fix(build): add missing import and error handling for hole-punch in build

- Add missing 'import { processBinary }' in build.ts (would have caused
  ReferenceError at runtime).
- Wrap parseIcuToc/holePunch in try-catch inside processBinary so an
  unexpected ICU layout skips hole-punch gracefully instead of crashing
  the build.

Author: BYK

script/build.ts

@@ -24,6 +24,7 @@ import { promisify } from "node:util";
 import { gzip } from "node:zlib";
 import { $ } from "bun";
 import pkg from "../package.json";
+import { processBinary } from "./hole-punch.js";
 
 const gzipAsync = promisify(gzip);
 
@@ -100,7 +101,6 @@ async function buildTarget(target: BuildTarget): Promise<boolean> {
 
   // Hole-punch: zero unused ICU data entries so they compress to nearly nothing.
   // Must run before gzip so the compressed output benefits from zeroed regions.
-  // biome-ignore lint/correctness/noUndeclaredVariables: resolved at runtime via ./hole-punch.ts
   const hpStats = processBinary(outfile);
   if (hpStats && hpStats.removedEntries > 0) {
     console.log(

script/hole-punch.ts

@@ -370,7 +370,11 @@ function holePunch(buf: Buffer, scan: IcuScanResult): HolePunchStats {
 /**
  * Process a single binary file: find ICU data, zero unused entries, write back.
  *
- * @returns Hole-punch statistics, or null if no ICU data was found
+ * Returns null (rather than throwing) when the binary has no ICU data or
+ * when the ICU blob has an unexpected layout, so callers like the build
+ * script can skip hole-punch gracefully instead of crashing.
+ *
+ * @returns Hole-punch statistics, or null if no ICU data was found/parseable
  */
 function processBinary(filePath: string): HolePunchStats | null {
   const buf = readFileSync(filePath);
@@ -380,11 +384,17 @@ function processBinary(filePath: string): HolePunchStats | null {
     return null;
   }
 
-  const scan = parseIcuToc(buf, blobOffset);
-  const stats = holePunch(buf, scan);
+  try {
+    const scan = parseIcuToc(buf, blobOffset);
+    const stats = holePunch(buf, scan);
 
-  writeFileSync(filePath, buf);
-  return stats;
+    writeFileSync(filePath, buf);
+    return stats;
+  } catch {
+    // ICU blob matched the magic bytes but has an unexpected layout
+    // (e.g., entry count out of range). Skip instead of crashing.
+    return null;
+  }
 }
 
 /** Format bytes as a human-readable string */