ohos: add the OpenHarmony platform host

.github/workflows/ohos-pdfium-source.yml

@@ -0,0 +1,95 @@
+name: Build OHOS PDFium from source
+
+# Fork-only, manually dispatched build for the OHOS PDFium source port.
+# This job intentionally runs on a Linux x86_64 GitHub-hosted runner: Chromium's
+# bundled GN/Ninja are linux64 binaries and cannot execute on the OHOS device.
+# It downloads the public OHOS SDK at build time (the SDK is not committed),
+# builds the pinned PDFium source revision, strips the library and uploads it
+# as an artifact. No signing material or repository secrets are used.
+
+on:
+  # Temporary fork trigger. GitHub only registers workflow_dispatch workflows
+  # from the default branch; this lets the pinned source build run directly
+  # from the feature branch before it is promoted.
+  push:
+    branches:
+      - ohos-pdfium-source
+    paths:
+      - .github/workflows/ohos-pdfium-source.yml
+      - platform/ohos/scripts/build-pdfium-source.sh
+      - platform/ohos/patches/pdfium-*.patch
+  workflow_dispatch:
+    inputs:
+      revision:
+        description: OHOS PDFium source revision
+        type: string
+        default: f2a7573b5fd1071f61388aeb642329006ae22153
+
+permissions:
+  contents: read
+
+jobs:
+  pdfium:
+    name: PDFium arm64 source build
+    runs-on: ubuntu-24.04
+    timeout-minutes: 360
+    env:
+      # push events have no workflow_dispatch inputs; keep the pinned default.
+      OHOS_PDFIUM_REVISION: ${{ inputs.revision || 'f2a7573b5fd1071f61388aeb642329006ae22153' }}
+      OHOS_PDFIUM_SOURCE_DIR: ${{ github.workspace }}/.pdfium-src
+      OHOS_PDFIUM_JOBS: "4"
+      CARGO_NET_OFFLINE: "false"
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install build prerequisites
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends \
+            build-essential clang lld ninja-build pkg-config \
+            python3 python3-pip git curl unzip zip \
+            libglib2.0-dev libfontconfig1-dev libfreetype6-dev \
+            libjpeg-dev libpng-dev libtiff-dev libwebp-dev
+
+      - name: Clone the pinned OHOS PDFium source
+        run: |
+          git clone --filter=blob:none \
+            https://gitcode.com/OpenHarmonyPCDeveloper/pdfium.git \
+            "$OHOS_PDFIUM_SOURCE_DIR"
+          cd "$OHOS_PDFIUM_SOURCE_DIR"
+          git fetch --depth 1 origin "$OHOS_PDFIUM_REVISION"
+          git checkout --detach "$OHOS_PDFIUM_REVISION"
+          test "$(git rev-parse HEAD)" = "$OHOS_PDFIUM_REVISION"
+
+      - name: Install the public OHOS SDK
+        id: sdk
+        run: |
+          cd "$OHOS_PDFIUM_SOURCE_DIR"
+          bash ohos_sdk/.install
+          sdk_root="$OHOS_PDFIUM_SOURCE_DIR/ohos_sdk/openharmony"
+          test -d "$sdk_root/native/llvm"
+          test -d "$sdk_root/native/sysroot"
+          echo "OHOS_SDK_ROOT=$sdk_root" >> "$GITHUB_ENV"
+          echo "OHOS_SDK_NATIVE=$sdk_root/native" >> "$GITHUB_ENV"
+
+      - name: Build PDFium
+        run: |
+          bash platform/ohos/scripts/build-pdfium-source.sh
+
+      - name: Verify and checksum the artifact
+        run: |
+          test -s platform/ohos/prebuilt/arm64/libpdfium.so
+          file platform/ohos/prebuilt/arm64/libpdfium.so
+          sha256sum platform/ohos/prebuilt/arm64/*.so > platform/ohos/prebuilt/SHA256SUMS
+          cat platform/ohos/prebuilt/SHA256SUMS
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: ohos-pdfium-arm64-source
+          path: |
+            platform/ohos/prebuilt/arm64/*.so
+            platform/ohos/prebuilt/SHA256SUMS
+            platform/ohos/prebuilt/PDFium-LICENSE
+            platform/ohos/prebuilt/README.md
+          if-no-files-found: error
+          retention-days: 14

.github/workflows/ohos.yml

@@ -0,0 +1,70 @@
+name: OpenHarmony hap
+
+# Tier 3 (platform/README.md): a community port built by a manually dispatched
+# workflow, never on pull requests. The HarmonyOS SDK and hvigor are not
+# anonymously downloadable, so the build job targets a self-hosted runner with
+# the toolchain described in platform/ohos/README.md.
+#
+# This workflow is build-only. It never receives signing material; release
+# signing stays a local, explicit step outside CI.
+
+on:
+  workflow_dispatch:
+    inputs:
+      app:
+        description: Application to package
+        type: choice
+        options:
+          - mail
+          - demo
+        default: mail
+      profile:
+        description: Cargo profile
+        type: choice
+        options:
+          - release
+          - debug
+        default: release
+      run_quality:
+        description: Run the shared quality suite first
+        type: boolean
+        default: true
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ohos-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  quality:
+    if: inputs.run_quality
+    name: Shared quality suite
+    uses: ./.github/workflows/quality.yml
+
+  hap:
+    name: ${{ inputs.app }} hap (${{ inputs.profile }})
+    needs: quality
+    if: always() && (needs.quality.result == 'success' || needs.quality.result == 'skipped')
+    runs-on: [self-hosted, linux, ohos]
+    timeout-minutes: 180
+    steps:
+      - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+
+      - name: Check the OHOS workspace formatting
+        run: cargo fmt --manifest-path platform/ohos/Cargo.toml --all -- --check
+
+      - name: Build the hap
+        env:
+          APP: ${{ inputs.app }}
+          PROFILE: ${{ inputs.profile }}
+          CARGO_BUILD_JOBS: "4"
+          SKIP_SIGN: "1"
+        run: sh platform/ohos/scripts/build-hap.sh
+
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: flectar-ohos-${{ inputs.app }}-${{ inputs.profile }}
+          path: platform/ohos/build/*.hap
+          if-no-files-found: error

Cargo.toml

@@ -174,7 +174,7 @@ objc2-foundation = { version = "0.3", default-features = false, features = ["std
 objc2-service-management = { version = "0.3", default-features = false, features = ["std", "objc2", "objc2-foundation", "SMAppService"] }
 
 # This is `desktop`; keep it in step with the `mobile` alias in build.rs.
-[target.'cfg(not(any(target_os = "android", target_os = "ios")))'.dependencies]
+[target.'cfg(not(any(target_os = "android", target_os = "ios", target_env = "ohos")))'.dependencies]
 arboard = { version = "3.6", default-features = false, features = ["wayland-data-control"] }
 rfd = { version = "0.16", default-features = false, features = ["tokio", "xdg-portal"] }