Rearchitect vcpkg port for official submission

[bmehta001]

Addresses #1412, #1390, and #781

• Rearchitects the vcpkg port from a shell-script-based build with different behavior for different platforms, into a pure CMake workflow for official submission to the vcpkg registry that should works on all supported platforms
• Have created vcpkg tests and a sample project where this library was imported into ONNXRuntime and successfully tested these and all existing unit/functional tests where applicable, on Windows, WSL, Android Simulator on WSL with NDK, macOS, and iOS Simulator on macOS

Changes:

vcpkg

• For portfile.cmake, use vcpkg_from_github() + vcpkg_cmake_configure() + vcpkg_cmake_install() + vcpkg_cmake_config_fixup()
• Added vcpkg.json manifest with dependency declarations (sqlite3, zlib, nlohmann-json, curl), platform constraints (!uwp), and optional feature flags (azmon, privacyguard, cds, signals, sanitizer, liveeventinspector).
  • zlib in vcpkg does not have the SIMD patches - have added more at the end for how to fix this.
• Added usage file (vcpkg usage instructions shown after install)
• Removed: CONTROL, TODO.md, get_repo_name.sh, response_file_linux.txt, response_file_mac.txt, v142-build.patch, since they are now redundant or outdated

CMake (had to modify to fix some behavior in legacy builds and for vcpkg)

• Use MATSDK_USE_VCPKG_DEPS option to detect vcpkg toolchain and thus
  • Resolve dependencies with find_package() ; when OFF, use existing vendored/system-installed workflow
  • Skip manual compiler/platform flag configuration (architecture, paths, etc.) for vcpkg builds
  • Added CMake package config (cmake/MSTelemetryConfig.cmake.in) to generate find_package(MSTelemetry CONFIG) support with transitive dependency re-finding (find_dependency() for sqlite3, zlib, nlohmann-json, curl, pthreads as needed).
  • Added install/export targets — install(TARGETS mat EXPORT MSTelemetryTargets ...) with GNUInstallDirs, write_basic_package_version_file(), and configure_package_config_file() to specify paths in standardized way
  • Deduplicated and simplified dependency linking — replaced the tangled shared/static forking with a clear three-way branch: vcpkg mode (imported targets), Android legacy (bundled source compilation), and Linux/macOS legacy
    (-lsqlite3 -lz).
  • Added Android HTTP client selection (HttpClient_Android.cpp is now compiled on Android instead of HttpClient_Curl.cpp)
  • Link Apple frameworks like CoreFoundation, Foundation, CFNetwork, Network, SystemConfiguration, UIKit (iOS) / IOKit (macOS) via target_link_libraries() with -framework syntax.
  • Used message(STATUS ...) consistently throughout (or FATAL_ERROR) to use official CMake keywords
  • Quote EXISTS path arguments to prevent CMP0012 warnings.

Build flags

• Added -fno-finite-math-only for Clang and AppleClang (helps fix issues for ORT builds consuming this library where -ffast-math is enabled), since sqlite3 uses the INFINITY macro, which is undefined under -ffinite-math-only
  • If this PR is merged in, it effectively subsumes Remove fast-math for clang build #1392
• Move -Wno-reorder to apply only to CMAKE_CXX_FLAGS (since it's a C++-only flag)
• Split GCC vs Clang warning flags (GCC doesn't support -Wno-unknown-warning-option)
• Removed ZLIB_WINAPI from vcpkg builds since vcpkg's zlib does not use WINAPI/STDCALL.
• Updated MATSDK_API_VERSION from 3.4 to 3.10 (which I assume is current SDK version)

Obj-C/Swift wrapper resilience

• Added compile-time feature detection to ODWLogger.mm to conditionally compile Privacy Guard and Sanitizer integration. When modules aren't available (e.g., submodule not cloned), calls log a warning instead of failing to compile.
• Updated Package.swift to add Privacy Guard and Sanitizer compilation conditions.
• Updated Swift wrapper to use #if canImport() for optional module imports.

Updated samples

• Added shared MSTelemetrySample.cmake for ease of updating all sample CMakeLists.txt files now include this shared module that handles both vcpkg (find_package) and legacy (vendored) dependency resolution.
• Removed hardcoded install paths from all sample CMakeLists.txt files, since it was causing local builds to fail

Test infrastructure (tests/vcpkg/)

• Added standalone vcpkg consumer test (main.cpp, CMakeLists.txt, vcpkg.json) using core APIs (LogManager, EventProperties, PII annotations, event priority) and verifies find_package(MSTelemetry CONFIG) works correctly.
• Added platform-specific test scripts:
  - test-vcpkg-windows.ps1 — auto-detects host architecture (x64/ARM64), finds VS via vswhere, builds with x64-windows-static or arm64-windows-static, runs 8 integration tests.
  - test-vcpkg-linux.sh — detects host triplet, builds and runs tests.
  - test-vcpkg-macos.sh — builds with host-native triplet, runs tests.
  - test-vcpkg-ios.sh — builds for both arm64-ios (device) and simulator (arm64-ios-simulator), verifies Mach-O binary architecture.
  - test-vcpkg-android.sh — cross-compiles for configurable ABI (arm64-v8a, armeabi-v7a, x86_64, x86), verifies ELF binary production.
• Added README.md with usage instructions for all platforms.

Bug fixes:
- Fix restartRecoversEventsFromStorage iOS functest failure
- FHttpRequestApple::Cancel() called [session getTasksWithCompletionHandler:] to cancel every task on the shared static NSURLSession.The completion handler callback fires asynchronously on an internal dispatch queue, so when one SDK session tears down and a new session starts sending requests, the stale callback arrives and cancels the new session's in-flight tasks. This caused receivedRequests.size() == 0 in the second block of the restart test. The fix removes the blanket cancel and keeps only [m_dataTask cancel], which cancels the specific task.

-  Fixed data races, memory leaks in HTTP pipeline and worker thread for Apple
    - Added m_httpCallbacksMtx around .empty() check in HttpClientManager: cancelAllRequests() which reads m_httpCallbacks.empty(), since onHttpResponse() removes entries under that mutex on another thread.
   - HttpResponseDecoder: The Abort outcome path set ctx->httpResponse = nullptr without delete, leaking the SimpleHttpResponse allocated by the HTTP client. Added the missing delete like RetryNetwork already had
   - WorkerThread: Join() logged warnings when queues were non-empty on shutdown but never freed the remaining Task* objects. Replaced the warnings with delete + clear().
   - TransmissionPolicyManager: uploadAsync() wrote m_runningLatency and m_scheduledUploadTime outside m_scheduledUploadMutex, while scheduleUpload() reads them under that mutex. Moved the writes inside the lock so the reader sees a consistent state. (Still some issues, since some other code touches them, but unlikely to be major issue)

Pipelines

• Added vcpkg tests to pipelines
• Updated macos-13 (removed in Dec. 2025) to macos-14
• Cancelled previous pipeline runs if new commit is pushed
• Extended some timeouts for tests to decrease flakiness, since builds running on simulators on slow or very active computers can be slow

Other changes

• Added .gitattributes to marks tools/ports/, tests/vcpkg/, and docs/building-with-vcpkg.md with export-ignore so they are excluded from GitHub tarballs and so vcpkg files don't affect SHA needed for vcpkg, since vcpkg doesn't need the port files themselves when downloading the GitHub source tarball
• Updated .gitignore to ignores vcpkg test build artifacts.
• Fixed Logger.cpp destructor — removed LOG_TRACE call from ~Logger() to prevent static-destruction-order crash on iOS simulator (where debugLogMutex may be destroyed before the Logger instance). If this is an issue, I can revert it, as I am not sure if it would be an actual issue in a real iOS deployment scenario.
• Removed stale header references from .vcxproj and .vcxproj.filters files (referenced files that no longer exist). If I was in doubt, I kept it in.
• Updated docs (docs/building-with-vcpkg.md) to cover all platforms, overlay port usage, feature flags, and troubleshooting.

After merging

• Need a separate commit to update the SHA and point REF at a release tag (I assume will be 3.10.42.1)
• Then will officially submit port to vcpkg registry
  • May be possible to set it so that future releases will automatically result in updated vcpkg ports

For zlib vcpkg lacking SIMD patches:

• zlib-ng does have the SIMD (and many other patches!), but setting ZLIB_COMPAT=on to use that would without changing any existing zlib calls would force downstream vcpkg users to also adopt zlib-ng. Downstream users can override zlib for each triplet themselves with something like:

set(ZLIB_COMPAT ON)

for the triplet .cmake file

Then, in vcpkg.json for the downstream consuming project, a user can use:

   {
     "dependencies": [
       "onnxruntime",
       "mstelemetry"
     ],
     "overrides": [
       { "name": "zlib", "version": "zlib-ng@2.3.3" }
     ]
   }

Another option for future consideration would be to use zlib-ng directly with ZLIB_COMPAT OFF (giving us a different namespace and preventing any package conflicts, duplicate symbols, and any issues that can come from that). This would also require updating the codebase to use the updated header files, which means that to prevent breaking the standard CMake build, we would have to also updated the vendored version to use zlib-ng (which would make updating the version easier but would require extensive testing).