# supastack

> supastack is a modular foundation for AI SaaS products — a Next.js web app,
> an Expo mobile app, and a Tauri desktop shell over shared TypeScript modules
> (auth, workspaces, billing, AI, jobs, email, storage, observability).

Documentation links ending in .md return plain Markdown without presentation markup. Append `.md` to any documentation or blog URL, or send `Accept: text/markdown`, to receive its Markdown twin.

## Agent Resources

- [Documentation index](https://supastack.dev/llms.txt): Concise index of all documentation guides and blog articles
- [Full documentation corpus](https://supastack.dev/llms-full.txt): Every documentation guide and blog post in a single Markdown file
- [Agent skill](https://supastack.dev/skill.md): Capability summary and operating guide for coding agents working with supastack
- [Agent skills discovery](https://supastack.dev/.well-known/agent-skills/index.json): Machine-readable agent-skills 0.2.0 manifest with SHA-256 content digests
- [Authentication for agents](https://supastack.dev/auth.md): Which endpoints are anonymous, session-only, or provider-signed
- [Pricing](https://supastack.dev/pricing.md): License plans, USD prices, and seat policy in Markdown
- [OpenAPI document](https://supastack.dev/openapi.json): OpenAPI 3.1 description of the public HTTP API
- [ARD manifest](https://supastack.dev/.well-known/ard.json): Agentic Resource Discovery entries for the docs and storefront MCP servers
- [Documentation MCP](https://supastack.dev/api/mcp): Anonymous, read-only MCP server (server card at https://supastack.dev/.well-known/mcp.json)
- [Storefront MCP](https://supastack.dev/api/mcp/storefront): Plans and pricing MCP server (server card at https://supastack.dev/.well-known/mcp/storefront.json)

## Documentation

- [Ship in 5 minutes](https://supastack.dev/docs/web/ship-in-5-minutes.md): Run the Web demonstration on your computer with exact Windows and macOS commands, no paid provider credentials, and a clear path to real database-backed accounts.
- [Before you start](https://supastack.dev/docs/web/before-you-start.md): Install Node.js, Git and an editor, accept your repository invitation, download the kit and check your computer is ready for the first run.
- [Commands, files and configuration](https://supastack.dev/docs/web/terminal-basics.md): Learn where to paste commands, how to open the correct project folder, edit .env files, stop a server and report a setup error without sharing secrets.
- [Let an agent set it up](https://supastack.dev/docs/web/agent-setup.md): Paste one ready-made prompt into a coding agent, let it run the Web setup on your computer, and check the report it writes about each step.
- [Introduction](https://supastack.dev/docs/web.md): What supastack is, what you get, and the path to a running app.
- [Tech stack](https://supastack.dev/docs/web/tech-stack.md): The technologies behind the kit and the role each one plays.
- [Local setup](https://supastack.dev/docs/web/local-setup.md): Run the Web demonstration on your computer with exact Windows and macOS commands, no paid provider credentials, and a clear path to real database-backed accounts.
- [Project structure](https://supastack.dev/docs/web/project-structure.md): Find the application, shared packages, and the boundaries between them.
- [Configuration](https://supastack.dev/docs/web/configuration.md): Keep application configuration explicit and provider credentials on the server.
- [Build your first feature](https://supastack.dev/docs/web/first-feature.md): An end-to-end walk from schema to shipped screen.
- [Build with a coding agent](https://supastack.dev/docs/web/agents.md): Hand tasks to a coding agent: the files it reads, the pasteable prompt library, unattended setup, and the review that keeps you in control.
- [Create your external accounts](https://supastack.dev/docs/web/external-accounts.md): The master checklist: which outside services the kit can use, what each one gives you, and the order to create them in.
- [Add Google sign-in](https://supastack.dev/docs/web/google-sign-in.md): Create a free Google Cloud OAuth client and wire Continue with Google into the app.
- [Add GitHub sign-in](https://supastack.dev/docs/web/github-sign-in.md): Create a GitHub OAuth App per environment and wire Continue with GitHub into the app.
- [Add Apple sign-in](https://supastack.dev/docs/web/apple-sign-in.md): Register an App ID, a Services ID, and a Sign in with Apple key in the Apple Developer portal, then wire the client pair into the app.
- [Add Stripe payments](https://supastack.dev/docs/web/stripe-payments.md): Create a free Stripe account, a product with a recurring price, a secret key, and the signed webhook that grants entitlements after checkout.
- [Add Resend email](https://supastack.dev/docs/web/resend-email.md): Create a free Resend account, verify a sending domain, and switch EMAIL_PROVIDER so codes and receipts reach real inboxes.
- [Set up Amazon SES email](https://supastack.dev/docs/web/aws-ses.md): Set up Amazon SES email for web, mobile and desktop with AWS SDK credentials or IAM SMTP, verify your sender, and avoid unnecessary Mail Manager endpoint fees.
- [Collect the remaining provider keys](https://supastack.dev/docs/web/provider-keys.md): Short walkthroughs for the services left: AI providers, Trigger.dev, S3 storage, Sentry or PostHog, Turnstile, and your domain.
- [Deploy to Google Cloud](https://supastack.dev/docs/web/deploy-google-cloud.md): Build the kit's Docker image on Cloud Build, run it on Cloud Run with managed secrets, and put it on your domain.
- [Set up database](https://supastack.dev/docs/web/setup-database.md): Local Postgres or a managed Supabase project — then run the migrations.
- [Set up payments](https://supastack.dev/docs/web/setup-payments.md): Pick a billing adapter and wire its signed webhook to entitlements.
- [Set up email](https://supastack.dev/docs/web/setup-email.md): Transactional delivery: pick a provider, verify a sender, preview every template.
- [Set up OAuth sign-in](https://supastack.dev/docs/web/setup-oauth.md): Google, Apple, GitHub, Microsoft, and Twitter — one flag plus a client pair each.
- [Set up AI](https://supastack.dev/docs/web/setup-ai.md): Real models behind cheap / fast / smart aliases — keys stay on the server.
- [Set up background jobs](https://supastack.dev/docs/web/setup-jobs.md): Durable tasks through Trigger.dev — plus the local scheduler tick.
- [Set up file storage](https://supastack.dev/docs/web/setup-storage.md): Workspace-scoped uploads on memory or any S3-compatible bucket.
- [Set up observability](https://supastack.dev/docs/web/setup-observability.md): Error tracking, product analytics, and failure alerts — all optional.
- [Set up custom domains](https://supastack.dev/docs/web/setup-domains.md): Let workspaces serve the app on their own hostnames via Cloudflare for SaaS.
- [Authentication](https://supastack.dev/docs/web/authentication.md): Sign-in methods, sessions, and account security.
- [Organizations and invites](https://supastack.dev/docs/web/organizations.md): Ship the demo-style org loop: create, switch, invite, roles, leave, and danger-zone delete.
- [Onboarding flow](https://supastack.dev/docs/web/onboarding.md): The gated path from sign-up to an active workspace and plan.
- [Payments and subscriptions](https://supastack.dev/docs/web/billing.md): Stripe checkout, plan management, and the entitlement boundary.
- [Database and migrations](https://supastack.dev/docs/web/database.md): Prepare Postgres and evolve the Drizzle schema with committed migrations.
- [Public API, keys and webhooks](https://supastack.dev/docs/web/api.md): The versioned REST surface your customers build against.
- [File storage](https://supastack.dev/docs/web/storage.md): Workspace-scoped uploads through the object-storage contract.
- [AI features](https://supastack.dev/docs/web/ai.md): Chat, tasks, model policy, and bring-your-own-key.
- [Background jobs](https://supastack.dev/docs/web/jobs.md): Durable work through the JobRunner contract and Trigger.dev.
- [Email and mailing](https://supastack.dev/docs/web/email.md): Transactional templates, preview tooling, and provider adapters.
- [Notifications](https://supastack.dev/docs/web/notifications.md): In-app notices, per-user preferences, and admin announcements.
- [Account and security](https://supastack.dev/docs/web/account.md): Profile, sessions, passkeys, data export, and deletion.
- [Content management](https://supastack.dev/docs/web/content.md): Typed CMS entries with a free lifecycle and a public read boundary.
- [Commerce](https://supastack.dev/docs/web/commerce.md): Workspace products and orders on a forward-only lifecycle.
- [Marketing pages](https://supastack.dev/docs/web/marketing-site.md): Landing sections, legal pages, FAQ, changelog, and the site config.
- [SEO and sharing](https://supastack.dev/docs/web/seo.md): Metadata, sitemap, robots, and social images.
- [Product theme](https://supastack.dev/docs/web/theming.md): Customize kit product chrome for your SaaS — without editing the marketing brand theme.
- [UI kit and blocks](https://supastack.dev/docs/web/ui-kit.md): Shared components, design tokens, and the block catalog.
- [Locales and copy](https://supastack.dev/docs/web/i18n.md): Use the four-locale dictionary scaffold for app chrome, settings labels, mail, and notification events.
- [Writing blog articles](https://supastack.dev/docs/web/blog-content.md): Publish local, typed articles with working categories and guide links.
- [Product documentation](https://supastack.dev/docs/web/docs-site.md): The dedicated docs app that ships with the kit.
- [Feature flags and announcements](https://supastack.dev/docs/web/feature-flags.md): Roll out dark, gate per workspace, and broadcast to members.
- [Security and privacy](https://supastack.dev/docs/web/security.md): Rate limits, secrets, data export, and the audit trail.
- [Spam protection](https://supastack.dev/docs/web/captcha.md): Env-switched Turnstile checks on public forms and auth endpoints.
- [Admin console](https://supastack.dev/docs/web/admin.md): Platform inspection, announcements, and feature flags.
- [Testing strategy](https://supastack.dev/docs/web/testing.md): Understand what deterministic, browser, database, and provider checks establish.
- [Deployment checklist](https://supastack.dev/docs/web/deployment.md): Prepare the production dependencies and verify the flow you intend to ship.
- [Troubleshooting](https://supastack.dev/docs/web/troubleshooting.md): Diagnose setup problems at the boundary that actually failed.
- [How to use these docs](https://supastack.dev/docs/web/using-the-docs.md): Find your way around the documentation — tabs, groups, search and section links — and hand any guide to a coding agent with the built-in copy tools.
- [Words you will see](https://supastack.dev/docs/web/glossary.md): Plain-language definitions for the terms the setup guides, error messages and the product itself use.
- [Update your copy when the kit improves](https://supastack.dev/docs/web/updating-the-kit.md): Bring improvements from the source repository into your copy — record your starting point, fetch the new revision, merge it on a branch and verify before deploying.
- [Ship in 5 minutes](https://supastack.dev/docs/tanstack/ship-in-5-minutes.md): Run the Web demonstration on your computer with exact Windows and macOS commands, no paid provider credentials, and a clear path to real database-backed accounts.
- [Before you start](https://supastack.dev/docs/tanstack/before-you-start.md): Install Node.js, Git and an editor, accept your repository invitation, download the kit and check your computer is ready for the first run.
- [Commands, files and configuration](https://supastack.dev/docs/tanstack/terminal-basics.md): Learn where to paste commands, how to open the correct project folder, edit .env files, stop a server and report a setup error without sharing secrets.
- [Let an agent set it up](https://supastack.dev/docs/tanstack/agent-setup.md): Paste one ready-made prompt into a coding agent, let it run the Web setup on your computer, and check the report it writes about each step.
- [Introduction](https://supastack.dev/docs/tanstack.md): What supastack is, what you get, and the path to a running app.
- [Tech stack](https://supastack.dev/docs/tanstack/tech-stack.md): The technologies behind the kit and the role each one plays.
- [Local setup](https://supastack.dev/docs/tanstack/local-setup.md): Run the Web demonstration on your computer with exact Windows and macOS commands, no paid provider credentials, and a clear path to real database-backed accounts.
- [Project structure](https://supastack.dev/docs/tanstack/project-structure.md): Find the application, shared packages, and the boundaries between them.
- [Configuration](https://supastack.dev/docs/tanstack/configuration.md): Keep application configuration explicit and provider credentials on the server.
- [Build your first feature](https://supastack.dev/docs/tanstack/first-feature.md): An end-to-end walk from schema to shipped screen.
- [Build with a coding agent](https://supastack.dev/docs/tanstack/agents.md): Hand tasks to a coding agent: the files it reads, the pasteable prompt library, unattended setup, and the review that keeps you in control.
- [Create your external accounts](https://supastack.dev/docs/tanstack/external-accounts.md): The master checklist: which outside services the kit can use, what each one gives you, and the order to create them in.
- [Add Google sign-in](https://supastack.dev/docs/tanstack/google-sign-in.md): Create a free Google Cloud OAuth client and wire Continue with Google into the app.
- [Add GitHub sign-in](https://supastack.dev/docs/tanstack/github-sign-in.md): Create a GitHub OAuth App per environment and wire Continue with GitHub into the app.
- [Add Apple sign-in](https://supastack.dev/docs/tanstack/apple-sign-in.md): Register an App ID, a Services ID, and a Sign in with Apple key in the Apple Developer portal, then wire the client pair into the app.
- [Add Stripe payments](https://supastack.dev/docs/tanstack/stripe-payments.md): Create a free Stripe account, a product with a recurring price, a secret key, and the signed webhook that grants entitlements after checkout.
- [Add Resend email](https://supastack.dev/docs/tanstack/resend-email.md): Create a free Resend account, verify a sending domain, and switch EMAIL_PROVIDER so codes and receipts reach real inboxes.
- [Set up Amazon SES email](https://supastack.dev/docs/tanstack/aws-ses.md): Set up Amazon SES email for web, mobile and desktop with AWS SDK credentials or IAM SMTP, verify your sender, and avoid unnecessary Mail Manager endpoint fees.
- [Collect the remaining provider keys](https://supastack.dev/docs/tanstack/provider-keys.md): Short walkthroughs for the services left: AI providers, Trigger.dev, S3 storage, Sentry or PostHog, Turnstile, and your domain.
- [Deploy to Google Cloud](https://supastack.dev/docs/tanstack/deploy-google-cloud.md): Build the kit's Docker image on Cloud Build, run it on Cloud Run with managed secrets, and put it on your domain.
- [Set up database](https://supastack.dev/docs/tanstack/setup-database.md): Local Postgres or a managed Supabase project — then run the migrations.
- [Set up payments](https://supastack.dev/docs/tanstack/setup-payments.md): Pick a billing adapter and wire its signed webhook to entitlements.
- [Set up email](https://supastack.dev/docs/tanstack/setup-email.md): Transactional delivery: pick a provider, verify a sender, preview every template.
- [Set up OAuth sign-in](https://supastack.dev/docs/tanstack/setup-oauth.md): Google, Apple, GitHub, Microsoft, and Twitter — one flag plus a client pair each.
- [Set up AI](https://supastack.dev/docs/tanstack/setup-ai.md): Real models behind cheap / fast / smart aliases — keys stay on the server.
- [Set up background jobs](https://supastack.dev/docs/tanstack/setup-jobs.md): Durable tasks through Trigger.dev — plus the local scheduler tick.
- [Set up file storage](https://supastack.dev/docs/tanstack/setup-storage.md): Workspace-scoped uploads on memory or any S3-compatible bucket.
- [Set up observability](https://supastack.dev/docs/tanstack/setup-observability.md): Error tracking, product analytics, and failure alerts — all optional.
- [Set up custom domains](https://supastack.dev/docs/tanstack/setup-domains.md): Let workspaces serve the app on their own hostnames via Cloudflare for SaaS.
- [Authentication](https://supastack.dev/docs/tanstack/authentication.md): Sign-in methods, sessions, and account security.
- [Organizations and invites](https://supastack.dev/docs/tanstack/organizations.md): Ship the demo-style org loop: create, switch, invite, roles, leave, and danger-zone delete.
- [Onboarding flow](https://supastack.dev/docs/tanstack/onboarding.md): The gated path from sign-up to an active workspace and plan.
- [Payments and subscriptions](https://supastack.dev/docs/tanstack/billing.md): Stripe checkout, plan management, and the entitlement boundary.
- [Database and migrations](https://supastack.dev/docs/tanstack/database.md): Prepare Postgres and evolve the Drizzle schema with committed migrations.
- [Public API, keys and webhooks](https://supastack.dev/docs/tanstack/api.md): The versioned REST surface your customers build against.
- [File storage](https://supastack.dev/docs/tanstack/storage.md): Workspace-scoped uploads through the object-storage contract.
- [AI features](https://supastack.dev/docs/tanstack/ai.md): Chat, tasks, model policy, and bring-your-own-key.
- [Background jobs](https://supastack.dev/docs/tanstack/jobs.md): Durable work through the JobRunner contract and Trigger.dev.
- [Email and mailing](https://supastack.dev/docs/tanstack/email.md): Transactional templates, preview tooling, and provider adapters.
- [Notifications](https://supastack.dev/docs/tanstack/notifications.md): In-app notices, per-user preferences, and admin announcements.
- [Account and security](https://supastack.dev/docs/tanstack/account.md): Profile, sessions, passkeys, data export, and deletion.
- [Content management](https://supastack.dev/docs/tanstack/content.md): Typed CMS entries with a free lifecycle and a public read boundary.
- [Commerce](https://supastack.dev/docs/tanstack/commerce.md): Workspace products and orders on a forward-only lifecycle.
- [Marketing pages](https://supastack.dev/docs/tanstack/marketing-site.md): Landing sections, legal pages, FAQ, changelog, and the site config.
- [SEO and sharing](https://supastack.dev/docs/tanstack/seo.md): Metadata, sitemap, robots, and social images.
- [Product theme](https://supastack.dev/docs/tanstack/theming.md): Customize kit product chrome for your SaaS — without editing the marketing brand theme.
- [UI kit and blocks](https://supastack.dev/docs/tanstack/ui-kit.md): Shared components, design tokens, and the block catalog.
- [Locales and copy](https://supastack.dev/docs/tanstack/i18n.md): Use the four-locale dictionary scaffold for app chrome, settings labels, mail, and notification events.
- [Writing blog articles](https://supastack.dev/docs/tanstack/blog-content.md): Publish local, typed articles with working categories and guide links.
- [Product documentation](https://supastack.dev/docs/tanstack/docs-site.md): The dedicated docs app that ships with the kit.
- [Feature flags and announcements](https://supastack.dev/docs/tanstack/feature-flags.md): Roll out dark, gate per workspace, and broadcast to members.
- [Security and privacy](https://supastack.dev/docs/tanstack/security.md): Rate limits, secrets, data export, and the audit trail.
- [Spam protection](https://supastack.dev/docs/tanstack/captcha.md): Env-switched Turnstile checks on public forms and auth endpoints.
- [Admin console](https://supastack.dev/docs/tanstack/admin.md): Platform inspection, announcements, and feature flags.
- [Testing strategy](https://supastack.dev/docs/tanstack/testing.md): Understand what deterministic, browser, database, and provider checks establish.
- [Deployment checklist](https://supastack.dev/docs/tanstack/deployment.md): Prepare the production dependencies and verify the flow you intend to ship.
- [Troubleshooting](https://supastack.dev/docs/tanstack/troubleshooting.md): Diagnose setup problems at the boundary that actually failed.
- [How to use these docs](https://supastack.dev/docs/tanstack/using-the-docs.md): Find your way around the documentation — tabs, groups, search and section links — and hand any guide to a coding agent with the built-in copy tools.
- [Words you will see](https://supastack.dev/docs/tanstack/glossary.md): Plain-language definitions for the terms the setup guides, error messages and the product itself use.
- [Update your copy when the kit improves](https://supastack.dev/docs/tanstack/updating-the-kit.md): Bring improvements from the source repository into your copy — record your starting point, fetch the new revision, merge it on a branch and verify before deploying.
- [Ship mobile in 5 minutes](https://supastack.dev/docs/mobile/ship-in-5-minutes.md): Open the Expo app on a phone or simulator, configure an API address the device can reach, and distinguish a UI preview from real sign-in and native purchases.
- [Before you start](https://supastack.dev/docs/mobile/before-you-start.md): Install Node.js, Git and an editor, accept your repository invitation, download the kit and check your computer is ready for the first mobile run.
- [Commands, files and configuration](https://supastack.dev/docs/mobile/terminal-basics.md): Learn where to paste commands, how to open the correct project folder, edit .env files, stop the Expo server and report a setup error without sharing secrets.
- [Let an agent set it up](https://supastack.dev/docs/mobile/agent-setup.md): Paste one ready-made prompt into a coding agent, let it run the Mobile setup on your computer, and check the report it writes about each step.
- [Mobile overview](https://supastack.dev/docs/mobile.md): An Expo surface connected to the same server-owned foundation.
- [Mobile tech stack](https://supastack.dev/docs/mobile/tech-stack.md): The technologies inside the Expo app and the role each one plays.
- [Run the mobile app](https://supastack.dev/docs/mobile/local-setup.md): Connect Expo to a reachable development API.
- [Project structure](https://supastack.dev/docs/mobile/project-structure.md): Find the routes, the feature modules, and the boundary to the backend.
- [Build your first feature](https://supastack.dev/docs/mobile/first-feature.md): An end-to-end walk from a new screen to server-checked data.
- [Build with a coding agent](https://supastack.dev/docs/mobile/agents.md): Hand tasks to a coding agent: the files it reads, the shipped skills, and the review that keeps you in control.
- [Native authentication](https://supastack.dev/docs/mobile/authentication.md): Handle the browser return path and stored sessions on mobile.
- [Passkey sign-in](https://supastack.dev/docs/mobile/passkeys.md): Passwordless sign-in through a browser handoff that returns the session to the app.
- [Mobile API](https://supastack.dev/docs/mobile/api.md): How the app talks to the server — sessions, reachability, and payloads.
- [Deep links and app configuration](https://supastack.dev/docs/mobile/deep-links.md): The URL scheme, the screen route map, and the bundled configuration contract.
- [Native UI and theming](https://supastack.dev/docs/mobile/ui.md): Screen primitives and shared view-models that mirror the web's design decisions.
- [Mobile entitlements](https://supastack.dev/docs/mobile/entitlements.md): Configure RevenueCat purchases and keep access decisions on the server.
- [Workspaces and members](https://supastack.dev/docs/mobile/workspaces.md): Switch workspaces, manage the organization, and handle invitations.
- [AI chat and the assistant](https://supastack.dev/docs/mobile/chat.md): Streaming chat threads and one-shot agent runs over the shared API.
- [Notifications and push](https://supastack.dev/docs/mobile/notifications.md): The in-app inbox, channel preferences, and the Expo push pipeline.
- [Usage and credits](https://supastack.dev/docs/mobile/usage.md): Metered limits, prepaid credit, and the billing surface.
- [Content management](https://supastack.dev/docs/mobile/content.md): Create, edit, and publish workspace content from the app.
- [Commerce on mobile](https://supastack.dev/docs/mobile/commerce.md): Manage store products and orders for the workspace.
- [Developer tools](https://supastack.dev/docs/mobile/developers.md): API keys, webhooks, schedules, domains, and the audit log from the app.
- [Feature board](https://supastack.dev/docs/mobile/feature-board.md): Collect and vote on feature requests — even signed out.
- [Offline access](https://supastack.dev/docs/mobile/offline.md): A workspace-scoped read cache that keeps screens useful without a network.
- [App lock and device security](https://supastack.dev/docs/mobile/security.md): Biometric unlock, session management, and connected accounts.
- [Create mobile accounts](https://supastack.dev/docs/mobile/external-accounts.md): Expo, Apple, Google Play, and RevenueCat accounts — what each one is for and when to create it.
- [Set up RevenueCat purchases](https://supastack.dev/docs/mobile/revenuecat.md): Create a RevenueCat project, link your App Store and Play products, and wire the SDK keys plus server secrets that verify purchases.
- [EAS setup](https://supastack.dev/docs/mobile/eas-setup.md): Connect the project to Expo Application Services and produce your first build.
- [Build and device verification](https://supastack.dev/docs/mobile/builds.md): Separate a successful Expo export from release readiness.
- [Store publishing](https://supastack.dev/docs/mobile/publishing.md): Separate a working build from a release users can install.
- [Localize the mobile app](https://supastack.dev/docs/mobile/i18n.md): Four shipped locales, a type-checked catalog, and English fallback.
- [Configure the mobile app](https://supastack.dev/docs/mobile/configuration.md): Set the backend address and deep-link scheme the native build uses, and keep both sides of the handoff in sync.
- [Test the mobile app](https://supastack.dev/docs/mobile/testing.md): Run the deterministic suites, then verify native sign-in, links, security, and purchases on a real development build.
- [Troubleshooting the mobile app](https://supastack.dev/docs/mobile/troubleshooting.md): Fix the common preview, configuration, and native-build failures before they reach a tester.
- [Run desktop in 5 minutes](https://supastack.dev/docs/desktop/ship-in-5-minutes.md): Prepare Rust and your operating system's build tools, start a reachable Web backend, launch the Tauri window and verify tray, shortcut and local task behavior.
- [Before you start](https://supastack.dev/docs/desktop/before-you-start.md): Install Node.js, Git, an editor, Rust and the native build tools, accept your repository invitation, download the kit and check your computer is ready for the first desktop run.
- [Commands, files and configuration](https://supastack.dev/docs/desktop/terminal-basics.md): Learn where to paste commands, how to open the correct project folder, edit .env files, stop the desktop dev command and report a setup error without sharing secrets.
- [Let an agent set it up](https://supastack.dev/docs/desktop/agent-setup.md): Paste one ready-made prompt into a coding agent, let it run the Desktop setup on your computer, and check the report it writes about each step.
- [Desktop overview](https://supastack.dev/docs/desktop.md): A Tauri webview shell around the same web app — presence, not a second product.
- [Desktop tech stack](https://supastack.dev/docs/desktop/tech-stack.md): The technologies inside the Tauri shell and the role each one plays.
- [Run and configure the shell](https://supastack.dev/docs/desktop/run.md): Launch the Tauri dev shell and point it at your web app.
- [Project structure](https://supastack.dev/docs/desktop/project-structure.md): Find the Rust shell, the boot page, the release scripts and the boundary to the web app.
- [Build your first feature](https://supastack.dev/docs/desktop/first-feature.md): An end-to-end walk from one native shell change to a verified window.
- [Build with a coding agent](https://supastack.dev/docs/desktop/agents.md): Hand tasks to a coding agent: the files it reads, the shipped skills, and the review that keeps you in control.
- [Create desktop release accounts](https://supastack.dev/docs/desktop/external-accounts.md): Apple signing and notarization credentials, Windows code-signing options, and the hosted backend a released shell needs.
- [Menus, zoom, and startup](https://supastack.dev/docs/desktop/menus.md): The native menu bar, persisted zoom, launch at login, and tray behavior.
- [Bundle and release](https://supastack.dev/docs/desktop/release.md): Produce installers and keep release evidence separate from a successful build.
- [Code signing](https://supastack.dev/docs/desktop/signing.md): Sign installers so macOS and Windows stop warning your users.
- [Auto-updates and release channels](https://supastack.dev/docs/desktop/updates.md): Signed update feeds, the stable/beta channel, and the shipped release workflow.
- [Inside the desktop shell](https://supastack.dev/docs/desktop/internals.md): Boot page, navigation gate, plugin stack, and configuration reference.
- [Configure the desktop shell](https://supastack.dev/docs/desktop/configuration.md): Point the window at your app, set the summon shortcut and window preferences, and keep native settings out of the web bundle.
- [Sign-in and sessions](https://supastack.dev/docs/desktop/session.md): Use the Web app's accounts and session rules inside the native window, including deep links that return to the app.
- [Test the desktop shell](https://supastack.dev/docs/desktop/testing.md): Run the Rust and boot-page suites, validate the release config, then verify the installed artifact on each target OS.
- [Troubleshooting the desktop app](https://supastack.dev/docs/desktop/troubleshooting.md): Resolve missing toolchains, blank windows, and release-signing failures before they block a build.
- [Module overview](https://supastack.dev/docs/modules.md): Small contracts that make the infrastructure easier to understand and reuse.
- [Environment and config](https://supastack.dev/docs/modules/config.md): One validated schema for the whole workspace.
- [i18n module](https://supastack.dev/docs/modules/i18n.md): The locale contract every surface shares.
- [Workspaces](https://supastack.dev/docs/modules/workspaces.md): Scope every user-owned record by workspaceId.
- [Auth module](https://supastack.dev/docs/modules/auth.md): Identity and sessions through Better Auth.
- [Billing and access](https://supastack.dev/docs/modules/billing.md): Separate payment events from authorization decisions.
- [Stripe configuration and webhooks](https://supastack.dev/docs/modules/billing-configuration.md): Connect web subscriptions to server-owned entitlements.
- [Database module](https://supastack.dev/docs/modules/database.md): The Drizzle schema and persistence helpers every record flows through.
- [Storage module](https://supastack.dev/docs/modules/storage.md): One ObjectStorage contract, memory and S3-compatible adapters.
- [API module](https://supastack.dev/docs/modules/api.md): The versioned public contract, key plumbing, and OpenAPI surface.
- [Rate limiting](https://supastack.dev/docs/modules/rate-limiting.md): One limiter for every abuse-sensitive route.
- [AI and background jobs](https://supastack.dev/docs/modules/ai.md): From an authorized request to a durable result.
- [AI providers and model policy](https://supastack.dev/docs/modules/ai-configuration.md): Configure server-owned providers and the aliases exposed to users.
- [Task API and recovery](https://supastack.dev/docs/modules/task-recovery.md): Recover an uncertain submission without creating a new task.
- [Trigger.dev jobs](https://supastack.dev/docs/modules/jobs.md): Keep durable workflow behavior explicit.
- [Scheduled tasks](https://supastack.dev/docs/modules/schedules.md): Recurring workspace work through the schedule actions.
- [Transactional email](https://supastack.dev/docs/modules/email.md): Delivery for authentication and product workflows.
- [Email provider configuration](https://supastack.dev/docs/modules/email-configuration.md): Configure transactional delivery and verify its independent outcome.
- [Audit, analytics and errors](https://supastack.dev/docs/modules/observability.md): Understand activity with workspace context and sanitized event data.
- [Skills](https://supastack.dev/docs/skills/overview.md): Ready-made instructions that teach your coding agent how to do common supastack jobs the way the kit expects.

## Blog

- [supastack vs TurboStarter](https://supastack.dev/blog/supastack-vs-turbostarter.md): Both ship web and mobile from one monorepo. supastack adds desktop, API keys, webhooks and 144 test files; TurboStarter adds a browser extension. A side-by-side look.
- [Best SaaS Boilerplates in 2026](https://supastack.dev/blog/best-saas-boilerplate-2026.md): A comprehensive comparison of the best SaaS boilerplates and Next.js starter kits in 2026. Compare supastack, supastarter, ShipFast, Makerkit, TurboStarter, MkSaaS, and more on multi-tenancy, authentication, payments, AI, and pricing.
- [TanStack Start SaaS Boilerplate: What to Look For in 2026](https://supastack.dev/blog/tanstack-start-saas-boilerplate.md): What a TanStack Start SaaS boilerplate should include in 2026, and how supastack, supastarter and TanStarter compare on auth, teams, billing, hosting and price.
- [Next.js SaaS Boilerplate: What to Look For in 2026](https://supastack.dev/blog/nextjs-saas-boilerplate.md): What a Next.js SaaS boilerplate should include in 2026, and how supastack, supastarter, Makerkit and ShipFast compare on sign-in, teams, billing and price.
- [Expo SaaS Boilerplate: What to Look For in 2026](https://supastack.dev/blog/expo-saas-boilerplate.md): What an Expo and React Native SaaS boilerplate should include in 2026, and how supastack, TurboStarter and Ignite compare on backend, sign-in, purchases and price.
- [Tauri Desktop App Boilerplate: What to Look For in 2026](https://supastack.dev/blog/tauri-desktop-app-boilerplate.md): What a Tauri desktop app boilerplate should include in 2026, and how supastack, create-tauri-app and Electron React Boilerplate compare on accounts, updates and price.
- [supastack vs MkSaaS](https://supastack.dev/blog/supastack-vs-mksaas.md): MkSaaS is a polished Next.js starter with credits and Chinese support. supastack adds mobile, desktop, team workspaces, API keys and webhooks. Here is how they compare.
- [supastack vs ShipAny](https://supastack.dev/blog/supastack-vs-shipany.md): ShipAny wires in many AI model providers with credits, RBAC and affiliate tools. supastack brings teams, mobile, desktop, BYOK budgets, API keys and 144 test files. A side-by-side comparison.
- [supastack vs Indie Kit Pro](https://supastack.dev/blog/supastack-vs-indie-kit.md): Indie Kit Pro is a feature-rich Next.js starter with credits, lifetime-deal redemption and six payment providers. supastack adds teams, mobile, desktop, API keys and a 144-file test suite.
- [supastack vs Indie Kit B2B](https://supastack.dev/blog/supastack-vs-indie-kit-b2b.md): Both give you organizations, invites and per-team billing. supastack adds mobile, desktop, API keys, webhooks, audit log and 144 test files on Better Auth. A side-by-side comparison.
- [supastack vs TanStarter](https://supastack.dev/blog/supastack-vs-tanstarter.md): TanStarter runs a lean TanStack Start app on Cloudflare Workers. supastack is a tested Next.js + Expo + Tauri monorepo with teams and integrations. How to choose.
- [supastack vs AnotherWrapper](https://supastack.dev/blog/supastack-vs-anotherwrapper.md): AnotherWrapper ships eight ready AI app screens and seven model providers. supastack ships teams, mobile, API keys, BYOK budgets and a 144-file test suite. Which do you need?
- [Why TanStack Start is an exciting foundation for SaaS](https://supastack.dev/blog/why-tanstack-start-for-saas.md): Explore type-safe routing, server functions, and deployment choices with TanStack Start.
- [Why Expo is a practical way to ship a SaaS mobile app](https://supastack.dev/blog/building-saas-mobile-apps-with-expo.md): Build, test, and release iOS and Android SaaS apps with Expo and React Native.
- [Why Tauri is a strong foundation for desktop apps](https://supastack.dev/blog/building-desktop-apps-with-tauri.md): Understand Tauri's webview and Rust architecture, native integration, and release considerations.
- [Tauri vs Electron: choosing a desktop framework](https://supastack.dev/blog/tauri-vs-electron-for-desktop-apps.md): Compare Tauri and Electron on runtime architecture, native integration, distribution, and team trade-offs.
- [Why Next.js works well for a SaaS application](https://supastack.dev/blog/building-saas-with-nextjs.md): Explore the Next.js App Router, server components, and the practical decisions behind a production SaaS app.
- [Your stack list won’t ship your product](https://supastack.dev/blog/stack-lists-dont-ship-products.md): A hundred developers bookmarked my stack list — what the list leaves out is the plumbing that let a Windows desktop tool ship in 48 hours.
- [Idempotent Stripe and Lemon Squeezy webhooks in Next.js](https://supastack.dev/blog/idempotent-billing-webhooks.md): How to verify raw webhook signatures, deduplicate replayed deliveries at the database boundary, and keep overlapping subscriptions from revoking paid access.
- [Multi-tenant SaaS isolation with Postgres RLS and workspace auth](https://supastack.dev/blog/postgres-rls-and-workspace-auth.md): Combine live server-side workspace membership guards with indexed Postgres Row-Level Security policies so tenant data stays isolated across web, mobile, and background jobs.
- [Building a SaaS with a coding agent: a practical workflow](https://supastack.dev/blog/building-saas-with-a-coding-agent.md): From a useful brief to a reviewed change. Give your coding agent the context, boundaries, and feedback it needs to build something you can maintain.
- [How to choose a SaaS stack you can keep shipping with](https://supastack.dev/blog/choosing-a-saas-stack.md): Frameworks are only part of the decision. Evaluate the whole path from identity and data to background work, deployment, and everyday maintenance.
- [Starter kit or from scratch? Decide what you want to own](https://supastack.dev/blog/starter-kit-or-from-scratch.md): A practical way to evaluate a boilerplate: inspect its boundaries, run its recovery paths, and understand the maintenance you are taking on.
- [A SaaS launch checklist that goes beyond the homepage](https://supastack.dev/blog/saas-launch-checklist.md): Verify sign-in, customer data, paid access, failed tasks, and support paths before inviting people into your product.
- [SaaS authentication is more than a login form](https://supastack.dev/blog/authentication-beyond-the-login-form.md): Follow identity through sessions, workspace ownership, protected actions, and sign-out — the parts a polished sign-in screen cannot prove.
- [Better Auth vs NextAuth (Auth.js) vs Clerk in 2026](https://supastack.dev/blog/better-auth-vs-nextauth-vs-clerk.md): A practical comparison of Better Auth, NextAuth (Auth.js v5), and Clerk for TypeScript and Next.js SaaS applications in 2026 — covering multi-tenant organizations, 2FA, passkeys, database ownership, and pricing at scale.
- [Next.js vs TanStack Start for SaaS in 2026](https://supastack.dev/blog/nextjs-vs-tanstack-start-for-saas.md): Next.js 16 App Router vs TanStack Start compared for SaaS development in 2026. Evaluate type-safe routing, React Server Components vs server functions, Vite build speed, Cloudflare deployment, and why supastack ships both.
- [Drizzle ORM vs Prisma for SaaS in 2026](https://supastack.dev/blog/prisma-vs-drizzle-for-saas.md): Drizzle ORM vs Prisma compared for production TypeScript and Next.js SaaS applications in 2026. Benchmarks on SQL transparency, migrations, cold starts, PostgreSQL Row-Level Security (RLS), and coding agent accuracy.
- [SaaS Payment Providers Compared (2026): Stripe vs Lemon Squeezy vs Polar vs Creem vs Dodo vs Paddle](https://supastack.dev/blog/saas-payment-providers-compared.md): Compare the best SaaS payment gateways and Merchants of Record (MoR) in 2026: Stripe, Lemon Squeezy, Polar, Creem, Dodo Payments, Paddle, Whop, PayPal, and RevenueCat — fees, global VAT/tax handling, and webhook architecture.
- [Moving an existing SaaS into supastack](https://supastack.dev/blog/migrate-an-existing-saas-into-supastack.md): A staged playbook for migrating a working SaaS — auth, tenants, billing, jobs — onto the supastack foundation without a rewrite or a downtime weekend.
- [A foundation you can build on.](https://supastack.dev/blog/a-foundation-for-your-next-product.md): The thinking behind supastack: shared infrastructure, clear boundaries, and room for your product to be its own thing.
- [Your workspace is a security boundary.](https://supastack.dev/blog/workspace-boundaries.md): Why ownership checks belong in every read and write, and why a task URL should never grant access.
- [An AI request is only the beginning.](https://supastack.dev/blog/from-ai-request-to-result.md): Follow a task through authorization, durable execution, usage tracking, and a result the user can return to.

## Site

- [Homepage](https://supastack.dev/)
- [Pricing](https://supastack.dev/#pricing)
- [Changelog](https://supastack.dev/changelog)
- [Blog](https://supastack.dev/blog)
- [Stats](https://supastack.dev/stats): Citable engineering and reach numbers (live from the shipped kit repository)
- [Showcase](https://supastack.dev/showcase)
- [Contact](https://supastack.dev/contact)
- [SaaS Pricing Page Generator](https://supastack.dev/tools/saas-pricing-generator)
- [Supabase RLS Policy Generator](https://supastack.dev/tools/supabase-rls-generator)
- [i18n Key Checker](https://supastack.dev/tools/i18n-key-checker)
- [Theme Playground](https://supastack.dev/tools/theme-playground)
- [Open-Source Developer Tools (GitHub)](https://github.com/Supastack-dev/supastack-tools-leaked)
- [RSS Feed](https://supastack.dev/rss.xml)