Supastack

supastack is a one-time-purchase SaaS boilerplate that ships a Next.js web app, an Expo app for iOS and Android, and a Tauri desktop build inside a shared TypeScript monorepo, with authentication, billing, AI workflows, email, background jobs and workspace scoping already wired up.

What is supastack?

supastack is a modular foundation for building AI-powered SaaS products, sold as a bought-once source codebase by indie developer Noah Zixin Zhang. Buyers receive a GitHub invite to the repository, a licence key by email, setup documentation and lifetime updates. The kit contains a Next.js 16 App Router web app and backend, an Expo app for iOS and Android, a Tauri build for macOS and Windows, and shared packages for UI, auth and API. Product-specific features stay in your own codebase while you configure and integrate these foundation modules.

What makes supastack stand out?

• Shared TypeScript monorepo — Next.js and Expo import the same UI, auth and API packages through Turborepo and pnpm, so web, mobile and desktop surfaces do not fork; the desktop app never reimplements the web app's UI or auth.
• Auth via Better Auth — email/password, one-time codes, magic links and Google/Apple/GitHub social sign-in land in sessions scoped to a personal workspace, with session-guarded API routes.
• Billing with entitlements — Stripe checkout, customer portal and signed webhooks keep subscriptions and product access in sync, with nine payment providers supported (Stripe, Lemon Squeezy, Paddle, Polar, PayPal) and RevenueCat handling native mobile purchases and restores.
• Multi-provider AI with bring-your-own-key — route to OpenAI, Anthropic, Gemini, OpenRouter or a compatible API; provider keys are AES-GCM encrypted and server-only, token usage is tracked, and workspace budgets cap monthly spend.
• Jobs kept separate from email — Trigger.dev is the explicit job runtime behind a narrow enqueue/status/cancel contract, while Resend plus React Email templates handle transactional product mail through a shared interface shared by Postmark, SendGrid and Mailgun; cold outreach is deliberately out of scope.
• Observability and audit — Sentry captures exceptions with workspace tags and redacted secrets, PostHog carries analytics events, and provider, subscription and workspace events land in an audit log scoped by workspaceId.
• Data layer — PostgreSQL with Drizzle ORM schema, migrations and typed queries, with every user-owned record scoped by workspaceId.
• Theming and marketing pages — 12 theme packs (Paper, Obsidian, Graphite, Midnight, Pine, Wine, Umber, Slate, Glacier, Ink, Blossom, Harbor), 3 layouts (sidebar, top nav, focused), UI blocks, dark/light mode, and per-page meta tags, sitemap and Open Graph tags.
• Agent-ready scaffolding — an AGENTS.md file and prompts target Claude Code, Codex, Cursor, GitHub Copilot, Cline, Zed, Replit, v0 and similar tools, so you can prompt into the repo instead of reading all of it.

Who should use supastack?

• Solo founders and indie hackers: start from auth, billing, database and deploy config instead of rebuilding that first week — the site estimates the replaced setup work at over 90 hours across eleven tasks.
• Marketers who build with AI agents: use the bundled AGENTS.md and prompts so Claude Code or Cursor can extend the repo without learning every corner of it first.
• Agencies and client developers: the licence permits shipping unlimited products for yourself or clients on one purchase, though reselling the code or redistributing the repository as a starter kit or template is not allowed.
• Teams shipping beyond the browser: reuse the shared auth, database and API packages across the Next.js web app, the Expo iOS/Android app and the Tauri desktop build.

What can you do with supastack?

• Launch a subscription SaaS: wire Stripe checkout, entitlements and the customer portal, then gate features on plan so paid access stays in sync with signed webhooks.
• Ship a metered AI product: route requests through OpenAI, Anthropic, Gemini or OpenRouter with encrypted keys and workspace budgets, so usage and spend stay visible per workspace.
• Deliver one app to web, mobile and desktop: keep one codebase, use EAS build profiles for store submission, and script native desktop builds with a tray icon, global shortcut and single-instance behaviour.
• Start a content-led product site: use the theme packs and block library for responsive marketing pages with generated metadata, sitemap and Open Graph tags on every page.

How does supastack work?

Buying the kit delivers a licence key by email and repository access through a GitHub invite; Stripe-hosted checkout accepts cards and can offer Alipay or WeChat Pay once those wallets are enabled. You then clone the monorepo, set roughly one environment variable per provider for OAuth, payments and email, and deploy. A pnpm verify:local script runs local checks, and buyers can book a free 15-minute call with the author or join the Discord.

Pricing

One-time purchase with lifetime updates and no kit subscription. One Platform costs $249 at the temporary launch price (regular $349) and covers a pick of Next.js web, Expo iOS and Android, or Tauri macOS and Windows. The All Platforms Bundle costs $499 (regular $599) and adds every platform and the full monorepo with shared TypeScript packages, EAS mobile build profiles and RevenueCat native purchases. Extra developer seats are $75 each. Once repository access is granted, purchases cannot be refunded.

FAQ

Is supastack free?

No. supastack is a paid, one-time purchase: $249 for One Platform at the launch price, or $499 for the All Platforms Bundle, with $75 per additional developer seat. There is no kit subscription, and lifetime updates are included.

Which platforms does supastack target?

It ships starting points for the Next.js web app and backend, an Expo app for iOS and Android, and a Tauri desktop build for macOS and Windows, all sharing TypeScript packages for UI, auth and API through Turborepo and pnpm.

Can I get a refund?

No. Access to the repository is permanent, so supastack cannot be refunded once you have it. You receive the complete source code plus lifetime updates and may build unlimited products for yourself or clients, but you cannot resell the code or redistribute it as a starter kit or template.

Where do my AI provider keys live?

Bring-your-own-key credentials are encrypted with AES-GCM and stay server-side, never sent to the browser, and are redacted from logs. Usage and budget figures remain visible at the workspace level so token spend on OpenAI, Anthropic, Gemini or OpenRouter can be tracked.

Can I use supastack with Cursor or Claude Code?

Yes. The repository includes an AGENTS.md file and prompts written for agent tools including Claude Code, Codex, Cursor, GitHub Copilot, Cline, Zed, Replit, v0 and Warp, so an AI assistant can navigate and extend the modules.