@gjsify/tls-native 0.22.0 → 0.24.1

package/README.md

@@ -36,7 +36,33 @@ if (hasNativeTls()) {
 }
 ```
 
-Ships as a prebuilt `.so` + `.typelib` for `linux-x86_64`. Requires `glib-networking` with a GnuTLS backend (the default on Fedora / GNOME platforms).
+Requires `glib-networking` with a GnuTLS backend (the default on Fedora / GNOME platforms) for the Phase-2 session APIs. See [Platform coverage](#platform-coverage) for the prebuilt platforms.
+
+## Platform coverage
+
+| Platform | Prebuild | Built by |
+|---|---|---|
+| `linux-x64` | ✅ `.so` + `.gir` + `.typelib` | native runner |
+| `linux-arm64` | ✅ | native runner |
+| `linux-ppc64`, `linux-s390x`, `linux-riscv64` | ✅ | QEMU emulation |
+| `darwin-arm64` (macOS, Apple silicon) | ✅ `.dylib` + `.gir` + `.typelib` | `macos-latest` runner |
+| `darwin-x64` (macOS, Intel) | ❌ | — no runner leg yet |
+| Windows | ❌ | — no Vala/GI bridge in this repo targets Windows |
+
+All prebuilds are produced by [`.github/workflows/prebuilds.yml`](../../../.github/workflows/prebuilds.yml)
+and committed back to the repository.
+
+The macOS prebuild links GnuTLS from Homebrew, so **Phase 1 (OCSP response parsing) is fully
+functional there**. Phase 2 (`SessionAccess`, channel bindings, session resumption) additionally
+requires `glib-networking` built with the GnuTLS backend at *runtime*; where that backend is
+absent, `hasTlsSessionAccess()` reports `false` and the API degrades to the documented
+`undefined` / `false` / no-op contract — exactly as Node behaves on a build without session
+support. No runtime verification of Phase 2 on macOS has been done.
+
+**Known gap — a `darwin-arm64` prebuild is built and shipped, but the CLI does not
+load it yet.** `detectNativePackages()` (`packages/infra/cli/src/utils/detect-native-packages.ts`)
+hardcodes a `linux-` directory prefix, and `buildNativeEnv()` exports `LD_LIBRARY_PATH`,
+which macOS `dyld` ignores in favour of `DYLD_LIBRARY_PATH`.
 
 ## License
 

package/meson.build

@@ -45,12 +45,32 @@ libGjsifyTls = library('gjsifytls', sources,
     install_dir: [true, true, true, true],
 )
 
+# ----------------------------------------------------------------------------
+# Host-dependent shared-library leaf name.
+#
+# The typelib records the exact filename gjs' g_module_open() resolves at load
+# time, and meson names the shared library per host convention: lib<name>.so on
+# ELF hosts, lib<name>.dylib on macOS. Recording the wrong leaf yields a typelib
+# that IS found via GI_TYPELIB_PATH but whose library never loads — a silent,
+# confusing failure. Mirrors the branch in packages/napi/napi/meson.build.
+#
+# Windows is deliberately absent: this bridge has had no Windows portability
+# work, so `else` (ELF naming) is the honest fallback rather than a .dll branch
+# that would imply support which does not exist.
+# ----------------------------------------------------------------------------
+host_system = host_machine.system()
+if host_system == 'darwin'
+    shared_lib_name = 'libgjsifytls.dylib'
+else
+    shared_lib_name = 'libgjsifytls.so'
+endif
+
 g_ir_compiler = find_program('g-ir-compiler')
 
 custom_target(meson.project_name() + '-1.0.typelib',
     command: [
         g_ir_compiler,
-        '--shared-library', 'libgjsifytls.so',
+        '--shared-library', shared_lib_name,
         '--output', '@OUTPUT@',
         meson.current_build_dir() / meson.project_name() + '-1.0.gir',
     ],

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gjsify/tls-native",
-    "version": "0.22.0",
+    "version": "0.24.1",
     "description": "Optional Vala/GObject bridge providing GnuTLS capabilities not exposed by Gio.TlsConnection — OCSP-response parsing (RFC 6960), session resumption data extraction, channel binding (tls-finished bytes for SCRAM-SHA-*). Enhances @gjsify/tls when installed.",
     "type": "module",
     "main": "lib/esm/index.js",
@@ -19,6 +19,14 @@
         "src/vala"
     ],
     "gjsify": {
+        "platforms": [
+            "linux-x64",
+            "linux-arm64",
+            "linux-ppc64",
+            "linux-s390x",
+            "linux-riscv64",
+            "darwin-arm64"
+        ],
         "prebuilds": "prebuilds",
         "runtimes": {
             "gjs": "polyfill",
@@ -52,16 +60,16 @@
         "init:meson": "meson setup build .",
         "init:meson:wipe": "gjsify run init:meson --wipe",
         "build:meson": "gjsify run init:meson && meson compile -C build",
-        "build:prebuilds": "gjsify run build:meson && mkdir -p prebuilds/linux-x86_64 && cp build/libgjsifytls.so build/GjsifyTls-1.0.gir build/GjsifyTls-1.0.typelib prebuilds/linux-x86_64/",
-        "build:gir-types": "ts-for-gir generate --externalDeps --allowMissingDeps --girDirectories=./prebuilds/linux-x86_64 --girDirectories=/usr/share/gir-1.0 --modules=GjsifyTls-1.0 --outdir=src/ts --npmScope=@girs --package=false --ignoreVersionConflicts=true"
+        "build:prebuilds": "gjsify run build:meson && node ../../../scripts/stage-prebuild.mjs .",
+        "build:gir-types": "ts-for-gir generate --externalDeps --allowMissingDeps --girDirectories=./prebuilds/linux-x64 --girDirectories=/usr/share/gir-1.0 --modules=GjsifyTls-1.0 --outdir=src/ts --npmScope=@girs --package=false --ignoreVersionConflicts=true"
     },
     "dependencies": {
         "@girs/glib-2.0": "^4.1.0",
         "@girs/gobject-2.0": "^4.1.0"
     },
     "devDependencies": {
-        "@gjsify/cli": "^0.22.0",
-        "@gjsify/unit": "^0.22.0",
+        "@gjsify/cli": "^0.24.1",
+        "@gjsify/unit": "^0.24.1",
         "@ts-for-gir/cli": "^4.1.0",
         "@types/node": "^25.9.2",
         "typescript": "^6.0.3"

package/prebuilds/darwin-arm64/GjsifyTls-1.0.gir

@@ -0,0 +1,276 @@
+<?xml version="1.0"?>
+<!-- GjsifyTls-1.0.gir generated by valac 0.56.19, do not modify. -->
+<repository version="1.2" xmlns="http://www.gtk.org/introspection/core/1.0" xmlns:c="http://www.gtk.org/introspection/c/1.0" xmlns:doc="http://www.gtk.org/introspection/doc/1.0" xmlns:glib="http://www.gtk.org/introspection/glib/1.0">
+<include name="GObject" version="2.0"/>
+<include name="Gio" version="2.0"/>
+<include name="GLib" version="2.0"/>
+<package name="gjsifytls"/>
+<c:include name="gjsifytls.h"/>
+<doc:format name="unknown"/>
+<namespace name="GjsifyTls" version="1.0" shared-library="libgjsifytls.dylib" c:prefix="GjsifyTls" c:identifier-prefixes="GjsifyTls" c:symbol-prefixes="gjsify_tls">
+	<enumeration name="ChannelBindingType" c:type="GjsifyTlsChannelBindingType" glib:type-name="GjsifyTlsChannelBindingType" glib:get-type="gjsify_tls_channel_binding_type_get_type">
+		<member name="tls_unique" c:identifier="GJSIFY_TLS_CHANNEL_BINDING_TYPE_TLS_UNIQUE" value="0"/>
+		<member name="tls_server_end_point" c:identifier="GJSIFY_TLS_CHANNEL_BINDING_TYPE_TLS_SERVER_END_POINT" value="1"/>
+		<member name="tls_exporter" c:identifier="GJSIFY_TLS_CHANNEL_BINDING_TYPE_TLS_EXPORTER" value="2"/>
+	</enumeration>
+	<enumeration name="SessionAccessError" c:type="GjsifyTlsSessionAccessError" glib:type-name="GjsifyTlsSessionAccessError" glib:get-type="gjsify_tls_session_access_error_get_type" glib:error-domain="gjsify-tls-session-access-error-quark">
+		<member name="not_supported" c:identifier="GJSIFY_TLS_SESSION_ACCESS_ERROR_NOT_SUPPORTED" value="0"/>
+		<member name="not_ready" c:identifier="GJSIFY_TLS_SESSION_ACCESS_ERROR_NOT_READY" value="1"/>
+		<member name="gnutls_error" c:identifier="GJSIFY_TLS_SESSION_ACCESS_ERROR_GNUTLS_ERROR" value="2"/>
+	</enumeration>
+	<class name="OcspResponseInfo" c:type="GjsifyTlsOcspResponseInfo" c:symbol-prefix="ocsp_response_info" glib:type-name="GjsifyTlsOcspResponseInfo" glib:get-type="gjsify_tls_ocsp_response_info_get_type" glib:type-struct="OcspResponseInfoClass" parent="GObject.Object">
+		<field name="parent_instance" readable="0" private="1">
+			<type name="GObject.Object" c:type="GObject"/>
+		</field>
+		<field name="priv" readable="0" private="1">
+			<type name="OcspResponseInfoPrivate" c:type="GjsifyTlsOcspResponseInfoPrivate*"/>
+		</field>
+		<constructor name="new" c:identifier="gjsify_tls_ocsp_response_info_new">
+			<return-value transfer-ownership="full">
+				<type name="GjsifyTls.OcspResponseInfo" c:type="GjsifyTlsOcspResponseInfo*"/>
+			</return-value>
+		</constructor>
+		<property name="response-status" writable="1">
+			<type name="gint" c:type="gint"/>
+		</property>
+		<method name="get_response_status" c:identifier="gjsify_tls_ocsp_response_info_get_response_status">
+			<return-value transfer-ownership="none">
+				<type name="gint" c:type="gint"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.OcspResponseInfo" c:type="GjsifyTlsOcspResponseInfo*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<property name="produced-at" writable="1">
+			<type name="gint64" c:type="gint64"/>
+		</property>
+		<method name="get_produced_at" c:identifier="gjsify_tls_ocsp_response_info_get_produced_at">
+			<return-value transfer-ownership="none">
+				<type name="gint64" c:type="gint64"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.OcspResponseInfo" c:type="GjsifyTlsOcspResponseInfo*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<property name="cert-status" writable="1">
+			<type name="gint" c:type="gint"/>
+		</property>
+		<method name="get_cert_status" c:identifier="gjsify_tls_ocsp_response_info_get_cert_status">
+			<return-value transfer-ownership="none">
+				<type name="gint" c:type="gint"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.OcspResponseInfo" c:type="GjsifyTlsOcspResponseInfo*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<property name="this-update" writable="1">
+			<type name="gint64" c:type="gint64"/>
+		</property>
+		<method name="get_this_update" c:identifier="gjsify_tls_ocsp_response_info_get_this_update">
+			<return-value transfer-ownership="none">
+				<type name="gint64" c:type="gint64"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.OcspResponseInfo" c:type="GjsifyTlsOcspResponseInfo*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<property name="next-update" writable="1">
+			<type name="gint64" c:type="gint64"/>
+		</property>
+		<method name="get_next_update" c:identifier="gjsify_tls_ocsp_response_info_get_next_update">
+			<return-value transfer-ownership="none">
+				<type name="gint64" c:type="gint64"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.OcspResponseInfo" c:type="GjsifyTlsOcspResponseInfo*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<property name="revocation-time" writable="1">
+			<type name="gint64" c:type="gint64"/>
+		</property>
+		<method name="get_revocation_time" c:identifier="gjsify_tls_ocsp_response_info_get_revocation_time">
+			<return-value transfer-ownership="none">
+				<type name="gint64" c:type="gint64"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.OcspResponseInfo" c:type="GjsifyTlsOcspResponseInfo*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<property name="revocation-reason" writable="1">
+			<type name="gint" c:type="gint"/>
+		</property>
+		<method name="get_revocation_reason" c:identifier="gjsify_tls_ocsp_response_info_get_revocation_reason">
+			<return-value transfer-ownership="none">
+				<type name="gint" c:type="gint"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.OcspResponseInfo" c:type="GjsifyTlsOcspResponseInfo*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+	</class>
+	<record name="OcspResponseInfoClass" c:type="GjsifyTlsOcspResponseInfoClass" glib:is-gtype-struct-for="OcspResponseInfo">
+		<field name="parent_class" readable="0" private="1">
+			<type name="GObject.ObjectClass" c:type="GObjectClass"/>
+		</field>
+	</record>
+	<record name="OcspResponseInfoPrivate" c:type="GjsifyTlsOcspResponseInfoPrivate" disguised="1"/>
+	<class name="Tls" c:type="GjsifyTlsTls" c:symbol-prefix="tls" glib:type-name="GjsifyTlsTls" glib:get-type="gjsify_tls_tls_get_type" glib:type-struct="TlsClass" parent="GObject.Object">
+		<field name="parent_instance" readable="0" private="1">
+			<type name="GObject.Object" c:type="GObject"/>
+		</field>
+		<field name="priv" readable="0" private="1">
+			<type name="TlsPrivate" c:type="GjsifyTlsTlsPrivate*"/>
+		</field>
+		<function name="parse_ocsp_response" c:identifier="gjsify_tls_tls_parse_ocsp_response">
+			<return-value transfer-ownership="full" nullable="1">
+				<type name="GjsifyTls.OcspResponseInfo" c:type="GjsifyTlsOcspResponseInfo*"/>
+			</return-value>
+			<parameters>
+				<parameter name="bytes" transfer-ownership="none">
+					<array length="1" c:type="guint8*">
+						<type name="guint8" c:type="guint8"/>
+					</array>
+				</parameter>
+				<parameter name="bytes_length1" transfer-ownership="none">
+					<type name="gint" c:type="gint"/>
+				</parameter>
+			</parameters>
+		</function>
+		<constructor name="new" c:identifier="gjsify_tls_tls_new">
+			<return-value transfer-ownership="full">
+				<type name="GjsifyTls.Tls" c:type="GjsifyTlsTls*"/>
+			</return-value>
+		</constructor>
+	</class>
+	<record name="TlsClass" c:type="GjsifyTlsTlsClass" glib:is-gtype-struct-for="Tls">
+		<field name="parent_class" readable="0" private="1">
+			<type name="GObject.ObjectClass" c:type="GObjectClass"/>
+		</field>
+	</record>
+	<record name="TlsPrivate" c:type="GjsifyTlsTlsPrivate" disguised="1"/>
+	<class name="SessionAccess" c:type="GjsifyTlsSessionAccess" c:symbol-prefix="session_access" glib:type-name="GjsifyTlsSessionAccess" glib:get-type="gjsify_tls_session_access_get_type" glib:type-struct="SessionAccessClass" parent="GObject.Object">
+		<field name="parent_instance" readable="0" private="1">
+			<type name="GObject.Object" c:type="GObject"/>
+		</field>
+		<field name="priv" readable="0" private="1">
+			<type name="SessionAccessPrivate" c:type="GjsifyTlsSessionAccessPrivate*"/>
+		</field>
+		<function name="is_supported" c:identifier="gjsify_tls_session_access_is_supported">
+			<return-value transfer-ownership="full">
+				<type name="gboolean" c:type="gboolean"/>
+			</return-value>
+		</function>
+		<function name="for_connection" c:identifier="gjsify_tls_session_access_for_connection">
+			<return-value transfer-ownership="full" nullable="1">
+				<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+			</return-value>
+			<parameters>
+				<parameter name="connection" transfer-ownership="none" nullable="1">
+					<type name="Gio.TlsConnection" c:type="GTlsConnection*"/>
+				</parameter>
+			</parameters>
+		</function>
+		<method name="is_session_reused" c:identifier="gjsify_tls_session_access_is_session_reused" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="gboolean" c:type="gboolean"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<method name="get_session_data" c:identifier="gjsify_tls_session_access_get_session_data" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="GLib.Bytes" c:type="GBytes*"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<method name="set_session_data" c:identifier="gjsify_tls_session_access_set_session_data" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="none" c:type="void"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+				<parameter name="data" transfer-ownership="none">
+					<type name="GLib.Bytes" c:type="GBytes*"/>
+				</parameter>
+			</parameters>
+		</method>
+		<method name="get_channel_binding" c:identifier="gjsify_tls_session_access_get_channel_binding" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="GLib.Bytes" c:type="GBytes*"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+				<parameter name="binding" transfer-ownership="none">
+					<type name="GjsifyTls.ChannelBindingType" c:type="GjsifyTlsChannelBindingType"/>
+				</parameter>
+			</parameters>
+		</method>
+		<method name="get_finished" c:identifier="gjsify_tls_session_access_get_finished" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="GLib.Bytes" c:type="GBytes*"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<method name="get_peer_finished" c:identifier="gjsify_tls_session_access_get_peer_finished" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="GLib.Bytes" c:type="GBytes*"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<method name="get_negotiated_protocol_version" c:identifier="gjsify_tls_session_access_get_negotiated_protocol_version">
+			<return-value transfer-ownership="full">
+				<type name="utf8" c:type="gchar*"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<constructor name="new" c:identifier="gjsify_tls_session_access_new">
+			<return-value transfer-ownership="full">
+				<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+			</return-value>
+		</constructor>
+	</class>
+	<record name="SessionAccessClass" c:type="GjsifyTlsSessionAccessClass" glib:is-gtype-struct-for="SessionAccess">
+		<field name="parent_class" readable="0" private="1">
+			<type name="GObject.ObjectClass" c:type="GObjectClass"/>
+		</field>
+	</record>
+	<record name="SessionAccessPrivate" c:type="GjsifyTlsSessionAccessPrivate" disguised="1"/>
+</namespace>
+</repository>