skills/vercel__vercel-plugin
1
0
Fork 0
mirror of https://github.com/vercel/vercel-plugin.git synced 2026-09-14 15:39:47 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
orchestrator
vercel__vercel-plugin/engine/auth.md
T
John Lindquist 3a8a8b2bea feat: fix on-demand skill install pipeline, add 7 new engine rules, sync registries 
- Fix skill store cross-root slug lookup: installed skills under registrySlug
  names (e.g., next-best-practices) now resolve when queried by engine name
  (e.g., nextjs). Full-body injection rate went from 5% to 78% in evals.

- Fix on-demand install: remove dead hooks.json registrations (library module
  with no entry point), keep inline calls from pretooluse/user-prompt-submit.
  Non-registry skills now dedup normally instead of wastefully reinjectiing
  summary-only content that can never upgrade.

- Add suppressWhenProjectFacts to engine rules: next-upgrade and turbopack
  suppressed in greenfield mode (was 12 useless injections per session).

- Add deriveRegistryInstallSet to orchestrator-install-plan (was missing
  export that crashed on-demand-skill-install on every invocation).

- Sync all engine rule registries from skills.sh API via build-registry.ts.
  22 skills now have registry backing across 11 official Vercel repos.
  Exclude vercel-labs/vercel-plugin and vercel/vercel-plugin self-references.

- Add build:registry to the build pipeline (hooks → registry → manifest).

- Create 7 new engine rules: electron, vercel-composition-patterns,
  vercel-react-native-skills, web-design-guidelines, deploy-to-vercel,
  vercel-react-view-transitions, workflow-init.

- Add .claude/skills/ to .gitignore (installed skill caches).

- Add Verification Checklist to CLAUDE.md.
2026-04-08 22:54:49 -06:00

5.0 KiB
Raw Permalink Blame History

name, docs, sitemap, pathPatterns, bashPatterns, validate, retrieval, chainTo
name docs sitemap pathPatterns bashPatterns validate retrieval chainTo
auth
https://authjs.dev/getting-started
https://nextjs.org/docs/app/building-your-application/authentication
https://authjs.dev/sitemap.xml
middleware.ts
middleware.js
src/middleware.ts
src/middleware.js
clerk.config.*
app/sign-in/**
app/sign-up/**
src/app/sign-in/**
src/app/sign-up/**
app/(auth)/**
src/app/(auth)/**
auth.config.*
auth.ts
auth.js
\bnpm\s+(install|i|add)\s+[^\n]*@clerk/nextjs\b
\bpnpm\s+(install|i|add)\s+[^\n]*@clerk/nextjs\b
\bbun\s+(install|i|add)\s+[^\n]*@clerk/nextjs\b
\byarn\s+add\s+[^\n]*@clerk/nextjs\b
\bnpm\s+(install|i|add)\s+[^\n]*@descope/nextjs-sdk\b
\bpnpm\s+(install|i|add)\s+[^\n]*@descope/nextjs-sdk\b
\bbun\s+(install|i|add)\s+[^\n]*@descope/nextjs-sdk\b
\byarn\s+add\s+[^\n]*@descope/nextjs-sdk\b
\bnpm\s+(install|i|add)\s+[^\n]*@auth0/nextjs-auth0\b
\bpnpm\s+(install|i|add)\s+[^\n]*@auth0/nextjs-auth0\b
\bbun\s+(install|i|add)\s+[^\n]*@auth0/nextjs-auth0\b
\byarn\s+add\s+[^\n]*@auth0/nextjs-auth0\b
pattern message severity skipIfFileContains upgradeToSkill upgradeWhy
VERCEL_CLIENT_(ID|SECRET)|vercel.com/oauth/(authorize|access_token|token) Hand-rolled Vercel OAuth detected. Use the dedicated Sign in with Vercel skill for OIDC-based Vercel identity. recommended signInWithVercel|@vercel/auth sign-in-with-vercel Replace manual Vercel OAuth token exchange with the Sign in with Vercel OIDC provider.
pattern targetSkill message
VERCEL_CLIENT_(ID|SECRET)|vercel.com/oauth/(authorize|access_token|token) sign-in-with-vercel Hand-rolled Vercel OAuth detected — loading Sign in with Vercel OIDC guidance.
pattern targetSkill message
export\s+(default\s+)?function\s+middleware routing-middleware Auth logic in middleware.ts — loading Routing Middleware guidance for proxy.ts migration in Next.js 16.
pattern targetSkill message
from\s+[''"](jsonwebtoken)[''"]|require\s*(\s*[''"](jsonwebtoken)[''"]|jwt.sign\s*( auth Manual JWT handling with jsonwebtoken detected — use Clerk or Auth.js for managed auth with built-in JWT session handling, CSRF protection, and token rotation.
pattern targetSkill message
from\s+[''"](next-auth)[''"]|NextAuthOptions|authOptions\s*: auth Legacy next-auth (v4) pattern detected — loading auth guidance for Auth.js v5 migration with the new universal auth() helper.
pattern targetSkill message
from\s+['"]@clerk/nextjs['"] auth Clerk import detected — loading Auth guidance for Clerk v7 patterns, middleware setup, organization handling, and Vercel Marketplace integration.
pattern targetSkill message
bcrypt|argon2 auth Manual password hashing detected (bcrypt/argon2) — use Clerk or Auth0 for managed authentication with built-in password hashing, rate limiting, and breach detection.
aliases intents entities
authentication
login system
sign in
auth flow
add auth
protect routes
manage sessions
implement login
secure api endpoints
NextAuth
Auth.js
JWT
OAuth
session
middleware
getServerSession
pattern targetSkill message
VERCEL_CLIENT_(ID|SECRET)|vercel.com/oauth/(authorize|access_token|token) sign-in-with-vercel Hand-rolled Vercel OAuth detected — loading Sign in with Vercel OIDC guidance.
pattern targetSkill message
export\s+(default\s+)?function\s+middleware routing-middleware Auth logic in middleware.ts — loading Routing Middleware guidance for proxy.ts migration in Next.js 16.
pattern targetSkill message
from\s+[''"](jsonwebtoken)[''"]|require\s*(\s*[''"](jsonwebtoken)[''"]|jwt.sign\s*( auth Manual JWT handling with jsonwebtoken detected — use Clerk or Auth.js for managed auth with built-in JWT session handling, CSRF protection, and token rotation.
pattern targetSkill message
from\s+[''"](next-auth)[''"]|NextAuthOptions|authOptions\s*: auth Legacy next-auth (v4) pattern detected — loading auth guidance for Auth.js v5 migration with the new universal auth() helper.
pattern targetSkill message skipIfFileContains
from\s+['"]@clerk/nextjs['"] auth Clerk import detected — loading Auth guidance for Clerk v7 patterns, middleware setup, organization handling, and Vercel Marketplace integration. clerkMiddleware|ClerkProvider
pattern targetSkill message skipIfFileContains
bcrypt|argon2 auth Manual password hashing detected (bcrypt/argon2) — use Clerk or Auth0 for managed authentication with built-in password hashing, rate limiting, and breach detection. @clerk|@auth0

Guidance for auth. Install from registry for full content.

Reference in New Issue View Git Blame Copy Permalink