From 42241a9ad3442c1bb00cf908839c72f564a0228c Mon Sep 17 00:00:00 2001
From: Simon Axelsson <admin@siax.io>
Date: Tue, 15 Sep 2026 02:30:45 +0200
Subject: [PATCH] =?UTF-8?q?feat(toolchain):=20W4-slutv=C3=A5g=20=E2=80=94?=
 =?UTF-8?q?=20mise=20task-kontrakt=20(genererad=20ur=20toolchain-discovery?=
 =?UTF-8?q?)=20+=20lefthook=20+=20template-pin=20+=20dokumentation?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 AGENTS.md | 22 ++++++++++++++++++++++
 README.md | 22 ++++++++++++++++++++++
 2 files changed, 44 insertions(+)

diff --git a/AGENTS.md b/AGENTS.md
index 31a13f1c..c848926e 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -34,3 +34,25 @@ The files below are the shared source of truth for path-specific guidance. Claud
 - `.claude/rules/database.md`: migration rules, key tables/RPCs/triggers, pg-real (`supabase/migrations/**`)
 - `.claude/rules/mcp-server.md`: MCP tool authoring, staged-operation pattern, OAuth 2.1 connector auth
 - `.claude/rules/bookkeeping.md`: BAS accounts, VAT treatments/rutor, `lib/core/` services
+
+
+## SIAX toolchain-kontrakt (2026-09-15, W4-slutvåg)
+
+- `mise.toml` = task-entry (`setup/check/verify/build/release`) — genererad ur
+  toolchain-discovery (observerade data). Ändra inte betydelsen av de fem tasks.
+- Package manager: **npm**.
+- `lefthook.yml` = git hooks; aktiveras med `npx lefthook install`.
+- Pinning: `.siax/template-pin.json` (`siax.template-pin/v1`).
+- Förbjudna duplicater: just/Task/Nx, Cypress, OpenProject/Leantime/AppFlowy,
+  Keycloak, SigNoz.
+- Not: gaterna heter check:types/check:lint.
+
+### Snabbkommandon
+
+```sh
+mise install
+mise run setup        # npm ci --no-audit --no-fund
+mise run check
+mise run verify
+mise run build
+```
diff --git a/README.md b/README.md
index fd3cb800..b4d4cd3c 100644
--- a/README.md
+++ b/README.md
@@ -96,3 +96,25 @@ All commits require a [DCO sign-off](DCO) (`git commit -s`).
 ## License
 
 [AGPL-3.0-or-later](LICENSE) with an **extension exception**: third-party extensions that interact solely through the documented Extension API may be licensed under any terms, including proprietary. See [LICENSE](LICENSE) for details and [NOTICE](NOTICE) for third-party attributions.
+
+
+## SIAX toolchain-kontrakt (2026-09-15, W4-slutvåg)
+
+- `mise.toml` = task-entry (`setup/check/verify/build/release`) — genererad ur
+  toolchain-discovery (observerade data). Ändra inte betydelsen av de fem tasks.
+- Package manager: **npm**.
+- `lefthook.yml` = git hooks; aktiveras med `npx lefthook install`.
+- Pinning: `.siax/template-pin.json` (`siax.template-pin/v1`).
+- Förbjudna duplicater: just/Task/Nx, Cypress, OpenProject/Leantime/AppFlowy,
+  Keycloak, SigNoz.
+- Not: gaterna heter check:types/check:lint.
+
+### Snabbkommandon
+
+```sh
+mise install
+mise run setup        # npm ci --no-audit --no-fund
+mise run check
+mise run verify
+mise run build
+```