feat(sdk): add transport-free CXX bindings

.github/package-filters/rs-packages-direct.yml

@@ -118,6 +118,9 @@ platform-encryption:
 dash-platform-queries:
   - packages/dash-platform-queries/**
 
+dash-platform-cxx:
+  - packages/rs-platform-cxx/**
+
 dash-sdk:
   - packages/rs-sdk/**
 

.github/package-filters/rs-packages-no-workflows.yml

@@ -130,6 +130,15 @@ platform-encryption: &platform_encryption
 dash-platform-queries: &platform_queries
   - packages/dash-platform-queries/**
 
+dash-platform-cxx: &platform_cxx
+  - packages/rs-platform-cxx/**
+  - *platform_queries
+  - *context_provider
+  - packages/rs-drive-proof-verifier/**
+  - *dpp
+  - *drive
+  - *dapi_grpc
+
 dash-sdk: &sdk
   - packages/rs-drive-proof-verifier/**
   - packages/rs-sdk/**

.github/package-filters/rs-packages.yml

@@ -155,6 +155,16 @@ dash-platform-queries: &platform_queries
   - .github/workflows/tests*
   - packages/dash-platform-queries/**
 
+dash-platform-cxx: &platform_cxx
+  - .github/workflows/tests*
+  - packages/rs-platform-cxx/**
+  - *platform_queries
+  - *context_provider
+  - packages/rs-drive-proof-verifier/**
+  - *dpp
+  - *drive
+  - *dapi_grpc
+
 dash-sdk: &sdk
   - .github/workflows/tests*
   - packages/rs-drive-proof-verifier/**

.github/workflows/tests-rs-nightly-long-running.yml

@@ -30,6 +30,7 @@ jobs:
             drive-abci,
             drive-proof-verifier,
             dash-platform-queries,
+            dash-platform-cxx,
           ]
     steps:
       - name: Check out repo

.github/workflows/tests-rs-workspace.yml

@@ -193,6 +193,11 @@ jobs:
           cargo install cargo-machete 2>/dev/null || true
           cargo machete
 
+      - name: Check Platform CXX embedder
+        run: |
+          cargo test -p dash-platform-cxx --locked
+          CARGO_TARGET_DIR=target packages/rs-platform-cxx/test-cxx-link.sh
+
       # The transport-free cuts are how embedders with their own networking
       # (Dash Core's platform GUI, explorers) consume verification: feature
       # unification hides regressions in whole-workspace builds, so check the
@@ -203,13 +208,14 @@ jobs:
           cargo check -p dapi-grpc --no-default-features --features core,platform,client --locked
           cargo check -p drive-proof-verifier --locked
           cargo check -p dash-platform-queries --locked
+          cargo check -p dash-platform-cxx --locked
           # Native graphs: assert the networking transport stack stays out.
           # `tonic` itself is present (dapi-grpc's generated client types) but
           # without its transport feature — which is exactly what the absence
           # of hyper/rustls/tower proves. tokio is deliberately NOT asserted
           # absent: dash-context-provider depends on dash-async, which uses it
           # on native targets, and that edge predates the queries-crate split.
-          for native_package in drive-proof-verifier dash-platform-queries; do
+          for native_package in drive-proof-verifier dash-platform-queries dash-platform-cxx; do
             for banned in hyper rustls tower; do
               if cargo tree -p "$native_package" -e normal -i "$banned" 2>/dev/null | grep -q .; then
                 echo "::error::$banned leaked into $native_package's dependency tree"