Vibe Stack
A Next.js 15 and Supabase boilerplate shipped with architecture rules that block AI coding assistants from generating insecure auth, deprecated imports and broken Next.js 15 patterns.
The free, open-source repository includes five architecture rules covering common AI-generated mistakes: banning the insecure getSession() in favor of getUser(), preventing synchronous params access, blocking deprecated Supabase auth-helper imports, discouraging unnecessary 'use client' use, and enforcing Row Level Security on every table. The rules load automatically when the project is opened in Cursor.
The boilerplate itself includes Next.js 15 with the App Router, React 19 and TypeScript in strict mode, Supabase SSR authentication with the PKCE flow, a working signup, login and email-confirmation flow, error boundaries, and a custom 404 page.
A paid tier adds a larger set of rules and a fuller agentic-development system on top of the same free foundation.