kk-git 0.2.6 → 0.2.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ae39abac1e3638de958917ebc2fcbbffdace00c23e13fdd53929cec3e416930f
-  data.tar.gz: eb7191f382ae86ff2c25aac1ce6f7af7a1288be5a25c503641416bcb321ba234
+  metadata.gz: 02b01e1d1b95887bc25d0063757a68ef24b8fb50f726822522cd34623063d381
+  data.tar.gz: 2682460aca56a009107f79be35f60dd9746eeb691c1449be1ff361268734ad3f
 SHA512:
-  metadata.gz: df09df41cb4383f3654dc161b33703798e069cd16be48dd160162076eca1d03417c7272bb6dc80cdfb7a06c2a46e8a8029597e94c40e6fe5d79e5be9a2f1c6a4
-  data.tar.gz: a52d189d3bf6606506e9fb06f3ff8289926d9f62864e9a2e3628a0657813a009e32840cfda0b2d4e414f3a8b768e940211566f247c06a998db4c9732d29471a9
+  metadata.gz: fe0d795b321f3457a0da6391c03ec86669f632c18a851b830f30e1ce765edbf01e14160bcb5dd2960bd9ef87a47a3540a0e7ecbcce6bac45992475492bcd6ea1
+  data.tar.gz: f54fa6384570117be64f4b72038f0699027d331e1ef69a31491e20aa798b5e6c0a72325b580b36f58e847317a92ad8234c7763b5f56f6484dc33f1eed9ea1797

data/exe/kk-git

@@ -165,7 +165,7 @@ def main_help
       KK_GIT_SKIP_PUSH=1  skip push step
       KK_GIT_AMEND=1      amend last commit instead of creating new one
       KK_GIT_CONFIRM=1    print message and require KK_GIT_YES=1
-      KK_GIT_ALLOW_SENSITIVE=1  allow committing .env/credentials paths
+      KK_GIT_BLOCK_SENSITIVE=1  block committing .env/credentials paths (off by default)
       KK_GIT_DEFAULT_TYPE  default type for code edits (default: chore)
       KK_GIT_PUSH_URL       push to explicit URL (bypass SSH remote)
       KK_GIT_PULL_URL       pull from explicit URL (bypass SSH remote)

data/lib/kk/git/auto_format.rb

@@ -52,9 +52,18 @@ module KKGit
         ]
       ),
       Language.new(
-        id: :prettier,
+        id: :js,
         label: 'JS/TS/Node',
-        extensions: %w[.js .jsx .mjs .cjs .ts .tsx .json .css .scss .less .html .md .yaml .yml],
+        extensions: %w[.js .jsx .mjs .cjs .ts .tsx .json .jsonc .css],
+        tools: [
+          Tool.new(name: 'biome', bin: 'biome', argv: ['format', '--write', '%{files}']),
+          Tool.new(name: 'prettier', bin: 'prettier', argv: ['--write', '%{files}'])
+        ]
+      ),
+      Language.new(
+        id: :prettier_docs,
+        label: 'Prettier (markup/docs)',
+        extensions: %w[.scss .less .html .md .mdx .yaml .yml],
         tools: [
           Tool.new(name: 'prettier', bin: 'prettier', argv: ['--write', '%{files}'])
         ]

data/lib/kk/git/git_ops.rb

@@ -22,6 +22,12 @@ module KKGit
 
     SAFE_ENV_TEMPLATE_SUFFIXES = %w[example sample template dist].freeze
 
+    # Application source that manages credentials in-repo (not secret payloads).
+    SAFE_CREDENTIALS_CODE_PATTERNS = [
+      %r{(?:^|/)[a-z0-9_]+_credentials\.go\z}i,
+      %r{(?:^|/)[a-z0-9_]+_credentials\.(ts|tsx|js|jsx)\z}i
+    ].freeze
+
     # 仓库同步状态快照
     Status = Struct.new(
       :branch, :remote, :clean, :ahead, :behind,
@@ -261,10 +267,15 @@ module KKGit
 
       def sensitive_path?(path)
         return false if safe_env_template?(path)
+        return false if safe_credentials_code?(path)
 
         SENSITIVE_PATH_PATTERNS.any? { |pattern| path.match?(pattern) }
       end
 
+      def safe_credentials_code?(path)
+        SAFE_CREDENTIALS_CODE_PATTERNS.any? { |pattern| path.match?(pattern) }
+      end
+
       def safe_env_template?(path)
         SAFE_ENV_TEMPLATE_SUFFIXES.any? do |suffix|
           path.match?(/\A\.env\.#{suffix}\z/i)
@@ -279,16 +290,18 @@ module KKGit
       end
 
       def ensure_no_sensitive_staged!(repo_dir: '.')
+        return unless sensitive_check_enabled?
+
         paths = sensitive_staged_paths(repo_dir: repo_dir)
         return if paths.empty?
 
-        if ENV['KK_GIT_ALLOW_SENSITIVE'] == '1'
-          warn "Warning: committing sensitive paths: #{paths.join(', ')}"
-        else
-          raise Error,
-                "Refusing to commit sensitive paths: #{paths.join(', ')}. " \
-                'Set KK_GIT_ALLOW_SENSITIVE=1 to override.'
-        end
+        raise Error,
+              "Refusing to commit sensitive paths: #{paths.join(', ')}. " \
+              'Unset KK_GIT_BLOCK_SENSITIVE or unstage these files.'
+      end
+
+      def sensitive_check_enabled?
+        ENV['KK_GIT_BLOCK_SENSITIVE'] == '1'
       end
 
       def confirm_commit!(message)

data/lib/kk/git/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module KKGit
-  VERSION = '0.2.6'
+  VERSION = '0.2.7'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: kk-git
 version: !ruby/object:Gem::Version
-  version: 0.2.6
+  version: 0.2.7
 platform: ruby
 authors:
 - kk
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-07-07 00:00:00.000000000 Z
+date: 2026-07-13 00:00:00.000000000 Z
 dependencies: []
 description: Generate Conventional Commits commit messages from current git changes
   (staged/worktree), designed for Rake/script usage.