fix(pangocairo): 断言 ink > 0,而不是按开发机字体调出来的阈值

渲染检查原来写的是 `drawn > 100`。在我这台 184 个字体族的机器上得到 216 像素、
通过;在只有 4 个字体族的 CI runner 上得到 72 像素、失败 —— 几乎没有字体时
「世界」渲染成豆腐块,墨迹更薄。

那让它变成了对**机器**的断言而不是对这次构建的断言,正是周围注释一直在警告的那
类错误:gnome.gio 的 xdgmime 检查刻意不断言具体 MIME,理由完全相同。

墨迹就是墨迹:任何正数都证明七个包把像素放下去了。

tarball 重切:sha256 → 9be92e7f…,CN 容器 tag → 1.56.1-2。

Author: Sunrisepeak

.agents/docs/2026-08-30-graphics-stack-coverage-design.md

@@ -2100,6 +2100,12 @@ freedesktop.cairo  字形落下去的那张 surface
 
 **空白图片意味着其中之一没干活。**
 
+⭐ **而断言是 `ink > 0`,刻意不是一个调出来的数。** 早先写的是 `> 100`:在我这台
+有 184 个字体族的机器上得到 216 像素、**通过**;在只有 4 个字体族的 CI runner 上
+得到 72 像素、**失败** —— 因为几乎没有字体时「世界」渲染成豆腐块,墨迹更薄。
+那个阈值是**对机器的断言**,不是对这次构建的断言。和 gnome.gio 的 xdgmime 检查
+刻意不断言具体 MIME 是同一条理由。
+
 ⚠️ 而且它**诚实地降级**:`freedesktop.fontconfig` 故意把运行期路径编译成空,
 所以没有 `FONTCONFIG_FILE` 的 runner 合法地找到零个字体族 —— 那就没有东西可画、
 也没有东西可断言。**那种情况被报告出来,而不是被静默略过**,因为「0 个字体族,

pkgs/p/gnome.pango.lua

@@ -84,11 +84,14 @@ package = {
             ["1.56.1"] = {
                 url = {
                     GLOBAL = "https://github.com/mcpplibs/pango/archive/refs/tags/1.56.1.tar.gz",
-                    -- Verified byte-identical to the GLOBAL tag archive, not
-                    -- merely "same version": the asset IS that archive.
-                    CN     = "https://gitcode.com/mcpp-res/pango/releases/download/1.56.1/pango-1.56.1.tar.gz",
+                    -- ⚠️ The container tag is `1.56.1-2`, not `1.56.1`. gitcode
+                    -- refuses to REPLACE an asset of the same name in an
+                    -- existing release, so each corrected tarball needs a new
+                    -- container tag while the PACKAGE version stays upstream's.
+                    -- Verified byte-identical to the GLOBAL tag archive.
+                    CN     = "https://gitcode.com/mcpp-res/pango/releases/download/1.56.1-2/pango-1.56.1.tar.gz",
                 },
-                sha256 = "52b32cd2b30326459950ad9a6ecb24ab4909dbe3f631a2657e3973d78015ed01",
+                sha256 = "9be92e7fcbb1544921c67ba2576b070371e864ddda2e8d420c0a6f2ca1ef5b2f",
             },
         },
     },

pkgs/p/gnome.pangocairo.lua

@@ -90,11 +90,14 @@ package = {
             ["1.56.1"] = {
                 url = {
                     GLOBAL = "https://github.com/mcpplibs/pango/archive/refs/tags/1.56.1.tar.gz",
-                    -- Verified byte-identical to the GLOBAL tag archive, not
-                    -- merely "same version": the asset IS that archive.
-                    CN     = "https://gitcode.com/mcpp-res/pango/releases/download/1.56.1/pango-1.56.1.tar.gz",
+                    -- ⚠️ The container tag is `1.56.1-2`, not `1.56.1`. gitcode
+                    -- refuses to REPLACE an asset of the same name in an
+                    -- existing release, so each corrected tarball needs a new
+                    -- container tag while the PACKAGE version stays upstream's.
+                    -- Verified byte-identical to the GLOBAL tag archive.
+                    CN     = "https://gitcode.com/mcpp-res/pango/releases/download/1.56.1-2/pango-1.56.1.tar.gz",
                 },
-                sha256 = "52b32cd2b30326459950ad9a6ecb24ab4909dbe3f631a2657e3973d78015ed01",
+                sha256 = "9be92e7fcbb1544921c67ba2576b070371e864ddda2e8d420c0a6f2ca1ef5b2f",
             },
         },
     },

pkgs/p/gnome.pangoft2.lua

@@ -68,11 +68,14 @@ package = {
             ["1.56.1"] = {
                 url = {
                     GLOBAL = "https://github.com/mcpplibs/pango/archive/refs/tags/1.56.1.tar.gz",
-                    -- Verified byte-identical to the GLOBAL tag archive, not
-                    -- merely "same version": the asset IS that archive.
-                    CN     = "https://gitcode.com/mcpp-res/pango/releases/download/1.56.1/pango-1.56.1.tar.gz",
+                    -- ⚠️ The container tag is `1.56.1-2`, not `1.56.1`. gitcode
+                    -- refuses to REPLACE an asset of the same name in an
+                    -- existing release, so each corrected tarball needs a new
+                    -- container tag while the PACKAGE version stays upstream's.
+                    -- Verified byte-identical to the GLOBAL tag archive.
+                    CN     = "https://gitcode.com/mcpp-res/pango/releases/download/1.56.1-2/pango-1.56.1.tar.gz",
                 },
-                sha256 = "52b32cd2b30326459950ad9a6ecb24ab4909dbe3f631a2657e3973d78015ed01",
+                sha256 = "9be92e7fcbb1544921c67ba2576b070371e864ddda2e8d420c0a6f2ca1ef5b2f",
             },
         },
     },

tests/examples/pangocairo/tests/module.cpp

@@ -67,7 +67,9 @@ int main()
     int families = -1;
     { PangoFontFamily **f = nullptr; pango_font_map_list_families(map, &f, &families); g_free(f); }
     if (families > 0)
-        check(drawn > 100, "pango_cairo_show_layout put ink on the surface");
+        // `> 0`, not a tuned number — see the header-route test next door for
+        // why a threshold here is an assertion about the runner's fonts.
+        check(drawn > 0, "pango_cairo_show_layout put ink on the surface");
     else
         g_print("   ⚠️  0 font families: the rendering assertion was NOT run.\n");
 

tests/examples/pangocairo/tests/pangocairo.cpp

@@ -130,7 +130,14 @@ int main()
     if (families > 0) {
         // ⭐ THE WHOLE LINE, IN ONE ASSERTION.
         check(w > 0 && h > 0, "the layout measured a non-empty box");
-        check(drawn > 100,
+        // ⚠️ `> 0`, NOT `> 100`. An earlier version used 100 and PASSED here
+        // (216 pixels, 184 font families) while FAILING on a CI runner with
+        // four families and 72 — because with almost no fonts "世界" renders
+        // as tofu boxes and the ink is thinner. The threshold was calibrated
+        // to the developer's font set, which makes it an assertion about the
+        // MACHINE rather than about this build. Ink is ink: any positive count
+        // proves all seven packages put pixels down.
+        check(drawn > 0,
               "pango_cairo_show_layout put ink on the surface — seven packages");
     } else {
         // Not a pass. The runner has no fonts, so the only real check could