Experimental AOT Actions artifacts

The Experimental macOS 27 AOT artifact workflow is disabled by default. It creates an unsigned macOS 27-only, arm64 emitted-JS AOT directory in Actions, retained for seven days. It does not change the Mac app, JIT release pipeline, signing, notarization, GitHub Releases, or appcasts. A failed build produces no accepted AOT artifact; ordinary JIT releases continue independently. The workflow never silently builds JIT in place of AOT.

The workflow builds the exact trusted main commit at dispatch (github.sha); there is no caller-selected source ref or second checkout. The main-only job condition and pinned checkout keep the helper and application on that same commit. Build preparation fixes GIT_COMMIT to that full SHA and OPENCLAW_BUILD_TIMESTAMP to that commit’s UTC committer time (.000Z), removing wall-clock drift in build metadata. This does not establish bit-reproducible compiler or executable output. Both macOS deployment-target variables are 27.0. The pinned compiler and its generated executables have an actual Mach-O minimum OS of 27.0 (compiler SDK 27.2). The workflow checks LC_BUILD_VERSION with vtool before using the compiler and before uploading its output; the descriptor records the actual minimum OS and SDK. Setting an environment variable does not lower a linked binary’s minimum OS. This experiment does not support the Mac app’s macOS 15.0 floor. A separately built and qualified compiler profile is required for that release target.

The workflow uses the existing standalone builder, including its complete default plugin selection. C2, original-TypeScript, Intel, Linux, and universal application packaging are outside this first workflow. Successful version/help smoke is a packaging check, not full runtime qualification.

Before enabling a run, supply a compiler bundle already retained by a successful main push/manual Actions run in this repository. No toolchain producer workflow or compiler release is created here. Snapshot tags do not create binary download URLs. The compiler is the standard qualified Bun fd40ba44187c721ee023062fa153a6a27560e6b1 with WebKit aaa690bfbf34c9d50775716ac2fc3c7d0573e0b8; its executable SHA256 must be d9e1bbfd8e298c8d51bd1c5fe7a106827119355bff2b88528aa69cf823202c95.

The selected Actions artifact contains one file, toolchain.tar.gz. Its gzip tar contains only regular files/directories under toolchain/; links and special files are rejected. Include toolchain/bin/bun and the compiler's required adjacent resources with their original relative layout, plus this exact toolchain/manifest.json:

{  "schemaVersion": 1,  "bunCommit": "fd40ba44187c721ee023062fa153a6a27560e6b1",  "webkitCommit": "aaa690bfbf34c9d50775716ac2fc3c7d0573e0b8",  "profile": "standard",  "platform": "darwin",  "arch": "arm64",  "executable": "bin/bun",  "executableSha256": "d9e1bbfd8e298c8d51bd1c5fe7a106827119355bff2b88528aa69cf823202c95"}

Record the actual bundle SHA256 and Actions run/artifact IDs. Dispatch aot-artifacts.yml from main with enable_aot=true, those three identities, and min_memory_gib selected from measured JS build peak plus headroom. The experiment uses the existing xcode-27-xlarge tier; the repository documents the standard xcode-27 runner as 3 CPUs with 7 GB RAM. The larger label alone does not establish sufficient RAM for AOT. There is no measured threshold default: inspect the retained host report and select sufficient physical RAM before dispatch. The job requires a macOS 27 or newer runner and rejects native architecture mismatch, insufficient physical RAM, or less than 25 GiB free on either internal or output storage. Memory pressure is recorded as an observation, not interpreted as exact free memory.

Evidence includes exact source/compiler identities, runtime/UI/AOT phase wall and CPU time, one-second sampled process-tree peak RSS, and Darwin time -l output. The sampled tree peak is a lower bound; short-lived peaks may be missed. The artifact is a tar archive that preserves permissions and sidecar symlinks; it includes openclaw, runtime/, manifest.json, and an explicit unsigned experiment descriptor. Keep the full directory together. Do not install it over a production app or use it as notarized distribution evidence.

Interrupted measurement receives SIGTERM, records failure evidence, and stops its dedicated process group. SIGKILL or loss of the runner cannot preserve a final receipt; the Actions run remains the authority for an interrupted job.

The macos27-only artifact name is intentional. Version/help smoke on the build host does not qualify other macOS versions or every native sidecar operation.