@ryuenn3123/agentic-senior-core 6.7.2 → 6.7.3

package/.agents/plugins/agentic-senior-core/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-senior-core",
-  "version": "6.7.2",
+  "version": "6.7.3",
   "description": "Universal AI coding rules. Write code like a staff engineer.",
   "skills": "./skills/",
   "hooks": "./hooks/hooks.json",

package/.agents/plugins/agentic-senior-core/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-senior-core",
-  "version": "6.7.2",
+  "version": "6.7.3",
   "description": "Universal AI coding rules. Because your AI writes code like it gets paid by the line.",
   "contextFileName": "rules/agentic-senior-core.md",
   "rules": [

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-senior-core",
-  "version": "6.7.2",
+  "version": "6.7.3",
   "description": "Universal AI coding rules. Write code like a staff engineer.",
   "author": "fatidaprilian",
   "license": "MIT",

package/lib/cli/commands/git-hook-generator.mjs

@@ -138,31 +138,55 @@ function loadDedupConfig(cwd) {
   };
 }
 
-function runEslintAutoFix(cwd, stagedFiles) {
-  const hasTsConfig = fs.existsSync(path.join(cwd, 'tsconfig.json'));
-  if (!hasTsConfig) return;
-
-  const eslintConfigNames = [
-    'eslint.config.js', 'eslint.config.mjs', 'eslint.config.cjs', 'eslint.config.ts',
-    '.eslintrc', '.eslintrc.js', '.eslintrc.cjs', '.eslintrc.json', '.eslintrc.yaml', '.eslintrc.yml'
+function checkSecrets(stagedFiles, cwd) {
+  var SECRET_PATTERNS = [
+    { name: 'Private Key', pattern: /BEGIN\\s+(RSA|DSA|EC|OPENSSH|PGP)\\s+PRIVATE\\s+KEY/ },
+    { name: 'AWS Access Key', pattern: /AKIA[0-9A-Z]{16}/ },
+    { name: 'GitHub Token', pattern: /gh[pousr]_[A-Za-z0-9_]{36,}/ },
+    { name: 'GitHub PAT', pattern: /github_pat_[A-Za-z0-9_]{22,}/ },
+    { name: 'Generic Secret Key', pattern: /sk[-_](live|test|prod)_[A-Za-z0-9]{20,}/ },
+    { name: 'Generic API Key', pattern: /(?:api[_-]?key|apikey|api[_-]?secret)\\s*[:=]\\s*['"][A-Za-z0-9\\/+=]{20,}['"]/i },
   ];
-  const hasEslintConfig = eslintConfigNames.some(name => fs.existsSync(path.join(cwd, name)));
-  if (!hasEslintConfig) return;
-
-  const tsJsExts = new Set(['js', 'ts', 'jsx', 'tsx', 'mjs', 'cjs']);
-  const stagedTsJsFiles = stagedFiles.filter(file => {
-    const ext = path.extname(file).slice(1).toLowerCase();
-    return tsJsExts.has(ext);
-  });
+  for (var i = 0; i < stagedFiles.length; i++) {
+    try {
+      var content = fs.readFileSync(path.resolve(cwd, stagedFiles[i]), 'utf8');
+      for (var j = 0; j < SECRET_PATTERNS.length; j++) {
+        if (SECRET_PATTERNS[j].pattern.test(content)) {
+          console.error('\\x1b[31m[ASC Secret]\\x1b[0m ' + SECRET_PATTERNS[j].name + ' detected in: ' + stagedFiles[i]);
+          console.error('\\x1b[33mCommit blocked. Remove the secret and use environment variables. Use git commit --no-verify to bypass.\\x1b[0m');
+          process.exit(1);
+        }
+      }
+    } catch (_) {}
+  }
+}
 
-  if (stagedTsJsFiles.length === 0) return;
+function checkMergeConflictMarkers(stagedFiles, cwd) {
+  var CONFLICT_PATTERN = /^(<{7}|={7}|>{7})/m;
+  for (var i = 0; i < stagedFiles.length; i++) {
+    try {
+      var content = fs.readFileSync(path.resolve(cwd, stagedFiles[i]), 'utf8');
+      if (CONFLICT_PATTERN.test(content)) {
+        console.error('\\x1b[31m[ASC Conflict]\\x1b[0m Merge conflict markers found in: ' + stagedFiles[i]);
+        console.error('\\x1b[33mCommit blocked. Resolve all merge conflicts before committing.\\x1b[0m');
+        process.exit(1);
+      }
+    } catch (_) {}
+  }
+}
 
-  try {
-    const fileList = stagedTsJsFiles.map(f => \`"\${f}"\`).join(' ');
-    execSync(\`npx eslint --fix \${fileList}\`, { stdio: 'ignore', cwd });
-    execSync(\`git add \${fileList}\`, { stdio: 'ignore', cwd });
-  } catch (_) {
-    // Silently ignore ESLint auto-fix errors (never block commit on lint failure alone)
+function checkLargeFiles(stagedFiles, cwd, maxSizeKB) {
+  var limit = maxSizeKB || 500;
+  for (var i = 0; i < stagedFiles.length; i++) {
+    try {
+      var stat = fs.statSync(path.resolve(cwd, stagedFiles[i]));
+      var sizeKB = Math.round(stat.size / 1024);
+      if (sizeKB > limit) {
+        console.error('\\x1b[31m[ASC Size]\\x1b[0m File too large: ' + stagedFiles[i] + ' (' + sizeKB + 'KB > ' + limit + 'KB limit)');
+        console.error('\\x1b[33mCommit blocked. Use Git LFS for large files or add to .gitignore. Use git commit --no-verify to bypass.\\x1b[0m');
+        process.exit(1);
+      }
+    } catch (_) {}
   }
 }
 
@@ -277,7 +301,13 @@ function runPreCommitGate() {
     process.exit(0);
   }
 
-  // 1. Filter staged files by SOURCE_EXTENSIONS
+  // 1. Universal security & hygiene checks (all staged files, language-agnostic)
+  var config = loadDedupConfig(cwd);
+  checkSecrets(stagedFiles, cwd);
+  checkMergeConflictMarkers(stagedFiles, cwd);
+  checkLargeFiles(stagedFiles, cwd, config.maxFileSizeKB);
+
+  // 2. Filter staged files by SOURCE_EXTENSIONS for dedup scan
   const stagedSourceFiles = stagedFiles.filter(f => {
     const ext = path.extname(f).slice(1).toLowerCase();
     return SOURCE_EXTENSIONS.has(ext);
@@ -287,22 +317,8 @@ function runPreCommitGate() {
     process.exit(0);
   }
 
-  // 2. Optional pre-step: ESLint auto-fix
-  runEslintAutoFix(cwd, stagedFiles);
-
-  // Re-fetch staged files after possible eslint auto-fix & git add
-  const currentStagedSource = getStagedFiles(cwd).filter(f => {
-    const ext = path.extname(f).slice(1).toLowerCase();
-    return SOURCE_EXTENSIONS.has(ext);
-  });
-
-  if (currentStagedSource.length === 0) {
-    process.exit(0);
-  }
-
   // 3. Run jscpd dedup scan
-  const config = loadDedupConfig(cwd);
-  const scanDirs = Array.from(new Set(currentStagedSource.map(f => {
+  const scanDirs = Array.from(new Set(stagedSourceFiles.map(f => {
     const resolved = path.resolve(cwd, f);
     return path.dirname(resolved);
   })));
@@ -321,7 +337,7 @@ function runPreCommitGate() {
     const scanCmd = \` "\${scanDir}" --min-tokens \${minTokens} --reporters json --silent --output "\${tmpDir}" \${ignoreFlags}\`;
     const report = runJscpdScan(scanCmd, cwd, tmpDir);
     if (report) {
-      finding = checkForDuplicates(report, currentStagedSource, cwd, config);
+      finding = checkForDuplicates(report, stagedSourceFiles, cwd, config);
       if (finding) break;
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ryuenn3123/agentic-senior-core",
-  "version": "6.7.2",
+  "version": "6.7.3",
   "type": "module",
   "description": "Agentic Senior Core: Universal AI coding rules and workflows. Write code like a staff engineer, not a junior.",
   "bin": {

package/plugin.yaml

@@ -1,5 +1,5 @@
 name: agentic-senior-core
-version: 6.7.2
+version: 6.7.3
 description: Universal AI coding rules. Write code like a staff engineer.
 author: fatidaprilian
 provides_hooks: