3 Commits

• fix(hooks): add Windows .cmd support with shell injection guard

  Handle Windows .cmd shim resolution via spawnSync with strict path
  validation. Removes shell:true injection risk, uses strict equality,
  and restores .cmd support with path injection guard.

  Jonghyeok Park · 2026-03-11 10:45:28 +09:00
  0a3afbe38f
• perf(hooks): use direct require() instead of spawning child process

  Invoke hook scripts directly via require() when they export a
  run(rawInput) function, eliminating one Node.js process spawn per
  hook invocation (~50-100ms).
  
  Includes path traversal guard, timeouts, error logging, PR review
  feedback, legacy hooks guard, normalized filePath, and restored
  findProjectRoot config detection with package manager support.

  Jonghyeok Park · 2026-03-11 10:45:27 +09:00
  66498ae9ac
• feat(hooks): add shared resolve-formatter utility with caching

  Extract project-root discovery, formatter detection, and binary
  resolution into a reusable module. Caches results per-process to
  avoid redundant filesystem lookups on every Edit hook invocation.
  
  This is the foundation for eliminating npx overhead in format hooks.

  Jonghyeok Park · 2026-03-10 22:17:02 +09:00
  f331d3ecc9