# Supacharger Documentation > Documentation for building, configuring, deploying, and operating Supacharger applications with Next.js, Supabase, Stripe, and Vercel. Use this index to locate the smallest relevant source before answering a question. Start with Getting Started for product orientation and the Full Setup Guide for deployment. Prefer the individual Markdown pages linked below over rendered HTML. Treat application-specific configuration, hosted Supabase settings, and local Supabase configuration as separate concerns. ## Table of Contents - [Transactional email templates](https://supacharger.dev/docs/Marketing-and-Analytics/email-templates.md): Configure consistent Supabase Auth email templates for confirmation, recovery, invitations, and security notifications. - [Roles and Organisations](https://supacharger.dev/docs/Roles%20and%20Orgs.md): :::warning Legacy stub - [supacharger-cli](https://supacharger.dev/docs/cli.md): Run the read-only alignment check from an application root: - [Getting started](https://supacharger.dev/docs.md): - [Full Setup Guide](https://supacharger.dev/docs/guides/setup-wizard.md): Connect a locally working Supacharger application to hosted Supabase and Vercel, configure authentication and email, and verify the production depl... - [1. Before you begin](https://supacharger.dev/docs/guides/hosted-setup/before-you-begin.md): Confirm the local Supacharger baseline and decide which hosted projects and authentication policy this deployment will use. - [2. Connect hosted Supabase](https://supacharger.dev/docs/guides/hosted-setup/connect-hosted-supabase.md): Link Supabase CLI to the correct project, review hosted migrations, and enable the custom access-token hook. - [3. Configure environment variables](https://supacharger.dev/docs/guides/hosted-setup/environment-variables.md): Configure local and Vercel environment variables while keeping Supabase secret keys server-only. - [4. Deploy and establish URLs](https://supacharger.dev/docs/guides/hosted-setup/deploy-and-urls.md): Redeploy with production variables, establish the canonical origin, and configure Supabase Auth redirect URLs. - [5. Configure authentication policy](https://supacharger.dev/docs/guides/hosted-setup/authentication-policy.md): Align Supabase Auth provider, password, OTP, and account-change settings with the Supacharger application configuration. - [6. Configure production email](https://supacharger.dev/docs/guides/hosted-setup/production-email.md): Connect custom SMTP, authenticate the sending domain, and configure Supabase Auth email rate limits. - [7. Install email templates](https://supacharger.dev/docs/guides/hosted-setup/email-templates.md): Install hosted Supabase Auth templates that match the configured OTP, link, recovery, invitation, and security flows. - [8. Verify production](https://supacharger.dev/docs/guides/hosted-setup/production-verification.md): Test the complete hosted authentication journey, inspect logs and advisors, and record production readiness. - [Account settings](https://supacharger.dev/docs/Application%20Development/account-settings.md): Supacharger provides a managed account details page at `/account`. It loads the signed-in user's canonical account summary, updates names and the c... - [Authentication and route protection](https://supacharger.dev/docs/Application%20Development/authentication.md): Supacharger uses Supabase Auth with `@supabase/ssr` and the Next.js 16 `proxy.ts` convention. Proxy refreshes the session and makes optimistic page... - [Connecting Specdrive](https://supacharger.dev/docs/Application%20Development/connecting-specdrive.md): Specdrive can guide work in either an existing codebase or a new Supacharger application. In both cases, keep Supacharger Core as the reusable sour... - [Database, profiles, and storage](https://supacharger.dev/docs/Application%20Development/database-profiles-and-storage.md): Supacharger keeps internal data in the unexposed `app` schema. Browser-callable RPCs live in `api`; trusted service-only Stripe, webhook, and maint... - [Deleting users](https://supacharger.dev/docs/Application%20Development/deleting-users.md): This capability is under development. Supacharger does not yet expose a managed account-deletion action because deletion policy is a product and co... - [Deploy and production readiness](https://supacharger.dev/docs/Application%20Development/deploy.md): Deploy a configured Supacharger application to Vercel, connect it to hosted Supabase, and complete operational checks before public launch. - [Deployment Checkup](https://supacharger.dev/docs/Application%20Development/deployment-checkup.md): :::warning Merged page - [Edge Functions](https://supacharger.dev/docs/Application%20Development/edge.md): Supacharger Edge Functions are TypeScript services deployed globally through Supabase. Keep their source under `supabase/functions/`, review it wit... - [Extend](https://supacharger.dev/docs/Application%20Development/extend.md): You can extend with prebuilt functionality. - [Git](https://supacharger.dev/docs/Application%20Development/git.md): Out of the box, Vercel's Hobby plan deploys `main` or `master` to production. - [Application configuration](https://supacharger.dev/docs/Application%20Development/global-variables.md): Application settings live in the developer-owned `src/supacharger.config.ts`. The CLI-managed `src/supacharger/supacharger-config.ts` is only a sta... - [Helpful random bits](https://supacharger.dev/docs/Application%20Development/helpful.md): :::warning Stub note - [Input validation](https://supacharger.dev/docs/Application%20Development/input-validation.md): Validate every untrusted value at the server boundary that acts on it. Browser validation gives people fast feedback, but it can be bypassed and Ty... - [Localisation](https://supacharger.dev/docs/Application%20Development/localisation.md): Supacharger uses [`next-intl`](https://next-intl.dev/docs/getting-started/app-router) with the Next.js App Router and **without locale-based routin... - [Login redirects and subscription paywalls](https://supacharger.dev/docs/Application%20Development/login-redirects-and-paywalling.md): Supacharger has three related settings, but they do different jobs: - [Account security and TOTP MFA](https://supacharger.dev/docs/Application%20Development/mfa-and-security.md): The managed `/account/security` page shows the user's Auth providers and supplies real email, password, and authenticator-app controls. Email and p... - [Mobile login verification with deep links](https://supacharger.dev/docs/Application%20Development/mobile-auth-deep-linking.md): Supacharger supports verified HTTPS links for mobile authentication. iOS calls these Universal Links; Android calls them App Links. The same email ... - [Organisation management](https://supacharger.dev/docs/Application%20Development/organisations.md): Supacharger installs an optional, private organisation backend in every aligned application. Set `ORGANISATIONS.ENABLED` to expose product routes; ... - [Roles and custom claims](https://supacharger.dev/docs/Application%20Development/roles-and-custom-claims.md): Supacharger separates three concepts: - [Auth email and SMTP](https://supacharger.dev/docs/Application%20Development/smtp.md): Configure a production SMTP provider for Supabase Auth and protect delivery reputation. - [Styling](https://supacharger.dev/docs/Application%20Development/styling.md): Supacharger uses Tailwind CSS as its styling foundation. The root layout imports one CSS entrypoint: - [UI Helpers and components](https://supacharger.dev/docs/Application%20Development/ui-helpers.md): :::warning Stub note - [Database features](https://supacharger.dev/docs/Supabase/database-features.md): Within your Supabase database, we have provided two PostgreSQL functions that can help you defining RLS policies and alter data on triggers. - [Formatting](https://supacharger.dev/docs/Supabase/formatting.md): :::warning Legacy note - [Security Tuneup](https://supacharger.dev/docs/Supabase/security-tuneup.md): :::warning Idea note - [Tests](https://supacharger.dev/docs/Supabase/tests.md): Supacharger comes with some database unit tests, which can be found in the [tests/database](https://github.com/glowplugstudio/supacharger/tree/main... - [Typing](https://supacharger.dev/docs/Supabase/typing.md): :::warning Thin note - [Stripe setup and operations](https://supacharger.dev/docs/Billing/stripe.md): Supacharger uses Stripe-hosted Checkout and Customer Portal with an account-based billing model. Stripe is authoritative; Supabase stores a secured... - [Billing accounts, subscriptions, and entitlements](https://supacharger.dev/docs/Billing/subscription-payments.md): Supacharger separates identity, billing, and application access. - [Subscription trials](https://supacharger.dev/docs/Billing/trials.md): Stripe Price data may include a default trial period, and trial subscriptions are projected with exact Stripe timestamps. - [Agent-readable documentation](https://supacharger.dev/docs/Marketing-and-Analytics/agent-discovery.md): How Supacharger Docs publishes XML discovery, llms.txt, llms-full.txt, and raw Markdown pages for search engines and AI agents. - [Brevo](https://supacharger.dev/docs/Marketing-and-Analytics/brevo.md): Configure Brevo transactional email and optional marketing automation for a Supacharger project. - [Supabase Auth template examples](https://supacharger.dev/docs/Marketing-and-Analytics/email-templates/free-supabase-email-templates.md): Minimal OTP and link templates that can be audited before product branding is applied. - [SEO, document metadata, and analytics](https://supacharger.dev/docs/Marketing-and-Analytics/seo-and-analytics.md): Supacharger installs `src/app/layout.tsx` as a developer-editable root-layout template. It is explicitly excluded from CLI-managed updates because ... - [Deploy to Vercel](https://supacharger.dev/docs/guides/deploy.md): Deploy an already configured Supacharger application to Vercel and connect it to hosted Supabase. - [Local development with a coding agent](https://supacharger.dev/docs/guides/local-agent-development.md): Prepare a local Supacharger workspace for Codex or Claude Code, give the agent reliable project context, and complete a safe first setup. - [Updates](https://supacharger.dev/docs/guides/updates.md): Update applications from an immutable, reviewed Core tag or commit. Run the CLI plan first, inspect exact replacements, merge targets, new forward ... - [Skills](https://supacharger.dev/docs/skills.md): Supacharger includes agent skills under `.agents/skills/`. A skill is a focused set of engineering instructions and supporting references that help... - [Supabase Auth coverage](https://supacharger.dev/docs/Application%20Development/authentication-coverage.md): Compare the Supabase Auth methods and OAuth providers that Supacharger exposes in its shared authentication journey. - [Anatomy & Folder Structure](https://supacharger.dev/docs/Application%20Development/folderstructure.md): Supacharger uses four ownership classes. The colours below are labels as well as visual cues, so the tree remains understandable without colour.