Skip to content
supastack
Browse documentation

For AI agents: fetch the complete documentation index at /llms.txt, the full documentation corpus at /llms-full.txt, the agent skill at /skill.md, or this page as Markdown at /docs/desktop/release.md (or send Accept: text/markdown).

Bundle and release

Produce installers and keep release evidence separate from a successful build.

Beginner walkthrough

Prerequisites: Finish Desktop local setup, including Rust and the operating-system build tools. Stop the Tauri development process before building an installer; leave the Web backend running. Run each check below from the repository root and wait for it to finish before running the next. The filtered package commands work in Desktop-only and All Platforms checkouts.

Quick terms: a workspace is one team's separate users, data, and settings. The server is the trusted backend; keep provider keys out of browser and phone code. A migration is a versioned database change that creates or updates tables. An AI model is the engine that answers; the model catalog is the server's list of available model IDs and prices. A provider is an outside service such as an AI, email, or billing service. An entitlement is a grant that lets a workspace use a feature. A webhook is a message one service sends to another service's URL.

1. In a local branch, ask your coding agent to inspect apps/desktop/src-tauri/tauri.conf.json and set the product identifier, app name, icons, and backend URL to values you own. Use a public HTTPS backend URL for release builds.

2. From the repository root, run the Desktop package checks below. Before check:release-config, set SUPASTACK_APP_URL in this terminal using the operating-system command in Desktop local setup; the public HTTPS backend must be running, and the app identifier must be your own.

3. A successful build does not sign, notarize, or publish an installer; if Rust or a system library is missing, finish Desktop local setup.

For custom code, start with the supplied prompts/README.md and copy the closest prompt: prompts/new-app-screen.md for an app screen or prompts/new-landing-page.md for a public page. For server, database, or provider work, give your coding agent this guide's task and ask it to read AGENTS.md, .ai/PROJECT_CONTEXT.md, and matching .ai/ mirrors; inspect the exact source files named here; list files and checks before editing; preserve workspace ownership and server-only secrets; and show you the diff. Tell it the behavior you want, input and output fields, allowed roles, expected success and errors, and the test account, provider, or device. Use sample values; never paste a real secret.

corepack pnpm --filter @supastack/desktop typecheck
corepack pnpm --filter @supastack/desktop test
corepack pnpm --filter @supastack/desktop check:release-config
corepack pnpm --filter @supastack/desktop build

Configure the product shell

Review src-tauri/tauri.conf.json, Cargo metadata, capabilities and platform identifiers. Replace app icons through the shared asset process and set the intended backend URL at build/runtime. The hosted web app must already be deployed and reachable.

Run the native build gate

These package commands run Rust typecheck and tests, validate release settings, and build the Tauri installer. Signing and distribution configuration depend on the target platform and your account/certificates; do not store signing material in source.

corepack pnpm --filter @supastack/desktop typecheck
corepack pnpm --filter @supastack/desktop test
corepack pnpm --filter @supastack/desktop check:release-config
corepack pnpm --filter @supastack/desktop build

Verify the installer on the target OS

Check clean install, launch, backend reachability, auth, menus/tray, hotkey registration, second instance, deep links, offline retry and uninstall. Verify each supported OS separately. A local build does not prove signed or notarized commercial distribution; signing configuration, an updater feed, and release automation are not included.

Setup and configuration

Run corepack pnpm --filter @supastack/desktop check:release-config before preparing an installer. It checks that SUPASTACK_APP_URL is credential-free HTTPS on a public host and that the Tauri identifier is product-specific; the check is opt-in and does not block local development.

corepack pnpm --filter @supastack/desktop build runs tauri build. The bundle targets in tauri.conf.json produce the installer formats available on the host OS — build on each OS you ship. Artifacts land under apps/desktop/src-tauri/target/release/bundle/.

productName, version, and identifier live in tauri.conf.json — bump the version there before cutting a release. Regenerate icons with corepack pnpm --filter @supastack/desktop icons, which rewrites src-tauri/icons from icon-source.png.

corepack pnpm --filter @supastack/desktop check:release-config
corepack pnpm --filter @supastack/desktop icons
corepack pnpm --filter @supastack/desktop build
# artifacts: apps/desktop/src-tauri/target/release/bundle/

Implementation workflow

Unsigned builds install locally but trigger OS trust warnings. Code signing and Apple notarization belong in your release configuration — provision certificates through your own secret store, never in the repo.

Bake the production SUPASTACK_APP_URL into release builds so installed shells point at the deployed web app rather than localhost.

Verification and troubleshooting

Install the produced bundle on each target OS and record the build, OS, and app URL used for acceptance. Verify launch, the loaded deployment, tray and hotkey behavior, and sign-in persistence — a completed tauri build alone is not release evidence.

If you want to continue setup, read Code signing.

Frequently asked questions

14 questions

What is supastack?

supastack is a modular foundation for building AI-powered SaaS products. It brings together common infrastructure so you can focus on product-specific features.

Does it support web and mobile?

Yes. supastack includes Next.js and Expo apps as starting points for web and mobile experiences.

What authentication is included?

Better Auth covers email OTP, magic-link, and social sign-in; email/password stays available at the API layer and through the Auth.js credentials engine for products that need it. Personal workspaces are provisioned with the account so product records stay scoped from day one.

How does it support AI?

supastack includes configurable multi-provider AI, usage tracking, budgets, and encrypted bring-your-own-key support.

How are subscriptions handled?

For products built on the kit, Stripe billing, subscriptions, and entitlements form the paid-access foundation. Provider secrets stay server-only.

Where does my product-specific code live?

Product-specific features remain in a separate codebase while the product configures and integrates supastack’s foundation modules.

How does supastack pricing work?

The kit is a one-time purchase with lifetime updates: One Platform at $249 (temporary launch price, $100 off the regular $349) — your pick of Next.js (Web), Expo (iOS & Android), or Tauri (macOS & Windows Desktop) — or the All Platforms Bundle at $499 (temporary launch price, $100 off the regular $599) with every platform and the full monorepo, plus $75 per extra developer seat. No kit subscription. Checkout on this site delivers your license key by email, with repository access via GitHub invite.

How do workspaces scope my data?

User-owned records are scoped by workspaceId. Identity, entitlements, AI usage, billing events, and audit entries stay inside the personal workspace boundary.

How do background jobs work?

Trigger.dev is the explicit job runtime. The JobRunner contract only promises enqueue, status, and cancel—workflow semantics stay Trigger.dev-specific and explicit.

How is email different from outreach?

Transactional email covers product workflows such as completion notices. Cold outreach and campaigns are product concerns outside this kit’s email module.

How do mobile purchases work?

Mobile includes native purchases and restore through RevenueCat, with access verified by your server. Configure the store accounts and complete device testing before release. Web billing remains separate.

Where do AI provider keys live?

Bring-your-own-key credentials are encrypted and stay server-only. Keys are redacted from logs; usage and budgets remain visible at the workspace level.

Which payment methods does checkout accept?

The Stripe-hosted checkout accepts cards and can also offer Alipay and WeChat Pay once those wallets are enabled on the Stripe account — handy for buyers in China. Wallet authorizations confirm asynchronously, so the license page updates as soon as the payment clears.

Can I get a refund?

After you've got access to the repository, supastack is yours forever, so it cannot be refunded. But rest assured, you get the complete source code with lifetime updates to build and ship unlimited products for yourself or clients. You just cannot resell the code or redistribute the repository as a starter kit or template.

EN
Theme