cargo-rail: manual testing and updates to UX/ergonomics.

Author: loadingalias

.github/actions/setup/action.yaml

@@ -34,6 +34,16 @@ runs:
       with:
         tool: cargo-audit
 
+    - name: Install cargo-semver-checks
+      uses: taiki-e/install-action@6f9c7cc51aa54b13cbcbd12f8bbf69d8ba405b4b  # v2
+      with:
+        tool: cargo-semver-checks
+
+    - name: Install git-cliff
+      uses: taiki-e/install-action@6f9c7cc51aa54b13cbcbd12f8bbf69d8ba405b4b  # v2
+      with:
+        tool: git-cliff
+
     - name: Install Rust Nightly Toolchain
       uses: dtolnay/rust-toolchain@6d653acede28d24f02e3cd41383119e8b1b35921  # master
       with:

.gitignore

@@ -22,9 +22,14 @@ AGENTS.md
 *.pem
 *.key
 
+# Cargo-Rail (Testing)
+rail.toml
 # Notes
-TESTING_PLAN.md
 STATUS.md
+E2E_TESTING_SETUP.md
+CLEAN.md
+
+# Documentation
 docs/RELEASE_GUIDE.md
 docs/SECURITY.md
 docs/USER_GUIDE.md

README.md

@@ -502,7 +502,7 @@ jobs:
 - [USER_GUIDE.md](docs/USER_GUIDE.md) - Complete walkthrough
 - [SECURITY.md](docs/SECURITY.md) - Threat model and mitigations
 - [RELEASE_GUIDE.md](docs/RELEASE_GUIDE.md) - Release workflow
-- [TESTING_PLAN.md](TESTING_PLAN.md) - Manual testing checklist
+- [E2E_TESTING_SETUP.md](E2E_TESTING_SETUP.md) - End-to-end testing guide
 - [STATUS.md](STATUS.md) - Development status
 
 ---

crates/cargo-rail/src/checks/security_config.rs

@@ -18,6 +18,9 @@ impl Check for SecurityConfigCheck {
   }
 
   fn run(&self, ctx: &CheckContext) -> RailResult<CheckResult> {
+    // Detect actual config file location
+    let config_path = RailConfig::find_config_path(&ctx.workspace_root);
+
     // Try to load configuration
     let config = match RailConfig::load(&ctx.workspace_root) {
       Ok(c) => c,
@@ -109,11 +112,15 @@ impl Check for SecurityConfigCheck {
     if warnings.is_empty() {
       Ok(CheckResult::pass(self.name(), message))
     } else {
-      Ok(CheckResult::warning(
-        self.name(),
-        message,
-        Some("Review security settings in .rail/config.toml"),
-      ))
+      // Use actual config path in suggestion
+      let suggestion = if let Some(path) = config_path {
+        let relative_path = path.strip_prefix(&ctx.workspace_root).unwrap_or(&path);
+        format!("Review security settings in {}", relative_path.display())
+      } else {
+        "Review security settings in rail.toml".to_string()
+      };
+
+      Ok(CheckResult::warning(self.name(), message, Some(&suggestion)))
     }
   }
 

crates/cargo-rail/src/commands/status.rs

@@ -216,7 +216,7 @@ fn print_status_table(statuses: &[CrateStatus]) {
 
   // Header
   println!("{:<20} {:<12} {:<20} {:<10} REMOTE", "CRATE", "SPLIT", "SYNC", "DIRTY");
-  println!("{:-<80}", "");
+  println!("{:-<120}", "");
 
   for status in statuses {
     let split_str = match status.split_status {
@@ -235,9 +235,12 @@ fn print_status_table(statuses: &[CrateStatus]) {
 
     let dirty_str = if status.dirty { "yes" } else { "no" };
 
-    // Truncate remote URL for display
-    let remote_display = if status.remote.len() > 35 {
-      format!("{}...", &status.remote[..32])
+    // Intelligently truncate remote URL for display (preserve end which has repo name)
+    let remote_display = if status.remote.len() > 75 {
+      // Truncate from middle to preserve repo name at end
+      let start = &status.remote[..35];
+      let end = &status.remote[status.remote.len().saturating_sub(35)..];
+      format!("{}...{}", start, end)
     } else {
       status.remote.clone()
     };

crates/cargo-rail/src/core/config.rs

@@ -93,7 +93,7 @@ pub enum SplitMode {
 
 impl RailConfig {
   /// Find config file in search order: rail.toml, .rail.toml, .cargo/rail.toml, .config/rail.toml
-  fn find_config_path(path: &Path) -> Option<PathBuf> {
+  pub fn find_config_path(path: &Path) -> Option<PathBuf> {
     let candidates = vec![
       path.join("rail.toml"),
       path.join(".rail.toml"),

deny.toml

@@ -1,5 +1,4 @@
 [graph]
-# Target Coverage for Rail Substrate
 targets = [
   "x86_64-unknown-linux-gnu",
   "aarch64-unknown-linux-gnu",
@@ -11,7 +10,7 @@ targets = [
 [advisories]
 yanked = "warn"
 
-# Ignore unmaintained advisories for transitive dependencies we cannot easily control
+# Ignore unmaintained advisories for transitive dependencies we cannot easily control - TODO: Remove this once we have a better solution
 ignore = [
   "RUSTSEC-2024-0370", # proc-macro-error (via git-cliff-core → rust-embed → include-flate)
 ]

rail.toml

@@ -2,16 +2,16 @@
 root = "/Users/mr.wolf/loadingalias/cargo-rail"
 
 [security]
-require_signed_commits = false
+require_signed_commits = true
 pr_branch_pattern = "rail/sync/{crate}/{timestamp}"
 protected_branches = [
     "main",
     "master",
 ]
 
 [[splits]]
-name = "cargo-rail"
-remote = "../test-crate-a-split"
+name = "test-crate-a"
+remote = "[email protected]:loadingalias/cargo-rail-test-core.git"
 branch = "main"
 mode = "single"
 include = [
@@ -24,11 +24,11 @@ include = [
 exclude = []
 
 [[splits.paths]]
-crate = "crates/cargo-rail"
+crate = "crates/test-crate-a"
 
 [[splits]]
-name = "test-crate-a"
-remote = "../test-crate-a-split"
+name = "test-crate-b"
+remote = "[email protected]:loadingalias/cargo-rail-test-client.git"
 branch = "main"
 mode = "single"
 include = [
@@ -41,13 +41,13 @@ include = [
 exclude = []
 
 [[splits.paths]]
-crate = "crates/test-crate-a"
+crate = "crates/test-crate-b"
 
 [[splits]]
-name = "test-crate-b"
-remote = "../test-crate-a-split"
+name = "test-combined"
+remote = "[email protected]:loadingalias/cargo-rail-test-combined.git"
 branch = "main"
-mode = "single"
+mode = "combined"
 include = [
     "src/**",
     "tests/**",
@@ -57,5 +57,8 @@ include = [
 ]
 exclude = []
 
+[[splits.paths]]
+crate = "crates/test-crate-a"
+
 [[splits.paths]]
 crate = "crates/test-crate-b"