eigent/config/before-sign.cjs

const path = require('path');
const fs = require('fs');

/**
 * After pack hook - clean invalid symlinks after packing, before signing
 */
exports.default = async function afterPack(context) {
  if (process.platform !== 'darwin') {
    return;
  }

  const appOutDir = context.appOutDir;
  const appName = context.packager.appInfo.productName;
  const appPath = path.join(appOutDir, `${appName}.app`);

  if (!fs.existsSync(appPath)) {
    console.log('App bundle not found, skipping symlink cleanup');
    return;
  }

  console.log('🧹 Cleaning invalid symlinks and cache directories before signing...');

  const resourcesPath = path.join(appPath, 'Contents', 'Resources');
  const prebuiltPath = path.join(resourcesPath, 'prebuilt');

  if (!fs.existsSync(prebuiltPath)) {
    return;
  }

  // Remove .npm-cache directories (should not be packaged)
  function removeNpmCache(dir) {
    if (!fs.existsSync(dir)) {
      return;
    }

    try {
      const entries = fs.readdirSync(dir, { withFileTypes: true });

      for (const entry of entries) {
        const fullPath = path.join(dir, entry.name);

        try {
          if (entry.name === '.npm-cache' && entry.isDirectory()) {
            console.log(`Removing .npm-cache directory: ${fullPath}`);
            fs.rmSync(fullPath, { recursive: true, force: true });
          } else if (entry.isDirectory()) {
            removeNpmCache(fullPath);
          }
        } catch (error) {
          // Ignore errors
        }
      }
    } catch (error) {
      // Ignore errors
    }
  }

  removeNpmCache(prebuiltPath);

  // Remove flac-mac binary (uses outdated SDK, causes notarization issues)
  const venvLibPath = path.join(prebuiltPath, 'venv', 'lib');
  if (fs.existsSync(venvLibPath)) {
    try {
      const entries = fs.readdirSync(venvLibPath, { withFileTypes: true });
      for (const entry of entries) {
        if (entry.isDirectory() && entry.name.startsWith('python')) {
          const flacMacPath = path.join(venvLibPath, entry.name, 'site-packages', 'speech_recognition', 'flac-mac');
          if (fs.existsSync(flacMacPath)) {
            console.log(`Removing flac-mac binary (outdated SDK): ${flacMacPath}`);
            try {
              fs.unlinkSync(flacMacPath);
            } catch (error) {
              console.warn(`Warning: Could not remove flac-mac: ${error.message}`);
            }
          }
        }
      }
    } catch (error) {
      // Ignore errors
    }
  }

  // Clean Python symlinks in venv/bin
  const venvBinDir = path.join(prebuiltPath, 'venv', 'bin');
  if (fs.existsSync(venvBinDir)) {
    const pythonNames = ['python', 'python3', 'python3.10', 'python3.11', 'python3.12'];
    const bundlePath = path.resolve(appPath);

    for (const pythonName of pythonNames) {
      const pythonSymlink = path.join(venvBinDir, pythonName);

      if (fs.existsSync(pythonSymlink)) {
        try {
          const stats = fs.lstatSync(pythonSymlink);
          if (stats.isSymbolicLink()) {
            const target = fs.readlinkSync(pythonSymlink);
            const resolvedPath = path.resolve(path.dirname(pythonSymlink), target);

            // If symlink points outside bundle, remove it
            if (!resolvedPath.startsWith(bundlePath)) {
              console.log(`Removing invalid ${pythonName} symlink: ${target}`);
              fs.unlinkSync(pythonSymlink);
            }
          }
        } catch (error) {
          console.warn(`Warning: Could not process ${pythonName} symlink: ${error.message}`);
        }
      }
    }
  }

  // Clean Python symlinks in terminal_venv/bin (same as venv/bin)
  const terminalVenvBinDir = path.join(prebuiltPath, 'terminal_venv', 'bin');
  if (fs.existsSync(terminalVenvBinDir)) {
    const pythonNames = ['python', 'python3', 'python3.10', 'python3.11', 'python3.12'];
    const bundlePath = path.resolve(appPath);

    for (const pythonName of pythonNames) {
      const pythonSymlink = path.join(terminalVenvBinDir, pythonName);

      if (fs.existsSync(pythonSymlink)) {
        try {
          const stats = fs.lstatSync(pythonSymlink);
          if (stats.isSymbolicLink()) {
            const target = fs.readlinkSync(pythonSymlink);
            const resolvedPath = path.resolve(path.dirname(pythonSymlink), target);

            // If symlink points outside bundle, remove it
            if (!resolvedPath.startsWith(bundlePath)) {
              console.log(`Removing invalid terminal_venv ${pythonName} symlink: ${target}`);
              fs.unlinkSync(pythonSymlink);
            }
          }
        } catch (error) {
          console.warn(`Warning: Could not process terminal_venv ${pythonName} symlink: ${error.message}`);
        }
      }
    }
  }

  // Recursively clean other invalid symlinks
  function cleanSymlinks(dir, bundleRoot) {
    if (!fs.existsSync(dir)) {
      return;
    }

    try {
      const entries = fs.readdirSync(dir, { withFileTypes: true });

      for (const entry of entries) {
        const fullPath = path.join(dir, entry.name);

        try {
          if (entry.isSymbolicLink()) {
            const target = fs.readlinkSync(fullPath);
            const resolvedPath = path.resolve(path.dirname(fullPath), target);
            const bundlePath = path.resolve(bundleRoot);

            if (!fs.existsSync(resolvedPath) || !resolvedPath.startsWith(bundlePath)) {
              console.log(`Removing invalid symlink: ${fullPath} -> ${target}`);
              fs.unlinkSync(fullPath);
            }
          } else if (entry.isDirectory()) {
            if (entry.name === 'node_modules' || entry.name === '__pycache__') {
              continue;
            }
            cleanSymlinks(fullPath, bundleRoot);
          }
        } catch (error) {
          // Ignore errors
        }
      }
    } catch (error) {
      // Ignore errors
    }
  }

  cleanSymlinks(prebuiltPath, appPath);

  // Also clean symlinks in backend directory (e.g., backend/workspace/.initial_env)
  const backendPath = path.join(resourcesPath, 'backend');
  if (fs.existsSync(backendPath)) {
    cleanSymlinks(backendPath, appPath);
  }

  console.log('✅ Symlink cleanup completed');
};