# Project: My App## Tech Stack
- Next.js 14, TypeScript, Tailwind
- Supabase for auth & database
- Prisma ORM, TRPC API layer
## Conventions
- Always write tests before code
- Use conventional commits
- Never commit directly to main
- Run lint + typecheck before PR
## Architecture
- src/components → React components
- src/services → Business logic
- src/utils → Shared helpers
## Security
- No secrets in code or logs
- Validate all user inputs
- Use parameterised queries only