commit-validation.yml

name: Commit Validation

on:
  pull_request:
  workflow_dispatch:

concurrency:
  group: openq4-validation-${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  script-smoke:
    name: Validation Script Smoke
    runs-on: ubuntu-24.04
    env:
      OPENQ4_GAMELIBS_REPO: ${{ github.workspace }}

    steps:
      - name: Checkout
        uses: actions/checkout@v7

      - name: Setup Python
        uses: actions/setup-python@v7
        with:
          python-version: "3.x"

      - name: Setup Java for Android host storage validation
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: "17"

      - name: Install native display test headers
        run: sudo apt-get update && sudo apt-get install -y libvulkan-dev

      - name: Install release documentation dependency
        run: python -m pip install markdown

      # Native UI harnesses compile jsoncpp/libtess2 wrap sources, which a fresh
      # checkout lacks until Meson provisions them (tools/tests/wrap_sources.py).
      - name: Install Meson for wrap-sourced test harnesses
        run: python -m pip install meson

      - name: Check validation script syntax
        shell: bash
        run: |
          set -euo pipefail
          python -m py_compile \
            tools/build/android_cross.py \
            tools/build/android_elf.py \
            tools/build/prepare_android_deps.py \
            tools/build/build_openq4_pack.py \
            tools/build/build_pak0.py \
            tools/build/build_windows_installer.py \
            tools/build/check_staged_content_edits.py \
            tools/build/generate_pak_header.py \
            tools/build/generate_release_changelog.py \
            tools/build/generate_release_docs.py \
            tools/build/linux_metadata.py \
            tools/build/list_pak_sources.py \
            tools/build/openq4_pak.py \
            tools/build/openq4_release_version.py \
            tools/build/openq4_version.py \
            tools/build/assemble_macos_universal2.py \
            tools/build/package_nightly.py \
            tools/build/package_release.py \
            tools/build/verify_linux_arm64_release_evidence.py \
            tools/build/stage_fast_install.py \
            tools/build/stage_gamelibs.py \
            tools/build/gamelibs_stage_path.py \
            tools/build/game_source_inventory.py \
            tools/build/retire_game_layers.py \
            tools/build/stage_windows_runtime.py \
            tools/build/sync_icons.py \
            tools/build/windows_runtime.py \
            tools/build/write_pak_manifest.py \
            src/sys/linux/pk4/id_utils.py \
            tools/analysis/clang_tidy_input_safety.py \
            tools/assets/pack_pbr_orm.py \
            tools/validation/audit_source_provenance.py \
            tools/validation/generate_pbr_fixture.py \
            tools/validation/openq4_validate.py \
            tools/validation/stock_asset_baseline.py \
            tools/tests/renderer_validation_matrix.py \
            tools/tests/aas_compiler_contract.py \
            tools/tests/aas_settings_contract.py \
            tools/tests/chat_gameplay_smoke.py \
            tools/tests/chat_history.py \
            tools/tests/filesystem_find_file_contract.py \
            tools/tests/filesystem_length_probe_contract.py \
            tools/tests/generate_file_memory_test.py \
            tools/tests/gui_clipping_contract.py \
            tools/tests/gui_transition_operand_contract.py \
            tools/tests/gui_state_debug_log_contract.py \
            tools/tests/list_window_selection_contract.py \
            tools/tests/mp_browser_smoke.py \
            tools/tests/mp_duel_queue_smoke.py \
            tools/tests/mp_match_control_team_join_smoke.py \
            tools/tests/mp_match_flow_smoke.py \
            tools/tests/mp_bot_gameplay_smoke.py \
            tools/tests/mp_roster_smoke.py \
            tools/tests/mp_round_remote_smoke.py \
            tools/tests/mp_tourney_smoke.py \
            tools/tests/parser_include_paths_contract.py \
            tools/tests/renderer_shadow_mapping_maps.py \
            tools/tests/renderer_shadow_mapping_movers.py \
            tools/tests/renderer_shadow_mapping_scenes.py \
            tools/tests/renderer_shadow_mapping_transitions.py \
            tools/tests/server_browser_contract.py \
            tools/tests/arena_campaign.py \
            tools/tests/in_game_difficulty_restart.py \
            tools/tests/async_drop_client_contract.py \
            tools/tests/async_client_frame_contract.py \
            tools/tests/async_rcon_verify_contract.py \
            tools/tests/async_session_command_contract.py \
            tools/tests/async_usercmd_window_contract.py \
            tools/tests/base64_input_safety.py \
            tools/tests/campaign_split_state_transition.py \
            tools/tests/campaign_scope.py \
            tools/tests/campaign_runtime.py \
            tools/tests/campaign_selection_runtime.py \
            tools/tests/clang_tidy_input_safety.py \
            tools/tests/cmdargs_append_contract.py \
            tools/tests/console_completion_contract.py \
            tools/tests/arb_color_zero_floor_contract.py \
            tools/tests/renderer_show_shadows_color_contract.py \
            tools/tests/renderer_md5r_conversion_contract.py \
            tools/tests/competitive_match_layer.py \
            tools/tests/mp_control_smoke.py \
            tools/tests/mp_series_smoke.py \
            tools/tests/mp_recording_ownership_smoke.py \
            tools/tests/mp_pause_world_smoke.py \
            tools/tests/mp_pause_lifecycle_smoke.py \
            tools/tests/mp_view_decoder.py \
            tools/tests/competitive_match_localization.py \
            tools/tests/decl_checksum_stability_contract.py \
            tools/tests/match_control_localization_bridge.py \
            tools/tests/match_control_ui_contract.py \
            tools/tests/demo_playback.py \
            tools/tests/docs_link_integrity.py \
            tools/tests/dmap_render_geometry_lifecycle.py \
            tools/tests/fatal_error_startup_safety.py \
            tools/tests/android_build.py \
            tools/tests/android_touch_input.py \
            tools/tests/audio_payload_restore.py \
            tools/tests/renderer_gles_dispatch.py \
            tools/tests/renderer_gles_alpha.py \
            tools/tests/renderer_gles_upload.py \
            tools/tests/android_host_storage.py \
            tools/tests/image_block_mips.py \
            tools/tests/filesystem_case_segments.py \
            tools/tests/filesystem_mod_manifest.py \
            tools/tests/filesystem_write_qpath_safety.py \
            tools/tests/game_class_allocator_alignment.py \
            tools/tests/game_module_completion_safety.py \
            tools/tests/game_type_module_selection.py \
            tools/tests/gamelibs_staging.py \
            tools/tests/gamelibs_layer_staging.py \
            tools/tests/awakening_ci_contract.py \
            tools/tests/awakening_speeder_physics_contract.py \
            tools/tests/awakening_gameplay_contract.py \
            tools/tests/generated_animation_cache.py \
            tools/tests/level_load_cache.py \
            tools/tests/lightgrid_map_identity.py \
            tools/tests/lightgrid_bake_contract.py \
            tools/tests/hdr_postprocess_math.py \
            tools/tests/idstr_input_safety.py \
            tools/tests/lexer_input_safety.py \
            tools/tests/lexer_peek_contract.py \
            tools/tests/key_bind_presentation.py \
            tools/tests/levelshot_inventory.py \
            tools/tests/linux_arm64_cross_compile.py \
            tools/tests/linux_arm64_ci_coverage.py \
            tools/tests/linux_arm64_release_evidence.py \
            tools/tests/linux_arm64_source_portability.py \
            tools/tests/linux_dedicated_server_smoke.py \
            tools/tests/linux_dedicated_server_smoke_contract.py \
            tools/tests/linux_dedicated_stock_map_smoke.py \
            tools/tests/linux_dedicated_stock_map_smoke_contract.py \
            tools/tests/linux_physical_host_evidence.py \
            tools/tests/linux_physical_host_evidence_contract.py \
            tools/tests/linux_wayland_stock_sp_smoke.py \
            tools/tests/linux_wayland_stock_sp_smoke_contract.py \
            tools/tests/linux_gui_presentation_defaults.py \
            tools/tests/linux_highdpi_mouse.py \
            tools/tests/linux_appimage_packaging.py \
            tools/tests/lang_table_encoding.py \
            tools/tests/ttf_font_integrity.py \
            tools/tests/source_charset_integrity.py \
            tools/tests/linux_metadata_fuzz.py \
            tools/tests/linux_packaging_guidance.py \
            tools/tests/linux_sanitizer_ci.py \
            tools/tests/linux_sdl3_glew_loader.py \
            tools/tests/linux_vsync_support.py \
            tools/tests/linux_wayland_build_contract.py \
            tools/tests/loading_continue_input.py \
            tools/tests/loading_pacifier_pacing.py \
            tools/tests/loading_pacifier_reentry_contract.py \
            tools/tests/loading_wipe_capture_crop_contract.py \
            tools/tests/choice_gui_value_contract.py \
            tools/tests/mp_mvd_smoke.py \
            tools/tests/map_entity_strings.py \
            tools/tests/weapon_wheel_time_scale.py \
            tools/tests/weapon_zoom_view_alignment.py \
            tools/tests/windows_dedicated_server_smoke.py \
            tools/tests/windows_dedicated_server_smoke_contract.py \
            tools/tests/macos_apple_gl21_arb2_corridor.py \
            tools/tests/macos_dedicated_server_smoke.py \
            tools/tests/macos_dedicated_server_smoke_contract.py \
            tools/tests/macos_evidence_plumbing.py \
            tools/tests/macos_evidence_recording.py \
            tools/tests/macos_gamelibs_alignment.py \
            tools/tests/macos_intel_ci.py \
            tools/tests/macos_local_validation_track.py \
            tools/tests/macos_matrix_policy.py \
            tools/tests/macos_native_backend_guard.py \
            tools/tests/macos_native_backend_containment.py \
            tools/tests/macos_openal_provider_policy.py \
            tools/tests/macos_package_policy.py \
            tools/tests/macos_package_robustness.py \
            tools/tests/macos_renderer_backend_policy.py \
            tools/tests/macos_renderer_phase_breadcrumbs.py \
            tools/tests/macos_renderer_startup_guard.py \
            tools/tests/macos_sanitizer_ci.py \
            tools/tests/macos_sdl3_backend_guard.py \
            tools/tests/macos_shadow_policy.py \
            tools/tests/macos_signoff_archive.py \
            tools/tests/macos_static_policy.py \
            tools/tests/macos_support_claim_policy.py \
            tools/tests/macos_support_intake.py \
            tools/tests/macos_symbolication_policy.py \
            tools/tests/macos_universal2_assembly.py \
            tools/tests/macos_universal2_runtime.py \
            tools/tests/macos_universal2_release_candidate.py \
            tools/tests/macos_metal_bridge.py \
            tools/tests/macos_moltenvk_policy.py \
            tools/tests/mp_bot_characters.py \
            tools/tests/mp_bot_intelligence.py \
            tools/tests/mp_bot_navigation.py \
            tools/tests/mp_bot_server_menu.py \
            tools/tests/mp_client_combat_effects.py \
            tools/tests/bse_retail_parity.py \
            tools/tests/mp_lag_compensation_contract.py \
            tools/tests/mp_weapon_switch_contract.py \
            tools/tests/multiview_demo.py \
            tools/tests/mvd_server_api_contract.py \
            tools/tests/mvd_recording_failure_contract.py \
            tools/tests/native_glx_shutdown.py \
            tools/tests/network_ipv4_support.py \
            tools/tests/network_ipv6_support.py \
            tools/tests/network_security.py \
            tools/tests/openurl_security.py \
            tools/tests/openq4_pure_pack.py \
            tools/tests/p0_governance_evidence.py \
            tools/tests/packaging_safety.py \
            tools/tests/parallel_job_system.py \
            tools/tests/pbr_orm_packer.py \
            tools/tests/pbr_procedural_fixture.py \
            tools/tests/pbr_laboratory_fixture.py \
            tools/tests/preprocessor_macro_safety.py \
            tools/tests/posix_memory_management.py \
            tools/tests/posix_monotonic_time.py \
            tools/tests/posix_network_resolution.py \
            tools/tests/posix_thread_shutdown.py \
            tools/tests/release_tooling_safety.py \
            tools/tests/renderer_advanced_lighting.py \
            tools/tests/renderer_budget_contract.py \
            tools/tests/renderer_cel_shading.py \
            tools/tests/renderer_demo_projection_safety.py \
            tools/tests/renderer_gpu_frame_timing.py \
            tools/tests/renderer_gpu_skinning.py \
            tools/tests/renderer_temporal_presentation.py \
            tools/tests/renderer_native_ui_output.py \
            tools/tests/renderer_mp_flat_items.py \
            tools/tests/renderer_pbr_materials.py \
            tools/tests/renderer_classic_gui_domain.py \
            tools/tests/renderer_classic_cinematic_post_domain.py \
            tools/tests/renderer_milestone_d_acceptance.py \
            tools/tests/renderer_milestone_d_fixture.py \
            tools/tests/renderer_classic_special_frame_domain.py \
            tools/tests/renderer_classic_world_ambient_domain.py \
            tools/tests/renderer_classic_interaction_domain.py \
            tools/tests/renderer_classic_fog_blend_domain.py \
            tools/tests/renderer_classic_subview_domain.py \
            tools/tests/renderer_classic_deform_domain.py \
            tools/tests/renderer_module_completion_safety.py \
            tools/tests/renderer_msaa_cvar_safety.py \
            tools/tests/renderer_picmip_policy.py \
            tools/tests/renderer_texture_filter.py \
            tools/tests/renderer_player_visibility.py \
            tools/tests/renderer_scaled_scene_presentation.py \
            tools/tests/renderer_screenshot_readback.py \
            tools/tests/renderer_supersampling_safety.py \
            tools/tests/renderer_vulkan_decal_compatibility.py \
            tools/tests/renderer_vulkan_gui_residency.py \
            tools/tests/renderer_vulkan_md5r_compatibility.py \
            tools/tests/renderer_vulkan_probe_safety.py \
            tools/tests/renderer_vulkan_qualification.py \
            tools/tests/renderer_vulkan_shadow_compatibility.py \
            tools/tests/renderer_vulkan_world_interaction_compatibility.py \
            tools/tests/rigid_body_recovery_diagnostics.py \
            tools/tests/savegame_corruption_contract.py \
            tools/tests/savegame_pointer_width_safety.py \
            tools/tests/savegame_v3_contract.py \
            tools/tests/sdl3_input_parity.py \
            tools/tests/sys_event_queue_ownership.py \
            tools/tests/event_journal.py \
            tools/tests/event_disposition_storage.py \
            tools/tests/sdl3_input_disposition.py \
            tools/tests/native_event_disposition.py \
            tools/tests/native_input_route.py \
            tools/tests/native_input_facts.py \
            tools/tests/native_input_terminal.py \
            tools/tests/native_input_lifecycle.py \
            tools/tests/native_input_driver.py \
            tools/tests/native_event_retirement.py \
            tools/tests/sdl3_clipboard_status.py \
            tools/tests/sdl3_wayland_mode_contract.py \
            tools/tests/sdl3_text_provenance.py \
            tools/tests/sdl3_native_fence.py \
            tools/tests/native_queue_batch.py \
            tools/tests/ui_text_edit_model.py \
            tools/tests/ui_native_text_document.py \
            tools/tests/ui_native_text_editor.py \
            tools/tests/ui_native_text_collection.py \
            tools/tests/ui_number_clipboard.py \
            tools/tests/ui_number_drafts.py \
            tools/tests/ui_number_native.py \
            tools/tests/ui_native_collection_coordinator.py \
            tools/tests/ui_managed_native_owner.py \
            tools/tests/ui_focus_reveal.py \
            tools/tests/ui_scrollbar_interaction.py \
            tools/tests/ui_scrollbar_runtime.py \
            tools/tests/ui_choice_scroll_interaction.py \
            tools/tests/ui_choice_scroll_runtime.py \
            tools/tests/ui_document_edit.py \
            tools/tests/ui_document_canvas.py \
            tools/tests/ui_document_canvas_mutations.py \
            tools/tests/ui_document_view_projection.py \
            tools/tests/ui_popup_placement.py \
            tools/tests/ui_popup_placement_runtime.py \
            tools/tests/ui_settings_decimal_precision.py \
            tools/tests/ui_settings_exact_values.py \
            tools/tests/ui_settings_automatic.py \
            tools/tests/ui_settings_effect_journal.py \
            tools/tests/sound_settings.py \
            tools/tests/sound_recovery.py \
            tools/tests/sound_retail_reverb_contract.py \
            tools/tests/ui_performance_presets.py \
            tools/tests/ui_system_number_fields.py \
            tools/tests/ui_system_presets.py \
            tools/tests/system_settings_archive_policy.py \
            tools/tests/ui_system_presets_runtime.py \
            tools/ui/update_system_presets.py \
            tools/ui/update_system_number_fields.py \
            tools/ui/update_system_scrollbar.py \
            tools/ui/update_system_choice_scrollbars.py \
            tools/ui/update_system_interface_settings.py \
            tools/ui/update_system_display_controls.py \
            tools/ui/system_display_catalog.py \
            tools/ui/update_system_dimensions.py \
            tools/ui/update_system_text_layout.py \
            tools/ui/update_system_soft_focus.py \
            tools/ui/update_system_render_options.py \
            tools/tests/windows_text_store.py \
            tools/tests/windows_text_collection_bridge.py \
            tools/tests/windows_text_session.py \
            tools/tests/ui_text_input.py \
            tools/tests/ui_retained_input.py \
            tools/tests/ui_retained_state_sources.py \
            tools/tests/ui_presentation_bridge.py \
            tools/tests/ui_retained_layer_pool.py \
            tools/tests/ui_manager_lifecycle.py \
            tools/tests/ui_event_delivery.py \
            tools/tests/ui_list_selection_safety.py \
            tools/tests/ui_session_test_gui.py \
            tools/tests/ui_system_session_route.py \
            tools/tests/ui_controller_menu_pump.py \
            tools/tests/ui_retained_gate.py \
            tools/ui/build_retained_screens.py \
            tools/ui/capture_retained_screens.py \
            tools/tests/ui_retained_resource_lifecycle.py \
            tools/tests/ui_retained_adapter.py \
            tools/tests/ui_text_owner.py \
            tools/tests/ui_system_settings_host.py \
            tools/tests/ui_settings_service.py \
            tools/tests/durable_file.py \
            tools/tests/settings_configuration_persistence.py \
            tools/tests/sdl3_settings_placement.py \
            tools/tests/ui_system_display.py \
            tools/tests/ui_settings_display_service.py \
            tools/tests/ui_display_settings_fixture.py \
            tools/tests/wrap_sources.py \
            tools/tests/ui_generated_font_precache.py \
            tools/tests/ui_capture_display_settings.py \
            tools/tests/ui_capture_settings_recovery.py \
            tools/tests/ui_capture_managed.py \
            tools/tests/ui_capture_system_settings.py \
            tools/tests/ui_capture_system_page.py \
            tools/tests/ui_capture_system_exit.py \
            tools/tests/renderer_vid_restart_route.py \
            tools/tests/renderer_image_recovery_owner.py \
            tools/tests/renderer_image_recovery_module.py \
            tools/tests/renderer_image_recovery_loader.py \
            tools/tests/renderer_image_recovery_codec.py \
            tools/tests/renderer_image_recovery_cold.py \
            tools/tests/renderer_image_recovery_fixture.py \
            tools/tests/renderer_image_recovery_lifecycle.py \
            tools/tests/renderer_image_policy_restart.py \
            tools/tests/renderer_image_policy_boundaries.py \
            tools/tests/renderer_image_policy_lifetimes.py \
            tools/tests/renderer_image_policy_metadata.py \
            tools/tests/renderer_consumed_policy.py \
            tools/tests/renderer_consumed_upload_batches.py \
            tools/tests/renderer_upload_storage.py \
            tools/tests/renderer_image_reduction.py \
            tools/tests/renderer_image_content.py \
            tools/tests/renderer_display_services.py \
            tools/tests/renderer_settings_reports.py \
            tools/tests/openxr_vr_contract.py \
            tools/tests/openxr_vr_smoke.py \
            tools/tests/openxr_vr_menu_smoke.py \
            tools/tests/openxr_vr_mp_smoke.py \
            tools/tests/renderer_display_presentation.py \
            tools/tests/renderer_gl_display_policy.py \
            tools/tests/sdl3_strict_window.py \
            tools/tests/ui_capture_display_device.py \
            tools/ui/capture_display_device.py \
            tools/tests/ui_legacy_inventory.py \
            tools/tests/ui_legacy_import.py \
            tools/tests/ui_legacy_expression.py \
            tools/tests/ui_legacy_observation.py \
            tools/ui/legacy_inventory.py \
            tools/ui/legacy_import.py \
            tools/ui/legacy_syntax.py \
            tools/ui/capture_legacy_baseline.py \
            tools/ui/verify_binding_capture.py \
            tools/tests/ui_background_cursor.py \
            tools/tests/crosshair_picker_contract.py \
            tools/tests/menu_controller_navigation.py \
            tools/tests/sdl3_multidisplay_windowing.py \
            tools/tests/settings_menu_coverage.py \
            tools/tests/steam_deck_support.py \
            tools/tests/system_console_presentation.py \
            tools/tests/startup_language_override.py \
            tools/tests/stock_asset_baseline.py \
            tools/tests/stock_media_fallbacks.py \
            tools/tests/ui_embedded_icons.py \
            tools/tests/ui_cursor_state_safety.py \
            tools/tests/ui_window_state_safety.py \
            tools/tests/validation_hardening.py \
            tools/tests/vk_shader_header_pin.py \
            tools/build/vulkan_material_sources.py \
            tools/tests/renderer_vulkan_material_programs.py \
            tools/tests/renderer_vulkan_material_reload.py \
            tools/tests/vk_display_color_mapping.py \
            tools/tests/vk_display_color_mapping_shader_pin.py \
            tools/tests/vk_display_color_mapping_capture.py \
            tools/tests/vk_temporal_resolve_shader_pin.py \
            tools/tests/vscode_fast_build.py
          bash -n tools/build/meson_setup.sh
          bash -n tools/macos/collect_macos_support_info.sh
          bash -n tools/validation/validate_macos_static.sh
          bash -n tools/validation/validate_push.sh
          bash -n tools/validation/validate_pr.sh
          python tools/validation/audit_source_provenance.py --check
          python tools/tests/aas_compiler_contract.py
          python tools/tests/aas_settings_contract.py
          python tools/tests/chat_history.py
          python tools/tests/filesystem_find_file_contract.py
          python tools/tests/filesystem_length_probe_contract.py
          python tools/tests/gui_clipping_contract.py
          python tools/tests/gui_transition_operand_contract.py --mutations
          python tools/tests/gui_state_debug_log_contract.py --mutations
          python tools/tests/list_window_selection_contract.py
          python tools/tests/parser_include_paths_contract.py
          python tools/tests/server_browser_contract.py
          python tools/tests/arena_campaign.py
          python tools/tests/in_game_difficulty_restart.py
          python tools/tests/async_drop_client_contract.py
          python tools/tests/async_client_frame_contract.py
          python tools/tests/async_rcon_verify_contract.py --mutations
          python tools/tests/async_session_command_contract.py
          python tools/tests/async_usercmd_window_contract.py
          python tools/tests/base64_input_safety.py
          python tools/tests/campaign_split_state_transition.py
          python tools/tests/campaign_scope.py
          python tools/tests/clang_tidy_input_safety.py
          python tools/tests/cmdargs_append_contract.py
          python tools/tests/console_completion_contract.py
          python tools/tests/arb_color_zero_floor_contract.py
          python tools/tests/renderer_show_shadows_color_contract.py
          python tools/tests/renderer_md5r_conversion_contract.py
          python tools/tests/competitive_match_layer.py
          python tools/tests/competitive_match_localization.py
          python tools/tests/decl_checksum_stability_contract.py
          python tools/tests/match_control_localization_bridge.py
          python tools/tests/match_control_ui_contract.py
          python tools/tests/demo_playback.py
          python tools/tests/docs_link_integrity.py
          python tools/tests/dmap_render_geometry_lifecycle.py
          python tools/tests/fatal_error_startup_safety.py
          python tools/tests/android_build.py
          python tools/tests/android_touch_input.py
          python tools/tests/audio_payload_restore.py
          python tools/tests/renderer_gles_dispatch.py
          python tools/tests/renderer_gles_alpha.py
          python tools/tests/renderer_gles_upload.py
          python tools/tests/android_host_storage.py
          python tools/tests/image_block_mips.py
          python tools/tests/filesystem_case_segments.py
          python tools/tests/filesystem_mod_manifest.py
          python tools/tests/filesystem_write_qpath_safety.py
          python tools/tests/game_class_allocator_alignment.py
          python tools/tests/game_module_completion_safety.py
          python tools/tests/game_type_module_selection.py
          python tools/tests/gamelibs_staging.py
          python tools/tests/gamelibs_layer_staging.py
          python tools/tests/awakening_ci_contract.py
          python tools/tests/awakening_speeder_physics_contract.py
          python tools/tests/awakening_gameplay_contract.py
          python tools/tests/generated_animation_cache.py
          python tools/tests/level_load_cache.py
          python tools/tests/lightgrid_map_identity.py
          python tools/tests/lightgrid_bake_contract.py
          python tools/tests/hdr_postprocess_math.py
          python tools/tests/idstr_input_safety.py
          python tools/tests/lexer_input_safety.py
          python tools/tests/lexer_peek_contract.py
          python tools/tests/key_bind_presentation.py
          python tools/tests/levelshot_inventory.py
          python tools/tests/linux_arm64_cross_compile.py
          python tools/tests/linux_arm64_ci_coverage.py
          python tools/tests/linux_arm64_release_evidence.py
          python tools/tests/linux_arm64_source_portability.py
          python tools/tests/linux_dedicated_server_smoke_contract.py
          python tools/tests/linux_dedicated_stock_map_smoke_contract.py
          python tools/tests/linux_physical_host_evidence_contract.py
          python tools/tests/linux_wayland_stock_sp_smoke_contract.py
          python tools/tests/linux_gui_presentation_defaults.py
          python tools/tests/linux_highdpi_mouse.py
          python tools/tests/linux_appimage_packaging.py
          python tools/tests/lang_table_encoding.py
          python tools/tests/ttf_font_integrity.py
          python tools/tests/source_charset_integrity.py
          python tools/tests/linux_metadata_fuzz.py
          python tools/tests/linux_packaging_guidance.py
          python tools/tests/linux_pk4_legacy_tools.py
          python tools/tests/linux_sanitizer_ci.py
          python tools/tests/linux_sdl3_glew_loader.py
          python tools/tests/linux_vsync_support.py
          python tools/tests/linux_wayland_build_contract.py
          python tools/tests/loading_continue_input.py
          python tools/tests/loading_pacifier_pacing.py
          python tools/tests/loading_pacifier_reentry_contract.py
          python tools/tests/loading_wipe_capture_crop_contract.py
          python tools/tests/choice_gui_value_contract.py
          python tools/tests/map_entity_strings.py
          python tools/tests/sp_turbo_weapon_wheel.py
          python tools/tests/weapon_wheel_time_scale.py
          python tools/tests/weapon_zoom_view_alignment.py
          python tools/tests/windows_dedicated_server_smoke_contract.py
          python tools/tests/macos_apple_gl21_arb2_corridor.py
          python tools/tests/macos_dedicated_server_smoke_contract.py
          python tools/tests/macos_evidence_plumbing.py
          python tools/tests/macos_evidence_recording.py
          python tools/tests/macos_gamelibs_alignment.py
          python tools/tests/macos_intel_ci.py
          python tools/tests/macos_local_validation_track.py
          python tools/tests/macos_matrix_policy.py
          python tools/tests/macos_native_backend_guard.py
          python tools/tests/macos_native_backend_containment.py
          python tools/tests/macos_openal_provider_policy.py
          python tools/tests/macos_package_policy.py
          python tools/tests/macos_package_robustness.py
          python tools/tests/macos_renderer_backend_policy.py
          python tools/tests/macos_renderer_phase_breadcrumbs.py
          python tools/tests/macos_renderer_startup_guard.py
          python tools/tests/macos_sanitizer_ci.py
          python tools/tests/macos_sdl3_backend_guard.py
          python tools/tests/macos_shadow_policy.py
          python tools/tests/macos_signoff_archive.py
          python tools/tests/macos_static_policy.py
          python tools/tests/macos_support_claim_policy.py
          python tools/tests/macos_support_intake.py
          python tools/tests/macos_symbolication_policy.py
          python tools/tests/macos_universal2_assembly.py
          python tools/tests/macos_universal2_runtime.py
          python tools/tests/macos_universal2_release_candidate.py
          python tools/tests/macos_metal_bridge.py
          python tools/tests/macos_moltenvk_policy.py
          python tools/tests/mp_bot_characters.py
          python tools/tests/mp_bot_intelligence.py
          python tools/tests/mp_bot_navigation.py
          python tools/tests/mp_bot_server_menu.py
          python tools/tests/mp_client_combat_effects.py
          python tools/tests/bse_retail_parity.py
          python tools/tests/mp_lag_compensation_contract.py
          python tools/tests/mp_weapon_switch_contract.py
          python tools/tests/multiview_demo.py
          python tools/tests/mvd_server_api_contract.py
          python tools/tests/mvd_recording_failure_contract.py
          python tools/tests/native_glx_shutdown.py
          python tools/tests/network_ipv4_support.py
          python tools/tests/network_ipv6_support.py
          python tools/tests/network_security.py
          python tools/tests/openurl_security.py
          python tools/tests/openq4_pure_pack.py
          python tools/tests/p0_governance_evidence.py
          python tools/tests/packaging_safety.py
          python tools/tests/parallel_job_system.py
          python tools/tests/pbr_orm_packer.py
          python tools/tests/pbr_procedural_fixture.py
          python tools/tests/pbr_laboratory_fixture.py
          python tools/tests/preprocessor_macro_safety.py
          python tools/tests/release_tooling_safety.py
          python tools/tests/posix_memory_management.py
          python tools/tests/posix_monotonic_time.py
          python tools/tests/posix_network_resolution.py
          python tools/tests/posix_thread_shutdown.py
          python tools/tests/renderer_advanced_lighting.py
          python tools/tests/renderer_budget_contract.py
          python tools/tests/renderer_cel_shading.py
          python tools/tests/renderer_demo_projection_safety.py
          python tools/tests/renderer_gpu_frame_timing.py
          python tools/tests/renderer_gpu_skinning.py
          python tools/tests/renderer_temporal_presentation.py
          python tools/tests/renderer_native_ui_output.py
          python tools/tests/renderer_mp_flat_items.py
          python tools/tests/renderer_pbr_materials.py
          python tools/tests/renderer_classic_gui_domain.py
          python tools/tests/renderer_classic_cinematic_post_domain.py
          python tools/tests/renderer_classic_special_frame_domain.py
          python tools/tests/renderer_classic_world_ambient_domain.py
          python tools/tests/renderer_classic_interaction_domain.py
          python tools/tests/renderer_classic_fog_blend_domain.py
          python tools/tests/renderer_classic_subview_domain.py
          python tools/tests/renderer_classic_deform_domain.py
          python tools/tests/renderer_module_completion_safety.py
          python tools/tests/renderer_msaa_cvar_safety.py
          python tools/tests/renderer_picmip_policy.py
          python tools/tests/renderer_texture_filter.py
          python tools/tests/renderer_player_visibility.py
          python tools/tests/renderer_scaled_scene_presentation.py
          python tools/tests/renderer_screenshot_readback.py
          python tools/tests/renderer_supersampling_safety.py
          python tools/tests/renderer_vulkan_decal_compatibility.py
          python tools/tests/renderer_vulkan_gui_residency.py
          python tools/tests/renderer_vulkan_md5r_compatibility.py
          python tools/tests/renderer_vulkan_probe_safety.py
          python tools/tests/renderer_vulkan_shadow_compatibility.py
          python tools/tests/renderer_vulkan_world_interaction_compatibility.py
          python tools/tests/rigid_body_recovery_diagnostics.py
          python tools/tests/savegame_corruption_contract.py
          python tools/tests/savegame_pointer_width_safety.py
          python tools/tests/savegame_v3_contract.py
          python tools/tests/sdl3_input_parity.py
          python tools/tests/sys_event_queue_ownership.py
          python tools/tests/event_journal.py
          python tools/tests/event_disposition_storage.py
          python tools/tests/sdl3_input_disposition.py
          python tools/tests/native_event_disposition.py
          python tools/tests/native_input_route.py
          python tools/tests/native_input_lifecycle.py
          python tools/tests/native_input_driver.py --mutations
          python tools/tests/native_input_facts.py
          python tools/tests/native_input_terminal.py
          python tools/tests/native_event_retirement.py
          python tools/tests/sdl3_clipboard_status.py
          python tools/tests/sdl3_wayland_mode_contract.py
          python tools/tests/sdl3_text_provenance.py
          python tools/tests/sdl3_native_fence.py
          python tools/tests/native_queue_batch.py
          python tools/tests/ui_text_edit_model.py
          python tools/tests/ui_native_text_document.py
          python tools/tests/ui_native_text_editor.py
          python tools/tests/ui_native_text_collection.py
          python tools/tests/ui_number_clipboard.py
          python tools/tests/ui_number_drafts.py
          python tools/tests/ui_number_native.py
          python tools/tests/ui_native_collection_coordinator.py
          python tools/tests/ui_managed_native_owner.py
          python tools/tests/ui_settings_decimal_precision.py
          python tools/tests/ui_settings_exact_values.py --mutations
          python tools/tests/ui_settings_automatic.py
          python tools/tests/ui_settings_effect_journal.py
          python tools/tests/sound_settings.py
          python tools/tests/sound_recovery.py
          python tools/tests/sound_retail_reverb_contract.py
          python tools/tests/ui_performance_presets.py --mutations --adjacent
          python tools/tests/ui_system_number_fields.py
          python tools/tests/ui_system_presets.py
          python tools/tests/system_settings_archive_policy.py
          python tools/ui/update_system_presets.py --check
          python tools/ui/update_system_number_fields.py --check
          python tools/ui/update_system_scrollbar.py --check
          python tools/ui/update_system_choice_scrollbars.py --check
          python tools/ui/update_system_interface_settings.py --check
          python tools/ui/update_system_display_controls.py --check
          python tools/ui/update_system_dimensions.py --check
          python tools/ui/update_system_text_layout.py --check
          python tools/ui/update_system_soft_focus.py --check
          python tools/ui/update_system_render_options.py --check
          python tools/tests/ui_text_input.py
          python tools/tests/ui_retained_input.py
          python tools/tests/ui_retained_state_sources.py
          python tools/tests/ui_presentation_bridge.py
          python tools/tests/ui_retained_layer_pool.py
          python tools/tests/ui_manager_lifecycle.py
          python tools/tests/ui_event_delivery.py
          python tools/tests/ui_list_selection_safety.py
          python tools/tests/ui_session_test_gui.py
          python tools/tests/ui_system_session_route.py
          python tools/tests/ui_controller_menu_pump.py
          python tools/tests/ui_retained_gate.py
          python tools/tests/ui_retained_resource_lifecycle.py
          python tools/tests/ui_retained_adapter.py
          python tools/tests/ui_scrollbar_interaction.py --mutations
          python tools/tests/ui_choice_scroll_interaction.py --mutations
          python tools/tests/ui_document_edit.py --mutations
          python tools/tests/ui_popup_placement.py --mutations
          python tools/tests/ui_text_owner.py
          python tools/tests/ui_system_settings_host.py
          python tools/tests/ui_settings_service.py
          python tools/tests/durable_file.py --mutations
          python tools/tests/settings_configuration_persistence.py
          python tools/tests/sdl3_settings_placement.py
          python tools/tests/ui_system_display.py
          python tools/tests/ui_settings_display_service.py
          python tools/tests/ui_display_settings_fixture.py
          python tools/tests/ui_generated_font_precache.py
          python tools/tests/ui_capture_display_settings.py
          python tools/tests/ui_capture_settings_recovery.py
          python tools/tests/ui_capture_managed.py
          python tools/tests/ui_capture_system_settings.py
          python tools/tests/ui_capture_system_page.py
          python tools/tests/ui_capture_system_exit.py
          python tools/tests/renderer_vid_restart_route.py
          python tools/tests/renderer_image_recovery_owner.py --mutations
          python tools/tests/renderer_image_recovery_module.py --mutations
          python tools/tests/renderer_image_recovery_loader.py --mutations
          python tools/tests/renderer_image_recovery_codec.py --mutations
          python tools/tests/renderer_image_recovery_cold.py --mutations
          python tools/tests/renderer_image_recovery_lifecycle.py --mutations
          python tools/tests/renderer_image_policy_restart.py --mutations
          python tools/tests/renderer_image_policy_boundaries.py --mutations
          python tools/tests/renderer_image_policy_lifetimes.py --mutations
          python tools/tests/renderer_image_policy_metadata.py --mutations
          python tools/tests/renderer_consumed_policy.py --mutations
          python tools/tests/renderer_consumed_policy.py --vulkan --mutations
          python tools/tests/renderer_consumed_upload_batches.py --mutations
          python tools/tests/renderer_upload_storage.py --mutations
          python tools/tests/renderer_image_reduction.py --mutations
          python tools/tests/renderer_image_content.py --mutations
          python tools/tests/renderer_display_services.py
          python tools/tests/renderer_settings_reports.py
          python tools/tests/openxr_vr_contract.py
          python tools/tests/renderer_display_presentation.py
          python tools/tests/renderer_gl_display_policy.py
          python tools/tests/sdl3_strict_window.py
          python tools/tests/ui_capture_display_device.py
          python tools/tests/ui_legacy_inventory.py
          python tools/tests/ui_legacy_import.py
          python tools/tests/ui_legacy_expression.py --mutations
          python tools/tests/ui_legacy_observation.py --mutations
          python tools/tests/ui_background_cursor.py
          python tools/tests/crosshair_picker_contract.py
          python tools/tests/menu_controller_navigation.py
          python tools/tests/sdl3_multidisplay_windowing.py
          python tools/tests/settings_menu_coverage.py
          python tools/tests/steam_deck_support.py
          python tools/tests/system_console_presentation.py
          python tools/tests/startup_language_override.py
          python tools/tests/stock_asset_baseline.py
          python tools/tests/stock_media_fallbacks.py
          python tools/tests/ui_embedded_icons.py
          python tools/tests/ui_cursor_state_safety.py
          python tools/tests/ui_window_state_safety.py
          python tools/tests/validation_hardening.py
          python tools/tests/vk_shader_header_pin.py
          python tools/build/vulkan_material_sources.py --check
          python tools/tests/vk_display_color_mapping.py
          python tools/tests/vk_display_color_mapping_shader_pin.py
          python tools/tests/vk_display_color_mapping_capture.py --self-test
          python tools/tests/vk_temporal_resolve_shader_pin.py
          python tools/tests/vscode_fast_build.py

      - name: Dry-run validation profiles
        shell: bash
        run: |
          set -euo pipefail
          bash tools/validation/validate_push.sh --dry-run
          bash tools/validation/validate_pr.sh --dry-run

  windows-x64:
    name: Windows x64 Commit Validation
    runs-on: windows-2025
    needs: script-smoke
    timeout-minutes: 60
    env:
      OPENQ4_GAMELIBS_REPO: ${{ github.workspace }}

    steps:
      - name: Checkout
        uses: actions/checkout@v7
        with:
          fetch-depth: 0

      - name: Setup Python
        uses: actions/setup-python@v7
        with:
          python-version: "3.x"

      - name: Setup Java for Android host storage validation
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: "17"

      - name: Install Meson and Ninja
        shell: pwsh
        run: |
          $ErrorActionPreference = "Stop"
          python -m pip install --upgrade pip
          python -m pip install meson ninja

      - name: Prepare OpenAL Soft (Windows)
        shell: pwsh
        run: |
          $ErrorActionPreference = "Stop"
          $outputRoot = Join-Path $env:GITHUB_WORKSPACE ".tmp/openal-soft-x64"
          $env:OPENQ4_VS_TARGET_ARCH = "x64"
          powershell -ExecutionPolicy Bypass -File tools/build/prepare_windows_openal.ps1 -Architecture "x64" -OutputRoot $outputRoot
          "OPENQ4_OPENAL_ROOT=$outputRoot" >> $env:GITHUB_ENV

      - name: Run selected validation profile
        shell: pwsh
        run: |
          $ErrorActionPreference = "Stop"

          Write-Host "Selected validation profile: pr"
          powershell -NoProfile -ExecutionPolicy Bypass -File tools/validation/validate_pr.ps1 --fail-on-dirty

      - name: Run Windows x64 dedicated server smoke
        shell: pwsh
        run: |
          $ErrorActionPreference = "Stop"
          python tools/tests/windows_dedicated_server_smoke.py --arch x64 --output-root .tmp/windows-dedicated-smoke/x64

      - name: Publish Windows x64 dedicated server smoke
        if: always()
        uses: actions/upload-artifact@v7
        with:
          name: commit-windows-x64-dedicated-smoke
          path: .tmp/windows-dedicated-smoke/x64
          if-no-files-found: warn
          retention-days: 14
          include-hidden-files: true

      - name: Run focused input-safety static analysis
        shell: pwsh
        run: |
          $ErrorActionPreference = "Stop"
          python tools/analysis/clang_tidy_input_safety.py --build-dir .tmp/validation/pr-builddir

      - name: Validate Windows text-store SDK boundary
        shell: cmd
        run: |
          call tools\build\openq4_devcmd.cmd
          if errorlevel 1 exit /b 1
          python tools\tests\windows_text_store.py
          if errorlevel 1 exit /b 1
          python tools\tests\windows_text_collection_bridge.py --sdl-include subprojects/SDL3-3.4.16/include
          if errorlevel 1 exit /b 1
          python tools\tests\windows_text_collection_bridge.py --compiler cl --msvc-debug --sdl-include subprojects/SDL3-3.4.16/include
          if errorlevel 1 exit /b 1
          python tools\tests\windows_text_collection_bridge.py --unsupported --sdl-include subprojects/SDL3-3.4.16/include
          if errorlevel 1 exit /b 1
          python tools\tests\windows_text_session.py --sdl-include subprojects/SDL3-3.4.16/include
          if errorlevel 1 exit /b 1
          python tools\tests\windows_text_session.py --compiler cl --msvc-debug --no-mutations --sdl-include subprojects/SDL3-3.4.16/include
          if errorlevel 1 exit /b 1
          python tools\tests\windows_text_session.py --route-facts --sdl-include subprojects/SDL3-3.4.16/include
          if errorlevel 1 exit /b 1
          python tools\tests\native_input_facts.py --compiler cl --msvc-debug --no-mutations --sdl-include subprojects/SDL3-3.4.16/include
          if errorlevel 1 exit /b 1
          python tools\tests\native_input_terminal.py --compiler cl --msvc-debug --no-mutations --sdl-include subprojects/SDL3-3.4.16/include

  linux-arm64:
    name: Linux ARM64 Commit Validation
    runs-on: ubuntu-24.04-arm
    needs: script-smoke
    timeout-minutes: 90
    env:
      OPENQ4_GAMELIBS_REPO: ${{ github.workspace }}
      CC: gcc
      CXX: g++

    steps:
      - name: Checkout
        uses: actions/checkout@v7
        with:
          fetch-depth: 0

      - name: Setup Python
        uses: actions/setup-python@v7
        with:
          python-version: "3.x"

      - name: Setup Java for Android host storage validation
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: "17"

      - name: Install Meson and Ninja
        shell: bash
        run: |
          set -euo pipefail
          python -m pip install --upgrade pip
          python -m pip install meson ninja

      - name: Install Linux native dependencies
        shell: bash
        run: |
          set -euo pipefail
          for attempt in 1 2 3; do
            if sudo apt-get update && sudo apt-get install -y \
              binutils \
              libasound2-dev \
              libdbus-1-dev \
              libdecor-0-dev \
              libdrm-dev \
              libegl1-mesa-dev \
              libfribidi-dev \
              libgbm-dev \
              libgl1-mesa-dri \
              libgl1-mesa-dev \
              libglx-mesa0 \
              libvulkan1 \
              mesa-vulkan-drivers \
              vulkan-validationlayers \
              libibus-1.0-dev \
              libjack-dev \
              libopenal-dev \
              libpipewire-0.3-dev \
              libpulse-dev \
              libsndio-dev \
              libthai-dev \
              libudev-dev \
              libwayland-dev \
              libx11-dev \
              libxcursor-dev \
              libxext-dev \
              libxfixes-dev \
              libxi-dev \
              libxkbcommon-dev \
              libxrandr-dev \
              libxss-dev \
              libxtst-dev \
              libxxf86dga-dev \
              libxxf86vm-dev \
              xvfb; then
              exit 0
            fi

            if [ "${attempt}" -eq 3 ]; then
              echo "Failed to install Linux native dependencies after ${attempt} attempts."
              exit 1
            fi

            echo "Linux dependency installation attempt ${attempt} failed; retrying in 10 seconds..."
            sleep 10
          done

      - name: Run selected validation profile
        shell: bash
        run: |
          set -euo pipefail
          shopt -s nullglob
          vulkan_icds=(/usr/share/vulkan/icd.d/lvp_icd*.json)
          [[ ${#vulkan_icds[@]} -eq 1 && -f "${vulkan_icds[0]}" ]]
          export VK_DRIVER_FILES="${vulkan_icds[0]}"
          export VK_ICD_FILENAMES="${vulkan_icds[0]}"
          env LIBGL_ALWAYS_SOFTWARE=1 SDL_VIDEO_DRIVER=x11 SDL_VIDEODRIVER=x11 xvfb-run -a bash tools/validation/validate_pr.sh \
            --fail-on-dirty \
            --runtime \
            --runtime-cases renderer-foundation-selftests,renderer-pbr-visible-selftest,renderer-cluster-grid-selftest,renderer-default-safety-selftest,renderer-shadow-planner-selftest,renderer-shadow-projected-diagnostic,sdl3-x11-display-diagnostics,renderer-vk-clear-startup,renderer-vk-probe-source-lifecycle,renderer-vk-hdr-selftest,renderer-vk-temporal-motion-selftest,renderer-vk-fallback-drill,renderer-vk-device-fallback-drill,renderer-vk-window-recovery,renderer-vk-surface-recovery,renderer-vk-swapchain-recovery,renderer-vk-resources-recovery \
            --runtime-tiers auto \
            --runtime-basepath "" \
            --runtime-skip-official-pak-validation
          env LIBGL_ALWAYS_SOFTWARE=1 OPENQ4_FORCE_X11=1 xvfb-run -a python tools/tests/renderer_validation_matrix.py \
            --cases sdl3-force-x11-display-diagnostics \
            --tiers auto \
            --basepath "" \
            --skip-official-pak-validation \
            --output-dir .tmp/renderer-validation/force-x11

      - name: Run Linux ARM64 dedicated server smoke
        shell: bash
        run: |
          set -euo pipefail
          python tools/tests/linux_dedicated_server_smoke.py \
            --output-root .tmp/linux-dedicated-smoke/arm64

      - name: Publish Linux ARM64 dedicated server smoke
        if: always()
        uses: actions/upload-artifact@v7
        with:
          name: commit-linux-arm64-dedicated-smoke
          path: .tmp/linux-dedicated-smoke/arm64
          if-no-files-found: warn
          retention-days: 14
          include-hidden-files: true

      - name: Publish renderer validation reports
        if: always()
        uses: actions/upload-artifact@v7
        with:
          name: commit-linux-arm64-renderer-validation
          path: .tmp/renderer-validation
          if-no-files-found: warn
          retention-days: 14
          include-hidden-files: true

  windows-arm64:
    name: Windows ARM64 Commit Validation
    runs-on: windows-11-arm
    needs: script-smoke
    timeout-minutes: 90
    env:
      OPENQ4_GAMELIBS_REPO: ${{ github.workspace }}
      OPENQ4_VS_TARGET_ARCH: arm64

    steps:
      - name: Checkout
        uses: actions/checkout@v7
        with:
          fetch-depth: 0

      - name: Setup Python
        uses: actions/setup-python@v7
        with:
          python-version: "3.x"

      - name: Install Meson and Ninja
        shell: pwsh
        run: |
          $ErrorActionPreference = "Stop"
          python -m pip install --upgrade pip
          python -m pip install meson ninja

      - name: Prepare OpenAL Soft (Windows ARM64)
        shell: pwsh
        run: |
          $ErrorActionPreference = "Stop"
          $outputRoot = Join-Path $env:GITHUB_WORKSPACE ".tmp/openal-soft-arm64"
          powershell -ExecutionPolicy Bypass -File tools/build/prepare_windows_openal.ps1 -Architecture "arm64" -OutputRoot $outputRoot
          "OPENQ4_OPENAL_ROOT=$outputRoot" >> $env:GITHUB_ENV

      # See the Windows ARM64 push job: the arm64 link needs the OpenAL package
      # prepared above, and the runner is called directly so the path argument
      # reaches it whole.
      - name: Run selected validation profile
        shell: pwsh
        run: |
          $ErrorActionPreference = "Stop"

          Write-Host "Selected validation profile: pr"
          python tools/validation/openq4_validate.py pr --fail-on-dirty "--extra-setup-arg=-Dopenal_root_override=$env:OPENQ4_OPENAL_ROOT"

      - name: Run Windows ARM64 dedicated server smoke
        shell: pwsh
        run: |
          $ErrorActionPreference = "Stop"
          python tools/tests/windows_dedicated_server_smoke.py --arch arm64 --output-root .tmp/windows-dedicated-smoke/arm64

      - name: Publish Windows ARM64 dedicated server smoke
        if: always()
        uses: actions/upload-artifact@v7
        with:
          name: commit-windows-arm64-dedicated-smoke
          path: .tmp/windows-dedicated-smoke/arm64
          if-no-files-found: warn
          retention-days: 14
          include-hidden-files: true

  linux-sanitizer:
    name: Linux x64 ASan+UBSan Commit Validation
    runs-on: ubuntu-24.04
    needs: script-smoke
    timeout-minutes: 90
    env:
      OPENQ4_GAMELIBS_REPO: ${{ github.workspace }}
      ASAN_OPTIONS: halt_on_error=1:detect_leaks=0
      UBSAN_OPTIONS: halt_on_error=1:print_stacktrace=1

    steps:
      - name: Checkout
        uses: actions/checkout@v7
        with:
          fetch-depth: 0

      - name: Setup Python
        uses: actions/setup-python@v7
        with:
          python-version: "3.x"

      - name: Setup Java for Android host storage validation
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: "17"

      - name: Install Meson and Ninja
        shell: bash
        run: |
          set -euo pipefail
          python -m pip install --upgrade pip
          python -m pip install meson ninja

      - name: Install Linux native dependencies
        shell: bash
        run: |
          set -euo pipefail
          for attempt in 1 2 3; do
            if sudo apt-get update && sudo apt-get install -y \
              binutils \
              libasound2-dev \
              libdbus-1-dev \
              libdecor-0-dev \
              libdrm-dev \
              libegl1-mesa-dev \
              libfribidi-dev \
              libgbm-dev \
              libgl1-mesa-dri \
              libgl1-mesa-dev \
              libglx-mesa0 \
              libibus-1.0-dev \
              libjack-dev \
              libopenal-dev \
              libpipewire-0.3-dev \
              libpulse-dev \
              libsndio-dev \
              libthai-dev \
              libudev-dev \
              libwayland-dev \
              libx11-dev \
              libxcursor-dev \
              libxext-dev \
              libxfixes-dev \
              libxi-dev \
              libxkbcommon-dev \
              libxrandr-dev \
              libxss-dev \
              libxtst-dev \
              libxxf86dga-dev \
              libxxf86vm-dev \
              weston; then
              exit 0
            fi

            if [ "${attempt}" -eq 3 ]; then
              echo "Failed to install Linux native dependencies after ${attempt} attempts."
              exit 1
            fi

            echo "Linux dependency installation attempt ${attempt} failed; retrying in 10 seconds..."
            sleep 10
          done

      - name: Run sanitizer build
        shell: bash
        run: |
          set -euo pipefail
          bash tools/validation/validate_pr.sh \
            --skip-python-tests \
            --no-install \
            --build-dir .tmp/validation/linux-sanitizer-builddir \
            --buildtype debugoptimized \
            --jobs 2 \
            --extra-setup-arg=-Duse_pch=false \
            --extra-setup-arg=-Db_sanitize=address,undefined

      - name: Stage sanitizer runtime
        shell: bash
        run: |
          set -euo pipefail
          bash tools/build/meson_setup.sh install \
            -C .tmp/validation/linux-sanitizer-builddir \
            --no-rebuild \
            --skip-subprojects

      - name: Run sanitizer native Wayland smoke
        shell: bash
        run: |
          set -euo pipefail

          output_dir=".tmp/renderer-validation/sanitizer"
          rm -rf "${output_dir}"
          mkdir -p "${output_dir}"

          export XDG_RUNTIME_DIR="${RUNNER_TEMP}/openq4-sanitizer-wayland-runtime"
          rm -rf "${XDG_RUNTIME_DIR}"
          mkdir -p "${XDG_RUNTIME_DIR}"
          chmod 700 "${XDG_RUNTIME_DIR}"

          weston_log="${output_dir}/weston.log"
          weston --backend=headless-backend.so --socket=openq4-sanitizer-wayland --idle-time=0 --no-config >"${weston_log}" 2>&1 &
          weston_pid=$!
          cleanup() {
            status=$?
            if [ "${status}" -ne 0 ] && [ -f "${weston_log}" ]; then
              echo "Weston log:"
              cat "${weston_log}"
            fi
            kill "${weston_pid}" >/dev/null 2>&1 || true
            wait "${weston_pid}" >/dev/null 2>&1 || true
            exit "${status}"
          }
          trap cleanup EXIT

          for attempt in {1..30}; do
            if [ -S "${XDG_RUNTIME_DIR}/openq4-sanitizer-wayland" ]; then
              break
            fi
            sleep 1
          done
          if [ ! -S "${XDG_RUNTIME_DIR}/openq4-sanitizer-wayland" ]; then
            echo "Weston did not create the sanitizer Wayland socket."
            exit 1
          fi

          export WAYLAND_DISPLAY=openq4-sanitizer-wayland
          unset DISPLAY
          export SDL_VIDEO_DRIVER=wayland
          export SDL_VIDEODRIVER=wayland
          export LIBGL_ALWAYS_SOFTWARE=1
          export OPENQ4_WAYLAND_DISABLE_LIBDECOR=1

          python tools/tests/renderer_validation_matrix.py \
            --cases sdl3-wayland-window-lifecycle \
            --tiers auto \
            --timeout 120 \
            --basepath "" \
            --skip-official-pak-validation \
            --output-dir "${output_dir}"

      - name: Publish sanitizer validation artifacts
        if: always()
        uses: actions/upload-artifact@v7
        with:
          name: commit-linux-sanitizer-build-logs
          path: |
            .tmp/validation/linux-sanitizer-builddir/meson-logs
            .tmp/validation/linux-sanitizer-builddir/openq4_game_sources.json
            .tmp/renderer-validation/sanitizer
          if-no-files-found: warn
          retention-days: 14
          include-hidden-files: true

  linux-wayland:
    name: Linux ${{ matrix.arch_label }} ${{ matrix.compiler_label }} Wayland ${{ matrix.libdecor_label }} Commit Validation
    runs-on: ${{ matrix.runner }}
    needs: script-smoke
    timeout-minutes: 90
    env:
      OPENQ4_GAMELIBS_REPO: ${{ github.workspace }}
      CC: ${{ matrix.cc }}
      CXX: ${{ matrix.cxx }}
    strategy:
      fail-fast: false
      matrix:
        include:
          - arch_label: x64
            runner: ubuntu-24.04
            expected_uname: x86_64
            compiler_label: GCC
            cc: gcc
            cxx: g++
            libdecor_label: libdecor
            disable_libdecor: "0"
            prefer_libdecor: "1"
            sync_window_ops: "0"
            linux_x11: auto
            artifact_suffix: x64-libdecor
          - arch_label: x64
            runner: ubuntu-24.04
            expected_uname: x86_64
            compiler_label: GCC
            cc: gcc
            cxx: g++
            libdecor_label: no-libdecor
            disable_libdecor: "1"
            prefer_libdecor: "0"
            sync_window_ops: "0"
            linux_x11: disabled
            artifact_suffix: x64-no-libdecor-wayland-only
          - arch_label: x64
            runner: ubuntu-24.04
            expected_uname: x86_64
            compiler_label: Clang
            cc: clang
            cxx: clang++
            libdecor_label: no-libdecor
            disable_libdecor: "1"
            prefer_libdecor: "0"
            sync_window_ops: "0"
            linux_x11: disabled
            artifact_suffix: x64-clang-no-libdecor-wayland-only
          - arch_label: x64
            runner: ubuntu-24.04
            expected_uname: x86_64
            compiler_label: GCC
            cc: gcc
            cxx: g++
            libdecor_label: sync-window-ops
            disable_libdecor: "0"
            prefer_libdecor: "0"
            sync_window_ops: "1"
            linux_x11: auto
            artifact_suffix: x64-sync-window-ops
          - arch_label: ARM64
            runner: ubuntu-24.04-arm
            expected_uname: aarch64
            compiler_label: GCC
            cc: gcc
            cxx: g++
            libdecor_label: libdecor
            disable_libdecor: "0"
            prefer_libdecor: "1"
            sync_window_ops: "0"
            linux_x11: auto
            artifact_suffix: arm64-libdecor
          - arch_label: ARM64
            runner: ubuntu-24.04-arm
            expected_uname: aarch64
            compiler_label: Clang
            cc: clang
            cxx: clang++
            libdecor_label: no-libdecor
            disable_libdecor: "1"
            prefer_libdecor: "0"
            sync_window_ops: "0"
            linux_x11: disabled
            artifact_suffix: arm64-clang-no-libdecor-wayland-only

    steps:
      - name: Checkout
        uses: actions/checkout@v7
        with:
          fetch-depth: 0

      - name: Setup Python
        uses: actions/setup-python@v7
        with:
          python-version: "3.x"

      - name: Setup Java for Android host storage validation
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: "17"

      - name: Install Meson and Ninja
        shell: bash
        run: |
          set -euo pipefail
          python -m pip install --upgrade pip
          python -m pip install meson ninja

      - name: Install Clang
        if: matrix.compiler_label == 'Clang'
        shell: bash
        run: |
          set -euo pipefail
          sudo apt-get update
          sudo apt-get install -y clang

      - name: Install Linux Wayland dependencies
        shell: bash
        run: |
          set -euo pipefail
          for attempt in 1 2 3; do
            if sudo apt-get update && sudo apt-get install -y \
              binutils \
              libasound2-dev \
              libdbus-1-dev \
              libdecor-0-dev \
              libdrm-dev \
              libegl1-mesa-dev \
              libfribidi-dev \
              libgbm-dev \
              libgl1-mesa-dri \
              libgl1-mesa-dev \
              libglx-mesa0 \
              libibus-1.0-dev \
              libjack-dev \
              libopenal-dev \
              libpipewire-0.3-dev \
              libpulse-dev \
              libsndio-dev \
              libthai-dev \
              libudev-dev \
              libwayland-dev \
              libx11-dev \
              libxcursor-dev \
              libxext-dev \
              libxfixes-dev \
              libxi-dev \
              libxkbcommon-dev \
              libxrandr-dev \
              libxss-dev \
              libxtst-dev \
              libxxf86dga-dev \
              libxxf86vm-dev \
              weston; then
              exit 0
            fi

            if [ "${attempt}" -eq 3 ]; then
              echo "Failed to install Linux Wayland dependencies after ${attempt} attempts."
              exit 1
            fi

            echo "Linux Wayland dependency installation attempt ${attempt} failed; retrying in 10 seconds..."
            sleep 10
          done

      - name: Run native Wayland validation
        shell: bash
        run: |
          set -euo pipefail

          export XDG_RUNTIME_DIR="${RUNNER_TEMP}/openq4-wayland-runtime"
          rm -rf "${XDG_RUNTIME_DIR}"
          mkdir -p "${XDG_RUNTIME_DIR}"
          chmod 700 "${XDG_RUNTIME_DIR}"

          weston_log="${RUNNER_TEMP}/openq4-weston-${{ matrix.artifact_suffix }}.log"
          weston --backend=headless-backend.so --socket=openq4-wayland --idle-time=0 --no-config >"${weston_log}" 2>&1 &
          weston_pid=$!
          cleanup() {
            status=$?
            if [ "${status}" -ne 0 ] && [ -f "${weston_log}" ]; then
              echo "Weston log:"
              cat "${weston_log}"
            fi
            kill "${weston_pid}" >/dev/null 2>&1 || true
            wait "${weston_pid}" >/dev/null 2>&1 || true
            exit "${status}"
          }
          trap cleanup EXIT

          for attempt in {1..30}; do
            if [ -S "${XDG_RUNTIME_DIR}/openq4-wayland" ]; then
              break
            fi
            sleep 1
          done
          if [ ! -S "${XDG_RUNTIME_DIR}/openq4-wayland" ]; then
            echo "Weston did not create the Wayland socket."
            exit 1
          fi

          export WAYLAND_DISPLAY=openq4-wayland
          unset DISPLAY
          if [ "$(uname -m)" != "${{ matrix.expected_uname }}" ]; then
            echo "Unexpected runner architecture: $(uname -m); expected ${{ matrix.expected_uname }}."
            exit 1
          fi
          export SDL_VIDEO_DRIVER=wayland
          export SDL_VIDEODRIVER=wayland
          export LIBGL_ALWAYS_SOFTWARE=1
          if [ "${{ matrix.disable_libdecor }}" = "1" ]; then
            export OPENQ4_WAYLAND_DISABLE_LIBDECOR=1
          else
            unset OPENQ4_WAYLAND_DISABLE_LIBDECOR
          fi
          if [ "${{ matrix.prefer_libdecor }}" = "1" ]; then
            export OPENQ4_WAYLAND_PREFER_LIBDECOR=1
          else
            unset OPENQ4_WAYLAND_PREFER_LIBDECOR
          fi
          if [ "${{ matrix.sync_window_ops }}" = "1" ]; then
            export OPENQ4_WAYLAND_SYNC_WINDOW_OPS=1
          else
            unset OPENQ4_WAYLAND_SYNC_WINDOW_OPS
          fi

          bash tools/validation/validate_pr.sh \
            --build-dir builddir \
            --fail-on-dirty \
            --extra-setup-arg=-Dlinux_x11=${{ matrix.linux_x11 }}

          sdl_config="$(find builddir -name SDL_build_config.h -print -quit)"
          test -n "${sdl_config}"
          grep -F '#define HAVE_LIBDECOR_H 1' "${sdl_config}"
          grep -F '#define SDL_VIDEO_DRIVER_WAYLAND_DYNAMIC "libwayland-client.so.0"' "${sdl_config}"
          grep -F '#define SDL_VIDEO_DRIVER_WAYLAND_DYNAMIC_LIBDECOR "libdecor-0.so.0"' "${sdl_config}"
          if [ "${{ matrix.linux_x11 }}" = "disabled" ]; then
            grep -F '/* #undef SDL_VIDEO_DRIVER_X11 */' "${sdl_config}"
            for binary in .install/openQ4-client_* .install/openQ4-ded_*; do
              if readelf -W -d "${binary}" | grep -Eq 'libX11|libXext|libGLX'; then
                echo "Native Wayland-only binary unexpectedly depends on X11/GLX: ${binary}"
                exit 1
              fi
            done
          fi

          ld_debug_prefix="${RUNNER_TEMP}/openq4-wayland-loader-${{ matrix.artifact_suffix }}"
          export LD_DEBUG=libs
          export LD_DEBUG_OUTPUT="${ld_debug_prefix}"
          python tools/tests/renderer_validation_matrix.py \
            --cases renderer-default-safety-selftest,sdl3-wayland-window-lifecycle,sdl3-wayland-window-stress,sdl3-wayland-mouse-capture,sdl3-wayland-mouse-capture-stress,sdl3-wayland-display-diagnostics \
            --tiers auto \
            --basepath "" \
            --skip-official-pak-validation
          unset LD_DEBUG LD_DEBUG_OUTPUT

          shopt -s nullglob
          loader_logs=("${ld_debug_prefix}".*)
          if [ "${#loader_logs[@]}" -eq 0 ]; then
            echo "Dynamic-loader diagnostics were not produced."
            exit 1
          fi
          if [ "${{ matrix.prefer_libdecor }}" = "1" ]; then
            grep -hF 'libdecor-0.so.0' "${loader_logs[@]}" >/dev/null
          elif [ "${{ matrix.disable_libdecor }}" = "1" ] && grep -hF 'libdecor-0.so.0' "${loader_logs[@]}" >/dev/null; then
            echo "libdecor loaded despite OPENQ4_WAYLAND_DISABLE_LIBDECOR=1."
            exit 1
          fi

      - name: Run Linux x64 dedicated server smoke
        if: matrix.artifact_suffix == 'x64-libdecor'
        shell: bash
        run: |
          set -euo pipefail
          python tools/tests/linux_dedicated_server_smoke.py \
            --output-root .tmp/linux-dedicated-smoke/x64

      - name: Publish Linux x64 dedicated server smoke
        if: always() && matrix.artifact_suffix == 'x64-libdecor'
        uses: actions/upload-artifact@v7
        with:
          name: commit-linux-x64-dedicated-smoke
          path: .tmp/linux-dedicated-smoke/x64
          if-no-files-found: warn
          retention-days: 14
          include-hidden-files: true

      - name: Publish renderer validation reports
        if: always()
        uses: actions/upload-artifact@v7
        with:
          name: commit-linux-wayland-${{ matrix.artifact_suffix }}-renderer-validation
          path: .tmp/renderer-validation
          if-no-files-found: warn
          retention-days: 14
          include-hidden-files: true

  macos-arm64:
    name: macOS ARM64 ${{ matrix.bridge_label }} Commit Validation
    runs-on: macos-15
    needs: script-smoke
    timeout-minutes: 90
    env:
      OPENQ4_GAMELIBS_REPO: ${{ github.workspace }}
      MACOSX_DEPLOYMENT_TARGET: "11.0"
    strategy:
      fail-fast: false
      matrix:
        include:
          - bridge_label: OpenGL
            macos_graphics_bridge: opengl
            macos_openal_provider: system
            artifact_suffix: opengl
          - bridge_label: Metal
            macos_graphics_bridge: metal
            macos_openal_provider: system
            artifact_suffix: metal

    steps:
      - name: Checkout
        uses: actions/checkout@v7
        with:
          fetch-depth: 0

      - name: Setup Python
        uses: actions/setup-python@v7
        with:
          python-version: "3.x"

      - name: Setup Java for Android host storage validation
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: "17"

      - name: Install Meson and Ninja
        shell: bash
        run: |
          set -euo pipefail
          python -m pip install --upgrade pip
          python -m pip install meson ninja

      - name: Prepare pinned OpenAL Soft
        shell: bash
        run: |
          set -euo pipefail
          prepared_root="${GITHUB_WORKSPACE}/.tmp/openal-soft-macos-arm64"
          bash tools/build/prepare_macos_openal_soft.sh \
            --architecture arm64 \
            --deployment-target "${MACOSX_DEPLOYMENT_TARGET}" \
            --output-root "${prepared_root}" \
            --stage-install-dir .install
          echo "PKG_CONFIG_PATH=${prepared_root}/lib/pkgconfig" >> "${GITHUB_ENV}"

      - name: Run selected validation profile
        shell: bash
        run: |
          set -euo pipefail
          bash tools/validation/validate_pr.sh \
            --fail-on-dirty \
            --platform-backend=sdl3 \
            --extra-setup-arg=-Dmacos_graphics_bridge=${{ matrix.macos_graphics_bridge }} \
            --extra-setup-arg=-Dmacos_openal_provider=${{ matrix.macos_openal_provider }}

      - name: Normalize ARM64 thin payload
        shell: bash
        run: |
          set -euo pipefail
          python tools/build/assemble_macos_universal2.py prepare \
            --install-root .install \
            --arch arm64

      - name: Run macOS dedicated server smoke
        shell: bash
        run: |
          set -euo pipefail
          python tools/tests/macos_dedicated_server_smoke.py \
            --output-root .tmp/macos-dedicated-smoke/${{ matrix.artifact_suffix }}

      - name: Stage pinned MoltenVK for ARM64 thin payload
        shell: bash
        run: |
          set -euo pipefail
          bash tools/build/prepare_macos_moltenvk.sh --output-dir .install
          bash tools/build/prepare_macos_moltenvk.sh --verify-only --output-dir .install

      - name: Record macOS ARM64 thin-build provenance
        shell: bash
        run: |
          set -euo pipefail
          python tools/build/assemble_macos_universal2.py record \
            --install-root .install \
            --source-manifest .tmp/validation/pr-builddir/openq4_game_sources.json \
            --arch arm64 \
            --graphics-bridge ${{ matrix.macos_graphics_bridge }} \
            --openal-provider ${{ matrix.macos_openal_provider }} \
            --deployment-target "${MACOSX_DEPLOYMENT_TARGET}" \
            --build-type debug

      - name: Publish macOS dedicated server smoke
        if: always()
        uses: actions/upload-artifact@v7
        with:
          name: commit-macos-arm64-${{ matrix.artifact_suffix }}-dedicated-smoke
          path: .tmp/macos-dedicated-smoke/${{ matrix.artifact_suffix }}
          if-no-files-found: warn
          retention-days: 14
          include-hidden-files: true

      - name: Archive macOS ARM64 staged payload with modes
        shell: bash
        run: |
          set -euo pipefail
          payload_archive=".tmp/macos-thin-payload/arm64-${{ matrix.artifact_suffix }}-payload.tar.gz"
          mkdir -p "$(dirname "${payload_archive}")"
          rm -f "${payload_archive}"
          tar -C .install -czf "${payload_archive}" .
          tar -tzf "${payload_archive}" >/dev/null

      - name: Publish macOS ARM64 staged payload
        if: always()
        uses: actions/upload-artifact@v7
        with:
          name: commit-macos-arm64-${{ matrix.artifact_suffix }}-payload
          path: .tmp/macos-thin-payload/arm64-${{ matrix.artifact_suffix }}-payload.tar.gz
          if-no-files-found: warn
          retention-days: 14
          include-hidden-files: true

  macos-x64:
    name: macOS Intel x64 ${{ matrix.bridge_label }} Commit Validation
    runs-on: macos-15-intel
    needs: script-smoke
    timeout-minutes: 90
    env:
      OPENQ4_GAMELIBS_REPO: ${{ github.workspace }}
      MACOSX_DEPLOYMENT_TARGET: "11.0"
    strategy:
      fail-fast: false
      matrix:
        include:
          - bridge_label: OpenGL
            macos_graphics_bridge: opengl
            macos_openal_provider: system
            artifact_suffix: opengl
          - bridge_label: Metal
            macos_graphics_bridge: metal
            macos_openal_provider: system
            artifact_suffix: metal

    steps:
      - name: Checkout
        uses: actions/checkout@v7
        with:
          fetch-depth: 0

      - name: Verify Intel host
        shell: bash
        run: |
          set -euo pipefail
          if [[ "$(uname -m)" != "x86_64" ]]; then
            echo "macOS Intel validation requires x86_64, found $(uname -m)."
            exit 1
          fi

      - name: Setup Python
        uses: actions/setup-python@v7
        with:
          python-version: "3.x"

      - name: Setup Java for Android host storage validation
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: "17"

      - name: Install Meson and Ninja
        shell: bash
        run: |
          set -euo pipefail
          python -m pip install --upgrade pip
          python -m pip install meson ninja

      - name: Prepare pinned OpenAL Soft
        shell: bash
        run: |
          set -euo pipefail
          prepared_root="${GITHUB_WORKSPACE}/.tmp/openal-soft-macos-x64"
          bash tools/build/prepare_macos_openal_soft.sh \
            --architecture x64 \
            --deployment-target "${MACOSX_DEPLOYMENT_TARGET}" \
            --output-root "${prepared_root}" \
            --stage-install-dir .install
          echo "PKG_CONFIG_PATH=${prepared_root}/lib/pkgconfig" >> "${GITHUB_ENV}"

      - name: Run selected validation profile
        shell: bash
        run: |
          set -euo pipefail
          bash tools/validation/validate_pr.sh \
            --fail-on-dirty \
            --platform-backend=sdl3 \
            --extra-setup-arg=-Dmacos_graphics_bridge=${{ matrix.macos_graphics_bridge }} \
            --extra-setup-arg=-Dmacos_openal_provider=${{ matrix.macos_openal_provider }}

      - name: Normalize Intel thin payload
        shell: bash
        run: |
          set -euo pipefail
          python tools/build/assemble_macos_universal2.py prepare \
            --install-root .install \
            --arch x64

      - name: Run macOS dedicated server smoke
        shell: bash
        run: |
          set -euo pipefail
          python tools/tests/macos_dedicated_server_smoke.py \
            --arch x64 \
            --output-root .tmp/macos-dedicated-smoke/x64-${{ matrix.artifact_suffix }}

      - name: Stage pinned MoltenVK for Intel thin payload
        shell: bash
        run: |
          set -euo pipefail
          bash tools/build/prepare_macos_moltenvk.sh --output-dir .install
          bash tools/build/prepare_macos_moltenvk.sh --verify-only --output-dir .install

      - name: Record macOS Intel thin-build provenance
        shell: bash
        run: |
          set -euo pipefail
          python tools/build/assemble_macos_universal2.py record \
            --install-root .install \
            --source-manifest .tmp/validation/pr-builddir/openq4_game_sources.json \
            --arch x64 \
            --graphics-bridge ${{ matrix.macos_graphics_bridge }} \
            --openal-provider ${{ matrix.macos_openal_provider }} \
            --deployment-target "${MACOSX_DEPLOYMENT_TARGET}" \
            --build-type debug

      - name: Publish macOS Intel dedicated server smoke
        if: always()
        uses: actions/upload-artifact@v7
        with:
          name: commit-macos-x64-${{ matrix.artifact_suffix }}-dedicated-smoke
          path: .tmp/macos-dedicated-smoke/x64-${{ matrix.artifact_suffix }}
          if-no-files-found: warn
          retention-days: 14
          include-hidden-files: true

      - name: Archive macOS Intel staged payload with modes
        shell: bash
        run: |
          set -euo pipefail
          payload_archive=".tmp/macos-thin-payload/x64-${{ matrix.artifact_suffix }}-payload.tar.gz"
          mkdir -p "$(dirname "${payload_archive}")"
          rm -f "${payload_archive}"
          tar -C .install -czf "${payload_archive}" .
          tar -tzf "${payload_archive}" >/dev/null

      - name: Publish macOS Intel staged payload
        if: always()
        uses: actions/upload-artifact@v7
        with:
          name: commit-macos-x64-${{ matrix.artifact_suffix }}-payload
          path: .tmp/macos-thin-payload/x64-${{ matrix.artifact_suffix }}-payload.tar.gz
          if-no-files-found: warn
          retention-days: 14
          include-hidden-files: true

  macos-universal2:
    # Pre-publication gate only; release artifacts remain arm64-only.
    name: macOS universal2 ${{ matrix.bridge_label }} Assembly
    runs-on: macos-15
    needs:
      - macos-arm64
      - macos-x64
    timeout-minutes: 30
    strategy:
      fail-fast: false
      matrix:
        include:
          - bridge_label: OpenGL
            artifact_suffix: opengl
          - bridge_label: Metal
            artifact_suffix: metal

    steps:
      - name: Checkout
        uses: actions/checkout@v7
        with:
          fetch-depth: 0

      - name: Setup Python
        uses: actions/setup-python@v7
        with:
          python-version: "3.x"

      - name: Setup Java for Android host storage validation
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: "17"

      - name: Install release documentation dependency
        run: python -m pip install markdown

      - name: Download macOS ARM64 thin payload
        uses: actions/download-artifact@v8
        with:
          name: commit-macos-arm64-${{ matrix.artifact_suffix }}-payload
          path: .tmp/macos-universal2/${{ matrix.artifact_suffix }}/arm64

      - name: Download macOS Intel thin payload
        uses: actions/download-artifact@v8
        with:
          name: commit-macos-x64-${{ matrix.artifact_suffix }}-payload
          path: .tmp/macos-universal2/${{ matrix.artifact_suffix }}/x64

      - name: Restore mode-preserving thin payloads
        shell: bash
        run: |
          set -euo pipefail
          corridor_root=".tmp/macos-universal2/${{ matrix.artifact_suffix }}"
          for arch in arm64 x64; do
            payload_archive="${corridor_root}/${arch}/${arch}-${{ matrix.artifact_suffix }}-payload.tar.gz"
            if [ -L "${payload_archive}" ] || [ ! -f "${payload_archive}" ]; then
              echo "Missing regular thin payload archive: ${payload_archive}"
              exit 1
            fi
            tar -tzf "${payload_archive}" >/dev/null
            tar -xzf "${payload_archive}" -C "${corridor_root}/${arch}"
            rm -f "${payload_archive}"
          done

      - name: Assemble exact dual-slice staging tree
        shell: bash
        run: |
          set -euo pipefail
          corridor_root=".tmp/macos-universal2/${{ matrix.artifact_suffix }}"
          mkdir -p "${corridor_root}/package-output"
          python tools/build/assemble_macos_universal2.py assemble \
            --arm64-root "${corridor_root}/arm64" \
            --x64-root "${corridor_root}/x64" \
            --output-root "${corridor_root}/universal2" \
            --assembly-manifest "${corridor_root}/assembly-manifest.json"

      - name: Run native universal2 dedicated-server smoke
        shell: bash
        run: |
          set -euo pipefail
          corridor_root=".tmp/macos-universal2/${{ matrix.artifact_suffix }}"
          python tools/tests/macos_dedicated_server_smoke.py \
            --install-root "${corridor_root}/universal2" \
            --arch universal2 \
            --output-root "${corridor_root}/dedicated-smoke"

      - name: Package and validate universal2 app
        shell: bash
        run: |
          set -euo pipefail
          corridor_root=".tmp/macos-universal2/${{ matrix.artifact_suffix }}"
          export OPENQ4_UNIVERSAL_INSTALL_ROOT="${corridor_root}/universal2"
          release_version="$(python -c 'import json, os; print(json.load(open(os.path.join(os.environ["OPENQ4_UNIVERSAL_INSTALL_ROOT"], "baseoq4", "mod.json"), encoding="utf-8"))["version"])')"
          python tools/build/package_nightly.py \
            --platform macos \
            --arch universal2 \
            --version "${release_version}" \
            --version-tag universal2-ci \
            --source-root . \
            --install-dir "${corridor_root}/universal2" \
            --output-dir "${corridor_root}/package-output" \
            --archive-format tar.xz \
            --package-suffix=-${{ matrix.artifact_suffix }} \
            --macos-signing-mode ad-hoc \

      - name: Publish universal2 assembly evidence
        if: always()
        uses: actions/upload-artifact@v7
        with:
          name: commit-macos-universal2-${{ matrix.artifact_suffix }}
          path: .tmp/macos-universal2/${{ matrix.artifact_suffix }}
          if-no-files-found: error
          retention-days: 14
          include-hidden-files: true