Skip to builder

Build your repo

Your stack

3
  • Came with Supabase Auth. Supabase Auth needs Supabase.
  • Came with Supabase. Supabase needs an ORM.

  • Supabase Auth works best with file storage.

  • Supabase came with Supabase Auth. Supabase Auth needs Supabase.
  • Drizzle ORM came with Supabase. Supabase needs an ORM.

Database

ORM

Came with Supabase.
  • Supabase works best with Supabase Storage.

Vercel AI SDK with a streaming chat route, structured output and tool calling.

4 rules · 2 skills · 6 docs

Users, bans, impersonation and an audit log at /admin. Needs sign in.

2 rules · 2 skills · 8 docs

Analytics

Error tracking

Support chat

Light. shadcn done carefully. Neutral greys, near-black actions, one blue for links, Geist throughout.
Dark. Bone serif on carbon, a ridge line across the hero and one blue point at its summit.
Light. Bone paper, ink pills lettered in mono capitals, and a soft violet to amber aura where it counts.
Light. Cream paper, black ink, wide geometric headlines. Every section is a ruled block and every action a pill.
Dark. Black drafting table, dashed frames, mono labels and one periwinkle pen. Every section reads like a drawing.
Light. Sage drafting paper, wide squared headlines, tall orange capsules and dark product screens.
Light. Cream canvas, saturated clay tiles, chunky rounded headlines and soft pill buttons. Warm, not grey.
Light. White canvas, black type and one electric blue. Mono labels, hairline bar maps and no shadows.
Light. Hairlines, not shadows. Black buttons, one electric blue, and small tags with a pop of pastel.
Dark. Pure grey, ruled with hairlines and split down one rail. Square panels, tracked caps labels, one bright cyan.
Dark. Warm near-black, one loud orange slab, dashed rules pinned with square ticks, and pills for every control.
Dark. A violet night lit from below: an ultraviolet horizon, glass pill buttons and silver headlines.
Light. Parchment, forest ink and emerald buttons lettered in mint, with a pastel card for every feature.
Light. White panels float on warm ivory: a capsule header, black pill buttons and coral kept to small marks.
Light. A pastel dawn over lavender paper: violet ink serifs, pill buttons and a few sketched stars.
Light. Every edge is a hairline, every corner is square, every headline is a serif. Colour only means status.
Light. Warm paper, light black type and one highlighter yellow that marks what matters.
Light. Big serif headlines on sunlit cream, black pill buttons, and sage leaves growing around your product.
Dark. Pure black, white grotesque type, 1px hairlines, and one magenta cloud behind the product.
Light. A quality broadsheet on cream paper. Serif everywhere, black rules, square corners, one yellow button.
Light. Serif headlines on white paper, a grainy peach haze, black pill buttons and product sheets that float.
Light. Heavy black headlines on peach paper, black buttons, one ember accent and hard block shadows.
Light. Cream paper, plum ink, one pale lavender button. Ruled in warm hairlines, labelled in mono caps.
Dark. Cream type on a midnight console, an ember and mint pill pair, and a six hue waveform under the hero.
Light. A light blue serif, mono keycaps and a drafting frame on warm graph paper. Reads like a technical manual.
Dark. Warm black bands, bold white Inter and one lime button, with a caret blinking after the headline.
Light. Warm paper, black ink and a light slab serif. Hairlines instead of shadows, rust only as text.
Light. Buttercream pages cut by five sunset stripes, with monumental wide caps and pixel labels on pill buttons.
Dark. Serif headlines, mono labels and hairline rules on near-black, with one acid lime for the thing that acts.
Dark. Pitch black and flat, with violet gradient panels, white pill buttons and a hot magenta spark.
Light. Whisper headlines on warm parchment, ink and linen pill buttons, ember links and a painted stage.

Mode

The plan loop without the gate. Best when you work alone.

Agent tools

Next.js 16 on Vercel. The only stack for now.

my-app/, 304 files, Next.js 16 on Vercel

What your agent gets

77 items. 33 written for your 3 batteries.

Guard hooks6

  • block-destructiveBefore BashBase

    Blocks irreversible shell commands: recursive force deletes, DROP and TRUNCATE sent to a database, force pushes, git reset --hard, git clean, dd, and truncating redirects onto tracked files.

  • enforce-typecheckBefore BashBase

    Rewrites a bare tsc, however it is launched, into the project's typecheck script before it runs.

  • env-leak-detectorBefore Bash, Read, GrepBase

    Blocks tool calls that would print, transmit or commit a secret: literal credential shapes, reads of local .env files by any command or by the Read and Grep tools, echo of secret variables, environment dumps, and live values from your .env files.

  • auto-lintAfter Edit, Write, MultiEditBase

    Runs Biome on the file that was just edited, applies safe fixes, and reports anything it could not fix.

  • enforce-doc-metaAfter Edit, Write, MultiEditBase

    Checks that files written under docs/solutions/ and docs/plans/ carry the frontmatter those directories depend on, and reports exactly what is missing.

2 more hooks run in team mode.

Rules17

  • Every table needs row-level security and at least one policySupabase Auth

    When editing supabase/** +1 more

  • getUser() is the trust boundary, getSession() is notSupabase Auth

    When editing src/lib/auth/** +2 more

  • The service-role key is a root passwordSupabase Auth

    When editing src/lib/auth/** +2 more

  • Sign-in flows keep return paths safe and reveal nothing about accountsSupabase Auth

    When editing src/components/auth/** +3 more

  • Row level security is on by default and the service role is a last resortSupabase

    When editing src/db/**

Skills16

  • /add-auth-rls-policySupabase Auth

    Add row-level security policies to a Supabase table (owner-scoped, tenant-scoped or admin) with the indexes and the tests that prove they work.

  • /add-oauth-providerSupabase Auth

    Switch on Google, GitHub or Microsoft sign-in for Supabase Auth, or add a new provider (Apple, Discord, LinkedIn) with its button, icon, redirect URLs and profile mapping.

  • /add-profile-fieldSupabase Auth

    Add a field people edit on /settings/profile (a bio, a time zone, a company) with Supabase Auth, stored in public.profiles behind a column grant, validated with zod and saved by a server action.

  • /add-rls-policySupabase

    Add or fix row level security policies on a Supabase table, with a migration, a policy test and regenerated types.

  • /local-supabaseSupabase

    Boot, reset, inspect and troubleshoot the local Supabase stack, and pull schema down from a hosted project.

Subagents5

  • designerDefault design

    Owns the Default design system and its shadcn bridge. The only agent allowed to introduce a new visual pattern or a new token. Refuses to ship a raw colour or a single-mode change.

  • documentarianBase

    Keeps README, CLAUDE.md, DESIGN.md, docs/onboard.md and docs/solutions/ true to the code. Writes solution docs from work that just landed.

  • pr-reviewerBase

    Reviews a diff against this repo's rules before it becomes a PR. Convention-aware, blocking on correctness and security, advisory on taste.

  • security-auditorBase

    Audits the repo or a diff for leaked secrets, broken auth boundaries, injection, unsafe dependencies and unsafe deploy configuration.

  • system-managerBase

    Maintains the .claude agentic layer itself: rules, skills, agents, hooks, settings. Adds a rule when a correction repeats.

Solution docs32

  • Logged out after an hour: Supabase cookie refresh in the App RouterSupabase Auth
  • getSession() vs getUser(): the Supabase trust trapSupabase Auth
  • Admin impersonation on Supabase Auth, bound to one sessionSupabase Auth
  • Migrating an app that only ever used the anon keySupabase Auth
  • Show only the OAuth buttons your Supabase project has switched onSupabase Auth

MCP servers1

  • supabase