@secure-exec/sidecar 0.0.0-agentos-dylib-base.edaa4a4 → 0.0.0-macos-all-platform.82ac0a4

package/index.js

@@ -10,20 +10,59 @@
 //   2. A `secure-exec-sidecar` binary placed next to this package.
 //   3. The platform-specific `@secure-exec/sidecar-<platform>` package.
 
-const { existsSync } = require("node:fs");
+const { existsSync, readFileSync } = require("node:fs");
 const { join, dirname } = require("node:path");
 
-const BINARY_NAME = "secure-exec-sidecar";
+const BINARY_BASENAME = "secure-exec-sidecar";
+const BINARY_NAME =
+	process.platform === "win32" ? `${BINARY_BASENAME}.exe` : BINARY_BASENAME;
 
 // No runtime chmod. Platform packages are published with `npm publish`, which
 // preserves the binary's 0755 executable bit.
 
+// Detect whether the current Linux runtime is musl (Alpine) or glibc. We avoid
+// pulling in a dependency and instead inspect the Node process report (which
+// reports `glibcVersionRuntime` only on glibc), falling back to probing ldd.
+function isMuslLibc() {
+	if (process.report && typeof process.report.getReport === "function") {
+		try {
+			const report = process.report.getReport();
+			const header = report && report.header;
+			const glibc = header && header.glibcVersionRuntime;
+			if (glibc) return false;
+			// No glibc runtime version reported -> musl.
+			return true;
+		} catch {
+			// Fall through to filesystem probe.
+		}
+	}
+	try {
+		const lddPath = "/usr/bin/ldd";
+		if (existsSync(lddPath)) {
+			const ldd = readFileSync(lddPath, "utf8");
+			if (ldd.includes("musl")) return true;
+		}
+	} catch {
+		// ignore
+	}
+	return false;
+}
+
 function getPlatformPackageName() {
 	const { platform, arch } = process;
 	switch (platform) {
-		case "linux":
-			if (arch === "x64") return "@secure-exec/sidecar-linux-x64-gnu";
-			if (arch === "arm64") return "@secure-exec/sidecar-linux-arm64-gnu";
+		case "linux": {
+			const libc = isMuslLibc() ? "musl" : "gnu";
+			if (arch === "x64") return `@secure-exec/sidecar-linux-x64-${libc}`;
+			if (arch === "arm64") return `@secure-exec/sidecar-linux-arm64-${libc}`;
+			break;
+		}
+		case "darwin":
+			if (arch === "x64") return "@secure-exec/sidecar-darwin-x64";
+			if (arch === "arm64") return "@secure-exec/sidecar-darwin-arm64";
+			break;
+		case "win32":
+			if (arch === "x64") return "@secure-exec/sidecar-windows-x64";
 			break;
 		default:
 			break;
@@ -51,7 +90,7 @@ function getSidecarPath() {
 	if (!platformPkg) {
 		throw new Error(
 			`@secure-exec/sidecar: unsupported platform ${process.platform}/${process.arch}. ` +
-				"The Secure Exec sidecar currently supports linux x64 and arm64. " +
+				"The Secure Exec sidecar supports linux (x64/arm64, gnu/musl), darwin (x64/arm64), and windows (x64). " +
 				"Set SECURE_EXEC_SIDECAR_BIN to a local secure-exec-sidecar binary to override.",
 		);
 	}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@secure-exec/sidecar",
-	"version": "0.0.0-agentos-dylib-base.edaa4a4",
+	"version": "0.0.0-macos-all-platform.82ac0a4",
 	"description": "Platform-specific resolver for the Secure Exec native sidecar binary",
 	"license": "Apache-2.0",
 	"repository": {
@@ -22,6 +22,8 @@
 		"node": ">=20"
 	},
 	"optionalDependencies": {
-		"@secure-exec/sidecar-linux-x64-gnu": "0.0.0-agentos-dylib-base.edaa4a4"
+		"@secure-exec/sidecar-darwin-arm64": "0.0.0-macos-all-platform.82ac0a4",
+		"@secure-exec/sidecar-linux-arm64-gnu": "0.0.0-macos-all-platform.82ac0a4",
+		"@secure-exec/sidecar-linux-x64-gnu": "0.0.0-macos-all-platform.82ac0a4"
 	}
 }