ci: compile-probe prf across Xcodes

Author: tompassarelli

.github/workflows/_diag-macos.yml

@@ -5,32 +5,29 @@ on:
     branches: [ci/diag-macos]
 
 jobs:
-  diag:
-    strategy:
-      fail-fast: false
-      matrix:
-        runner:
-          - blacksmith-6vcpu-macos-26
-          - blacksmith-6vcpu-macos-latest
-          - blacksmith-6vcpu-macos-15
-    runs-on: ${{ matrix.runner }}
+  prf:
+    runs-on: blacksmith-6vcpu-macos-26
     timeout-minutes: 15
     steps:
-      - name: probe xcode + SDK + prf symbol
+      - name: compile-test ASAuthorization prf across installed Xcodes
         run: |
-          echo "===== runner: ${{ matrix.runner }} ====="
-          sw_vers || true
-          echo "--- installed Xcodes ---"
-          ls -d /Applications/Xcode*.app 2>/dev/null || echo "none"
-          echo "--- default xcode + SDK ---"
-          xcodebuild -version || true
-          xcrun --sdk macosx --show-sdk-version || true
-          echo "--- does each installed Xcode's macOS SDK expose ASAuthorization...prf? ---"
-          for x in /Applications/Xcode*.app; do
-            v=$("$x/Contents/Developer/usr/bin/xcodebuild" -version 2>/dev/null | head -1 | tr '\n' ' ')
-            sdk="$x/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk"
-            hdr="$sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers"
-            sdkver=$(plutil -extract Version raw "$sdk/SDKSettings.plist" 2>/dev/null || echo "?")
-            if grep -rqs "prf" "$hdr" 2>/dev/null; then prf="HAS prf"; else prf="NO prf"; fi
-            echo "  $x | $v | SDK $sdkver | $prf"
+          cat > /tmp/t.m <<'EOF'
+          #import <AuthenticationServices/AuthenticationServices.h>
+          int main(void){
+            ASAuthorizationSecurityKeyPublicKeyCredentialAssertion *a = nil;
+            (void)a.prf;
+            return 0;
+          }
+          EOF
+          echo "default xcode: $(xcodebuild -version | head -1)"
+          for x in /Applications/Xcode_26.*.app /Applications/Xcode.app; do
+            [ -d "$x" ] || continue
+            dev="$x/Contents/Developer"
+            ver=$(DEVELOPER_DIR="$dev" xcodebuild -version 2>/dev/null | head -1 | tr '\n' ' ')
+            sdk=$(DEVELOPER_DIR="$dev" xcrun --sdk macosx --show-sdk-version 2>/dev/null)
+            if DEVELOPER_DIR="$dev" xcrun -sdk macosx clang -fsyntax-only -fobjc-arc /tmp/t.m 2>/tmp/err.txt; then
+              echo "  $x | $ver | SDK $sdk | prf COMPILES = YES"
+            else
+              echo "  $x | $ver | SDK $sdk | prf FAILS: $(grep -m1 'error:' /tmp/err.txt | sed 's/.*error: //')"
+            fi
           done