Skip to content

Commit d971cb4

Browse files
committed
Major update: rewrite README as sales page, add n8n workflows, add 3 new rules
1 parent dd1a8a9 commit d971cb4

1 file changed

Lines changed: 126 additions & 32 deletions

File tree

README.md

Lines changed: 126 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -1,52 +1,146 @@
1-
# 🚀 Vibe Stack: The AI Builder's Next.js Boilerplate
1+
# Vibe Stack
22

3-
A production-ready Next.js 15 template designed specifically for **AI-assisted "vibe coding"**.
3+
### Stop fixing AI-generated bugs. Start shipping production apps.
44

5-
If you're using Cursor, Copilot, or Claude to generate code, generic templates will lead you into a maze of deprecated patterns and security holes. Furthermore, dropping $299 on a "monolithic boilerplate" is a trap—you end up spending 3 days reading their 400-page proprietary documentation just to understand their rigid, bloated architecture.
5+
A **Next.js 15 + Supabase boilerplate** with **17 `.mdc` architecture rules** that physically prevent AI coding assistants from hallucinating insecure auth, deprecated packages, and broken patterns.
66

7-
**Vibe Stack is the antidote.** It is radically modular. You don't have to learn our custom syntax. Instead, this template comes with **pre-configured agent tools (MCP)** and strict **architecture-enforcing cursor rules**. You let the AI build *your* app, but our rules ensure the AI doesn't hallucinate or create security flaws.
7+
> **The problem:** AI models generate code that compiles perfectly but ships critical vulnerabilities — `getSession()` instead of `getUser()`, synchronous params that crash in Next.js 15, missing RLS policies that expose your database. These bugs are invisible until production.
8+
>
9+
> **The fix:** Architecture rules that override the AI's training data. When a rule says "NEVER use getSession()", the model is constrained to generate the secure pattern. Every time.
810
9-
## 🎁 What's Included (Free Tier)
11+
---
12+
13+
## 🏗️ What's Inside
14+
15+
### 17 Architecture Rules (`.cursor/rules/`)
16+
17+
| Rule File | What It Prevents |
18+
|---|---|
19+
| `supabase-auth-security.mdc` | Bans `getSession()`, enforces `getUser()` for JWT verification |
20+
| `nextjs15-params.mdc` | Prevents synchronous `params` access (the #1 Next.js 15 breaking change) |
21+
| `supabase-ssr-only.mdc` | Blocks deprecated `@supabase/auth-helpers-nextjs` imports |
22+
| `security.mdc` | OWASP Top 10 enforcement with rate limiting examples |
23+
| `stripe-payments.mdc` | Server-only Stripe, webhook signature verification |
24+
| `typescript-strict.mdc` | Bans `any`, enforces Zod validation at every boundary |
25+
| `performance.mdc` | Parallel fetching, N+1 prevention, dynamic imports |
26+
| `server-vs-client-components.mdc` | Prevents unnecessary `'use client'` overuse |
27+
| `project-context.mdc` | Global context rule (always active) — maps the full architecture |
28+
| `server-actions.mdc` | Zod validation + structured error returns |
29+
| `error-handling.mdc` | Mandates error boundaries and loading states |
30+
| `supabase-rls.mdc` | Enforces Row Level Security on every table |
31+
| `shadcn-patterns.mdc` | Form patterns with react-hook-form + Zod |
32+
| `api-design.mdc` | Standard Route Handler patterns with auth checks |
33+
| `testing.mdc` | Vitest + Playwright testing strategy |
34+
| `git-conventions.mdc` | Conventional commits + PR structure |
35+
| `ai-collaboration.mdc` | The 3-stage agentic loop (Plan → Implement → Verify) |
36+
37+
### 4 MCP Integrations (`.cursor/mcp.json`)
38+
39+
Your AI doesn't just write code — it **reads your GitHub PRs, inspects your Supabase schema, navigates your filesystem, and browses your running app.**
40+
41+
- **GitHub MCP** — AI reads PRs, commit history, and issues
42+
- **Supabase MCP** — AI inspects your database schema and RLS policies
43+
- **Filesystem MCP** — AI navigates your project structure
44+
- **Browser MCP** — AI takes screenshots and tests your running app
45+
46+
### Production Application Layer
47+
48+
```
49+
src/
50+
├── app/
51+
│ ├── (auth)/ # Login + Signup with Zod validation
52+
│ ├── auth/confirm/ # PKCE email verification callback
53+
│ ├── dashboard/ # Protected dashboard (server-side auth)
54+
│ ├── api/webhooks/stripe/ # Stripe webhook handler
55+
│ ├── page.tsx # Dark-mode landing page
56+
│ ├── error.tsx # Global error boundary
57+
│ ├── loading.tsx # Global loading state
58+
│ └── not-found.tsx # Custom 404
59+
├── lib/
60+
│ ├── supabase/ # Server + client factories + middleware
61+
│ ├── stripe/ # Checkout + portal utilities
62+
│ ├── email/ # Resend templates (welcome, password reset)
63+
│ ├── env.ts # Type-safe environment variables
64+
│ └── utils.ts # cn() helper + utilities
65+
├── types/ # ActionResponse, UserProfile, PaginatedResponse
66+
└── middleware.ts # Session refresh
67+
```
68+
69+
### 3 n8n Automation Workflows
70+
71+
Ready-to-import JSON templates that replace a $200/month marketing stack:
72+
73+
- **GitHub Star → Lead Capture** — Auto-emails stargazers with your paid product link
74+
- **Dev.to → Social Cross-Post** — Auto-tweets new articles
75+
- **Gumroad Sale → CRM + Thank You** — Tracks customers in Notion, sends onboarding email
76+
77+
---
1078

11-
- **Next.js 15 App Router** + React 19
12-
- **Tailwind CSS + Shadcn/ui** baseline setup
13-
- **Supabase SSR Auth** utilities (secure by default)
14-
- **.cursor/mcp.json**: Integrated GitHub & local filesystem context
15-
- **15+ Battle-Tested `.mdc` Rules**: Prevents the AI from hallucinating bad Next.js 14 patterns or insecure auth calls.
79+
## 🚀 Quick Start
1680

17-
***
81+
```bash
82+
git clone https://github.com/vibestackdev/vibe-stack.git
83+
cd vibe-stack
84+
npm install
85+
cp .env.example .env.local
86+
# Add your Supabase URL + anon key to .env.local
87+
npm run dev
88+
```
1889

19-
## 👑 Upgrade to The AI Builder's Complete Vault
90+
Open in **Cursor** and start building. The rules activate automatically.
2091

21-
This repo contains the *base setup*. If you want the complete end-to-end system I use to ship production apps in 4 hours, check out [The AI Builder's Complete System](https://whop.com/example-link).
92+
Read [`docs/VIBE-CODING.md`](docs/VIBE-CODING.md) for the complete prompting framework.
2293

23-
**The $149 Complete Vault includes:**
24-
1. **The Full Boilerplate Extension**: Multi-tenant SaaS structure, Stripe payments, Resend emails, and PostHog analytics pre-integrated.
25-
2. **Claude MCP Config Pack**: Advanced integrations for Notion, Browser tools, and direct Database querying.
26-
3. **The n8n Agent Lead Machine**: 3 ready-to-deploy workflow templates that replace a $200/mo marketing SaaS.
27-
4. **Vibe Coding Masterclass**: My 5,000-word exact framework for prompting models to build architecture, not just snippets.
28-
5. **Private Discord Community**: Direct support from me.
94+
---
95+
96+
## 📚 Documentation
2997

30-
👉 **[Get the Complete System Here](https://whop.com/example-link)** 👈
98+
| Doc | Description |
99+
|---|---|
100+
| [VIBE-CODING.md](docs/VIBE-CODING.md) | The 3-stage agentic loop for AI-assisted development |
101+
| [ARCHITECTURE.md](docs/ARCHITECTURE.md) | 8 Architecture Decision Records — explains every "why" |
102+
| [MCP-SETUP.md](docs/MCP-SETUP.md) | Step-by-step MCP server setup guide |
31103

32-
***
104+
---
33105

34-
## 🛠️ Quick Start
106+
## 🔥 How It Compares
35107

36-
1. Clone this repository
37-
2. Install dependencies: `npm install`
38-
3. Copy `.env.example` to `.env.local` and add your Supabase credentials
39-
4. Run the development server: `npm run dev`
108+
| Feature | Vibe Stack | ShipFast ($169) | MakerKit ($299) |
109+
|---|:---:|:---:|:---:|
110+
| AI Architecture Rules | ✅ 17 rules |||
111+
| MCP Integrations | ✅ 4 servers |||
112+
| n8n Automations | ✅ 3 workflows |||
113+
| Next.js 15 + React 19 ||||
114+
| Supabase SSR Auth | ✅ Secure |||
115+
| Stripe Payments ||||
116+
| Time to First Feature | **20 min** | 3-4 hours | 1-2 days |
117+
| Documentation to Read | 3 short docs | 400+ pages | 200+ pages |
118+
| Learning Curve | **Your AI reads the rules** | You read their docs | You read their docs |
40119

41-
Open your AI code editor (Cursor recommended) and read the `docs/VIBE-CODING.md` guide to get started.
120+
---
42121

43-
## 🤖 How the Rules Work
122+
## 💎 Want the Complete System?
44123

45-
This repo includes a `.cursor/rules` directory. When you use Cursor's Composer or AI chat, Cursor will automatically read these rules based on the files you're editing.
124+
This repo is the free foundation. The extended version includes the full boilerplate, Stripe integration, email templates, n8n workflows, and the Vibe Coding Masterclass.
46125

47-
For example, if the AI tries to write a database query on the server using `getSession()`, the `supabase-auth-security.mdc` rule will override it and force the secure `getUser()` method instead, preventing major security vulnerabilities before they are even written.
126+
**[Get the AI Builder's Complete System](https://vibestackdev.gumroad.com/l/vibe-stack)**
48127

49-
Check `docs/ARCHITECTURE.md` to understand why these rules exist.
128+
| Tier | What You Get | Price |
129+
|---|---|---|
130+
| **Rules Pack** | All 17 .mdc rules + Vibe Coding guide | $29 |
131+
| **Builder System** | Rules + 4 MCP configs + Architecture docs + SQL migrations | $69 |
132+
| **Complete Vault** | Everything + full boilerplate + Stripe + email + Masterclass | $149 |
50133

51134
---
52-
*Built for the AI Engineering era by Lavie.*
135+
136+
## 🤝 Contributing
137+
138+
Found a hallucination pattern I'm missing? Open an issue describing the incorrect pattern the AI generates and the correct fix. I'll add it as a new rule.
139+
140+
## 📄 License
141+
142+
MIT — use it however you want.
143+
144+
---
145+
146+
*Built by [VibeStack](https://github.com/vibestackdev) — Architecture intelligence for AI-assisted development.*

0 commit comments

Comments
 (0)