Separate the bundle mode from the download shape, and stop overclaiming the Linux mode #7

Merged

Cody Bryant merged 1 commit from docs/separate-bundle-mode-from-download-shape into main

2026-08-25 08:41:51 -07:00

Cody Bryant commented

2026-08-24 22:38:27 -07:00

Owner

This entry merged two decisions, and the merge produced confident wrong answers — twice in one session, from me.

Decision 1, the bundle mode: invisible in packaged channels, visible at runtime. macOS onefile is platform-driven (one Mach-O to codesign per frozen app, not an executable plus every .so; notarization acts on the .pkg either way, so it is not the reason). Linux onedir is not platform-driven and the entry now says so.

Decision 2, the standalone download shape: whiskerless ships a bare binary, dreame a tarball, because dreame's download must carry dreame-fastboot and sunxi-fel.

Two rationales were retired for not surviving scrutiny: that helpers require onedir (macOS ships the same helpers beside a onefile app) and that dreame pays the unpack repeatedly (it pays it twice at start, then once per human rejoin — bounded, not recurring). What remains is one real property — onefile cannot run where TMPDIR is noexec — and the honest reason to leave it alone: not churning a shipped artifact.

This entry merged two decisions, and the merge produced confident wrong answers — twice in one session, from me. **Decision 1, the bundle mode:** invisible in packaged channels, visible at runtime. macOS onefile is platform-driven (one Mach-O to codesign per frozen app, not an executable plus every `.so`; notarization acts on the `.pkg` either way, so it is not the reason). Linux onedir is **not** platform-driven and the entry now says so. **Decision 2, the standalone download shape:** whiskerless ships a bare binary, dreame a tarball, because dreame's download must carry `dreame-fastboot` and `sunxi-fel`. Two rationales were retired for not surviving scrutiny: that helpers require onedir (macOS ships the same helpers beside a onefile app) and that dreame pays the unpack repeatedly (it pays it twice at start, then once per human rejoin — bounded, not recurring). What remains is one real property — onefile cannot run where `TMPDIR` is `noexec` — and the honest reason to leave it alone: not churning a shipped artifact.

Cody Bryant added 1 commit

2026-08-24 22:38:27 -07:00