Replaces simple process.argv[2] with a proper arg loop that handles both the positional output name and --node-binary <path> flag. Also the SEA build process no uses nodeBinary || process.execPath as the source Node binary. This is an attempt to a universal MacOS binary (ARM64 and x386).

Author: seabearDEV

.github/workflows/release.yml

@@ -14,8 +14,6 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - runner: macos-latest
-            binary: ccli-macos-arm64
           - runner: ubuntu-latest
             binary: ccli-linux-x64
           - runner: ubuntu-24.04-arm
@@ -53,8 +51,71 @@ jobs:
           name: ${{ matrix.binary }}
           path: dist/${{ matrix.binary }}
 
+  build-macos:
+    runs-on: macos-latest
+    name: Build ccli-macos-universal
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        id: setup-node
+        with:
+          node-version: 22
+
+      - run: npm ci
+
+      # ── arm64 slice (native on macos-latest) ─────────────────────────────
+      - name: Build arm64 slice
+        run: node scripts/sea-build.js ccli-macos-arm64
+
+      - name: Smoke test arm64
+        run: |
+          chmod +x dist/ccli-macos-arm64
+          ./dist/ccli-macos-arm64 --version
+
+      # ── x64 slice (cross-build using downloaded x64 Node) ────────────────
+      - name: Download Node x64 binary
+        id: node-x64
+        run: |
+          NODE_VERSION="${{ steps.setup-node.outputs.node-version }}"
+          TARBALL="node-v${NODE_VERSION}-darwin-x64.tar.gz"
+          URL="https://nodejs.org/dist/v${NODE_VERSION}/${TARBALL}"
+          echo "Downloading ${URL}"
+          curl -fsSL "$URL" -o "$TARBALL"
+          tar xzf "$TARBALL"
+          NODE_X64="$(pwd)/node-v${NODE_VERSION}-darwin-x64/bin/node"
+          echo "node_x64=${NODE_X64}" >> "$GITHUB_OUTPUT"
+          file "$NODE_X64"
+
+      - name: Build x64 slice
+        run: node scripts/sea-build.js ccli-macos-x64 --node-binary "${{ steps.node-x64.outputs.node_x64 }}"
+
+      - name: Smoke test x64
+        run: |
+          chmod +x dist/ccli-macos-x64
+          arch -x86_64 ./dist/ccli-macos-x64 --version
+
+      # ── Universal binary ─────────────────────────────────────────────────
+      - name: Create universal binary
+        run: |
+          lipo -create dist/ccli-macos-arm64 dist/ccli-macos-x64 -output dist/ccli-macos-universal
+          codesign --sign - dist/ccli-macos-universal
+          file dist/ccli-macos-universal
+
+      - name: Smoke test universal (arm64)
+        run: ./dist/ccli-macos-universal --version
+
+      - name: Smoke test universal (x86_64)
+        run: arch -x86_64 ./dist/ccli-macos-universal --version
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: ccli-macos-universal
+          path: dist/ccli-macos-universal
+
   release:
-    needs: build
+    needs: [build, build-macos]
     runs-on: ubuntu-latest
     name: Create Release
 
@@ -86,14 +147,14 @@ jobs:
       - name: Download release binaries
         run: |
           base="https://github.com/seabearDEV/codexCLI/releases/download/${GITHUB_REF_NAME}"
-          for bin in ccli-macos-arm64 ccli-linux-x64 ccli-linux-arm64; do
+          for bin in ccli-macos-universal ccli-linux-x64 ccli-linux-arm64; do
             curl -fsSL "$base/$bin" -o "$bin"
           done
 
       - name: Compute SHA256 checksums
         id: sha
         run: |
-          echo "macos_arm64=$(sha256sum ccli-macos-arm64 | awk '{print $1}')" >> "$GITHUB_OUTPUT"
+          echo "macos_universal=$(sha256sum ccli-macos-universal | awk '{print $1}')" >> "$GITHUB_OUTPUT"
           echo "linux_x64=$(sha256sum ccli-linux-x64 | awk '{print $1}')" >> "$GITHUB_OUTPUT"
           echo "linux_arm64=$(sha256sum ccli-linux-arm64 | awk '{print $1}')" >> "$GITHUB_OUTPUT"
 
@@ -107,7 +168,7 @@ jobs:
       - name: Generate formula
         env:
           CCLI_VERSION: ${{ steps.version.outputs.version }}
-          SHA_MACOS_ARM64: ${{ steps.sha.outputs.macos_arm64 }}
+          SHA_MACOS_UNIVERSAL: ${{ steps.sha.outputs.macos_universal }}
           SHA_LINUX_X64: ${{ steps.sha.outputs.linux_x64 }}
           SHA_LINUX_ARM64: ${{ steps.sha.outputs.linux_arm64 }}
         run: |
@@ -125,8 +186,8 @@ jobs:
             end
 
             on_macos do
-              url "https://github.com/seabearDEV/codexCLI/releases/download/v$CCLI_VERSION/ccli-macos-arm64"
-              sha256 "$SHA_MACOS_ARM64"
+              url "https://github.com/seabearDEV/codexCLI/releases/download/v$CCLI_VERSION/ccli-macos-universal"
+              sha256 "$SHA_MACOS_UNIVERSAL"
             end
 
             on_linux do

scripts/sea-build.js

@@ -3,8 +3,9 @@
 /**
  * Build a Node SEA (Single Executable Application) binary for the current platform.
  *
- * Usage: node scripts/sea-build.js [output-name]
+ * Usage: node scripts/sea-build.js [output-name] [--node-binary <path>]
  *   output-name defaults to ccli-{platform}-{arch} (e.g. ccli-darwin-arm64)
+ *   --node-binary  path to the Node binary to use as the SEA shell (defaults to process.execPath)
  */
 
 const { execFileSync } = require('child_process');
@@ -18,10 +19,26 @@ const DIST = path.join(ROOT, 'dist');
 const platform = os.platform();  // darwin | linux | win32
 const arch = os.arch();          // arm64 | x64
 
-// Resolve output binary name
+// ── Parse arguments ──────────────────────────────────────────────────────────
+let outputName = null;
+let nodeBinary = null;
+
+const args = process.argv.slice(2);
+for (let i = 0; i < args.length; i++) {
+  if (args[i] === '--node-binary') {
+    nodeBinary = args[++i];
+    if (!nodeBinary) {
+      console.error('Error: --node-binary requires a path argument');
+      process.exit(1);
+    }
+  } else if (!outputName) {
+    outputName = args[i];
+  }
+}
+
 const platformName = platform === 'darwin' ? 'macos' : platform === 'win32' ? 'win' : platform;
 const defaultName = `ccli-${platformName}-${arch}`;
-let outputName = process.argv[2] || defaultName;
+outputName = outputName || defaultName;
 
 // Ensure Windows binaries have .exe
 if (platform === 'win32' && !outputName.endsWith('.exe')) {
@@ -75,11 +92,12 @@ async function main() {
 
   // ── 4. Copy node binary ───────────────────────────────────────────────────
   console.log('\n=== Step 4: Copy node binary ===');
-  fs.copyFileSync(process.execPath, BINARY);
+  const sourceNode = nodeBinary || process.execPath;
+  fs.copyFileSync(sourceNode, BINARY);
   if (platform !== 'win32') {
     fs.chmodSync(BINARY, 0o755);
   }
-  console.log(`Copied ${process.execPath} → ${BINARY}`);
+  console.log(`Copied ${sourceNode} → ${BINARY}`);
 
   // ── 5. Inject blob with postject ──────────────────────────────────────────
   console.log('\n=== Step 5: Inject SEA blob ===');