.pre-commit-config.yaml

# Pre-commit hooks for automatic code quality
# Install: pip install pre-commit && pre-commit install
# Bypass: git commit --no-verify (if needed)
# Run manually: pre-commit run --all-files

repos:
  # Markdown linting with auto-fix
  - repo: https://github.com/DavidAnson/markdownlint-cli2
    rev: v0.12.1
    hooks:
      - id: markdownlint-cli2
        args: ['--fix']
        files: \.md$

  # Python code formatting (black)
  - repo: https://github.com/psf/black
    rev: 24.1.1
    hooks:
      - id: black
        files: \.py$

  # Python import sorting
  - repo: https://github.com/PyCQA/isort
    rev: 5.13.2
    hooks:
      - id: isort
        args: ['--profile', 'black']
        files: \.py$

  # Ruff - Fast Python linter with auto-fix
  - repo: https://github.com/astral-sh/ruff-pre-commit
    rev: v0.1.15
    hooks:
      - id: ruff
        args: [--fix]
        files: \.py$

  # General file checks
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v4.5.0
    hooks:
      - id: trailing-whitespace
        exclude: \.md$  # Markdown sometimes needs trailing spaces
      - id: end-of-file-fixer
      - id: check-yaml
      - id: check-json
      - id: check-added-large-files
        args: ['--maxkb=5000']
      - id: check-merge-conflict
      - id: debug-statements
      - id: mixed-line-ending
        args: ['--fix=lf']

  # Security scanning (runs fast, non-blocking)
  - repo: https://github.com/PyCQA/bandit
    rev: 1.7.6
    hooks:
      - id: bandit
        args: [-ll, --recursive]  # Only report medium+ severity
        files: ^src/.*\.py$
        exclude: ^(tests/|deprecated/|src/deprecated/)

# Configuration
default_language_version:
  python: python3

exclude: |
  (?x)(
    ^\.git/|
    ^\.cache/|
    ^\.pytest_cache/|
    ^__pycache__/|
    ^venv/|
    ^env/|
    \.egg-info/|
    ^build/|
    ^dist/|
    ^deprecated/|
    ^src/deprecated/
  )