Agent rules hardened

Anti-slop oxlint, police.ts, and a no-disable policy so Cursor cannot 'finish' a task by silencing a gate or casting the error away.

The kit already had AGENTS.md. Today the gates got teeth: agents and humans hit the same rules, and weakening a rule to go green is not an option.

Anti-slop oxlint

Rejects `unknown` params, unexplained `as` casts, `z.any()`, and module mocks. Fix the design, not the rule.

police.ts

Files stay short, emails stay awaited, TypeScript suppressions stay out.

Same ship bar

`pnpm run lint` and `pnpm run check` are done. No oxlint-disable.

Ship on V2 today

Get the full monorepo — web, mobile, extension, SDK, and MCP.

Zero To Shipped V2 gives you the production Next.js app, Expo mobile app, browser extension, auth, billing, REST API, and deploy paths already connected.

Start Shipping

One-time payment. Lifetime updates.

What got stricter

The repo tells the agent how to behave, then refuses the shortcuts those agents usually take.

Anti-slop oxlint plugin at the I/O boundary — parse with zod, don't pass `unknown` around
A cast needs a `// SAFETY:` comment stating a checkable invariant
police.ts keeps files ≤ 200 lines and bans `Promise.resolve` stubs outside tests
`pnpm run check` is the done definition — never weaken a gate to go green

More updates

September 1, 2026 · v2.5

Agent rules hardened

Anti-slop oxlint

police.ts

Same ship bar

Get the full monorepo — web, mobile, extension, SDK, and MCP.

What got stricter

More updates

The kit is agent-native now

Every dependency bumped

Moved lint and format to oxlint + ultracite

Moving the UI primitives to Base UI

Buyers can file bugs from inside the product

Introducing ZeroToShipped V2!