First version of Public API

.bazelignore

@@ -0,0 +1,4 @@
+.build
+.git
+.mise
+.release

.bazelversion

@@ -1 +1 @@
-7.3.0
+8.1.1

.dockerignore

@@ -0,0 +1,6 @@
+.git/
+.build/
+.swiftpm/
+.release/
+bazel-*
+docker/

.github/workflows/test.yml

@@ -9,28 +9,45 @@ env:
   swift_package_resolve: swift package resolve
   swift_build: swift build
   swift_test: swift test
-  periphery_scan: ./.build/debug/periphery scan --quiet --clean-build
+  periphery_scan: ./.build/debug/periphery scan --quiet --clean-build --strict
   cache_version: 1
 jobs:
   lint:
-    runs-on: macos-14
+    runs-on: macos-15
     name: Lint
     steps:
       - uses: actions/checkout@master
       - uses: jdx/mise-action@v2
       - run: mise run lint-ci
+  bazel:
+      runs-on: macos-15
+      name: Bazel
+      steps:
+        - uses: actions/checkout@master
+        - uses: jdx/mise-action@v2
+        - uses: bazel-contrib/setup-bazel@0.14.0
+          with:
+            bazelisk-cache: true
+            disk-cache: ${{ github.workflow }}
+            repository-cache: true
+        - name: Check generated rules
+          run: mise r gen-bazel-rules && git diff --quiet --exit-code
+        - name: Scan
+          run: bazel run //:periphery -- scan --bazel --quiet --strict --baseline baselines/bazel.json
   macOS:
     strategy:
       fail-fast: false
       matrix:
-        xcode: ["16.0", "15.4", "15.2"]
+        xcode: ["16.2", "16.1", "16.0", "15.4"]
         include:
+          - xcode: "16.2"
+            macos: macos-15
+          - xcode: "16.1"
+            macos: macos-15
           - xcode: "16.0"
-            macos: macos-14
+            macos: macos-15
           - xcode: "15.4"
             macos: macos-14
-          - xcode: "15.2"
-            macos: macos-14
     runs-on: ${{ matrix.macos }}
     name: macOS
     steps:
@@ -44,7 +61,7 @@ jobs:
       shell: bash
     - name: Cache resolved dependencies
       id: cache-resolved-dependencies
-      uses: actions/cache@v2
+      uses: actions/cache@v4
       with:
         path: |
           .build
@@ -58,50 +75,45 @@ jobs:
     - name: Build
       run: ${{ env.swift_build }}
     - name: Scan
-      run: ${{ env.periphery_scan }} --strict
+      run: ${{ env.periphery_scan }}
     - name: Test
       run: ${{ env.swift_test }}
   linux:
     strategy:
       fail-fast: false
       matrix:
-        swift: ["6.0", "5.10", "5.9"]
+        swift: ["6.0", "5.10"]
         include:
           - swift: "6.0"
             container: "swift:6.0"
-            cache-version: 1
           - swift: "5.10"
             container: "swift:5.10"
-            cache-version: 1
-          - swift: "5.9"
-            container: "swift:5.9"
-            cache-version: 1
     runs-on: ubuntu-20.04
     container: ${{ matrix.container }}
     name: Linux
     steps:
+    - uses: actions/checkout@master
     - name: Get Swift Version
       id: get-swift-version
       run: |
         echo "::set-output name=version::$(swift -version | head -n 1 | sed s/,// )"
       shell: bash
-    - uses: actions/checkout@master
     - name: Cache resolved dependencies
       id: cache-resolved-dependencies
-      uses: actions/cache@v2
+      uses: actions/cache@v4
       with:
         path: |
           .build
           Package.resolved
-        key: ${{ matrix.cache-version }}-${{ runner.os }}-${{ steps.get-swift-version.outputs.version }}-${{ env.cache_version }}-spm-deps-${{ hashFiles('Package.swift', 'Package.resolved') }}
+        key: ${{ runner.os }}-${{ steps.get-swift-version.outputs.version }}-${{ env.cache_version }}-spm-deps-${{ hashFiles('Package.swift', 'Package.resolved') }}
         restore-keys: |
-          ${{ matrix.cache-version }}-${{ runner.os }}-${{ steps.get-swift-version.outputs.version }}-${{ env.cache_version }}-spm-deps-
+          ${{ runner.os }}-${{ steps.get-swift-version.outputs.version }}-${{ env.cache_version }}-spm-deps-
     - name: Resolve dependencies
       if: steps.cache-resolved-dependencies.outputs.cache-hit != 'true'
       run: ${{ env.swift_package_resolve }}
     - name: Build
       run: ${{ env.swift_build }}
     - name: Scan
-      run: ${{ env.periphery_scan }}
+      run: ${{ env.periphery_scan }} --baseline baselines/linux.json
     - name: Test
       run: ${{ env.swift_test }}

.mise.toml

@@ -1,3 +1,3 @@
 [tools]
-swiftformat = "0.54.3"
-swiftlint = "0.56.2"
+swiftformat = "0.55.3"
+swiftlint = "0.57.1"

.mise/tasks/benchmark

@@ -0,0 +1,18 @@
+#!/bin/bash
+#USAGE flag "-b --bazel" help="Use binary built by Bazel"
+
+set -eo pipefail
+
+cmd=""
+
+if [ "$usage_bazel" = "true" ]; then
+    echo "INFO: Using Bazel"
+    bazel build //:periphery
+    cmd='bazel-bin/Sources/Frontend_opt scan --config /var/tmp/periphery_bazel/periphery.yml --generic-project-config bazel-bin/external/+generated+periphery_generated/rule/project_config.json'
+else
+    mise r build --arch arm64
+    cmd='./.build/release/periphery scan --quiet --skip-build'
+fi
+
+echo $cmd
+hyperfine --warmup 3 "${cmd}"

.mise/tasks/build

@@ -0,0 +1,37 @@
+#!/bin/bash
+#USAGE flag "--arch <arch>" help="Build architecture (x86_64, arm64, release)"
+
+set -eo pipefail
+
+SWIFT_BUILD_FLAGS="--product periphery --configuration release --disable-sandbox --scratch-path .build"
+EXECUTABLE_X86_64="$(swift build ${SWIFT_BUILD_FLAGS} --arch x86_64 --show-bin-path)/periphery"
+EXECUTABLE_ARM64="$(swift build ${SWIFT_BUILD_FLAGS} --arch arm64 --show-bin-path)/periphery"
+
+build_x86_64() {
+    swift build ${SWIFT_BUILD_FLAGS} --arch x86_64
+}
+
+build_arm64() {
+    swift build ${SWIFT_BUILD_FLAGS} --arch arm64
+}
+
+if [ "$usage_arch" = "x86_64" ]; then
+    echo "Building for x86_64"
+    build_x86_64
+    echo ${EXECUTABLE_X86_64}
+elif [ "$usage_arch" = "arm64" ]; then
+    echo "Building for arm64"
+    build_arm64
+    echo ${EXECUTABLE_ARM64}
+elif [ "$usage_arch" = "release" ]; then
+    echo "Building for release"
+    build_x86_64
+    build_arm64
+    mkdir -p .release
+	lipo -create -output .release/periphery ${EXECUTABLE_X86_64} ${EXECUTABLE_ARM64}
+	strip -rSTX .release/periphery
+    echo "$(realpath .release/periphery)"
+else
+    echo "Invalid architecture. Use --arch <arch> where <arch> is x86_64, arm64 or release"
+    exit 1
+fi

.mise/tasks/gen-bazel-rules

@@ -0,0 +1,5 @@
+#!/bin/bash
+
+set -euo pipefail
+
+ruby .mise/tasks/scripts/gen_bazel_rules.rb

.mise/tasks/lint

@@ -1,8 +1,9 @@
 #!/bin/bash
-# mise description="Lint the project"
+
 set -euo pipefail
 
 cd $MISE_PROJECT_ROOT
 
+bazel run //bazel/dev:buildifier.fix
 swiftformat .
 swiftlint lint --quiet

.mise/tasks/lint-ci

@@ -1,8 +1,9 @@
 #!/bin/bash
-# mise description="Lint the project for CI"
+
 set -euo pipefail
 
 cd $MISE_PROJECT_ROOT
 
+bazel run //bazel/dev:buildifier.check
 swiftformat --quiet --strict .
 swiftlint lint --quiet --strict

scripts/release → .mise/tasks/release

@@ -9,7 +9,7 @@ confirm () {
   green "$1 (y/n): "
   read answer
 
-  if [ $answer != "y" ]
+  if [ "$answer" != "y" ]
   then
     exit 0
   fi
@@ -38,44 +38,64 @@ confirm "\nContinue?"
 rm -rf .release
 mkdir .release
 
-cat scripts/Version.swift.template | sed s/__VERSION__/${version}/ > Sources/Frontend/Version.swift
-cat scripts/artifactbundle_info.json.template | sed s/__VERSION__/${version}/ > .release/info.json
+cat .mise/tasks/scripts/Version.swift.template | sed s/__VERSION__/${version}/ > Sources/Frontend/Version.swift
+cat .mise/tasks/scripts/artifactbundle_info.json.template | sed s/__VERSION__/${version}/ > .release/info.json
+ruby -e "file = 'MODULE.bazel'; content = File.read(file); content.sub!(/version = \".+?\"/, 'version = \"${version}\"'); File.write(file, content)"
 
 echo -e "\nUpdate CHANGELOG.md"
 confirm "Continue?"
 
-make build_release
+mise r build --arch release
 
 if [ ! -f .release/periphery ]; then
   echo "ERROR: Missing release binary?"
   exit 1
 fi
 
-cp BUILD.bazel MODULE.bazel LICENSE.md .release/
-cp -R bazel .release/
-cp scripts/release_notes.md.template .release/release_notes.md
+echo "Testing release binary..."
+for i in {1..3}; do
+    .release/periphery scan --strict
+done
+
+cp LICENSE.md MODULE.bazel BUILD.bazel .release/
+cp -R bazel Sources .release/
+rm -r .release/bazel/dev
+cp .mise/tasks/scripts/release_notes.md.template .release/release_notes.md
+
+confirm "\nContinue?"
 
 # Codesign
 cd .release
 codesign periphery
 
 # Archive
 zip_filename="periphery-${version}.zip"
-zip -r "${zip_filename}" periphery LICENSE.md MODULE.bazel BUILD.bazel bazel
+zip -r "${zip_filename}" periphery LICENSE.md
 codesign "${zip_filename}"
 
 echo -e "\n${zip_filename} checksum:"
 sha256=$( shasum -a 256 ${zip_filename} | awk '{print $1}' )
 echo ${sha256}
 
+macos_artifact="periphery-${version}-macos"
+artifactbundle="periphery-${version}.artifactbundle"
 zip_artifactbundle="periphery-${version}.artifactbundle.zip"
-zip "${zip_artifactbundle}" periphery LICENSE.md info.json
+
+mkdir -p ${macos_artifact}/bin
+cp periphery ${macos_artifact}/bin
+mkdir ${artifactbundle}
+cp -R ${macos_artifact} LICENSE.md info.json ${artifactbundle}
+zip -r "${zip_artifactbundle}" periphery-${version}.artifactbundle
 codesign "${zip_artifactbundle}"
 
 echo -e "\n${zip_artifactbundle} checksum:"
 artifactbundle_sha256=$( shasum -a 256 ${zip_artifactbundle} | awk '{print $1}' )
 echo ${artifactbundle_sha256}
 
+bazel_zip_filename="periphery-bazel-${version}.zip"
+zip -r "${bazel_zip_filename}" LICENSE.md MODULE.bazel BUILD.bazel bazel Sources
+codesign "${bazel_zip_filename}"
+
 # Notarize
 notarize "${zip_filename}"
 notarize "${zip_artifactbundle}"
@@ -105,16 +125,8 @@ if [[ ${version} == *"beta"* ]]; then
 fi
 
 cd ..
-gh release create --latest="${is_latest}" -F .release/release_notes.md "${version}" ".release/${zip_filename}" ".release/${zip_artifactbundle}"
-
-# Homebrew
-if [ $is_latest = false ]; then
-  echo "Not releasing beta to Homebrew."
-else
-  cd ../homebrew-periphery
-  cat periphery.rb.template | sed s/__VERSION__/${version}/ | sed s/__SHA256__/${sha256}/ > Casks/periphery.rb
-  git add Casks/periphery.rb
-  git commit -m "${version}"
-  git push origin master
-  cd ../periphery
-fi
+gh release create --latest="${is_latest}" -F .release/release_notes.md "${version}" ".release/${zip_filename}" ".release/${zip_artifactbundle}" ".release/${bazel_zip_filename}"
+
+echo "Next steps:"
+echo "* Update Homebrew formula"
+echo "* Update Bazel Central Registry"

.mise/tasks/scan

@@ -0,0 +1,6 @@
+#!/bin/bash
+
+set -euo pipefail
+
+swift build
+./.build/debug/periphery scan "$@"

.mise/tasks/scan-linux

@@ -0,0 +1,7 @@
+#!/bin/bash
+
+set -e
+
+export DOCKER_CLI_HINTS=false
+docker build -t periphery -f docker/Dockerfile.linux .
+docker run --rm -t periphery scan "$@" --baseline baselines/linux.json

scripts/artifactbundle_info.json.template → .mise/tasks/scripts/artifactbundle_info.json.template

@@ -6,7 +6,7 @@
             "type": "executable",
             "variants": [
                 {
-                    "path": "periphery",
+                    "path": "periphery-__VERSION__-macos/bin/periphery",
                     "supportedTriples": ["x86_64-apple-macosx", "arm64-apple-macosx"]
                 }
             ]