chore: Initial project setup with configuration, documentation, and core library

[unclesp1d3r]

This pull request introduces important project configuration and legal files. The main changes are the addition of detailed licensing information and a comprehensive .coderabbitai.yaml configuration file to guide code review, labeling, and documentation practices.

Project configuration enhancements:

• Added .coderabbitai.yaml with extensive instructions for code review, labeling, path filters, code generation, and pre-merge checks, tailored for safety-focused, idiomatic Rust development.

Legal and licensing additions:

• Added LICENSE-APACHE containing the full Apache License 2.0 text.
• Added LICENSE-MIT containing the full MIT License text.

[Copilot]

Pull request overview

Copilot reviewed 56 out of 57 changed files in this pull request and generated 3 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The initial GetTokenInformation size query assumes the call fails with an insufficient-buffer error, but it doesn’t validate the actual error code. If it fails for another reason, this can lead to confusing QueryFailed(Other) or potentially proceeding with an incorrect return_length. Check the returned error and only treat it as a size query success-path when it’s the expected insufficient-buffer condition; otherwise propagate the real OS error.

[codecov]

Welcome to Codecov 🎉

Once you merge this PR into your default branch, you're all set! Codecov will compare coverage reports and display results in all future pull requests.

ℹ️ You can also turn on project coverage checks and project coverage reporting on Pull Request comment

Thanks for integrating Codecov - We've got you covered ☂️

[unclesp1d3r]

@Mergifyio queue

[mergify]

queue

⚠️ Cannot use the command queue

Details

⚠ The product Merge Queue needs to be activated to enable this feature.

[Copilot]

Pull request overview

Copilot reviewed 56 out of 57 changed files in this pull request and generated 13 comments.

Comments suppressed due to low confidence (1)

docs/src/safety-contract.md:187

• This section says OwnedHandle is pub(crate) and “never exposed outside ffi.rs”, but in src/ffi.rs it’s declared pub struct OwnedHandle. Either make the type pub(crate) (preferred) or adjust this text so the safety contract matches the code.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The compatibility workflow hard-codes MSRV as 1.85.0, but this crate declares rust-version = "1.91" and multiple docs state MSRV 1.91. As written, the compat job will fail to build. Align the workflow’s MSRV entry with the crate’s actual MSRV (or update rust-version/docs if 1.85 is intended).

Suggested change

	- "1.85.0" # MSRV
	- "1.91" # MSRV

[Copilot]

The mdformat hook lists mdformat-front-matters, but the commonly used plugin (and the one referenced in mise.toml) is mdformat-frontmatter. This mismatch will cause pre-commit to fail installing the formatter dependencies.

Suggested change

	- mdformat-front-matters
	- mdformat-frontmatter

[Copilot]

The is_elevated docs describe TokenElevationTypeFull / TokenElevationTypeDefault, but the implementation queries TOKEN_ELEVATION and returns TokenIsElevated != 0. Update this section to match the actual Win32 field being queried to avoid misleading consumers.

[Copilot]

This page claims dev dependencies include tempfile, but Cargo.toml currently only lists proptest under [dev-dependencies]. Either add tempfile or remove it from this statement to keep docs accurate.

[Copilot]

The CI pipeline description here doesn’t match the actual workflows: ci.yml runs full tests on Windows and only stub tests on Ubuntu, and there are no macOS runners. Please update these bullets to reflect the real CI jobs to avoid confusing contributors.

[Copilot]

size_of::<u64>() is used without importing size_of (and without qualifying it), so this file won’t compile. Use std::mem::size_of::<u64>() (or add an explicit use std::mem::size_of;).

[Copilot]

OwnedHandle is declared pub, but the docs claim it is pub(crate) and “never exposed outside ffi.rs”. Even though ffi isn’t publicly exported today, making the type pub(crate) better enforces the intended boundary and prevents accidental exposure via future re-exports.

[Copilot]

On Windows these proptests treat only InvalidPrivilegeName and LookupFailed as expected errors. However is_privilege_enabled can also legitimately return OpenTokenFailed and CheckFailed (and has_privilege can return OpenTokenFailed/QueryFailed). Consider accepting all documented TokenPrivilegeError variants here to avoid flaky failures in restricted/CI environments.

[Copilot]

AGENTS.md lists tempfile as a dev-dependency, but Cargo.toml currently only includes proptest under [dev-dependencies]. Please update this line (or add the dependency) to keep the repo guidance consistent.

Suggested change

	- Dev dependencies: `proptest` for property-based testing, `tempfile`
	- Dev dependencies: `proptest` for property-based testing

[Copilot]

The format-files recipe injects the +FILES parameter directly into a bash command (@{{ mise_exec }} prettier --write --config .prettierrc.json {{ FILES }}) without any quoting or escaping. If this recipe is invoked from pre-commit hooks (as indicated by the comment) with filenames controlled by an attacker (e.g., via a maliciously named file in a PR), shell metacharacters in the filename can break out of the intended prettier command and execute arbitrary commands on the developer’s machine. To fix this, ensure that file arguments are passed as properly escaped/quoted positional parameters (e.g., via a helper script or just’s shell-escaping features) so that filenames cannot be interpreted by the shell as additional commands or arguments.

[unclesp1d3r]

@Mergifyio queue

[mergify]

Merge Queue Status

Rule: default

---

• ✅ Entered queue — 2026-03-09 06:14 UTC
• ✅ Checks passed · in-place
• ✅ Merged — 2026-03-09 06:14 UTC · at 130241e1b13f74d5cd71f8e15ea8df6615b1aab2

This pull request spent 6 seconds in the queue, with no time running CI.

Required conditions to merge

• any of [🛡 GitHub repository ruleset rule main]:
  • check-success = DCO
  • check-neutral = DCO
  • check-skipped = DCO
• any of [🛡 GitHub repository ruleset rule main]:
  • check-success = Mergify Merge Protections
  • check-neutral = Mergify Merge Protections
  • check-skipped = Mergify Merge Protections

[Copilot]

Pull request overview

Copilot reviewed 55 out of 56 changed files in this pull request and generated 2 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The safety contract states OwnedHandle is pub(crate) and never exposed outside ffi.rs, but in code it’s declared pub struct OwnedHandle(...). Even though the ffi module itself is private, making OwnedHandle explicitly pub(crate) (or updating the doc) would better enforce/communicate the intended encapsulation.

[Copilot]

size_of::<u64>() is used here but size_of isn’t in scope, so this won’t compile. Use std::mem::size_of::<u64>() (or import std::mem::size_of) when computing u64_len.