# Contributing
By participating in this project you agree to abide by our
[Code of Conduct](CODE_OF_CONDUCT.md).
## Prerequisites
| [Rust stable](https://rustup.rs/) | Build the daemon |
| [`typos`](https://github.com/crate-ci/typos) | Spell check, run by the pre-commit hook (`make spell` installs it automatically) |
| [`cargo-llvm-cov`](https://github.com/taiki-e/cargo-llvm-cov) + `llvm-tools-preview` | 100% line-coverage gate, enforced by the pre-push hook (`cargo install cargo-llvm-cov && rustup component add llvm-tools-preview`) |
| [`linecheck`](https://crates.io/crates/linecheck) | 500-line-per-file gate over `src/`, enforced by the pre-push hook and CI's `linecheck` job (`cargo install linecheck`) |
| [`direnv`](https://direnv.net/) | Auto-runs `.envrc` on `cd` so the bundled git hooks stay enabled (`core.hooksPath = .githooks`) |
| [`actionlint`](https://github.com/rhysd/actionlint) (with `shellcheck` on `PATH`) | Validates `.github/workflows/*.yml` and the shell in their `run:` blocks; enforced in CI by [`actionlint.yml`](.github/workflows/actionlint.yml) |
| [pnpm](https://pnpm.io/installation) | Builds the React UI (`client/`, `pnpm install` once at the repo root) and runs [Changesets](https://github.com/changesets/changesets) (`pnpm changeset`) — see [Workflow](#workflow) below |
pnpm is only needed when working on the browser UI (`client/`) or cutting a
changeset. The daemon itself is a native binary and builds without it —
`cargo build` falls back to the committed `prebuilt.html` when `pnpm` isn't
installed.
## Setup
```sh
git clone https://github.com/moadim-io/daemon
cd daemon
cargo build
```
Run the checks the pre-push hook enforces before any push. Two of the hook's
gates aren't single reusable commands. The first scans `src/` for inline
`#[cfg(test)] mod foo { ... }` test blocks and rejects them in favor of
`*_tests.rs` siblings (see [Tests](#tests) below). The last — the changelog
gate — is a bash diff check described below the block, not the
`pnpm exec changeset status` command CI runs. Everything else is:
```sh
cargo fmt --check
cargo clippy --all-targets -- -D warnings
cargo test
cargo llvm-cov --fail-under-lines 100 --ignore-filename-regex 'src/main\.rs'
linecheck --max-lines 500 $(find src -name '*.rs')
pnpm --filter client typecheck
pnpm --filter client lint
pnpm --filter client test
```
`cargo llvm-cov` runs the test suite with instrumentation and enforces 100%
line coverage (excluding `main.rs`). `linecheck` keeps any single `.rs` file
under `src/` from growing past 500 lines — a convention two independently
green PRs can each respect yet still blow past together, since it isn't a
required branch-protection check (see the `linecheck` job in
[`lint.yml`](.github/workflows/lint.yml)). `client/` isn't a Cargo workspace
member, so none of the cargo-based commands above touch it — the three `pnpm
--filter client` commands mirror them for the React UI, matching the
`client-lint`/`client-test` CI jobs. The changelog gate, unlike the rest of
this list, isn't reproduced by a command above: the pre-push hook diffs the
range being pushed against `origin/main` and fails if `src/` or `client/`
changed without an accompanying `.changeset/*.md` file in that same range
(see the "Changelog" step in `.githooks/pre-push`). This mirrors — but is
not the same command as — the CI `unreleased-entry` job (see
[Workflow](#workflow) below), which instead runs `pnpm exec changeset status
--since=origin/main`; that command reports on pending changesets generally
and can fail even with no `src/`/`client/` diff, so it isn't a drop-in local
reproduction of the hook's step. Set `SKIP_CHANGELOG=1` to bypass the local
hook's check the way the `skip-changelog` PR label bypasses CI's.
Enable the bundled git hooks once per clone:
```sh
git config core.hooksPath .githooks
```
Or let `direnv` do it automatically when you `cd` into the repo:
```sh
direnv allow
```
(`.envrc` already runs the same `git config --local ...` command.)
The **pre-commit** hook spell-checks the tree with
[`typos`](https://github.com/crate-ci/typos); the **pre-push** hook runs the
format/lint/coverage gates below. Spell-check the tree on demand with:
```sh
make spell
```
`make spell` installs `typos-cli` if it's missing, then runs `typos` against
the repo root — you don't need to know the crate/binary name to run it.
Generated and vendored files (`prebuilt.html`, lockfiles, `apis/openapi.json`,
`schemas/`) are excluded in `typos.toml`. To accept a real word that `typos`
flags, add it to `[default.extend-words]` there.
Lint the workflow files under `.github/workflows/` (YAML syntax, `${{ }}`
expressions, the `needs`/`if`/matrix job graph, action input names, and,
via `shellcheck`, every embedded `run:` block) with
[`actionlint`](https://github.com/rhysd/actionlint):
```sh
brew install actionlint shellcheck # or: bash <(curl -s https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash)
actionlint
```
`actionlint` picks up `shellcheck` from `PATH` automatically if it's
installed; without it, shell-script findings in `run:` blocks are silently
skipped. This mirrors the CI gate in
[`actionlint.yml`](.github/workflows/actionlint.yml), so a clean local run
means the CI job will pass too.
## Reporting security issues
Found a vulnerability? **Do not open a public issue.** See
[`SECURITY.md`](SECURITY.md) for the private disclosure process.
## Architecture at a glance
The daemon (`src/`) is an [Axum](https://github.com/tokio-rs/axum) server that
exposes the same routine (agent-scheduling) functionality over three interfaces on one port:
- **REST** — handlers in `src/routes/http.rs`
- **MCP** — handlers in `src/routes/mcp.rs`
- **UI** — a React/TypeScript app in `client/`, served at `/`, embedded at
build time (see `src/build/client.rs`)
Routines are persisted to the OS crontab so they run on schedule. See
[`Architecture.md`](Architecture.md) for the full picture.
## Tests
```sh
cargo test
```
Tests must live in `*_tests.rs` sibling files, **not** inline
`#[cfg(test)] mod foo { … }` blocks — the pre-push hook rejects inline blocks.
A colocated module reference is fine:
```rust
#[cfg(test)]
#[path = "service_tests.rs"]
mod service_tests; // points at service_tests.rs
```
The pre-push hook also requires 100% line coverage (excluding `main.rs`) via
[`cargo-llvm-cov`](https://github.com/taiki-e/cargo-llvm-cov):
```sh
cargo install cargo-llvm-cov
rustup component add llvm-tools-preview
cargo llvm-cov --fail-under-lines 100 --ignore-filename-regex 'src/main\.rs'
```
## Workflow
1. Branch from `main` — name it `feat/...`, `fix/...`, `chore/...`, or `docs/...`.
2. Keep commits focused; one logical change per commit.
3. Note user-facing changes with a changeset: run `pnpm changeset`, pick a bump
type (patch/minor/major), and write a summary in Keep a Changelog style
(e.g. start it with `### Added`/`### Changed`/`### Fixed` if it doesn't
obviously fall under the last one used) — that summary is what ends up in
`CHANGELOG.md` verbatim. Commit the generated `.changeset/*.md` file
alongside your change. The pre-push hook (and the CI `unreleased-entry`
check) reject a push that touches `src/` or `client/` without an
accompanying changeset file. For a deliberately undocumented change — e.g.
a pure internal refactor with no user-facing effect — bypass the local
hook with `SKIP_CHANGELOG=1 git push`; the in-repo equivalent on the PR is
the `skip-changelog` label.
4. Open a PR against `main`; fill in what changed and why.
## Releasing
See [RELEASING.md](RELEASING.md) for the full walkthrough, the current
manual step, and the reasoning behind how this pipeline is built. Short
version below.
Releases are driven by [Changesets](https://github.com/changesets/changesets).
Changeset files accumulate silently on `main` as PRs land (each one required
by the `unreleased-entry` check above) until someone decides it's time to
ship: trigger [`cut-release.yml`](.github/workflows/cut-release.yml) —
`gh workflow run cut-release.yml`, or "Run workflow" on the Actions tab. It
bumps `package.json`, syncs that version into `Cargo.toml`/`Cargo.lock`
([`scripts/release/version-and-sync.mjs`](scripts/release/version-and-sync.mjs)),
rolls the pending changesets into a new dated `CHANGELOG.md` section, verifies
the result through the same lint/test gates a PR would get, and pushes it
straight to `main` — no PR. (There used to be a bot-maintained "Version
Packages" PR instead; it required GitHub Actions to be allowed to open PRs,
which this org disables, so it never actually worked. See #849.)
To cut one manually instead (e.g. a hotfix, or the workflow is unavailable):
1. `pnpm version-packages` — runs the same bump + sync locally.
2. Review the diff (`package.json`, `Cargo.toml`, `Cargo.lock`, `CHANGELOG.md`).
3. Commit, open a PR, and merge to `main`.
Either way, on landing on `main`, [`auto-release.yml`](.github/workflows/auto-release.yml)
detects the new version, pushes the `vx.y.z` tag, then publishes to crates.io
([`publish.yml`](.github/workflows/publish.yml)) and cuts the GitHub Release
([`release.yml`](.github/workflows/release.yml)). No manual tag push. The tag
must not already exist, and `Cargo.toml`'s version must match the topmost
changelog heading. Pushing a `v*` tag by hand still works as a fallback.
`publish.yml` authenticates to crates.io via [Trusted Publishing](https://crates.io/docs/trusted-publishing)
(OIDC) — no `CARGO_REGISTRY_TOKEN` secret involved.
## Code conventions
- New REST routes go in `src/routes/http.rs`; register them in the router
builder there (the `.route(...)` chain). New MCP tools go in
`src/routes/mcp.rs`. If a concept needs both a REST endpoint and an MCP
tool returning the same data, give it its own `src/routes/<name>/` folder
instead — see [`src/routes/CONTRIBUTING.md`](src/routes/CONTRIBUTING.md)
for the template (`src/routes/health/` is the reference implementation).
- Error variants belong in `src/error.rs` (`AppError`); fallible handlers
return `Result<_, AppError>`, which converts to the right HTTP status.
- No `unwrap()` in handler paths — propagate errors via `AppError`.
- `apis/openapi.json` is generated at build time — never edit it by hand.
- `prebuilt.html` is a generated, committed artifact: `build.rs` copies
`client/dist/index.html` (already a single self-contained file, built by
`pnpm --filter client build` via `vite-plugin-singlefile` — see
`src/build/client.rs`) to the package root, and it's the fallback used
whenever `pnpm` isn't installed (notably the `cargo install moadim` path).
Regenerate it after any `client/` change with `pnpm install && cargo build`
and commit the result. [`prebuilt.yml`](.github/workflows/prebuilt.yml)
fails a PR that changes `client/**` without a matching `prebuilt.html`
update.
## Commit messages
Conventional Commits: `type(scope): subject`.
```text
feat(routines): add pause/resume endpoint
fix(sync): handle missing crontab gracefully
docs: correct contributor setup steps
```
Types: `feat`, `fix`, `chore`, `refactor`, `test`, `docs`.