The Solo Founder Tech Stack

123456789101112
// app/api/chat/route.ts
import { OpenAI } from 'openai';
import { NextResponse } from 'next/server';

const openai = new OpenAI({ apiKey: process.env.OPENAI_API_KEY });

export async function POST(request: Request) {
  const { message } = await request.json();
  
  const completion = await openai.chat.completions.create({
    model: 'gpt-4-turbo-preview',
    messages: [

123456789101112
// app/api/ai/route.ts
import { OpenAI } from 'openai';
import { NextResponse } from 'next/server';
import { Ratelimit } from '@upstash/ratelimit';
import { Redis } from '@upstash/redis';

const openai = new OpenAI({ apiKey: process.env.OPENAI_API_KEY });

// Optional: Rate limiting with Upstash Redis
const ratelimit = new Ratelimit({
  redis: Redis.fromEnv(),
  limiter: Ratelimit.slidingWindow(20, '1 m'),

123456789101112
// app/api/chat/route.ts
import OpenAI from 'openai';
import { OpenAIStream, StreamingTextResponse } from 'ai';

const openai = new OpenAI({ apiKey: process.env.OPENAI_API_KEY });

export async function POST(req: Request) {
  const { messages } = await req.json();
  
  const response = await openai.chat.completions.create({
    model: 'gpt-4-turbo-preview',
    stream: true,

123456789101112
-- Enable RLS on your tables
alter table conversations enable row level security;
alter table messages enable row level security;

-- Users can only see their own conversations
create policy "Users view own conversations"
  on conversations for select
  using (auth.uid() = user_id);

-- Users can only insert messages to their conversations
create policy "Users insert own messages"
  on messages for insert

123456789101112
// app/api/chat/route.ts
import OpenAI from 'openai';
import { createClient } from '@supabase/supabase-js';

const openai = new OpenAI({ apiKey: process.env.OPENAI_API_KEY });
const supabase = createClient(
  process.env.NEXT_PUBLIC_SUPABASE_URL!,
  process.env.SUPABASE_SERVICE_KEY!
);

export async function POST(req: Request) {
  const { messages, userId } = await req.json();

123456789101112
// ❌ WRONG - This exposes your key to the browser
// .env.local
NEXT_PUBLIC_OPENAI_KEY=sk-xxx  // Never do this!

// ❌ WRONG - Direct API call from frontend
const response = await fetch('https://api.openai.com/v1/chat/completions', {
  headers: { 'Authorization': `Bearer ${process.env.NEXT_PUBLIC_OPENAI_KEY}` }
});

// ✅ CORRECT - Server-side only environment variable
// .env.local
OPENAI_API_KEY=sk-xxx  // No NEXT_PUBLIC_ prefix

123456789101112
-- Users table (extends Supabase auth.users)
CREATE TABLE public.profiles (
  id UUID REFERENCES auth.users PRIMARY KEY,
  email TEXT NOT NULL,
  full_name TEXT,
  plan TEXT DEFAULT 'free' CHECK (plan IN ('free', 'pro', 'enterprise')),
  tokens_used_this_month INTEGER DEFAULT 0,
  token_limit INTEGER DEFAULT 10000,
  stripe_customer_id TEXT,
  created_at TIMESTAMPTZ DEFAULT NOW()
);