Triage Submission

Triage Submission Failures

Diagnose and fix failures from the Husky pre-commit, commit-msg, and pre-push hooks in this codebase.

When to Use

• A git commit was rejected by any hook
• A git push was rejected by any hook (branch name validation, pre-push checks)
• lint-staged output shows failing Nx targets
• Errors from tools like ESLint, oxfmt, prettier, oxlint, TypeScript, cspell, markdownlint, yamllint, knip, or vulture appear during a commit or push
• commitlint rejects the commit message format
• validate-branch-name rejects the current branch name on push
• Sync checks fail (conventional config, PR template, devcontainer, generator and graph tables, lockfile)

Hook Architecture

pre-commit hook

File: configuration/.husky/pre-commit

NX_PERF_LOGGING=false lint-staged --config configuration/lint-staged.config.ts --continue-on-error

Invoked directly rather than through nx run codebase:lint-staged. That target's own command still carries NODE_OPTIONS='--import=tsx', which the hook deliberately drops: the flag is inherited by every command lint-staged runs, and its --import=tsx loader preempts the transpiler Nx uses for workspace plugins. esbuild emits no design:paramtypes, so the conformetry plugin's NestJS constructor injection would silently resolve to undefined and the project graph would fail to build. Node reads the TypeScript config natively instead. The hook also measures code (nx run codebase:codometer:write) and clears staged notepad files before running lint-staged.

lint-staged config: configuration/lint-staged.config.ts

Almost every check reaches the staged files through one nx affected run over the lint-codebase target:

nx affected --target=lint-codebase --configuration=check --parallel=8 --outputStyle=static --files=<path> --files=<path> …

One --files= flag per staged path, never one comma-separated value: Node is killed by the operating system on a single argument past 1011 bytes, and lint-staged reports that as Task failed to spawn: undefined with no output.

commit-msg hook

File: configuration/.husky/commit-msg

nx run codebase:commitlint --edit=$1
# resolves to:
NODE_OPTIONS='--import=tsx' commitlint --config configuration/commitlint.config.ts --edit <msg-file>

pre-push hook

File: configuration/.husky/pre-push

nx run codebase:validate-branch-name
# resolves to:
validate-branch-name
# reads config from: validate-branch-name.config.cjs

Config: validate-branch-name.config.cjs

lint-staged pattern → command matrix

configuration/lint-staged.config.ts declares three patterns, in this order. A staged package.json matches all three, so all four commands run.

There is deliberately no per-file-type row any more. lint-codebase is an nx:noop aggregator whose dependsOn list holds every static check, and each leaf target declares the config files it reads in its own inputs — so staging configuration/knip.config.ts re-runs knip and cache-hits the rest, with no hand-written mapping to drift. Anything the old table routed by hand (sync-vscode-extensions, markdown-lint, yaml-lint, spell-check) is now reached through that dependsOn list.

Each derivation synchronization target is named in the same invocation rather than reached through dependsOn, because each also publishes on the default branch, and Nx forwards an explicit configuration down dependsOn — so an edge there would let lint-codebase --configuration=write publish from a branch.

gate is named the same way, but for a different reason: the callidescope Nx plugin infers it with no configuration at all, so it has nothing for dependsOn to forward in the first place. It stays a named sibling because nx affected scopes it to the projects a commit actually touched, the same way it scopes lint-codebase itself — a commit that deepens one project's call stacks fails that project's own task, which the workspace-wide callidescope --check depth run this replaced never could name.

There is no aggregate synchronize target: each synchronization command is its own Nx target on the synchronization project, named here directly. Naming them alongside keeps a commit gating call-stack depth and derivation drift without a second nx affected call and the extra project graph build it would cost.

Conformetry is the one exception to affected: a generated instance can drift without matching any changed-file glob, so it validates the whole workspace on every commit.

nx sync:check no longer runs on commit at all — the pre-commit hook says so in place of the call it used to make. The generator plugin it checked is emitted into .conformetry on install rather than committed, so no commit can stage it out of date, and every conformetry command re-checks the emitted plugin against the configuration itself.

Triage Procedure

Step 1: Identify the Failing Hook

Read the error output carefully. Determine which hook failed:

• pre-commit → lint-staged ran Nx targets on staged files
• commit-msg → commitlint rejected the commit message format
• pre-push → validate-branch-name rejected the current branch name

Step 2: Read the Error Output

If the user did not paste error output, read the last recorded output from the pre-commit hook:

cat last-lint-staged-output.log

This file is written automatically after every commit attempt (git-ignored, workspace root).

Identify from the output:

• Which Nx target failed (e.g., oxfmt, eslint, typecheck, spell-check)
• Which project(s) failed (e.g., lexico, caelundas, codebase)
• The specific error messages from the underlying tool

Step 3: Locate Relevant Configuration

Use the table below to find the exact config file and command for the failing tool. Read the config file before proposing a fix.

prettier and oxfmt (formatting — no composite format target exists)

Both are independent leaf targets that lint-codebase depends on directly.

Python projects run ruff-format instead — uv run ruff format --check . (cwd: projectRoot), config: pyproject.toml

eslint and oxlint (linting — no composite lint target exists)

Both are independent leaf targets that lint-codebase depends on directly.

Python projects run ruff-lint instead — uv run ruff check . (cwd: projectRoot), config: pyproject.toml

typecheck

spell-check

Command: cspell --config configuration/cspell.config.yaml '{projectRoot}/**/*.{ts,tsx,js,...,py,ipynb}' --no-progress --gitignore (cwd: workspaceRoot) Config: configuration/cspell.config.yaml

markdown-lint

yaml-lint

Command: uv run --project configuration yamllint -c configuration/yamllint.yaml '{projectRoot}' (cwd: workspaceRoot) Config: configuration/yamllint.yaml

stylelint

knip and vulture (dead-code detection — no composite clean target exists)

knip runs on TypeScript projects and vulture on Python projects; there is no clean target on any project.

nbstripout (affirmations only — Jupyter notebooks)

Strips cell outputs from .ipynb files before staging. Runs automatically on *.ipynb staged files. Config: applications/affirmations/project.json

Sync checks

Every synchronization command is its own Nx target on the synchronization project — conformetry-generators, conventional-config, devcontainer-configuration, pull-request-template, and skill-exclusions — run directly rather than through a shared aggregate, the same way codebase:codometer and codebase:callidescope are run. There is no sync-* target, no scripts/sync-*.ts script, and no synchronization:synchronize aggregate target — those were retired when the work moved into tools/synchronization. lint-codebase's dependents name each derivation target directly.

The nestjs-module-graphs and nx-project-graphs targets were retired too, per issue #296: codependix now derives the same NestJS module graphs and Nx neighborhood graphs through its own anchor blocks, checked by nx run codebase:codependix instead.

Lesson: If sync checks fail, it means a source of truth was edited without updating its counterpart. Example: editing configuration/conformetry.config.ts requires regenerating the AGENTS.md generators table. Editing configuration/conventional.config.cjs requires regenerating .vscode/settings.json, the PR template, and the types/scopes tables in AGENTS.md and the branch and commit skills.

There is no command that regenerates a skills table of contents. The synchronization module that once maintained the AGENTS.md skills list was retired along with the list itself: agents are handed the installed skills directly, so reading .agents/skills is what tells you which ones exist. A new skill needs no synchronization run — a skill added to skills-lock.json does, because skill-exclusions derives the exclusion blocks from it.

check-lockfile (package.json / pnpm-workspace.yaml changes)

Command: validation lockfile, the lockfile check

lint-staged runs it as the CLI directly rather than through its codebase:check-lockfile Nx target, so one command does not cost another project graph build. Run it by hand through the target:

pnpm exec nx run codebase:check-lockfile

commitlint (commit-msg hook)

Command: NODE_OPTIONS='--import=tsx' commitlint --config configuration/commitlint.config.ts --edit <msg-file> Config: configuration/commitlint.config.ts

Step 4: Apply Targeted Fixes

⚠️ CRITICAL RULE: Validate Fixes But Never Run lint-staged

After applying fixes with --configuration=write, you MUST:

• ❌ DO NOT run lint-staged (this would stage the unstaged fixes, defeating the purpose)
• ❌ DO NOT run git commit
• ❌ DO NOT run git push
• ❌ DO NOT invoke submit, checkout-branch, or create-pull-request skills

DO validate that fixes work:

• ✅ Run the exact failing Nx target with --configuration=check to verify it passes now
• ✅ Example: if oxfmt failed, run pnpm exec nx affected --target=oxfmt --configuration=check --files=<staged-files>
• ✅ If validation passes, all fixes are confirmed working

Then proceed:

• ✅ Leave all modified files unstaged
• ✅ Go directly to Step 5 to summarize what was found and fixed
• ✅ Let the user review, stage, and commit the fixes themselves

Auto-Fixable Targets (run --configuration=write)

For these targets, run the Nx target with --configuration=write to auto-fix. Do NOT stage the modified files — leave them unstaged so the user can review the changes before staging.

# Format errors (oxfmt, prettier — no composite `format` target exists)
pnpm exec nx affected --target=oxfmt,prettier --configuration=write --files=<staged-files>

# Lint errors with auto-fix (ESLint --fix, oxlint --fix — no composite `lint` target exists)
pnpm exec nx affected --target=eslint,oxlint --configuration=write --files=<staged-files>

# Markdown lint with auto-fix
pnpm exec nx affected --target=markdown-lint --configuration=write --files=<staged-files>

# Unused code (knip --fix, vulture whitelist — no composite `clean` target exists)
pnpm exec nx affected --target=knip,vulture --configuration=write --files=<staged-files>

# Sync checks: run the write configuration to regenerate the out-of-sync file
pnpm exec nx run synchronization:conformetry-generators:write
pnpm exec nx run synchronization:conventional-config:write
pnpm exec nx run synchronization:devcontainer-configuration:write
pnpm exec nx run synchronization:pull-request-template:write
pnpm exec nx run synchronization:skill-exclusions:write
pnpm exec nx run codebase:sync-vscode-extensions:write
pnpm exec nx run codebase:codependix --configuration=write

# Or every derivation at once
pnpm exec nx run-many --targets=conformetry-generators,conventional-config,devcontainer-configuration,pull-request-template,skill-exclusions --configuration=write

Validate Fixes Passed

After applying fixes with --configuration=write, run the exact failing target with --configuration=check to confirm the fixes work. Use the same --files argument as the original failing lint-staged run:

# Validate format fixes worked
pnpm exec nx affected --target=oxfmt,prettier --configuration=check --files=<staged-files>

# Validate lint fixes worked
pnpm exec nx affected --target=eslint,oxlint --configuration=check --files=<staged-files>

# Validate markdown-lint fixes worked
pnpm exec nx affected --target=markdown-lint --configuration=check --files=<staged-files>

# Validate knip/vulture fixes worked
pnpm exec nx affected --target=knip,vulture --configuration=check --files=<staged-files>

# Validate sync checks fixed themselves (re-run the check configuration)
pnpm exec nx run-many --targets=conformetry-generators,conventional-config,devcontainer-configuration,pull-request-template,skill-exclusions --configuration=check
pnpm exec nx run codebase:sync-vscode-extensions:check

If all --configuration=check commands pass, the fixes are confirmed working. Proceed to Step 5.

If a --configuration=check command still fails, review the error output and apply additional manual fixes as needed, then re-validate that target.

✅ Best practice: Re-run the exact original composite nx affected --target=... --configuration=check --files=... command after each fix batch. A first pass may reveal additional lint/type errors hidden behind the first failure, so continue iterating until the full original command is green.

Manual Fix Required

Invalid Branch Name (pre-push hook)

Required format: <type>/<scope>-<description>

• type and scope: see Valid Types and Scopes below
• description: lowercase kebab-case (e.g., user-auth, fix-build-script)

Exempt branches (no validation): main, copilot/*, dependabot/*, renovate/*

To fix, rename the current branch:

git branch -m <new-valid-name>
# example:
git branch -m feat/lexico-user-auth

Read validate-branch-name.config.cjs to see the full regex and error message.

Commitlint Errors (commit-msg hook)

Required format: <type>(<scope>): <gitmoji> <subject>

• type and scope: see Valid Types and Scopes below
• gitmoji: Required emoji at the start of the subject (e.g., ✨ feat, 🐛 fix, 📝 docs, ✅ test, ♻️ refactor, ⚡️ perf, 🔧 chore, 👷 ci, ⬆️ deps)
• subject: lowercase, imperative mood, no period, max 128 chars total
• No body or footer — all context in the subject

Read configuration/commitlint.config.ts for the full rule set before amending.

Valid Types and Scopes

Step 5: Report Errors Found and Fixes Implemented

The skill ends here. Do NOT do anything else.

At the end of the run, report a summary to the user covering:

1. Errors found — for each failing hook/target, state:

   • Which hook failed (pre-commit, commit-msg, or pre-push)
   • Which Nx target or tool produced the error (e.g., eslint, oxfmt, typecheck)
   • The specific error messages or rule violations

2. Fixes implemented — for each fix, state:

   • Whether it was an auto-fix command (e.g., format --configuration=write) or a manual code/configuration edit
   • Which files were modified (all left unstaged — the user must review and git add them before retrying the commit)

3. Validation — for each fix, state:

   • The command(s) run to validate the fix
   • The pass/fail result for each command

4. Remaining actions — if any issues require user action (e.g., manual typecheck fixes, commit message amend, branch rename), list them explicitly so the user knows what still needs to be done before committing. If all validations passed, state "All fixes validated. Ready to review, stage, and commit."

Use this report template:

Errors Found
- <hook>: <target/tool> — <error message>

Fixes Implemented
- <auto-fix command and/or manual change>
- Files changed: <file list>

Validation
- <check command> — ✅ PASSED

Remaining Actions
- <none | explicit follow-up actions>

Common Patterns

…(truncated)