Full-stack App Kit

Start with a connected React/Vite app, Express API, shared Zod contracts, typed client, PostgreSQL, Redis, account screens, admin tools, and an owned Project module.

Stateful JWT Rotation

Issues short-lived access tokens and rotating refresh tokens backed by Redis. Reused or concurrently refreshed tokens are automatically rejected.

Four Focused Presets

Choose JWT-only, email/password, password + OAuth, or the complete fullstack workspace. The wizard only asks for configuration each preset can honor.

Production-Ready Defaults

Helmet headers, rate limiting, IP whitelisting, role-based access control, and a generated THREAT_MODEL.md. All included out of the box.