#!/usr/bin/env bash
set -euo pipefail

# Get the list of staged files
STAGED=$(git diff --cached --name-only --diff-filter=ACM | grep -E '.(js|ts|jsx|tsx)$' || true)

if [ -z "$STAGED" ]; then
  exit 0
fi

echo "Running ESLint on staged files..."
echo "$STAGED" | xargs ./node_modules/.bin/eslint --max-warnings=0

echo "Running Prettier check on staged files..."
echo "$STAGED" | xargs ./node_modules/.bin/prettier --check

echo "✓ pre-commit checks passed"

#!/usr/bin/env bash
set -euo pipefail

echo "Running unit tests..."
npm test -- --passWithNoTests --watchAll=false --silent

echo "✓ All tests passed"

#!/usr/bin/env bash
# Prepend the Jira ticket number from the branch name to the commit message.
# Branch pattern: feature/PROJ-1234-some-description
# Result: "[PROJ-1234] " prepended to every commit message

COMMIT_MSG_FILE="$1"
COMMIT_SOURCE="$2"

# Don't modify merge commits, amends, or squash messages
if [ "$COMMIT_SOURCE" = "merge" ] || [ "$COMMIT_SOURCE" = "squash" ] || [ "$COMMIT_SOURCE" = "commit" ]; then
  exit 0
fi

# Extract ticket from branch name
BRANCH=$(git symbolic-ref --short HEAD 2>/dev/null || true)
TICKET=$(echo "$BRANCH" | grep -oE '[A-Z]+-[0-9]+' | head -1 || true)

if [ -n "$TICKET" ]; then
  # Prepend ticket only if the message doesn't already contain it
  if ! grep -qF "[$TICKET]" "$COMMIT_MSG_FILE"; then
    sed -i.bak "1s/^/[$TICKET] /" "$COMMIT_MSG_FILE"
   
  fi
fi

#!/usr/bin/env bash
set -euo pipefail

COMMIT_MSG_FILE="$1"
MSG=$(cat "$COMMIT_MSG_FILE")

# Conventional Commits pattern:
# type(optional-scope): description
PATTERN='^(feat|fix|docs|style|refactor|perf|test|build|ci|chore|revert)((.+))?: .{1,72}$'

# Ignore merge commits, fixup!, squash! prefixes
if echo "$MSG" | grep -qE '^(Merge|Revert|fixup!|squash!)'; then
  exit 0
fi

# Check first line
FIRST_LINE=$(echo "$MSG" | head -1)

if ! echo "$FIRST_LINE" | grep -qE "$PATTERN"; then
  echo ""
  echo "✗ Invalid commit message format."
  echo ""
  echo "  Your message: $FIRST_LINE"
  echo ""
  echo "  Required format: <type>(scope): <description>"
  echo "  Examples:"
  echo "    feat(auth): add OAuth2 login flow"
  echo "    fix: prevent crash on empty user list"
  echo "    docs: update API reference for /users endpoint"
  echo ""
  echo "  Valid types: feat, fix, docs, style, refactor, perf,"
  echo "               test, build, ci, chore, revert"
  echo ""
  exit 1
fi

# Check that the description doesn't end with a period
if echo "$FIRST_LINE" | grep -qE '.$'; then
  echo "✗ Commit message should not end with a period."
  exit 1
fi

exit 0

✗ Invalid commit message format.

  Your message: Added login button

  Required format: <type>(scope): <description>
  Examples:
    feat(auth): add OAuth2 login flow
    fix: prevent crash on empty user list

  Valid types: feat, fix, docs, style, refactor, perf,
               test, build, ci, chore, revert

#!/usr/bin/env bash
# Show a macOS notification with the commit summary
HASH=$(git rev-parse --short HEAD)
MSG=$(git log -1 --pretty=%s)
BRANCH=$(git symbolic-ref --short HEAD)

osascript -e "display notification "$MSG" with title "Git commit $HASH" subtitle "$BRANCH""
# On Linux with libnotify:
# notify-send "Git commit $HASH" "$MSG"

#!/usr/bin/env bash
set -euo pipefail

REMOTE="$1"
URL="$2"

# Block direct pushes to main/master
while read local_ref local_sha remote_ref remote_sha; do
  if [[ "$remote_ref" == "refs/heads/main" || "$remote_ref" == "refs/heads/master" ]]; then
    echo "✗ Direct pushes to 'main' or 'master' are not allowed."
    echo "  Please open a pull request."
    exit 1
  fi
done

# Run full test suite before any push
echo "Running test suite before push..."
npm test -- --watchAll=false

echo "✓ Tests passed. Pushing..."

#!/usr/bin/env bash
set -euo pipefail

# Requires gitleaks: https://github.com/gitleaks/gitleaks
if command -v gitleaks &>/dev/null; then
  echo "Scanning for secrets with gitleaks..."
  gitleaks protect --staged --redact --verbose
  echo "✓ No secrets detected."
fi

#!/usr/bin/env bash
PREV_HEAD="$1"
NEW_HEAD="$2"
IS_BRANCH_CHECKOUT="$3"

# Only run on branch checkouts, not file checkouts
if [ "$IS_BRANCH_CHECKOUT" = "0" ]; then
  exit 0
fi

# Check if package.json changed between the old and new branch
if git diff --name-only "$PREV_HEAD" "$NEW_HEAD" | grep -q "package.json"; then
  echo "package.json changed. Running npm install..."
  npm install
  echo "✓ Dependencies updated."
fi

#!/usr/bin/env bash
# Check if package-lock.json changed during the merge
if git diff-tree -r --name-only --no-commit-id ORIG_HEAD HEAD | grep -q "package-lock.json"; then
  echo "package-lock.json changed in merge. Running npm ci..."
  npm ci
  echo "✓ Dependencies synced."
fi

#!/usr/bin/env bash
UPSTREAM="$1"
BRANCH="${2:-$(git symbolic-ref --short HEAD)}"

# Prevent rebasing main or release branches
PROTECTED_BRANCHES="main master release/"

for protected in $PROTECTED_BRANCHES; do
  if [[ "$BRANCH" == "$protected"* ]]; then
    echo "✗ Rebasing '$BRANCH' is not allowed (protected branch)."
    exit 1
  fi
done

# Warn if the branch has been pushed
REMOTE_EXISTS=$(git ls-remote --exit-code --heads origin "$BRANCH" 2>/dev/null || echo "")
if [ -n "$REMOTE_EXISTS" ]; then
  echo "⚠  Warning: '$BRANCH' has been pushed to origin."
  echo "   Rebasing will rewrite history. Others may already have this branch."
  read -p "   Continue? (y/N) " -n 1 -r
  echo
  if [[ ! $REPLY =~ ^[Yy]$ ]]; then
    exit 1
  fi
fi