Merge main into dev

.claude/skills/quest-audit/SKILL.md

@@ -0,0 +1,7 @@
+---
+name: quest-audit
+description: Audit outstanding quests for disagreements, conflicts, misaligned priorities, and stale plans, then resolve them with /quest-plan. Use when the user invokes /quest-audit or asks to check the quest tree for consistency.
+---
+
+Run `quest skill audit` and follow its output.
+If `quest` is not installed, follow https://github.com/kixelated/quest/blob/main/SETUP.md first.

.claude/skills/quest-convert/SKILL.md

@@ -0,0 +1,7 @@
+---
+name: quest-convert
+description: Convert Github issues to quests.
+---
+
+Run `quest skill convert` and follow its output.
+If `quest` is not installed, follow https://github.com/kixelated/quest/blob/main/SETUP.md first.

.claude/skills/quest-delete/SKILL.md

@@ -0,0 +1,7 @@
+---
+name: quest-delete
+description: Abandon a quest.
+---
+
+Run `quest skill delete` and follow its output.
+If `quest` is not installed, follow https://github.com/kixelated/quest/blob/main/SETUP.md first.

.claude/skills/quest-finish/SKILL.md

@@ -0,0 +1,7 @@
+---
+name: quest-finish
+description: Decide which open PRs to merge, then merge them in parallel.
+---
+
+Run `quest skill finish` and follow its output.
+If `quest` is not installed, follow https://github.com/kixelated/quest/blob/main/SETUP.md first.

.claude/skills/quest-merge/SKILL.md

@@ -0,0 +1,7 @@
+---
+name: quest-merge
+description: Merge a quest once reviews and CI pass.
+---
+
+Run `quest skill merge` and follow its output.
+If `quest` is not installed, follow https://github.com/kixelated/quest/blob/main/SETUP.md first.

.claude/skills/quest-plan/SKILL.md

@@ -0,0 +1,7 @@
+---
+name: quest-plan
+description: Scope and create quests through an interactive interview. Use when the user invokes /quest-plan, asks to plan a quest, or wants unsettled work split into quests.
+---
+
+Run `quest skill plan` and follow its output.
+If `quest` is not installed, follow https://github.com/kixelated/quest/blob/main/SETUP.md first.

.claude/skills/quest-spawn/SKILL.md

@@ -0,0 +1,7 @@
+---
+name: quest-spawn
+description: Start multiple quests in parallel.
+---
+
+Run `quest skill spawn` and follow its output.
+If `quest` is not installed, follow https://github.com/kixelated/quest/blob/main/SETUP.md first.

.claude/skills/quest-start/SKILL.md

@@ -0,0 +1,7 @@
+---
+name: quest-start
+description: Start work on a quest.
+---
+
+Run `quest skill start` and follow its output.
+If `quest` is not installed, follow https://github.com/kixelated/quest/blob/main/SETUP.md first.

.github/actions/rust-cache/action.yml

@@ -38,8 +38,8 @@ runs:
         # even though it is kept in sync with the flake.
         #
         # Every segment the generated layout carries has to be carried here too:
-        # the runner pair, so the two architectures the warm job builds cannot
-        # read each other, and `target`, so changing `github-cache-mode` cannot
+        # the runner pair, so a job on an x86 runner cannot restore the ARM64
+        # store, and `target`, so changing `github-cache-mode` cannot
         # restore the other payload. The trailing run id rolls the key on every
         # run, which is what lets a repeated `workflow_dispatch` seed a cold
         # cache against GitHub's immutable entries.

.github/workflows/alert.yml

@@ -18,13 +18,14 @@ on:
   workflow_run:
     # Matched by workflow `name:`, not filename. Every workflow that can run
     # outside a pull request belongs here; the pull-request-only ones (Check,
-    # macOS, Windows) are omitted so they don't spawn a skipped Alert run on
-    # every push to every PR. `just gh check` enforces both halves of that.
+    # Android) are omitted so they don't spawn a skipped Alert run on every
+    # push to every PR. `just gh check` enforces both halves of that.
     #
-    # Swift is here despite also running on pull requests: it warms its own
-    # Rust cache on `main`, and that push run is nobody's check, so a break in
-    # it would otherwise go unseen. The cost is a skipped Alert run per Swift
-    # pull request.
+    # Swift and Platform are here despite also running on pull requests: Swift
+    # warms its own Rust cache on `main`, and Platform compiles every merge to
+    # `main` and `dev`. Those push runs are nobody's check, so a break in them
+    # would otherwise go unseen. The cost is a skipped Alert run per pull
+    # request.
     workflows:
       - apt-repo
       - Cache
@@ -36,6 +37,7 @@ on:
       - moq-gst
       - moq-relay
       - Nightly
+      - Platform
       - release-brew
       - Release Dart
       - Release Dart FFI

.github/workflows/android.yml

@@ -74,8 +74,15 @@ jobs:
 
       # No Rust cache: this workflow only runs on pull requests, which may not
       # save one, so it would have nothing to restore.
-      - name: Install just and cargo-ndk
-        run: cargo install --locked "just@$JUST_VERSION" "cargo-ndk@$CARGO_NDK_VERSION"
+      - name: Install cargo-ndk
+        run: cargo install --locked "cargo-ndk@$CARGO_NDK_VERSION"
+
+      # A checksummed release binary, where `cargo install` would spend ~2 minutes
+      # building just from source.
+      - name: Install just
+        uses: taiki-e/install-action@4cef1412cce204788f482e778a0b9187f9626a29 # v2.87.21
+        with:
+          tool: just@${{ env.JUST_VERSION }}
 
       - name: Check
         run: just rs android

.github/workflows/cache.yml

@@ -5,8 +5,14 @@ name: Cache
 #
 # Actions scopes cache reads to the current branch plus the default branch, so
 # only caches written here on `main` are reachable from a pull request. This
-# workflow is therefore the single trusted writer, with one store per runner
-# architecture. The action refuses to publish from a pull request regardless.
+# workflow is therefore the single trusted writer. The action refuses to publish
+# from a pull request regardless.
+#
+# The Rust store is ARM64 only, because every job that restores it runs there.
+# Each store is about 6 GB against the repository's 10 GB budget, and Actions
+# evicts least recently used first, so an x86 store nobody on a pull request
+# read was enough to push out the one they all do. The x86 leg still pushes its
+# dev shell, which the x86 jobs substitute.
 #
 # This runs the unscoped suite rather than the diff-scoped one: the point is to
 # leave artifacts for whatever a future PR happens to touch, not to check `main`
@@ -45,13 +51,17 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        runner: [ubuntu-24.04-arm, ubuntu-latest]
+        include:
+          - runner: ubuntu-24.04-arm
+            rust: true
+          - runner: ubuntu-latest
+            rust: false
     runs-on: ${{ matrix.runner }}
     timeout-minutes: 60
 
     steps:
       - name: Free disk space
-        uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # main
+        uses: jlumbroso/free-disk-space@ceedf095f4ec1a097402bc6bd80831f2e1a6fde6 # main
         with:
           tool-cache: false
 
@@ -96,6 +106,7 @@ jobs:
       # `workflow_dispatch` above prime a cold store; the action otherwise saves
       # only on pushes to the default branch.
       - name: Rust cache
+        if: matrix.rust
         uses: ./.github/actions/rust-cache
         with:
           save-on-dispatch: true
@@ -104,12 +115,13 @@ jobs:
       # and the test artifacts (codegen + linked test binaries). They share
       # little, and a PR usually needs both.
       - name: Check
+        if: matrix.rust
         run: nix develop --command just ci check --all
         env:
           MOQ_STRICT: 1
 
       - name: Test
-        if: ${{ !cancelled() }}
+        if: ${{ matrix.rust && !cancelled() }}
         run: nix develop --command just ci test --all
         env:
           MOQ_STRICT: 1