repos:
  - repo: local
    hooks:
      - id: black
        name: black
        entry: black --line-length=88 --target-version=py310
        language: system
        types: [python]

      - id: flake8
        name: flake8
        entry: flake8 --show-source
        language: system
        types: [python]

      # Fails at the severity CI enforces (code-quality.yml: -lll, high only), never stricter.
      # pre-commit appends the staged files, so no shell wrapper can drop the first one.
      - id: bandit
        name: bandit
        entry: bandit -lll -q
        language: system
        types: [python]
        exclude: ^(tests/|reference/)

      - id: tests
        name: tests
        entry: python -m tests.run_suite -q
        language: system
        pass_filenames: false
        stages: [pre-push]