natives

Overview ¶

Package natives ships the native libraries of the desktop UI inside the pando binary, so every distribution (CLI zip, Pando.app, .pkg) is one self-contained executable.

Today that is libghostty-vt, which MyGo's terminal plugin (plugins/terminal) loads with purego. `make natives-<goos>-<goarch>` (scripts/fetch-ghostty-vt) writes the build pinned by MyGo's mygo-plugin.json into <goos>-<goarch>/ before `go build`; on darwin it is signed there with the same Developer ID as the pando binary (hardened runtime, timestamp), so library validation accepts it without the disable-library-validation entitlement. The committed .keep placeholder keeps the embed pattern valid when the library was not fetched; such a binary falls back to MyGo's own lookup (Resources, executable dir, download into the user cache).

At start-up Install writes the embedded library, byte for byte, to <user cache>/pando/natives/<sha256 prefix>/<name> and points $MYGO_GHOSTTY_VT at it. MyGo reads that variable lazily, the first time the terminal loads, so Install must run before the terminal area is built.