chore(bootstrap): scaffold specta + tauri-specta + ts-rs codegen pipeline

[mpiton]

Summary

Sprint 0 placeholder for Rust ↔ TypeScript IPC type bridge using specta + tauri-specta + ts-rs.
No runtime usage yet; Sprint 1 will wire #[derive(specta::Type)] annotations and export Tauri commands + domain DTOs.
Closes Sprint 0 Task 15 acceptance criteria.

Why

Frontend DTOs must be type-safe mirrors of Rust backend types. Specta v2 RC split the monolithic v1 crate
(which pulled Tauri 1.x incompatible with our Tauri 2.11) into separate specta core + tauri-specta companion.
This PR establishes the scaffold so Sprint 1 can begin wiring exports without bootstrapping infrastructure.

Changes

• Dependencies (via cargo add): specta 2.0.0-rc.24, tauri-specta 2.0.0-rc.24 (typescript), ts-rs 12.0.1 (serde-compat, uuid-impl)
• Codegen script (scripts/codegen-types.ts): placeholder that warns and exits 0; Sprint 1 will populate with concrete exports
• Types placeholder (src/shared/types/index.ts): empty export for auto-generated DTOs; intentionally ignored by knip
• CI smoke step (.github/workflows/ci.yml): runs pnpm codegen between tsc and knip; will promote to --check once Sprint 1 emits output
• Configuration (knip.json, deny.toml): added codegen script to entry/project paths; added RUSTSEC-2024-0436 (paste 1.0.15 transitive via specta-macros RC, no safe upgrade until specta stabilizes)
• Documentation (CONTRIBUTING.md): new IPC type bridge codegen subsection documenting regen workflow
• Code quality (cleanup commit): removed narration-only comments; simplified CI rationale; aligned step style

Testing

cargo fmt --check
cargo clippy -- -D warnings
cargo test --workspace
cargo deny check
pnpm exec oxlint .
pnpm exec oxfmt --check .
pnpm exec tsc -b
pnpm exec vitest run
pnpm exec knip
pnpm codegen  # verify placeholder exits 0

All green locally. Pipeline ready for Sprint 1 wiring.

Related Issues

• Closes T15 (Sprint 0 Task 15: Setup specta + ts-rs codegen scaffold)
• Unblocks T13, T14, T16 (Sprint 0 Task 12 CI green → merge T15 → unblock dependents)

Notes for Reviewer

• No behavior change: placeholder codegen infrastructure only. Runtime impact zero until Sprint 1.
• Version constraint: specta v2.0.0-rc.24 required; v1.x incompatible (pulls Tauri 1.x). Modern split proven stable in upstream; no action on RC tag.
• Advisory: RUSTSEC-2024-0436 (paste) is transitive via specta-macros. Specta v2 stable release will drop it. Safe to ignore for now.
• Next sprint: Sprint 1 will populate codegen script with actual exports, promote CI --check from smoke, and start wiring #[derive(specta::Type)].

Checklist

• Tests added/updated and passing locally
• Docs updated (CONTRIBUTING.md, inline comments)
• No secrets, debug prints, commented-out code
• Self-reviewed the diff
• CI green (all checks pass locally)

Summary by CodeRabbit

• Documentation

  • Updated contribution guidelines with information about the IPC type bridge development workflow.

• Chores

  • Infrastructure setup for Rust-to-TypeScript type generation system (Sprint 0 placeholder).
  • Added code generation tooling and updated CI configuration.
  • Security advisory allowlist updated.

[coderabbitai]

📝 Walkthrough

Walkthrough

This PR introduces Sprint 0 placeholder infrastructure for a Rust↔TypeScript IPC type bridge using Specta and tauri-specta. It adds Rust dependencies, a TypeScript codegen script, CI integration, and documentation describing the code-generation workflow and regeneration procedures.

Changes

Rust↔TypeScript IPC Type Bridge Codegen Infrastructure

Layer / File(s)	Summary
Rust Type-Generation Dependencies src-tauri/Cargo.toml	Adds specta (rc.24), tauri-specta with TypeScript feature (rc.24), and ts-rs (12.0.1) with serde and uuid features to enable Rust type export.
Frontend Codegen Script & Placeholder Types scripts/codegen-types.ts, src/shared/types/index.ts	Creates a Sprint 0 placeholder codegen script that warns and exits 0; adds an empty generated-types module.
Codegen Tooling & Scripting package.json	Adds tsx (^4.21.0) devDependency and codegen script (tsx scripts/codegen-types.ts) to support TypeScript codegen execution.
CI & Linting Integration .github/workflows/ci.yml, knip.json	Introduces a codegen (smoke) CI step between typecheck and knip; updates Knip config to include the codegen script as an entry point and scripts/*.ts in project globs to prevent false-positive unused-dependency warnings.
Dependency Advisory & Configuration deny.toml	Adds RUSTSEC-2024-0436 to the RustSec advisory ignore list with rationale notes for the specta RC dependency chain.
Documentation CONTRIBUTING.md, CHANGELOG.md	Documents the codegen regeneration workflow (command: pnpm codegen, regenerated files must be committed alongside Rust changes); lists all infrastructure additions and toolchain details in the changelog.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

• chore(bootstrap): scaffold Tauri 2 + cleanup samples #2 — Both PRs modify src-tauri/Cargo.toml; the earlier PR scaffolded the Tauri crate and this one adds Specta/tauri-specta/ts-rs dependencies to enable Rust→TypeScript codegen.
• ci: add cargo-mutants + knip, drop cargo-audit (consolidate into cargo-deny) #6 — Both PRs update frontend CI workflow and Knip configuration around dead-code detection and codegen script wiring in package.json and ci.yml.
• chore(bootstrap): verify cargo-deny green on T07 dep tree (task 10) #9 — Both PRs modify deny.toml and CONTRIBUTING.md documentation; this PR adds a specific RustSec advisory ignore and codegen workflow docs while the related PR may overhaul broader cargo-deny guidance.

Poem

🐰 Specta types now flow from Rust to land,
A Bridge of Trust through TypeScript sand,
Sprint Zero wires the path ahead,
With placeholders cheering what's to be said!
The codegen waits for logic bright, ✨

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The PR title clearly summarizes the main objective: scaffolding a Rust-to-TypeScript codegen pipeline using specta, tauri-specta, and ts-rs for IPC type bridging.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/task-15-specta-tsrs

---

_{Review rate limit: 3/5 reviews remaining, refill in 12 minutes and 34 seconds.}

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codspeed-hq]

Merging this PR will not alter performance

✅ 7 untouched benchmarks

---

_{Comparing chore/task-15-specta-tsrs (d2063f3) with main (7992036)}

[coderabbitai]

🧹 Nitpick comments (1)

.github/workflows/ci.yml (1)

92-100: ⚡ Quick win

Add a generated-files cleanliness gate and run codegen before typecheck.

Right now CI only smoke-runs codegen. Once Sprint 1 writes files, this won’t fail on uncommitted generated diffs. Put codegen before tsc -b and add a diff check for src/shared/types/**.

Proposed CI adjustment

-      - name: tsc -b
-        run: pnpm exec tsc -b
-
       - name: codegen (smoke)
         # Promote to `pnpm run codegen --check` once Sprint 1 emits real output.
         run: pnpm run codegen
+
+      - name: codegen output is committed
+        run: git diff --exit-code -- src/shared/types
+
+      - name: tsc -b
+        run: pnpm exec tsc -b

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In @.github/workflows/ci.yml around lines 92 - 100, Move the codegen step to run
before the TypeScript build step (so run the existing "codegen (smoke)" step
prior to the "tsc -b" step) and replace the smoke run with a strict check that
fails CI if generated sources changed; add a new job/step that runs a git diff
check against the generated path pattern "src/shared/types/**" (fail if any
changes are detected) so uncommitted generated-file diffs block the pipeline;
ensure existing "knip" step remains after typecheck.

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Nitpick comments:
In @.github/workflows/ci.yml:
- Around line 92-100: Move the codegen step to run before the TypeScript build
step (so run the existing "codegen (smoke)" step prior to the "tsc -b" step) and
replace the smoke run with a strict check that fails CI if generated sources
changed; add a new job/step that runs a git diff check against the generated
path pattern "src/shared/types/**" (fail if any changes are detected) so
uncommitted generated-file diffs block the pipeline; ensure existing "knip" step
remains after typecheck.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 863e5bd9-ce27-48ab-9d3d-3017a1a9fa09

📥 Commits

Reviewing files that changed from the base of the PR and between 7992036 and d2063f3.

⛔ Files ignored due to path filters (2)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
• src-tauri/Cargo.lock is excluded by !**/*.lock

📒 Files selected for processing (9)

• .github/workflows/ci.yml
• CHANGELOG.md
• CONTRIBUTING.md
• deny.toml
• knip.json
• package.json
• scripts/codegen-types.ts
• src-tauri/Cargo.toml
• src/shared/types/index.ts

[cubic-dev-ai]

No issues found across 11 files