build(mise): move the cargo tools into mise.test.toml, pinned

mise merges config down the directory tree, so every tool in the root
mise.toml is also part of the toolset in packages/eql and in
languages/typescript/packages/protect-ffi. Their CI jobs run
`mise install` (and `mise run`) in those folders, so each one now built
cargo-nextest, cargo-llvm-cov, cargo-crap, cargo-mutants, cargo-fuzz and
cargo-udeps from source, none of which they use.

mise's cargo backend compiles a `cargo:` tool with the runner's default
rustc (1.92 on the Ubuntu images), not the root's pinned 1.94.1. So a
`latest` that raises its minimum Rust fails the install: cargo-udeps
0.1.61 needs cargo@0.96, which needs rustc 1.93. That broke the
protect-ffi integration suite on #1001 and the new udeps job on #1003.

The cargo tools move to mise.test.toml, which mise loads only for the
`test` environment (`mise x --env test`, or MISE_ENV=test). Nested
workspaces no longer inherit them. Each is pinned to an exact version
that builds on the runners' rustc; cargo-udeps goes back to 0.1.60.
The tasks that call them (crap:*, mutants:*, fuzz:*, and nextest in
wasm:guest:test and wasm:auth-guest:test) now run them through
`mise x --env test --`, as test:doc and the crap coverage step already
did, so `mise run <task>` keeps working locally without MISE_ENV.

Rust, Go, golangci-lint and wasm-pack stay in the root mise.toml. They
are prebuilt downloads, and plan section 3.5 has protect-ffi inherit
the Rust pin. That section's intent holds: the repository pins one
version of each cargo tool, reached through mise. The pins now sit in
the test environment rather than the default one.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PaY5xYydZUWhv8Nex9Sw8a

Author: auxesis

AGENTS.md

@@ -632,9 +632,14 @@ The stack-* crates came from `cipherstash/cipherstash-suite`, which still owns
   three fuzz crates and the two Go guests are detached workspaces too, each
   with its own `Cargo.lock`.
 - **The toolchain is pinned in the root `mise.toml`:** Rust 1.94.1 (the
-  `stack-encrypt` `tests/ui` trybuild snapshots record its diagnostics), the
-  cargo tools, and Go 1.26. EQL's `mise.toml` overrides the Rust pin in its
-  folder. protect-ffi's does not pin Rust, so the root pin applies there.
+  `stack-encrypt` `tests/ui` trybuild snapshots record its diagnostics) and
+  Go 1.26. EQL's `mise.toml` overrides the Rust pin in its folder.
+  protect-ffi's does not pin Rust, so the root pin applies there.
+- **The cargo tools are pinned in `mise.test.toml`, not `mise.toml`:**
+  nextest, llvm-cov, crap, mutants, fuzz and udeps. EQL and protect-ffi
+  inherit the root `mise.toml`, so a cargo tool there would be built in their
+  jobs too. Reach them with `mise x --env test -- …`, as the tasks do; CI jobs
+  that use them set `MISE_ENV: test`.
 - **Run the tests with nextest, under the test env:** `mise x --env test --
   cargo nextest run --workspace --all-features`. Doc examples are `mise run
   test:doc`; rustdoc with warnings as errors is `mise run doc`.

docs/fuzzing.md

@@ -75,7 +75,8 @@ the scheduled campaign grows the corpus from there.
 ## Running locally
 
 cargo-fuzz needs the **nightly** toolchain and the `cargo-fuzz` binary;
-`mise` provides the latter (`cargo:cargo-fuzz` in `mise.toml`). Install
+`mise` provides the latter (`cargo:cargo-fuzz` in `mise.test.toml`,
+which the `fuzz:*` tasks load with `mise x --env test`). Install
 nightly once with `rustup toolchain install nightly`.
 
 Run a target via its `mise` task (60s by default):

mise.test.toml

@@ -1,9 +1,32 @@
-# The `test` environment, for `mise x --env test -- …` in the root and
-# stack-* tasks (test:doc, crap:*). Carried from cipherstash-suite, keeping
-# only what the stack crates read; the suite's CTS, ZeroKMS and database
-# settings serve services this repository does not run.
+# The `test` environment: `mise x --env test -- …` in the root and stack-*
+# tasks, and MISE_ENV=test in the CI jobs that run them. Carried from
+# cipherstash-suite, keeping only what the stack crates read; the suite's CTS,
+# ZeroKMS and database settings serve services this repository does not run.
+#
+# The cargo tools live here rather than in mise.toml so that packages/eql and
+# protect-ffi, which inherit the root mise.toml, do not install them (see the
+# note in mise.toml). Each is pinned: mise compiles a `cargo:` tool with the
+# runner's default rustc, not the root's 1.94.1, so a `latest` that raises its
+# minimum Rust fails the install. cargo-udeps 0.1.61 did exactly that
+# (cargo@0.96 needs rustc 1.93; the Ubuntu runners ship 1.92). Bump a pin
+# deliberately, after checking it still builds with the runners' rustc.
 [tools]
-"cargo:cargo-nextest" = "latest"
+"cargo:cargo-nextest" = "0.9.146"
+# Coverage → CRAP (Change Risk Anti-Patterns) metric tooling. `cargo llvm-cov`
+# produces an LCOV file that `cargo crap` scores; see `mise run crap:stack-auth`.
+# cargo-llvm-cov needs the root rust's `llvm-tools-preview` component.
+"cargo:cargo-llvm-cov" = "0.9.1"
+"cargo:cargo-crap" = "0.6.1"
+# Mutation testing for the stack crates; config in .cargo/mutants.toml, run
+# via `mutants:<crate>`.
+"cargo:cargo-mutants" = "27.1.0"
+# Fuzzing (libFuzzer) for the pure-`&str` parsers. The `cargo-fuzz` binary
+# installs on stable, but running a target needs the nightly toolchain
+# (`cargo +nightly fuzz run …`); see the `fuzz:*` tasks.
+"cargo:cargo-fuzz" = "0.13.2"
+# Runs on nightly-2026-07-10: `cargo +nightly-2026-07-10 udeps`. 0.1.60, not
+# 0.1.61: see above.
+"cargo:cargo-udeps" = "0.1.60"
 
 [env]
 # Annoyingly if you pass --env test to mise it doesn't set this automatically

mise.toml

@@ -20,20 +20,13 @@ includes = [
 # this compiler's diagnostics. `llvm-tools-preview` is required by
 # cargo-llvm-cov to produce coverage data.
 rust = { version = "1.94.1", components = "rustc,cargo,rustfmt,rust-std,clippy,rust-docs,llvm-tools-preview", targets = "wasm32-unknown-unknown,wasm32-wasip1" }
-"cargo:cargo-nextest" = "latest"
-# Coverage → CRAP (Change Risk Anti-Patterns) metric tooling. `cargo llvm-cov`
-# produces an LCOV file that `cargo crap` scores; see `mise run crap:stack-auth`.
-"cargo:cargo-llvm-cov" = "latest"
-"cargo:cargo-crap" = "latest"
-# Mutation testing for the stack crates; config in .cargo/mutants.toml, run
-# via `mutants:<crate>`.
-"cargo:cargo-mutants" = "latest"
-# Fuzzing (libFuzzer) for the pure-`&str` parsers. The `cargo-fuzz` binary
-# installs on stable, but running a target needs the nightly toolchain
-# (`cargo +nightly fuzz run …`); see the `fuzz:*` tasks.
-"cargo:cargo-fuzz" = "latest"
-# Runs on nightly-2026-07-10: `cargo +nightly-2026-07-10 udeps`.
-"cargo:cargo-udeps" = "latest"
+# No `cargo:` tools here. mise merges config down the tree, so every tool in
+# this file is also installed for packages/eql and protect-ffi, whose CI runs
+# `mise install` and `mise run` in their own folders. mise compiles a `cargo:`
+# tool with the runner's default rustc rather than the pinned one, so one
+# `latest` that outgrows that compiler breaks jobs that never use the tool.
+# The cargo tools (nextest, llvm-cov, crap, mutants, fuzz, udeps) live in
+# mise.test.toml, pinned, and load only with `--env test` / MISE_ENV=test.
 # The Go module (languages/golang) — the wazero host of the WASI guests.
 # CGO_ENABLED=0 throughout; see `go:test`.
 go = "1.26"
@@ -211,8 +204,8 @@ cargo clippy --target wasm32-wasip1 -- -D warnings
 # and exits 0, so without -D warnings a stale link ships silently.
 RUSTDOCFLAGS="-D warnings" cargo doc --no-deps --target wasm32-wasip1
 # nextest, as everywhere else; this crate is a detached workspace, so it
-# runs from here rather than a root `-p`.
-cargo nextest run
+# runs from here rather than a root `-p`. nextest is in mise.test.toml.
+mise x --env test -- cargo nextest run
 """
 
 [tasks."wasm:auth-guest:build"]
@@ -255,7 +248,7 @@ cargo fmt --check
 cargo clippy --all-targets -- -D warnings
 cargo clippy --target wasm32-wasip1 -- -D warnings
 RUSTDOCFLAGS="-D warnings" cargo doc --no-deps --target wasm32-wasip1
-cargo nextest run
+mise x --env test -- cargo nextest run
 """
 
 [tasks."go:test"]

packages/stack-auth/tasks.toml

@@ -37,7 +37,7 @@ run = [
   # NOTE: this must stay the LAST command — the crap-stack-auth.yml CI workflow runs
   # this task and relies on mise appending its trailing args (e.g. --format github)
   # to this `cargo crap` invocation.
-  "cargo crap --path packages/stack-auth --lcov {{config_root}}/target/stack-auth-lcov.info --exclude 'node/**' --exclude 'wasm/**' --exclude 'examples/**' --exclude '**/tests.rs' --exclude '**/tests/**' --fail-above",
+  "mise x --env test -- cargo crap --path packages/stack-auth --lcov {{config_root}}/target/stack-auth-lcov.info --exclude 'node/**' --exclude 'wasm/**' --exclude 'examples/**' --exclude '**/tests.rs' --exclude '**/tests/**' --fail-above",
 ]
 
 # Fuzz stack-auth's public AccessKey string parser (libFuzzer via cargo-fuzz).
@@ -51,15 +51,15 @@ run = [
 ["fuzz:access-key"]
 description = "Fuzz stack-auth's AccessKey string parser (libFuzzer, nightly, 60s default)"
 dir = "{{config_root}}/packages/stack-auth"
-run = "cargo +nightly fuzz run access_key_parse --sanitizer none --target $(rustc -vV | sed -n 's/^host: //p') -- -max_total_time=60"
+run = "mise x --env test -- cargo +nightly fuzz run access_key_parse --sanitizer none --target $(rustc -vV | sed -n 's/^host: //p') -- -max_total_time=60"
 
 # Fuzz the JWT claims decode path (Token::fuzz_decode_claims, behind the `fuzz`
 # feature). On native this is the jsonwebtoken-based decode with signature
 # validation disabled. Same flags/rationale as fuzz:access-key.
 ["fuzz:jwt-decode"]
 description = "Fuzz stack-auth's JWT claims decode path (libFuzzer, nightly, 60s default)"
 dir = "{{config_root}}/packages/stack-auth"
-run = "cargo +nightly fuzz run jwt_decode --sanitizer none --target $(rustc -vV | sed -n 's/^host: //p') -- -max_total_time=60"
+run = "mise x --env test -- cargo +nightly fuzz run jwt_decode --sanitizer none --target $(rustc -vV | sed -n 's/^host: //p') -- -max_total_time=60"
 
 # Mutation testing (cargo-mutants) over the whole crate: what the per-PR
 # `--in-diff` gate (.github/workflows/mutants.yml) does for changed lines only.
@@ -68,4 +68,4 @@ run = "cargo +nightly fuzz run jwt_decode --sanitizer none --target $(rustc -vV
 # stress tests are filtered out of the per-mutant run by the shared config.
 ["mutants:stack-auth"]
 description = "Full mutation-testing sweep of stack-auth (cargo-mutants; ~15 min)"
-run = "cargo mutants -p stack-auth --jobs 4"
+run = "mise x --env test -- cargo mutants -p stack-auth --jobs 4"

packages/stack-encrypt/tasks.toml

@@ -16,7 +16,7 @@ run = [
   # NOTE: this must stay the LAST command — the crap-stack-encrypt.yml CI
   # workflow runs this task and relies on mise appending its trailing args
   # (e.g. --format github) to this `cargo crap` invocation.
-  "cargo crap --path packages/stack-encrypt --lcov {{config_root}}/target/stack-encrypt-lcov.info --exclude 'examples/**' --exclude 'fuzz/**' --exclude '**/tests/**' --fail-above",
+  "mise x --env test -- cargo crap --path packages/stack-encrypt --lcov {{config_root}}/target/stack-encrypt-lcov.info --exclude 'examples/**' --exclude 'fuzz/**' --exclude '**/tests/**' --fail-above",
 ]
 
 # Fuzz the frozen v1 leaf byte decoder (`SealedValue::from_bytes`, also
@@ -30,7 +30,7 @@ run = [
 ["fuzz:sealed-value"]
 description = "Fuzz stack-encrypt's frozen leaf byte decoder, SealedValue::from_bytes (libFuzzer, nightly, 60s default)"
 dir = "{{config_root}}/packages/stack-encrypt"
-run = "cargo +nightly fuzz run sealed_value_decode --sanitizer none --target $(rustc -vV | sed -n 's/^host: //p') -- -max_total_time=60"
+run = "mise x --env test -- cargo +nightly fuzz run sealed_value_decode --sanitizer none --target $(rustc -vV | sed -n 's/^host: //p') -- -max_total_time=60"
 
 # Fuzz the SEM index-term byte decoders — every `from_bytes` / `TryFrom<&[u8]>`
 # a stored term comes back through (equality, match, ORE and OPE). One target
@@ -39,7 +39,7 @@ run = "cargo +nightly fuzz run sealed_value_decode --sanitizer none --target $(r
 ["fuzz:term-decode"]
 description = "Fuzz stack-encrypt's SEM index-term byte decoders (libFuzzer, nightly, 60s default)"
 dir = "{{config_root}}/packages/stack-encrypt"
-run = "cargo +nightly fuzz run term_decode --sanitizer none --target $(rustc -vV | sed -n 's/^host: //p') -- -max_total_time=60"
+run = "mise x --env test -- cargo +nightly fuzz run term_decode --sanitizer none --target $(rustc -vV | sed -n 's/^host: //p') -- -max_total_time=60"
 
 # Fuzz the stored-record preflight (`dynamic::record::check_record`) with
 # structure-aware inputs: an `Arbitrary`-derived mirror of a plan value and
@@ -49,7 +49,7 @@ run = "cargo +nightly fuzz run term_decode --sanitizer none --target $(rustc -vV
 ["fuzz:check-record"]
 description = "Fuzz stack-encrypt's stored-record preflight against a model of its rules (structure-aware, libFuzzer, nightly, 60s default)"
 dir = "{{config_root}}/packages/stack-encrypt"
-run = "cargo +nightly fuzz run check_record --sanitizer none --target $(rustc -vV | sed -n 's/^host: //p') -- -max_total_time=60"
+run = "mise x --env test -- cargo +nightly fuzz run check_record --sanitizer none --target $(rustc -vV | sed -n 's/^host: //p') -- -max_total_time=60"
 
 # Rustdoc with warnings as errors: a broken intra-doc link or a rustdoc
 # warning fails the build. Doc *examples* are `test:doc:stack-encrypt`. Both run
@@ -71,4 +71,4 @@ run = "mise x --env test -- cargo test -p stack-encrypt --doc --all-features"
 # trybuild UI suite is filtered out of the per-mutant run by the shared config.
 ["mutants:stack-encrypt"]
 description = "Full mutation-testing sweep of stack-encrypt (cargo-mutants; ~60 min)"
-run = "cargo mutants -p stack-encrypt --jobs 4"
+run = "mise x --env test -- cargo mutants -p stack-encrypt --jobs 4"

packages/stack-kms/tasks.toml

@@ -11,7 +11,7 @@
 ["fuzz:client-key"]
 description = "Fuzz stack-kms's client-key material decoder (libFuzzer, nightly, 60s default)"
 dir = "{{config_root}}/packages/stack-kms"
-run = "cargo +nightly fuzz run client_key_encoded --sanitizer none --target $(rustc -vV | sed -n 's/^host: //p') -- -max_total_time=60"
+run = "mise x --env test -- cargo +nightly fuzz run client_key_encoded --sanitizer none --target $(rustc -vV | sed -n 's/^host: //p') -- -max_total_time=60"
 
 # Rustdoc with warnings as errors: a broken intra-doc link or a rustdoc
 # warning fails the build. Doc *examples* are `test:doc:stack-kms`. Both run