code-anything.com
Log inStart free

Capabilities

Everything wired in, as code you own.

The complete set of things code-anything does for you — from describing an app in plain English to shipping a reviewed pull request, with the data layer, sign-in, payments and hosting built from vetted, pre-written bricks rather than typed out again.

create · edit · the pre-wired foundation

Start here

What a capability means on this site

A short orientation before the list — what these pages cover, who they are written for, and the quickest way through them.

Most tools describe themselves as a list of features: things you can switch on, configure and pay for separately. code-anything is not organised that way. A capability here is one complete job the platform does for you, from the request you make to the working result you get back. Describing an app and receiving a running one is a capability. Turning a request against an existing repository into a reviewed pull request is a capability. So is keeping every project healthy after launch.

That distinction matters, because it changes what you have to decide. You are not assembling a stack out of parts and hoping they fit. You describe what you want; the capabilities that your work actually needs come into play, and the ones it does not stay out of the way. A single landing page never touches payments. A connected repository never needs a deploy pipeline. Nothing is switched on speculatively.

Who this page is for

It is written for two readers at once. If you do not write code, read the group headings and the card descriptions — they explain what each capability does in plain language, and each detail page opens with the same. If you do write code, the detail pages carry the specifics you will want: what is indexed, which gates run, where changes happen, and what arrives in your repository.

How to navigate it

The capabilities below are grouped into three themes that mirror how the platform is actually used. The first covers building something new from a prompt. The second covers working on a codebase you already have. The third covers the pre-wired foundation that sits under both — the backend every app is given, and the monitoring that watches it once it is live. Every card links to a full page on that capability. If you would rather see the whole flow in one piece first, the platform overview walks it end to end, and the docs take you through both paths step by step.

Build something new

From a sentence to a live, hosted app

The create path: describe what you want, refine it visually, and put it on a real URL.

These three capabilities run in sequence, and most new projects use all of them within the first few minutes. You start by describing the app in plain English and get a real codebase running on managed infrastructure — not a mockup or a wireframe, but an application you can open and click through. From there you stop writing long descriptions and start pointing: click the element you want changed, say what should be different, or attach a screenshot of a layout you want matched. When it looks right, one click publishes the same app you have been previewing to a public address, with a custom domain if you have one.

The important property of this group is that nothing changes shape as you move through it. The app in the preview is the app that ships; there is no separate export step, no build configuration to reconcile, and no gap between what you approved and what your visitors get.

ONE BUILD · TWO ADDRESSESSandboxyour app, actually runningdist/built once, herePreview URLwhat you click through while you editsecurity scana P0 finding blocks ityour-app.pages.devHTTPS · your own domain, optional
The preview and the live site are the same build. Going live moves an address, not a codebase.

Work on an existing codebase

From a connected repo to a reviewed pull request

The edit path: understand the code, change it in isolation, prove it works, then hand you a PR.

On a codebase that already exists and already matters, speed is worth less than trust. This group is built around that. Before anything is edited, the repository is indexed twice over — semantically, so the agent can find the code responsible for a behaviour even when you cannot name the file, and by symbol, so it knows what a definition is used by and what a change will ripple into. The edit itself happens in an isolated sandbox clone, never in your repository. Typecheck, tests, build and a scan of the running app’s log then run against that clone, and if a gate fails the agent keeps working rather than handing you something broken.

What reaches you is a pull request scoped to the task you asked for, that has already cleared the checks you would have run yourself. Your repository only ever changes when you merge it — the agent never pushes to your branches, and you can scope or revoke the connection at any time.

INDEXED TWICE · BY MEANING, THEN BY USE“where do we charge the card?”SEMANTIC INDEXui/Cart.tsx · CartTotallib/stripe.ts · chargeapi/webhook.ts · onEventlib/tax.ts · vatForSYMBOL GRAPHchargecheckout.tswebhook.tsCart.tsxthree real dependents · same-name matches excluded
One index finds the code you could not name. The other tells you what it is holding up.

The pre-wired foundation

The parts that are handled whichever path you take

A backend that arrives as real code rather than as a blank file, and continuous monitoring once it is live.

Both paths sit on the same foundation, and it is the part most people underestimate. Shipping a real application usually stalls not on the interface but on everything behind it: a data layer to write, sign-in to get right, payments to plumb through, row-level security nobody thinks about until it matters. None of that is typed out afresh on every build. The agent works from a catalogue of bricks — six vetted, pre-written modules covering a router and app shell, email sign-in, Stripe checkout, backend middleware, a Supabase data-access layer, and secure-by-default row-level security with the indexes to match. Reaching for one writes real code into your project: the files themselves, the npm dependencies added to package.json, the environment keys appended to .env.example, the SQL migrations, and a set of notes telling the agent exactly where to mount what it was just handed.

WRITTEN ONCE · INSERTED, NOT RE-DERIVEDa common ask“users sign in”hand-written each timeBrick cataloglayout/react-router-shellauth/supabase-emailpayments/stripe-checkoutmiddleware/express-guardsbackend/supabase-cruddb/rls-indexessix vetted modules · list_brickswritten into your project4 filessrc/auth/AuthProvider.jsx +32 env keysVITE_SUPABASE_URL · …ANON_KEY1 migration…_auth_profiles.sqlcomposeslayout/react-router-shellWIREUP NOTESwrap <AuthProvider> · /login · guard routesThe code lands in your repo, yours to edit. The Supabase account it talks to is still a separate connect step.
Pre-wired means the agent inserts a module it has already got right, not that a service quietly appears in your name.

That is what pre-wired means here, and it is worth being exact about the half it does not cover. A brick writes the integration; it does not conjure the account behind it. Connecting Supabase, Stripe or Resend is its own explicit step, and for Stripe and Resend it is your account by default — so customers pay you, payouts land with you, and mail leaves from a domain you verified. Either way the code is in your repository, in ordinary Postgres and ordinary Stripe, yours to read and change. The database brick is the clearest case of why that matters: it does not just create tables, it forces row-level security on all of them and indexes the columns the policies filter on.

WRITTEN IN · ALREADY JOINEDSign-inwhoever is holding the sessionauth.uid()auth.uid() = user_idapplied as migration 0001Your Postgresordersowner onlyprofilesowner onlysite_copyno policyNo user_id column? Row-level security stays on with no policy — closed by default, not open.
Sign-in is not a library you bolt on later. The auth brick writes the policy, and the database itself is what enforces it.

The second half of the foundation starts where most tools stop. Once a project is live, health checks keep running on its builds, deploys and previews; you are alerted when something breaks instead of hearing it from a user; every project appears in one live view; and every build is kept as a version you can restore the project to. You can read more about the providers underneath all of this on the integrations page.

What is on each page

What a capability page actually includes

Every capability page follows the same structure, so you always know where to look for the part you care about.

What you get

A plain-English explanation of the capability, followed by the three things that define it — what it does, what it produces, and what it saves you from doing.

What is included

Where it applies, most capabilities carry a table of exactly what you get — the services, the stages, or the checks — so nothing is left to interpretation.

A real flow, end to end

A worked example of the capability in use: the request going in, and the result coming back out, in the shape you would actually see it.

Questions and neighbours

The questions people genuinely ask about that capability, plus links to the capabilities either side of it in the flow and a worked example solution.

Prefer worked examples to reference pages? The use cases section shows the same capabilities applied by industry and by role.

How they combine

Capabilities are a chain, not a checklist

Each one hands off to the next. Here is which capabilities carry which job, so you can jump straight to the relevant page.

No capability is much use on its own, and none of them is meant to be. Prompt to app produces something for live preview to refine; live preview produces something for Go Live to publish; Go Live produces something for workspace monitoring to watch. On the other path, code intelligence produces the context the PR agent edits with, and sandbox verification is the gate the pull request has to clear first. The managed backend cuts across both, appearing the moment your app needs data, sign-in, email or money.

EACH ONE HANDS THE NEXT ITS INPUTFROM A SENTENCEprompt to appa codebase, runninglive previewpoint, don’t describeGo Livesame build, new addressmonitoringchecks keep runninga running appthe app you approveda public URLthe brick cataloguesix vetted modules the agent writes in — the same six from either pathauth · datacheckoutRLS + indexesFROM A REPOSITORY YOU HAVEcode intelligenceby meaning and by symbolPR agentedits an isolated cloneverificationfour gates in that clonepull requestyours to review and mergewhere it lives, what it holds upa change, in a clonea green runA landing page never reaches for checkout; a connected repo never reaches for a deploy.
Each capability is handed the thing the one before it produced. The backend is not a step in either chain — it is a shelf both of them reach into, and only when the app needs what is on it.
If you want to…The capabilities that carry it
Turn an idea into a running appPrompt to app → Live preview
Refine it by pointing rather than describingLive preview & click-to-edit
Put it on a real, public URLGo Live
Give it a database, logins, email or paymentsManaged backend
Change an application you already haveCode intelligence → GitHub PR agent
Be sure a change has not broken anythingSandbox verification
Keep every project healthy after launchWorkspace monitoring

Start from the job you have; the capability page explains how it is done.

Already handled

What you do not have to build yourself

Each of these is either written for you from a vetted brick or run for you by the platform. None of it is a blank file waiting on your side.

The backend and the pipeline

  • Hand-rolling a data layer — a vetted Supabase access brick is written in, server side and client side.
  • Writing sign-in from scratch — the auth brick brings a session provider, a login form, a route guard and a profiles migration.
  • Getting row-level security right — the RLS brick forces RLS on every table and indexes the columns those policies filter on.
  • Building payment plumbing — the Stripe brick writes the checkout endpoint, the client redirect and a signature-verified webhook.
  • Working out where each piece mounts — every brick hands back the wireup notes that say exactly where its files go.

The safety net and the watch

  • Running servers or a deploy pipeline — builds, deploys and hosting run on Cloudflare, HTTPS by default.
  • Reading the whole codebase before every change — the repository is indexed semantically and by symbol.
  • Wiring CI to gate a change — typecheck, tests, build and a scan of the dev server’s log run in a sandbox clone before anything reaches you.
  • Bolting on uptime checks and alerting — health checks on builds, deploys and previews run continuously.
  • Keeping your own undo — every build is saved as a version, and restoring one from the project’s change history rewinds the files and the workspace with it.
RUN IN THE CLONE · BEFORE IT REACHES YOUyour changein an isolated clonetypechecktsc --noEmittestsits own suitebuildnpm run buildpreviewthe dev loga red gate goes back to the agent, not to youpull requestopened only when all four are green
The gates run where the change is made, not after it reaches you. A failure is the agent’s next turn.

The code for the database, auth and payments layers is written for you — see pricing for what each plan covers, and integrations for which accounts stay yours.

The alternative

Compared with assembling the same stack manually

Nothing here is impossible to build yourself. The difference is how many of these decisions you have to make, and how many of them you then have to maintain.

Put side by side, the capabilities map almost one-to-one onto the pieces a team would otherwise wire together by hand: a database provider, an auth provider, a sending provider, a payments provider, a host, a deploy pipeline, a CI configuration, and some form of uptime checking. Each is a reasonable choice on its own. Together they are a week you have not spent on the actual product — and a standing maintenance cost every time one of them changes.

Piece of the stackAssembling it yourselfWith code-anything
Data layerPick a client, write the CRUD twice, keep server and browser access in step yourself.A vetted Supabase access brick written in — service-role helper on the server, RLS-gated client in the browser.
AuthenticationPick a provider, configure it, wire sessions into every route.The auth brick, dropped in whole: session provider, login and sign-up form, route guard, profiles migration — email and password.
Database securityWrite RLS policies by hand, then index the columns they filter on — or find out in production.The RLS brick forces row-level security on every table and indexes every foreign key and owner column.
PaymentsStripe account, keys, checkout flow and webhook handling to build and maintain.The Stripe brick writes the checkout endpoint, the redirect and a signature-verified webhook — against your own Stripe account.
Transactional emailSign up with a sending provider, verify a domain, wire the templates.The thinnest row here: the key and the verified domain stay yours by default, and there is no email brick — the sending code is written for your app like any other feature.
Hosting and deploysChoose a host, build a pipeline, configure TLS, redeploy on every change.Go Live publishes the previewed app to a real URL on Cloudflare, HTTPS by default.
Custom domainDNS records, certificates, and a redeploy to pick the change up.Attach a domain from the project’s deploy view at any time, without rebuilding the app.
Codebase contextRead around the repo yourself before every change to find the right place.A semantic and symbol-aware index built when you connect the repository.
Pre-merge checksConfigure CI to run typecheck, tests and build, then wait for the run.Typecheck, tests, build and a runtime-error scan run in a sandbox clone before the pull request is opened.
Post-launch watchAdd uptime checks, route alerts, write a rollback runbook.Continuous health checks, email alerts, every project in one view, and every build kept as a version you can restore.

The same pieces, minus the wiring. Providers are named on the integrations page.

FAQ

Questions about capabilities

A capability is one distinct thing the platform does for you end to end — describing an app and getting a running one, editing it visually, publishing it, running its backend, changing an existing repository, understanding that repository, verifying a change, and watching everything after launch. Each has its own page with the detail behind it.

Index

Every capability, in one list

The full set, in the order you would meet them.

One platform, two ways in.

Start from a prompt or connect a repo. Either way the backend is managed, every change is verified, and every workspace is monitored.