chore: init repo with pre-commit hooks, secret masking, auto compile checks

Author: ankit-sengupta05

.env

@@ -0,0 +1,17 @@
+# .env.example -- copy to .env and fill in real values
+# NEVER commit .env to git
+
+FIREBASE_API_KEY=******
+FIREBASE_AUTH_DOMAIN=******
+FIREBASE_PROJECT_ID=******
+FIREBASE_STORAGE_BUCKET=******
+FIREBASE_MESSAGING_SENDER_ID=******
+FIREBASE_APP_ID=******
+FIREBASE_MEASUREMENT_ID=******
+
+API_KEY=******
+SECRET_KEY=******
+DATABASE_URL=******
+JWT_SECRET=******
+ACCESS_TOKEN=******
+REFRESH_TOKEN=******

.env.example

@@ -1,28 +1,59 @@
-name: CI
+name: CI -- Lint, Compile and Secret Check
 
 on:
   push:
-    branches: [ 'main', 'dev' ]
+    branches: ["main", "dev"]
   pull_request:
 
 jobs:
-  lint_and_check:
+  lint_compile_check:
     runs-on: ubuntu-latest
 
     steps:
       - uses: actions/checkout@v4
 
-      # Install Python
       - name: Set up Python
         uses: actions/setup-python@v4
         with:
-          python-version: '3.11'
+          python-version: "3.11"
 
-      - name: Install pre-commit and flake8
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+
+      - name: Set up Java
+        uses: actions/setup-java@v4
+        with:
+          java-version: "17"
+          distribution: "temurin"
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: "1.21"
+
+      - name: Install Python tools
         run: |
           python -m pip install --upgrade pip
           pip install pre-commit flake8
 
-      # Run pre-commit hooks on all files (any folder, any language)
-      - name: Run pre-commit hooks
+      - name: Install Node tools
+        run: npm install -g @babel/parser
+
+      - name: Run all pre-commit hooks
         run: pre-commit run --all-files
+
+      - name: Check for raw secrets in source
+        run: |
+          if grep -rE \
+            "(API_KEY|SECRET_KEY|PRIVATE_KEY|PASSWORD|AUTH_TOKEN)=[^*[:space:]]+" \
+            --include="*.js" --include="*.ts" \
+            --include="*.jsx" --include="*.tsx" \
+            --include="*.py" --include="*.java" --include="*.go" \
+            --exclude-dir=node_modules --exclude-dir=.git .; then
+            echo "[FAIL] Raw secrets detected!"
+            exit 1
+          else
+            echo "[OK] No raw secrets found."
+          fi

.github/workflows/ci.yml

@@ -6,17 +6,64 @@ __pycache__/
 .env/
 venv/
 env/
+*.egg-info/
+dist/
+build/
 
-# Node
+# Node / JS / TS
 node_modules/
+dist/
+.next/
+.nuxt/
+*.tsbuildinfo
 
-# IDE/editor
+# Java / Kotlin
+*.class
+*.jar
+*.war
+target/
+.gradle/
+
+# C / C++
+*.o
+*.out
+*.a
+*.so
+*.exe
+
+# Go
+vendor/
+
+# Rust
+target/
+
+# Ruby
+.bundle/
+vendor/bundle/
+
+# Dart / Flutter
+.dart_tool/
+.flutter-plugins
+
+# IDE
 .vscode/
+.idea/
 *.swp
 .DS_Store
 
 # Logs
 *.log
 
 # Secrets
+.env
+.env.local
+.env.production
+.env.development
+.env.staging
+google-services.json
+GoogleService-Info.plist
 *.secret
+*.pem
+*.key
+*.p12
+*.keystore

.gitignore

@@ -5,34 +5,63 @@
     - id: trailing-whitespace
     - id: end-of-file-fixer
     - id: check-added-large-files
+      args: ["--maxkb=1000"]
     - id: check-yaml
     - id: check-json
+    - id: check-merge-conflict
+    - id: detect-private-key
+    - id: no-commit-to-branch
+      args: ["--branch", "production"]
 
 - repo: https://github.com/pycqa/flake8
   rev: 7.0.0
   hooks:
     - id: flake8
-      additional_dependencies: [flake8]
-      args: ['--max-line-length=100']
-      files: \.py$           # <-- check all Python files globally
+      args: ["--max-line-length=100"]
+      files: \.py$
       exclude: ^(venv|env|\.git)/
 
 - repo: https://github.com/codespell-project/codespell
   rev: v2.2.2
   hooks:
     - id: codespell
+      exclude: ^(package-lock\.json|yarn\.lock|\.expo/)
+      args: ["--skip=*.lock,*.min.js,*.json"]
 
 - repo: local
   hooks:
-    - id: mask-env
-      name: Mask secrets in all files
+    - id: mask-secrets
+      name: Mask secrets in staged files
       entry: python scripts/mask_keys.py
       language: system
+      pass_filenames: true
       types: [text]
+      exclude: >-
+        (?x)^(
+          scripts/mask_keys\.py|
+          \.pre-commit-config\.yaml|
+          .*\.lock|.*\.png|.*\.jpg|
+          .*\.svg|.*\.exe|.*\.bin
+        )$
+
+    - id: compile-check
+      name: Syntax and compile check (auto language detection)
+      entry: python scripts/compile_check.py
+      language: system
+      pass_filenames: true
+      types: [text]
+      exclude: >-
+        (?x)^(
+          .*\.lock|.*\.md|.*\.txt|
+          .*\.png|.*\.jpg|.*\.svg|
+          .*\.json|.*\.yaml|.*\.yml|
+          .*\.env.*|.*\.gitignore|
+          .*\.css|.*\.scss|.*\.html
+        )$
 
     - id: check-requirements
       name: Check requirements file syntax
       entry: python scripts/check_requirements.py
       language: system
-      types: [file]
+      pass_filenames: false
       files: ^requirements\.txt$

.pre-commit-config.yaml

@@ -0,0 +1,16 @@
+# React + Vite
+
+This template provides a minimal setup to get React working in Vite with HMR and some ESLint rules.
+
+Currently, two official plugins are available:
+
+- [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react) uses [Babel](https://babeljs.io/) (or [oxc](https://oxc.rs) when used in [rolldown-vite](https://vite.dev/guide/rolldown)) for Fast Refresh
+- [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react-swc) uses [SWC](https://swc.rs/) for Fast Refresh
+
+## React Compiler
+
+The React Compiler is not enabled on this template because of its impact on dev & build performances. To add it, see [this documentation](https://react.dev/learn/react-compiler/installation).
+
+## Expanding the ESLint configuration
+
+If you are developing a production application, we recommend using TypeScript with type-aware lint rules enabled. Check out the [TS template](https://github.com/vitejs/vite/tree/main/packages/create-vite/template-react-ts) for information on how to integrate TypeScript and [`typescript-eslint`](https://typescript-eslint.io) in your project.

README.md

@@ -0,0 +1 @@
+Subproject commit f11e966771919af066563f8f394497e72ab78775

backend

@@ -0,0 +1,29 @@
+import js from '@eslint/js'
+import globals from 'globals'
+import reactHooks from 'eslint-plugin-react-hooks'
+import reactRefresh from 'eslint-plugin-react-refresh'
+import { defineConfig, globalIgnores } from 'eslint/config'
+
+export default defineConfig([
+  globalIgnores(['dist']),
+  {
+    files: ['**/*.{js,jsx}'],
+    extends: [
+      js.configs.recommended,
+      reactHooks.configs.flat.recommended,
+      reactRefresh.configs.vite,
+    ],
+    languageOptions: {
+      ecmaVersion: 2020,
+      globals: globals.browser,
+      parserOptions: {
+        ecmaVersion: 'latest',
+        ecmaFeatures: { jsx: true },
+        sourceType: 'module',
+      },
+    },
+    rules: {
+      'no-unused-vars': ['error', { varsIgnorePattern: '^[A-Z_]' }],
+    },
+  },
+])

eslint.config.js

@@ -0,0 +1,13 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <link rel="icon" type="image/svg+xml" href="/vite.svg" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>plantguard</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.jsx"></script>
+  </body>
+</html>