Resume Coach - AI Resume Builder

Package manager

This repository uses pnpm.

Common commands

pnpm install
pnpm dev
pnpm test
pnpm test:e2e
pnpm lint
pnpm lint:fix
pnpm build

Local PostgreSQL

Start the local database:

docker compose up -d postgres

Use this connection for both DATABASE_URL and DATABASE_URL_UNPOOLED in .env.local:

postgresql://postgres:postgres@localhost:55432/resume_coach

Postgres is the only storage service: the chat agent's LangGraph checkpoints are kept in the langgraph schema of the same database, created automatically on first use. The Vercel Development environment stores this local endpoint, so refresh .env.local with:

vercel env pull .env.local --environment=development --yes

Then apply migrations and optionally seed development data:

pnpm exec prisma migrate deploy
pnpm seed

Database backup and restore commands are documented in .agents/skills/db-backup-restore/SKILL.md.

Vercel runs pending Prisma migrations before production builds. Preview builds never run migrations.

Playwright

pnpm exec playwright install --with-deps
pnpm test:e2e
pnpm test:e2e:ui
pnpm exec playwright test --project=chromium
pnpm exec playwright test --debug
pnpm exec playwright codegen

Remote MCP clients

Connect standards-compatible remote MCP clients to:

https://your-resume-coach-host/api/mcp

The endpoint advertises its OAuth 2.1/OIDC authorization server through RFC 9728 protected-resource metadata. Clients can register dynamically and use the authorization-code flow with PKCE. Users sign in through Resume Coach and must approve the mcp:tools scope before the client receives access.

Production deployments must use a high-entropy BETTER_AUTH_SECRET of at least 32 characters. Set BETTER_AUTH_URL to the public HTTPS origin when using a custom domain. On Vercel, the app derives it from the production hostname or, for previews, the deployment hostname when BETTER_AUTH_URL is unset.

After changing OAuth or MCP configuration, run the complete in-process flow against the local database:

pnpm test:mcp-oauth

The check creates and removes its own test user and OAuth client. It covers scope-less dynamic registration, PKCE and consent, token refresh, MCP access after web sign-out, connected-app listing, and immediate disconnection.

Notes

TODO:

• print improvements
  • explore https://pagedjs.org/documentation/5-web-design-for-print/
  • https://developer.mozilla.org/en-US/docs/Web/CSS/orphans
  • https://developer.mozilla.org/en-US/docs/Web/CSS/widows

LLM tactics:

• https://webcache.googleusercontent.com/search?q=cache:https://towardsdatascience.com/how-i-won-singapores-gpt-4-prompt-engineering-competition-34c195a93d41
• https://github.com/microsoft/LLMLingua