feat: omnibus release cleanup

feat: support for exact metadata in native image feat: static-umbrella and prefer-shared linkage modes feat: stronger hardening flags for both clang and gcc feat: use oxc parser from truffle typescript feat: integrate cargo and gradle builds feat: switch to explicit target triples for cargo feat: early musl support for rustlibs feat: build conventions for target info + triples feat: use native typescript parser by default feat: ability to enforce custom cargo configs by name fix: gc of sections by linker fix: lto and cflags alignment fix: cross-lang lto with linker plugins fix: always produce debug symbols on linux fix: remove vendored native tls in orogene fix: remove vendored boringssl fix: native access to oxc parser fix: bloat from static rust libs fix: make orogene and uv conditional fix: target `x86-64-v3` fix: better support for clang fix: aligned cflags for hardening fix: some issues building against musl fix: drop sqlite math fns for libm dep fix: build embedded + benchmarks by default fix: consolidate `elide.target` and related props fix: entirely eliminate the "elide natives" root fix: drop bouncycastle (unused) fix: drop mosaic and compose (tmp, unused) fix: respect cflags from all native builds fix: continued support for cfi/branch protection fix: drop unused / irrelevant resources fix: colors break native error printing fix: copy method visibility for node child process records fix: drop module preloading chore: bump version for release chore: add support for es2024 setting chore: add run configurations for idea chore: update llvm/clang → `19.x` chore: update gradle → `8.13` chore: update typescript → `5.8.2` chore: update pnpm → `10.5.2` chore: update protobuf → `4.28.2` chore: generate initial new-format reachability metadata chore: update crates chore: update pnpm deps chore: update maven deps chore: trim unused crates and deps chore: relocate vm feature classes to `engine` chore: update api pins chore: update detekt baselines chore: update pgo profiles Signed-off-by: Sam Gammon <sam@elide.dev>
elide-dev · Mar 2, 2025 · e3b2592 · e3b2592
1 parent cf62b54
commit e3b2592
Show file tree

Hide file tree

Showing 210 changed files with 9,588 additions and 16,973 deletions.
diff --git a/.cargo/config.aarch64.toml → .cargo/config.arm64.toml b/.cargo/config.aarch64.toml → .cargo/config.arm64.toml
diff --git a/.cargo/config.clang-arm64.toml b/.cargo/config.clang-arm64.toml
@@ -0,0 +1,43 @@
+#
+# Copyright (c) 2024 Elide Technologies, Inc.
+#
+# Licensed under the MIT license (the "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# https://opensource.org/license/mit/
+#
+# Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on
+# an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations under the License.
+#
+
+[build]
+rustflags = [
+  # Enforce completely position-independent executables.
+  "-Crelocation-model=pic",
+
+  # Link with LLD through clang; enable linker plugin LTO.
+  "-Clinker=clang-19",
+  "-Clink-arg=-fuse-ld=lld",
+  "-Clinker-plugin-lto",
+
+  # Target CPU.
+  "-Ctarget-cpu=armv8-a+crypto+crc+simd",
+
+  # Use clang to drive linking via linker plugins, with lld as the linker. Wire in the linker script which fixes LTO
+  # arguments via linker plugins.
+  "-Clinker=$CARGO_MANIFEST_DIR/tools/scripts/macos-linker.sh",
+  "-Clink-arg=-fuse-ld=ld64.lld",
+
+  # Target the native host CPU.
+  "-Ctarget-cpu=apple-m1",
+
+  # Enables NEON support awareness on ARM64 macOS platforms.
+  "-Ctarget-feature=+neon,+aes,+crc,+sha2,+sha3,+mte,+sve,+sm4,+sve2,+sve2-aes,+sve2-bitperm,+sve2-sha3,+sve2-sm4",
+]
+
+[env]
+ELIDE_ROOT = { value = ".", relative = true }
+SQLITE3_STATIC = { value = "1" }
+SQLITE3_LIB_DIR = { value = "third_party/sqlite/install/lib", relative = true }
+SQLITE3_INCLUDE_DIR = { value = "third_party/sqlite/install/include", relative = true }
diff --git a/.cargo/config.clang-x86_64.toml b/.cargo/config.clang-x86_64.toml
@@ -0,0 +1,32 @@
+#
+# Copyright (c) 2024 Elide Technologies, Inc.
+#
+# Licensed under the MIT license (the "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# https://opensource.org/license/mit/
+#
+# Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on
+# an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations under the License.
+#
+
+[build]
+rustflags = [
+  # Enforce completely position-independent executables.
+  "-Crelocation-model=pic",
+
+  # Link with LLD through clang; enable linker plugin LTO.
+  "-Clinker=clang-19",
+  "-Clink-arg=-fuse-ld=lld",
+  "-Clinker-plugin-lto",
+
+  # Target CPU.
+  "-Ctarget-cpu=x86-64-v3",
+]
+
+[env]
+ELIDE_ROOT = { value = ".", relative = true }
+SQLITE3_STATIC = { value = "1" }
+SQLITE3_LIB_DIR = { value = "third_party/sqlite/install/lib", relative = true }
+SQLITE3_INCLUDE_DIR = { value = "third_party/sqlite/install/include", relative = true }
diff --git a/.cargo/config.pgo.toml b/.cargo/config.pgo.toml
@@ -0,0 +1,40 @@
+#
+# Copyright (c) 2024 Elide Technologies, Inc.
+#
+# Licensed under the MIT license (the "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# https://opensource.org/license/mit/
+#
+# Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on
+# an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations under the License.
+#
+
+[build]
+rustflags = [
+  # Enforce completely position-independent executables.
+  "-Crelocation-model=pic",
+
+  # Link with LLD through clang; enable linker plugin LTO.
+  "-Clinker=clang",
+  "-Clink-arg=-fuse-ld=lld",
+  "-Clinker-plugin-lto",
+
+  # Enable PGO.
+  "-Cprofile-use=./tools/merged.profdata",
+
+  # Target CPU.
+  "-Ctarget-cpu=x86-64-v3",
+]
+
+[env]
+CC = { value = "clang" }
+CXX = { value = "clang++" }
+LD = { value = "lld" }
+AR = { value = "llvm-ar" }
+
+ELIDE_ROOT = { value = ".", relative = true }
+SQLITE3_STATIC = { value = "1" }
+SQLITE3_LIB_DIR = { value = "third_party/sqlite/install/lib", relative = true }
+SQLITE3_INCLUDE_DIR = { value = "third_party/sqlite/install/include", relative = true }
diff --git a/.cargo/config.profiler-x86_64.toml b/.cargo/config.profiler-x86_64.toml
@@ -0,0 +1,40 @@
+#
+# Copyright (c) 2024 Elide Technologies, Inc.
+#
+# Licensed under the MIT license (the "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# https://opensource.org/license/mit/
+#
+# Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on
+# an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations under the License.
+#
+
+[build]
+rustflags = [
+  # Enforce completely position-independent executables.
+  "-Crelocation-model=pic",
+
+  # Link with LLD through clang; enable linker plugin LTO.
+  "-Clinker=clang-19",
+  "-Clink-arg=-fuse-ld=lld",
+  "-Clinker-plugin-lto",
+
+  # Generate profile data.
+  "-Cprofile-generate=/tmp/pgo-data",
+
+  # Target CPU.
+  "-Ctarget-cpu=x86-64-v3",
+]
+
+[env]
+CC = { value = "clang" }
+CXX = { value = "clang++" }
+LD = { value = "lld" }
+AR = { value = "llvm-ar" }
+
+ELIDE_ROOT = { value = ".", relative = true }
+SQLITE3_STATIC = { value = "1" }
+SQLITE3_LIB_DIR = { value = "third_party/sqlite/install/lib", relative = true }
+SQLITE3_INCLUDE_DIR = { value = "third_party/sqlite/install/include", relative = true }
diff --git a/.cargo/config.toml b/.cargo/config.toml
@@ -13,12 +13,13 @@
 
 [build]
 rustflags = [
-  # Enable Tokio unstable.
-  # "--cfg",
-  # "tokio_unstable",
-
   # Enforce completely position-independent executables.
   "-Crelocation-model=pic",
+
+  # Link with LLD through clang; enable linker plugin LTO.
+  "-Clinker=clang-19",
+  "-Clink-arg=-fuse-ld=lld",
+  "-Clinker-plugin-lto",
 ]
 
 [env]

diff --git a/.cargo/config.x86_64.toml b/.cargo/config.x86_64.toml
@@ -13,6 +13,9 @@
 
 [build]
 rustflags = [
+  # Enforce completely position-independent executables.
+  "-Crelocation-model=pic",
+
   # Enable Tokio unstable.
   "--cfg",
   "tokio_unstable",
@@ -22,6 +25,9 @@ rustflags = [
 
   # Enables Control-Flow Enforcement (CET) on x86 architectures.
   "-Zcf-protection=full",
+
+  # Target CPU.
+  "-Ctarget-cpu=x86-64-v3",
 ]
 
 [env]

diff --git a/.devcontainer/Dockerfile b/.devcontainer/Dockerfile
@@ -5,7 +5,7 @@ FROM mcr.microsoft.com/devcontainers/base:ubuntu-24.04
 LABEL org.opencontainers.image.vendor=Elide
 LABEL org.opencontainers.image.title="Elide Codespace"
 LABEL org.opencontainers.image.description="Elide runtime within a GitHub Codespace"
-LABEL org.opencontainers.image.version=1.0.0-alpha13
+LABEL org.opencontainers.image.version=1.0.0-alpha14
 LABEL org.opencontainers.image.url=https://github.com/elide-dev/elide
 LABEL org.opencontainers.image.base.name=mcr.microsoft.com/devcontainers/base
 LABEL org.opencontainers.image.source=https://github.com/elide-dev/elide/blob/main/.devcontainer/Elide.devcontainer

diff --git a/.github/CONTRIBUTING.md b/.github/CONTRIBUTING.md
@@ -172,13 +172,13 @@ Check the `gradle.properties` file at the project root to see all available opti
 If you are building a JVM application that runs guest code in one of the languages supported by Elide, you can use the Runtime DSL to configure your own embedded polyglot engine:
 
 ```kotlin
-implementation("dev.elide:elide-graalvm:1.0.0-alpha13")
+implementation("dev.elide:elide-graalvm:1.0.0-alpha14")
 ```
 
 or for Groovy scripts:
 
 ```groovy
-implementation 'dev.elide:elide-graalvm:1.0.0-alpha13'
+implementation 'dev.elide:elide-graalvm:1.0.0-alpha14'
 ```
 
 The DSL is used internally by the Elide binaries and by the SSR packages and provides a simplified API to harness the power of the underlying [GraalVM](https://graalvm.org) engine:

diff --git a/.github/workflows/checks.apicheck.yml b/.github/workflows/checks.apicheck.yml
@@ -98,7 +98,7 @@ jobs:
       - name: "Setup: PNPM"
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
         with:
-          version: "9.2.0"
+          version: "10.5.2"
           run_install: |
             - recursive: true
               args: [--frozen-lockfile, --strict-peer-dependencies]
@@ -132,4 +132,7 @@ jobs:
             -x test \
             -x nativeCompile \
             -x nativeOptimizedCompile \
-            -x :packages:sqlite:checkNative
+            -x :packages:sqlite:checkNative \
+            -x :packages:graalvm:buildThirdPartyNatives \
+            -x :packages:graalvm:buildRustNativesForHost \
+            -x :packages:graalvm:natives
diff --git a/.github/workflows/checks.formatting.yml b/.github/workflows/checks.formatting.yml
@@ -100,7 +100,7 @@ jobs:
       - name: "Setup: PNPM"
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
         with:
-          version: "9.2.0"
+          version: "10.5.2"
           run_install: |
             - recursive: true
               args: [--frozen-lockfile, --strict-peer-dependencies]
@@ -139,4 +139,7 @@ jobs:
             spotlessCheck \
             -x nativeCompile \
             -x nativeOptimizedCompile \
-            -x :packages:sqlite:checkNative
+            -x :packages:sqlite:checkNative \
+            -x :packages:graalvm:buildThirdPartyNatives \
+            -x :packages:graalvm:buildRustNativesForHost \
+            -x :packages:graalvm:natives
diff --git a/.github/workflows/job.build.yml b/.github/workflows/job.build.yml
@@ -139,11 +139,12 @@ name: Framework
         description: "Gradle cache key"
 
 env:
+  CC: clang-19
+  LD: clang-19
+  CXX: clang++-19
+  AR: llvm-ar-19
+  RANLIB: llvm-ranlib-19
   BUILDLESS_APIKEY: ${{ secrets.BUILDLESS_APIKEY }}
-  # SCCACHE_WEBDAV_ENDPOINT: "https://sccache.less.build"
-  # SCCACHE_WEBDAV_USERNAME: "apikey"
-  # SCCACHE_WEBDAV_PASSWORD: ${{ secrets.BUILDLESS_APIKEY }}
-  # SCCACHE_REDIS: "rediss://apikey:${{ secrets.BUILDLESS_APIKEY }}@redis.less.build:6380"
 
 permissions:
   contents: read
@@ -274,16 +275,16 @@ jobs:
       - name: "Setup: PNPM"
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
         with:
-          version: "9.2.0"
+          version: "10.5.2"
           run_install: |
             - recursive: true
               args: [--frozen-lockfile, --strict-peer-dependencies]
-      - name: "Setup: LLVM 18"
+      - name: "Setup: LLVM 19"
         run: |
           wget https://apt.llvm.org/llvm.sh
           chmod +x llvm.sh
-          sudo ./llvm.sh 18 all
-          export LLVM_PATH=/usr/lib/llvm-18
+          sudo ./llvm.sh 19 all
+          export LLVM_PATH=/usr/lib/llvm-19
           export PATH="$LLVM_PATH/bin:$PATH"
           export LD_LIBRARY_PATH="$LLVM_PATH/lib:$LD_LIBRARY_PATH"
           export LLVM_CONFIG="$LLVM_PATH/bin/llvm-config"
@@ -333,7 +334,7 @@ jobs:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
           TEST_EXCEPTIONS: true
         run: |
-          make setup natives -j`nproc` && ./gradlew \
+          make setup natives COMPILER=clang -j`nproc` && ./gradlew \
             assemble \
             compileKotlin \
             -x check \
@@ -349,7 +350,10 @@ jobs:
             --stacktrace \
             -Pelide.ci=true \
             -PbuildSamples=false \
-            -PbuildDocs=false
+            -PbuildDocs=false \
+            -Pelide.buildMode=dev \
+            -Pelide.compiler=`which clang-19` \
+            -Pelide.linker=lld
       - name: "Artifact: Build Outputs"
         uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
         with:

diff --git a/.github/workflows/job.cli.yml b/.github/workflows/job.cli.yml
@@ -120,6 +120,14 @@ name: CLI
 permissions:
   contents: read
 
+env:
+  CC: clang-19
+  LD: clang-19
+  CXX: clang++-19
+  AR: llvm-ar-19
+  RANLIB: llvm-ranlib-19
+  BUILDLESS_APIKEY: ${{ secrets.BUILDLESS_APIKEY }}
+
 jobs:
   ##
   ## Job: CLI (Native Debug)
@@ -197,7 +205,7 @@ jobs:
       - name: "Setup: PNPM"
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
         with:
-          version: "9.2.0"
+          version: "10.5.2"
           run_install: |
             - recursive: true
               args: [--frozen-lockfile, --strict-peer-dependencies]
@@ -241,7 +249,7 @@ jobs:
         if: success() && !contains(matrix.runner, 'windows')
         run: |
           pushd packages/cli/build/native/nativeCompile;
-          xz -9kv elide.debug;
+          xz -9kv elide;
           popd;
           echo "Binary compressed.";
       - name: "Artifacts: Debug Binary (Unix)"
@@ -250,14 +258,14 @@ jobs:
         with:
           name: cli-debug-${{ matrix.tag }}
           path: |
-            ./packages/cli/build/native/nativeCompile/elide.debug.xz
+            ./packages/cli/build/native/nativeCompile/elide.xz
       - name: "Artifacts: Debug Binary (Windows)"
         uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
         if: success() && contains(matrix.runner, 'windows')
         with:
           name: cli-debug-${{ matrix.tag }}
           path: |
-            ./packages/cli/build/native/nativeCompile/elide.debug
+            ./packages/cli/build/native/nativeCompile/elide
       - name: "Artifacts: Dashboard Dump"
         uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
         if: success()
@@ -351,7 +359,7 @@ jobs:
       - name: "Setup: PNPM"
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
         with:
-          version: "9.2.0"
+          version: "10.5.2"
           run_install: |
             - recursive: true
               args: [--frozen-lockfile, --strict-peer-dependencies]

diff --git a/.github/workflows/job.containers.yml b/.github/workflows/job.containers.yml
@@ -209,7 +209,7 @@ jobs:
       - name: "Setup: PNPM"
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
         with:
-          version: "9.2.0"
+          version: "10.5.2"
           run_install: |
             - recursive: true
               args: [--frozen-lockfile, --strict-peer-dependencies]
@@ -321,7 +321,7 @@ jobs:
       - name: "Setup: PNPM"
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
         with:
-          version: "9.2.0"
+          version: "10.5.2"
           run_install: |
             - recursive: true
               args: [--frozen-lockfile, --strict-peer-dependencies]