fix: provision bundled claude runtime in release builds

[Xoshbin]

No description provided.

[gemini-code-assist]

Code Review

This pull request adds support for bundling the claude binary as a sidecar alongside bun and uv, updating the download script, .gitignore, and documentation, while introducing provisioning and live manifest tests. Feedback from the review focuses on preserving the script's offline-friendly and idempotent nature by lazily resolving the Claude version and manifest only when a download is actually required. Additionally, suggestions were made to clean up temporary files created during the download process using unlinkSync.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[gemini-code-assist]

Currently, the Claude version and manifest are resolved eagerly at the top level. This causes the script to make network requests to downloads.claude.ai even if all sidecar binaries already exist locally, breaking the offline-friendly and idempotent nature of the script.

By lazily resolving the Claude version and manifest inside ensureClaude only when a download is actually required, we can avoid unnecessary network requests and allow offline builds when the binaries are already present. Additionally, we can wrap the download in a try...finally block to ensure the temporary binary file is cleaned up.

let claudeVersion = null
let claudeManifest = null

async function ensureClaude(platform) {
  const isWindowsTarget = platform.platformKey.startsWith('win32-')
  const exeExt = isWindowsTarget ? '.exe' : ''
  const destName = `claude-${platform.rustTriple}${exeExt}`
  const destPath = join(BINARIES_DIR, destName)

  if (existsSync(destPath)) {
    console.log(`  claude (${platform.platformKey}): already exists at binaries/${destName}, skipping`)
    return
  }

  if (!claudeVersion) {
    step('Resolving claude runtime version')
    claudeVersion = await resolveClaudeVersion()
    claudeManifest = await fetchClaudeManifest(claudeVersion)
    console.log(`  claude runtime: ${claudeVersion}`)
  }

  const claudeKey = platform.claudePlatform
  const expected = claudeManifest.platforms?.[claudeKey]?.checksum
  if (!expected) {
    throw new Error(`claude manifest ${claudeVersion} has no checksum for platform "${claudeKey}"`)
  }

  const binFile = `claude${exeExt}`
  const url = `${CLAUDE_BASE_URL}/${claudeVersion}/${claudeKey}/${binFile}`
  const tmpBin = join(tmpdir(), `${destName}-dl-${Date.now()}`)
  try {
    console.log(`  claude (${platform.platformKey}): downloading ${claudeVersion}/${claudeKey}...`)
    await download(url, tmpBin)

    const actual = sha256(tmpBin)
    if (actual !== expected) {
      throw new Error(`claude (${claudeKey}) checksum mismatch: expected ${expected}, got ${actual}`)
    }

    copyFileSync(tmpBin, destPath)
    if (!isWindowsTarget) chmodSync(destPath, 0o755)
    console.log(`  claude (${platform.platformKey}): installed to binaries/${destName} (verified)`)
  } finally {
    try {
      if (existsSync(tmpBin)) unlinkSync(tmpBin)
    } catch {}
  }
}

[gemini-code-assist]

Remove the eager top-level resolution of the Claude version and manifest, as it is now handled lazily inside ensureClaude.

[gemini-code-assist]

Update the call to ensureClaude to omit the version and manifest arguments, as they are now resolved lazily.

  await ensureClaude(platform)

[gemini-code-assist]

Import unlinkSync from node:fs to enable cleanup of temporary files created during the download process.

import { existsSync, chmodSync, mkdirSync, copyFileSync, readFileSync, unlinkSync } from 'node:fs'

[gemini-code-assist]

Clean up the temporary file created during the download of text files (like the version pointer or manifest) to avoid cluttering the system's temp directory.

async function downloadText(url, label) {
  const tmp = join(tmpdir(), `claude-${label}-${Date.now()}`)
  try {
    await download(url, tmp)
    return readFileSync(tmp, 'utf8')
  } finally {
    try {
      if (existsSync(tmp)) unlinkSync(tmp)
    } catch {}
  }
}