fix(ci): route FreeBSD build through canonical scripts/build.sh

- scripts/env.sh: add freebsd* OS detection + MAKE=gmake (BSD make
  doesn't understand GNU Makefile.cbm syntax; all other platforms use 'make')
- scripts/build.sh: use $MAKE instead of hard-coded 'make' (2 call sites)
- scripts/package-release.sh: add 'freebsd' to GOOS case validation + usage
- .github/workflows/_build.yml: replace inline gmake calls with
  scripts/build.sh, following venue-parity contract

Venue parity contract requires: provision in prepare:, call canonical
scripts/ in run:. Inline gmake violated this — now FreeBSD follows the
same pattern as Linux/macOS/Windows.

Closes: PR DeusData#1422 venue-parity contract violation
Signed-off-by: Pedro Ramos <131530838+pr9000@users.noreply.github.com>

Author: PR9000

.github/workflows/_build.yml

@@ -379,17 +379,22 @@ jobs:
           prepare: |
             pkg update -f
             pkg install -y gmake sqlite3 pkgconf node22 npm-node22 bash
-          run: |
             which python3 >/dev/null 2>&1 || ln -sf $(which python3.15 python3.14 python3.13 python3.12 python3.11 python3.10 2>/dev/null | head -n 1) /usr/local/bin/python3
-            echo "Python location: $(which python3 2>/dev/null || echo 'not found')"
-            python3 --version 2>&1 || true
-
-            # 1. Build standard binary
-            gmake -f Makefile.cbm cbm
+          run: |
+            # Build standard binary (canonical scripts/build.sh pattern)
+            if [ -n "${{ inputs.version }}" ]; then
+              scripts/build.sh --version "${{ inputs.version }}" CC=clang CXX=clang++
+            else
+              scripts/build.sh CC=clang CXX=clang++
+            fi
             scripts/package-release.sh freebsd ${{ matrix.arch }}-${{ matrix.release }}
 
-            # 2. Build UI binary
-            gmake -f Makefile.cbm cbm-with-ui
+            # Build UI binary
+            if [ -n "${{ inputs.version }}" ]; then
+              scripts/build.sh --version "${{ inputs.version }}" --with-ui CC=clang CXX=clang++
+            else
+              scripts/build.sh --with-ui CC=clang CXX=clang++
+            fi
             scripts/package-release.sh freebsd ${{ matrix.arch }}-${{ matrix.release }} --variant ui
 
       - name: Attest standard binary provenance

scripts/build.sh

@@ -149,10 +149,10 @@ cbm_remove_build_dir "$ROOT" "$BUILD_DIR"
 
 # Step 2: Build (Makefile applies $ARCHFLAGS for the target arch on macOS)
 if $WITH_UI; then
-    make -j"$NPROC" -f Makefile.cbm cbm-with-ui \
+    $MAKE -j"$NPROC" -f Makefile.cbm cbm-with-ui \
         CFLAGS_EXTRA="$CFLAGS_EXTRA" "${EXTRA_MAKE_ARGS[@]+"${EXTRA_MAKE_ARGS[@]}"}"
 else
-    make -j"$NPROC" -f Makefile.cbm cbm \
+    $MAKE -j"$NPROC" -f Makefile.cbm cbm \
         CFLAGS_EXTRA="$CFLAGS_EXTRA" "${EXTRA_MAKE_ARGS[@]+"${EXTRA_MAKE_ARGS[@]}"}"
 fi
 

scripts/env.sh

@@ -7,7 +7,7 @@
 #   ARCH        — target architecture (arm64 / x86_64)
 #   ARCHFLAGS   — "-arch <arch>" on macOS (target slice for clang/ld), empty elsewhere
 #   NPROC       — number of CPU cores
-#   OS          — darwin / linux / windows
+#   OS          — darwin / linux / windows / freebsd
 
 set -euo pipefail
 
@@ -16,10 +16,21 @@ OS="$(uname -s | tr '[:upper:]' '[:lower:]')"
 case "$OS" in
     darwin)  OS="darwin" ;;
     linux)   OS="linux" ;;
+    freebsd*) OS="freebsd" ;;
     mingw*|msys*|cygwin*) OS="windows" ;;
     *)       OS="unknown" ;;
 esac
 
+# ── Set platform-appropriate make ──────────────────────────────
+# FreeBSD ships BSD make as the default 'make'; GNU Makefile syntax in
+# Makefile.cbm requires gmake. All other platforms use 'make'.
+if [[ "$OS" == "freebsd" ]]; then
+    MAKE=gmake
+else
+    MAKE=make
+fi
+export MAKE
+
 # ── Detect / override architecture ─────────────────────────────
 # Default: native HARDWARE architecture (not Rosetta-translated).
 # On macOS under Rosetta, uname -m returns x86_64 even on Apple Silicon.

scripts/package-release.sh

@@ -23,7 +23,7 @@ Usage: scripts/package-release.sh <goos> <goarch> [--variant standard|ui]
 The canonical release-archive step: identical in the release build and the
 local artifact-flow smoke lane.
 
-  goos       linux | darwin | windows
+  goos       linux | darwin | windows | freebsd
   goarch     arch label used verbatim in the archive name (amd64, arm64,
              arm64-portable, ...)
   --variant  standard (default) | ui — selects the archive NAME prefix; the
@@ -77,8 +77,8 @@ for arg in "$@"; do
 done
 [ -n "$GOOS" ] && [ -n "$GOARCH" ] || { usage >&2; exit 2; }
 case "$GOOS" in
-linux | darwin | windows) ;;
-*) echo "package-release: goos must be linux, darwin or windows." >&2; exit 2 ;;
+linux | darwin | windows | freebsd) ;;
+*) echo "package-release: goos must be linux, darwin, windows or freebsd." >&2; exit 2 ;;
 esac
 case "$VARIANT" in
 standard) SUFFIX="" ;;