.pre-commit-config.yaml

# See https://pre-commit.com for more information
# See https://pre-commit.com/hooks.html for more hooks
default_language_version:
  python: python3

# Global exclusions to prevent hooks from scanning unnecessary directories
exclude: ^(venv/|build/|dist/|\.git/|__pycache__/|.*\.egg-info/|\.pytest_cache/|\.mypy_cache/|\.ruff_cache/|\.uv-cache/|\.uv_cache/|htmlcov/|\.coverage|reports/|llm-agent-tools/|\.tickets/|tinyAgent/)

repos:
  # Pre-commit framework hooks
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v5.0.0
    hooks:
      - id: trailing-whitespace
      - id: end-of-file-fixer
        # Auto-generated file: models_registry.json
        exclude: models_registry\.json$
      - id: check-yaml
        args: ['--allow-multiple-documents']
      - id: check-added-large-files
        args: ['--maxkb=1000']
      - id: check-case-conflict
      - id: check-merge-conflict
      - id: check-json
      - id: check-toml
      - id: check-ast
      - id: debug-statements
      - id: mixed-line-ending
        args: ['--fix=lf']
      - id: check-docstring-first
      - id: check-executables-have-shebangs
      - id: check-shebang-scripts-are-executable

  # Python specific security checks
  - repo: https://github.com/PyCQA/bandit
    rev: 1.8.0
    hooks:
      - id: bandit
        args: ['-c', 'pyproject.toml']
        additional_dependencies: ['bandit[toml]']

  # Ruff - Fast Python linter and formatter
  - repo: https://github.com/astral-sh/ruff-pre-commit
    rev: v0.14.9
    hooks:
      - id: ruff
        args: ['--fix', '--show-fixes']
      - id: ruff-format  # Re-enabled - ruff handles linting, ruff-format handles formatting
        exclude: models_registry\.json$

  # Local hooks for project-specific checks
  - repo: local
    hooks:
      - id: mypy
        name: mypy
        entry: uv run mypy --ignore-missing-imports --no-strict-optional src/tunacode/
        language: system
        files: ^src/.*\.py$
        exclude: '(conftest\.py|^tests/|^scripts/)'
        pass_filenames: false
        stages: [pre-push]

      # UV-managed tools
      - id: dead-imports
        name: Check for unused imports in changed files
        entry: scripts/run-dead-imports.sh
        language: script
        files: \.py$
        stages: [pre-commit]

      - id: vulture-changed
        name: Check for dead code in changed files
        entry: uv run vulture --min-confidence 80 scripts/utils/vulture_whitelist.py
        language: system
        files: ^src/.*\.py$
        pass_filenames: true
        exclude: ^(tests/|test_)
        stages: [pre-commit]

      - id: unused-constants
        name: Check for unused constants
        entry: uv run python scripts/check-unused-constants.py
        language: system
        pass_filenames: false
        stages: [pre-commit]

      # Check for common security issues
      - id: security-check
        name: Security audit
        entry: bash -c 'grep -H "PRIVATE\|SECRET\|PASSWORD\|TOKEN" "$@" || exit 0' --
        language: system
        files: ^src/.*\.py$

      # Validate no print statements in production code
      - id: no-print-statements
        name: Check for print statements
        entry: bash -c 'grep -H "print(" "$@" | grep -v "# noqa" | grep -v "# pragma" || exit 0' --
        language: system
        files: ^src/.*\.py$

      # Check for files longer than 600 lines (only runs when py files change)
      - id: check-file-length
        name: Check for files longer than 600 lines
        entry: scripts/check-file-length.sh
        language: script
        files: \.py$
        exclude: ^tests/benchmarks/bench_discover\.py$
        pass_filenames: true

      # Check naming conventions
      - id: naming-conventions
        name: Check naming conventions
        entry: uv run python scripts/check-naming-conventions.py
        language: system
        files: ^src/.*\.py$
        exclude: ^(tests/|scripts/)

      # Ban defensive slop patterns in internal typed message paths
      - id: defensive-slop
        name: Check defensive slop patterns
        entry: uv run python scripts/check-defensive-slop.py
        language: system
        files: ^src/.*\.py$
        pass_filenames: true
        stages: [pre-commit, pre-push]

      # Check for duplicate code (runs on push - pylint is slow)
      - id: pylint-duplicates
        name: Check for duplicate code
        entry: uv run pylint --disable=all --enable=R0801 --min-similarity-lines=15
        language: system
        files: ^src/.*\.py$
        exclude: ^(tests/|scripts/|__pycache__/)
        pass_filenames: true
        stages: [pre-push]

      # Run tests (runs on push - too slow for every commit)
      - id: pytest
        name: Run tests
        entry: uv run pytest -x -q
        language: system
        pass_filenames: false
        stages: [pre-push]


      # Dependency layer check (runs on commit - architectural check)
      # Note: Map visualization generated by GitHub Action on master pushes
      - id: dependency-layers
        name: Check dependency layers
        entry: uv run pytest tests/test_dependency_layers.py -v
        language: system
        pass_filenames: false
        stages: [pre-commit]

  # Import sorting with isort - DISABLED (ruff handles this with extend-select = ["I"])
  # - repo: https://github.com/pycqa/isort
  #   rev: 5.13.2
  #   hooks:
  #     - id: isort
  #       args: ['--profile', 'black', '--filter-files']

  # Documentation linting
  - repo: https://github.com/pycqa/doc8
    rev: v1.1.2
    hooks:
      - id: doc8
        args: ['--max-line-length=120']

  # Markdown linting - temporarily disabled due to Node.js v23 compatibility issue
  # - repo: https://github.com/igorshubovych/markdownlint-cli
  #   rev: v0.42.0
  #   hooks:
  #     - id: markdownlint
  #       args: ['--disable', 'MD013', 'MD033', 'MD041']

# Configuration for ci
ci:
  autofix_commit_msg: |
    [pre-commit.ci] auto fixes from pre-commit hooks

    for more information, see https://pre-commit.ci
  autofix_prs: true
  autoupdate_branch: ''
  autoupdate_commit_msg: '[pre-commit.ci] pre-commit autoupdate'
  autoupdate_schedule: weekly
  # Skip hooks that require project-specific environment setup or modify files
  skip: [vulture-changed]
  submodules: false