#!/usr/bin/env sh

# Ensure hooks run from repo root (we intentionally do not source Husky internals).
ROOT="$(git rev-parse --show-toplevel 2>/dev/null)"
if [ -n "$ROOT" ]; then
  cd "$ROOT" || exit 1
fi

# Prefer local binaries (if needed in future).
export PATH="$PWD/node_modules/.bin:$PATH"

# Check if Husky is disabled via environment variable
if [ "$HUSKY_ENABLED" = "false" ]; then
  echo "⚠️  Husky disabled via HUSKY_ENABLED=false"
  echo "💡 To re-enable: unset HUSKY_ENABLED or export HUSKY_ENABLED=true"
  exit 0
fi

echo "🔐 Scanning tracked files for secrets before push..."
bash scripts/secret-scan-repo.sh