electrobun 0.0.19-beta.103 → 0.0.19-beta.105

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "electrobun",
-  "version": "0.0.19-beta.103",
+  "version": "0.0.19-beta.105",
   "description": "Build ultra fast, tiny, and cross-platform desktop apps with Typescript.",
   "license": "MIT",
   "author": "Blackboard Technologies Inc.",

package/src/cli/index.ts

@@ -402,6 +402,9 @@ const defaultConfig = {
       entitlements: {
         // This entitlement is required for Electrobun apps with a hardened runtime (required for notarization) to run on macos
         "com.apple.security.cs.allow-jit": true,
+        // Required for bun runtime to work with dynamic code execution and JIT compilation when signed
+        "com.apple.security.cs.allow-unsigned-executable-memory": true,
+        "com.apple.security.cs.disable-library-validation": true,
       },
       icons: "icon.iconset",
     },
@@ -847,7 +850,7 @@ if (commandArg === "init") {
   //     mkdirSync(destLauncherFolder, {recursive: true});
   // }
   // cpSync(zigLauncherBinarySource, zigLauncherDestination, {recursive: true, dereference: true});
-  // Copy launcher for all builds (dev, canary, stable) since main.js is now in Resources
+  // Copy zig launcher for all builds (dev, canary, stable)
   const bunCliLauncherBinarySource = targetPaths.LAUNCHER_RELEASE;
   const bunCliLauncherDestination = join(appBundleMacOSPath, "launcher") + targetBinExt;
   const destLauncherFolder = dirname(bunCliLauncherDestination);
@@ -1752,7 +1755,7 @@ exec "\$LAUNCHER_BINARY" "\$@"
   }
 
   if (OS === 'macos') {
-    // Use the launcher binary which handles the main.js path correctly
+    // Use the zig launcher for all builds (dev, canary, stable)
     mainProc = Bun.spawn([join(bundleExecPath, 'launcher')], {
       stdio: ['inherit', 'inherit', 'inherit'],
       cwd: bundleExecPath
@@ -2210,7 +2213,7 @@ function codesignAppBundle(
     Bun.write(entitlementsFilePath, entitlementsFileContents);
   }
 
-  // Sign frameworks first (CEF framework if it exists)
+  // Sign frameworks first (CEF framework requires special handling)
   const frameworksPath = join(contentsPath, 'Frameworks');
   if (existsSync(frameworksPath)) {
     try {
@@ -2218,14 +2221,68 @@ function codesignAppBundle(
       for (const framework of frameworks) {
         if (framework.endsWith('.framework')) {
           const frameworkPath = join(frameworksPath, framework);
-          console.log(`Signing framework: ${framework}`);
+          
+          if (framework === 'Chromium Embedded Framework.framework') {
+            console.log(`Signing CEF framework components: ${framework}`);
+            
+            // Sign CEF libraries first
+            const librariesPath = join(frameworkPath, 'Libraries');
+            if (existsSync(librariesPath)) {
+              const libraries = readdirSync(librariesPath);
+              for (const library of libraries) {
+                if (library.endsWith('.dylib')) {
+                  const libraryPath = join(librariesPath, library);
+                  console.log(`Signing CEF library: ${library}`);
+                  execSync(
+                    `codesign --force --verbose --timestamp --sign "${ELECTROBUN_DEVELOPER_ID}" --options runtime ${escapePathForTerminal(libraryPath)}`
+                  );
+                }
+              }
+            }
+            
+            // CEF helper apps are in the main Frameworks directory, not inside the CEF framework
+            // We'll sign them after signing all frameworks
+          }
+          
+          // Sign the framework bundle itself (for CEF and any other frameworks)
+          console.log(`Signing framework bundle: ${framework}`);
           execSync(
             `codesign --force --verbose --timestamp --sign "${ELECTROBUN_DEVELOPER_ID}" --options runtime ${escapePathForTerminal(frameworkPath)}`
           );
         }
       }
     } catch (err) {
-      console.log("No frameworks to sign or error signing frameworks:", err);
+      console.log("Error signing frameworks:", err);
+      throw err; // Re-throw to fail the build since framework signing is critical
+    }
+  }
+  
+  // Sign CEF helper apps (they're in the main Frameworks directory, not inside CEF framework)
+  const cefHelperApps = [
+    'bun Helper.app',
+    'bun Helper (GPU).app', 
+    'bun Helper (Plugin).app',
+    'bun Helper (Alerts).app',
+    'bun Helper (Renderer).app'
+  ];
+  
+  for (const helperApp of cefHelperApps) {
+    const helperPath = join(frameworksPath, helperApp);
+    if (existsSync(helperPath)) {
+      const helperExecutablePath = join(helperPath, 'Contents', 'MacOS', helperApp.replace('.app', ''));
+      if (existsSync(helperExecutablePath)) {
+        console.log(`Signing CEF helper executable: ${helperApp}`);
+        const entitlementFlag = entitlementsFilePath ? `--entitlements ${entitlementsFilePath}` : '';
+        execSync(
+          `codesign --force --verbose --timestamp --sign "${ELECTROBUN_DEVELOPER_ID}" --options runtime ${entitlementFlag} ${escapePathForTerminal(helperExecutablePath)}`
+        );
+      }
+      
+      console.log(`Signing CEF helper bundle: ${helperApp}`);
+      const entitlementFlag = entitlementsFilePath ? `--entitlements ${entitlementsFilePath}` : '';
+      execSync(
+        `codesign --force --verbose --timestamp --sign "${ELECTROBUN_DEVELOPER_ID}" --options runtime ${entitlementFlag} ${escapePathForTerminal(helperPath)}`
+      );
     }
   }