Promote full runtime to PortaPy 3.14.0

.github/workflows/ci.yml

@@ -1,28 +1,181 @@
 name: CI
+
 on:
   push:
+    branches: [main]
   pull_request:
+    branches: [main]
   workflow_dispatch:
+
+concurrency:
+  group: ci-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 permissions:
   contents: read
+
 jobs:
-  bootstrap:
+  hosted:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v5
         with:
-          python-version: "3.12"
+          python-version: '3.12'
       - run: python -m pip install -e '.[test]'
-      - name: Run hosted tests
+      - name: Run complete hosted suite
+        shell: bash
+        run: |
+          set -o pipefail
+          python -m pytest -x -vv 2>&1 | tee hosted-pytest.log
+      - name: Check public C example
+        run: cc -std=c11 -Wall -Wextra -Werror -Iinclude -fsyntax-only examples/embed.c
+      - uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: portapy-hosted-pytest
+          path: hosted-pytest.log
+
+  audit:
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+      - name: Install verified asmpython
+        run: |
+          python -m pip install --no-cache-dir --force-reinstall \
+            'git+https://github.com/deltathedumb/asmpython.git@376cf9422c28123673a1dedd7dd66b845f3c5ed1'
+      - name: Audit full-core imports and source positions
+        shell: bash
+        run: |
+          mkdir -p dist
+          python tools/normalize_full_core_probe.py
+          python tools/normalize_full_core_lambdas.py
+          python -m asmpython._compiler.import_audit \
+            src/portapy/native_full_core_probe.py \
+            > dist/full-core-import-audit.txt 2>&1
+          python tools/asmpython_parse_audit.py \
+            src/portapy/core/frontend.py \
+            src/portapy/core/vm.py \
+            > dist/full-core-parse-audit.txt 2>&1
+      - uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: full-core-import-audit
+          path: |
+            dist/full-core-import-audit.txt
+            dist/full-core-parse-audit.txt
+
+  native:
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - os: ubuntu-24.04
+            target: linux
+          - os: windows-2025
+            target: windows
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+      - name: Install Linux dependencies
+        if: matrix.target == 'linux'
+        shell: bash
+        run: |
+          sudo apt-get update
+          sudo apt-get install --yes nasm gcc binutils
+          python -m pip install -e '.[test]'
+          python -m pip install --no-cache-dir --force-reinstall \
+            'git+https://github.com/deltathedumb/asmpython.git@376cf9422c28123673a1dedd7dd66b845f3c5ed1'
+      - name: Install Windows dependencies
+        if: matrix.target == 'windows'
+        shell: powershell
+        run: |
+          & .\tools\install_windows_toolchain.ps1
+          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+          python -m pip install -e '.[test]'
+          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+          & .\tools\install_pinned_asmpython.ps1
+      - name: Build Linux standalone library
+        if: matrix.target == 'linux'
         shell: bash
         run: |
           mkdir -p dist
           set -o pipefail
-          PYTHONPATH="$PWD" python -m pytest -q 2>&1 | tee dist/pytest.log
-      - run: cc -std=c11 -Wall -Wextra -Werror -Iinclude -fsyntax-only examples/embed.c
+          python tools/build_native_typed.py \
+            --target linux \
+            --output dist/libportapy.so \
+            --work-dir dist/build-verify-linux \
+            2>&1 | tee dist/build-linux.log
+      - name: Build Windows standalone library
+        if: matrix.target == 'windows'
+        shell: powershell
+        run: |
+          New-Item -ItemType Directory -Force dist | Out-Null
+          $output = & python tools/build_native_typed.py `
+            --target windows `
+            --output dist/portapy.dll `
+            --work-dir dist/build-verify-windows `
+            2>&1
+          $buildStatus = $LASTEXITCODE
+          $output | Tee-Object -FilePath dist/build-windows.log
+          if ($buildStatus -ne 0) { exit $buildStatus }
+      - name: Verify Linux standalone library
+        if: matrix.target == 'linux'
+        shell: bash
+        run: |
+          if readelf -dW dist/libportapy.so | grep -Ei 'libpython|python3'; then
+            echo 'CPython linkage is forbidden'
+            exit 1
+          fi
+          if readelf -dW dist/libportapy.so | grep -q TEXTREL; then
+            echo 'text relocations are forbidden'
+            exit 1
+          fi
+          python tools/run_native_release_conformance.py \
+            dist/libportapy.so \
+            --output-dir dist/conformance-linux
+      - name: Verify Windows standalone library
+        if: matrix.target == 'windows'
+        shell: powershell
+        run: |
+          $imports = (& objdump -p dist/portapy.dll | Out-String)
+          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+          if ($imports -match 'DLL Name:\s*(python|libpython)[^\s]*\.dll') {
+            throw 'CPython linkage is forbidden'
+          }
+          python tools/run_native_release_conformance.py `
+            dist/portapy.dll `
+            --compiler gcc `
+            --output-dir dist/conformance-windows
+          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+      - name: Verify direct CSharp PInvoke
+        if: matrix.target == 'windows'
+        shell: powershell
+        run: |
+          dotnet build examples/csharp/PortaPyExample.csproj `
+            --configuration Release `
+            --output dist/csharp
+          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+          Copy-Item dist/portapy.dll dist/csharp/portapy.dll
+          Push-Location dist/csharp
+          try {
+            $output = @(dotnet PortaPyExample.dll)
+            if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+          } finally {
+            Pop-Location
+          }
+          $output | Out-File -Encoding utf8 dist/csharp-output.txt
+          if ($output[-1] -ne 'Hello, world!') {
+            throw "unexpected C# output: $($output -join [Environment]::NewLine)"
+          }
       - uses: actions/upload-artifact@v4
         if: always()
         with:
-          name: hosted-ci
+          name: portapy-ci-${{ matrix.target }}
           path: dist