@next-friday/create-app 0.0.0-stage → 0.1.0

package/templates/base/.agents/hooks/agent-shell-gate.sh

@@ -0,0 +1,355 @@
+#!/usr/bin/env bash
+set -uo pipefail
+
+allow() {
+  printf '%s\n' '{"permission":"allow"}'
+  exit 0
+}
+
+block() {
+  jq -n --arg message "$1" '{permission:"deny",user_message:$message,agent_message:$message}'
+  printf 'agent-shell-gate: %s\n' "$1" >&2
+  exit 2
+}
+
+trap 'block ".agents/hooks/agent-shell-gate.sh failed. Stop and report this error to the user; agents may not edit the gate."' ERR
+command -v jq > /dev/null || block "jq is required to read the hook input. Install it: https://jqlang.org/download/"
+input=$(cat)
+command=$(jq -r '.command // .tool_input.command // empty' <<< "$input")
+[[ -n $command ]] || allow
+
+separator=$'\x1f'
+redirect=$'\x1e'
+protected_names='(\.husky|\.agents|\.cursor|\.claude/rules|\.claude/settings(\.local)?\.json|\.git/hooks|\.git/config|\.lintstagedrc\.json|\.gitleaks\.toml|\.commitlintrc\.json|\.prettierrc\.json|prettier\.config\.ts|eslint\.config\.ts|scripts/(sync-agent-rules|check-agent-gates)\.ts)'
+protected="(^|[/=])$protected_names(/|$)"
+policy="Hooks and agent policy files are company policy; stop and ask the user."
+in_protected=0
+
+# Split a command line into words as the shell does: quotes and backslashes are removed, and
+# command substitutions stay inside their word and are also collected, so they are checked as
+# command lines too. Separators become their own word, and a redirection target is prefixed, so
+# each simple command is checked on its own.
+lex() {
+  local text=$1 length=${#1} index=0 char word="" has_word=0 quote="" inner_quote="" depth=0 start=0 end is_target=0
+  words=()
+  substitutions=()
+
+  flush() {
+    if ((has_word)); then
+      if ((is_target)); then
+        words+=("$redirect$word")
+        is_target=0
+      else
+        words+=("$word")
+      fi
+    fi
+    word=""
+    has_word=0
+  }
+
+  while ((index < length)); do
+    char=${text:index:1}
+    if ((depth > 0)); then
+      word+=$char
+      if [[ -n $inner_quote ]]; then
+        if [[ $char == "$inner_quote" ]]; then
+          inner_quote=""
+        elif [[ $inner_quote == '"' && $char == '\' ]]; then
+          index=$((index + 1))
+          word+=${text:index:1}
+        fi
+      elif [[ $char == "'" || $char == '"' ]]; then
+        inner_quote=$char
+      elif [[ $char == '\' ]]; then
+        index=$((index + 1))
+        word+=${text:index:1}
+      elif [[ $char == '#' && ${text:index-1:1} == [[:space:]\;\&\|\(\)\<\>] ]]; then
+        while ((index + 1 < length)) && [[ ${text:index+1:1} != $'\n' ]]; do
+          index=$((index + 1))
+        done
+      elif [[ $char == '(' ]]; then
+        depth=$((depth + 1))
+      elif [[ $char == ')' ]]; then
+        depth=$((depth - 1))
+        if ((depth == 0)); then
+          substitutions+=("${text:start:index-start}")
+        fi
+      fi
+    elif [[ $quote != "'" && $char == '$' && ${text:index+1:1} == '(' ]]; then
+      word+='$('
+      index=$((index + 1))
+      start=$((index + 1))
+      depth=1
+      has_word=1
+    elif [[ $quote != "'" && $char == '`' ]]; then
+      end=$index
+      while ((end + 1 < length)) && [[ ${text:end+1:1} != '`' ]]; do
+        end=$((end + 1))
+      done
+      substitutions+=("${text:index+1:end-index}")
+      word+=${text:index:end-index+2}
+      index=$((end + 1))
+      has_word=1
+    elif [[ -n $quote ]]; then
+      if [[ $char == "$quote" ]]; then
+        quote=""
+      elif [[ $quote == '"' && $char == '\' ]]; then
+        index=$((index + 1))
+        word+=${text:index:1}
+      else
+        word+=$char
+      fi
+    else
+      case $char in
+        "'" | '"')
+          quote=$char
+          has_word=1
+          ;;
+        '\')
+          index=$((index + 1))
+          word+=${text:index:1}
+          has_word=1
+          ;;
+        ' ' | $'\t')
+          flush
+          ;;
+        ';' | '&' | '|' | $'\n' | '(' | ')')
+          flush
+          words+=("$separator")
+          ;;
+        '>')
+          flush
+          while [[ ${text:index+1:1} == [\>\|\&] ]]; do
+            index=$((index + 1))
+          done
+          is_target=1
+          ;;
+        *)
+          word+=$char
+          has_word=1
+          ;;
+      esac
+    fi
+    index=$((index + 1))
+  done
+  flush
+  return 0
+}
+
+writes_protected() {
+  block "Changing $1 from the shell is blocked. $policy"
+}
+
+check_config_key() {
+  local key
+  key=$(tr '[:upper:]' '[:lower:]' <<< "$1")
+  if [[ $key == *core.hookspath* ]]; then
+    block "Changing core.hooksPath is blocked. Stop and ask the user."
+  fi
+  if [[ $key == alias.* ]]; then
+    block "Defining git aliases is blocked, because an alias can skip hooks. Run the git command directly."
+  fi
+  if [[ $key == *'$'* || $key == *'`'* ]]; then
+    block "Write git config keys literally, without shell expansion."
+  fi
+  return 0
+}
+
+check_commit() {
+  local word cluster position skip_next=0
+  for word in "$@"; do
+    if ((skip_next)); then
+      skip_next=0
+      continue
+    fi
+    case $word in
+      --) break ;;
+      --message | --file | --reuse-message | --reedit-message | --template | --author | --date | --cleanup | --fixup | --squash | --trailer | --pathspec-from-file) skip_next=1 ;;
+      --*) ;;
+      -?*)
+        cluster=${word#-}
+        for ((position = 0; position < ${#cluster}; position++)); do
+          case ${cluster:position:1} in
+            n) block "Skipping git hooks with git commit -n is blocked. Fix the hook failure instead." ;;
+            m | F | C | c | t)
+              if ((position == ${#cluster} - 1)); then
+                skip_next=1
+              fi
+              break
+              ;;
+            S | u) break ;;
+          esac
+        done
+        ;;
+    esac
+  done
+  return 0
+}
+
+check_git() {
+  local -a args=(${@+"$@"})
+  local count=${#args[@]} index=0 word subcommand=""
+  ((count > 0)) || return 0
+  while ((index < count)); do
+    word=${args[index]}
+    case $word in
+      -C | --git-dir | --work-tree | --namespace | --super-prefix) index=$((index + 2)) ;;
+      -c | --config-env)
+        check_config_key "${args[index + 1]:-}"
+        index=$((index + 2))
+        ;;
+      --config-env=*)
+        check_config_key "${word#*=}"
+        index=$((index + 1))
+        ;;
+      -*) index=$((index + 1)) ;;
+      *)
+        subcommand=$word
+        break
+        ;;
+    esac
+  done
+  local -a rest=("${args[@]:index+1}")
+
+  # Git accepts any unambiguous prefix of a long option, so --no-veri works like --no-verify.
+  for word in ${rest[@]+"${rest[@]}"}; do
+    if [[ $word =~ ^--no-v(e(r(i(fy?)?)?)?)?(=|$) ]]; then
+      block "Skipping git hooks with --no-verify is blocked. Fix the hook failure instead."
+    fi
+    if [[ $word == -* && ($word == *'$'* || $word == *'`'*) ]]; then
+      block "Write git options literally, without shell expansion."
+    fi
+  done
+
+  case $subcommand in
+    commit) check_commit ${rest[@]+"${rest[@]}"} ;;
+    config)
+      for word in ${rest[@]+"${rest[@]}"}; do
+        [[ $word == -* ]] || check_config_key "$word"
+      done
+      ;;
+    commit-tree | update-ref) block "git commit-tree and git update-ref are blocked, because they create commits without hooks. Use git commit." ;;
+    checkout | restore | rm | mv | apply)
+      for word in ${rest[@]+"${rest[@]}"}; do
+        if [[ $word =~ $protected ]]; then
+          writes_protected "$word"
+        fi
+      done
+      ;;
+  esac
+  return 0
+}
+
+check_command() {
+  local -a args=()
+  local word name is_writer=0
+  for word in "$@"; do
+    if [[ $word == "$redirect"* ]]; then
+      word=${word#"$redirect"}
+      if ((in_protected)) || [[ $word =~ $protected ]]; then
+        writes_protected "$word"
+      fi
+    else
+      args+=("$word")
+    fi
+  done
+  ((${#args[@]} > 0)) || return 0
+
+  for word in "${args[@]}"; do
+    if [[ $word == HUSKY=0 ]]; then
+      block "HUSKY=0 is blocked. Fix the hook failure instead."
+    fi
+    if [[ $word =~ ^[A-Za-z_][A-Za-z0-9_]*= ]] && [[ $(tr '[:upper:]' '[:lower:]' <<< "$word") == *core.hookspath* ]]; then
+      block "Changing core.hooksPath is blocked. Stop and ask the user."
+    fi
+  done
+
+  while ((${#args[@]} > 0)); do
+    word=${args[0]}
+    if [[ $word =~ ^[A-Za-z_][A-Za-z0-9_]*= || $word == -* ]]; then
+      args=("${args[@]:1}")
+      continue
+    fi
+    case ${word##*/} in
+      env | command | exec | nohup | time | nice | sudo | builtin) args=("${args[@]:1}") ;;
+      *) break ;;
+    esac
+  done
+  ((${#args[@]} > 0)) || return 0
+  name=${args[0]##*/}
+
+  case $name in
+    git) check_git "${args[@]:1}" ;;
+    gh)
+      if [[ ${args[1]:-} =~ ^(repo|issue|release)$ && ${args[2]:-} == delete ]]; then
+        block "gh ${args[1]} delete is blocked. Stop and ask the user."
+      fi
+      ;;
+    bash | sh | zsh | dash | ksh)
+      for ((index = 1; index < ${#args[@]}; index++)); do
+        if [[ ${args[index]} =~ ^-[a-zA-Z]*c[a-zA-Z]*$ ]]; then
+          gate_line "${args[index + 1]:-}"
+          break
+        fi
+      done
+      ;;
+    eval) gate_line "${args[*]:1}" ;;
+    cd | pushd)
+      if [[ ${args[1]:-} =~ $protected ]]; then
+        in_protected=1
+      fi
+      ;;
+    tee | rm | rmdir | mv | cp | ln | chmod | chown | truncate | install | unlink | rsync | dd | patch | sponge | shred) is_writer=1 ;;
+    sed | perl)
+      for word in "${args[@]:1}"; do
+        if [[ $word =~ ^-[a-zA-Z]*i || $word == --in-place* ]]; then
+          is_writer=1
+        fi
+      done
+      ;;
+    python | python3 | node | ruby | deno | bun)
+      if ((in_protected)); then
+        writes_protected "a protected directory"
+      fi
+      for ((index = 1; index < ${#args[@]}; index++)); do
+        if [[ ${args[index]} =~ ^-(c|e|p|E|-eval|-print)$ && ${args[index + 1]:-} =~ $protected_names ]]; then
+          writes_protected "${BASH_REMATCH[0]}"
+        fi
+      done
+      ;;
+  esac
+
+  if ((is_writer)); then
+    if ((in_protected)); then
+      writes_protected "a protected directory"
+    fi
+    for word in "${args[@]:1}"; do
+      if [[ $word =~ $protected ]]; then
+        writes_protected "$word"
+      fi
+    done
+  fi
+  return 0
+}
+
+gate_line() {
+  lex "$1"
+  local -a line=(${words[@]+"${words[@]}"}) nested=(${substitutions[@]+"${substitutions[@]}"}) current=()
+  local word
+  for word in ${nested[@]+"${nested[@]}"}; do
+    gate_line "$word"
+  done
+  for word in ${line[@]+"${line[@]}"}; do
+    if [[ $word == "$separator" ]]; then
+      check_command ${current[@]+"${current[@]}"}
+      current=()
+    else
+      current+=("$word")
+    fi
+  done
+  check_command ${current[@]+"${current[@]}"}
+  return 0
+}
+
+gate_line "$command"
+allow

package/templates/base/.agents/hooks/agent-suppression-gate.sh

@@ -0,0 +1,45 @@
+#!/usr/bin/env bash
+set -uo pipefail
+
+directives='eslint-disable|eslint-enable|@ts-ignore|@ts-expect-error|@ts-nocheck|zizmor: ?ignore|nosemgrep|gitleaks:allow|trufflehog:ignore|prettier-ignore|istanbul ignore|c8 ignore|v8 ignore|knip-ignore|NOSONAR|editorconfig-checker-disable|hadolint ignore|trivy:ignore|(^|[^[:alnum:]_])@public([^[:alnum:]_]|$)|(^|[^[:alnum:]_])noqa([^[:alnum:]_]|$)'
+exempt='^(\.agents/rules/|\.agents/hooks/|\.claude/rules/|\.cursor/rules/|\.cursor/hooks/|scripts/check-agent-gates\.ts(:|$))'
+
+allow() {
+  printf '%s\n' '{"permission":"allow"}'
+  exit 0
+}
+
+block() {
+  jq -n --arg message "$1" '{permission:"deny",user_message:$message,agent_message:$message}'
+  printf 'agent-suppression-gate: %s\n' "$1" >&2
+  exit 2
+}
+
+if [[ ${1:-} == --repo ]]; then
+  matches=$(git grep -nIE "$directives" -- . ":(exclude)pnpm-lock.yaml" | grep -vE "$exempt" || true)
+  if [[ -n $matches ]]; then
+    printf '%s\n' "$matches" >&2
+    printf 'suppressions:check: remove these suppression directives and fix the findings they hide.\n' >&2
+    exit 1
+  fi
+  exit 0
+fi
+
+trap 'block ".agents/hooks/agent-suppression-gate.sh failed. Stop and report this error to the user; agents may not edit the gate."' ERR
+command -v jq > /dev/null || block "jq is required to read the hook input. Install it: https://jqlang.org/download/"
+input=$(cat)
+path=$(jq -r '.tool_input.file_path // .tool_input.path // .tool_input.notebook_path // .file_path // empty' <<< "$input")
+[[ -n $path ]] || allow
+
+project=$(jq -r '.workspace_roots[0] // .cwd // empty' <<< "$input")
+project=${CLAUDE_PROJECT_DIR:-${project:-$PWD}}
+[[ $path == /* ]] || path=$project/$path
+[[ $path == "$project"/* ]] || allow
+relative=${path#"$project"/}
+[[ ! $relative =~ (^|/)\.\.?(/|$) && $relative =~ $exempt ]] && allow
+
+content=$(jq -r '[.tool_input.content, .tool_input.contents, .tool_input.new_string, .tool_input.new_source, (.tool_input.edits // [] | .[].new_string)] | map(select(. != null)) | join("\n")' <<< "$input")
+if grep -qE "$directives" <<< "$content"; then
+  block "The edit to $relative adds a suppression directive. Fix what the tool reports instead; if you believe the finding is wrong, stop and ask the user."
+fi
+allow

package/templates/base/.agents/rules/automation-owned-checks.md

@@ -0,0 +1,5 @@
+# Owned Checks
+
+A check is **owned** when `.husky/` or `.github/workflows/` runs it. Those files are the source of truth for what must pass.
+
+Run any check by hand when you need its result to verify your work; the hooks and CI still run it on commit, push, and the pull request. Read their output and fix what it reports. Report a check as passed only from an observed result.

package/templates/base/.agents/rules/code-comments.md

@@ -0,0 +1,3 @@
+# Required Comments
+
+Write a comment only where a configured tool requires or reads it, where `no-suppression.md` requires an accepted-risk record, or to give a reason the code cannot show, such as a platform constraint or a workaround. Names, types, tests, ADRs, issues, and pull requests carry intent. When you touch a file, remove comments no tool requires.

package/templates/base/.agents/rules/current-state-authority.md

@@ -0,0 +1,17 @@
+# Current State
+
+For implementation decisions, use this order:
+
+1. Explicit current user requirements
+2. Project instructions on the affected path
+3. Current working tree
+4. Tests, contracts, schemas, and configuration
+5. Runtime behavior and logs
+6. Official upstream documentation
+7. Git history as evidence of what changed and why
+
+Code absent from the working tree is removed. Restore it only when the user names that historical implementation, then verify it against current requirements.
+
+Identify the owning project before investigating. Apply the more specific convention inside its scope.
+
+_Completion criterion_: The change matches current requirements and the working tree. Historical code appears only when the user named it.

package/templates/base/.agents/rules/demand-driven-configuration.md

@@ -0,0 +1,7 @@
+# Demand-Driven Configuration
+
+Add or change a setting for an active requirement in that configuration's scope. Prefer the smallest config that satisfies the current contract. Reuse a repeated value when a local name makes it clearer. Remove settings no active path, test, or documented purpose reads.
+
+Make paths, patterns, and ignores match files that exist in the intended project. Compose from shared definitions; keep each pattern in one source of truth.
+
+Verify a setting through the tool's validation or effective-configuration output.

package/templates/base/.agents/rules/dependency-security.md

@@ -0,0 +1,5 @@
+# Dependencies
+
+Add a dependency when active code, tests, build tooling, or a documented contract uses it, and native or existing project capabilities do not. Assess cadence, license, advisories, compatibility, and transitives first. Place it in the manifest of the project that imports it, in the ecosystem category that matches its role.
+
+Resolve a vulnerability that Dependabot or OSV-Scanner reports by upgrading the dependency. For a transitive dependency, add a pnpm override in `pnpm-workspace.yaml`. When no fix exists, record the accepted risk as `no-suppression.md` describes.

package/templates/base/.agents/rules/deterministic-testing.md

@@ -0,0 +1,15 @@
+# Test Admission
+
+Keep tests as small, deterministic protections for observable contracts.
+
+Name the contract and the distinct defect a proposed test can detect before writing it. Admit a test for externally observable behavior, a public contract, a demonstrated regression, a non-trivial invariant, a meaningful failure mode, or an explicit repository verification requirement.
+
+Choose the narrowest existing layer that owns that contract. Give each test one defect to detect. Add a case only when it catches a defect remaining cases miss. Treat coverage percentage as a measurement.
+
+Search existing coverage first. Extend the file that already owns the contract. Create a file only when the contract has no owner or needs a different harness. Follow the nearest directory and naming pattern. Keep setup local until multiple tests share live runtime logic, then extract one helper.
+
+Use the framework's standard assertions. Use an inline snippet unless filesystem paths, module resolution, or compiler services are the contract. Keep fixtures declarative and read-only.
+
+When the user asks to run tests, run the narrowest owning file or filter.
+
+_Completion criterion_: Every added or modified case maps to an admitted contract and a defect current cases would miss. Tests stay unchanged when no proposed case survives admission.

package/templates/base/.agents/rules/diagnostics-and-error-handling.md

@@ -0,0 +1,7 @@
+# Diagnostics
+
+Resolve runtime failures at the source with the language's standard narrowing, validation, and error types. For missing third-party types, take upstream definitions or a narrow adapter in the established location.
+
+Surface errors at the caller or process boundary with diagnostic context. Handle an error to add context, recover, or translate it at an application boundary. Retain the root cause through the language's exception mechanism.
+
+Report unresolved type, declaration, or rule conflicts to the user. Findings follow `no-suppression.md`.

package/templates/base/.agents/rules/git-workflow.md

@@ -0,0 +1,10 @@
+# Git Workflow
+
+The repository uses trunk-based development.
+
+- Branch from the latest `origin/main`, in a worktree or a new branch named `<type>/<short-description>`. `main` is the only long-lived branch. The Git hooks block commits and pushes on it, except the first commit and push that create `main` in a new repository.
+- Write commit messages in the format that `@next-friday/commitlint-config-friday` defines. The `commit-msg` hook rejects anything else.
+- When work ends in a pull request, push its branch and open the pull request ready for review without asking. CI skips drafts. Work that does not end in one, such as an investigation or a prototype, opens none.
+- Fill the pull request body from `.github/pull_request_template.md`.
+- After you open a pull request, report its URL and continue. Drive it to merge-ready only when the user asks, and watch the checks with `gh pr checks --watch`. Merge only when the user asks to merge, land, or ship. Merge with `--squash`, bottom-up for a stack.
+- Rebase and `git push --force-with-lease` only branches you own.

package/templates/base/.agents/rules/no-suppression.md

@@ -0,0 +1,7 @@
+# Findings
+
+Fix what a linter, type checker, or scanner reports, including the replacement it suggests. Comments a tool requires follow `code-comments.md`.
+
+Record an accepted risk only in that tool's central file, with an owner, a reason, and an expiry date: `.github/zizmor.yml` for zizmor, `osv-scanner.toml` for OSV-Scanner, `.gitleaksignore` for gitleaks, `.trivyignore` for Trivy, or `.hadolint.yaml` for hadolint. Create the file or key when the first accepted risk needs it. Do not add inline suppressions; `.agents/hooks/agent-suppression-gate.sh` defines the rejected directives.
+
+When a finding looks wrong, stop and cite the tool's documentation to the user. Report a finding as fixed only when the tool passes, with any accepted risk in that central file.

package/templates/base/.agents/rules/script-driven-changes.md

@@ -0,0 +1,7 @@
+# Scripts
+
+When a change repeats one pattern across more than a few files, run a script. Derive facts from the toolchain (TypeScript compiler API, `git`), not by reading files by eye. Edit by hand when the change needs judgment in one place.
+
+Commit a script when a reviewer needs to rerun it or when the work outlives the session, and add it as a `package.json` script so knip counts it as an entry. Keep any other one-off script in a temporary directory outside the repository, and remove a committed script when its workflow ends. Fail on unmapped input. Back up before a destructive run.
+
+Print summaries: counts, first errors. Verify what owned checks omit, such as the running app.

package/templates/base/.agents/rules/single-author-style.md

@@ -0,0 +1,7 @@
+# Sibling Style
+
+Treat each application, package, or component as one author's work. Match representative siblings for layout, naming, exports, helpers, composition, errors, and abstraction. Use the language's standard idiom when no sibling exists. Name the convention when a conflict affects the design.
+
+Keep execution flow collocated. Extract a helper when multiple callers share it. One term per concept; parallel symbols share grammatical shape. Comments follow `code-comments.md`.
+
+Keep edits in the requested component, its call sites, and the workspace metadata it needs. Cross-project convention changes are in scope only when the task names them.

package/templates/base/.claude/rules/agents-guide.md

@@ -0,0 +1 @@
+@../../AGENTS.md

package/templates/base/.claude/rules/automation-owned-checks.md

@@ -0,0 +1 @@
+@../../.agents/rules/automation-owned-checks.md

package/templates/base/.claude/rules/code-comments.md

@@ -0,0 +1 @@
+@../../.agents/rules/code-comments.md

package/templates/base/.claude/rules/current-state-authority.md

@@ -0,0 +1 @@
+@../../.agents/rules/current-state-authority.md

package/templates/base/.claude/rules/demand-driven-configuration.md

@@ -0,0 +1 @@
+@../../.agents/rules/demand-driven-configuration.md

package/templates/base/.claude/rules/dependency-security.md

@@ -0,0 +1,12 @@
+---
+paths:
+  - "package.json"
+  - "pnpm-lock.yaml"
+  - "pnpm-workspace.yaml"
+---
+
+# Dependencies
+
+Add a dependency when active code, tests, build tooling, or a documented contract uses it, and native or existing project capabilities do not. Assess cadence, license, advisories, compatibility, and transitives first. Place it in the manifest of the project that imports it, in the ecosystem category that matches its role.
+
+Resolve a vulnerability that Dependabot or OSV-Scanner reports by upgrading the dependency. For a transitive dependency, add a pnpm override in `pnpm-workspace.yaml`. When no fix exists, record the accepted risk as `no-suppression.md` describes.

package/templates/base/.claude/rules/diagnostics-and-error-handling.md

@@ -0,0 +1 @@
+@../../.agents/rules/diagnostics-and-error-handling.md

package/templates/base/.claude/rules/git-workflow.md

@@ -0,0 +1 @@
+@../../.agents/rules/git-workflow.md

package/templates/base/.claude/rules/no-suppression.md

@@ -0,0 +1 @@
+@../../.agents/rules/no-suppression.md

package/templates/base/.claude/rules/script-driven-changes.md

@@ -0,0 +1 @@
+@../../.agents/rules/script-driven-changes.md

package/templates/base/.claude/rules/single-author-style.md

@@ -0,0 +1 @@
+@../../.agents/rules/single-author-style.md

package/templates/base/.claude/settings.json

@@ -0,0 +1,61 @@
+{
+  "$schema": "https://json.schemastore.org/claude-code-settings.json",
+  "permissions": {
+    "deny": [
+      "Edit(./.agents/rules/**)",
+      "Edit(./.claude/rules/**)",
+      "Edit(./.cursor/rules/**)",
+      "Edit(./.commitlintrc.json)",
+      "Edit(./.prettierrc.json)",
+      "Edit(./prettier.config.ts)",
+      "Edit(./eslint.config.ts)",
+      "Edit(./.agents/rules.json)",
+      "Edit(./.agents/hooks/**)",
+      "Edit(./.claude/settings.json)",
+      "Edit(./.claude/settings.local.json)",
+      "Edit(./.cursor/hooks.json)",
+      "Edit(./.cursor/hooks/**)",
+      "Edit(./scripts/sync-agent-rules.ts)",
+      "Edit(./scripts/check-agent-gates.ts)",
+      "Edit(./.husky/**)",
+      "Edit(./.lintstagedrc.json)",
+      "Edit(./.gitleaks.toml)",
+      "Bash(gh repo delete *)",
+      "Bash(gh issue delete *)",
+      "Bash(gh release delete *)",
+      "Bash(git *--no-verify*)",
+      "Bash(git commit -n*)",
+      "Bash(git *core.hooksPath*)",
+      "Bash(git *core.hookspath*)",
+      "Bash(git commit-tree*)",
+      "Bash(git update-ref*)",
+      "Bash(*HUSKY=0*)"
+    ]
+  },
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Edit|Write|MultiEdit|NotebookEdit",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "\"$CLAUDE_PROJECT_DIR\"/.agents/hooks/agent-suppression-gate.sh",
+            "timeout": 10,
+            "onFailure": "block"
+          }
+        ]
+      },
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "\"$CLAUDE_PROJECT_DIR\"/.agents/hooks/agent-shell-gate.sh",
+            "timeout": 10,
+            "onFailure": "block"
+          }
+        ]
+      }
+    ]
+  }
+}

package/templates/base/.commitlintrc.json

@@ -0,0 +1,3 @@
+{
+  "extends": ["@next-friday/commitlint-config-friday"]
+}

package/templates/base/.cursor/BUGBOT.md

@@ -0,0 +1,17 @@
+# Review rules
+
+Review pull requests against the project's agent guide and rules:
+
+- [Agent guide](../AGENTS.md)
+- [Owned Checks](../.agents/rules/automation-owned-checks.md)
+- [Required Comments](../.agents/rules/code-comments.md)
+- [Current State](../.agents/rules/current-state-authority.md)
+- [Demand-Driven Configuration](../.agents/rules/demand-driven-configuration.md)
+- [Dependencies](../.agents/rules/dependency-security.md)
+- [Test Admission](../.agents/rules/deterministic-testing.md)
+- [Diagnostics](../.agents/rules/diagnostics-and-error-handling.md)
+- [Git Workflow](../.agents/rules/git-workflow.md)
+- [Findings](../.agents/rules/no-suppression.md)
+- [Scripts](../.agents/rules/script-driven-changes.md)
+- [Sibling Style](../.agents/rules/single-author-style.md)
+- [TypeScript-First](../.agents/rules/typescript-first.md)