bryan-minimal · Nov 4, 2026 · Oct 4, 2026 · Oct 4, 2026 · Oct 5, 2026 · Oct 15, 2026
@@ -0,0 +1,84 @@
+let { Attrs, BuildSpec, Local, Needs, OutputData, Source, Test, .. } = import "minimal.ncl" in
+let base = import "../base/build.ncl" in
+let llvm = import "../llvm/build.ncl" in
+let rust = import "../rust/build.ncl" in
+let toolchain = import "../toolchain/build.ncl" in
+let wasm-bindgen-cli = import "../wasm-bindgen-cli/build.ncl" in
+
+# The amaro version node and node-lts bundle (both 1.1.11 since node 26.12.1 / 24.22.1), used in
+# the Source URL, upstream_version and the test, so a bump is one edit here (plus node and
+# node-lts's own `amaro`). Its tag vendors the swc tree the TypeScript stripper is built from
+# (deps/swc, with Cargo.lock). build.sh still loops over amaro_versions, should two ever differ.
+let amaro = "1.1.11" in
+# the rust package's version; build.sh fails if rustc is not this version
+let rustc = "1.99.1" in
+{
+  name = "amaro-wasm",
+  # amaro is node's built-in TypeScript type stripper (`node x.ts`): swc's
+  # binding_typescript_wasm, compiled to wasm32-unknown-unknown and run through wasm-bindgen,
+  # base64-inlined into amaro's dist/index.js. This rebuilds that module from the vendored swc
+  # source, the way amaro's tools/build-wasm.js does in its container (cargo --release with fat LTO
+  # and opt-level z, wasm-bindgen --target nodejs, no wasm-opt), so node and node-lts can splice it
+  # over the shipped blob.
+  #
+  # The rust package ships no wasm32 std and no rust-lld: std is built with -Zbuild-std from the
+  # rustc source tarball of the same version, and llvm's wasm-ld links.
+  build_deps = [
+    { file = "build.sh" } | Local,
+    {
+      url = "https://github.com/nodejs/amaro/archive/refs/tags/v%{amaro}.tar.gz",
+      sha256 = "f65b4e8ae9ab519e8db1824377eb621d7fce66e21ae1020621d8f54b6ed774fa",
+      extract = false,
+    } | Source,
+    {
+      # the rust package's own source
+      url = "gs://minimal-staging-archives/rustc-%{rustc}-src.tar.xz",
+      sha256 = "6451598a99e77f07571960f6b21d577399d3a30f33e80cbd2e3a4aae6535d265",
+      extract = false,
+    } | Source,
+    base,
+    llvm,
+    rust,
+    toolchain,
+    wasm-bindgen-cli,
+  ],
+
+  # cargo fetches the crates in swc's Cargo.lock and std's library/Cargo.lock (--locked).
+  needs =
+    {
+      dns = {},
+      internet = {},
+    } | Needs,
+
+  cmd = "./build.sh",
+  build_args = {
+    amaro_versions = amaro,
+    rust_version = rustc,
+  },
+
+  outputs = {
+    wasm = { glob = "usr/share/amaro-wasm/**" } | OutputData,
+  },
+
+  attrs =
+    {
+      upstream_version = amaro,
+      license_spdx = "MIT AND Apache-2.0",
+      source_provenance = {
+        category = 'GithubRepo,
+        owner = "nodejs",
+        repo = "amaro",
+      },
+    } | Attrs,
+
+  tests = {
+    modules =
+      {
+        class = 'Standalone,
+        test_deps = [base],
+        cmds = [
+          ["/bin/bash", "-c", "for v in %{amaro}; do head -c4 /usr/share/amaro-wasm/$v/wasm_bg.wasm | od -An -c | grep -q 'a   s   m' || exit 1; done"],
+        ],
+      } | Test,
+  },
+} | BuildSpec
@@ -0,0 +1,55 @@
+#!/bin/sh
+set -ex
+
+RV="${MINIMAL_ARG_RUST_VERSION:?build.ncl forwards rust_version}"
+VERSIONS="${MINIMAL_ARG_AMARO_VERSIONS:?build.ncl forwards amaro_versions}"
+TOP=$(pwd)
+
+# std for wasm32 comes from the rustc source of the exact rustc in use.
+case "$(rustc --version)" in "rustc $RV "*) ;; *) echo "r
8000
ustc is not $RV: update rust_version and its sha" >&2; exit 1 ;; esac
+tar -xof "rustc-$RV-src.tar.xz" "rustc-$RV-src/library"
+LIB="$TOP/rustc-$RV-src/library"
+export __CARGO_TESTS_ONLY_SRC_ROOT="$LIB"
+export RUSTC_BOOTSTRAP=1
+
+# Host artifacts (build scripts, proc macros) link with gcc; swc's .cargo/config.toml names
+# cross linkers for the linux targets.
+export CC=gcc
+export CARGO_TARGET_X86_64_UNKNOWN_LINUX_GNU_LINKER=gcc
+export CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER=gcc
+export CARGO_TARGET_WASM32_UNKNOWN_UNKNOWN_LINKER=wasm-ld
+# amaro's swc scripts/build.sh
+export CARGO_PROFILE_RELEASE_LTO=fat
+export CARGO_PROFILE_RELEASE_OPT_LEVEL=z
+
+# build <amaro version> <work dir>: the module amaro's tools/build-wasm.js produces, as
+# <work dir>/pkg/wasm_bg.wasm (before patch.mjs inlines it).
+build() {
+  v=$1; w=$2
+  rm -rf "$w"; mkdir -p "$w"
+  tar -xof "$TOP/v$v.tar.gz" -C "$w" "amaro-$v/deps/swc"
+  # From the binding's directory, as wasm-pack runs it, so its .cargo/config.toml (the 2 MiB
+  # stack) applies along with the workspace's; the stack size is repeated in case the env value
+  # replaces rather than extends it.
+  cd "$w/amaro-$v/deps/swc/bindings/binding_typescript_wasm"
+  CARGO_TARGET_WASM32_UNKNOWN_UNKNOWN_RUSTFLAGS="-Clink-arg=-zstack-size=2097152 --remap-path-prefix=$w=/builddir --remap-path-prefix=$LIB=/rustc/library --remap-path-prefix=$HOME/.cargo=/cargo" \
+    cargo build --release --locked -Zbuild-std=std,panic_abort --target wasm32-unknown-unknown
+  cd "$w/amaro-$v/deps/swc"
+  wasm-bindgen --target nodejs --out-name wasm --out-dir pkg --typescript \
+    target/wasm32-unknown-unknown/release/binding_typescript_wasm.wasm
+  cd "$TOP"
+}
+
+for v in $VERSIONS; do
+  # Built twice, at different paths: the module must not depend on where it was built.
+  build "$v" "$TOP/a-$v"
+  build "$v" "$TOP/b-$v"
+  A="$TOP/a-$v/amaro-$v/deps/swc/pkg/wasm_bg.wasm"
+  B="$TOP/b-$v/amaro-$v/deps/swc/pkg/wasm_bg.wasm"
+  cmp "$A" "$B" || { echo "amaro $v: two builds of wasm_bg.wasm differ" >&2; exit 1; }
+  D="$OUTPUT_DIR/usr/share/amaro-wasm/$v"
+  mkdir -p "$D"
+  cp "$A" "$D/wasm_bg.wasm"
+  cp "$TOP/a-$v/amaro-$v/deps/swc/pkg/wasm.js" "$D/wasm.js"
+  sha256sum "$D/wasm_bg.wasm"
+done
@@ -0,0 +1,29 @@
+let { BuildSpec, Local, OutputData, Test, .. } = import "minimal.ncl" in
+let base = import "../base/build.ncl" in
+let python = import "../python/build.ncl" in
+
+# Build-time helper for node and node-lts: rebuilds undici's llhttp wasm from its
+# in-tree C and splices it over the shipped base64 blobs. See the script's docstring.
+{
+  name = "llhttp-wasm-rebuild",
+  build_deps = [
+    { file = "build.sh" } | Local,
+    { file = "rebuild-llhttp-wasm.py" } | Local,
+    base,
+    python, # build.sh runs the selftest
+  ],
+  # node, node-lts and next run the installed script with python3
+  runtime_deps = [python],
+  cmd = "./build.sh",
+  outputs = {
+    script = { glob = "usr/share/llhttp-wasm-rebuild/rebuild-llhttp-wasm.py" } | OutputData,
+  },
+  tests = {
+    selftest =
+      {
+        class = 'Standalone,
+        test_deps = [python],
+        cmds = [["python3", "/usr/share/llhttp-wasm-rebuild/rebuild-llhttp-wasm.py", "selftest"]],
+      } | Test,
+  },
+} | BuildSpec
@@ -0,0 +1,5 @@
+#!/bin/sh
+set -ex
+
+python3 rebuild-llhttp-wasm.py selftest
+install -Dm 0644 rebuild-llhttp-wasm.py "$OUTPUT_DIR/usr/share/llhttp-wasm-rebuild/rebuild-llhttp-wasm.py"