Rebase FastLED infrastructure onto kernal-api

.github/workflows/_build.yml

@@ -116,96 +116,11 @@ jobs:
             uv run --with "setuptools>=69" --with "wheel>=0.43" python setup.py bdist_wheel
           fi
 
-      # This deliberately runs the packaged console script outside this
-      # checkout. It exercises the wheel's bundled Rust binary and frontend,
-      # rather than development fallbacks such as CARGO_MANIFEST_DIR.
+      # Installs the wheel into a fresh venv and runs the packaged console
+      # script outside this checkout, in the shipped viewer.
       - name: Smoke test installed wheel in shipped viewer
         if: inputs.wheel-smoke
-        run: |
-          set -euo pipefail
-          SMOKE_ROOT="$RUNNER_TEMP/fastled-wheel-smoke"
-          rm -rf "$SMOKE_ROOT"
-          mkdir -p "$SMOKE_ROOT/home" "$SMOKE_ROOT/sketch/data" "$SMOKE_ROOT/artifacts" "$SMOKE_ROOT/asset-origin"
-          uv venv "$SMOKE_ROOT/venv" --python "$UV_PYTHON"
-          uv pip install --python "$SMOKE_ROOT/venv/bin/python" dist/*.whl
-          test -x "$SMOKE_ROOT/venv/bin/uv"
-          BASE_PYTHON_DIR="$("$SMOKE_ROOT/venv/bin/python" -c 'from pathlib import Path; import sys; print(Path(sys.executable).resolve().parent)')"
-          test ! -e "$BASE_PYTHON_DIR/uv"
-          cp -R "$GITHUB_WORKSPACE/tests/fixtures/wasm_vfs/." "$SMOKE_ROOT/sketch/"
-          cp "$GITHUB_WORKSPACE/tests/fixtures/wasm_vfs_origin/probe.txt" "$SMOKE_ROOT/asset-origin/probe.txt"
-          cat > "$SMOKE_ROOT/sketch/data/probe.txt.lnk" <<'EOF'
-          http://127.0.0.1:18765/probe.txt
-          sha256=2da77f7c1452125633beeeb43f366350018643c799306b4d24d8610d98f02b55
-          size_bytes=15
-          storage=vfs
-          EOF
-          cat > "$SMOKE_ROOT/asset_server.py" <<'PY'
-          import http.server
-          import sys
-
-          class Handler(http.server.SimpleHTTPRequestHandler):
-              def end_headers(self):
-                  self.send_header("Access-Control-Allow-Origin", "*")
-                  self.send_header("Cross-Origin-Resource-Policy", "cross-origin")
-                  super().end_headers()
-
-              def log_message(self, *_args):
-                  pass
-
-          handler = lambda *args, **kwargs: Handler(*args, directory=sys.argv[1], **kwargs)
-          http.server.ThreadingHTTPServer(("127.0.0.1", 18765), handler).serve_forever()
-          PY
-          "$SMOKE_ROOT/venv/bin/python" "$SMOKE_ROOT/asset_server.py" "$SMOKE_ROOT/asset-origin" &
-          ASSET_SERVER_PID=$!
-          trap 'kill "$ASSET_SERVER_PID" 2>/dev/null || true' EXIT
-          for _attempt in {1..20}; do
-            if curl --fail --silent http://127.0.0.1:18765/probe.txt >/dev/null; then break; fi
-            sleep 0.25
-          done
-          curl --fail --silent http://127.0.0.1:18765/probe.txt >/dev/null
-
-          # The installed launcher must supply absolute wheel-venv uv, Python,
-          # and frontend paths to the Rust binary. Deliberately omit ambient
-          # uv, node, and bare python so this cannot accidentally pass by
-          # resolving a developer tool from the runner image.
-          cd "$SMOKE_ROOT"
-          env -i \
-            HOME="$SMOKE_ROOT/home" \
-            PATH="/usr/bin:/bin:/usr/sbin:/sbin" \
-            /bin/bash -ceu '
-              for tool in uv node python; do
-                if command -v "$tool" >/dev/null 2>&1; then
-                  echo "unexpected ambient $tool on restricted PATH" >&2
-                  exit 1
-                fi
-              done
-            '
-          env -i \
-            HOME="$SMOKE_ROOT/home" \
-            PATH="/usr/bin:/bin:/usr/sbin:/sbin" \
-            "$SMOKE_ROOT/venv/bin/fastled" "$SMOKE_ROOT/sketch" \
-              --check \
-              --test-wait-secs=2 \
-              --test-timeout-secs=240 \
-              --test-ready-timeout-secs=45 \
-              --test-screenshot="$SMOKE_ROOT/artifacts/screenmap.png" \
-              --test-log="$SMOKE_ROOT/artifacts/viewer.log"
-          grep -F "Asset 'data/probe.txt' sha256 verified" "$SMOKE_ROOT/artifacts/viewer.log"
-          grep -F "All 1 filesystem asset(s) loaded completely before setup()." "$SMOKE_ROOT/artifacts/viewer.log"
-          "$SMOKE_ROOT/venv/bin/python" - "$SMOKE_ROOT/artifacts/screenmap.png" <<'PY'
-          from pathlib import Path
-          import sys
-
-          image = Path(sys.argv[1]).read_bytes()
-          if image[:8] != b"\x89PNG\r\n\x1a\n":
-              raise SystemExit("viewer screenshot is not a PNG")
-          if image[12:16] != b"IHDR" or len(image) < 24:
-              raise SystemExit("viewer screenshot is missing its IHDR header")
-          width = int.from_bytes(image[16:20], "big")
-          height = int.from_bytes(image[20:24], "big")
-          if width <= 0 or height <= 0:
-              raise SystemExit(f"viewer screenshot has invalid dimensions: {width}x{height}")
-          PY
+        run: bash ci/smoke_installed_wheel.sh
 
       - name: Upload installed wheel viewer screenshot
         if: always() && inputs.wheel-smoke

.github/workflows/macos-arm-build.yml

@@ -3,7 +3,8 @@ name: macOS ARM Build
 on:
   push:
     branches: [main]
-  pull_request:
+  # Pull requests run macos-arm-live-test.yml instead: it cross-compiles on
+  # Linux and holds a macOS runner only to execute the result.
   workflow_dispatch:
 
 # One live run per workflow per ref: a new push to a branch or PR cancels the

.github/workflows/macos-arm-integration-test.yml

@@ -3,7 +3,8 @@ name: macOS ARM Integration Test
 on:
   push:
     branches: [main]
-  pull_request:
+  # Pull requests run macos-arm-live-test.yml instead: it cross-compiles on
+  # Linux and holds a macOS runner only to execute the result.
   workflow_dispatch:
 
 # One live run per workflow per ref: a new push to a branch or PR cancels the

.github/workflows/macos-arm-lint.yml

@@ -3,7 +3,8 @@ name: macOS ARM Lint
 on:
   push:
     branches: [main]
-  pull_request:
+  # Pull requests run macos-arm-live-test.yml instead: it cross-compiles on
+  # Linux and holds a macOS runner only to execute the result.
   workflow_dispatch:
 
 # One live run per workflow per ref: a new push to a branch or PR cancels the

.github/workflows/macos-arm-live-test.yml

@@ -0,0 +1,161 @@
+name: macOS ARM Live Test
+
+# Apple Silicon coverage for pull requests without compiling on a Mac.
+#
+# `cross-build` produces everything on Linux through Soldr's cross toolchain
+# (bundled LLVM plus the managed macOS SDK):
+# - the release `fastled` binary,
+# - the macOS wheel that bundles it,
+# - a nextest archive of the workspace's Rust tests.
+#
+# `run-on-macos` holds the macos-15 runner only to execute them:
+# - the Rust test archive,
+# - the installed wheel's live render in the shipped WKWebView viewer,
+# - a real Safari smoke test of the same compiled sketch.
+#
+# The native macOS build/lint/test workflows no longer run on pull requests;
+# they still run on main pushes and manual dispatch.
+# #251 tracks moving the execution into a docker-mac-x64 guest on Linux.
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+# One live run per workflow per ref: a new push to a branch or PR cancels the
+# superseded run instead of queuing behind it in the shared account-wide runner
+# pool. Runs on main get a unique group, so they are never cancelled or coalesced.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref == 'refs/heads/main' && github.run_id || github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
+env:
+  RUST_TARGET: aarch64-apple-darwin
+  TEST_ARCHIVE: fastled-macos-arm64-tests.tar.zst
+
+jobs:
+  cross-build:
+    runs-on: ubuntu-latest
+    timeout-minutes: 45
+    defaults:
+      run:
+        shell: bash
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+          python-version: "3.11.9"
+
+      - name: Install Python
+        run: uv python install "$UV_PYTHON"
+
+      # Same pin as kernal-api's Apple cross lanes. It installs a current
+      # Soldr with `soldr build --target` and the managed macOS SDK; the
+      # v0.9.62 action used elsewhere here pins Soldr 0.7.51 (see #158),
+      # which has neither.
+      - uses: zackees/setup-soldr@bb28e96d2dc32c058242f56722297caf1efcbd90
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+        with:
+          cache-key-suffix: macos-arm-live-cross
+          cross-targets: aarch64-apple-darwin
+          toolchain-file: rust-toolchain.toml
+          prebuild-deps-flags: ""
+
+      # setup.py always rebuilds the bundled binary with
+      # `soldr cargo build --release --bin fastled [--target $FASTLED_RUST_TARGET]`.
+      # Build with exactly that command first so its rebuild is a no-op. The
+      # explicit target also keeps host build scripts on the host linker.
+      - name: Cross-build the release fastled binary
+        run: soldr cargo build --release --bin fastled --target "$RUST_TARGET"
+
+      - name: Package the macOS wheel
+        env:
+          FASTLED_RUST_TARGET: ${{ env.RUST_TARGET }}
+        run: |
+          uv run --with "setuptools>=69" --with "wheel>=0.43" python setup.py bdist_wheel --plat-name macosx_11_0_arm64
+          # The bundled binary must be an arm64 Mach-O, not a host binary.
+          test "$(od -A n -t x1 -N 8 src/fastled/bin/fastled | tr -d ' \n')" = "cffaedfe0c000001"
+          ls -l dist/
+
+      - name: Archive the Rust tests for macOS
+        run: soldr cargo nextest archive --workspace --target "$RUST_TARGET" --archive-file "$TEST_ARCHIVE"
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: macos-arm-live-inputs
+          path: |
+            dist/*.whl
+            ${{ env.TEST_ARCHIVE }}
+          if-no-files-found: error
+          retention-days: 1
+
+  run-on-macos:
+    needs: cross-build
+    runs-on: macos-15
+    timeout-minutes: 40
+    defaults:
+      run:
+        shell: bash
+    env:
+      PYTHONIOENCODING: utf-8
+    steps:
+      # The checkout provides the test fixtures and smoke scripts, and the
+      # workspace the test archive is remapped onto. Nothing is compiled.
+      - uses: actions/checkout@v4
+
+      - uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+          python-version: "3.11.9"
+
+      - name: Install Python
+        run: uv python install "$UV_PYTHON"
+
+      - uses: actions/download-artifact@v4
+        with:
+          name: macos-arm-live-inputs
+          path: macos-arm-live-inputs
+
+      - name: Install cargo-nextest
+        run: |
+          mkdir -p "$HOME/.cargo/bin"
+          curl -LsSf https://get.nexte.st/latest/mac | tar zxf - -C "$HOME/.cargo/bin"
+          echo "$HOME/.cargo/bin" >> "$GITHUB_PATH"
+
+      - name: Run the cross-built Rust tests
+        # The frontend path is compiled in from the Linux builder
+        # (CARGO_MANIFEST_DIR); FASTLED_FRONTEND_DIR points tests at this
+        # checkout instead, the same override the installed wheel uses.
+        env:
+          FASTLED_FRONTEND_DIR: ${{ github.workspace }}/src/fastled/frontend
+        run: >-
+          cargo-nextest nextest run
+          --archive-file "macos-arm-live-inputs/$TEST_ARCHIVE"
+          --workspace-remap .
+
+      # The render and Safari checks still run when a Rust test fails, so one
+      # cycle reports every macOS result.
+      - name: Enable Safari automation
+        if: ${{ !cancelled() }}
+        run: sudo safaridriver --enable
+
+      - name: Live viewer render and Safari smoke of the installed wheel
+        if: ${{ !cancelled() }}
+        env:
+          FASTLED_SAFARI_SMOKE: "1"
+        run: |
+          mkdir -p dist
+          cp macos-arm-live-inputs/dist/*.whl dist/
+          bash ci/smoke_installed_wheel.sh
+
+      - name: Upload screenshots, logs and Safari state
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: macos-arm-live-results
+          path: ${{ runner.temp }}/fastled-wheel-smoke/artifacts/
+          if-no-files-found: warn

.github/workflows/macos-arm-unit-test.yml

@@ -3,7 +3,8 @@ name: macOS ARM Unit Test
 on:
   push:
     branches: [main]
-  pull_request:
+  # Pull requests run macos-arm-live-test.yml instead: it cross-compiles on
+  # Linux and holds a macOS runner only to execute the result.
   workflow_dispatch:
 
 # One live run per workflow per ref: a new push to a branch or PR cancels the

.github/workflows/macos-x86-build.yml

@@ -3,7 +3,8 @@ name: macOS x86 Build
 on:
   push:
     branches: [main]
-  pull_request:
+  # Pull requests run macos-arm-live-test.yml instead: it cross-compiles on
+  # Linux and holds a macOS runner only to execute the result.
   workflow_dispatch:
 
 # One live run per workflow per ref: a new push to a branch or PR cancels the

.github/workflows/macos-x86-integration-test.yml

@@ -3,7 +3,8 @@ name: macOS x86 Integration Test
 on:
   push:
     branches: [main]
-  pull_request:
+  # Pull requests run macos-arm-live-test.yml instead: it cross-compiles on
+  # Linux and holds a macOS runner only to execute the result.
   workflow_dispatch:
 
 # One live run per workflow per ref: a new push to a branch or PR cancels the

.github/workflows/macos-x86-lint.yml

@@ -3,7 +3,8 @@ name: macOS x86 Lint
 on:
   push:
     branches: [main]
-  pull_request:
+  # Pull requests run macos-arm-live-test.yml instead: it cross-compiles on
+  # Linux and holds a macOS runner only to execute the result.
   workflow_dispatch:
 
 # One live run per workflow per ref: a new push to a branch or PR cancels the

.github/workflows/macos-x86-unit-test.yml

@@ -3,7 +3,8 @@ name: macOS x86 Unit Test
 on:
   push:
     branches: [main]
-  pull_request:
+  # Pull requests run macos-arm-live-test.yml instead: it cross-compiles on
+  # Linux and holds a macOS runner only to execute the result.
   workflow_dispatch:
 
 # One live run per workflow per ref: a new push to a branch or PR cancels the