ontoref/reflection/defaults/workflow.ncl

# Standard validation, build, and distribution catalog for Rust/Nushell/Nickel projects.
# Workspaces import this and reference IDs in their layer declarations.
# Override or extend by merging with &: `D.validations & { my-check = { ... } }`

{
  validations = {
    # ── Rust linting ─────────────────────────────────────────────────────────

    rust-fmt = {
      id            = "rust-fmt",
      kind          = 'Lint,
      tool          = "cargo",
      args          = ["+nightly", "fmt", "--all", "--", "--check"],
      when          = ["*.rs"],
      fail_fast     = true,
      cargo_profile = "",
    },

    rust-clippy = {
      id            = "rust-clippy",
      kind          = 'Lint,
      tool          = "cargo",
      args          = ["clippy", "--all-targets", "--no-deps", "--profile", "clippy", "--", "-D", "warnings"],
      when          = ["*.rs"],
      fail_fast     = true,
      cargo_profile = "clippy",
    },

    rust-clippy-all = {
      id            = "rust-clippy-all",
      kind          = 'Lint,
      tool          = "cargo",
      args          = ["clippy", "--all-targets", "--all-features", "--", "-D", "warnings"],
      when          = ["*.rs"],
      fail_fast     = true,
      cargo_profile = "",
    },

    # ── Rust testing ─────────────────────────────────────────────────────────

    nextest-ci-test = {
      id            = "nextest-ci-test",
      kind          = 'Test,
      tool          = "cargo-nextest",
      args          = ["run", "--all-features", "--workspace",
                       "--profile", "ci-test", "--cargo-profile", "ci-test"],
      when          = ["*.rs"],
      fail_fast     = true,
      cargo_profile = "ci-test",
    },

    nextest-ci = {
      id            = "nextest-ci",
      kind          = 'Test,
      tool          = "cargo-nextest",
      args          = ["run", "--all-features", "--workspace",
                       "--profile", "ci", "--cargo-profile", "ci"],
      when          = ["*.rs"],
      fail_fast     = false,   # see all failures in CI
      cargo_profile = "ci",
    },

    # ── Security ─────────────────────────────────────────────────────────────

    deny-subset = {
      id            = "deny-subset",
      kind          = 'Security,
      tool          = "cargo-deny",
      args          = ["check", "licenses", "advisories"],
      when          = ["Cargo.toml", "Cargo.lock"],
      fail_fast     = true,
      cargo_profile = "",
    },

    deny-all = {
      id            = "deny-all",
      kind          = 'Security,
      tool          = "cargo-deny",
      args          = ["check"],
      when          = [],
      fail_fast     = true,
      cargo_profile = "",
    },

    geiger = {
      id            = "geiger",
      kind          = 'Security,
      tool          = "cargo-geiger",
      args          = ["--all-features", "--all-targets"],
      when          = ["*.rs"],
      fail_fast     = false,   # informational by default; use --forbid-only to gate
      cargo_profile = "",
    },

    # ── Documentation ────────────────────────────────────────────────────────

    docs-check = {
      id            = "docs-check",
      kind          = 'Docs,
      tool          = "cargo",
      args          = ["doc", "--no-deps", "--workspace", "--profile", "ci", "-q"],
      when          = ["*.rs"],
      fail_fast     = true,
      cargo_profile = "ci",
    },

    # ── Compliance (ontoref-specific) ────────────────────────────────────────

    docs-drift = {
      id            = "docs-drift",
      kind          = 'Compliance,
      tool          = "nu",
      args          = ["-c", "use ./reflection/modules/sync.nu; sync diff --docs --fail-on-drift"],
      when          = ["*.rs"],
      fail_fast     = true,
      cargo_profile = "",
    },

    manifest-coverage = {
      id            = "manifest-coverage",
      kind          = 'Compliance,
      tool          = "nu",
      args          = ["--no-config-file", "-c",
                       "use ./reflection/modules/sync.nu *; sync manifest-check"],
      when          = [".ontology/*.ncl", "reflection/modes/*.ncl", "reflection/forms/*.ncl"],
      fail_fast     = true,
      cargo_profile = "",
    },

    # ── Nickel / Nushell linting ─────────────────────────────────────────────

    nickel-typecheck = {
      id            = "nickel-typecheck",
      kind          = 'Lint,
      tool          = "nickel",
      args          = ["typecheck"],
      when          = ["*.ncl"],
      fail_fast     = true,
      cargo_profile = "",
    },

    nushell-check = {
      id            = "nushell-check",
      kind          = 'Lint,
      tool          = "nu",
      args          = ["--ide-check", "100"],
      when          = ["*.nu"],
      fail_fast     = true,
      cargo_profile = "",
    },

    # ── Markdown ─────────────────────────────────────────────────────────────

    markdownlint = {
      id            = "markdownlint",
      kind          = 'Lint,
      tool          = "markdownlint-cli2",
      args          = [],
      when          = ["*.md"],
      fail_fast     = true,
      cargo_profile = "",
    },
  },

  builds = {
    release-native = {
      id            = "release-native",
      kind          = 'Binary,
      tool          = "cargo",
      args          = ["build", "--release", "--workspace"],
      cargo_profile = "release",
      target        = "",
      artifacts     = ["{TARGET_DIR}/release/"],
    },

    release-musl-x86 = {
      id            = "release-musl-x86",
      kind          = 'Binary,
      tool          = "cross",
      args          = ["build", "--target", "x86_64-unknown-linux-musl", "--release"],
      cargo_profile = "release",
      target        = "x86_64-unknown-linux-musl",
      artifacts     = ["{TARGET_DIR}/x86_64-unknown-linux-musl/release/"],
    },

    sbom = {
      id            = "sbom",
      kind          = 'SBOM,
      tool          = "cargo-sbom",
      args          = [],
      cargo_profile = "",
      target        = "",
      artifacts     = ["{ROOT}/sbom.json"],
    },

    docs-html = {
      id            = "docs-html",
      kind          = 'Docs,
      tool          = "cargo",
      args          = ["doc", "--no-deps", "--workspace"],
      cargo_profile = "release",
      target        = "",
      artifacts     = ["{TARGET_DIR}/doc/"],
    },
  },

  distributions = {},
}