mise.toml

[tools]
rust = "1.97.1"
bun = "1.3.14"
python = "3.12.13"
actionlint = "1.7.12"
gitleaks = "8.30.1"
sccache = "0.17.0"
zizmor = "1.28.0"
"cargo:cargo-audit" = "0.22.2"
"cargo:cargo-deny" = "0.20.2"
"cargo:cargo-llvm-cov" = "0.8.7"
"cargo:cargo-nextest" = "0.9.4"

[tasks.vue-build]
description = "Install, typecheck, lint, and build the Vue renderer"
dir = "renderer-vue"
run = "bun install --frozen-lockfile && bun run typecheck && bun run lint && bun run build"

[tasks.vue-test]
description = "Run Vue renderer tests with coverage"
depends = ["vue-build"]
dir = "renderer-vue"
run = "bun run coverage"

[tasks.fmt]
description = "Format all Rust sources"
run = "cargo fmt --all"

[tasks.lint]
description = "Run Vue and Rust type, format, and lint checks"
run = "make lint"

[tasks.test]
description = "Run renderer, Rust, benchmark, and repository-tooling tests"
depends = ["vue-build"]
run = "make test"

[tasks."test:rust"]
description = "Run Rust workspace tests"
run = "cargo test --workspace --locked"

[tasks."test:nextest"]
description = "Run Rust unit and integration tests with cargo-nextest"
run = [
  "cargo nextest run --workspace --locked --status-level all",
  "cargo test --doc --workspace --locked",
]

[tasks.coverage]
description = "Enforce Rust and Vue coverage floors"
depends = ["vue-build"]
run = "make coverage"

[tasks.msrv]
description = "Check all Rust targets with the minimum supported toolchain"
run = "cargo +1.91.0 check --workspace --all-targets --locked"

[tasks.audit]
description = "Audit Rust and renderer dependencies"
run = "make audit"

[tasks.deny]
description = "Check Rust dependency licenses, sources, bans, and advisories"
run = "make deny"

[tasks."security:secrets"]
description = "Scan committed and uncommitted source files for secrets"
run = "make secrets-check"

[tasks.security]
description = "Run secret, dependency-policy, and advisory checks"
run = "make security-check"

[tasks."contract:check"]
description = "Check versions, CLI docs, examples, Skill contracts, and workflows"
run = "make version-check docs-check examples-check workflow-check"

[tasks."check:pr"]
description = "Run the deterministic local pull-request gate"
depends = ["vue-build"]
run = "make pr-check"

[tasks."sccache:stats"]
description = "Show sccache statistics after opting in with RUSTC_WRAPPER=sccache"
run = "sccache --show-stats"

[tasks."workflow:security"]
description = "Audit GitHub Actions workflows with zizmor"
run = "make workflow-security-check"

[tasks.verify-release]
description = "Build and smoke-test release-coupled artifacts"
depends = ["vue-build"]
run = "./scripts/verify-release.sh"