macOS BambuNetwork bridge: fix #13 and surrounding bring-up issues

[stephanGarland]

Summary

Fixes #13 and a chain of follow-on bugs that surfaced once the deadlock
was out of the way. End-to-end result on Apple Silicon (tested) and
Intel (untested but should work): clean install via the in-app
"download and install" flow, login to Bambu Cloud succeeds, printer
shows up, MQTT cloud connect comes up, camera preview plays, and
Send-to-Printer (cloud and LAN) successfully uploads the .3mf.

Issue #13's stated symptom (deadlock in RpcClient::stop()) was the
first failure people hit, but it was a tiny part of the picture — once
the deadlock was fixed the app stopped freezing and surfaced a series
of further failures, each of which is addressed by one commit here.

Test plan

• Clean install on Apple Silicon Mac (macOS 15 Tahoe), starting from
  a state where the prior Lima VM was already broken.
• Auto-install of the Lima runtime via the in-app prompt.
• Login to Bambu Cloud (browser OAuth flow + ticket exchange).
• Cloud MQTT connect (on_server_connected: 0/0).
• Cloud camera preview (TUTK over the cloud).
• Send-to-Printer over FTP-S to LAN-attached printer (192.168.x.x).
• Intel Mac — not tested by me. Should work since the changes are
  architecture-agnostic, but I don't own one.
• Building with -x (Xcode generator) — not tested in this branch
  since the user's machine only has Command Line Tools; covered by
  a separate manual review of the script.

Commit-by-commit notes

This branch is structured so each commit is a single self-contained fix.

1. Fix RpcClient deadlock when the bridge host wedges — the
   issue BambuNetwork bridge deadlocks on Apple Silicon (M1/M2/M3) — both ABI variants fail under Rosetta #13 fix itself. stop() closes its end of the stdio pipes
   before calling terminate() so the reader thread's blocking
   read_raw_frame() returns. Also unbreaks the broken
   unlock/relock-while-caller-holds-lock_guard pattern in
   start_locked().

2. Keep BambuSource separate from bridge dylib on macOS —
   source_module_is_network_module() returns false on macOS so
   wxMediaCtrl2 can load the BambuPlayer Obj-C class from
   libBambuSource.dylib (which actually exports it), rather than
   getting handed the bridge dylib (which doesn't). Without this the
   video preview never instantiates a player.

3. fix(macos): support macOS Tahoe (15+) SDK build — this is
   a backport of @claudiojara's open PR fix(macos): support macOS Tahoe (15+) SDK build #12. Included here because
   the rest of this branch can't build without it on macOS 15+ SDK
   (autotools deps can't find the active SDK; clang in SDK 26+ rejects
   the constexpr enum cast in wxMediaCtrl2.h). If the maintainer
   prefers to merge fix(macos): support macOS Tahoe (15+) SDK build #12 via its original PR, this commit can be
   dropped from this PR — the remaining commits still apply cleanly
   on top.

4. Tidy build_release_macos.sh: dep check, format, default to
   Ninja — adds a check_build_tools function that reports any
   missing Homebrew packages with an actionable brew install line
   (covers cmake, ninja, autoconf, automake, libtool,
   pkg-config, texinfo, and Xcode CLT). Runs shfmt -i 4 -ci and
   shellcheck clean. Flips the -x flag's meaning: default is now
   Ninja (works with just CLT), -x opts into the Xcode generator
   (requires full Xcode.app).

5. Link the Linux host dynamically against libstdc++ — the host
   process dlopens libbambu_networking.so / libBambuSource.so,
   both of which dynamically link the system libstdc++.so.6. With
   -static-libstdc++ on the host, that's two libstdc++ instances
   in one process — extern "C" functions returning std::string
   by value cross the boundary and corrupt memory. Removing the
   static-link flag makes both sides share one libstdc++.

6. Add env-gated full-RPC tracing to the Linux host — set
   ORCA_LOG_ALL_RPC=1 in the environment and the bridge host logs
   every incoming RPC method + the responses for connect/login/camera
   handlers + any non-empty bridge.poll_events batch. Defaults to
   off; no behavior or output change without the env var. This is
   what made the rest of these fixes diagnosable.

7. Rework macOS Lima install: native x86_64 VM + multiple bug
   fixes — the biggest commit in the branch. Switches the Lima
   guest from arm64+Rosetta to a full-system x86_64 QEMU VM
   (Rosetta and qemu-user both corrupt the plugin's .so codegen;
   only a native x86_64 kernel runs it cleanly). Also fixes:
   three-state Lima start (running / stopped / absent — the old
   two-way branch failed on the common "exists but stopped" case);
   REPLACE_EXISTING=1 now actually deletes before recreating;
   auto-recreate when the existing VM is the wrong arch; auto-install
   of qemu-system-x86_64 and lima-additional-guestagents via
   Homebrew; /var/folders mount so the bridge can read OrcaSlicer's
   per-user TMPDIR (the .3mf staged for upload lives there).

8. Refresh bundled BambuLab pinned-cert bundle — the shipped
   slicer_base64.cer was pinned to BambuLab's leaf cert that
   expired in 2022. Every TLS connection the plugin made was
   returning CURLcode 60 (PEER_FAILED_VERIFICATION). Bundle is
   now 3 certs: current *.bambulab.com leaf, current
   *.mqtt.bambulab.com leaf (the MQTT broker hostname is two
   labels deep so the wildcard doesn't cover it), and the DigiCert
   Global Root CA. All three are public server certs / a public
   root CA — no private keys, no identifiers, no per-user data.

9. README: drop center alignment, document macOS — replaces the
   macOS "Work in progress" placeholder with a description of the
   auto-install flow + tightens the README's formatting (drop the
   outer <div align="center">, keep centering only around the
   logo, proper top-level heading).

What's deliberately not in this PR

• PR Add link to jarczakpawel's github profile #11 (@3rd-st-ninja's reupload-note / jarczakpawel link in
  the BMCU section): not a build dependency, separately open as an
  existing PR. Including it here would just step on that.
• The instrumented host binaries I built during debugging — they
  were a red herring (the actual fix is the QEMU x86_64 VM, not a
  binary rebuild). The CI-provided host binaries in
  tools/pjarczak_bambu_linux_host/runtime/linux-x86_64/ work fine
  once everything else in this branch is in place.
• A prefer_lan toggle for video preview — implemented and
  tested locally, but the printer (a P2S in cloud mode) refuses
  port 6000 connections regardless of what the client tries, so
  there's no LAN path to redirect to without flipping the printer's
  LAN-Only-Mode toggle. Code reverted, not included here.

🤖 Generated with Claude Code

[MaximusL-sudo]

Has anyone else successfully built this? I can not for the life of me get a successful build on my M1.

[stephanGarland]

Has anyone else successfully built this? I can not for the life of me get a successful build on my M1.

What error[s] are you seeing? I might be able to figure it out.

[MaximusL-sudo]

Thanks for responding. Just for context i am not very versed in compiling so it might be a fault on my end. I tried building it twice with the command using ninja.

git clone --recursive https://github.com/stephanGarland/OrcaSlicer-bambulab.git
cd OrcaSlicer-bambulab
git checkout pr/macos-bridge
git submodule update --init --recursive
./build_release_macos.sh

The first try it threw an error while compiling Orcaslicer code (after dep)

CMake Error:
  Xcode 1.5 not supported.

CMake Error: Could not create named generator Xcode

Second try it threw an error while in deps

+ cmake --build . --config Release --target ALL_BUILD ninja: error: unknown target 'ALL_BUILD'

Edit: Third try and i got a new error,

Undefined symbols for architecture arm64:
  "_png_do_expand_palette_rgb8_neon", referenced from:
      _png_do_read_transformations in liblibpng.a[9](pngrtran.c.o)
  "_png_do_expand_palette_rgba8_neon", referenced from:
      _png_do_read_transformations in liblibpng.a[9](pngrtran.c.o)
  "_png_init_filter_functions_neon", referenced from:
      _png_read_filter_row in liblibpng.a[10](pngrutil.c.o)
  "_png_riffle_palette_neon", referenced from:
      _png_do_read_transformations in liblibpng.a[9](pngrtran.c.o)
ld: symbol(s) not found for architecture arm64
clang++: error: linker command failed with exit code 1 (use -v to see invocation)
[668/669] Building CXX object src/slic3r/Utils/PJarczakLinuxBridge/CMakeFiles/pjarczak_bambu_networking_bridge.dir/Release/PJarczakBambuNetworkForwarderExports.cpp.o
ninja: build stopped: subcommand failed.

[stephanGarland]

Thanks for responding. Just for context i am not very versed in compiling so it might be a fault on my end. I tried building it twice with the command using ninja.

Can you post the output of grep -i png build/arm64/CMakeCache.txt ?

[MaximusL-sudo]

grep: build/arm64/CMakeCache.txt: No such file or directory

[stephanGarland]

I did a clean build with no issues. It's possible that you have some dangling env vars left from a previous attempt?

In a new terminal, can you please run these from the repo root:

ls build/ deps/build/ 2>&1
env | grep -iE 'cmake|png|homebrew|pkg_config|xcode|sdkroot'
brew list --versions | grep -iE 'libpng|cairo|freetype|fontconfig'
find build deps/build -name CMakeCache.txt 2>/dev/null | head -5

For the latter, if you do find any CMakeCache.txt files, please re-run the previous grep against them.

[MaximusL-sudo]

Here is what i got

ls: build/: No such file or directory
ls: deps/build/: No such file or directory
PATH=/usr/local/bin:/usr/local/sbin:/opt/homebrew/bin:/opt/homebrew/sbin:/System/Cryptexes/App/usr/bin:/usr/bin:/bin:/usr/sbin:/sbin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/local/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/appleinternal/bin:/opt/pmk/env/global/bin
HOMEBREW_PREFIX=/usr/local
HOMEBREW_CELLAR=/usr/local/Cellar
HOMEBREW_REPOSITORY=/usr/local/Homebrew
FPATH=/usr/local/share/zsh/site-functions:/opt/homebrew/share/zsh/site-functions:/usr/local/share/zsh/site-functions:/usr/share/zsh/site-functions:/usr/share/zsh/5.9/functions
INFOPATH=/usr/local/share/info:/opt/homebrew/share/info:
cairo 1.18.4
fontconfig 2.16.0
freetype 2.13.3
libpng 1.6.58 1.6.50

PS; i deleted everything after my failed attempt, thats probably why there are no CMakeCache.txt files.

[stephanGarland]

HOMEBREW_PREFIX=/usr/local

I think this may be the problem. That's typically the prefix for x86_64 Homebrew; arm64 Homebrew is /opt/homebrew (though I suppose it's possible you force-installed it there). If you run brew config | grep Rosetta, and it shows true, that's it.

That matters because any tools installed with it are going to be running under the Rosetta 2 translation layer, and there are various checks in the script to determine the architecture.

You might be able to run arch -arm64e ./build_release_macos.sh, but the better fix would be to get the arm-native version of Homebrew, uninstall the x86_64 tools, and install the arm64 tools. EDIT: actually, you already have it, it's just too late in PATH, so any x86_64 tools take priority.

[MaximusL-sudo]

Yes i noticed that too so i switched to arm64 Homebrew but i ended up getting the same error as the third try.

brew config | grep Rosetta responded with Rosetta 2: false

and arch responded in arm64

Edit:
Here is what claude had to say after i got the same error from arch -arm64e ./build_release_macos.sh

The offending library is opencv4/3rdparty/liblibpng.a — OpenCV's bundled libpng, not the system one. It was compiled with NEON support enabled but the NEON object files are missing from the archive. This happens on every attempt regardless of Homebrew path or arch flag.

Edit #2: After countless hours of troubleshooting with claude, i managed to compile the app and it launches! VM works too, handshake works etc. Root of the problem was a mixup between x86 and arm64 (entirely my systems fault). Problem is now i can't login, it logs in automatically when i first opened the app, but none of my printers showed up. I figured its a problem with the account since the printer is linked through the account so i tried to retry the login. Got forwarded to bambu's website where i logged in normally but i ended up getting a:
Authentication failed Something went wrong. Please return to OrcaSlicer and try again.

[stephanGarland]

Got forwarded to bambu's website where i logged in normally but i ended up getting a: Authentication failed Something went wrong. Please return to OrcaSlicer and try again.

Progress! I had the same error occur; it was due to an expired TLS cert. If you had Orcaslicer automatically download the network bridge, it may have overwritten the cert shipped with this PR.

for f in \
    ~/Library/Application\ Support/OrcaSlicer/plugins/slicer_base64.cer \
    ~/Library/Application\ Support/OrcaSlicer/macos-bridge/runtime/slicer_base64.cer \
    /Applications/OrcaSlicer.app/Contents/Resources/cert/slicer_base64.cer; do
    printf '%6s  %s\n' "$(wc -c < "$f" 2>/dev/null || echo MISSING)" "$f"
  done

If any of those are 3456 bytes, that's the old cert - replace it with the one in this PR (which should be 5757 bytes). Orcaslicer shouldn't ask you to download anything for the network bridge; if it does, check if the VM is running with limactl list. If it isn't, quit Orcaslicer, start the VM, then re-launch Orcaslicer.

[3rdnfnlbst]

Hello, was wondering if anyone has uploaded a working macOS version.

[MaximusL-sudo]

Hello, was wondering if anyone has uploaded a working macOS version.

I second this, foolishly wiped the built app thinking i did something wrong and needed to retry (this was before i saw Stephan's reply), now i keep facing new errors while trying to rebuild. An app bundle would be nice hahaha.

[hellonearth311]

Hello, any updates on whether you've gotten a working macOS build?

[npolanosky]

@3rdnfnlbst @hellonearth311 @MaximusL-sudo email me (my username at gmail) and I can send a working MacOS app image over to you. I'll see about uploading it to a fork/hosting it somewhere later but I need to double check if that's going to be problematic given the ongoing situation around this version of Orca.
Disclaimer, this is only about the third time I've built a real program from source so YMMV, but as they say "it works on my system!" :)

Didn't change any code behind the scenes, just used the contents of this PR and then spent a couple hours staring at the screen and learning a lot as I went.

If more than a handful of people need this I'd prefer we all poke the powers that be to merge the PR and update the releases instead, but if its just a few of us I'll happily help out.

[hellonearth311]

I've emailed you :)

[3rdnfnlbst]

@3rdnfnlbst @hellonearth311 @MaximusL-sudo email me (my username at gmail) and I can send a working MacOS app image over to you. I'll see about uploading it to a fork/hosting it somewhere later but I need to double check if that's going to be problematic given the ongoing situation around this version of Orca. Disclaimer, this is only about the third time I've built a real program from source so YMMV, but as they say "it works on my system!" :)

Didn't change any code behind the scenes, just used the contents of this PR and then spent a couple hours staring at the screen and learning a lot as I went.

If more than a handful of people need this I'd prefer we all poke the powers that be to merge the PR and update the releases instead, but if its just a few of us I'll happily help out.
Email sent.