@cleocode/core 2026.10.10 → 2026.10.11

package/templates/git-hooks/commit-msg

@@ -54,8 +54,13 @@ case "$SUBJECT" in
   'fixup! '*) exit 0 ;;
   'squash! '*) exit 0 ;;
   'amend! '*) exit 0 ;;
-  # T13577: the empty commit `cleo init` makes so HEAD resolves (exact subject).
-  'initial: cleo init') exit 0 ;;
+  # T13577: the empty commit `cleo init` makes so HEAD resolves (exact
+  # subject), and only as the first commit: HEAD does not resolve yet (T13582).
+  'initial: cleo init')
+    if ! git rev-parse --verify --quiet HEAD >/dev/null 2>&1; then
+      exit 0
+    fi
+    ;;
 esac
 
 # Match `T` followed by 1+ digits anywhere in the subject.

package/templates/git-hooks/legacy-hashes.json

@@ -1,6 +1,7 @@
 {
   "commit-msg": [
     "4b5d6c9864e4955f0fd2e022ed4b8303d37dd222ea2a3759de9a1a500268dea7",
+    "4db40ad39759a5ebfa608dd1dc9c9c43abbb1b7261da56cab1728f531ada02fb",
     "71894acf732f5fd3261095d1889880dd92c3c3e5a2991c1bf1e513621e7627de",
     "95445aa6e83a36e8719378653f2c9e11b687647f1d8a3a45749f91ef2775ce6d",
     "c059daa0ba8ad6a59d178f4966373b64b555caa647b6e44b9f654d231da472db",
@@ -16,6 +17,7 @@
     "8a48d9672f27ae1ea9ebc40d7181ab737a1889e32b451594ba30ac7c2558c07c",
     "d4cfb6d3b19f3bed129f682fd7f5571b60c0f67433e5219e94c02dbb72007030",
     "eb78947e1aba2bd4e4d5aa010093aa5a927fde0acda7f7d704d41cd4851a3cfb",
-    "f6e39d6fb79fed8c6e0bca0edb43fb9421e6a0cae52b0fe1163a8839caf50389"
+    "f6e39d6fb79fed8c6e0bca0edb43fb9421e6a0cae52b0fe1163a8839caf50389",
+    "faa0799ac981d6f45876794e6701f58bb88e7180c92af31fcfb1e99766dc47ce"
   ]
 }

package/templates/git-hooks/pre-push

@@ -37,6 +37,7 @@ FAIL_LOG=""
 
 check_subject() {
   subject="$1"
+  sha="$2"
   case "$subject" in
     'Merge '*) return 0 ;;
     'Revert '*) return 0 ;;
@@ -44,8 +45,13 @@ check_subject() {
     'squash! '*) return 0 ;;
     'amend! '*) return 0 ;;
     # T13577: the empty commit `cleo init` makes so HEAD resolves. Exact
-    # subject only, never a prefix, so it opens no general bypass.
-    'initial: cleo init') return 0 ;;
+    # subject only, never a prefix, and only for a parentless (root) commit
+    # (T13582), so it opens no bypass for later commits.
+    'initial: cleo init')
+      if [ "$(git rev-list --parents -n 1 "$sha" 2>/dev/null | wc -w)" -eq 1 ]; then
+        return 0
+      fi
+      ;;
   esac
   if printf '%s' "$subject" | grep -Eq 'T[0-9]+'; then
     return 0
@@ -81,7 +87,7 @@ while read -r local_ref local_sha remote_ref remote_sha; do
     if [ -z "$subject" ]; then
       continue
     fi
-    if ! check_subject "$subject"; then
+    if ! check_subject "$subject" "$sha"; then
       FAIL=1
       FAIL_LOG="${FAIL_LOG}  ${sha}  ${subject}
 "