feat: implement cargo-workspace plugin and unified versioning for Rust workspaces

  - Add cargo-workspace plugin to release-please for proper Rust workspace handling
  - Implement workspace-level versioning for both SDK and components
  - SDK workspace: unified at v0.12.0 (ftl-sdk + ftl-sdk-macros)
  - Components workspace: unified at v0.14.0 (mcp-gateway + mcp-authorizer)
  - Replace individual component workflow with unified release-components.yml
  - Fix all version validation workflows to handle workspace inheritance
  - Update release-validation.yml to check workspace versions instead of individual crates
  - Add wasm32-wasip1 target to SDK release workflow

  This establishes the correct architecture from the start, following patterns
  proven successful in projects like AWS CDK v2, Babel, and Angular.

Author: bowlofarugula

.github/workflows/release-component.yml .github/workflows/release-components.yml.github/workflows/release-component.yml renamed to .github/workflows/release-components.yml

@@ -1,9 +1,9 @@
-name: Release Component
+name: Release Components
 
 on:
   push:
     tags:
-      - 'component-*-v*'
+      - 'components-v*'
 
 env:
   CARGO_TERM_COLOR: always
@@ -17,7 +17,6 @@ jobs:
     name: Verify Tag on Main Branch
     runs-on: ubuntu-latest
     outputs:
-      component: ${{ steps.parse.outputs.component }}
       version: ${{ steps.parse.outputs.version }}
     steps:
       - uses: actions/checkout@v4
@@ -27,56 +26,47 @@ jobs:
       - name: Parse tag
         id: parse
         run: |
-          # Extract component name and version from tag
-          # Format: component-{name}-v{version}
+          # Extract version from tag
+          # Format: components-v{version}
           TAG="${GITHUB_REF#refs/tags/}"
-          if [[ ! "$TAG" =~ ^component-([a-z-]+)-v(.+)$ ]]; then
+          if [[ ! "$TAG" =~ ^components-v(.+)$ ]]; then
             echo "❌ Invalid tag format: $TAG"
-            echo "Expected format: component-{name}-v{version}"
+            echo "Expected format: components-v{version}"
             exit 1
           fi
-          COMPONENT="${BASH_REMATCH[1]}"
-          VERSION="${BASH_REMATCH[2]}"
-          echo "component=$COMPONENT" >> $GITHUB_OUTPUT
+          VERSION="${BASH_REMATCH[1]}"
           echo "version=$VERSION" >> $GITHUB_OUTPUT
-          echo "📦 Component: $COMPONENT"
           echo "🔢 Version: $VERSION"
       
       - name: Verify tag is on main branch
         uses: ./.github/actions/verify-tag
 
-      - name: Verify component exists
+      - name: Verify workspace version matches tag
         run: |
-          COMPONENT="${{ steps.parse.outputs.component }}"
-          if [ ! -d "components/$COMPONENT" ]; then
-            echo "❌ Component directory not found: components/$COMPONENT"
-            exit 1
-          fi
-          echo "✅ Component directory exists"
-      
-      - name: Verify version matches Cargo.toml
-        run: |
-          COMPONENT="${{ steps.parse.outputs.component }}"
           VERSION="${{ steps.parse.outputs.version }}"
-          CARGO_VERSION=$(grep '^version' "components/$COMPONENT/Cargo.toml" | head -1 | cut -d'"' -f2)
-          if [ "$CARGO_VERSION" != "$VERSION" ]; then
-            echo "❌ Tag version ($VERSION) does not match Cargo.toml version ($CARGO_VERSION)"
+          # Check workspace version
+          WORKSPACE_VERSION=$(grep '^\s*version' components/Cargo.toml | head -1 | cut -d'"' -f2)
+          if [ "$WORKSPACE_VERSION" != "$VERSION" ]; then
+            echo "❌ Tag version ($VERSION) does not match workspace version ($WORKSPACE_VERSION)"
             exit 1
           fi
-          echo "✅ Version matches Cargo.toml"
+          echo "✅ Workspace version matches tag: $VERSION"
 
   build-and-publish:
-    name: Build and Publish Component
+    name: Build and Publish ${{ matrix.component }}
     needs: verify-tag
     runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        component: [mcp-gateway, mcp-authorizer]
     steps:
       - uses: actions/checkout@v4
 
       - name: Setup Rust for WASM
         uses: ./.github/actions/setup-rust
         with:
           targets: wasm32-wasip1
-          cache-key: release-component-${{ matrix.component }}-v189
+          cache-key: release-components-${{ matrix.component }}-v189
 
       - name: Install cargo-component
         uses: taiki-e/install-action@v2
@@ -98,20 +88,20 @@ jobs:
 
       - name: Build component
         run: |
-          cd "components/${{ needs.verify-tag.outputs.component }}"
+          cd "components/${{ matrix.component }}"
           cargo component build --target wasm32-wasip1 --release
       
       - name: Determine WASM file name
         id: wasm
         run: |
-          COMPONENT="${{ needs.verify-tag.outputs.component }}"
+          COMPONENT="${{ matrix.component }}"
           # Replace hyphens with underscores (Cargo uses underscores in output names)
           WASM_NAME="${COMPONENT//-/_}.wasm"
           echo "name=$WASM_NAME" >> $GITHUB_OUTPUT
       
       - name: Publish to ghcr.io
         run: |
-          COMPONENT="${{ needs.verify-tag.outputs.component }}"
+          COMPONENT="${{ matrix.component }}"
           VERSION="${{ needs.verify-tag.outputs.version }}"
           WASM_FILE="../target/wasm32-wasip1/release/${{ steps.wasm.outputs.name }}"
           
@@ -131,26 +121,59 @@ jobs:
           
           echo "✅ Published $COMPONENT v$VERSION to ghcr.io"
       
+      - name: Upload WASM artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${{ matrix.component }}-wasm
+          path: components/target/wasm32-wasip1/release/${{ steps.wasm.outputs.name }}
+
+  create-release:
+    name: Create Unified Release
+    needs: [verify-tag, build-and-publish]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      
+      - name: Download artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: artifacts
+      
       - name: Create Release
         uses: softprops/action-gh-release@v2
         with:
-          name: "${{ needs.verify-tag.outputs.component }} v${{ needs.verify-tag.outputs.version }}"
+          name: "FTL Components v${{ needs.verify-tag.outputs.version }}"
           draft: false
           prerelease: false
           generate_release_notes: true
+          files: |
+            artifacts/**/*.wasm
           body: |
-            ## Component: ${{ needs.verify-tag.outputs.component }}
+            ## FTL Components v${{ needs.verify-tag.outputs.version }}
+            
+            This release includes both FTL components with unified versioning:
+            - **mcp-gateway** - MCP gateway component
+            - **mcp-authorizer** - MCP authorization component
             
             ### Installation
             
+            #### MCP Gateway
             Add to your `spin.toml`:
             ```toml
-            [component.${{ needs.verify-tag.outputs.component }}]
-            source = { registry = "ghcr.io", package = "fastertools:${{ needs.verify-tag.outputs.component }}", version = "${{ needs.verify-tag.outputs.version }}" }
+            [component.mcp-gateway]
+            source = { registry = "ghcr.io", package = "fastertools:mcp-gateway", version = "${{ needs.verify-tag.outputs.version }}" }
             ```
             
-            Or use the latest version:
+            #### MCP Authorizer
+            Add to your `spin.toml`:
             ```toml
-            [component.${{ needs.verify-tag.outputs.component }}]
-            source = { registry = "ghcr.io", package = "fastertools:${{ needs.verify-tag.outputs.component }}", version = "latest" }
-            ```
+            [component.mcp-authorizer]
+            source = { registry = "ghcr.io", package = "fastertools:mcp-authorizer", version = "${{ needs.verify-tag.outputs.version }}" }
+            ```
+            
+            ### Using Latest Version
+            You can also use `version = "latest"` to always get the most recent release.
+            
+            ### Documentation
+            - [MCP Gateway README](https://github.com/fastertools/ftl/tree/main/components/mcp-gateway)
+            - [MCP Authorizer README](https://github.com/fastertools/ftl/tree/main/components/mcp-authorizer)

.github/workflows/release-rust-crates.yml

@@ -38,35 +38,21 @@ jobs:
         run: |
           VERSION="${{ inputs.version }}"
           
-          # Check main SDK version
-          SDK_VERSION=$(grep '^version = ' sdk/rust/Cargo.toml | head -1 | cut -d'"' -f2)
-          if [[ "${SDK_VERSION}" != "${VERSION}" ]]; then
-            echo "Version mismatch in sdk/rust/Cargo.toml: found ${SDK_VERSION}, expected ${VERSION}"
+          # Check workspace version
+          WORKSPACE_VERSION=$(grep '^\s*version = ' sdk/Cargo.toml | head -1 | cut -d'"' -f2)
+          if [[ "${WORKSPACE_VERSION}" != "${VERSION}" ]]; then
+            echo "Version mismatch in sdk/Cargo.toml workspace: found ${WORKSPACE_VERSION}, expected ${VERSION}"
             exit 1
           fi
           
-          # Check macros version
-          MACROS_VERSION=$(grep '^version = ' sdk/rust-macros/Cargo.toml | head -1 | cut -d'"' -f2)
-          if [[ "${MACROS_VERSION}" != "${VERSION}" ]]; then
-            echo "Version mismatch in sdk/rust-macros/Cargo.toml: found ${MACROS_VERSION}, expected ${VERSION}"
-            exit 1
-          fi
-          
-          # Check that SDK depends on correct macros version
-          MACROS_DEP=$(grep 'ftl-sdk-macros.*version' sdk/rust/Cargo.toml | cut -d'"' -f2)
-          if [[ "${MACROS_DEP}" != "=${VERSION}" ]]; then
-            echo "SDK depends on wrong macros version: ${MACROS_DEP}, expected =${VERSION}"
-            exit 1
-          fi
-          
-          # Check manifest version
-          JSON_VERSION=$(jq -r '."sdk/rust"' .release-please-manifest.json)
+          # Check manifest version (now uses "sdk" key)
+          JSON_VERSION=$(jq -r '.sdk' .release-please-manifest.json)
           if [[ "${JSON_VERSION}" != "${VERSION}" ]]; then
             echo "Version mismatch in manifest: found ${JSON_VERSION}, expected ${VERSION}"
             exit 1
           fi
           
-          echo "All versions validated: ${VERSION}"
+          echo "✅ Workspace version validated: ${VERSION}"
 
   test-crates:
     name: Test Crates

.github/workflows/release-sdk-rust.yml

@@ -37,25 +37,14 @@ jobs:
         run: |
           VERSION="${{ steps.parse.outputs.version }}"
           
-          # Check ftl-sdk version
-          SDK_VERSION=$(grep '^version' sdk/rust/Cargo.toml | head -1 | cut -d'"' -f2)
-          if [ "$SDK_VERSION" != "$VERSION" ]; then
-            echo "❌ Tag version ($VERSION) does not match ftl-sdk version ($SDK_VERSION)"
+          # Check workspace version
+          WORKSPACE_VERSION=$(grep '^\s*version' sdk/Cargo.toml | head -1 | cut -d'"' -f2)
+          if [ "$WORKSPACE_VERSION" != "$VERSION" ]; then
+            echo "❌ Tag version ($VERSION) does not match workspace version ($WORKSPACE_VERSION)"
             exit 1
           fi
           
-          # Check ftl-sdk-macros version
-          MACROS_VERSION=$(grep '^version' sdk/rust-macros/Cargo.toml | head -1 | cut -d'"' -f2)
-          echo "📦 ftl-sdk-macros version: $MACROS_VERSION"
-          
-          # Verify ftl-sdk depends on the correct macros version
-          MACROS_DEP=$(grep 'ftl-sdk-macros' sdk/rust/Cargo.toml | grep version | cut -d'"' -f2)
-          if [ "$MACROS_DEP" != "$MACROS_VERSION" ]; then
-            echo "❌ ftl-sdk depends on ftl-sdk-macros $MACROS_DEP but macros is at version $MACROS_VERSION"
-            exit 1
-          fi
-          
-          echo "✅ All versions are consistent"
+          echo "✅ Workspace version matches tag: $VERSION"
 
   publish:
     name: Publish to crates.io
@@ -85,14 +74,14 @@ jobs:
       - name: Publish ftl-sdk-macros
         run: |
           cd sdk/rust-macros
-          MACROS_VERSION=$(grep '^version' Cargo.toml | head -1 | cut -d'"' -f2)
+          VERSION="${{ needs.verify-tag.outputs.version }}"
           
           # Check if already published
-          if cargo search ftl-sdk-macros --limit 1 | grep -q "^ftl-sdk-macros = \"$MACROS_VERSION\""; then
-            echo "⚠️  ftl-sdk-macros v$MACROS_VERSION already published"
+          if cargo search ftl-sdk-macros --limit 1 | grep -q "^ftl-sdk-macros = \"$VERSION\""; then
+            echo "⚠️  ftl-sdk-macros v$VERSION already published"
           else
             cargo publish
-            echo "✅ Published ftl-sdk-macros v$MACROS_VERSION"
+            echo "✅ Published ftl-sdk-macros v$VERSION"
           fi
         env:
           CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}