settings.py

from pathlib import Path

# Privacy / PHI
PHI_SAFE_MODE: bool = True            # redact before indexing/logging
PERSIST_CONTENT: bool = False         # never store message/upload contents to disk

# Uploads
MAX_UPLOAD_MB: int = 15
ALLOWED_EXT = {".pdf", ".docx", ".txt", ".md", ".csv", ".png", ".jpg", ".jpeg", ".webp"}
ALLOWED_MIME = {
    "application/pdf",
    "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
    "text/plain", "text/markdown", "text/csv",
    "image/png", "image/jpeg", "image/webp",
}

# Optional AV (clamd). If True and clamd is reachable, files will be scanned before parsing.
ENABLE_AV_SCAN: bool = True
CLAMD_UNIX_SOCKET: str | None = None        # e.g., "/var/run/clamav/clamd.ctl"
CLAMD_NETWORK: tuple[str, int] | None = None  # e.g., ("localhost", 3310)

# Paths
SNAPSHOT_PATH = "snapshots/current.json"
RAG_STORE_DIR = Path("rag_store")