Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/Pranav-Karra-3301/tucknpx agentmods add rules/pranav-karra-3301/tuck/typescriptWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/rules/pranav-karra-3301/tuck/typescript)<a href="https://agentmods.dev/rules/pranav-karra-3301/tuck/typescript"><img src="https://agentmods.dev/badge/rules/pranav-karra-3301/tuck/typescript/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/rules/pranav-karra-3301/tuck/typescript"><img src="https://agentmods.dev/badge/rules/pranav-karra-3301/tuck/typescript.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.00407 |
| Opus 5.5 | $0.00000 | $0.00163 |
| Sonnet 5.5 | $0.00000 | $0.00081 |
| Haiku 4.5 | $0.00000 | $0.00041 |
Grade A, and why
typescript scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
TypeScript Rules
Type Safety
-
NEVER use
anytype// Bad const data: any = JSON.parse(content); // Good const data: unknown = JSON.parse(content); const validated = Schema.parse(data); -
Use explicit types for functions
// Bad const process = async (path) => { ... }; // Good const process = async (path: string): Promise<void> => { ... }; -
Prefer
unknownoverany- Use type guards to narrow
unknown - Use Zod for runtime validation
- Use type guards to narrow
Import Conventions
ALWAYS use .js extension for local imports (ESM requirement):
// Correct
import { getTuckDir } from '../lib/paths.js';
import type { TuckConfig } from '../types.js';
// Wrong - will fail at runtime
import { getTuckDir } from '../lib/paths';
Interface vs Type
- Use
interfacefor object shapes - Use
typefor unions, intersections, primitives
// Objects
interface FileChange {
path: string;
status: 'added' | 'modified' | 'deleted';
}
// Unions/primitives
type Status = 'pending' | 'complete' | 'error';
type Path = string;
Constants
- Use
constfor variables that won't change - Never use
var - Use
letonly when reassignment is needed
Nullish Values
- Prefer
undefinedovernull - Use optional chaining
?. - Use nullish coalescing
??
// Good
const value = obj?.nested?.property ?? 'default';
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 79 lines · 0 tokens per session scan A 14f870ae028a
typescript is a cursor rule published in the GitHub repository Pranav-Karra-3301/tuck (15 stars, last pushed 2mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 407 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other cursor rules, from other repositories
npm-cli-packaging-agent
Apply when preparing a TypeScript CLI tool for distribution via npm, specifically when configuring package.json, handling executables, and considering cross-platform compatibility. Covers the bin field, shebang line (#!/usr/bin/env node), pre-publish checks, installation instructions, and Node engine compatibility.
ts-dependency-management-agent
Apply when adding, removing, or managing dependencies, or when structuring code modules in a TypeScript project, especially for CLIs. Promotes minimizing external dependencies, using lockfiles (package-lock.json), vetting dependencies, following SOLID principles for modular code, and using dependency injection for…
ts-cli-argument-handling-agent
Apply when implementing command-line argument validation or interactive user prompts in a TypeScript CLI. Guides towards rigorous validation, clear error messages, user-friendly interactive fallbacks (e.g., using Inquirer.js) for missing inputs, sensible defaults, and support for non-interactive execution modes (e.g.…
ts-cli-command-definition-agent
Apply when defining or modifying CLI commands, subcommands, and options in a TypeScript project, particularly when using libraries like Commander.js or Yargs. Ensures use of robust parsing, POSIX-style flags, descriptive names, clear argument notation, and separation of parsing from implementation logic.
ts-cli-project-structure-agent
Apply when discussing or modifying the project structure of a TypeScript CLI tool. Ensures adherence to conventional layouts (bin/, src/commands/, src/utils/, src/lib/) for better navigation, scalability, and testability, especially when organizing source code, build outputs, and configuration.
no-bare-casts
No bare as casts in production TypeScript. Use blindCast (value) from @internal/utils/casts as the auditable escape hatch, castAs (value) for declarative-only assertions, or rewrite to eliminate the cast. as const is exempt. Test files are exempt.