# Pre-commit Configuration for screen-locker
# Install:  pre-commit install && pre-commit install --hook-type pre-push
# Run:      pre-commit run --all-files
# Update:   pre-commit autoupdate

default_language_version:
  python: python3
default_stages: [pre-commit]
fail_fast: false

repos:
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v4.6.0
    hooks:
      - id: trailing-whitespace
        args: [--markdown-linebreak-ext=md]
      - id: end-of-file-fixer
      - id: check-yaml
      - id: check-json
      - id: check-toml
      - id: check-added-large-files
        args: [--maxkb=2000]
      - id: check-merge-conflict
      - id: detect-private-key
      - id: debug-statements
      - id: name-tests-test
        args: [--pytest-test-first]
        # Shared, non-test helpers (fixtures, factories) imported by the
        # real test modules — deliberately not collected as tests, hence the
        # leading underscore rather than a test_/*_test name.
        exclude: ^screen_locker/tests/_[a-z][a-z_]*\.py$
      - id: check-ast
      - id: mixed-line-ending
        args: [--fix=lf]
      - id: requirements-txt-fixer

  - repo: local
    hooks:
      - id: no-noqa
        name: Block noqa comments
        entry: '(?i)#\s*(noqa|type:\s*ignore)'
        language: pygrep
        types: [python]
      - id: no-ruff-noqa
        name: Block ruff noqa file-level comments
        entry: '(?i)#\s*ruff:\s*noqa'
        language: pygrep
        types: [python]
      - id: requirements-sync
        name: requirements.txt covers all package imports
        entry: python3 scripts/check_requirements_sync.py
        language: system
        pass_filenames: false
        files: ^(screen_locker/.*\.py|requirements\.txt)$

  - repo: https://github.com/astral-sh/ruff-pre-commit
    rev: v0.15.2
    hooks:
      - id: ruff
        args: [--fix, --unsafe-fixes, --exit-non-zero-on-fix, --show-fixes]
        types_or: [python, pyi]
      - id: ruff-format
        types_or: [python, pyi]

  - repo: https://github.com/pre-commit/mirrors-mypy
    rev: v1.13.0
    hooks:
      - id: mypy
        args:
          - --ignore-missing-imports
          - --no-error-summary
          - --disable-error-code=no-untyped-def
          - --disable-error-code=no-untyped-call
          - --disable-error-code=var-annotated
          - --disable-error-code=no-any-unimported
          - --disable-error-code=type-arg
          - --disable-error-code=no-any-return
          - --disable-error-code=misc
          - --disable-error-code=unused-ignore
          - --disable-error-code=unreachable
          - --disable-error-code=assignment
          - --disable-error-code=no-redef
          - --disable-error-code=attr-defined
          - --disable-error-code=arg-type
          - --disable-error-code=union-attr
          - --disable-error-code=call-overload
          - --disable-error-code=return-value
          - --disable-error-code=redundant-cast
          - --disable-error-code=empty-body
          - --disable-error-code=list-item

  - repo: https://github.com/pylint-dev/pylint
    rev: v3.3.2
    hooks:
      - id: pylint
        args:
          - --rcfile=pyproject.toml
          - --fail-under=8.0
          - --jobs=4
        additional_dependencies:
          - pytest
          - gatelock @ git+https://github.com/kuhyx/utils@gatelock-v0.4.0#subdirectory=gatelock
          - crdt-sync @ git+https://github.com/kuhyx/utils@crdt-sync-v0.5.1#subdirectory=crdt-sync
          - mcp>=2,<3
          - pydantic

  - repo: https://github.com/PyCQA/bandit
    rev: 1.7.10
    hooks:
      - id: bandit
        args:
          - -c
          - pyproject.toml
          - --severity-level=high
          - --confidence-level=medium
          - --skip=B113
        additional_dependencies: ["bandit[toml]"]
        exclude: ^(tests/|.*test.*\.py$)

  - repo: local
    hooks:
      - id: ci-mirror
        name: CI mirror (clean-venv pytest + pre-commit --all-files)
        entry: bash scripts/ci_mirror.sh
        language: system
        pass_filenames: false
        always_run: true
        require_serial: true
        stages: [pre-push]

  - repo: https://github.com/codespell-project/codespell
    rev: v2.3.0
    hooks:
      - id: codespell
        args:
          - --skip=*.json,*.lock,.git,__pycache__,.venv
          - --ignore-words-list=als,ans,ect,nd,som,sur,te,nam,numer,lew,sie,wil,postion,clen,ther,folow,derrive,ony,tje,noe,theses,crate,doubleclick,wile,tabel,pary,blok,bloc,proces,serwer,parametr,adres,hart,dout,metod,tekst,synonim,grup,mosty,lokal,skalar,milion,nowe,tre,hel,alph

  - repo: local
    hooks:
      - id: shellcheck
        name: shellcheck
        entry: bash -c 'printf "%s\0" "$@" | xargs -0 -n 40 shellcheck --severity=warning' --
        language: system
        types: [shell]
      - id: max-file-length
        name: Max file length (400 lines)
        entry: python3 scripts/check_file_length.py
        language: system
        types_or: [python, shell]
      - id: no-silent-failures
        name: Block silent failures (swallowed exceptions must log why)
        entry: python3 scripts/check_silent_failures.py
        language: system
        types: [python]
      - id: screens-fit
        name: Every lock screen fits 1366x768 (no scrolling required)
        entry: python3 -m scripts.verify_screen_fits
        language: system
        files: '^screen_locker/.*\.py$'
        pass_filenames: false
        require_serial: true
      - id: flutter-analyze
        name: flutter analyze (workout app)
        # env -u GIT_DIR: git exports it to hooks, and flutter shells out to
        # git to identify its own SDK -- with it set, flutter reads THIS repo
        # as the SDK and pub resolves every constraint against 0.0.0-unknown.
        entry: bash -c 'cd stronglift_replacement/workout_app &&
          env -u GIT_DIR -u GIT_WORK_TREE -u GIT_INDEX_FILE flutter analyze'
        language: system
        files: '^stronglift_replacement/workout_app/.*\.(dart|yaml)$'
        pass_filenames: false
      - id: flutter-test-coverage
        name: flutter test --coverage 100% (workout app)
        entry: bash scripts/check_flutter_coverage.sh
        language: system
        files: '^stronglift_replacement/workout_app/.*\.dart$'
        pass_filenames: false
        require_serial: true
        stages: [pre-push]