fix(macos): direct archive linking + floor 14.0 (forensics-driven)

CI forensics (3-mode matrix with a std::cout probe) overturned the
working theory:

- -Wl,-hidden-l under lld resolves like a plain -l and picks the
  SIBLING DYLIB in the same directory: binaries carried
  @rpath/libc++.1.dylib with no rpath and died at load (dyld 'Library
  not loaded' -> Abort trap 6). That — not static destruction — was
  what killed every gtest/e2e binary. Link the archives by path
  (the form already verified end-to-end on macos-14/15 in PR #115
  run B5), keeping the per-unit split (tests use system -lc++).
- The official LLVM-20.1.7-macOS-ARM64 static archives are built for
  macOS 14 (ld64.lld: 'has version 14.0.0, newer than target minimum
  of 11.0.0'): claiming a 11.0 floor would be false. Deployment target
  is now 14.0 everywhere — still fully covering the macOS 14 goal;
  11-13 would need a custom libc++ build (follow-up).

Author: Sunrisepeak

.github/workflows/ci-macos.yml

@@ -340,14 +340,13 @@ jobs:
           run_mode() {
             echo "=== mode: $1 ==="
             shift
-            "$LLVM/bin/clang++" --no-default-config -std=c++17 -nostdinc++               -isystem "$LLVM/include/c++/v1" --sysroot="$SDK"               -mmacosx-version-min=11.0 -fuse-ld=lld /tmp/probe.cpp -o /tmp/probe "$@" 2>&1 | head -5
+            "$LLVM/bin/clang++" --no-default-config -std=c++17 -nostdinc++               -isystem "$LLVM/include/c++/v1" --sysroot="$SDK"               -mmacosx-version-min=14.0 -fuse-ld=lld /tmp/probe.cpp -o /tmp/probe "$@" 2>&1 | head -40
             otool -L /tmp/probe | grep -E "libc|probe" | head -4
             /tmp/probe
             echo "exit=$?"
           }
           run_mode dylib    -stdlib=libc++
           run_mode direct   -nostdlib++ "$LLVM/lib/libc++.a" "$LLVM/lib/libc++abi.a"
-          run_mode hidden   -nostdlib++ -L"$LLVM/lib" -Wl,-hidden-lc++ -Wl,-hidden-lc++abi
           exit 0
 
       - name: E2E suite

.github/workflows/release.yml

@@ -318,13 +318,15 @@ jobs:
 
       - name: Build mcpp from source (two-stage self-host)
         env:
-          # macOS min-version support: target the first arm64 macOS so the
-          # release runs on 11.0+ instead of only the runner's OS. Needs
+          # macOS min-version support: target macOS 14 so the release runs
+          # on 14.0+ instead of only the runner's OS (the official LLVM
+          # static libc++ archives are built for macOS 14 — going lower
+          # needs a custom libc++ build, tracked as follow-up). Needs
           # static LLVM libc++ — the system libc++ on older macOS lacks
           # LLVM-20-era C++23 symbols (std::print's __is_posix_terminal
           # etc.; minos-14 + dynamic libc++ dies at launch on macos-14 CI).
           # See xlings .agents/docs/2026-06-05-macos-min-version-support.md.
-          MACOSX_DEPLOYMENT_TARGET: '11.0'
+          MACOSX_DEPLOYMENT_TARGET: '14.0'
         run: |
           export PATH="$HOME/.xlings/subos/default/bin:$PATH"
           export MCPP_VENDORED_XLINGS="$XLINGS_BIN"
@@ -346,10 +348,10 @@ jobs:
           test -x "$MCPP_BIN"
           file "$MCPP_BIN"
           otool -L "$MCPP_BIN"
-          echo "=== LC_BUILD_VERSION (must be minos 11.0) ==="
+          echo "=== LC_BUILD_VERSION (must be minos 14.0) ==="
           otool -l "$MCPP_BIN" | grep -A4 LC_BUILD_VERSION | head -6
-          otool -l "$MCPP_BIN" | grep -A4 LC_BUILD_VERSION | grep -q "minos 11.0" \
-            || { echo "FAIL: expected minos 11.0"; exit 1; }
+          otool -l "$MCPP_BIN" | grep -A4 LC_BUILD_VERSION | grep -q "minos 14.0" \
+            || { echo "FAIL: expected minos 14.0"; exit 1; }
           if otool -L "$MCPP_BIN" | grep -q "libc++"; then
             echo "FAIL: still linked against system libc++"; exit 1
           fi

docs/05-mcpp-toml.md

@@ -91,7 +91,7 @@ cflags       = ["-DFOO=1"]        # 额外 C 编译参数
 cxxflags     = ["-DBAR=2"]        # 额外 C++ 编译参数(不要放 -std=...)
 ldflags      = ["-lfoo"]          # 额外链接参数
 static_stdlib = true               # 静态链接 libstdc++(默认 true)
-macos_deployment_target = "11.0"   # macOS 产物的最低支持系统版本(仅 macOS 生效)
+macos_deployment_target = "14.0"   # macOS 产物的最低支持系统版本(仅 macOS 生效)
 ```
 
 `macos_deployment_target` 设定产物 Mach-O 头里的最低系统版本

src/build/flags.cppm

@@ -378,13 +378,14 @@ CompileFlags compute_flags(const BuildPlan& plan) {
             auto libcxxAbiA = libDir / "libc++abi.a";
             if (std::filesystem::exists(libcxxA)
                 && std::filesystem::exists(libcxxAbiA)) {
-                // -hidden-l links the ARCHIVE (never the sibling dylib)
-                // and gives its symbols hidden visibility so the static
-                // copy can coexist with the system libc++ that libSystem
-                // pulls in indirectly. Distributable targets only — see
-                // the field comments in CompileFlags.
-                f.ldStdlibDefault = " -nostdlib++ -L" + escape_path(libDir)
-                                  + " -Wl,-hidden-lc++ -Wl,-hidden-lc++abi";
+                // Link the archives BY PATH. (-Wl,-hidden-l looked like
+                // the canonical choice, but lld resolves it like a plain
+                // -l and picks the sibling dylib in the same directory —
+                // the binary then carries @rpath/libc++.1.dylib with no
+                // rpath and dies at load. Observed on macos CI; path
+                // form verified end-to-end incl. macos-14.)
+                f.ldStdlibDefault = " -nostdlib++ " + escape_path(libcxxA)
+                                  + " " + escape_path(libcxxAbiA);
             }
         }
         std::string version_min;