mise 2026.9.2

Dev tools, env vars, and tasks in one CLI
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75

use eyre::{Result, bail};
use serde::Deserialize;

use crate::config::Config;
use crate::system::resources::{ResourceAction, ResourceId, ResourcePlan};

#[derive(Clone, Debug, Default, Deserialize)]
pub(crate) struct FirewallTomlConfig {
    #[serde(flatten)]
    values: std::collections::HashMap<String, toml::Value>,
}

#[derive(Clone, Debug)]
pub(crate) struct FirewallRequest;

pub(crate) fn prepare_request_from_config(config: &Config) -> Result<Option<FirewallRequest>> {
    reject_configured(config)
}

pub(crate) fn request_from_config(config: &Config) -> Result<Option<FirewallRequest>> {
    reject_configured(config)
}

pub(crate) fn status_request_from_config(config: &Config) -> Result<Option<FirewallRequest>> {
    if configured(config) {
        Ok(Some(FirewallRequest))
    } else {
        Ok(None)
    }
}

pub(crate) fn inspect_request(_request: &mut FirewallRequest) -> Result<()> {
    Ok(())
}

impl FirewallRequest {
    pub(crate) fn plans(&self) -> Vec<ResourcePlan> {
        vec![ResourcePlan::new(
            ResourceId::new("firewall", "linux"),
            "unsupported platform",
            "configured Linux firewall",
            ResourceAction::Unknown,
        )]
    }
}

pub(crate) fn apply(_request: &FirewallRequest, _dry_run: bool, _yes: bool) -> Result<()> {
    bail!("bootstrap firewall management is only supported on Linux")
}

pub(crate) fn inspect_privileged_plan_from_stdin() -> Result<()> {
    bail!("bootstrap firewall management is only supported on Linux")
}

pub(crate) fn apply_privileged_plan_from_stdin() -> Result<()> {
    bail!("bootstrap firewall management is only supported on Linux")
}

fn configured(config: &Config) -> bool {
    config.config_files.values().any(|cf| {
        cf.bootstrap_config()
            .and_then(|bootstrap| bootstrap.linux.firewall)
            .is_some_and(|firewall| {
                let _ = firewall.values.len();
                true
            })
    })
}

fn reject_configured(config: &Config) -> Result<Option<FirewallRequest>> {
    if configured(config) {
        bail!("bootstrap firewall management is only supported on Linux");
    }
    Ok(None)
}