From 9d870bac3f2ba9a3bf1ccb4227615ca87b4773a1 Mon Sep 17 00:00:00 2001
From: Decio Ferreira <decio.jferreira@gmail.com>
Date: Sat, 15 Mar 2025 16:20:39 +0000
Subject: [PATCH] WIP Single executable applications #39

---
 sea-config.json    |  4 ++++
 single-exec-app.sh | 48 ++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 52 insertions(+)
 create mode 100644 sea-config.json
 create mode 100755 single-exec-app.sh

diff --git a/sea-config.json b/sea-config.json
new file mode 100644
index 000000000..5bb0562d0
--- /dev/null
+++ b/sea-config.json
@@ -0,0 +1,4 @@
+{
+    "main": "build.cjs",
+    "output": "sea-prep.blob"
+}
\ No newline at end of file
diff --git a/single-exec-app.sh b/single-exec-app.sh
new file mode 100755
index 000000000..80f6122f6
--- /dev/null
+++ b/single-exec-app.sh
@@ -0,0 +1,48 @@
+npx esbuild bin/index.js  --bundle --outfile=build.cjs --format=cjs --platform=node
+
+# Single executable applications (https://nodejs.org/api/single-executable-applications.html)
+# This feature allows the distribution of a Node.js application conveniently to a system that does not have Node.js installed.
+
+# 3. Generate the blob to be injected
+
+node --experimental-sea-config sea-config.json
+
+# 4. Create a copy of the node executable and name it according to your needs
+
+cp $(command -v node) guida
+
+# node -e "require('fs').copyFileSync(process.execPath, 'hello.exe')" # On windows
+
+# 5. Remove the signature of the binary (macOS and Windows only)
+
+codesign --remove-signature guida # On mac
+
+# signtool remove /s guida.exe # On Windows (optional)
+
+# 6. Inject the blob into the copied binary by running postject with the following options
+
+# Linux
+# npx postject guida NODE_SEA_BLOB sea-prep.blob \
+#     --sentinel-fuse NODE_SEA_FUSE_fce680ab2cc467b6e072b8b5df1996b2
+
+# On Windows - PowerShell
+# npx postject guida.exe NODE_SEA_BLOB sea-prep.blob `
+#     --sentinel-fuse NODE_SEA_FUSE_fce680ab2cc467b6e072b8b5df1996b2
+
+# On Windows - Command Prompt
+# npx postject guida.exe NODE_SEA_BLOB sea-prep.blob ^
+#     --sentinel-fuse NODE_SEA_FUSE_fce680ab2cc467b6e072b8b5df1996b2 
+
+# On macOS
+npx postject guida NODE_SEA_BLOB sea-prep.blob \
+    --sentinel-fuse NODE_SEA_FUSE_fce680ab2cc467b6e072b8b5df1996b2 \
+    --macho-segment-name NODE_SEA
+
+# 7. Sign the binary (macOS and Windows only)
+
+# On macOS
+codesign --sign - guida
+
+# On Windows (optional)
+# A certificate needs to be present for this to work. However, the unsigned binary would still be runnable.
+# signtool sign /fd SHA256 guida.exe