javi-forge 1.25.0 → 1.26.0

package/dist/commands/tdd.js

@@ -1,6 +1,5 @@
 import path from "node:path";
 import fs from "fs-extra";
-import { detectCIStack } from "./ci.js";
 // =============================================================================
 // Test command resolution
 // =============================================================================
@@ -30,91 +29,4 @@ export async function getTddTestCommand(stack, buildTool, projectDir) {
             return null;
     }
 }
-// =============================================================================
-// Hook generation
-// =============================================================================
-/**
- * Generate a TDD-enforcing pre-commit hook script.
- * If testCmd is null, generates a warning-only hook.
- */
-export function generateTddHook(testCmd, stack) {
-    if (!testCmd) {
-        return `#!/bin/bash
-# =============================================================================
-# TDD PRE-COMMIT: No test command detected for stack "${stack}"
-# =============================================================================
-# Install a test runner and re-run: javi-forge tdd init
-# =============================================================================
-
-echo "TDD HOOK: No test command configured for stack '${stack}' — skipping."
-exit 0
-`;
-    }
-    return `#!/bin/bash
-# =============================================================================
-# TDD PRE-COMMIT: Enforced test-driven development
-# =============================================================================
-# Flow: Tests MUST pass before commit is allowed.
-# Stack: ${stack} | Command: ${testCmd}
-# To skip: git commit --no-verify
-# =============================================================================
-
-set -e
-
-echo "TDD PRE-COMMIT: Running tests..."
-echo "  Stack: ${stack}"
-echo "  Command: ${testCmd}"
-echo ""
-
-${testCmd} || {
-    echo ""
-    echo "TDD FAILED — Tests did not pass."
-    echo "  Fix failing tests before committing."
-    echo "  To skip: git commit --no-verify"
-    exit 1
-}
-
-echo ""
-echo "TDD PASSED — All tests green. Commit allowed."
-`;
-}
-// =============================================================================
-// Hook installation
-// =============================================================================
-/**
- * Install TDD pre-commit hook into .git/hooks/.
- * Detects the project stack automatically and generates the appropriate hook.
- */
-export async function installTddHooks(projectDir) {
-    const gitDir = path.join(projectDir, ".git");
-    if (!(await fs.pathExists(gitDir))) {
-        return {
-            installed: [],
-            errors: ["Not a git repository. Run git init first."],
-        };
-    }
-    const hooksDir = path.join(gitDir, "hooks");
-    await fs.ensureDir(hooksDir);
-    // Detect stack
-    let stackInfo;
-    try {
-        stackInfo = await detectCIStack(projectDir);
-    }
-    catch {
-        return { installed: [], errors: ["Failed to detect project stack."] };
-    }
-    const testCmd = await getTddTestCommand(stackInfo.stackType, stackInfo.buildTool, projectDir);
-    const hookContent = generateTddHook(testCmd, stackInfo.stackType);
-    const installed = [];
-    const errors = [];
-    const hookPath = path.join(hooksDir, "pre-commit");
-    try {
-        await fs.writeFile(hookPath, hookContent, { mode: 0o755 });
-        installed.push("pre-commit");
-    }
-    catch (e) {
-        errors.push(`pre-commit: ${e instanceof Error ? e.message : String(e)}`);
-    }
-    return { installed, errors };
-}
 //# sourceMappingURL=tdd.js.map

package/dist/constants.d.ts

@@ -37,7 +37,12 @@ export declare const STACK_CONTEXT_MAP: Record<string, StackContextEntry>;
 export declare const DEPLOY_TEMPLATE_MAP: Record<string, string>;
 /** Deploy destination path mapping (per CI provider) */
 export declare const DEPLOY_DESTINATION_MAP: Record<string, string>;
-/** Hook reliability profile definitions */
+/**
+ * Hook security-preset definitions (hook-consolidation S4). The selected
+ * profile drives WHICH `hooks:` security sections get merged into
+ * `.javi-forge/ci.yaml` (see src/commands/init/steps/security.ts PROFILE_PRESET).
+ * `hooks` lists the enabled dispatcher sections for display only.
+ */
 export declare const HOOK_PROFILES: Record<HookProfile, {
     label: string;
     description: string;

package/dist/constants.js

@@ -186,22 +186,27 @@ export const DEPLOY_DESTINATION_MAP = {
     gitlab: ".gitlab-ci-deploy.yml",
     woodpecker: ".woodpecker/deploy.yml",
 };
-/** Hook reliability profile definitions */
+/**
+ * Hook security-preset definitions (hook-consolidation S4). The selected
+ * profile drives WHICH `hooks:` security sections get merged into
+ * `.javi-forge/ci.yaml` (see src/commands/init/steps/security.ts PROFILE_PRESET).
+ * `hooks` lists the enabled dispatcher sections for display only.
+ */
 export const HOOK_PROFILES = {
     minimal: {
         label: "Minimal",
-        description: "pre-commit only: lint + format check",
-        hooks: ["pre-commit"],
+        description: "CI gate only — no security scans",
+        hooks: ["ci"],
     },
     standard: {
         label: "Standard",
-        description: "pre-commit + pre-push + CI gate check",
-        hooks: ["pre-commit", "pre-push", "ci-gate"],
+        description: "secret scan + dependency audit",
+        hooks: ["secrets", "deps", "ci"],
     },
     strict: {
         label: "Strict",
-        description: "all standard + commit-msg validation + security scan on every push",
-        hooks: ["pre-commit", "pre-push", "ci-gate", "commit-msg", "security-scan"],
+        description: "secret scan + permission checks + dependency audit",
+        hooks: ["secrets", "permissions", "deps", "ci"],
     },
 };
 /** Stack-to-CI template filename mapping */

package/dist/lib/ci-config.d.ts

@@ -144,6 +144,16 @@ export declare function parseCIConfig(rawYaml: string, source?: string): CIConfi
  * validation error throws — no config is ever silently ignored.
  */
 export declare function loadCIConfig(configPath: string): Promise<CIConfig>;
+/**
+ * Set a single `hooks.<hook>.<feature>` flag in a project's CI config, creating
+ * a minimal `version: 2` `.javi-forge/ci.yaml` when none exists. Existing
+ * content — runners, gates, other hooks, comments and formatting — is preserved
+ * via a YAML document round-trip (`parseDocument`), so this NEVER clobbers a
+ * hand-authored config. `hooks:` is a v2-only key, so the version is bumped to 2
+ * when a hook feature is written into an older document. Returns the path
+ * written. Fail-closed callers still validate on the next `loadCIConfig`.
+ */
+export declare function setHookFeature(projectDir: string, hook: "pre-commit" | "pre-push", feature: string, value: boolean | string): Promise<string>;
 /**
  * Discover the default CI config for a project directory.
  * Returns the config path, or null when the project has no config

package/dist/lib/ci-config.js

@@ -633,6 +633,39 @@ export async function loadCIConfig(configPath) {
     const raw = await fs.readFile(configPath, "utf-8");
     return parseCIConfig(raw, configPath);
 }
+/**
+ * Set a single `hooks.<hook>.<feature>` flag in a project's CI config, creating
+ * a minimal `version: 2` `.javi-forge/ci.yaml` when none exists. Existing
+ * content — runners, gates, other hooks, comments and formatting — is preserved
+ * via a YAML document round-trip (`parseDocument`), so this NEVER clobbers a
+ * hand-authored config. `hooks:` is a v2-only key, so the version is bumped to 2
+ * when a hook feature is written into an older document. Returns the path
+ * written. Fail-closed callers still validate on the next `loadCIConfig`.
+ */
+export async function setHookFeature(projectDir, hook, feature, value) {
+    const existing = await findCIConfig(projectDir);
+    const configPath = existing ?? path.join(projectDir, CI_CONFIG_CANDIDATES[0]);
+    const doc = existing
+        ? YAML.parseDocument(await fs.readFile(existing, "utf-8"))
+        : YAML.parseDocument("version: 2\n");
+    // Fail-closed: never write over a malformed config. A parse error means the
+    // document is only partially represented, so setIn + write would silently
+    // drop the unparseable remainder of a hand-authored file.
+    if (doc.errors.length > 0) {
+        throw new CIConfigError(doc.errors.map((e) => ({
+            path: "<document>",
+            message: `invalid YAML: ${e.message.split("\n")[0]}`,
+        })), configPath);
+    }
+    // `hooks:` requires version 2; bump an older/unset document in place.
+    if (doc.get("version") !== 2) {
+        doc.set("version", 2);
+    }
+    doc.setIn(["hooks", hook, feature], value);
+    await fs.ensureDir(path.dirname(configPath));
+    await fs.writeFile(configPath, doc.toString());
+    return configPath;
+}
 /**
  * Discover the default CI config for a project directory.
  * Returns the config path, or null when the project has no config

package/dist/types/index.d.ts

@@ -67,13 +67,6 @@ export interface DoctorSection {
 export interface DoctorResult {
     sections: DoctorSection[];
 }
-export type TddPipelineMode = "strict" | "warn";
-export interface TddPipelineResult {
-    installed: string[];
-    skipped: string[];
-    errors: string[];
-    mode: TddPipelineMode;
-}
 export interface PluginManifest {
     name: string;
     version: string;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "javi-forge",
-	"version": "1.25.0",
+	"version": "1.26.0",
 	"description": "Project scaffolding and AI-ready CI bootstrap",
 	"type": "module",
 	"bin": {

package/dist/commands/tdd-pipeline.d.ts

@@ -1,17 +0,0 @@
-import type { Stack, TddPipelineMode, TddPipelineResult } from "../types/index.js";
-/**
- * Generate a TDD pipeline enforcement pre-push hook script.
- *
- * - strict: tests MUST pass or push is blocked (exit 1).
- * - warn:   tests are run and results shown, but push is never blocked.
- *
- * If testCmd is null, generates a skip-only hook regardless of mode.
- */
-export declare function generateTddPipelineHook(mode: TddPipelineMode, testCmd: string | null, stack: Stack): string;
-/**
- * Install TDD pipeline pre-push hook into .git/hooks/.
- * Detects the project stack automatically and generates the appropriate hook.
- * Backs up any existing pre-push hook to pre-push.bak.
- */
-export declare function installTddPipelineHook(projectDir: string, mode: TddPipelineMode): Promise<TddPipelineResult>;
-//# sourceMappingURL=tdd-pipeline.d.ts.map

package/dist/commands/tdd-pipeline.js

@@ -1,144 +0,0 @@
-import path from "node:path";
-import fs from "fs-extra";
-import { detectCIStack } from "./ci.js";
-import { getTddTestCommand } from "./tdd.js";
-// =============================================================================
-// Hook generation
-// =============================================================================
-/**
- * Generate a TDD pipeline enforcement pre-push hook script.
- *
- * - strict: tests MUST pass or push is blocked (exit 1).
- * - warn:   tests are run and results shown, but push is never blocked.
- *
- * If testCmd is null, generates a skip-only hook regardless of mode.
- */
-export function generateTddPipelineHook(mode, testCmd, stack) {
-    if (!testCmd) {
-        return `#!/bin/bash
-# =============================================================================
-# TDD PIPELINE (pre-push): No test command detected for stack "${stack}"
-# =============================================================================
-# Install a test runner and re-run: javi-forge tdd pipeline --mode ${mode}
-# =============================================================================
-
-echo "TDD PIPELINE: No test command configured for stack '${stack}' — skipping."
-exit 0
-`;
-    }
-    if (mode === "warn") {
-        return `#!/bin/bash
-# =============================================================================
-# TDD PIPELINE (pre-push): WARN mode
-# =============================================================================
-# Flow: Spec → Tests → Fail → Implement → Pass
-# Stack: ${stack} | Command: ${testCmd}
-# Mode: warn — tests run but push is NEVER blocked
-# To skip: git push --no-verify
-# =============================================================================
-
-echo "TDD PIPELINE [WARN]: Running tests before push..."
-echo "  Stack: ${stack}"
-echo "  Command: ${testCmd}"
-echo "  Mode: warn (push will proceed regardless)"
-echo ""
-
-${testCmd} && {
-    echo ""
-    echo "TDD PIPELINE [WARN]: All tests passed."
-} || {
-    echo ""
-    echo "TDD PIPELINE [WARN]: Tests FAILED — but push will proceed (warn mode)."
-    echo "  Consider fixing tests before merging."
-}
-
-exit 0
-`;
-    }
-    // strict mode (default)
-    return `#!/bin/bash
-# =============================================================================
-# TDD PIPELINE (pre-push): STRICT mode
-# =============================================================================
-# Flow: Spec → Tests → Fail → Implement → Pass
-# Stack: ${stack} | Command: ${testCmd}
-# Mode: strict — push is BLOCKED if tests fail
-# To skip: git push --no-verify
-# =============================================================================
-
-set -e
-
-echo "TDD PIPELINE [STRICT]: Running tests before push..."
-echo "  Stack: ${stack}"
-echo "  Command: ${testCmd}"
-echo "  Mode: strict (push blocked on failure)"
-echo ""
-
-${testCmd} || {
-    echo ""
-    echo "TDD PIPELINE [STRICT]: FAILED — Tests did not pass."
-    echo "  Fix failing tests before pushing."
-    echo "  To skip: git push --no-verify"
-    exit 1
-}
-
-echo ""
-echo "TDD PIPELINE [STRICT]: All tests passed. Push allowed."
-`;
-}
-// =============================================================================
-// Hook installation
-// =============================================================================
-/**
- * Install TDD pipeline pre-push hook into .git/hooks/.
- * Detects the project stack automatically and generates the appropriate hook.
- * Backs up any existing pre-push hook to pre-push.bak.
- */
-export async function installTddPipelineHook(projectDir, mode) {
-    const result = {
-        installed: [],
-        skipped: [],
-        errors: [],
-        mode,
-    };
-    const gitDir = path.join(projectDir, ".git");
-    if (!(await fs.pathExists(gitDir))) {
-        result.errors.push("Not a git repository. Run git init first.");
-        return result;
-    }
-    const hooksDir = path.join(gitDir, "hooks");
-    await fs.ensureDir(hooksDir);
-    // Detect stack
-    let stackInfo;
-    try {
-        stackInfo = await detectCIStack(projectDir);
-    }
-    catch {
-        result.errors.push("Failed to detect project stack.");
-        return result;
-    }
-    const testCmd = await getTddTestCommand(stackInfo.stackType, stackInfo.buildTool, projectDir);
-    const hookContent = generateTddPipelineHook(mode, testCmd, stackInfo.stackType);
-    const hookPath = path.join(hooksDir, "pre-push");
-    // Backup existing hook
-    if (await fs.pathExists(hookPath)) {
-        const backupPath = path.join(hooksDir, "pre-push.bak");
-        try {
-            await fs.copy(hookPath, backupPath, { overwrite: true });
-            result.skipped.push("pre-push (backed up to pre-push.bak)");
-        }
-        catch (e) {
-            result.errors.push(`backup: ${e instanceof Error ? e.message : String(e)}`);
-            return result;
-        }
-    }
-    try {
-        await fs.writeFile(hookPath, hookContent, { mode: 0o755 });
-        result.installed.push("pre-push");
-    }
-    catch (e) {
-        result.errors.push(`pre-push: ${e instanceof Error ? e.message : String(e)}`);
-    }
-    return result;
-}
-//# sourceMappingURL=tdd-pipeline.js.map

package/templates/security-hooks/commit-msg-signing

@@ -1,29 +0,0 @@
-#!/bin/bash
-# =============================================================================
-# SECURITY LAYER 6: Commit Message Signing Reminder (commit-msg)
-# =============================================================================
-# Reminds developers to sign commits if signing is configured but the
-# current commit is not signed. Non-blocking — just a nudge.
-#
-# This complements layer 4 (pre-push signing) with an earlier reminder.
-# =============================================================================
-
-set -e
-
-YELLOW='\033[1;33m'
-CYAN='\033[0;36m'
-GREEN='\033[0;32m'
-NC='\033[0m'
-
-echo "SECURITY [6/6]: Commit signing reminder..."
-
-GPG_SIGN=$(git config --get commit.gpgsign 2>/dev/null || echo "false")
-
-if [ "$GPG_SIGN" = "true" ]; then
-    echo -e "${GREEN}  Commit signing is enabled. Good.${NC}"
-else
-    echo -e "${YELLOW}  Tip: Enable commit signing for supply-chain security.${NC}"
-    echo -e "${CYAN}  git config commit.gpgsign true${NC}"
-fi
-
-exit 0

package/templates/security-hooks/pre-commit-permissions

@@ -1,74 +0,0 @@
-#!/bin/bash
-# =============================================================================
-# SECURITY LAYER 3: Permission Boundaries (pre-commit)
-# =============================================================================
-# Validates that staged files don't introduce overly permissive file modes,
-# executable flags on non-script files, or world-writable permissions.
-#
-# To skip:  git commit --no-verify (NOT recommended)
-# =============================================================================
-
-set -e
-
-RED='\033[0;31m'
-YELLOW='\033[1;33m'
-GREEN='\033[0;32m'
-NC='\033[0m'
-
-echo "SECURITY [3/6]: Permission boundary check..."
-
-STAGED_FILES=$(git diff --cached --name-only --diff-filter=ACM)
-
-if [ -z "$STAGED_FILES" ]; then
-    echo -e "${GREEN}  No staged files to check.${NC}"
-    exit 0
-fi
-
-ISSUES=0
-
-# Check for world-writable files (o+w)
-for file in $STAGED_FILES; do
-    if [ -f "$file" ]; then
-        PERMS=$(stat -c '%a' "$file" 2>/dev/null || stat -f '%Lp' "$file" 2>/dev/null || echo "")
-        if [ -n "$PERMS" ]; then
-            # Check if last digit (other permissions) has write (2, 3, 6, 7)
-            OTHERS=${PERMS: -1}
-            if [[ "$OTHERS" =~ [2367] ]]; then
-                echo -e "${RED}  World-writable: $file (mode $PERMS)${NC}"
-                ISSUES=$((ISSUES + 1))
-            fi
-        fi
-    fi
-done
-
-# Check for executable flag on non-script files
-SCRIPT_EXTENSIONS='\.sh$|\.bash$|\.zsh$|\.py$|\.rb$|\.pl$'
-for file in $STAGED_FILES; do
-    if [ -f "$file" ] && [ -x "$file" ]; then
-        # Allow scripts and hooks (no extension = likely a hook)
-        BASENAME=$(basename "$file")
-        if echo "$file" | grep -qE "$SCRIPT_EXTENSIONS"; then
-            continue
-        fi
-        # Allow files in hooks/ directories
-        if echo "$file" | grep -q '/hooks/'; then
-            continue
-        fi
-        # Allow if it has a shebang
-        if head -1 "$file" 2>/dev/null | grep -q '^#!'; then
-            continue
-        fi
-        echo -e "${YELLOW}  Unexpected executable: $file${NC}"
-        ISSUES=$((ISSUES + 1))
-    fi
-done
-
-if [ "$ISSUES" -gt 0 ]; then
-    echo -e ""
-    echo -e "${RED}COMMIT BLOCKED: $ISSUES permission issue(s) found.${NC}"
-    echo -e "${YELLOW}  Fix file permissions before committing.${NC}"
-    exit 1
-fi
-
-echo -e "${GREEN}  Permissions OK.${NC}"
-exit 0

package/templates/security-hooks/pre-commit-secrets

@@ -1,74 +0,0 @@
-#!/bin/bash
-# =============================================================================
-# SECURITY LAYER 1: Secret Scanning (pre-commit)
-# =============================================================================
-# Scans staged files for hardcoded secrets, API keys, and credentials.
-# Runs on every commit to prevent accidental secret leaks.
-#
-# Requires: git
-# To skip:  git commit --no-verify (NOT recommended)
-# =============================================================================
-
-set -e
-
-RED='\033[0;31m'
-YELLOW='\033[1;33m'
-GREEN='\033[0;32m'
-NC='\033[0m'
-
-echo "SECURITY [1/6]: Secret scanning..."
-
-# Patterns that indicate hardcoded secrets
-SECRET_PATTERNS=(
-    # AWS
-    'AKIA[0-9A-Z]{16}'
-    # Generic API keys (long hex/base64 strings assigned to key-like vars)
-    '(?i)(api[_-]?key|api[_-]?secret|access[_-]?token|auth[_-]?token)\s*[:=]\s*["\x27][A-Za-z0-9+/=_-]{20,}["\x27]'
-    # Private keys
-    '-----BEGIN (RSA |EC |DSA |OPENSSH )?PRIVATE KEY-----'
-    # GitHub tokens
-    'gh[pousr]_[A-Za-z0-9_]{36,}'
-    # Generic password assignments
-    '(?i)(password|passwd|pwd)\s*[:=]\s*["\x27][^\s"'\'']{8,}["\x27]'
-    # Slack tokens
-    'xox[baprs]-[0-9a-zA-Z-]+'
-    # Stripe keys
-    'sk_live_[0-9a-zA-Z]{24,}'
-    'rk_live_[0-9a-zA-Z]{24,}'
-    # SendGrid
-    'SG\.[A-Za-z0-9_-]{22}\.[A-Za-z0-9_-]{43}'
-)
-
-STAGED_FILES=$(git diff --cached --name-only --diff-filter=ACM)
-
-if [ -z "$STAGED_FILES" ]; then
-    echo -e "${GREEN}  No staged files to scan.${NC}"
-    exit 0
-fi
-
-FOUND=0
-for pattern in "${SECRET_PATTERNS[@]}"; do
-    # Use grep -P for perl-compatible regex, fall back to -E
-    MATCHES=$(echo "$STAGED_FILES" | xargs git diff --cached -- | grep -nP "$pattern" 2>/dev/null || true)
-    if [ -n "$MATCHES" ]; then
-        if [ "$FOUND" -eq 0 ]; then
-            echo -e "${RED}  Potential secrets detected in staged changes:${NC}"
-        fi
-        echo -e "${YELLOW}  Pattern: $pattern${NC}"
-        echo "$MATCHES" | head -5 | while read -r line; do
-            echo -e "${RED}    $line${NC}"
-        done
-        FOUND=$((FOUND + 1))
-    fi
-done
-
-if [ "$FOUND" -gt 0 ]; then
-    echo -e ""
-    echo -e "${RED}COMMIT BLOCKED: $FOUND secret pattern(s) detected.${NC}"
-    echo -e "${YELLOW}  Remove secrets and use environment variables instead.${NC}"
-    echo -e "${YELLOW}  If this is a false positive, add to .secret-scan-ignore${NC}"
-    exit 1
-fi
-
-echo -e "${GREEN}  No secrets found.${NC}"
-exit 0

package/templates/security-hooks/pre-push-branch-protection

@@ -1,62 +0,0 @@
-#!/bin/bash
-# =============================================================================
-# SECURITY LAYER 5: Branch Protection (pre-push)
-# =============================================================================
-# Prevents direct pushes to protected branches (main, master, release/*).
-# Forces use of pull requests for protected branches.
-#
-# To skip:  git push --no-verify (NOT recommended)
-# =============================================================================
-
-set -e
-
-RED='\033[0;31m'
-YELLOW='\033[1;33m'
-GREEN='\033[0;32m'
-NC='\033[0m'
-
-echo "SECURITY [5/6]: Branch protection check..."
-
-# Protected branch patterns
-PROTECTED_BRANCHES=(
-    "main"
-    "master"
-    "release/*"
-    "production"
-    "staging"
-)
-
-CURRENT_BRANCH=$(git rev-parse --abbrev-ref HEAD 2>/dev/null || echo "")
-
-if [ -z "$CURRENT_BRANCH" ]; then
-    echo -e "${YELLOW}  Could not determine current branch. Skipping.${NC}"
-    exit 0
-fi
-
-for pattern in "${PROTECTED_BRANCHES[@]}"; do
-    # Support glob patterns
-    if [[ "$CURRENT_BRANCH" == $pattern ]]; then
-        # Check if we're on CI (allow CI pushes)
-        if [ -n "$CI" ] || [ -n "$GITHUB_ACTIONS" ] || [ -n "$GITLAB_CI" ]; then
-            echo -e "${GREEN}  CI environment detected. Allowing push to $CURRENT_BRANCH.${NC}"
-            exit 0
-        fi
-
-        echo -e ""
-        echo -e "${RED}PUSH BLOCKED: Direct push to protected branch '$CURRENT_BRANCH'.${NC}"
-        echo -e ""
-        echo -e "${YELLOW}  Protected branches require pull requests:${NC}"
-        for b in "${PROTECTED_BRANCHES[@]}"; do
-            echo -e "${YELLOW}    - $b${NC}"
-        done
-        echo -e ""
-        echo -e "${YELLOW}  Create a feature branch and open a PR instead:${NC}"
-        echo -e "${GREEN}    git checkout -b feat/my-feature${NC}"
-        echo -e "${GREEN}    git push -u origin feat/my-feature${NC}"
-        echo -e "${GREEN}    gh pr create${NC}"
-        exit 1
-    fi
-done
-
-echo -e "${GREEN}  Branch '$CURRENT_BRANCH' is not protected. OK.${NC}"
-exit 0