feat(sdk): epic: rs-sdk-ffi and ios support

.cargo/config.toml

@@ -15,6 +15,8 @@ rustflags = [
     "target-feature=-crt-static",
     "-C",
     "target-cpu=x86-64",
+    "-C",
+    "link-arg=-lstdc++",
 ]
 
 [target.aarch64-unknown-linux-gnu]

.devcontainer/Dockerfile

@@ -18,21 +18,18 @@ RUN apt-get update && apt-get install -y \
 # Switch to clang
 RUN rm /usr/bin/cc && ln -s /usr/bin/clang /usr/bin/cc
 
-# Install protoc - protobuf compiler
-# The one shipped with Alpine does not work
+# Install protoc - protobuf compiler (pin to 32.0)
+# Alpine/system protoc may be outdated; install from releases
 ARG TARGETARCH
-ARG PROTOC_VERSION=27.3
+ARG PROTOC_VERSION=32.0
 RUN if [[ "$TARGETARCH" == "arm64" ]] ; then export PROTOC_ARCH=aarch_64; else export PROTOC_ARCH=x86_64; fi; \
     curl -Ls https://github.com/protocolbuffers/protobuf/releases/download/v${PROTOC_VERSION}/protoc-${PROTOC_VERSION}-linux-${PROTOC_ARCH}.zip \
     -o /tmp/protoc.zip && \
     unzip -qd /opt/protoc /tmp/protoc.zip && \
     rm /tmp/protoc.zip && \
     ln -s /opt/protoc/bin/protoc /usr/bin/
 
-# Install protoc
-RUN curl -OL https://github.com/protocolbuffers/protobuf/releases/download/v${PROTOC_VERSION}/protoc-${PROTOC_VERSION}-linux-x86_64.zip \
-    && unzip protoc-${PROTOC_VERSION}-linux-x86_64.zip -d /usr/local \
-    && rm protoc-${PROTOC_VERSION}-linux-x86_64.zip
+# Remove duplicate install; single install above is sufficient
 
 # Switch to vscode user
 USER vscode

.github/actions/rust/action.yaml

@@ -21,6 +21,12 @@ inputs:
 runs:
   using: composite
   steps:
+    - name: Resolve HOME path for caching
+      id: resolved_home
+      shell: bash
+      run: |
+        echo "home=$HOME" >> "$GITHUB_OUTPUT"
+
     - name: Extract Rust toolchain version from rust-toolchain.toml
       shell: bash
       id: rust_toolchain
@@ -41,6 +47,7 @@ runs:
         components: ${{ inputs.components }}
 
     - name: Get protoc arch
+      if: runner.os == 'Linux'
       shell: bash
       id: protoc_arch
       run: |
@@ -59,28 +66,40 @@ runs:
             ;;
         esac
 
-    - name: Check if protoc is installed
-      id: check-protoc
-      shell: bash
-      run: |
-        if command -v protoc >/dev/null 2>&1; then
-          echo "protoc is already installed."
-          echo "protoc_installed=true" >> $GITHUB_OUTPUT
-        else
-          echo "protoc is not installed."
-          echo "protoc_installed=false" >> $GITHUB_OUTPUT
-        fi
+    - name: Restore cached protoc (v32.0)
+      if: runner.os == 'Linux'
+      id: cache-protoc
+      uses: actions/cache@v4
+      with:
+        path: |
+          ${{ steps.resolved_home.outputs.home }}/.local/protoc-32.0/bin
+          ${{ steps.resolved_home.outputs.home }}/.local/protoc-32.0/include
+        key: protoc/32.0/${{ runner.os }}/${{ steps.protoc_arch.outputs.arch }}
 
-    - name: Install protoc
-      if: steps.check-protoc.outputs.protoc_installed == 'false'
+    - name: Install protoc (cached v32.0)
+      if: runner.os == 'Linux'
       id: deps-protoc
       shell: bash
       run: |
-        curl -Lo /tmp/protoc.zip \
-          "https://github.com/protocolbuffers/protobuf/releases/download/v27.3/protoc-27.3-linux-${{ steps.protoc_arch.outputs.arch }}.zip"
-        unzip -o /tmp/protoc.zip -d ${HOME}/.local
-        echo "PROTOC=${HOME}/.local/bin/protoc" >> $GITHUB_ENV
-        export PATH="${PATH}:${HOME}/.local/bin"
+        set -euxo pipefail
+        PROTOC_DIR="${HOME}/.local/protoc-32.0"
+        if [ ! -x "${PROTOC_DIR}/bin/protoc" ]; then
+          mkdir -p "${PROTOC_DIR}"
+          curl -fsSL -o /tmp/protoc.zip \
+            "https://github.com/protocolbuffers/protobuf/releases/download/v32.0/protoc-32.0-linux-${{ steps.protoc_arch.outputs.arch }}.zip"
+          unzip -o /tmp/protoc.zip -d "${PROTOC_DIR}"
+        fi
+        echo "${PROTOC_DIR}/bin" >> "$GITHUB_PATH"
+        echo "PROTOC=${PROTOC_DIR}/bin/protoc" >> "$GITHUB_ENV"
+
+    - name: Save cached protoc (v32.0)
+      if: runner.os == 'Linux' && steps.cache-protoc.outputs.cache-hit != 'true'
+      uses: actions/cache/save@v4
+      with:
+        path: |
+          ${{ steps.resolved_home.outputs.home }}/.local/protoc-32.0/bin
+          ${{ steps.resolved_home.outputs.home }}/.local/protoc-32.0/include
+        key: protoc/32.0/${{ runner.os }}/${{ steps.protoc_arch.outputs.arch }}
 
     - name: Set HOME variable to github context
       shell: bash
@@ -91,9 +110,9 @@ runs:
       if: inputs.cache == 'true'
       with:
         path: |
-          ${{ env.HOME }}/.cargo/registry/index
-          ${{ env.HOME }}/.cargo/registry/cache
-          ${{ env.HOME }}/.cargo/git
+          ${{ steps.resolved_home.outputs.home }}/.cargo/registry/index
+          ${{ steps.resolved_home.outputs.home }}/.cargo/registry/cache
+          ${{ steps.resolved_home.outputs.home }}/.cargo/git
         key: ${{ runner.os }}/cargo/registry/${{ hashFiles('**/Cargo.lock') }}
         restore-keys: |
           ${{ runner.os }}/cargo/registry/${{ hashFiles('**/Cargo.lock') }}

.github/package-filters/rs-packages.yml

@@ -75,3 +75,11 @@ dash-sdk:
   - packages/rs-sdk/**
   - *dapi_client
   - *drive
+
+rs-sdk-ffi:
+  - .github/workflows/tests*
+  - packages/rs-sdk-ffi/**
+  - packages/rs-sdk/**
+  - packages/rs-drive-proof-verifier/**
+  - *dapi_client
+  - *drive

.github/workflows/tests-build-js.yml

@@ -25,6 +25,10 @@ jobs:
           password: ${{ secrets.DOCKERHUB_TOKEN }}
         if: ${{ steps.check-artifact.outputs.exists != 'true' }}
 
+      - name: Pre-pull protoc Docker image for gRPC codegen
+        run: docker pull rvolosatovs/protoc:4.0.0
+        if: ${{ steps.check-artifact.outputs.exists != 'true' }}
+
       - name: Setup Node.JS
         uses: ./.github/actions/nodejs
         if: ${{ steps.check-artifact.outputs.exists != 'true' }}
@@ -53,11 +57,32 @@ jobs:
         run: cargo binstall wasm-bindgen-cli@0.2.100
         if: ${{ steps.check-artifact.outputs.exists != 'true' }}
 
-      - name: Install Binaryen
+      - name: Restore cached wasm-opt (Binaryen)
+        id: cache-binaryen
+        uses: actions/cache@v4
+        with:
+          path: ${{ env.HOME }}/.cache/binaryen/version_121
+          key: binaryen/version_121/${{ runner.os }}/x86_64
+
+      - name: Install wasm-opt if cache miss
+        if: steps.cache-binaryen.outputs.cache-hit != 'true'
         run: |
-          wget https://github.com/WebAssembly/binaryen/releases/download/version_121/binaryen-version_121-x86_64-linux.tar.gz -P /tmp
-          tar -xzf /tmp/binaryen-version_121-x86_64-linux.tar.gz -C /tmp
-          sudo cp -r /tmp/binaryen-version_121/* /usr/local/
+          set -euxo pipefail
+          mkdir -p "${HOME}/.cache/binaryen"
+          curl -fsSL -o /tmp/binaryen.tar.gz \
+            "https://github.com/WebAssembly/binaryen/releases/download/version_121/binaryen-version_121-x86_64-linux.tar.gz"
+          tar -xzf /tmp/binaryen.tar.gz -C "${HOME}/.cache/binaryen"
+          mv "${HOME}/.cache/binaryen/binaryen-version_121" "${HOME}/.cache/binaryen/version_121"
+
+      - name: Save cached wasm-opt
+        if: steps.cache-binaryen.outputs.cache-hit != 'true'
+        uses: actions/cache/save@v4
+        with:
+          path: ${{ env.HOME }}/.cache/binaryen/version_121
+          key: binaryen/version_121/${{ runner.os }}/x86_64
+
+      - name: Export wasm-opt to PATH
+        run: echo "${HOME}/.cache/binaryen/version_121/bin" >> $GITHUB_PATH
         if: ${{ steps.check-artifact.outputs.exists != 'true' }}
 
       - name: Build JS packages

.github/workflows/tests-rs-sdk-ffi-build.yml

@@ -0,0 +1,116 @@
+name: Test rs-sdk-ffi build
+
+on:
+  workflow_dispatch:
+  pull_request:
+    paths:
+      - 'packages/rs-sdk-ffi/**'
+      - 'packages/rs-sdk/**'
+      - '.github/workflows/tests-rs-sdk-ffi-build.yml'
+  push:
+    branches:
+      - master
+      - 'v*-dev'
+    paths:
+      - 'packages/rs-sdk-ffi/**'
+      - 'packages/rs-sdk/**'
+      - '.github/workflows/tests-rs-sdk-ffi-build.yml'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build-ffi-ios:
+    name: Build rs-sdk-ffi for iOS targets
+    # macOS runners are required to access Apple SDKs (no osxcross here)
+    runs-on: macos-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        target: [aarch64-apple-ios, aarch64-apple-ios-sim]
+    steps:
+      - name: Check out repo
+        uses: actions/checkout@v4
+
+      - name: Setup Rust
+        uses: ./.github/actions/rust
+        with:
+          target: ${{ matrix.target }}
+
+      - name: Add Rust target
+        run: |
+          rustup target add ${{ matrix.target }}
+
+      - name: Restore cached Protobuf (protoc)
+        id: cache-protoc
+        uses: actions/cache@v4
+        with:
+          path: |
+            ${{ env.HOME }}/.local/protoc-32.0/bin
+            ${{ env.HOME }}/.local/protoc-32.0/include
+          key: protoc/32.0/${{ runner.os }}/universal
+
+      - name: Install Protobuf (protoc) if cache miss
+        if: steps.cache-protoc.outputs.cache-hit != 'true'
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          set -euxo pipefail
+          VERSION=32.0
+          OS=osx-universal_binary
+          PROTOC_DIR="$HOME/.local/protoc-${VERSION}"
+          mkdir -p "$PROTOC_DIR"
+          curl -fsSL -H "Authorization: token ${GITHUB_TOKEN}" \
+            -o /tmp/protoc.zip \
+            "https://github.com/protocolbuffers/protobuf/releases/download/v${VERSION}/protoc-${VERSION}-${OS}.zip"
+          unzip -o /tmp/protoc.zip -d "$PROTOC_DIR"
+
+      - name: Save cached Protobuf (protoc)
+        if: steps.cache-protoc.outputs.cache-hit != 'true'
+        uses: actions/cache/save@v4
+        with:
+          path: |
+            ${{ env.HOME }}/.local/protoc-32.0/bin
+            ${{ env.HOME }}/.local/protoc-32.0/include
+          key: protoc/32.0/${{ runner.os }}/universal
+
+      - name: Verify protoc and export env
+        run: |
+          set -euxo pipefail
+          export PATH="$HOME/.local/protoc-32.0/bin:$PATH"
+          echo "PROTOC=$HOME/.local/protoc-32.0/bin/protoc" >> "$GITHUB_ENV"
+          "$HOME/.local/protoc-32.0/bin/protoc" --version
+          # Ensure build scripts see an absolute PROTOC path (some parse parent dirs)
+          echo "PROTOC=$(which protoc)" >> "$GITHUB_ENV"
+          # Enable backtraces for clearer failure logs if any build.rs panics
+          echo "RUST_BACKTRACE=1" >> "$GITHUB_ENV"
+
+      - name: Build FFI library
+        working-directory: packages/rs-sdk-ffi
+        env:
+          BLST_PORTABLE: "1"
+          IPHONEOS_DEPLOYMENT_TARGET: "18.0"
+          IPHONESIMULATOR_DEPLOYMENT_TARGET: "18.0"
+          RUSTFLAGS: "-C link-arg=-mios-version-min=18.0"
+        run: |
+          echo "Using BLST_PORTABLE=${BLST_PORTABLE} to avoid iOS linker issues"
+          echo "Minimum iOS deployment target: ${IPHONEOS_DEPLOYMENT_TARGET} (RUSTFLAGS=${RUSTFLAGS})"
+          cargo build --release --target ${{ matrix.target }}
+
+      - name: Verify build output
+        run: |
+          LIB=target/${{ matrix.target }}/release/librs_sdk_ffi.a
+          if [ ! -f "$LIB" ]; then
+            echo "Error: FFI library was not built for ${{ matrix.target }}"
+            exit 1
+          fi
+          echo "FFI library successfully built for ${{ matrix.target }}"
+          ls -la "$LIB"
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: rs-sdk-ffi-${{ matrix.target }}-release
+          path: |
+            target/${{ matrix.target }}/release/librs_sdk_ffi.a

.github/workflows/tests.yml

@@ -6,11 +6,11 @@ on:
     types: [opened, synchronize, reopened, ready_for_review]
     branches:
       - master
-      - 'v[0-9]+\.[0-9]+-dev'
+      - 'v*-dev'
   push:
     branches:
       - master
-      - 'v[0-9]+\.[0-9]+-dev'
+      - 'v*-dev'
   schedule:
     - cron: "30 4 * * *"