---
inclusion: auto
---

# Projekt-KIQ-HP Standards

## Quality Gates (before every commit)

1. `gitleaks detect --source . --no-git` — no secrets in code
2. `npm run lint` — eslint passes
3. `npm run build` — vite build succeeds
4. `npm audit` — 0 vulnerabilities

## Conventional Commits

```
feat(landing): add new partner logo
fix(nav): correct mobile menu toggle
style(hero): adjust CTA button spacing
ci(deploy): add GitHub Actions workflow
```

## Autonomous Mode

- Never push directly to main — use feature branches
- Create PRs on GitHub targeting main
- If stuck after 3 attempts: stop and document

## Architecture

- React 19 + Vite 8 + React Router 7
- Express 5 backend (server/index.js) for contact form
- Nodemailer 9 for email notifications
- Static deployment via `vite build` → `dist/`

## File Naming

- All filenames OneDrive-safe (no brackets, no @, no special chars)
- Logo files: use hyphens, no `(1)` suffixes
- Assets: descriptive kebab-case names

## Security

- No SMTP credentials in source code
- Server reads config from environment variables
- All dependencies must pass `npm audit` with 0 vulnerabilities