Build and operate Sushi SaaS
Choose a task for exact setup and verification steps. When you need to understand a choice or decide what to change, use Guides.
Start here
Quick Start
Customize and start the web app, admin console, Content Studio, worker, PostgreSQL, Redis, and local object storage with one guided workflow.
Customize Your Product
Set the starter's identity, languages, visual preset, theme, legal details, and optional systems before you build product-specific features.
Architecture and Error Contracts
Extend Sushi SaaS without bypassing its data, authorization, or user-safe error boundaries.
Build the product
Database and Migrations
Choose your PostgreSQL deployment and ship Drizzle schema changes without breaking the running application.
Customer Authentication
Choose the sign-in methods your customers need and secure the separate operator console with MFA and platform roles.
Organizations, Teams, and Tenancy
Decide how customers collaborate, then adapt the shipped organization roles, invitations, seat limits, and tenant boundaries.
Plans, Limits, and Entitlements
Turn the shipped Free, Plus, and Max catalog into your pricing model without scattering tier checks through the application.
Stripe Billing
Connect your Stripe catalog, choose a safe subscription-change policy, and verify every payment has one local effect.
Organization Credit Ledger
Choose how your product meters usage, then grant, spend, expire, and refund pooled organization credits safely.
Private Storage Uploads
Configure private S3-compatible uploads with policy, entitlement, quota, checksum, and durable deletion controls.
Content Studio and Marketing Email
Run the separate Payload authoring app, keep customer data in the SaaS, and launch consent-aware marketing campaigns safely.
Operate and launch
Durable Jobs and Readiness
Operate the PostgreSQL job queue, cron runner, retries, deduplication, liveness and dependency-readiness probes.
Testing and CI Contracts
Use the starter's test tiers, real infrastructure suite, Playwright flow, coverage ratchet, and build gates without weakening their guarantees.
Transactional Email
Configure Resend, React Email templates, safe local auth links, and durable delivery jobs.
Observability and Structured Logging
Correlate redacted logs, OpenTelemetry traces, queue readiness, and actionable alerts across web and workers.
Slack Operations Notifications
Route operational events to Slack through the durable job queue without leaking sensitive data.
Analytics and Consent
Decide whether to enable Google Analytics or AdSense, configure consent safely, update your legal disclosures, and verify that no script loads early.
Account Export and Erasure
Configure privacy data inventory, authenticated exports, delayed account erasure, provider cleanup, pseudonymization, and cancellation safeguards.
Backups, Retention, and Restore Drills
Create verifiable PostgreSQL dumps, restore only into guarded scratch databases, and apply explicit retention without touching financial records.
Containers and Launch Readiness
Build the web, admin, worker, and Content Studio images, keep migrations separate, and run the complete production launch audit.
Deployment and Security Checklist
Deploy the web and admin apps with explicit migrations, cron, readiness, trusted networking, and production security controls.
Optional product examples
Five-Credit Image Generation Workflow
Trace the starter's complete asynchronous paid task through authentication, entitlements, idempotent credits, durable work, private storage, and failure compensation.
Text-to-Video Task Pattern
Extend the opt-in text-to-video demo with organization entitlements, quotas, credits, idempotency, and refunds.
Reservations Feature
Enable the opt-in reservation workflow with concurrency-safe holds, Stripe checkout, email, and calendars.
Configure Referrals and Affiliate Rewards
Decide whether the referral workflow fits your product, configure attribution and commissions, close its operational gaps, and test it end to end.
Admin console
Admin Console Setup and Access
Run and deploy the separate admin application, promote operators, require MFA, and configure its dedicated origin.
Admin Console Pages and Operations
Understand every shipped admin page, its operational purpose, and the safety rules around billing, moderation, and writes.