22003f9b0c
Drives the three-OS CI matrix verification of the skia-safe + glutin + glow + winit dep stack per Step 1a spec §7. - examples/p0_probe.rs: stencil_visibility + readback chain runner (must own a real OS main thread because winit on macOS rejects EventLoop::new() from cargo test worker threads). - tests/p0_probe.rs: subprocess-invoke wrapper, gated #[ignore = "P0_PROBE_GATE"] so default cargo test stays untouched. - Cargo.toml: add transient [target.'cfg(not(target_arch = "wasm32"))'. dev-dependencies] block (skia-safe 0.97 + glutin 0.32.3 + glutin-winit 0.5.0 + glow 0.17.0 + raw-window-handle 0.6.2 + scopeguard 1.2.0 + winit defaults). Pinned to versions resolved in /tmp/skia-glow-probe. - .github/workflows/rust-check.yml: install Linux GL prereqs (xvfb, mesa, libxkbcommon, libwayland) and add a P0-probe-gate step running cargo test --ignored on each OS (Linux through xvfb-run; Windows early-returns per spec §8.2 WINDOWS_GPU_DEFERRED_NO_RUNNER). All three artefacts are TRANSIENT — reverted in a follow-up cleanup commit after CI is green and the loader-compat notes commit lands. Task 1 owns the permanent integration.
61 lines
1.5 KiB
TOML
61 lines
1.5 KiB
TOML
# cargo-deny config — pinned to ≥ 0.16 schema
|
||
# Validated via openpencil-docs/superpowers/notes/2026-05-02-cargo-deny-validation.md
|
||
|
||
[graph]
|
||
all-features = false
|
||
# 限定到实际发布目标（macOS/Linux/Windows native + wasm32）。
|
||
# 不限定的话 cargo-deny 默认尝试所有 target（含 Android/iOS），
|
||
# 拉进 jni / android-activity 等 edition-2024 deps，在 rustc 1.82 上 cargo metadata 失败。
|
||
targets = [
|
||
{ triple = "x86_64-unknown-linux-gnu" },
|
||
{ triple = "aarch64-unknown-linux-gnu" },
|
||
{ triple = "x86_64-apple-darwin" },
|
||
{ triple = "aarch64-apple-darwin" },
|
||
{ triple = "x86_64-pc-windows-msvc" },
|
||
{ triple = "wasm32-unknown-unknown" },
|
||
]
|
||
|
||
[licenses]
|
||
allow = [
|
||
"MIT",
|
||
"Apache-2.0",
|
||
"Apache-2.0 WITH LLVM-exception",
|
||
"BSD-2-Clause",
|
||
"BSD-3-Clause",
|
||
"ISC",
|
||
"Unicode-DFS-2016",
|
||
"Unicode-3.0",
|
||
"CDLA-Permissive-2.0",
|
||
"MPL-2.0",
|
||
"Zlib",
|
||
]
|
||
confidence-threshold = 0.93
|
||
|
||
[advisories]
|
||
yanked = "deny"
|
||
ignore = []
|
||
|
||
[bans]
|
||
multiple-versions = "warn"
|
||
wildcards = "deny"
|
||
# 允许 workspace 内部 path 依赖不写 version（标准实践，避免每次 bump 都改两处）。
|
||
allow-wildcard-paths = true
|
||
deny = [
|
||
# WASM bundle 黑名单（kickoff spec §1.2 invariant）
|
||
"pen-agent-cli",
|
||
"pen-server",
|
||
"agent",
|
||
"native-tls",
|
||
]
|
||
|
||
[[bans.features]]
|
||
crate = "tokio"
|
||
deny = ["process", "rt-multi-thread"]
|
||
|
||
[sources]
|
||
unknown-registry = "deny"
|
||
unknown-git = "deny"
|
||
allow-git = [
|
||
"https://github.com/ZSeven-W/agent-rs",
|
||
]
|