Skip to content

Frequently asked questions

12 questions

What is supastack?

supastack is a modular foundation for building AI-powered SaaS products. It brings together common infrastructure so you can focus on product-specific features.

Does it support web and mobile?

Yes. supastack includes Next.js and Expo apps as starting points for web and mobile experiences.

What authentication is included?

Better Auth covers email/password, OTP, and social sign-in. Personal workspaces are provisioned with the account so product records stay scoped from day one.

How does it support AI?

supastack includes configurable multi-provider AI, usage tracking, budgets, and encrypted bring-your-own-key support.

How are subscriptions handled?

For products built on the kit, Stripe billing, subscriptions, and entitlements form the paid-access foundation. Provider secrets stay server-only.

Where does my product-specific code live?

Product-specific features remain in a separate codebase while the product configures and integrates supastack’s foundation modules.

How does supastack pricing work?

The kit is a one-time purchase with lifetime updates: One Framework at $249 or All Frameworks (Next.js, iOS, Android) at $499, plus $75 per extra developer seat. No kit subscription. Checkout on this site is not connected yet.

How do workspaces scope my data?

User-owned records are scoped by workspaceId. Identity, entitlements, AI usage, billing events, and audit entries stay inside the personal workspace boundary.

How do background jobs work?

Trigger.dev is the explicit job runtime. The JobRunner contract only promises enqueue, status, and cancel—workflow semantics stay Trigger.dev-specific and explicit.

How is email different from outreach?

Transactional email covers product workflows such as completion notices. Cold outreach and campaigns are product concerns outside this kit’s email module.

Can mobile expose Stripe Checkout?

Not yet. Mobile must not present Stripe Checkout until RevenueCat exists. Web can use Stripe for subscriptions and entitlements when billing is configured.

Where do AI provider keys live?

Bring-your-own-key credentials are encrypted and stay server-only. Keys are redacted from logs; usage and budgets remain visible at the workspace level.

Open full FAQ page
← All articles
2 min read

Building a SaaS with a coding agent: a practical workflow

From a useful brief to a reviewed change. Give your coding agent the context, boundaries, and feedback it needs to build something you can maintain.

supastack team

Start with an observable outcome

A coding agent can produce a convincing screen before you have decided what the screen should do. Start with a small user outcome: a signed-in user edits their profile, saves it, and sees the saved name after reloading. That gives both the implementation and the review a concrete target.

Include the current behavior, the desired behavior, and the important failure cases in the brief. Name the existing module that owns the work. A request to add profile editing should point to the authentication layer, rather than leave the agent to invent a second user store. Keep credentials out of prompts and screenshots.

Make the repository explain itself

Document how to run the application, which checks are deterministic, and where ownership is enforced. In supastack, AGENTS.md records the workspace boundary and .ai/ records file-level decisions. These notes are useful when they tell the next contributor why an implementation exists, not just what files changed.

Ask the agent to read the relevant code before editing. A narrow change usually needs the UI, its server boundary, and the tests around that boundary. Loading the entire repository is less useful than understanding the few places that decide whether the new behavior is correct.

Review one complete change at a time

Write an acceptance check before changing behavior. For profile editing, cover a valid update and an unauthorized attempt. Build the smallest implementation that satisfies those cases, then inspect the actual interaction with realistic text and a narrow viewport.

Review the diff as well as the result. Look for duplicated business logic, broad exception handling, and new dependencies that solve a problem the existing stack already handles. Run the project's checks and record what they establish. A browser fixture can verify a form interaction; it cannot establish that the production database or an external provider is configured correctly.

pnpm test
pnpm check
pnpm build