feat: add production-ready CI/CD, documentation, testing, and monitoring features

Author: d-oit

.cargo/config.toml

@@ -3,7 +3,7 @@
 # Use multiple CPU cores for compilation
 jobs = 4
 
-# Enable incremental compilation
+# Enable incremental compilation for dev builds only
 incremental = true
 
 # Use faster linker on Unix systems
@@ -24,4 +24,8 @@ incremental = true
 [profile.clippy]
 inherits = "dev"
 opt-level = 0
-debug = false
+debug = false
+# sccache configuration for faster builds
+[env]
+RUSTC_WRAPPER = "sccache"
+SCCACHE_DIR = { value = "/tmp/sccache", force = true }

.github/workflows/release-consolidated.yml

@@ -88,10 +88,15 @@ jobs:
         - **macOS (Apple Silicon)**: \`code-guardian-aarch64-apple-darwin.tar.gz\`
         - **Windows**: \`code-guardian-x86_64-pc-windows-msvc.zip\`
         
-        #### Using Cargo
-        \`\`\`bash
-        cargo install --git https://github.com/d-oit/code-guardian --tag $TAG
-        \`\`\`
+         #### Using Cargo (from crates.io)
+         \`\`\`bash
+         cargo install code-guardian-cli
+         \`\`\`
+
+         #### Using Cargo (from source)
+         \`\`\`bash
+         cargo install --git https://github.com/d-oit/code-guardian --tag $TAG
+         \`\`\`
         
         ### 🚀 Quick Start
         \`\`\`bash
@@ -242,10 +247,60 @@ jobs:
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
+  # Publish crates to crates.io
+  publish-crates:
+    name: Publish to Crates.io
+    needs: [create-release, build-release]
+    runs-on: ubuntu-latest
+    if: needs.create-release.result == 'success' && needs.create-release.outputs.is_prerelease == 'false'
+    environment: release
+    steps:
+    - name: Checkout
+      uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+
+    - name: Setup Rust
+      uses: ./.github/actions/setup-rust
+      with:
+        toolchain: stable
+
+    - name: Setup Cache
+      uses: ./.github/actions/setup-cache
+      with:
+        cache-key-suffix: publish
+
+    - name: Publish code-guardian-core
+      run: cargo publish --package code-guardian-core --allow-dirty
+      env:
+        CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
+
+    - name: Wait for core to propagate
+      run: sleep 30
+
+    - name: Publish code-guardian-storage
+      run: cargo publish --package code-guardian-storage --allow-dirty
+      env:
+        CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
+
+    - name: Wait for storage to propagate
+      run: sleep 30
+
+    - name: Publish code-guardian-output
+      run: cargo publish --package code-guardian-output --allow-dirty
+      env:
+        CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
+
+    - name: Wait for output to propagate
+      run: sleep 30
+
+    - name: Publish code-guardian-cli
+      run: cargo publish --package code-guardian-cli --allow-dirty
+      env:
+        CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
+
   # Post-release tasks
   post-release:
     name: Post-Release Tasks
-    needs: [create-release, build-release]
+    needs: [create-release, build-release, publish-crates]
     runs-on: ubuntu-latest
     if: always() && needs.create-release.result == 'success'
     steps:
@@ -262,8 +317,14 @@ jobs:
         echo "" >> $GITHUB_STEP_SUMMARY
         echo "### Assets Built" >> $GITHUB_STEP_SUMMARY
         echo "- Linux (x86_64)" >> $GITHUB_STEP_SUMMARY
-        echo "- Windows (x86_64)" >> $GITHUB_STEP_SUMMARY  
+        echo "- Windows (x86_64)" >> $GITHUB_STEP_SUMMARY
         echo "- macOS Intel (x86_64)" >> $GITHUB_STEP_SUMMARY
         echo "- macOS Apple Silicon (aarch64)" >> $GITHUB_STEP_SUMMARY
         echo "" >> $GITHUB_STEP_SUMMARY
+        echo "### 📦 Crates Published" >> $GITHUB_STEP_SUMMARY
+        echo "- [code-guardian-core](https://crates.io/crates/code-guardian-core)" >> $GITHUB_STEP_SUMMARY
+        echo "- [code-guardian-storage](https://crates.io/crates/code-guardian-storage)" >> $GITHUB_STEP_SUMMARY
+        echo "- [code-guardian-output](https://crates.io/crates/code-guardian-output)" >> $GITHUB_STEP_SUMMARY
+        echo "- [code-guardian-cli](https://crates.io/crates/code-guardian-cli)" >> $GITHUB_STEP_SUMMARY
+        echo "" >> $GITHUB_STEP_SUMMARY
         echo "🔗 [View Release](https://github.com/${{ github.repository }}/releases/tag/$TAG)" >> $GITHUB_STEP_SUMMARY

.gitignore

@@ -34,4 +34,7 @@ node_modules
 clippy_output.json
 
 # Development workflow logs
-dev-workflow.log
+dev-workflow.log
+opencodetmp/opencode
+opencodetmp/opencode-linux-x64.zip
+sccache-*-musl/

.opencode/agent/agent-coordinator.md

@@ -39,7 +39,6 @@ tools:
   todowrite: true
   todoread: true
   bash: false  
-  task: true
 ---
 ## Overview
 The Agent Coordinator is an AI agent that orchestrates straightforward multi-agent workflows for complex tasks that can be decomposed into manageable subtasks. It manages basic handoffs between agents, leveraging existing @.opencode/agent agents or dynamically created ones, without advanced swarm intelligence features.

.opencode/package.json

@@ -4,7 +4,7 @@
   "description": "OpenCode plugin for Code Guardian, providing linting and testing best practices",
   "type": "module",
   "dependencies": {
-    "@opencode-ai/plugin": "0.15.7"
+    "@opencode-ai/plugin": "0.15.10"
   },
   "devDependencies": {
     "@babel/core": "^7.28.4",

Cargo.lock

@@ -89,10 +89,45 @@ audit: ## Run security audit on dependencies
 	@echo "🔒 Running security audit..."
 	cargo audit
 
+security-audit: ## Comprehensive security audit with cargo-deny
+	@echo "🔒 Running comprehensive security audit..."
+	cargo deny check
+
+dependency-audit: ## Check for unused dependencies
+	@echo "📦 Checking for unused dependencies..."
+	cargo machete
+
+modernize-tools: ## Install modern Rust tools (2024-2025 best practices)
+	@echo "🔧 Installing modern Rust toolchain..."
+	cargo install cargo-nextest cargo-deny cargo-machete mdbook cargo-chef sccache
+
+setup-sccache: ## Configure sccache for distributed compilation
+	@echo "⚡ Setting up sccache..."
+	@mkdir -p ~/.cache/sccache
+	@echo "SCCACHE_DIR=~/.cache/sccache" >> .env
+	@echo "RUSTC_WRAPPER=sccache" >> .env
+	@echo "✅ sccache configured. Use 'export RUSTC_WRAPPER=sccache' to enable"
+
 # Documentation
 docs: ## Generate and open documentation
 	@echo "📚 Generating documentation..."
-	cargo doc --open --no-deps
+	cargo doc --open
+
+docs-serve: ## Serve documentation with mdbook
+	@echo "📚 Starting documentation server..."
+	@if command -v mdbook >/dev/null 2>&1; then \
+		cd docs && mdbook serve --open; \
+	else \
+		echo "❌ mdbook not installed. Run 'make modernize-tools' first"; \
+	fi
+
+docs-build: ## Build documentation with mdbook
+	@echo "📚 Building documentation..."
+	@if command -v mdbook >/dev/null 2>&1; then \
+		cd docs && mdbook build; \
+	else \
+		echo "❌ mdbook not installed. Run 'make modernize-tools' first"; \
+	fi
 
 docs-watch: ## Generate docs in watch mode
 	@echo "👀 Watching documentation..."
@@ -152,6 +187,8 @@ ci-simulate: ## Simulate CI pipeline locally
 	make test
 	make coverage-ci
 	make audit
+	make security-audit
+	make dependency-audit
 
 # Performance profiling
 bench: ## Run benchmarks
@@ -245,7 +282,7 @@ fast-check: ## Quick development check (no expensive clippy)
 	@echo "⚡ Fast quality check..."
 	@cargo fmt --all -- --check
 	@cargo check --workspace
-	@cargo test --lib --workspace
+	@cargo nextest run --lib --workspace
 
 fast-lint: ## Fast clippy with reduced lints
 	@echo "📎 Fast clippy..."