ci: wire byte-exact conformance corpora + a Kotlin job; widen integration trigger

conformance.yml (per-push): each port's conformance job now also runs the
byte-exact corpora that previously ran in NO CI — render / verify / recover /
output-prompt (where the port ships them) plus object-model:

- TypeScript: + object-model (packages/metadata) + render/verify/recover/
  output-prompt (packages/render).
- C#: + the Render.Tests project (render/verify/recover/output-prompt);
  object-model already runs inside the Conformance.Tests project.
- Java: + ObjectModelConformanceTest (metadata) + RenderCrossPortReport/
  Verify/Recover/OutputPrompt conformance (render). Installs metadata+render
  first to dodge the SNAPSHOT-resolution race.
- Python: + tests/render (render/verify/recover/output-prompt); object-model
  already lives under tests/conformance.
- Kotlin: NEW conformance-kotlin job running the only corpora it has —
  object-model + output-prompt (codegen-kotlin), same JDK/Maven setup as Java.

All (port x corpus) verified green locally before wiring.

integration-tests.yml: the 5-port Docker persistence + api-contract matrix now
runs on every pull_request (any target branch) and on pushes to main, in
addition to the existing v* tag and manual triggers. Job bodies unchanged.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: dmealing

.github/workflows/conformance.yml

@@ -43,22 +43,70 @@ jobs:
 
       - name: TypeScript conformance
         if: matrix.language == 'typescript'
-        run: bun install && cd server/typescript/packages/metadata && bun test test/conformance.test.ts test/yaml-conformance.test.ts
+        run: |
+          bun install
+          # Loader + YAML + object-model corpora (packages/metadata).
+          cd server/typescript/packages/metadata && bun test test/conformance.test.ts test/yaml-conformance.test.ts test/object-model-conformance.test.ts
+          # Byte-exact render / verify / recover / output-prompt corpora (packages/render).
+          cd ../render && bun test test/render-conformance.test.ts test/verify-conformance.test.ts test/recover/recover-conformance.test.ts test/output-prompt-conformance.test.ts
 
       - name: C# conformance
         if: matrix.language == 'csharp'
-        run: cd server/csharp && dotnet test MetaObjects.Conformance.Tests/MetaObjects.Conformance.Tests.csproj --nologo --verbosity quiet
+        run: |
+          # Loader + YAML + object-model corpora (Conformance.Tests project).
+          cd server/csharp && dotnet test MetaObjects.Conformance.Tests/MetaObjects.Conformance.Tests.csproj --nologo --verbosity quiet
+          # Byte-exact render / verify / recover / output-prompt corpora (Render.Tests project).
+          dotnet test MetaObjects.Render.Tests/MetaObjects.Render.Tests.csproj --nologo --verbosity quiet
 
       - name: Java conformance
         if: matrix.language == 'java'
-        run: cd server/java && mvn -pl metadata test -Dtest='ConformanceTest,YamlConformanceTest' -q
+        run: |
+          cd server/java
+          # Install metadata + render first to avoid the SNAPSHOT-resolution race
+          # ("No type registered for: field.uuid") when the render module's tests
+          # reference the freshly-built metadata artifact.
+          mvn -pl metadata,render -am install -DskipTests -q
+          # Loader + YAML + object-model corpora (metadata module).
+          mvn -pl metadata test -Dtest='ConformanceTest,YamlConformanceTest,ObjectModelConformanceTest' -q
+          # Byte-exact render / verify / recover / output-prompt corpora (render module).
+          mvn -pl render test -Dtest='RenderCrossPortReportTest,VerifyConformanceTest,RecoverConformanceTest,OutputPromptConformanceTest' -q
 
       - name: Python conformance
         if: matrix.language == 'python'
-        run: cd server/python && uv run pytest tests/conformance -q
+        run: |
+          cd server/python
+          # Loader + YAML corpora.
+          uv run pytest tests/conformance -q
+          # Byte-exact render / verify / recover / output-prompt corpora.
+          uv run pytest tests/render -q
+
+  conformance-kotlin:
+    # Kotlin (codegen-kotlin, KotlinPoet on the JVM) ships no loader / YAML /
+    # render / verify of its own — it reuses the shared JVM render engine. It
+    # runs only the corpora it actually has: object-model + output-prompt.
+    needs: fixture-lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up JDK
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '21'
+
+      - name: Kotlin conformance
+        run: |
+          cd server/java
+          # Build the metadata/render/codegen-kotlin chain first to avoid the
+          # SNAPSHOT-resolution race when the test module references freshly-built
+          # artifacts.
+          mvn -pl codegen-kotlin -am install -DskipTests -q
+          # object-model + output-prompt corpora (the only corpora Kotlin has).
+          mvn -pl codegen-kotlin test -Dtest='ObjectModelConformanceTest,OutputPromptConformanceTest' -q
 
   completeness-gate:
-    needs: conformance
+    needs: [conformance, conformance-kotlin]
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4

.github/workflows/integration-tests.yml

@@ -6,19 +6,22 @@ name: integration-tests
 # run in parallel; any port red blocks the gate.
 #
 # Triggers:
-#   - pull_request to `main` — gates the default branch so persistence/api-contract
+#   - pull_request (any target branch) — gates every PR so persistence/api-contract
 #     drift can't merge green (these corpora are not covered by conformance.yml).
+#   - push to `main` — guards the default branch directly (e.g. forward-merges that
+#     land on main without going through a PR).
 #   - tag push matching v* (release gate, per docs/RELEASING.md).
 #   - manual dispatch (workflow_dispatch).
-# NOTE: this runs a 5-port Testcontainers matrix; if main-PR CI cost is too high,
-# narrow `pull_request.branches` or re-introduce an opt-in label.
+# NOTE: this runs a 5-port Testcontainers matrix on every PR; if CI cost is too
+# high, narrow `pull_request.branches` or re-introduce an opt-in label.
 
 on:
   push:
+    branches:
+      - main
     tags:
       - 'v*'
   pull_request:
-    branches: [main]
   workflow_dispatch:
 
 jobs: