[tiye]

使用者需同步 Calcit CLI、@calcit/procs 和 JS-FFI 并重新生成 JS。本 PR 将尚未发布的 0.0.35 候选配对到正式 0.32.1／JS-FFI 0.2.9。Snapshot 完全不变，ControlState／ControlDelta、坐标、计时、清理与公开回调合同保持。

• 更新 deps、runtime 和 lock，沿用已核实的精确正式 action tag；保留完整 strict、原 unit、canonical、不可变安装与部署门禁。
• 正式 Caps strict/toolchain、43 个全定义、完整 strict（diagnostics=[]）、原 1 项 unit、dynamic-method=0、deprecated-call=0 和构建通过。
• 实际 Demo 左 A 与释放、隔离原公开 API 的四按钮／Shift／双手柄非零坐标，以及 start／replace／重复 clear／重启通过；停止后 ticks 固定 1237、重启增长至 1247，无 console warning/error。

未做真实移动设备或所有消费者验收。复用的本地验收页仅位于忽略目录，不提交新测试框架或脚本。
PR 仅保留原前端构建 artifact，不上传 COS 或生产 rsync。合并会按原 main 工作流部署 Demo，路径和 host key 门禁不变；不合并或部署 Phlox 等下游，不发布 npm。

Summary by CodeRabbit

• Updates

  • Updated the project’s compatibility versions for Calcit and JavaScript FFI tooling.
  • Updated the versions used by automated workflow actions.

• Documentation

  • Clarified the scope of this patch and updated the recorded validation results, including the note that real-device testing was not performed.

[coderabbitai]

Caution

Review failed

The pull request is closed.

Walkthrough

The pull request updates Calcit and related dependency versions, revises the README compatibility and validation notes, and replaces pinned commit SHAs in the upload workflow with action version tags.

Changes: Dependency version alignment

Layer / File(s)	Summary
Paired dependency versions and compatibility notes deps.cirru, package.json, README.md	Calcit and @calcit/procs move to 0.32.1, and JS-FFI moves to 0.2.9. The README updates compatibility details and records the validation results and mobile-device testing limitation.

Upload workflow action references

Layer / File(s)	Summary
Upload workflow action tags .github/workflows/upload.yaml	Action references change from pinned commit SHAs with version comments to version tags. Workflow steps and conditions remain unchanged.

Priority: Not assessed

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

Possibly related PRs

• Triadica/touch-control#44: Updates the same dependency pair to the preceding Calcit 0.32.0 and JS-FFI 0.2.8 versions.
• Triadica/touch-control#43: Updates the same dependencies and compatibility notes for an earlier version pair.
• Triadica/touch-control#41: Updates the same dependency pairing to earlier Calcit and JS-FFI versions.

Merge Risk: Moderate · up to d334f

The dependency bump to Calcit 0.32.1 and JS-FFI 0.2.9 is consistent. However, the deploy workflow no longer pins its actions to immutable commits, so a moved or compromised tag could run unreviewed code with the COS deployment secrets. Restore the SHA pins, keeping the versions in comments, before merging unless the change is explicitly accepted.

Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[tiye]

已核对 action 引用建议。本次按维护者明确要求使用精确正式 tag，并已接受 tag 可移动的风险，因此保留当前选择，不恢复 SHA pin。各 tag 对应的发布提交已逐项核实；没有扩大权限或改变原门禁、条件、host key 与部署路径。

CodeRabbit 因 PR 已关闭而未完成评审，不将其摘要算作完整评审通过；精确提交 d334fbd 已完成独立只读评审，原 PR/main CI、实际控件/API 验收及原 Demo 部署通过。此项作为已明确接受的引用策略记录，无需修改代码或重跑部署。