Dnix

.gitattributes

@@ -1,4 +1,5 @@
-# Native source fingerprints must match across checkout platforms.
+# Line endings stay LF on every checkout, Windows included, so every host
+# builds from the same bytes.
 /rust/** text eol=lf
 /hook/build.dart text eol=lf
 /lib/src/epic_cash_wallet_bindings.g.dart text eol=lf

.github/workflows/native.yml

@@ -0,0 +1,25 @@
+# Builds the Rust library on every reference host, fails if any host or the
+# committed dnix.lock disagrees, and publishes the release the lock names
+# when it reaches the default branch.
+name: Native library
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: write
+
+# A newer push supersedes runs on a branch, never on main: a run there may
+# be publishing.
+concurrency:
+  group: native-${{ github.ref }}
+  cancel-in-progress: ${{ github.ref != format('refs/heads/{0}', github.event.repository.default_branch) }}
+
+jobs:
+  native:
+    # The same dnix commit as pubspec.yaml and flake.lock.
+    uses: cypherstack/dnix/.github/workflows/native.yml@e91763ef25d084b3a5cf271a0cfee69159b1f779
+    with:
+      macos-runner: xcode-27