Limit visibility again

Author: limdor

cc/toolchains/cc_toolchain_info.bzl

@@ -13,6 +13,17 @@
 # limitations under the License.
 """All providers for rule-based bazel toolchain config."""
 
+# Until the providers are stabilized, ensure that rules_cc is the only place
+# that can access the providers directly.
+# Once it's stabilized, we *may* consider opening up parts of the API, or we may
+# decide to just require users to use the public user-facing rules.
+visibility([
+    "@local_config_cc/...",
+    "//cc/toolchains/...",
+    "//cc/private/toolchain/...",
+    "//tests/rule_based_toolchain/...",
+])
+
 # Note that throughout this file, we never use a list. This is because mutable
 # types cannot be stored in depsets. Thus, we type them as a sequence in the
 # provider, and convert them to a tuple in the constructor to ensure

cc/toolchains/impl/legacy_converter.bzl

@@ -27,6 +27,13 @@ load(
     legacy_with_feature_set = "with_feature_set",
 )
 
+visibility([
+    "@local_config_cc/...",
+    "//cc/toolchains/...",
+    "//cc/private/toolchain/...",
+    "//tests/rule_based_toolchain/...",
+])
+
 # Note that throughout this file, we sort anything for which the order is
 # nondeterministic (eg. depset's .to_list(), dictionary iteration).
 # This allows our tests to call equals() on the output,