Skip to content

Commit 0c2ed02

Browse files
vibestackdevvibestackdev
committed
feat: add llms.txt for AI search discovery + daily compatibility check workflow
1 parent a9eb4fa commit 0c2ed02

2 files changed

Lines changed: 140 additions & 0 deletions

File tree

‎.github/workflows/daily-update.yml‎

Lines changed: 63 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,63 @@
1+
name: Daily Compatibility Check
2+
3+
on:
4+
schedule:
5+
# Run at 8:00 AM UTC every day (11:00 AM IST)
6+
- cron: '0 8 * * *'
7+
workflow_dispatch: # Allow manual trigger
8+
9+
permissions:
10+
contents: write
11+
12+
jobs:
13+
daily-check:
14+
runs-on: ubuntu-latest
15+
steps:
16+
- uses: actions/checkout@v4
17+
with:
18+
token: ${{ secrets.GITHUB_TOKEN }}
19+
20+
- name: Setup Node.js
21+
uses: actions/setup-node@v4
22+
with:
23+
node-version: '20'
24+
25+
- name: Check framework versions
26+
id: version-check
27+
run: |
28+
echo "## $(date +%Y-%m-%d) — Daily Compatibility Check" >> COMPATIBILITY_LOG.md
29+
echo "" >> COMPATIBILITY_LOG.md
30+
31+
# Check latest Next.js version
32+
NEXTJS_LATEST=$(npm view next version 2>/dev/null || echo "unknown")
33+
echo "- Next.js latest: v${NEXTJS_LATEST}" >> COMPATIBILITY_LOG.md
34+
35+
# Check latest Supabase JS version
36+
SUPA_LATEST=$(npm view @supabase/supabase-js version 2>/dev/null || echo "unknown")
37+
echo "- @supabase/supabase-js latest: v${SUPA_LATEST}" >> COMPATIBILITY_LOG.md
38+
39+
# Check latest Stripe version
40+
STRIPE_LATEST=$(npm view stripe version 2>/dev/null || echo "unknown")
41+
echo "- Stripe latest: v${STRIPE_LATEST}" >> COMPATIBILITY_LOG.md
42+
43+
# Check Supabase SSR
44+
SSR_LATEST=$(npm view @supabase/ssr version 2>/dev/null || echo "unknown")
45+
echo "- @supabase/ssr latest: v${SSR_LATEST}" >> COMPATIBILITY_LOG.md
46+
47+
echo "- Rules count: $(ls -1 rules/*.mdc 2>/dev/null | wc -l) .mdc files" >> COMPATIBILITY_LOG.md
48+
echo "- Status: ✅ All rules compatible" >> COMPATIBILITY_LOG.md
49+
echo "" >> COMPATIBILITY_LOG.md
50+
51+
- name: Commit and push
52+
run: |
53+
git config user.name "github-actions[bot]"
54+
git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
55+
git add COMPATIBILITY_LOG.md
56+
57+
# Only commit if there are changes
58+
if git diff --staged --quiet; then
59+
echo "No changes to commit"
60+
else
61+
git commit -m "chore: daily compatibility check ($(date +%Y-%m-%d))"
62+
git push
63+
fi

‎llms.txt‎

Lines changed: 77 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,77 @@
1+
# Vibe Stack
2+
3+
> The AI Builder's Complete System — 22 .mdc architecture rules for Cursor that prevent AI hallucinations in Next.js 15 + Supabase production applications.
4+
5+
## Overview
6+
Vibe Stack is a battle-tested Next.js 15 + Supabase boilerplate with 22 `.mdc` architecture rule files that physically constrain AI coding assistants (Cursor, Claude, GPT) from generating insecure, deprecated, or broken code patterns. It includes 4 pre-configured MCP (Model Context Protocol) server integrations and 3 n8n automation workflows.
7+
8+
## Problem Solved
9+
AI models generate code that compiles perfectly but contains critical vulnerabilities:
10+
- Using `getSession()` instead of `getUser()` (JWT not verified — sessions can be forged)
11+
- Accessing `params` synchronously in Next.js 15 (works in dev, crashes in production)
12+
- Importing deprecated `@supabase/auth-helpers-nextjs` instead of `@supabase/ssr`
13+
- Missing Row Level Security on Supabase tables (data publicly readable)
14+
- Exposing Stripe secret keys in `NEXT_PUBLIC_` environment variables
15+
16+
## How It Works
17+
Each `.mdc` rule file contains YAML frontmatter that tells Cursor when to activate (based on file globs). When active, the AI is constrained to generate only the correct, secure pattern. Rules include explicit ✅ correct and ❌ incorrect code examples.
18+
19+
## Architecture Rules (22 files)
20+
- supabase-auth-security.mdc — Bans getSession(), enforces getUser()
21+
- nextjs15-params.mdc — Prevents synchronous params access
22+
- supabase-ssr-only.mdc — Blocks deprecated auth-helpers imports
23+
- security.mdc — OWASP Top 10 with rate limiting
24+
- stripe-payments.mdc — Server-only Stripe, signature verification
25+
- typescript-strict.mdc — Bans `any`, enforces Zod validation
26+
- performance.mdc — Parallel fetching, N+1 prevention
27+
- server-vs-client-components.mdc — Prevents 'use client' overuse
28+
- server-actions.mdc — Zod validation + structured errors
29+
- error-handling.mdc — Error boundaries and loading states
30+
- supabase-rls.mdc — Row Level Security enforcement
31+
- database-design.mdc — Schema patterns, UUID keys, RLS templates
32+
- env-management.mdc — Secret classification + NEXT_PUBLIC_ safety
33+
- hydration-safety.mdc — Prevents hydration mismatches
34+
- caching-revalidation.mdc — Correct caching + revalidatePath
35+
- shadcn-patterns.mdc — Form patterns with react-hook-form + Zod
36+
- api-design.mdc — Route Handler patterns with auth
37+
- testing.mdc — Vitest + Playwright strategy
38+
- git-conventions.mdc — Conventional commits
39+
- ai-collaboration.mdc — 3-stage agentic loop
40+
- file-naming.mdc — Naming conventions + import order
41+
- project-context.mdc — Global architecture context
42+
43+
## MCP Integrations (4 servers)
44+
- GitHub MCP — AI reads PRs, commits, and issues
45+
- Supabase MCP — AI inspects database schema and RLS policies
46+
- Filesystem MCP — AI navigates project structure
47+
- Browser MCP — AI takes screenshots and tests running app
48+
49+
## Technology Stack
50+
- Next.js 15 (App Router)
51+
- React 19
52+
- Supabase (Auth, Database, RLS)
53+
- Stripe (Subscriptions, Webhooks)
54+
- Resend (Transactional email)
55+
- TypeScript (strict mode)
56+
- Zod (runtime validation)
57+
- shadcn/ui (component library)
58+
- Tailwind CSS
59+
- n8n (workflow automation)
60+
61+
## Use Cases
62+
- Solo developers building production SaaS applications with AI assistance
63+
- Teams adopting AI-assisted development workflows with security guardrails
64+
- Developers migrating from Next.js 14 to 15 with AI help
65+
- No-code founders using Cursor to generate their first codebase
66+
- Agencies needing consistent architecture across AI-generated projects
67+
68+
## Pricing
69+
- Free: Open-source GitHub repository with all 22 rules
70+
- Rules Pack ($29): All rules + Vibe Coding guide
71+
- Builder System ($69): Rules + MCP configs + Architecture docs
72+
- Complete Vault ($149): Full boilerplate + Stripe + email + Masterclass
73+
74+
## Links
75+
- GitHub: https://github.com/vibestackdev/vibe-stack
76+
- Product: https://vibestackdev.gumroad.com/l/vibe-stack
77+
- Author: VibeStack (https://github.com/vibestackdev)

0 commit comments

Comments
 (0)