@greenarmor/ges-git-hooks 1.1.0

package/dist/index.d.ts

@@ -0,0 +1,16 @@
+import type { Finding } from "@greenarmor/ges-audit-engine";
+export declare const PRE_COMMIT_HOOK = "#!/bin/sh\n# GESF Pre-Commit Hook - Runs compliance audit before allowing commits\n# Installed by @greenarmor/ges-git-hooks\n\necho \"[GESF] Running compliance audit...\"\n\n# Find the GESF CLI\nGES_CLI=\"\"\nif [ -f \"./node_modules/.bin/ges\" ]; then\n  GES_CLI=\"./node_modules/.bin/ges\"\nelif command -v ges >/dev/null 2>&1; then\n  GES_CLI=\"ges\"\nelif [ -f \"./node_modules/@greenarmor/ges/dist/cli.js\" ]; then\n  GES_CLI=\"node ./node_modules/@greenarmor/ges/dist/cli.js\"\nfi\n\nif [ -z \"$GES_CLI\" ]; then\n  echo \"[GESF] Warning: ges CLI not found. Skipping audit.\"\n  echo \"[GESF] Install with: npm install @greenarmor/ges\"\n  exit 0\nfi\n\n# Run audit in CI mode (exits non-zero on findings)\n$GES_CLI audit --ci\nRESULT=$?\n\nif [ $RESULT -ne 0 ]; then\n  echo \"\"\n  echo \"[GESF] Commit blocked: compliance audit found issues.\"\n  echo \"[GESF] Fix with: ges fix\"\n  echo \"[GESF] Or bypass with: git commit --no-verify\"\n  exit 1\nfi\n\necho \"[GESF] Audit passed. Commit allowed.\"\nexit 0\n";
+export interface HookInstallResult {
+    installed: string[];
+    skipped: string[];
+    errors: string[];
+}
+export declare function installHooks(projectRoot: string, hooks?: string[]): HookInstallResult;
+export declare function uninstallHooks(projectRoot: string, hooks?: string[]): HookInstallResult;
+export interface PreCommitResult {
+    passed: boolean;
+    findings: Finding[];
+    totalFindings: number;
+    criticalFindings: number;
+}
+export declare function runPreCommitCheck(projectRoot: string): PreCommitResult;

package/dist/index.js

@@ -0,0 +1,112 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { runAudit, deduplicateFindings } from "@greenarmor/ges-audit-engine";
+export const PRE_COMMIT_HOOK = `#!/bin/sh
+# GESF Pre-Commit Hook - Runs compliance audit before allowing commits
+# Installed by @greenarmor/ges-git-hooks
+
+echo "[GESF] Running compliance audit..."
+
+# Find the GESF CLI
+GES_CLI=""
+if [ -f "./node_modules/.bin/ges" ]; then
+  GES_CLI="./node_modules/.bin/ges"
+elif command -v ges >/dev/null 2>&1; then
+  GES_CLI="ges"
+elif [ -f "./node_modules/@greenarmor/ges/dist/cli.js" ]; then
+  GES_CLI="node ./node_modules/@greenarmor/ges/dist/cli.js"
+fi
+
+if [ -z "$GES_CLI" ]; then
+  echo "[GESF] Warning: ges CLI not found. Skipping audit."
+  echo "[GESF] Install with: npm install @greenarmor/ges"
+  exit 0
+fi
+
+# Run audit in CI mode (exits non-zero on findings)
+$GES_CLI audit --ci
+RESULT=$?
+
+if [ $RESULT -ne 0 ]; then
+  echo ""
+  echo "[GESF] Commit blocked: compliance audit found issues."
+  echo "[GESF] Fix with: ges fix"
+  echo "[GESF] Or bypass with: git commit --no-verify"
+  exit 1
+fi
+
+echo "[GESF] Audit passed. Commit allowed."
+exit 0
+`;
+export function installHooks(projectRoot, hooks = ["pre-commit"]) {
+    const result = { installed: [], skipped: [], errors: [] };
+    const gitDir = path.join(projectRoot, ".git");
+    if (!fs.existsSync(gitDir)) {
+        result.errors.push("Not a git repository (.git directory not found)");
+        return result;
+    }
+    const hooksDir = path.join(gitDir, "hooks");
+    if (!fs.existsSync(hooksDir)) {
+        fs.mkdirSync(hooksDir, { recursive: true });
+    }
+    const hookContents = {
+        "pre-commit": PRE_COMMIT_HOOK,
+    };
+    for (const hookName of hooks) {
+        const hookPath = path.join(hooksDir, hookName);
+        if (hookContents[hookName] === undefined) {
+            result.errors.push(`Unsupported hook: ${hookName}`);
+            continue;
+        }
+        if (fs.existsSync(hookPath)) {
+            const existing = fs.readFileSync(hookPath, "utf-8");
+            if (existing.includes("@greenarmor/ges-git-hooks")) {
+                fs.writeFileSync(hookPath, hookContents[hookName], "utf-8");
+                fs.chmodSync(hookPath, 0o755);
+                result.installed.push(hookName);
+                continue;
+            }
+            result.skipped.push(`${hookName} (already exists, not a GESF hook)`);
+            continue;
+        }
+        fs.writeFileSync(hookPath, hookContents[hookName], "utf-8");
+        fs.chmodSync(hookPath, 0o755);
+        result.installed.push(hookName);
+    }
+    return result;
+}
+export function uninstallHooks(projectRoot, hooks = ["pre-commit"]) {
+    const result = { installed: [], skipped: [], errors: [] };
+    const hooksDir = path.join(projectRoot, ".git", "hooks");
+    if (!fs.existsSync(hooksDir)) {
+        result.errors.push("No .git/hooks directory found");
+        return result;
+    }
+    for (const hookName of hooks) {
+        const hookPath = path.join(hooksDir, hookName);
+        if (!fs.existsSync(hookPath)) {
+            result.skipped.push(`${hookName} (not installed)`);
+            continue;
+        }
+        const content = fs.readFileSync(hookPath, "utf-8");
+        if (content.includes("@greenarmor/ges-git-hooks")) {
+            fs.unlinkSync(hookPath);
+            result.installed.push(`removed ${hookName}`);
+        }
+        else {
+            result.skipped.push(`${hookName} (not a GESF hook, skipping)`);
+        }
+    }
+    return result;
+}
+export function runPreCommitCheck(projectRoot) {
+    const { findings: rawFindings } = runAudit(projectRoot);
+    const findings = deduplicateFindings(rawFindings);
+    const criticalFindings = findings.filter(f => f.severity === "critical").length;
+    return {
+        passed: findings.length === 0,
+        findings,
+        totalFindings: findings.length,
+        criticalFindings,
+    };
+}

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "@greenarmor/ges-git-hooks",
+  "version": "1.1.0",
+  "type": "module",
+  "description": "GESF Git Hooks - Pre-commit compliance enforcement",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist tsconfig.tsbuildinfo",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@greenarmor/ges-core": "workspace:*",
+    "@greenarmor/ges-audit-engine": "workspace:*"
+  },
+  "keywords": [
+    "gdpr",
+    "compliance",
+    "security",
+    "git-hooks",
+    "pre-commit",
+    "gesf",
+    "green-armor"
+  ],
+  "devDependencies": {
+    "typescript": "^6.0.0",
+    "@types/node": "^22.0.0",
+    "vitest": "^4.1.8"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/greenarmor/gesf"
+  },
+  "homepage": "https://github.com/greenarmor/gesf"
+}