Skip to content
Back to skills

App Rules

ASecurity

Non-negotiable rules for the farmer Expo app: RTL-safe layout, single text component, Latin digits, server-truth numbers, secure storage, signing parity.

  • 8 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added September 19, 2026
developmentgogitapi

Works with

  • cli
  • api

Security analysis

A100/100

Scanned September 19, 2026

npx -y skills add Adilmunawar/ZD-claude-plugin --skill app-rules --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of App Rules?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for App Rules
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/adilmunawar-app-rules/badge)](https://www.skillsdirectory.com/skills/adilmunawar-app-rules)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: app-rules
paths: ["app/**", "src/i18n/**", "src/components/**", "src/lib/**", "app.json", "eas.json"]
description: Non-negotiable rules for the farmer Expo app: RTL-safe layout, single text component, Latin digits, server-truth numbers, secure storage, signing parity.
---

- **RTL**: `start`/`end` (never `left`/`right`); `I18nManager` switch triggers a reload; test each screen in Urdu.
- **Text**: all text through `Txt` (language-aware font face and line height); no screen names a font or line height.
- **Digits** stay Latin in every language; CNICs render masked by default.
- **Server truth**: the phone never invents a number; each figure carries its fetched-at age; absence horizons decide when to show "no recent data" (see `src/lib/absence.ts`).
- **Session**: tokens in `expo-secure-store` under `zdl_*`; 5-minute device lock; 7-day session horizon; only a real 401 signs out.
- **Signing**: document sequence 1–8 with OTP at fixed steps is byte-identical to the legacy client; do not reorder.
- **Config**: `EXPO_PUBLIC_API_BASE` baked at bundle time; when absent the app uses production, never localhost; `npm run check-bundle` proves the bundle carries only production.
- **Offline**: TanStack Query persisted to AsyncStorage; uploads through the queue in `src/lib/upload-queue.ts`.
- **Tests**: every rule above has a Jest test in `src/lib/__tests__`; add one when adding a rule.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…