commit-cop 1.0.0

package/README.md

@@ -0,0 +1,62 @@
+# CommitClean
+
+CommitClean is a pre-commit safety checker that scans your **staged files** and warns you about common mistakes before they get pushed to GitHub.
+
+Built for students, hackathons, and dev teams who want practical guardrails—not just formatting checks.
+
+## What it checks
+
+| Check | Severity | What it catches |
+| --- | --- | --- |
+| Environment files | Error | `.env`, `.env.local`, and other `.env.*` files |
+| Generated folders | Error | `node_modules/`, `dist/`, `build/`, `.next/`, `coverage/` |
+| Secrets | Error | API keys, JWT secrets, database URLs, and similar patterns |
+| Focused tests | Error | `test.only`, `it.only`, `describe.only` left in test files |
+| Debug logs | Warning | `console.log` in staged JS/TS code |
+| Localhost URLs | Warning | Hardcoded `localhost` or `127.0.0.1` URLs |
+| Large files | Warning | Staged files over 5 MB |
+
+Errors block the commit. Warnings are reported but do not block unless you use `--strict`.
+
+## Usage
+
+Run inside a Git repository with staged changes:
+
+```bash
+npm install
+npm run commitclean
+```
+
+Treat warnings as errors:
+
+```bash
+npm run commitclean -- --strict
+```
+
+Build and run the compiled CLI:
+
+```bash
+npm run build
+npm start
+```
+
+## Project structure
+
+```
+src/
+  index.ts       CLI entry point
+  git.ts         Reads staged files from Git
+  scanner.ts     Runs all checks
+  reporter.ts    Prints the report
+  types.ts       Shared types
+  checks/        One file per check
+```
+
+Each check implements the same interface: receive staged files, return findings with a message and suggested fix.
+
+## How it works
+
+1. Read staged file paths with `git diff --cached --name-only`
+2. Run every check in `src/checks/`
+3. Print a summary with file locations and fix suggestions
+4. Exit with code `1` if errors are found (or warnings in strict mode)

package/dist/checks/consoleLogCheck.d.ts

@@ -0,0 +1,3 @@
+import type { Check } from "../types.js";
+export declare const consoleLogCheck: Check;
+//# sourceMappingURL=consoleLogCheck.d.ts.map

package/dist/checks/consoleLogCheck.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consoleLogCheck.d.ts","sourceRoot":"","sources":["../../src/checks/consoleLogCheck.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAW,MAAM,aAAa,CAAC;AAQlD,eAAO,MAAM,eAAe,EAAE,KA6B7B,CAAC"}

package/dist/checks/consoleLogCheck.js

@@ -0,0 +1,33 @@
+import fs from "node:fs";
+const codeExtensions = [".js", ".jsx", ".ts", ".tsx"];
+function isCodeFile(file) {
+    return codeExtensions.some((ext) => file.endsWith(ext));
+}
+export const consoleLogCheck = {
+    name: "console-log-check",
+    async run(context) {
+        const findings = [];
+        for (const file of context.stagedFiles) {
+            if (!isCodeFile(file))
+                continue;
+            if (!fs.existsSync(file))
+                continue;
+            const content = fs.readFileSync(file, "utf-8");
+            const lines = content.split("\n");
+            lines.forEach((line, index) => {
+                if (line.includes("console.log")) {
+                    findings.push({
+                        severity: "warning",
+                        checkName: this.name,
+                        file,
+                        line: index + 1,
+                        message: "console.log found in staged code.",
+                        suggestion: "Remove debug logs before committing.",
+                    });
+                }
+            });
+        }
+        return findings;
+    },
+};
+//# sourceMappingURL=consoleLogCheck.js.map

package/dist/checks/consoleLogCheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consoleLogCheck.js","sourceRoot":"","sources":["../../src/checks/consoleLogCheck.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAGzB,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAEtD,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAU;IACpC,IAAI,EAAE,mBAAmB;IAEzB,KAAK,CAAC,GAAG,CAAC,OAAO;QACf,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YAChC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;oBACjC,QAAQ,CAAC,IAAI,CAAC;wBACZ,QAAQ,EAAE,SAAS;wBACnB,SAAS,EAAE,IAAI,CAAC,IAAI;wBACpB,IAAI;wBACJ,IAAI,EAAE,KAAK,GAAG,CAAC;wBACf,OAAO,EAAE,mCAAmC;wBAC5C,UAAU,EAAE,sCAAsC;qBACnD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/dist/checks/envFileCheck.d.ts

@@ -0,0 +1,3 @@
+import type { Check } from "../types.js";
+export declare const envFileCheck: Check;
+//# sourceMappingURL=envFileCheck.d.ts.map

package/dist/checks/envFileCheck.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envFileCheck.d.ts","sourceRoot":"","sources":["../../src/checks/envFileCheck.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAW,MAAM,aAAa,CAAC;AAElD,eAAO,MAAM,YAAY,EAAE,KAsB1B,CAAC"}

package/dist/checks/envFileCheck.js

@@ -0,0 +1,20 @@
+export const envFileCheck = {
+    name: "env-file-check",
+    async run(context) {
+        const findings = [];
+        for (const file of context.stagedFiles) {
+            const fileName = file.split("/").pop() ?? "";
+            if (fileName === ".env" || fileName.startsWith(".env.")) {
+                findings.push({
+                    severity: "error",
+                    checkName: this.name,
+                    file,
+                    message: "Environment file is staged and may contain secrets.",
+                    suggestion: `Run: git restore --staged ${file}`,
+                });
+            }
+        }
+        return findings;
+    },
+};
+//# sourceMappingURL=envFileCheck.js.map

package/dist/checks/envFileCheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envFileCheck.js","sourceRoot":"","sources":["../../src/checks/envFileCheck.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,YAAY,GAAU;IACjC,IAAI,EAAE,gBAAgB;IAEtB,KAAK,CAAC,GAAG,CAAC,OAAO;QACf,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YAE7C,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxD,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAE,OAAO;oBACjB,SAAS,EAAE,IAAI,CAAC,IAAI;oBACpB,IAAI;oBACJ,OAAO,EAAE,qDAAqD;oBAC9D,UAAU,EAAE,6BAA6B,IAAI,EAAE;iBAChD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/dist/checks/focusedTestCheck.d.ts

@@ -0,0 +1,3 @@
+import type { Check } from "../types.js";
+export declare const focusedTestCheck: Check;
+//# sourceMappingURL=focusedTestCheck.d.ts.map

package/dist/checks/focusedTestCheck.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"focusedTestCheck.d.ts","sourceRoot":"","sources":["../../src/checks/focusedTestCheck.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAW,MAAM,aAAa,CAAC;AAQlD,eAAO,MAAM,gBAAgB,EAAE,KA+B9B,CAAC"}

package/dist/checks/focusedTestCheck.js

@@ -0,0 +1,36 @@
+import fs from "node:fs";
+const testPatterns = [
+    "test.only",
+    "it.only",
+    "describe.only",
+];
+export const focusedTestCheck = {
+    name: "focused-test-check",
+    async run(context) {
+        const findings = [];
+        for (const file of context.stagedFiles) {
+            if (!file.includes("test") && !file.includes("spec"))
+                continue;
+            if (!fs.existsSync(file))
+                continue;
+            const content = fs.readFileSync(file, "utf-8");
+            const lines = content.split("\n");
+            lines.forEach((line, index) => {
+                for (const pattern of testPatterns) {
+                    if (line.includes(pattern)) {
+                        findings.push({
+                            severity: "error",
+                            checkName: this.name,
+                            file,
+                            line: index + 1,
+                            message: `${pattern} found. This may skip the rest of the test suite.`,
+                            suggestion: `Replace ${pattern} with the normal test function.`,
+                        });
+                    }
+                }
+            });
+        }
+        return findings;
+    },
+};
+//# sourceMappingURL=focusedTestCheck.js.map

package/dist/checks/focusedTestCheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"focusedTestCheck.js","sourceRoot":"","sources":["../../src/checks/focusedTestCheck.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAGzB,MAAM,YAAY,GAAG;IACnB,WAAW;IACX,SAAS;IACT,eAAe;CAChB,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAU;IACrC,IAAI,EAAE,oBAAoB;IAE1B,KAAK,CAAC,GAAG,CAAC,OAAO;QACf,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC/D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC5B,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;oBACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC3B,QAAQ,CAAC,IAAI,CAAC;4BACZ,QAAQ,EAAE,OAAO;4BACjB,SAAS,EAAE,IAAI,CAAC,IAAI;4BACpB,IAAI;4BACJ,IAAI,EAAE,KAAK,GAAG,CAAC;4BACf,OAAO,EAAE,GAAG,OAAO,mDAAmD;4BACtE,UAAU,EAAE,WAAW,OAAO,iCAAiC;yBAChE,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/dist/checks/generatedFolderCheck.d.ts

@@ -0,0 +1,3 @@
+import type { Check } from "../types.js";
+export declare const generatedFolderCheck: Check;
+//# sourceMappingURL=generatedFolderCheck.d.ts.map

package/dist/checks/generatedFolderCheck.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generatedFolderCheck.d.ts","sourceRoot":"","sources":["../../src/checks/generatedFolderCheck.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAW,MAAM,aAAa,CAAC;AAUlD,eAAO,MAAM,oBAAoB,EAAE,KA0BlC,CAAC"}

package/dist/checks/generatedFolderCheck.js

@@ -0,0 +1,28 @@
+const blockedFolders = [
+    "node_modules/",
+    "dist/",
+    "build/",
+    ".next/",
+    "coverage/",
+];
+export const generatedFolderCheck = {
+    name: "generated-folder-check",
+    async run(context) {
+        const findings = [];
+        for (const file of context.stagedFiles) {
+            const normalized = file.replaceAll("\\", "/");
+            const matchedFolder = blockedFolders.find((folder) => normalized.startsWith(folder));
+            if (matchedFolder) {
+                findings.push({
+                    severity: "error",
+                    checkName: this.name,
+                    file,
+                    message: `${matchedFolder} is staged but is usually generated and should not be committed.`,
+                    suggestion: `Add ${matchedFolder} to .gitignore and run: git restore --staged ${file}`,
+                });
+            }
+        }
+        return findings;
+    },
+};
+//# sourceMappingURL=generatedFolderCheck.js.map

package/dist/checks/generatedFolderCheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generatedFolderCheck.js","sourceRoot":"","sources":["../../src/checks/generatedFolderCheck.ts"],"names":[],"mappings":"AAEA,MAAM,cAAc,GAAG;IACrB,eAAe;IACf,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,WAAW;CACZ,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAU;IACzC,IAAI,EAAE,wBAAwB;IAE9B,KAAK,CAAC,GAAG,CAAC,OAAO;QACf,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAE9C,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACnD,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAC9B,CAAC;YAEF,IAAI,aAAa,EAAE,CAAC;gBAClB,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAE,OAAO;oBACjB,SAAS,EAAE,IAAI,CAAC,IAAI;oBACpB,IAAI;oBACJ,OAAO,EAAE,GAAG,aAAa,kEAAkE;oBAC3F,UAAU,EAAE,OAAO,aAAa,gDAAgD,IAAI,EAAE;iBACvF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/dist/checks/largeFileCheck.d.ts

@@ -0,0 +1,3 @@
+import type { Check } from "../types.js";
+export declare const largeFileCheck: Check;
+//# sourceMappingURL=largeFileCheck.d.ts.map

package/dist/checks/largeFileCheck.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"largeFileCheck.d.ts","sourceRoot":"","sources":["../../src/checks/largeFileCheck.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAW,MAAM,aAAa,CAAC;AAIlD,eAAO,MAAM,cAAc,EAAE,KAyB5B,CAAC"}

package/dist/checks/largeFileCheck.js

@@ -0,0 +1,25 @@
+import fs from "node:fs";
+const MAX_SIZE_MB = 5;
+export const largeFileCheck = {
+    name: "large-file-check",
+    async run(context) {
+        const findings = [];
+        for (const file of context.stagedFiles) {
+            if (!fs.existsSync(file))
+                continue;
+            const stats = fs.statSync(file);
+            const sizeMb = stats.size / 1024 / 1024;
+            if (sizeMb > MAX_SIZE_MB) {
+                findings.push({
+                    severity: "warning",
+                    checkName: this.name,
+                    file,
+                    message: `Large file staged: ${sizeMb.toFixed(2)} MB.`,
+                    suggestion: "Consider removing this file from Git or using Git LFS.",
+                });
+            }
+        }
+        return findings;
+    },
+};
+//# sourceMappingURL=largeFileCheck.js.map

package/dist/checks/largeFileCheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"largeFileCheck.js","sourceRoot":"","sources":["../../src/checks/largeFileCheck.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAGzB,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB,MAAM,CAAC,MAAM,cAAc,GAAU;IACnC,IAAI,EAAE,kBAAkB;IAExB,KAAK,CAAC,GAAG,CAAC,OAAO;QACf,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEnC,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;YAExC,IAAI,MAAM,GAAG,WAAW,EAAE,CAAC;gBACzB,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAE,SAAS;oBACnB,SAAS,EAAE,IAAI,CAAC,IAAI;oBACpB,IAAI;oBACJ,OAAO,EAAE,sBAAsB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;oBACtD,UAAU,EAAE,wDAAwD;iBACrE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/dist/checks/localHostCheck.d.ts

@@ -0,0 +1,3 @@
+import type { Check } from "../types.ts";
+export declare const localHostCheck: Check;
+//# sourceMappingURL=localHostCheck.d.ts.map

package/dist/checks/localHostCheck.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"localHostCheck.d.ts","sourceRoot":"","sources":["../../src/checks/localHostCheck.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAW,MAAM,aAAa,CAAC;AAQlD,eAAO,MAAM,cAAc,EAAE,KA8B5B,CAAC"}

package/dist/checks/localHostCheck.js

@@ -0,0 +1,34 @@
+import fs from "node:fs";
+const patterns = [
+    "http://localhost",
+    "https://localhost",
+    "127.0.0.1",
+];
+export const localHostCheck = {
+    name: "localhost-check",
+    async run(context) {
+        const findings = [];
+        for (const file of context.stagedFiles) {
+            if (!fs.existsSync(file))
+                continue;
+            const content = fs.readFileSync(file, "utf-8");
+            const lines = content.split("\n");
+            lines.forEach((line, index) => {
+                for (const pattern of patterns) {
+                    if (line.includes(pattern)) {
+                        findings.push({
+                            severity: "warning",
+                            checkName: this.name,
+                            file,
+                            line: index + 1,
+                            message: `Hardcoded local URL found: ${pattern}`,
+                            suggestion: "Use an environment variable instead of a hardcoded localhost URL.",
+                        });
+                    }
+                }
+            });
+        }
+        return findings;
+    },
+};
+//# sourceMappingURL=localHostCheck.js.map

package/dist/checks/localHostCheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localHostCheck.js","sourceRoot":"","sources":["../../src/checks/localHostCheck.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAGzB,MAAM,QAAQ,GAAG;IACf,kBAAkB;IAClB,mBAAmB;IACnB,WAAW;CACZ,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAU;IACnC,IAAI,EAAE,iBAAiB;IAEvB,KAAK,CAAC,GAAG,CAAC,OAAO;QACf,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC5B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;oBAC/B,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC3B,QAAQ,CAAC,IAAI,CAAC;4BACZ,QAAQ,EAAE,SAAS;4BACnB,SAAS,EAAE,IAAI,CAAC,IAAI;4BACpB,IAAI;4BACJ,IAAI,EAAE,KAAK,GAAG,CAAC;4BACf,OAAO,EAAE,8BAA8B,OAAO,EAAE;4BAChD,UAAU,EAAE,mEAAmE;yBAChF,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/dist/checks/secretCheck.d.ts

@@ -0,0 +1,3 @@
+import type { Check } from "../types.js";
+export declare const secretCheck: Check;
+//# sourceMappingURL=secretCheck.d.ts.map

package/dist/checks/secretCheck.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretCheck.d.ts","sourceRoot":"","sources":["../../src/checks/secretCheck.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAW,MAAM,aAAa,CAAC;AAYlD,eAAO,MAAM,WAAW,EAAE,KA8BzB,CAAC"}

package/dist/checks/secretCheck.js

@@ -0,0 +1,38 @@
+import fs from "node:fs";
+const secretPatterns = [
+    /OPENAI_API_KEY\s*=/i,
+    /DATABASE_URL\s*=/i,
+    /JWT_SECRET\s*=/i,
+    /AUTH_SECRET\s*=/i,
+    /PRIVATE_KEY\s*=/i,
+    /SECRET_KEY\s*=/i,
+    /sk-[A-Za-z0-9_-]{20,}/,
+];
+export const secretCheck = {
+    name: "secret-check",
+    async run(context) {
+        const findings = [];
+        for (const file of context.stagedFiles) {
+            if (!fs.existsSync(file))
+                continue;
+            const content = fs.readFileSync(file, "utf-8");
+            const lines = content.split("\n");
+            lines.forEach((line, index) => {
+                for (const pattern of secretPatterns) {
+                    if (pattern.test(line)) {
+                        findings.push({
+                            severity: "error",
+                            checkName: this.name,
+                            file,
+                            line: index + 1,
+                            message: "Possible secret found in staged file.",
+                            suggestion: "Remove the secret and rotate it if it was already pushed.",
+                        });
+                    }
+                }
+            });
+        }
+        return findings;
+    },
+};
+//# sourceMappingURL=secretCheck.js.map

package/dist/checks/secretCheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretCheck.js","sourceRoot":"","sources":["../../src/checks/secretCheck.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAGzB,MAAM,cAAc,GAAG;IACrB,qBAAqB;IACrB,mBAAmB;IACnB,iBAAiB;IACjB,kBAAkB;IAClB,kBAAkB;IAClB,iBAAiB;IACjB,uBAAuB;CACxB,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAU;IAChC,IAAI,EAAE,cAAc;IAEpB,KAAK,CAAC,GAAG,CAAC,OAAO;QACf,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC5B,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;oBACrC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBACvB,QAAQ,CAAC,IAAI,CAAC;4BACZ,QAAQ,EAAE,OAAO;4BACjB,SAAS,EAAE,IAAI,CAAC,IAAI;4BACpB,IAAI;4BACJ,IAAI,EAAE,KAAK,GAAG,CAAC;4BACf,OAAO,EAAE,uCAAuC;4BAChD,UAAU,EAAE,2DAA2D;yBACxE,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/dist/git.d.ts

@@ -0,0 +1,2 @@
+export declare function getStagedFiles(): string[];
+//# sourceMappingURL=git.d.ts.map

package/dist/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAEA,wBAAgB,cAAc,IAAI,MAAM,EAAE,CAazC"}

package/dist/git.js

@@ -0,0 +1,16 @@
+import { execSync } from "node:child_process";
+export function getStagedFiles() {
+    try {
+        const output = execSync("git diff --cached --name-only", {
+            encoding: "utf-8",
+        });
+        return output
+            .split("\n")
+            .map((file) => file.trim())
+            .filter(Boolean);
+    }
+    catch {
+        throw new Error("CommitClean must be run inside a Git repository.");
+    }
+}
+//# sourceMappingURL=git.js.map

package/dist/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,+BAA+B,EAAE;YACvD,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QAEH,OAAO,MAAM;aACV,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+import { Command } from "commander";
+import { getStagedFiles } from "./git.js";
+import { runChecks } from "./scanner.js";
+import { printReport } from "./reporter.js";
+const program = new Command();
+program
+    .name("commitclean")
+    .description("Pre-commit safety checker for staged files")
+    .option("--strict", "Treat warnings as errors")
+    .action(async (options) => {
+    const stagedFiles = getStagedFiles();
+    if (stagedFiles.length === 0) {
+        console.log("No staged files found.");
+        return;
+    }
+    const findings = await runChecks({
+        stagedFiles,
+        strict: Boolean(options.strict),
+    });
+    printReport(findings, stagedFiles.length);
+    const hasErrors = findings.some((finding) => finding.severity === "error");
+    const hasWarnings = findings.some((finding) => finding.severity === "warning");
+    if (hasErrors || (options.strict && hasWarnings)) {
+        process.exit(1);
+    }
+    process.exit(0);
+});
+program.parse();
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,aAAa,CAAC;KACnB,WAAW,CAAC,4CAA4C,CAAC;KACzD,MAAM,CAAC,UAAU,EAAE,0BAA0B,CAAC;KAC9C,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IAErC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC;QAC/B,WAAW;QACX,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;KAChC,CAAC,CAAC;IAEH,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAE1C,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAC/B,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAC5C,CAAC;IAEF,IAAI,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,EAAE,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/reporter.d.ts

@@ -0,0 +1,3 @@
+import type { Finding } from "./types.js";
+export declare function printReport(findings: Finding[], scannedCount: number): void;
+//# sourceMappingURL=reporter.d.ts.map

package/dist/reporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reporter.d.ts","sourceRoot":"","sources":["../src/reporter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C,wBAAgB,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,QA+BpE"}

package/dist/reporter.js

@@ -0,0 +1,38 @@
+import chalk from "chalk";
+export function printReport(findings, scannedCount) {
+    console.log(chalk.bold("\nCommitClean Report\n"));
+    console.log(`Scanned ${scannedCount} staged file(s).\n`);
+    const errors = findings.filter((f) => f.severity === "error");
+    const warnings = findings.filter((f) => f.severity === "warning");
+    console.log(chalk.red(`Errors: ${errors.length}`));
+    console.log(chalk.yellow(`Warnings: ${warnings.length}`));
+    console.log("");
+    if (findings.length === 0) {
+        console.log(chalk.green("✅ No issues found. Commit looks clean.\n"));
+        return;
+    }
+    if (errors.length > 0) {
+        console.log(chalk.red.bold("❌ Errors"));
+        for (const finding of errors) {
+            printFinding(finding);
+        }
+    }
+    if (warnings.length > 0) {
+        console.log(chalk.yellow.bold("\n⚠️ Warnings"));
+        for (const finding of warnings) {
+            printFinding(finding);
+        }
+    }
+    console.log("");
+}
+function printFinding(finding) {
+    const location = finding.line
+        ? `${finding.file}:${finding.line}`
+        : finding.file;
+    console.log(`- ${chalk.bold(location)}`);
+    console.log(`  ${finding.message}`);
+    if (finding.suggestion) {
+        console.log(chalk.gray(`  Fix: ${finding.suggestion}`));
+    }
+}
+//# sourceMappingURL=reporter.js.map

package/dist/reporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reporter.js","sourceRoot":"","sources":["../src/reporter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,MAAM,UAAU,WAAW,CAAC,QAAmB,EAAE,YAAoB;IACnE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,WAAW,YAAY,oBAAoB,CAAC,CAAC;IAEzD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAElE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QACxC,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7B,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;QAChD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,OAAgB;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI;QAC3B,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE;QACnC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAEjB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAEpC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC"}

package/dist/scanner.d.ts

@@ -0,0 +1,3 @@
+import type { CheckContext, Finding } from "./types.js";
+export declare function runChecks(context: CheckContext): Promise<Finding[]>;
+//# sourceMappingURL=scanner.d.ts.map

package/dist/scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAmBxD,wBAAsB,SAAS,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CASzE"}

package/dist/scanner.js

@@ -0,0 +1,25 @@
+import { envFileCheck } from "./checks/envFileCheck.js";
+import { generatedFolderCheck } from "./checks/generatedFolderCheck.js";
+import { consoleLogCheck } from "./checks/consoleLogCheck.js";
+import { focusedTestCheck } from "./checks/focusedTestCheck.js";
+import { localHostCheck } from "./checks/localHostCheck.js";
+import { largeFileCheck } from "./checks/largeFileCheck.js";
+import { secretCheck } from "./checks/secretCheck.js";
+const checks = [
+    envFileCheck,
+    generatedFolderCheck,
+    secretCheck,
+    focusedTestCheck,
+    consoleLogCheck,
+    localHostCheck,
+    largeFileCheck,
+];
+export async function runChecks(context) {
+    const allFindings = [];
+    for (const check of checks) {
+        const findings = await check.run(context);
+        allFindings.push(...findings);
+    }
+    return allFindings;
+}
+//# sourceMappingURL=scanner.js.map

package/dist/scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,MAAM,MAAM,GAAG;IACb,YAAY;IACZ,oBAAoB;IACpB,WAAW;IACX,gBAAgB;IAChB,eAAe;IACf,cAAc;IACd,cAAc;CACf,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAqB;IACnD,MAAM,WAAW,GAAc,EAAE,CAAC;IAElC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1C,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,18 @@
+export type Severity = "error" | "warning" | "info";
+export type Finding = {
+    severity: Severity;
+    checkName: string;
+    file: string;
+    line?: number;
+    message: string;
+    suggestion?: string;
+};
+export type CheckContext = {
+    stagedFiles: string[];
+    strict: boolean;
+};
+export type Check = {
+    name: string;
+    run: (context: CheckContext) => Promise<Finding[]>;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AAEpD,MAAM,MAAM,OAAO,GAAG;IACpB,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,KAAK,GAAG;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;CACpD,CAAC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "commit-cop",
+  "version": "1.0.0",
+  "description": "A pre-commit safety checker that scans staged files for risky commits.",
+  "type": "module",
+  "bin": {
+    "commitclean": "./dist/index.js"
+  },
+  "scripts": {
+    "dev": "tsx src/index.ts",
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "commitclean": "tsx src/index.ts"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/KhalidM23/UhackathonTheDinhs.git"
+  },
+  "keywords": [
+    "cli",
+    "git",
+    "pre-commit",
+    "developer-tools",
+    "commit-checker"
+  ],
+  "author": "",
+  "license": "ISC",
+  "bugs": {
+    "url": "https://github.com/KhalidM23/UhackathonTheDinhs/issues"
+  },
+  "homepage": "https://github.com/KhalidM23/UhackathonTheDinhs#readme",
+  "devDependencies": {
+    "@types/node": "^25.9.1",
+    "tsx": "^4.22.3",
+    "typescript": "^6.0.3"
+  },
+  "dependencies": {
+    "chalk": "^5.6.2",
+    "commander": "^14.0.3"
+  }
+}

package/src/checks/consoleLogCheck.ts

@@ -0,0 +1,39 @@
+import fs from "node:fs";
+import type { Check, Finding } from "../types.js";
+
+const codeExtensions = [".js", ".jsx", ".ts", ".tsx"];
+
+function isCodeFile(file: string): boolean {
+  return codeExtensions.some((ext) => file.endsWith(ext));
+}
+
+export const consoleLogCheck: Check = {
+  name: "console-log-check",
+
+  async run(context) {
+    const findings: Finding[] = [];
+
+    for (const file of context.stagedFiles) {
+      if (!isCodeFile(file)) continue;
+      if (!fs.existsSync(file)) continue;
+
+      const content = fs.readFileSync(file, "utf-8");
+      const lines = content.split("\n");
+
+      lines.forEach((line, index) => {
+        if (line.includes("console.log")) {
+          findings.push({
+            severity: "warning",
+            checkName: this.name,
+            file,
+            line: index + 1,
+            message: "console.log found in staged code.",
+            suggestion: "Remove debug logs before committing.",
+          });
+        }
+      });
+    }
+
+    return findings;
+  },
+};

package/src/checks/envFileCheck.ts

@@ -0,0 +1,25 @@
+import type { Check, Finding } from "../types.js";
+
+export const envFileCheck: Check = {
+  name: "env-file-check",
+
+  async run(context) {
+    const findings: Finding[] = [];
+
+    for (const file of context.stagedFiles) {
+      const fileName = file.split("/").pop() ?? "";
+
+      if (fileName === ".env" || fileName.startsWith(".env.")) {
+        findings.push({
+          severity: "error",
+          checkName: this.name,
+          file,
+          message: "Environment file is staged and may contain secrets.",
+          suggestion: `Run: git restore --staged ${file}`,
+        });
+      }
+    }
+
+    return findings;
+  },
+};

package/src/checks/focusedTestCheck.ts

@@ -0,0 +1,41 @@
+import fs from "node:fs";
+import type { Check, Finding } from "../types.js";
+
+const testPatterns = [
+  "test.only",
+  "it.only",
+  "describe.only",
+];
+
+export const focusedTestCheck: Check = {
+  name: "focused-test-check",
+
+  async run(context) {
+    const findings: Finding[] = [];
+
+    for (const file of context.stagedFiles) {
+      if (!file.includes("test") && !file.includes("spec")) continue;
+      if (!fs.existsSync(file)) continue;
+
+      const content = fs.readFileSync(file, "utf-8");
+      const lines = content.split("\n");
+
+      lines.forEach((line, index) => {
+        for (const pattern of testPatterns) {
+          if (line.includes(pattern)) {
+            findings.push({
+              severity: "error",
+              checkName: this.name,
+              file,
+              line: index + 1,
+              message: `${pattern} found. This may skip the rest of the test suite.`,
+              suggestion: `Replace ${pattern} with the normal test function.`,
+            });
+          }
+        }
+      });
+    }
+
+    return findings;
+  },
+};

package/src/checks/generatedFolderCheck.ts

@@ -0,0 +1,37 @@
+import type { Check, Finding } from "../types.js";
+
+const blockedFolders = [
+  "node_modules/",
+  "dist/",
+  "build/",
+  ".next/",
+  "coverage/",
+];
+
+export const generatedFolderCheck: Check = {
+  name: "generated-folder-check",
+
+  async run(context) {
+    const findings: Finding[] = [];
+
+    for (const file of context.stagedFiles) {
+      const normalized = file.replaceAll("\\", "/");
+
+      const matchedFolder = blockedFolders.find((folder) =>
+        normalized.startsWith(folder)
+      );
+
+      if (matchedFolder) {
+        findings.push({
+          severity: "error",
+          checkName: this.name,
+          file,
+          message: `${matchedFolder} is staged but is usually generated and should not be committed.`,
+          suggestion: `Add ${matchedFolder} to .gitignore and run: git restore --staged ${file}`,
+        });
+      }
+    }
+
+    return findings;
+  },
+};

package/src/checks/largeFileCheck.ts

@@ -0,0 +1,31 @@
+import fs from "node:fs";
+import type { Check, Finding } from "../types.js";
+
+const MAX_SIZE_MB = 5;
+
+export const largeFileCheck: Check = {
+  name: "large-file-check",
+
+  async run(context) {
+    const findings: Finding[] = [];
+
+    for (const file of context.stagedFiles) {
+      if (!fs.existsSync(file)) continue;
+
+      const stats = fs.statSync(file);
+      const sizeMb = stats.size / 1024 / 1024;
+
+      if (sizeMb > MAX_SIZE_MB) {
+        findings.push({
+          severity: "warning",
+          checkName: this.name,
+          file,
+          message: `Large file staged: ${sizeMb.toFixed(2)} MB.`,
+          suggestion: "Consider removing this file from Git or using Git LFS.",
+        });
+      }
+    }
+
+    return findings;
+  },
+};

package/src/checks/localHostCheck.ts

@@ -0,0 +1,40 @@
+import fs from "node:fs";
+import type { Check, Finding } from "../types.ts";
+
+const patterns = [
+  "http://localhost",
+  "https://localhost",
+  "127.0.0.1",
+];
+
+export const localHostCheck: Check = {
+  name: "localhost-check",
+
+  async run(context) {
+    const findings: Finding[] = [];
+
+    for (const file of context.stagedFiles) {
+      if (!fs.existsSync(file)) continue;
+
+      const content = fs.readFileSync(file, "utf-8");
+      const lines = content.split("\n");
+
+      lines.forEach((line, index) => {
+        for (const pattern of patterns) {
+          if (line.includes(pattern)) {
+            findings.push({
+              severity: "warning",
+              checkName: this.name,
+              file,
+              line: index + 1,
+              message: `Hardcoded local URL found: ${pattern}`,
+              suggestion: "Use an environment variable instead of a hardcoded localhost URL.",
+            });
+          }
+        }
+      });
+    }
+
+    return findings;
+  },
+};

package/src/checks/secretCheck.ts

@@ -0,0 +1,44 @@
+import fs from "node:fs";
+import type { Check, Finding } from "../types.js";
+
+const secretPatterns = [
+  /OPENAI_API_KEY\s*=/i,
+  /DATABASE_URL\s*=/i,
+  /JWT_SECRET\s*=/i,
+  /AUTH_SECRET\s*=/i,
+  /PRIVATE_KEY\s*=/i,
+  /SECRET_KEY\s*=/i,
+  /sk-[A-Za-z0-9_-]{20,}/,
+];
+
+export const secretCheck: Check = {
+  name: "secret-check",
+
+  async run(context) {
+    const findings: Finding[] = [];
+
+    for (const file of context.stagedFiles) {
+      if (!fs.existsSync(file)) continue;
+
+      const content = fs.readFileSync(file, "utf-8");
+      const lines = content.split("\n");
+
+      lines.forEach((line, index) => {
+        for (const pattern of secretPatterns) {
+          if (pattern.test(line)) {
+            findings.push({
+              severity: "error",
+              checkName: this.name,
+              file,
+              line: index + 1,
+              message: "Possible secret found in staged file.",
+              suggestion: "Remove the secret and rotate it if it was already pushed.",
+            });
+          }
+        }
+      });
+    }
+
+    return findings;
+  },
+};

package/src/git.ts

@@ -0,0 +1,16 @@
+import { execSync } from "node:child_process";
+
+export function getStagedFiles(): string[] {
+  try {
+    const output = execSync("git diff --cached --name-only", {
+      encoding: "utf-8",
+    });
+
+    return output
+      .split("\n")
+      .map((file) => file.trim())
+      .filter(Boolean);
+  } catch {
+    throw new Error("CommitClean must be run inside a Git repository.");
+  }
+}

package/src/index.ts

@@ -0,0 +1,41 @@
+#!/usr/bin/env node
+
+import { Command } from "commander";
+import { getStagedFiles } from "./git.js";
+import { runChecks } from "./scanner.js";
+import { printReport } from "./reporter.js";
+
+const program = new Command();
+
+program
+  .name("commitclean")
+  .description("Pre-commit safety checker for staged files")
+  .option("--strict", "Treat warnings as errors")
+  .action(async (options) => {
+    const stagedFiles = getStagedFiles();
+
+    if (stagedFiles.length === 0) {
+      console.log("No staged files found.");
+      return;
+    }
+
+    const findings = await runChecks({
+      stagedFiles,
+      strict: Boolean(options.strict),
+    });
+
+    printReport(findings, stagedFiles.length);
+
+    const hasErrors = findings.some((finding) => finding.severity === "error");
+    const hasWarnings = findings.some(
+      (finding) => finding.severity === "warning"
+    );
+
+    if (hasErrors || (options.strict && hasWarnings)) {
+      process.exit(1);
+    }
+
+    process.exit(0);
+  });
+
+program.parse();

package/src/reporter.ts

@@ -0,0 +1,48 @@
+import chalk from "chalk";
+import type { Finding } from "./types.js";
+
+export function printReport(findings: Finding[], scannedCount: number) {
+  console.log(chalk.bold("\nCommitClean Report\n"));
+  console.log(`Scanned ${scannedCount} staged file(s).\n`);
+
+  const errors = findings.filter((f) => f.severity === "error");
+  const warnings = findings.filter((f) => f.severity === "warning");
+
+  console.log(chalk.red(`Errors: ${errors.length}`));
+  console.log(chalk.yellow(`Warnings: ${warnings.length}`));
+  console.log("");
+
+  if (findings.length === 0) {
+    console.log(chalk.green("✅ No issues found. Commit looks clean.\n"));
+    return;
+  }
+
+  if (errors.length > 0) {
+    console.log(chalk.red.bold("❌ Errors"));
+    for (const finding of errors) {
+      printFinding(finding);
+    }
+  }
+
+  if (warnings.length > 0) {
+    console.log(chalk.yellow.bold("\n⚠️ Warnings"));
+    for (const finding of warnings) {
+      printFinding(finding);
+    }
+  }
+
+  console.log("");
+}
+
+function printFinding(finding: Finding) {
+  const location = finding.line
+    ? `${finding.file}:${finding.line}`
+    : finding.file;
+
+  console.log(`- ${chalk.bold(location)}`);
+  console.log(`  ${finding.message}`);
+
+  if (finding.suggestion) {
+    console.log(chalk.gray(`  Fix: ${finding.suggestion}`));
+  }
+}

package/src/scanner.ts

@@ -0,0 +1,29 @@
+import type { CheckContext, Finding } from "./types.js";
+import { envFileCheck } from "./checks/envFileCheck.js";
+import { generatedFolderCheck } from "./checks/generatedFolderCheck.ts";
+import { consoleLogCheck } from "./checks/consoleLogCheck.ts";
+import { focusedTestCheck } from "./checks/focusedTestCheck.ts";
+import { localHostCheck } from "./checks/localHostCheck.ts";
+import { largeFileCheck } from "./checks/largeFileCheck.ts";
+import { secretCheck } from "./checks/secretCheck.ts";
+
+const checks = [
+  envFileCheck,
+  generatedFolderCheck,
+  secretCheck,
+  focusedTestCheck,
+  consoleLogCheck,
+  localHostCheck,
+  largeFileCheck,
+];
+
+export async function runChecks(context: CheckContext): Promise<Finding[]> {
+  const allFindings: Finding[] = [];
+
+  for (const check of checks) {
+    const findings = await check.run(context);
+    allFindings.push(...findings);
+  }
+
+  return allFindings;
+}

package/src/types.ts

@@ -0,0 +1,20 @@
+export type Severity = "error" | "warning" | "info";
+
+export type Finding = {
+  severity: Severity;
+  checkName: string;
+  file: string;
+  line?: number;
+  message: string;
+  suggestion?: string;
+};
+
+export type CheckContext = {
+  stagedFiles: string[];
+  strict: boolean;
+};
+
+export type Check = {
+  name: string;
+  run: (context: CheckContext) => Promise<Finding[]>;
+};

package/test.ts

@@ -0,0 +1,2 @@
+console.log("Hello, world!");
+console.log("Debug log");

package/tsconfig.json

@@ -0,0 +1,44 @@
+{
+  // Visit https://aka.ms/tsconfig to read more about this file
+  "compilerOptions": {
+    // File Layout
+    "rootDir": "./src",
+    "outDir": "./dist",
+
+    // Environment Settings
+    // See also https://aka.ms/tsconfig/module
+    "module": "nodenext",
+    "allowImportingTsExtensions": true,
+    "rewriteRelativeImportExtensions": true,
+    "target": "esnext",
+    "lib": ["esnext"],
+    "types": ["node"],
+
+    // Other Outputs
+    "sourceMap": true,
+    "declaration": true,
+    "declarationMap": true,
+
+    // Stricter Typechecking Options
+    "noUncheckedIndexedAccess": true,
+    "exactOptionalPropertyTypes": true,
+
+    // Style Options
+    // "noImplicitReturns": true,
+    // "noImplicitOverride": true,
+    // "noUnusedLocals": true,
+    // "noUnusedParameters": true,
+    // "noFallthroughCasesInSwitch": true,
+    // "noPropertyAccessFromIndexSignature": true,
+
+    // Recommended Options
+    "strict": true,
+    "jsx": "react-jsx",
+    "verbatimModuleSyntax": true,
+    "isolatedModules": true,
+    "noUncheckedSideEffectImports": true,
+    "moduleDetection": "force",
+    "skipLibCheck": true,
+  },
+  "include": ["src"]
+}