commit-cop 1.1.0 → 1.1.2

package/src/checks/focusedTestCheck.ts

@@ -1,41 +0,0 @@
-import fs from "node:fs";
-import type { Check, Finding } from "../types.js";
-
-const testPatterns = [
-  "test.only",
-  "it.only",
-  "describe.only",
-];
-
-export const focusedTestCheck: Check = {
-  name: "focused-test-check",
-
-  async run(context) {
-    const findings: Finding[] = [];
-
-    for (const file of context.stagedFiles) {
-      if (!file.includes("test") && !file.includes("spec")) continue;
-      if (!fs.existsSync(file)) continue;
-
-      const content = fs.readFileSync(file, "utf-8");
-      const lines = content.split("\n");
-
-      lines.forEach((line, index) => {
-        for (const pattern of testPatterns) {
-          if (line.includes(pattern)) {
-            findings.push({
-              severity: "error",
-              checkName: this.name,
-              file,
-              line: index + 1,
-              message: `${pattern} detected — only that test will run, hiding failures in the rest of the suite.`,
-              suggestion: `Change ${pattern} back to ${pattern.replace(".only", "")}.`,
-            });
-          }
-        }
-      });
-    }
-
-    return findings;
-  },
-};

package/src/checks/generatedFolderCheck.ts

@@ -1,45 +0,0 @@
-import type { Check, Finding } from "../types.js";
-import { normalizePath } from "./utils.js";
-
-const blockedFolders = [
-  "node_modules/",
-  "dist/",
-  "build/",
-  ".next/",
-  "coverage/",
-];
-
-function matchesBlockedFolder(normalizedPath: string, folder: string): boolean {
-  return (
-    normalizedPath.startsWith(folder) ||
-    normalizedPath.includes(`/${folder}`)
-  );
-}
-
-export const generatedFolderCheck: Check = {
-  name: "generated-folder-check",
-
-  async run(context) {
-    const findings: Finding[] = [];
-
-    for (const file of context.stagedFiles) {
-      const normalized = normalizePath(file);
-
-      const matchedFolder = blockedFolders.find((folder) =>
-        matchesBlockedFolder(normalized, folder)
-      );
-
-      if (matchedFolder) {
-        findings.push({
-          severity: "error",
-          checkName: this.name,
-          file,
-          message: `Generated folder (${matchedFolder}) — auto-built files bloat the repo and cause merge pain.`,
-          suggestion: `Add ${matchedFolder} to .gitignore, then: git restore --staged ${file}`,
-        });
-      }
-    }
-
-    return findings;
-  },
-};

package/src/checks/junkFileCheck.ts

@@ -1,40 +0,0 @@
-import type { Check, Finding } from "../types.js";
-import { getBaseName, matchesAnyPattern } from "./utils.js";
-
-const junkExactNames = new Set([
-  ".ds_store",
-  "thumbs.db",
-  "desktop.ini",
-]);
-
-const junkNamePatterns = [/\.swp$/i, /\.bak$/i, /\.tmp$/i, /~$/];
-
-export const junkFileCheck: Check = {
-  name: "junk-file-check",
-
-  async run(context) {
-    const findings: Finding[] = [];
-
-    for (const file of context.stagedFiles) {
-      const baseName = getBaseName(file);
-      const normalizedBaseName = baseName.toLowerCase();
-
-      const isJunk =
-        junkExactNames.has(normalizedBaseName) ||
-        matchesAnyPattern(baseName, junkNamePatterns);
-
-      if (isJunk) {
-        findings.push({
-          severity: "warning",
-          checkName: this.name,
-          file,
-          message:
-            "OS or editor junk file — adds noise and has no place in the repo.",
-          suggestion: `Unstage it: git restore --staged ${file}`,
-        });
-      }
-    }
-
-    return findings;
-  },
-};

package/src/checks/largeFileCheck.ts

@@ -1,31 +0,0 @@
-import fs from "node:fs";
-import type { Check, Finding } from "../types.js";
-
-const MAX_SIZE_MB = 5;
-
-export const largeFileCheck: Check = {
-  name: "large-file-check",
-
-  async run(context) {
-    const findings: Finding[] = [];
-
-    for (const file of context.stagedFiles) {
-      if (!fs.existsSync(file)) continue;
-
-      const stats = fs.statSync(file);
-      const sizeMb = stats.size / 1024 / 1024;
-
-      if (sizeMb > MAX_SIZE_MB) {
-        findings.push({
-          severity: "warning",
-          checkName: this.name,
-          file,
-          message: `Large file (${sizeMb.toFixed(2)} MB) — slows clones and may hit GitHub's size limits.`,
-          suggestion: "Remove it from Git or use Git LFS for big assets.",
-        });
-      }
-    }
-
-    return findings;
-  },
-};

package/src/checks/localHostCheck.ts

@@ -1,40 +0,0 @@
-import fs from "node:fs";
-import type { Check, Finding } from "../types.ts";
-
-const patterns = [
-  "http://localhost",
-  "https://localhost",
-  "127.0.0.1",
-];
-
-export const localHostCheck: Check = {
-  name: "localhost-check",
-
-  async run(context) {
-    const findings: Finding[] = [];
-
-    for (const file of context.stagedFiles) {
-      if (!fs.existsSync(file)) continue;
-
-      const content = fs.readFileSync(file, "utf-8");
-      const lines = content.split("\n");
-
-      lines.forEach((line, index) => {
-        for (const pattern of patterns) {
-          if (line.includes(pattern)) {
-            findings.push({
-              severity: "warning",
-              checkName: this.name,
-              file,
-              line: index + 1,
-              message: `Hardcoded local URL (${pattern}) — won't work in production or for teammates.`,
-              suggestion: "Move the URL to an environment variable (e.g. process.env.API_URL).",
-            });
-          }
-        }
-      });
-    }
-
-    return findings;
-  },
-};

package/src/checks/lockfileDriftCheck.ts

@@ -1,40 +0,0 @@
-import type { Check, Finding } from "../types.js";
-import { normalizePath } from "./utils.js";
-
-function isStaged(stagedFiles: string[], target: string): boolean {
-  return stagedFiles.some((file) => normalizePath(file) === target);
-}
-
-export const lockfileDriftCheck: Check = {
-  name: "lockfile-drift-check",
-
-  async run(context) {
-    const findings: Finding[] = [];
-    const packageJsonStaged = isStaged(context.stagedFiles, "package.json");
-    const lockfileStaged = isStaged(context.stagedFiles, "package-lock.json");
-
-    if (packageJsonStaged && !lockfileStaged) {
-      findings.push({
-        severity: "warning",
-        checkName: this.name,
-        file: "package.json",
-        message:
-          "package.json changed without its lockfile — teammates may get different dependency versions.",
-        suggestion: "Run npm install, then stage package-lock.json.",
-      });
-    }
-
-    if (lockfileStaged && !packageJsonStaged) {
-      findings.push({
-        severity: "warning",
-        checkName: this.name,
-        file: "package-lock.json",
-        message:
-          "Lockfile changed without package.json — the lockfile may not match your declared dependencies.",
-        suggestion: "Stage package.json too, or unstage package-lock.json.",
-      });
-    }
-
-    return findings;
-  },
-};

package/src/checks/mergeConflictCheck.ts

@@ -1,41 +0,0 @@
-import type { Check, Finding } from "../types.js";
-import { readFileLines, shouldSkipContentScan } from "./utils.js";
-
-const conflictMarkers = ["<<<<<<<", "=======", ">>>>>>>"];
-
-export const mergeConflictCheck: Check = {
-  name: "merge-conflict-check",
-
-  async run(context) {
-    const findings: Finding[] = [];
-
-    for (const file of context.stagedFiles) {
-      if (shouldSkipContentScan(file)) continue;
-
-      const lines = readFileLines(file);
-      if (!lines) continue;
-
-      lines.forEach((line, index) => {
-        const trimmed = line.trim();
-
-        for (const marker of conflictMarkers) {
-          if (trimmed.startsWith(marker)) {
-            findings.push({
-              severity: "error",
-              checkName: this.name,
-              file,
-              line: index + 1,
-              message:
-                "Unresolved merge conflict — this file won't run correctly until fixed.",
-              suggestion:
-                "Resolve the conflict, remove the <<<<<<< / ======= / >>>>>>> markers, then restage.",
-            });
-            return;
-          }
-        }
-      });
-    }
-
-    return findings;
-  },
-};

package/src/checks/secretCheck.ts

@@ -1,60 +0,0 @@
-import type { Check, Finding } from "../types.js";
-import {
-  isCommentLine,
-  isPlaceholderValue,
-  readFileLines,
-  shouldSkipContentScan,
-} from "./utils.js";
-
-const secretRules: { pattern: RegExp; label: string }[] = [
-  { pattern: /OPENAI_API_KEY\s*=/i, label: "OpenAI API key" },
-  { pattern: /DATABASE_URL\s*=/i, label: "database connection string" },
-  { pattern: /JWT_SECRET\s*=/i, label: "JWT secret" },
-  { pattern: /AUTH_SECRET\s*=/i, label: "auth secret" },
-  { pattern: /PRIVATE_KEY\s*=/i, label: "private key" },
-  { pattern: /SECRET_KEY\s*=/i, label: "secret key" },
-  { pattern: /sk-[A-Za-z0-9_-]{20,}/, label: "API key" },
-  { pattern: /ghp_[A-Za-z0-9]{36,}/, label: "GitHub personal access token" },
-  { pattern: /github_pat_[A-Za-z0-9_]+/, label: "GitHub personal access token" },
-  { pattern: /AKIA[0-9A-Z]{16}/, label: "AWS access key" },
-  { pattern: /sk_live_[A-Za-z0-9]+/, label: "Stripe live secret key" },
-  { pattern: /AIza[0-9A-Za-z_-]{35}/, label: "Google API key" },
-  { pattern: /hooks\.slack\.com\/services\//, label: "Slack webhook URL" },
-  { pattern: /password\s*=\s*['"][^'"]{8,}['"]/i, label: "hardcoded password" },
-];
-
-export const secretCheck: Check = {
-  name: "secret-check",
-
-  async run(context) {
-    const findings: Finding[] = [];
-
-    for (const file of context.stagedFiles) {
-      if (shouldSkipContentScan(file)) continue;
-
-      const lines = readFileLines(file);
-      if (!lines) continue;
-
-      lines.forEach((line, index) => {
-        if (isCommentLine(line) || isPlaceholderValue(line)) return;
-
-        for (const rule of secretRules) {
-          if (rule.pattern.test(line)) {
-            findings.push({
-              severity: "error",
-              checkName: this.name,
-              file,
-              line: index + 1,
-              message: `Possible ${rule.label} — credentials pushed to GitHub can be scraped instantly.`,
-              suggestion:
-                "Remove it from the code, unstage the file, and rotate the credential if it was ever pushed.",
-            });
-            return;
-          }
-        }
-      });
-    }
-
-    return findings;
-  },
-};

package/src/checks/sensitiveFilenameCheck.ts

@@ -1,51 +0,0 @@
-import type { Check, Finding } from "../types.js";
-import { getBaseName, matchesAnyPattern, normalizePath } from "./utils.js";
-
-const sensitiveExactNames = new Set([
-  "id_rsa",
-  "id_ed25519",
-  "credentials.json",
-  "serviceaccountkey.json",
-  ".npmrc",
-  ".pypirc",
-]);
-
-const sensitiveNamePatterns = [
-  /\.pem$/i,
-  /\.p12$/i,
-  /\.key$/i,
-  /^firebase-adminsdk.*\.json$/i,
-];
-
-export const sensitiveFilenameCheck: Check = {
-  name: "sensitive-filename-check",
-
-  async run(context) {
-    const findings: Finding[] = [];
-
-    for (const file of context.stagedFiles) {
-      const baseName = getBaseName(file);
-      const normalizedBaseName = baseName.toLowerCase();
-      const normalizedPath = normalizePath(file).toLowerCase();
-
-      const isSensitive =
-        sensitiveExactNames.has(normalizedBaseName) ||
-        matchesAnyPattern(baseName, sensitiveNamePatterns) ||
-        normalizedPath.endsWith("/credentials.json") ||
-        normalizedPath.includes("serviceaccountkey.json");
-
-      if (isSensitive) {
-        findings.push({
-          severity: "error",
-          checkName: this.name,
-          file,
-          message:
-            "Credential or key file detected — private keys and auth config should not be in Git.",
-          suggestion: `Unstage it: git restore --staged ${file}`,
-        });
-      }
-    }
-
-    return findings;
-  },
-};

package/src/checks/utils.ts

@@ -1,62 +0,0 @@
-import fs from "node:fs";
-
-const CODE_EXTENSIONS = [".js", ".jsx", ".ts", ".tsx"];
-
-const SKIP_CONTENT_EXTENSIONS = [".md", ".example", ".sample"];
-
-const PLACEHOLDER_PATTERNS = [
-  /your-api-key/i,
-  /changeme/i,
-  /xxx+/i,
-  /TODO/i,
-  /placeholder/i,
-  /example/i,
-  /replace-me/i,
-];
-
-export function normalizePath(file: string): string {
-  return file.replaceAll("\\", "/");
-}
-
-export function getBaseName(file: string): string {
-  return normalizePath(file).split("/").pop() ?? "";
-}
-
-export function isCodeFile(file: string): boolean {
-  return CODE_EXTENSIONS.some((ext) => file.endsWith(ext));
-}
-
-export function shouldSkipContentScan(file: string): boolean {
-  return SKIP_CONTENT_EXTENSIONS.some((ext) => file.endsWith(ext));
-}
-
-export function readFileLines(file: string): string[] | null {
-  if (!fs.existsSync(file)) return null;
-
-  try {
-    return fs.readFileSync(file, "utf-8").split("\n");
-  } catch {
-    return null;
-  }
-}
-
-export function isCommentLine(line: string): boolean {
-  const trimmed = line.trim();
-  return (
-    trimmed.startsWith("//") ||
-    trimmed.startsWith("#") ||
-    trimmed.startsWith("*") ||
-    trimmed.startsWith("/*")
-  );
-}
-
-export function isPlaceholderValue(line: string): boolean {
-  return PLACEHOLDER_PATTERNS.some((pattern) => pattern.test(line));
-}
-
-export function matchesAnyPattern(
-  value: string,
-  patterns: RegExp[]
-): boolean {
-  return patterns.some((pattern) => pattern.test(value));
-}

package/src/fix/debugCode.ts

@@ -1,74 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-import { isCodeFile } from "../checks/utils.js";
-import { getStagedFiles } from "../git.js";
-import type { WipFixOptions } from "../types.js";
-
-const CONSOLE_LOG_LINE = /^\s*console\.log\([^)]*\);?\s*$/;
-const DEBUGGER_LINE = /^\s*debugger;?\s*$/;
-
-function stripDebugLines(
-  content: string,
-  options: { removeConsoleLog: boolean; removeDebugger: boolean }
-): { updated: string; removed: number } {
-  const lines = content.split("\n");
-  const kept: string[] = [];
-  let removed = 0;
-
-  for (const line of lines) {
-    const isConsoleLog = CONSOLE_LOG_LINE.test(line);
-    const isDebugger = DEBUGGER_LINE.test(line);
-
-    if (
-      (options.removeConsoleLog && isConsoleLog) ||
-      (options.removeDebugger && isDebugger)
-    ) {
-      removed += 1;
-      continue;
-    }
-    kept.push(line);
-  }
-
-  return { updated: kept.join("\n"), removed };
-}
-
-export function fixDebugCode(
-  cwd = process.cwd(),
-  options: WipFixOptions = {}
-): string[] {
-  const removeConsoleLog = Boolean(options.fixConsoleLog);
-  const removeDebugger = true;
-
-  if (!removeConsoleLog && !removeDebugger) {
-    return [];
-  }
-
-  let stagedFiles: string[];
-
-  try {
-    stagedFiles = getStagedFiles();
-  } catch {
-    return [];
-  }
-
-  const fixed: string[] = [];
-
-  for (const file of stagedFiles) {
-    if (!isCodeFile(file)) continue;
-
-    const absolutePath = path.resolve(cwd, file);
-    if (!fs.existsSync(absolutePath)) continue;
-
-    const content = fs.readFileSync(absolutePath, "utf-8");
-    const { updated, removed } = stripDebugLines(content, {
-      removeConsoleLog,
-      removeDebugger,
-    });
-    if (removed === 0) continue;
-
-    fs.writeFileSync(absolutePath, updated, "utf-8");
-    fixed.push(file);
-  }
-
-  return fixed;
-}

package/src/fix/focusedTests.ts

@@ -1,26 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-import { walkCodeFiles } from "./utils.js";
-
-const FOCUSED_TEST_PATTERN = /\b(test|it|describe)\.only\b/g;
-
-function isTestFile(filePath: string): boolean {
-  return filePath.includes("test") || filePath.includes("spec");
-}
-
-export function fixFocusedTests(cwd = process.cwd()): string[] {
-  const files = walkCodeFiles(cwd, isTestFile);
-  const fixed: string[] = [];
-
-  for (const absolutePath of files) {
-    const content = fs.readFileSync(absolutePath, "utf-8");
-    if (!FOCUSED_TEST_PATTERN.test(content)) continue;
-
-    FOCUSED_TEST_PATTERN.lastIndex = 0;
-    const updated = content.replace(FOCUSED_TEST_PATTERN, "$1");
-    fs.writeFileSync(absolutePath, updated, "utf-8");
-    fixed.push(path.relative(cwd, absolutePath));
-  }
-
-  return fixed;
-}

package/src/fix/gitignore.ts

@@ -1,108 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-
-const GITIGNORE_PATH = ".gitignore";
-
-type GitignoreEntry = {
-  line: string;
-  isPresent: (lines: string[]) => boolean;
-};
-
-const entries: GitignoreEntry[] = [
-  {
-    line: ".env",
-    isPresent: (lines) =>
-      lines.some((line) => line === ".env" || line.startsWith(".env")),
-  },
-  {
-    line: "node_modules/",
-    isPresent: (lines) =>
-      lines.some(
-        (line) => line === "node_modules" || line === "node_modules/"
-      ),
-  },
-  {
-    line: "dist/",
-    isPresent: (lines) =>
-      lines.some((line) => line === "dist" || line === "dist/"),
-  },
-  {
-    line: "build/",
-    isPresent: (lines) =>
-      lines.some((line) => line === "build" || line === "build/"),
-  },
-  {
-    line: ".next/",
-    isPresent: (lines) =>
-      lines.some((line) => line === ".next" || line === ".next/"),
-  },
-  {
-    line: "coverage/",
-    isPresent: (lines) =>
-      lines.some((line) => line === "coverage" || line === "coverage/"),
-  },
-  {
-    line: ".DS_Store",
-    isPresent: (lines) =>
-      lines.some((line) => line.toLowerCase() === ".ds_store"),
-  },
-  {
-    line: "Thumbs.db",
-    isPresent: (lines) =>
-      lines.some((line) => line.toLowerCase() === "thumbs.db"),
-  },
-  {
-    line: "desktop.ini",
-    isPresent: (lines) =>
-      lines.some((line) => line.toLowerCase() === "desktop.ini"),
-  },
-  {
-    line: "*.swp",
-    isPresent: (lines) => lines.includes("*.swp"),
-  },
-  {
-    line: "*.bak",
-    isPresent: (lines) => lines.includes("*.bak"),
-  },
-  {
-    line: "*.tmp",
-    isPresent: (lines) => lines.includes("*.tmp"),
-  },
-];
-
-function parseGitignoreLines(content: string): string[] {
-  return content
-    .split("\n")
-    .map((line) => line.trim())
-    .filter((line) => line.length > 0 && !line.startsWith("#"));
-}
-
-export function fixGitignore(cwd = process.cwd()): string[] {
-  const filePath = path.join(cwd, GITIGNORE_PATH);
-  const applied: string[] = [];
-
-  const existingContent = fs.existsSync(filePath)
-    ? fs.readFileSync(filePath, "utf-8")
-    : "";
-  const existingLines = parseGitignoreLines(existingContent);
-
-  const missing = entries.filter((entry) => !entry.isPresent(existingLines));
-  if (missing.length === 0) {
-    return applied;
-  }
-
-  const additions = missing.map((entry) => entry.line);
-  const needsLeadingNewline =
-    existingContent.length > 0 && !existingContent.endsWith("\n");
-  const block =
-    (needsLeadingNewline ? "\n" : "") +
-    (existingContent.length > 0 ? "\n" : "") +
-    "# Added by commit-cop wip-fix\n" +
-    additions.join("\n") +
-    "\n";
-
-  fs.writeFileSync(filePath, existingContent + block, "utf-8");
-  applied.push(...additions);
-
-  return applied;
-}

package/src/fix/junkFiles.ts

@@ -1,16 +0,0 @@
-import fs from "node:fs";
-import { isJunkFile } from "./matchers.js";
-import { walkRepo } from "./utils.js";
-
-export function fixJunkFiles(cwd = process.cwd()): string[] {
-  const removed: string[] = [];
-
-  walkRepo(cwd, (absolutePath, relativePath) => {
-    if (!isJunkFile(relativePath)) return;
-
-    fs.unlinkSync(absolutePath);
-    removed.push(relativePath);
-  });
-
-  return removed;
-}