#!/bin/sh
# pre-commit: fast compile check + secret scan — blocks bad syntax and leaked secrets
set -e
echo "pre-commit: cargo check --workspace"
cargo check --workspace
echo "pre-commit: scanning staged diff for secrets"
just scan-diff
