flarelint 0.1.0

package/Cargo.toml

@@ -0,0 +1,32 @@
+[package]
+name = "flarelint"
+version = "0.1.0"
+edition = "2024"
+authors = ["Brandon Hubbard"]
+description = "Unified, nanosecond-fast Rust AST static analysis and edge compatibility linter for Cloudflare Workers & Astro applications"
+license = "MIT OR Apache-2.0"
+readme = "README.md"
+repository = "https://github.com/bhubbard/flarelint"
+homepage = "https://bhubbard.github.io/flarelint"
+documentation = "https://docs.rs/flarelint"
+keywords = ["cloudflare", "workers", "astro", "linter", "oxc"]
+categories = ["command-line-utilities", "development-tools"]
+
+[dependencies]
+clap = { version = "4.5", features = ["derive", "cargo"] }
+clap_complete = "4.5"
+oxc_allocator = "0.48"
+oxc_ast = "0.48"
+oxc_parser = "0.48"
+oxc_span = "0.48"
+serde = { version = "1.0", features = ["derive"] }
+serde_json = "1.0"
+colored = "2.2"
+comfy-table = "7.1"
+walkdir = "2.5"
+thiserror = "2.0"
+anyhow = "1.0"
+
+[dev-dependencies]
+tempfile = "3.17"
+

package/LICENSE-APACHE

@@ -0,0 +1,176 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS

package/LICENSE-MIT

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Brandon Hubbard
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,165 @@
+# flarelint
+
+> **Unified, nanosecond-fast Rust AST static analysis and edge compatibility linter for Cloudflare Workers & Astro applications.**
+
+`flarelint` consolidates `oxlint-plugin-cloudflare`, `oxc-astro-cf`, `oxc-cf-router`, `oxc-cf-assets`, `oxc-do-storage`, and `edge-compat-auditor` into a high-performance native binary written in Rust 2024 using the `oxc` AST engine.
+
+---
+
+## Features
+
+- ⚡ **Nanosecond-Fast Execution**: Powered by `oxc_parser` and `oxc_allocator` for sub-millisecond parsing and analysis.
+- 🌐 **Node.js Edge Compatibility Audit**: Scans JS/TS/Astro AST for unsupported Node.js runtime built-in modules (`fs`, `child_process`, `net`, `tls`, `dgram`, `cluster`, `v8`, `vm`, `worker_threads`).
+- ⏳ **`ctx.waitUntil()` Promise Safety**: Catches floating un-awaited async operations inside request handlers before they get terminated by the runtime.
+- 💾 **Durable Object Storage Validator**: Audits atomic transactions, prevents concurrent `Promise.all` write hazards, and enforces `await` on storage methods (`this.ctx.storage.put`).
+- 🛣️ **Pages `_routes.json` Limiter**: Verifies the Cloudflare Pages 100-rule limit, detects invalid wildcard placements, catches duplicate/shadowed rules, and identifies wasted quota.
+- 🚀 **First-Class Astro Support**: Parses Astro frontmatter scripts (`--- ... ---`) and `<script>` blocks with source location mapping.
+- ⚙️ **Automatic Wrangler Configuration**: Automatically detects and parses `wrangler.jsonc`, `wrangler.json`, and `wrangler.toml` for `compatibility_flags`.
+
+---
+
+## Installation
+
+### Cargo
+```bash
+cargo install flarelint
+```
+
+### npm / npx
+```bash
+# Run immediately via npx
+npx flarelint check .
+
+# Or install locally in your project
+npm install -D flarelint
+```
+
+### GitHub Actions
+```yaml
+- name: Run Flarelint
+  uses: bhubbard/flarelint@main
+  with:
+    command: check
+    path: .
+    strict: true
+```
+
+---
+
+## CLI Commands
+
+### 1. `flarelint check [PATH]`
+Runs all linting rules across JavaScript, TypeScript, JSX, TSX, Astro, and `_routes.json` files.
+```bash
+flarelint check .
+flarelint check src/ --strict --json
+```
+
+### 2. `flarelint node-compat [PATH]`
+Scans AST imports, `require()` calls, and dynamic `import()` specifiers against Cloudflare Workers runtime capabilities.
+```bash
+flarelint node-compat src/
+```
+
+- Flagged strictly unsupported modules: `child_process`, `cluster`, `dgram`, `v8`, `vm`, `worker_threads`.
+- Automatically checks for `nodejs_compat` in your `wrangler.jsonc` or `wrangler.toml`.
+- Suggests `node:` prefix specifiers where bare imports are detected.
+
+### 3. `flarelint waituntil [PATH]`
+Detects floating un-awaited promises spawned inside request and queue handlers.
+```bash
+flarelint waituntil src/
+```
+```typescript
+// ❌ FAILS: Un-awaited async call terminated when response finishes
+export default {
+  async fetch(req, env, ctx) {
+    sendTelemetry(req);
+    return new Response("OK");
+  }
+}
+
+// ✔️ PASSES: Handled via ctx.waitUntil
+export default {
+  async fetch(req, env, ctx) {
+    ctx.waitUntil(sendTelemetry(req));
+    return new Response("OK");
+  }
+}
+```
+
+### 4. `flarelint do-storage [PATH]`
+Audits Durable Object storage operations, transactional safety, and concurrency hazards.
+```bash
+flarelint do-storage src/
+```
+```typescript
+// ❌ FAILS: Un-awaited storage call
+this.ctx.storage.put("key", value);
+
+// ❌ FAILS: Concurrent write hazard in Promise.all
+Promise.all([this.ctx.storage.put("a", 1), this.ctx.storage.put("b", 2)]);
+
+// ✔️ PASSES: Transaction wrapper
+await this.ctx.storage.transaction(async (txn) => {
+  await txn.put("a", 1);
+  await txn.put("b", 2);
+});
+```
+
+### 5. `flarelint routes [PATH]`
+Validates Cloudflare Pages `_routes.json` files for routing limits, invalid wildcards, and rule shadowing.
+```bash
+flarelint routes public/_routes.json
+```
+
+- Enforces Cloudflare Pages **100-rule limit** (`include + exclude <= 100`).
+- Validates wildcard `*` positions (must be trailing or `/*`).
+- Warns on shadowed rules (e.g. `/*` shadowing `/api/*`).
+- Flags unneeded exclude rules that are not matched by any include prefix.
+
+### 6. `flarelint completions <SHELL>`
+Generates shell completion scripts for `zsh`, `bash`, `fish`, `powershell`, or `elvish`.
+```bash
+flarelint completions zsh > ~/.zsh/completion/_flarelint
+```
+
+---
+
+## Global Options
+
+| Option | Description |
+|---|---|
+| `-j, --json` | Output machine-readable JSON lint report |
+| `--strict` | Treat warnings as errors (exits with code 1) |
+| `-v, --verbose` | Show inline code snippets and fix recommendations |
+| `-c, --compatibility-flag <FLAG>` | Pass additional Cloudflare compatibility flags (e.g. `nodejs_compat`) |
+| `-h, --help` | Display help information |
+
+---
+
+## Rules Reference
+
+| Rule ID | Severity | Description |
+|---|---|---|
+| `node-compat/strictly-unsupported` | ERROR | Module (`child_process`, `vm`, `cluster`, etc.) is strictly unsupported on edge |
+| `node-compat/missing-flag` | ERROR | Node built-in used without `nodejs_compat` compatibility flag in wrangler config |
+| `node-compat/prefer-node-protocol` | WARN | Import should use explicit `node:` prefix |
+| `waituntil/unawaited-async` | ERROR | Asynchronous promise in request handler is un-awaited and not passed to `ctx.waitUntil` |
+| `do-storage/unawaited-storage-op` | ERROR | Durable Object storage operation must be awaited |
+| `do-storage/concurrent-write-hazard` | WARN | Concurrent writes in `Promise.all` risk non-atomic state mutations |
+| `do-storage/nested-transaction` | ERROR | Nested transactions are unsupported by the Durable Object runtime |
+| `do-storage/transaction-escape` | WARN | Calling instance storage inside a transaction callback bypasses transaction atomicity |
+| `routes/exceeds-limit` | ERROR | Combined `include` and `exclude` rules exceed Cloudflare Pages limit of 100 rules |
+| `routes/missing-include` | ERROR | `_routes.json` must have at least 1 include rule |
+| `routes/invalid-glob` | ERROR | Asterisk wildcards can only appear at the end of route patterns |
+| `routes/invalid-path` | ERROR | Route patterns must start with `/` |
+| `routes/duplicate-rule` | WARN | Identical rule is defined multiple times |
+| `routes/shadowed-rule` | WARN | Narrower rule is shadowed by a broader include prefix |
+| `routes/unmatched-exclude` | WARN | Exclude rule is not matched by any include rule, wasting rule quota |
+
+---
+
+## License
+
+MIT OR Apache-2.0 © [Brandon Hubbard](https://github.com/bhubbard)

package/bin/flarelint.js

@@ -0,0 +1,78 @@
+#!/usr/bin/env node
+import { spawnSync } from "node:child_process";
+import fs from "node:fs";
+import { createRequire } from "node:module";
+import path from "node:path";
+import process from "node:process";
+import { fileURLToPath } from "node:url";
+
+const require = createRequire(import.meta.url);
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const root = path.resolve(__dirname, "..");
+const exe = process.platform === "win32" ? "flarelint.exe" : "flarelint";
+
+const PLATFORM_PACKAGES = {
+  "darwin-arm64": "@flarelint/darwin-arm64",
+  "darwin-x64": "@flarelint/darwin-x64",
+  "linux-x64": "@flarelint/linux-x64",
+  "linux-arm64": "@flarelint/linux-arm64",
+  "win32-x64": "@flarelint/win32-x64",
+};
+
+export function getBinaryPath() {
+  if (process.env.FLARELINT_BIN && fs.existsSync(process.env.FLARELINT_BIN)) {
+    return process.env.FLARELINT_BIN;
+  }
+
+  // 1. Check if optional platform-specific package is installed
+  const platformKey = `${process.platform}-${process.arch}`;
+  const pkgName = PLATFORM_PACKAGES[platformKey];
+  if (pkgName) {
+    try {
+      const resolved = require.resolve(`${pkgName}/bin/${exe}`);
+      if (fs.existsSync(resolved)) {
+        return resolved;
+      }
+    } catch {
+      // Platform package not present; fall through
+    }
+  }
+
+  // 2. Check local builds or vendored binary locations
+  const candidates = [
+    path.resolve(root, "dist/bin", exe),
+    path.resolve(root, "target/release", exe),
+    path.resolve(root, "target/debug", exe),
+  ];
+
+  for (const candidate of candidates) {
+    if (fs.existsSync(candidate)) {
+      if (process.platform !== "win32") {
+        try {
+          const mode = fs.statSync(candidate).mode;
+          if ((mode & 0o111) === 0) {
+            fs.chmodSync(candidate, 0o755);
+          }
+        } catch {
+          // Ignore
+        }
+      }
+      return candidate;
+    }
+  }
+
+  return exe;
+}
+
+const bin = getBinaryPath();
+const res = spawnSync(bin, process.argv.slice(2), { stdio: "inherit" });
+if (res.error) {
+  if (res.error.code === "ENOENT") {
+    console.error(`[flarelint] Could not find native binary '${bin}'.`);
+    console.error("Please run `cargo build --release` or install flarelint via Cargo or prebuilt npm platform package.");
+  } else {
+    console.error(`[flarelint] Execution error: ${res.error.message}`);
+  }
+  process.exit(1);
+}
+process.exit(res.status ?? 0);

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "flarelint",
+  "version": "0.1.0",
+  "description": "Unified, nanosecond-fast Rust AST static analysis and edge compatibility linter for Cloudflare Workers & Astro applications",
+  "keywords": [
+    "cloudflare",
+    "workers",
+    "astro",
+    "oxc",
+    "linter",
+    "rust",
+    "durable-objects",
+    "edge"
+  ],
+  "homepage": "https://bhubbard.github.io/flarelint",
+  "bugs": {
+    "url": "https://github.com/bhubbard/flarelint/issues"
+  },
+  "license": "MIT OR Apache-2.0",
+  "author": "Brandon Hubbard <bkhubbard@gmail.com>",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/bhubbard/flarelint.git"
+  },
+  "bin": {
+    "flarelint": "bin/flarelint.js"
+  },
+  "files": [
+    "bin",
+    "scripts/postinstall.mjs",
+    "Cargo.toml",
+    "Cargo.lock",
+    "src",
+    "README.md",
+    "LICENSE-MIT",
+    "LICENSE-APACHE"
+  ],
+  "type": "module",
+  "scripts": {
+    "build:cargo": "cargo build --release",
+    "postinstall": "node scripts/postinstall.mjs",
+    "prepare:publish": "node scripts/set-optional-deps.mjs",
+    "test": "cargo test"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "//optionalDependencies": [
+    "The @flarelint/* prebuilt-binary packages are attached at publish",
+    "time by scripts/set-optional-deps.mjs, not committed here."
+  ]
+}

package/scripts/postinstall.mjs

@@ -0,0 +1,83 @@
+#!/usr/bin/env node
+import { spawnSync } from "node:child_process";
+import fs from "node:fs";
+import { createRequire } from "node:module";
+import path from "node:path";
+import process from "node:process";
+import { fileURLToPath } from "node:url";
+
+const require = createRequire(import.meta.url);
+const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const exe = process.platform === "win32" ? "flarelint.exe" : "flarelint";
+
+const PLATFORM_PACKAGES = {
+  "darwin-arm64": "@flarelint/darwin-arm64",
+  "darwin-x64": "@flarelint/darwin-x64",
+  "linux-x64": "@flarelint/linux-x64",
+  "linux-arm64": "@flarelint/linux-arm64",
+  "win32-x64": "@flarelint/win32-x64",
+};
+
+function log(message) {
+  console.log(`[flarelint] ${message}`);
+}
+
+function runnable(file) {
+  if (!fs.existsSync(file)) return false;
+  const res = spawnSync(file, ["--version"], { stdio: "ignore", timeout: 10_000 });
+  return !res.error && res.status === 0;
+}
+
+function alreadyPresent() {
+  const pkg = PLATFORM_PACKAGES[`${process.platform}-${process.arch}`];
+  if (pkg) {
+    try {
+      if (runnable(require.resolve(`${pkg}/bin/${exe}`))) return true;
+    } catch {
+      // Not installed; keep looking
+    }
+  }
+
+  return ["dist/bin", "target/release"].some((dir) => runnable(path.join(root, dir, exe)));
+}
+
+function hasCargo() {
+  const res = spawnSync("cargo", ["--version"], { stdio: "ignore" });
+  return res.status === 0;
+}
+
+function main() {
+  if (alreadyPresent()) return;
+
+  if (!hasCargo()) {
+    log(
+      `No prebuilt binary found for ${process.platform}-${process.arch} and cargo is not installed.\n` +
+        `  To build from source, install Rust (https://rustup.rs) and run \`cargo build --release\`,\n` +
+        `  or set FLARELINT_BIN to an existing flarelint binary.`,
+    );
+    return;
+  }
+
+  log("No prebuilt binary for this platform — compiling with cargo...");
+  const res = spawnSync("cargo", ["build", "--release"], { cwd: root, stdio: "inherit" });
+
+  if (res.status !== 0) {
+    log("cargo build failed. Run `cargo build --release` manually to see the error.");
+    return;
+  }
+
+  const built = path.join(root, "target", "release", exe);
+  const destDir = path.join(root, "dist", "bin");
+  if (fs.existsSync(built)) {
+    fs.mkdirSync(destDir, { recursive: true });
+    fs.copyFileSync(built, path.join(destDir, exe));
+    if (process.platform !== "win32") fs.chmodSync(path.join(destDir, exe), 0o755);
+    log("Engine built successfully.");
+  }
+}
+
+try {
+  main();
+} catch (err) {
+  log(`Postinstall skipped: ${err.message}`);
+}