lefthook

Lefthook

Thin git hooks that delegate every command to a mise run task so hooks and CI run identical checks; lefthook decides when, mise owns what.

Workflow

1. Install: pin lefthook via mise or the stack's dev dependencies (go-stack, python-stack, typescript-stack).
2. Configure: create lefthook.yml at the repository root from the template below; reference files live in go-stack and python-stack.
3. Activate: lefthook install, wired into mise run install.

Template

output: [summary, failure, execution_out] # quiet commits: no version banner, no successful-step noise
pre-commit:
  parallel: false
  commands:
    format:dprint:
      glob: "*.{json,md,toml,yaml,yml}"
      priority: 10
      run: mise run format:dprint {staged_files}
      stage_fixed: true
    format:<lang>: # one per language: format:go / format:python / format:templ ...
      glob: "*.<ext>"
      priority: 10
      run: mise run format:<lang> {staged_files}
      stage_fixed: true
    check:leaks: # staged secret scan: history-mode gitleaks in `check` cannot see the incoming commit
      priority: 20
      run: mise run check:leaks --staged
    check:
      priority: 30
      run: mise run check
pre-push:
  commands:
    test:
      run: mise run test

Principles

• pre-commit (fast): format staged files, then the static checks and the staged secret scan.
• pre-push (slower): the test suite.
• post-commit (optional): rebuild and redeploy a binary built from the repo's own sources, guarded to commits that touch a build input; git ignores its exit status, so it never blocks a commit.
• Delegate, don't duplicate: every command is mise run <task> and its name mirrors the task; never inline tool commands.
• Staged formatters, whole-tree checks: formatters take {staged_files} and restage fixes with stage_fixed: true; check and test take no files.