Capabilities
Everything wired in, as code you own.
The complete set of things code-anything does for you — from describing an app in plain English to shipping a reviewed pull request, with the data layer, sign-in, payments and hosting built from vetted, pre-written bricks rather than typed out again.
create · edit · the pre-wired foundation
Start here
What a capability means on this site
A short orientation before the list — what these pages cover, who they are written for, and the quickest way through them.
Most tools describe themselves as a list of features: things you can switch on, configure and pay for separately. code-anything is not organised that way. A capability here is one complete job the platform does for you, from the request you make to the working result you get back. Describing an app and receiving a running one is a capability. Turning a request against an existing repository into a reviewed pull request is a capability. So is keeping every project healthy after launch.
That distinction matters, because it changes what you have to decide. You are not assembling a stack out of parts and hoping they fit. You describe what you want; the capabilities that your work actually needs come into play, and the ones it does not stay out of the way. A single landing page never touches payments. A connected repository never needs a deploy pipeline. Nothing is switched on speculatively.
Who this page is for
It is written for two readers at once. If you do not write code, read the group headings and the card descriptions — they explain what each capability does in plain language, and each detail page opens with the same. If you do write code, the detail pages carry the specifics you will want: what is indexed, which gates run, where changes happen, and what arrives in your repository.
How to navigate it
The capabilities below are grouped into three themes that mirror how the platform is actually used. The first covers building something new from a prompt. The second covers working on a codebase you already have. The third covers the pre-wired foundation that sits under both — the backend every app is given, and the monitoring that watches it once it is live. Every card links to a full page on that capability. If you would rather see the whole flow in one piece first, the platform overview walks it end to end, and the docs take you through both paths step by step.
Build something new
From a sentence to a live, hosted app
The create path: describe what you want, refine it visually, and put it on a real URL.
These three capabilities run in sequence, and most new projects use all of them within the first few minutes. You start by describing the app in plain English and get a real codebase running on managed infrastructure — not a mockup or a wireframe, but an application you can open and click through. From there you stop writing long descriptions and start pointing: click the element you want changed, say what should be different, or attach a screenshot of a layout you want matched. When it looks right, one click publishes the same app you have been previewing to a public address, with a custom domain if you have one.
The important property of this group is that nothing changes shape as you move through it. The app in the preview is the app that ships; there is no separate export step, no build configuration to reconcile, and no gap between what you approved and what your visitors get.
Prompt to app
Type what you want in plain English and watch a real, running application appear. No boilerplate, no setup, no accounts to wire up first.
Learn moreLive preview
A live preview updates as the app takes shape. Click any element to target an edit, or upload a screenshot to match a design you already have in mind.
Learn moreGo Live
One click takes your app from preview to a live, public address. Bring your own domain or use the one provided — hosting and deploys are handled for you.
Learn moreWork on an existing codebase
From a connected repo to a reviewed pull request
The edit path: understand the code, change it in isolation, prove it works, then hand you a PR.
On a codebase that already exists and already matters, speed is worth less than trust. This group is built around that. Before anything is edited, the repository is indexed twice over — semantically, so the agent can find the code responsible for a behaviour even when you cannot name the file, and by symbol, so it knows what a definition is used by and what a change will ripple into. The edit itself happens in an isolated sandbox clone, never in your repository. Typecheck, tests, build and a scan of the running app’s log then run against that clone, and if a gate fails the agent keeps working rather than handing you something broken.
What reaches you is a pull request scoped to the task you asked for, that has already cleared the checks you would have run yourself. Your repository only ever changes when you merge it — the agent never pushes to your branches, and you can scope or revoke the connection at any time.
GitHub PR agent
Point the agent at a GitHub repository and ask for a change. It works in a sandbox clone and delivers the result as a scoped, reviewed pull request — never a direct push.
Learn moreCode intelligence
Before it edits, the agent indexes your codebase both by meaning and by symbol — so it finds the right function, follows references, and changes the code that actually matters.
Learn moreSandbox verification
Every change runs in an isolated clone of your codebase. Typecheck, tests and build all have to pass there before the result reaches you, so broken work never lands in front of you.
Learn moreThe pre-wired foundation
The parts that are handled whichever path you take
A backend that arrives as real code rather than as a blank file, and continuous monitoring once it is live.
Both paths sit on the same foundation, and it is the part most people underestimate. Shipping a real application usually stalls not on the interface but on everything behind it: a data layer to write, sign-in to get right, payments to plumb through, row-level security nobody thinks about until it matters. None of that is typed out afresh on every build. The agent works from a catalogue of bricks — six vetted, pre-written modules covering a router and app shell, email sign-in, Stripe checkout, backend middleware, a Supabase data-access layer, and secure-by-default row-level security with the indexes to match. Reaching for one writes real code into your project: the files themselves, the npm dependencies added to package.json, the environment keys appended to .env.example, the SQL migrations, and a set of notes telling the agent exactly where to mount what it was just handed.
That is what pre-wired means here, and it is worth being exact about the half it does not cover. A brick writes the integration; it does not conjure the account behind it. Connecting Supabase, Stripe or Resend is its own explicit step, and for Stripe and Resend it is your account by default — so customers pay you, payouts land with you, and mail leaves from a domain you verified. Either way the code is in your repository, in ordinary Postgres and ordinary Stripe, yours to read and change. The database brick is the clearest case of why that matters: it does not just create tables, it forces row-level security on all of them and indexes the columns the policies filter on.
The second half of the foundation starts where most tools stop. Once a project is live, health checks keep running on its builds, deploys and previews; you are alerted when something breaks instead of hearing it from a user; every project appears in one live view; and every build is kept as a version you can restore the project to. You can read more about the providers underneath all of this on the integrations page.
Managed backend
When your app needs data, sign-in, transactional email or payments, the code for it is written in from a catalogue of vetted bricks. Connecting the accounts behind that code is a separate, explicit step.
Learn moreWorkspace monitoring
Once you are live, code-anything keeps watching: continuous health checks on builds, deploys and previews, alerts when something breaks, one view of every project, and a one-click restore to any earlier version.
Learn moreWhat is on each page
What a capability page actually includes
Every capability page follows the same structure, so you always know where to look for the part you care about.
What you get
A plain-English explanation of the capability, followed by the three things that define it — what it does, what it produces, and what it saves you from doing.
What is included
Where it applies, most capabilities carry a table of exactly what you get — the services, the stages, or the checks — so nothing is left to interpretation.
A real flow, end to end
A worked example of the capability in use: the request going in, and the result coming back out, in the shape you would actually see it.
Questions and neighbours
The questions people genuinely ask about that capability, plus links to the capabilities either side of it in the flow and a worked example solution.
Prefer worked examples to reference pages? The use cases section shows the same capabilities applied by industry and by role.
How they combine
Capabilities are a chain, not a checklist
Each one hands off to the next. Here is which capabilities carry which job, so you can jump straight to the relevant page.
No capability is much use on its own, and none of them is meant to be. Prompt to app produces something for live preview to refine; live preview produces something for Go Live to publish; Go Live produces something for workspace monitoring to watch. On the other path, code intelligence produces the context the PR agent edits with, and sandbox verification is the gate the pull request has to clear first. The managed backend cuts across both, appearing the moment your app needs data, sign-in, email or money.
| If you want to… | The capabilities that carry it |
|---|---|
| Turn an idea into a running app | Prompt to app → Live preview |
| Refine it by pointing rather than describing | Live preview & click-to-edit |
| Put it on a real, public URL | Go Live |
| Give it a database, logins, email or payments | Managed backend |
| Change an application you already have | Code intelligence → GitHub PR agent |
| Be sure a change has not broken anything | Sandbox verification |
| Keep every project healthy after launch | Workspace monitoring |
Start from the job you have; the capability page explains how it is done.
Already handled
What you do not have to build yourself
Each of these is either written for you from a vetted brick or run for you by the platform. None of it is a blank file waiting on your side.
The backend and the pipeline
- Hand-rolling a data layer — a vetted Supabase access brick is written in, server side and client side.
- Writing sign-in from scratch — the auth brick brings a session provider, a login form, a route guard and a profiles migration.
- Getting row-level security right — the RLS brick forces RLS on every table and indexes the columns those policies filter on.
- Building payment plumbing — the Stripe brick writes the checkout endpoint, the client redirect and a signature-verified webhook.
- Working out where each piece mounts — every brick hands back the wireup notes that say exactly where its files go.
The safety net and the watch
- Running servers or a deploy pipeline — builds, deploys and hosting run on Cloudflare, HTTPS by default.
- Reading the whole codebase before every change — the repository is indexed semantically and by symbol.
- Wiring CI to gate a change — typecheck, tests, build and a scan of the dev server’s log run in a sandbox clone before anything reaches you.
- Bolting on uptime checks and alerting — health checks on builds, deploys and previews run continuously.
- Keeping your own undo — every build is saved as a version, and restoring one from the project’s change history rewinds the files and the workspace with it.
The code for the database, auth and payments layers is written for you — see pricing for what each plan covers, and integrations for which accounts stay yours.
The alternative
Compared with assembling the same stack manually
Nothing here is impossible to build yourself. The difference is how many of these decisions you have to make, and how many of them you then have to maintain.
Put side by side, the capabilities map almost one-to-one onto the pieces a team would otherwise wire together by hand: a database provider, an auth provider, a sending provider, a payments provider, a host, a deploy pipeline, a CI configuration, and some form of uptime checking. Each is a reasonable choice on its own. Together they are a week you have not spent on the actual product — and a standing maintenance cost every time one of them changes.
| Piece of the stack | Assembling it yourself | With code-anything |
|---|---|---|
| Data layer | Pick a client, write the CRUD twice, keep server and browser access in step yourself. | A vetted Supabase access brick written in — service-role helper on the server, RLS-gated client in the browser. |
| Authentication | Pick a provider, configure it, wire sessions into every route. | The auth brick, dropped in whole: session provider, login and sign-up form, route guard, profiles migration — email and password. |
| Database security | Write RLS policies by hand, then index the columns they filter on — or find out in production. | The RLS brick forces row-level security on every table and indexes every foreign key and owner column. |
| Payments | Stripe account, keys, checkout flow and webhook handling to build and maintain. | The Stripe brick writes the checkout endpoint, the redirect and a signature-verified webhook — against your own Stripe account. |
| Transactional email | Sign up with a sending provider, verify a domain, wire the templates. | The thinnest row here: the key and the verified domain stay yours by default, and there is no email brick — the sending code is written for your app like any other feature. |
| Hosting and deploys | Choose a host, build a pipeline, configure TLS, redeploy on every change. | Go Live publishes the previewed app to a real URL on Cloudflare, HTTPS by default. |
| Custom domain | DNS records, certificates, and a redeploy to pick the change up. | Attach a domain from the project’s deploy view at any time, without rebuilding the app. |
| Codebase context | Read around the repo yourself before every change to find the right place. | A semantic and symbol-aware index built when you connect the repository. |
| Pre-merge checks | Configure CI to run typecheck, tests and build, then wait for the run. | Typecheck, tests, build and a runtime-error scan run in a sandbox clone before the pull request is opened. |
| Post-launch watch | Add uptime checks, route alerts, write a rollback runbook. | Continuous health checks, email alerts, every project in one view, and every build kept as a version you can restore. |
The same pieces, minus the wiring. Providers are named on the integrations page.
FAQ
Questions about capabilities
Index
Every capability, in one list
The full set, in the order you would meet them.
One platform, two ways in.
Start from a prompt or connect a repo. Either way the backend is managed, every change is verified, and every workspace is monitored.