Silo Server MigrationandClaude Opus 4.7
e8143d5757
- Narrow the worktree-id/T3-path check to docs/superpowers/specs and docs/superpowers/plans. Scanning the whole repo flagged any legitimate reference to .t3/worktrees or t3code-<hex> (fixtures, example configs) and would block unrelated commits. - Switch the pre-commit hook shebang to bash and call the check via an absolute path derived from git rev-parse so the hook works regardless of the cwd git happens to invoke it from. - install-hooks now warns when it overwrites an existing core.hooksPath rather than silently clobbering a custom setup. - Add make verify-local-paths to the AGENTS.md pre-MR checklist so contributors run it explicitly even when --no-verify is used. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
65 lines
1.4 KiB
Bash
Executable File
65 lines
1.4 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
usage() {
|
|
printf 'usage: %s [--cached]\n' "${0##*/}" >&2
|
|
}
|
|
|
|
cached=0
|
|
case "${1:-}" in
|
|
"")
|
|
;;
|
|
--cached)
|
|
cached=1
|
|
;;
|
|
-h|--help)
|
|
usage
|
|
exit 0
|
|
;;
|
|
*)
|
|
usage
|
|
exit 2
|
|
;;
|
|
esac
|
|
|
|
repo_root=$(git rev-parse --show-toplevel)
|
|
cd "$repo_root"
|
|
|
|
failed=0
|
|
t3_worktree_dir='\.t3'/'worktrees'
|
|
t3_worktree_id_prefix='t3''code-'
|
|
|
|
check_pattern() {
|
|
local label=$1
|
|
local pattern=$2
|
|
shift 2
|
|
|
|
local matches
|
|
if [[ "$cached" -eq 1 ]]; then
|
|
matches=$(git grep --cached -n -I -E "$pattern" -- "$@" 2>/dev/null) || return 0
|
|
else
|
|
matches=$(git grep -n -I -E "$pattern" -- "$@" 2>/dev/null) || return 0
|
|
fi
|
|
|
|
if [[ -n "$matches" ]]; then
|
|
printf '%s\n' "local path leak check failed: $label" >&2
|
|
printf '%s\n\n' "$matches" >&2
|
|
failed=1
|
|
fi
|
|
}
|
|
|
|
check_pattern \
|
|
"T3 worktree path or generated worktree id" \
|
|
"(${t3_worktree_dir}|/Users/[^[:space:]]*/${t3_worktree_dir}/|${t3_worktree_id_prefix}[0-9a-f]{8})" \
|
|
docs/superpowers/specs docs/superpowers/plans
|
|
|
|
check_pattern \
|
|
"absolute local filesystem path in generated superpowers docs" \
|
|
'(/Users/[^[:space:]]+|/home/[^[:space:]]+|/Volumes/[^[:space:]]+|/var/folders/[^[:space:]]+|/private/tmp/[^[:space:]]+|[A-Za-z]:\\Users\\[^[:space:]]+)' \
|
|
docs/superpowers/specs docs/superpowers/plans
|
|
|
|
if [[ "$failed" -ne 0 ]]; then
|
|
printf '%s\n' "Remove local machine paths from committed content. Use repository-relative paths instead." >&2
|
|
exit 1
|
|
fi
|