|
1 | | -# 🚀 Vibe Stack: The AI Builder's Next.js Boilerplate |
| 1 | +# ⚡ Vibe Stack |
2 | 2 |
|
3 | | -A production-ready Next.js 15 template designed specifically for **AI-assisted "vibe coding"**. |
| 3 | +### Stop fixing AI-generated bugs. Start shipping production apps. |
4 | 4 |
|
5 | | -If you're using Cursor, Copilot, or Claude to generate code, generic templates will lead you into a maze of deprecated patterns and security holes. Furthermore, dropping $299 on a "monolithic boilerplate" is a trap—you end up spending 3 days reading their 400-page proprietary documentation just to understand their rigid, bloated architecture. |
| 5 | +A **Next.js 15 + Supabase boilerplate** with **17 `.mdc` architecture rules** that physically prevent AI coding assistants from hallucinating insecure auth, deprecated packages, and broken patterns. |
6 | 6 |
|
7 | | -**Vibe Stack is the antidote.** It is radically modular. You don't have to learn our custom syntax. Instead, this template comes with **pre-configured agent tools (MCP)** and strict **architecture-enforcing cursor rules**. You let the AI build *your* app, but our rules ensure the AI doesn't hallucinate or create security flaws. |
| 7 | +> **The problem:** AI models generate code that compiles perfectly but ships critical vulnerabilities — `getSession()` instead of `getUser()`, synchronous params that crash in Next.js 15, missing RLS policies that expose your database. These bugs are invisible until production. |
| 8 | +> |
| 9 | +> **The fix:** Architecture rules that override the AI's training data. When a rule says "NEVER use getSession()", the model is constrained to generate the secure pattern. Every time. |
8 | 10 |
|
9 | | -## 🎁 What's Included (Free Tier) |
| 11 | +--- |
| 12 | + |
| 13 | +## 🏗️ What's Inside |
| 14 | + |
| 15 | +### 17 Architecture Rules (`.cursor/rules/`) |
| 16 | + |
| 17 | +| Rule File | What It Prevents | |
| 18 | +|---|---| |
| 19 | +| `supabase-auth-security.mdc` | Bans `getSession()`, enforces `getUser()` for JWT verification | |
| 20 | +| `nextjs15-params.mdc` | Prevents synchronous `params` access (the #1 Next.js 15 breaking change) | |
| 21 | +| `supabase-ssr-only.mdc` | Blocks deprecated `@supabase/auth-helpers-nextjs` imports | |
| 22 | +| `security.mdc` | OWASP Top 10 enforcement with rate limiting examples | |
| 23 | +| `stripe-payments.mdc` | Server-only Stripe, webhook signature verification | |
| 24 | +| `typescript-strict.mdc` | Bans `any`, enforces Zod validation at every boundary | |
| 25 | +| `performance.mdc` | Parallel fetching, N+1 prevention, dynamic imports | |
| 26 | +| `server-vs-client-components.mdc` | Prevents unnecessary `'use client'` overuse | |
| 27 | +| `project-context.mdc` | Global context rule (always active) — maps the full architecture | |
| 28 | +| `server-actions.mdc` | Zod validation + structured error returns | |
| 29 | +| `error-handling.mdc` | Mandates error boundaries and loading states | |
| 30 | +| `supabase-rls.mdc` | Enforces Row Level Security on every table | |
| 31 | +| `shadcn-patterns.mdc` | Form patterns with react-hook-form + Zod | |
| 32 | +| `api-design.mdc` | Standard Route Handler patterns with auth checks | |
| 33 | +| `testing.mdc` | Vitest + Playwright testing strategy | |
| 34 | +| `git-conventions.mdc` | Conventional commits + PR structure | |
| 35 | +| `ai-collaboration.mdc` | The 3-stage agentic loop (Plan → Implement → Verify) | |
| 36 | + |
| 37 | +### 4 MCP Integrations (`.cursor/mcp.json`) |
| 38 | + |
| 39 | +Your AI doesn't just write code — it **reads your GitHub PRs, inspects your Supabase schema, navigates your filesystem, and browses your running app.** |
| 40 | + |
| 41 | +- **GitHub MCP** — AI reads PRs, commit history, and issues |
| 42 | +- **Supabase MCP** — AI inspects your database schema and RLS policies |
| 43 | +- **Filesystem MCP** — AI navigates your project structure |
| 44 | +- **Browser MCP** — AI takes screenshots and tests your running app |
| 45 | + |
| 46 | +### Production Application Layer |
| 47 | + |
| 48 | +``` |
| 49 | +src/ |
| 50 | +├── app/ |
| 51 | +│ ├── (auth)/ # Login + Signup with Zod validation |
| 52 | +│ ├── auth/confirm/ # PKCE email verification callback |
| 53 | +│ ├── dashboard/ # Protected dashboard (server-side auth) |
| 54 | +│ ├── api/webhooks/stripe/ # Stripe webhook handler |
| 55 | +│ ├── page.tsx # Dark-mode landing page |
| 56 | +│ ├── error.tsx # Global error boundary |
| 57 | +│ ├── loading.tsx # Global loading state |
| 58 | +│ └── not-found.tsx # Custom 404 |
| 59 | +├── lib/ |
| 60 | +│ ├── supabase/ # Server + client factories + middleware |
| 61 | +│ ├── stripe/ # Checkout + portal utilities |
| 62 | +│ ├── email/ # Resend templates (welcome, password reset) |
| 63 | +│ ├── env.ts # Type-safe environment variables |
| 64 | +│ └── utils.ts # cn() helper + utilities |
| 65 | +├── types/ # ActionResponse, UserProfile, PaginatedResponse |
| 66 | +└── middleware.ts # Session refresh |
| 67 | +``` |
| 68 | + |
| 69 | +### 3 n8n Automation Workflows |
| 70 | + |
| 71 | +Ready-to-import JSON templates that replace a $200/month marketing stack: |
| 72 | + |
| 73 | +- **GitHub Star → Lead Capture** — Auto-emails stargazers with your paid product link |
| 74 | +- **Dev.to → Social Cross-Post** — Auto-tweets new articles |
| 75 | +- **Gumroad Sale → CRM + Thank You** — Tracks customers in Notion, sends onboarding email |
| 76 | + |
| 77 | +--- |
10 | 78 |
|
11 | | -- **Next.js 15 App Router** + React 19 |
12 | | -- **Tailwind CSS + Shadcn/ui** baseline setup |
13 | | -- **Supabase SSR Auth** utilities (secure by default) |
14 | | -- **.cursor/mcp.json**: Integrated GitHub & local filesystem context |
15 | | -- **15+ Battle-Tested `.mdc` Rules**: Prevents the AI from hallucinating bad Next.js 14 patterns or insecure auth calls. |
| 79 | +## 🚀 Quick Start |
16 | 80 |
|
17 | | -*** |
| 81 | +```bash |
| 82 | +git clone https://github.com/vibestackdev/vibe-stack.git |
| 83 | +cd vibe-stack |
| 84 | +npm install |
| 85 | +cp .env.example .env.local |
| 86 | +# Add your Supabase URL + anon key to .env.local |
| 87 | +npm run dev |
| 88 | +``` |
18 | 89 |
|
19 | | -## 👑 Upgrade to The AI Builder's Complete Vault |
| 90 | +Open in **Cursor** and start building. The rules activate automatically. |
20 | 91 |
|
21 | | -This repo contains the *base setup*. If you want the complete end-to-end system I use to ship production apps in 4 hours, check out [The AI Builder's Complete System](https://whop.com/example-link). |
| 92 | +Read [`docs/VIBE-CODING.md`](docs/VIBE-CODING.md) for the complete prompting framework. |
22 | 93 |
|
23 | | -**The $149 Complete Vault includes:** |
24 | | -1. **The Full Boilerplate Extension**: Multi-tenant SaaS structure, Stripe payments, Resend emails, and PostHog analytics pre-integrated. |
25 | | -2. **Claude MCP Config Pack**: Advanced integrations for Notion, Browser tools, and direct Database querying. |
26 | | -3. **The n8n Agent Lead Machine**: 3 ready-to-deploy workflow templates that replace a $200/mo marketing SaaS. |
27 | | -4. **Vibe Coding Masterclass**: My 5,000-word exact framework for prompting models to build architecture, not just snippets. |
28 | | -5. **Private Discord Community**: Direct support from me. |
| 94 | +--- |
| 95 | + |
| 96 | +## 📚 Documentation |
29 | 97 |
|
30 | | -👉 **[Get the Complete System Here](https://whop.com/example-link)** 👈 |
| 98 | +| Doc | Description | |
| 99 | +|---|---| |
| 100 | +| [VIBE-CODING.md](docs/VIBE-CODING.md) | The 3-stage agentic loop for AI-assisted development | |
| 101 | +| [ARCHITECTURE.md](docs/ARCHITECTURE.md) | 8 Architecture Decision Records — explains every "why" | |
| 102 | +| [MCP-SETUP.md](docs/MCP-SETUP.md) | Step-by-step MCP server setup guide | |
31 | 103 |
|
32 | | -*** |
| 104 | +--- |
33 | 105 |
|
34 | | -## 🛠️ Quick Start |
| 106 | +## 🔥 How It Compares |
35 | 107 |
|
36 | | -1. Clone this repository |
37 | | -2. Install dependencies: `npm install` |
38 | | -3. Copy `.env.example` to `.env.local` and add your Supabase credentials |
39 | | -4. Run the development server: `npm run dev` |
| 108 | +| Feature | Vibe Stack | ShipFast ($169) | MakerKit ($299) | |
| 109 | +|---|:---:|:---:|:---:| |
| 110 | +| AI Architecture Rules | ✅ 17 rules | ❌ | ❌ | |
| 111 | +| MCP Integrations | ✅ 4 servers | ❌ | ❌ | |
| 112 | +| n8n Automations | ✅ 3 workflows | ❌ | ❌ | |
| 113 | +| Next.js 15 + React 19 | ✅ | ✅ | ✅ | |
| 114 | +| Supabase SSR Auth | ✅ Secure | ✅ | ✅ | |
| 115 | +| Stripe Payments | ✅ | ✅ | ✅ | |
| 116 | +| Time to First Feature | **20 min** | 3-4 hours | 1-2 days | |
| 117 | +| Documentation to Read | 3 short docs | 400+ pages | 200+ pages | |
| 118 | +| Learning Curve | **Your AI reads the rules** | You read their docs | You read their docs | |
40 | 119 |
|
41 | | -Open your AI code editor (Cursor recommended) and read the `docs/VIBE-CODING.md` guide to get started. |
| 120 | +--- |
42 | 121 |
|
43 | | -## 🤖 How the Rules Work |
| 122 | +## 💎 Want the Complete System? |
44 | 123 |
|
45 | | -This repo includes a `.cursor/rules` directory. When you use Cursor's Composer or AI chat, Cursor will automatically read these rules based on the files you're editing. |
| 124 | +This repo is the free foundation. The extended version includes the full boilerplate, Stripe integration, email templates, n8n workflows, and the Vibe Coding Masterclass. |
46 | 125 |
|
47 | | -For example, if the AI tries to write a database query on the server using `getSession()`, the `supabase-auth-security.mdc` rule will override it and force the secure `getUser()` method instead, preventing major security vulnerabilities before they are even written. |
| 126 | +**→ [Get the AI Builder's Complete System](https://vibestackdev.gumroad.com/l/vibe-stack)** |
48 | 127 |
|
49 | | -Check `docs/ARCHITECTURE.md` to understand why these rules exist. |
| 128 | +| Tier | What You Get | Price | |
| 129 | +|---|---|---| |
| 130 | +| **Rules Pack** | All 17 .mdc rules + Vibe Coding guide | $29 | |
| 131 | +| **Builder System** | Rules + 4 MCP configs + Architecture docs + SQL migrations | $69 | |
| 132 | +| **Complete Vault** | Everything + full boilerplate + Stripe + email + Masterclass | $149 | |
50 | 133 |
|
51 | 134 | --- |
52 | | -*Built for the AI Engineering era by Lavie.* |
| 135 | + |
| 136 | +## 🤝 Contributing |
| 137 | + |
| 138 | +Found a hallucination pattern I'm missing? Open an issue describing the incorrect pattern the AI generates and the correct fix. I'll add it as a new rule. |
| 139 | + |
| 140 | +## 📄 License |
| 141 | + |
| 142 | +MIT — use it however you want. |
| 143 | + |
| 144 | +--- |
| 145 | + |
| 146 | +*Built by [VibeStack](https://github.com/vibestackdev) — Architecture intelligence for AI-assisted development.* |
0 commit comments