Vibe Coding Rules Kit: Cursor Rules, CLAUDE.md, AGENTS.md, 1-Command Installer, AI Coding Prompts for Copilot, Windsurf, Lovable, Bolt

INSTANT DOWNLOAD - works anywhere in the world, no shipping, no waiting.

Stop your AI coding tool from wrecking working code, leaking your API keys and going round in circles. ⚡🔒

The Vibe Coding Rules Kit gives Cursor, Claude Code, GitHub Copilot, Windsurf, Replit, Lovable and Bolt a clear set of house rules: plan first, stay in scope, test the work, and keep your secrets and user data safe. Pick your stack, run one command, done.

Instant download. Plain Markdown files that work on Mac, Windows and Linux. No subscription, no account, nothing to sign up for.

━━━━━━━━━━━━━━━━━━
✨ WHAT MAKES IT DIFFERENT
━━━━━━━━━━━━━━━━━━
✔ 1-command installer. Most rule packs are a folder of text files you have to copy into hidden folders yourself. This kit installs itself: answer two questions (your stack and your AI tools) and it puts every file in the right place, keeps any rules you already have (it adds the kit's rules above them and backs up anything it changes), and adds your .env files to .gitignore. Mac, Linux and Windows PowerShell. No terminal? A copy-paste prompt lets your AI install it for you.

✔ 7 AI tools, 8 stacks, one kit. Native files in each tool's own format (Cursor .mdc rules, CLAUDE.md, AGENTS.md, Copilot instructions, Windsurf / Devin rules, replit.md, plus a paste-in file for Lovable and Bolt and an agents.md file for Bolt), all generated from one source so every tool follows the same rules. Each tool gets the security rules in a file it always loads. File locations checked against each tool's official docs in October 2026.

✔ Security guardrails built in. AI-built apps keep making the same dangerous mistakes: API keys in frontend code, Supabase tables with no Row Level Security, routes that let any user read anyone's data, .env files pushed to GitHub. Every bundle tells the AI how to avoid them, with a clear priority order (security first, then your request, then stack conventions) so the rules never pull in different directions. You also get a 21-point security & secret-safety checklist plus 6 security-review prompts.

━━━━━━━━━━━━━━━━━━
🧱 8 STACK BUNDLES
━━━━━━━━━━━━━━━━━━
1. General (any language or framework)
2. Next.js + React
3. Next.js + Supabase
4. React + Vite + Supabase (Bolt, and Lovable projects made before 13 May 2026)
5. TanStack Start + Supabase (Lovable projects made since 13 May 2026)
6. Python + FastAPI
7. Expo mobile app (iOS and Android)
8. Expo + Supabase

Each bundle has a main rules file plus folder-specific rules (components, API routes, database migrations, tests) that only load when they're relevant.

━━━━━━━━━━━━━━━━━━
🧰 WORKS WITH
━━━━━━━━━━━━━━━━━━
Cursor · Claude Code · GitHub Copilot · Windsurf (Devin Desktop) · Replit Agent · Lovable · Bolt · plus any tool that reads AGENTS.md, such as OpenAI Codex, Zed and Amp.

━━━━━━━━━━━━━━━━━━
🤖 WHAT THE RULES MAKE YOUR AI DO
━━━━━━━━━━━━━━━━━━
• Read the code before changing it, and share a plan before multi-file changes
• Make small, in-scope edits instead of rewriting files that already work
• Ask before deleting files, adding packages or changing the database
• Stop after two failed fixes and give you options instead of spiralling
• Never delete or skip a test just to make it "pass"
• Run the checks, and tell you honestly what passed
• Finish every task with what changed, how to test it and any risks

━━━━━━━━━━━━━━━━━━
📦 WHAT'S IN THE ZIP
━━━━━━━━━━━━━━━━━━
• START-HERE.pdf: 9-page quick-start guide (pick your stack flowchart, install, check it works, troubleshooting)
• install.sh + install.ps1: the one-command installers
• INSTALL-WITH-AI.md: install with no terminal, plus Lovable and Bolt steps
• 8 stack bundles with files for every tool listed above
• 42 copy-paste prompts: planning, building, debugging, refactoring, security review, shipping and session handoffs. Every prompt does one job, with no filler or near-duplicates.
• The Weekend Ship Plan: Friday to Sunday, from idea to live link
• Security & secret-safety checklist and launch checklist

━━━━━━━━━━━━━━━━━━
👤 WHO IT'S FOR
━━━━━━━━━━━━━━━━━━
• Beginners and non-coders building apps with AI who want fewer disasters
• Indie hackers and founders shipping fast with Cursor or Claude Code
• Developers who want one set of rules across every AI tool they use

━━━━━━━━━━━━━━━━━━
⬇️ HOW IT WORKS
━━━━━━━━━━━━━━━━━━
1. Buy and download the zip from your Etsy Purchases page.
2. Unzip it and open START-HERE.pdf.
3. Run the installer in your project folder (or paste the install prompt into your AI).
4. Start a new chat in your AI tool. That's it.

━━━━━━━━━━━━━━━━━━
📝 GOOD TO KNOW
━━━━━━━━━━━━━━━━━━
• This is a DIGITAL DOWNLOAD. No physical item will be sent.
• You need your own AI coding tool (Cursor, Claude Code, etc.). The kit doesn't include any software subscriptions.
• The installer is a short, readable script. It only works inside the project folder you choose: it copies the rule files, adds lines to .gitignore, and saves a backup of anything it changes. It never connects to the internet.
• Rules make AI mistakes much less likely but can't guarantee perfect code. Always review AI-written code, especially anything involving security, payments or personal data.
• Written and designed by Theodore Creates Co. with the help of AI tools, then checked and tested before release.
• Licence: use in unlimited personal and client projects. Please don't resell or share the kit itself.
• Because it's a digital download, refunds aren't available, but if anything isn't working, message me and I'll help.

Questions? Send me a message. I'm happy to help you pick the right stack. 💬