Implement MōStats

.clang-tidy

@@ -0,0 +1,13 @@
+---
+# clang-tidy configuration for the MoStats native module.
+# Keep this focused on correctness checks for the macOS system probes.
+
+Checks: >
+  bugprone-*,
+  clang-analyzer-*,
+  -bugprone-easily-swappable-parameters,
+  -clang-analyzer-nullability.*,
+  -clang-analyzer-optin.osx.cocoa.localizability.NonLocalizedStringChecker
+
+WarningsAsErrors: "*"
+HeaderFilterRegex: "^src/native/(?!gen/).*"

.github/workflows/check.yml

@@ -0,0 +1,75 @@
+name: Check
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+jobs:
+  check:
+    name: Check
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Setup Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: 24
+          cache: npm
+
+      - name: Install
+        run: npm ci
+
+      - name: Generate
+        run: npm run gen
+
+      - name: Lint
+        run: npm run lint
+
+      - name: Typecheck
+        run: npm run typecheck
+
+  native:
+    name: Native
+    runs-on: macos-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Setup Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: 24
+          cache: npm
+
+      - name: Install
+        run: npm ci
+
+      - name: Generate
+        run: npm run gen
+
+      - name: Configure
+        shell: bash
+        run: |
+          set -euo pipefail
+          sdk_path="$(xcrun --sdk macosx --show-sdk-path)"
+          cmake -DCMAKE_EXPORT_COMPILE_COMMANDS=ON -DCMAKE_OSX_SYSROOT="${sdk_path}" -B build -S .
+
+      - name: Setup LLVM
+        uses: KyleMayes/install-llvm-action@v2
+        with:
+          version: "20"
+
+      - name: Lint native
+        shell: bash
+        run: |
+          set -euo pipefail
+          clang_tidy_version="$(clang-tidy --version)"
+          if [[ "$clang_tidy_version" == *"version 20."* ]]; then
+            run-clang-tidy -checks=-cppcoreguidelines-avoid-const-or-ref-data-members -source-filter='^.*/src/native/(?!gen/).*' -p build
+          else
+            run-clang-tidy -source-filter='^.*/src/native/(?!gen/).*' -p build
+          fi

.github/workflows/release.yml

@@ -0,0 +1,101 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  build:
+    name: Build
+    runs-on: macos-latest
+
+    env:
+      # Base64-encoded Developer ID Application certificate (.p12).
+      MACOS_CERTIFICATE: ${{ secrets.MACOS_CERTIFICATE }}
+      # Password used to export the .p12 certificate from Keychain Access.
+      MACOS_CERTIFICATE_PWD: ${{ secrets.MACOS_CERTIFICATE_PWD }}
+      # Password for the temporary CI keychain created during the build.
+      MACOS_KEYCHAIN_PWD: ${{ secrets.MACOS_KEYCHAIN_PWD }}
+      # Signing identity string, e.g. "Developer ID Application: Your Name (TEAMID)".
+      MACOS_CODESIGN_IDENTITY: ${{ secrets.MACOS_CODESIGN_IDENTITY }}
+      # Apple Developer Team ID (10-character string from developer.apple.com).
+      MACOS_TEAM_ID: ${{ secrets.MACOS_TEAM_ID }}
+      # Apple ID email used for notarization.
+      MACOS_APPLE_ID: ${{ secrets.MACOS_APPLE_ID }}
+      # App-specific password generated at appleid.apple.com for notarization.
+      MACOS_APPLE_PASSWORD: ${{ secrets.MACOS_APPLE_PASSWORD }}
+
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 24
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Set up macOS code signing
+        run: |
+          KEYCHAIN_PATH=$RUNNER_TEMP/build.keychain
+          security create-keychain -p "$MACOS_KEYCHAIN_PWD" "$KEYCHAIN_PATH"
+          security set-keychain-settings -lut 21600 "$KEYCHAIN_PATH"
+          security unlock-keychain -p "$MACOS_KEYCHAIN_PWD" "$KEYCHAIN_PATH"
+
+          # Import the Apple public certificates the signing chain needs.
+          curl https://www.apple.com/certificateauthority/AppleRootCA-G3.cer -o AppleRootCA-G3.cer
+          curl https://www.apple.com/certificateauthority/AppleWWDRCAG6.cer -o AppleWWDRCAG6.cer
+          curl https://www.apple.com/certificateauthority/DeveloperIDG2CA.cer -o DeveloperIDG2CA.cer
+
+          security import ./AppleRootCA-G3.cer -k $KEYCHAIN_PATH
+          security import ./AppleWWDRCAG6.cer -k $KEYCHAIN_PATH
+          security import ./DeveloperIDG2CA.cer -k $KEYCHAIN_PATH
+
+          # Import the private signing certificate.
+          echo "$MACOS_CERTIFICATE" | base64 --decode > $RUNNER_TEMP/certificate.p12
+          security import "$RUNNER_TEMP/certificate.p12" -k "$KEYCHAIN_PATH" -P "$MACOS_CERTIFICATE_PWD" -T /usr/bin/codesign
+          security set-key-partition-list -S apple-tool:,apple: -s -k "$MACOS_KEYCHAIN_PWD" "$KEYCHAIN_PATH"
+          # Putting the temp keychain on the user search list is what lets
+          # codesign find the imported identity during the build step.
+          security list-keychain -d user -s "$KEYCHAIN_PATH"
+
+      - name: Build release package
+        run: npm run build
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: MoStats-macos-arm64
+          path: build/dist/mac-arm64/pack/*.dmg
+
+  release:
+    name: Create GitHub Release Draft
+    runs-on: ubuntu-latest
+    needs: [build]
+    if: startsWith(github.ref, 'refs/tags/')
+
+    steps:
+      - name: Download all artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: dist/
+
+      - name: Collect DMGs
+        run: |
+          mkdir -p dist/macos-arm64
+          mv dist/MoStats-macos-arm64/*.dmg dist/macos-arm64/
+
+      - name: Create Release draft
+        uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
+        with:
+          files: |
+            dist/macos-arm64/*.dmg
+          tag_name: ${{ github.ref_name }}
+          name: ${{ github.ref_name }}
+          draft: true

.github/workflows/test.yml

@@ -0,0 +1,29 @@
+name: Test
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+jobs:
+  test:
+    name: Unit Tests
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Setup Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: 24
+          cache: npm
+
+      - name: Install
+        run: npm ci
+
+      - name: Generate
+        run: npm run gen
+
+      - name: Test
+        run: npm run test

.gitignore

@@ -0,0 +1,16 @@
+# Node dependencies.
+node_modules/
+
+# Build output.
+build/
+dist/
+out/
+
+# Generated code.
+gen/
+
+# macOS metadata.
+.DS_Store
+
+.idea
+.claude

.vscode/launch.json

@@ -0,0 +1,56 @@
+{
+  "version": "0.2.0",
+  "configurations": [
+    {
+      "name": "Debug Main",
+      "type": "node",
+      "request": "launch",
+      "cwd": "${workspaceFolder}",
+      "runtimeExecutable": "${workspaceFolder}/node_modules/.bin/mobrowser",
+      "runtimeArgs": [
+        "dev",
+        "--inspect=5858",
+        "--remote-debugging-port=9222"
+      ],
+      "sourceMaps": true,
+      "outFiles": [
+        "${workspaceFolder}/out/main/**/*.js"
+      ],
+      "preLaunchTask": "vite: build main",
+      "env": {
+        "NODE_ENV": "development"
+      },
+      "console": "integratedTerminal",
+      "skipFiles": [
+        "<node_internals>/**"
+      ]
+    },
+    {
+      "name": "Debug Renderer",
+      "type": "chrome",
+      "request": "attach",
+      "port": 9222,
+      "webRoot": "${workspaceFolder}/src/renderer",
+      "timeout": 60000,
+      "sourceMaps": true,
+      "sourceMapPathOverrides": {
+        "/@fs/*": "/*"
+      },
+      "presentation": {
+        "hidden": true
+      }
+    }
+  ],
+  "compounds": [
+    {
+      "name": "Debug All",
+      "configurations": [
+        "Debug Main",
+        "Debug Renderer"
+      ],
+      "presentation": {
+        "order": 1
+      }
+    }
+  ]
+}

.vscode/tasks.json

@@ -0,0 +1,11 @@
+{
+  "version": "2.0.0",
+  "tasks": [
+    {
+      "type": "shell",
+      "command": "npx vite build --mode main",
+      "problemMatcher": [],
+      "label": "vite: build main"
+    }
+  ]
+}

AGENTS.md

@@ -0,0 +1,19 @@
+<!-- BEGIN:mobrowser-agent-rules -->
+
+# Do not rely on training data for MōBrowser
+
+Your training data for MōBrowser is outdated. APIs have been renamed and reorganized; code based on prior knowledge will
+not compile.
+
+**Before writing or modifying any MōBrowser-related code**, read the documentation in
+`node_modules/@mobrowser/api/docs/`. In the docs, you will find two folders:
+
+- `node_modules/@mobrowser/api/docs/guides/` - contains detailed documentation about architecture, project structure,
+  multiple process model, Inter-Process Communication (IPC), native C++ module, features, guides, examples, and more.
+- `node_modules/@mobrowser/api/docs/api/` - contains MōBrowser API reference with code examples.
+
+Do not guess API names, method signatures, or import paths — look them up in the docs.
+
+If the `docs/` directory is missing, ask the user to run `npm run gen`. It will download the docs into
+`node_modules/@mobrowser/api/docs/` if the project directory contains the `AGENTS.md` file.
+<!-- END:mobrowser-agent-rules -->

CLAUDE.md

@@ -0,0 +1 @@
+@AGENTS.md