coding-standards

A set of coding rules for GoZod, a Go library intended to match the TypeScript Zod validation library. It describes expected types, method behavior, errors, names, and performance choices.

In plain words
What is it for?
Use it when adding, reviewing, or changing GoZod code so new behavior follows the project's compatibility and type-safety requirements.
Why use it?
It gives contributors a shared standard for keeping the Go implementation consistent with Zod and with normal Go practices.

Cursor rule for Codex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add rules/kaptinlin/gozod/coding-standards
Clone the repo
git clone --depth 1 https://github.com/kaptinlin/gozod

Made for: Codex.

Per session 0 Nothing until a file matches its globs; then the whole rule loads.
When invoked 5,807 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00000 $0.05807
Opus 5 $0.00000 $0.02903
Sonnet 5 $0.00000 $0.01161
Haiku 4.5 $0.00000 $0.00581

Measured yesterday against content hash 6cb4dcc511f0, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

coding-standards scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/rules/coding-standards.mdc · 553 lines

How it starts

The opening of the file, as written. The whole thing — 553 lines — stays where its author put it; the contents beside it link to each section on GitHub.

GoZod Coding Standards and Best Practices

This document defines comprehensive coding standards and best practices for the GoZod validation library. It provides guiding principles for implementing Go code that ensures full compatibility with the TypeScript Zod v4 API while following Go language idioms and performance optimization principles.

🎯 Core Design Philosophy

1. Smart Type Inference First

  • Input-Output Consistency: Output the same type as input
  • Preserve Go Type Inference Advantages: String().Parse("hello")string, String().Parse(&"hello")*string
  • Nilable Modifier Semantics: Only changes handling of nil, doesn't change type inference logic
  • Avoid Type Coercion: Let Go's type system work naturally
  • Compile-time Type Safety: Use type system to prevent incorrect usage at compile time

2. Full TypeScript Zod v4 Correspondence

  • Complete API Compatibility: Maintain the same method signatures, parameters, and return value structures
  • Behavioral Consistency: Same input produces same output
  • Error Handling Correspondence: Error types and messages correspond to TypeScript version
  • Field Naming Consistency: Use the same naming conventions as JS version

3. Go Language Idioms

  • Use Go 1.26+ Features: Fully utilize generics, Swiss Tables, new(expr), self-referential constraints, and performance optimizations
  • Follow Go Conventions: Error handling, naming conventions, package organization
  • Value Types First: Use value types rather than pointer types for struct fields
  • Zero-Allocation Optimization: Avoid memory allocation when possible
  • new(expr) for pointer creation: Use new(expr) instead of tmp := expr; &tmp to create pointers from expressions
  • Compile-time constraint verification: All schema types must satisfy core.Describable and core.Refineable (verified in types/constraints_verify.go)

4. Avoid Over-Engineering

  • Simplified Implementation: Direct inlining rather than complex function wrapping
  • Remove Unnecessary Wrapping: Avoid intermediate variables and wrapper functions
  • Unified Patterns: Use consistent design patterns, avoid special cases
  • Progressive Complexity: Start simple, add complexity as needed

Read the full file on GitHub · 553 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 553 lines · 0 tokens per session scan A 6cb4dcc511f0

Subscribe to this mod's changes

coding-standards is a cursor rule published in the GitHub repository kaptinlin/gozod (24 stars, last pushed 1mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 5,807 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.