AI code goes off the rails
AI generates modules quickly, but it will also cross module boundaries, skip permission checks and leave out tests.
Spring Boot · Vue · Built for AI coding teams
The Spring Boot application base built for AI coding teams.
Give Codex, Cursor and Claude Code a governed Spring Boot + Vue foundation. RBAC, audit, OpenAPI, tests, module boundaries and machine-readable rules keep AI-generated changes reviewable.
面向 AI 编码团队的 Spring Boot 应用基座
Run the complete local stackgit clone https://github.com/zkmall/stackrivet-server.gitgit clone https://github.com/zkmall/stackrivet-admin-ui.gitcd stackrivet-serverdocker compose up -d mysql redis./mvnw -pl stackrivet-app -am install -DskipTests./mvnw -pl stackrivet-app spring-boot:run Terminal 2 · admin UIcd ../stackrivet-admin-uicorepack enable && corepack prepare pnpm@11 --activatepnpm install && pnpm dev✓ admin http://127.0.0.1:5173- Start from a working modular application, not an empty prompt.
- Preview and generate backend, admin UI, permissions, migrations and test scaffolding.
- Keep AI changes inside explicit architecture and review rules.
- Ship with default-deny RBAC, audit and object storage foundations.
The problem
AI writes code faster. Enterprise projects still need guardrails.
Generating code was never the hard part. The hard part is permissions, tests, audit and keeping the result upgradeable.
CRUD isn't the whole job
A table-to-CRUD generator still leaves you the menus, permissions, OpenAPI, audit and deployment.
Forks drift from upstream
Most customized admin templates drift away from upstream after the first real project, and then upgrades hurt.
What you get
From scaffold to engineering base.
The parts that make generated code something you can actually ship and keep maintaining.
AI Guardrails
Machine-readable rules, module boundaries and test requirements keep AI-generated changes inside your team's conventions.
Governed code generation
Generate the backend, frontend, menus, permissions, OpenAPI and test samples together, one module at a time.
Object-storage Asset Service
Object storage from day one: S3-compatible, Aliyun OSS, signed URLs and private download authorization.
Upgradeable customization
Module manifests, Flyway migrations, template versions and file hashes keep your fork upgradeable.
Enterprise delivery kit
Docker, deployment SOPs, a security baseline, an SBOM, delivery checklists and enterprise support.
Reliability and security baseline
Module boundaries, default-deny security, capability-routed uploads, async jobs and an OpenTelemetry profile. Local and OSS use server transit; S3 can advertise byte-bound direct and multipart paths.
Redesigned Element Plus
Keep the engineering efficiency of Element Plus without the stock-template look, via StackRivet design tokens.
Engineering governance
Layering, code standards, review checklists and quality gates inspired by mainstream Java and Spring engineering practice, made part of the product.
Product evidence
Review the generated change before it touches your workspace.
The generator produces an immutable preview bundle. Review exact file content and diffs, inspect warnings, download the ZIP, then apply the same hash explicitly.
- Content and unified-diff views for every generated file.
- Immutable bundle hash carried from preview through apply.
- Visible data-scope warnings and explicit overwrite decisions.
Quick start
Run the complete stack locally.
Clone both repositories, start the data stores, build the backend reactor, then launch the backend and admin UI.
- 1 Clone the backend and admin UI side by side.
- 2 Start MySQL and Redis with Docker Compose.
- 3 Build the Maven reactor and run the Spring Boot app.
- 4 In a second terminal, install and start the Vue admin UI.
Run the complete local stackgit clone https://github.com/zkmall/stackrivet-server.gitgit clone https://github.com/zkmall/stackrivet-admin-ui.gitcd stackrivet-serverdocker compose up -d mysql redis./mvnw -pl stackrivet-app -am install -DskipTests./mvnw -pl stackrivet-app spring-boot:run Terminal 2 · admin UIcd ../stackrivet-admin-uicorepack enable && corepack prepare pnpm@11 --activatepnpm install && pnpm dev✓ admin http://127.0.0.1:5173 Architecture
Modular monolith first. Explicit boundaries from day one.
Start as a modular monolith so a small team can ship quickly. Clear module boundaries, migrations, OpenAPI and tests keep the system ready for larger deployments without taking on microservice complexity too early.
AI coding tools Codex · Cursor · Claude Code
StackRivet engineering base + guardrails
Governed module RBAC · OpenAPI · tests · assets
- Auth & RBAC
- System Management
- Code Generator
- Asset Service
- Audit Logs
- Async Tasks
- Module Manifest
- AI Guardrails
- Design System
- Engineering Governance
- Module boundaries enforced by ArchUnit tests.
- Security baseline aligned with OWASP Top 10, ASVS, SSDF and SLSA.
- High-concurrency path: stateless services, capability-routed uploads, async jobs, indexed pagination and optional Redis.
- Observability through traceId, Actuator, Micrometer and an optional OpenTelemetry profile.
How to choose
Pick StackRivet for code ownership, AI guardrails and upgradeable delivery.
| Category | Great for | StackRivet adds |
|---|---|---|
| RuoYi / RuoYi-Vue-Plus | Familiar with the RuoYi ecosystem; need lots of ready-made admin, multi-tenancy, jobs, files and workflow | AI engineering rules, testable generated code, upgradeable customization, branded UI and an enterprise delivery baseline |
| JEECG-style low-code | Forms and low-code platforms | Code-first, testable, maintainable modules |
| JHipster | Global generator and microservices | China-first Java delivery, Aliyun OSS, Gitee, enterprise kit |
| Appsmith / ToolJet | Quick operations apps | Enterprise application code your team owns long-term |
Pricing
Open core that teams can actually use.
Community
Free
A free, Apache-2.0 base you can use in real commercial projects.
Team pilot
Design partners
A scoped pilot for shared templates and reviewed Git/PR delivery; roadmap work is labeled.
Enterprise
Scoped pilot
Private deployment, migration and governance integrations only when named in a signed scope.
Boring, proven defaults
Built on technology your team already trusts.
No exotic runtime and no lock-in. Standard Spring Boot and Vue, pinned to LTS-grade versions.
- JDK 21 required, JDK 25 forward-compat checks
- Spring Boot 4.0.6 default (JDK 21)
- Vue 3.5, Vite 8, TypeScript 6
- Element Plus 2.14 + StackRivet tokens
- MySQL 8.4 LTS and PostgreSQL 18.4
- Flyway migrations
- Testcontainers and Playwright
- OpenAPI 3.1
- CLI doctor + reproducible Dev Container
- Optional OpenTelemetry profile
- SBOM and dependency gates; verified-tag provenance workflow
- Stateless design + async task baseline
Stop rebuilding the same base
Ship real enterprise Java, faster.
Start with StackRivet, generate governed modules, and let your AI tools work inside rules your team has set.