Import source code from baselibs_rust repository

.bazelrc

@@ -24,6 +24,10 @@ build --tool_java_runtime_version=remotejdk_17
 build --credential_helper="*.qnx.com=%workspace%/.github/tools/qnx_credential_helper.py"
 build --experimental_retain_test_configuration_across_testonly # needed for QNX tests until bazel update to 8.6.0. See https://github.com/bazelbuild/bazel/pull/28115
 
+# Ferrocene must be common compiler for HOST. To ensure metadata compatibility for proc macro crates!
+common --extra_toolchains=@score_gcc_x86_64_toolchain//:x86_64-linux-gcc_12.2.0
+common --extra_toolchains=@score_toolchains_rust//toolchains/ferrocene:ferrocene_x86_64_unknown_linux_gnu
+
 build:_bl_stub --//score/json:base_library=nlohmann
 build:_bl_stub --//score/memory/shared/flags:use_typedshmd=False
 
@@ -43,13 +47,15 @@ build:bl-x86_64-linux --config=_bl_stub
 build:bl-x86_64-linux --config=_bl_toolchain_common
 build:bl-x86_64-linux --platforms=@score_bazel_platforms//:x86_64-linux-gcc_12.2.0-posix
 build:bl-x86_64-linux --extra_toolchains=@score_gcc_x86_64_toolchain//:x86_64-linux-gcc_12.2.0
+build:bl-x86_64-linux --extra_toolchains=@score_toolchains_rust//toolchains/ferrocene:ferrocene_x86_64_unknown_linux_gnu
 test:bl-x86_64-linux --config=_bl_common
 
 # Target configuration for CPU:AArch64|OS:Linux build (do not use it in case of system toolchains!)
 build:bl-aarch64-linux --config=_bl_stub
 build:bl-aarch64-linux --config=_bl_toolchain_common
 build:bl-aarch64-linux --platforms=@score_bazel_platforms//:aarch64-linux-gcc_12.2.0-posix
 build:bl-aarch64-linux --extra_toolchains=@score_gcc_aarch64_toolchain//:aarch64-linux-gcc_12.2.0
+build:bl-aarch64-linux --extra_toolchains=@score_toolchains_rust//toolchains/ferrocene:ferrocene_aarch64_unknown_linux_gnu
 test:bl-aarch64-linux --config=_bl_common
 test:bl-aarch64-linux --test_timeout=300
 test:bl-aarch64-linux --run_under=//:qemu_aarch64
@@ -61,6 +67,7 @@ build:bl-x86_64-qnx --config=_bl_toolchain_common
 build:bl-x86_64-qnx --platforms=@score_bazel_platforms//:x86_64-qnx-sdp_8.0.0-posix
 build:bl-x86_64-qnx --extra_toolchains=@score_qcc_x86_64_toolchain//:x86_64-qnx-sdp_8.0.0
 build:bl-x86_64-qnx --extra_toolchains=@score_qnx_x86_64_ifs_toolchain//:ifs-x86_64-qnx-sdp_8.0.0
+build:bl-x86_64-qnx --extra_toolchains=@score_toolchains_rust//toolchains/ferrocene:ferrocene_x86_64_pc_nto_qnx800
 test:bl-x86_64-qnx --config=_bl_common
 test:bl-x86_64-qnx --run_under=@score_qnx_unit_tests//src:run_under_qnx
 test:bl-x86_64-qnx --test_tag_filters=
@@ -73,12 +80,29 @@ build:bl-aarch64-qnx --incompatible_strict_action_env
 build:bl-aarch64-qnx --platforms=@score_bazel_platforms//:aarch64-qnx-sdp_8.0.0-posix
 build:bl-aarch64-qnx --extra_toolchains=@score_qcc_aarch64_toolchain//:aarch64-qnx-sdp_8.0.0
 build:bl-aarch64-qnx --extra_toolchains=@score_qnx_aarch64_ifs_toolchain//:ifs-aarch64-qnx-sdp_8.0.0
+build:bl-aarch64-qnx --extra_toolchains=@score_toolchains_rust//toolchains/ferrocene:ferrocene_aarch64_unknown_nto_qnx800
 test:bl-aarch64-qnx --config=_bl_common
 test:bl-aarch64-qnx --test_timeout=300
 test:bl-aarch64-qnx --run_under=@score_qnx_unit_tests//src:run_under_qnx
 test:bl-aarch64-qnx --test_tag_filters=
 test:bl-aarch64-qnx --test_lang_filters=cc,rust
 
+# Ferrocene Rust coverage config
+build:ferrocene-coverage --@rules_rust//rust/settings:extra_rustc_flag=-Cinstrument-coverage
+build:ferrocene-coverage --@rules_rust//rust/settings:extra_rustc_flag=-Clink-dead-code
+build:ferrocene-coverage --@rules_rust//rust/settings:extra_rustc_flag=-Ccodegen-units=1
+build:ferrocene-coverage --@rules_rust//rust/settings:extra_rustc_flag=-Cdebuginfo=2
+build:ferrocene-coverage --@rules_rust//rust/settings:extra_exec_rustc_flag=-Cinstrument-coverage
+build:ferrocene-coverage --@rules_rust//rust/settings:extra_exec_rustc_flag=-Clink-dead-code
+build:ferrocene-coverage --@rules_rust//rust/settings:extra_exec_rustc_flag=-Ccodegen-units=1
+build:ferrocene-coverage --@rules_rust//rust/settings:extra_exec_rustc_flag=-Cdebuginfo=2
+test:ferrocene-coverage --run_under=@score_tooling//coverage:llvm_profile_wrapper
+
+# Clippy linting for Rust
+build --aspects=@score_rust_policies//clippy:linters.bzl%clippy_strict
+build --output_groups=+rules_lint_human
+build:lint --@aspect_rules_lint//lint:fail_on_violation=true
+
 # Coverage configuration for C++
 coverage --features=coverage
 coverage --combined_report=lcov

.github/CODEOWNERS

@@ -6,4 +6,8 @@
 # default owners
 * @antonkri @4og
 
+/* @antonkri @4og @pawelrutkaq @arkjedrz
+/.github @antonkri @4og @pawelrutkaq @arkjedrz
 /docs @antonkri @4og @aschemmel-tech
+/examples @antonkri @4og @pawelrutkaq @arkjedrz
+/src @antonkri @4og @pawelrutkaq @arkjedrz

.github/actions/setup-rust-build/action.yml

@@ -0,0 +1,47 @@
+# *******************************************************************************
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# SPDX-License-Identifier: Apache-2.0
+# *******************************************************************************
+name: 'Setup Rust Build Environment'
+description: 'Checks out code, installs protoc, and caches cargo dependencies'
+inputs:
+  repo-token:
+    description: 'GitHub token for protoc downloads'
+    required: true
+runs:
+  using: "composite"
+  steps:
+    - name: Checkout Repository
+      uses: actions/checkout@v4
+    - name: Install protoc 26.1
+      uses: arduino/setup-protoc@v3
+      with:
+        version: 26.1
+        repo-token: ${{ inputs.repo-token }}
+    - name: Cache cargo & target
+      uses: actions/cache@v3
+      with:
+        path: |
+          ~/.cargo/registry
+          ~/.cargo/git
+          target
+          ~/.cargo/bin
+        key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
+        restore-keys: |
+          ${{ runner.os }}-cargo-
+    - name: Install cargo-tarpaulin if not already installed
+      run: |
+        if ! command -v cargo-tarpaulin > /dev/null; then
+          cargo install cargo-tarpaulin --version 0.32.7 --locked
+        else
+          echo "cargo-tarpaulin is already installed"
+        fi
+      shell: bash

.github/workflows/build_linux.yml

@@ -31,15 +31,17 @@ jobs:
       matrix:
         include:
           - bazel-config: bl-x86_64-linux
-            bazel-build-target: "//score/..."
+            bazel-build-target: "//score/... //src/..."
             bazel-test-target: >-
               //score/...
+              //src/...
               -//score/language/safecpp/aborts_upon_exception:abortsuponexception_toolchain_test
             bazel-test-extra-flags: ""
           - bazel-config: bl-aarch64-linux
-            bazel-build-target: "//score/..."
+            bazel-build-target: "//score/... //src/..."
             bazel-test-target: >-
               //score/...
+              //src/...
               -//score/language/safecpp/aborts_upon_exception:abortsuponexception_toolchain_test
               -//score/os/test:acl_test
               -//score/os/test:errno_test

.github/workflows/build_qnx.yml

@@ -30,28 +30,34 @@ jobs:
           - bazel-config: bl-x86_64-qnx
             bazel-test-target: >-
               //score/...
+              //src/...
               -//score/language/futurecpp/tests:memory_resource_test
               -//score/language/futurecpp/tests:zip_iterator_test
               -//score/language/safecpp/aborts_upon_exception:abortsuponexception_toolchain_test
               -//score/memory/shared:shared_memory_factory_test
               -//score/memory/shared:shared_memory_resource_open_test
               -//score/os/test:asil_qm_test
               -//score/os/test:grp_test
+              -//src/containers:tests
           - bazel-config: bl-aarch64-qnx
             bazel-test-target: >-
               //score/...
+              //src/...
               -//score/language/futurecpp/tests:memory_resource_test
               -//score/language/safecpp/aborts_upon_exception:abortsuponexception_toolchain_test
               -//score/memory/shared:shared_memory_factory_test
               -//score/memory/shared:shared_memory_resource_open_test
               -//score/os/utils/inotify:unit_test
+              -//src/containers:tests
+              -//src/pal:tests
+              -//src/thread:tests
             extra-bazel-test-flags: "--test_timeout=120,600,1800,7200" # Increase test timeout due to QEMU emulation
     uses: eclipse-score/cicd-workflows/.github/workflows/qnx-build.yml@af347722c7ae3ed85518895c11268d96ac728f62
     permissions:
       contents: read
       pull-requests: read
     with:
-      bazel-target: "//score/..."
+      bazel-target: "//score/... //src/..."
       bazel-config: ${{ matrix.bazel-config }}
       bazel-test-target: ${{ matrix.bazel-test-target }}
       credential-helper: ".github/tools/qnx_credential_helper.py"

.github/workflows/cargo_required.yml

@@ -0,0 +1,76 @@
+# *******************************************************************************
+# Copyright (c) 2025 Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# SPDX-License-Identifier: Apache-2.0
+# *******************************************************************************
+name: cargo build, test, coverage and miri report
+on:
+  push:
+    branches: [main, development]
+  pull_request:
+    branches: [main, development]
+    types: [opened, ready_for_review, reopened, synchronize]
+env:
+  CARGO_TERM_COLOR: always
+  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+jobs:
+  cargo-checks:
+    #permissions for docs deployment
+    permissions:
+      contents: write
+      pages: write
+      id-token: write
+    runs-on: ${{ vars.REPO_RUNNER_LABELS && fromJSON(vars.REPO_RUNNER_LABELS) || 'ubuntu-latest' }}
+    timeout-minutes: 45 # minutes is the maximum allowed for a cold run
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+      - name: Setup Rust Build Environment
+        uses: ./.github/actions/setup-rust-build
+        with:
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+      # ---------- BUILD ----------
+      - name: Cargo build
+        run: cargo build --verbose
+      # ---------- TARPAULIN(TEST + COVERAGE) ----------
+      - name: Run tests under coverage
+        run: cargo +nightly tarpaulin --version 0.32.7 --skip-clean --out Html --verbose --no-dead-code --engine llvm --all-features
+      - name: Upload coverage report
+        uses: actions/upload-artifact@v4
+        with:
+          name: coverage-report
+          path: tarpaulin-report.html
+      # ---------- MIRI ----------
+      - name: Install nightly + miri (minimal profile)
+        uses: actions-rs/toolchain@v1
+        if: github.event.pull_request.draft == false
+        with:
+          toolchain: nightly-2025-12-15
+          profile: minimal
+          components: miri
+          override: true
+      - name: Prefetch crates for nightly
+        if: github.event.pull_request.draft == false
+        run: cargo +nightly-2025-12-15 fetch --locked
+      - name: Purge Miri artifacts
+        if: github.event.pull_request.draft == false
+        run: |
+          rm -rf target/miri
+          rm -rf ~/.cache/miri
+      - name: Prefetch and build dependencies for Miri
+        if: github.event.pull_request.draft == false
+        run: cargo +nightly-2025-12-15 miri setup
+      - name: Run Miri and save report
+        if: github.event.pull_request.draft == false
+        env:
+          CARGO_INCREMENTAL: "0" # turn off incremental
+        run: |
+          set -o pipefail
+          cargo +nightly-2025-12-15 miri test --workspace 2>&1 | tee miri_report.txt

.github/workflows/lint.yml

@@ -41,3 +41,8 @@ jobs:
       - name: Bazel Build with clang-tidy
         run: |
           bazel build --config clang_tidy -- //...
+  lint-clippy:
+    uses: eclipse-score/cicd-workflows/.github/workflows/static-analysis.yml@af347722c7ae3ed85518895c11268d96ac728f62
+    with:
+      bazel-targets: "//src/..."
+      bazel-config: "lint"

.github/workflows/rust_coverage.yml

@@ -0,0 +1,27 @@
+# *******************************************************************************
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# SPDX-License-Identifier: Apache-2.0
+# *******************************************************************************
+name: Rust Coverage (Demo)
+on:
+  pull_request:
+    types: [opened, reopened, synchronize]
+  workflow_dispatch:
+jobs:
+  rust_coverage:
+    uses: eclipse-score/cicd-workflows/.github/workflows/rust-coverage.yml@main
+    with:
+      bazel-test-targets: "//src/..."
+      bazel-test-config-flags: "--config=ferrocene-coverage"
+      bazel-test-args: "--lockfile_mode=error"
+      coverage-target: "//:rust_coverage"
+      min-coverage: 0
+      coverage-artifact-name: "rust-coverage-html"

BUILD

@@ -1,5 +1,5 @@
 # *******************************************************************************
-# Copyright (c) 2024 Contributors to the Eclipse Foundation
+# Copyright (c) 2025 Contributors to the Eclipse Foundation
 #
 # See the NOTICE file(s) distributed with this work for additional
 # information regarding copyright ownership.
@@ -13,7 +13,8 @@
 
 load("@score_bazel_tools_cc//quality:defs.bzl", "clang_format_config", "quality_clang_tidy_config")
 load("@score_docs_as_code//:docs.bzl", "docs")
-load("@score_tooling//:defs.bzl", "copyright_checker", "use_format_targets")
+load("@score_tooling//:defs.bzl", "copyright_checker", "dash_license_checker", "rust_coverage_report", "use_format_targets")
+load("//:project_config.bzl", "PROJECT_CONFIG")
 load(":qemu.bzl", "qemu_aarch64")
 
 docs(
@@ -30,7 +31,9 @@ copyright_checker(
         ".github",
         "bazel",
         "docs",
+        "examples",
         "score",
+        "src",
         "third_party",
         "//:BUILD",
         "//:MODULE.bazel",
@@ -42,6 +45,52 @@ copyright_checker(
     visibility = ["//visibility:public"],
 )
 
+# Needed for Dash tool to check python dependency licenses.
+# This is a workaround to filter out local packages from the Cargo.lock file.
+# The tool is intended for third-party content.
+genrule(
+    name = "filtered_cargo_lock",
+    srcs = ["Cargo.lock"],
+    outs = ["Cargo.lock.filtered"],
+    cmd = """
+    awk '
+    BEGIN { skip = 0; data = "" }
+    /^\\[\\[package\\]\\]/ {
+        if (data != "" && !skip) print data;
+        skip = 1;
+        data = $$0;
+        next;
+    }
+    data != "" { data = data "\\n" $$0 }
+    # any package that has a "source = " line will not be skipped.
+    /^source = / { skip = 0 }
+    END { if (data != "" && !skip) print data }
+    ' $(location Cargo.lock) > $@
+    """,
+)
+
+dash_license_checker(
+    src = ":filtered_cargo_lock",
+    file_type = "",  # let it auto-detect based on project_config
+    project_config = PROJECT_CONFIG,
+    visibility = ["//visibility:public"],
+)
+
+rust_coverage_report(
+    name = "rust_coverage",
+    bazel_configs = [
+        "ferrocene-coverage",
+    ],
+    query = 'kind("rust_test", //src/...) except //src/log/score_log_fmt_macro:tests',
+    visibility = ["//visibility:public"],
+)
+
+alias(
+    name = "rust_coverage_report",
+    actual = ":rust_coverage",
+    visibility = ["//visibility:public"],
+)
+
 qemu_aarch64()
 
 use_format_targets()