ShipAny Next

A headless SaaS engine for building AI-powered products with Claude Code. Pre-wired business logic (payments, credits, subscriptions, auth, RBAC, i18n, CMS) with minimal UI — you build your product pages on top.

Quick Start

pnpm install
cp .env.example .env.development   # then fill in the values (AUTH_SECRET etc.)
pnpm db:push
pnpm rbac:init [email protected] --admin-password=your-password
pnpm dev

Local env lives in .env.development (gitignored). It is loaded by both Vite (vite dev) and the db:* scripts. Only VITE_APP_URL, VITE_APP_NAME, DATABASE_PROVIDER, DATABASE_URL, and AUTH_SECRET are required to boot.

Features

• Auth — Email/password + Google/GitHub OAuth via better-auth
• Payment — Stripe, PayPal, Alipay, WeChat Pay (checkout, subscriptions, webhooks)
• Credits — FIFO consumption, expiration, auto-grant on signup
• RBAC — Roles, permissions, wildcard matching, admin panel management
• API Keys — CRUD + validation
• Invite Codes — Trial activation, batch generation, usage tracking
• CMS — Categories and posts with full CRUD
• Image Upload — Drop / paste / click uploader; uses S3/R2 if configured, falls back to inline base64 (size-capped) stored in DB
• i18n — English + Chinese via Paraglide JS (compiled messages, dot-keyed JSON), locale-aware routing
• Admin Panel — Full-featured admin with grouped sidebar navigation:
  • RBAC — Users (role assignment), Roles (permission management), Permissions
  • Content — Categories, Posts (with status tabs, category selector)
  • Billing — Payments, Subscriptions, Credits (with type/status tabs)
  • Settings — Collapsible config groups (General, Auth, Payment, Email, Storage, AI)
  • System switcher dropdown (Admin / Dashboard / Landing)
• Dashboard — Client-side rendered with shadcn sidebar
• MDX Pages — Privacy policy, terms of service (content in src/content/pages/), extensible via skill
• Database — SQLite (dev) / PostgreSQL / MySQL via Drizzle ORM
• All code self-contained — no external packages for business logic

Tech Stack

• TanStack Start (RC, Vite 8 + nitro, React 19, TypeScript)
• TanStack Query, Form, and Table for data, forms, and tables
• shadcn/ui v4 (Base Nova style, Tailwind CSS 4)
• better-auth + Drizzle ORM
• Paraglide JS for i18n

Project Structure

src/
├── core/           # Infrastructure (db, auth, payment, email, storage, ai, i18n)
├── modules/        # Business logic (payment, credits, subscriptions, apikeys, rbac, posts, taxonomy)
├── config/         # Environment, DB schema, locale names
├── routes/         # File-based routes (locale-free paths; /zh prefix via router rewrite)
│   ├── *.tsx       # Pages (landing, auth, settings, admin, legal)
│   └── api/        # Server routes (REST endpoints)
├── content/pages/  # MDX content for static pages
├── hooks/          # Shared react-query hooks
├── components/     # Shared UI (app-layout, app-sidebar, data-table, form-field, user-menu, shadcn)
└── lib/            # Utilities (api-client, query-client, hash, resp, cookie, cache, rate-limit)

messages/{en,zh}.json    # Translation source (flat dot-keyed)
project.inlang/          # Inlang project config
src/paraglide/           # Compiled messages + runtime (gitignored, generated)

Admin Panel

The admin panel (/admin) provides a complete back-office interface:

All admin pages include:

• Server-side paginated data tables with search
• Dialog-based create/edit/delete forms
• Complete English and Chinese translations

Commands

Cloudflare deployment

The nanobanana-21 Worker builds and deploys automatically when main is pushed. Cloudflare Workers Builds runs pnpm cf:ci:build, then pnpm exec wrangler deploy.

wrangler.production.json is the tracked source for the Worker name, D1 binding, domain, and public app settings. The CI build recreates the ignored wrangler.jsonc and .env.production files from it. Keep credentials in Cloudflare runtime secrets; never add them to this file. Database migrations still require a separate review and apply step.

Claude Code Skills

Environment Variables

# Required (public vars use the VITE_ prefix; secrets stay server-only)
VITE_APP_URL=http://localhost:3000
VITE_APP_NAME=My App
VITE_APP_LOGO=/logo.png
DATABASE_PROVIDER=sqlite
DATABASE_URL=file:data/local.db
AUTH_SECRET=generate-with-openssl-rand-base64-32

# Optional
VITE_DEFAULT_LOCALE=en
STRIPE_SECRET_KEY=
RESEND_API_KEY=
REPLICATE_API_TOKEN=

# Storage (optional — image upload falls back to inline base64 if unset)
STORAGE_ENDPOINT=
STORAGE_REGION=auto
STORAGE_ACCESS_KEY=
STORAGE_SECRET_KEY=
STORAGE_BUCKET=
STORAGE_PUBLIC_DOMAIN=
INLINE_IMAGE_MAX_KB=2048

License

This is proprietary software. See LICENSE for the full license agreement.

ShipAny — shipany.ai