@danielszlaski/envguard 0.1.4 → 0.1.5

package/README.md

@@ -44,6 +44,43 @@ npx @danielszlaski/envguard scan
 
 > **Note:** The examples below use `envguard` (short form), which works after installation. If using npx without installation, use `npx @danielszlaski/envguard` instead.
 
+### Git Hook Integration (Pre-commit/Pre-push)
+
+Automatically run envguard before every commit or push to catch environment variable issues early:
+
+```bash
+# Install a pre-commit hook (runs before each commit)
+envguard install-hook
+
+# Or install a pre-push hook (runs before each push)
+envguard install-hook --type pre-push
+
+# Force overwrite existing hook
+envguard install-hook --force
+```
+
+Once installed, the hook will automatically run `envguard check` before each commit (or push). If issues are found, the commit/push will be blocked until you fix them.
+
+**Bypass the hook** when needed:
+```bash
+git commit --no-verify
+git push --no-verify
+```
+
+**Remove the hook:**
+```bash
+envguard uninstall-hook
+
+# Or for pre-push hook
+envguard uninstall-hook --type pre-push
+```
+
+**How it works:**
+- The hook creates a script in `.git/hooks/pre-commit` (or `pre-push`)
+- Before each commit/push, it runs `envguard check`
+- If issues are found, the operation is blocked
+- Team members need to install the hook individually (it's not tracked in git)
+
 ### Scan for issues
 
 ```bash
@@ -514,6 +551,11 @@ Checking src/lambda/serverless.yml
 - `envguard check` - Alias for `scan --ci`
 - `envguard check --strict` - Check with strict mode enabled
 - `envguard check --no-detect-fallbacks` - Check without fallback detection
+- `envguard install-hook` - Install a Git pre-commit hook to run checks automatically
+- `envguard install-hook --type pre-push` - Install a pre-push hook instead
+- `envguard install-hook --force` - Overwrite existing hook if present
+- `envguard uninstall-hook` - Remove the envguard Git hook
+- `envguard uninstall-hook --type pre-push` - Remove the pre-push hook
 
 ### Strict Mode
 

package/dist/cli.js

@@ -4,6 +4,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const commander_1 = require("commander");
 const scan_1 = require("./commands/scan");
 const fix_1 = require("./commands/fix");
+const install_hook_1 = require("./commands/install-hook");
 const logger_1 = require("./utils/logger");
 const program = new commander_1.Command();
 program
@@ -71,5 +72,37 @@ program
         process.exit(1);
     }
 });
+program
+    .command('install-hook')
+    .description('Install a Git hook to run envguard automatically')
+    .option('--type <type>', 'Hook type: pre-commit or pre-push (default: pre-commit)')
+    .option('--force', 'Overwrite existing hook if present')
+    .action(async (cmd) => {
+    try {
+        await (0, install_hook_1.installHookCommand)({
+            type: cmd.type,
+            force: cmd.force
+        });
+    }
+    catch (error) {
+        logger_1.Logger.error(`${error}`);
+        process.exit(1);
+    }
+});
+program
+    .command('uninstall-hook')
+    .description('Remove the envguard Git hook')
+    .option('--type <type>', 'Hook type: pre-commit or pre-push (default: pre-commit)')
+    .action(async (cmd) => {
+    try {
+        await (0, install_hook_1.uninstallHookCommand)({
+            type: cmd.type
+        });
+    }
+    catch (error) {
+        logger_1.Logger.error(`${error}`);
+        process.exit(1);
+    }
+});
 program.parse();
 //# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;;AAEA,yCAAoC;AACpC,0CAA8C;AAC9C,wCAA4C;AAE5C,2CAAwC;AAExC,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,UAAU,CAAC;KAChB,WAAW,CAAC,4DAA4D,CAAC;KACzE,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,2CAA2C,CAAC;KACxD,MAAM,CAAC,MAAM,EAAE,kDAAkD,CAAC;KAClE,MAAM,CAAC,UAAU,EAAE,qFAAqF,CAAC;KACzG,MAAM,CAAC,uBAAuB,EAAE,oEAAoE,CAAC;KACrG,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;IAC7B,IAAI,CAAC;QACH,4EAA4E;QAC5E,MAAM,OAAO,GAAQ;YACnB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC;QAEF,kEAAkE;QAClE,mEAAmE;QACnE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACpG,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;QAChD,CAAC;QAED,MAAM,IAAA,kBAAW,EAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,KAAK,CAAC;KACd,WAAW,CAAC,0CAA0C,CAAC;KACvD,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,IAAA,gBAAU,GAAE,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,wCAAwC,CAAC;KACrD,MAAM,CAAC,UAAU,EAAE,qFAAqF,CAAC;KACzG,MAAM,CAAC,uBAAuB,EAAE,oEAAoE,CAAC;KACrG,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;IAC7B,IAAI,CAAC;QACH,MAAM,OAAO,GAAQ;YACnB,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC;QAEF,kEAAkE;QAClE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACpG,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;QAChD,CAAC;QAED,MAAM,IAAA,kBAAW,EAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;;AAEA,yCAAoC;AACpC,0CAA8C;AAC9C,wCAA4C;AAE5C,0DAAmF;AACnF,2CAAwC;AAExC,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,UAAU,CAAC;KAChB,WAAW,CAAC,4DAA4D,CAAC;KACzE,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,2CAA2C,CAAC;KACxD,MAAM,CAAC,MAAM,EAAE,kDAAkD,CAAC;KAClE,MAAM,CAAC,UAAU,EAAE,qFAAqF,CAAC;KACzG,MAAM,CAAC,uBAAuB,EAAE,oEAAoE,CAAC;KACrG,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;IAC7B,IAAI,CAAC;QACH,4EAA4E;QAC5E,MAAM,OAAO,GAAQ;YACnB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC;QAEF,kEAAkE;QAClE,mEAAmE;QACnE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACpG,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;QAChD,CAAC;QAED,MAAM,IAAA,kBAAW,EAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,KAAK,CAAC;KACd,WAAW,CAAC,0CAA0C,CAAC;KACvD,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,IAAA,gBAAU,GAAE,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,wCAAwC,CAAC;KACrD,MAAM,CAAC,UAAU,EAAE,qFAAqF,CAAC;KACzG,MAAM,CAAC,uBAAuB,EAAE,oEAAoE,CAAC;KACrG,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;IAC7B,IAAI,CAAC;QACH,MAAM,OAAO,GAAQ;YACnB,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC;QAEF,kEAAkE;QAClE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACpG,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;QAChD,CAAC;QAED,MAAM,IAAA,kBAAW,EAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,cAAc,CAAC;KACvB,WAAW,CAAC,kDAAkD,CAAC;KAC/D,MAAM,CAAC,eAAe,EAAE,yDAAyD,CAAC;KAClF,MAAM,CAAC,SAAS,EAAE,oCAAoC,CAAC;KACvD,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IACpB,IAAI,CAAC;QACH,MAAM,IAAA,iCAAkB,EAAC;YACvB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,KAAK,EAAE,GAAG,CAAC,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,gBAAgB,CAAC;KACzB,WAAW,CAAC,8BAA8B,CAAC;KAC3C,MAAM,CAAC,eAAe,EAAE,yDAAyD,CAAC;KAClF,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IACpB,IAAI,CAAC;QACH,MAAM,IAAA,mCAAoB,EAAC;YACzB,IAAI,EAAE,GAAG,CAAC,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/commands/install-hook.d.ts

@@ -0,0 +1,18 @@
+declare const HOOK_TYPES: readonly ["pre-commit", "pre-push"];
+type HookType = typeof HOOK_TYPES[number];
+interface InstallHookOptions {
+    type?: HookType;
+    force?: boolean;
+}
+/**
+ * Install a Git hook that runs envguard before commits or pushes
+ */
+export declare function installHookCommand(options?: InstallHookOptions): Promise<void>;
+/**
+ * Uninstall a Git hook
+ */
+export declare function uninstallHookCommand(options?: {
+    type?: HookType;
+}): Promise<void>;
+export {};
+//# sourceMappingURL=install-hook.d.ts.map

package/dist/commands/install-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-hook.d.ts","sourceRoot":"","sources":["../../src/commands/install-hook.ts"],"names":[],"mappings":"AAIA,QAAA,MAAM,UAAU,qCAAsC,CAAC;AACvD,KAAK,QAAQ,GAAG,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAE1C,UAAU,kBAAkB;IAC1B,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,GAAE,kBAAuB,iBA8CxE;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,QAAQ,CAAA;CAAO,iBA6B3E"}

package/dist/commands/install-hook.js

@@ -0,0 +1,148 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.installHookCommand = installHookCommand;
+exports.uninstallHookCommand = uninstallHookCommand;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const logger_1 = require("../utils/logger");
+const HOOK_TYPES = ['pre-commit', 'pre-push'];
+/**
+ * Install a Git hook that runs envguard before commits or pushes
+ */
+async function installHookCommand(options = {}) {
+    const rootDir = process.cwd();
+    const gitDir = path.join(rootDir, '.git');
+    const hooksDir = path.join(gitDir, 'hooks');
+    // Check if this is a git repository
+    if (!fs.existsSync(gitDir)) {
+        logger_1.Logger.error('Not a git repository. Please run this command in a git repository.');
+        logger_1.Logger.blank();
+        process.exit(1);
+    }
+    // Ensure hooks directory exists
+    if (!fs.existsSync(hooksDir)) {
+        fs.mkdirSync(hooksDir, { recursive: true });
+        logger_1.Logger.success('Created .git/hooks directory');
+    }
+    const hookType = options.type || 'pre-commit';
+    const hookPath = path.join(hooksDir, hookType);
+    // Check if hook already exists
+    if (fs.existsSync(hookPath) && !options.force) {
+        logger_1.Logger.warning(`${hookType} hook already exists.`);
+        logger_1.Logger.info('Use --force to overwrite the existing hook', true);
+        logger_1.Logger.blank();
+        process.exit(1);
+    }
+    // Create the hook script
+    const hookContent = generateHookScript(hookType);
+    try {
+        fs.writeFileSync(hookPath, hookContent, { mode: 0o755 });
+        logger_1.Logger.success(`Installed ${hookType} hook successfully!`);
+        logger_1.Logger.blank();
+        logger_1.Logger.info('The hook will run `envguard check` automatically before each ' +
+            (hookType === 'pre-commit' ? 'commit' : 'push'), true);
+        logger_1.Logger.info('To bypass the hook, use: git ' +
+            (hookType === 'pre-commit' ? 'commit' : 'push') + ' --no-verify', true);
+        logger_1.Logger.blank();
+    }
+    catch (error) {
+        logger_1.Logger.error(`Failed to install hook: ${error}`);
+        logger_1.Logger.blank();
+        process.exit(1);
+    }
+}
+/**
+ * Uninstall a Git hook
+ */
+async function uninstallHookCommand(options = {}) {
+    const rootDir = process.cwd();
+    const hookType = options.type || 'pre-commit';
+    const hookPath = path.join(rootDir, '.git', 'hooks', hookType);
+    if (!fs.existsSync(hookPath)) {
+        logger_1.Logger.warning(`No ${hookType} hook found.`);
+        logger_1.Logger.blank();
+        return;
+    }
+    // Check if it's our hook
+    const hookContent = fs.readFileSync(hookPath, 'utf-8');
+    if (!hookContent.includes('envguard check')) {
+        logger_1.Logger.warning(`The ${hookType} hook exists but was not created by envguard.`);
+        logger_1.Logger.info('Manual removal required if you want to delete it.', true);
+        logger_1.Logger.blank();
+        return;
+    }
+    try {
+        fs.unlinkSync(hookPath);
+        logger_1.Logger.success(`Removed ${hookType} hook successfully!`);
+        logger_1.Logger.blank();
+    }
+    catch (error) {
+        logger_1.Logger.error(`Failed to remove hook: ${error}`);
+        logger_1.Logger.blank();
+        process.exit(1);
+    }
+}
+/**
+ * Generate the hook script content
+ */
+function generateHookScript(hookType) {
+    const hookMessage = hookType === 'pre-commit' ? 'commit' : 'push';
+    return `#!/bin/sh
+# EnvGuard ${hookType} hook
+# This hook runs envguard to check environment variables before ${hookMessage}
+# To bypass this hook, use: git ${hookMessage} --no-verify
+
+echo "Running EnvGuard environment variable check..."
+
+# Run envguard check
+npx envguard check
+
+# Capture the exit code
+EXIT_CODE=$?
+
+if [ $EXIT_CODE -ne 0 ]; then
+  echo ""
+  echo "❌ EnvGuard check failed. Please fix the issues above before ${hookMessage}ing."
+  echo "   Or run: git ${hookMessage} --no-verify to bypass this check."
+  echo ""
+  exit 1
+fi
+
+echo "✓ EnvGuard check passed!"
+exit 0
+`;
+}
+//# sourceMappingURL=install-hook.js.map

package/dist/commands/install-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-hook.js","sourceRoot":"","sources":["../../src/commands/install-hook.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAeA,gDA8CC;AAKD,oDA6BC;AA/FD,uCAAyB;AACzB,2CAA6B;AAC7B,4CAAyC;AAEzC,MAAM,UAAU,GAAG,CAAC,YAAY,EAAE,UAAU,CAAU,CAAC;AAQvD;;GAEG;AACI,KAAK,UAAU,kBAAkB,CAAC,UAA8B,EAAE;IACvE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE5C,oCAAoC;IACpC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,eAAM,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACnF,eAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,gCAAgC;IAChC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,eAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAE/C,+BAA+B;IAC/B,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC9C,eAAM,CAAC,OAAO,CAAC,GAAG,QAAQ,uBAAuB,CAAC,CAAC;QACnD,eAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,IAAI,CAAC,CAAC;QAChE,eAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,yBAAyB;IACzB,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAEjD,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,eAAM,CAAC,OAAO,CAAC,aAAa,QAAQ,qBAAqB,CAAC,CAAC;QAC3D,eAAM,CAAC,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,IAAI,CAAC,+DAA+D;YAC/D,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;QACnE,eAAM,CAAC,IAAI,CAAC,+BAA+B;YAC/B,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,cAAc,EAAE,IAAI,CAAC,CAAC;QACpF,eAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;QACjD,eAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,oBAAoB,CAAC,UAA+B,EAAE;IAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE/D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,eAAM,CAAC,OAAO,CAAC,MAAM,QAAQ,cAAc,CAAC,CAAC;QAC7C,eAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IAED,yBAAyB;IACzB,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC5C,eAAM,CAAC,OAAO,CAAC,OAAO,QAAQ,+CAA+C,CAAC,CAAC;QAC/E,eAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE,IAAI,CAAC,CAAC;QACvE,eAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxB,eAAM,CAAC,OAAO,CAAC,WAAW,QAAQ,qBAAqB,CAAC,CAAC;QACzD,eAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAC;QAChD,eAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,QAAkB;IAC5C,MAAM,WAAW,GAAG,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IAElE,OAAO;aACI,QAAQ;kEAC6C,WAAW;kCAC3C,WAAW;;;;;;;;;;;;sEAYyB,WAAW;yBACxD,WAAW;;;;;;;CAOnC,CAAC;AACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@danielszlaski/envguard",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "CLI tool to keep environment variables in sync with your codebase",
   "main": "dist/index.js",
   "bin": {

package/src/cli.ts

@@ -4,6 +4,7 @@ import { Command } from 'commander';
 import { scanCommand } from './commands/scan';
 import { fixCommand } from './commands/fix';
 import { checkCommand } from './commands/check';
+import { installHookCommand, uninstallHookCommand } from './commands/install-hook';
 import { Logger } from './utils/logger';
 
 const program = new Command();
@@ -78,4 +79,36 @@ program
     }
   });
 
+program
+  .command('install-hook')
+  .description('Install a Git hook to run envguard automatically')
+  .option('--type <type>', 'Hook type: pre-commit or pre-push (default: pre-commit)')
+  .option('--force', 'Overwrite existing hook if present')
+  .action(async (cmd) => {
+    try {
+      await installHookCommand({
+        type: cmd.type,
+        force: cmd.force
+      });
+    } catch (error) {
+      Logger.error(`${error}`);
+      process.exit(1);
+    }
+  });
+
+program
+  .command('uninstall-hook')
+  .description('Remove the envguard Git hook')
+  .option('--type <type>', 'Hook type: pre-commit or pre-push (default: pre-commit)')
+  .action(async (cmd) => {
+    try {
+      await uninstallHookCommand({
+        type: cmd.type
+      });
+    } catch (error) {
+      Logger.error(`${error}`);
+      process.exit(1);
+    }
+  });
+
 program.parse();

package/src/commands/install-hook.ts

@@ -0,0 +1,128 @@
+import * as fs from 'fs';
+import * as path from 'path';
+import { Logger } from '../utils/logger';
+
+const HOOK_TYPES = ['pre-commit', 'pre-push'] as const;
+type HookType = typeof HOOK_TYPES[number];
+
+interface InstallHookOptions {
+  type?: HookType;
+  force?: boolean;
+}
+
+/**
+ * Install a Git hook that runs envguard before commits or pushes
+ */
+export async function installHookCommand(options: InstallHookOptions = {}) {
+  const rootDir = process.cwd();
+  const gitDir = path.join(rootDir, '.git');
+  const hooksDir = path.join(gitDir, 'hooks');
+
+  // Check if this is a git repository
+  if (!fs.existsSync(gitDir)) {
+    Logger.error('Not a git repository. Please run this command in a git repository.');
+    Logger.blank();
+    process.exit(1);
+  }
+
+  // Ensure hooks directory exists
+  if (!fs.existsSync(hooksDir)) {
+    fs.mkdirSync(hooksDir, { recursive: true });
+    Logger.success('Created .git/hooks directory');
+  }
+
+  const hookType = options.type || 'pre-commit';
+  const hookPath = path.join(hooksDir, hookType);
+
+  // Check if hook already exists
+  if (fs.existsSync(hookPath) && !options.force) {
+    Logger.warning(`${hookType} hook already exists.`);
+    Logger.info('Use --force to overwrite the existing hook', true);
+    Logger.blank();
+    process.exit(1);
+  }
+
+  // Create the hook script
+  const hookContent = generateHookScript(hookType);
+
+  try {
+    fs.writeFileSync(hookPath, hookContent, { mode: 0o755 });
+    Logger.success(`Installed ${hookType} hook successfully!`);
+    Logger.blank();
+    Logger.info('The hook will run `envguard check` automatically before each ' +
+                (hookType === 'pre-commit' ? 'commit' : 'push'), true);
+    Logger.info('To bypass the hook, use: git ' +
+                (hookType === 'pre-commit' ? 'commit' : 'push') + ' --no-verify', true);
+    Logger.blank();
+  } catch (error) {
+    Logger.error(`Failed to install hook: ${error}`);
+    Logger.blank();
+    process.exit(1);
+  }
+}
+
+/**
+ * Uninstall a Git hook
+ */
+export async function uninstallHookCommand(options: { type?: HookType } = {}) {
+  const rootDir = process.cwd();
+  const hookType = options.type || 'pre-commit';
+  const hookPath = path.join(rootDir, '.git', 'hooks', hookType);
+
+  if (!fs.existsSync(hookPath)) {
+    Logger.warning(`No ${hookType} hook found.`);
+    Logger.blank();
+    return;
+  }
+
+  // Check if it's our hook
+  const hookContent = fs.readFileSync(hookPath, 'utf-8');
+  if (!hookContent.includes('envguard check')) {
+    Logger.warning(`The ${hookType} hook exists but was not created by envguard.`);
+    Logger.info('Manual removal required if you want to delete it.', true);
+    Logger.blank();
+    return;
+  }
+
+  try {
+    fs.unlinkSync(hookPath);
+    Logger.success(`Removed ${hookType} hook successfully!`);
+    Logger.blank();
+  } catch (error) {
+    Logger.error(`Failed to remove hook: ${error}`);
+    Logger.blank();
+    process.exit(1);
+  }
+}
+
+/**
+ * Generate the hook script content
+ */
+function generateHookScript(hookType: HookType): string {
+  const hookMessage = hookType === 'pre-commit' ? 'commit' : 'push';
+
+  return `#!/bin/sh
+# EnvGuard ${hookType} hook
+# This hook runs envguard to check environment variables before ${hookMessage}
+# To bypass this hook, use: git ${hookMessage} --no-verify
+
+echo "Running EnvGuard environment variable check..."
+
+# Run envguard check
+npx envguard check
+
+# Capture the exit code
+EXIT_CODE=$?
+
+if [ $EXIT_CODE -ne 0 ]; then
+  echo ""
+  echo "❌ EnvGuard check failed. Please fix the issues above before ${hookMessage}ing."
+  echo "   Or run: git ${hookMessage} --no-verify to bypass this check."
+  echo ""
+  exit 1
+fi
+
+echo "✓ EnvGuard check passed!"
+exit 0
+`;
+}