@vibe-validate/cli 0.18.4-rc.1 → 0.18.4

package/dist/commands/doctor.js

@@ -28,6 +28,27 @@ import { formatTemplateList } from '../utils/template-discovery.js';
 import { checkSync, ciConfigToWorkflowOptions } from './generate-workflow.js';
 /** @deprecated State file deprecated in v0.12.0 - validation now uses git notes */
 const DEPRECATED_STATE_FILE = '.vibe-validate-state.yaml';
+// Check name constants (extracted to avoid duplication warnings)
+const CHECK_CLI_BUILD_STATUS = 'CLI build status';
+const CHECK_NODE_VERSION = 'Node.js version';
+const CHECK_PACKAGE_MANAGER = 'Package manager';
+const CHECK_GIT_REPOSITORY = 'Git repository';
+const CHECK_GIT_MAIN_BRANCH = 'Git main branch';
+const CHECK_GIT_REMOTE_ORIGIN = 'Git remote origin';
+const CHECK_GIT_REMOTE_MAIN_BRANCH = 'Git remote main branch';
+const CHECK_CONFIG_VALID = 'Configuration valid';
+const CHECK_GITIGNORE_STATE_FILE = 'Gitignore state file';
+const CHECK_VALIDATION_HISTORY = 'Validation history';
+const CHECK_VALIDATION_HISTORY_MIGRATION = 'Validation history migration';
+const CHECK_PRE_COMMIT_HOOK = 'Pre-commit hook';
+const CHECK_GITHUB_ACTIONS_WORKFLOW = 'GitHub Actions workflow';
+const CHECK_PRE_COMMIT_SECRET_SCANNING = 'Pre-commit secret scanning';
+const CHECK_VIBE_VALIDATE_VERSION = 'vibe-validate version';
+// Common message constants
+const MSG_SKIPPED_NOT_IN_GIT = 'Skipped (not in git repository)';
+const MSG_SKIPPED_NO_CONFIG = 'Skipped (no config)';
+const SUGGESTION_INSTALL_NODE_JS = 'Install Node.js: https://nodejs.org/';
+const GIT_REF_DEPRECATED_RUNS = 'refs/notes/vibe-validate/runs';
 /**
  * Check if CLI build is in sync with source code (development mode only)
  *
@@ -42,16 +63,16 @@ function checkCliBuildSync() {
         const gitRoot = findGitRoot();
         if (!gitRoot) {
             return {
-                name: 'CLI build status',
+                name: CHECK_CLI_BUILD_STATUS,
                 passed: true,
-                message: 'Skipped (not in git repository)',
+                message: MSG_SKIPPED_NOT_IN_GIT,
             };
         }
         const sourcePackageJsonPath = join(gitRoot, 'packages/cli/package.json');
         // Not in vibe-validate source tree
         if (!existsSync(sourcePackageJsonPath)) {
             return {
-                name: 'CLI build status',
+                name: CHECK_CLI_BUILD_STATUS,
                 passed: true,
                 message: 'Skipped (not in vibe-validate source tree)',
             };
@@ -66,14 +87,14 @@ function checkCliBuildSync() {
         // Compare versions - this is the confusing scenario that needs detection
         if (runningVersion !== sourceVersion) {
             return {
-                name: 'CLI build status',
+                name: CHECK_CLI_BUILD_STATUS,
                 passed: false,
                 message: `Build is stale: running v${runningVersion}, source v${sourceVersion}`,
                 suggestion: 'Rebuild packages: pnpm -r build',
             };
         }
         return {
-            name: 'CLI build status',
+            name: CHECK_CLI_BUILD_STATUS,
             passed: true,
             message: `Build is up to date (v${runningVersion})`,
         };
@@ -82,7 +103,7 @@ function checkCliBuildSync() {
     catch (_error) {
         // Any errors are non-critical - this is a development-only check
         return {
-            name: 'CLI build status',
+            name: CHECK_CLI_BUILD_STATUS,
             passed: true,
             message: 'Skipped (could not determine build status)',
         };
@@ -97,27 +118,27 @@ function checkNodeVersion() {
         // Validate that we got a valid version number
         if (!version) {
             return {
-                name: 'Node.js version',
+                name: CHECK_NODE_VERSION,
                 passed: false,
                 message: 'Failed to detect Node.js version',
-                suggestion: 'Install Node.js: https://nodejs.org/',
+                suggestion: SUGGESTION_INSTALL_NODE_JS,
             };
         }
         const majorVersion = Number.parseInt(version.replace('v', '').split('.')[0]);
         if (Number.isNaN(majorVersion) || majorVersion === 0) {
             return {
-                name: 'Node.js version',
+                name: CHECK_NODE_VERSION,
                 passed: false,
                 message: `Failed to parse Node.js version from output: "${version}"`,
-                suggestion: 'Install Node.js: https://nodejs.org/',
+                suggestion: SUGGESTION_INSTALL_NODE_JS,
             };
         }
         return majorVersion >= 20 ? {
-            name: 'Node.js version',
+            name: CHECK_NODE_VERSION,
             passed: true,
             message: `${version} (meets requirement: >=20.0.0)`,
         } : {
-            name: 'Node.js version',
+            name: CHECK_NODE_VERSION,
             passed: false,
             message: `${version} is too old. Node.js 20+ required.`,
             suggestion: 'Upgrade Node.js: https://nodejs.org/ or use nvm',
@@ -126,7 +147,7 @@ function checkNodeVersion() {
     catch (error) {
         const errorMessage = error instanceof Error ? error.message : String(error);
         return {
-            name: 'Node.js version',
+            name: CHECK_NODE_VERSION,
             passed: false,
             message: `Failed to detect Node.js version: ${errorMessage}`,
             suggestion: 'Install Node.js: https://nodejs.org/',
@@ -164,14 +185,14 @@ function checkGitRepository() {
         const isGitRepo = isGitRepository();
         if (isGitRepo) {
             return {
-                name: 'Git repository',
+                name: CHECK_GIT_REPOSITORY,
                 passed: true,
                 message: 'Current directory is a git repository',
             };
         }
         else {
             return {
-                name: 'Git repository',
+                name: CHECK_GIT_REPOSITORY,
                 passed: false,
                 message: 'Current directory is not a git repository',
                 suggestion: 'Run: git init',
@@ -181,7 +202,7 @@ function checkGitRepository() {
     catch (error) {
         const errorMessage = error instanceof Error ? error.message : String(error);
         return {
-            name: 'Git repository',
+            name: CHECK_GIT_REPOSITORY,
             passed: false,
             message: `Error checking git repository: ${errorMessage}`,
             suggestion: 'Run: git init',
@@ -231,7 +252,7 @@ async function checkConfigValid(config, configWithErrors) {
                     errors: configWithErrors.errors
                 });
                 return {
-                    name: 'Configuration valid',
+                    name: CHECK_CONFIG_VALID,
                     passed: false,
                     message,
                     suggestion,
@@ -243,7 +264,7 @@ async function checkConfigValid(config, configWithErrors) {
                 // eslint-disable-next-line @typescript-eslint/prefer-nullish-coalescing -- Need to filter empty strings, not just null/undefined
                 const fileName = configPath.split('/').pop() || 'vibe-validate.config.yaml';
                 return {
-                    name: 'Configuration valid',
+                    name: CHECK_CONFIG_VALID,
                     passed: false,
                     message: `Found ${fileName} but it contains validation errors`,
                     suggestion: [
@@ -258,7 +279,7 @@ async function checkConfigValid(config, configWithErrors) {
                 // No config file found
                 const templateList = formatTemplateList();
                 return {
-                    name: 'Configuration valid',
+                    name: CHECK_CONFIG_VALID,
                     passed: false,
                     message: 'No configuration file found',
                     suggestion: [
@@ -279,14 +300,14 @@ async function checkConfigValid(config, configWithErrors) {
             }
         }
         return {
-            name: 'Configuration valid',
+            name: CHECK_CONFIG_VALID,
             passed: true,
             message: `Loaded successfully (${config.validation.phases.length} phases)`,
         };
     }
     catch (error) {
         return {
-            name: 'Configuration valid',
+            name: CHECK_CONFIG_VALID,
             passed: false,
             message: `Invalid configuration: ${error instanceof Error ? error.message : String(error)}`,
             suggestion: 'Check syntax in vibe-validate.config.yaml',
@@ -301,9 +322,9 @@ async function checkPackageManager(config) {
         if (!config) {
             // Config check will catch this
             return {
-                name: 'Package manager',
+                name: CHECK_PACKAGE_MANAGER,
                 passed: true,
-                message: 'Skipped (no config)',
+                message: MSG_SKIPPED_NO_CONFIG,
             };
         }
         // Detect package manager from config commands
@@ -312,7 +333,7 @@ async function checkPackageManager(config) {
         const version = getToolVersion(pm);
         if (version) {
             return {
-                name: 'Package manager',
+                name: CHECK_PACKAGE_MANAGER,
                 passed: true,
                 message: `${pm} ${version} is available`,
             };
@@ -321,7 +342,7 @@ async function checkPackageManager(config) {
         const currentPm = detectPackageManager(process.cwd());
         const installCmd = getGlobalInstallCommand(currentPm, pm);
         return {
-            name: 'Package manager',
+            name: CHECK_PACKAGE_MANAGER,
             passed: false,
             message: `${pm} not found (required by config commands)`,
             suggestion: pm === 'npm'
@@ -332,7 +353,7 @@ async function checkPackageManager(config) {
     catch (error) {
         const errorMessage = error instanceof Error ? error.message : String(error);
         return {
-            name: 'Package manager',
+            name: CHECK_PACKAGE_MANAGER,
             passed: true,
             message: `Skipped (config check failed): ${errorMessage}`,
         };
@@ -349,15 +370,15 @@ async function checkWorkflowSync(config) {
     const gitRoot = findGitRoot();
     if (!gitRoot) {
         return {
-            name: 'GitHub Actions workflow',
+            name: CHECK_GITHUB_ACTIONS_WORKFLOW,
             passed: true,
-            message: 'Skipped (not in git repository)',
+            message: MSG_SKIPPED_NOT_IN_GIT,
         };
     }
     const workflowPath = join(gitRoot, '.github/workflows/validate.yml');
     if (!existsSync(workflowPath)) {
         return {
-            name: 'GitHub Actions workflow',
+            name: CHECK_GITHUB_ACTIONS_WORKFLOW,
             passed: true,
             message: 'No workflow file (optional)',
         };
@@ -365,15 +386,15 @@ async function checkWorkflowSync(config) {
     try {
         if (!config) {
             return {
-                name: 'GitHub Actions workflow',
+                name: CHECK_GITHUB_ACTIONS_WORKFLOW,
                 passed: true,
-                message: 'Skipped (no config)',
+                message: MSG_SKIPPED_NO_CONFIG,
             };
         }
         // Check if workflow check is disabled in config
         if (config.ci?.disableWorkflowCheck === true) {
             return {
-                name: 'GitHub Actions workflow',
+                name: CHECK_GITHUB_ACTIONS_WORKFLOW,
                 passed: true,
                 message: 'Workflow sync check disabled (ci.disableWorkflowCheck: true)',
             };
@@ -385,11 +406,11 @@ async function checkWorkflowSync(config) {
         };
         const { inSync, diff } = checkSync(config, generateOptions, workflowPath);
         return inSync ? {
-            name: 'GitHub Actions workflow',
+            name: CHECK_GITHUB_ACTIONS_WORKFLOW,
             passed: true,
             message: 'Workflow is in sync with config',
         } : {
-            name: 'GitHub Actions workflow',
+            name: CHECK_GITHUB_ACTIONS_WORKFLOW,
             passed: false,
             message: `Workflow is out of sync: ${diff ?? 'differs from config'}`,
             suggestion: [
@@ -404,7 +425,7 @@ async function checkWorkflowSync(config) {
     }
     catch (error) {
         return {
-            name: 'GitHub Actions workflow',
+            name: CHECK_GITHUB_ACTIONS_WORKFLOW,
             passed: false,
             message: `Failed to check workflow sync: ${error instanceof Error ? error.message : String(error)}`,
             suggestion: 'Verify workflow file syntax',
@@ -423,7 +444,7 @@ async function checkPreCommitHook(config) {
     // If user explicitly disabled, acknowledge their choice
     if (!preCommitEnabled) {
         return {
-            name: 'Pre-commit hook',
+            name: CHECK_PRE_COMMIT_HOOK,
             passed: true,
             message: 'Pre-commit hook disabled in config (user preference)',
         };
@@ -432,9 +453,9 @@ async function checkPreCommitHook(config) {
     const gitRoot = findGitRoot();
     if (!gitRoot) {
         return {
-            name: 'Pre-commit hook',
+            name: CHECK_PRE_COMMIT_HOOK,
             passed: true,
-            message: 'Skipped (not in git repository)',
+            message: MSG_SKIPPED_NOT_IN_GIT,
         };
     }
     const huskyPath = join(gitRoot, '.husky/pre-commit');
@@ -442,7 +463,7 @@ async function checkPreCommitHook(config) {
     if (!existsSync(huskyPath)) {
         const cmd = getCommandName();
         return {
-            name: 'Pre-commit hook',
+            name: CHECK_PRE_COMMIT_HOOK,
             passed: false,
             message: 'Pre-commit hook not installed',
             suggestion: `Manual: npx husky init && echo "${cmd} pre-commit" > .husky/pre-commit\n   💡 Or run: ${cmd} init --setup-hooks\n   💡 Or disable: set hooks.preCommit.enabled=false in config`,
@@ -457,7 +478,7 @@ async function checkPreCommitHook(config) {
             hookContent.includes('npx vibe-validate validate');
         if (hasVibeValidate) {
             return {
-                name: 'Pre-commit hook',
+                name: CHECK_PRE_COMMIT_HOOK,
                 passed: true,
                 message: 'Pre-commit hook installed and runs vibe-validate',
             };
@@ -467,7 +488,7 @@ async function checkPreCommitHook(config) {
             const cmd = getCommandName();
             const hookPreview = hookContent.split('\n').slice(0, 3).join('; ').trim();
             return {
-                name: 'Pre-commit hook',
+                name: CHECK_PRE_COMMIT_HOOK,
                 passed: false,
                 message: `Custom pre-commit hook detected: "${hookPreview}..."`,
                 suggestion: `Manual: Verify that .husky/pre-commit runs "${expectedCommand}"\n   💡 Or run: ${cmd} init --setup-hooks\n   💡 Or disable: set hooks.preCommit.enabled=false in config`,
@@ -477,7 +498,7 @@ async function checkPreCommitHook(config) {
     catch (error) {
         const errorMessage = error instanceof Error ? error.message : String(error);
         return {
-            name: 'Pre-commit hook',
+            name: CHECK_PRE_COMMIT_HOOK,
             passed: false,
             message: `Pre-commit hook exists but unreadable: ${errorMessage}`,
             suggestion: 'Fix file permissions or set hooks.preCommit.enabled=false',
@@ -536,7 +557,7 @@ async function checkVersion(versionChecker = defaultVersionChecker) {
             const contextLabel = getContextLabel(context);
             if (currentVersion === latestVersion) {
                 return {
-                    name: 'vibe-validate version',
+                    name: CHECK_VIBE_VALIDATE_VERSION,
                     passed: true,
                     message: `Current: ${currentVersion}${contextLabel} — up to date with npm`,
                 };
@@ -545,7 +566,7 @@ async function checkVersion(versionChecker = defaultVersionChecker) {
                 // Only show suggestion if current version is behind npm
                 const cmd = getCommandName();
                 return {
-                    name: 'vibe-validate version',
+                    name: CHECK_VIBE_VALIDATE_VERSION,
                     passed: true, // Warning only, not a failure
                     message: `Current: ${currentVersion}${contextLabel}, Latest: ${latestVersion} available`,
                     suggestion: `Upgrade: ${getUpgradeCommand(context)}\n   💡 After upgrade: Run '${cmd} doctor' to verify setup`,
@@ -554,7 +575,7 @@ async function checkVersion(versionChecker = defaultVersionChecker) {
             else {
                 // Current version is ahead of npm (pre-release or unpublished)
                 return {
-                    name: 'vibe-validate version',
+                    name: CHECK_VIBE_VALIDATE_VERSION,
                     passed: true,
                     message: `Current: ${currentVersion}${contextLabel} (ahead of npm: ${latestVersion})`,
                 };
@@ -564,7 +585,7 @@ async function checkVersion(versionChecker = defaultVersionChecker) {
             // npm registry unavailable - not a critical error
             const errorMessage = npmError instanceof Error ? npmError.message : String(npmError);
             return {
-                name: 'vibe-validate version',
+                name: CHECK_VIBE_VALIDATE_VERSION,
                 passed: true,
                 message: `Current version: ${currentVersion} (unable to check for updates: ${errorMessage})`,
             };
@@ -573,7 +594,7 @@ async function checkVersion(versionChecker = defaultVersionChecker) {
     catch (error) {
         const errorMessage = error instanceof Error ? error.message : String(error);
         return {
-            name: 'vibe-validate version',
+            name: CHECK_VIBE_VALIDATE_VERSION,
             passed: true,
             message: `Unable to determine version: ${errorMessage}`,
         };
@@ -592,16 +613,16 @@ function checkGitignoreStateFile() {
     const gitRoot = findGitRoot();
     if (!gitRoot) {
         return {
-            name: 'Gitignore state file',
+            name: CHECK_GITIGNORE_STATE_FILE,
             passed: true,
-            message: 'Skipped (not in git repository)',
+            message: MSG_SKIPPED_NOT_IN_GIT,
         };
     }
     const gitignorePath = join(gitRoot, '.gitignore');
     // Check if .gitignore exists
     if (!existsSync(gitignorePath)) {
         return {
-            name: 'Gitignore state file',
+            name: CHECK_GITIGNORE_STATE_FILE,
             passed: true,
             message: '.gitignore file not found (state file deprecated - using git notes)',
         };
@@ -621,7 +642,7 @@ function checkGitignoreStateFile() {
         }
         else {
             return {
-                name: 'Gitignore state file',
+                name: CHECK_GITIGNORE_STATE_FILE,
                 passed: true,
                 message: 'No deprecated state file entries in .gitignore',
             };
@@ -630,7 +651,7 @@ function checkGitignoreStateFile() {
     catch (error) {
         const errorMessage = error instanceof Error ? error.message : String(error);
         return {
-            name: 'Gitignore state file',
+            name: CHECK_GITIGNORE_STATE_FILE,
             passed: false,
             message: `.gitignore exists but is unreadable: ${errorMessage}`,
             suggestion: 'Fix file permissions: chmod 644 .gitignore',
@@ -676,13 +697,13 @@ function checkCacheMigration() {
     try {
         // Check if the EXACT old validation history ref exists (singular "runs", not "run/")
         // Using git for-each-ref with exact ref name to avoid matching "run/" subdirectories
-        const result = executeGitCommand(['for-each-ref', '--format=%(refname)', 'refs/notes/vibe-validate/runs'], { ignoreErrors: true, suppressStderr: true });
-        if (result.success && result.stdout.trim() === 'refs/notes/vibe-validate/runs') {
+        const result = executeGitCommand(['for-each-ref', '--format=%(refname)', GIT_REF_DEPRECATED_RUNS], { ignoreErrors: true, suppressStderr: true });
+        if (result.success && result.stdout.trim() === GIT_REF_DEPRECATED_RUNS) {
             // Old validation history namespace exists - automatically clean it up
             try {
-                executeGitCommand(['update-ref', '-d', 'refs/notes/vibe-validate/runs']);
+                executeGitCommand(['update-ref', '-d', GIT_REF_DEPRECATED_RUNS]);
                 return {
-                    name: 'Validation history migration',
+                    name: CHECK_VALIDATION_HISTORY_MIGRATION,
                     passed: true,
                     message: 'Automatically removed old validation history format (pre-v0.15.0)',
                 };
@@ -691,7 +712,7 @@ function checkCacheMigration() {
             catch (_error) {
                 // Fallback to manual suggestion if auto-cleanup fails
                 return {
-                    name: 'Validation history migration',
+                    name: CHECK_VALIDATION_HISTORY_MIGRATION,
                     passed: true, // Not a failure, just informational
                     message: 'Old validation history format detected (pre-v0.15.0)',
                     suggestion: `Manual cleanup:\n   git update-ref -d refs/notes/vibe-validate/runs\n   ℹ️  This removes the deprecated "runs" namespace`,
@@ -699,7 +720,7 @@ function checkCacheMigration() {
             }
         }
         return {
-            name: 'Validation history migration',
+            name: CHECK_VALIDATION_HISTORY_MIGRATION,
             passed: true,
             message: 'Using current validation history format',
         };
@@ -708,7 +729,7 @@ function checkCacheMigration() {
     catch (_error) {
         // Git command failed or no git notes - that's fine
         return {
-            name: 'Validation history migration',
+            name: CHECK_VALIDATION_HISTORY_MIGRATION,
             passed: true,
             message: 'No validation history to migrate',
         };
@@ -722,7 +743,7 @@ async function checkHistoryHealth() {
         const health = await checkValidationHistoryHealth();
         if (!health.shouldWarn) {
             return {
-                name: 'Validation history',
+                name: CHECK_VALIDATION_HISTORY,
                 passed: true,
                 message: `${health.totalNotes} tree hashes tracked, history is healthy`,
             };
@@ -730,7 +751,7 @@ async function checkHistoryHealth() {
         // Has warnings - advisory only, not a critical failure
         const cmd = getCommandName();
         return {
-            name: 'Validation history',
+            name: CHECK_VALIDATION_HISTORY,
             passed: true, // Advisory: large history is a warning, not a failure
             message: `${health.totalNotes} tree hashes tracked (${health.oldNotesCount} older than 90 days)`,
             suggestion: `Prune old history: ${cmd} history prune --older-than "90 days"`,
@@ -740,7 +761,7 @@ async function checkHistoryHealth() {
         // Git notes not available or other error - not critical
         const errorMessage = error instanceof Error ? error.message : String(error);
         return {
-            name: 'Validation history',
+            name: CHECK_VALIDATION_HISTORY,
             passed: true,
             message: `History unavailable (not in git repo or no validation runs yet): ${errorMessage}`,
         };
@@ -753,9 +774,9 @@ async function checkMainBranch(config) {
     try {
         if (!config) {
             return {
-                name: 'Git main branch',
+                name: CHECK_GIT_MAIN_BRANCH,
                 passed: true,
-                message: 'Skipped (no config)',
+                message: MSG_SKIPPED_NO_CONFIG,
             };
         }
         const mainBranch = getMainBranch(config.git);
@@ -764,7 +785,7 @@ async function checkMainBranch(config) {
         const localResult = verifyRef(mainBranch);
         if (localResult) {
             return {
-                name: 'Git main branch',
+                name: CHECK_GIT_MAIN_BRANCH,
                 passed: true,
                 message: `Branch '${mainBranch}' exists locally`,
             };
@@ -773,13 +794,13 @@ async function checkMainBranch(config) {
         const remoteResult = verifyRef(`${remoteOrigin}/${mainBranch}`);
         if (remoteResult) {
             return {
-                name: 'Git main branch',
+                name: CHECK_GIT_MAIN_BRANCH,
                 passed: true,
                 message: `Branch '${mainBranch}' exists on remote '${remoteOrigin}' (fetch-depth: 0 required in CI)`,
             };
         }
         return {
-            name: 'Git main branch',
+            name: CHECK_GIT_MAIN_BRANCH,
             passed: false,
             message: `Configured main branch '${mainBranch}' does not exist locally or on remote '${remoteOrigin}'`,
             suggestion: `Create branch: git checkout -b ${mainBranch} OR update config to use existing branch (e.g., 'master', 'develop')`,
@@ -788,7 +809,7 @@ async function checkMainBranch(config) {
     catch (error) {
         const errorMessage = error instanceof Error ? error.message : String(error);
         return {
-            name: 'Git main branch',
+            name: CHECK_GIT_MAIN_BRANCH,
             passed: true,
             message: `Skipped (config or git error): ${errorMessage}`,
         };
@@ -801,9 +822,9 @@ async function checkRemoteOrigin(config) {
     try {
         if (!config) {
             return {
-                name: 'Git remote origin',
+                name: CHECK_GIT_REMOTE_ORIGIN,
                 passed: true,
-                message: 'Skipped (no config)',
+                message: MSG_SKIPPED_NO_CONFIG,
             };
         }
         const remoteOrigin = getRemoteOrigin(config.git);
@@ -814,7 +835,7 @@ async function checkRemoteOrigin(config) {
                 : [];
             if (remotes.includes(remoteOrigin)) {
                 return {
-                    name: 'Git remote origin',
+                    name: CHECK_GIT_REMOTE_ORIGIN,
                     passed: true,
                     message: `Remote '${remoteOrigin}' exists`,
                 };
@@ -822,7 +843,7 @@ async function checkRemoteOrigin(config) {
             else {
                 const availableRemotes = remotes.join(', ') || '(none)';
                 return {
-                    name: 'Git remote origin',
+                    name: CHECK_GIT_REMOTE_ORIGIN,
                     passed: false,
                     message: `Configured remote '${remoteOrigin}' does not exist. Available: ${availableRemotes}`,
                     suggestion: `Add remote: git remote add ${remoteOrigin} <url> OR update config to use existing remote (e.g., 'origin')`,
@@ -832,7 +853,7 @@ async function checkRemoteOrigin(config) {
         catch (error) {
             const errorMessage = error instanceof Error ? error.message : String(error);
             return {
-                name: 'Git remote origin',
+                name: CHECK_GIT_REMOTE_ORIGIN,
                 passed: false,
                 message: `Failed to list git remotes: ${errorMessage}`,
                 suggestion: 'Verify git repository is initialized',
@@ -842,7 +863,7 @@ async function checkRemoteOrigin(config) {
     catch (error) {
         const errorMessage = error instanceof Error ? error.message : String(error);
         return {
-            name: 'Git remote origin',
+            name: CHECK_GIT_REMOTE_ORIGIN,
             passed: true,
             message: `Skipped (config or git error): ${errorMessage}`,
         };
@@ -855,9 +876,9 @@ async function checkRemoteMainBranch(config) {
     try {
         if (!config) {
             return {
-                name: 'Git remote main branch',
+                name: CHECK_GIT_REMOTE_MAIN_BRANCH,
                 passed: true,
-                message: 'Skipped (no config)',
+                message: MSG_SKIPPED_NO_CONFIG,
             };
         }
         const mainBranch = getMainBranch(config.git);
@@ -870,7 +891,7 @@ async function checkRemoteMainBranch(config) {
                 : [];
             if (!remotes.includes(remoteOrigin)) {
                 return {
-                    name: 'Git remote main branch',
+                    name: CHECK_GIT_REMOTE_MAIN_BRANCH,
                     passed: true,
                     message: `Skipped (remote '${remoteOrigin}' not configured)`,
                 };
@@ -881,7 +902,7 @@ async function checkRemoteMainBranch(config) {
                 throw new Error(`Failed to check remote branch: ${lsRemoteResult.stderr}`);
             }
             return {
-                name: 'Git remote main branch',
+                name: CHECK_GIT_REMOTE_MAIN_BRANCH,
                 passed: true,
                 message: `Branch '${mainBranch}' exists on remote '${remoteOrigin}'`,
             };
@@ -889,7 +910,7 @@ async function checkRemoteMainBranch(config) {
         catch (error) {
             const errorMessage = error instanceof Error ? error.message : String(error);
             return {
-                name: 'Git remote main branch',
+                name: CHECK_GIT_REMOTE_MAIN_BRANCH,
                 passed: false,
                 message: `Branch '${mainBranch}' does not exist on remote '${remoteOrigin}': ${errorMessage}`,
                 suggestion: `Push branch: git push ${remoteOrigin} ${mainBranch} OR update config to match remote branch name`,
@@ -899,7 +920,7 @@ async function checkRemoteMainBranch(config) {
     catch (error) {
         const errorMessage = error instanceof Error ? error.message : String(error);
         return {
-            name: 'Git remote main branch',
+            name: CHECK_GIT_REMOTE_MAIN_BRANCH,
             passed: true,
             message: `Skipped (config or git error): ${errorMessage}`,
         };
@@ -912,15 +933,15 @@ async function checkSecretScanning(config) {
     try {
         if (!config) {
             return {
-                name: 'Pre-commit secret scanning',
+                name: CHECK_PRE_COMMIT_SECRET_SCANNING,
                 passed: true,
-                message: 'Skipped (no config)',
+                message: MSG_SKIPPED_NO_CONFIG,
             };
         }
         const secretScanning = config.hooks?.preCommit?.secretScanning;
         if (!secretScanning) {
             return {
-                name: 'Pre-commit secret scanning',
+                name: CHECK_PRE_COMMIT_SECRET_SCANNING,
                 passed: true,
                 message: 'Secret scanning not configured',
                 suggestion: 'Recommended: Enable secret scanning to prevent credential leaks\n   • Add to config: hooks.preCommit.secretScanning.enabled=true\n   • Install gitleaks: brew install gitleaks\n   • Or add .secretlintrc.json for npm-based scanning',
@@ -928,7 +949,7 @@ async function checkSecretScanning(config) {
         }
         if (secretScanning.enabled === false) {
             return {
-                name: 'Pre-commit secret scanning',
+                name: CHECK_PRE_COMMIT_SECRET_SCANNING,
                 passed: true,
                 message: 'Secret scanning disabled in config (user preference)',
             };
@@ -940,7 +961,7 @@ async function checkSecretScanning(config) {
             const pm = detectPackageManager(process.cwd());
             const secretlintInstall = getDevInstallCommand(pm, '@secretlint/secretlint-rule-preset-recommend secretlint');
             return {
-                name: 'Pre-commit secret scanning',
+                name: CHECK_PRE_COMMIT_SECRET_SCANNING,
                 passed: true,
                 message: 'Secret scanning enabled but no tools available',
                 suggestion: `Install a secret scanning tool:\n   • gitleaks: brew install gitleaks\n   • secretlint: ${secretlintInstall}\n   • Or add config files: .gitleaks.toml or .secretlintrc.json`,
@@ -974,7 +995,7 @@ async function checkSecretScanning(config) {
         const gitleaks = availableTools.find(t => t.tool === 'gitleaks');
         if (gitleaks?.hasConfig && !gitleaks.available) {
             return {
-                name: 'Pre-commit secret scanning',
+                name: CHECK_PRE_COMMIT_SECRET_SCANNING,
                 passed: true,
                 message,
                 suggestion: 'Install gitleaks for better performance: brew install gitleaks',
@@ -984,14 +1005,14 @@ async function checkSecretScanning(config) {
         const hasGitleaksAvailable = availableTools.some(t => t.tool === 'gitleaks' && t.available);
         if (!hasGitleaksAvailable && toolsToRun.some(t => t.tool === 'secretlint')) {
             return {
-                name: 'Pre-commit secret scanning',
+                name: CHECK_PRE_COMMIT_SECRET_SCANNING,
                 passed: true,
                 message,
                 suggestion: 'Consider installing gitleaks for faster scanning: brew install gitleaks',
             };
         }
         return {
-            name: 'Pre-commit secret scanning',
+            name: CHECK_PRE_COMMIT_SECRET_SCANNING,
             passed: true,
             message,
         };
@@ -999,7 +1020,7 @@ async function checkSecretScanning(config) {
     catch (error) {
         const errorMessage = error instanceof Error ? error.message : String(error);
         return {
-            name: 'Pre-commit secret scanning',
+            name: CHECK_PRE_COMMIT_SECRET_SCANNING,
             passed: true,
             message: `Skipped (config or execution error): ${errorMessage}`,
         };