Native prover workflow

.config/cspell.json

@@ -58,6 +58,7 @@
     "doccomments",
     "docstrings",
     "dont",
+    "dtolnay",
     "dxdy",
     "dynlink",
     "eddsa",
@@ -142,6 +143,7 @@
     "minascan",
     "modul",
     "Muls",
+    "napi",
     "Nexts",
     "nixbuild",
     "nixfmt",
@@ -186,6 +188,7 @@
     "revspec",
     "RIGHTSHIFT",
     "rimraf",
+    "Rminus",
     "rnew",
     "rngs",
     "rotr",
@@ -194,7 +197,6 @@
     "RUSTDIR",
     "rustlib",
     "rustup",
-    "Rminus",
     "SBOX",
     "Schnorr",
     "Schönhage",
@@ -232,18 +234,18 @@
     "tweakable",
     "twoadic",
     "twoadicity",
+    "uints",
     "underconstraint",
     "underflowed",
     "underflows",
     "unew",
-    "uints",
-    "untar",
     "unhash",
     "unhashing",
     "unintuitively",
     "unpackaging",
     "unreconstructable",
     "Unshifted",
+    "untar",
     "Vanstone",
     "Varbase",
     "varfields",

.github/workflows/publish_native.yml

@@ -0,0 +1,70 @@
+name: Native
+on:
+  workflow_dispatch:
+
+jobs:
+  publish-native-packages:
+    name: Publish
+    strategy:
+      matrix:
+        os: [
+          macos-latest,
+          macos-15-intel,
+          ubuntu-latest,
+          ubuntu-22.04-arm,
+          # windows-latest,
+        ]
+    runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
+      id-token: write # required for npm publish --provenance
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          submodules: recursive
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 24
+          registry-url: "https://registry.npmjs.org"
+      - run: npm ci
+
+      - uses: ocaml/setup-ocaml@v3
+        with:
+          ocaml-compiler: 4.14.2
+      - uses: actions/cache@v4
+        id: cache-opam
+        with:
+          path: ./_opam/
+          key: ${{ runner.OS }}-${{ runner.arch }}-opam-${{ hashFiles('./scripts/prepublish/native/prepublish-native-package.opam') }}
+      - name: opam install
+        if: ${{ steps.cache-opam.outputs.cache-hit != 'true' }}
+        run: |
+          opam install \
+            --deps-only \
+            -y \
+            ./scripts/prepublish/native/prepublish-native-package.opam
+
+      - uses: dtolnay/rust-toolchain@master
+        with:
+          toolchain: nightly-2024-09-05
+          targets: wasm32-unknown-unknown
+          components: rust-src
+
+      - name: Build native package
+        run: |
+          set -Eeuxo pipefail
+          eval $(opam env)
+          npm run build:native
+
+      - name: Prepare native package
+        run: |
+          set -Eeuxo pipefail
+          npm run native:prepublish
+
+      - name: Publish native package
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: |
+          set -Eeuxo pipefail
+
+          npm run native:publish

.gitignore

@@ -16,3 +16,7 @@ result
 # precompiled bindings
 src/bindings/compiled
 .bindings_download
+/native
+
+# rust-analyzer
+target/