@precisa-saude/cli 1.0.1

package/dist/templates/github/workflows/review.yml

@@ -0,0 +1,435 @@
+name: Code Review
+
+# Tries providers in order (Anthropic → OpenAI) and uses the first one that
+# returns a 200. Any non-200 from a provider triggers fallback to the next.
+# If all configured providers fail (or none are configured), the workflow
+# exits without posting a review and without emitting a round marker, so
+# the next PR activity retries fresh.
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+concurrency:
+  group: review-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+jobs:
+  check-review-status:
+    name: Check review status
+    runs-on: ubuntu-latest
+    timeout-minutes: 2
+    permissions:
+      pull-requests: read
+      issues: read
+    outputs:
+      should_run: ${{ steps.check.outputs.should_run }}
+      review_round: ${{ steps.check.outputs.review_round }}
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Decide whether to run
+        id: check
+        uses: actions/github-script@v8
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const prNumber = context.issue.number;
+
+            // Skip docs/config-only PRs
+            const { data: files } = await github.rest.pulls.listFiles({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              pull_number: prNumber,
+              per_page: 100,
+            });
+            const ignore = [/\.md$/, /^docs\//, /^\.github\//, /\.json$/, /\.ya?ml$/, /\.cff$/];
+            const hasCode = files.some(f => !ignore.some(p => p.test(f.filename)));
+            if (!hasCode) {
+              core.setOutput('should_run', 'false');
+              core.setOutput('review_round', 'skip');
+              return;
+            }
+
+            const { data: comments } = await github.rest.issues.listComments({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: prNumber,
+              per_page: 100,
+            });
+            const round1 = comments.some(c => c.body?.includes('<!-- AUTOMATED_REVIEW_ROUND_1 -->'));
+            const round2 = comments.some(c => c.body?.includes('<!-- AUTOMATED_REVIEW_ROUND_2_COMPLETE -->'));
+
+            if (round2) {
+              core.setOutput('should_run', 'false');
+              core.setOutput('review_round', 'complete');
+              return;
+            }
+            core.setOutput('should_run', 'true');
+            core.setOutput('review_round', round1 ? '2' : '1');
+
+  review:
+    name: Automated review
+    needs: check-review-status
+    if: needs.check-review-status.outputs.should_run == 'true'
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    continue-on-error: true
+    permissions:
+      contents: read
+      pull-requests: write
+    env:
+      ANTHROPIC_MODEL: claude-haiku-4-5-20251001
+      OPENAI_MODEL: gpt-4o-mini
+      MAX_DIFF_SIZE: '150000'
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Build review input
+        id: pr
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          REVIEW_ROUND: ${{ needs.check-review-status.outputs.review_round }}
+        run: |
+          PR_NUMBER=${{ github.event.pull_request.number }}
+          HEAD_SHA=$(gh pr view "$PR_NUMBER" --json headRefOid -q .headRefOid)
+          echo "head_sha=$HEAD_SHA" >> $GITHUB_OUTPUT
+          echo "number=$PR_NUMBER" >> $GITHUB_OUTPUT
+
+          if [ "$REVIEW_ROUND" = "2" ]; then
+            FIRST=$(gh pr view "$PR_NUMBER" --json commits -q '.commits[0].oid')
+            git diff "$FIRST"..HEAD > pr.diff
+          else
+            gh pr diff "$PR_NUMBER" > pr.diff
+          fi
+
+          gh pr view "$PR_NUMBER" --json files -q '.files[].path' > changed_files.txt
+
+          DIFF_SIZE=$(wc -c < pr.diff)
+          if [ "$DIFF_SIZE" -gt "$MAX_DIFF_SIZE" ]; then
+            head -c "$MAX_DIFF_SIZE" pr.diff > pr.diff.tmp && mv pr.diff.tmp pr.diff
+            echo "diff_truncated=true" >> $GITHUB_OUTPUT
+          else
+            echo "diff_truncated=false" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Call review API (with provider failover)
+        id: call
+        env:
+          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
+          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+          DIFF_TRUNCATED: ${{ steps.pr.outputs.diff_truncated }}
+          REVIEW_ROUND: ${{ needs.check-review-status.outputs.review_round }}
+        run: |
+          node << 'SCRIPT'
+          const fs = require('fs');
+
+          const diff = fs.readFileSync('pr.diff', 'utf8');
+          const files = fs.readFileSync('changed_files.txt', 'utf8').trim();
+          const round = process.env.REVIEW_ROUND;
+          const truncated = process.env.DIFF_TRUNCATED === 'true';
+
+          const system = [
+            'You are a senior software engineer performing a code review.',
+            'Analyze the PR diff carefully and provide actionable, specific feedback.',
+            'Focus on bugs, security issues, performance problems, and significant code-quality concerns.',
+            'Do not include nitpicks, style preferences, or suggestions to add comments.',
+          ].join(' ');
+
+          const user = [
+            `Review Round: ${round}`,
+            '',
+            '## Files changed in this PR',
+            'These are the ONLY files modified. Do NOT reference any other files in feedback:',
+            files,
+            '',
+            truncated ? '> **Note**: Diff truncated due to size. Review only what is shown below.\n' : '',
+            '## Diff',
+            '',
+            '```diff',
+            diff,
+            '```',
+            '',
+            'Respond with ONLY a valid JSON object (no markdown fences). Use this exact structure:',
+            '{"summary": "...", "changes": ["..."], "feedback": [{"file": "path", "line": 42, "comment": "..."}]}',
+            '',
+            'Rules:',
+            '- The "file" field MUST be one of the files listed above.',
+            '- The "line" field MUST reference a line number from the NEW version (right side of diff, + lines). Cross-check against @@ hunk headers.',
+            '- Include feedback only for real issues; skip nits.',
+            '- Do NOT hallucinate code not visible in the diff.',
+            '- If no issues, return an empty feedback array.',
+          ].join('\n');
+
+          // Per-1M-token USD pricing. Update when providers change rates.
+          // Missing entries silently skip cost display (tokens still shown).
+          const PRICING = {
+            'claude-haiku-4-5-20251001': { in: 1.00, out: 5.00 },
+            'claude-sonnet-4-6': { in: 3.00, out: 15.00 },
+            'claude-opus-4-7': { in: 15.00, out: 75.00 },
+            'gpt-4o-mini': { in: 0.15, out: 0.60 },
+            'gpt-4o': { in: 2.50, out: 10.00 },
+            'gpt-5-mini': { in: 0.25, out: 2.00 },
+          };
+
+          function computeCost(model, promptTokens, completionTokens) {
+            const rate = PRICING[model];
+            if (!rate) return null;
+            return (promptTokens / 1_000_000) * rate.in + (completionTokens / 1_000_000) * rate.out;
+          }
+
+          const providers = {
+            anthropic: {
+              label: 'Anthropic',
+              envKey: 'ANTHROPIC_API_KEY',
+              modelEnv: 'ANTHROPIC_MODEL',
+              defaultModel: 'claude-haiku-4-5-20251001',
+              build: (model, key) => ({
+                url: 'https://api.anthropic.com/v1/messages',
+                headers: {
+                  'content-type': 'application/json',
+                  'x-api-key': key,
+                  'anthropic-version': '2023-06-01',
+                },
+                body: JSON.stringify({
+                  model,
+                  max_tokens: 8192,
+                  system,
+                  messages: [{ role: 'user', content: user }],
+                }),
+              }),
+              extractText: (r) => r?.content?.[0]?.text ?? '',
+              extractUsage: (r) => ({
+                prompt_tokens: r?.usage?.input_tokens ?? 0,
+                completion_tokens: r?.usage?.output_tokens ?? 0,
+              }),
+              extractError: (r) => r?.error?.message ?? r?.message ?? 'see workflow logs',
+            },
+            openai: {
+              label: 'OpenAI',
+              envKey: 'OPENAI_API_KEY',
+              modelEnv: 'OPENAI_MODEL',
+              defaultModel: 'gpt-4o-mini',
+              build: (model, key) => ({
+                url: 'https://api.openai.com/v1/chat/completions',
+                headers: {
+                  'content-type': 'application/json',
+                  Authorization: `Bearer ${key}`,
+                },
+                body: JSON.stringify({
+                  model,
+                  max_tokens: 8192,
+                  messages: [
+                    { role: 'system', content: system },
+                    { role: 'user', content: user },
+                  ],
+                  response_format: { type: 'json_object' },
+                }),
+              }),
+              extractText: (r) => r?.choices?.[0]?.message?.content ?? '',
+              extractUsage: (r) => ({
+                prompt_tokens: r?.usage?.prompt_tokens ?? 0,
+                completion_tokens: r?.usage?.completion_tokens ?? 0,
+              }),
+              extractError: (r) => r?.error?.message ?? 'see workflow logs',
+            },
+          };
+
+          // Provider order: try Anthropic, fall back to OpenAI.
+          const order = ['anthropic', 'openai'];
+
+          const setOutput = (k, v) => {
+            fs.appendFileSync(process.env.GITHUB_OUTPUT, `${k}<<EOF\n${String(v)}\nEOF\n`);
+          };
+
+          async function tryProvider(name) {
+            const p = providers[name];
+            const key = process.env[p.envKey];
+            if (!key) return { ok: false, reason: 'no key configured', skip: true };
+
+            const model = process.env[p.modelEnv] || p.defaultModel;
+            const req = p.build(model, key);
+
+            try {
+              const resp = await fetch(req.url, {
+                method: 'POST',
+                headers: req.headers,
+                body: req.body,
+              });
+              const text = await resp.text();
+              let parsed;
+              try {
+                parsed = JSON.parse(text);
+              } catch {
+                return { ok: false, reason: `HTTP ${resp.status}: non-JSON response`, provider: name, model };
+              }
+              if (!resp.ok) {
+                return {
+                  ok: false,
+                  reason: `HTTP ${resp.status}: ${p.extractError(parsed)}`,
+                  provider: name,
+                  model,
+                };
+              }
+              const reviewText = p.extractText(parsed);
+              const usage = p.extractUsage(parsed);
+              return { ok: true, provider: name, model, reviewText, usage };
+            } catch (e) {
+              return { ok: false, reason: `network error: ${e.message}`, provider: name, model };
+            }
+          }
+
+          (async () => {
+            const attempts = [];
+            let winner = null;
+
+            for (const name of order) {
+              const attempt = await tryProvider(name);
+              attempts.push(attempt);
+              if (attempt.ok) {
+                winner = attempt;
+                break;
+              }
+              if (attempt.skip) continue;
+              console.log(`::warning::${providers[name].label} failed: ${attempt.reason}`);
+            }
+
+            if (!winner) {
+              const configured = attempts.filter((a) => !a.skip);
+              if (configured.length === 0) {
+                console.log('::warning::No review providers configured. Skipping.');
+                setOutput('status', 'skipped');
+                setOutput('error_reason', 'no providers configured');
+              } else {
+                const reasons = configured
+                  .map((a) => `${providers[a.provider].label}: ${a.reason}`)
+                  .join('; ');
+                console.log(`::warning::All providers failed. ${reasons}`);
+                setOutput('status', 'error');
+                setOutput('error_reason', reasons);
+              }
+              return;
+            }
+
+            fs.writeFileSync('review.json', winner.reviewText);
+            setOutput('status', 'ok');
+            setOutput('provider_label', providers[winner.provider].label);
+            setOutput('provider_model', winner.model);
+
+            const promptTokens = winner.usage.prompt_tokens;
+            const completionTokens = winner.usage.completion_tokens;
+            const cost = computeCost(winner.model, promptTokens, completionTokens);
+            setOutput('prompt_tokens', String(promptTokens));
+            setOutput('completion_tokens', String(completionTokens));
+            setOutput('cost_usd', cost == null ? '' : cost.toFixed(4));
+
+            // Emit fallback details to the workflow log (not the PR comment).
+            const failed = attempts.filter((a) => !a.ok && !a.skip);
+            const fellBack = failed.length > 0;
+            setOutput('fell_back', fellBack ? 'true' : 'false');
+            if (fellBack) {
+              const notes = failed
+                .map((a) => `${providers[a.provider].label} failed: ${a.reason}`)
+                .join('; ');
+              console.log(`::notice::Fell back to ${providers[winner.provider].label}. ${notes}`);
+            }
+          })();
+          SCRIPT
+
+      - name: Post review
+        uses: actions/github-script@v8
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const fs = require('fs');
+            const prNumber = ${{ steps.pr.outputs.number }};
+            const headSha = '${{ steps.pr.outputs.head_sha }}';
+            const round = '${{ needs.check-review-status.outputs.review_round }}';
+            const status = `${{ steps.call.outputs.status }}`;
+            const errorReason = `${{ steps.call.outputs.error_reason }}`;
+            const providerLabel = `${{ steps.call.outputs.provider_label }}`;
+            const providerModel = `${{ steps.call.outputs.provider_model }}`;
+            const promptTokens = Number(`${{ steps.call.outputs.prompt_tokens }}` || '0');
+            const completionTokens = Number(`${{ steps.call.outputs.completion_tokens }}` || '0');
+            const costUsd = `${{ steps.call.outputs.cost_usd }}`;
+            const fellBack = `${{ steps.call.outputs.fell_back }}` === 'true';
+
+            const fmt = (n) => n.toLocaleString('en-US');
+            const costPart = costUsd ? ` | $${costUsd}` : '';
+            const usagePart = promptTokens + completionTokens > 0
+              ? ` | ${fmt(promptTokens)} in / ${fmt(completionTokens)} out${costPart}`
+              : '';
+            const fallbackBadge = fellBack ? ' (fallback)' : '';
+
+            // Failure paths — no round marker, so the next push retries fresh.
+            if (status !== 'ok') {
+              const note = status === 'skipped'
+                ? `Review skipped — ${errorReason}. No round marker emitted; the next PR activity will retry as Round 1.`
+                : `Review failed — ${errorReason}. No round marker emitted; the next PR activity will retry as Round 1.`;
+              await github.rest.issues.createComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: prNumber,
+                body: `### Automated Review — not posted\n\n${note}`,
+              });
+              return;
+            }
+
+            const raw = fs.readFileSync('review.json', 'utf8').trim();
+            let review;
+            try {
+              let s = raw;
+              if (s.startsWith('```')) s = s.replace(/^```(?:json)?\n?/, '').replace(/\n?```$/, '');
+              review = JSON.parse(s);
+            } catch (e) {
+              await github.rest.issues.createComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: prNumber,
+                body: `## Automated Review (Round ${round})\n\n${raw}\n\n---\n*Reviewed by ${providerLabel} ${providerModel}${fallbackBadge}${usagePart}*`,
+              });
+              return;
+            }
+
+            const summary = review.summary || 'No summary provided';
+            const changes = (review.changes || []).map(c => `- ${c}`).join('\n') || '_none_';
+            const feedback = review.feedback || [];
+
+            const isRound1 = round === '1';
+            const marker = isRound1 ? '<!-- AUTOMATED_REVIEW_ROUND_1 -->' : '<!-- AUTOMATED_REVIEW_ROUND_2_COMPLETE -->';
+            const label = isRound1 ? 'Round 1' : 'Round 2 (Final)';
+
+            let body = `## Automated Review — ${label}\n\n${marker}\n\n`;
+            body += `### Summary\n${summary}\n\n`;
+            body += `### Changes\n${changes}\n\n---\n`;
+            body += feedback.length === 0
+              ? `:white_check_mark: No issues found\n\n`
+              : `:mag: Found ${feedback.length} suggestion${feedback.length === 1 ? '' : 's'} (see inline comments)\n\n`;
+            body += `*Reviewed by ${providerLabel} ${providerModel}${fallbackBadge}${usagePart}`;
+            body += isRound1 ? ` — Round 1 of 2*` : ` — Round 2 (Final); no further reviews will be performed*`;
+
+            await github.rest.issues.createComment({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: prNumber,
+              body,
+            });
+
+            for (const item of feedback) {
+              try {
+                await github.rest.pulls.createReviewComment({
+                  owner: context.repo.owner,
+                  repo: context.repo.repo,
+                  pull_number: prNumber,
+                  body: item.comment,
+                  path: item.file,
+                  line: item.line,
+                  commit_id: headSha,
+                  side: 'RIGHT',
+                });
+              } catch (e) {
+                console.log(`Failed to post comment on ${item.file}:${item.line} — ${e.message}`);
+              }
+            }

package/dist/templates/governance/CITATION.cff

@@ -0,0 +1,8 @@
+cff-version: 1.2.0
+title: '{{REPO_NAME}}'
+message: 'If you use this software, please cite it as below.'
+type: software
+authors:
+  - name: '{{OWNER_ORG}}'
+repository-code: 'https://github.com/{{REPO_SLUG}}'
+license: Apache-2.0

package/dist/templates/governance/CODE_OF_CONDUCT.md

@@ -0,0 +1,43 @@
+# Código de Conduta — Contributor Covenant
+
+## Nosso compromisso
+
+Nós, como membros, contribuidores e líderes, nos comprometemos a tornar a participação em nossa comunidade uma experiência livre de assédio para todos, independentemente de idade, tamanho corporal, deficiência visível ou invisível, etnia, características sexuais, identidade e expressão de gênero, nível de experiência, educação, status socioeconômico, nacionalidade, aparência pessoal, raça, religião ou identidade e orientação sexual.
+
+Comprometemo-nos a agir e interagir de maneiras que contribuam para uma comunidade aberta, acolhedora, diversa, inclusiva e saudável.
+
+## Nossos padrões
+
+Exemplos de comportamento que contribuem para um ambiente positivo:
+
+- Demonstrar empatia e gentileza com outras pessoas
+- Respeitar opiniões, pontos de vista e experiências diferentes
+- Dar e aceitar graciosamente feedback construtivo
+- Assumir responsabilidade e pedir desculpas aos afetados por nossos erros, aprendendo com a experiência
+- Focar no que é melhor não apenas para nós individualmente, mas para a comunidade como um todo
+
+Exemplos de comportamento inaceitável:
+
+- Uso de linguagem ou imagens sexualizadas e atenção ou avanços sexuais de qualquer tipo
+- Trolling, comentários insultuosos ou depreciativos, e ataques pessoais ou políticos
+- Assédio público ou privado
+- Publicar informações privadas de outros, como endereço físico ou de e-mail, sem permissão explícita
+- Outra conduta que poderia razoavelmente ser considerada inapropriada em um ambiente profissional
+
+## Responsabilidades de aplicação
+
+Os líderes da comunidade são responsáveis por esclarecer e fazer cumprir nossos padrões de comportamento aceitável e tomarão ação corretiva apropriada e justa em resposta a qualquer comportamento que considerem inapropriado, ameaçador, ofensivo ou prejudicial.
+
+## Escopo
+
+Este Código de Conduta aplica-se em todos os espaços da comunidade e também quando um indivíduo está representando oficialmente a comunidade em espaços públicos.
+
+## Aplicação
+
+Instâncias de comportamento abusivo, de assédio ou de outra forma inaceitável podem ser reportadas aos líderes da comunidade responsáveis pela aplicação em **{{CONDUCT_EMAIL}}**.
+
+Todas as reclamações serão revisadas e investigadas de forma rápida e justa.
+
+## Atribuição
+
+Este Código de Conduta é adaptado do [Contributor Covenant](https://www.contributor-covenant.org), versão 2.1.

package/dist/templates/governance/CONTRIBUTING.md

@@ -0,0 +1,32 @@
+# Contributing
+
+Thanks for considering a contribution to `{{REPO_NAME}}`.
+
+## Development
+
+```bash
+pnpm install
+pnpm -r build
+pnpm -r typecheck
+pnpm -r test
+pnpm -r lint
+```
+
+Node {{NODE_VERSION}}+ and pnpm {{PNPM_VERSION}}+ are required (see `.nvmrc` and the `packageManager` field).
+
+## Workflow
+
+1. Fork (or branch) from `main`
+2. Open a PR — direct pushes to `main` are not allowed
+3. CI must be green
+4. A reviewer approves and merges via GitHub
+
+Commits follow [Conventional Commits](https://www.conventionalcommits.org). Allowed scopes for this repo are configured in `.commitlintrc.cjs`.
+
+## Dependency changes
+
+Ask before adding runtime or peer dependencies. In the PR description explain: what the package does, why it's needed, and whether an existing dependency could serve the purpose.
+
+## Signing
+
+All commits should be GPG-signed. The `commit-msg` hook blocks AI-attribution footers (`Co-Authored-By: Claude` and similar).

package/dist/templates/governance/CONVENTIONS.md

@@ -0,0 +1,37 @@
+# Conventions
+
+## Commit format
+
+[Conventional Commits](https://www.conventionalcommits.org):
+
+```
+type(scope): short description
+
+optional longer body
+
+BREAKING CHANGE: notes (optional)
+```
+
+**Types**: `feat`, `fix`, `docs`, `style`, `refactor`, `perf`, `test`, `chore`, `build`, `ci`, `revert`
+
+**Scopes**: declared in `.commitlintrc.cjs`.
+
+**AI attribution**: Do not include `Co-Authored-By: Claude`, `Generated with Claude`, or similar lines. The `commit-msg` hook enforces this.
+
+## Code style
+
+- TypeScript strict mode, `noUncheckedIndexedAccess`
+- ESM modules
+- Prettier-enforced formatting (100 char width, single quotes, semicolons, trailing commas — via `@precisa-saude/prettier-config`)
+- ESLint rules via `@precisa-saude/eslint-config`
+- Imports sorted by `eslint-plugin-simple-import-sort`
+- Interfaces, objects, and JSX props sorted by `eslint-plugin-perfectionist` where applicable
+
+## Tests
+
+Vitest with an 80% coverage floor (configured per-repo in `vitest.config.ts`).
+
+## Dependency rules
+
+- Core/SDK packages avoid runtime dependencies when feasible
+- External dependencies require explicit approval in the PR

package/dist/templates/governance/SECURITY.md

@@ -0,0 +1,22 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability in this project, please report it responsibly.
+
+**Do not open a public GitHub issue.**
+
+Email: **{{SECURITY_EMAIL}}**
+
+Include:
+
+- Description of the vulnerability
+- Steps to reproduce
+- Potential impact
+- Suggested fix (if any)
+
+We will acknowledge receipt within 48 hours and provide a timeline for resolution.
+
+## Disclosure
+
+Disclosure is coordinated privately. Fixes are released in the affected package(s) and noted in the CHANGELOG.

package/dist/templates/governance/SUPPORT.md

@@ -0,0 +1,14 @@
+# Support
+
+## Getting help
+
+- **Report bugs**: [GitHub Issues](https://github.com/{{REPO_SLUG}}/issues)
+- **Request features**: [GitHub Issues](https://github.com/{{REPO_SLUG}}/issues)
+- **Questions and discussions**: [GitHub Discussions](https://github.com/{{REPO_SLUG}}/discussions)
+
+## Before opening an issue
+
+1. Search existing issues to avoid duplicates
+2. Include a minimal reproducible example
+3. Specify the package and version
+4. Include Node/pnpm versions and the OS you're on

package/dist/templates/husky/commit-msg

@@ -0,0 +1,8 @@
+pnpm exec commitlint --edit "$1"
+
+# Block AI attribution lines in commit messages
+if grep -q -i -E "co-authored-by:.*claude|generated with.*claude|co-authored-by:.*anthropic|co-authored-by:.*gpt|co-authored-by:.*copilot" "$1"; then
+  echo "❌ Commit message contains AI attribution. Remove these lines:"
+  grep -i -E "co-authored-by:.*claude|generated with.*claude|co-authored-by:.*anthropic|co-authored-by:.*gpt|co-authored-by:.*copilot" "$1"
+  exit 1
+fi

package/dist/templates/husky/pre-commit

@@ -0,0 +1 @@
+pnpm exec lint-staged

package/dist/templates/husky/pre-push

@@ -0,0 +1,21 @@
+# Full-checks hook. Runs the same gates as CI so a failing push is caught locally.
+# Per-repo coverage thresholds live in vitest config, not here.
+
+set -e
+
+echo "→ verifying lockfile is in sync"
+pnpm install --frozen-lockfile --prefer-offline
+
+echo "→ prettier"
+pnpm format:check
+
+echo "→ eslint"
+pnpm -r lint
+
+echo "→ typescript"
+pnpm -r typecheck
+
+echo "→ tests"
+pnpm -r test
+
+echo "✓ pre-push checks passed"