.golangci.yml

# golangci-lint configuration for ZeBGP (v2 format)
version: "2"

run:
  timeout: 10m
  # Lint the feature-rich shipped build (ze + ze-appliance feature set): ze_core
  # plus every default-on per-feature compile-out tag. This gives the
  # //go:build ze_<feature> registration + factory files real lint coverage and
  # prevents their registry callers (e.g. registerService) from being reported
  # as unused.
  #
  # This list is static YAML (golangci-lint cannot read feature-gates.txt), so it
  # is the ONE feature-gate consumer that does not self-derive. It MUST equal
  # ze_core + every gate tag in feature-gates.txt; `dep_audit.py --check` fails on
  # drift. When you add a gate to feature-gates.txt, add its tag here too.
  # See ai/rules/plugins.md.
  build-tags:
    - ze_core
    - ze_lg
    - ze_ssh
    - ze_web
    - ze_gnmi
    - ze_mcp
    - ze_rest
    - ze_grpc
    - ze_telemetry
    - ze_isis
    - ze_ldp
    - ze_ospf
    - ze_rsvpte
    - ze_vrrp
    - ze_ntp
    - ze_flowexport
    - ze_ddos
    - ze_anomaly
    - ze_as112
    - ze_geodns
    - ze_dhcpserver
    - ze_pxe
    - ze_trafficusage
    - ze_policyroute
    - ze_cos
    - ze_copp
    - ze_mpls
    - ze_tacacs
    - ze_exabgp
    - ze_bfd
    - ze_vpp
    - ze_ike
    - ze_l2tp
    - ze_radius
    - ze_mrt
    - ze_bgp
    - ze_bmp

linters:
  exclusions:
    rules:
      - path: _test\.go
        linters:
          - dupl
          - goconst
          - gosec
          - prealloc
      - path: cmd/
        linters:
          - forbidigo
      - linters:
          - staticcheck
        text: "QF1008"
      # Bubbletea tea.Model interface requires value receivers — cannot use pointer
      - path: "(internal/component/cli/model[^/]*|cmd/ze/cli/main)\\.go"
        text: "hugeParam"
      # slog.Handler interface requires slog.Record by value — cannot use pointer
      - path: "internal/core/slogutil/color\\.go"
        text: "hugeParam"

  enable:
    # Core linters
    - errcheck
    - govet
    - ineffassign
    - staticcheck
    - unused
    # Additional linters
    - forbidigo
    - gocritic
    - gosec
    - misspell
    - unconvert
    - unparam
    - nakedret
    - prealloc
    - noctx
    - bodyclose
    - dupl
    - errorlint
    - exhaustive
    - forcetypeassert
    - goconst
    - godot
    - nilerr
    - nilnil
    - tparallel
    - wastedassign
    # Modernization linters
    - intrange
    - modernize

  settings:
    errcheck:
      check-type-assertions: true
      check-blank: false
      exclude-functions:
        - "(*strings.Builder).Write"
        - "(*strings.Builder).WriteByte"
        - "(*strings.Builder).WriteRune"
        - "(*strings.Builder).WriteString"
        - "(*github.com/ze-software/ze/internal/core/textbuf.Buffer).Write"
        - "(*github.com/ze-software/ze/internal/core/textbuf.Buffer).WriteByte"
        - "(*github.com/ze-software/ze/internal/core/textbuf.Buffer).WriteRune"
        - "(*github.com/ze-software/ze/internal/core/textbuf.Buffer).WriteString"

    govet:
      disable:
        - fieldalignment

    gocritic:
      enabled-tags:
        - diagnostic
        - style
        - performance
      disabled-checks:
        - builtinShadow
        - commentedOutCode
        - importShadow
        - unnamedResult
      settings:
        hugeParam:
          # ospfConfig is an intentionally-copied immutable config snapshot passed by value
          # across the OSPF package (setConfig/reconcile/forInstance and ~20 read helpers).
          # Each OSPF spec that adds a config field grows it; the threshold has tracked that
          # growth (256 -> 280 -> 288) rather than converting the snapshot pattern to pointers.
          sizeThreshold: 288
        rangeValCopy:
          sizeThreshold: 160

    gosec:
      excludes:
        - G104 # Errors unhandled — checked by errcheck linter instead
        - G115 # Integer overflow conversion — intentional byte extraction in wire encoding
        - G602 # Slice index out of range — false positives on bounded loops
        - G703 # Path traversal — XDG config resolution uses env vars by design
        - G704 # SSRF via taint — false positive on URL construction from constants
        - G705 # XSS via taint — false positive on fmt.Fprintf to os.Stderr / io.Writer
        - G706 # Log injection via taint — false positive on slog structured logging

    misspell:
      # US spelling is the codebase convention (neighbor 1833:3, behavior 423:0, ...).
      locale: US

    nakedret:
      max-func-lines: 30

    prealloc:
      simple: true
      range-loops: true

    dupl:
      threshold: 150

    goconst:
      min-len: 3
      min-occurrences: 3

    exhaustive:
      default-signifies-exhaustive: true

    forbidigo:
      analyze-types: true
      forbid:
        # Legacy log package is forbidden; use log/slog (ai/rules/go-standards.md).
        # NOTE: forbidigo matches identifiers/selectors only, never call
        # arguments, so `os.Getenv("ZE_...")` cannot be expressed here; a
        # blanket os.Getenv ban would flood legitimate system-var reads
        # (HOME, PATH, ...). Ze env access (internal/core/env only) is
        # enforced by ai/rules/go-standards.md and the edit hooks instead.
        - pattern: '^log\.(Print|Printf|Println|Fatal|Fatalf|Fatalln|Panic|Panicf|Panicln)$'
          pkg: '^log$'
          msg: "use log/slog -- ai/rules/go-standards.md"

formatters:
  enable:
    - gofmt
    - goimports

  settings:
    goimports:
      local-prefixes:
        - github.com/ze-software/ze

issues:
  max-issues-per-linter: 50
  max-same-issues: 10