What we actually use to build this.

RSC for the marketing site + dealer app. One repo, two surfaces.

Strict mode everywhere. Zod for runtime validation at boundaries.

Row-Level Security carries the multi-tenancy. Drizzle for typed migrations + queries.

Session storage, rate limiting, BullMQ for background jobs.

HSL token system, design system in CSS. No dependency on a runtime CSS-in-JS lib.

Credentials + OAuth (Google, X). JWT in httponly cookies.

Cheap, fast, no nonsense. Three regions: Helsinki, Falkenstein, Ashburn.

Edge cache for marketing, WAF rules for /api/*, image transformations.

Sub-700ms response, native tool-calling, recording out of the box.

Whisper for STT inside Vapi, ElevenLabs for the receptionist voice.

Concierge runs on Opus, Herald on Sonnet (latency-budget). Both via the streaming API.

Transactional + magic-link. SPF/DKIM/DMARC managed.

Subscriptions, Customer Portal, tax + invoicing.

Front + back. Source maps in private.

No cookies, no fingerprinting. Self-hosted on a side VPS.

Structured JSON logs, PII scrubbing on the wire.

Owned, not Atlassian. Synthetic checks every 60s.

Workspace caching, parallel builds, RLS-aware test isolation.

Lint + typecheck + test + e2e + deploy. Status checks gate every merge.

Unit + integration + e2e. RLS tests verify cross-tenant isolation in CI.

Format-on-save, lint-staged, pre-commit hooks.

No .env files in git, ever. op run --env-file=...

Quarterly rotation, immediate on personnel change.

Schema migrations diffed at build, applied at deploy.

Agent-augmented coding. Most of the boilerplate gets drafted by an agent and reviewed by a human.

Performance regressions caught in CI.

Pane multiplexing for the agent loops.

Linked notes for big-picture, MDX for docs that ship.

128GB RAM lets the local agent loops run while Next dev runs.

For testing Herald inbound + outbound from a real device.

Code on one, terminal + agent on the other. Boring choice on purpose.