From 130f35854efc7d637e78c9b58e8c6b01d942607e Mon Sep 17 00:00:00 2001
From: Owen Zimmerman <123591347+Owen-sz@users.noreply.github.com>
Date: Thu, 30 Jul 2026 06:00:00 -0500
Subject: [PATCH] add: bolt-screen-locker (#14487)

Signed-off-by: Owen-sz <owen@fyralabs.com>
(cherry picked from commit 2b01cb596ffe1858e328437a7aa69edfea6e6959)
---
 .../0001-fix-install-permissions.patch        | 13 +++++++
 .../chasm/bolt-screen-locker/anda.hcl         |  6 ++++
 .../bolt-screen-locker.spec                   | 36 +++++++++++++++++++
 .../chasm/bolt-screen-locker/update.rhai      |  1 +
 4 files changed, 56 insertions(+)
 create mode 100644 anda/desktops/chasm/bolt-screen-locker/0001-fix-install-permissions.patch
 create mode 100644 anda/desktops/chasm/bolt-screen-locker/anda.hcl
 create mode 100644 anda/desktops/chasm/bolt-screen-locker/bolt-screen-locker.spec
 create mode 100644 anda/desktops/chasm/bolt-screen-locker/update.rhai

diff --git a/anda/desktops/chasm/bolt-screen-locker/0001-fix-install-permissions.patch b/anda/desktops/chasm/bolt-screen-locker/0001-fix-install-permissions.patch
new file mode 100644
index 00000000000..15bc373bd7d
--- /dev/null
+++ b/anda/desktops/chasm/bolt-screen-locker/0001-fix-install-permissions.patch
@@ -0,0 +1,13 @@
+diff --git a/Makefile b/Makefile
+index 5c6f213..035f484 100644
+--- a/Makefile
++++ b/Makefile
+@@ -52,7 +52,7 @@ img/logo.rgba: $(LOGO_SRC)
+ install: bolt bolt-auth
+ 	install -d $(DESTDIR)$(BINDIR)
+ 	install -m 0755 bolt $(DESTDIR)$(BINDIR)/bolt
+-	install -m 4755 -o root -g root bolt-auth $(DESTDIR)$(BINDIR)/bolt-auth
++	install -m 0755 bolt-auth $(DESTDIR)$(BINDIR)/bolt-auth
+ 	@echo
+ 	@echo "  bolt installed. The auth helper is suid root (mode 4755):"
+ 	@ls -la $(DESTDIR)$(BINDIR)/bolt-auth
diff --git a/anda/desktops/chasm/bolt-screen-locker/anda.hcl b/anda/desktops/chasm/bolt-screen-locker/anda.hcl
new file mode 100644
index 00000000000..269abb5537d
--- /dev/null
+++ b/anda/desktops/chasm/bolt-screen-locker/anda.hcl
@@ -0,0 +1,6 @@
+project pkg {
+    arches = ["x86_64"]
+  rpm {
+    spec = "bolt-screen-locker.spec"
+  }
+}
diff --git a/anda/desktops/chasm/bolt-screen-locker/bolt-screen-locker.spec b/anda/desktops/chasm/bolt-screen-locker/bolt-screen-locker.spec
new file mode 100644
index 00000000000..28182f73426
--- /dev/null
+++ b/anda/desktops/chasm/bolt-screen-locker/bolt-screen-locker.spec
@@ -0,0 +1,36 @@
+%global _hardened_ldflags %nil
+
+Name:           bolt-screen-locker
+Release:        1%{?dist}
+Version:        0.2.0
+Summary:        Pure-asm screen locker for the CHasm desktop suite
+License:        Unlicense
+URL:            https://github.com/isene/bolt
+Source:         %{url}/archive/refs/tags/v%{version}.tar.gz
+Patch:          0001-fix-install-permissions.patch
+BuildRequires:  nasm
+BuildRequires:  gcc
+Packager:       Owen Zimmerman <owen@fyralabs.com>
+ExclusiveArch:  x86_64
+
+%description
+Pure-asm screen locker for the CHasm desktop suite (x86_64 NASM, no libc).
+
+%prep
+%autosetup -C
+
+%build
+%make_build NASM="nasm -g" LD="%{__cc} -nostdlib -fuse-ld=mold -Wl,-z,muldefs %build_ldflags" CFLAGS="%build_cflags"
+
+%install
+%make_install PREFIX=%{_prefix}
+
+%files
+%doc README.md
+%license UNLICENSE
+%{_bindir}/bolt
+%attr(4755, root, root) %{_bindir}/bolt-auth
+
+%changelog
+* Sun Jul 26 2026 Owen Zimmerman <owen@fyralabs.com> - 0.2.0-1
+- Initial commit
diff --git a/anda/desktops/chasm/bolt-screen-locker/update.rhai b/anda/desktops/chasm/bolt-screen-locker/update.rhai
new file mode 100644
index 00000000000..d855eb8d221
--- /dev/null
+++ b/anda/desktops/chasm/bolt-screen-locker/update.rhai
@@ -0,0 +1 @@
+rpm.version(gh_tag("isene/bolt"));