optiflow/Taskfile.yml at main · egohygiene/optiflow · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
---
version: "3"

tasks:
  default:
    desc: List available tasks.
    cmds:
      - task --list

  build:
    desc: Build all debug targets.
    cmds:
      - cargo build --locked --all-targets

  build:release:
    desc: Build the optimized release binary.
    cmds:
      - cargo build --locked --release

  check:
    desc: Run fast compiler checks.
    cmds:
      - cargo check --locked --all-targets

  format:
    desc: Format Rust source.
    cmds:
      - cargo fmt --all

  format:check:
    desc: Verify Rust formatting.
    cmds:
      - cargo fmt --all -- --check

  lint:
    desc: Run strict Clippy checks.
    cmds:
      - cargo clippy --locked --all-targets --all-features -- -D warnings

  test:
    desc: Run the complete test suite.
    cmds:
      - cargo test --locked --all-targets

  test:adversarial:
    desc: Run bounded property and deterministic fault suites with evidence logs.
    cmds:
      - ./scripts/run-adversarial-tests.sh properties faults

  fuzz:bounded:
    desc: Run bounded configuration-parser and artifact-reader fuzz targets.
    cmds:
      - ./scripts/run-adversarial-tests.sh fuzz

  security:dependencies:
    desc: Enforce Cargo license, advisory, ban, and source policy.
    cmds:
      - cargo deny --all-features check advisories bans licenses sources
      - cargo deny --manifest-path fuzz/Cargo.toml --all-features check advisories bans licenses sources

  test:release-evidence:
    desc: Test deterministic release archives, SBOM, provenance, and tamper rejection.
    cmds:
      - python3 -m unittest tests/test_release_bundle.py

  smoke:
    desc: Run the synthetic read-only end-to-end test.
    cmds:
      - ./scripts/smoke-test.sh

  performance:check:
    desc: Enforce the synthetic read-only performance budgets.
    cmds:
      - cargo build --locked --release
      - >-
        python3 scripts/run-performance-baseline.py
        --binary "target/release/optiflow"
        --budgets "performance/budgets-v1.json"
        --output "target/performance-baseline.json"
        --enforce

  contracts:
    desc: Verify schemas and generated extension contract documentation.
    cmds:
      - |
        for schema in schemas/*.schema.json; do
          jq empty "$schema"
        done
      - python3 scripts/generate-extension-docs.py --check
      - |
        generated_manifest="$(mktemp)"
        generated_embedded_manifest="$(mktemp)"
        trap 'rm -f "${generated_manifest}" "${generated_embedded_manifest}"' EXIT
        cargo run --quiet --locked --example process_extension -- --print-manifest > "${generated_manifest}"
        diff --unified examples/extensions/reference-inspector.manifest.json "${generated_manifest}"
        cargo run --quiet --locked --example embedded_roles -- --print-manifest > "${generated_embedded_manifest}"
        diff --unified examples/extensions/reference-embedded-roles.manifest.json "${generated_embedded_manifest}"

  extensions:examples:
    desc: Compile and test extension SDK examples.
    cmds:
      - cargo test --locked --examples

  identity:v1:check:
    desc: Validate OptiFlow's pinned Identity v1 source contract.
    cmds:
      - python3 identity/scripts/validate_identity.py --repository-root . --format json

  identity:v1:generate:
    desc: Generate OptiFlow's selected Identity v1 package from reviewed source.
    cmds:
      - cargo run --quiet --manifest-path identity/Cargo.toml -- v1-generate --repository-root .

  identity:v1:verify:
    desc: Verify OptiFlow's selected Identity v1 package has no missing or drifted files.
    cmds:
      - cargo run --quiet --manifest-path identity/Cargo.toml -- v1-verify --repository-root .

  docs:sync:
    desc: Synchronize the pinned documentation environment.
    cmds:
      - uv sync --frozen --only-group docs

  docs:serve:
    desc: Preview the Zensical documentation site locally.
    deps:
      - docs:sync
    cmds:
      - uv run --frozen --only-group docs zensical serve

  docs:build:
    desc: Build documentation with strict link and reference validation.
    deps:
      - docs:sync
    cmds:
      - uv run --frozen --only-group docs zensical build --clean --strict

  site:build:
    desc: Compose and verify the product, architecture, documentation, and schema surfaces.
    deps:
      - docs:sync
    cmds:
      - ./scripts/site/build.sh

  site:serve:
    desc: Build and preview the complete static site locally.
    deps:
      - site:build
    cmds:
      - python3 -m http.server 8000 --directory dist

  site:verify:
    desc: Verify the composed static site contract.
    cmds:
      - uv run --frozen --only-group docs python scripts/site/verify.py dist

  validate:
    desc: Run all repository validation.
    cmds:
      - task: format:check
      - task: lint
      - task: test
      - task: contracts
      - task: extensions:examples
      - task: smoke
      - task: performance:check
      - task: site:build