Plinth — Web module starter

A clone-ready Next.js 16 module starter that imports @plinth-dev/* packages. Authentication, authorization, audit, observability, error boundaries, and security headers — all pre-wired.

Status: v0.1.0 — Phase C in progress. Cloneable, but the @plinth-dev/* packages it depends on are still in design.

Quick start

git clone https://github.com/plinth-dev/starter-web my-module
cd my-module
pnpm install
pnpm dev          # http://localhost:3000

For everything-running-locally:

docker compose up --build      # Postgres, Cerbos, NATS, SigNoz, the module

What's wired

• Next.js 16 with App Router, Turbopack, standalone Docker output, React 19 server components.
• Three-layer route group: app/(module)/layout.tsx does requireAuth + batched checkPermissions + <PermissionsProvider> wrap.
• Error boundaries: app/error.tsx, app/global-error.tsx, app/not-found.tsx.
• Security headers in next.config.ts: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy.
• i18n via paraglide-js (compile-time message keys).
• Forms via @plinth-dev/forms (server actions + Zod).
• Tables via @plinth-dev/tables (TanStack + nuqs URL state).
• Tests: Vitest unit tests, Playwright E2E, Storybook visual review.
• Lint + format: Biome 2.

What's not wired

This is a starter, not a kitchen sink. Things you bring yourself:

• Domain logic (one canonical example resource — Items — is included; delete it).
• Brand styling (Tailwind v4 + shadcn/ui primitives ship vendored; restyle freely).
• Specific integrations (no Slack, Stripe, etc).

Customisation checklist

After cloning, search the repo for // TODO: Customize for your module and walk each one. Then update:

1. package.json — name, description, repository.
2. next.config.ts — production hostnames in images.remotePatterns and CSP.
3. app/(module)/layout.tsx — module name in metadata.
4. cerbos/*.yaml — replace Item with your resource kind.

Related

• starter-api — the matching Go backend.
• sdk-ts — the SDK packages this starter imports.
• cli — plinth new automates the rename + register flow.

License

MIT — see LICENSE.