ctl-core 0.6.26

# The standard Rust tasks every ctl repository runs. A repository includes
# this file at a pinned ctl-core release, after any other includes:
#
#   [settings]
#   experimental = true  # mise loads git:: task includes only with this on
#
#   [task_config]
#   includes = [
#     "git::https://github.com/victor-software-house/ctl-core.git//tasks/rust.toml?ref=v0.6.14",
#   ]
#
# The repository defines `check:features` and `check:repo` itself; `verify`
# depends on both. `check:repo` holds the repository's own checks, and does
# nothing in a repository that has none.
# Every task that resolves dependencies passes --locked, so a Cargo.lock that
# no longer matches Cargo.toml fails verify here, as it fails a release build
# that passes --locked. A repository's own cargo commands, such as those in
# check:features, pass it too.
# Its mise.toml pins the tools these tasks call, including the stable
# compiler and the formatting nightly named in `format`. Bump the ref and
# those pins together.

["check:toolchain"]
description = "mise.toml, rust-toolchain.toml, and rust-version pin the same stable"
# pipefail: a failing cargo metadata or jq must fail the task, not pass it.
shell = "bash -o pipefail -c"
run = [
  '[ "$(rustc -V)" = "$(env -u RUSTUP_TOOLCHAIN RUSTUP_AUTO_INSTALL=0 rustc -V)" ] || { echo "✘ mise.toml and rust-toolchain.toml pin different toolchains"; exit 1; }',
  '''cargo metadata --no-deps --locked --format-version 1 | jq --arg v "$(rustc -V | cut -d' ' -f2)" '[.packages[] | select(.rust_version != $v) | .name] | if length > 0 then error("✘ rust-version differs from the pinned stable in: \(join(", "))") else empty end' ''',
]

[format]
description = "rustfmt check on the formatting nightly"
run = "cargo +nightly-2026-09-29 fmt --all -- --check"

[lint]
description = "clippy -D warnings"
# --workspace in lint, test, and test:doc: without it cargo selects the
# default members, which is only the root package of a workspace with one, or
# the default-members list, so the other members would go unchecked.
run = "cargo clippy --locked --workspace --all-targets --all-features -- -D warnings"

[test]
description = "Unit and integration tests"
# --tests selects every target whose `test` flag is on, bins included. --bins
# would select every bin regardless of the flag, so a fuzz target with
# `test = false` would build and run as a test.
run = "cargo test --locked --workspace --all-features --lib --tests"
# Stops a hung test run instead of holding the gate. The limit also counts
# compile time and waits on the target/ lock, so it sits far above a cold build.
timeout = "30m"

["test:doc"]
description = "Doc-tests"
run = "cargo test --locked --workspace --doc --all-features"
timeout = "30m"

[deny]
description = "License, ban, and source policy (offline)"
run = "cargo deny --locked check licenses bans sources"

["deny:advisories"]
description = "RustSec advisories and yanked crates (network)"
run = "cargo deny --locked check advisories"

[deps]
description = "Unused crate analysis"
# cargo-machete calls cargo metadata without --locked, which would rewrite a
# stale Cargo.lock while sibling tasks run. The locked metadata call fails
# first, so no task in verify ever writes the lock.
run = [
  "cargo metadata --locked --format-version 1 > /dev/null",
  "cargo-machete --with-metadata",
]

# Published crates only. CI runs it before packaging; it compares against the
# release on crates.io.
[semver]
description = "Public API changes against the last release (network)"
run = "cargo semver-checks"

[verify]
description = "Toolchain pins, format, lint, feature sets, tests, doc-tests, deny, unused crates, repository checks"
depends = [
  "check:toolchain", "format", "lint", "check:features",
  "test", "test:doc", "deny", "deps", "check:repo",
]