A set of project rules for building LoyalSpark, an on-chain loyalty platform where people use a website and AI agents use an API or MCP server. It runs on Base, a blockchain network, and uses wallet-based sign-in.

Use it when adding or changing the React website, wallet sign-in, Base blockchain features, Supabase backend, Farcaster support, mobile app, or REST and MCP agent interfaces.

It gives coding agents the project's technology choices and integration boundaries, reducing guesswork when changing the application.

How aspekt19/unboxed-loyalty-spark configures Cursor

Reuse

Borrowing it

Nothing to install: this file belongs to aspekt19/unboxed-loyalty-spark. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/aspekt19/unboxed-loyalty-spark/a2a-agents/.cursorrules

Clone the repo

git clone --depth 1 https://github.com/aspekt19/unboxed-loyalty-spark

Made for: Cursor.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/rules/aspekt19/unboxed-loyalty-spark/cursorrules.svg)](https://agentmods.dev/rules/aspekt19/unboxed-loyalty-spark/cursorrules)

Your own site

<a href="https://agentmods.dev/rules/aspekt19/unboxed-loyalty-spark/cursorrules"><img src="https://agentmods.dev/badge/rules/aspekt19/unboxed-loyalty-spark/cursorrules.svg" alt="Measured on agentmods" height="20"></a>

Per session 3,222 This file is loaded in full into every session.

When invoked 3,222 The same file — it is already loaded in full.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.03222	$0.03222
Opus 5	$0.01611	$0.01611
Sonnet 5	$0.00644	$0.00644
Haiku 4.5	$0.00322	$0.00322

Measured 2d ago against content hash 7d5188470986, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

cursorrules scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.cursorrules · 217 lines

How it starts

The opening of the file, as written. The whole thing — 217 lines — stays where its author put it; the contents beside it link to each section on GitHub.

LoyalSpark — Onchain Loyalty Protocol

Project Overview

Web3-powered loyalty platform built on Base Mainnet (Chain ID: 8453). Dual-mode: humans via Web UI (Privy-first + SIWE where needed), AI agents via REST API / MCP Server.

Tech Stack

Frontend: React 18, TypeScript, Vite 5, Tailwind CSS 3, shadcn/ui (Radix), Framer Motion, Sonner
Onchain: Wagmi v2, Viem, RainbowKit, Base Mainnet (chain id 8453); ox where low-level helpers fit
Auth & wallets: Privy (@privy-io/react-auth, @privy-io/wagmi) + SIWE (nonce + siwe-verify) for wallet-linked Supabase sessions
Farcaster: @farcaster/auth-kit, miniapp-sdk, frame-sdk, @farcaster/miniapp-wagmi-connector
Mobile: Capacitor 8 (iOS/Android) alongside the web app
PWA: vite-plugin-pwa
Backend: Supabase (Deno Edge Functions, Postgres RLS, Realtime)
Agent server wallets: Coinbase CDP MPC via agent-wallet Edge Function
State: TanStack Query v5
Routing: React Router DOM v6
Forms: React Hook Form + Zod (@hookform/resolvers)
Data viz: Recharts (dashboards)
Agent surface: REST (agent-api) + MCP (loyalty-mcp)

Smart Contracts (Base Mainnet)

B20 Factory (default new programs): 0xB20f000000000000000000000000000000000000
LoyaltyTokenFactory (legacy ERC-20): 0x5F3DdBa12580CFdc6016258774cCc19C4250dA80
LoyalSparkERC20 (legacy implementation): 0xe6BA426C9c51281B929a17444De02c65815E27C3

Authentication

Humans: Privy first (email / SMS / OAuth / embedded + external wallets); Supabase session via privy-auth + client helpers in src/lib/privyAuth.ts
Wallet-only path: SIWE message + siwe-nonce / siwe-verify Edge Functions (still used for wagmi-connected wallet login)
Merchant / Customer headers: Profile is shown only when useAuth().user exists; order is Theme → Profile (if signed in) → Wallet. See docs/development/PORTALS_AND_TEAM.md.
Farcaster Mini App: detect FC context (@farcaster/miniapp-sdk) and avoid fighting Mini App lifecycle in auth UI
AI Agents: API keys with lsk_ prefix, hashed in DB (unchanged server rules)

Read the full file on GitHub · 217 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2d ago Changed · -15 tokens per session 7d5188470986
6d ago First seen · 217 lines · 3,237 tokens per session scan A aea283483a6c

Subscribe to this mod's changes

cursorrules is a cursor rule published in the GitHub repository aspekt19/unboxed-loyalty-spark (13 stars, last pushed yesterday), licensed MIT. It adds 3,222 tokens to every session, about $0.0161 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Web3 and blockchain

solana-integration-constraints

Constraints and requirements for Solana integration with MetaMask Connect — wallet adapter config, CAIP-2 IDs, network support per platform, RPC routing, and platform limitations.

MetaMask/metamask-connect-cursor-plugin · 1,207 tokens

zama-protocol-zama-solidity--setups-foundry

Detailed reference for foundry (zama-solidity skill).

zama-ai/skills · 12 tokens

cardano-mcp

These rules complement our main development collaboration rules, focusing specifically on the Model Context Protocol (MCP) server project with TypeScript. This project serves as a specialized RAG (Retrieval-Augmented Generation) gateway to existing Cardano resources, documentation, and tools to assist with dApp…

Jimmyh-world/Cardano_MCP · 3,030 tokens

solana_core_architecture

┌─────────────────┐ ┌──────────────────┐ ┌─────────────────┐ │ Entry Point │ │ Instruction │ │ Account │ │ lib.rs │───▶│ Processing │───▶│ Validation │ │ │ │ │ │ │ │ - entrypoint! │ │ - Route dispatch │ │ - Owner checks │ │ - processinst │ │ - Deserialize │ │ - Data validate │.

AIFlowML/cursor_rules · 4 tokens

elizaos_v2_onchain_plugins

┌─────────────────┐ ┌──────────────────┐ ┌─────────────────┐ │ Wallet Provider│ │ Connection Mgmt │ │ Transaction Svc │ │ - Private Keys │───▶│ - RPC Endpoints │───▶│ - Tx Construction│ │ - Public Keys │ │ - Network Config │ │ - Fee Estimation│ │ - Signatures │ │ - Health Check │ │ - Broadcasting │ └─────────────────┘…

AIFlowML/cursor_rules · 0 tokens

stacks-development

Guidelines for Stacks blockchain development.

Mcsavvy/stacks-next-template-chainhooks-with-db · 7 tokens

unboxed-loyalty-spark: Cursor rule for Cursor