Build AI-Powered Git Hooks for Code Review

# Set your EzAI key (one-time)
export EZAI_API_KEY="sk-your-key-here"

# Create the hooks directory in your repo
mkdir -p .githooks
git config core.hooksPath .githooks

#!/usr/bin/env python3
# .githooks/pre-commit
import subprocess, json, urllib.request, os, sys

EZAI_KEY = os.environ.get("EZAI_API_KEY", "")
EZAI_URL = "https://ezaiapi.com/v1/messages"
MODEL = "claude-sonnet-4-5"
MAX_DIFF = 30_000  # chars — keeps latency <3s

def get_staged_diff():
    result = subprocess.run(
        ["git", "diff", "--cached", "--diff-filter=ACMR",
         "--no-binary", "--", "."],
        capture_output=True, text=True
    )
    return result.stdout[:MAX_DIFF]

def review_with_ai(diff):
    payload = json.dumps({
        "model": MODEL,
        "max_tokens": 1024,
        "messages": [{
            "role": "user",
            "content": f"""Review this git diff for critical issues ONLY.
Flag: security vulns, hardcoded secrets, null derefs, SQL injection,
race conditions, resource leaks. Ignore style, naming, formatting.

Reply with JSON: {{"block": true/false, "issues": ["..."]}}
If no critical issues, reply: {{"block": false, "issues": []}}

```diff
{diff}
```"""
        }]
    })
    req = urllib.request.Request(EZAI_URL,
        data=payload.encode(),
        headers={
            "x-api-key": EZAI_KEY,
            "anthropic-version": "2023-06-01",
            "content-type": "application/json",
        })
    with urllib.request.urlopen(req, timeout=10) as resp:
        body = json.loads(resp.read())
        text = body["content"][0]["text"]
        # Extract JSON from possible markdown fences
        if "```" in text:
            text = text.split("```")[1].lstrip("json\n")
        return json.loads(text)

if __name__ == "__main__":
    if not EZAI_KEY:
        sys.exit(0)  # no key = skip hook

    diff = get_staged_diff()
    if not diff.strip():
        sys.exit(0)

    try:
        result = review_with_ai(diff)
        if result.get("block"):
            print("\n🚨 AI found critical issues:")
            for issue in result["issues"]:
                print(f"  ⚠ {issue}")
            print("\nFix these or commit with: git commit --no-verify")
            sys.exit(1)
        print("✅ AI review passed")
    except Exception:
        print("⏩ AI review skipped (network/timeout)")
        sys.exit(0)  # never block on infra failure

chmod +x .githooks/pre-commit
# Stage a file with a hardcoded password to test
echo 'DB_PASSWORD = "admin123"' >> config.py
git add config.py
git commit -m "test"
# Expected: 🚨 AI found critical issues

#!/usr/bin/env python3
# .githooks/pre-push
import subprocess, json, urllib.request, os, sys

EZAI_KEY = os.environ.get("EZAI_API_KEY", "")
EZAI_URL = "https://ezaiapi.com/v1/messages"
MODEL = "claude-sonnet-4-5"

def get_branch_diff():
    # Diff against the remote tracking branch
    branch = subprocess.run(
        ["git", "rev-parse", "--abbrev-ref", "HEAD"],
        capture_output=True, text=True
    ).stdout.strip()
    remote = f"origin/{branch}"
    result = subprocess.run(
        ["git", "diff", remote, "--stat"],
        capture_output=True, text=True
    )
    stat = result.stdout
    diff = subprocess.run(
        ["git", "diff", remote, "--no-binary"],
        capture_output=True, text=True
    ).stdout[:50_000]
    return branch, stat, diff

def analyze_branch(branch, stat, diff):
    payload = json.dumps({
        "model": MODEL,
        "max_tokens": 2048,
        "messages": [{
            "role": "user",
            "content": f"""You are a senior engineer reviewing a branch before push.
Branch: {branch}
Stat: {stat}

Analyze for: logic bugs, missing error handling, broken API contracts,
unhandled edge cases, missing test updates.

Reply as markdown with sections: Summary, Issues (if any), Suggestions.
Keep it under 500 words. Be specific — cite file names and line numbers.

```diff
{diff}
```"""
        }]
    })
    req = urllib.request.Request(EZAI_URL,
        data=payload.encode(),
        headers={
            "x-api-key": EZAI_KEY,
            "anthropic-version": "2023-06-01",
            "content-type": "application/json",
        })
    with urllib.request.urlopen(req, timeout=30) as resp:
        body = json.loads(resp.read())
        return body["content"][0]["text"]

if __name__ == "__main__":
    if not EZAI_KEY:
        sys.exit(0)

    try:
        branch, stat, diff = get_branch_diff()
        if not diff.strip():
            sys.exit(0)
        print(f"\n🔍 AI reviewing branch '{branch}'...\n")
        review = analyze_branch(branch, stat, diff)
        print(review)
        print("\n✅ Review complete. Push continues.\n")
    except Exception:
        print("⏩ AI review skipped (network/timeout)")
    sys.exit(0)  # pre-push is advisory — never block

#!/bin/bash
# scripts/setup-hooks.sh — run once after cloning
git config core.hooksPath .githooks
chmod +x .githooks/*

# Check for API key
if [ -z "$EZAI_API_KEY" ]; then
    echo "⚠ Set EZAI_API_KEY for AI-powered hooks"
    echo "  Get a key at https://ezaiapi.com/dashboard"
    echo "  Hooks still work without it (AI review disabled)"
fi

echo "✅ Git hooks configured"

// .githooks/review-rules.json
{
  "block_on": [
    "hardcoded secrets or API keys",
    "SQL injection (string concatenation in queries)",
    "unchecked null/undefined access",
    "open file handles without close/finally"
  ],
  "warn_on": [
    "TODO/FIXME without issue tracker link",
    "console.log or print statements in prod code",
    "functions longer than 50 lines"
  ],
  "ignore": [
    "test files",
    "generated code",
    "migrations"
  ]
}