trycua · f-trycua · Jul 11, 2026 · Jul 11, 2026 · Jul 11, 2026 · Jul 11, 2026
diff --git a/.dockerignore b/.dockerignore
@@ -43,6 +43,9 @@ def test_release_reminder_tracks_rust_driver(self) -> None:
         workflow = self.read(".github/workflows/ci-release-reminder.yml")
 
         self.assertIn('["libs/cua-driver/rust/"]="cua-driver-rs"', workflow)
+        self.assertIn("cua-driver desktop release validation", workflow)
+        self.assertIn("e2e-rust-linux.yml", workflow)
+        self.assertIn("e2e-rust-linux-wayland.yml", workflow)
 
     def test_unreleased_digest_tracks_rust_driver(self) -> None:
         workflow = self.read(".github/workflows/release-unreleased-digest.yml")

@@ -74,16 +74,14 @@ jobs:
       - name: Install base tooling (container is bare)
         run: |
           apt-get update
-          # The PipeWire / libei deps the native-Wayland portal path uses
-          # are intentionally NOT installed here: bullseye ships PipeWire
-          # 0.3.19 (too old for libspa-sys 0.8, which needs >= 0.3.40) and
-          # has no libei-dev at all. They sit behind the `portal-libei`
-          # Cargo feature (disabled by default) and are wired in via the
-          # Nix build. The wlroots screencopy + virtual-pointer paths and
-          # the X11 fallback work without them.
+          # PipeWire ScreenCast capture remains Nix/modern-build only because
+          # bullseye's 0.3.19 headers are too old for libspa-sys 0.8. Portal
+          # RemoteDesktop/libei input is pure Rust plus libxkbcommon and ships
+          # in these portable release binaries.
           apt-get install -y --no-install-recommends \
             git ca-certificates curl build-essential pkg-config \
-            libx11-dev libxi-dev libxtst-dev libxext-dev libwayland-dev
+            libx11-dev libxi-dev libxtst-dev libxext-dev libwayland-dev \
+            libxkbcommon-dev
       - uses: actions/checkout@v4
       - name: Determine version
         id: version
@@ -109,7 +107,7 @@ jobs:
             rust-cua-driver-rs-linux-${{ matrix.arch }}-
       - name: Build (release)
         working-directory: libs/cua-driver/rust
-        run: cargo build -p cua-driver --release --target ${{ matrix.target }}
+        run: cargo build -p cua-driver --release --features portal-input --target ${{ matrix.target }}
       - name: Package
         working-directory: libs/cua-driver/rust
         run: |

@@ -22,14 +22,14 @@ jobs:
 
       - name: Set up pnpm
         uses: pnpm/action-setup@v4
+        with:
+          package_json_file: libs/typescript/package.json
 
       - name: Install Node dependencies
-        run: |
-          pnpm install --frozen-lockfile
-          pnpm -C libs/typescript install --frozen-lockfile
+        run: pnpm -C libs/typescript install --frozen-lockfile
 
       - name: TypeScript typecheck
-        run: node ./scripts/typescript-typecheck.js
+        run: pnpm -C libs/typescript typecheck
 
       - name: Prettier check
-        run: pnpm prettier --check "libs/typescript/**/*.{ts,tsx,js,jsx,json,md,yaml,yml}"
+        run: pnpm -C libs/typescript format:check
@@ -1,23 +1,21 @@
 name: "CI: Nix Linux Rust source"
 
-# This is the automatic Nix lane. Desktop-heavy legacy checks live in
-# nix-build.yml and nix-wayland.yml and are maintainer-dispatched instead.
+# Nix owns reproducible Linux package and Rust-source builds. Interactive
+# desktop behavior is owned by the Rust E2E workflows.
 on:
   pull_request:
     paths:
       - "flake.nix"
       - "flake.lock"
-      - "nix/cua-driver/package.nix"
-      - "nix/cua-driver/tests/rust-unit.nix"
+      - "nix/cua-driver/**"
       - "libs/cua-driver/rust/**"
       - ".github/workflows/ci-nix-linux.yml"
   push:
     branches: [main]
     paths:
       - "flake.nix"
       - "flake.lock"
-      - "nix/cua-driver/package.nix"
-      - "nix/cua-driver/tests/rust-unit.nix"
+      - "nix/cua-driver/**"
       - "libs/cua-driver/rust/**"
       - ".github/workflows/ci-nix-linux.yml"
   workflow_dispatch:
@@ -41,5 +39,10 @@ jobs:
         with:
           extra_nix_config: |
             experimental-features = nix-command flakes
-      - name: Run source-built Rust check
-        run: nix build .#checks.x86_64-linux.cua-driver-linux-rust-unit --print-build-logs --show-trace
+      - name: Build package and source-owned Rust tests
+        run: >-
+          nix build
+          .#checks.x86_64-linux.cua-compositor-build
+          .#checks.x86_64-linux.cua-driver-build
+          .#checks.x86_64-linux.cua-driver-linux-rust-unit
+          --print-build-logs --show-trace
@@ -111,6 +111,14 @@ jobs:
             BODY+="\nOr add \`no-release\` to skip."
           fi
 
+          if printf '%s\n' "${AFFECTED[@]}" | grep -qx 'cua-driver-rs'; then
+            BODY+="\n\n### cua-driver desktop release validation\n\n"
+            BODY+="Before adding the release label, a maintainer records green runs on the exact release SHA:\n"
+            BODY+="- [ ] [Linux X11 canonical matrix](https://github.com/${REPO}/actions/workflows/e2e-rust-linux.yml)\n"
+            BODY+="- [ ] [Linux Sway canonical matrix](https://github.com/${REPO}/actions/workflows/e2e-rust-linux-wayland.yml) with environment \`sway\`\n"
+            BODY+="- [ ] Result links and remaining experimental environment gaps are recorded in the PR\n"
+          fi
+
           # Delete previous reminder comment if exists, then post new one
           EXISTING_COMMENT_ID=$(gh api "repos/${REPO}/issues/${PR_NUMBER}/comments" \
             --jq ".[] | select(.body | contains(\"${COMMENT_MARKER}\")) | .id" 2>/dev/null | head -1)

@@ -48,7 +48,10 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y --no-install-recommends \
             clang pkg-config libdbus-1-dev libpipewire-0.3-dev libspa-0.2-dev \
-            libei-dev libx11-dev libxi-dev libxtst-dev libxext-dev
+            libei-dev libxkbcommon-dev libx11-dev libxi-dev libxtst-dev libxext-dev
       - name: Run Linux Rust tests
         working-directory: libs/cua-driver/rust
         run: cargo test -p cua-driver -p cua-driver-core -p cua-driver-testkit -p platform-linux --all-targets --locked
+      - name: Compile portable GNOME/KDE portal input
+        working-directory: libs/cua-driver/rust
+        run: cargo check -p cua-driver --features portal-input --locked
@@ -10,7 +10,6 @@ on:
       - "libs/cua-driver/rust/crates/cua-driver-testkit/**"
       - "libs/cua-driver/rust/crates/platform-windows/**"
       - "libs/cua-driver/rust/crates/cua-driver-uia/**"
-      - "libs/cua-driver/rust/crates/focus-monitor-win/**"
       - "libs/cua-driver/tests/fixtures/**"
       - ".github/workflows/ci-rust-windows.yml"
   push:
@@ -43,4 +42,4 @@ jobs:
         working-directory: libs/cua-driver/rust
         # Compile every Rust target without executing desktop-dependent integration
         # tests; interactive behavior belongs in e2e-rust-windows.yml.
-        run: cargo test -p cua-driver -p cua-driver-core -p cua-driver-testkit -p platform-windows -p cua-driver-uia -p focus-monitor-win --all-targets --no-run --locked
+        run: cargo test -p cua-driver -p cua-driver-core -p cua-driver-testkit -p platform-windows -p cua-driver-uia --all-targets --no-run --locked
@@ -252,7 +252,7 @@ jobs:
 
           TYPESCRIPT TOOLS:
           - prettier: code formatter
-          - TypeScript: type checking via node ./scripts/typescript-typecheck.js
+          - TypeScript: type checking via pnpm -C libs/typescript typecheck
           - pnpm: package manager
 
           TASK:
@@ -269,18 +269,18 @@ jobs:
             - Formatting: uv run black .
             - Linting: uv run ruff check . --fix
           For TypeScript lint failures:
-            - Formatting: pnpm prettier --write "**/*.{ts,tsx,js,jsx,json,md,yaml,yml}"
+            - Formatting: pnpm -C libs/typescript format
           After auto-fixing, verify the fix passes:
             - Python: uv run isort --check-only . && uv run black --check . && uv run ruff check .
-            - TypeScript: pnpm prettier --check "**/*.{ts,tsx,js,jsx,json,md,yaml,yml}"
+            - TypeScript: pnpm -C libs/typescript format:check
 
           FIXING TEST FAILURES:
           For Python test failures:
             - Run the specific failing test: uv run python -m pytest libs/python/<package>/tests/ -v --tb=long
             - The test environment uses CUA_TELEMETRY_ENABLED=false
             - Tests use pytest-asyncio with asyncio_mode=auto
           For TypeScript build/type failures:
-            - Check types: node ./scripts/typescript-typecheck.js
+            - Check types: pnpm -C libs/typescript typecheck
             - Build: cd libs/typescript && pnpm install && pnpm build
 
           IMPORTANT: