Cursor rule Cursor
Instructions for AI agent code generation workflow.
Cursor rule Cursor
Instructions for AI agent code generation workflow.
Cursor rule Cursor
API route handler design patterns.
Cursor rule Cursor
API route validation — enforces Zod validation on all route handlers and server actions.
Cursor rule Cursor
Next.js caching and revalidation best practices.
Cursor rule Cursor
Context window management — prevents AI from losing track during long sessions.
Cursor rule Cursor
Database schema design patterns for Supabase with proper types and relationships.
Cursor rule Cursor
Environment variable management and secrets handling.
Cursor rule Cursor
Error boundaries, loading states, and server error handling.
Cursor rule Cursor
File naming conventions and project organization rules.
Cursor rule Cursor
Image and file upload patterns — prevents insecure client-side uploads and missing file validation.
Cursor rule Cursor
Git workflow and commit conventions for AI-assisted development.
Cursor rule Cursor
React hydration mismatch prevention.
Cursor rule Cursor
Next.js middleware auth — prevents auth logic being placed in middleware instead of route handlers.
Cursor rule Cursor
Critical Next.js 15 breaking changes regarding async params and searchParams.
Cursor rule Cursor
Next.js performance optimization — caching, bundle size, and Core Web Vitals.
Cursor rule Cursor
Core project context — tech stack, folder structure, and global conventions.
Cursor rule Cursor
Prevent common React 19 and Next.js 15 migration pitfalls.
Cursor rule Cursor
Security rules and OWASP Top 10 enforcement for AI-generated code.
Cursor rule Cursor
Guidelines for Server Actions — validation, error handling, and when to use Route Handlers instead.
Cursor rule Cursor
Distinguishing between Server and Client Components.
Cursor rule Cursor
Shadcn/ui component usage patterns and anti-patterns.
Cursor rule Cursor
Stripe payment integration patterns — server-only, webhook handling.
Cursor rule Cursor
Stripe webhook verification patterns and payment security.
Cursor rule Cursor
Supabase auth security — enforces getUser() over getSession() on the server.