L0 work

.github/workflows/aot-publish.yml

@@ -0,0 +1,66 @@
+name: Native AOT Publish
+
+on:
+  schedule:
+    - cron: '0 6 * * 1' # Mondays 06:00 UTC
+  workflow_dispatch:
+    inputs:
+      rid:
+        description: 'Runtime identifier (RID)'
+        default: 'linux-x64'
+        required: true
+      config:
+        description: 'Build configuration'
+        default: 'Release'
+        required: true
+
+permissions:
+  contents: read
+
+env:
+  DOTNET_NOLOGO: 1
+  DOTNET_CLI_TELEMETRY_OPTOUT: 1
+
+jobs:
+  aot:
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    strategy:
+      fail-fast: false
+      matrix:
+        rid: [ linux-x64 ]
+    concurrency:
+      group: ${{ github.workflow }}-${{ github.ref }}-${{ matrix.rid }}
+      cancel-in-progress: true
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v5
+        with:
+          global-json-file: global.json
+
+      - name: Cache NuGet packages
+        uses: actions/cache@v4
+        with:
+          path: ~/.nuget/packages
+          key: ${{ runner.os }}-nuget-${{ hashFiles('**/*.csproj', '**/Directory.Packages.props', 'global.json') }}
+          restore-keys: |
+            ${{ runner.os }}-nuget-
+
+      - name: Native AOT publish (DataPlane + ControlPlane + CLI + MeshKit smoke)
+        env:
+          RID: ${{ github.event.inputs.rid || matrix.rid }}
+          CONFIG: ${{ github.event.inputs.config || 'Release' }}
+        run: |
+          chmod +x eng/run-aot-publish.sh
+          ./eng/run-aot-publish.sh "$RID" "$CONFIG"
+
+      - name: Upload AOT artifacts
+        if: always()
+        uses: actions/upload-artifact@v5
+        with:
+          name: aot-${{ matrix.rid }}
+          path: artifacts/aot/${{ github.event.inputs.rid || matrix.rid }}/**
+          if-no-files-found: error

.github/workflows/ci.yml

@@ -1,4 +1,4 @@
-name: CI
+name: CI Gate
 
 on:
   push:
@@ -17,18 +17,77 @@ env:
   DOTNET_CLI_TELEMETRY_OPTOUT: 1
 
 jobs:
-  build-and-test:
-    runs-on: ubuntu-latest
-    timeout-minutes: 30
+  gate-linux-macos:
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 10
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - os: ubuntu-latest
+            rid: linux-x64
+          - os: macos-latest
+            rid: osx-arm64
+          - os: macos-latest
+            rid: osx-x64
     concurrency:
-      group: ${{ github.workflow }}-${{ github.ref }}
-      cancel-in-progress: true
+      group: ${{ github.workflow }}-${{ github.ref }}-${{ matrix.os }}-${{ matrix.rid }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v5
+        with:
+          global-json-file: global.json
+
+      - name: Cache NuGet packages
+        uses: actions/cache@v4
+        with:
+          path: ~/.nuget/packages
+          key: ${{ runner.os }}-nuget-${{ hashFiles('**/*.csproj', '**/Directory.Packages.props', 'global.json') }}
+          restore-keys: |
+            ${{ runner.os }}-nuget-
+
+      - name: Run CI gate (Unix)
+        env:
+          RID: ${{ matrix.rid }}
+          CONFIG: Release
+        shell: bash
+        run: |
+          chmod +x eng/run-ci-gate.sh
+          ./eng/run-ci-gate.sh
+
+      - name: Upload CI artifacts
+        if: always()
+        uses: actions/upload-artifact@v5
+        with:
+          name: ci-artifacts-${{ matrix.os }}-${{ matrix.rid }}
+          path: |
+            artifacts/ci/**
+            **/TestResults/**/*.trx
+          if-no-files-found: ignore
+
+  gate-windows:
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 10
+    continue-on-error: true
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - os: windows-latest
+            rid: win-x64
+    concurrency:
+      group: ${{ github.workflow }}-${{ github.ref }}-${{ matrix.os }}-${{ matrix.rid }}
     steps:
       - name: Checkout
         uses: actions/checkout@v5
 
-      - name: Prepare NuGet cache directory
-        run: mkdir -p ~/.nuget/packages
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v5
+        with:
+          global-json-file: global.json
 
       - name: Cache NuGet packages
         uses: actions/cache@v4
@@ -38,51 +97,130 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-nuget-
 
-      - name: Build CI image
-        id: build-image
-        run: docker build --target ci -f Dockerfile.ci -t omnirelay-ci .
+      - name: Run CI gate (Windows)
+        env:
+          RID: ${{ matrix.rid }}
+          CONFIG: Release
+        shell: pwsh
+        run: pwsh -File eng/run-ci-gate.ps1 -RID $env:RID -CONFIG $env:CONFIG
+
+      - name: Upload CI artifacts
+        if: always()
+        uses: actions/upload-artifact@v5
+        with:
+          name: ci-artifacts-${{ matrix.os }}-${{ matrix.rid }}
+          path: |
+            artifacts/ci/**
+            **/TestResults/**/*.trx
+          if-no-files-found: ignore
+
+  http3-ci-container:
+    needs: gate-linux-macos
+    if: needs.gate-linux-macos.result == 'success'
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    concurrency:
+      group: ${{ github.workflow }}-${{ github.ref }}-http3-linux
+      cancel-in-progress: true
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
 
-      - name: Extract CI artifacts
-        if: ${{ steps.build-image.outcome == 'success' }}
-        id: extract-artifacts
+      - name: Build CI image with HTTP/3 support (libmsquic on Alpine)
+        id: build
         run: |
-          container_id=$(docker create omnirelay-ci)
+          docker build \
+            --file Dockerfile.ci \
+            --target ci \
+            --progress=plain \
+            -t omnirelay-ci-http3 .
+
+      - name: Extract artifacts from CI image
+        if: ${{ steps.build.outcome == 'success' }}
+        id: extract
+        run: |
+          container_id=$(docker create omnirelay-ci-http3)
           echo "container_id=${container_id}" >> $GITHUB_OUTPUT
           mkdir -p artifacts/test-results artifacts/coverage
           docker cp "${container_id}:/repo/artifacts/test-results/." artifacts/test-results || true
           docker cp "${container_id}:/repo/artifacts/coverage/." artifacts/coverage || true
           docker rm "${container_id}" || true
 
       - name: Report test results
-        if: ${{ always() && steps.extract-artifacts.outcome == 'success' }}
+        if: ${{ always() && steps.extract.outcome == 'success' }}
         uses: dorny/test-reporter@v2
         with:
-          name: .NET Tests
+          name: HTTP3 Tests
           path: artifacts/test-results/**/*.trx
           reporter: dotnet-trx
 
-      - name: Upload coverage to Codecov
-        if: ${{ steps.extract-artifacts.outcome == 'success' }}
+      - name: Upload coverage
+        if: ${{ steps.extract.outcome == 'success' }}
         uses: codecov/codecov-action@v5
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: artifacts/coverage/**/*.xml
           fail_ci_if_error: false
           verbose: true
 
-      - name: Upload Test Results
-        if: ${{ steps.extract-artifacts.outcome == 'success' }}
+      - name: Upload artifacts
+        if: ${{ always() && steps.extract.outcome == 'success' }}
         uses: actions/upload-artifact@v5
         with:
-          name: test-results
+          name: http3-artifacts
           path: |
             artifacts/test-results/**/*.trx
+            artifacts/coverage
           if-no-files-found: ignore
 
-      - name: Upload Coverage Artifacts
-        if: ${{ steps.extract-artifacts.outcome == 'success' }}
+  http3-windows:
+    needs: gate-windows
+    if: needs.gate-windows.result == 'success'
+    runs-on: windows-latest
+    timeout-minutes: 10
+    concurrency:
+      group: ${{ github.workflow }}-${{ github.ref }}-http3-win
+      cancel-in-progress: true
+    env:
+      OMNIRELAY_ENABLE_HTTP3_TESTS: true
+      DOTNET_SYSTEM_NET_HTTP_SOCKETSHTTPHANDLER_HTTP3SUPPORT: 1
+      DOTNET_CLI_TELEMETRY_OPTOUT: 1
+      DOTNET_NOLOGO: 1
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v5
+        with:
+          global-json-file: global.json
+
+      - name: Cache NuGet packages
+        uses: actions/cache@v4
+        with:
+          path: ~/.nuget/packages
+          key: ${{ runner.os }}-nuget-${{ hashFiles('**/*.csproj', '**/Directory.Packages.props', 'global.json') }}
+          restore-keys: |
+            ${{ runner.os }}-nuget-
+
+      - name: Restore
+        run: dotnet restore OmniRelay.slnx
+
+      - name: Build (no tests)
+        run: dotnet build OmniRelay.slnx -c Release --no-restore -p:ContinuousIntegrationBuild=true /m
+
+      - name: Run HTTP/3-focused suites (with hang detection)
+        run: |
+          dotnet test tests/OmniRelay.IntegrationTests/OmniRelay.IntegrationTests.csproj -c Release --filter "FullyQualifiedName~Http3" --logger "trx;LogFileName=integration-http3.trx" --results-directory artifacts\http3 --blame-hang --blame-hang-timeout 10m
+          dotnet test tests/OmniRelay.CodeGen.IntegrationTests/OmniRelay.CodeGen.IntegrationTests.csproj -c Release --filter "FullyQualifiedName~Http3" --logger "trx;LogFileName=codegen-http3.trx" --results-directory artifacts\http3 --blame-hang --blame-hang-timeout 10m
+
+      - name: Upload Windows HTTP/3 artifacts
+        if: always()
         uses: actions/upload-artifact@v5
         with:
-          name: coverage
-          path: artifacts/coverage
+          name: http3-windows-artifacts
+          path: artifacts/http3/**/*.trx
           if-no-files-found: ignore

.github/workflows/hyperscale-smoke.yml

@@ -0,0 +1,61 @@
+name: Hyperscale Smoke
+
+on:
+  schedule:
+    - cron: '0 7 * * 1,4' # Mondays and Thursdays 07:00 UTC
+  workflow_dispatch:
+    inputs:
+      config:
+        description: 'Build configuration'
+        default: 'Release'
+        required: true
+
+permissions:
+  contents: read
+
+env:
+  DOTNET_NOLOGO: 1
+  DOTNET_CLI_TELEMETRY_OPTOUT: 1
+
+jobs:
+  hyperscale-smoke:
+    runs-on: ubuntu-latest
+    timeout-minutes: 90
+    concurrency:
+      group: ${{ github.workflow }}-${{ github.ref }}
+      cancel-in-progress: true
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v5
+        with:
+          global-json-file: global.json
+
+      - name: Cache NuGet packages
+        uses: actions/cache@v4
+        with:
+          path: ~/.nuget/packages
+          key: ${{ runner.os }}-nuget-${{ hashFiles('**/*.csproj', '**/Directory.Packages.props', 'global.json') }}
+          restore-keys: |
+            ${{ runner.os }}-nuget-
+
+      - name: Restore
+        run: dotnet restore OmniRelay.slnx
+
+      - name: Run hyperscale smoke tests
+        env:
+          CONFIGURATION: ${{ github.event.inputs.config || 'Release' }}
+        run: |
+          chmod +x eng/run-hyperscale-smoke.sh
+          ./eng/run-hyperscale-smoke.sh "$CONFIGURATION"
+
+      - name: Upload smoke artifacts
+        if: always()
+        uses: actions/upload-artifact@v5
+        with:
+          name: hyperscale-smoke-results
+          path: |
+            **/TestResults/**/*.trx
+          if-no-files-found: ignore