Merge pull request #195 from auths-dev/dev-ciOpsLanOps

build/fix: consolidate CI resources to optimize wall time, fix LAN pairing dropping early

Author: bordumb

.github/actions/setup-rust/action.yml

@@ -0,0 +1,25 @@
+name: Setup Rust
+description: Install Rust toolchain from rust-toolchain.toml and cache cargo artifacts
+
+inputs:
+  components:
+    description: Rust components to install (comma-separated)
+    required: false
+    default: ""
+
+runs:
+  using: composite
+  steps:
+    - uses: dtolnay/rust-toolchain@master
+      with:
+        toolchain: "1.93"
+        components: ${{ inputs.components }}
+    - uses: actions/cache@v4
+      with:
+        path: |
+          ~/.cargo/registry
+          ~/.cargo/git
+          ~/.cargo/bin
+          target
+        key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
+        restore-keys: ${{ runner.os }}-cargo-

.github/workflows/cargo-deny.yml

@@ -24,11 +24,12 @@ jobs:
           - bans licenses sources
     steps:
       - uses: actions/checkout@v4
-      - uses: dtolnay/rust-toolchain@master
-        with:
-          toolchain: "1.93"
+      - uses: ./.github/actions/setup-rust
       - name: Install cargo-deny
-        run: cargo install cargo-deny --version "=0.19.0" --locked
+        run: |
+          if ! cargo deny --version 2>/dev/null | grep -q "0.19"; then
+            cargo install cargo-deny --locked
+          fi
       - name: cargo deny check ${{ matrix.checks }}
         run: cargo deny --manifest-path ./Cargo.toml check ${{ matrix.checks }}
 

.github/workflows/ci.yml

@@ -53,6 +53,19 @@ jobs:
       - run: cargo clippy --all-targets --all-features -- -D warnings
       - run: cargo run -p xtask -- check-clippy-sync
 
+  xtask-checks:
+    name: Tree-sitter enforcement
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ./.github/actions/setup-rust
+      - name: Run tree-sitter enforcement checks
+        run: |
+          cargo run -p xtask -- check-curve-agnostic
+          cargo run -p xtask -- check-anchor-discipline
+          cargo run -p xtask -- check-constant-time
+          cargo run -p xtask -- check-rfc6979
+
   schemas:
     name: Schema validation
     runs-on: ubuntu-latest

crates/auths-cli/src/commands/device/pair/lan_server.rs

@@ -104,14 +104,18 @@ impl LanPairingServer {
         self,
         timeout: Duration,
     ) -> Result<SubmitResponseRequest, auths_sdk::error::PairingError> {
-        self.cancel.cancel();
-
-        self.handle
+        let result = self
+            .handle
             .wait_for_response(timeout)
             .await
             .map_err(|e| match e {
                 auths_pairing_daemon::DaemonError::Pairing(pe) => pe,
                 other => auths_sdk::error::PairingError::LocalServerError(other.to_string()),
-            })
+            });
+
+        // Shut down the server AFTER response received (or timeout).
+        // Previously cancel() fired first, killing the listener immediately.
+        self.cancel.cancel();
+        result
     }
 }