foxhunt/.github/workflows/aggressive-linting.yml

# FOXHUNT HFT SYSTEM - AGGRESSIVE LINTING CI/CD PIPELINE
# 🚨 CRITICAL: Zero-tolerance quality enforcement for financial trading systems
# Enforces strict code quality, safety, and performance standards

name: 'HFT Aggressive Linting Pipeline'

on:
  push:
    branches: [ main, master, develop, 'release/*', 'hotfix/*' ]
  pull_request:
    branches: [ main, master, develop ]

# Pragmatic quality enforcement with ratcheting
env:
  CARGO_TERM_COLOR: always
  # Performance optimizations for CI
  CARGO_INCREMENTAL: '0'
  RUST_BACKTRACE: '1'

jobs:
  # ===========================================
  # COMPILATION AND BASIC CHECKS
  # ===========================================
  compilation:
    name: '🔥 Zero Compilation Errors'
    runs-on: ubuntu-latest
    timeout-minutes: 30
    
    steps:
      - name: '📥 Checkout Repository'
        uses: actions/checkout@v4
        
      - name: '🦀 Install Rust Toolchain'
        uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt, clippy
          
      - name: '💾 Cache Dependencies'
        uses: Swatinem/rust-cache@v2
        with:
          cache-on-failure: true
          
      - name: '🔍 Check Compilation'
        run: |
          echo "🚨 ENFORCING ZERO COMPILATION ERRORS FOR HFT SYSTEM"
          cargo check --workspace --all-targets --all-features
          echo "✅ All services compile successfully"

  # ===========================================
  # FORMATTING ENFORCEMENT
  # ===========================================
  formatting:
    name: '🎨 Strict Formatting'
    runs-on: ubuntu-latest
    timeout-minutes: 10
    
    steps:
      - name: '📥 Checkout Repository'
        uses: actions/checkout@v4
        
      - name: '🦀 Install Rust Toolchain'
        uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt
          
      - name: '🎨 Check Formatting'
        run: |
          echo "🎨 ENFORCING STRICT RUSTFMT FORMATTING"
          cargo fmt --all -- --check
          echo "✅ All code is properly formatted"

  # ===========================================
  # AGGRESSIVE CLIPPY LINTING
  # ===========================================
  clippy-all-groups:
    name: '📏 All Lint Groups'
    runs-on: ubuntu-latest
    timeout-minutes: 45
    
    steps:
      - name: '📥 Checkout Repository'
        uses: actions/checkout@v4
        
      - name: '🦀 Install Rust Toolchain'
        uses: dtolnay/rust-toolchain@stable
        with:
          components: clippy
          
      - name: '💾 Cache Dependencies'
        uses: Swatinem/rust-cache@v2
        
      - name: '📏 Run All Clippy Lint Groups'
        run: |
          echo "🔍 Running clippy with ALL lint groups enabled"
          cargo clippy --workspace --all-targets --all-features -- \
            -D clippy::all \
            -D clippy::pedantic \
            -D clippy::nursery \
            -D clippy::cargo
          echo "✅ All clippy lint groups passed"

  # ===========================================
  # HFT SAFETY RESTRICTIONS
  # ===========================================
  hft-safety-restrictions:
    name: '🚨 HFT Safety Restrictions'
    runs-on: ubuntu-latest
    timeout-minutes: 45
    
    steps:
      - name: '📥 Checkout Repository'
        uses: actions/checkout@v4
        
      - name: '🦀 Install Rust Toolchain'
        uses: dtolnay/rust-toolchain@stable
        with:
          components: clippy
          
      - name: '💾 Cache Dependencies'
        uses: Swatinem/rust-cache@v2
        
      - name: '🚨 Run HFT Safety Restrictions'
        run: |
          echo "🚨 Running HFT safety restriction lints"
          cargo clippy --workspace --all-targets --all-features -- \
            -D clippy::unwrap_used \
            -D clippy::expect_used \
            -D clippy::indexing_slicing \
            -D clippy::panic \
            -D clippy::float_arithmetic \
            -D clippy::integer_arithmetic \
            -D clippy::as_conversions \
            -D clippy::cast_possible_truncation \
            -D clippy::cast_precision_loss \
            -D clippy::cast_sign_loss \
            -D clippy::alloc_instead_of_core \
            -D clippy::std_instead_of_core
          echo "✅ All HFT safety restrictions passed"

  # ===========================================
  # PERFORMANCE LINTS
  # ===========================================
  performance-lints:
    name: '⚡ Performance Lints'
    runs-on: ubuntu-latest
    timeout-minutes: 45
    
    steps:
      - name: '📥 Checkout Repository'
        uses: actions/checkout@v4
        
      - name: '🦀 Install Rust Toolchain'
        uses: dtolnay/rust-toolchain@stable
        with:
          components: clippy
          
      - name: '💾 Cache Dependencies'
        uses: Swatinem/rust-cache@v2
        
      - name: '⚡ Run Performance Lints'
        run: |
          echo "⚡ Running performance-focused lints"
          cargo clippy --workspace --all-targets --all-features -- \
            -D clippy::redundant_clone \
            -D clippy::unnecessary_cast \
            -D clippy::large_types_passed_by_value \
            -D clippy::large_futures \
            -D clippy::large_stack_frames \
            -D clippy::boxed_local \
            -D clippy::needless_pass_by_value \
            -D clippy::inefficient_to_string \
            -D clippy::suboptimal_flops
          echo "✅ All performance checks passed"

  # ===========================================
  # SECURITY AND SAFETY AUDITS
  # ===========================================
  security-audit:
    name: '🔒 Security Audit'
    runs-on: ubuntu-latest
    timeout-minutes: 15
    
    steps:
      - name: '📥 Checkout Repository'
        uses: actions/checkout@v4
        
      - name: '🦀 Install Rust Toolchain'
        uses: dtolnay/rust-toolchain@stable
        
      - name: '📦 Install Cargo Audit'
        run: cargo install cargo-audit
        
      - name: '🔒 Run Security Audit'
        run: |
          echo "🔒 Running security vulnerability audit"
          cargo audit
          echo "✅ No security vulnerabilities found"

  # ===========================================
  # DEPENDENCY MANAGEMENT
  # ===========================================
  dependency-check:
    name: '📦 Dependency Analysis'
    runs-on: ubuntu-latest
    timeout-minutes: 15
    
    steps:
      - name: '📥 Checkout Repository'
        uses: actions/checkout@v4
        
      - name: '🦀 Install Rust Toolchain'
        uses: dtolnay/rust-toolchain@stable
        
      - name: '📦 Install Cargo Deny'
        run: cargo install cargo-deny
        
      - name: '🚫 Check Dependencies'
        run: |
          echo "📦 Running dependency analysis"
          cargo deny check
          echo "✅ All dependency checks passed"

  # ===========================================
  # CODE COVERAGE REQUIREMENTS
  # ===========================================
  coverage-enforcement:
    name: '📊 Code Coverage'
    runs-on: ubuntu-latest
    timeout-minutes: 60
    
    steps:
      - name: '📥 Checkout Repository'
        uses: actions/checkout@v4
        
      - name: '🦀 Install Rust Toolchain'
        uses: dtolnay/rust-toolchain@stable
        
      - name: '📊 Install Tarpaulin'
        run: cargo install cargo-tarpaulin
        
      - name: '🧪 Run Tests with Coverage'
        run: |
          echo "📊 Running tests with coverage analysis"
          cargo tarpaulin --all-features --workspace --timeout 120 --fail-under 80
          echo "✅ Code coverage requirements met (≥80%)"

  # ===========================================
  # FINAL INTEGRATION CHECK
  # ===========================================
  integration-check:
    name: '🎯 Final Integration'
    needs: [compilation, formatting, clippy-all-groups, hft-safety-restrictions, performance-lints, security-audit, dependency-check, coverage-enforcement]
    runs-on: ubuntu-latest
    timeout-minutes: 30
    
    steps:
      - name: '📥 Checkout Repository'
        uses: actions/checkout@v4
        
      - name: '🦀 Install Rust Toolchain'
        uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt, clippy
          
      - name: '💾 Cache Dependencies'
        uses: Swatinem/rust-cache@v2
        
      - name: '🚀 Final Build Test'
        run: |
          echo "🚀 Running final integration build"
          cargo build --workspace --all-targets --all-features --release
          echo "✅ Final integration build successful"
          
      - name: '🧪 Final Test Suite'
        run: |
          echo "🧪 Running comprehensive test suite"
          cargo test --workspace --all-features
          echo "✅ All tests passed successfully"
          
      - name: '🎉 Quality Gate Passed'
        run: |
          echo "🎉 FOXHUNT HFT SYSTEM - ALL QUALITY GATES PASSED"
          echo "✅ Zero compilation errors"
          echo "✅ Strict formatting enforced"  
          echo "✅ All clippy lint groups passed"
          echo "✅ HFT safety restrictions enforced"
          echo "✅ Performance standards met"
          echo "✅ Security audit clean"
          echo "✅ Dependencies validated"
          echo "✅ Code coverage ≥80%"
          echo ""
          echo "🚀 READY FOR HFT PRODUCTION DEPLOYMENT"