@tenantegroup/ai-rules-mcp 1.0.0

package/templates/cloudflare/compile-context.js

@@ -0,0 +1,43 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+const rulesDir = path.join(__dirname, '../rules');
+const rootDir = path.join(__dirname, '../../');
+
+// Read all markdown files in .ai/rules/ and sort them
+const ruleFiles = fs.readdirSync(rulesDir)
+    .filter(f => f.endsWith('.md') && f !== 'README.md')
+    .sort();
+
+let compiledRules = "## MANDATORY ENGINEERING STANDARDS\n\n";
+compiledRules += "The following rules are STRICT CONSTRAINTS. You must NEVER violate them.\n\n";
+
+for (const file of ruleFiles) {
+    const content = fs.readFileSync(path.join(rulesDir, file), 'utf-8');
+    compiledRules += `### Rule Set: ${file}\n${content}\n\n`;
+}
+
+// Build the final CLAUDE.md / GEMINI.md content
+const systemPrompt = `
+# CRITICAL SYSTEM INSTRUCTIONS
+You are operating within a Cloudflare Workers edge ecosystem.
+Your outputs are strictly governed by the rules below.
+
+${compiledRules}
+
+## POST-GENERATION VALIDATION HOOK
+Whenever you modify TypeScript or JavaScript backend route files, you MUST run the validation script before concluding your response:
+\`node .ai/scripts/validate-code.js\`
+If the script returns errors, you MUST fix the violations immediately.
+`;
+
+// Write to AI specific configuration files
+fs.writeFileSync(path.join(rootDir, 'CLAUDE.md'), systemPrompt);
+fs.writeFileSync(path.join(rootDir, 'GEMINI.md'), systemPrompt);
+fs.writeFileSync(path.join(rootDir, '.cursorrules'), systemPrompt);
+
+console.log("✅ AI Context successfully compiled into CLAUDE.md, GEMINI.md, and .cursorrules");

package/templates/cloudflare/hooks/post-checkout

@@ -0,0 +1,5 @@
+#!/bin/bash
+# Post-checkout hook to auto-compile AI context rules
+
+echo "🔄 Compiling AI context rules..."
+node .ai/scripts/compile-context.js

package/templates/cloudflare/hooks/pre-commit

@@ -0,0 +1,14 @@
+#!/bin/bash
+# Pre-commit hook to enforce AI rules locally
+
+echo "🔍 Running AI Standards Validation Hook..."
+node .ai/scripts/validate-code.js
+
+if [ $? -ne 0 ]; then
+  echo "❌ Commit rejected: Code violates mandatory Cloudflare engineering standards."
+  echo "Please fix the issues or ask your AI assistant to fix them."
+  exit 1
+fi
+
+echo "✅ Standards validation passed."
+exit 0

package/templates/cloudflare/install-hooks.js

@@ -0,0 +1,34 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+const hooksDir = path.join(__dirname, '../hooks');
+const gitHooksDir = path.join(__dirname, '../../.git/hooks');
+
+// Check if .git/hooks exists
+if (!fs.existsSync(gitHooksDir)) {
+    console.error("❌ .git/hooks directory not found. Please run this script from the root of a git repository.");
+    process.exit(1);
+}
+
+// Get all files in .ai/hooks
+const hookFiles = fs.readdirSync(hooksDir);
+
+for (const file of hookFiles) {
+    const source = path.join(hooksDir, file);
+    const dest = path.join(gitHooksDir, file);
+
+    try {
+        fs.copyFileSync(source, dest);
+        // Ensure it's executable (matters more on Unix, but good practice)
+        fs.chmodSync(dest, '755');
+        console.log(`✅ Installed hook: ${file}`);
+    } catch (err) {
+        console.error(`❌ Failed to install hook ${file}:`, err.message);
+    }
+}
+
+console.log("🎉 Git hooks installed successfully!");

package/templates/cloudflare/validate-code.js

@@ -0,0 +1,57 @@
+import { execSync } from 'node:child_process';
+import fs from 'node:fs';
+
+let hasErrors = false;
+
+function logError(file, message) {
+    console.error(`[VIOLATION] ${file}: ${message}`);
+    hasErrors = true;
+}
+
+// Get staged files. If no staged files, exit early to be safe on non-git paths or when debugging
+let stagedFiles = [];
+try {
+    const diffOut = execSync('git diff --cached --name-only').toString();
+    stagedFiles = diffOut.split('\n').filter(Boolean);
+} catch (e) {
+    console.warn("⚠️ Not in a git repository or git command failed. Skipping strict validation.");
+    process.exit(0);
+}
+
+if (stagedFiles.length === 0) {
+    console.log("✅ No staged files to validate.");
+    process.exit(0);
+}
+
+stagedFiles.forEach(file => {
+    if (!fs.existsSync(file)) return;
+    const content = fs.readFileSync(file, 'utf-8');
+
+    // Rule: Cloudflare Edge Parity (No Node.js core modules or process.env)
+    if (file.endsWith('.ts') || file.endsWith('.vue') || file.endsWith('.js')) {
+        // Simple regex check for fs, path, net imports
+        if (/import .* from ['"](fs|path|net|child_process|crypto|node:.*)['"]/.test(content)) {
+            // Check if it's not a build script or dev script
+            if (!file.includes('nuxt.config') && !file.includes('.ai/scripts')) {
+                logError(file, "Node.js core modules are strictly forbidden in Cloudflare edge runtime. Use Web Standards.");
+            }
+        }
+        if (content.includes('process.env') && !file.includes('nuxt.config') && !file.includes('.ai/scripts')) {
+            logError(file, "Do not use process.env. Access environment variables via useRuntimeConfig() or Nitro bindings context.");
+        }
+    }
+
+    // Rule: Database & ORM (No direct SQL execution without Drizzle)
+    if (file.includes('server/api') || file.includes('server/services')) {
+        if (content.match(/\.query\(["'\`]\s*(SELECT|UPDATE|INSERT|DELETE)/i)) {
+            logError(file, "Raw SQL queries detected. All queries MUST be encapsulated within Drizzle ORM query builders.");
+        }
+    }
+});
+
+if (hasErrors) {
+    console.error("❌ Validation failed.");
+    process.exit(1);
+} else {
+    console.log("✅ Standards validation passed.");
+}

package/templates/dotnet/compile-context.js

@@ -0,0 +1,43 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+const rulesDir = path.join(__dirname, '../rules');
+const rootDir = path.join(__dirname, '../../');
+
+// Read all markdown files in .ai/rules/ and sort them
+const ruleFiles = fs.readdirSync(rulesDir)
+    .filter(f => f.endsWith('.md') && f !== 'README.md')
+    .sort();
+
+let compiledRules = "## MANDATORY ENGINEERING STANDARDS\n\n";
+compiledRules += "The following rules are STRICT CONSTRAINTS. You must NEVER violate them.\n\n";
+
+for (const file of ruleFiles) {
+    const content = fs.readFileSync(path.join(rulesDir, file), 'utf-8');
+    compiledRules += `### Rule Set: ${file}\n${content}\n\n`;
+}
+
+// Build the final CLAUDE.md / GEMINI.md content
+const systemPrompt = `
+# CRITICAL SYSTEM INSTRUCTIONS
+You are operating within a .NET MAUI cross-platform client-side ecosystem.
+Your outputs are strictly governed by the rules below.
+
+${compiledRules}
+
+## POST-GENERATION VALIDATION HOOK
+Whenever you modify C# or XAML source files, you MUST run the validation script before concluding your response:
+\`node .ai/scripts/validate-code.js\`
+If the script returns errors, you MUST fix the violations immediately.
+`;
+
+// Write to AI specific configuration files
+fs.writeFileSync(path.join(rootDir, 'CLAUDE.md'), systemPrompt);
+fs.writeFileSync(path.join(rootDir, 'GEMINI.md'), systemPrompt);
+fs.writeFileSync(path.join(rootDir, '.cursorrules'), systemPrompt);
+
+console.log("✅ AI Context successfully compiled into CLAUDE.md, GEMINI.md, and .cursorrules");

package/templates/dotnet/hooks/post-checkout

@@ -0,0 +1,5 @@
+#!/bin/bash
+# Post-checkout hook to auto-compile AI context rules
+
+echo "🔄 Compiling AI context rules..."
+node .ai/scripts/compile-context.js

package/templates/dotnet/hooks/pre-commit

@@ -0,0 +1,14 @@
+#!/bin/bash
+# Pre-commit hook to enforce AI rules locally
+
+echo "🔍 Running AI Standards Validation Hook..."
+node .ai/scripts/validate-code.js
+
+if [ $? -ne 0 ]; then
+  echo "❌ Commit rejected: Code violates mandatory .NET engineering standards."
+  echo "Please fix the issues or ask your AI assistant to fix them."
+  exit 1
+fi
+
+echo "✅ Standards validation passed."
+exit 0

package/templates/dotnet/install-hooks.js

@@ -0,0 +1,34 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+const hooksDir = path.join(__dirname, '../hooks');
+const gitHooksDir = path.join(__dirname, '../../.git/hooks');
+
+// Check if .git/hooks exists
+if (!fs.existsSync(gitHooksDir)) {
+    console.error("❌ .git/hooks directory not found. Please run this script from the root of a git repository.");
+    process.exit(1);
+}
+
+// Get all files in .ai/hooks
+const hookFiles = fs.readdirSync(hooksDir);
+
+for (const file of hookFiles) {
+    const source = path.join(hooksDir, file);
+    const dest = path.join(gitHooksDir, file);
+
+    try {
+        fs.copyFileSync(source, dest);
+        // Ensure it's executable (matters more on Unix, but good practice)
+        fs.chmodSync(dest, '755');
+        console.log(`✅ Installed hook: ${file}`);
+    } catch (err) {
+        console.error(`❌ Failed to install hook ${file}:`, err.message);
+    }
+}
+
+console.log("🎉 Git hooks installed successfully!");

package/templates/dotnet/validate-code.js

@@ -0,0 +1,84 @@
+import { execSync } from 'node:child_process';
+import fs from 'node:fs';
+
+let hasErrors = false;
+
+function logError(file, message) {
+    console.error(`[VIOLATION] ${file}: ${message}`);
+    hasErrors = true;
+}
+
+// Get staged files. If no staged files, exit early to be safe on non-git paths or when debugging
+let stagedFiles = [];
+try {
+    const diffOut = execSync('git diff --cached --name-only').toString();
+    stagedFiles = diffOut.split('\n').filter(Boolean);
+} catch (e) {
+    console.warn("⚠️ Not in a git repository or git command failed. Skipping strict validation.");
+    process.exit(0);
+}
+
+if (stagedFiles.length === 0) {
+    console.log("✅ No staged files to validate.");
+    process.exit(0);
+}
+
+stagedFiles.forEach(file => {
+    if (!fs.existsSync(file)) return;
+    const content = fs.readFileSync(file, 'utf-8');
+
+    // Rule: Avoid synchronous blocking on Task objects (.Result or .Wait())
+    if (file.endsWith('.cs')) {
+        const lines = content.split('\n');
+        
+        lines.forEach((line, index) => {
+            const cleanLine = line.trim();
+            // Skip commented lines
+            if (cleanLine.startsWith('//') || cleanLine.startsWith('/*')) return;
+
+            if (cleanLine.includes('.Result') && !cleanLine.includes('QueryResult') && !file.includes('test/')) {
+                logError(file, `Line ${index + 1}: Synchronous task blocking via '.Result' is forbidden. Use proper async/await syntax.`);
+            }
+            if (cleanLine.includes('.Wait(') && !cleanLine.includes('Task.Delay') && !file.includes('test/')) {
+                logError(file, `Line ${index + 1}: Synchronous task blocking via '.Wait()' is forbidden. Use proper async/await syntax.`);
+            }
+        });
+
+        // Rule: Async methods returning Task/ValueTask must end with the "Async" suffix
+        // Let's use a regex to look for public/private async Task/ValueTask method signatures without Async suffix
+        // e.g. "public async Task MyMethod(" or "async Task<T> MyMethod("
+        // Exclude test files
+        if (!file.includes('test/') && !file.includes('Tests/')) {
+            const lines = content.split('\n');
+            lines.forEach((line, index) => {
+                const cleanLine = line.trim();
+                if (cleanLine.startsWith('//') || cleanLine.startsWith('/*')) return;
+                
+                // Matches declaration: async Task<Option> MethodName( or async Task MethodName(
+                // Captures return type in group 1, method name in group 2
+                const match = cleanLine.match(/\basync\s+(Task|ValueTask|Task<[^>]+>|ValueTask<[^>]+>)\s+(\w+)\s*\(/);
+                if (match) {
+                    const methodName = match[2];
+                    if (!methodName.endsWith('Async') && methodName !== 'Main') {
+                        logError(file, `Line ${index + 1}: Async method '${methodName}' must have the 'Async' suffix (e.g. '${methodName}Async').`);
+                    }
+                }
+            });
+        }
+
+        // Rule: MVVM Separation of Concerns
+        // Views (.xaml.cs code-behind) should not instantiate services, perform DB calls, or run business logic
+        if (file.endsWith('.xaml.cs')) {
+            if (content.includes('new SqliteConnection') || content.includes('SQLiteConnection') || content.includes('HttpClient')) {
+                logError(file, "Code-behind Views (.xaml.cs) must never perform database calls or directly instantiate HttpClients. Enforce MVVM and handle this in ViewModels or Services.");
+            }
+        }
+    }
+});
+
+if (hasErrors) {
+    console.error("❌ Validation failed.");
+    process.exit(1);
+} else {
+    console.log("✅ .NET standards validation passed.");
+}

package/templates/flutter/compile-context.js

@@ -0,0 +1,43 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+const rulesDir = path.join(__dirname, '../rules');
+const rootDir = path.join(__dirname, '../../');
+
+// Read all markdown files in .ai/rules/ and sort them
+const ruleFiles = fs.readdirSync(rulesDir)
+    .filter(f => f.endsWith('.md') && f !== 'README.md')
+    .sort();
+
+let compiledRules = "## MANDATORY ENGINEERING STANDARDS\n\n";
+compiledRules += "The following rules are STRICT CONSTRAINTS. You must NEVER violate them.\n\n";
+
+for (const file of ruleFiles) {
+    const content = fs.readFileSync(path.join(rulesDir, file), 'utf-8');
+    compiledRules += `### Rule Set: ${file}\n${content}\n\n`;
+}
+
+// Build the final CLAUDE.md / GEMINI.md content
+const systemPrompt = `
+# CRITICAL SYSTEM INSTRUCTIONS
+You are operating within a Flutter and Dart cross-platform client-side ecosystem.
+Your outputs are strictly governed by the rules below.
+
+${compiledRules}
+
+## POST-GENERATION VALIDATION HOOK
+Whenever you modify Dart or Flutter source files, you MUST run the validation script before concluding your response:
+\`node .ai/scripts/validate-code.js\`
+If the script returns errors, you MUST fix the violations immediately.
+`;
+
+// Write to AI specific configuration files
+fs.writeFileSync(path.join(rootDir, 'CLAUDE.md'), systemPrompt);
+fs.writeFileSync(path.join(rootDir, 'GEMINI.md'), systemPrompt);
+fs.writeFileSync(path.join(rootDir, '.cursorrules'), systemPrompt);
+
+console.log("✅ AI Context successfully compiled into CLAUDE.md, GEMINI.md, and .cursorrules");

package/templates/flutter/hooks/post-checkout

@@ -0,0 +1,5 @@
+#!/bin/bash
+# Post-checkout hook to auto-compile AI context rules
+
+echo "🔄 Compiling AI context rules..."
+node .ai/scripts/compile-context.js

package/templates/flutter/hooks/pre-commit

@@ -0,0 +1,14 @@
+#!/bin/bash
+# Pre-commit hook to enforce AI rules locally
+
+echo "🔍 Running AI Standards Validation Hook..."
+node .ai/scripts/validate-code.js
+
+if [ $? -ne 0 ]; then
+  echo "❌ Commit rejected: Code violates mandatory Flutter engineering standards."
+  echo "Please fix the issues or ask your AI assistant to fix them."
+  exit 1
+fi
+
+echo "✅ Standards validation passed."
+exit 0

package/templates/flutter/install-hooks.js

@@ -0,0 +1,34 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+const hooksDir = path.join(__dirname, '../hooks');
+const gitHooksDir = path.join(__dirname, '../../.git/hooks');
+
+// Check if .git/hooks exists
+if (!fs.existsSync(gitHooksDir)) {
+    console.error("❌ .git/hooks directory not found. Please run this script from the root of a git repository.");
+    process.exit(1);
+}
+
+// Get all files in .ai/hooks
+const hookFiles = fs.readdirSync(hooksDir);
+
+for (const file of hookFiles) {
+    const source = path.join(hooksDir, file);
+    const dest = path.join(gitHooksDir, file);
+
+    try {
+        fs.copyFileSync(source, dest);
+        // Ensure it's executable (matters more on Unix, but good practice)
+        fs.chmodSync(dest, '755');
+        console.log(`✅ Installed hook: ${file}`);
+    } catch (err) {
+        console.error(`❌ Failed to install hook ${file}:`, err.message);
+    }
+}
+
+console.log("🎉 Git hooks installed successfully!");

package/templates/flutter/validate-code.js

@@ -0,0 +1,64 @@
+import { execSync } from 'node:child_process';
+import fs from 'node:fs';
+
+let hasErrors = false;
+
+function logError(file, message) {
+    console.error(`[VIOLATION] ${file}: ${message}`);
+    hasErrors = true;
+}
+
+// Get staged files. If no staged files, exit early to be safe on non-git paths or when debugging
+let stagedFiles = [];
+try {
+    const diffOut = execSync('git diff --cached --name-only').toString();
+    stagedFiles = diffOut.split('\n').filter(Boolean);
+} catch (e) {
+    console.warn("⚠️ Not in a git repository or git command failed. Skipping strict validation.");
+    process.exit(0);
+}
+
+if (stagedFiles.length === 0) {
+    console.log("✅ No staged files to validate.");
+    process.exit(0);
+}
+
+stagedFiles.forEach(file => {
+    if (!fs.existsSync(file)) return;
+    const content = fs.readFileSync(file, 'utf-8');
+
+    // Only scan Dart files
+    if (file.endsWith('.dart')) {
+        // Rule: Avoid print statements in production code
+        if (content.includes('print(') && !file.includes('test/') && !file.includes('.ai/')) {
+            // Check if it's not a commented line
+            const lines = content.split('\n');
+            lines.forEach((line, index) => {
+                if (line.includes('print(') && !line.trim().startsWith('//') && !line.trim().startsWith('/*')) {
+                    logError(file, `Line ${index + 1}: Raw print() statements are forbidden in production. Use AppLogger or standard logging wrappers.`);
+                }
+            });
+        }
+
+        // Rule: Prevent direct Drift database imports/queries in View files
+        if (file.includes('/views/') || file.includes('/screens/') || file.includes('/widgets/')) {
+            if (content.includes("import 'package:drift/drift.dart'") || content.includes(".select(") || content.includes(".into(")) {
+                logError(file, "Views/Widgets must never access the Drift database directly. Enforce MVVM/Riverpod layers and access data through Providers.");
+            }
+        }
+
+        // Rule: Riverpod Providers global registration check
+        // Check for providers declared without keepAlive or autodispose (warn/rule depending on structure)
+        // e.g., enforcing clean provider syntax: Providers must be annotated with @riverpod
+        if (content.includes('final ') && content.includes('Provider(') && !content.includes('Provider.autoDispose') && !content.includes('@riverpod')) {
+             console.warn(`[WARNING] ${file}: Manual Provider declaration detected without autodispose. Consider using @riverpod generator for state lifecycle control.`);
+        }
+    }
+});
+
+if (hasErrors) {
+    console.error("❌ Validation failed.");
+    process.exit(1);
+} else {
+    console.log("✅ Flutter standards validation passed.");
+}

package/templates/nuxt/compile-context.js

@@ -0,0 +1,43 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+const rulesDir = path.join(__dirname, '../rules');
+const rootDir = path.join(__dirname, '../../');
+
+// Read all markdown files in .ai/rules/ and sort them
+const ruleFiles = fs.readdirSync(rulesDir)
+    .filter(f => f.endsWith('.md') && f !== 'README.md')
+    .sort();
+
+let compiledRules = "## MANDATORY ENGINEERING STANDARDS\n\n";
+compiledRules += "The following rules are STRICT CONSTRAINTS. You must NEVER violate them.\n\n";
+
+for (const file of ruleFiles) {
+    const content = fs.readFileSync(path.join(rulesDir, file), 'utf-8');
+    compiledRules += `### Rule Set: ${file}\n${content}\n\n`;
+}
+
+// Build the final CLAUDE.md / GEMINI.md content
+const systemPrompt = `
+# CRITICAL SYSTEM INSTRUCTIONS
+You are operating within a Nuxt 4 frontend ecosystem.
+Your outputs are strictly governed by the rules below.
+
+${compiledRules}
+
+## POST-GENERATION VALIDATION HOOK
+Whenever you modify Vue, TypeScript, or JavaScript files, you MUST run the validation script before concluding your response:
+\`node .ai/scripts/validate-code.js\`
+If the script returns errors, you MUST fix the violations immediately.
+`;
+
+// Write to AI specific configuration files
+fs.writeFileSync(path.join(rootDir, 'CLAUDE.md'), systemPrompt);
+fs.writeFileSync(path.join(rootDir, 'GEMINI.md'), systemPrompt);
+fs.writeFileSync(path.join(rootDir, '.cursorrules'), systemPrompt);
+
+console.log("✅ AI Context successfully compiled into CLAUDE.md, GEMINI.md, and .cursorrules");

package/templates/nuxt/hooks/post-checkout

@@ -0,0 +1,5 @@
+#!/bin/bash
+# Post-checkout hook to auto-compile AI context rules
+
+echo "🔄 Compiling AI context rules..."
+node .ai/scripts/compile-context.js

package/templates/nuxt/hooks/pre-commit

@@ -0,0 +1,14 @@
+#!/bin/bash
+# Pre-commit hook to enforce AI rules locally
+
+echo "🔍 Running AI Standards Validation Hook..."
+node .ai/scripts/validate-code.js
+
+if [ $? -ne 0 ]; then
+  echo "❌ Commit rejected: Code violates mandatory Nuxt engineering standards."
+  echo "Please fix the issues or ask your AI assistant to fix them."
+  exit 1
+fi
+
+echo "✅ Standards validation passed."
+exit 0

package/templates/nuxt/install-hooks.js

@@ -0,0 +1,34 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+const hooksDir = path.join(__dirname, '../hooks');
+const gitHooksDir = path.join(__dirname, '../../.git/hooks');
+
+// Check if .git/hooks exists
+if (!fs.existsSync(gitHooksDir)) {
+    console.error("❌ .git/hooks directory not found. Please run this script from the root of a git repository.");
+    process.exit(1);
+}
+
+// Get all files in .ai/hooks
+const hookFiles = fs.readdirSync(hooksDir);
+
+for (const file of hookFiles) {
+    const source = path.join(hooksDir, file);
+    const dest = path.join(gitHooksDir, file);
+
+    try {
+        fs.copyFileSync(source, dest);
+        // Ensure it's executable (matters more on Unix, but good practice)
+        fs.chmodSync(dest, '755');
+        console.log(`✅ Installed hook: ${file}`);
+    } catch (err) {
+        console.error(`❌ Failed to install hook ${file}:`, err.message);
+    }
+}
+
+console.log("🎉 Git hooks installed successfully!");

package/templates/nuxt/validate-code.js

@@ -0,0 +1,57 @@
+import { execSync } from 'node:child_process';
+import fs from 'node:fs';
+
+let hasErrors = false;
+
+function logError(file, message) {
+    console.error(`[VIOLATION] ${file}: ${message}`);
+    hasErrors = true;
+}
+
+// Get staged files. If no staged files, exit early to be safe on non-git paths or when debugging
+let stagedFiles = [];
+try {
+    const diffOut = execSync('git diff --cached --name-only').toString();
+    stagedFiles = diffOut.split('\n').filter(Boolean);
+} catch (e) {
+    console.warn("⚠️ Not in a git repository or git command failed. Skipping strict validation.");
+    process.exit(0);
+}
+
+if (stagedFiles.length === 0) {
+    console.log("✅ No staged files to validate.");
+    process.exit(0);
+}
+
+stagedFiles.forEach(file => {
+    if (!fs.existsSync(file)) return;
+    const content = fs.readFileSync(file, 'utf-8');
+
+    // Rule: Cloudflare Edge Parity (No Node.js core modules or process.env)
+    if (file.endsWith('.ts') || file.endsWith('.vue') || file.endsWith('.js')) {
+        // Simple regex check for fs, path, net imports
+        if (/import .* from ['"](fs|path|net|child_process|crypto|node:.*)['"]/.test(content)) {
+            // Check if it's not a build script or dev script
+            if (!file.includes('nuxt.config') && !file.includes('.ai/scripts')) {
+                logError(file, "Node.js core modules are strictly forbidden in Cloudflare edge runtime. Use Web Standards.");
+            }
+        }
+        if (content.includes('process.env') && !file.includes('nuxt.config') && !file.includes('.ai/scripts')) {
+            logError(file, "Do not use process.env. Access environment variables via useRuntimeConfig() or Nitro bindings context.");
+        }
+    }
+
+    // Rule: Database & ORM (No direct SQL execution without Drizzle)
+    if (file.includes('server/api') || file.includes('server/services')) {
+        if (content.match(/\.query\(["'\`]\s*(SELECT|UPDATE|INSERT|DELETE)/i)) {
+            logError(file, "Raw SQL queries detected. All queries MUST be encapsulated within Drizzle ORM query builders.");
+        }
+    }
+});
+
+if (hasErrors) {
+    console.error("❌ Validation failed.");
+    process.exit(1);
+} else {
+    console.log("✅ Standards validation passed.");
+}