check it: package.json