fix(windows): correct wasm-tools download URL for Windows

Windows releases of wasm-tools use .zip format, not .tar.gz format.
This was causing 404 errors when trying to download wasm-tools on Windows.

Changes:
- Update wasm-tools.json: Change url_suffix from .tar.gz to .zip for all Windows entries
- Update checksums to match actual Windows .zip files:
  - v1.235.0: ecf9f2064c2096df134c39c2c97af2c025e974cc32e3c76eb2609156c1690a74 (unchanged)
  - v1.239.0: 039b1eaa170563f762355a23c5ee709790199433e35e5364008521523e9e3398 (updated)
  - v1.240.0: 81f012832e80fe09d384d86bb961d4779f6372a35fa965cc64efe318001ab27e (updated)
- Update _download_wasm_tools() to handle both .zip and .tar.gz archives

Fixes: bytecodealliance/wasm-tools Windows download errors in BCR CI

Author: avrabe

checksums/registry.bzl

@@ -1,15 +1,27 @@
 """Centralized checksum registry API for WebAssembly toolchain
 
-This module provides a unified API for accessing tool checksums. Checksum data is
-embedded in this file and kept synchronized with checksums/tools/*.json files, which
-serve as the canonical source for checksum updater tools and external documentation.
-
-The embedded approach is used because Bazel rules don't have built-in JSON parsing
-capabilities, making direct JSON loading impractical in the build system.
+This module provides a unified API for accessing tool checksums from JSON files.
 """
 
+def _load_tool_checksums_from_json(repository_ctx, tool_name):
+    """Load checksums for a tool from JSON file
+
+    Args:
+        repository_ctx: Repository context for file operations
+        tool_name: Name of the tool (e.g., 'wasm-tools', 'wit-bindgen')
+
+    Returns:
+        Dict: Tool data from JSON file, or None if file not found
+    """
+    json_file = repository_ctx.path(Label("@rules_wasm_component//checksums/tools:{}.json".format(tool_name)))
+    if not json_file.exists:
+        return None
+
+    content = repository_ctx.read(json_file)
+    return json.decode(content)
+
 def _load_tool_checksums(tool_name):
-    """Load checksums for a tool from embedded registry data
+    """Load checksums for a tool from embedded fallback data
 
     Args:
         tool_name: Name of the tool (e.g., 'wasm-tools', 'wit-bindgen')
@@ -18,10 +30,8 @@ def _load_tool_checksums(tool_name):
         Dict: Tool data from embedded registry, or empty dict if not found
 
     Note:
-        This function uses embedded data rather than JSON file loading because
-        Bazel rules don't have built-in JSON parsing capabilities. The embedded
-        data is kept synchronized with checksums/tools/*.json files, which serve
-        as the canonical source for checksum updater tools and documentation.
+        This is fallback data for non-repository contexts.
+        Use _load_tool_checksums_from_json() in repository rules for up-to-date data.
     """
 
     tool_data = _get_fallback_checksums(tool_name)
@@ -61,7 +71,7 @@ def _get_fallback_checksums(tool_name):
                         },
                         "windows_amd64": {
                             "sha256": "ecf9f2064c2096df134c39c2c97af2c025e974cc32e3c76eb2609156c1690a74",
-                            "url_suffix": "x86_64-windows.tar.gz",
+                            "url_suffix": "x86_64-windows.zip",
                         },
                     },
                 },
@@ -106,8 +116,8 @@ def _get_fallback_checksums(tool_name):
                             "url_suffix": "aarch64-linux.tar.gz",
                         },
                         "windows_amd64": {
-                            "sha256": "0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5",
-                            "url_suffix": "x86_64-windows.tar.gz",
+                            "sha256": "039b1eaa170563f762355a23c5ee709790199433e35e5364008521523e9e3398",
+                            "url_suffix": "x86_64-windows.zip",
                         },
                     },
                 },
@@ -131,8 +141,8 @@ def _get_fallback_checksums(tool_name):
                             "url_suffix": "aarch64-linux.tar.gz",
                         },
                         "windows_amd64": {
-                            "sha256": "0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5",
-                            "url_suffix": "x86_64-windows.tar.gz",
+                            "sha256": "81f012832e80fe09d384d86bb961d4779f6372a35fa965cc64efe318001ab27e",
+                            "url_suffix": "x86_64-windows.zip",
                         },
                     },
                 },

checksums/tools/wasm-tools.json

@@ -16,7 +16,7 @@
       "platforms": {
         "windows_amd64": {
           "sha256": "ecf9f2064c2096df134c39c2c97af2c025e974cc32e3c76eb2609156c1690a74",
-          "url_suffix": "x86_64-windows.tar.gz"
+          "url_suffix": "x86_64-windows.zip"
         },
         "linux_arm64": {
           "sha256": "384ca3691502116fb6f48951ad42bd0f01f9bf799111014913ce15f4f4dde5a2",
@@ -77,8 +77,8 @@
           "url_suffix": "aarch64-linux.tar.gz"
         },
         "windows_amd64": {
-          "sha256": "0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5",
-          "url_suffix": "x86_64-windows.tar.gz"
+          "sha256": "039b1eaa170563f762355a23c5ee709790199433e35e5364008521523e9e3398",
+          "url_suffix": "x86_64-windows.zip"
         }
       }
     },
@@ -102,8 +102,8 @@
           "url_suffix": "aarch64-linux.tar.gz"
         },
         "windows_amd64": {
-          "sha256": "0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5",
-          "url_suffix": "x86_64-windows.tar.gz"
+          "sha256": "81f012832e80fe09d384d86bb961d4779f6372a35fa965cc64efe318001ab27e",
+          "url_suffix": "x86_64-windows.zip"
         }
       }
     }

toolchains/wasm_toolchain.bzl

@@ -487,11 +487,18 @@ def _download_wasm_tools(repository_ctx):
         platform_info.url_suffix,
     )
 
-    # Download and extract tarball, letting Bazel handle the structure
+    # Determine stripPrefix based on archive format
+    # Windows uses .zip, others use .tar.gz
+    if platform_info.url_suffix.endswith(".zip"):
+        strip_prefix = "wasm-tools-{}-{}".format(version, platform_info.url_suffix.replace(".zip", ""))
+    else:
+        strip_prefix = "wasm-tools-{}-{}".format(version, platform_info.url_suffix.replace(".tar.gz", ""))
+
+    # Download and extract archive, letting Bazel handle the structure
     repository_ctx.download_and_extract(
         url = wasm_tools_url,
         sha256 = platform_info.sha256,
-        stripPrefix = "wasm-tools-{}-{}".format(version, platform_info.url_suffix.replace(".tar.gz", "")),
+        stripPrefix = strip_prefix,
     )
 
 def _download_wac(repository_ctx):