ruff.toml

target-version = "py311"
line-length = 100
src = ["src", "tests"]

[lint]
select = ["E", "F", "W", "I", "N", "UP", "S", "B", "A", "C4", "PT", "RUF"]
ignore = [
    "S101",    # allow assert in tests
    "E501",    # line too long — HTML templates and long strings are intentional
    "E402",    # module import not at top — lazy imports in CLI/proxy are intentional
    "S104",    # binding to 0.0.0.0 is intentional for a proxy server
    "S311",    # standard PRNG — Faker uses random for synthetic data, not crypto
    "S603",    # subprocess call for spaCy model download is intentional
    "B017",    # blind exception in tests — intentional for proxy fail-safe tests
    "B904",    # raise-without-from-clause — HTTPException re-raise is standard FastAPI pattern
    "C416",    # unnecessary dict comprehension — readability preference
    "F841",    # unused variable — pre-existing in tests
    "N806",    # uppercase variable in function — KNOWN_PROVIDERS is a constant by convention
    "PT011",   # pytest.raises too broad — pre-existing in tests
    "RUF003",  # ambiguous EN DASH in comment — documentation style
    "RUF012",  # ClassVar annotation — Presidio recognizer upstream convention
    "RUF059",  # unused unpacked variable — side-effect via vault store
]

[lint.per-file-ignores]
"tests/**" = ["S", "ARG"]

[format]
quote-style = "double"
indent-style = "space"