build(depends): pin platform_cxx to the SDK-backed dash-platform-cxx crate

dashpay/platform#4633 rebuilds the Platform CXX bindings as a thin bridge over dash-sdk: the SDK owns DAPI transport, retries and proof verification, and Core supplies endpoints, quorum keys, its ChainLock height and wallet signatures. The crate is an ordinary workspace member now, so the package vendors from the workspace root (the lockfile made vendorable by dashpay/platform#4631), builds with -p dash-platform-cxx, and installs the header tree the crate's build.rs stages plus the static archive; the nested standalone manifest and install.sh are gone with the old design.

mbedtls leaves depends: the SDK carries its own TLS stack (rustls with the system trust store), so Core no longer links a TLS library for Platform. The vendoring config gains the workspace's git sources.

Validated on aarch64-apple-darwin: make -C depends PLATFORM_GUI=1 platform_cxx vendors 840 crates (150 MB archive) and builds the crate offline in 3 minutes; the staged prefix carries include/dash/platform/{ffi.h,signer.h}, include/rust/cxx.h and lib/libdash_platform_cxx.a. The knob-off package set is unchanged.

Author: PastaPastaPasta

ci/test/00_setup_env_native_platform_gui.sh

@@ -6,14 +6,15 @@
 
 export LC_ALL=C.UTF-8
 
-# Builds depends with PLATFORM_GUI=1 so mbedtls and the Platform-owned CXX
-# binding archive (libdash_platform_cxx.a, built offline from vendored crates)
-# are produced, hash-verified and installed into the depends prefix, then
-# builds dash-qt against that prefix. The --enable-platform-gui configure flag
-# and the platform_* unit-test suites arrive with the Platform client library
-# and are added to BITCOIN_CONFIG there; until then this lane proves the
-# depends knob end to end and that the enriched prefix stays link-compatible.
-# Functional tests are skipped: there is no dashd-only surface to drive.
+# Builds depends with PLATFORM_GUI=1 so the Platform-owned CXX binding
+# archive (libdash_platform_cxx.a, dash-sdk built offline from vendored
+# crates) is produced, hash-verified and installed into the depends prefix,
+# then builds dash-qt against that prefix. The --enable-platform-gui configure
+# flag and the platform_* unit-test suites arrive with the Platform client
+# library and are added to BITCOIN_CONFIG there; until then this lane proves
+# the depends knob end to end and that the enriched prefix stays
+# link-compatible. Functional tests are skipped: there is no dashd-only
+# surface to drive.
 export CONTAINER_NAME=ci_native_platform_gui
 export HOST=x86_64-pc-linux-gnu
 export PACKAGES="python3-zmq qtbase5-dev qttools5-dev-tools libdbus-1-dev libharfbuzz-dev"

depends/packages/mbedtls.mk

@@ -26,7 +26,7 @@ natpmp_packages=libnatpmp
 multiprocess_packages = libmultiprocess capnp
 multiprocess_native_packages = native_libmultiprocess native_capnp
 
-platform_packages = mbedtls rust_stdlib tenderdash_sources platform_cxx
+platform_packages = rust_stdlib tenderdash_sources platform_cxx
 platform_native_packages = native_protobuf native_rust
 
 usdt_linux_packages=systemtap

depends/packages/packages.mk

@@ -3,17 +3,16 @@
 # file COPYING or http://www.opensource.org/licenses/mit-license.php.
 
 package=platform_cxx
-$(package)_version=df4fdb68559ef57d50624b7f0841594aef8647e5
+$(package)_version=d72b4d5159da3c98417a5249ffdd8273b5f7fc6f
 $(package)_download_path=https://github.com/dashpay/platform/archive
 $(package)_download_file=$($(package)_version).tar.gz
 $(package)_file_name=platform-$($(package)_version).tar.gz
-$(package)_sha256_hash=935b64a4f3acf48840706d573acc4c43ce4ac44272265ea96af45e35c47d829a
-$(package)_build_subdir=packages/rs-platform-cxx/standalone
+$(package)_sha256_hash=5733e9d53765b2e00490409442b96d984341439e05e15ca62429a0ceee1e3bc1
 $(package)_dependencies=native_rust rust_stdlib native_protobuf tenderdash_sources
 $(package)_patches=cargo-config.toml rustc-linker.sh
 $(package)_vendored_file_name=platform-cxx-$($(package)_version)-vendored.tar.gz
-$(package)_cargo_manifest=packages/rs-platform-cxx/standalone/Cargo.toml
-$(package)_cargo_lock_path=packages/rs-platform-cxx/standalone/Cargo.lock
+$(package)_cargo_manifest=Cargo.toml
+$(package)_cargo_lock_path=Cargo.lock
 
 define $(package)_preprocess_cmds
   true
@@ -26,12 +25,14 @@ define $(package)_build_cmds
   CARGO_TARGET_DIR=$($(package)_build_dir)/target \
   PROTOC=$(build_prefix)/bin/protoc \
   PROTOC_INCLUDE=$(build_prefix)/include \
-  $($(package)_cargo) build --locked --offline --release --target $(rust_stdlib_target)
+  $($(package)_cargo) build --locked --offline --release --target $(rust_stdlib_target) -p dash-platform-cxx
 endef
 
+# The crate's build.rs stages the generated bridge header, the cxx runtime
+# header and signer.h under target/<triple>/release/include; that tree plus
+# the static archive is the whole installed interface.
 define $(package)_stage_cmds
-  CARGO_BUILD_TARGET=$(rust_stdlib_target) \
-  CARGO_PROFILE=release \
-  CARGO_TARGET_DIR=$($(package)_build_dir)/target \
-  bash ../install.sh $($(package)_staging_prefix_dir)
+  mkdir -p $($(package)_staging_prefix_dir)/include $($(package)_staging_prefix_dir)/lib && \
+  cp -R target/$(rust_stdlib_target)/release/include/. $($(package)_staging_prefix_dir)/include/ && \
+  cp target/$(rust_stdlib_target)/release/libdash_platform_cxx.a $($(package)_staging_prefix_dir)/lib/
 endef

depends/packages/platform_cxx.mk

@@ -1,30 +1,70 @@
 [source.crates-io]
 replace-with = "vendored-sources"
 
-[source.vendored-sources]
-directory = "vendored"
+[source."git+https://github.com/QuantumExplorer/rust-rocksdb.git?rev=52772eea7bcd214d1d07d80aa538b1d24e5015b7"]
+git = "https://github.com/QuantumExplorer/rust-rocksdb.git"
+rev = "52772eea7bcd214d1d07d80aa538b1d24e5015b7"
+replace-with = "vendored-sources"
 
 [source."git+https://github.com/dashpay/agora-blsful?rev=0c34a7a488a0bd1c9a9a2196e793b303ad35c900"]
 git = "https://github.com/dashpay/agora-blsful"
 rev = "0c34a7a488a0bd1c9a9a2196e793b303ad35c900"
 replace-with = "vendored-sources"
 
-[source."git+https://github.com/dashpay/grovedb?rev=a2791bbdca756d6a6113024aec48f09f7a33faa9"]
+[source."git+https://github.com/dashpay/bls-signatures?rev=0842b17583888e8f46c252a4ee84cdfd58e0546f"]
+git = "https://github.com/dashpay/bls-signatures"
+rev = "0842b17583888e8f46c252a4ee84cdfd58e0546f"
+replace-with = "vendored-sources"
+
+[source."git+https://github.com/dashpay/grovedb?rev=6fc7e1e82de27a56c3428c0d5dd15b5f6a0ea23e"]
 git = "https://github.com/dashpay/grovedb"
-rev = "a2791bbdca756d6a6113024aec48f09f7a33faa9"
+rev = "6fc7e1e82de27a56c3428c0d5dd15b5f6a0ea23e"
+replace-with = "vendored-sources"
+
+[source."git+https://github.com/dashpay/jsonschema-rs?branch=configure_regexp"]
+git = "https://github.com/dashpay/jsonschema-rs"
+branch = "configure_regexp"
+replace-with = "vendored-sources"
+
+[source."git+https://github.com/dashpay/orchard.git?tag=dashified-0.14.1"]
+git = "https://github.com/dashpay/orchard.git"
+tag = "dashified-0.14.1"
+replace-with = "vendored-sources"
+
+[source."git+https://github.com/dashpay/rs-bip37-bloom-filter?branch=develop"]
+git = "https://github.com/dashpay/rs-bip37-bloom-filter"
+branch = "develop"
 replace-with = "vendored-sources"
 
 [source."git+https://github.com/dashpay/rs-tenderdash-abci?tag=v1.5.1"]
 git = "https://github.com/dashpay/rs-tenderdash-abci"
 tag = "v1.5.1"
 replace-with = "vendored-sources"
 
-[source."git+https://github.com/dashpay/rust-dashcore?rev=173ffac0fdc0c73dda0626cf385bbcfcf2437aeb"]
+[source."git+https://github.com/dashpay/rust-dashcore?rev=93260bf39bac5d9d09e89bfb45e9ea3ff7fdcbcd"]
 git = "https://github.com/dashpay/rust-dashcore"
-rev = "173ffac0fdc0c73dda0626cf385bbcfcf2437aeb"
+rev = "93260bf39bac5d9d09e89bfb45e9ea3ff7fdcbcd"
+replace-with = "vendored-sources"
+
+[source."git+https://github.com/dashpay/serde-wasm-bindgen?branch=fix/uint8array-to-bytes"]
+git = "https://github.com/dashpay/serde-wasm-bindgen"
+branch = "fix/uint8array-to-bytes"
 replace-with = "vendored-sources"
 
 [source."git+https://github.com/dashpay/vsss-rs?branch=main"]
 git = "https://github.com/dashpay/vsss-rs"
 branch = "main"
 replace-with = "vendored-sources"
+
+[source."git+https://github.com/dashpay/zcash_note_encryption?rev=9f7e93d"]
+git = "https://github.com/dashpay/zcash_note_encryption"
+rev = "9f7e93d"
+replace-with = "vendored-sources"
+
+[source."git+https://github.com/gvz/zmq.rs?rev=b0787de310befaedd1f762e3b9bc711612d8137f"]
+git = "https://github.com/gvz/zmq.rs"
+rev = "b0787de310befaedd1f762e3b9bc711612d8137f"
+replace-with = "vendored-sources"
+
+[source.vendored-sources]
+directory = "vendored"