# Pre-commit gate. Installed with: lefthook install
pre-commit:
  parallel: true
  commands:
    gitleaks:
      run: gitleaks protect --staged --no-banner --redact
    no-large-files:
      run: |
        git diff --cached --name-only --diff-filter=A | while read -r f; do
          [ -f "$f" ] || continue
          sz=$(wc -c < "$f")
          if [ "$sz" -gt 10485760 ]; then
            echo "BLOCKED: $f is $((sz/1048576))MB. Use Git LFS or exclude it."
            exit 1
          fi
        done