safe-push 0.1.0

package/src/git.ts

@@ -0,0 +1,162 @@
+import { $ } from "bun";
+import { GitError } from "./types";
+
+/**
+ * Gitコマンドを実行し、結果を返す
+ */
+async function execGit(args: string[]): Promise<string> {
+  const command = `git ${args.join(" ")}`;
+  try {
+    const result = await $`git ${args}`.quiet();
+    return result.stdout.toString().trim();
+  } catch (error) {
+    if (error && typeof error === "object" && "exitCode" in error) {
+      const exitCode = (error as { exitCode: number }).exitCode;
+      const stderr =
+        "stderr" in error ? String((error as { stderr: unknown }).stderr) : "";
+      throw new GitError(
+        `Git command failed: ${stderr || command}`,
+        command,
+        exitCode
+      );
+    }
+    throw new GitError(`Git command failed: ${command}`, command, null);
+  }
+}
+
+/**
+ * 現在のブランチ名を取得
+ */
+export async function getCurrentBranch(): Promise<string> {
+  return execGit(["rev-parse", "--abbrev-ref", "HEAD"]);
+}
+
+/**
+ * リモートに存在しない新規ブランチかどうかを判定
+ */
+export async function isNewBranch(remote = "origin"): Promise<boolean> {
+  const branch = await getCurrentBranch();
+  try {
+    await execGit(["rev-parse", "--verify", `${remote}/${branch}`]);
+    return false;
+  } catch {
+    return true;
+  }
+}
+
+/**
+ * 最後のコミットの作者メールアドレスを取得
+ */
+export async function getLastCommitAuthorEmail(): Promise<string> {
+  return execGit(["log", "-1", "--format=%ae"]);
+}
+
+/**
+ * ローカルのGit設定からメールアドレスを取得
+ */
+export async function getLocalEmail(): Promise<string> {
+  // 環境変数が設定されている場合はそちらを優先
+  const envEmail = process.env.SAFE_PUSH_EMAIL;
+  if (envEmail) {
+    return envEmail;
+  }
+
+  return execGit(["config", "user.email"]);
+}
+
+/**
+ * リモートとの差分ファイル一覧を取得
+ * 新規ブランチの場合はmainまたはmasterとの差分を取得
+ */
+export async function getDiffFiles(remote = "origin"): Promise<string[]> {
+  const branch = await getCurrentBranch();
+  const isNew = await isNewBranch(remote);
+
+  let baseBranch: string;
+  if (isNew) {
+    // 新規ブランチの場合、mainまたはmasterを基準にする
+    try {
+      await execGit(["rev-parse", "--verify", `${remote}/main`]);
+      baseBranch = `${remote}/main`;
+    } catch {
+      try {
+        await execGit(["rev-parse", "--verify", `${remote}/master`]);
+        baseBranch = `${remote}/master`;
+      } catch {
+        // mainもmasterもない場合は空の配列を返す
+        return [];
+      }
+    }
+  } else {
+    baseBranch = `${remote}/${branch}`;
+  }
+
+  const output = await execGit(["diff", "--name-only", baseBranch, "HEAD"]);
+  if (!output) {
+    return [];
+  }
+
+  return output.split("\n").filter(Boolean);
+}
+
+/**
+ * git pushを実行
+ */
+export async function execPush(
+  args: string[] = [],
+  remote = "origin"
+): Promise<{ success: boolean; output: string }> {
+  const branch = await getCurrentBranch();
+  const isNew = await isNewBranch(remote);
+
+  const pushArgs = ["push"];
+
+  // 新規ブランチの場合は-uオプションを追加
+  if (isNew) {
+    pushArgs.push("-u");
+  }
+
+  pushArgs.push(remote, branch);
+
+  // 追加の引数がある場合
+  if (args.length > 0) {
+    pushArgs.push(...args);
+  }
+
+  try {
+    const output = await execGit(pushArgs);
+    return { success: true, output };
+  } catch (error) {
+    if (error instanceof GitError) {
+      return { success: false, output: error.message };
+    }
+    return {
+      success: false,
+      output: error instanceof Error ? error.message : String(error),
+    };
+  }
+}
+
+/**
+ * Gitリポジトリ内かどうかを確認
+ */
+export async function isGitRepository(): Promise<boolean> {
+  try {
+    await execGit(["rev-parse", "--git-dir"]);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * コミットが存在するか確認
+ */
+export async function hasCommits(): Promise<boolean> {
+  try {
+    await execGit(["rev-parse", "HEAD"]);
+    return true;
+  } catch {
+    return false;
+  }
+}

package/src/index.ts

@@ -0,0 +1,18 @@
+#!/usr/bin/env bun
+import { Command } from "commander";
+import { createCheckCommand } from "./commands/check";
+import { createPushCommand } from "./commands/push";
+import { createConfigCommand } from "./commands/config";
+
+const program = new Command();
+
+program
+  .name("safe-push")
+  .description("Git push safety checker - blocks pushes to forbidden areas")
+  .version("0.1.0");
+
+program.addCommand(createCheckCommand());
+program.addCommand(createPushCommand());
+program.addCommand(createConfigCommand());
+
+program.parse();

package/src/types.ts

@@ -0,0 +1,60 @@
+import { z } from "zod";
+
+/**
+ * 禁止時の動作
+ */
+export const OnForbiddenSchema = z.enum(["error", "prompt"]);
+export type OnForbidden = z.infer<typeof OnForbiddenSchema>;
+
+/**
+ * 設定ファイルのスキーマ
+ */
+export const ConfigSchema = z.object({
+  forbiddenPaths: z.array(z.string()).default([".github/"]),
+  onForbidden: OnForbiddenSchema.default("error"),
+});
+export type Config = z.infer<typeof ConfigSchema>;
+
+/**
+ * Pushチェック結果
+ */
+export interface CheckResult {
+  allowed: boolean;
+  reason: string;
+  details: {
+    isNewBranch: boolean;
+    isOwnLastCommit: boolean;
+    hasForbiddenChanges: boolean;
+    forbiddenFiles: string[];
+    currentBranch: string;
+    authorEmail: string;
+    localEmail: string;
+  };
+}
+
+/**
+ * Git操作関連のエラー
+ */
+export class GitError extends Error {
+  constructor(
+    message: string,
+    public readonly command: string,
+    public readonly exitCode: number | null
+  ) {
+    super(message);
+    this.name = "GitError";
+  }
+}
+
+/**
+ * 設定ファイル関連のエラー
+ */
+export class ConfigError extends Error {
+  constructor(
+    message: string,
+    public readonly path?: string
+  ) {
+    super(message);
+    this.name = "ConfigError";
+  }
+}

package/tsconfig.build.json

@@ -0,0 +1,8 @@
+{
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "declaration": false,
+    "declarationMap": false
+  },
+  "exclude": ["node_modules", "dist", "**/*.test.ts"]
+}

package/tsconfig.json

@@ -0,0 +1,19 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "resolveJsonModule": true,
+    "declaration": true,
+    "declarationMap": true,
+    "outDir": "./dist",
+    "rootDir": "./src",
+    "types": ["bun-types", "node"]
+  },
+  "include": ["src/**/*"],
+  "exclude": ["node_modules", "dist"]
+}