Skip to content
All articles
2 min read

supastack vs TurboStarter

Both ship web and mobile from one monorepo. supastack adds desktop, API keys, webhooks and 144 test files; TurboStarter adds a browser extension. A side-by-side look.

supastack team

TL;DR

supastack and TurboStarter are the two starters that go beyond the web. Both are pnpm monorepos with a Next.js web app and an Expo mobile app on top of shared TypeScript packages, and both use Better Auth and Drizzle. The difference is in what else you get and how much of it is tested.

  • Pick supastack if you are building a B2B or AI product that needs team workspaces, workspace API keys, outbound webhooks, an audit log, bring-your-own AI keys with budgets, or a desktop app, and you want a codebase with a real test suite.
  • Pick TurboStarter if a browser extension is part of your product, or you want more payment providers out of the box.

At a glance

supastackTurboStarter
WebNext.js 16.3Next.js 16.3
MobileExpo 57 (iOS + Android)Expo 57 (iOS + Android)
DesktopYes (Tauri)No
Browser extensionNoYes (WXT)
AuthBetter Auth: email OTP, password, magic link, OAuth, 2FA, passkeys, admin impersonation and bans; Auth.js optionBetter Auth: organizations, 2FA, passkeys, magic link, email OTP, anonymous, admin
Team workspacesPersonal + organization workspaces, invites, owner/admin/member rolesOrganizations with invitations
Web billingStripe or Lemon Squeezy, per-seatStripe, Polar, Lemon Squeezy, Dodo Payments
Mobile billingRevenueCat scaffolded behind the paywallRevenueCat, Superwall
AIProvider router, encrypted BYOK keys, per-workspace usage budgets, model price catalogAI module with an OpenAI demo
Background jobsTrigger.dev (enqueue / status / cancel + cron)Not a core module
Developer platformWorkspace API keys, signed outbound webhooks, audit logNot built in
ContentWorkspace CMS (posts, pages, docs)CMS package
CommerceProducts, orders, inventory, refundsNo
ComplianceGDPR export, session managementNo dedicated module
Feature flagsEntitlement gatesFeature-flag package per platform
Languagesen, de, es, fren, es
Test files in repo14415
TypeScript files~470~950

Where supastack is stronger

Tests you can trust — supastack's repository holds 144 test files and a credential-free pnpm verify:local gate that runs the whole golden path with fake providers. You can change billing or auth code and know quickly whether you broke something. TurboStarter ships 15.

Business plumbing for B2B and AI products — workspace API keys, signed outbound webhooks, an audit log, GDPR export and admin impersonation are already there. If your customers will call your product from their own systems, you would otherwise build all of that yourself.

AI with guardrails — supastack stores each workspace's own provider keys encrypted, routes requests through a capability-aware router, and enforces usage budgets against a price catalog. TurboStarter gives you a demo endpoint.

Desktop — a Tauri app sits next to web and mobile.

Smaller surface — roughly half the TypeScript files of TurboStarter, so there is less to read before you start.

Where TurboStarter is stronger

Browser extension — TurboStarter ships a WXT extension app that shares auth, API and UI packages with web and mobile. If a Chrome or Firefox extension is part of your product, this saves weeks.

More payment options — Polar and Dodo Payments on web, plus Superwall on mobile.

Feature flags per platform and an anonymous sign-in mode.

Who should pick which

You are buildingPick
B2B SaaS where customers integrate via API or webhookssupastack
AI product where each team brings its own model keyssupastack
Web + mobile + desktop appsupastack
Product with a companion browser extensionTurboStarter
Consumer app that needs Polar, Dodo or SuperwallTurboStarter

Verdict

Both are serious, current starters. TurboStarter covers the most client surfaces thanks to its extension app. supastack goes deeper on the server side, with teams, API keys, webhooks, audit and AI budgets, and backs it with a far larger test suite. For most B2B and AI SaaS products, that depth matters more than one more client.

Comparison based on the source code of both starters as of September 2026. Features change quickly, so check each project's docs before you buy.

Frequently asked questions

14 questions

What is supastack?

supastack is a modular foundation for building AI-powered SaaS products. It brings together common infrastructure so you can focus on product-specific features.

Does it support web and mobile?

Yes. supastack includes Next.js and Expo apps as starting points for web and mobile experiences.

What authentication is included?

Better Auth covers email OTP, magic-link, and social sign-in; email/password stays available at the API layer and through the Auth.js credentials engine for products that need it. Personal workspaces are provisioned with the account so product records stay scoped from day one.

How does it support AI?

supastack includes configurable multi-provider AI, usage tracking, budgets, and encrypted bring-your-own-key support.

How are subscriptions handled?

For products built on the kit, Stripe billing, subscriptions, and entitlements form the paid-access foundation. Provider secrets stay server-only.

Where does my product-specific code live?

Product-specific features remain in a separate codebase while the product configures and integrates supastack’s foundation modules.

How does supastack pricing work?

The kit is a one-time purchase with lifetime updates: One Platform at $249 (temporary launch price, $100 off the regular $349) — your pick of Next.js (Web), Expo (iOS & Android), or Tauri (macOS & Windows Desktop) — or the All Platforms Bundle at $499 (temporary launch price, $100 off the regular $599) with every platform and the full monorepo, plus $75 per extra developer seat. No kit subscription. Checkout on this site delivers your license key by email, with repository access via GitHub invite.

How do workspaces scope my data?

User-owned records are scoped by workspaceId. Identity, entitlements, AI usage, billing events, and audit entries stay inside the personal workspace boundary.

How do background jobs work?

Trigger.dev is the explicit job runtime. The JobRunner contract only promises enqueue, status, and cancel—workflow semantics stay Trigger.dev-specific and explicit.

How is email different from outreach?

Transactional email covers product workflows such as completion notices. Cold outreach and campaigns are product concerns outside this kit’s email module.

How do mobile purchases work?

Mobile includes native purchases and restore through RevenueCat, with access verified by your server. Configure the store accounts and complete device testing before release. Web billing remains separate.

Where do AI provider keys live?

Bring-your-own-key credentials are encrypted and stay server-only. Keys are redacted from logs; usage and budgets remain visible at the workspace level.

Which payment methods does checkout accept?

The Stripe-hosted checkout accepts cards and can also offer Alipay and WeChat Pay once those wallets are enabled on the Stripe account — handy for buyers in China. Wallet authorizations confirm asynchronously, so the license page updates as soon as the payment clears.

Can I get a refund?

After you've got access to the repository, supastack is yours forever, so it cannot be refunded. But rest assured, you get the complete source code with lifetime updates to build and ship unlimited products for yourself or clients. You just cannot resell the code or redistribute the repository as a starter kit or template.

EN