Imported from herloncosta/vault (AGENTS.md). Install upstream with npx skills add herloncosta/vault. Copyright stays with the author.

AGENTS.md

Name: vault
Author: herloncosta

Project structure

vault/
├── api/              # Express 5 REST API (Postgres + Prisma v7)
├── client/           # Vite + React 19 + TypeScript 6 SPA

Commands

Purpose	Directory	Command
API dev server (`--watch`)	`api/`	`npm run dev`
API production start	`api/`	`npm start`
Start Postgres	`api/`	`npm run db:up`
Stop Postgres	`api/`	`npm run db:down`
Apply schema	`api/`	`npm run db:push`
Create migration	`api/`	`npm run db:migrate`
Generate Prisma Client	`api/`	`npm run db:generate`
Open Prisma Studio	`api/`	`npm run db:studio`
Run seed	`api/`	`npm run db:seed`
Client dev server	`client/`	`npm run dev`
Build (tsc + vite)	`client/`	`npm run build`
Format via Prettier	`client/`	`npm run format`

API gotchas

Prisma v7 — datasource.url goes in prisma.config.js, not in schema.prisma. new PrismaClient() without a driver adapter fails; use PrismaPg with connectionString from env (see src/config/database.js).
Auth — tokens delivered via httpOnly cookies (accessToken, refreshToken). The client sends credentials: "include". Refresh token rotation invalidates the old token on each use. Access token also accepted as Authorization: Bearer header.
RBAC — ADMIN and OPERATOR (default). POST /api/users requires ADMIN. OPERATOR can only access own data.
Logger — pino + pino-pretty in dev, winston JSON in production (checked via NODE_ENV).
Modules — routes live in src/modules/{auth,users,transactions,recurring-expenses,installment-expenses}/.
Test requests — api/requests.http works with VS Code REST Client.
Full API reference at README.md and Swagger UI (GET /api-docs).

Client conventions

Styling — Tailwind CSS v4 via @tailwindcss/vite plugin. No CSS modules. Dark mode via .dark class on <html>, toggled by ThemeContext (persisted to localStorage key theme).
Prettier — config at client/.prettierrc (double quotes, trailing commas, 100 print width).
Icons — lucide-react.
Charts — recharts.
API layer — src/lib/api.ts handles all fetch calls, auto-refresh on 401, credentials: "include". Never use raw fetch. Session expiry handler via setOnUnauthorized.
Auth — AuthContext provides { user, loading, login, logout, updateProfile, refreshUser }.
TypeScript — verbatimModuleSyntax (use import type), erasableSyntaxOnly (no enums, no namespaces), noUnusedLocals/noUnusedParameters.
Routing — react-router-dom v7. Pages are lazy-loaded. Public route at /login, all other routes under /* wrapped in ProtectedLayout. Admin-only route at /admin/usuarios.
Route paths are in Portuguese — /perfil, /configuracoes, /transacoes, /despesas-fixas, /despesas-parceladas, /admin/usuarios.
Modals — use Modal component from src/components/modal.tsx (uses createPortal). Never inline overlay divs.

Utils

src/lib/currency.ts — fmt() (BRL string), parse() (BRL string → number), toInput() (number → BRL input string). Use instead of Intl.NumberFormat.

What's already built

All screens exist in client/src/pages/: login, home (dashboard), profile, settings, transactions, recurring-expenses, installment-expenses, admin-users. Do not create new top-level page files unless adding a new feature.

No tests

No test framework or test files exist in either api/ or client/.

{ "ocm": "1", "id": "herloncosta-vault-vault", "kind": "skill", "name": "vault", "description": "All screens exist in `client/src/pages/`: login, home (dashboard), profile, settings, transactions, recurring-expenses, installment-expenses, admin-users. Do not create new top-level page files unless adding a new feature.", "publisher": "herloncosta", "version": "1.0.0", "capabilities": { "domains": [ "data_analysis" ], "tags": [ "skill-md", "github-agents" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "All screens exist in `client/src/pages/`: login, home (dashboard), profile, settings, transactions, recurring-expenses, installment-expenses, admin-users. Do not create new top-level page files unless adding a new feature." ], "primary": false, "metadata": { "source": { "provider": "github-agents", "repository": "https://github.com/herloncosta/vault", "path": "AGENTS.md", "ref": "86619d455270f49c6d414700d33bf1c20075f460", "url": "https://github.com/herloncosta/vault/blob/86619d455270f49c6d414700d33bf1c20075f460/AGENTS.md", "key": "herloncosta/vault/AGENTS.md" } }, "instructions": "# AGENTS.md\n\n## Project structure\n\n```\nvault/\n├── api/ # Express 5 REST API (Postgres + Prisma v7)\n├── client/ # Vite + React 19 + TypeScript 6 SPA\n```\n\n## Commands\n\n| Purpose | Directory | Command |\n|---|---|---|\n| API dev server (`--watch`) | `api/` | `npm run dev` |\n| API production start | `api/` | `npm start` |\n| Start Postgres | `api/` | `npm run db:up` |\n| Stop Postgres | `api/` | `npm run db:down` |\n| Apply schema | `api/` | `npm run db:push` |\n| Create migration | `api/` | `npm run db:migrate` |\n| Generate Prisma Client | `api/` | `npm run db:generate` |\n| Open ", "cost": { "context_tokens": 888 } }

vault

About

AGENTS.md

Project structure

Commands

API gotchas

Client conventions

Utils

What's already built

No tests

Use it

Manifest

Reviews