trycompai/comp

production-readiness

Run all audit checks (RBAC, hooks, design system, tests) and verify build

security-review

Check code for the most common, high-risk security vulnerabilities (broken access control, tenant isolation, injection, secrets, SSRF, auth/session, unsafe file handling, mass assignment) before it ships. Use after editing any API controller, guard, or auth…

check-results-service

How to reuse ANY integration check's results in a feature via the universal CheckResultsService (apps/api integration-platform). Use whenever a feature needs data produced by an integration check — "show 2FA status on People", "surface AWS S3 findings in X",…

responsive-ui

MANDATORY for any UI work in apps/app, apps/portal, or packages/design-system — every component, page, or layout change must work on mobile (~375px), tablet (~768px), desktop (~1280px), and large desktop (~1920px) BY DEFAULT, without being asked. Read this…

ui

Use when building or editing frontend UI components, layouts, styling, design system usage, colors, dark mode, or icons.

api-endpoint-contract

The contract every new or modified API endpoint must follow so it is correct for the public OpenAPI spec, the MCP server (npm @trycompai/mcp-server), the ValidationPipe, and the docs. Triggers on "new endpoint", "add API", "new DTO", "@Body",…

diagnose-generation-failure

Use when SDK generation failed or seeing errors. Triggers on "generation failed", "speakeasy run failed", "SDK build error", "workflow failed", "Step Failed", "why did generation fail"

generate-mcp-server

Use when generating an MCP server from an OpenAPI spec with Speakeasy. Triggers on "generate MCP server", "MCP server", "Model Context Protocol", "AI assistant tools", "Claude tools", "speakeasy MCP", "mcp-typescript"

manage-openapi-overlays

Use when creating, applying, or validating overlay files including x-speakeasy extensions. Covers overlay syntax, JSONPath targeting, retries, pagination, naming, grouping, open enums, global headers, custom security. Triggers on "create overlay", "apply…

speakeasy-context

Speakeasy workflow: run 'agent context' FIRST, do task, run 'agent feedback' LAST. Triggers on speakeasy, SDK, OpenAPI.

cleanup

MUST run after writing or modifying code — reviews changed files for verbose patterns, inconsistencies, and readability issues before considering work done

billing

Use when changing Comp AI billing, Stripe products/prices, subscription checkout, org payment methods, entitlements, usage ledgers, invoices, or billing webhooks.

audit-design-system

Audit & fix design system usage — migrate @trycompai/ui and lucide-react to @trycompai/design-system

audit-hooks

Audit & fix hooks and API usage patterns — eliminate server actions, raw fetch, and stale patterns

audit-rbac

Audit & fix RBAC and audit log compliance in API endpoints and frontend components

audit-tests

Audit & fix unit tests for permission-gated components

better-auth-best-practices

Configure Better Auth server and client, set up database adapters, manage sessions, add plugins, and handle environment variables. Use when users mention Better Auth, betterauth, auth.ts, or need to set up TypeScript authentication with email/password, OAuth,…

data

Use when implementing data fetching, API calls, server/client components, or SWR hooks

forms

Use when building forms - covers React Hook Form, Zod validation, and form patterns

infra

Use when working with packages, dependencies, monorepo structure, or build configuration

new-feature-setup

Use when starting a new feature, Linear ticket, or bugfix in this repo — establishes the branch + worktree + env + DB + dev-server conventions so the work is immediately ready to code without fighting infra. Triggers on "start a new feature", "spin up a…

prisma

Prisma schema conventions and migration workflow

production-readiness

Run all audit checks (RBAC, hooks, design system, tests) and verify build

prompt-engineering

Prompt engineering best practices - invoke with @prompt-engineering

trigger-advanced-tasks

Comprehensive rules to help you write advanced Trigger.dev tasks

trigger-basic

Only the most important rules for writing basic Trigger.dev tasks

new-feature-setup

Use when starting a new feature, Linear ticket, or bugfix in this repo — establishes the branch + worktree + env + DB + dev-server conventions so the work is immediately ready to code without fighting infra. Triggers on "start a new feature", "spin up a…

code

Use when writing TypeScript/React code - covers type safety, component patterns, and file organization

cursor-usage

How to write and manage Cursor rules - invoke with @cursor-usage

essentials

Critical rules that must always be followed

stale-worktree-cleanup

Use when cleaning up old git worktrees, removing worktrees whose branches have merged or been abandoned, or dropping orphaned compdev_* Postgres databases. Triggers on "clean up worktrees", "delete stale worktrees", "worktrees piling up", "orphaned…

trigger-config

Configure your Trigger.dev project with a trigger.config.ts file

trigger-realtime

How to use realtime in your Trigger.dev tasks and your frontend

trigger-scheduled-tasks

How to write and use scheduled Trigger.dev tasks

ui

Use when building or editing frontend UI components, layouts, styling, design system usage, colors, dark mode, or icons.