feat: implement pre-flight checks for library validation in build process

Author: swaroop-osec

src/main.rs

@@ -18,7 +18,7 @@ use solana_sdk::pubkey::Pubkey;
 use solana_transaction_status_client_types::UiTransactionEncoding;
 use std::{
     io::Read,
-    path::PathBuf,
+    path::{Path, PathBuf},
     process::{Command, Output, Stdio},
     sync::{
         atomic::{AtomicBool, Ordering},
@@ -42,6 +42,7 @@ use crate::solana_program::{
 };
 
 const MAINNET_GENESIS_HASH: &str = "5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d";
+const VERIFIED_BUILDS_DOC_URL: &str = "https://solana.com/docs/programs/verified-builds";
 
 pub fn get_network(network_str: &str) -> &str {
     match network_str {
@@ -1212,6 +1213,82 @@ fn build_args(
     Ok((args, mount_path.to_str().unwrap().to_string(), library_name))
 }
 
+fn run_preflight_checks(
+    repo_root: &str,
+    relative_mount_path: &str,
+    mount_path: &str,
+    library_name: &str,
+) -> anyhow::Result<()> {
+    println!("Running pre-flight validation...");
+    let mount_path_buf = Path::new(mount_path);
+    ensure!(
+        mount_path_buf.exists(),
+        "Pre-flight check failed: mount path '{}' does not exist. Pass --mount-path relative to the repository root ({}) or run from the workspace root described in {}.",
+        if relative_mount_path.is_empty() {
+            "."
+        } else {
+            relative_mount_path
+        },
+        repo_root,
+        VERIFIED_BUILDS_DOC_URL
+    );
+
+    let manifest_path = mount_path_buf.join("Cargo.toml");
+    ensure!(
+        manifest_path.exists(),
+        "Pre-flight check failed: missing Cargo.toml at {}. Ensure --mount-path points at your program workspace per {}.",
+        manifest_path.display(),
+        VERIFIED_BUILDS_DOC_URL
+    );
+
+    let lock_path = mount_path_buf.join("Cargo.lock");
+    ensure!(
+        lock_path.exists(),
+        "Pre-flight check failed: missing Cargo.lock at {}. Run `cargo generate-lockfile` in the workspace root (see {}).",
+        lock_path.display(),
+        VERIFIED_BUILDS_DOC_URL
+    );
+
+    let manifest = Manifest::from_path(&manifest_path)?;
+    let lib = manifest.lib.as_ref().ok_or_else(|| {
+        anyhow!(
+            "Pre-flight check failed: `[lib]` section not found in {}. Configure it as documented in {}.",
+            manifest_path.display(),
+            VERIFIED_BUILDS_DOC_URL
+        )
+    })?;
+
+    let configured_name = lib.name.as_ref().ok_or_else(|| {
+        anyhow!(
+            "Pre-flight check failed: `[lib] name` missing in {}. Set it per {}.",
+            manifest_path.display(),
+            VERIFIED_BUILDS_DOC_URL
+        )
+    })?;
+
+    ensure!(
+        configured_name == library_name,
+        "Pre-flight check failed: `[lib] name = \"{configured_name}\"` but the CLI resolved `{library_name}`. Update --library-name or your Cargo.toml."
+    );
+
+    if lib.crate_type.is_empty() {
+        println!(
+            "Warning: `[lib] crate-type` is not set in {}. Add `cdylib` per {}.",
+            manifest_path.display(),
+            VERIFIED_BUILDS_DOC_URL
+        );
+    } else {
+        ensure!(
+            lib.crate_type.iter().any(|t| t == "cdylib"),
+            "Pre-flight check failed: `[lib] crate-type` must include \"cdylib\" so Solana produces a deployable .so (see {}).",
+            VERIFIED_BUILDS_DOC_URL
+        );
+    }
+
+    println!("Pre-flight checks passed ✅");
+    Ok(())
+}
+
 fn clone_repo_and_checkout(
     repo_url: &str,
     current_dir: bool,
@@ -1340,6 +1417,12 @@ pub async fn verify_from_repo(
     )?;
     println!("Build path: {mount_path:?}");
     println!("Verifying program: {library_name}");
+    run_preflight_checks(
+        &verify_tmp_root_path,
+        &relative_mount_path,
+        &mount_path,
+        &library_name,
+    )?;
 
     check_signal(container_id_opt, temp_dir_opt);