# Pre-push gate — lint + typecheck + format-check + Go checks + secrets.
# Install once per clone: `lefthook install`
pre-push:
  parallel: true
  commands:
    frontend-lint:
      run: npm run lint:frontend
    gofmt:
      run: gofmt -l apps/backend | (! grep .)
    go-checks:
      run: cd apps/backend && go vet ./... && go test ./...
    secrets:
      run: gitleaks git --log-opts="origin/main..HEAD" --redact