ee/wcp: migrate to rust

.github/workflows/_build-rs.yml

@@ -33,6 +33,7 @@ jobs:
           - ak-nss
           - ak-pam
           - ak-sysd
+          - ee/wcp
         platform: ${{ fromJSON(inputs.platforms) }}
         exclude:
           # pam & nss are linux-only targets
@@ -44,6 +45,19 @@ jobs:
             platform: macos-26
           - target: ak-nss
             platform: windows-2025
+          # wcp is a windows-only credential provider
+          - target: ee/wcp
+            platform: macos-26
+          - target: ee/wcp
+            platform: ubuntu-24.04
+          - target: ee/wcp
+            platform: ubuntu-24.04-arm
+        include:
+          # keep the artifact name "wcp" for compatibility with the
+          # packaging workflow that consumes it
+          - target: ee/wcp
+            platform: windows-2025
+            artifact_name: wcp
     runs-on: ${{ matrix.platform }}
     env:
       CARGO_TERM_COLOR: always
@@ -78,14 +92,14 @@ jobs:
         with:
           rustflags: ""
           cache: false
-      - if: ${{ matrix.target == 'ak-sysd' && matrix.platform == 'windows-2025' }}
+      - if: ${{ (matrix.target == 'ak-sysd' || matrix.target == 'ee/wcp') && matrix.platform == 'windows-2025' }}
         uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1
       - name: Force real MSVC link.exe
         # ilammy/msvc-dev-cmd puts MSVC's tools on PATH, but Git for Windows'
         # own usr/bin/link.exe (a hardlink utility, not a linker) still wins
         # PATH resolution on this runner image, breaking cargo's link step
         # ("/usr/bin/link: extra operand ..."). Pin the real one explicitly.
-        if: ${{ matrix.target == 'ak-sysd' && matrix.platform == 'windows-2025' }}
+        if: ${{ (matrix.target == 'ak-sysd' || matrix.target == 'ee/wcp') && matrix.platform == 'windows-2025' }}
         shell: pwsh
         run: |
           $linkExe = (Get-Command link.exe -All | Where-Object { $_.Source -notlike '*\Git\*' } | Select-Object -First 1).Source
@@ -119,7 +133,7 @@ jobs:
       - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v5
         id: artifact
         with:
-          name: authentik_${{ matrix.platform }}_${{ matrix.target }}${{ inputs.artifact_suffix }}
+          name: authentik_${{ matrix.platform }}_${{ matrix.artifact_name || matrix.target }}${{ inputs.artifact_suffix }}
           path: bin/
       - uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v4
         if: always()

.github/workflows/build.yml

@@ -13,9 +13,6 @@ jobs:
   call-build-rs:
     uses: ./.github/workflows/_build-rs.yml
     secrets: inherit
-  call-build-ee-wcp:
-    uses: ./.github/workflows/_build-ee-wcp.yml
-    secrets: inherit
   call-build-ee-psso:
     uses: ./.github/workflows/_build-ee-psso.yml
     secrets: inherit
@@ -29,7 +26,6 @@ jobs:
   call-package-windows:
     needs:
       - call-build-rs
-      - call-build-ee-wcp
     uses: ./.github/workflows/_package-windows.yml
     secrets: inherit
   call-package-linux:

.github/workflows/release-publish.yml

@@ -15,11 +15,6 @@ jobs:
     secrets: inherit
     with:
       is_release: true
-  call-build-ee-wcp:
-    uses: ./.github/workflows/_build-ee-wcp.yml
-    secrets: inherit
-    with:
-      is_release: true
   call-build-ee-psso:
     uses: ./.github/workflows/_build-ee-psso.yml
     secrets: inherit
@@ -37,7 +32,6 @@ jobs:
   call-package-windows:
     needs:
       - call-build-rs
-      - call-build-ee-wcp
     uses: ./.github/workflows/_package-windows.yml
     secrets: inherit
     with:

.github/workflows/test.yml

@@ -160,17 +160,6 @@ jobs:
           cache: "pnpm"
           cache-dependency-path: "pnpm-lock.yaml"
       - run: make ${{ matrix.target }}/lint
-  lint_cpp:
-    name: Lint
-    strategy:
-      fail-fast: false
-      matrix:
-        target:
-          - ee/wcp
-    runs-on: windows-2025
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v5
-      - run: make ${{ matrix.target }}/lint
   build_rs_e2e:
     uses: ./.github/workflows/_build-rs.yml
     with:

Makefile

@@ -96,7 +96,6 @@ bump:
 	"$(MAKE)" browser-ext/bump
 	"$(MAKE)" vpkg/macos/bump
 	"$(MAKE)" ee/psso/bump || true
-	"$(MAKE)" ee/wcp/bump || true
 
 ak-pam/%:
 	"$(MAKE)" -C "${TOP}/ak-pam" $*

ak-ffi/Cargo.toml

@@ -4,16 +4,12 @@ version.workspace = true
 edition.workspace = true
 license.workspace = true
 
-[lib]
-crate-type = ["staticlib", "lib"]
-
 [lints]
 workspace = true
 
 [dependencies]
 ak-platform = { path = "../ak-platform" }
 eyre = { workspace = true }
-cxx = "1.0.194"
 url = { workspace = true }
 serde = { workspace = true }