openpencil/.github/workflows/rust-check.yml

name: Rust check (native)

on:
  pull_request:
    paths:
      - 'Cargo.toml'
      - 'Cargo.lock'
      - 'crates/**'
      - 'rust-toolchain.toml'
      - 'rustfmt.toml'
      - 'deny.toml'
      - 'tools/check-jian-boundaries.sh'
      - 'tools/check-widget-boundary.sh'
      - '.github/workflows/rust-check.yml'
  push:
    branches: ['**']
    paths:
      - 'Cargo.toml'
      - 'Cargo.lock'
      - 'crates/**'
      - 'vendor/**'
      - 'deny.toml'
      - 'rust-toolchain.toml'
      - 'rustfmt.toml'
      - 'tools/check-jian-boundaries.sh'
      - 'tools/check-widget-boundary.sh'
      - '.github/workflows/rust-check.yml'

jobs:
  check:
    name: ${{ matrix.os }} / 1.94
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        os: [macos-latest, ubuntu-latest, windows-latest]
    steps:
      # Keep LF line endings on the Windows runner so `cargo fmt --check`
      # does not trip over CRLF-converted vendored sources.
      - name: Disable autocrlf
        run: git config --global core.autocrlf false
      - uses: actions/checkout@v4
        with:
          submodules: recursive
      - uses: dtolnay/rust-toolchain@stable
        with:
          toolchain: '1.94'
          components: rustfmt, clippy
      - uses: Swatinem/rust-cache@v2
      # Linux GL prerequisites for winit's x11+wayland feature link.
      # libxkbcommon-x11-dev / libwayland-dev are winit's link-time deps on
      # Linux; the wayland-csd-adwaita feature pulls in xkbcommon + wayland-client.
      - name: Install Linux GL prereqs
        if: runner.os == 'Linux'
        run: |
          sudo apt-get update
          sudo apt-get install -y \
            libxkbcommon-dev libxkbcommon-x11-dev \
            libwayland-dev libxcb-render0-dev libxcb-shape0-dev libxcb-xfixes0-dev \
            libegl1-mesa-dev libgles2-mesa-dev libgbm-dev mesa-utils \
            libfreetype-dev libfontconfig1-dev          
      - run: cargo fmt --all -- --check
      - run: cargo build --workspace
      # GitHub-hosted runners are headless with no reliable Mesa software
      # EGL, so STEP1A_REQUIRE_GPU is left unset: the op-host-native GPU
      # smoke (memory_loop) self-uses the raster fallback instead of
      # hard-failing on EGL init. Real-GPU coverage runs on dev machines.
      - run: cargo test --workspace
      - run: cargo clippy --workspace --all-targets -- -D warnings
      # Step 1a Phase C Task 4: spec v19 §11 + §12.3 boundary invariants.
      # Linux runner has the full mobile target stdlib (`rustup target add`
      # in subsequent steps would handle ios/android cargo metadata too,
      # but the script uses `cargo tree --target` which only needs the
      # cfg-gate evaluation, not the actual target sysroot).
      - name: Verify Jian boundary invariants
        if: runner.os == 'Linux'
        run: |
          rustup target add aarch64-linux-android aarch64-apple-ios wasm32-unknown-unknown
          bash tools/check-jian-boundaries.sh          

      - name: Verify Step 1b widget boundary (spec §1.4)
        if: runner.os == 'Linux'
        run: bash tools/check-widget-boundary.sh

  deny:
    name: cargo-deny (native)
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          submodules: recursive
      - uses: dtolnay/rust-toolchain@stable
      - uses: EmbarkStudios/cargo-deny-action@v2 # auto-updates within v2.x; runner cargo at this stage carries cargo-deny 0.18+ which handles modern transitive manifests (Phase 1 Task 1.8 finding)
        with:
          command: check