Update coverage

.github/workflows/mutants.yml

@@ -0,0 +1,115 @@
+name: Mutation Testing
+
+# cargo-mutants runs on a small set of high-value files. A full sweep over
+# the whole crate takes hours, so this CI lane targets the files we have
+# explicitly hardened with assertion-level tests. Adding more files here is
+# safe but increases runtime — keep the matrix lean and shard if needed.
+#
+# The job is INFORMATIONAL by default (continue-on-error: true) so a missed
+# mutant does not block merges. Once the missed count is consistently zero,
+# flip continue-on-error to false to make the gate strict.
+
+on:
+  pull_request:
+    branches:
+      - main
+    paths:
+      - '.github/workflows/mutants.yml'
+      - 'mutants.toml'
+      - 'Cargo.lock'
+      - 'Cargo.toml'
+      - 'libs/braillify/src/rules/math/encoder.rs'
+      - 'libs/braillify/src/rules/math/parser/**'
+      - 'libs/braillify/src/rules/token_rules/math_expression/**'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  pull-requests: write
+
+concurrency:
+  group: mutants-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  mutants:
+    name: cargo-mutants (${{ matrix.shard.label }})
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    strategy:
+      fail-fast: false
+      matrix:
+        shard:
+          - label: encoder
+            file: libs/braillify/src/rules/math/encoder.rs
+          - label: parser
+            file: libs/braillify/src/rules/math/parser/parse.rs
+          - label: apply
+            file: libs/braillify/src/rules/token_rules/math_expression/apply.rs
+
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Setup Rust
+        uses: actions-rust-lang/setup-rust-toolchain@v1
+        with:
+          toolchain: stable
+
+      - name: Cache cargo-mutants binary
+        uses: actions/cache@v5
+        with:
+          path: ~/.cargo/bin/cargo-mutants
+          key: cargo-mutants-bin-v27-${{ runner.os }}
+
+      - name: Install cargo-mutants
+        run: |
+          if ! command -v cargo-mutants >/dev/null; then
+            cargo install cargo-mutants --locked --version ^27
+          fi
+
+      - name: Run cargo-mutants on ${{ matrix.shard.label }}
+        id: mutants
+        continue-on-error: true
+        run: |
+          mkdir -p target/mutants-${{ matrix.shard.label }}
+          cargo mutants \
+            -p braillify \
+            --file "${{ matrix.shard.file }}" \
+            --no-shuffle \
+            --output "target/mutants-${{ matrix.shard.label }}" \
+            --colors never
+
+      - name: Summarize outcomes
+        if: always()
+        shell: bash
+        run: |
+          set -e
+          report_dir="target/mutants-${{ matrix.shard.label }}/mutants.out"
+          if [ ! -f "$report_dir/outcomes.json" ]; then
+            echo "No outcomes.json — cargo-mutants likely failed before testing"
+            exit 1
+          fi
+          python3 - <<'PY'
+          import json, pathlib, sys
+          path = pathlib.Path("target/mutants-${{ matrix.shard.label }}/mutants.out/outcomes.json")
+          data = json.loads(path.read_text())
+          counts = {}
+          for o in data.get("outcomes", []):
+              counts[o["summary"]] = counts.get(o["summary"], 0) + 1
+          print("Mutation outcomes:")
+          for k, v in sorted(counts.items()):
+              print(f"  {k}: {v}")
+          missed = counts.get("MissedMutant", 0)
+          # Print one-line summary for the CI log scraper.
+          total = sum(counts.values())
+          print(f"::notice title=mutants/${{ matrix.shard.label }}::missed={missed} total={total} counts={counts}")
+          # Currently soft-gate: don't fail on missed. To make strict, exit non-zero here.
+          PY
+
+      - name: Upload mutants report
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: mutants-${{ matrix.shard.label }}
+          path: target/mutants-${{ matrix.shard.label }}/mutants.out/
+          retention-days: 7

.github/workflows/publish-pypi.yml

@@ -15,19 +15,19 @@ jobs:
       cancel-in-progress: false
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Set up Python 3.13
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: 3.13
       - name: Install uv
-        uses: astral-sh/setup-uv@v5
+        uses: astral-sh/setup-uv@v8.1.0
       - name: Install maturin
         run: uv pip install maturin --system
       - uses: actions-rust-lang/setup-rust-toolchain@v1
       - name: Cargo tarpaulin
         run: cargo install cargo-tarpaulin
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@v6
         name: Install pnpm
         with:
           run_install: false
@@ -36,7 +36,7 @@ jobs:
         with:
           version: 'latest'
       - name: Install Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           registry-url: "https://registry.npmjs.org"
           node-version: 22
@@ -83,8 +83,8 @@ jobs:
           - runner: ubuntu-22.04
             target: ppc64le
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
         with:
           python-version: 3.x
       - name: Build wheels
@@ -96,7 +96,7 @@ jobs:
           sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
           manylinux: auto
       - name: Upload wheels
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: wheels-linux-${{ matrix.platform.target }}
           path: packages/python/dist
@@ -115,8 +115,8 @@ jobs:
           - runner: ubuntu-22.04
             target: armv7
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
         with:
           python-version: 3.x
       - name: Build wheels
@@ -128,7 +128,7 @@ jobs:
           sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
           manylinux: musllinux_1_2
       - name: Upload wheels
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: wheels-musllinux-${{ matrix.platform.target }}
           path: packages/python/dist
@@ -143,8 +143,8 @@ jobs:
           - runner: windows-latest
             target: x86
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
         with:
           python-version: 3.x
           architecture: ${{ matrix.platform.target }}
@@ -156,7 +156,7 @@ jobs:
           working-directory: packages/python
           sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
       - name: Upload wheels
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: wheels-windows-${{ matrix.platform.target }}
           path: packages/python/dist
@@ -171,8 +171,8 @@ jobs:
           - runner: macos-14
             target: aarch64
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
         with:
           python-version: 3.x
       - name: Build wheels
@@ -183,23 +183,23 @@ jobs:
           working-directory: packages/python
           sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
       - name: Upload wheels
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: wheels-macos-${{ matrix.platform.target }}
           path: packages/python/dist
 
   sdist:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Build sdist
         uses: PyO3/maturin-action@v1
         with:
           command: sdist
           args: --out dist
           working-directory: packages/python
       - name: Upload sdist
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: wheels-sdist
           path: packages/python/dist
@@ -217,9 +217,9 @@ jobs:
       # Used to generate artifact attestation
       attestations: write
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
       - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@v1
+        uses: actions/attest-build-provenance@v4
         with:
           subject-path: 'wheels-*/*'
       - name: Publish to PyPI