Changelog
Every update shipped to supastack — new features, improvements, and fixes.
Coming soon
Roadmap
Work in progress
Features and improvements we're actively building and expect to ship soon. This list may evolve based on user needs and community input.
Stripe Connect
Multi-vendor payouts and split payments: sellers onboard to connected accounts, the platform takes its fee, and transfers land in the same entitlement ledger. The marketplace layer most starters skip.
Public agent-run API
A budgeted endpoint for agent framework runs; AGENT_FRAMEWORK already swaps between the AI SDK, Mastra, LangGraph, and the OpenAI Agents SDK.
Supabase-native mode
Supabase Auth plus an RLS-first schema so a self-hosted Supabase can safely expose its Data API alongside the app.
Passkey and biometric sign-in
WebAuthn passkeys on web and device biometrics on mobile, so end users get phishing-resistant sign-in on every platform.
Desktop update channels
Stable and beta release tracks for the Tauri shell — stage signed updates to a smaller audience before everyone gets them.
Mobile offline mode
The Expo app keeps recently loaded workspace data readable without a connection, so field work doesn't stall on dead networks.
… and further improvements, fixes and dependency updates.
- Next.js
- Expo
- Tauri
LatestA workspace home, usage alerts, an agent API, and ready-to-ship desktop releases
New
- The web app opens on a new workspace home after sign-in, showing usage, plan, setup progress, quick actions, and recent notifications in one place.
- The mobile home screen adds usage bars, a plan card, quick-action tiles, recent notifications, and pull to refresh.
- Owners and admins are notified when a workspace reaches 80% and 100% of its monthly AI budget or a usage limit.
- Run budgeted, multi-step AI agents from your own code through a new public API endpoint.
- The setup checklist highlights your next step, filters by status, and copies the environment settings you still need to fill in.
- Choose from four new color packs and four matching design styles.
- Six app blocks join the library: usage meter, activity feed, action grid, onboarding checklist, settings section, and member list.
- Publish signed desktop releases with a ready-made release workflow and automatic update manifests.
- Ask an AI assistant about your workspace from the mobile app.
- Try agent runs during local development without an AI provider key.
- The mobile app now uses crisp vector icons throughout.
- Fixed: mobile usage bars show warning and limit colors as usage climbs.
- Next.js
- Expo
Passkeys, app lock, self-hosted files, metered billing, and a translated app
New
- Sign in with a passkey on the web, and manage saved passkeys from Settings → Security.
- The mobile app can lock behind Face ID, fingerprint, or the device passcode when it returns from the background.
- Self-hosted products can keep uploaded files on the server's own disk, served through short-lived signed links.
- Plans can bill by usage: metered usage is reported to the payment provider automatically and never counted twice.
- App screens on web and mobile follow the chosen language, including dates and prices.
- Ship faster with 26 built-in agent skills for Claude Code, Cursor, Codex and other coding agents, covering features, payments, database changes and tests.
- Fixed: files stored on local disk are served more safely — uploads can no longer run code on your domain.
- Fixed: appearance choices now save on a workspace's custom domain.
- Fixed: saving usage settings keeps you in your chosen language.
- Fixed: the local check command runs reliably however pnpm is launched.
- Next.js
- Expo
- Tauri
A ready-to-build kit: setup checklist, usage limits, offline mobile, and new styles
Improved
- Walk any new project through an in-app setup checklist that shows what is configured, what runs in demo mode, and what to do next.
- Set a monthly AI budget and usage caps for each workspace from the new Usage settings, with current usage visible on web and mobile.
- Owners and admins can download a full copy of a workspace's content, commerce, members, and settings.
- The analytics dashboard shows trends against the previous period, a live visitor count, and layouts that fit every screen size.
- Choose from five new color packs and five matching design styles.
- Recently viewed mobile screens stay readable offline, with a note showing when the data was saved.
- Desktop apps can offer a beta update channel alongside stable releases.
- Mobile devices that no longer accept notifications drop out of push delivery automatically.
- Fixed: the site header shows the right account button as soon as a page loads.
- Next.js
- Expo
- Tauri
Kit readiness roundup: setup, mobile, and desktop
Improved
- Get started with guided setup and environment checks before running your app.
- The mobile kit includes content and commerce management, push notifications, and personal data export.
- Prepare desktop releases with updater checks, automatic updates, and optional launch at login.
- Your appearance choices follow your sign-in across browsers, the desktop app, and mobile.
- A new Match web app theme mode paints the mobile app with the color pack you picked on the web.
- Next.js
- Expo
Analytics developer tools and more reliable billing
Improved
- Connect analytics to your app with a TypeScript SDK and a ready-to-use React tracking component.
- Explore traffic, visitors, and revenue from the command line, with JSON output for automation.
- Prepaid credit purchases are recognized more reliably across Stripe, Lemon Squeezy, Creem, Polar, and Whop.
- Next.js
- Expo
- Tauri
Smoother AI workflows and more capable mobile and desktop apps
Improved
- AI tasks have a dedicated console, with consistent navigation and recovery links across languages.
- Manage schedules, chat threads, webhook history, content, profiles, and expiring API keys from the mobile app.
- Desktop editing supports familiar keyboard shortcuts and remembers your preferred zoom.
- Fixed: localized settings show developer tools, audit history, and active sessions, and admin navigation no longer leads to missing pages.
- Next.js
- Expo
- Tauri
Prepaid credits, guided setup, and a stronger mobile and desktop kit
New
- Give workspaces a prepaid credit balance — AI tasks spend it automatically when the plan's monthly quota runs out, so paid bursts keep working instead of failing.
- Credits arrive through billing events or an admin grant, and members see the balance and recent activity on the billing card — on web and mobile.
- Run `pnpm setup` on a fresh checkout — a guided wizard checks your environment, writes safe configuration, offers migrations, and prints your next steps.
- Validate any machine noninteractively with `pnpm setup --check` — handy for CI and for a quick sanity pass before you start.
- Manage your workspace's content and commerce from the mobile app — list, create, and publish CMS entries, and work products and orders through their statuses.
- Push notifications open the right screen when tapped, and sends can authenticate with an optional `EXPO_ACCESS_TOKEN`.
- Members can export their personal data as JSON from the mobile app's security settings.
- Desktop builds can update themselves — the shell checks in the background, installs on confirmation, and relaunches — with an optional launch-at-login toggle and a release check that validates your updater config.
- Next.js
- Expo
Push notifications, analytics everywhere, and trust pages in every language
New
- Reach members on their phones — the mobile app sends push notifications through Expo, devices register after sign-in, and a settings toggle turns pushes on or off.
- Pick how your product measures site traffic — anonymous first-party stats, Plausible, PostHog, or off entirely — always behind visitor consent, with an 'Analytics preferences' link in the footer to revisit the choice.
- Admins see 30 days of pageviews, unique visitors, and top pages right on the overview.
- Your changelog, roadmap, and API reference now localize end to end — the roadmap shows what's actually shipped, and deep links land readers at the right section.
- Ship a complete analytics product on the boilerplate — a tracking snippet, live visitors, page and channel breakdowns, goals, funnels, visitor journeys, alerts, and public share dashboards.
- See which channels actually bring revenue — payments sent through the API or billing webhooks arrive with channel, source, and campaign attached, plus MRR and insight views.
- Reach every analytics surface programmatically — versioned REST endpoints and ready-made MCP tools for agents, all scoped to the workspace.
- Fixed: sign-in requests could fail with a server error — email codes, magic links, and Google sign-in all work again.
- Fixed: navigation links no longer show an underline on hover.
- Next.js
Public product pages and an interactive feature tour
New
- Give your product a public changelog, a curated roadmap, and an API reference that lists endpoints automatically — three new marketing pages, localized and linked in the footer, sitemap, and agent index.
- Tour your product's capabilities in interactive tabs — a new reusable marketing block gives each feature a headline, bullet points, and a product visual, and works fully by keyboard or without JavaScript.
- Next.js
- Expo
- Tauri
A more polished template out of the box
Improved
- Prompt visitors once per session when they reach the end of a page — a new marketing block opens a dialog with your own follow-up links, and it never interrupts a form or another dialog.
- Add theme and language pickers to your site's footer — both menus come built in.
- Sign-in pages no longer render the marketing footer, so account screens stay focused.
- Landing sections now rise in once as visitors scroll, and hero blocks play a short entrance on page load.
- Fixed: exported environment settings like `APP_ENV` now reach your build — production builds no longer fail validation for variables that were actually set.
- Next.js
- Expo
- Tauri
More design options and agent-ready setup
Improved
- Make your product your own with 21 color themes, 17 coordinated styles, and four responsive layouts.
- Build app and marketing pages from 43 reusable blocks with shared controls.
- Set up locally with Docker or Podman, then follow guided VPS paths for Coolify or plain Docker.
- Rerun setup without replacing existing settings or encryption keys.
- Use security and launch checklists to verify authentication, data access, logs, and recovery before calling a deployment ready.
- Security updates cover the app and development tools.
- Next.js
- Expo
- Tauri
Setup and docs built for coding agents
New
- A new `llms.txt` map points coding agents at every doc, prompt, environment variable group, and config file — with a scoped version inside each delivered repo (web, mobile, and desktop).
- A new `docs/agent-setup.md` runbook lets a coding agent set the kit up unattended — fully containerized locally on Docker or Podman, then deployed to a VPS — with checkpoints to verify each phase.
- A ready-to-paste prompt in `prompts/agent-setup.md` drives the whole agent-led setup with the right security defaults.
- Every shipped `llms.txt` spells out the security rules agents must follow — workspace scoping, authentication, secrets handling, row-level security, rate limits, and audit logging.
- Your app now serves `/llms.txt` itself, so products built on the kit are readable by coding agents out of the box.
- Fixed: shipped guide and docs copy no longer carries internal references — upgrade instructions stay generic to the repository you forked or purchased.
- Next.js
- Expo
- Tauri
Safer accounts and easier product customization
Improved
- Stronger safeguards for sign-in, account recovery, and workspace membership.
- Neutral demos with text-only branding are ready for your own product content.
- Fixed: one design-style change now updates both marketing pages and the app.
- Fixed: Windows development and local email previews are more reliable.
- Next.js
- Expo
- Tauri
AWS email and safer setup defaults
Improved
- Send transactional email across web, mobile, and desktop with AWS SDK or IAM SMTP, with a new setup guide.
- A new dependency audit keeps patched package versions verified automatically — dependency and container security checks now run in CI.
- Fixed: agent runs for workspaces using their own AI keys could previously spend the platform's AI budget without a cap — those runs are now blocked up front.
- Fixed: first-time setup now checks the example configuration, so setup failures point at what's actually missing.
- Next.js
- Expo
- Tauri
Clear license terms and a friendlier desktop
Improved
- A LICENSE file and README section now spell out what your purchase covers — build and sell unlimited products, with one seat per developer.
- The desktop app shows a friendly retry screen when it can't reach your server — and a claimed keyboard shortcut no longer stops it from opening.
- Desktop builds are now checked automatically on Windows, macOS, and Linux.
- Scheduled jobs missed while your app was offline now run once on recovery — and each schedule shows how many runs it skipped.
- Next.js
- Expo
- Tauri
Desktop, mobile and a guided setup journey
Improved
- A more complete desktop experience.
- More mobile features, including in-app purchases and richer AI chat.
- Step-by-step documentation takes you from a five-minute first run through each provider's setup.
- Next.js
Security updates
Improved
- Security updates reduce risk for production apps.
- Next.js
A consistent sign-in experience
Fixed
- Fixed: sign-in pages now use your site's selected colors.
- Next.js
Failure alerts and clearer monitoring
New
- Get alerts when background tasks or webhook deliveries fail.
- Follow AI tasks, billing activity, and scheduled work from start to finish.
- Find slow AI tasks and troubleshoot failures more easily.
- Next.js
- Expo
Mobile publishing and customer stories
New
- Prepare the mobile app for Google Play and App Store submission with a new release guide.
- New guides cover in-app purchases, reusable page blocks, the public API, and search visibility.
- Customer story blocks now support ratings and profile links.
- Marketing pages can follow the visitor's chosen design style.
- Next.js
Content, charts, and public pages
New
- Publish articles and reports by subscription tier, with an upgrade prompt for locked content.
- A public License page is available in the footer.
- Public Acceptable Use and Disclaimer pages are available in the footer.
- Line, bar, donut, and KPI trend blocks bring charts to marketing and app pages.
- Schedule content digests for workspace members, including a weekly example.
- Fixed: the floating FAQ panel no longer dims the page behind it.
- Next.js
Nine billing providers, self-hosting docs, and marketing polish
New
- Paddle joins the billing providers — merchant-of-record checkout with per-seat quantities and a hosted customer portal.
- Dodo Payments joins the billing providers — merchant-of-record checkout and customer portal sessions.
- PayPal subscriptions join the billing providers — hosted approval flow and autopay self-service.
- All nine billing providers share one contract — switch with `BILLING_PROVIDER`.
- Fixed: the openai-compatible AI provider now works with real third-party gateways (new-api, LiteLLM, Ollama, vLLM).
- Fixed: structured AI completions now accept schema-wrapped responses from third-party models.
- Fixed: chat replies and other synchronous AI calls now count toward workspace monthly budgets.
- New self-hosting guide: deploy to a cheap VPS with Coolify — build on-box or ship a CI-built image.
- New recipe: add your own `BILLING_PROVIDER` for regional gateways like Midtrans and Xendit.
- Fixed: self-hosted deployments now publish the correct `:8080` port.
- The product frame block gains an app-chrome variant — brand slot, segmented tabs, and an optional status strip.
- Lucide icons now replace text arrows and hand-drawn glyphs across marketing blocks.
- Minimal marketing blocks pick up technical-grid styling — mono uppercase eyebrows, accent ticks, and numbered steps.
- A reduced-motion-safe live status strip joins the minimal showcase — pure CSS, static without JavaScript.
- Minimal marketing sections drop card chrome and decorative hairlines — the product frame stays the only elevated surface.
- Fixed: FAQ answers now animate open and closed.
- The logo-strip block gains an edge-faded marquee variant with pause-on-hover.
- The split FAQ block gains an exclusive accordion mode — a shared `name` opens one answer at a time.
- Fixed: utility pages (showcase, contact, legal) could lose their horizontal centering.
- Next.js
Connected accounts, quotas, and a production scheduler
New
- Connected accounts — link X, Google, or Microsoft via OAuth or plug in an SMTP mailbox — managed under Settings → Connections.
- Usage quotas — per-workspace counters; plans can declare monthly limits.
- A production scheduler — database-backed job schedules via Trigger.dev cron or a guarded tick endpoint.
- The marketing header is now permanently frosted at every scroll position.
- Marketing buttons got a new key-press hover — a downward dip with an accent underline.
- Fixed: canonical, Open Graph, and sitemap URLs now use your real domain on deployed sites.
- Fixed: social share images no longer go missing on pages with their own title or description.
- Next.js
AI agents, more providers, and a minimal design family
New
- OpenRouter joins the AI providers, and a new agents layer lets you pick your framework — AI SDK, Mastra, LangGraph, or OpenAI Agents.
- A built-in MCP server exposes your workspace tools to external agents with scoped API keys.
- Polar and Whop join the billing providers, and transactional email now works with seven email services out of the box.
- Workspaces can attach custom domains with white-label branding.
- Supabase deployment is documented end to end, with provision and doctor commands.
- New kit blocks: tooltip, skeleton loaders, animated ambient backgrounds, and a changelog timeline.
- Every starter repo now ships a generated wiki.
- Updated our login page — fully localized, passwordless, with a smoother back button.
- Theme picks reveal as a spreading circle of color from your click point — instant under reduced motion.
- Rate limits are now shared across server instances through Postgres.
- AI calls can return schema-checked typed JSON with one automatic repair attempt.
- Public, signed-out AI features run under a platform-wide daily spending cap.
- New OTP input block — six digit boxes with paste, SMS autofill, and auto-submit — now powers email-code sign-in.
- Minimal colour pack and Minimal Product style — white paper, hairline structure, pill actions.
- Eight minimal marketing blocks: product hero with framed product UI, ruled steps, feature story rows, ruled comparison, joined pricing panel, split FAQ, centred CTA form, and product frame.
- Purposeful once-only motion across the new blocks — static under reduced motion and without JavaScript.
- Next.js
CMS, commerce, and growth tools
New
- New workspace CMS — write posts, pages, and docs with a draft-to-publish workflow.
- New commerce module — products, optional inventory, and an order lifecycle with refunds.
- Creem joins the billing providers, and checkout can now offer Alipay and WeChat Pay.
- Growth tools — a waitlist section with referral links, plus early-access invite codes.
- A feature board lets members submit and vote on requests — we run it publicly at /feedback.
- Four new color packs and design styles, plus product-grid and data-table kit blocks.
- Turnstile spam protection for contact, newsletter, and sign-in forms.
- First-time setup just works out of the box.
- Next.js
- Tauri
Docs, SEO, and chrome polish
Improved
- Docs gained a Desktop tab, collapsible sidebar groups, and a raw Markdown version of every guide.
- A full SEO pass — canonical URLs, structured data, generated social cards, sitemap, and hreflang.
- Chrome polish: no page-edge overscroll, themed scrollbars, and a localized header on every page.
- Tauri
Tauri desktop app
New
- A Tauri desktop shell brings macOS and Windows apps built on the same codebase.
- The All Platforms bundle now covers web, mobile, and desktop.
- Next.js
Legal, contact, and showcase
New
- Privacy and terms pages.
- A consent gate for analytics.
- Contact and newsletter forms.
- A showcase page for products built on the kit.
- Next.js
Marketing homepage
Improved
- A new black editorial homepage with authored motion and real feature stories.
- Next.js
- Expo
Settings and production readiness
New
- Account settings for your profile.
- Durable AI task recovery.
- A reference UI for production deployments.
- Next.js
- Expo
Local development, end to end
New
- The full product loop runs locally — register, get entitlements, run an AI task, receive the completion email.
- Everything works on built-in local adapters — no credentials needed.