Merge feature/fix-macos-27-beta: valid LC_ID_DYLIB for macOS 26/27 dyld

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: setoelkahfi

sdk/gems/auth/Rakefile

@@ -11,4 +11,22 @@ RbSys::ExtensionTask.new('auth', GEMSPEC) do |ext|
   ext.lib_dir = 'lib/auth'
 end
 
+# macOS: the rb_sys/rake-compiler build emits the bundle as an MH_DYLIB with an
+# empty LC_ID_DYLIB install name (a plain `cargo build` does not). dyld on macOS
+# 15+/Tahoe rejects that with "load command string extends beyond end of load
+# command", so the gem fails to load. Stamp a valid install name onto every
+# bundle the build produces by enhancing the bundle file tasks themselves (which
+# is what `rake native gem` runs, not the top-level `compile`). install_name_tool
+# re-signs ad-hoc, ships on the macOS gem-build runners, and works across archs
+# (cross-built x86_64 bundles too). Idempotent.
+if RbConfig::CONFIG['host_os'] =~ /darwin/
+  Rake::Task.tasks.each do |t|
+    next unless t.name.end_with?('auth.bundle')
+
+    t.enhance do
+      sh 'install_name_tool', '-id', '@rpath/auth.bundle', t.name if File.exist?(t.name)
+    end
+  end
+end
+
 task default: :compile

sdk/gems/auth/ext/auth/extconf.rb

@@ -4,3 +4,15 @@
 require 'rb_sys/mkmf'
 
 create_rust_makefile('auth/auth')
+
+# rb-sys (fixup_libnames) appends `install_name_tool -id "" $(DLLIB)` to the
+# generated Makefile, blanking the bundle's LC_ID_DYLIB install name. dyld on
+# macOS 26/27 rejects an empty dylib-ID string ("load command string extends
+# beyond end of load command"), so the extension fails to dlopen. Rewrite that
+# step to stamp a valid @rpath id instead. This covers the `gem install`
+# (extconf) build path; the Rakefile covers `rake native gem` builds.
+if RUBY_PLATFORM.include?('darwin') && File.exist?('Makefile')
+  makefile = File.read('Makefile')
+  patched  = makefile.gsub('install_name_tool -id ""', 'install_name_tool -id "@rpath/auth.bundle"')
+  File.write('Makefile', patched) if patched != makefile
+end