@gjsify/tls-native 0.21.0 → 0.23.0

package/README.md

@@ -36,7 +36,33 @@ if (hasNativeTls()) {
 }
 ```
 
-Ships as a prebuilt `.so` + `.typelib` for `linux-x86_64`. Requires `glib-networking` with a GnuTLS backend (the default on Fedora / GNOME platforms).
+Requires `glib-networking` with a GnuTLS backend (the default on Fedora / GNOME platforms) for the Phase-2 session APIs. See [Platform coverage](#platform-coverage) for the prebuilt platforms.
+
+## Platform coverage
+
+| Platform | Prebuild | Built by |
+|---|---|---|
+| `linux-x86_64` | ✅ `.so` + `.gir` + `.typelib` | native runner |
+| `linux-aarch64` | ✅ | native runner |
+| `linux-ppc64`, `linux-s390x`, `linux-riscv64` | ✅ | QEMU emulation |
+| `darwin-arm64` (macOS, Apple silicon) | ✅ `.dylib` + `.gir` + `.typelib` | `macos-latest` runner |
+| `darwin-x64` (macOS, Intel) | ❌ | — no runner leg yet |
+| Windows | ❌ | — no Vala/GI bridge in this repo targets Windows |
+
+All prebuilds are produced by [`.github/workflows/prebuilds.yml`](../../../.github/workflows/prebuilds.yml)
+and committed back to the repository.
+
+The macOS prebuild links GnuTLS from Homebrew, so **Phase 1 (OCSP response parsing) is fully
+functional there**. Phase 2 (`SessionAccess`, channel bindings, session resumption) additionally
+requires `glib-networking` built with the GnuTLS backend at *runtime*; where that backend is
+absent, `hasTlsSessionAccess()` reports `false` and the API degrades to the documented
+`undefined` / `false` / no-op contract — exactly as Node behaves on a build without session
+support. No runtime verification of Phase 2 on macOS has been done.
+
+**Known gap — a `darwin-arm64` prebuild is built and shipped, but the CLI does not
+load it yet.** `detectNativePackages()` (`packages/infra/cli/src/utils/detect-native-packages.ts`)
+hardcodes a `linux-` directory prefix, and `buildNativeEnv()` exports `LD_LIBRARY_PATH`,
+which macOS `dyld` ignores in favour of `DYLD_LIBRARY_PATH`.
 
 ## License
 

package/meson.build

@@ -45,12 +45,32 @@ libGjsifyTls = library('gjsifytls', sources,
     install_dir: [true, true, true, true],
 )
 
+# ----------------------------------------------------------------------------
+# Host-dependent shared-library leaf name.
+#
+# The typelib records the exact filename gjs' g_module_open() resolves at load
+# time, and meson names the shared library per host convention: lib<name>.so on
+# ELF hosts, lib<name>.dylib on macOS. Recording the wrong leaf yields a typelib
+# that IS found via GI_TYPELIB_PATH but whose library never loads — a silent,
+# confusing failure. Mirrors the branch in packages/napi/napi/meson.build.
+#
+# Windows is deliberately absent: this bridge has had no Windows portability
+# work, so `else` (ELF naming) is the honest fallback rather than a .dll branch
+# that would imply support which does not exist.
+# ----------------------------------------------------------------------------
+host_system = host_machine.system()
+if host_system == 'darwin'
+    shared_lib_name = 'libgjsifytls.dylib'
+else
+    shared_lib_name = 'libgjsifytls.so'
+endif
+
 g_ir_compiler = find_program('g-ir-compiler')
 
 custom_target(meson.project_name() + '-1.0.typelib',
     command: [
         g_ir_compiler,
-        '--shared-library', 'libgjsifytls.so',
+        '--shared-library', shared_lib_name,
         '--output', '@OUTPUT@',
         meson.current_build_dir() / meson.project_name() + '-1.0.gir',
     ],

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gjsify/tls-native",
-    "version": "0.21.0",
+    "version": "0.23.0",
     "description": "Optional Vala/GObject bridge providing GnuTLS capabilities not exposed by Gio.TlsConnection — OCSP-response parsing (RFC 6960), session resumption data extraction, channel binding (tls-finished bytes for SCRAM-SHA-*). Enhances @gjsify/tls when installed.",
     "type": "module",
     "main": "lib/esm/index.js",
@@ -19,6 +19,14 @@
         "src/vala"
     ],
     "gjsify": {
+        "platforms": [
+            "linux-x86_64",
+            "linux-aarch64",
+            "linux-ppc64",
+            "linux-s390x",
+            "linux-riscv64",
+            "darwin-arm64"
+        ],
         "prebuilds": "prebuilds",
         "runtimes": {
             "gjs": "polyfill",
@@ -52,7 +60,7 @@
         "init:meson": "meson setup build .",
         "init:meson:wipe": "gjsify run init:meson --wipe",
         "build:meson": "gjsify run init:meson && meson compile -C build",
-        "build:prebuilds": "gjsify run build:meson && mkdir -p prebuilds/linux-x86_64 && cp build/libgjsifytls.so build/GjsifyTls-1.0.gir build/GjsifyTls-1.0.typelib prebuilds/linux-x86_64/",
+        "build:prebuilds": "gjsify run build:meson && node ../../../scripts/stage-prebuild.mjs .",
         "build:gir-types": "ts-for-gir generate --externalDeps --allowMissingDeps --girDirectories=./prebuilds/linux-x86_64 --girDirectories=/usr/share/gir-1.0 --modules=GjsifyTls-1.0 --outdir=src/ts --npmScope=@girs --package=false --ignoreVersionConflicts=true"
     },
     "dependencies": {
@@ -60,8 +68,8 @@
         "@girs/gobject-2.0": "^4.1.0"
     },
     "devDependencies": {
-        "@gjsify/cli": "^0.21.0",
-        "@gjsify/unit": "^0.21.0",
+        "@gjsify/cli": "^0.23.0",
+        "@gjsify/unit": "^0.23.0",
         "@ts-for-gir/cli": "^4.1.0",
         "@types/node": "^25.9.2",
         "typescript": "^6.0.3"