This project uses Conventional Commits.
type(scope): lowercase description
- Types:
feat,fix,refactor,perf,docs,style,chore,ci,test,lint. - Scopes (optional):
cli,api,deps,readme,benchmark,toolchain,test, or another relevant area. - Description: always lowercase after the colon, no trailing period, brief (3-7 words preferred).
- Breaking changes: append
!before the colon. For example:feat(cli)!: remove deprecated flag. - Code identifiers in descriptions should be wrapped in backticks. For example:
chore(deps): update `rand`.
Version release commits use only the version number as the message, with no type prefix:
0.21.1
Write documentation, comments, and other prose for ease of understanding first. Prefer a formal tone when it does not hurt clarity, and use complete sentences. Avoid mid-sentence breaks introduced by em dashes or long parenthetical clauses. Em dashes are a reliable symptom of loose phrasing; when one appears, restructure the surrounding sentence so each clause stands on its own rather than swapping the em dash for another punctuation mark.
Automated tools enforce formatting (cargo fmt), linting (cargo clippy), and a curated set of project-specific rules via dylint (cargo dylint --all, run with DYLINT=true ./test.sh). The following conventions must be followed manually unless a subsection notes that a specific dylint rule enforces them.
Import granularity is enforced automatically by the perfectionist::import_granularity rule, configured for the module style. Items from the same module are merged into a single braced use statement, while each module keeps its own use statement rather than collapsing an entire crate into one nested-braces statement. Import ordering is enforced separately by cargo fmt.
The remaining convention is not enforced and must be applied by hand. Imports gated by a platform attribute such as #[cfg(unix)] go in a separate block after the main imports.
use crate::args::{Args, Quantity, Threads};
use crate::bytes_format::BytesFormat;
use crate::size;
use clap::Parser;
use pipe_trait::Pipe;
use std::io::stdin;
use std::time::Duration;
#[cfg(unix)]
use crate::get_size::{GetBlockCount, GetBlockSize};The flat file pattern (module.rs rather than module/mod.rs) is enforced by the perfectionist::flat_module_pattern dylint check. In addition to that requirement, follow these conventions:
- List
pub moddeclarations first, thenpub usere-exports, then private imports and items. - Use
pub useto re-export key types at the module level for convenience.
pub mod error_only_reporter;
pub mod error_report;
pub mod event;
pub use error_only_reporter::ErrorOnlyReporter;
pub use error_report::ErrorReport;
pub use event::Event;The order of trait names within each #[derive(...)] attribute is enforced automatically by the perfectionist::derive_ordering rule, configured for the prefix_then_alphabetical style. The configured prefix in dylint.toml lists the trait families in their project-preferred order: Debug, formatting / error derives (Display, Error), defaults (Default, SmartDefault), Clone / Copy, comparison and Hash, reference wrappers (AsRef, AsMut, Deref, DerefMut), conversions (From, Into, TryFrom, TryInto, FromStr), iteration, arithmetic operator pairs and folds, and integer-format derives. Any trait that is not in the prefix (project-specific derives such as Setters and Parser) falls in ASCII-case-insensitive alphabetical order after the prefix entries.
The remaining conventions are not enforced by the rule and must be applied by hand. When a type derives many traits, split them across multiple #[derive(...)] lines for readability, and place feature-gated derives on a separate #[cfg_attr(...)] line.
#[derive(Debug, Display, Default, Clone, Copy, PartialEq, Eq, PartialOrd, Ord)]
#[derive(From, Into, Add, AddAssign, Sub, SubAssign, Sum)]
#[cfg_attr(feature = "json", derive(Deserialize, Serialize))]
pub struct Bytes(u64);Use descriptive names for type parameters, not single letters:
Size,Name,SizeGetter,HardlinksRecorder,Report
Single-letter type parameters are flagged by perfectionist::single_letter_generic.
Use descriptive names for variables and closure parameters by default. Single-letter names are permitted only in the specific cases listed below. Enforced by perfectionist::single_letter_let_binding, perfectionist::single_letter_function_param, and perfectionist::single_letter_closure_param. The exact exemptions differ by binding kind, as the cases below describe. The extra_allowed_idents and extra_trivial_callback_methods knobs in dylint.toml extend the built-in exempt sets, though the project currently relies on the defaults aside from the sort_reflection_by callback.
-
Comparison closures:
|a, b|insort_by,cmp, or similar two-argument comparison callbacks. This is idiomatic Rust.sort_reflection_by(&mut tree, |a, b| a.name.cmp(&b.name));
-
Conventional single-letter names:
nfor a natural number such as an unsigned integer or count,ffor afmt::Formatter, and similar well-established conventions from math or the Rust standard library. Note: for indices, useindex,idx, or*_indexsuch asrow_index, notn. Fori/j/k, see the dedicated rule below.fn with_capacity(n: usize) -> Self { todo!() } fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result { todo!() }
-
Index variables (
i,j,k): These are exempt as function and closure parameters, and they read naturally in index-based loops or iterations, which are rare in Rust. They are not exempt asletbindings, where onlynis allowed, so aletthat holds an index must useindex,idx, or*_indexinstead.// OK: closure parameter left_indices.zip(right_indices).map(|(i, j)| matrix[i][j]) // OK: index-based loop for i in 0..len { /* ... */ } // Bad: a `let` binding allows only `n`, never `i` let i = items.iter().position(|item| item.is_active()).unwrap();
-
Trivial single-expression closures: A closure whose body is a single field access, method call, or wrapper may use a single letter when the type and purpose are obvious from context.
.pipe(|x| vec![x])
-
Fold accumulators:
accfor the accumulator and a single letter for the element in trivial folds..fold(PathBuf::new(), |acc, x| acc.join(x))
-
Multi-line functions and closures: Use a descriptive name when a function or closure body spans multiple lines. Examples include a body that contains a
letbinding followed by another expression, or a body with multiple chained operations.// Good .map(|tree_row| { let columns = build_columns(tree_row); format_row(&columns) }) // Bad .map(|t| { let columns = build_columns(t); format_row(&columns) })
-
letbindings: Always use descriptive names.// Good let metadata = entry.metadata()?; // Bad let m = entry.metadata()?;
-
Function and method parameters: Always use descriptive names, except for the conventional single-letter names listed above, such as
nandf. -
Closures with non-obvious context: When the type or purpose is not immediately clear from the surrounding method chain, use a descriptive name.
// Good: not obvious what the closure receives .filter_map(|entry| match entry { _ => todo!() }) .for_each(|child| child.par_sort_by(compare)) // Bad: reader must look up what .filter receives .filter(|x| x.get_mount_point() == mount_point)
Prefer where clauses over inline bounds when there are multiple constraints:
impl<Size, SizeGetter, HardlinksRecorder, Report>
From<FsTreeBuilder<'a, Size, SizeGetter, HardlinksRecorder, Report>>
for DataTree<OsStringDisplay, Size>
where
Report: Reporter<Size> + Sync + ?Sized,
Size: size::Size + Send + Sync,
SizeGetter: GetSize<Size = Size> + Sync,
HardlinksRecorder: RecordHardlinks<Size, Report> + Sync + ?Sized,- Use
derive_morefor error types. Only derive the traits that are actually used:Display: derive when the type needs to be displayed, such as when it is printed to stderr or used in format strings.Error: derive when the type is used as astd::error::Error, such as the error type inResultor the source of another error. Not all types withDisplayneedError.- A type that only needs formatting and not error handling should derive
DisplaywithoutError.
- Minimize
unwrap()in non-test code; use proper error propagation.unwrap()is acceptable in tests, and is also acceptable for provably infallible operations when accompanied by a comment explaining the invariant. When deliberately ignoring an error, use.ok()and document the rationale.
#[derive(Debug, Display, Error)]
#[non_exhaustive]
pub enum RuntimeError {
#[display("SerializationFailure: {_0}")]
SerializationFailure(serde_json::Error),
}When a test cannot run under certain conditions, such as on the wrong platform, prefer #[cfg_attr(..., ignore)] over #[cfg(...)] to skip it. The test still compiles on every configuration and is only skipped at runtime. This approach catches type errors and regressions that a #[cfg] skip would hide.
Use #[cfg] on tests only when the code cannot compile under the condition. An example is a test that references types, functions, or trait methods gated behind #[cfg] that do not exist on other platforms or feature sets.
Prefer including a reason string in the ignore attribute to explain why the test is skipped.
// Good: test compiles everywhere, skipped at runtime on non-unix
#[test]
#[cfg_attr(not(unix), ignore = "only one path separator style is tested")]
fn unix_path_logic() { /* uses hardcoded unix paths but no unix-only types */ }
// Good: test CANNOT compile on non-unix (uses unix-only types)
#[cfg(unix)]
#[test]
fn block_size() { /* uses GetBlockSize which only exists on unix */ }This codebase uses the pipe-trait crate extensively. The Pipe trait enables method-chaining through unary functions, keeping code in a natural left-to-right reading order. Import it as use pipe_trait::Pipe;.
Any callable that takes a single argument works with .pipe(). This includes free functions, closures, newtype constructors, enum variant constructors, Some, Ok, Err, and trait methods such as From::from. The guidance below applies equally to all of them.
Chaining through a unary function at the end of an expression chain:
// Good: pipe keeps the chain flowing left-to-right
stats.ino().pipe(InodeNumber)
list.into_sorted_unstable_by_key(|entry| u64::from(entry.ino))
.pipe(Reflection)
value.0.into_iter().collect::<HashSet<_>>().pipe(Reflection)
METRIC.parse_value(bytes).pipe(Output::Units)Avoiding deeply nested function calls:
// Nested calls are harder to read
let data = serde_json::from_reader::<_, JsonData>(stdin());
let name = Some(OsStringDisplay::from(entry.file_name()));
// Prefer piping instead
let data = stdin().pipe(serde_json::from_reader::<_, JsonData>);
let name = entry.file_name().pipe(OsStringDisplay::from).pipe(Some);Chaining through multiple unary functions:
// Good: clear wrapping pipeline
ino.pipe(ConversionError::DuplicatedInode).pipe(Err)
map.pipe(HardlinkList).pipe(Ok)
UnsupportedFeature::DeduplicateHardlink
.pipe(RuntimeError::UnsupportedFeature)
.pipe(Err)Continuing a method chain through a free function and back to methods:
// Good: pipe bridges from methods to a free function and back
block_dev
.pipe(validate_block_device::<Fs>)
.map(Cow::Borrowed)
"/sys/block"
.pipe(Path::new)
.join(block_dev)
.pipe_as_ref(Fs::path_exists)
.then_some(block_dev)Using .pipe_as_ref() to pass a reference mid-chain. This avoids introducing a temporary variable when a free function takes &T:
// Good: pipe_as_ref calls .as_ref() then passes to the function
path_buf.pipe_as_ref(Fs::path_exists)
// Without pipe, you'd need a temporary or nested call
Fs::path_exists(path_buf.as_ref())Simple standalone function calls. Pipe adds noise with no readability benefit:
// Bad: unnecessary pipe
let result = value.pipe(foo);
// Good: just call the function directly
let result = foo(value);This applies to any unary callable, such as Some, Ok, or constructors, when there is no preceding chain to continue:
// Bad: pipe adds nothing here
let result = value.pipe(Some);
// Good: direct call is clearer
let result = Some(value);However, piping through any unary function is preferred when it continues an existing chain:
// Good: continues a chain
report.summarize().pipe(Some)
entry.file_name().pipe(OsStringDisplay::from).pipe(Some)When mapping enum variants to values, prefer the concise wrapping style:
ExitCode::from(match self {
RuntimeError::SerializationFailure(_) => 2,
RuntimeError::DeserializationFailure(_) => 3,
})A unit-test module may either sit inline as mod tests { ... } in its parent or live in a dedicated external tests submodule. Use the inline form for short test modules. Once the block becomes long enough to obscure the surrounding module, move the tests into an external file.
The inline form mod tests { ... } is acceptable on its own. Reserve it for modules whose entire test suite fits in a small number of lines, so the block does not noticeably extend the parent. Use the number of lines as the deciding factor.
When the tests live externally, the parent declares them at the end of the file with the standard declaration:
#[cfg(test)]
mod tests;The external file itself sits in a directory named after the parent, using the same path regardless of whether the parent has any other submodules. Concretely:
- For
src/foo.rs, the tests file issrc/foo/tests.rs. - For
src/foo/bar.rs, the tests file issrc/foo/bar/tests.rs.
Do not flatten the tests into a sibling file such as src/foo_tests.rs, and do not skip the intermediate directory when the parent currently has no other submodules. This mirrors the flat file pattern (module.rs rather than module/mod.rs) described under Module Organization.
Install the required Rust toolchain and components before running any checks:
rustup toolchain install "$(< rust-toolchain)"
rustup component add --toolchain "$(< rust-toolchain)" rustfmt clippyTo run the dylint checks locally, also install cargo-dylint and dylint-link:
cargo install cargo-dylint dylint-linkThese are only required when running with DYLINT=true. The dylint libraries declared in dylint.toml are built against their own pinned nightly toolchain, which cargo-dylint fetches automatically on first run.
Some integration tests require external tools that are not managed by Cargo.toml. These tests panic when the tools are absent. CI installs them to get full coverage.
squashfs-tools(providesmksquashfs): cross-device (--one-file-system) FUSE test.squashfuse(providessquashfuse): cross-device (--one-file-system) FUSE test.fuse3(providesfusermount3and/dev/fuse): cross-device (--one-file-system) FUSE test.
Tests that need these tools will panic with a diagnostic message if they are missing. The panic message includes the specific TEST_SKIP variable to skip the test via ./test.sh.
Before submitting, ensure:
cargo fmt -- --checkpasses.cargo clippypasses on all feature combinations.cargo testpasses.- The project builds with no default features, with default features, and with all features.
cargo dylint --allpasses (requirescargo-dylintanddylint-link).
The CI script test.sh runs all of these across every supported feature combination. You can run it locally with:
FMT=true LINT=true BUILD=true TEST=true DOC=true DYLINT=true ./test.shDYLINT defaults to false because it requires extra tooling and a separate nightly toolchain. Enable it once cargo-dylint and dylint-link are installed.
Important
Always run the full test suite before every commit. This rule applies to all changes, including documentation edits, comment changes, and config updates. Any change can break formatting, linting, building, tests, or doc generation across the different feature combinations.
Note
Some tests may fail with a hint about TEST_SKIP. Follow the hint and rerun with the suggested variable.