kk-git 0.2.5 → 0.2.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4b432c2d8b24c8a15fe3185d0f8d9c26bc07816a788a051933b7eaeb7b2a5409
-  data.tar.gz: f7666db73c822b09c1918e656437fc165f88ef13a6f23e1fd32fd0d3eb53c0f4
+  metadata.gz: 02b01e1d1b95887bc25d0063757a68ef24b8fb50f726822522cd34623063d381
+  data.tar.gz: 2682460aca56a009107f79be35f60dd9746eeb691c1449be1ff361268734ad3f
 SHA512:
-  metadata.gz: a08f91f62c4252dee11fc5be7a414f75c7f1c96de5151b83c25a7c78bce8d33419623c35f9768c02f5e16c81485d8622e645f1dbf8af4298cc8bd80d2b93ccd7
-  data.tar.gz: 2167ef28d0b789fda42ac855834340e968ccaf973d0858281b7dbb8d8059128624bbb2b997100ee8d4ac6720c9356dc7d76b8989feb7011c36380d8046619944
+  metadata.gz: fe0d795b321f3457a0da6391c03ec86669f632c18a851b830f30e1ce765edbf01e14160bcb5dd2960bd9ef87a47a3540a0e7ecbcce6bac45992475492bcd6ea1
+  data.tar.gz: f54fa6384570117be64f4b72038f0699027d331e1ef69a31491e20aa798b5e6c0a72325b580b36f58e847317a92ad8234c7763b5f56f6484dc33f1eed9ea1797

data/exe/kk-git

@@ -165,7 +165,7 @@ def main_help
       KK_GIT_SKIP_PUSH=1  skip push step
       KK_GIT_AMEND=1      amend last commit instead of creating new one
       KK_GIT_CONFIRM=1    print message and require KK_GIT_YES=1
-      KK_GIT_ALLOW_SENSITIVE=1  allow committing .env/credentials paths
+      KK_GIT_BLOCK_SENSITIVE=1  block committing .env/credentials paths (off by default)
       KK_GIT_DEFAULT_TYPE  default type for code edits (default: chore)
       KK_GIT_PUSH_URL       push to explicit URL (bypass SSH remote)
       KK_GIT_PULL_URL       pull from explicit URL (bypass SSH remote)

data/lib/kk/git/auto_format.rb

@@ -52,9 +52,18 @@ module KKGit
         ]
       ),
       Language.new(
-        id: :prettier,
+        id: :js,
         label: 'JS/TS/Node',
-        extensions: %w[.js .jsx .mjs .cjs .ts .tsx .json .css .scss .less .html .md .yaml .yml],
+        extensions: %w[.js .jsx .mjs .cjs .ts .tsx .json .jsonc .css],
+        tools: [
+          Tool.new(name: 'biome', bin: 'biome', argv: ['format', '--write', '%{files}']),
+          Tool.new(name: 'prettier', bin: 'prettier', argv: ['--write', '%{files}'])
+        ]
+      ),
+      Language.new(
+        id: :prettier_docs,
+        label: 'Prettier (markup/docs)',
+        extensions: %w[.scss .less .html .md .mdx .yaml .yml],
         tools: [
           Tool.new(name: 'prettier', bin: 'prettier', argv: ['--write', '%{files}'])
         ]

data/lib/kk/git/git_ops.rb

@@ -20,6 +20,14 @@ module KKGit
       /\Asecrets?\./i
     ].freeze
 
+    SAFE_ENV_TEMPLATE_SUFFIXES = %w[example sample template dist].freeze
+
+    # Application source that manages credentials in-repo (not secret payloads).
+    SAFE_CREDENTIALS_CODE_PATTERNS = [
+      %r{(?:^|/)[a-z0-9_]+_credentials\.go\z}i,
+      %r{(?:^|/)[a-z0-9_]+_credentials\.(ts|tsx|js|jsx)\z}i
+    ].freeze
+
     # 仓库同步状态快照
     Status = Struct.new(
       :branch, :remote, :clean, :ahead, :behind,
@@ -258,9 +266,22 @@ module KKGit
       end
 
       def sensitive_path?(path)
+        return false if safe_env_template?(path)
+        return false if safe_credentials_code?(path)
+
         SENSITIVE_PATH_PATTERNS.any? { |pattern| path.match?(pattern) }
       end
 
+      def safe_credentials_code?(path)
+        SAFE_CREDENTIALS_CODE_PATTERNS.any? { |pattern| path.match?(pattern) }
+      end
+
+      def safe_env_template?(path)
+        SAFE_ENV_TEMPLATE_SUFFIXES.any? do |suffix|
+          path.match?(/\A\.env\.#{suffix}\z/i)
+        end
+      end
+
       def sensitive_staged_paths(repo_dir: '.')
         out, _err, ok = run_cmd('git', 'diff', '--cached', '--name-only', chdir: repo_dir)
         return [] unless ok
@@ -269,16 +290,18 @@ module KKGit
       end
 
       def ensure_no_sensitive_staged!(repo_dir: '.')
+        return unless sensitive_check_enabled?
+
         paths = sensitive_staged_paths(repo_dir: repo_dir)
         return if paths.empty?
 
-        if ENV['KK_GIT_ALLOW_SENSITIVE'] == '1'
-          warn "Warning: committing sensitive paths: #{paths.join(', ')}"
-        else
-          raise Error,
-                "Refusing to commit sensitive paths: #{paths.join(', ')}. " \
-                'Set KK_GIT_ALLOW_SENSITIVE=1 to override.'
-        end
+        raise Error,
+              "Refusing to commit sensitive paths: #{paths.join(', ')}. " \
+              'Unset KK_GIT_BLOCK_SENSITIVE or unstage these files.'
+      end
+
+      def sensitive_check_enabled?
+        ENV['KK_GIT_BLOCK_SENSITIVE'] == '1'
       end
 
       def confirm_commit!(message)

data/lib/kk/git/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module KKGit
-  VERSION = '0.2.5'
+  VERSION = '0.2.7'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: kk-git
 version: !ruby/object:Gem::Version
-  version: 0.2.5
+  version: 0.2.7
 platform: ruby
 authors:
 - kk
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-07-07 00:00:00.000000000 Z
+date: 2026-07-13 00:00:00.000000000 Z
 dependencies: []
 description: Generate Conventional Commits commit messages from current git changes
   (staged/worktree), designed for Rake/script usage.