# Typescript > Engineer, review, debug, secure, or test TypeScript code, .ts/.tsx files, tsconfig and module settings, type definitions, async flows, dependencies, and TypeScript tooling. - **Type:** Skill - **Install:** `agentstack add skill-dayfinggg-claude-code-codex-skills-typescript` - **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior - **Seller:** [dayfinggg](https://agentstack.voostack.com/s/dayfinggg) - **Installs:** 0 - **Category:** [AI & ML](https://agentstack.voostack.com/c/ai-and-ml) - **Latest version:** 0.1.0 - **License:** MIT - **Upstream author:** [dayfinggg](https://github.com/dayfinggg) - **Source:** https://github.com/dayfinggg/claude-code-codex-skills/tree/main/codex/skills/typescript - **Website:** https://dayfinggg.github.io/claude-code-codex-skills/ ## Install ```sh agentstack add skill-dayfinggg-claude-code-codex-skills-typescript ``` Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent. ## About # TypeScript Use this skill to make focused, production-quality TypeScript changes. Prefer the project's existing architecture, package manager, compiler settings, framework conventions, lint rules, and test strategy over generic advice. ## Operating Workflow 1. Inspect the project before proposing or editing: `package.json`, lockfile, `tsconfig*`, lint/format/test configs, framework config, nearby modules, and existing tests. 2. Identify the package manager and scripts from the repo. Do not assume `npm`, `pnpm`, `yarn`, `bun`, Jest, Vitest, ESLint, or a framework until verified. ## Mandatory Quality Rules - Maintain or improve type safety. Do not silence errors with `any`, broad assertions, `@ts-ignore`, `@ts-expect-error`, or non-null assertions unless there is a documented, narrow reason. - Keep runtime behavior and types aligned. TypeScript types do not validate untrusted input at runtime. - Prefer clear domain names, explicit boundaries, and boring control flow over clever type gymnastics. - Keep functions small enough to test and reason about, but avoid single-use abstractions. - Preserve generated files unless the repo clearly expects them to be regenerated. ## Type System Rules - Prefer `unknown` at trust boundaries and narrow with runtime checks, parsers, schemas, or type guards. - Use `any` only at unavoidable interop boundaries, confine it to the smallest scope, and convert immediately to a safer type. - Let local variables infer when obvious. Add explicit return types for exported functions, public APIs, callbacks crossing package boundaries, and complex async flows. - Model state with discriminated unions, literal unions, generics with clear constraints, and exhaustive `switch` checks using `never` where useful. - Use `satisfies` to check object literals while preserving useful narrow types. Use `as const` to prevent literal widening and produce readonly views; it does not freeze runtime objects. - Prefer `readonly` for shared data, public config, and values that should not be mutated through that typed view. It is shallow and can be bypassed through mutable aliases, so copy or freeze only when runtime immutability is a real invariant. - Avoid truthiness checks when `0`, `""`, `false`, or empty arrays are valid values. Use explicit nullish checks. - Distinguish `undefined`, optional properties, and `null` intentionally. Do not blur absence semantics. - Avoid ambient global declarations unless integrating with a known runtime or framework pattern. - Keep declaration files accurate; do not widen external types to hide implementation errors. ## Compiler And Module Discipline - Respect the existing `tsconfig` inheritance, project references, path aliases, module target, JSX mode, and `moduleResolution`. - Validate emit `target`, ambient `lib` declarations, and actual runtime/API support separately. `lib` supplies types rather than polyfills, and `ESNext` changes with the compiler version; prefer an explicit edition when reproducible output matters. - For TypeScript 6/7 migrations, identify the actual compiler binary/package and every tool that embeds the compiler API before changing defaults. TypeScript 7's native compiler/tooling surface can require a compatibility TypeScript 6 package or side-by-side compilers for frameworks, language services, linters, build tools, declaration emitters, and plugins. - Use repository scripts or project mode. TypeScript 6+ rejects file arguments beside a discovered `tsconfig.json` unless `--ignoreConfig` is explicit; older compilers could silently ignore project settings. Never use `--ignoreConfig` without reconstructing and verifying all intended options. - Prefer strict compiler settings for new projects. In existing projects, do not flip broad strictness flags unless the task is to migrate strictness or the fallout is fully handled. - Consider strictness flags such as `strict`, `noUncheckedIndexedAccess`, `exactOptionalPropertyTypes`, `noImplicitOverride`, and `useUnknownInCatchVariables` only after checking current settings and project tolerance. - Align ESM/CJS choices with `package.json` `type`, `exports`, runtime target, bundler, and test runner. Do not mix module systems casually. - Use `import type`/`export type` when imports are type-only and the repo's compiler/lint settings support or require it. - Prefer import attributes using `with` where the project/runtime supports them; treat legacy import assertions as migration-sensitive. - Keep `paths` aliases, package exports, and runtime resolution consistent. Do not create aliases that only TypeScript understands unless the runtime/bundler also resolves them. - When relying on Node's built-in TypeScript execution/type stripping, remember it does not typecheck, ignores most `tsconfig` behavior, and does not replace the project's compiler, bundler, or tests. - Avoid broad barrel exports that create cycles or unstable public surfaces. Use package-level `index.ts` only for intentional API boundaries. ## Architecture And Module Structure - Follow the local organization first: feature folders, domain modules, service/adapters, app/router/controller layers, or framework conventions already present. - Separate domain logic from I/O, framework glue, persistence, network calls, and environment access. - Put validation and normalization at boundaries: HTTP handlers, CLI inputs, environment config, files, queues, database rows, and third-party API responses. - Keep public APIs narrow and stable. Avoid deep imports across packages unless the repo already treats them as internal. - Prefer dependency injection or explicit parameters for external services, clocks, random IDs, and configuration when it improves testability. - Avoid hidden global mutable state, import-time side effects, and singleton caches unless they are an established project pattern. - In monorepos, respect package ownership, project references, workspace boundaries, and published package contracts. ## Implementation Patterns - Gate newer ECMAScript features such as `RegExp.escape`, import attributes, iterator helpers, set methods, `Promise.try`, and Float16 APIs on the project's runtime, browser support, transpilation target, or polyfill policy before using them. - Prefer plain objects, arrays, maps, and small functions unless classes match existing code or encapsulate stateful behavior clearly. - Use typed `Result`/`Either`, discriminated responses, or existing error conventions for expected failures. Throw only for exceptional conditions in codebases that use exceptions that way. - Keep date, time zone, currency, locale, and serialization behavior explicit when user-visible or persisted. - Use stable IDs and deterministic ordering where tests, snapshots, or APIs depend on output shape. - Avoid overloading and conditional types unless they simplify call sites materially. ## Async And Concurrency - Await promises or intentionally handle them. Do not leave floating promises unless the repo has a safe fire-and-forget helper. - Use `Promise.all` for independent work and sequential `await` when order, rate limits, transactions, or side effects require it. - Bound concurrency for network, filesystem, database, queue, and CPU-heavy work. Prefer existing limiters/pools. - Support cancellation/timeouts with `AbortSignal` or the project's established cancellation primitive for external calls and long-running work. - Retry only transient failures, only when the operation is idempotent or protected by an idempotency key, with bounded attempts, backoff plus jitter, and `Retry-After` support when available. - Clean up resources with `finally`, disposal helpers, or framework lifecycle hooks. - Avoid mixing callbacks, event emitters, streams, and promises without clear error propagation. - Do not make constructors async. Use async factories or explicit initialization. ## Testing Strategy - Test runtime validation failures, not just happy paths. - For type-level behavior, use the repo's existing type-test setup if present. Do not invent a new one unless the task requires it. - Keep snapshots minimal and stable. Prefer semantic assertions over large snapshots. - If a test is flaky or environment-dependent, state that and isolate the cause instead of weakening assertions silently. ## Security And Runtime Safety - Avoid `eval`, dynamic `Function`, unsafe template execution, and shell command construction from untrusted input. - Normalize filesystem paths before access and preserve workspace/project boundaries. ## Dependency And Tooling Discipline - For package publishing, prefer registry trusted publishing, OIDC, provenance, and minimal CI permissions over long-lived tokens when the ecosystem and project support them. - Do not introduce a new framework, compiler, bundler, formatter, lint stack, test runner, schema library, or state manager unless the task explicitly requires it. - Use local project scripts and local binaries. Avoid commands that implicitly download packages unless the user approves or the project convention requires it. - Keep formatting mechanical and localized. Run the repo's formatter only on touched files unless the project expects broader formatting. - Respect CI as the source of truth when local checks differ; report local environment limitations clearly. - Read [compiler and runtime compatibility](references/compiler-runtime-compatibility.md) before compiler upgrades, config changes, module-resolution work, package publishing, or Node type stripping. ## Validation Default validation order: 1. Typecheck: run the repo script if present, otherwise use the local TypeScript compiler with the relevant `tsconfig`. 2. Lint/format check: run configured checks for touched files or the smallest relevant package. 3. Tests: run targeted tests first; broaden to package or full-suite tests when shared behavior, public APIs, or risk justify it. 4. Build: run when changing bundling, module exports, framework config, generated types, packaging, or runtime entry points. 5. Runtime/manual check: run the app, CLI, or focused script when static checks cannot prove behavior. ## References - Read [compiler and runtime compatibility](references/compiler-runtime-compatibility.md) for TypeScript 6/7 migration, compiler-API consumers, `target`/`lib`, module resolution, type-only guarantees, declarations, and Node execution. - Read [authoritative TypeScript sources](references/sources.md) for current compiler releases and exact option semantics. Verify the locally installed compiler and every consuming tool rather than assuming the docs site's current version. ## Source & license This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code. - **Author:** [dayfinggg](https://github.com/dayfinggg) - **Source:** [dayfinggg/claude-code-codex-skills](https://github.com/dayfinggg/claude-code-codex-skills) - **License:** MIT - **Homepage:** https://dayfinggg.github.io/claude-code-codex-skills/ Install and usage instructions live in the source repository linked above. ## Pricing - **Free** — Free ## Security capabilities Automated source analysis of v0.1.0 — what this tool can access: - **Network access:** no - **Filesystem access:** no - **Shell / process execution:** no - **Environment & secrets:** no - **Dynamic code execution:** no *"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.* ## Versions - **0.1.0** — security scan: passed — Imported from the upstream source. ## Links - Listing page: https://agentstack.voostack.com/l/skill-dayfinggg-claude-code-codex-skills-typescript - Seller: https://agentstack.voostack.com/s/dayfinggg - Browse the marketplace: https://agentstack.voostack.com/browse --- Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.