@rightkit/git 0.2.22 → 0.2.23

package/install.mjs

@@ -13,7 +13,7 @@ import { applyPlan, planSync } from "./sync.mjs";
 
 export const DEFAULT_MATRIX = { os: ["ubuntu-latest", "macos-latest", "windows-latest"], node: ["22.13", "24"] };
 export const DEFAULT_PACKAGE_MANAGER = "pnpm@11.24.0";
-export const DEFAULT_TEMPLATE_VERSION = "1.7.0";
+export const DEFAULT_TEMPLATE_VERSION = "1.8.0";
 
 /**
  * opts: { lanes: string[], matrix?, packageManager?, templateVersion?,

package/manifest.mjs

@@ -167,7 +167,7 @@ export function validateManifest(manifest) {
       errors.push("rustCache must be an object");
     } else {
       for (const key of Object.keys(rustCache)) {
-        if (key !== "workspaces") errors.push(`unknown rustCache field: ${key}`);
+        if (key !== "workspaces" && key !== "requiredForGate") errors.push(`unknown rustCache field: ${key}`);
       }
       if (!Array.isArray(rustCache.workspaces) || rustCache.workspaces.length === 0) {
         errors.push("rustCache.workspaces must be a non-empty array");
@@ -176,6 +176,9 @@ export function validateManifest(manifest) {
       } else if (new Set(rustCache.workspaces).size !== rustCache.workspaces.length) {
         errors.push("rustCache.workspaces entries must be unique");
       }
+      if (rustCache.requiredForGate !== undefined && typeof rustCache.requiredForGate !== "boolean") {
+        errors.push("rustCache.requiredForGate must be a boolean");
+      }
     }
   }
 
@@ -776,6 +779,7 @@ export function buildRenderContext(manifest, repoPath) {
     TEMPLATE_VERSION: manifest.templateVersion,
     GATE_PATH: manifest.gate?.path,
     RUST_CACHE_WORKSPACES: rustWorkspaces.map((workspace) => `            ${workspace} -> target`).join("\n"),
+    RUST_REQUIRED_FOR_GATE: manifest.rustCache?.requiredForGate === true ? "true" : "false",
     CANDIDATE_BUILD_SCRIPT: manifest.candidate?.buildScript,
     CANDIDATE_CHECK_SCRIPT: manifest.candidate?.checkScript,
     CANDIDATE_ARTIFACT_ROOT: manifest.candidate?.artifactRoot,

package/manifest.schema.json

@@ -95,7 +95,8 @@
           "minItems": 1,
           "uniqueItems": true,
           "items": { "type": "string", "pattern": "^(?:\\.|(?!.*\\.\\.)(?!.*\\s)[A-Za-z0-9][A-Za-z0-9._/-]*)$" }
-        }
+        },
+        "requiredForGate": { "type": "boolean" }
       }
     },
     "gate": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rightkit/git",
-  "version": "0.2.22",
+  "version": "0.2.23",
   "description": "Public-repo-only GitHub Actions workflow layer: templates, visibility gate, sync/drift/adopt/uninstall for right-git.",
   "license": "MIT OR Apache-2.0",
   "type": "module",

package/render.test.mjs

@@ -61,9 +61,10 @@ test("rust-hybrid ci renders its pinned package manager and gate", () => {
   assert.match(content, /--diff-filter=ACDMRTUXB/, "deleted Rust inputs must trigger Rust setup");
   assert.match(content, /\*\.rs\|Cargo\.toml[\s\S]*scripts\/gate\.sh/);
   assert.match(content, /\.rightgit\.json\|\.github\/workflows\/\*\.yml\|\.github\/workflows\/\*\.yaml/);
-  assert.equal((content.match(/if: steps\.rust-changes\.outputs\.changed == 'true'/g) ?? []).length, 3);
+  assert.equal((content.match(/if: steps\.rust-changes\.outputs\.required == 'true'/g) ?? []).length, 3);
   assert.match(content, /RIGHT_GIT_RUST_CHANGED: \$\{\{ steps\.rust-changes\.outputs\.changed \}\}/);
-  assert.match(content, /RUSTC_WRAPPER: \$\{\{ steps\.rust-changes\.outputs\.changed == 'true' && 'sccache' \|\| '' \}\}/);
+  assert.match(content, /RIGHT_GIT_RUST_REQUIRED: \$\{\{ steps\.rust-changes\.outputs\.required \}\}/);
+  assert.match(content, /RUSTC_WRAPPER: \$\{\{ steps\.rust-changes\.outputs\.required == 'true' && 'sccache' \|\| '' \}\}/);
   assert.match(content, /CARGO_INCREMENTAL: "0"/);
   assert.match(content, /CARGO_PROFILE_DEV_DEBUG: "0"/);
   assert.match(content, /CARGO_PROFILE_TEST_DEBUG: "0"/);
@@ -129,7 +130,7 @@ test("rust-hybrid cache contract renders every declared Cargo workspace", () =>
     lanes: ["ci"],
     profile: "rust-hybrid",
     gate: { path: "scripts/gate.sh" },
-    rustCache: { workspaces: [".", "apps/studio/src-tauri"] },
+    rustCache: { workspaces: [".", "apps/studio/src-tauri"], requiredForGate: true },
     matrix: { os: ["windows-2025"], node: ["22.23.2"] },
   };
   const content = renderTemplate(
@@ -140,7 +141,8 @@ test("rust-hybrid cache contract renders every declared Cargo workspace", () =>
   assert.match(content, /add-job-id-key: false/);
   assert.match(content, /cache-workspace-crates: false/);
   assert.match(content, /cache-on-failure: true/);
-  assert.match(content, /RUSTC_WRAPPER: \$\{\{ steps\.rust-changes\.outputs\.changed == 'true' && 'sccache' \|\| '' \}\}/);
+  assert.match(content, /if \[\[ "true" == "true" \]\]; then[\s\S]*required=true/);
+  assert.match(content, /RUSTC_WRAPPER: \$\{\{ steps\.rust-changes\.outputs\.required == 'true' && 'sccache' \|\| '' \}\}/);
 });
 
 test("rust-hybrid release candidate can opt into OIDC Windows signing without long-lived secrets", () => {

package/templates/profiles/rust-hybrid/ci.yml

@@ -54,17 +54,22 @@ jobs:
             fi
           fi
           printf 'changed=%s\n' "$changed" >> "$GITHUB_OUTPUT"
+          required="$changed"
+          if [[ "${RUST_REQUIRED_FOR_GATE}" == "true" ]]; then
+            required=true
+          fi
+          printf 'required=%s\n' "$required" >> "$GITHUB_OUTPUT"
       - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ matrix.node }}
           package-manager-cache: false
 ${PACKAGE_MANAGER_SETUP}
       - uses: dtolnay/rust-toolchain@f8be11a05b1d4f3fcebe6410cc16743212b999b0
-        if: steps.rust-changes.outputs.changed == 'true'
+        if: steps.rust-changes.outputs.required == 'true'
         with:
           components: rustfmt, clippy
       - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
-        if: steps.rust-changes.outputs.changed == 'true'
+        if: steps.rust-changes.outputs.required == 'true'
         with:
           workspaces: |
 ${RUST_CACHE_WORKSPACES}
@@ -74,14 +79,15 @@ ${RUST_CACHE_WORKSPACES}
           cache-on-failure: true
           save-if: ${{ github.event_name != 'pull_request' }}
       - uses: Mozilla-Actions/sccache-action@fc920bf0ec8de6ee65d409111f7ec508035751ba # v0.0.11
-        if: steps.rust-changes.outputs.changed == 'true'
+        if: steps.rust-changes.outputs.required == 'true'
         with:
           version: "v0.16.0"
       - run: bash ./${GATE_PATH}
         env:
           RIGHT_GIT_RUST_CHANGED: ${{ steps.rust-changes.outputs.changed }}
+          RIGHT_GIT_RUST_REQUIRED: ${{ steps.rust-changes.outputs.required }}
           SCCACHE_GHA_ENABLED: "true"
-          RUSTC_WRAPPER: ${{ steps.rust-changes.outputs.changed == 'true' && 'sccache' || '' }}
+          RUSTC_WRAPPER: ${{ steps.rust-changes.outputs.required == 'true' && 'sccache' || '' }}
           CARGO_INCREMENTAL: "0"
           CARGO_PROFILE_DEV_DEBUG: "0"
           CARGO_PROFILE_TEST_DEBUG: "0"

package/uninstall.test.mjs

@@ -78,12 +78,12 @@ test("install validates before it creates a manifest", async () => {
   assert.equal(fs.existsSync(path.join(dir, MANIFEST_FILENAME)), false);
 });
 
-test("install emits GitHub-Actions-only policy at template 1.7.0", async () => {
+test("install emits GitHub-Actions-only policy at template 1.8.0", async () => {
   const dir = makeTempRepo(null);
   const result = await installCommand(dir, { lanes: ["ci"] }, PUBLIC_DEPS);
   assert.equal(result.ok, true);
   const manifest = JSON.parse(fs.readFileSync(path.join(dir, MANIFEST_FILENAME), "utf8"));
   assert.equal(manifest.compile, "github-actions-only");
-  assert.equal(DEFAULT_TEMPLATE_VERSION, "1.7.0");
+  assert.equal(DEFAULT_TEMPLATE_VERSION, "1.8.0");
   assert.equal(manifest.templateVersion, DEFAULT_TEMPLATE_VERSION);
 });