chore: restore pre-commit configuration

Restore .pre-commit-config.yaml that was in original PR but missing from
current branch. This file provides code quality, security scanning, and
formatting validation hooks.

Author: bakerboy448

.dockerignore

@@ -53,4 +53,4 @@ systemd/
 # Docker files (not needed in build context)
 docker-compose.yml
 docker-compose.*.yml
-Dockerfile.*
+Dockerfile.*

.github/workflows/docker-build.yml

@@ -118,4 +118,4 @@ jobs:
         uses: github/codeql-action/upload-sarif@v3
         if: always()
         with:
-          sarif_file: 'trivy-results.sarif'
+          sarif_file: 'trivy-results.sarif'

.pre-commit-config.yaml

@@ -0,0 +1,57 @@
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v4.4.0
+    hooks:
+      - id: trailing-whitespace
+      - id: end-of-file-fixer
+      - id: check-yaml
+      - id: check-added-large-files
+      - id: check-merge-conflict
+      - id: debug-statements
+      - id: check-executables-have-shebangs
+
+  - repo: https://github.com/psf/black
+    rev: 23.7.0
+    hooks:
+      - id: black
+        language_version: python3
+        args: [--line-length=88]
+
+  - repo: https://github.com/pycqa/flake8
+    rev: 6.0.0
+    hooks:
+      - id: flake8
+        args: [--max-line-length=88, --extend-ignore=E203,W503]
+
+  - repo: https://github.com/pycqa/isort
+    rev: 5.12.0
+    hooks:
+      - id: isort
+        args: [--profile=black]
+
+  - repo: https://github.com/Yelp/detect-secrets
+    rev: v1.4.0
+    hooks:
+      - id: detect-secrets
+        args: ['--baseline', '.secrets.baseline']
+        exclude: |
+          (?x)^(
+              config_template\.json|
+              \.secrets\.baseline
+          )$
+
+  - repo: https://github.com/pre-commit/mirrors-mypy
+    rev: v1.4.1
+    hooks:
+      - id: mypy
+        additional_dependencies: [types-requests]
+        args: [--ignore-missing-imports]
+
+  - repo: local
+    hooks:
+      - id: reddit-config-check
+        name: Check Reddit config safety
+        entry: python -c "import json; config = json.load(open('config.json')) if __import__('os').path.exists('config.json') else {}; exit(1) if not config.get('anonymize_moderators', True) else exit(0)"
+        language: system
+        files: config\.json$
+        pass_filenames: false

CLAUDE.md

@@ -51,7 +51,7 @@ sqlite3 modlog.db "SELECT action_id, action_type, moderator, removal_reason, sub
 # View actions by subreddit
 sqlite3 modlog.db "SELECT action_type, moderator, target_author, removal_reason FROM processed_actions WHERE subreddit = 'usenet' ORDER BY created_at DESC LIMIT 5;"
 
-# Track content lifecycle by target ID  
+# Track content lifecycle by target ID
 sqlite3 modlog.db "SELECT target_id, action_type, moderator, removal_reason, datetime(created_at, 'unixepoch') FROM processed_actions WHERE target_id LIKE '%1mkz4jm%' ORDER BY created_at;"
 
 # Manual cleanup of old entries
@@ -62,7 +62,7 @@ sqlite3 modlog.db "DELETE FROM processed_actions WHERE created_at < date('now',
 
 The application supports multiple configuration methods with the following priority (highest to lowest):
 1. **Command line arguments** (highest priority)
-2. **Environment variables** (override config file)  
+2. **Environment variables** (override config file)
 3. **JSON config file** (base configuration)
 
 ### Environment Variables
@@ -71,7 +71,7 @@ All configuration options can be set via environment variables:
 
 #### Reddit Credentials
 - `REDDIT_CLIENT_ID`: Reddit app client ID
-- `REDDIT_CLIENT_SECRET`: Reddit app client secret  
+- `REDDIT_CLIENT_SECRET`: Reddit app client secret
 - `REDDIT_USERNAME`: Reddit bot username
 - `REDDIT_PASSWORD`: Reddit bot password
 
@@ -132,7 +132,7 @@ python modlog_wiki_publisher.py --debug --batch-size 25  # CLI takes priority
 
 ### Display Options
 - `anonymize_moderators`: **REQUIRED** to be `true` for security (default: true)
-  - `true` (ENFORCED): Shows "AutoModerator", "Reddit", or "HumanModerator"  
+  - `true` (ENFORCED): Shows "AutoModerator", "Reddit", or "HumanModerator"
   - `false`: **BLOCKED** - Would expose moderator identities publicly
 
 **SECURITY NOTE**: Setting `anonymize_moderators=false` is permanently disabled to protect moderator privacy. The application will refuse to start if this is attempted.
@@ -143,7 +143,7 @@ The application uses configurable action type variables for flexibility:
 
 #### Default Configuration
 - **REMOVAL_ACTIONS**: `removelink`, `removecomment`, `spamlink`, `spamcomment`
-- **APPROVAL_ACTIONS**: `approvelink`, `approvecomment` 
+- **APPROVAL_ACTIONS**: `approvelink`, `approvecomment`
 - **REASON_ACTIONS**: `addremovalreason`
 - **DEFAULT_WIKI_ACTIONS**: All above combined
 
@@ -184,7 +184,7 @@ Use `--test` flag to verify configuration and Reddit API connectivity without ma
 ## Content Link Guidelines
 
 **CRITICAL**: Content links in the modlog should NEVER point to user profiles (`/u/username`). Links should only point to:
-- Actual removed posts (`/comments/postid/`)  
+- Actual removed posts (`/comments/postid/`)
 - Actual removed comments (`/comments/postid/_/commentid/`)
 - No link at all if no actual content is available
 
@@ -231,14 +231,14 @@ User profile links are a privacy concern and not useful for modlog purposes.
 
 ### Content Linking and Display
 - ✅ Content links point to actual Reddit posts/comments, never user profiles for privacy
-- ✅ Fixed target authors showing as [deleted] - now displays actual usernames  
+- ✅ Fixed target authors showing as [deleted] - now displays actual usernames
 - ✅ Proper content titles extracted from Reddit API data
 - ✅ AutoModerator displays as "AutoModerator" (not anonymized)
 - ✅ Configurable anonymization for human moderators
 
 ### Data Integrity
 - ✅ Pipe character escaping for markdown table compatibility
-- ✅ Robust error handling for mixed subreddit scenarios  
+- ✅ Robust error handling for mixed subreddit scenarios
 - ✅ Database schema at version 5 with all required columns
 - ✅ Consistent Reddit API field usage (action.details vs action.description)
 
@@ -266,4 +266,4 @@ User profile links are a privacy concern and not useful for modlog purposes.
 - **401 errors**: Check app type is "script" and verify client_id/client_secret
 - **Wiki permission denied**: Ensure bot has moderator or wiki contributor access
 - **Rate limiting**: Increase `--interval` and/or reduce `--batch-size`
-- **Module not found**: Always use `/opt/.venv/redditbot/bin/python` instead of system python
+- **Module not found**: Always use `/opt/.venv/redditbot/bin/python` instead of system python

Dockerfile

@@ -142,4 +142,4 @@ HEALTHCHECK --interval=5m --timeout=10s --start-period=30s --retries=3 \
     CMD python -c "import os, sys; sys.exit(0 if os.path.exists(os.getenv('DATABASE_PATH', '/config/data/modlog.db')) else 1)"
 
 # Use s6-overlay as entrypoint
-ENTRYPOINT ["/init"]
+ENTRYPOINT ["/init"]

README.md

@@ -9,7 +9,7 @@ Automatically publishes Reddit moderation logs to a subreddit wiki page with mod
 * 🗄️ SQLite database for deduplication and retention with **multi-subreddit support**
 * ⏰ Configurable update intervals with continuous daemon mode
 * 🔒 Automatic cleanup of old entries with configurable retention
-* ⚡ Handles Reddit's 524KB wiki size limit automatically  
+* ⚡ Handles Reddit's 524KB wiki size limit automatically
 * 🧩 Fully CLI-configurable (no need to edit `config.json`)
 * 📁 Per-subreddit log files for debugging and monitoring
 * 🔒 Configurable moderator anonymization (AutoModerator/HumanModerator)
@@ -162,7 +162,7 @@ Options:
 ### Force Commands Explained
 
 **--force-modlog**: Complete rebuild from Reddit
-- Fetches ALL recent modlog actions from Reddit API 
+- Fetches ALL recent modlog actions from Reddit API
 - Stores them in database
 - Rebuilds entire wiki page from database
 - Use when: Starting fresh, major updates, or troubleshooting
@@ -181,7 +181,7 @@ Options:
 # Complete rebuild from Reddit API
 python modlog_wiki_publisher.py --source-subreddit usenet --force-modlog
 
-# Update wiki with current database data (bypass cache)  
+# Update wiki with current database data (bypass cache)
 python modlog_wiki_publisher.py --source-subreddit usenet --force-wiki
 
 # Do both (equivalent to old --force)

config_template.json

@@ -20,4 +20,4 @@
     "show_full_ids": false,
     "id_format": "prefixed"
   }
-}
+}

docker-compose.yml

@@ -61,4 +61,4 @@ services:
   #     - SOURCE_SUBREDDIT=${SOURCE_SUBREDDIT_2}
   #   volumes:
   #     - ./data2:/config/data
-  #     - ./logs2:/config/logs
+  #     - ./logs2:/config/logs

renovate.json

@@ -8,7 +8,7 @@
   "labels": ["dependencies"],
   "assigneesFromCodeOwners": true,
   "reviewersFromCodeOwners": true,
-  
+
   "packageRules": [
     {
       "description": "Python dependencies - group minor and patch updates",
@@ -48,14 +48,14 @@
 
   "prConcurrentLimit": 3,
   "prHourlyLimit": 2,
-  
+
   "commitMessageTopic": "{{depName}}",
   "commitMessageAction": "update",
   "commitMessageExtra": "to {{#if isPinDigest}}{{{newDigestShort}}}{{else}}{{#if isMajor}}{{prettyNewMajor}}{{else}}{{#if isSingleVersion}}{{prettyNewVersion}}{{else}}{{#if newValue}}{{{newValue}}}{{else}}{{{newDigestShort}}}{{/if}}{{/if}}{{/if}}{{/if}}",
-  
+
   "prTitle": "{{#if isPin}}Pin{{else}}Update{{/if}} {{depName}} {{#if isMajor}}(major){{else}}{{#if isMinor}}(minor){{else}}{{#if isPatch}}(patch){{/if}}{{/if}}{{/if}}",
   "prBodyTemplate": "{{{header}}}{{{table}}}{{{notes}}}{{{changelogs}}}{{{configDescription}}}{{{controls}}}{{{footer}}}",
-  
+
   "enabledManagers": [
     "dockerfile",
     "docker-compose",
@@ -72,4 +72,4 @@
 
   "platformAutomerge": false,
   "requiredStatusChecks": null
-}
+}

requirements.txt

@@ -1 +1 @@
-praw>=7.7.0
+praw>=7.7.0