rauchg/gdp-ts

选用指南

AI 根据 README 整理 · 2026/10/14 14:31:04

使用方式

通过 npm 安装库和 linter，使用 npx 安装 AI skill。库提供 name()、defineProof() 等 API，linter 提供 ESLint 和 Oxlint 预设。

查看 README 依据

$ npx skills add rauchg/gdp-ts $ pnpm add @gdp-ts/core ``` Requires TypeScript 5.4 or newer. ## The problem A lot of codebases feature code like this: ```js async function handler(req, res) { await assertProjectAdmin(req.user.id, req.params.projectId); // throws 403 await setPasswordProtection(req.params.projectId, req.body.password); // nothing connects this to the line above res.sendStatus(204); } ``` Looks great, except: all it takes is - a developer to slip and miss the first `await`

time. [We rely on linting](skills/gdp-ts/references/recipe.md#6-turn-on-the-lint-preset) to prevent "cheating" (e.g: `{} as UserIsProjectAdmin<U, P>`). ## The package [`@gdp-ts/core`](https://www.npmjs.com/package/@gdp-ts/core) on npm ships two things: - **The library** (`@gdp-ts/core`): `name()`, `defineProof()`, `Named` and `Proof`, with no dependencies.

- **The linter** (`@gdp-ts/core/lint/eslint`, `@gdp-ts/core/lint/oxlint`): presets for ESLint and Oxlint that catch what the type checker can't, such as forging a proof with `as` or minting one outside `proofs/` ([setup](skills/gdp-ts/references/recipe.md#6-turn-on-the-lint-preset)). ## The skill `npx skills add rauchg/gdp-ts` installs a skill that guides coding agents through applying the pattern in your codebase. It is plain Markdown, so it doubles as the reference manual for humans:

部署要求

需要 TypeScript 5.4 或更高版本。

查看 README 依据

$ npx skills add rauchg/gdp-ts $ pnpm add @gdp-ts/core ``` Requires TypeScript 5.4 or newer. ## The problem A lot of codebases feature code like this: ```js async function handler(req, res) { await assertProjectAdmin(req.user.id, req.params.projectId); // throws 403 await setPasswordProtection(req.params.projectId, req.body.password); // nothing connects this to the line above res.sendStatus(204); } ``` Looks great, except: all it takes is - a developer to slip and miss the first `await`

已知限制

作者明确说明不保证防止伪造证明、过期证明等 TypeScript 的限制。

查看 README 依据

- [**Reading the errors**](skills/gdp-ts/references/errors.md): what the compiler catches, and what each message means. - [**What this does not guarantee**](skills/gdp-ts/references/limits.md): forged proofs, stale proofs, and other limits of TypeScript. - [**Where to stop**](skills/gdp-ts/references/where-to-stop.md): the ease-to-rigor slider. - [**API**](skills/gdp-ts/SKILL.md#api): everything `gdp-ts` exports. ## Examples All three use the same domain, loosely modeled after Vercel's