SuperApp is designed so you or your AI say a short phrase and a script does the work — with clear rules about what never runs automatically.
| Action | Allowed without extra gate? |
|---|---|
| Create local project folder | Yes |
Install deps, start Docker DB, pnpm dev |
Yes |
| Push to GitHub | Yes (after leak scan) |
| Hosting playbook checklist | Yes (read-only) |
| Staging deploy | No — needs deploy staging + --confirm |
| Production deploy | No — needs deploy production + --confirm |
GitHub is not a live deploy. Staging/production only run when you explicitly ask.
See prompts/triggers/INDEX.md.
After pnpm run init, your project also has copies under .superapp/ai/triggers/ with {{APP_SLUG}} filled in.
Curriculum repo (this clone):
node scripts/ops/new-app.mjs --name my-app
bash scripts/ops/stack-check.sh --project projects/my-appInside a project (after init):
cd projects/my-app
pnpm run ops:check
pnpm run ops:run
bash scripts/ops/git-push.sh -m "feat: example"- User: create new app
- AI runs
new-app.mjs - User: bootstrap github
- AI runs
github-bootstrap.sh --confirmwith org/repo
- User: setup hosting for gcp
- AI runs
hosting-setup.sh --host gcp - User: deploy staging (explicit)
- AI runs
deploy-staging.sh --confirmand walks playbook gates
- Add script under
scripts/ops/ - Add row to
prompts/triggers/INDEX.md - Add
prompts/triggers/your-trigger.mdwith phrase + command - List file in
scripts/init/ide-setup.mjscopy list