ci(python): build platform wheels and publish phy assets on release

Wheels bundle libluos_engine.* via the package data; phy dylibs and a
per-platform sha256 manifest are attached to the GitHub Release. A
post-publish job installs the wheel and runs the network blinker,
proving the phy download path end-to-end.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: nicolas-rabault

.github/workflows/pio_release.yml

@@ -184,3 +184,88 @@ jobs:
           pio package pack
           pio package publish --owner luos --non-interactive
           cd ../..
+
+  build_wheels:
+    needs: check_valid_tag
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-22.04, macos-latest, windows-latest]
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - name: Install build tooling
+        run: |
+          python -m pip install --upgrade pip
+          pip install platformio cibuildwheel==2.* build
+      - name: Build native engine + phy dylibs
+        run: pio run -e native_lib
+      - name: Stage core engine into the package and pin version
+        shell: bash
+        run: |
+          cd bindings/python
+          cp ../../.pio/build/native_lib/libluos_engine.* luos_engine/ || true
+          printf 'ENGINE_VERSION = "%s"\n' "${GITHUB_REF_NAME}" > luos_engine/_version.py
+      - name: Build wheel
+        run: |
+          cd bindings/python
+          python -m build --wheel
+      - uses: actions/upload-artifact@v4
+        with:
+          name: wheel-${{ matrix.os }}
+          path: bindings/python/dist/*.whl
+
+  publish_phys:
+    needs: check_valid_tag
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-22.04, macos-latest, windows-latest]
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - name: Install PlatformIO
+        run: |
+          python -m pip install --upgrade pip
+          pip install platformio
+      - name: Build native engine + phy dylibs
+        run: pio run -e native_lib
+      - name: Rename phys by platform key and build manifest
+        shell: bash
+        run: |
+          python bindings/python/tools/stage_phy_assets.py \
+            .pio/build/native_lib release_assets
+      - name: Upload phy assets to the release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ github.ref_name }}
+          files: release_assets/*
+
+  smoke_test:
+    needs: [build_wheels, publish_phys]
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-22.04, macos-latest, windows-latest]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - uses: actions/download-artifact@v4
+        with:
+          name: wheel-${{ matrix.os }}
+          path: dist
+      - name: Install the built wheel and run the network blinker
+        shell: bash
+        run: |
+          python -m pip install --upgrade pip
+          pip install dist/*.whl pyluos pytest
+          # Phys are NOT bundled; this proves they download from the release.
+          python -m pytest bindings/python/tests/test_network_blinker.py -v

bindings/python/pyproject.toml

@@ -14,3 +14,6 @@ test = ["pytest", "pyluos>=3.1"]
 
 [tool.setuptools]
 packages = ["luos_engine"]
+
+[tool.setuptools.package-data]
+luos_engine = ["libluos_engine.*", "*.so", "*.dylib", "*.dll"]

bindings/python/tools/stage_phy_assets.py

@@ -0,0 +1,39 @@
+"""Copy built phy dylibs into an output dir, renamed by platform key, and
+write a per-platform manifest of sha256 checksums. Run per-OS in CI; each
+run writes its own manifest-<key>.json so matrix jobs never clobber each
+other's manifest.
+
+Usage: python stage_phy_assets.py <build_dir> <out_dir>
+"""
+import hashlib
+import json
+import sys
+from pathlib import Path
+
+sys.path.insert(0, str(Path(__file__).resolve().parents[1]))
+from luos_engine._platform import dylib_ext, platform_key  # noqa: E402
+
+
+def main(build_dir: str, out_dir: str) -> None:
+    build = Path(build_dir)
+    out = Path(out_dir)
+    out.mkdir(parents=True, exist_ok=True)
+    key = platform_key()
+    ext = dylib_ext()
+
+    manifest = {}
+    for src in build.glob(f"lib*_network{ext}"):
+        basename = src.name[: -len(ext)]  # libws_network
+        asset = f"{basename}-{key}{ext}"
+        data = src.read_bytes()
+        (out / asset).write_bytes(data)
+        manifest[asset] = hashlib.sha256(data).hexdigest()
+        print(f"staged {asset}")
+
+    (out / f"manifest-{key}.json").write_text(
+        json.dumps(manifest, indent=2, sort_keys=True)
+    )
+
+
+if __name__ == "__main__":
+    main(sys.argv[1], sys.argv[2])