agentmods.dev

golden-path-onboarding

golden-path-onboarding is a cursor rule for Cursor from YuDefine/nuxt-supabase-starter. It costs 0 tokens per session (1,418 once invoked), scanned A, original, MIT.

An onboarding check for new projects that compares their deployment and CI setup with shared “golden paths,” meaning approved reusable setup patterns.

In plain words
What is it for?
Use it when a new project first touches CI/CD, deployment, or GitHub workflow files, especially for Docker-based deployments.
Why use it?
It catches missing deployment notifications, actions, workflow jobs, and secret references before they are discovered manually.

Cursor rule for Cursor

Written for Cursor: installed under .cursor/. Also seen: mentions CLAUDE.md; mentions AGENTS.md; mentions Codex.

not rated 45repo changed today A scan 0 tokens original MIT

Good fit Use it when a new project first touches CI/CD, deployment, or GitHub workflow files, especially for Docker-based deployments.

Compare 6 cursor rules from other repositories ↓
Install with agentmods
npx agentmods add rules/yudefine/nuxt-supabase-starter/golden-path-onboarding
View source ↗ YuDefine/nuxt-supabase-starter
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/YuDefine/nuxt-supabase-starter

Made for: Cursor.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for golden-path-onboarding

README.md
[![agentmods](https://agentmods.dev/badge/rules/yudefine/nuxt-supabase-starter/golden-path-onboarding.svg)](https://agentmods.dev/rules/yudefine/nuxt-supabase-starter/golden-path-onboarding)
Your own site
<a href="https://agentmods.dev/rules/yudefine/nuxt-supabase-starter/golden-path-onboarding"><img src="https://agentmods.dev/badge/rules/yudefine/nuxt-supabase-starter/golden-path-onboarding.svg" alt="Measured on agentmods" height="20"></a>
Per session 0 Nothing until a file matches its globs; then the whole rule loads.
When invoked 1,418 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00000 $0.01418
Opus 5 $0.00000 $0.00709
Sonnet 5 $0.00000 $0.00284
Haiku 4.5 $0.00000 $0.00142

Measured today against content hash 8e5aa8098622, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade A, and why

golden-path-onboarding scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

template/.cursor/rules/golden-path-onboarding.mdc · 66 lines

How it starts

The opening of the file, as written. The whole thing — 66 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Golden Path Onboarding

核心命題：clade 的 docs/golden-paths/ 定義了跨 consumer 共用的部署 / CI 樣板（Docker self-hosted deploy、Discord deploy-notify），vendor/actions/ 有對應的 vendored composite action。但這些 golden path 不會自動套用到新 consumer — 新 repo 開好後常整條漏掉，直到 user 手動發現才補。實證： / 兩個新 repo 一開始都沒有 Discord 部署通知。

這條 rule 把「對齊 golden path」變成 session 開場的反射動作，而非靠人肉發現。

MUST

  1. 首次在某 consumer 開 session 且該工作觸及 CI/CD / deploy / .github/ 時，MUST 先跑：

    node ~/offline/clade/scripts/audit-golden-path-adoption.ts --consumer <consumer_id>

  2. status 非 OK 且非 N/A（DRIFT / MISSING）→ 主動補齊缺項，不等 user 開口要求。補法對照 docs/golden-paths/docker-self-hosted-deploy.md：

    • discord-action 缺 → 該 vendored action 由 clade sync-vendor.ts 投影，跑 propagate 補上 .github/actions/discord-deploy-notify/
    • ci-notify-job 缺 → 在 deploy / CI workflow 尾端加 notify job（if: always()，uses: ./.github/actions/discord-deploy-notify）
    • webhook-secret 未引用 → notify job 傳入 webhook_url: ${{ secrets.DISCORD_WEBHOOK_URL }}，並提醒 user 在 GitHub repo Actions secrets 設定該值（值本身 audit 查不到，標 set=?）

  3. self-hosted-runner 是 informational：wrangler / Cloudflare 型 consumer 用 ubuntu-latest 合理，不因此判 drift。只有走 Docker self-hosted deploy 型（ / / / -*）才 MUST 用 [self-hosted, ...] runner。

  4. 同一時機 MUST 一併跑 CI gate 接線稽核（clade 散播的 blocking gate 只跑在 .husky/pre-push，--no-verify 與 web 編輯介面都能繞過）：

    node ~/offline/clade/scripts/audit-gate-coverage.ts

    § 2「CI composite action 載體」報「已散播但沒有任何 workflow 引用 → 從未執行」的，MUST 依 docs/golden-paths/clade-gate-ci.md 的範本補上 clade-gates job，同樣不等 user 開口要求。每一個有 .github/workflows/ 的 consumer 都適用；沒有 workflow 目錄的是 N/A，但該 consumer 一旦開始建 CI 就 MUST 一併補。

Golden Path Checklist（目前項目）

Read the full file on GitHub · 66 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today Changed · +1 lines 8e5aa8098622
  2. 4d ago First seen · 65 lines · 0 tokens per session scan A ec52f0d3c4ae

Subscribe to this mod's changes

golden-path-onboarding is a cursor rule published in the GitHub repository YuDefine/nuxt-supabase-starter (45 stars, last pushed today), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,418 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

CI and CDClaude CodeDevOps and cloudProject managementTDDai-assistednuxtsupabasetemplate
Related

Other cursor rules, from other repositories

viberaven-deploy

Apply before changing Vercel config or deploy CI workflows.

ohad6k/VibeRaven · 0 tokens

speckit_speckit.checklist

Proxy for the speckit.checklist workflow.

snowdreamtech/template · 65 tokens

ponytail

Ponytail, lazy senior dev mode. Always pick the simplest solution that works.

DietrichGebert/ponytail · 576 tokens

angular-20

This rule provides comprehensive best practices and coding standards for Angular development, focusing on modern TypeScript, standalone components, signals, and performance optimizations.

angular/angular · 0 tokens

dev-standard

Apache Superset development standards and guidelines for Cursor IDE.

apache/superset · 1,147 tokens

cli-error-handling

CLI command error handling patterns.

prisma/orm · 0 tokens