pebrel/.github/workflows/linux-lua.yml

name: Full native tests

on:
  workflow_dispatch:
    inputs:
      windows_diagnostics_run:
        description: Diagnose a previous Windows runtime without running a release validation
        type: string
        default: ""
  workflow_call:
  push:
    branches: [main]
  # Include docs, catalogs, assets and workflow edits: every PR gets test results.
  # ready_for_review starts the scarce-runner jobs that draft pushes skip.
  pull_request:
    types: [opened, synchronize, reopened, ready_for_review]
  merge_group:

concurrency:
  group: native-${{ github.workflow }}-${{ github.event_name }}-${{ github.ref }}
  cancel-in-progress: ${{ github.event_name == 'pull_request' || github.event_name == 'merge_group' }}

permissions:
  contents: read
  actions: read

jobs:
  windows-diagnostics:
    if: ${{ github.event_name == 'workflow_dispatch' && inputs.windows_diagnostics_run != '' }}
    uses: ./.github/workflows/windows-conformance.yml
    with:
      runtime_run: ${{ inputs.windows_diagnostics_run }}

  # rustfmt only for now. clippy joins once the existing warning backlog is
  # cleared; several crates deny lints, so it cannot run advisory.
  lint:
    if: ${{ inputs.windows_diagnostics_run == '' }}
    name: lint
    runs-on: ubuntu-24.04
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
        with:
          toolchain: "1.97.1"
          components: rustfmt
      - name: rustfmt
        run: cargo fmt --all -- --check

  # Draft pull requests run the three fast platforms (about 20 minutes) on
  # every push. The scarce runners (Intel Mac, Windows ARM64) join once the
  # pull request is marked ready for review and on main, so every merge is
  # verified on all five platforms without paying their queue time while a
  # change is still being iterated. Skipped jobs report success, which keeps
  # all five names usable as required checks; a ready PR cannot merge red.
  native-tests:
    if: ${{ inputs.windows_diagnostics_run == '' }}
    name: Tests (${{ matrix.os }})
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-24.04, windows-2022, macos-26]
        tier: [core]
        include:
          - os: windows-11-arm
            tier: full
          - os: macos-26-intel
            tier: full
    runs-on: ${{ matrix.os }}
    timeout-minutes: 120
    env:
      PYTHONUTF8: "1"
      CARGO_TERM_COLOR: always
      RUST_BACKTRACE: "1"
      RUST_TOOLCHAIN: "1.97.1"
    steps:
      - uses: actions/checkout@v4
        if: ${{ (matrix.tier != 'full' || github.event_name != 'pull_request' || !github.event.pull_request.draft) }}
        with:
          fetch-depth: 0
      - uses: actions/setup-python@v5
        if: ${{ (matrix.tier != 'full' || github.event_name != 'pull_request' || !github.event.pull_request.draft) }}
        with:
          python-version: "3.13"
      - name: Install native dependencies
        if: ${{ (matrix.tier != 'full' || github.event_name != 'pull_request' || !github.event.pull_request.draft) && (runner.os == 'Linux') }}
        run: |
          sudo apt-get update
          sudo apt-get install -y --no-install-recommends \
            build-essential cmake pkg-config zsh libasound2-dev libdbus-1-dev libudev-dev \
            libfontconfig1-dev libfreetype6-dev \
            libegl1-mesa-dev libgl1-mesa-dev \
            libwayland-dev libxkbcommon-dev libxkbcommon-x11-dev \
            libx11-xcb-dev libxcb1-dev libxcb-render0-dev \
            libxcb-shape0-dev libxcb-xfixes0-dev libxcb-xinput-dev libxcb-xkb-dev libxi-dev
      - name: Require the AppKit SDK used by this PR
        if: ${{ (matrix.tier != 'full' || github.event_name != 'pull_request' || !github.event.pull_request.draft) && (runner.os == 'macOS') }}
        run: |
          sdk_version="$(xcrun --sdk macosx --show-sdk-version)"
          test "${sdk_version%%.*}" -ge 26
      - uses: dtolnay/rust-toolchain@stable
        if: ${{ (matrix.tier != 'full' || github.event_name != 'pull_request' || !github.event.pull_request.draft) }}
        with:
          toolchain: "1.97.1"
      - name: Require a native Windows ARM64 compiler
        if: ${{ (matrix.tier != 'full' || github.event_name != 'pull_request' || !github.event.pull_request.draft) && (matrix.os == 'windows-11-arm') }}
        shell: pwsh
        run: |
          if ([System.Runtime.InteropServices.RuntimeInformation]::OSArchitecture -ne 'Arm64') {
            throw 'The Windows ARM job requires an ARM64 host.'
          }
          $compiler = rustc -vV
          if ($LASTEXITCODE -ne 0 -or $compiler -notcontains 'host: aarch64-pc-windows-msvc') {
            throw 'The Windows ARM job must compile and run ARM64 tests.'
          }
      - uses: ./.github/actions/rust-cache
        if: ${{ (matrix.tier != 'full' || github.event_name != 'pull_request' || !github.event.pull_request.draft) }}
        id: rust-cache
        with:
          key: native
          extra-key: ${{ runner.os != 'macOS' && '-release-check-v2' || '' }}
          target: |
            target/ci
            ${{ runner.os != 'macOS' && 'target/release' || '' }}
          legacy-key: ${{ runner.os == 'Windows' && 'windows' || runner.os == 'Linux' && 'linux' || 'macos' }}
      - name: Prepare pinned Windows console runtime
        if: ${{ (matrix.tier != 'full' || github.event_name != 'pull_request' || !github.event.pull_request.draft) && (runner.os == 'Windows') }}
        shell: pwsh
        run: |
          $architecture = if ('${{ runner.arch }}' -eq 'ARM64') { 'arm64' } else { 'x64' }
          ./scripts/prepare-windows-runtime.ps1 -Destination assets/windows/conhost -Architecture $architecture
          ./scripts/tests/windows-runtime.tests.ps1 -Architecture $architecture
      - name: Test complete workspace and native harness
        if: ${{ (matrix.tier != 'full' || github.event_name != 'pull_request' || !github.event.pull_request.draft) }}
        run: python scripts/ci_native_tests.py
      - name: Check source architecture
        if: ${{ (matrix.tier != 'full' || github.event_name != 'pull_request' || !github.event.pull_request.draft) && (!cancelled() && runner.os == 'Linux') }}
        run: python scripts/check_architecture.py
      - name: Test translation and allocation contracts
        if: ${{ (matrix.tier != 'full' || github.event_name != 'pull_request' || !github.event.pull_request.draft) && (!cancelled() && runner.os == 'Linux') }}
        run: cargo test --locked --manifest-path tools/i18n-contract/Cargo.toml
      - name: Check the release workspace
        if: ${{ (matrix.tier != 'full' || github.event_name != 'pull_request' || !github.event.pull_request.draft) && (!cancelled() && runner.os != 'macOS') }}
        run: cargo check --locked --workspace --release
      - name: Save compiled workload
        if: ${{ (matrix.tier != 'full' || github.event_name != 'pull_request' || !github.event.pull_request.draft) && (always() && steps.rust-cache.outcome == 'success' && steps.rust-cache.outputs.cache-hit != 'true') }}
        uses: actions/cache/save@v4
        with:
          path: |
            target/ci
            ${{ runner.os != 'macOS' && 'target/release' || '' }}
          key: ${{ steps.rust-cache.outputs.cache-key }}
      - name: Upload native compilation timings
        if: ${{ (matrix.tier != 'full' || github.event_name != 'pull_request' || !github.event.pull_request.draft) && (always()) }}
        uses: actions/upload-artifact@v4
        with:
          name: native-timings-${{ matrix.os }}
          path: target/cargo-timings
          if-no-files-found: warn
          compression-level: 0
          retention-days: 14

  # The release check has no dependency on the test executable. Keeping it in
  # the Intel test job added 11m33s after a 22m29s test/compile step in run
  # 34856491552. Both jobs remain part of this reusable workflow's result, so
  # the stable release aggregation still requires every check to succeed.
  macos-release-check:
    if: ${{ inputs.windows_diagnostics_run == '' }}
    name: Release workspace (${{ matrix.os }})
    strategy:
      fail-fast: false
      matrix:
        os: [macos-26, macos-26-intel]
    runs-on: ${{ matrix.os }}
    timeout-minutes: 120
    env:
      PYTHONUTF8: "1"
      CARGO_TERM_COLOR: always
      RUST_BACKTRACE: "1"
      RUST_TOOLCHAIN: "1.97.1"
    steps:
      - uses: actions/checkout@v4
        if: ${{ (matrix.os != 'macos-26-intel' || github.event_name != 'pull_request' || !github.event.pull_request.draft) }}
      - uses: actions/setup-python@v5
        if: ${{ (matrix.os != 'macos-26-intel' || github.event_name != 'pull_request' || !github.event.pull_request.draft) }}
        with:
          python-version: "3.13"
      - name: Require the AppKit SDK used by this PR
        if: ${{ (matrix.os != 'macos-26-intel' || github.event_name != 'pull_request' || !github.event.pull_request.draft) }}
        run: |
          sdk_version="$(xcrun --sdk macosx --show-sdk-version)"
          test "${sdk_version%%.*}" -ge 26
      - uses: dtolnay/rust-toolchain@stable
        if: ${{ (matrix.os != 'macos-26-intel' || github.event_name != 'pull_request' || !github.event.pull_request.draft) }}
        with:
          toolchain: "1.97.1"
      - uses: ./.github/actions/rust-cache
        if: ${{ (matrix.os != 'macos-26-intel' || github.event_name != 'pull_request' || !github.event.pull_request.draft) }}
        id: rust-cache
        with:
          key: native-release-check
          target: target/release
          legacy-key: macos
      - name: Check the release workspace
        if: ${{ (matrix.os != 'macos-26-intel' || github.event_name != 'pull_request' || !github.event.pull_request.draft) }}
        run: cargo check --locked --workspace --release --timings
      - name: Save compiled workload
        if: ${{ (matrix.os != 'macos-26-intel' || github.event_name != 'pull_request' || !github.event.pull_request.draft) && always() && steps.rust-cache.outcome == 'success' && steps.rust-cache.outputs.cache-hit != 'true' }}
        uses: actions/cache/save@v4
        with:
          path: target/release
          key: ${{ steps.rust-cache.outputs.cache-key }}
      - name: Upload release check compilation timings
        if: ${{ (matrix.os != 'macos-26-intel' || github.event_name != 'pull_request' || !github.event.pull_request.draft) && always() }}
        uses: actions/upload-artifact@v4
        with:
          name: release-check-timings-${{ matrix.os }}
          path: target/cargo-timings
          if-no-files-found: warn
          compression-level: 0
          retention-days: 14