Function buildBinaries

apps/cli/src/build.ts:394–543

(targets: Target[], mode: BuildMode)

const EMBEDDED_MIGRATIONS_STUB = `const migrations: Record<string, string> | null = null;\n\nexport default migrations;\n`;

const buildBinaries = async (targets: Target[], mode: BuildMode) => {
  const meta = await readMetadata();
  const binaries: Record<string, string> = {};
  const embeddedWebUIPath = join(cliRoot, "src/embedded-web-ui.gen.ts");
  const embeddedMigrationsPath = join(webRoot, "src/db/embedded-migrations.gen.ts");

  await rm(distDir, { recursive: true, force: true });

  // Cross-platform builds need every target's optional native packages
  // (e.g. @napi-rs/keyring-darwin-arm64) so we can copy the right .node next
  // to each target's executor. `bun install --frozen-lockfile --cpu=* --os=*`
  // extracts them all without modifying the lockfile.
  const needsCrossPlatform = targets.some((t) => !isCurrentPlatform(t));
  if (needsCrossPlatform) {
    console.log("Installing optional native deps for all platforms...");
    const proc = Bun.spawn(["bun", "install", "--frozen-lockfile", "--cpu=*", "--os=*"], {
      cwd: repoRoot,
      stdio: ["ignore", "inherit", "inherit"],
    });
    if ((await proc.exited) !== 0) {
      throw new Error("bun install --cpu=* --os=* failed");
    }
  }

  console.log(`Generating embedded web UI bundle (${mode})...`);
  const embeddedWebUI = await createEmbeddedWebUISource(mode);
  await writeFile(embeddedWebUIPath, `${embeddedWebUI}\n`);

  console.log("Generating embedded drizzle migrations...");
  const embeddedMigrations = await createEmbeddedMigrationsSource();
  await writeFile(embeddedMigrationsPath, `${embeddedMigrations}\n`);

  const quickJsWasmPath = resolveQuickJsWasmPath();
  const mcpAppsShellPath = await ensureMcpAppsShell();
  const onePasswordCoreWasmPath = resolveOnePasswordCoreWasmPath();
  const workerBundlerDistPath = resolveWorkerBundlerDistPath();
  const packedWorkerBundlerSource = await createPackedWorkerBundlerSource(workerBundlerDistPath);

  try {
    for (const target of targets) {
      const name = targetPackageName(target);
      const outDir = join(distDir, name);
      const binDir = join(outDir, "bin");
      await mkdir(binDir, { recursive: true });

      console.log(`Building ${name}...`);

      await Bun.build({
        entrypoints: [join(cliRoot, "src/main.ts")],
        minify: mode === "production",
        compile: {
          target: bunTarget(target),
          outfile: join(binDir, binaryName(target)),
        },
      });

      // Copy QuickJS WASM next to binary — loaded at runtime by the server
      await cp(quickJsWasmPath, join(binDir, "emscripten-module.wasm"));