#!/usr/bin/env bash
set -euo pipefail

# Pre-commit hook: linters + security audit + build + tests.
#
# Activated automatically via scripts/setup.sh or manually:
#   git config core.hooksPath scripts/hooks

echo "pre-commit: running all linters in parallel..."
make -j3 -f Makefile.cbm lint

echo "pre-commit: security audit (source-level)..."
scripts/security-audit.sh

echo "pre-commit: building and running tests..."
make -j$(sysctl -n hw.ncpu 2>/dev/null || nproc) -f Makefile.cbm test