agentship-lite — Next.js SaaS模板

SHA-256: 40ac86dfb52d35788e65e6f7bcf426accce5ee3a95f98b2dfc23acce44c32e8b

2026-10-03T07:21:42.250Z

# AgentShip Lite

**A free, open-source Next.js 16 + Supabase starter built to be extended by AI coding agents.**
*By [Sortie Labs](https://sortielabs.gumroad.com/l/yofswq) — small studio shipping tools for people who build with AI.*

You're going to build your SaaS by prompting Claude Code, Cursor, or another agent anyway.
Generic starters fight that — undocumented conventions, security rules that live in the
founder's head, no way for the agent to check its own work. AgentShip is structured for it.

This is the **free Lite edition**: auth, database, and the full agent-readiness layer.
Stripe billing and the billing playbooks are in **[AgentShip Pro →](https://sortielabs.gumroad.com/l/yofswq)**.

> ⭐ **If this saves you time, star the repo** — it helps other builders find it.
> New to building with agents? Read the guides: [build an MCP server in TypeScript](https://sortielabs.com/guides/build-mcp-server-typescript) · [a Next.js SaaS an agent can extend](https://sortielabs.com/guides/nextjs-saas-boilerplate-ai-agents).

## What's inside

| | Lite (free) | Pro |
|---|:---:|:---:|
| Next.js 16 + Tailwind v4 + TypeScript | ✅ | ✅ |
| Supabase magic-link auth + session middleware | ✅ | ✅ |
| RLS-locked `profiles` table + migration | ✅ | ✅ |
| Protected dashboard | ✅ | ✅ |
| `AGENTS.md` / `CLAUDE.md` agent rules | ✅ | ✅ |
| `scripts/verify.sh` typecheck+lint+build gate | ✅ | ✅ |
| "Add a protected page" playbook | ✅ | ✅ |
| **Stripe subscription checkout** | — | ✅ |
| **Signature-verified Stripe webhook + plan gating** | — | ✅ |
| **"Add a paid plan" + "webhook event" playbooks** | — | ✅ |
| **Commercial license (unlimited client projects)** | MIT | ✅ |

**[Get AgentShip Pro — $99 →](https://sortielabs.gumroad.com/l/yofswq)**

## Quickstart (~15 min)

1. `npm install && cp .env.example .env.local`
2. Create a free Supabase project → paste URL + anon key into `.env.local` → run
   `supabase/migrations/0001_profiles.sql` in the SQL editor → enable Email (magic link).
3. **Fix the magic-link email template** (don't skip): Authentication → Email Templates →
   *Magic Link* → change the link to
   ```
   {{ .SiteURL }}/auth/callback?token_hash={{ .TokenHash }}&type=email
   ```
   The default `{{ .ConfirmationURL }}` uses a PKCE code that only works in the same browser
   that requested it — users who tap the email on their phone (or whose mail app opens an
   in-app browser) get bounced back to the login screen. The `token_hash` link works anywhere.
4. `npm run dev`, sign in at `/login`, land on the protected `/dashboard`. To properly test
   the magic link, open it in a *different* browser than the one you requested it from.
5. Ship: `vercel` (add the same env vars in Vercel).

## Why "agent-ready"?

- **`AGENTS.md` / `CLAUDE.md`** — working rules your agent follows: architecture map, security hard rules, async-params gotchas.
- **`playbooks/`** — step-by-step recipes written as agent prompts.
- **`scripts/verify.sh`** — one command the agent rules require after every change, so regressions surface immediately.
- **Security in the structure** — RLS on by default, server-side auth checks, secrets never exposed to the client.

## License

MIT — see [LICENSE](LICENSE). Build anything with it.
The Pro edition ships under a commercial license (unlimited projects; no resale as a starter).