Modern Toolchain Standard & Package Management Policy
This standard defines the mandatory tooling, package managers, formatters, and test runners across all services and repositories. AI agents and developers must strictly adhere to these specifications to guarantee deterministic, high-performance, and reproducible builds.
1. Node.js & TypeScript Ecosystem
A. Mandatory Package Manager: pnpm
pnpm. Never execute npm install, npm add, npm update, yarn, or bun install for dependency management in standard repositories unless explicitly overriding for upstream compatibility. * Only pnpm-lock.yaml is tracked in version control.
* Committing package-lock.json or yarn.lock is strictly prohibited and flagged as a lint/quality failure.
```bash
# Installing dependencies
pnpm install
# Adding dependencies
pnpm add <package-name>
pnpm add -D <dev-package-name>
# Updating dependencies safely
pnpm up
pnpm up --latest
# Running scripts
pnpm run build
pnpm run dev
pnpm run test
```
B. Formatting & Linting: Biome
```bash
pnpm biome check --write .
pnpm biome lint .
pnpm biome format --write .
```
C. Unit & Integration Testing: Vitest
```bash
pnpm vitest run
```
2. Python Ecosystem
A. Mandatory Package & Environment Manager: uv
pip install, python -m venv, poetry, or pip-tools. * Virtual environments are managed with uv venv.
* Commands and scripts are executed inside the environment using uv run.
```bash
# Create virtual environment
uv venv
# Synchronize dependencies from lockfile
uv sync
# Add or update dependencies
uv add <package-name>
uv add --dev <dev-package-name>
uv lock --upgrade
# Running test suites and tools
uv run pytest
uv run ruff check .
uv run ruff format .
uv run mypy .
```
* Track uv.lock and pyproject.toml in version control for deterministic multi-platform resolution.
3. Go Ecosystem
gofmt enforced on all staged .go files.go vet ./... required before committing.```bash
go test -race -v ./...
```
go mod tidy after dependency updates.4. Pre-Commit Validation Gate Integration
Every repository's pre-commit validation gate (.githooks/pre-commit) must verify:
.env, private keys, bearer tokens).pnpm for frontend/Node, uv for Python).package-lock.json in a pnpm project) are committed.