# modgunn — .nornir/build-variants.toml — EMITTED, NOT SOURCE.
#
# Generated by `cargo run -p modgunn-build-thing -- emit` from
# crates/modgunn-build-thing (the Rust `impl BuildThing`). The code is the one
# source; this file DESCRIBES the build. Editing it changes NOTHING: re-emit
# after changing the code. Do not edit by hand.
#
# Model: variant → features → settings/sub-settings → typ. modgunn declares ONE
# atom — the fat client — because it genuinely has one and only one. The four
# the five-shape matrix would have it claim (server · cli · ui · solo) are named
# FICTIONS, each measured on this checkout; four fictions named beats four stubs
# that build and do nothing, and `tests/build_variants.rs` asserts every gap as a
# POSITIVE claim so it cannot quietly turn back into a phantom. The measurements
# and the six declared-but-never-built features are in
# .nornir/build-thing-design.md, which is where the prose that used to sit
# between these rows now lives.
[build]
offers = [
"framework",
"framework-oci",
"manifests",
"provenance-verify",
"rustsec",
"scan",
"scip",
"test-support",
"testmatrix",
"warehouse",
"warehouse-sql",
]
base_suite = "ORIGINAL"
[build.required]
modgunn = [
"warehouse",
"scan",
]
[build.allow_unbuilt]
framework = "the jera + skidbladnir service framework behind `modgunn tools|demo|service`. Deliberately not in the ⭐ atom: `src/service.rs` has no serve loop and its declared ExecStart names a verb main.rs does not have, so a row enabling it would declare a daemon that does not exist."
framework-oci = "framework plus jera's container-oci arm. Same reason as `framework`, one layer further out: a container backend for a daemon that has not been written."
manifests = "the manifest/SBOM ingest surface behind `modgunn ingest`. A real shipped CLI verb of the ⭐ atom's binary, not an artifact of its own — and the first candidate for a row the day modgunn ships a second delivery."
test-support = "test-only helpers over `warehouse`. The second of the two features measured BROKEN on 2026-08-01, for the same root cause as `warehouse-sql`; a shipped artifact must not carry test scaffolding."
testmatrix = "turns the tests' `functional_status` self-reports into real nornir test-matrix rows. A TEST-HARNESS mode, never a delivery."
warehouse-sql = "the skade-sql arm of the Iceberg seam. Not shipped as an artifact of its own; it is the feature that was BROKEN and unnoticed until 2026-08-01 (`no method named reachable_vuln_findings` — cargo built the bin under warehouse-without-scip, a configuration no declared atom produces). Fixed then, and listed here so the gate keeps asking."
[build.allow_unbuilt_bins]
modgunn-build-thing = "this recipe crate's own emit door (`cargo run -p modgunn-build-thing -- emit` regenerates .nornir/build-variants.toml); the forge loads the crate as wasm, the bin is repository tooling, never shipped."
xtask = "the `cargo xtask` door onto this repo's build thing — repository tooling, never shipped."
[build.downstream]
modgunn = ["skade"]
[[build.variant]]
name = "modgunn"
package = "modgunn"
bin = "modgunn"
features = [
"scan",
"scip",
"warehouse",
"rustsec",
"provenance-verify",
]
no_default_features = true
profile = "release"
member = "modgunn"
role = "client"
suites = ["ORIGINAL"]
default = true