
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
agentic-coding-starter-kit
Advanced tools
A complete agentic coding boilerplate with authentication, PostgreSQL database, AI chat functionality, and modern UI components - perfect for building AI-powered applications and autonomous agents.
A complete agentic coding boilerplate with authentication, PostgreSQL database, AI chat functionality, and modern UI components - perfect for building AI-powered applications and autonomous agents.
Watch the complete walkthrough of this agentic coding template:
If this boilerplate helped you build something awesome, consider buying me a coffee!
Before you begin, ensure you have the following installed on your machine:
Get started with a single command:
npx create-agentic-app@latest my-app
cd my-app
Or create in the current directory:
npx create-agentic-app@latest .
The CLI will:
Next steps after running the command:
.env with your API keys and database credentialsdocker compose up -dnpm run db:migratenpm run devIf you prefer to set up manually:
1. Clone or Download the Repository
Option A: Clone with Git
git clone https://github.com/leonvanzyl/agentic-coding-starter-kit.git
cd agentic-coding-starter-kit
Option B: Download ZIP Download the repository as a ZIP file and extract it to your desired location.
2. Install Dependencies
npm install
3. Environment Setup
Copy the example environment file:
cp env.example .env
Fill in your environment variables in the .env file:
# Database
POSTGRES_URL="postgresql://username:password@localhost:5432/your_database_name"
# Authentication - Better Auth
BETTER_AUTH_SECRET="your-random-32-character-secret-key-here"
# Google OAuth (Get from Google Cloud Console)
GOOGLE_CLIENT_ID="your-google-client-id"
GOOGLE_CLIENT_SECRET="your-google-client-secret"
# AI Integration via OpenRouter (Optional - for chat functionality)
# Get your API key from: https://openrouter.ai/settings/keys
# View available models at: https://openrouter.ai/models
OPENROUTER_API_KEY="sk-or-v1-your-openrouter-api-key-here"
OPENROUTER_MODEL="openai/gpt-5-mini"
# App URL (for production deployments)
NEXT_PUBLIC_APP_URL="http://localhost:3000"
4. Database Setup
Generate and run database migrations:
npm run db:generate
npm run db:migrate
5. Start the Development Server
npm run dev
Your application will be available at http://localhost:3000
POSTGRES_URL from the .env.local tab.env filehttp://localhost:3000/api/auth/callback/google (development)https://yourdomain.com/api/auth/callback/google (production).env file.env file as OPENROUTER_API_KEYsrc/
├── app/ # Next.js app directory
│ ├── api/ # API routes
│ │ ├── auth/ # Authentication endpoints
│ │ └── chat/ # AI chat endpoint
│ ├── chat/ # AI chat page
│ ├── dashboard/ # User dashboard
│ └── page.tsx # Home page
├── components/ # React components
│ ├── auth/ # Authentication components
│ └── ui/ # shadcn/ui components
└── lib/ # Utilities and configurations
├── auth.ts # Better Auth configuration
├── auth-client.ts # Client-side auth utilities
├── db.ts # Database connection
├── schema.ts # Database schema
└── utils.ts # General utilities
npm run dev # Start development server with Turbopack
npm run build # Build for production
npm run start # Start production server
npm run lint # Run ESLint
npm run db:generate # Generate database migrations
npm run db:migrate # Run database migrations
npm run db:push # Push schema changes to database
npm run db:studio # Open Drizzle Studio (database GUI)
npm run db:dev # Push schema for development
npm run db:reset # Reset database (drop all tables)
/): Landing page with setup instructions and features overview/dashboard): Protected user dashboard with profile information/chat): AI-powered chat interface using OpenRouter (requires authentication)Install the Vercel CLI globally:
npm install -g vercel
Deploy your application:
vercel --prod
Follow the prompts to configure your deployment
Add your environment variables when prompted or via the Vercel dashboard
Ensure these are set in your production environment:
POSTGRES_URL - Production PostgreSQL connection stringBETTER_AUTH_SECRET - Secure random 32+ character stringGOOGLE_CLIENT_ID - Google OAuth Client IDGOOGLE_CLIENT_SECRET - Google OAuth Client SecretOPENROUTER_API_KEY - OpenRouter API key (optional, for AI chat functionality)OPENROUTER_MODEL - Model name from OpenRouter (optional, defaults to openai/gpt-5-mini)NEXT_PUBLIC_APP_URL - Your production domainWatch my comprehensive tutorial on how to use this agentic coding boilerplate to build AI-powered applications:
📺 YouTube Tutorial - Building with Agentic Coding Boilerplate
git checkout -b feature/amazing-feature)git commit -m 'Add amazing feature')git push origin feature/amazing-feature)This project is licensed under the MIT License - see the LICENSE file for details.
If you encounter any issues:
Happy coding! 🚀
FAQs
A complete agentic coding boilerplate with authentication, PostgreSQL database, AI chat functionality, and modern UI components - perfect for building AI-powered applications and autonomous agents.
We found that agentic-coding-starter-kit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.