# My Project

## Overview
This is a Next.js e-commerce storefront with Stripe payments, NextAuth
authentication, and a PostgreSQL database via Prisma ORM.

## Tech Stack
- Framework: Next.js 14 (App Router, server components by default)
- Database: PostgreSQL with Prisma ORM
- Auth: NextAuth.js with GitHub and Google providers
- Payments: Stripe Checkout and webhooks
- Styling: Tailwind CSS with shadcn/ui components

## Development Phase
Currently building the product catalog and cart system. Authentication
and payment flows are complete. Next up: order history and admin dashboard.

## Code Style
- TypeScript strict mode enabled
- Prefer server components; use "use client" only when needed
- Use server actions for mutations (app/actions/)
- Validate all inputs with Zod schemas

## Commands
- `npm run dev` — start development server on port 3000
- `npm run build` — production build
- `npm run db:push` — push Prisma schema to database
- `npm run db:seed` — seed database with sample data
- `npm test` — run Jest test suite

## External Resources
- Design system: https://ui.shadcn.com
- API docs: Stripe API at https://stripe.com/docs/api

# Application Guidelines

## Architecture
- This is a monorepo managed with Turborepo
- Apps: web (Next.js), api (Express), mobile (React Native)
- Shared packages: ui, config, types

## Code Standards
- TypeScript strict mode in all packages
- Use barrel exports (index.ts) for public APIs
- No default exports; use named exports everywhere
- Prefer async/await over raw Promises

## API Design
- RESTful endpoints follow /api/v1/{resource} pattern
- All responses use { data, error, meta } envelope
- Validate request bodies with Zod schemas
- Return 4xx for client errors, 5xx for server errors

## Database
- Use Prisma ORM for all database operations
- Migrations checked into source control
- Soft-delete pattern: use deletedAt timestamp, never hard delete
- All timestamps stored as UTC

## Testing
- Jest for unit tests, Playwright for E2E
- Test files colocated: foo.ts -> foo.test.ts
- Mock external services, never call real APIs in tests