pre-commit:
  parallel: true
  commands:
    secrets:
      # Scan for secrets before allowing commit - runs first
      priority: 1
      run: git secrets --scan --cached
      fail_text: "🚨 Secrets detected! Remove sensitive data before committing."

    format:
      glob: "*.{ts,tsx,js,jsx,json,md}"
      run: pnpm biome check --write --no-errors-on-unmatched --files-ignore-unknown=true {staged_files}
      stage_fixed: true

    type-check:
      # Only type-check packages with staged changes
      run: pnpm turbo type-check --filter='...[HEAD]'

pre-push:
  commands:
    test:
      run: pnpm test