workhelix-cli-common 0.4.1

Common functionality for Workhelix Rust CLI tools
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86

# Peter Hook project hooks
# Self-contained configuration matching CI pipeline

# =============================================================================
# CODE QUALITY HOOKS (matches CI lint and format jobs)
# =============================================================================

[hooks.format-check]
command = ["cargo", "fmt", "--all", "--", "--check"]
modifies_repository = false
execution_type = "other"
run_always = true
description = "Check code formatting (matches CI format job)"

[hooks.clippy-check]
command = ["cargo", "clippy", "--all-targets", "--", "-D", "warnings"]
modifies_repository = false
execution_type = "other"
run_always = true
description = "Run clippy linting (matches CI lint job)"
env = { RUSTFLAGS = "-D warnings" }

# =============================================================================
# TEST HOOKS (matches CI test job)
# =============================================================================

[hooks.test-all]
command = ["cargo", "test", "--locked", "--all", "--verbose"]
modifies_repository = false
execution_type = "other"
run_always = true
description = "Run all tests (matches CI test job)"
env = { RUSTFLAGS = "-D warnings" }

[hooks.security-audit]
command = ["cargo", "audit"]
modifies_repository = false
execution_type = "other"
run_always = true
description = "Run security audit (matches CI audit job)"

[hooks.secret-scan]
command = ["gitleaks", "detect", "--source=.", "--verbose", "--no-banner"]
modifies_repository = false
execution_type = "other"
run_always = true
description = "Scan for secrets and credentials in repository"

[hooks.venv-check]
command = ["unvenv"]
modifies_repository = false
execution_type = "in-place"
files = ["**/*.py", "**/pyvenv.cfg", "**/activate"]
description = "Detect uncommitted Python virtual environments"

# =============================================================================
# VERSION MANAGEMENT HOOKS
# =============================================================================

[hooks.version-sync-check]
command = ["versioneer", "verify"]
include = ["Cargo.toml", "VERSION"]
modifies_repository = false
execution_type = "other"
description = "Verify all version files are synchronized"

[hooks.tag-version-check]
command = ["sh", "-c", "if git describe --exact-match --tags HEAD 2>/dev/null | grep -q '^v'; then TAG_VERSION=$(git describe --exact-match --tags HEAD | sed 's/v//'); CARGO_VERSION=$(versioneer show); if [ \"$TAG_VERSION\" != \"$CARGO_VERSION\" ]; then echo '❌ ERROR: Git tag version ('$TAG_VERSION') does not match Cargo version ('$CARGO_VERSION')'; echo \"Use 'versioneer tag' to create tags that match the current version\"; exit 1; fi; echo '✅ Tag version matches Cargo version: '$TAG_VERSION; fi"]
include = ["Cargo.toml", "VERSION"]
modifies_repository = false
execution_type = "other"
description = "Verify git tag version matches Cargo.toml version"

# =============================================================================
# HOOK GROUPS
# =============================================================================

[groups.pre-commit]
includes = ["format-check", "clippy-check"]
execution = "sequential"
description = "Code quality checks before commit (matches CI format + lint jobs)"

[groups.pre-push]
includes = ["clippy-check", "test-all", "venv-check", "security-audit", "secret-scan", "version-sync-check"]
execution = "sequential"
description = "Full validation before push (matches CI lint + test + audit + security jobs)"