Resume Coach - AI Resume Builder
Package manager
This repository uses pnpm.
Common commands
pnpm install
pnpm dev
pnpm test
pnpm test:e2e
pnpm lint
pnpm lint:fix
pnpm build
Local PostgreSQL
Start the local database:
docker compose up -d postgres
Use this connection for both DATABASE_URL and DATABASE_URL_UNPOOLED in
.env.local:
postgresql://postgres:postgres@localhost:55432/resume_coach
Postgres is the only storage service: the chat agent's LangGraph checkpoints
are kept in the langgraph schema of the same database, created automatically
on first use. The Vercel Development environment stores this local endpoint, so
refresh .env.local with:
vercel env pull .env.local --environment=development --yes
Then apply migrations and optionally seed development data:
pnpm exec prisma migrate deploy
pnpm seed
Database backup and restore commands are documented in
.agents/skills/db-backup-restore/SKILL.md.
Vercel runs pending Prisma migrations before production builds. Preview builds
never run migrations.
Playwright
pnpm exec playwright install --with-deps
pnpm test:e2e
pnpm test:e2e:ui
pnpm exec playwright test --project=chromium
pnpm exec playwright test --debug
pnpm exec playwright codegen
Remote MCP clients
Connect standards-compatible remote MCP clients to:
https://your-resume-coach-host/api/mcp
The endpoint advertises its OAuth 2.1/OIDC authorization server through RFC
9728 protected-resource metadata. Clients can register dynamically and use the
authorization-code flow with PKCE. Users sign in through Resume Coach and must
approve the mcp:tools scope before the client receives access.
Production deployments must use a high-entropy BETTER_AUTH_SECRET of at least
32 characters. Set BETTER_AUTH_URL to the public HTTPS origin when using a
custom domain. On Vercel, the app derives it from the production hostname or,
for previews, the deployment hostname when BETTER_AUTH_URL is unset.
After changing OAuth or MCP configuration, run the complete in-process flow
against the local database:
pnpm test:mcp-oauth
The check creates and removes its own test user and OAuth client. It covers
scope-less dynamic registration, PKCE and consent, token refresh, MCP access
after web sign-out, connected-app listing, and immediate disconnection.
Notes
TODO:
LLM tactics:
