mrcharles
ec6e228b05
Brings in the enforcement layer from ~/daytoday/meta:
- Makefile, scripts/ (check-rules.sh, setup-hooks.sh, pre-commit/pre-push,
docker-run.sh, garden.sh, lib/common.sh)
- WORKING.md, questions-v1.md, .env.example
- Git hooks installed (pre-commit: fast audit, pre-push: full audit)
Fixes to pass rule audit:
- Pin Pi-hole/autoheal Docker images (no :latest tags)
- Fix shellcheck SC2001 in probe-vm-dns.sh
- Prune vendor/ and archive/ from shellcheck + Discourse pointer checks
- Add Quick Start, Enforcement Model, Task Tracking, Working Style
sections to AGENTS.md from template
💘 Generated with Crush
Assisted-by: Crush:glm-5.2
45 lines
1.4 KiB
Bash
Executable File
45 lines
1.4 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# setup-hooks.sh — install this repo's git hooks.
|
|
#
|
|
# Mechanism: copy scripts/pre-commit and scripts/pre-push into .git/hooks/ and
|
|
# make them executable. This is the most portable pattern (works on any clone,
|
|
# no `git config core.hooksPath` mutation, survives config resets, idempotent).
|
|
#
|
|
# Run once after cloning: bash scripts/setup-hooks.sh
|
|
set -euo pipefail
|
|
|
|
HERE="$(cd "$(dirname "$0")" && pwd)"
|
|
# shellcheck disable=SC1091
|
|
source "$HERE/lib/common.sh"
|
|
REPO_ROOT="$(repo_root)"
|
|
cd "$REPO_ROOT"
|
|
|
|
[ -d .git ] || die "no .git directory here — run this from a git checkout"
|
|
|
|
HOOKS_DIR=".git/hooks"
|
|
HOOK_NAMES="pre-commit pre-push"
|
|
|
|
log_step "Installing git hooks"
|
|
for name in $HOOK_NAMES; do
|
|
src="scripts/$name"
|
|
dst="$HOOKS_DIR/$name"
|
|
[ -f "$src" ] || die "source hook not found: $src"
|
|
cp "$src" "$dst"
|
|
chmod +x "$dst"
|
|
log_ok "installed $dst"
|
|
done
|
|
|
|
cat <<EOF
|
|
|
|
Git hooks installed. The following now run automatically:
|
|
|
|
pre-commit fast rule audit (shellcheck, image pinning, container naming,
|
|
required files, doc freshness, Discourse pointers, WORKING.md
|
|
completion, hygiene).
|
|
Hot-path bypass for STATUS.md / WORKING.md.
|
|
pre-push full rule audit (includes scripts/test.sh) + clean-working-tree gate.
|
|
|
|
Bypass either with \`git commit --no-verify\` / \`git push --no-verify\`
|
|
(emergencies only).
|
|
EOF
|