feat: complete release readiness hardening

Author: robertvokac

.github/workflows/ci.yml

@@ -1,11 +1,12 @@
 # MeshCraft CI.
 #
-# Scope: this skeleton builds and tests the CNA-independent libraries
+# Scope: Linux and Windows jobs build and test the CNA-independent libraries
 # (mc3, mcb, mc3togltf, mc3tomcb) as standalone CMake projects. These have no
-# CNA / SDL3 / OpenGL / ImGui dependency, so they cover the format/export tests
-# but NOT the editor (render/smoke/registry/ai/commands) tests. For the exact
-# live counts run `ctest -N` — they are deliberately not hard-coded here so this
-# comment cannot go stale (it did before: it claimed 66 tests / 46 covered).
+# CNA / SDL3 / OpenGL / ImGui dependency, so they cover format/export tests but
+# NOT editor (render/smoke/registry/ai/commands) tests. The Windows job also
+# publishes only CLI binaries that passed the deterministic cross-platform
+# fixture. For exact live counts run `ctest -N`; they are deliberately not
+# hard-coded here.
 #
 # The editor job below checks out the two required sibling repositories beside
 # this checkout, exactly matching the root CMake project layout
@@ -74,6 +75,128 @@ jobs:
       - name: Test
         run: ctest --test-dir build --output-on-failure -j2
 
+  standalone-windows:
+    name: Standalone Windows qualification
+    runs-on: windows-2022
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      # Each standalone component owns a FetchContent tree. Cache all four
+      # without checking out CNA or sharp-runtime: this qualification must
+      # remain independent of the editor backend blockers.
+      - name: Cache CMake FetchContent downloads
+        uses: actions/cache@v4
+        with:
+          path: build/*/_deps
+          key: ${{ runner.os }}-standalone-fetchcontent-${{ hashFiles('mc3/CMakeLists.txt', 'mcb/CMakeLists.txt', 'mc3togltf/CMakeLists.txt', 'mc3tomcb/CMakeLists.txt') }}
+          restore-keys: |
+            ${{ runner.os }}-standalone-fetchcontent-
+
+      - name: Configure, build, and test every standalone component
+        shell: pwsh
+        run: |
+          $components = @('mc3', 'mcb', 'mc3togltf', 'mc3tomcb')
+          foreach ($component in $components) {
+            $buildDir = "build/$component"
+            cmake -S $component -B $buildDir -G Ninja `
+              -DCMAKE_BUILD_TYPE=Release -DBUILD_TESTING=ON
+            cmake --build $buildDir --parallel 2
+            ctest --test-dir $buildDir --output-on-failure --parallel 2
+          }
+
+      - name: Verify deterministic CLI fixture before publishing
+        shell: pwsh
+        run: >
+          python test/cross_platform_cli_fixture_test.py
+          build/mc3tomcb/mc3tomcb.exe
+          build/mc3togltf/mc3togltf.exe
+          test/house.mc3.xml
+          build/cli-cross-platform-fixture
+
+      - name: Publish qualified Windows CLI artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: meshcraft-cli-windows
+          if-no-files-found: error
+          path: |
+            build/mc3tomcb/mc3tomcb.exe
+            build/mc3togltf/mc3togltf.exe
+
+  sanitizers-and-fuzz:
+    name: Clang ASan+UBSan and bounded fuzz
+    runs-on: ubuntu-24.04
+    env:
+      CC: clang
+      CXX: clang++
+      ASAN_OPTIONS: detect_leaks=1:halt_on_error=1
+      UBSAN_OPTIONS: halt_on_error=1:print_stacktrace=1
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install build dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends \
+            clang cmake ninja-build ccache python3 zlib1g-dev
+
+      # The sanitizer and fuzz configurations reuse their component-local
+      # FetchContent trees. The key covers every standalone component because
+      # mc3 is a transitive dependency of three of them.
+      - name: Cache CMake FetchContent downloads
+        uses: actions/cache@v4
+        with:
+          path: |
+            build-sanitize/mc3/_deps
+            build-sanitize/mcb/_deps
+            build-sanitize/mc3togltf/_deps
+            build-sanitize/mc3tomcb/_deps
+          key: ${{ runner.os }}-clang-sanitize-fetchcontent-${{ hashFiles('mc3/CMakeLists.txt', 'mcb/CMakeLists.txt', 'mc3togltf/CMakeLists.txt', 'mc3tomcb/CMakeLists.txt') }}
+          restore-keys: |
+            ${{ runner.os }}-clang-sanitize-fetchcontent-
+
+      - name: Configure, build, and test all standalone components under ASan+UBSan
+        run: |
+          sanitize_flags='-fsanitize=address,undefined -fno-omit-frame-pointer -g'
+          for component in mc3 mcb mc3togltf mc3tomcb; do
+            build_dir="build-sanitize/$component"
+            cmake -S "$component" -B "$build_dir" -G Ninja \
+              -DCMAKE_BUILD_TYPE=Debug \
+              -DBUILD_TESTING=ON \
+              -DCMAKE_CXX_COMPILER_LAUNCHER=ccache \
+              -DCMAKE_CXX_FLAGS="$sanitize_flags" \
+              -DCMAKE_EXE_LINKER_FLAGS="$sanitize_flags"
+            cmake --build "$build_dir" -j2
+            ctest --test-dir "$build_dir" --output-on-failure -j2
+          done
+
+      - name: Build bounded libFuzzer targets
+        run: |
+          for component in mc3 mcb mc3togltf; do
+            cmake -S "$component" -B "build-sanitize/$component" \
+              -DMESHCRAFT_FUZZ=ON
+          done
+          cmake --build build-sanitize/mc3 --target mc3_xml_libfuzzer mc3_json_libfuzzer -j2
+          cmake --build build-sanitize/mcb --target mcb_libfuzzer -j2
+          cmake --build build-sanitize/mc3togltf --target mc3togltf_glb_libfuzzer -j2
+
+      - name: Run corpus-seeded fuzz smoke tests
+        run: |
+          mkdir -p build-sanitize/fuzz-corpus/mcb build-sanitize/fuzz-corpus/glb
+          build-sanitize/mc3tomcb/mc3tomcb \
+            mc3/test/fuzz/corpus/xml/basic_scene.mc3.xml \
+            build-sanitize/fuzz-corpus/mcb/basic_scene.mcb
+          build-sanitize/mc3togltf/mc3togltf \
+            mc3togltf/test/golden/basic_scene.mc3.xml \
+            build-sanitize/fuzz-corpus/glb/basic_scene.glb
+          python3 test/run_fuzz_smoke.py --seconds 20 --rss-mib 512 \
+            --work-dir build-sanitize/fuzz-work \
+            --target build-sanitize/mc3/mc3_xml_libfuzzer mc3/test/fuzz/corpus/xml \
+            --target build-sanitize/mc3/mc3_json_libfuzzer mc3/test/fuzz/corpus/json \
+            --target build-sanitize/mcb/mcb_libfuzzer build-sanitize/fuzz-corpus/mcb \
+            --target build-sanitize/mc3togltf/mc3togltf_glb_libfuzzer build-sanitize/fuzz-corpus/glb
+
   editor:
     name: Editor (${{ matrix.backend }})
     runs-on: ubuntu-24.04

CMakeLists.txt

@@ -2,6 +2,7 @@ cmake_minimum_required(VERSION 3.21)
 project(MeshCraft VERSION 0.1.0 LANGUAGES C CXX)
 
 include(CTest)
+include(GNUInstallDirs)
 
 message(STATUS "Project: ${PROJECT_NAME}")
 message(STATUS "Platform: ${CMAKE_SYSTEM_NAME}")
@@ -366,6 +367,51 @@ FetchContent_MakeAvailable(sol2)
 # mc3togltf — MC3 to glTF/GLB export tool (uses Mc3 + tinyobjloader already fetched above)
 add_subdirectory(mc3togltf)
 
+# SYS-W11-05: build only the two standalone tools and their format libraries
+# before creating the relocatable release archive.  CPack's default `package`
+# target depends on the entire editor graph, which would make a CLI release
+# depend on unrelated CNA backends and tooling.  This target deliberately
+# uses the normal install rules but keeps its build dependency narrow.
+add_custom_target(meshcraft_cli_release
+    COMMAND "${CMAKE_COMMAND}"
+            "-DMC_RELEASE_BUILD_DIR=${CMAKE_BINARY_DIR}"
+            "-DMC_RELEASE_VERSION=${PROJECT_VERSION}"
+            "-DMC_RELEASE_SYSTEM=${CMAKE_SYSTEM_NAME}"
+            -P "${CMAKE_CURRENT_SOURCE_DIR}/cmake/CreateCliRelease.cmake"
+    DEPENDS mc3tomcb mc3togltf
+    COMMENT "Creating the relocatable MeshCraft CLI release archive")
+
+if(BUILD_TESTING)
+    add_test(
+        NAME package_consumer_smoke
+        COMMAND "${CMAKE_COMMAND}"
+                "-DMC_PACKAGE_BUILD_DIR=${CMAKE_BINARY_DIR}"
+                "-DMC_PACKAGE_SOURCE_DIR=${CMAKE_CURRENT_SOURCE_DIR}/test/cmake/package_consumer"
+                -P "${CMAKE_CURRENT_SOURCE_DIR}/test/cmake/package_consumer_smoke.cmake")
+    set_tests_properties(package_consumer_smoke PROPERTIES
+        TIMEOUT 60
+        LABELS "package")
+
+    # SYS-W11-06: fixed binary hashes produced from a checked-in scene are a
+    # compact cross-platform contract for both standalone CLI tools.  The
+    # Windows artifact job below runs the same source-backed fixture before
+    # publishing its executables.
+    find_program(MESHCRAFT_PYTHON3 NAMES python3 python)
+    if(MESHCRAFT_PYTHON3)
+        add_test(
+            NAME cli_cross_platform_fixture
+            COMMAND "${MESHCRAFT_PYTHON3}"
+                    "${CMAKE_CURRENT_SOURCE_DIR}/test/cross_platform_cli_fixture_test.py"
+                    "$<TARGET_FILE:mc3tomcb>"
+                    "$<TARGET_FILE:mc3togltf>"
+                    "${CMAKE_CURRENT_SOURCE_DIR}/test/house.mc3.xml"
+                    "${CMAKE_BINARY_DIR}/cli-cross-platform-fixture")
+        set_tests_properties(cli_cross_platform_fixture PROPERTIES
+            TIMEOUT 30
+            LABELS "export;portability")
+    endif()
+endif()
+
 # SQLite3 — model registry persistence (desktop builds only). Optional,
 # not REQUIRED: ModelRegistry.cpp's MESHCRAFT_HAS_SQLITE3 guard already
 # provides safe no-op stubs for its absence (STAB-0008/0366/0552/0563),
@@ -382,9 +428,25 @@ if(NOT EMSCRIPTEN AND NOT ANDROID)
     endif()
 endif()
 
+# mc3togltf is linked against these shared third-party libraries in the
+# default desktop build.  Ship their runtime files in the same release
+# component so the CLI archive is usable outside the build tree.
+foreach(MESHCRAFT_CLI_RUNTIME_TARGET IN ITEMS manifold tinyobjloader)
+    if(TARGET ${MESHCRAFT_CLI_RUNTIME_TARGET})
+        install(TARGETS ${MESHCRAFT_CLI_RUNTIME_TARGET}
+                ARCHIVE DESTINATION "${CMAKE_INSTALL_LIBDIR}" COMPONENT release
+                LIBRARY DESTINATION "${CMAKE_INSTALL_LIBDIR}" COMPONENT release
+                RUNTIME DESTINATION "${CMAKE_INSTALL_BINDIR}" COMPONENT release)
+    endif()
+endforeach()
+
 # cpp-httplib + OpenSSL — AI Assistant (desktop builds only)
 if(NOT EMSCRIPTEN AND NOT ANDROID)
     set(HTTPLIB_USE_BROTLI_IF_AVAILABLE OFF CACHE BOOL "" FORCE)
+    # MeshCraft packages its own CLI and format-library surface.  Do not let
+    # this FetchContent-only editor dependency add an unrelated install tree
+    # or invoke CPack with its defaults.
+    set(HTTPLIB_INSTALL OFF CACHE BOOL "" FORCE)
     FetchContent_Declare(httplib
         GIT_REPOSITORY https://github.com/yhirose/cpp-httplib.git
         GIT_TAG        v0.18.3
@@ -625,10 +687,23 @@ if(MESH_CRAFT_BUILD_TESTING AND UNIX AND NOT ANDROID AND NOT EMSCRIPTEN)
     target_include_directories(coordinate_system_test PRIVATE
         ${CMAKE_CURRENT_SOURCE_DIR}/include
         ${CMAKE_CURRENT_SOURCE_DIR}/mc3/include)
+    target_link_libraries(coordinate_system_test PRIVATE Mc3)
     target_compile_features(coordinate_system_test PRIVATE cxx_std_23)
     add_test(NAME coordinate_system COMMAND coordinate_system_test)
     set_tests_properties(coordinate_system PROPERTIES TIMEOUT 15 LABELS "unit")
 
+    # SYS-W5-06: document-level degrees/radians and all six Euler orders are
+    # interpreted by one CNA-free helper shared with mc3togltf. The test also
+    # locks the degrees/XYZ normalization math used by the explicit command.
+    add_executable(rotation_convention_algorithms_test
+        ${CMAKE_CURRENT_SOURCE_DIR}/test/rotation_convention_algorithms_test.cpp)
+    target_include_directories(rotation_convention_algorithms_test PRIVATE
+        ${CMAKE_CURRENT_SOURCE_DIR}/include)
+    target_compile_features(rotation_convention_algorithms_test PRIVATE cxx_std_23)
+    target_compile_options(rotation_convention_algorithms_test PRIVATE -Wall -Wextra)
+    add_test(NAME rotation_convention_algorithms COMMAND rotation_convention_algorithms_test)
+    set_tests_properties(rotation_convention_algorithms PROPERTIES TIMEOUT 15 LABELS "unit")
+
     # SYS-W3-01: Editor::KeybindingManager, extracted from
     # MeshCraftApplication (H9). No test existed for this subsystem before
     # the extraction. Needs real Microsoft::Xna::Framework::Input::Keys/
@@ -787,7 +862,8 @@ if(MESH_CRAFT_BUILD_TESTING AND UNIX AND NOT ANDROID AND NOT EMSCRIPTEN)
     # be tested without an editor window.
     add_executable(scene_history_test
         ${CMAKE_CURRENT_SOURCE_DIR}/test/scene_history_test.cpp
-        ${CMAKE_CURRENT_SOURCE_DIR}/src/MeshCraft/Editor/SceneHistory.cpp)
+        ${CMAKE_CURRENT_SOURCE_DIR}/src/MeshCraft/Editor/SceneHistory.cpp
+        ${CMAKE_CURRENT_SOURCE_DIR}/src/MeshCraft/Editor/UndoManager.cpp)
     target_include_directories(scene_history_test PRIVATE
         ${CMAKE_CURRENT_SOURCE_DIR}/include
         ${CMAKE_CURRENT_SOURCE_DIR}/mc3/include)
@@ -813,6 +889,35 @@ if(MESH_CRAFT_BUILD_TESTING AND UNIX AND NOT ANDROID AND NOT EMSCRIPTEN)
     add_test(NAME registry_insert_undo COMMAND registry_insert_undo_test)
     set_tests_properties(registry_insert_undo PROPERTIES TIMEOUT 15 LABELS "unit")
 
+    # SYS-W3-03: RegistryWorkspace owns registry dialog lifecycle without
+    # pulling MeshCraftApplication or ImGui into the controller-level test.
+    add_executable(registry_workspace_test
+        ${CMAKE_CURRENT_SOURCE_DIR}/test/registry_workspace_test.cpp
+        ${CMAKE_CURRENT_SOURCE_DIR}/src/MeshCraft/Application/RegistryWorkspace.cpp
+        ${CMAKE_CURRENT_SOURCE_DIR}/src/MeshCraft/ModelRegistry.cpp)
+    target_include_directories(registry_workspace_test PRIVATE
+        ${CMAKE_CURRENT_SOURCE_DIR}/include
+        ${CMAKE_CURRENT_SOURCE_DIR}/src/MeshCraft)
+    target_link_libraries(registry_workspace_test PRIVATE Mc3)
+    target_compile_features(registry_workspace_test PRIVATE cxx_std_23)
+    add_test(NAME registry_workspace COMMAND registry_workspace_test)
+    set_tests_properties(registry_workspace PROPERTIES TIMEOUT 15 LABELS "unit;registry")
+
+    # SYS-W3-04: Scripts/Triggers/States/Events now share one CNA-free
+    # automation workspace. Its transient selection/preview lifecycle and
+    # state-application semantics remain testable without an ImGui window.
+    add_executable(automation_workspace_test
+        ${CMAKE_CURRENT_SOURCE_DIR}/test/automation_workspace_test.cpp
+        ${CMAKE_CURRENT_SOURCE_DIR}/src/MeshCraft/Application/AutomationWorkspace.cpp
+        ${CMAKE_CURRENT_SOURCE_DIR}/src/MeshCraft/Editor/LuaScriptRunner.cpp)
+    target_include_directories(automation_workspace_test PRIVATE
+        ${CMAKE_CURRENT_SOURCE_DIR}/include
+        ${CMAKE_CURRENT_SOURCE_DIR}/mc3/include)
+    target_link_libraries(automation_workspace_test PRIVATE Mc3 lua54 sol2::sol2)
+    target_compile_features(automation_workspace_test PRIVATE cxx_std_23)
+    add_test(NAME automation_workspace COMMAND automation_workspace_test)
+    set_tests_properties(automation_workspace PROPERTIES TIMEOUT 15 LABELS "unit;automation")
+
     # SYS-W3-01 Phase 6: Editor::WalkController, extracted from
     # MeshCraftApplication (H15, first-person walk mode). No test existed
     # for this subsystem before the extraction. Needs real
@@ -928,7 +1033,7 @@ if(MESH_CRAFT_BUILD_TESTING AND UNIX AND NOT ANDROID AND NOT EMSCRIPTEN)
     target_include_directories(lua_script_runner_test PRIVATE
         ${CMAKE_CURRENT_SOURCE_DIR}/include
         ${CMAKE_CURRENT_SOURCE_DIR}/mc3/include)
-    target_link_libraries(lua_script_runner_test PRIVATE lua54 sol2::sol2)
+    target_link_libraries(lua_script_runner_test PRIVATE Mc3 lua54 sol2::sol2)
     target_compile_features(lua_script_runner_test PRIVATE cxx_std_23)
     add_test(NAME lua_script_runner COMMAND lua_script_runner_test)
     set_tests_properties(lua_script_runner PROPERTIES TIMEOUT 30 LABELS "unit")
@@ -1122,7 +1227,7 @@ if(MESH_CRAFT_BUILD_TESTING AND UNIX AND NOT ANDROID AND NOT EMSCRIPTEN)
     target_include_directories(trigger_fire_test PRIVATE
         ${CMAKE_CURRENT_SOURCE_DIR}/include
         ${CMAKE_CURRENT_SOURCE_DIR}/mc3/include)
-    target_link_libraries(trigger_fire_test PRIVATE lua54 sol2::sol2)
+    target_link_libraries(trigger_fire_test PRIVATE Mc3 lua54 sol2::sol2)
     target_compile_features(trigger_fire_test PRIVATE cxx_std_23)
     add_test(NAME trigger_fire COMMAND trigger_fire_test)
     set_tests_properties(trigger_fire PROPERTIES TIMEOUT 15 LABELS "unit")
@@ -1153,6 +1258,20 @@ if(MESH_CRAFT_BUILD_TESTING AND UNIX AND NOT ANDROID AND NOT EMSCRIPTEN)
     add_test(NAME event_binding_dispatch COMMAND event_binding_dispatch_test)
     set_tests_properties(event_binding_dispatch PROPERTIES TIMEOUT 15 LABELS "unit")
 
+    # SYS-W14-40: explicit Preview/Play turns dry-run binding eligibility into
+    # an atomic batch.  This CNA-free test covers Area enter/exit, timer
+    # bounds, click dispatch, state application, and failed-script rollback.
+    add_executable(event_preview_runner_test
+        ${CMAKE_CURRENT_SOURCE_DIR}/test/event_preview_runner_test.cpp
+        ${CMAKE_CURRENT_SOURCE_DIR}/src/MeshCraft/Editor/LuaScriptRunner.cpp)
+    target_include_directories(event_preview_runner_test PRIVATE
+        ${CMAKE_CURRENT_SOURCE_DIR}/include
+        ${CMAKE_CURRENT_SOURCE_DIR}/mc3/include)
+    target_link_libraries(event_preview_runner_test PRIVATE Mc3 lua54 sol2::sol2)
+    target_compile_features(event_preview_runner_test PRIVATE cxx_std_23)
+    add_test(NAME event_preview_runner COMMAND event_preview_runner_test)
+    set_tests_properties(event_preview_runner PROPERTIES TIMEOUT 15 LABELS "unit")
+
     # SYS-W14-21 (2026-07-20): the Imports tab's new "Resolve Imports" button
     # and the automatic post-load resolution -- resolveImports() wires the
     # already-tested Mc3ImportResolver (R101) into the editor. CNA-free
@@ -1258,6 +1377,15 @@ if(MESH_CRAFT_BUILD_TESTING AND UNIX AND NOT ANDROID AND NOT EMSCRIPTEN)
                          "${CMAKE_BINARY_DIR}")
         set_tests_properties(plan_consistency PROPERTIES TIMEOUT 30 LABELS "lint")
 
+        # SYS-W13-02: bounded documentation/source drift detector. It protects
+        # a few claims that were demonstrably stale without turning volatile
+        # test totals or broad prose into a fragile static assertion suite.
+        add_test(NAME capability_documentation
+                 COMMAND "${PYTHON3_FOR_LINT}"
+                         "${CMAKE_CURRENT_SOURCE_DIR}/test/validate_capability_documentation.py"
+                         "${CMAKE_CURRENT_SOURCE_DIR}")
+        set_tests_properties(capability_documentation PROPERTIES TIMEOUT 30 LABELS "lint")
+
         # SYS-W5-01: machine-readable cross-layer MC3 field matrix. Extracts
         # field/attribute names from XSD, the C++ model, the XML reader/
         # writer, and the MCB reader/writer, and CI-fails if a field is
@@ -1282,15 +1410,15 @@ if(MESH_CRAFT_BUILD_TESTING AND UNIX AND NOT ANDROID AND NOT EMSCRIPTEN)
     )
     set_tests_properties(smoke_test PROPERTIES TIMEOUT 30 LABELS "render")
 
-    # SYS-W12-02: smoke test for the new `--benchmark` headless mode (see
+    # SYS-W12-02/03: smoke test for the new `--benchmark` headless mode (see
     # MeshCraftApplication_Benchmark.cpp) -- informational, same philosophy
     # as SYS-W12-01's own test/benchmark.py (checks it runs to completion
     # and prints every expected category, not that any timing is fast).
     add_test(
         NAME benchmark_editor
         COMMAND bash ${CMAKE_CURRENT_SOURCE_DIR}/test/benchmark_editor_test.sh
                 $<TARGET_FILE:MeshCraft>
-                ${CMAKE_CURRENT_SOURCE_DIR}/test/house.mc3.xml
+                ${CMAKE_CURRENT_SOURCE_DIR}/test/uv_buffer_cache_large.mc3.xml
         WORKING_DIRECTORY ${CMAKE_BINARY_DIR}
     )
     # This starts the editor and therefore needs an SDL video display even