.pre-commit-config.yaml

# SPDX-License-Identifier: MPL-2.0
# Pre-commit hooks for hyperpolymath RSR repos.
# Install: pip install pre-commit && pre-commit install
# Run manually: pre-commit run --all-files

repos:
  # --- Standard hooks ---
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v5.0.0
    hooks:
      - id: trailing-whitespace
      - id: end-of-file-fixer
      - id: check-yaml
      - id: check-json
      - id: check-toml
      - id: check-merge-conflict
      - id: detect-private-key
      - id: check-added-large-files
        args: ['--maxkb=1024']

  # --- A2ML manifest validation ---
  # SHA-pinned (neither hook repo cuts tags). Bump by running
  # `gh api repos/hyperpolymath/a2ml-pre-commit/commits/main --jq .sha`
  # (and the k9 equivalent) and replacing the rev when a refresh is needed.
  - repo: https://github.com/hyperpolymath/a2ml-pre-commit
    rev: cee7b74f1b9c3da521e9d05999552fa4d03b8b28  # main @ 2026-05-22
    hooks:
      - id: validate-a2ml
        name: Validate A2ML manifests

  # --- K9 contract validation ---
  # The canonical validator, through the same wrapper CI runs (needs a
  # standards checkout beside this repo, or STANDARDS_DIR; skips with a
  # notice otherwise).
  - repo: local
    hooks:
      - id: validate-k9
        name: Validate K9 contracts
        entry: bash .github/hooks/validate-k9.sh
        language: system
        pass_filenames: false
        files: '\.k9(\.(ncl|lock))?$'

  # --- Shell linting ---
  - repo: https://github.com/shellcheck-py/shellcheck-py
    rev: v0.10.0.1
    hooks:
      - id: shellcheck

  # --- EditorConfig ---
  - repo: https://github.com/editorconfig-checker/editorconfig-checker.python
    rev: 3.2.1
    hooks:
      - id: editorconfig-checker
        exclude: '(\.git|node_modules|target|_build|deps|\.deno|external_corpora|\.lake)/'

  # --- Secret detection ---
  - repo: https://github.com/gitleaks/gitleaks
    rev: v8.24.3
    hooks:
      - id: gitleaks