Git Hooks

This repo uses Husky hooks from .husky/. Those files are the source of truth.

Installation

pnpm install runs the prepare script and installs the hooks into .git/hooks.

If you need to reinstall them manually:

pnpm exec husky

The hooks expect node and pnpm to be available. If they are installed via nvm, the hooks will try to load ~/.nvm/nvm.sh automatically.

Documentation/workflow/hook-only commits and pushes are classified before Node tooling is required. Editing those files must not fail merely because pnpm is absent from the invoking shell.

Policy

Commit on main or in a detached verification worktree intended for direct promotion.
Push main -> origin/main or detached HEAD -> origin/main only.
Never use --no-verify.
.codescene-thresholds is a ratchet. It can only move up.
CodeScene is additive when credentials are already configured. Missing credentials are not a Git transport error and must not prompt account creation, a trial, or a purchase.
The Fifth Domain Router is a separate, explicitly authorized prototype-publication path. Its exact-SHA receipt proves only that an allowlisted branch reached the code channel; it does not replace main -> main production promotion.

Pre-commit

.husky/pre-commit blocks commits unless all applicable checks are true:

staged TypeScript files pass pnpm lint --quiet
documentation/workflow/hook-only commits are identified without running application checks

If CODESCENE_PAT or CODESCENE_PROJECT_ID is missing, the CodeScene portion is skipped, but the rest of the hook still runs. Record CodeScene as not_run_unconfigured; do not treat the skip as a failed commit.

Pre-push

.husky/pre-push blocks pushes unless all of the following are true:

the current state is main or detached HEAD
every pushed branch ref is refs/heads/main -> refs/heads/main or detached HEAD -> refs/heads/main
TypeScript and the Vite build pass
frontend coverage passes
Rust lint and Rust coverage pass when src-tauri/ changed
the curated Playwright core smoke lane passes via pnpm playwright:smoke
current CodeScene Hotspot and Average health are both at or above .codescene-thresholds

If the remote CodeScene scores are better than the current thresholds, the hook updates .codescene-thresholds, stages it, and stops the push. Commit that file normally, then push again. The hook does not auto-commit or bypass itself.

If CodeScene credentials are missing, the hook prints a warning and continues after all repository-owned checks pass. This is the intended no-subscription behavior.

Legacy Files

The legacy pre-commit file under .github/hooks/ is archival only. Do not copy it into .git/hooks; use Husky and .husky/ instead. The old design post-commit auto-implementation hook was removed because it depended on obsolete one-off scripts. install-hooks.sh remains as a reinstall helper that runs Husky.

Troubleshooting

If a hook cannot find node or pnpm:

export NVM_DIR="$HOME/.nvm"
. "$NVM_DIR/nvm.sh"
nvm use node

Then retry the commit or push.

3.1 KiB Raw Blame History