feat: add pre-commit check script to catch issues before commit

- Add scripts/pre-commit-check.sh for comprehensive pre-commit validation
- Add 'check' script (lint, type-check, tests, build)
- Add 'pre-commit' script (includes security audit)
- Update README with pre-commit instructions
- Fix pnpm-lock.yaml formatting

Author: overtrue

README.md

@@ -110,6 +110,18 @@ See [tests/README.md](tests/README.md) for details.
 
 ### Pre-Commit Checklist
 
+**Before committing, run all checks:**
+
+```bash
+# Quick check (lint, type-check, tests, build)
+pnpm run check
+
+# Full check (includes security audit)
+pnpm run pre-commit
+```
+
+Or manually:
+
 - ✅ `pnpm lint` passes
 - ✅ `pnpm type-check` passes
 - ✅ `pnpm test:run` passes
@@ -119,6 +131,8 @@ See [tests/README.md](tests/README.md) for details.
 - ✅ Self-reviewed
 - ✅ Commit messages in English
 
+**Tip**: Run `pnpm run check` before every commit to catch issues early.
+
 ### Commit Convention
 
 Follow [Conventional Commits](https://www.conventionalcommits.org/):

package.json

@@ -17,7 +17,9 @@
     "test:coverage": "vitest run --coverage",
     "test:config-helpers": "vitest run tests/utils/config-helpers",
     "test:integration": "vitest run tests/utils/config-helpers.integration.test.ts",
-    "test:watch": "vitest --watch"
+    "test:watch": "vitest --watch",
+    "pre-commit": "bash scripts/pre-commit-check.sh",
+    "check": "pnpm run lint && pnpm run type-check && pnpm test:run && pnpm build"
   },
   "dependencies": {
     "@aws-sdk/client-s3": "^3.844.0",

pnpm-lock.yaml

@@ -0,0 +1,51 @@
+#!/bin/bash
+set -e
+
+echo "🔍 Running pre-commit checks..."
+
+# Check if pnpm-lock.yaml is in sync
+echo "📦 Checking pnpm-lock.yaml sync..."
+if ! pnpm install --frozen-lockfile --dry-run > /dev/null 2>&1; then
+  echo "❌ Error: pnpm-lock.yaml is out of sync with package.json"
+  echo "   Run: pnpm install"
+  exit 1
+fi
+
+# Run linting
+echo "🔍 Running linter..."
+pnpm run lint || {
+  echo "❌ Linting failed. Run 'pnpm lint:fix' to auto-fix"
+  exit 1
+}
+
+# Run type checking
+echo "📘 Running type check..."
+pnpm run type-check || {
+  echo "❌ Type checking failed"
+  exit 1
+}
+
+# Run tests
+echo "🧪 Running tests..."
+pnpm test:run || {
+  echo "❌ Tests failed"
+  exit 1
+}
+
+# Check build
+echo "🏗️  Checking build..."
+pnpm build || {
+  echo "❌ Build failed"
+  exit 1
+}
+
+# Security audit
+echo "🔒 Running security audit..."
+pnpm audit --audit-level=moderate || {
+  echo "⚠️  Security vulnerabilities found (moderate or higher)"
+  echo "   Review with: pnpm audit"
+  exit 1
+}
+
+echo "✅ All checks passed!"
+