.golangci.yml

version: "2"
run:
  tests: true
  # Without these, every linter skips the files behind //go:build integration
  # and //go:build e2e — the whole e2e suite and the Docker integration
  # adapters were outside static analysis entirely. "unix" is not listed: it is
  # a GOOS-derived release tag, already satisfied where those files compile,
  # and forcing it would drag unix-only syscalls into the Windows build.
  build-tags:
    - integration
    - e2e
linters:
  default: none
  enable:
    - asciicheck
    - bodyclose
    - containedctx
    - contextcheck
    - copyloopvar
    - depguard
    - dupl
    - dupword
    - durationcheck
    - err113
    - errcheck
    - errname
    - errorlint
    - exhaustive
    - fatcontext
    - forbidigo
    - goconst
    - gocritic
    - gocyclo
    - govet
    - ineffassign
    - intrange
    - misspell
    - nilerr
    - nilnil
    - noctx
    - nolintlint
    - nosprintfhostport
    - paralleltest
    - prealloc
    - predeclared
    - revive
    - staticcheck
    - tagliatelle
    - testifylint
    - tparallel
    - unconvert
    - unparam
    - unused
    - usestdlibvars
    - wrapcheck
  settings:
    depguard:
      rules:
        main:
          deny:
            - pkg: github.com/sirupsen/logrus
              desc: replaced by stdlib log/slog
    forbidigo:
      forbid:
        - pattern: ^fmt\.Print.*$
    goconst:
      min-occurrences: 6
    gocyclo:
      min-complexity: 15
    misspell:
      locale: US
    revive:
      rules:
        - name: blank-imports
          disabled: true
        - name: package-comments
        - name: var-naming
        - name: exported
        - name: if-return
        - name: early-return
        - name: line-length-limit
          arguments:
            - 140
        - name: import-shadowing
        - name: time-naming
        - name: increment-decrement
    wrapcheck:
      ignore-sig-regexps:
        - errors\.New\(
        - \*github\.com/netresearch/ofelia/core\.Context\)\.Next\(
    staticcheck:
      # Explicit selection instead of the blanket `text: "QF"` exclusion this
      # replaces: that regex matched every QF#### check by message text, and
      # also silently swallowed an ST1018 finding about invisible Unicode in a
      # mail template. QF1008 (redundant embedded-field selector) is the one
      # check excluded on purpose — it is pure style and fires widely here.
      checks:
        - all
        - -QF1008
  exclusions:
    generated: lax
    presets:
      - common-false-positives
      - legacy
      - std-error-handling
    rules:
      # Test files have relaxed linting for practical reasons
      - linters:
          - gocyclo
          - revive
          - wrapcheck
          - goconst
          - nilnil
          - err113
          - errcheck
          - dupl
          - errorlint
          - gocritic
          - predeclared
          - staticcheck
          - unparam
        path: _test\.go
      # User-facing validation errors need dynamic context for helpful messages
      - linters:
          - err113
        path: cli/(init|hashpw|daemon|doctor|config_webhook|docker_config_handler)\.go
      - linters:
          - err113
        path: middlewares/(preset|webhook|sanitize).*\.go
      - linters:
          - err113
        path: config/(command_validator|sanitizer)\.go
      - linters:
          - err113
        path: web/server\.go
      # Empty branches in test code - often used for pattern matching
      - linters:
          - staticcheck
        path: _test\.go
        text: "SA9003"
      - linters:
          - govet
        path: "_test"
        text: "buildtag:"
      - linters:
          - nolintlint
        path: core/common\.go
        text: nolint:exhaustive
      - linters:
          - tagliatelle
        path: middlewares/slack\.go
      # Docker SDK deprecated types - will update when SDK breaks
      - linters:
          - staticcheck
        path: core/adapters/docker/convert_test\.go
        text: "SA1019:"
      - linters:
          - noctx
        path: cli/daemon\.go
      # Test files don't need context propagation
      - linters:
          - noctx
        path: _test\.go
      # Non-parallel tests - intentionally modify global state
      - linters:
          - paralleltest
          - tparallel
        path: cli/daemon_boot_test\.go
      - linters:
          - paralleltest
          - tparallel
        path: cli/config_initialize_test\.go
      - linters:
          - paralleltest
          - tparallel
        path: middlewares/webhook_test\.go
        text: "TestWebhook_SendsRequest|TestWebhook_Retry"
      - linters:
          - paralleltest
          - tparallel
        path: middlewares/webhook_security_test\.go
        text: "TestSetGlobalSecurityConfig"
      # Benchmark tests don't need t.Parallel()
      - linters:
          - paralleltest
          - tparallel
        path: _benchmark_test\.go
      # Integration tests often share state; constructors don't need context
      - linters:
          - paralleltest
          - tparallel
          - contextcheck
        path: integration_test\.go
      # Mutation tests - generated structure, TODO: add t.Parallel() later
      - linters:
          - paralleltest
          - tparallel
        path: _mutation_test\.go
      # Core tests - TODO: add t.Parallel() incrementally
      - linters:
          - paralleltest
          - tparallel
        path: core/.*_test\.go
      # CLI tests - many are lifecycle/integration tests
      - linters:
          - paralleltest
          - tparallel
        path: cli/.*_test\.go
      # Config tests - TODO: add t.Parallel() incrementally
      - linters:
          - paralleltest
          - tparallel
        path: config/.*_test\.go
      # Web tests - TODO: add t.Parallel() incrementally
      - linters:
          - paralleltest
          - tparallel
        path: web/.*_test\.go
      # Metrics tests - TODO: add t.Parallel() incrementally
      - linters:
          - paralleltest
          - tparallel
        path: metrics/.*_test\.go
      # metrics package name is intentional; it does not shadow a top-level stdlib package
      - linters:
          - revive
        path: metrics/
        text: "var-naming"
      # Middlewares tests - TODO: add t.Parallel() incrementally
      - linters:
          - paralleltest
          - tparallel
        path: middlewares/.*_test\.go
      # E2e tests manage shared scheduler state
      - linters:
          - paralleltest
          - tparallel
        path: e2e/.*_test\.go
    paths:
      - third_party$
      - builtin$
      - examples$
formatters:
  enable:
    - gci
    - gofmt
    - gofumpt
    - goimports
  settings:
    gci:
      sections:
        - standard
        - default
        - prefix(github.com/netresearch/ofelia)
  exclusions:
    generated: lax
    paths:
      - third_party$
      - builtin$
      - examples$
issues:
  max-issues-per-linter: 0
  max-same-issues: 0
  uniq-by-line: false