feat: testsuite

testsuite/.dprint.jsonc

@@ -0,0 +1,11 @@
+{
+    "yaml": {
+        "printWidth": 100,
+        "formatComments": true,
+        "braceSpacing": false,
+    },
+    "excludes": [ "**/*-lock.json", "**/*.lock", "**/node_modules/", "dist/" ],
+    "plugins": [
+        "https://plugins.dprint.dev/g-plane/pretty_yaml-v0.5.1.wasm",
+    ],
+}

testsuite/.gitattributes

@@ -0,0 +1 @@
+pixi.lock merge=binary linguist-language=YAML linguist-generated=true

testsuite/.github/actionlint.yml

@@ -0,0 +1,6 @@
+self-hosted-runner:
+  labels:
+    - 8core_ubuntu_latest_runner
+    - 16core_windows_latest_runner
+    - windows_arm64_2025_large
+    - windows_x64_2025_large

testsuite/.github/workflows/CI.yml

@@ -0,0 +1,95 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+  pull_request:
+    types:
+      - labeled
+      - synchronize
+      - opened
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref_name }}-${{ github.event.pull_request.number || github.sha }}
+  cancel-in-progress: true
+
+env:
+  CICD_INTERMEDIATES_DIR: "_cicd-intermediates"
+  XDG_CACHE_HOME: ${{ github.workspace }}/.cache
+  PYTEST_ADDOPTS: "--color=yes"
+  PYTHONIOENCODING: utf-8
+
+jobs:
+  test-linux-x86_64:
+    timeout-minutes: 10
+    name: Build test Linux x86_64
+    runs-on: 8core_ubuntu_latest_runner
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+
+      - name: Set up pixi
+        uses: prefix-dev/setup-pixi@main
+        with:
+          cache: true
+          cache-write: ${{ github.event_name == 'push' && github.ref_name == 'main' }}
+
+      - name: Download artifacts
+        run: pixi run download-artifacts
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Run integration tests
+        run: pixi run --locked test-slow
+
+  test-windows-x86_64:
+    timeout-minutes: 10
+    name: Build test Windows x86_64
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+
+      - name: Create Dev Drive
+        run: ${{ github.workspace }}/.github/workflows/setup-dev-drive.ps1
+
+      - name: Copy Git Repo to Dev Drive
+        run: Copy-Item -Path "${{ github.workspace }}" -Destination "${{ env.PIXI_WORKSPACE }}" -Recurse
+
+      - name: Set up pixi
+        uses: prefix-dev/setup-pixi@main
+        with:
+          manifest-path: ${{ env.PIXI_WORKSPACE }}/pixi.toml
+          cache: true
+          cache-write: ${{ github.event_name == 'push' && github.ref_name == 'main' }}
+
+      - name: Download artifacts
+        working-directory: ${{ env.PIXI_WORKSPACE }}
+        run: pixi run download-artifacts
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Run integration tests
+        run: pixi run --locked test-slow
+        working-directory: ${{ env.PIXI_WORKSPACE }}
+
+  test-macos-aarch64:
+    timeout-minutes: 10
+    name: Build test macOS aarch64
+    runs-on: macos-14
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+
+      - name: Set up pixi
+        uses: prefix-dev/setup-pixi@main
+        with:
+          cache: true
+          cache-write: ${{ github.event_name == 'push' && github.ref_name == 'main' }}
+
+      - name: Download artifacts
+        run: pixi run download-artifacts
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Run integration tests
+        run: pixi run --locked test-slow

testsuite/.github/workflows/enforce-sha.yml

@@ -0,0 +1,18 @@
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+name: Security
+
+jobs:
+  ensure-pinned-actions:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - name: Ensure SHA pinned actions
+        uses: zgosalvez/github-actions-ensure-sha-pinned-actions@9e9574ef04ea69da568d6249bd69539ccc704e74 # v4
+        with:
+          allowlist: |
+            prefix-dev/

testsuite/.github/workflows/lint.yml

@@ -0,0 +1,28 @@
+name: Lint
+
+on:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+  pull_request:
+    types:
+      - labeled
+      - synchronize
+      - opened
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref_name }}-${{ github.event.pull_request.number || github.sha }}
+  cancel-in-progress: true
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - name: Set up pixi
+        uses: prefix-dev/setup-pixi@main
+        with:
+          environments: lint
+      - name: lint (if this step fails, please 'pixi run lint' locally and push the changes)
+        run: pixi run lint

testsuite/.github/workflows/prevent-branch-override-merge.yml

@@ -0,0 +1,17 @@
+name: Prevent Branch Override Merge
+
+on:
+  pull_request:
+    branches: [main]
+
+jobs:
+  check-branch-override:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+
+      - name: Set up pixi
+        uses: prefix-dev/setup-pixi@main
+
+      - name: Check for branch override files
+        run: pixi run check-branch-override

testsuite/.github/workflows/setup-dev-drive.ps1

@@ -0,0 +1,62 @@
+# Configures a drive for testing in CI.
+# Credits to astral-sh/uv: https://github.com/astral-sh/uv/blob/d2b9ffdc9e3f336e46b0af18a8554de560bfbefc/.github/workflows/setup-dev-drive.ps1
+
+# When not using a GitHub Actions "larger runner", the `D:` drive is present and
+# has similar or better performance characteristics than a ReFS dev drive.
+# Sometimes using a larger runner is still more performant (e.g., when running
+# the test suite) and we need to create a dev drive. This script automatically
+# configures the appropriate drive.
+if (Test-Path "D:\") {
+    Write-Output "Using existing drive at D:"
+    $Drive = "D:"
+} else {
+	# The size (20 GB) is chosen empirically to be large enough for our
+	# workflows; larger drives can take longer to set up.
+	$Volume = New-VHD -Path C:\pixi_dev_drive.vhdx -SizeBytes 20GB |
+						Mount-VHD -Passthru |
+						Initialize-Disk -Passthru |
+						New-Partition -AssignDriveLetter -UseMaximumSize |
+						Format-Volume -DevDrive -Confirm:$false -Force
+
+	$Drive = "$($Volume.DriveLetter):"
+
+	# Set the drive as trusted
+	# See https://learn.microsoft.com/en-us/windows/dev-drive/#how-do-i-designate-a-dev-drive-as-trusted
+	fsutil devdrv trust $Drive
+
+	# Disable antivirus filtering on dev drives
+	# See https://learn.microsoft.com/en-us/windows/dev-drive/#how-do-i-configure-additional-filters-on-dev-drive
+	fsutil devdrv enable /disallowAv
+
+	# Remount so the changes take effect
+	Dismount-VHD -Path C:\pixi_dev_drive.vhdx
+	Mount-VHD -Path C:\pixi_dev_drive.vhdx
+
+	# Show some debug information
+	Write-Output $Volume
+	fsutil devdrv query $Drive
+
+    Write-Output "Using Dev Drive at $Volume"
+}
+
+$Tmp = "$($Drive)\pixi-tmp"
+
+# Create the directory ahead of time in an attempt to avoid race-conditions
+New-Item $Tmp -ItemType Directory
+
+# Move Cargo to the dev drive
+New-Item -Path "$($Drive)\.cargo\bin" -ItemType Directory -Force
+if (Test-Path "C:\Users\runneradmin\.cargo") {
+    Copy-Item -Path "C:\Users\runneradmin\.cargo\*" -Destination "$($Drive)\.cargo\" -Recurse -Force
+}
+
+Write-Output `
+	"DEV_DRIVE=$($Drive)" `
+	"TMP=$($Tmp)" `
+	"TEMP=$($Tmp)" `
+	"RATTLER_CACHE_DIR=$($Drive)\rattler-cache" `
+	"RUSTUP_HOME=$($Drive)\.rustup" `
+	"CARGO_HOME=$($Drive)\.cargo" `
+	"PIXI_HOME=$($Drive)\.pixi" `
+	"PIXI_WORKSPACE=$($Drive)\pixi" `
+	>> $env:GITHUB_ENV

testsuite/.gitignore

@@ -0,0 +1,17 @@
+target
+.idea
+.vscode
+.test-projects
+__pycache__
+.pixi
+.build
+.DS_store
+site/
+.cache
+pytest-temp
+/vendor
+.env
+artifacts
+*.local.*
+AGENTS.md
+files.txt

testsuite/.ruff.toml

@@ -0,0 +1,6 @@
+line-length = 100
+lint.fixable = ["I"]
+
+[format]
+indent-style = "space"
+quote-style = "double"

testsuite/.taplo.toml

@@ -0,0 +1,2 @@
+[formatting]
+reorder_keys = true