Git Auditor: hooks nativos con shell para auditoría de equipo

git config core.hooksPath .githooks

"setup:githooks:init": "node .githooks/scripts/init.js",
"prepare": "pnpm run setup:githooks:init"

pnpm run setup:githooks:init
# equivalente:
git config core.hooksPath .githooks

.githooks/
├── README.md
├── pre-commit
├── commit-msg
├── pre-push
└── scripts/
    └── init.js

"setup:githooks:init": "node .githooks/scripts/init.js",
"prepare": "pnpm run setup:githooks:init"

#!/usr/bin/env node
/* eslint-disable @typescript-eslint/no-require-imports */
'use strict';

/**
 * Cross-platform Git hooks initialization.
 * Configures core.hooksPath and ensures hook scripts are executable.
 */

const { execFileSync } = require('child_process');
const fs = require('fs');
const path = require('path');

const HOOKS_PATH = '.githooks';
const root = path.resolve(__dirname, '../..');
const hooksDir = path.join(root, HOOKS_PATH);

function getHooksPath() {
  try {
    return execFileSync('git', ['config', '--get', 'core.hooksPath'], {
      cwd: root,
      encoding: 'utf8',
    }).trim();
  } catch {
    return '';
  }
}

const currentHooksPath = getHooksPath();

if (currentHooksPath !== HOOKS_PATH) {
  console.log('🔧 Initializing Git Auditor...');
  console.log(`   Configuring Git hooks path to ${HOOKS_PATH}...`);
  execFileSync('git', ['config', 'core.hooksPath', HOOKS_PATH], {
    cwd: root,
    stdio: 'inherit',
  });
  console.log('✅ Git Auditor initialized successfully');
} else {
  console.log('✅ Git Auditor already initialized');
}

if (!fs.existsSync(hooksDir)) {
  console.error(`⚠️  Warning: Hooks directory ${HOOKS_PATH} not found`);
  process.exit(1);
}

if (process.platform !== 'win32') {
  for (const entry of fs.readdirSync(hooksDir)) {
    const filePath = path.join(hooksDir, entry);
    if (fs.statSync(filePath).isFile()) {
      try {
        fs.chmodSync(filePath, 0o755);
      } catch {
        // Ignore chmod errors (e.g. read-only filesystem)
      }
    }
  }
}

console.log('');
console.log('Git Auditor is now active. Hooks will:');
console.log('  • Validate branch names (main, develop, or issue branches)');
console.log('  • Validate commit messages (Conventional Commits format)');
console.log('  • Run linting before commits');
console.log('  • Run type checking, knip, and linting before pushes');

#!/bin/sh
set -e

# Allow merge commits
if [ -f .git/MERGE_HEAD ]; then
  exit 0
fi

# Function to check if error is due to missing dependencies
check_dependency_error() {
  error_output="$1"
  if echo "$error_output" | grep -qiE "(cannot find module|module not found|cannot resolve|missing|dependency|pnpm|npm|node_modules|command not found)" 2>/dev/null; then
    echo ""
    echo "⚠️  Possible missing dependencies detected!"
    echo "   Try running: pnpm install"
    echo ""
    return 0
  fi
  return 1
}

echo "🔍 Running lint-staged..."
if ! error_output=$(pnpm exec lint-staged 2>&1); then
  echo "$error_output"
  check_dependency_error "$error_output"
  echo "❌ Lint-staged failed"
  exit 1
fi

echo "✅ All pre-commit checks passed successfully."

#!/bin/sh
set -e

# Get current branch
branch=$(git branch --show-current)

# Validate branch name: main, develop, or GitHub issue branches (e.g. 123-add-user-auth)
if [ -n "$branch" ]; then
  case "$branch" in
    main|develop) ;;
    *)
      if ! echo "$branch" | grep -qE '^[0-9]+-[a-z0-9]+(-+[a-z0-9]+)*$'; then
        echo ""
        echo "🌿 Invalid branch name: \"$branch\""
        echo ""
        echo "This project uses a simple naming standard to keep work traceable:"
        echo ""
        echo "  ✅ main                    — production branch"
        echo "  ✅ develop                 — integration branch"
        echo "  ✅ 123-add-user-auth       — issue branches (number + slug)"
        echo ""
        echo "To create a valid branch:"
        echo "  1. Open a GitHub Issue describing the work you want to do"
        echo "  2. Click \"Create a branch\" from the issue sidebar"
        echo "     (GitHub will suggest a name like 42-your-issue-title)"
        echo "  3. Check out that branch locally and start working"
        echo ""
        echo "Branch names like feat/*, fix/*, or other custom conventions"
        echo "don't match our workflow. Starting from an issue keeps the branch"
        echo "number linked to the ticket and helps the whole team stay aligned."
        echo ""
        exit 1
      fi
      ;;
  esac
fi

# Get commit message from file (first line only, trim whitespace)
commit_msg=$(head -n1 "$1" | sed 's/^[[:space:]]*//;s/[[:space:]]*$//')

# Validate that commit message is not empty
if [ -z "$commit_msg" ]; then
  echo "❌ Commit message cannot be empty"
  exit 1
fi

# Check if it's a merge commit
# Merge commits can have various formats:
# - "Merge branch 'xxx' into yyy"
# - "Merge remote-tracking branch 'origin/xxx' into yyy"
# - "Merge commit 'xxx' into yyy"
# - "Merge pull request #xxx"
is_merge=false
if echo "$commit_msg" | grep -qiE "^Merge (branch|remote-tracking branch|commit|pull request)"; then
  is_merge=true
fi

# Validation rules by branch
case "$branch" in
  main)
    # In main: allow hotfix, chore(release), or merge commits
    if [ "$is_merge" = true ]; then
      echo "✅ Merge commit allowed in main"
      exit 0
    fi
    
    # Check for hotfix prefix
    if echo "$commit_msg" | grep -qE "^hotfix\([^)]+\):"; then
      echo "✅ Hotfix commit allowed in main"
      exit 0
    fi
    
    echo "❌ Commits to 'main' must be:"
    echo "   - Merge commits from other branches"
    echo "   - Commits with prefix 'hotfix(scope):'"
    echo ""
    echo "Current commit message: $commit_msg"
    exit 1
    ;;
esac

# TEMP: develop allows Conventional Commits during initial repo setup.
# Restore merge-only policy in commit-msg when issue-branch workflow is active.

# Validate Conventional Commits format for other branches
# Format: type(scope): subject or type: subject
# Allowed types: feat, fix, hotfix, chore, test, docs, style, ci
# Max header length: 120 characters

# Skip validation for merge commits
if [ "$is_merge" = true ]; then
  exit 0
fi

# Check header length (max 120 characters)
# Use wc -m to count characters (not bytes) for proper UTF-8 support
header_length=$(printf '%s' "$commit_msg" | wc -m)
if [ "$header_length" -gt 120 ]; then
  echo "❌ Commit message header exceeds 120 characters (current: $header_length)"
  echo ""
  echo "Current commit message: $commit_msg"
  exit 1
fi

# Validate Conventional Commits format
# Pattern: type(scope): subject or type: subject
# Must start with type (no leading spaces), have optional scope in parentheses,
# followed by colon and space, then non-empty subject
# Allowed types: feat, fix, hotfix, chore, test, docs, style, ci
if ! echo "$commit_msg" | grep -qE "^(feat|fix|hotfix|chore|test|docs|style|ci)(\([^)]+\))?: .+"; then
  echo "❌ Invalid commit message format"
  echo ""
  echo "Commit messages must follow Conventional Commits format:"
  echo "  type(scope): subject"
  echo "  or"
  echo "  type: subject"
  echo ""
  echo "Rules:"
  echo "  - Must start with type (no leading spaces)"
  echo "  - Scope is optional but must be in parentheses if present"
  echo "  - Must have colon followed by space"
  echo "  - Subject cannot be empty"
  echo ""
  echo "Allowed types: feat, fix, hotfix, chore, test, docs, style, ci"
  echo ""
  echo "Examples:"
  echo "  ✅ feat(auth): add social login"
  echo "  ✅ fix(api): resolve timeout issue"
  echo "  ✅ chore: update dependencies"
  echo "  ❌ feat(auth):  (empty subject)"
  echo "  ❌ feat(auth):(no space after colon)"
  echo ""
  echo "Current commit message: $commit_msg"
  exit 1
fi

echo "✅ Commit message format is valid"

#!/bin/sh
set -e

branch=$(git branch --show-current)
if [ -n "$branch" ]; then
  case "$branch" in
    main|develop) ;;
    *)
      if ! echo "$branch" | grep -qE '^[0-9]+-[a-z0-9]+(-+[a-z0-9]+)*$'; then
        echo ""
        echo "🌿 Invalid branch name: \"$branch\""
        echo ""
        echo "This project uses a simple naming standard to keep work traceable:"
        echo ""
        echo "  ✅ main                    — production branch"
        echo "  ✅ develop                 — integration branch"
        echo "  ✅ 123-add-user-auth       — issue branches (number + slug)"
        echo ""
        echo "To create a valid branch:"
        echo "  1. Open a GitHub Issue describing the work you want to do"
        echo "  2. Click \"Create a branch\" from the issue sidebar"
        echo "     (GitHub will suggest a name like 42-your-issue-title)"
        echo "  3. Check out that branch locally and start working"
        echo ""
        echo "Branch names like feat/*, fix/*, or other custom conventions"
        echo "don't match our workflow. Starting from an issue keeps the branch"
        echo "number linked to the ticket and helps the whole team stay aligned."
        echo ""
        exit 1
      fi
      ;;
  esac
fi

# Function to check if error is due to missing dependencies
check_dependency_error() {
  error_output="$1"
  if echo "$error_output" | grep -qiE "(cannot find module|module not found|cannot resolve|missing|dependency|pnpm|npm|node_modules|command not found)" 2>/dev/null; then
    echo ""
    echo "⚠️  Possible missing dependencies detected!"
    echo "   Try running: pnpm install"
    echo ""
    return 0
  fi
  return 1
}

# ============================================================================
# Code Quality Checks
# ============================================================================

# TypeScript type checks (strict enforced)
echo "🔍 Running TypeScript type checks..."
if ! error_output=$(pnpm typecheck 2>&1); then
  echo "$error_output"
  check_dependency_error "$error_output"
  echo "❌ TypeScript (tsc) failed. Please fix the type errors before pushing."
  exit 1
fi

# Run knip
echo "🔍 Running knip..."
if ! error_output=$(pnpm knip 2>&1); then
  echo "$error_output"
  check_dependency_error "$error_output"
  echo "❌ Knip failed. Please fix the issues before pushing."
  exit 1
fi

# Run full lint (complements pre-commit hook)
echo "🔍 Running lint..."
if ! error_output=$(pnpm lint 2>&1); then
  echo "$error_output"
  check_dependency_error "$error_output"
  echo "❌ Lint failed. Please fix the issues before pushing."
  exit 1
fi

echo ""
echo "✅ All pre-push checks passed successfully."

Objetivo:       estándar mínimo viable de código y commits, reforzado en local
Activación:     pnpm install  →  prepare  →  setup:githooks:init
Config Git:     git config core.hooksPath .githooks   (local, en .git/config)
Hooks:          .githooks/pre-commit | commit-msg | pre-push   (versionados)
Init:           .githooks/scripts/init.js
Documentación:  .githooks/README.md

git config --get core.hooksPath   # debe imprimir: .githooks
pnpm run setup:githooks:init      # re-ejecutar init si hace falta