feat: desktop support and leaner npm package

Author: Preeternal

.github/workflows/ci.yml

@@ -183,6 +183,12 @@ jobs:
             - name: Build Zig prebuilts for iOS
               run: ./scripts/build-zig-ios.sh
 
+            - name: Build Zig prebuilts for macOS
+              run: ./scripts/build-zig-macos.sh
+
+            - name: Build Zig prebuilts for Windows
+              run: ./scripts/build-zig-windows.sh
+
             - name: Build package
               run: yarn prepare
 

.github/workflows/manual-publish.yml

@@ -34,6 +34,10 @@ jobs:
         run: ./scripts/build-zig-android.sh
       - name: Build Zig prebuilts for iOS
         run: ./scripts/build-zig-ios.sh
+      - name: Build Zig prebuilts for macOS
+        run: ./scripts/build-zig-macos.sh
+      - name: Build Zig prebuilts for Windows
+        run: ./scripts/build-zig-windows.sh
       - run: yarn prepare
       - name: Verify packaged artifacts
         run: yarn check:packaged-artifacts

.github/workflows/npm-publish.yml

@@ -51,6 +51,12 @@ jobs:
       - name: Build Zig prebuilts for iOS
         run: ./scripts/build-zig-ios.sh
 
+      - name: Build Zig prebuilts for macOS
+        run: ./scripts/build-zig-macos.sh
+
+      - name: Build Zig prebuilts for Windows
+        run: ./scripts/build-zig-windows.sh
+
       - name: Build package (bob via prepare)
         run: yarn prepare
 

BENCHMARKS.md

@@ -1,23 +1,31 @@
 # Benchmarks
 
-Release measurements for `native` vs `zig` engines.
+Release measurements for `native` vs `zig` engines on mobile, plus Zig-only
+desktop snapshots for experimental macOS and Windows support.
 
 ## Environment
 
 - Android: physical ARM64 device, Android 15
 - iOS: physical Apple A15 device, iOS 26.3
+- macOS: Apple MacBook Pro 16-inch, M4 Max, 36 GB RAM
+- Windows: QEMU 10.0 ARM Virtual Machine, ARM64, 8 GB RAM
 - Build: Release
 - Payload: generated local cache file, 200 MiB
 - App settings: `samples=3`, `warmups=1`
 - Values below are medians (`ms`, lower is better)
 
-Each run reports the app-level median for three measured samples. The tables
-below use the median across repeated runs.
+Each run reports the app-level median for three measured samples. When repeated
+runs are available, comparison tables use the median across those runs.
 
 This document is a current engine-selection snapshot, not a release-to-release
 speedup table. A slower row means "slower than `native` on that platform"; it
 does not by itself mean the Zig core regressed versus the previous release.
 
+Desktop rows are Zig-only because macOS and Windows support currently ships the
+Zig engine only. The Windows numbers were captured in an ARM64 VM, so they are
+useful as a release smoke/performance snapshot, not as a hardware comparison
+against physical devices.
+
 ## Key Takeaways
 
 - Zig `v0.0.5` improves the Zig path versus the previous benchmark set for
@@ -34,68 +42,106 @@ does not by itself mean the Zig core regressed versus the previous release.
   `SHA-512/256`, where the native implementation is much slower.
 - Android `native` is faster for `SHA-1`, `SHA-384`, `SHA-512`, `BLAKE3`,
   and `XXH3-64` in this measurement set.
+- Experimental macOS and Windows support produce matching digest prefixes for
+  the same 200 MiB benchmark payload.
+- macOS on M4 Max is currently the fastest measured Zig desktop target, with
+  `XXH3-64` at 14 ms and `SHA-256` / `SHA-224` / HMAC-SHA-2 224/256 around
+  78-79 ms.
+- Windows ARM64 VM performs well for `BLAKE3`, `XXH3-64`, `SHA-1`, and the
+  SHA-512 family, but is much slower than macOS for SHA-224/SHA-256 and their
+  HMAC variants in this run.
 
 ## Quick Comparison
 
 ### iOS
 
-| Scenario | Native | Zig | Zig vs native |
-|---|---:|---:|---:|
-| SHA-256, file 200 MiB | 228 | 209 | 9% faster |
-| SHA-512, file 200 MiB | 317 | 1176 | 271% slower |
-| BLAKE3, file 200 MiB | 310 | 302 | 3% faster |
-| XXH3-64, file 200 MiB | 108 | 66 | 39% faster |
+| Scenario              | Native |  Zig | Zig vs native |
+| --------------------- | -----: | ---: | ------------: |
+| SHA-256, file 200 MiB |    228 |  209 |     9% faster |
+| SHA-512, file 200 MiB |    317 | 1176 |   271% slower |
+| BLAKE3, file 200 MiB  |    310 |  302 |     3% faster |
+| XXH3-64, file 200 MiB |    108 |   66 |    39% faster |
 
 ### Android
 
-| Scenario | Native | Zig | Zig vs native |
-|---|---:|---:|---:|
-| SHA-256, file 200 MiB | 297 | 332 | 12% slower |
-| SHA-512/224, file 200 MiB | 3832 | 796 | 79% faster |
-| BLAKE3, file 200 MiB | 304 | 391 | 29% slower |
-| XXH3-64, file 200 MiB | 73 | 96 | 32% slower |
+| Scenario                  | Native | Zig | Zig vs native |
+| ------------------------- | -----: | --: | ------------: |
+| SHA-256, file 200 MiB     |    297 | 332 |    12% slower |
+| SHA-512/224, file 200 MiB |   3832 | 796 |    79% faster |
+| BLAKE3, file 200 MiB      |    304 | 391 |    29% slower |
+| XXH3-64, file 200 MiB     |     73 |  96 |    32% slower |
+
+### Desktop Zig
+
+| Scenario              | macOS M4 Max | Windows ARM64 VM |
+| --------------------- | -----------: | ---------------: |
+| SHA-256, file 200 MiB |         79.0 |              539 |
+| SHA-512, file 200 MiB |          295 |              332 |
+| BLAKE3, file 200 MiB  |          102 |              125 |
+| XXH3-64, file 200 MiB |         14.0 |             28.0 |
 
 ## Full Matrix: iOS 200 MiB
 
-| Algorithm | Native | Zig | Zig vs native |
-|---|---:|---:|---:|
-| SHA-256 | 228 | 209 | 9% faster |
-| MD5 | 587 | 561 | 5% faster |
-| SHA-1 | 222 | 552 | 149% slower |
-| SHA-224 | 227 | 207 | 9% faster |
-| SHA-384 | 316 | 1177 | 272% slower |
-| SHA-512 | 317 | 1176 | 271% slower |
-| SHA-512/224 | 315 | 1175 | 273% slower |
-| SHA-512/256 | 313 | 1173 | 275% slower |
-| HMAC-SHA-224 | 223 | 204 | 9% faster |
-| HMAC-SHA-256 | 223 | 207 | 7% faster |
-| HMAC-SHA-384 | 315 | 1173 | 272% slower |
-| HMAC-SHA-512 | 314 | 1174 | 274% slower |
-| HMAC-MD5 | 586 | 556 | 5% faster |
-| HMAC-SHA-1 | 214 | 549 | 157% slower |
-| BLAKE3 | 310 | 302 | 3% faster |
-| XXH3-64 | 108 | 66 | 39% faster |
+| Algorithm    | Native |  Zig | Zig vs native |
+| ------------ | -----: | ---: | ------------: |
+| SHA-256      |    228 |  209 |     9% faster |
+| MD5          |    587 |  561 |     5% faster |
+| SHA-1        |    222 |  552 |   149% slower |
+| SHA-224      |    227 |  207 |     9% faster |
+| SHA-384      |    316 | 1177 |   272% slower |
+| SHA-512      |    317 | 1176 |   271% slower |
+| SHA-512/224  |    315 | 1175 |   273% slower |
+| SHA-512/256  |    313 | 1173 |   275% slower |
+| HMAC-SHA-224 |    223 |  204 |     9% faster |
+| HMAC-SHA-256 |    223 |  207 |     7% faster |
+| HMAC-SHA-384 |    315 | 1173 |   272% slower |
+| HMAC-SHA-512 |    314 | 1174 |   274% slower |
+| HMAC-MD5     |    586 |  556 |     5% faster |
+| HMAC-SHA-1   |    214 |  549 |   157% slower |
+| BLAKE3       |    310 |  302 |     3% faster |
+| XXH3-64      |    108 |   66 |    39% faster |
 
 ## Full Matrix: Android 200 MiB
 
-| Algorithm | Native | Zig | Zig vs native |
-|---|---:|---:|---:|
-| SHA-256 | 297 | 332 | 12% slower |
-| MD5 | 585 | 605 | 3% slower |
-| SHA-1 | 228 | 581 | 155% slower |
-| SHA-224 | 222 | 227 | 2% slower |
-| SHA-384 | 552 | 818 | 48% slower |
-| SHA-512 | 549 | 808 | 47% slower |
-| SHA-512/224 | 3832 | 796 | 79% faster |
-| SHA-512/256 | 3868 | 795 | 79% faster |
-| HMAC-SHA-224 | 222 | 227 | 2% slower |
-| HMAC-SHA-256 | 222 | 225 | 1% slower |
-| HMAC-SHA-384 | 553 | 792 | 43% slower |
-| HMAC-SHA-512 | 553 | 797 | 44% slower |
-| HMAC-MD5 | 581 | 588 | 1% slower |
-| HMAC-SHA-1 | 229 | 557 | 143% slower |
-| BLAKE3 | 304 | 391 | 29% slower |
-| XXH3-64 | 73 | 96 | 32% slower |
+| Algorithm    | Native | Zig | Zig vs native |
+| ------------ | -----: | --: | ------------: |
+| SHA-256      |    297 | 332 |    12% slower |
+| MD5          |    585 | 605 |     3% slower |
+| SHA-1        |    228 | 581 |   155% slower |
+| SHA-224      |    222 | 227 |     2% slower |
+| SHA-384      |    552 | 818 |    48% slower |
+| SHA-512      |    549 | 808 |    47% slower |
+| SHA-512/224  |   3832 | 796 |    79% faster |
+| SHA-512/256  |   3868 | 795 |    79% faster |
+| HMAC-SHA-224 |    222 | 227 |     2% slower |
+| HMAC-SHA-256 |    222 | 225 |     1% slower |
+| HMAC-SHA-384 |    553 | 792 |    43% slower |
+| HMAC-SHA-512 |    553 | 797 |    44% slower |
+| HMAC-MD5     |    581 | 588 |     1% slower |
+| HMAC-SHA-1   |    229 | 557 |   143% slower |
+| BLAKE3       |    304 | 391 |    29% slower |
+| XXH3-64      |     73 |  96 |    32% slower |
+
+## Full Matrix: Desktop Zig 200 MiB
+
+| Algorithm    | macOS M4 Max | macOS range | Windows ARM64 VM | Windows range |
+| ------------ | -----------: | ----------: | ---------------: | ------------: |
+| SHA-256      |         79.0 |   79.0-79.0 |              539 |       516-636 |
+| MD5          |          238 |     238-239 |              285 |       269-289 |
+| SHA-1        |          171 |     169-171 |              201 |       198-205 |
+| SHA-224      |         79.0 |   78.0-79.0 |              496 |       496-504 |
+| SHA-384      |          295 |     293-295 |              335 |       333-362 |
+| SHA-512      |          295 |     293-296 |              332 |       331-337 |
+| SHA-512/224  |          296 |     295-296 |              347 |       329-365 |
+| SHA-512/256  |          296 |     295-297 |              349 |       340-525 |
+| HMAC-SHA-224 |         78.0 |   78.0-79.0 |              502 |       493-515 |
+| HMAC-SHA-256 |         78.0 |   78.0-78.0 |              505 |       503-508 |
+| HMAC-SHA-384 |          297 |     293-299 |              349 |       340-374 |
+| HMAC-SHA-512 |          297 |     295-298 |              338 |       332-339 |
+| HMAC-MD5     |          239 |     238-246 |              269 |       266-269 |
+| HMAC-SHA-1   |          172 |     172-172 |              202 |       200-203 |
+| BLAKE3       |          102 |     102-103 |              125 |       125-126 |
+| XXH3-64      |         14.0 |   14.0-15.0 |             28.0 |     28.0-30.0 |
 
 ## Notes
 

CHANGELOG.md

@@ -1,5 +1,72 @@
 # Releases
 
+## v2.0.7 - Desktop support and leaner npm package
+
+This release line starts desktop support for React Native out-of-tree
+platforms. macOS support lands through `react-native-macos`; React Native
+Windows support lands through `react-native-windows`.
+
+### Added
+
+- Added experimental macOS support for `react-native-macos`.
+- Added a separate macOS example workspace in `examples/macos`.
+- Added a macOS Zig prebuilt xcframework at
+  `third_party/zig-files-hash-prebuilt/macos/ZigFilesHash.xcframework`.
+- Added `scripts/build-zig-macos.sh` for rebuilding the macOS Zig prebuilt.
+- Added experimental Windows support for `react-native-windows`.
+- Added a separate Windows example workspace in `examples/windows`.
+- Added Windows Zig prebuilt `.lib` artifacts for `Win32`, `x64`, and `ARM64`
+  at `third_party/zig-files-hash-prebuilt/windows`.
+- Added `scripts/build-zig-windows.sh` for rebuilding Windows Zig prebuilts.
+- Added desktop development notes and workspace commands to `CONTRIBUTING.md`.
+- Added release benchmark snapshots for experimental macOS and Windows Zig
+  desktop support to `BENCHMARKS.md`.
+- Added platform status badges and short desktop support links to `README.md`.
+
+### Changed
+
+- The podspec now declares both iOS and macOS platforms.
+- macOS uses the Zig engine only. The native Apple engine switch remains iOS
+  specific.
+- Windows uses the Zig engine only. There is no Windows native-engine switch.
+- Updated the bundled Zig core to `zig-files-hash` `v0.0.6`. Windows Zig
+  prebuilts are rebuilt with bundled compiler-rt so MSVC consumers do not hit
+  unresolved runtime helpers such as `__divti3` when linking
+  `zig_files_hash.lib`.
+- iOS and macOS Zig xcframework builds now expose only the C API headers in
+  their `Headers` directories instead of the full Zig source tree.
+- The npm package allowlist now separates repository build inputs from
+  consumer package contents. Source submodules remain in the repository for
+  maintainers, while npm users receive only the native build inputs needed by
+  Gradle/CocoaPods.
+- The npm package no longer includes large unused upstream directories such as
+  `third_party/xxhash/tests`, `third_party/xxhash/cli`,
+  `third_party/blake3/src`, `third_party/blake3/benches`, and
+  `third_party/zig-files-hash/src/*.zig`.
+- `scripts/check-packed-prebuilts.sh` now verifies the minimal required
+  third-party artifacts and fails if unnecessary third-party source/test
+  directories re-enter the packed tarball.
+- The Windows example uses the Hermes compiler from the React Native Windows
+  Hermes NuGet package for release bundling, keeping the generated bytecode
+  aligned with the RNW runtime used by the app.
+
+### Package size
+
+Local `npm pack --dry-run --json` numbers after this cleanup and the Windows
+prebuilt addition:
+
+- package entries: `310` -> `106`
+- unpacked size: `24.35 MB` -> `23.24 MB`
+- tarball size: `5.75 MB` -> `5.98 MB`
+
+The tarball is slightly larger than before because this release adds three
+Windows `.lib` prebuilts. The cleanup still removes unused upstream sources and
+keeps the shipped payload focused on required native build inputs. Most of the
+remaining package size is the expected Zig prebuilt payload for Android, iOS,
+macOS, and Windows.
+
+---
+
 ## v2.0.6 - Seeded XXH3
 
 This release adds optional seeded `XXH3-64` / `XXH3-128` support.
@@ -77,6 +144,8 @@ const cacheKey = await fileHash(fileUri, {
 - With the optional `zig` engine, seeded XXH3 currently means `XXH3-64`;
   `XXH3-128` remains native-only.
 
+---
+
 ## v2.0.5 - Zig C ABI v3, streaming files, and cancellation
 
 This release updates the Zig core to `zig-files-hash` `v0.0.5`, moves file

CONTRIBUTING.md

@@ -10,6 +10,8 @@ This project is a monorepo managed using [Yarn workspaces](https://yarnpkg.com/f
 
 - The library package in the root directory.
 - An example app in the `example/` directory.
+- A separate React Native macOS example workspace in `examples/macos/`.
+- A separate React Native Windows example workspace in `examples/windows/`.
 
 To get started with the project, make sure you have the correct version of [Node.js](https://nodejs.org/) installed. See the [`.nvmrc`](./.nvmrc) file for the version used in this project.
 
@@ -35,14 +37,18 @@ If you are changing Zig engine integration and need to refresh Zig prebuilts:
 ```sh
 ./scripts/build-zig-android.sh
 ./scripts/build-zig-ios.sh
+./scripts/build-zig-macos.sh
+./scripts/build-zig-windows.sh
 ```
 
 Prebuilt output locations:
 
 - `third_party/zig-files-hash-prebuilt/android/<ABI>/libzig_files_hash.a`
 - `third_party/zig-files-hash-prebuilt/ios/ZigFilesHash.xcframework`
+- `third_party/zig-files-hash-prebuilt/macos/ZigFilesHash.xcframework`
+- `third_party/zig-files-hash-prebuilt/windows/<Platform>/zig_files_hash.lib`
 
-The bundled Zig core is `zig-files-hash v0.0.5` with C ABI v3
+The bundled Zig core is `zig-files-hash v0.0.6` with C ABI v3
 (`ZFH_API_VERSION = 3`). Custom source/prebuilt builds must use a compatible
 Zig C ABI.
 
@@ -63,6 +69,50 @@ Replace `"<IOS_DEVICE_NAME>"` with your actual iPhone device name.
 
 # 4) iOS / zig / Release / physical device
 ./scripts/build-zig-ios.sh && (cd example && ZFH_ENGINE=zig bundle exec pod install --project-directory=ios && ZFH_ENGINE=zig npx react-native run-ios --mode Release --device "<IOS_DEVICE_NAME>")
+
+# 5) macOS / zig / Debug
+./scripts/build-zig-macos.sh && yarn install && (cd examples/macos && yarn pods && yarn macos)
+
+# 6) Windows / zig / Debug
+./scripts/build-zig-windows.sh && yarn install && (cd examples/windows && yarn windows)
+```
+
+The desktop examples are Yarn workspaces, so the same commands can also be run
+from the repository root:
+
+```sh
+yarn workspace @preeternal/react-native-file-hash-macos-example pods
+yarn workspace @preeternal/react-native-file-hash-macos-example start --reset-cache
+yarn workspace @preeternal/react-native-file-hash-macos-example macos
+
+yarn workspace @preeternal/react-native-file-hash-windows-example start --reset-cache
+yarn workspace @preeternal/react-native-file-hash-windows-example windows
+```
+
+React Native Windows CLI currently requires PowerShell 7 (`pwsh.exe`) on
+`PATH`. Without it, RNW commands can fail with a misleading `unknown command`
+error instead of the real cause; see
+[microsoft/react-native-windows#16274](https://github.com/microsoft/react-native-windows/issues/16274).
+
+If the Windows example shell needs to be created or refreshed from the official
+React Native Windows template, run this from `examples/windows`:
+
+```sh
+npx react-native init-windows --overwrite
+```
+
+The command can overwrite RNW-generated files such as `windows/` and
+`metro.config.js`, so re-apply the monorepo Metro config and local app changes
+after regenerating.
+
+If RNW points you to
+`node_modules/react-native-windows/scripts/rnw-dependencies.ps1`, it is asking
+for the Windows development prerequisites. Run the dependency setup from an
+elevated PowerShell window:
+
+```powershell
+Set-ExecutionPolicy Unrestricted -Scope Process -Force
+iex (New-Object System.Net.WebClient).DownloadString('https://aka.ms/rnw-vs2022-deps.ps1')
 ```
 
 ### Local development and rebuilds