Files
scriptc/packages/runtime-darwin-arm64/scripts/verify.mjs
Malte Ubl 60c30d6ebd Import runtime bitcode into speed programs (H02)
Re-lands perf/h02-runtime-lto (6d373317, b62448f3) behind the speed
posture.

- Runtime packs gain an executable `speed` flavor whenever the host LLVM
  helper can run. Its static units are emitted through the helper's
  `runtime-unit` command (promoted unit-local symbols, object and import
  bitcode from one module); its SCR_DYNAMIC variants reference the release
  objects. Release, dev, and library flavors and the vendor archives are
  built exactly as before (the rebuilt macOS pack's flavors and archives
  are identical to the baseline's).
- Speed program builds load the speed flavor's bitcode and pass it to the
  helper (`--import-bitcode`); release builds never do.
  loadRuntimeBitcode only reads a real speed flavor, never release.
- The helper drops the emitter's inert sanitize_address attributes only
  when it imports, so release modules reach the pipeline unchanged.
- Tests: runtime-pack.test.ts covers speed-variant bitcode selection,
  verification, and that release-flavor bitcode is never imported;
  native-codegen.test.ts covers helper arguments and cache keys.

Release executables stay byte-identical to the stack tip with the rebuilt
helper (14/14 workloads, macOS).
2026-10-08 15:46:34 -05:00

63 lines
2.1 KiB
JavaScript

#!/usr/bin/env node
import { createHash } from "node:crypto";
import { access, readFile } from "node:fs/promises";
import { dirname, join } from "node:path";
import { fileURLToPath } from "node:url";
const root = dirname(dirname(fileURLToPath(import.meta.url)));
const manifest = JSON.parse(await readFile(join(root, "runtime-pack.json"), "utf8"));
const packageManifest = JSON.parse(await readFile(join(root, "package.json"), "utf8"));
if (
manifest.schema !== "scriptc.runtime-pack.v1" ||
manifest.format !== 1 ||
manifest.package !== packageManifest.name ||
manifest.version !== packageManifest.version
)
throw new Error("runtime pack identity does not match package.json");
const artifacts = [
...Object.values(manifest.flavors).flatMap((flavor) =>
flavor.runtime_units.flatMap((unit) =>
unit.variants.flatMap((variant) =>
variant.bitcode ? [variant, variant.bitcode] : [variant],
),
),
),
...manifest.archives,
];
function printableStrings(bytes) {
const strings = [];
let start = -1;
for (let i = 0; i <= bytes.length; i++) {
const byte = bytes[i];
if (byte !== undefined && byte >= 0x20 && byte <= 0x7e) {
if (start === -1) start = i;
continue;
}
if (start !== -1 && i - start >= 4) strings.push(bytes.subarray(start, i).toString("ascii"));
start = -1;
}
return strings;
}
for (const artifact of artifacts) {
const path = join(root, artifact.path);
const bytes = await readFile(path);
const digest = createHash("sha256").update(bytes).digest("hex");
if (bytes.length !== artifact.size || digest !== artifact.sha256) {
throw new Error(`runtime pack hash mismatch: ${artifact.path}`);
}
const checkoutPath = printableStrings(bytes).find(
(value) => value.startsWith("/") && value.includes("/packages/runtime/"),
);
if (checkoutPath !== undefined) {
throw new Error(
`runtime pack contains an absolute source path in ${artifact.path}: ${checkoutPath}`,
);
}
}
for (const license of manifest.licenses) await access(join(root, license.path));
process.stdout.write(
`verified ${manifest.package}@${manifest.version}: ${artifacts.length} artifacts\n`,
);