cypherstack · danrmiller · Mar 16, 2026 · Mar 16, 2026 · Mar 16, 2026 · Mar 16, 2026
diff --git a/.envrc b/.envrc
@@ -0,0 +1 @@
+use flake
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
@@ -81,3 +81,26 @@ jobs:
         with:
           token: ${{secrets.CODECOV_TOKEN}}
           file: coverage/lcov.info
+
+  macos-fresh-build:
+    runs-on: macos-14
+    steps:
+      - name: Prepare repository
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
+
+      - name: Install Flutter
+        uses: subosito/flutter-action@v2
+        with:
+          flutter-version: '3.38.1'
+          channel: 'stable'
+
+      - name: Setup Rust
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Install macOS build dependencies
+        run: ./scripts/install_macos_build_tools.sh
+
+      - name: Fresh clone smoke build (macOS)
+        run: make build-macos VERSION=0.0.1 BUILD_NUM=1
diff --git a/.gitignore b/.gitignore
@@ -34,9 +34,21 @@ Microsoft.Windows*
 /build/
 android/app/.cxx
 
+# Nix / direnv / project-local toolchain state
+.direnv/
+.build-home/
+.cargo-home/
+.rustup-home/
+.nix-bin/
+.tmp/
+.cache/
+
 # Web related
 lib/generated_plugin_registrant.dart
 
+# Flutter create boilerplate that gets regenerated on `flutter create --platforms=macos .`
+test/widget_test.dart
+
 # testing data
 test/services/coins/bitcoin/bitcoin_wallet_test_parameters.dart
 test/services/coins/firo/firo_wallet_test_parameters.dart
@@ -91,6 +103,7 @@ pubspec.yaml
 /linux/my_application.cc
 
 /macos/Runner/Configs/AppInfo.xcconfig
+/macos/Runner/Configs/CodexOverrides.xcconfig
 /macos/Runner.xcodeproj/xcshareddata/xcschemes/Runner.xcscheme
 /macos/Runner.xcodeproj/project.pbxproj
 /macos/Runner/Assets.xcassets/AppIcon.appiconset/*.png

diff --git a/.metadata b/.metadata
@@ -1,23 +1,23 @@
 # This file tracks properties of this Flutter project.
 # Used by Flutter tool to assess capabilities and perform upgrades etc.
 #
-# This file should be version controlled.
+# This file should be version controlled and should not be manually edited.
 
 version:
-  revision: f92f44110e87bad5ff168335c36da6f6053036e6
-  channel: stable
+  revision: "ff37bef603469fb030f2b72995ab929ccfc227f0"
+  channel: "stable"
 
 project_type: app
 
 # Tracks metadata for the flutter migrate command
 migration:
   platforms:
     - platform: root
-      create_revision: f92f44110e87bad5ff168335c36da6f6053036e6
-      base_revision: f92f44110e87bad5ff168335c36da6f6053036e6
+      create_revision: ff37bef603469fb030f2b72995ab929ccfc227f0
+      base_revision: ff37bef603469fb030f2b72995ab929ccfc227f0
     - platform: macos
-      create_revision: f92f44110e87bad5ff168335c36da6f6053036e6
-      base_revision: f92f44110e87bad5ff168335c36da6f6053036e6
+      create_revision: ff37bef603469fb030f2b72995ab929ccfc227f0
+      base_revision: ff37bef603469fb030f2b72995ab929ccfc227f0
 
   # User provided section
 

diff --git a/Makefile b/Makefile
diff --git a/README.md b/README.md
@@ -48,3 +48,24 @@ Highlights include:
 ## Building
 
 You can look at the [build instructions](docs/building.md) for more details.
+
+### macOS with Nix or direnv (preferred)
+
+Use one shared toolchain path for both `nix develop` and `direnv`.
+
+1. Enable direnv for this repo (optional convenience):
+   - `.envrc` uses `use flake`
+   - run `direnv allow`
+2. Enter the flake environment (if not using direnv):
+   - `nix develop`
+3. Run build:
+   - `make build-macos`
+
+### macOS without Nix (Homebrew host setup)
+
+Use this only when you are not building through Nix/flake.
+
+1. Install host tools:
+   - `make bootstrap-macos`
+2. Run build:
+   - `make build-macos`
diff --git a/docs/building.md b/docs/building.md
@@ -2,6 +2,23 @@
 
 Here you will find instructions on how to install the necessary tools for building and running the app.
 
+## Nix / direnv (recommended for macOS and Linux)
+
+A `flake.nix` and `.envrc` provide a reproducible development environment on macOS (Determinate Nix on macOS Tahoe ARM tested), NixOS, and other Linux distributions.
+
+```
+# enter the dev shell
+nix develop          # or: direnv allow
+
+# build
+make build-macos     # on macOS
+make build-linux     # on Linux
+```
+
+The Makefile is the single entry point for all builds. Two Rust toolchains are provisioned by the flake: `stable` (default, used for frostdart / coinlib / secp256k1 / etc.) and `1.85.1` (pinned for `flutter_libepiccash` and `flutter_libmwc`). The bootstrap scripts `scripts/install_macos_build_tools.sh` and `scripts/install_nixos_build_tools.sh` install equivalent host toolchains for non-Nix setups.
+
+The legacy per-platform instructions below remain valid for developers who do not want to use Nix.
+
 ## Prerequisites
 
 - The only OS supported for building Android and Linux desktop is Ubuntu 24.04.  Windows builds require using Ubuntu 24.04 on WSL2.  macOS builds for itself and iOS.  Advanced users may also be able to build on other Debian-based distributions like Linux Mint.
@@ -51,8 +68,8 @@ Install [Rust](https://www.rust-lang.org/tools/install) via [rustup.rs](https://
 ```
 curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
 source ~/.bashrc
-rustup install 1.89.0 1.85.1 1.81.0
-rustup default 1.89.0
+rustup toolchain install stable 1.85.1
+rustup default stable
 cargo install cargo-ndk
 ```
 
@@ -198,12 +215,12 @@ brew install brotli cairo coreutils gdbm gettext glib gmp libevent libidn2 libng
 ```
 <!-- TODO: determine which of the above list are not needed at all. -->
 
-Download and install [Rust](https://www.rust-lang.org/tools/install).  [Rustup](https://rustup.rs/) is recommended for Rust setup.  Use `rustc` to confirm successful installation.  Install toolchains 1.81.0, 1.85.1, and 1.89.0 as well as `cbindgen` and `cargo-lipo` too.  You will also have to add the platform target(s) `aarch64-apple-ios` and/or `aarch64-apple-darwin`.  You can use the command(s):
+Download and install [Rust](https://www.rust-lang.org/tools/install).  [Rustup](https://rustup.rs/) is recommended for Rust setup.  Use `rustc` to confirm successful installation.  Install the `stable` toolchain and the `1.85.1` toolchain (pinned for libepiccash/libmwc), as well as `cbindgen` and `cargo-lipo`.  You will also have to add the platform target(s) `aarch64-apple-ios` and/or `aarch64-apple-darwin`.  You can use the command(s):
 ```
 curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
 source ~/.bashrc 
-rustup install 1.89.0 1.85.1 1.81.0
-rustup default 1.89.0
+rustup toolchain install stable 1.85.1
+rustup default stable
 cargo install cargo-ndk
 cargo install cbindgen cargo-lipo
 rustup target add aarch64-apple-ios aarch64-apple-darwin
@@ -283,10 +300,11 @@ Install Flutter 3.38.5 on your Windows host (not in WSL2) by [following their gu
 ### Rust
 Install [Rust](https://www.rust-lang.org/tools/install) on the Windows host (not in WSL2).  Download the installer from [rustup.rs](https://rustup.rs), make sure it works on the commandline (you may need to open a new terminal), and install the following versions:
 ```
-rustup install 1.89.0 1.85.1 1.81.0
-rustup default 1.89.0
+rustup toolchain install stable 1.85.1
+rustup default stable
 cargo install cargo-ndk
 ```
+Note: the frostdart Windows build scripts additionally require Rust `1.71.0-x86_64-pc-windows-msvc` (and the `gnu` variant for cross-compiles). Install with `rustup toolchain install 1.71.0-x86_64-pc-windows-msvc` if you build on or for Windows.
 
 ### Windows SDK and Developer Mode
 Install the Windows SDK: https://developer.microsoft.com/en-us/windows/downloads/windows-sdk/  You may need to install the [Windows 10 SDK](https://developer.microsoft.com/en-us/windows/downloads/sdk-archive/), which can be installed [by Visual Studio](https://stackoverflow.com/a/73923899) (`Tools > Get Tools and Features... > Modify > Individual Components > Windows 10 SDK`).

diff --git a/flake.lock b/flake.lock
diff --git a/flake.nix b/flake.nix
@@ -0,0 +1,157 @@
+{
+  description = "Stack Wallet Build Environment";
+
+  inputs = {
+    # Pinned to a specific nixpkgs rev for reproducible Flutter/Rust toolchain
+    # versions. Update via `nix flake lock --update-input nixpkgs` and re-test
+    # `make build-macos` and `make build-linux` before bumping.
+    nixpkgs.url = "github:NixOS/nixpkgs/5b2c2d84341b2afb5647081c1386a80d7a8d8605";
+    flake-utils.url = "github:numtide/flake-utils";
+  };
+
+  outputs = { self, nixpkgs, flake-utils }:
+    flake-utils.lib.eachDefaultSystem (system:
+      let
+        pkgs = import nixpkgs { inherit system; };
+        lib = pkgs.lib;
+
+        commonPackages = with pkgs; [
+          flutter
+          dart
+          go
+          rustup
+          cmake
+          meson
+          ninja
+          pkg-config
+          gnumake
+          gnused
+          rsync
+          (python3.withPackages (ps: with ps; [
+            pip toml tomli jinja2 markdown markupsafe pygments typogrify
+          ]))
+        ];
+
+        linuxPackages = lib.optionals pkgs.stdenv.isLinux (with pkgs; [
+          gtk3 glib openssl xz clang libgcrypt gobject-introspection
+          llvmPackages.libclang
+          llvmPackages.clang
+          protobuf
+          opencv
+          sysprof
+          libsysprof-capture
+        ]);
+
+        macPackages = lib.optionals pkgs.stdenv.isDarwin (with pkgs; [
+          cocoapods 
+          libiconv
+          autoconf
+          automake
+          libtool
+        ]);
+
+      in
+      {
+        devShells.default = pkgs.mkShell {
+          buildInputs = commonPackages ++ linuxPackages ++ macPackages;
+
+          shellHook = ''
+            echo "==================================================="
+            echo "Stack Wallet Dev-Environment activated!"
+            echo "Target System: ${system}"
+            echo "==================================================="
+
+            export APP_PROJECT_ROOT_DIR=$(pwd)
+            export PATH="$HOME/.cargo/bin:$PATH"
+
+            # ==========================================
+            # RUST TOOLCHAIN AUTOMATION
+            # ==========================================
+            if ! rustup toolchain list | grep -q "stable" || ! rustup toolchain list | grep -q "1.85.1"; then
+              echo "Initializing Rust toolchains (this happens only once)..."
+              rustup toolchain install --no-self-update stable 1.85.1
+            fi
+
+            rustup default stable
+
+            if [[ "${system}" == *"darwin"* ]]; then
+              rustup target add aarch64-apple-darwin aarch64-apple-ios --toolchain stable
+              rustup target add aarch64-apple-darwin --toolchain 1.85.1
+            fi
+
+            if ! command -v cbindgen >/dev/null 2>&1 || ! command -v cargo-lipo >/dev/null 2>&1; then
+              echo "Installing required Cargo tools..."
+              cargo install cargo-ndk cbindgen cargo-lipo
+            fi
+
+            # ==========================================
+            # LINUX (NixOS) SPECIFICS
+            # ==========================================
+            ${lib.optionalString pkgs.stdenv.isLinux ''
+            # echo "🐧 Linux detected: Patching shebangs for NixOS..."
+            # patchShebangs scripts/ crypto_plugins/ > /dev/null 2>&1 || true
+              export LIBCLANG_PATH="${pkgs.llvmPackages.libclang.lib}/lib"
+              export BINDGEN_EXTRA_CLANG_ARGS="-isystem ${pkgs.llvmPackages.libclang.lib}/lib/clang/${pkgs.llvmPackages.clang.version}/include"
+              export PROTOC="${pkgs.protobuf}/bin/protoc"
+            ''}
+
+            # ==========================================
+            # MACOS XCODE SANDBOX ESCAPE
+            # ==========================================
+            ${lib.optionalString pkgs.stdenv.isDarwin ''
+              export DEVELOPER_DIR="/Applications/Xcode.app/Contents/Developer"
+              export SDKROOT=$(xcrun --sdk macosx --show-sdk-path)
+              export MACOSX_DEPLOYMENT_TARGET="11.0"
+
+              # --- NIX C++ COMPILER OVERRIDE ---
+              export CC=/usr/bin/clang
+              export CXX=/usr/bin/clang++
+              export AR=/usr/bin/ar
+              export AS=/usr/bin/as
+              export NM=/usr/bin/nm
+              export RANLIB=/usr/bin/ranlib
+              export STRIP=/usr/bin/strip
+
+              export BINDGEN_EXTRA_CLANG_ARGS="-isysroot $SDKROOT" 
+
+              mkdir -p .nix-bin
+              ln -sf /usr/bin/clang .nix-bin/cc
+              ln -sf /usr/bin/clang++ .nix-bin/c++
+              ln -sf /usr/bin/xcodebuild .nix-bin/xcodebuild
+              ln -sf /usr/bin/clang .nix-bin/clang
+              ln -sf /usr/bin/clang++ .nix-bin/clang++
+
+              # SMART LIPO & XCRUN WRAPPER
+              rm -f .nix-bin/lipo .nix-bin/xcrun
+
+              echo '#!/bin/bash' > .nix-bin/lipo
+              echo 'for arg in "$@"; do' >> .nix-bin/lipo
+              echo '    if [[ "$arg" == *"FlutterMacOS.framework"* ]]; then' >> .nix-bin/lipo
+              echo '        chmod -R u+w "$(dirname "$arg")" 2>/dev/null || true' >> .nix-bin/lipo
+              echo '    fi' >> .nix-bin/lipo
+              echo 'done' >> .nix-bin/lipo
+              echo 'exec /usr/bin/lipo "$@"' >> .nix-bin/lipo
+              chmod +x .nix-bin/lipo 
+
+              echo '#!/bin/bash' > .nix-bin/xcrun
+              echo 'if [ "$1" = "-f" ] && [ "$2" = "lipo" ]; then' >> .nix-bin/xcrun
+              echo '    echo "'$PWD'/.nix-bin/lipo"' >> .nix-bin/xcrun
+              echo '    exit 0' >> .nix-bin/xcrun
+              echo 'fi' >> .nix-bin/xcrun
+              echo "" >> .nix-bin/xcrun
+              echo '# Keep xcrun tool invocations pinned to macOS deployment context.' >> .nix-bin/xcrun
+              echo 'unset IPHONEOS_DEPLOYMENT_TARGET TVOS_DEPLOYMENT_TARGET WATCHOS_DEPLOYMENT_TARGET' >> .nix-bin/xcrun
+              echo 'unset XROS_DEPLOYMENT_TARGET XR_DEPLOYMENT_TARGET VISIONOS_DEPLOYMENT_TARGET DRIVERKIT_DEPLOYMENT_TARGET' >> .nix-bin/xcrun
+              echo 'export MACOSX_DEPLOYMENT_TARGET="''${MACOSX_DEPLOYMENT_TARGET:-11.0}"' >> .nix-bin/xcrun
+              echo 'export SDKROOT="''${SDKROOT:-$(/usr/bin/xcrun --sdk macosx --show-sdk-path)}"' >> .nix-bin/xcrun
+              echo 'exec /usr/bin/xcrun "$@"' >> .nix-bin/xcrun
+              chmod +x .nix-bin/xcrun
+
+              export PATH="$PWD/.nix-bin:$PATH"
+            ''}
+
+          '';
+        };
+      }
+    );
+}