The SaaS Engine for Serious Engineers.
We spent 1,000+ hours writing, testing, and hardening the foundation—so you can build alone like a Pro, and scale to a Team without a rewrite. Deploy a Hexagonal backend, React web app, and Native Electron Desktop from one monorepo, on Day 1.
npx create-bslt-app
Built for
- Solo founders and small teams shipping SaaS products
- Devs who can build features but hate rebuilding auth/billing/jobs
- Apps that need background jobs, webhooks, and audit logs
- Teams who want web + desktop from one codebase
Not for
- Throwaway MVPs where speed matters above everything
- Teams committed to fully-managed dependencies everywhere
- Non-technical founders looking for no-code solutions
- Marketing sites or content-only products
Built With
The Infrastructure Gap
Most startups die building the foundation. BSLT bridges the gap between "Hello World" and "Production Ready."
DIY Approach
Glue libraries together, debug webhooks for weeks. Reinvent the wheel. Ship nothing.
The BSLT Standard
Inherit a production-ready Reference Architecture. Auth, billing, and jobs are already wired. You write business logic.
Choose Ownership
When It Matters.
Managed services are great for speed early. Ownership helps when you need cost control, portability, or deeper customization. BSLT gives you both options—start managed, migrate to self-hosted when ready. BSLT gives you that architecture on Day 1.
The SaaS Trap
"The Wrapper"Fast to start, but costs and constraints can grow. Consider the tradeoffs as you scale.
- Tied to specific vendors
- Unpredictable pricing spikes
- Data exists in black boxes
- Harder to migrate as you scale
The DIY Slog
"Refactoring Hell"You build the MVP, then spend 4 months refactoring because you skipped the infra.
- 2-6 months to MVP
- Spaghetti code architecture
- Zero documentation
- "We'll fix the tests later"
The BSLT Standard
Ownership-First ArchitectureA complete foundation with 5,000+ tests, full type safety, and provider-swappable infrastructure.
- Internal Package Architecture
- Dedicated Media & Audit Engines
- Terraform & Docker Ready
- Native Electron Desktop
14 Production Modules.
Day One.
Auth, Billing, Media, Search, Admin, Desktop—all production-ready and documented. You aren't buying a starter kit; you're acquiring a complete product foundation.
Hexagonal Core
Business logic isolated from infrastructure. Swap S3 for local storage without touching your domain code.
Optimistic Data Engine
Offline-first mutation queue. UI updates instantly; sync, retry, and conflict resolution handled automatically.
mutate()
IndexedDB
→ Server
Works offline. Syncs when online.
Web + Desktop
90% code reuse. Ship a PWA and a signed Electron .dmg/.exe from a single React codebase.
Complete Auth System
Password, Magic Link, and OAuth (Apple, GitHub, Google). JWT rotation, lockout protection, and audit logging built-in.
Billing Integration
Production-ready Stripe and PayPal. Webhooks, subscription management, and an admin billing dashboard included.
Durable Job Queue
PostgreSQL-backed job queue with retries, scheduled jobs, and an admin monitoring dashboard. No Redis or external services required.
Full Admin Panel.
Day One.
Don't write SQL queries to ban users or check job statuses. BSLT ships with a production-ready operations dashboard.
Security Audit
View failed login attempts, potential attacks, and banned IPs in real-time.
SecurityEventsPage.tsx
Job Monitor
See your Postgres Job Queue health. Retry failed emails or processing tasks with one click.
JobMonitorPage.tsx
User Management
Impersonate users, manage subscriptions, and handle support without touching the database.
UserListPage.tsx
Built for the
Growing Team.
Usually, velocity drops as headcount grows. BSLT breaks that law. Our architecture uses Contract-Driven Development and Automated Governance to let frontend and backend teams work in parallel without collisions.
Parallel Velocity
Stop saying "Is the API ready yet?"
Define the interface in packages/contracts first.
The Backend team builds the implementation. The Frontend team builds the UI using mocked types.
Zero blocking dependencies.
Automated Governance
You can't review every PR. BSLT's tooling/ scripts enforce architectural boundaries automatically.
Strict rules like "UI cannot import Database code" are checked at compile time.
The architecture protects itself.
useVirtualScroll()
@param itemHeight - Fixed height of row
@returns { scrollTop, visibleItems }
Instant Onboarding
100% JSDoc coverage and collocated tests (file.ts + file.test.ts) mean the code explains itself.
A new hire can understand the business logic of modules/billing by reading the spec, not by pestering the founder.
Full Source Access.
No Hidden Dependencies.
We use focused internal libraries instead of heavy frameworks. You can read, modify, and extend every line of code.
The 1kb Router
Zero dependencies. Standard History API under the hood.
Our 150-line router in packages/ui/router uses the standard History API—and if you prefer react-router, swap it in 20 minutes.
Native Postgres Queue
No Redis required. We implemented a transactional job queue directly in Postgres (infrastructure/jobs).
Zero infrastructure overhead for background tasks.
Built-in Auth
Native JWT implementation with Rotation, Reuse Detection, and Family Tracking. Use it standalone, or integrate with Auth0/Clerk if you prefer managed auth.
Headless UI System
23+ Custom Hooks like useVirtualScroll and useOptimizedMemo.
A complete component library using CSS Variables for zero-runtime overhead.
Engineering Standards,
Not Shortcuts.
Every line reviewed. Every edge case tested. Every type enforced.
Strict Type Safety
End-to-end TypeScript with zero any escapes. API changes break at compile time.
Zod Validation
Runtime schema validation at every boundary. Invalid data never touches your business logic.
Strict ESLint
200+ rules enforced. No eslint-disable, no @ts-ignore. Clean code by default.
5,000+ Tests
Comprehensive unit, integration, and E2E coverage across all modules.
The "Day 1" Spec Sheet
Most starter kits skip these. We didn't.
- Complete Auth: Password, Magic Link, OAuth (Apple, GitHub, Google).
- Billing Ready: Stripe + PayPal providers with webhook handlers.
- Job Queue: PostgreSQL-backed durable queue with scheduled jobs.
- Admin Dashboard: User management, billing, jobs, security events.
- Realtime: WebSocket PubSub with subscription management.
- Email System: SMTP provider with templating engine.
- Push Notifications: Web Push via FCM with subscription management.
- Media Pipeline: FFmpeg, image optimization, secure streaming.
- Search Engine: SQL full-text + Elasticsearch provider swap.
- Rate Limiting: Token bucket with endpoint-specific presets.
- Security Hardened: JWT rotation, account lockout, audit logs.
- Infra as Code: Terraform for DigitalOcean + GCP, Docker, Caddy.
- CI/CD Pipelines: GitHub Actions for deploy, rollback, security scans.
- Type-Safe IPC: Secured Electron bridge (
electron/ipc).
Zero-Config Component Catalog
Storybook is heavy. We built a native Component Catalog at /demo that lives inside your app.
Document your UI components in the same environment they run in. Zero setup.
Self-Healing Config
Stop fighting tsconfig.json paths.
Our tooling/sync scripts automatically generate path aliases and references whenever you create a new package.
The Repository Pattern
We don't leak SQL queries into your API routes.
All data access is abstracted in packages/db/repositories.
Clean, testable, and refactor-proof.
Architecture
Read by Agents.
We optimized the file structure for LLMs.
Includes .claude/CLAUDE.md context files, Architecture Decision Records, and rigorous typing.
Your AI agent (Cursor/Windsurf/Claude Code) won't get lost. It knows exactly where to put code because we documented the map.
Invest in Infrastructure
One purchase, lifetime ownership.
You are acquiring millions in R&D for the price of a laptop.
- Everything in Standard
- Electron Desktop App
- Multi-Tenancy (Teams)
- RBAC & Audit Logs
- Unlimited Commercial Projects
- Client License Transfer (agency work)
- White-label (remove branding)
- Private Discord channel
- 1-hour onboarding call
- Everything in Agency
- White-glove setup
- Custom integrations
- 4-hour architecture review
Free & Open Source
Not ready to commit? Start with the community edition.
The basic template includes the core monorepo structure, auth scaffolding, and development setup. Upgrade anytime—pay the difference to unlock Electron, multi-tenancy, and premium infrastructure.
Questions?
What tech stack does BSLT use?
TypeScript everywhere: React + Vite for the frontend, Fastify for the API, PostgreSQL with Drizzle ORM, and Docker for local development. All wired together in a Turborepo monorepo.
Can I use this for client projects?
Yes! Your license allows unlimited projects for yourself or your clients. The only restriction is you can't redistribute BSLT as a template or starter kit.
How do updates work?
Starter gets 6 months of updates. Pro gets lifetime updates. Updates are delivered via a private GitHub repo you get access to after purchase.
Is there a refund policy?
All purchases are final and non-refundable. We recommend reviewing the documentation and GitHub repo before purchasing to ensure BSLT is right for your needs.