c28dd2e469
Some checks failed
wai release binaries build on Windows / the seven release binaries · windows (push) Waiting to run
joule-moq-web browser client / joule-moq-web · does this change touch it (push) Successful in 39s
energy meters on real hardware / RAPL and NVML on jetson-hub (push) Successful in 2m0s
wai-app and Create / wai-app · does this change touch it (push) Successful in 1m56s
WAI examples / WAI examples · does this change touch them (push) Successful in 11s
energy meters on real hardware / sink decode table · RAPL on jetson-hub (NVML surveyed) (push) Successful in 3m8s
joule-code conformance gate / Build + round-trip C1-C4 vectors (push) Successful in 6m10s
wai-app and Create / wai-app · tests, clippy, the line language's verifier (linux) (push) Successful in 34s
joule-code conformance gate / joule-moq-ingest, every target (push) Successful in 7m57s
joule-code conformance gate / joule-moq-relay, every target (push) Successful in 10m8s
repository checks / lockfiles, advisories, tests in CI, workflow hygiene, spec and section references, public text (push) Failing after 14m1s
joule-code conformance gate / joule-moq-relay, its own energy on a counter (macos) (push) Successful in 52s
energy meters on real hardware / sink decode table · per-task energy and the GPU rail on macOS (push) Successful in 3m38s
WAI examples / WAI examples · portable · linux (push) Successful in 20m39s
WAI examples / WAI examples · android-app · linux-arm64 (push) Successful in 10m38s
wai-app and Create / wai-app · Create, browser end-to-end (macos) (push) Successful in 7m57s
joule-moq-web browser client / joule-moq-web · browser end-to-end (macos) (push) Successful in 18m22s
WAI examples / WAI examples · the archive, the readiness check, the browser and Apple · macos (push) Successful in 17m18s
The four workspaces wateringhole builds from or tracks. **sandbox-rs** was the one behind: - wasmtime 49 -> 50 (resolved 50.0.1), matching every other Wasmtime user in this repository. 49.0.5 was already past the October compiler advisories, so this is currency, not a security fix. `WASMTIME_VERSION`, which the S2 mechanism states and a test holds to the lockfile, moves with it. - p256 and p384 0.13 -> 0.14: an encoded public key is `to_sec1_point` now. - sha2 0.10 -> 0.11, base64 0.22 -> 0.23: no source change. - ureq 2 -> 3: headers are `header`, a body is read through `body_mut()`, and the certificate fetch uses the client's bounded `read_to_vec` in place of an unbounded `read_to_end`. `sandbox-jcp`'s `GateError::Denied` boxes its `Decision`. The decision grew when holds gained a money dimension and per-link debits, and clippy's large-error lint has refused this crate since; nothing outside the crate names the field. **joulespec-rs**: toml 0.9 -> 1. **jcp-rs, sense-rs**: lockfile only. `sandbox-schema` takes base64 from its workspace, and six other workspaces depend on it by path, so their lockfiles are refreshed for that one crate and each was checked with `--locked`: joule-code-rs and its l3 example, joule-ui-rs, joulecontract-rs, jouledesk-rs, proof-rs. ed25519-dalek stays on 2.x. Fifty lockfiles here resolve it and the key types cross workspace boundaries by path, so 3.0 is one coordinated move or none. Build host, each with `--locked`: jcp-rs 776 tests, sandbox-rs 471, sense-rs 56, joulespec-rs 139, all passing; clippy clean with `-D warnings` in all four. Co-Authored-By: Claude Fable 5.2 <[email protected]>
54 lines
1.8 KiB
TOML
54 lines
1.8 KiB
TOML
[workspace]
|
|
resolver = "2"
|
|
members = [
|
|
"crates/sandbox-schema",
|
|
"crates/sandbox-capability",
|
|
"crates/sandbox-meter",
|
|
"crates/sandbox-attest",
|
|
"crates/sandbox-runtime",
|
|
"crates/sandbox-tee",
|
|
"crates/sandbox-exec-wasm",
|
|
"crates/sandbox-exec-microvm",
|
|
"crates/sandbox-exec-os",
|
|
"crates/sandbox-conformance",
|
|
"crates/sandbox-proof",
|
|
"crates/sandbox-proof-wasm",
|
|
"crates/sandbox-mcp",
|
|
"crates/sandbox-build",
|
|
"crates/sandbox-cli",
|
|
"crates/sandbox-jcp",
|
|
]
|
|
|
|
[workspace.package]
|
|
version = "0.1.0"
|
|
edition = "2021"
|
|
license = "Apache-2.0"
|
|
repository = "https://github.com/transaction-science/open-standards"
|
|
|
|
[workspace.dependencies]
|
|
sandbox-schema = { path = "crates/sandbox-schema" }
|
|
sandbox-capability = { path = "crates/sandbox-capability" }
|
|
sandbox-meter = { path = "crates/sandbox-meter" }
|
|
sandbox-attest = { path = "crates/sandbox-attest" }
|
|
sandbox-runtime = { path = "crates/sandbox-runtime" }
|
|
sandbox-tee = { path = "crates/sandbox-tee" }
|
|
sandbox-exec-wasm = { path = "crates/sandbox-exec-wasm" }
|
|
sandbox-exec-microvm = { path = "crates/sandbox-exec-microvm" }
|
|
sandbox-exec-os = { path = "crates/sandbox-exec-os" }
|
|
sandbox-conformance = { path = "crates/sandbox-conformance" }
|
|
sandbox-proof = { path = "crates/sandbox-proof" }
|
|
sandbox-build = { path = "crates/sandbox-build" }
|
|
|
|
wasmtime = "50"
|
|
p384 = { version = "0.14", default-features = false, features = ["ecdsa", "sha384"] }
|
|
p256 = { version = "0.14", default-features = false, features = ["ecdsa"] }
|
|
sha2 = { version = "0.11", default-features = false }
|
|
ureq = { version = "3", features = ["json"] }
|
|
blake3 = "1"
|
|
ed25519-dalek = { version = "2", features = ["rand_core"] }
|
|
ciborium = "0.2"
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
base64 = "0.23"
|
|
hex = "0.4"
|
|
thiserror = "2"
|