Migration assistant
already migrate lovable — automated migration from Lovable. Detects routes, transforms env vars, introspects schema, generates a structured TODO report.already migrate base44 — Vite/Next.js flavour detection + automated env transform + TODO report.already migrate bolt — guided rewrite flow (Bolt output is too variable for full automation).already migrate auto — detects the source tool automatically and runs the right adapter.
Full CLI
already doctor — health check: env vars, DB connection, Stripe version pin, outdated deps, CVEs.already changelog — shows what's changed since your pinned .already-version.
Demo mode
- Seeded demo environment for showing the product to clients without live credentials.
Auth
- Supabase Auth — email/password, Google OAuth, magic links, TOTP (authenticator app), passkeys (WebAuthn).
- Account enumeration protection on password reset.
- Failed login tracking with IP-based rate limiting via Upstash.
- Refresh token rotation,
HttpOnly + Secure cookies.
Billing
- Stripe subscriptions with idempotent webhook handler and dead-letter table.
- Org or user billing mode, configurable in
config/billing.ts.
pnpm setup:stripe — creates products and prices, writes IDs to .env.local.- Plan gating via
requirePlan() in Server Component layouts.
Multi-tenant orgs
withOrgScope() query helpers enforce tenant isolation at the query layer.- Supabase RLS policies on every tenant-scoped table as a secondary layer.
- Invitations, owner/member/admin roles, personal org auto-created on signup.
AI integration
- Multi-provider SDK — Anthropic, OpenAI, Google — unified interface.
- Per-org credits ledger with usage tracking and budget controls.
Observability + security
- Sentry pre-wired (add DSN, it's live). CSP nonce-based, violations routed to Sentry.
- Security headers: A+ on securityheaders.com on a fresh deploy.
- Suspicious activity detection via geo, device fingerprint, and velocity heuristics.
- Rate limiting on all auth endpoints via Upstash Ratelimit.
AI-native dev experience
- Pre-written
CLAUDE.md with full codebase context for Claude Code.
- Six scoped
.cursor/rules/ files — one per architectural layer.
- Vendor-neutral
AGENTS.md + .github/copilot-instructions.md.
- MCP servers for Supabase and Stripe pre-wired in
mcp.json.
- Ten invokable Claude Code skills:
/add-page, /add-table, /add-plan, /deploy, and more.
Performance
- React Compiler enabled. Partial Prerendering on marketing routes.
- Bundle size budget: 200KB gzipped main bundle — CI fails on regression.
- Core Web Vitals regression threshold: 5% delta fails CI via Vercel Speed Insights.
Other modules shipped
- Messaging — unified
notify() across Resend email and Supabase Realtime in-app.
- Background jobs — Postgres queue + Vercel Cron, exponential backoff, dead-letter.
- Admin dashboard — impersonation with audit log, org management.
- API keys — hashed at rest, scoped, usage logged.
- Feature flags — PostHog with server + client evaluation.
- Growth — Rewardful affiliate tracking, localized pricing, Storybook.
- i18n — next-intl, English / German / Spanish.
- Content — MDX pipeline for marketing, docs, and legal.
- UX patterns — shadcn/ui, Sonner toasts, loading/error/empty states.