feat(storage): automate graph disk cleanup and controlled legacy retirement

.github/actions/setup-native/action.yml

@@ -16,7 +16,7 @@ runs:
       run: |
         set -euo pipefail
         case "${NATIVE_TARGET}:${RUNNER_OS}:${RUNNER_ARCH}" in
-          linux-x86_64:Linux:X64|macos-arm64:macOS:ARM64|macos-x86_64:macOS:X64|windows-x86_64:Windows:X64) ;;
+          macos-arm64:macOS:ARM64|windows-x86_64:Windows:X64) ;;
           *)
             echo "Target ${NATIVE_TARGET} does not match ${RUNNER_OS}/${RUNNER_ARCH}." >&2
             exit 1
@@ -47,9 +47,7 @@ runs:
         set -euo pipefail
         version="$(awk '/^name = "lbug"/ { found=1 } found && /^version = / { gsub(/"/, "", $3); print $3; exit }' Cargo.lock)"
         case "$NATIVE_TARGET" in
-          linux-x86_64) archive='liblbug-static-linux-x86_64-compat.tar.gz' ;;
           macos-arm64) archive='liblbug-static-osx-arm64.tar.gz' ;;
-          macos-x86_64) archive='liblbug-static-osx-x86_64.tar.gz' ;;
           windows-x86_64) archive='liblbug-static-windows-x86_64.zip' ;;
           *) echo "Unsupported native target: $NATIVE_TARGET" >&2; exit 1 ;;
         esac

.github/workflows/ci.yml

@@ -94,12 +94,8 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - target: linux-x86_64
-            run-tests: true
           - target: macos-arm64
             run-tests: true
-          - target: macos-x86_64
-            run-tests: false
           - target: windows-x86_64
             run-tests: true
     uses: ./.github/workflows/native.yml

.github/workflows/native.yml

@@ -28,9 +28,15 @@ env:
   CARGO_NET_RETRY: "10"
 
 jobs:
-  native:
-    name: native artifact (${{ inputs.target }})
-    runs-on: ${{ fromJSON('{"linux-x86_64":"ubuntu-latest","macos-arm64":"macos-latest","macos-x86_64":"macos-15-intel","windows-x86_64":"windows-2022"}')[inputs.target] }}
+  tests:
+    name: native tests (${{ inputs.target }}, ${{ matrix.cohort }}${{ matrix.shard > 0 && format(', shard {0}', matrix.shard) || '' }})
+    if: inputs.run-tests
+    strategy:
+      fail-fast: false
+      matrix:
+        cohort: [unit, generation, integration]
+        shard: ${{ fromJSON(inputs.target == 'windows-x86_64' && '[1,2,3,4]' || '[0]') }}
+    runs-on: ${{ fromJSON('{"macos-arm64":"macos-latest","windows-x86_64":"windows-2022"}')[inputs.target] }}
     timeout-minutes: 90
     permissions:
       contents: read
@@ -46,8 +52,53 @@ jobs:
           target: ${{ inputs.target }}
 
       - name: Run platform tests
-        if: inputs.run-tests
-        run: cargo run -p xtask -- native-test --target "${{ inputs.target }}"
+        id: platform_tests
+        timeout-minutes: ${{ inputs.target == 'macos-arm64' && 75 || 85 }}
+        shell: bash
+        env:
+          RUST_TEST_NOCAPTURE: "1"
+          RUST_TEST_THREADS: "1"
+          SOURCE_SHA: ${{ inputs.source-sha }}
+          TMP: ${{ runner.temp }}
+          TEMP: ${{ runner.temp }}
+        run: |
+          set -o pipefail
+          mkdir -p diagnostics
+          printf '%s\n' "$SOURCE_SHA" > diagnostics/source-sha.txt
+          shard_args=()
+          if [[ '${{ inputs.target }}' == 'windows-x86_64' ]]; then
+            export CGRAPH_CLEANUP_TRACE=1
+            shard_args=(--shard '${{ matrix.shard }}/4')
+          fi
+          cargo run -p xtask -- native-test --target "${{ inputs.target }}" --cohort "${{ matrix.cohort }}" "${shard_args[@]}" 2>&1 | tee diagnostics/platform-test.log
+
+      - name: Upload native test diagnostics
+        if: always()
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: test-diagnostics-${{ inputs.target }}-${{ matrix.cohort }}-shard${{ matrix.shard }}-${{ github.run_attempt }}
+          path: diagnostics/
+          if-no-files-found: warn
+          retention-days: 3
+
+  native:
+    name: native artifact (${{ inputs.target }})
+    needs: tests
+    if: ${{ always() && !cancelled() && (!inputs.run-tests || needs.tests.result == 'success') }}
+    runs-on: ${{ fromJSON('{"macos-arm64":"macos-latest","windows-x86_64":"windows-2022"}')[inputs.target] }}
+    timeout-minutes: 90
+    permissions:
+      contents: read
+    steps:
+      - name: Check out source SHA
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          ref: ${{ inputs.source-sha }}
+
+      - name: Set up native dependencies
+        uses: ./.github/actions/setup-native
+        with:
+          target: ${{ inputs.target }}
 
       - name: Build and smoke release artifact
         run: cargo run -p xtask -- native-artifact --target "${{ inputs.target }}" --commit-sha "${{ inputs.source-sha }}" --output "dist/${{ inputs.target }}"

.github/workflows/release.yml

@@ -212,7 +212,7 @@ jobs:
             artifact_count="$(gh api "repos/$GITHUB_REPOSITORY/actions/runs/$REQUESTED_CI_RUN_ID/artifacts?per_page=100" --jq '[.artifacts[] | select(.expired == false and (.name | startswith("native-")))] | length')"
             {
               echo "ci-run-id=$REQUESTED_CI_RUN_ID"
-              if [[ "$artifact_count" == '4' ]]; then
+              if [[ "$artifact_count" == '2' ]]; then
                 echo 'artifacts-available=true'
               else
                 echo 'artifacts-available=false'
@@ -229,7 +229,7 @@ jobs:
               artifact_count="$(gh api "repos/$GITHUB_REPOSITORY/actions/runs/$run_id/artifacts?per_page=100" --jq '[.artifacts[] | select(.expired == false and (.name | startswith("native-")))] | length')"
               {
                 echo "ci-run-id=$run_id"
-                if [[ "$artifact_count" == '4' ]]; then
+                if [[ "$artifact_count" == '2' ]]; then
                   echo "artifacts-available=true"
                 else
                   echo "artifacts-available=false"
@@ -322,9 +322,7 @@ jobs:
       fail-fast: false
       matrix:
         target:
-          - linux-x86_64
           - macos-arm64
-          - macos-x86_64
           - windows-x86_64
     uses: ./.github/workflows/native.yml
     with:

Cargo.toml

@@ -29,6 +29,8 @@ resolver = "2"
 [profile.native-tests]
 inherits = "release"
 debug-assertions = true
+overflow-checks = true
+panic = "unwind"
 
 [lib]
 name = "codebase_graph"
@@ -66,7 +68,7 @@ walkdir = "2"
 cc = "1.2"
 
 [target.'cfg(windows)'.dependencies]
-windows-sys = { version = "0.61", features = ["Win32_Foundation", "Win32_System_ProcessStatus", "Win32_System_Threading", "Win32_System_JobObjects", "Win32_System_SystemServices", "Win32_Security", "Win32_Security_Authorization", "Win32_System_Memory", "Win32_Storage_FileSystem", "Win32_System_Pipes", "Win32_System_Console", "Win32_System_Diagnostics_ToolHelp"] }
+windows-sys = { version = "0.61", features = ["Win32_Foundation", "Win32_Globalization", "Win32_System_ProcessStatus", "Win32_System_Threading", "Win32_System_JobObjects", "Win32_System_SystemServices", "Win32_Security", "Win32_Security_Authorization", "Win32_System_Memory", "Win32_Storage_FileSystem", "Win32_System_Pipes", "Win32_System_Console", "Win32_System_Diagnostics_ToolHelp", "Win32_System_IO", "Wdk_Foundation", "Wdk_Storage_FileSystem"] }
 
 [[bin]]
 name = "codebase-graph"

README.md

@@ -42,6 +42,9 @@ This is illustrative compact block output; exact matches depend on the graph.
 
 ## Quick start
 
+Supported platforms are macOS on Apple Silicon (ARM64) and Windows x86_64.
+Linux and Intel macOS are no longer supported.
+
 Install from crates.io with Cargo (Rust 1.82 or newer) from the repository you
 want to index: