crosspack 0.7.1 → 0.8.0

data/lib/crosspack/builders/app_dir.rb

@@ -10,9 +10,12 @@ module Crosspack
     # as-is.
     class AppDir
       # files: { source_path => basename inside Contents/MacOS }
-      # executables: basenames to chmod 0755
+      # executables: basenames to chmod 0755 (the first one is the bundle's
+      #   CFBundleExecutable, falling back to the package name)
+      # icon: path to the bundle icon, copied into Contents/Resources
       def self.build(name:, version:, summary:, files:, executables: [],
-                     identifier: nil, output:)
+                     display_name: nil, icon: nil, identifier: nil,
+                     min_macos: '11.0', output:)
         app_dir = File.join(output, "#{name}.app")
         FileUtils.rm_rf(app_dir)
         macos_dir = File.join(app_dir, 'Contents', 'MacOS')
@@ -34,9 +37,20 @@ module Crosspack
           FileUtils.chmod(executables.include?(dst) ? 0o755 : 0o644, target)
         end
 
+        icon_file = nil
+        if icon
+          raise BuildError, "icon: file not found #{icon}" unless File.file?(icon)
+
+          icon_file = File.basename(icon)
+          FileUtils.cp(icon, File.join(resources_dir, icon_file))
+        end
+
         write_info_plist(File.join(app_dir, 'Contents', 'Info.plist'),
                          name: name, version: version, summary: summary,
-                         identifier: identifier)
+                         executable: executables.first || name,
+                         display_name: display_name || name,
+                         icon_file: icon_file, identifier: identifier,
+                         min_macos: min_macos)
 
         File.write(File.join(output, 'BUILD-DMG.txt'), <<~TXT)
           DMG not built: hdiutil only exists on macOS.
@@ -46,31 +60,36 @@ module Crosspack
         app_dir
       end
 
-      def self.write_info_plist(path, name:, version:, summary:, identifier: nil)
+      def self.write_info_plist(path, name:, version:, summary:, executable:,
+                                display_name:, icon_file: nil, identifier: nil,
+                                min_macos: '11.0')
         bundle_id = identifier || "org.crosspack.#{name}"
+        # Without the extension .icns is assumed; other formats (png) must
+        # be named in full.
+        icon_ref = icon_file.nil? ? nil : icon_file.sub(/\.icns\z/i, '')
         File.write(path, <<~PLIST)
           <?xml version="1.0" encoding="UTF-8"?>
           <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
           <plist version="1.0">
           <dict>
             <key>CFBundleName</key>
-            <string>#{name}</string>
+            <string>#{escape(name)}</string>
             <key>CFBundleDisplayName</key>
-            <string>#{name}</string>
+            <string>#{escape(display_name)}</string>
             <key>CFBundleExecutable</key>
-            <string>#{name}</string>
+            <string>#{escape(executable)}</string>
             <key>CFBundleIdentifier</key>
-            <string>#{bundle_id}</string>
+            <string>#{escape(bundle_id)}</string>
             <key>CFBundlePackageType</key>
             <string>APPL</string>
             <key>CFBundleShortVersionString</key>
-            <string>#{version}</string>
+            <string>#{escape(version)}</string>
             <key>CFBundleVersion</key>
-            <string>#{version}</string>
+            <string>#{escape(version)}</string>
             <key>CFBundleInfoDictionaryVersion</key>
             <string>6.0</string>
             <key>LSMinimumSystemVersion</key>
-            <string>11.0</string>
+            <string>#{escape(min_macos)}</string>
             <key>NSPrincipalClass</key>
             <string>NSApplication</string>
             <key>NSSupportsAutomaticTermination</key>
@@ -78,11 +97,23 @@ module Crosspack
             <key>NSSupportsSuddenTermination</key>
             <false/>
             <key>NSMicrophoneUsageDescription</key>
-            <string>#{summary}</string>
+            <string>#{escape(summary)}</string>
+          #{plist_icon_entry(icon_ref)}
           </dict>
           </plist>
         PLIST
       end
+
+      def self.plist_icon_entry(icon_ref)
+        return '' if icon_ref.nil?
+
+        "    <key>CFBundleIconFile</key>\n    <string>#{escape(icon_ref)}</string>"
+      end
+
+      # Escapes XML entities so manifest values never break the plist.
+      def self.escape(text)
+        text.to_s.gsub('&', '&amp;').gsub('<', '&lt;').gsub('>', '&gt;')
+      end
     end
   end
 end

data/lib/crosspack/builders/deb.rb

@@ -45,6 +45,7 @@ module Crosspack
         stage_files(pkg_root)
         stage_symlinks(pkg_root)
         write_control(File.join(pkg_root, 'DEBIAN'))
+        write_maintainer_scripts(File.join(pkg_root, 'DEBIAN'))
 
         FileUtils.mkdir_p(File.dirname(@output))
         FileUtils.rm_f(@output)
@@ -104,17 +105,45 @@ module Crosspack
         summary = description_lines.shift || @name
         body = description_lines.map { |l| " #{l}" }
 
-        File.write(File.join(debian_dir, 'control'), <<~CONTROL)
-          Package: #{@name}
-          Version: #{@version}
-          Section: #{@section}
-          Priority: #{@priority}
-          Architecture: #{@architecture}
-          Maintainer: #{@maintainer}
-          Depends: #{@depends}
-          Description: #{summary}
-          #{body.join("\n")}
-        CONTROL
+        fields = ["Package: #{@name}", "Version: #{@version}", "Section: #{@section}",
+                  "Priority: #{@priority}", "Architecture: #{@architecture}",
+                  "Maintainer: #{@maintainer}"]
+        # An empty Depends: field is invalid; omit it instead.
+        fields << "Depends: #{@depends}" unless @depends.to_s.strip.empty?
+        File.write(File.join(debian_dir, 'control'),
+                   "#{(fields + ["Description: #{summary}"]).join("\n")}\n#{body.join("\n")}\n")
+      end
+
+      # Desktop integration caches: refresh the application database and the
+      # hicolor icon cache after (un)install when the package carries a
+      # .desktop file or a themed icon. The tools are guarded — they are not
+      # dpkg dependencies, minimal systems may lack them.
+      def write_maintainer_scripts(debian_dir)
+        commands = desktop_cache_commands
+        return if commands.empty?
+
+        script = "#!/bin/sh\nset -e\n#{commands.join("\n")}\n"
+        %w[postinst postrm].each do |script_name|
+          path = File.join(debian_dir, script_name)
+          File.write(path, script)
+          FileUtils.chmod(0o755, path)
+        end
+      end
+
+      def desktop_cache_commands
+        commands = @files.values.select { |d| d.end_with?('.desktop') }
+                         .map { |d| File.dirname(d) }.uniq
+                         .map do |dir|
+                           "if command -v update-desktop-database >/dev/null 2>&1; then " \
+                           "update-desktop-database -q /#{dir} || true; fi"
+                         end
+        commands += @files.values.select { |d| d.include?('/share/icons/') }
+                          .map { |d| File.dirname(d) }.uniq
+                          .map do |dir|
+                            "if command -v gtk-update-icon-cache >/dev/null 2>&1; then " \
+                            "gtk-update-icon-cache -q -t -f /#{dir} || true; fi"
+                          end
+        commands
       end
     end
   end

data/lib/crosspack/builders/pkgbuild.rb

@@ -11,12 +11,13 @@ module Crosspack
     class Pkgbuild
       def self.generate(name:, version:, release:, pkgdesc:, depends:, arch:,
                         files:, symlinks: {}, executables: [], source:,
-                        maintainer:, url: '', license: 'Proprietary', output:)
+                        sha256: nil, maintainer:, url: '', license: 'Proprietary',
+                        output:)
         content = render(
           name: name, version: version, release: release, pkgdesc: pkgdesc,
           depends: Array(depends), arch: Array(arch), files: files,
           symlinks: symlinks, executables: executables, source: Array(source),
-          maintainer: maintainer, url: url, license: license
+          sha256: sha256, maintainer: maintainer, url: url, license: license
         )
         FileUtils.mkdir_p(File.dirname(output))
         File.write(output, content)
@@ -24,8 +25,8 @@ module Crosspack
       end
 
       def self.render(name:, version:, release:, pkgdesc:, depends:, arch:,
-                      files:, symlinks:, executables:, source:, maintainer:,
-                      url:, license:)
+                      files:, symlinks:, executables:, source:, sha256:,
+                      maintainer:, url:, license:)
         depends_line = depends.map { |d| "'#{d}'" }.join(' ')
         source_line = source.map { |s| "'#{s}'" }.join(' ')
         srcbase = "$srcdir/$pkgname-$pkgver"
@@ -49,10 +50,10 @@ module Crosspack
           pkgdesc='#{escaped_desc}'
           arch=(#{arch.join(' ')})
           url='#{url}'
-          license=(#{license})
+          license=('#{license}')
           depends=(#{depends_line})
           source=(#{source_line})
-          sha256sums=('SKIP')
+          sha256sums=('#{sha256 || 'SKIP'}')
 
           package() {
           #{(install_lines + link_lines).join("\n")}

data/lib/crosspack/builders/rpm.rb

@@ -29,6 +29,7 @@ module Crosspack
         description ||= summary
         requires_line = Array(requires).join(', ')
         entries = spec_entries(files: files, symlinks: symlinks)
+        scriptlets = desktop_cache_scriptlets(files)
 
         <<~SPEC
           Name: #{name}
@@ -48,12 +49,35 @@ module Crosspack
           %install
           # Files are staged into the buildroot by crosspack.
 
+          #{scriptlets}
           %files
           %defattr(-,root,root,-)
           #{entries.join("\n")}
         SPEC
       end
 
+      # %post/%postun: refresh the application database and the hicolor icon
+      # cache when the package carries a .desktop file or a themed icon; the
+      # tools are guarded (minimal systems may lack them).
+      def self.desktop_cache_scriptlets(files)
+        commands = files.values.select { |d| d.end_with?('.desktop') }
+                        .map { |d| File.dirname(d) }.uniq
+                        .map do |dir|
+                          "command -v update-desktop-database >/dev/null 2>&1 && " \
+                          "update-desktop-database -q /#{dir} || :"
+                        end
+        commands += files.values.select { |d| d.include?('/share/icons/') }
+                         .map { |d| File.dirname(d) }.uniq
+                         .map do |dir|
+                           "command -v gtk-update-icon-cache >/dev/null 2>&1 && " \
+                           "gtk-update-icon-cache -q -t -f /#{dir} || :"
+                         end
+        return '' if commands.empty?
+
+        body = commands.join("\n")
+          "%post\n#{body}\n\n%postun\n#{body}\n\n"
+      end
+
       # %files entries: %dir for every directory so we never claim ownership
       # of shared paths like /usr or /usr/local.
       def self.spec_entries(files:, symlinks:)

data/lib/crosspack/builders/wix.rb

@@ -12,11 +12,23 @@ module Crosspack
     # complete .wxs source plus build instructions — packaging is not blocked
     # by the toolchain.
     class Wix
-      # MSI ProductVersion only honours three numeric fields (x.y.z).
+      # The UI extension providing the standard install wizard dialogs.
+      UI_EXTENSION = 'WixToolset.UI.wixext'
+      # WiX v6 cannot use the unpinned extension (it pulls the incompatible
+      # 7.0.0, WIX6101 wixext7); 7+ resolves a matching version on its own.
+      UI_EXTENSION_V6_PIN = "#{UI_EXTENSION}/6.0.1"
+
+      # MSI ProductVersion honours three numeric fields (x.y.z), each 0..255:
+      # a calver year (2026) would trip WIX1148, so it maps to the short
+      # form (26) and leading zeros are dropped (2026.09.26 -> 26.9.26).
       def self.msi_version(version)
         fields = version.to_s.split(/[.-]/).first(3)
         fields << '0' while fields.size < 3
-        fields.map { |f| f.gsub(/\D/, '').empty? ? '0' : f.gsub(/\D/, '') }.join('.')
+        fields.map do |f|
+          n = f.to_i
+          n %= 100 if n > 255
+          n.to_s
+        end.join('.')
       end
 
       # Deterministic UpgradeCode derived from the package name, so upgrades
@@ -27,40 +39,75 @@ module Crosspack
         "#{hex[0, 8]}-#{hex[8, 4]}-#{hex[12, 4]}-#{hex[16, 4]}-#{hex[20, 12]}"
       end
 
-      # Escapes XML entities so manifest values (e.g. a maintainer with
-      # "Name <email>") never break the generated .wxs.
+      # Escapes XML entities so manifest values never break the generated .wxs.
       def self.escape(text)
         text.to_s.gsub('&', '&amp;').gsub('<', '&lt;').gsub('>', '&gt;').gsub('"', '&quot;')
       end
 
+      # The deb-style "Name <email>" maintainer must not reach the MSI
+      # Manufacturer property: it lands in ARP/Publisher (and an angle-bracket
+      # email is invalid in Windows Installer paths), so only the name half
+      # is kept.
+      def self.sanitize_manufacturer(manufacturer)
+        name = manufacturer.to_s.sub(/\s*<[^<>]*>\s*/, '').strip
+        name.empty? ? manufacturer.to_s.delete('<>') : name
+      end
+
+      # Minimal RTF for the WixUI_InstallDir license dialog — it requires
+      # WixUILicenseRtf to point at a real .rtf file, else the build fails.
+      def self.license_rtf(text)
+        escaped = text.to_s.gsub('\\', '\\\\\\\\').gsub('{', '\\{').gsub('}', '\\}')
+        lines = escaped.lines.map(&:chomp)
+        lines = [''] if lines.empty?
+        "{\\rtf1\\ansi\n#{lines.join("\\par\n")}\n}\n"
+      end
+
+      # shortcuts: nil, or { name: "Display Name", target: "app.exe" } (the
+      # payload file inside INSTALLFOLDER the shortcuts launch) — installs
+      # Start Menu and Desktop shortcuts. icon: local path to an .ico for
+      # the Add/Remove Programs entry (ARPPRODUCTICON), or nil.
       def self.generate_wxs(name:, version:, manufacturer:, summary:, files:,
-                            arch: 'x64')
+                            arch: 'x64', shortcuts: nil, icon: nil)
+        license_rtf_file = "#{name}-license.rtf"
         name = escape(name)
-        manufacturer = escape(manufacturer)
+        manufacturer = escape(sanitize_manufacturer(manufacturer))
         summary = escape(summary)
         directory = arch == 'arm64' ? 'ProgramFiles6432Folder' : 'ProgramFiles64Folder'
         components = files.values.each_with_index.map do |dst, i|
-          src = files.key(dst).gsub('/', '\\')
+          src = escape(files.key(dst).gsub('/', '\\'))
           "      <Component Id=\"c#{i}\" Guid=\"*\">\n" \
             "        <File Id=\"f#{i}\" Source=\"#{src}\" />\n" \
             '      </Component>'
         end.join("\n")
 
+        # Id must be INSTALLFOLDER: WiX v4+ auto-creates a directory with
+        # this exact Id (named "[Manufacturer] [ProductName]") only when the
+        # author has not defined one; a different Id makes it add a phantom
+        # sibling directory and Manufacturer leaks into install paths.
+        shortcut_xml = shortcuts ? shortcuts_fragment(shortcuts) : nil
+        feature_refs = ["<ComponentGroupRef Id=\"Payload\" />"]
+        feature_refs << '<ComponentGroupRef Id="Shortcuts" />' if shortcuts
+        arp_icon = icon ? arp_icon_fragment(icon) : nil
+
         <<~WXS
           <?xml version="1.0" encoding="UTF-8"?>
-          <!-- Generated by crosspack. Build with: wix build -arch #{arch} -o #{name}.msi #{name}.wxs -->
-          <Wix xmlns="http://wixtoolset.org/schemas/v4/wxs">
+          <!-- Generated by crosspack. Build with: wix build -arch #{arch} -ext #{UI_EXTENSION} -o #{name}.msi #{name}.wxs -->
+          <Wix xmlns="http://wixtoolset.org/schemas/v4/wxs"
+               xmlns:ui="http://wixtoolset.org/schemas/v4/wxs/ui">
             <Package Name="#{name}" Manufacturer="#{manufacturer}" Version="#{msi_version(version)}"
                      UpgradeCode="{#{upgrade_code(name)}}" Scope="perMachine">
               <SummaryInformation Description="#{summary}" />
               <MajorUpgrade DowngradeErrorMessage="A newer version of #{name} is already installed." />
 
               <StandardDirectory Id="#{directory}">
-                <Directory Id="INSTALLDIR" Name="#{name}" />
+                <Directory Id="INSTALLFOLDER" Name="#{name}" />
               </StandardDirectory>
 
+              <Property Id="WixUILicenseRtf" Value="#{license_rtf_file}" />
+              <ui:WixUI Id="WixUI_InstallDir" InstallDirectory="INSTALLFOLDER" />
+          #{arp_icon}
               <Feature Id="Main" Title="#{name}" Level="1">
-                <ComponentGroupRef Id="Payload" />
+          #{feature_refs.map { |r| "        #{r}" }.join("\n")}
               </Feature>
             </Package>
 
@@ -69,14 +116,40 @@ module Crosspack
           #{components}
               </ComponentGroup>
             </Fragment>
+          #{shortcut_xml}
           </Wix>
         WXS
       end
 
-      # Writes the .wxs next to the output and, when WiX is installed,
-      # builds a real MSI. Returns the path of whatever was produced.
+      # Start Menu + Desktop shortcuts for the main executable. The shortcut
+      # component's KeyPath is a marker registry value (a shortcut cannot be
+      # a KeyPath itself); the icon comes from the exe.
+      def self.shortcuts_fragment(shortcuts)
+        name = escape(shortcuts[:name])
+        target = escape(shortcuts[:target])
+        <<~XML
+          <Fragment>
+            <ComponentGroup Id="Shortcuts" Directory="INSTALLFOLDER">
+              <Component Id="c.shortcuts" Guid="*">
+                <Shortcut Id="StartMenuShortcut" Directory="ProgramMenuFolder"
+                          Name="#{name}" Target="[INSTALLFOLDER]#{target}"
+                          WorkingDirectory="INSTALLFOLDER" />
+                <Shortcut Id="DesktopShortcut" Directory="DesktopFolder"
+                          Name="#{name}" Target="[INSTALLFOLDER]#{target}"
+                          WorkingDirectory="INSTALLFOLDER" />
+                <RegistryValue Root="HKLM" Key="Software\\#{name}"
+                               Name="installed" Type="integer" Value="1" KeyPath="yes" />
+              </Component>
+            </ComponentGroup>
+          </Fragment>
+        XML
+      end
+
+      # Writes the .wxs (plus the license .rtf the UI wizard shows) next to
+      # the output and, when WiX is installed, builds a real MSI. Returns
+      # the path of whatever was produced.
       def self.build(name:, version:, manufacturer:, summary:, files:, output:,
-                     arch: 'x64')
+                     arch: 'x64', shortcuts: nil, license: nil, icon: nil)
         arch = { 'x86_64' => 'x64', 'aarch64' => 'arm64' }.fetch(arch, arch)
         missing = files.reject { |src, _dst| File.file?(src) }
         unless missing.empty?
@@ -92,7 +165,11 @@ module Crosspack
         File.write(wxs_path, generate_wxs(name: name, version: version,
                                           manufacturer: manufacturer,
                                           summary: summary, files: files,
-                                          arch: arch))
+                                          arch: arch, shortcuts: shortcuts,
+                                          icon: icon))
+        File.write(File.join(out_dir, "#{name}-license.rtf"),
+                   license_rtf(license || summary))
+        FileUtils.cp(icon, File.join(out_dir, File.basename(icon))) if icon
 
         wix = wix_command
         unless wix
@@ -100,13 +177,17 @@ module Crosspack
             MSI not built: WiX toolset not found in PATH.
             Install the .NET SDK and WiX:
               dotnet tool install -g wix
+            The install wizard needs the UI extension:
+              wix extension add -g #{UI_EXTENSION_V6_PIN}   # WiX 6.x (no pin needed for WiX 7+)
             Then build with:
-              wix build -arch #{arch} -o #{File.basename(output)} #{name}.wxs
+              wix build -arch #{arch} -ext #{UI_EXTENSION} -o #{File.basename(output)} #{name}.wxs
           TXT
           return wxs_path
         end
 
+        ensure_ui_extension(wix)
         out, status = Open3.capture2e(wix, 'build', '-arch', arch.to_s,
+                                      '-ext', UI_EXTENSION,
                                       '-o', output, wxs_path)
         unless status.success?
           raise BuildError, "wix build failed to build #{output}:\n#{out}"
@@ -124,6 +205,29 @@ module Crosspack
       rescue Errno::ENOENT
         nil
       end
+
+      # The Add/Remove Programs entry shows this icon (ARP/Publisher uses
+      # the MSI Icons table, not the installed files).
+      def self.arp_icon_fragment(icon)
+        icon_file = File.basename(icon)
+        "    <Property Id=\"ARPPRODUCTICON\" Value=\"AppIcon\" />\n" \
+          "    <Icon Id=\"AppIcon\" SourceFile=\"#{escape(icon_file)}\" />"
+      end
+
+      # The WixUI dialogs live in the UI extension, so it must be installed
+      # before `wix build -ext WixToolset.UI.wixext` can resolve it. A no-op
+      # when it is already present.
+      def self.ensure_ui_extension(wix = 'wix')
+        list, = Open3.capture2e(wix, 'extension', 'list', '-g')
+        return if list.include?(UI_EXTENSION)
+
+        version, = Open3.capture2e(wix, '--version')
+        spec = version.to_i >= 7 ? UI_EXTENSION : UI_EXTENSION_V6_PIN
+        out, status = Open3.capture2e(wix, 'extension', 'add', '-g', spec)
+        return if status.success?
+
+        raise BuildError, "cannot install the WiX UI extension (#{spec}):\n#{out}"
+      end
     end
   end
 end

data/lib/crosspack/launcher.rb

@@ -1,10 +1,11 @@
 # frozen_string_literal: true
 
 module Crosspack
-  # Host-only launch commands: `crosspack run` (build the host target, then
-  # launch the application's main binary) and `crosspack install` (launch the
-  # package packed for this host). Both resolve the current host target, so
-  # they take no target argument and are meaningless on any other system.
+  # Host-only launch commands: `crosspack run [goal]` (build the goal's
+  # host-buildable entries — default goal: `default` —, then launch the
+  # application's main binary) and `crosspack install` (launch the package
+  # packed for this host). Both resolve the current host target, so they
+  # take no package-target argument and are meaningless on any other system.
   #
   # Commands may be overridden per host in crosspack.yml (run:/install:
   # sections, selectors like the deps: rules of build:); placeholders:
@@ -15,11 +16,14 @@ module Crosspack
   class Launcher
     class Error < BuildError; end
 
-    # Builds the host target first (the same stage `crosspack build` runs),
-    # then launches the first package.executables binary from builds/.
+    # Builds the given goal's host-buildable entries first (the same stage
+    # `crosspack build <goal>` runs; default goal: `default`), then launches
+    # a package.executables binary from builds/ — the one named by the goal
+    # when it matches, otherwise the first.
     # Returns the launched process's exit code.
     def self.run(config, root: Dir.pwd, args: [], output_base: nil, version: nil,
-                 deps: true, host_string: nil, host_os: Crossbuild::Platform.os,
+                 deps: true, goal: Crossbuild::BuildManifest::DEFAULT_GOAL, host_string: nil,
+                 host_os: Crossbuild::Platform.os,
                  host_arch: Crossbuild::Platform.arch, selectors: Crossbuild::Platform.selectors)
       config = Config.coerce(config, root: root)
       target = host_target('run', host_string, host_arch)
@@ -30,9 +34,12 @@ module Crosspack
       Crossbuild::Builder.new(build_manifest, root: root, output_base: output_base,
                                             version: version, deps: deps,
                                             host_os: host_os, host_arch: host_arch)
-                         .run(target: target.to_s)
+                         .run(goal: goal)
 
-      exe = pkg.executables_for(target).first
+      # A binary goal (`crosspack run helloworld`) launches that executable;
+      # a group goal or the default goal launches the first one.
+      executables = pkg.executables_for(target)
+      exe = executables.include?(goal) ? goal : executables.first
       if exe.nil?
         raise Error,
               'run: the package: section does not name the binary to launch — ' \

data/lib/crosspack/package_manifest.rb

@@ -14,7 +14,7 @@ module Crosspack
   # no .so libraries and vice versa.
   class PackageManifest
     REQUIRED = %w[maintainer description sources prefix payload].freeze
-    OPTIONAL = %w[name summary license section lib_dir executables links desktop icon].freeze
+    OPTIONAL = %w[name summary license section lib_dir executables links desktop icon min_macos].freeze
 
     # Payload selectors may name an os in addition to a family: every distro
     # family packs a linux target, so "linux:" covers deb/rpm/PKGBUILD
@@ -142,6 +142,12 @@ module Crosspack
       @data['icon']
     end
 
+    # Minimum macOS version for the .app bundle (LSMinimumSystemVersion);
+    # defaults to 11.0 in the builder.
+    def min_macos
+      @data['min_macos']
+    end
+
     private
 
     def validate
@@ -172,6 +178,7 @@ module Crosspack
       validate_string('description', nil)
       validate_string('sources', nil)
       validate_string('prefix', /\A[a-z0-9][a-z0-9+._\/-]*\z/)
+      validate_string('min_macos', /\A\d+(\.\d+)*\z/)
       validate_payload
       validate_executables
       validate_links