feat: publish HoloLake model-native living system source

product-source/hololake-platform/.github/HOOKS.md

@@ -0,0 +1,67 @@
+# Git Hooks
+
+This repo uses Husky hooks from `.husky/`. Those files are the source of truth.
+
+## Installation
+
+`pnpm install` runs the `prepare` script and installs the hooks into `.git/hooks`.
+
+If you need to reinstall them manually:
+
+```bash
+pnpm exec husky
+```
+
+The hooks expect `node` and `pnpm` to be available. If they are installed via `nvm`, the hooks will try to load `~/.nvm/nvm.sh` automatically.
+
+Documentation/workflow/hook-only commits and pushes are classified before Node tooling is required. Editing those files must not fail merely because `pnpm` is absent from the invoking shell.
+
+## Policy
+
+- Commit on `main` or in a detached verification worktree intended for direct promotion.
+- Push `main -> origin/main` or detached `HEAD -> origin/main` only.
+- Never use `--no-verify`.
+- `.codescene-thresholds` is a ratchet. It can only move up.
+- CodeScene is additive when credentials are already configured. Missing credentials are not a Git transport error and must not prompt account creation, a trial, or a purchase.
+- The Fifth Domain Router is a separate, explicitly authorized prototype-publication path. Its exact-SHA receipt proves only that an allowlisted branch reached the code channel; it does not replace `main -> main` production promotion.
+
+## Pre-commit
+
+`.husky/pre-commit` blocks commits unless all applicable checks are true:
+
+- staged TypeScript files pass `pnpm lint --quiet`
+- documentation/workflow/hook-only commits are identified without running application checks
+
+If `CODESCENE_PAT` or `CODESCENE_PROJECT_ID` is missing, the CodeScene portion is skipped, but the rest of the hook still runs. Record CodeScene as `not_run_unconfigured`; do not treat the skip as a failed commit.
+
+## Pre-push
+
+`.husky/pre-push` blocks pushes unless all of the following are true:
+
+- the current state is `main` or detached `HEAD`
+- every pushed branch ref is `refs/heads/main -> refs/heads/main` or detached `HEAD -> refs/heads/main`
+- TypeScript and the Vite build pass
+- frontend coverage passes
+- Rust lint and Rust coverage pass when `src-tauri/` changed
+- the curated Playwright core smoke lane passes via `pnpm playwright:smoke`
+- current CodeScene Hotspot and Average health are both at or above `.codescene-thresholds`
+
+If the remote CodeScene scores are better than the current thresholds, the hook updates `.codescene-thresholds`, stages it, and stops the push. Commit that file normally, then push again. The hook does not auto-commit or bypass itself.
+
+If CodeScene credentials are missing, the hook prints a warning and continues after all repository-owned checks pass. This is the intended no-subscription behavior.
+
+## Legacy Files
+
+The legacy `pre-commit` file under `.github/hooks/` is archival only. Do not copy it into `.git/hooks`; use Husky and `.husky/` instead. The old design `post-commit` auto-implementation hook was removed because it depended on obsolete one-off scripts. `install-hooks.sh` remains as a reinstall helper that runs Husky.
+
+## Troubleshooting
+
+If a hook cannot find `node` or `pnpm`:
+
+```bash
+export NVM_DIR="$HOME/.nvm"
+. "$NVM_DIR/nvm.sh"
+nvm use node
+```
+
+Then retry the commit or push.