totemlayer 0.1.63 → 0.1.67

package/scripts/build-native.mjs

@@ -0,0 +1,60 @@
+import { execFileSync } from "node:child_process";
+import { createHash } from "node:crypto";
+import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
+
+const source = new URL("../native/darwin-lifetime.c", import.meta.url);
+const binary = new URL("../bin/native/darwin-lifetime", import.meta.url);
+const manifest = new URL("../bin/native/darwin-lifetime.json", import.meta.url);
+const digest = (bytes) => createHash("sha256").update(bytes).digest("hex");
+const sourceSha256 = digest(await readFile(source));
+
+if (process.platform === "win32")
+  throw new Error(
+    "Build the universal CLI tarball on macOS or Linux to preserve the native executable mode; Windows can install that tarball.",
+  );
+
+if (process.platform === "darwin") {
+  await mkdir(new URL("../bin/native/", import.meta.url), { recursive: true });
+  const temporary = `${fileURLToPath(binary)}.${process.pid}.tmp`;
+  try {
+    execFileSync(
+      "/usr/bin/clang",
+      [
+        "-std=c11",
+        "-D_DARWIN_C_SOURCE",
+        "-Wall",
+        "-Wextra",
+        "-Werror",
+        "-O2",
+        "-arch",
+        "arm64",
+        "-arch",
+        "x86_64",
+        "-mmacosx-version-min=13.0",
+        fileURLToPath(source),
+        "-o",
+        temporary,
+      ],
+      { stdio: "inherit", timeout: 60_000 },
+    );
+    await rename(temporary, binary);
+    await writeFile(
+      manifest,
+      JSON.stringify({
+        sourceSha256,
+        binarySha256: digest(await readFile(binary)),
+        architectures: ["arm64", "x86_64"],
+        minimumMacOS: "13.0",
+      }) + "\n",
+    );
+  } finally {
+    await rm(temporary, { force: true });
+  }
+} else {
+  // Every published tarball supports both Mac architectures. Build this small
+  // artifact on macOS before packing elsewhere; never ship a stale or missing one.
+  const built = JSON.parse(await readFile(manifest, "utf8"));
+  if (built.sourceSha256 !== sourceSha256 || built.binarySha256 !== digest(await readFile(binary)))
+    throw new Error("Build the current macOS lifetime supervisor on macOS before packing.");
+}

package/scripts/prepare.mjs

@@ -1,5 +1,6 @@
 import { access, readdir, readFile, writeFile } from "node:fs/promises";
 import { transform } from "esbuild";
+import "./build-native.mjs";
 import { generateNetworkContract } from "../../../scripts/generate-network-contract.mjs";
 await generateNetworkContract();
 // This candidate rebases coordination on the immutable published 0.1.21 bundle.