eec5d2af64
write-build-stamp.mjs rewrites the stamp's `builtAt` clock on every build, so the whole-file hash moved under a receipt that had just recorded it. Two builds overlapping on one tree failed with "Build inputs changed during compilation" for a difference the build machinery itself made, and the caller turned that into SystemExit(1). Hash the stamp's provenance identity instead, key-sorted so a cosmetic re-serialisation is not a change. The clock is excluded from that comparison but recorded as `stampClock` — the value the bake actually embedded, captured from the same read that produces __HERMES_INSTALL_STAMP__ — because packaging copies the live stamp into the bundle after the receipt is written. Re-reading the stamp at record time would certify a clock the output never contained, and productCurrent would then report a bundle current whose packaged clock disagrees with its baked main, which is exactly what detectBundleSwap must never do. recordProduct still compares the prepared inputs, so a clock-only restamp cannot throw. productCurrent additionally requires the recorded clock to match, so a restamp between bake and packaging is a rebuild rather than a silent divergence. A receipt predating the field compares by hash alone until the next build rewrites it; the release packaging path never consults productCurrent. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
82 lines
4.5 KiB
JavaScript
82 lines
4.5 KiB
JavaScript
#!/usr/bin/env node
|
|
import { execFileSync } from 'node:child_process'
|
|
import { cpSync, existsSync, readdirSync } from 'node:fs'
|
|
import { dirname, join, relative, resolve } from 'node:path'
|
|
import { pathToFileURL } from 'node:url'
|
|
import { bundleElectronMain } from '../../apps/desktop/scripts/bundle-electron-main.mjs'
|
|
import { checkDistBuilt } from '../../apps/desktop/scripts/assert-dist-built.mjs'
|
|
import { classifyNativeBinary } from '../../apps/desktop/scripts/stage-native-deps.mjs'
|
|
import { copyNativeTree } from '../../apps/desktop/scripts/prepared-native-deps.mjs'
|
|
import { frontendArgs, isMain, productOutput, withProduct, workspaceTool } from './frontend-common.mjs'
|
|
import { recordProduct, buildInputs } from './freshness.mjs'
|
|
|
|
function validateNativeTree(nativeDeps, platform) {
|
|
const pty = join(nativeDeps, 'node-pty')
|
|
if (!existsSync(join(pty, 'package.json'))) throw new Error(`Missing prepared node-pty: ${pty}`)
|
|
const bindings = readdirSync(pty, { recursive: true }).filter(name => name.endsWith('.node'))
|
|
if (!bindings.length) throw new Error(`Prepared node-pty has no native binding: ${pty}`)
|
|
for (const binding of bindings) {
|
|
if (classifyNativeBinary(join(pty, binding)) !== platform) {
|
|
throw new Error(`Prepared node-pty binding does not match ${platform}: ${binding}`)
|
|
}
|
|
}
|
|
if (platform === 'darwin' && !existsSync(join(nativeDeps, 'get-windows/main'))) {
|
|
throw new Error('Prepared get-windows is missing its macOS helper')
|
|
}
|
|
}
|
|
|
|
/** Pure desktop compilation. out is the dist directory, not the source app. */
|
|
export async function buildDesktop({ source, out, icons, stamp, nativeDeps, typecheck = false, platform = process.platform }) {
|
|
if (!icons || !stamp || !nativeDeps) throw new Error('icons, stamp and nativeDeps are required prepared inputs')
|
|
const app = 'apps/desktop'
|
|
;({ source, out } = productOutput(source, out, [
|
|
// Source children can be symlinks outside the checkout. Protect their
|
|
// canonical paths, but leave generated dist/build trees to productOutput.
|
|
...readdirSync(join(resolve(source), app)).filter(name => !['dist', 'build'].includes(name)).map(name => `${app}/${name}`),
|
|
`${app}/scripts`, 'scripts/build', 'package.json', 'package-lock.json',
|
|
'apps/shared', 'node_modules',
|
|
...[join(resolve(icons), app, 'public'), stamp, nativeDeps].map(input => relative(resolve(source), resolve(input))),
|
|
]))
|
|
const publicIcons = join(resolve(icons), app, 'public')
|
|
if (!existsSync(join(publicIcons, 'apple-touch-icon.png'))) throw new Error(`Missing desktop icon: ${join(publicIcons, 'apple-touch-icon.png')}`)
|
|
validateNativeTree(resolve(nativeDeps), platform)
|
|
const inputs = buildInputs(source, 'desktop', { icons: publicIcons, stamp, nativeDeps })
|
|
await withProduct(out, async (product, scratch) => {
|
|
const publicDir = join(scratch, 'public')
|
|
const sourcePublic = join(source, app, 'public')
|
|
if (existsSync(sourcePublic)) cpSync(sourcePublic, publicDir, { recursive: true })
|
|
cpSync(publicIcons, publicDir, { recursive: true })
|
|
if (typecheck) {
|
|
const ts = workspaceTool(source, app, 'typescript')
|
|
execFileSync(process.execPath, [join(dirname(ts), 'tsc.js'), '-p', join(source, app, 'tsconfig.json'),
|
|
'--noEmit', '--incremental', '--tsBuildInfoFile', join(scratch, 'renderer.tsbuildinfo')], { cwd: join(source, app), stdio: 'inherit' })
|
|
}
|
|
const { build } = await import(pathToFileURL(workspaceTool(source, app, 'vite')).href)
|
|
await build({
|
|
root: join(source, app),
|
|
configLoader: 'runner',
|
|
publicDir,
|
|
cacheDir: join(scratch, 'vite-cache'),
|
|
build: { outDir: product, emptyOutDir: true },
|
|
})
|
|
// The receipt must carry the clock this output BAKED, not whatever the live
|
|
// stamp says by now: electron-builder copies that live file into the bundle
|
|
// after the receipt is written, and productCurrent must be able to tell that
|
|
// the two disagree (#123308).
|
|
const { stampClock } = await bundleElectronMain({ source, out: product, stamp })
|
|
copyNativeTree({ nativeDeps, out: join(product, 'node_modules') })
|
|
const result = checkDistBuilt(product)
|
|
if (!result.ok) throw new Error(result.error)
|
|
recordProduct({ source, product: 'desktop', out: product, inputs, stampClock })
|
|
}, { source })
|
|
return { out }
|
|
}
|
|
|
|
if (isMain(import.meta.url)) {
|
|
const args = frontendArgs(process.argv.slice(2), {
|
|
icons: { type: 'string' }, stamp: { type: 'string' }, 'native-deps': { type: 'string' },
|
|
typecheck: { type: 'boolean' }, platform: { type: 'string' },
|
|
})
|
|
await buildDesktop({ ...args, nativeDeps: args['native-deps'] })
|
|
}
|