fix: ruff lint — import sorting, unused imports, line length, naming

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

agent_bench/security/pii_redactor.py

@@ -65,9 +65,13 @@ class PIIRedactor:
                 self._nlp = spacy.load("en_core_web_sm")
                 self.use_ner = True
             except ImportError:
-                logger.warning("pii.use_ner=true but spaCy not installed, falling back to regex-only")
+                logger.warning(
+                    "pii.use_ner=true but spaCy not installed, falling back to regex-only"
+                )
             except OSError:
-                logger.warning("pii.use_ner=true but en_core_web_sm not found, falling back to regex-only")
+                logger.warning(
+                    "pii.use_ner=true but en_core_web_sm not found, falling back to regex-only"
+                )
 
     def redact(self, text: str) -> RedactionResult:
         """Detect and optionally redact PII in the given text."""

agent_bench/serving/routes.py

@@ -133,7 +133,10 @@ async def ask(body: AskRequest, request: Request) -> AskResponse:
             "violations": out_verdict.violations,
         }
         if not out_verdict.passed and out_verdict.action == "block":
-            answer = "I'm unable to provide a response to this query. The output was filtered for safety."
+            answer = (
+                "I'm unable to provide a response to this query. "
+                "The output was filtered for safety."
+            )
 
     # Store Q+A if session_id provided
     if body.session_id and conversation_store:
@@ -215,7 +218,7 @@ async def ask_stream(body: AskRequest, request: Request) -> StreamingResponse:
     output_validator = getattr(request.app.state, "output_validator", None)
 
     async def event_generator():
-        from agent_bench.serving.schemas import StreamEvent as SE
+        from agent_bench.serving.schemas import StreamEvent
 
         # Buffer all events so we can validate before sending to client.
         # The orchestrator emits the final answer as a single chunk (not
@@ -260,7 +263,7 @@ async def ask_stream(body: AskRequest, request: Request) -> StreamingResponse:
         # Now yield events to the client — safe content only
         for event in buffered_events:
             if output_blocked and event.type == "chunk":
-                yield SE(type="chunk", content=filtered_answer).to_sse()
+                yield StreamEvent(type="chunk", content=filtered_answer).to_sse()
             else:
                 yield event.to_sse()
 

tests/test_audit_logger.py

@@ -4,9 +4,6 @@ from __future__ import annotations
 
 import json
 import os
-from pathlib import Path
-
-import pytest
 
 from agent_bench.security.audit_logger import AuditLogger
 

tests/test_output_validator.py

@@ -5,7 +5,6 @@ from __future__ import annotations
 import pytest
 
 from agent_bench.security.output_validator import OutputValidator
-from agent_bench.security.types import OutputVerdict
 
 
 class TestPIILeakage:

tests/test_pii_redactor.py

@@ -4,7 +4,7 @@ from __future__ import annotations
 
 import pytest
 
-from agent_bench.security.pii_redactor import PIIRedactor, RedactionResult
+from agent_bench.security.pii_redactor import PIIRedactor
 
 
 class TestRegexPatterns:

tests/test_security_integration.py

@@ -4,14 +4,13 @@ from __future__ import annotations
 
 import json
 import time
-from pathlib import Path
 
 import pytest
 from httpx import ASGITransport, AsyncClient
 
+from agent_bench.agents.orchestrator import Orchestrator
 from agent_bench.core.config import AppConfig, ProviderConfig, SecurityConfig
 from agent_bench.core.provider import MockProvider
-from agent_bench.agents.orchestrator import Orchestrator
 from agent_bench.rag.store import HybridStore
 from agent_bench.serving.middleware import MetricsCollector, RequestMiddleware
 from agent_bench.tools.calculator import CalculatorTool
@@ -49,10 +48,10 @@ def _make_security_app(tmp_path, security_config=None):
     app.state.metrics = MetricsCollector()
 
     # Security components
+    from agent_bench.security.audit_logger import AuditLogger
     from agent_bench.security.injection_detector import InjectionDetector
-    from agent_bench.security.pii_redactor import PIIRedactor
     from agent_bench.security.output_validator import OutputValidator
-    from agent_bench.security.audit_logger import AuditLogger
+    from agent_bench.security.pii_redactor import PIIRedactor
 
     sec = config.security
     app.state.injection_detector = InjectionDetector(
@@ -163,8 +162,6 @@ class TestStreamInjectionBlocking:
     @pytest.mark.asyncio
     async def test_stream_output_validation_runs(self, tmp_path):
         """Output containing PII should trigger output validation on stream."""
-        from unittest.mock import AsyncMock, patch
-        from agent_bench.core.types import TokenUsage
         from agent_bench.serving.schemas import StreamEvent
 
         app = _make_security_app(tmp_path)