feat(stage-a-a1): apply camera state through generic host sessions

.github/workflows/build-plugins.yml

@@ -0,0 +1,225 @@
+name: Build Plugins
+
+# Produces drop-in plugin folders for a machine that has no Rust toolchain: the
+# bench downloads a bundle, copies its folders into ~/.augur/plugins/, and hits
+# "Scan for New Plugins". Pull requests get workflow artifacts; main also
+# publishes a rolling release so the download needs no GitHub login.
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+  workflow_dispatch:
+    inputs:
+      augur_rs_ref:
+        description: "augur-rs ref to build against (branch, tag or SHA)"
+        required: false
+        default: 142ccb3877151a172979c2cec6a5efee599831d0
+
+concurrency:
+  group: build-plugins-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+env:
+  CARGO_TERM_COLOR: always
+  # The recording root API requires the paired host fix in augur-rs PR #53.
+  # Pin its tested commit for matching, reproducible host and plugin bundles.
+  AUGUR_RS_REF: ${{ inputs.augur_rs_ref || '142ccb3877151a172979c2cec6a5efee599831d0' }}
+
+jobs:
+  build:
+    name: ${{ matrix.name }}
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - os: macos-latest
+            name: macOS (arm64)
+            bundle: macos-arm64
+          - os: macos-15-intel
+            name: macOS (x86_64)
+            bundle: macos-x86_64
+          - os: ubuntu-latest
+            name: Linux (x86_64)
+            bundle: linux-x86_64
+          - os: windows-latest
+            name: Windows (x86_64)
+            bundle: windows-x86_64
+
+    defaults:
+      run:
+        # The repo drives its builds through two bash scripts; use the same
+        # shell on Windows so there is exactly one code path to reason about.
+        shell: bash
+
+    steps:
+      # This workspace depends on the host by path (../augur-rs/augur-core), so
+      # CI has to reproduce the two-sibling-checkout layout, not clone one repo.
+      - name: Check out augur-plugins
+        uses: actions/checkout@v5
+        with:
+          path: augur-plugins
+
+      - name: Check out augur-rs
+        uses: actions/checkout@v5
+        with:
+          repository: muthmann/augur-rs
+          ref: ${{ env.AUGUR_RS_REF }}
+          path: augur-rs
+
+      - name: Pin the host revision and disarm the source patch
+        run: |
+          echo "AUGUR_RS_SHA=$(git -C augur-rs rev-parse HEAD)" >> "$GITHUB_ENV"
+          # build-runtime-plugins.sh patches [patch."…/augur-rs.git"] whenever a
+          # sibling augur-rs *git checkout* exists. This workspace already
+          # depends on it by path, so that patch matches nothing in the crate
+          # graph — it only costs cargo a fetch of the checkout. Removing .git
+          # makes the script's detection fail and the path deps win outright.
+          rm -rf augur-rs/.git
+
+      - name: Resolve the pinned Rust toolchain
+        run: |
+          channel="$(sed -n 's/^channel *= *"\(.*\)"$/\1/p' augur-plugins/rust-toolchain.toml | head -n 1)"
+          if [[ -z "${channel}" ]]; then
+            echo "No channel found in augur-plugins/rust-toolchain.toml" >&2
+            exit 1
+          fi
+          echo "RUST_CHANNEL=${channel}" >> "$GITHUB_ENV"
+
+      - name: Install Rust toolchain
+        uses: actions-rust-lang/setup-rust-toolchain@v1
+        with:
+          toolchain: ${{ env.RUST_CHANNEL }}
+          cache-workspaces: augur-plugins
+          # The action injects RUSTFLAGS="-D warnings" by default. That is right
+          # for a lint job and wrong here: this job ships artifacts, and a dead-
+          # code warning in one plugin must not deny the bench a bundle for all
+          # of them. Lint gating belongs in its own job, not in the build.
+          rustflags: ""
+
+      - name: Install Linux system dependencies
+        if: runner.os == 'Linux'
+        # Only what the plugin crates actually link. augur-gui's own dependency
+        # script is deliberately not reused: it is a superset (X11/Wayland/GL for
+        # the GUI, which no plugin links) and it does not exist on every augur-rs
+        # revision this job can be pointed at, so borrowing it made the Linux
+        # build fail on the value of augur_rs_ref. serialport needs libudev.
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends pkg-config libudev-dev
+
+      - name: Test Stage-A acquisition and controller contracts
+        working-directory: augur-plugins
+        run: cargo test -p augur-plugin-stage-a-a1 -p augur-plugin-stage-a-a2 -p stage-a-step-acquisition -p augur-plugin-stage-a-modulation -p augur-plugin-stage-a-photodiode -p stage-a-io -p stage-a-plugin-contract
+
+      - name: Build runtime plugins
+        working-directory: augur-plugins
+        run: bash scripts/build-runtime-plugins.sh --profile release
+
+      - name: Stage installable plugin folders
+        working-directory: augur-plugins
+        run: bash scripts/install-built-plugins.sh --profile release --dest "dist/${{ matrix.bundle }}"
+
+      - name: Verify Windows runtime exports
+        if: runner.os == 'Windows'
+        working-directory: augur-plugins
+        shell: pwsh
+        run: ./scripts/check-windows-runtime-exports.ps1 -Root "dist/windows-x86_64"
+
+      - name: Set up Python for the lab watcher
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Test the independent lab watcher
+        working-directory: augur-plugins
+        run: python scripts/test_stage_a_watch.py
+
+      - name: Build the Windows lab watcher
+        if: runner.os == 'Windows'
+        working-directory: augur-plugins
+        run: |
+          python -m pip install pyinstaller==6.16.0
+          python -m PyInstaller --noconfirm --clean --onefile --name Laborwache \
+            --distpath dist/windows-x86_64/lab-watch --workpath target/lab-watch \
+            --specpath target scripts/stage_a_watch.py
+          cp docs/features/stage-a-lab-watch.md dist/windows-x86_64/lab-watch/README.md
+
+      - name: Write build provenance
+        working-directory: augur-plugins
+        run: |
+          {
+            echo "bundle:        ${{ matrix.bundle }}"
+            echo "built_at:      $(date -u +%Y-%m-%dT%H:%M:%SZ)"
+            echo "augur_plugins: $(git rev-parse HEAD)"
+            echo "augur_rs_ref:  ${AUGUR_RS_REF}"
+            echo "augur_rs_sha:  ${AUGUR_RS_SHA}"
+            echo "rustc:         $(rustc --version)"
+            echo
+            echo "Copy the plugin folders next to this file into ~/.augur/plugins/,"
+            echo "then use Plugins -> Scan for New Plugins in augur-gui."
+          } > "dist/${{ matrix.bundle }}/BUILD-INFO.txt"
+
+      - name: Upload plugin bundle
+        uses: actions/upload-artifact@v4
+        with:
+          name: augur-plugins-${{ matrix.bundle }}
+          path: augur-plugins/dist/${{ matrix.bundle }}
+          if-no-files-found: error
+
+  release:
+    name: Publish rolling release
+    needs: build
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+
+    steps:
+      - name: Download every plugin bundle
+        uses: actions/download-artifact@v4
+        with:
+          path: bundles
+          pattern: augur-plugins-*
+
+      - name: Package one archive per platform
+        run: |
+          set -euo pipefail
+          mkdir -p dist
+          for bundle_dir in bundles/augur-plugins-*/; do
+            bundle="$(basename "${bundle_dir%/}")"
+            (cd "${bundle_dir}" && zip -qr "${GITHUB_WORKSPACE}/dist/${bundle}.zip" .)
+            echo "Packaged ${bundle}.zip"
+          done
+          (cd dist && sha256sum ./*.zip > SHA256SUMS.txt)
+          ls -l dist
+
+      - name: Publish rolling release
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -euo pipefail
+          tag="plugins-latest"
+          # Delete and recreate rather than upload --clobber: it retags at the
+          # new commit and guarantees no asset from an older build survives.
+          gh release delete "${tag}" --yes --cleanup-tag || true
+          gh release create "${tag}" dist/* \
+            --title "Prebuilt plugins (latest main)" \
+            --notes "$(printf '%s\n' \
+              "Prebuilt AugurRS plugins, rebuilt on every push to \`main\`." \
+              "" \
+              "- augur-plugins: \`${GITHUB_SHA}\`" \
+              "- built against augur-rs \`${AUGUR_RS_REF}\`" \
+              "" \
+              "Download the archive for your platform, unpack it, and copy the" \
+              "plugin folders inside into \`~/.augur/plugins/\`. Then open augur-gui," \
+              "go to **Plugins**, and click **Scan for New Plugins**." \
+              "" \
+              "\`BUILD-INFO.txt\` in each archive records the exact revisions and" \
+              "compiler the libraries were built with. Verify downloads against" \
+              "\`SHA256SUMS.txt\`.")"

.gitignore

@@ -1,4 +1,5 @@
 /target
+/dist
 Cargo.lock
 *.swp
 *.swo

Cargo.toml

@@ -1,8 +1,17 @@
 [workspace]
 members = [
+  "evesmlm-types",
   "stage-a-io",
   "stage-a-plugin-contract",
+  "stage-a-sine-acquisition",
+  "stage-a-step-acquisition",
+  "stage-a-universal-runner",
+  "plugins/stage-a-universal-runner",
+  "plugins/stage-a-a5",
   "plugins/stage-a-a1",
+  "plugins/stage-a-a3",
+  "plugins/stage-a-a2",
+  "plugins/stage-a-a4",
   "plugins/stage-a-modulation",
   "plugins/stage-a-photodiode",
   "plugins/localization",
@@ -27,6 +36,7 @@ augur-core = { path = "../augur-rs/augur-core" }
 augur-plugin-api = { path = "../augur-rs/augur-plugin-api" }
 augur-plugin-types = { path = "../augur-rs/augur-plugin-types" }
 egui = "0.27"
+evesmlm-types = { path = "evesmlm-types" }
 rustfft = "6"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"

README.md

@@ -61,11 +61,37 @@ The plugin crates under `plugins/` are under active development and not yet read
 | `stage-a-modulation` | control service | Sole owner of the Stage-A Teensy command port and ACKed modulation state |
 | `stage-a-photodiode` | control service | Sole owner of the Stage-A stream port, PDA1 ingestion, and PDQ persistence |
 | `stage-a-a1` | `RawEvents` + orchestration | A1 protocol/schedule validation, raw phase quicklooks, analysis core, and a safety-gated commissioning run through the two owner services |
+| `stage-a-a3` | `RawEvents` + orchestration | Shared A1 recorder with A3 identity, simple protocol controls and offline threshold metadata |
 
 `plugin-template/` is the starting point for new plugin crates.
 
 ## Quick Start
 
+### Download Prebuilt Plugins (no toolchain needed)
+
+Every push to `main` publishes freshly built plugins for macOS (arm64 and x86_64),
+Linux and Windows to the rolling
+[`plugins-latest`](https://github.com/muthmann/augur-plugins/releases/tag/plugins-latest)
+release. This is the recommended route for a measurement machine.
+
+```bash
+curl -LO https://github.com/muthmann/augur-plugins/releases/download/plugins-latest/augur-plugins-macos-arm64.zip
+unzip augur-plugins-macos-arm64.zip -d augur-plugins-bundle
+mkdir -p ~/.augur/plugins
+cp -R augur-plugins-bundle/*/ ~/.augur/plugins/
+```
+
+Pick the archive matching the machine: `macos-arm64`, `macos-x86_64`,
+`linux-x86_64`, or `windows-x86_64`. Then open `augur-gui`, go to **Plugins**, and
+click **Scan for New Plugins**.
+
+Each archive contains a `BUILD-INFO.txt` recording the `augur-rs` revision and the
+`rustc` version the libraries were built against — quote it in any ABI-mismatch
+report. Verify downloads against `SHA256SUMS.txt` from the same release.
+
+Pull requests build the same bundles as workflow artifacts. See
+[CI Prebuilt Plugin Bundles](./docs/features/ci-prebuilt-plugin-bundles.md).
+
 ### Build One Plugin
 
 ```bash
@@ -145,6 +171,7 @@ augur-plugins/
 
 - [Plugin API Notes](./docs/plugin-api.md) — repo-local summary of the current runtime contract
 - [Installing Plugins](./docs/installing-plugins.md) — build, copy, reload, and troubleshoot installed plugins
+- [CI Prebuilt Plugin Bundles](./docs/features/ci-prebuilt-plugin-bundles.md) — how the downloadable per-platform bundles are built and published
 - [Architecture Notes](./docs/architecture.md) — repository role, execution model, host views, and shared settings
 - [augur-rs Plugin Authoring Guide](https://github.com/muthmann/augur-rs/blob/main/docs/features/plugin-authoring-guide.md) — canonical host/runtime authoring guide
 - [augur-rs Global Settings Guide](https://github.com/muthmann/augur-rs/blob/main/docs/features/global-settings-menu.md) — host-owned settings published to plugins