macOS port, phase 1: core, forge and harness pass on macOS

[francislavoie]

macOS port, phase 1: the core, forge and harness build and pass their tests on macOS (Apple Silicon, macos-15), and cargo check --workspace --all-targets compiles there, gitbolt-app included. Linux and Windows behave as before.

Proof

• Proof run (on this PR, macos label, no continue-on-error): 37726507007. 2114 tests passed, 0 failed (5 #[ignore] not run); the workspace check passed, gitbolt-app included.
• Earlier iteration run: 37725448592. 2114 tests, 0 failed; the workspace check passed. Earlier runs set continue-on-error on the test and check steps so a failing push didn't send an email. The proof run above doesn't.

The workflow (.github/workflows/mac-port.yml)

• Triggers: on demand only. Either workflow_dispatch, or pull_request types: [labeled] gated on the label macos (each time it's added). It doesn't run on pushes, on main, or on ordinary PR events.
• Jobs on macos-15: cargo nextest run --profile ci -p gitbolt-core -p gitbolt-forge -p gitbolt-harness (JUnit report uploaded), and cargo check --workspace --all-targets (log uploaded). Each writes a failure summary to the run's step summary.
• Actions are SHA-pinned as in release.yml, with Swatinem/rust-cache.

Core changes

• Open in… (openers/mac_detect.rs):
  • editors are found on PATH, else inside their app bundles: VS Code, Cursor, VSCodium, Sublime Text, Zed;
  • JetBrains IDEs come from the Toolbox scripts, then PATH, then any .app that holds their launcher;
  • BBEdit, Nova, TextMate and TextEdit open through open -a;
  • Finder uses open, and open -R to reveal a file.
• Links: they open with /usr/bin/open, through the child-env hook.
• Login shell: the env capture applies on macOS (Dock apps get launchd's bare PATH). The shell is $SHELL, else the account's own.
• Diagnostics: the report names the macOS version, read from SystemVersion.plist.
• Watcher: watch changes are batched through paths_mut. Without that, FSEvents recreated its stream, with every path, on each watch/unwatch call. On inotify the batch is the same calls made one by one.
• Capped git reads: the select checks Capped before Done. On macOS git often died of SIGPIPE before the select ran, so a capped read showed up as "git exited with status -1". This affected the hex view and the MR description prefill.
• Stale index.lock: on macOS, the holder is found with lsof (no /proc there).

Tests

• Made portable:
  • sed -i.orig, touch -t, true from PATH;
  • the parent's command line comes from /proc or ps;
  • the cache path is compared canonically (/var is /private/var);
  • the editor-template read sample uses git (code may not be installed).
• Not run on macOS, each with a reason:
  • 2 tests that read the session id from /proc: git::a_detached_command_has_its_own_session… and shellenv::the_capture_shell_leads_its_own_session;
  • 1 zbus test;
  • 2 tests with non-UTF-8 file names (APFS refuses them);
  • instance::a_request_sent_before_the_first_instance_serves…. On macOS the peer credentials go away with the peer, so the user check refuses a request whose sender gave up before the first instance served. The delivery half of the simultaneous-launch test is skipped for the same reason.
• New tests:
  • macOS opener detection (it runs on Linux too);
  • a real /bin/sh env capture;
  • a check that the runtime dir leaves room for the socket path (104 bytes on macOS);
  • the macOS version, on macOS.

Phase 2 (not in this PR)

• The app: the CEF .app bundle and its helper apps, the sandbox, and packaging as a .dmg with ad-hoc signing.
• Cmd shortcuts, the menu bar, and opening files through Apple Events.
• The folder picker and the Open With chooser (both None on macOS for now).
• e2e on macOS.

🤖 Generated with Claude Code

https://claude.ai/code/session_01Gd8cWxFv1V5tj9RPxWsZNr