# Lacspace

> Lacspace is a global, Asia-based technology company that designs, builds and ships software, AI and products — from client platforms and consumer apps to 60+ open-source TypeScript packages. Long-range vision: Software → AI → Robotics → Space.

Lacspace works in three connected ways:

1. **We build software for clients** — custom web and mobile apps, SaaS platforms, AI assistants, business systems (ERP/POS/school management) and the SEO, cloud and DevOps around them. See https://lacspace.com/services.
2. **We build and run our own products** — 19+ platforms and apps across business, finance, education, commerce, healthcare and entertainment, listed below and at https://lacspace.com/products.
3. **We open-source the tools we build on** — 61 zero-dependency, isomorphic (browser + server), dual ESM/CJS TypeScript packages published under the `@lacspace` scope on npm, plus `create-lacspace-app` for scaffolding new projects. Every package is documented at https://lacspace.com/docs.

This file maps the site's most useful pages for language models and AI crawlers. Prefer the canonical pages linked here; article `canonicalUrl` values in raw data may be unreliable — trust the on-page canonical.

## Company & platform
- [About Lacspace](https://lacspace.com/about): Who we are — a global, Asia-based technology company building software, AI and products.
- [Vision](https://lacspace.com/vision): Our long-range roadmap: Software → AI → Robotics → Space.
- [Services](https://lacspace.com/services): What we design and build for clients — custom software, web, mobile, AI and growth.
- [Products](https://lacspace.com/products): The full catalog of Lacspace products and platforms.
- [Developers](https://lacspace.com/developers): The Lacspace developer platform, SDK and APIs.
- [Open-source packages](https://lacspace.com/packages): 60+ zero-dependency TypeScript npm packages published under @lacspace.
- [Documentation](https://lacspace.com/docs): Per-package guides, API references and a downloadable handbook (PDF).
- [Full knowledge export](https://lacspace.com/llms-full.txt): Everything inlined for AI: every package's install, description, runnable example, deps and version, plus products and services.
- [create-lacspace-app](https://lacspace.com/create-app): Scaffold a production-ready Next.js app, pre-wired with Lacspace SEO, security headers, sitemap and more, in one command.
- [Articles](https://lacspace.com/articles): Lacspace Insights — engineering, product and startup writing.
- [RSS feed](https://lacspace.com/feed.xml): Subscribe to new Lacspace articles (RSS 2.0).
- [Projects & case studies](https://lacspace.com/projects): Selected client work, platforms we've shipped and outcomes.
- [Careers](https://lacspace.com/careers): Open roles and how we work.
- [Contact](https://lacspace.com/contact): Get in touch with Lacspace.

## What we do for clients (services)
Lacspace offers full-cycle product and software services. Details and pricing enquiries at https://lacspace.com/services and https://lacspace.com/contact.
- **Custom software development** — Bespoke web and enterprise platforms — SaaS, dashboards, internal tools, APIs and integrations.
- **Mobile app development** — Cross-platform iOS & Android apps (React Native / Expo) with OTA updates and store publishing.
- **Web development & design** — Marketing sites, portals and web apps with production-grade SEO, performance and accessibility built in.
- **AI solutions & assistants** — LLM-powered chatbots, agents, automations and AI features embedded into real products.
- **SEO & digital growth** — Technical SEO, structured data, content systems and analytics — the same stack that powers lacspace.com.
- **Business systems** — ERP, POS, school management, CRM and back-office platforms tailored to a client's workflow.
- **Cloud, DevOps & infrastructure** — Deployment, CI/CD, uptime monitoring and hardened, self-hosted or managed infrastructure.

## Products & platforms
Products Lacspace has built and operates. Some run on their own domains; each has a showcase page on lacspace.com.
- [LacspaceOS](https://lacspace.com/products/lacspace-os): An operating system for the web — a real browser desktop with draggable snapping windows, a Dock, Spotlight, Files and a terminal. Every Lacspace product preinstalled; one Lacspace One account. In development, launching at os.lacspace.com.
- [SaloonERP](https://lacspace.com/products/saloonerp): All-in-one management for salons, spas and salon academies — bookings, staff, inventory, payments and a live studio board.
- [Game Collection](https://lacspace.com/products/game-collection): 50+ free, offline, ad-free mini-games in one Android app (iOS coming) — brain, board, arcade, word and memory games. Growing toward 100+, shipped via over-the-air updates.
- [StockYatra](https://lacspace.com/products/stockyatra): Paper-trading simulator on live NEPSE / NSE / BSE prices — trade live markets, risk nothing.
- [CorperaHQ](https://lacspace.com/products/corperahq): Run your whole company from one place — an all-in-one business operating system.
- [Khepee](https://lacspace.com/products/khepee): Digital lending infrastructure for NRB-licensed banks and financial institutions in Nepal — you hold the licence, Khepee holds the tech. (Upcoming.)
- [iSmartClass](https://lacspace.com/products/ismartclass): Free school management software & ERP — attendance, results, fees, communication and more.
- [ScanSewa](https://lacspace.com/products/scansewa): A free, AI-powered business command center.
- [Sikhaku](https://lacspace.com/products/sikhaku): A creator course marketplace — learn from the creators you already follow, with 0% commission for creators.
- [SparkHue](https://lacspace.com/products/sparkhue): Build and run your own multi-vendor eCommerce marketplace.
- [KhajaGo](https://lacspace.com/products/khajago): Own your city — local food ordering and commerce without the middleman commissions.
- [Lekhio](https://lacspace.com/products/lekhio): A no-code ERP you design yourself with 18+ field types — it molds to your business.
- [LSKhata](https://lacspace.com/products/lskhata): Digital khata / ledger — 100+ features across 3 apps on 1 platform.
- [Lacnova](https://lacspace.com/products/lacnova): Single-purpose automation tools that do the boring, repetitive part (RouteLab is live).
- [CareSewa](https://lacspace.com/products/caresewa): Connected healthcare — you hold your health account with one Health ID, providers connect to you.
- [DemoRestro](https://lacspace.com/products/demorestro): A restaurant ordering platform you own — stop paying delivery commissions.
- [Startup Nepal](https://lacspace.com/products/startup-nepal): Your technology co-founder — a studio that builds and ships startups end to end.
- [WeNepal](https://lacspace.com/products/wenepal): The pulse of the nation — news, live and community.
- [IdeaTopic](https://lacspace.com/products/ideatopic): Free student notes, past questions and study groups, organised by topic (formerly WeGrowNepal).

## Developer packages (@lacspace on npm)
61 zero-dependency TypeScript packages, grouped into kits. Each links to its documentation page. Install any with `npm i <name>`; scaffold a new app with `npx create-lacspace-app`.

### Core SDK
Talk to the Lacspace platform from any JavaScript runtime.
- [@lacspace/sdk](https://lacspace.com/docs/sdk): The all-in-one client — Bundles api + auth + analytics behind one client that shares a single connection — a login token instantly applies everywhere — plus e-comme
- [@lacspace/api](https://lacspace.com/docs/api): Zero-dependency HTTP client — The foundation everything is built on. Typed requests, predictable errors, automatic retries with backoff, request/response interceptors, qu
- [@lacspace/auth](https://lacspace.com/docs/auth): Authentication flows — Login, register, current user, logout and token refresh — with the bearer token applied automatically after sign-in. Plus auto-refresh (401 
- [@lacspace/analytics](https://lacspace.com/docs/analytics): Event tracking — Track events one at a time, or queue and flush them in a single batch — handy for offline-first apps and reducing request volume.

### StockKit — for stock-market apps
The suite that powers StockYatra. Everything a trading, charting or algo app re-implements — done once, done right.
- [@lacspace/indicators](https://lacspace.com/docs/indicators): Streaming technical indicators — RSI, MACD, EMA, Bollinger, ATR, VWAP, Stochastic, Supertrend, ADX — with an incremental O(1) API. Push one live LTP tick and the indicator u
- [@lacspace/market](https://lacspace.com/docs/market): Money & mechanics — P&L, returns, CAGR, XIRR, position sizing, tick-size rounding and circuit limits — plus a real Indian brokerage & charges calculator (STT, G
- [@lacspace/market-clock](https://lacspace.com/docs/market-clock): Trading hours & holidays — Is the market open right now? When does it next open or close? A holiday-aware, timezone-correct trading clock with NSE/BSE presets — or bri
- [@lacspace/paper-trade](https://lacspace.com/docs/paper-trade): Paper-trading engine — The simulator core behind StockYatra. A virtual wallet, market/limit/stop orders that fill against live prices, positions, holdings and live

### MailKit — email for backends
Everything a backend needs to send, compose and validate email. Send with one line; compose bulletproof HTML; catch bad addresses before they cost you.
- [@lacspace/mailer](https://lacspace.com/docs/mailer): Zero-dependency SMTP client — Send email over raw Node net/tls — STARTTLS, AUTH, MIME with attachments — with no npm dependencies. Provider presets make Hostinger, Gmail,
- [@lacspace/email-templates](https://lacspace.com/docs/email-templates): Responsive HTML emails — Compose bulletproof, dark-mode-aware HTML emails from simple blocks (button, OTP code, invoice table) — no more <table> soup. Ships OTP/welc
- [@lacspace/email-validate](https://lacspace.com/docs/email-validate): Validation beyond regex — Syntax + disposable/temp-mail detection, role & free-provider flags, Gmail normalization, and 'did you mean?' typo suggestions (gmial.com → 
- [@lacspace/email-verify](https://lacspace.com/docs/email-verify): Deliverability checks — Resolve a domain's MX records and optionally run a real SMTP RCPT probe to check a mailbox exists — without sending anything. Best-effort (s

### SEO Kit — everything crawlers & AI read
Generate every file and tag search engines and AI crawlers look for — metadata, JSON-LD, sitemaps, robots.txt, llms.txt, feeds and more. All typed and dependency-free.
- [@lacspace/seo](https://lacspace.com/docs/seo): SEO Autopilot & CI gate — SEO Autopilot: defineSite() once, then site.meta()/article()/product()/faq() auto-fill Metadata AND JSON-LD — title template, canonical, Ope
- [@lacspace/sitemap](https://lacspace.com/docs/sitemap): sitemap.xml + index — URL entries with lastmod/changefreq/priority, image/video/news extensions and hreflang alternates. Auto-splits past 50,000 URLs into an inde
- [@lacspace/robots](https://lacspace.com/docs/robots): robots.txt + AI blocking — Typed per-user-agent rules, sitemap refs, a parser, framework presets (Next.js, WordPress, Shopify) and an isAllowed() crawlability matcher 
- [@lacspace/llms-txt](https://lacspace.com/docs/llms-txt): llms.txt / llms-full.txt — Generate and parse llms.txt and llms-full.txt — the emerging llmstxt.org standard that gives LLMs a curated, Markdown map of your site — or 
- [@lacspace/site-verify](https://lacspace.com/docs/site-verify): Search-engine verification — Verification meta tags, Next.js verification metadata and file tokens for Google Search Console, Bing Webmaster, Yandex, Baidu, Pinterest, A
- [@lacspace/rss](https://lacspace.com/docs/rss): RSS / Atom / JSON feeds — Define your feed and items once, emit valid RSS 2.0, Atom 1.0 or JSON Feed 1.1 — with CDATA content, categories, authors and podcast enclosu
- [@lacspace/slugify](https://lacspace.com/docs/slugify): SEO URL slugs — Turn any text into a clean, SEO-friendly URL slug — transliterates diacritics, collapses separators, truncates on word boundaries, and guara

### Security Kit — the seven layers, as code
Real security primitives built on vetted crypto (Web Crypto — never hand-rolled): AES, password hashing, tokens, API keys, 2FA/3FA, passkeys, account lockout, hardened headers and log redaction. For web, backend, mobile, AWS/S3 and Mongo.
- [@lacspace/crypto](https://lacspace.com/docs/crypto): AES-256-GCM encryption — Authenticated AES-256-GCM encrypt/decrypt (with AAD), PBKDF2 & HKDF key derivation, SHA-2, HMAC, secure random and constant-time compare — a
- [@lacspace/password](https://lacspace.com/docs/password): Password hashing — Hash & verify with PBKDF2-HMAC-SHA256 (600k iterations per OWASP) in a portable PHC string, constant-time verify, rehash detection and a str
- [@lacspace/jwt](https://lacspace.com/docs/jwt): JWTs & tokens — Sign & verify JWTs — symmetric HS256/384/512 and asymmetric RS256/ES256 — with strict expiry/issuer/audience checks over Web Crypto, so it r
- [@lacspace/apikey](https://lacspace.com/docs/apikey): API keys — Issue prefixed, high-entropy keys (lac_live_…), store only the SHA-256 hash, show the last 4, and verify in constant time — exactly how Stri
- [@lacspace/otp](https://lacspace.com/docs/otp): TOTP / HOTP 2FA — Google Authenticator-compatible two-factor auth over Web Crypto — runs on Node, edge and browser. Generate secrets, verify codes with drift 
- [@lacspace/webauthn](https://lacspace.com/docs/webauthn): Passkeys / biometric — FaceID, fingerprint and security keys via WebAuthn — browser ceremony helpers plus server challenge, options and real ES256/RS256 assertion 
- [@lacspace/mfa](https://lacspace.com/docs/mfa): 2FA / 3FA orchestration — Combine password + TOTP + passkey into 2FA/3FA step-up flows with NIST assurance levels (AAL1–3). Track which factors are cleared and decide
- [@lacspace/lock](https://lacspace.com/docs/lock): Account lockout — Server-side brute-force protection: track failed attempts per user/IP, lock after N strikes with exponential backoff, auto-expire the window
- [@lacspace/headers](https://lacspace.com/docs/headers): Secure headers + CSP — A tiny framework-agnostic Helmet: strict security response headers (HSTS, X-Frame-Options, Referrer-Policy, COOP) and a typed Content-Securi
- [@lacspace/redact](https://lacspace.com/docs/redact): Log redaction — Mask secrets & PII before they reach your logs — by sensitive key name (password, token, authorization…) and by pattern (JWTs, API keys, ema

### Backend Kit — server-side essentials
The things every backend re-implements — signed links and PDF documents — done once, zero-dependency, isomorphic. A new kit, growing.
- [@lacspace/signed-url](https://lacspace.com/docs/signed-url): Signed & expiring URLs / tokens — HMAC-signed, expiring URLs and tokens over Web Crypto — magic-login links, secure download links, unsubscribe links and one-time actions. Ta
- [@lacspace/pdf](https://lacspace.com/docs/pdf): PDF invoices, receipts & docs — Generate real PDFs with zero dependencies and no headless browser — pdfkit is heavy and node-only, puppeteer spins up Chromium. Batteries-in
- [@lacspace/webhooks](https://lacspace.com/docs/webhooks): Sign, verify & deliver webhooks — Both directions: sign & deliver outgoing webhooks with retries + backoff, and verify incoming ones (timing-safe, replay-protected) with read
- [@lacspace/idempotency](https://lacspace.com/docs/idempotency): Exactly-once operations — The 'don't double-charge, don't send twice' primitive. Run any operation at-most-once per idempotency key and replay the stored result on re

### Data Kit — export & parse
Get data in and out — real Excel files and correct CSV — with no heavy libraries and no headless browser.
- [@lacspace/xlsx](https://lacspace.com/docs/xlsx): Excel export, zero-dep — Write real .xlsx files with zero dependencies and no headless browser — a spreadsheet is just a ZIP of XML, so we build the bytes directly (
- [@lacspace/csv](https://lacspace.com/docs/csv): RFC 4180 CSV done right — CSV looks trivial until commas-in-quotes, quotes-in-quotes, newlines-in-cells and CRLF. This handles the RFC 4180 edge cases correctly, retu

### DX Kit — everyday utilities
The small helpers every UI rebuilds — human-readable formatting and colour maths — as tiny, typed, dependency-free packages.
- [@lacspace/humanize](https://lacspace.com/docs/humanize): Human-readable formatting — Bytes (1.5 KB), durations (1d 1h), relative time (3 hours ago), ordinals (21st), compact numbers (1.2M), pluralize, grammatical lists and tr
- [@lacspace/color](https://lacspace.com/docs/color): Colour maths + WCAG contrast — Parse hex/rgb/hsl, convert between them, lighten/darken/mix/alpha/rotate — and, crucially, check WCAG contrast so your UI is actually readab
- [@lacspace/money](https://lacspace.com/docs/money): Money without float bugs — 0.1 + 0.2 !== 0.3 — so never store money as a float. Keeps amounts as integer minor units, refuses to add different currencies, splits a bil

### Utils Kit — the missing standard library
The tiny helpers every project reaches for — unique IDs, resilient calls and string-case conversion — typed and dependency-free.
- [@lacspace/id](https://lacspace.com/docs/id): UUID v4/v7, Nano-ID & short — Every ID kind in one package — classic UUID v4, the time-sortable UUID v7 (a superb index-friendly database key), Nano-ID-style and short UR
- [@lacspace/retry](https://lacspace.com/docs/retry): Retry, timeout, circuit breaker — Resilience for flaky calls: retry() with exponential backoff + full jitter (shouldRetry/onRetry/AbortSignal), withTimeout() that cancels slo
- [@lacspace/case](https://lacspace.com/docs/case): String-case conversion — camelCase, PascalCase, snake_case, kebab-case, CONSTANT_CASE, Title Case, Sentence case — correct on the tricky inputs (acronyms like XMLHtt
- [@lacspace/cache](https://lacspace.com/docs/cache): LRU + TTL + stale-while-revalidate — An in-memory cache that does the three things you actually want — bound the size (LRU), expire entries (TTL) and hide latency (stale-while-r

### App Kit — ship a polished app
The pieces every product app needs — schema validation, spam-proof forms, dynamic social images and a lively UI — powering create-lacspace-app out of the box.
- [@lacspace/validate](https://lacspace.com/docs/validate): Zod's ergonomics, zero deps — parse / safeParse, objects, arrays, enums, unions and full type inference — plus coercion ("42" → 42, "true" → true) so one schema validates
- [@lacspace/form](https://lacspace.com/docs/form): Typed forms + spam guard — Turn a FormData into typed, validated data with a honeypot + timing spam guard, and get back either your data or per-field errors ready to r
- [@lacspace/og](https://lacspace.com/docs/og): Dynamic OG share images — A share-card design system you configure once and call per page — auto-fitting titles, eyebrows, badges, logos and gradients. Renders two wa
- [@lacspace/ui](https://lacspace.com/docs/ui): React kit that feels alive — Scroll reveals, animated counters, gradient text, tilt cards, marquees, a typewriter and a ⌘K command palette — no animation library, no CSS
- [@lacspace/markdown](https://lacspace.com/docs/markdown): Markdown → HTML, safe — Everything a blog or docs page needs — headings with anchor ids, nested & task lists, fenced code, blockquotes, GFM tables, images and links
- [@lacspace/analytics-lite](https://lacspace.com/docs/analytics-lite): Cookieless analytics — Privacy-first page views + custom events sent to your own endpoint — no cookies, no localStorage IDs, no cross-site tracking, so no consent 

### WebKit — for web apps & backends
The utilities every web app and backend re-implements — config, rate limiting, feature flags and Next.js — done once, typed, and dependency-free.
- [@lacspace/flags](https://lacspace.com/docs/flags): Feature flags & A/B — no SaaS — Feature flags and A/B experiments with no vendor and no infrastructure: you own the config, this evaluates it. Deterministic bucketing (same
- [@lacspace/env](https://lacspace.com/docs/env): Typed env variables — Declare a schema, validate process.env once at boot, and get a typed frozen object. Missing or malformed vars throw one clear error before t
- [@lacspace/rate-limit](https://lacspace.com/docs/rate-limit): Rate limiting — Fixed-window, sliding-window and token-bucket algorithms over a pluggable store (in-memory built in; bring your own Redis). Standard RateLim
- [@lacspace/next](https://lacspace.com/docs/next): Next.js App Router integration — The server-side companion to @lacspace/react: an authenticated SDK client from cookies, Route Handler & Server Action wrappers, cookie helpe

### Nepal toolkit
Batteries-included helpers for building Nepal-facing apps.
- [@lacspace/nepali-date](https://lacspace.com/docs/nepali-date): Bikram Sambat ↔ Gregorian — Convert between BS and AD dates with Devanagari formatting. Range BS 1970–2086, cross-checked against established datasets across 42,000+ co
- [@lacspace/nepali-utils](https://lacspace.com/docs/nepali-utils): Everyday Nepal helpers — NPR currency formatting (lakh/crore grouping), Devanagari numerals, amount-in-words for invoices, phone carrier detection & validators, all 

### React Kit — hooks, state, data & UX
A complete React layer that pairs with any app: essential hooks, tiny global state, data fetching, theming, keyboard shortcuts and list virtualization — all zero-dependency and SSR-safe.
- [@lacspace/hooks](https://lacspace.com/docs/hooks): 24+ essential hooks — The hooks you reach for on every project — useLocalStorage, useDebounce, useMediaQuery, useOnClickOutside, useCopyToClipboard, useInterval, 
- [@lacspace/store](https://lacspace.com/docs/store): Global state in ~1 KB — Create a store, use selectors, no provider — built on useSyncExternalStore with a persist middleware and shallow equality. A Zustand-lite th
- [@lacspace/query](https://lacspace.com/docs/query): Data fetching & cache — useQuery + useMutation with a shared cache, request de-duplication, stale-while-revalidate and focus/reconnect revalidation — an SWR-lite in
- [@lacspace/theme](https://lacspace.com/docs/theme): Dark / light / system — A tiny ThemeProvider (with a built-in no-flash script), a useTheme hook and getThemeScript(). Persists to storage, follows the OS, toggles a
- [@lacspace/hotkeys](https://lacspace.com/docs/hotkeys): Keyboard shortcuts — useHotkeys with combos (mod+k), key sequences (g then d), scopes and pretty display formatting (⌘K). SSR-safe and respects form fields.
- [@lacspace/virtual](https://lacspace.com/docs/virtual): List virtualization — Render 100k rows smoothly — headless windowing with fixed or dynamically-measured sizes, overscan and scroll-to-index. useVirtualizer in ~2 
- [@lacspace/react](https://lacspace.com/docs/react): SDK hooks & provider — Wrap your app once, then use useAuth, useQuery and useLacspace anywhere — all sharing one authenticated Lacspace SDK client. React 18+.

## Optional & reference
- [Legal Centre](https://lacspace.com/legal): Terms of Service, Privacy Policy, Cookie Policy, Refund Policy and other legal documents (each downloadable as a watermarked PDF).
- [Licence Centre](https://lacspace.com/licenses): Lacspace software licence tiers — Free, Commercial, Client and Private.
- [Case studies](https://lacspace.com/case-studies): Selected client work and measurable outcomes.
- [Research](https://lacspace.com/research): How Lacspace approaches R&D across AI and product engineering.
- [Trust & transparency](https://lacspace.com/trust-and-transparency): Security posture, uptime and how we handle data.
- [Status](https://lacspace.com/status): Live status of Lacspace services.
- [Brand](https://lacspace.com/brand): Logos, colours and brand guidelines.