Accounts and security
Email and password with verification, GitHub and Google, two-factor and passkeys, session management, rate limits.
Starterdough
Build once. Serve anywhere. Web, PWA, desktop, mobile, self-hosted.
What Starterdough is
Section titled “What Starterdough is”Starterdough is a Bun-native SaaS starter built on Svelte. It ships auth, organizations, teams, workspaces, billing, an admin surface and a document pipeline with metered AI jobs. Build once, then serve it as a website, an installable PWA, a desktop app, a mobile app, or a self-hosted stack.
It has one architectural rule: a single source of truth over HTTP. The SvelteKit app, the Tauri shells, the Astro sites and scripts are all thin clients of one API (Hono + oRPC on Bun). They share the same auth, the same procedures and the same OpenAPI document. Only the API talks to Postgres.
Organizations, teams, workspaces
The organization is the tenant and billing entity. Workspaces hold the product data. Roles are defined once and enforced in the API. Every mutation is audited.
Billing and admin
Stripe with the organization as the customer and seats that follow members. A platform admin surface for users, tenants, feature flags and system health.
Documents and AI jobs
Presigned uploads with a per-workspace storage quota, a Postgres job queue that extracts, summarizes and indexes them, semantic search over pgvector, OCR for images, and work metered in credits against the plan.
Anywhere
One SvelteKit codebase for Node, Cloudflare Workers or a static SPA. Tauri 2 shells with no IPC. Docker Compose with Caddy and Tailscale for your own server.
Where to go
Section titled “Where to go”QuickstartBun, Docker and a handful of commands to a running API and app.
ConfigurationEvery environment variable, what it switches on, and what happens when it is empty.
GuidesAuthentication, organizations, billing, admin, documents and jobs, the frontend platform, serve anywhere, operations.
API: RPC and RESTHow the typed client and the REST endpoints relate: every procedure, its errors and its paging, and where the OpenAPI document lives.
ArchitectureThe diagram, the repository map and the hard rules.
CommandsThe root scripts: dev, check, test, build, database, auth schema, admin bootstrap, demo data, rename and the licence audit.