A project guide describing a Next.js application and its tools, including TypeScript, Tailwind CSS, Payload CMS, authentication, and multi-zone deployment. A multi-zone setup splits parts of one product, such as docs or a blog, into separately deployed areas.

Use it as context when adding features, navigating the project, configuring zones, or working with its interface, content-management, authentication, and deployment setup.

It gives coding agents the project’s expected structure, technology choices, routing conventions, and deployment arrangement to follow.

project — Cursor rule for Cursor by lacymorrow/paperclip-hub

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo

git clone --depth 1 https://github.com/lacymorrow/paperclip-hub

Made for: Cursor.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/rules/lacymorrow/paperclip-hub/project/github.svg)](https://agentmods.dev/rules/lacymorrow/paperclip-hub/project)

Your own site

<a href="https://agentmods.dev/rules/lacymorrow/paperclip-hub/project"><img src="https://agentmods.dev/badge/rules/lacymorrow/paperclip-hub/project/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/rules/lacymorrow/paperclip-hub/project"><img src="https://agentmods.dev/badge/rules/lacymorrow/paperclip-hub/project.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 0 Nothing until a file matches its globs; then the whole rule loads.

When invoked 1,625 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00000	$0.01625
Opus 5.5	$0.00000	$0.00650
Sonnet 5.5	$0.00000	$0.00325
Haiku 4.5	$0.00000	$0.00162

Measured yesterday against content hash b6792c6549db, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

project scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.cursor/rules/project.mdc · 193 lines

How it starts

The opening of the file, as written. The whole thing — 193 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Project Overview

This is a Next.js project using:

App Router
Shadcn/UI
Tailwind CSS
Resend
Builder.io
Payload CMS 3
NextAuth/AuthJS@v5
TypeScript
Bun

Multi-Zone Architecture Support

Shipkit supports multi-zone deployment for scalable applications:

Zone Configuration

Main app serves core functionality (marketing, dashboard, auth)
Secondary zones can be deployed for specialized content:
- /docs/* - Documentation and guides
- /blog/* - Blog and articles
- /ui/* - UI component library showcase
- /tools/* - Developer tools and utilities

Zone Implementation Patterns

Each zone uses a full Shipkit installation for consistency
Zones are configured with basePath and assetPrefix
Navigation between zones uses anchor tags (<a>) instead of Next.js <Link>
Shared authentication and design system across zones
Environment variables control zone routing and deployment

Zone Development

# Clone Shipkit for each zone
git clone https://github.com/lacymorrow/shipkit.git shipkit-docs
git clone https://github.com/lacymorrow/shipkit.git shipkit-blog
git clone https://github.com/lacymorrow/shipkit.git shipkit-ui
git clone https://github.com/lacymorrow/shipkit.git shipkit-tools

Directory Structure

src/
├── app/                    # Next.js app router pages
│   ├── (app)/             # Main application routes
│   ├── (authentication)/  # Auth pages (sign-in, sign-up, etc.)
│   ├── (dashboard)/       # Protected dashboard routes
│   ├── (demo)/           # Demo and example pages
│   ├── (integrations)/   # Third-party integrations
│   ├── (landing)/        # Marketing pages
│   ├── (legal)/          # Legal pages (privacy, terms)
│   ├── (shipkit)/        # Shipkit-specific pages
│   └── api/              # API routes
├── components/            # Reusable UI components
│   ├── ui/               # Shadcn/UI components
│   ├── primitives/       # Base primitive components
│   ├── blocks/           # Larger composed components
│   └── layouts/          # Layout components
├── lib/                  # Utility functions and shared code
│   ├── utils/           # General utilities
│   ├── schemas/         # Validation schemas
│   ├── payload/         # Payload CMS configuration
│   └── trpc/            # tRPC configuration
├── server/               # Server-side code
│   ├── actions/          # Server actions
│   ├── services/         # Business logic and data access
│   └── db/              # Database configuration
├── content/              # MDX and static content
│   ├── docs/            # Documentation content
│   ├── blog/            # Blog content
│   ├── faq/             # FAQ content
│   └── features/        # Feature descriptions
├── styles/               # Global styles and Tailwind config
└── types/                # TypeScript type definitions

Read the full file on GitHub · 193 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

yesterday First seen · 193 lines · 0 tokens per session scan A b6792c6549db

Subscribe to this mod's changes

project is a cursor rule published in the GitHub repository lacymorrow/paperclip-hub (15 stars, last pushed yesterday), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,625 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-11-10.

CSS and styling Frontend Project management ai-agents drizzle-orm nextjs paperclip payload-cms plugin-registry

project next to 6 cursor rules from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
projectlacymorrow/paperclip-hub	Cursor rule	15	yesterday	MIT	A	0	Cursor
codex-premium-website-skillsTheGoat395/Codex-Skills	Cursor rule	137	20d ago	MIT	A	0	Cursor
componentss0vers/next-app-i18n-starter	Cursor rule	66	4d ago	MIT	A	0	Cursor
always-push-pritsmemeworks/adhx	Cursor rule	19	5d ago	MIT	A	279	Cursor
ui-design-systemkrivoox/agent-stack-template	Cursor rule	30	1mo ago	MIT	A	0	Cursor
uiuseshape/Shape	Cursor rule	34	yesterday	none	A	0	Cursor
astro-development-guidelinesWebDevPeterGriffin/The-VibeCode-Bible	Cursor rule	42	7d ago	none	A	79	Cursor