Enterprise TypeScript

Enterprise-grade TypeScript development standards with security enforcement, clean architecture validation, and SOC2 compliance support.

Overview

Key Rules

Security (Static)

• no-hardcoded-secrets — Detects API keys, passwords using Semgrep
• no-sql-injection — Blocks string concatenation in SQL queries
• no-eval — Forbids eval() and Function() execution

Type Safety (Static)

• strict-typescript — Enforces tsc --strict compilation
• no-any-type — Forbids the any type entirely

Code Quality (Static)

• no-console-in-production — Blocks console.log in production
• no-empty-catch — Requires meaningful error handling

Architecture (Semantic)

• clean-architecture — LLM validates domain/infrastructure separation
• input-validation-required — Ensures API handlers validate input

Quality Gates

quality_gates:
  code:
    test_coverage_minimum: 80
    require_types: strict
    max_complexity: 10
    max_file_length: 400
    forbidden_patterns:
      - "console\\.log"
      - "\\bany\\b"

Knowledge Units

Install

manifest install enterprise-typescript

Sample Rules

- name: no-hardcoded-secrets
  category: security
  enforcement: static
  detect:
    type: tool
    command: "semgrep --config=p/secrets --json {{file}}"
  action: block
  severity: critical
 
- name: clean-architecture
  category: quality
  enforcement: semantic
  detect:
    type: semantic
    criteria: "Domain logic must not import infrastructure"
    threshold: 0.85
  action: warn

View full manifest on GitHub →