We use cookies and similar technology to understand how the product is used. Accept to help us improve, or reject to opt out — your choice is remembered across sessions.
This is not a mockup of ShipKit. It is ShipKit, deployed from a clean checkout, with auth, billing and an admin behind it.
Shared account, full rights. The database is wiped and reseeded nightly, so anything you break is temporary.
Better Auth with a role column the API actually reads. Email and password, OAuth providers, one-time codes, and recovery.
const session = await auth.api.getSession({ headers })
if (session?.user.role !== "admin") redirect("/login")Polar checkout and webhooks land here, and the rest of the app asks this package rather than reading a subscription row.
await can(user, "project.create")
Drizzle against Postgres. The same types reach the API handler and the React component without a generation step.
export const projects = pgTable("projects", {
ownerId: text("owner_id") .references(() => user.id),
})A separate process on the same queue, so a slow export or a retrying webhook never holds an HTTP response open.
# one command brings the whole stack up
bun run setup
# docker compose, db:push, db:seedFifteen more ship alongside them. The count is 18 packages in all, three of which the four cards above already named.