feat: make client sources upstream-independent

.cargo/config.vendor.toml

@@ -0,0 +1,12 @@
+# Phase 2 Cargo contract: registry crates are resolved from the future local
+# vendor source; git-backed packages are owned as path dependencies in
+# third_party/ and therefore do not need source replacement entries here.
+
+[source.crates-io]
+replace-with = "vendored-sources"
+
+[source.vendored-sources]
+directory = "vendor"
+
+[net]
+offline = true

.gitattributes

@@ -1 +1,16 @@
 * text=auto
+
+# Preserve approved vendor bytes for copied roots whose canonical evidence uses
+# CRLF line endings.
+/third_party/kcp-sys/kcp/.gitignore -text
+/third_party/kcp-sys/kcp/.travis.yml -text
+/third_party/kcp-sys/kcp/README.en.md -text
+/third_party/kcp-sys/kcp/README.md -text
+/third_party/kcp-sys/kcp/ikcp.c -text
+/third_party/kcp-sys/kcp/ikcp.h -text
+/third_party/kcp-sys/kcp/protocol.txt -text
+/third_party/kcp-sys/kcp/test.cpp -text
+/third_party/kcp-sys/kcp/test.h -text
+/third_party/sysinfo/md_doc/sid.md -text
+/third_party/sysinfo/src/windows/sid.rs -text
+/third_party/tao/.changes/readme.md -text

.github/workflows/third-party-RustDeskTempTopMostWindow.yml

@@ -27,7 +27,8 @@ on:
             type: string
             default: 'Windows10'
 
-permissions: {}
+permissions:
+  contents: read
 
 env:
   project_path: WindowInjection/WindowInjection.vcxproj
@@ -38,19 +39,30 @@ jobs:
     strategy:
         fail-fast: false
     env:
-      build_output_dir: RustDeskTempTopMostWindow/WindowInjection/${{ inputs.platform }}/${{ inputs.configuration }}
+      build_output_dir: third_party/windows/RustDeskTempTopMostWindow/WindowInjection/${{ inputs.platform }}/${{ inputs.configuration }}
     steps:
       - name: Add MSBuild to PATH
         uses: microsoft/setup-msbuild@30375c66a4eea26614e0d39710365f22f8b0af57 # v3
 
-      - name: Download the source code
+      - name: Checkout repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - name: Validate pinned local source
+        shell: pwsh
         run: |
-          git clone https://github.com/rustdesk-org/RustDeskTempTopMostWindow RustDeskTempTopMostWindow
+          $expectedCommit = 'ecd8d6a139eee76845ea66423fb739af450fda90'
+          $sourceRoot = Join-Path $env:GITHUB_WORKSPACE 'third_party/windows/RustDeskTempTopMostWindow'
+          if (-not (Test-Path (Join-Path $sourceRoot 'WindowInjection/WindowInjection.vcxproj'))) {
+            throw "Pinned RustDeskTempTopMostWindow source is missing: $sourceRoot"
+          }
+           python scripts/check-flutter-source-ownership.py --require-window-pin RustDeskTempTopMostWindow $expectedCommit
+           if ($LASTEXITCODE -ne 0) {
+             throw "RustDeskTempTopMostWindow ownership pin validation failed: expected record path and ref"
+           }
 
       - name: Build the project
         run: |
-          cd RustDeskTempTopMostWindow && git checkout ecd8d6a139eee76845ea66423fb739af450fda90
-          msbuild ${{ env.project_path }} -p:Configuration=${{ inputs.configuration }} -p:Platform=${{ inputs.platform }} /p:TargetVersion=${{ inputs.target_version }}
+          msbuild third_party/windows/RustDeskTempTopMostWindow/${{ env.project_path }} -p:Configuration=${{ inputs.configuration }} -p:Platform=${{ inputs.platform }} /p:TargetVersion=${{ inputs.target_version }}
 
       - name: Archive build artifacts
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1

.gitignore

@@ -55,4 +55,24 @@ examples/**/target/
 vcpkg_installed
 flutter/lib/generated_plugin_registrant.dart
 libsciter.dylib
-flutter/web/
+flutter/web/
+
+# Phase 3 exact owned sources, including package assets and licenses.
+!third_party/
+!third_party/**
+# Owned third-party source must not re-include generated or local artifacts.
+third_party/**/.DS_Store
+**/.flutter-plugins
+**/.flutter-plugins-dependencies
+**/.packages
+**/Pods/
+**/ephemeral/
+third_party/**/.dart_tool/
+third_party/**/.run/
+third_party/**/__pycache__/
+third_party/**/target/
+third_party/**/build/
+third_party/**/.gradle/
+third_party/**/.generated/
+third_party/**/.idea/
+third_party/**/*.vcxproj.user