#!/bin/sh
# Prevent .env files (except .env.example) from being committed
STAGED_ENV=$(git diff --cached --name-only | grep -E '\.env$|\.env\.' | grep -v '\.env\.example$')
if [ -n "$STAGED_ENV" ]; then
  echo "❌ ERROR: Attempting to commit .env file(s). This is blocked for security."
  echo "   Blocked files:"
  echo "$STAGED_ENV"
  echo "   If you need to update .env.example, that's allowed."
  exit 1
fi