rusty-figlet 0.3.1

# rusty-figlet CI workflow.
#
# v0.2.0 (E011 Phase 2 reference port) expands the v0.1.0 pipeline with the
# portfolio-wide Cargo Features Convention 5-tier matrix per spec 00011
# §Per-Port v0.2.0 CI Matrix + FR-010..FR-014:
#
#   Tier 1 — test-default                (full DDR-003 cross-compile matrix)
#   Tier 2 — test-no-default             (Linux x86_64 only)
#   Tier 3 — test-<bundle>               (per preset, Linux only)
#   Tier 4 — check-leaf-<leaf>           (per leaf, Linux only)
#   Tier 5 — lint-convention             (umbrella feature-lint, Linux only)
#
# Pre-existing v0.1.0 gates (rustfmt, clippy, audit, deny, MSRV) are
# preserved unchanged.

name: CI

on:
  push:
    branches: [main]
    tags: ["v[0-9]+.[0-9]+.[0-9]+"]
  pull_request:
    branches: [main]

env:
  CARGO_TERM_COLOR: always
  RUST_BACKTRACE: 1
  # Pinned locale for byte-equality fixture assertions (see
  # tests/common/mod.rs and fixtures/README.md). MUST be inherited by every
  # job that runs `cargo test`.
  LC_ALL: C.UTF-8

# Minimum permissions for the default GITHUB_TOKEN. `contents: read` is what
# `actions/checkout` needs to fetch the repo; declaring it explicitly avoids
# auth failures under restrictive org/repo workflow-permission defaults.
permissions:
  contents: read

jobs:
  fmt:
    name: rustfmt
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt
      - run: cargo fmt --all -- --check

  clippy:
    name: clippy (deny warnings)
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
        with:
          components: clippy
      - uses: Swatinem/rust-cache@v2
      - run: cargo clippy --all-targets --all-features -- -D warnings

  audit:
    name: cargo audit
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: taiki-e/install-action@v2
        with:
          tool: cargo-audit
      - run: cargo audit
        env:
          RUSTUP_TOOLCHAIN: stable

  deny:
    name: cargo deny (licenses)
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: taiki-e/install-action@v2
        with:
          tool: cargo-deny
      - run: cargo deny check licenses
        env:
          RUSTUP_TOOLCHAIN: stable

  msrv:
    name: MSRV (1.85)
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@1.85
      - uses: Swatinem/rust-cache@v2
      - run: cargo build --all-features
      - run: cargo test --all-features

  # -----------------------------------------------------------------------------
  # Tier 1 — test-default: full DDR-003 cross-compile matrix on `default`
  # features. `default = ["full"]` post-v0.2.0; the kitchen-sink test
  # covers every leaf.
  # -----------------------------------------------------------------------------
  test-default:
    name: test-default ${{ matrix.target }}
    needs: [fmt, clippy]
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        include:
          - { os: ubuntu-latest, target: x86_64-unknown-linux-gnu }
          - { os: ubuntu-latest, target: aarch64-unknown-linux-gnu, cross: true }
          - { os: macos-latest, target: x86_64-apple-darwin }
          - { os: macos-latest, target: aarch64-apple-darwin }
          - { os: windows-latest, target: x86_64-pc-windows-msvc }
    env:
      LC_ALL: C.UTF-8
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
        with:
          targets: ${{ matrix.target }}
      - name: Add cross-compile target to 1.85 toolchain
        if: '!matrix.cross'
        run: rustup target add ${{ matrix.target }} --toolchain 1.85
        shell: bash
      - uses: Swatinem/rust-cache@v2
        with:
          key: ${{ matrix.target }}
      - name: Install cross
        if: matrix.cross
        run: cargo install cross --locked
      - name: Build
        run: |
          if [ "${{ matrix.cross }}" = "true" ]; then
            cross build --release --target ${{ matrix.target }} --all-features
          else
            cargo build --release --target ${{ matrix.target }} --all-features
          fi
        shell: bash
      - name: Test
        if: matrix.cross != true
        run: cargo test --release --target ${{ matrix.target }} --all-features

  # -----------------------------------------------------------------------------
  # Tier 2 — test-no-default: bare library on Linux x86_64. Verifies CLI-only
  # deps are absent from the library build (SC-001 evidence).
  # -----------------------------------------------------------------------------
  test-no-default:
    name: test-no-default (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo build --no-default-features
      - run: cargo test --no-default-features --lib
      - name: Dep-tree audit (SC-001)
        run: |
          # Assert no CLI-only deps leak into the bare-library build.
          if cargo tree --no-default-features --prefix none --edges normal --no-dedupe \
              | grep -E '^(clap|clap_complete|anstyle|termcolor|terminal_size)'; then
            echo "::error::CLI-only dep leaked into --no-default-features build"
            exit 1
          fi

  # -----------------------------------------------------------------------------
  # Tier 3 — test-<bundle>: one job per preset bundle. Linux x86_64 only.
  # -----------------------------------------------------------------------------
  test-figlet-classic:
    name: test-figlet-classic (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo build --no-default-features --features figlet-classic
      - run: cargo test --no-default-features --features figlet-classic --lib

  test-figlet-minimal:
    name: test-figlet-minimal (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo build --no-default-features --features figlet-minimal
      - run: cargo test --no-default-features --features figlet-minimal --lib

  test-figlet-color:
    name: test-figlet-color (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo build --no-default-features --features figlet-color
      - run: cargo test --no-default-features --features figlet-color --lib

  # Back-compat verification: the deprecated `figlet-toilet-compat` alias
  # must continue to resolve to the same feature set as `figlet-color`.
  # Remove this job when the alias is removed in a future breaking release.
  test-figlet-toilet-compat:
    name: test-figlet-toilet-compat (deprecated alias)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo build --no-default-features --features figlet-toilet-compat
      - run: cargo test --no-default-features --features figlet-toilet-compat --lib

  # -----------------------------------------------------------------------------
  # Tier 4 — check-leaf-<leaf>: one job per declared leaf. Linux x86_64 only.
  # Each job verifies the leaf compiles in isolation (cli + the one leaf).
  # -----------------------------------------------------------------------------
  check-leaf-color:
    name: check-leaf-color (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo check --no-default-features --features "cli color"

  check-leaf-rainbow:
    name: check-leaf-rainbow (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo check --no-default-features --features "cli rainbow"

  check-leaf-terminal-width:
    name: check-leaf-terminal-width (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo check --no-default-features --features "cli terminal-width"

  check-leaf-completions:
    name: check-leaf-completions (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo check --no-default-features --features "cli completions"

  check-leaf-strict-compat:
    name: check-leaf-strict-compat (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo check --no-default-features --features "cli strict-compat"

  # E012 v0.3.0 — 14 new leaf checks per ADR-0006 + spec 00012 FR-020 +
  # SC-008. Auto-discoverable from Cargo.toml by `tools/feature-lint/run.sh`.

  check-leaf-tlf-parser:
    name: check-leaf-tlf-parser (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo check --no-default-features --features "cli tlf-parser"

  check-leaf-filter-crop:
    name: check-leaf-filter-crop (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo check --no-default-features --features "cli filter-crop"

  check-leaf-filter-gay:
    name: check-leaf-filter-gay (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo check --no-default-features --features "cli filter-gay"

  check-leaf-filter-metal:
    name: check-leaf-filter-metal (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo check --no-default-features --features "cli filter-metal"

  check-leaf-filter-flip:
    name: check-leaf-filter-flip (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo check --no-default-features --features "cli filter-flip"

  check-leaf-filter-flop:
    name: check-leaf-filter-flop (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo check --no-default-features --features "cli filter-flop"

  check-leaf-filter-rotate:
    name: check-leaf-filter-rotate (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo check --no-default-features --features "cli filter-rotate"

  check-leaf-filter-border:
    name: check-leaf-filter-border (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo check --no-default-features --features "cli filter-border"

  check-leaf-color-truecolor:
    name: check-leaf-color-truecolor (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo check --no-default-features --features "cli color-truecolor"

  check-leaf-color-256:
    name: check-leaf-color-256 (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo check --no-default-features --features "cli color-256"

  check-leaf-output-html:
    name: check-leaf-output-html (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo check --no-default-features --features "cli output-html"

  check-leaf-output-irc:
    name: check-leaf-output-irc (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo check --no-default-features --features "cli output-irc"

  check-leaf-output-svg:
    name: check-leaf-output-svg (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo check --no-default-features --features "cli output-svg"

  check-leaf-toilet-strict-compat:
    name: check-leaf-toilet-strict-compat (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo check --no-default-features --features "cli toilet-strict-compat"

  # -----------------------------------------------------------------------------
  # Tier 5 — lint-convention: feature-lint script is vendored into the port
  # (tools/feature-lint/) so the CI does not depend on cross-repo checkout
  # of the (private) umbrella. Each port keeps its own copy in sync with
  # the umbrella source of truth.
  # -----------------------------------------------------------------------------
  lint-convention:
    name: lint-convention (linux-x86_64)
    needs: [fmt, clippy]
    runs-on: ubuntu-latest
    steps:
      - name: Checkout port
        uses: actions/checkout@v4

      - name: Run feature-lint
        env:
          UMBRELLA_PATH: ${{ github.workspace }}
          PORT_PATH: ${{ github.workspace }}
        run: bash tools/feature-lint/run.sh

  # -----------------------------------------------------------------------------
  # Convention-violation self-test (SC-007 evidence). Manually triggered;
  # creates a temp Cargo.toml without `figlet-classic` and asserts the lint
  # script catches the violation. Spec 00011 T032.
  # -----------------------------------------------------------------------------
  convention-lint-self-test:
    name: convention-lint-self-test
    if: github.event_name == 'workflow_dispatch'
    runs-on: ubuntu-latest
    steps:
      - name: Checkout port
        uses: actions/checkout@v4

      - name: Remove figlet-classic umbrella from Cargo.toml
        run: |
          sed -i '/^figlet-classic\s*=/d' Cargo.toml
          # Verify removal
          if grep -E '^figlet-classic\s*=' Cargo.toml; then
            echo "::error::figlet-classic removal failed"
            exit 1
          fi

      - name: Invoke feature-lint and expect non-zero exit
        env:
          UMBRELLA_PATH: ${{ github.workspace }}
          PORT_PATH: ${{ github.workspace }}
        run: |
          set +e
          bash tools/feature-lint/run.sh 2>stderr.log
          rc=$?
          set -e
          cat stderr.log
          if [ "$rc" = "0" ]; then
            echo "::error::feature-lint should have failed with exit 2 but returned 0"
            exit 1
          fi
          if ! grep -q "required umbrella 'figlet-classic' missing" stderr.log; then
            echo "::error::expected diagnostic 'required umbrella figlet-classic missing' not found"
            exit 1
          fi
          echo "convention-lint-self-test: PASS"

  # -----------------------------------------------------------------------------
  # SC-014 runtime-assertion stub (E012 Phase 12 T082).
  #
  # Per spec 00012 SC-014 + plan.md HINT-002, the CI wall-clock for the
  # longest-path job MUST stay under 25 minutes; if exceeded the gate fails
  # (NOT warn-only) per the "never silently exceed" rule.
  #
  # This job is currently a STUB (`if: false` -> never runs) installed for
  # visibility. Full implementation is deferred to v0.3.x maintenance.
  #
  # Planned logic (one of two approaches):
  #
  #   (a) Query GitHub Actions API for the in-progress workflow run via
  #       `gh run view ${{ github.run_id }} --json jobs`; compute
  #       max(completed_at - started_at) across all sibling jobs in this
  #       workflow run; exit 1 if > 25 minutes.
  #
  #   (b) Each upstream job records its start+end timestamps as a workflow
  #       artifact (e.g. `time-start.txt`, `time-end.txt`); this job
  #       downloads all artifacts, computes per-job wall-clock, finds the
  #       max, and exits 1 if > 25 minutes.
  #
  # Approach (b) is simpler (no PAT / API auth needed) and is the planned
  # implementation path. See docs/ci-runtime-baseline.md §8 for the full
  # strategy. The stub `if: false` keeps the workflow valid until the
  # full implementation lands without consuming a runner-minute every PR.
  # -----------------------------------------------------------------------------
  ci-runtime-assertion:
    name: ci-runtime-assertion (SC-014)
    if: false  # STUB: not yet enabled; full implementation deferred to v0.3.x.
    needs:
      - test-default
      - test-no-default
      - test-figlet-classic
      - test-figlet-minimal
      - test-figlet-color
      - test-figlet-toilet-compat
      - lint-convention
    runs-on: ubuntu-latest
    steps:
      - name: Assert wall-clock under 25-min HARD gate
        run: |
          # Placeholder. When this job is enabled, implement approach (b)
          # documented in docs/ci-runtime-baseline.md §8: download per-job
          # timing artifacts, compute max wall-clock, exit 1 if > 25 min.
          echo "ci-runtime-assertion stub (not yet implemented)"
          exit 0

  # -----------------------------------------------------------------------------
  # Publish-dry-run + final gate. Runs after every tier above.
  # -----------------------------------------------------------------------------
  publish-dry-run:
    name: cargo publish --dry-run
    needs:
      - fmt
      - clippy
      - audit
      - deny
      - msrv
      - test-default
      - test-no-default
      - test-figlet-classic
      - test-figlet-minimal
      - test-figlet-color
      - test-figlet-toilet-compat
      - check-leaf-color
      - check-leaf-rainbow
      - check-leaf-terminal-width
      - check-leaf-completions
      - check-leaf-strict-compat
      - lint-convention
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - run: cargo publish --dry-run --all-features