# cargo-mutants budget for the scheduled mutation job (task 42).
#
# Scoped to the pure, container-free security modules so the weekly CI leg
# needs no Docker: scope parsing, redirect matching, PKCE, and the token
# primitives. The time budget lives in CI (`.github/workflows/ci.yml` runs
# `cargo mutants --timeout 1800 --test-tool nextest` with a 60-minute step
# backstop). Task 43 scopes `--file <module>` runs over the
# security-critical modules against the fast test subset.
examine_globs = [
  "src/crypto/ct.rs",
  "src/crypto/pkce.rs",
  "src/crypto/tokens.rs",
  "src/protocol/scope.rs",
  "src/protocol/redirect_repo.rs",
]

# `examine_globs` only limits which files are mutated; cargo-mutants otherwise
# runs the whole package suite, whose e2e/integration binaries need the shared
# Postgres/Redis. Restrict the test run to the tests that cover the examined
# modules (their unit tests plus the three pure property suites), which keeps
# the leg container-free and fast enough for the mutation budget. The filter
# is appended to every `cargo nextest run` cargo-mutants issues.
additional_cargo_test_args = [
  "-E",
  "test(crypto::ct) | test(crypto::pkce) | test(crypto::tokens) | test(protocol::scope) | test(protocol::redirect_repo) | binary(proptest_pkce) | binary(proptest_scope) | binary(proptest_redirect)",
]