[SL-ONLY] MATTER-6651: Validate APIs in CI (#1087) (#1127)

[Michael Duggan (miduggan24)]

Summary

cherry-pick of #1087
note that workflow is currently disabled as all app refactor changes need to be in otherwise CI will fail

Add CI validation for CRTP APIs so API contract changes require explicit manifest update in the same PR.

Add the following files:

• silabs-crtp-apis.yaml
  • manifest file holding each apps public APIs and signatures
  • used to map against AppTaskImpl.h APIs in validate_crtp_apis.py
  • generated using --bootstrap arg on first setup
  • CI will fail if this is not updated along with API updates
• silabs-validate-apis.yaml
  • CI workflow to run API validation check
  • calls validate_crtp_apis.py
  • runs on PRs that touch *Impl.h
• validate_crtp_apis.py
  • script to compare AppTaskImpl.h (and ClosureManager) APIs against manifest file
  • parses public methods from AppTaskImpl.h (and ClosureManagerImpl.h)
  • compares these against methods in the manifest file
  • fails on missing, extra, or mismatch API signature

Related issues

MATTER-6651

Testing

locally test script against:

• adding new api that is not in manifest
• deleting api that exists in manifest
• changing method signature compared to manifest

temporary testing of each of the above in CI as well
https://github.com/SiliconLabsSoftware/matter_sdk/actions/runs/29934630457/job/88972898365

[cursor]

PR Summary

Low Risk
Adds CI and manifest tooling only; no runtime or firmware behavior changes. Risk is mainly process friction if headers and manifest drift until related refactors land.

Overview
Adds CI enforcement so changes to Silabs example override headers must stay in sync with a checked-in API manifest.

Introduces .github/silabs-apis.yaml as the baseline of public methods (names and signatures) for each app’s AppTaskImpl.h, plus ClosureManagerImpl.h for closure-app, including optional ifdef metadata for conditionally compiled APIs. The new scripts/tools/silabs/validate_apis.py parses those headers and fails on missing, extra, or signature-mismatched APIs; --bootstrap regenerates the manifest from current headers.

A Validate Silabs APIs GitHub Actions workflow runs on PRs to main / release_* when *Impl.h, the manifest, or the validator script changes, installing PyYAML and running the validator.

^{Reviewed by Cursor Bugbot for commit e3e44ad. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

Bugbot Autofix prepared a fix for the issue found in the latest run.

• ✅ Fixed: Workflow enabled despite missing apps
  • Added 'if: false' to the validate-apis job to disable the workflow until all app refactors with AppTaskImpl.h headers are complete.

Or push these changes by commenting:

@cursor push 294e9d7517

Preview (294e9d7517)

diff --git a/.github/workflows/silabs-validate-apis.yaml b/.github/workflows/silabs-validate-apis.yaml
--- a/.github/workflows/silabs-validate-apis.yaml
+++ b/.github/workflows/silabs-validate-apis.yaml
@@ -22,6 +22,7 @@
     validate-apis:
         name: Validate APIs
         runs-on: ubuntu-latest
+        if: false
         steps:
             - name: Checkout repository
               uses: actions/checkout@v7

_{You can send follow-ups to the cloud agent here.}

^{Reviewed by Cursor Bugbot for commit e3e44ad. Configure here.}