ruby_everywhere 0.1.7 → 0.1.9

data/lib/everywhere/update_manifest.rb

@@ -0,0 +1,115 @@
+# frozen_string_literal: true
+
+require "json"
+require "time"
+
+module Everywhere
+  # The update-feed contract: bucket key layout + latest.json / index.json
+  # bodies. This is THE interface between `every publish`, the shell's Rust
+  # updater, and the Platform's release publishing — all three speak exactly
+  # these shapes, so keep changes here schema-versioned and additive.
+  #
+  # Layout (channel is a *release channel* — stable/beta — never the receipt's
+  # distribution_channel):
+  #
+  #   {prefix?}/{channel}/{os}/{arch}/
+  #     latest.json            mutable pointer, written last, Cache-Control: no-cache
+  #     index.json             append-only publish history (rollback + stats source)
+  #     My-App-1.2.0.zip       immutable + .minisig sibling
+  #     My-App-latest.zip      convenience alias (CopyObject) for download links
+  #
+  # The shell only ever does:
+  #   GET {updates.url}/{channel}/{os}/{arch}/latest.json?current={version}
+  # — a raw bucket/CDN or a dynamic Platform endpoint serve the identical JSON.
+  module UpdateManifest
+    SCHEMA = 1
+
+    IMMUTABLE_CACHE = "public, max-age=31536000, immutable"
+    MUTABLE_CACHE = "no-cache"
+
+    module_function
+
+    def dir(channel:, os:, arch:, prefix: nil)
+      [prefix, channel, os, arch].compact.reject(&:empty?).join("/")
+    end
+
+    def artifact_key(filename, **loc) = "#{dir(**loc)}/#{filename}"
+    def latest_key(**loc)             = "#{dir(**loc)}/latest.json"
+    def index_key(**loc)              = "#{dir(**loc)}/index.json"
+
+    # Where images embedded in release notes live: channel-scoped (shared by
+    # every os/arch target of the release), versioned so they're immutable and
+    # rollback-safe. notes_html rewrites embedded images to these URLs at
+    # publish time — signed/expiring storage URLs must never leak into a feed.
+    def notes_asset_key(filename, channel:, version:, prefix: nil)
+      "#{[ prefix, channel ].compact.reject(&:empty?).join("/")}/notes/#{version}/#{filename}"
+    end
+
+    # "My-App-1.2.0.zip" -> "My-App-latest.zip" (keeps the extension).
+    def latest_alias(filename, version)
+      aliased = filename.sub("-#{version}", "-latest")
+      aliased == filename ? nil : aliased
+    end
+
+    # One latest.json body (also an index.json entry), built from a build
+    # receipt (dist/release.json) + publish-time facts.
+    #
+    # Release notes ship in two forms: `notes` is the human-authored source
+    # (markdown; plain text is valid markdown), `notes_html` is pre-rendered
+    # sanitized-by-construction HTML the app can inject straight into a
+    # changelog modal via the bridge. Pass notes_html explicitly to override
+    # the default markdown rendering (the Platform does — its notes are
+    # authored rich).
+    def entry(receipt:, url:, signature:, channel:, notes: nil, notes_html: nil, published_at: Time.now.utc)
+      artifact = receipt.fetch("artifact")
+      sha256 = artifact.fetch("checksum").to_s.delete_prefix("sha256:")
+      notes_html ||= render_notes_html(notes)
+
+      {
+        "schema" => SCHEMA,
+        "app" => {
+          "name" => receipt.dig("app", "name"),
+          "bundle_id" => receipt.dig("app", "bundle_id")
+        },
+        "channel" => channel,
+        "os" => receipt.dig("target", "os"),
+        "arch" => receipt.dig("target", "arch"),
+        "version" => receipt.dig("app", "version"),
+        "published_at" => published_at.iso8601,
+        "notes" => notes,
+        "notes_html" => notes_html,
+        "url" => url,
+        "sha256" => sha256,
+        "size_bytes" => artifact.fetch("size_bytes"),
+        "signature" => signature,
+        "manifest_checksum" => receipt["manifest_checksum"]
+      }.compact
+    end
+
+    # index.json: append-only history, newest first. Re-publishing the same
+    # version replaces its entry (idempotent re-runs don't duplicate).
+    def index_append(existing_json, entry)
+      entries = existing_json ? JSON.parse(existing_json).fetch("entries", []) : []
+      entries = entries.reject { |e| e["version"] == entry["version"] }
+      JSON.pretty_generate({ "schema" => SCHEMA, "entries" => [entry] + entries }) << "\n"
+    end
+
+    def index_find(index_json, version)
+      return nil unless index_json
+
+      JSON.parse(index_json).fetch("entries", []).find { |e| e["version"] == version }
+    end
+
+    def to_json(entry) = JSON.pretty_generate(entry) << "\n"
+
+    # Markdown -> HTML for notes_html. Kramdown with GFM-ish niceties off the
+    # shelf; raw HTML in the source passes through (the feed is the app
+    # developer's own signed content — same trust as the artifact itself).
+    def render_notes_html(notes)
+      return nil if notes.nil? || notes.strip.empty?
+
+      require "kramdown"
+      Kramdown::Document.new(notes, auto_ids: false, entity_output: :as_char).to_html.strip
+    end
+  end
+end

data/lib/everywhere/version.rb

@@ -1,11 +1,11 @@
 # frozen_string_literal: true
 
 module Everywhere
-  VERSION = "0.1.7"
+  VERSION = "0.1.9"
 
   # Version of the vendored @rubyeverywhere/bridge JS this gem ships. Tracks
   # bridge/package.json — bump it whenever lib/everywhere/javascript/bridge.js is
   # refreshed. `every install` stamps it into the vendored file so the build
   # receipt can record which bridge shipped; it versions independently of the CLI.
-  BRIDGE_VERSION = "0.1.0"
+  BRIDGE_VERSION = "0.3.0"
 end

data/support/shell/src-tauri/Cargo.lock

@@ -991,17 +991,21 @@ dependencies = [
 
 [[package]]
 name = "example-shell"
-version = "0.1.0"
+version = "0.2.0"
 dependencies = [
+ "minisign-verify",
  "objc2",
  "objc2-foundation",
  "objc2-web-kit",
+ "semver",
  "serde_json",
+ "sha2",
  "tauri",
  "tauri-build",
  "tauri-plugin-clipboard-manager",
  "tauri-plugin-dialog",
  "tauri-plugin-notification",
+ "ureq",
 ]
 
 [[package]]
@@ -2087,6 +2091,12 @@ version = "0.3.17"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a"
 
+[[package]]
+name = "minisign-verify"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "22f9645cb765ea72b8111f36c522475d2daa0d22c957a9826437e97534bc4e9e"
+
 [[package]]
 name = "miniz_oxide"
 version = "0.8.9"
@@ -2986,6 +2996,20 @@ dependencies = [
  "windows-sys 0.60.2",
 ]
 
+[[package]]
+name = "ring"
+version = "0.17.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7"
+dependencies = [
+ "cc",
+ "cfg-if",
+ "getrandom 0.2.17",
+ "libc",
+ "untrusted",
+ "windows-sys 0.52.0",
+]
+
 [[package]]
 name = "rustc-hash"
 version = "2.1.3"
@@ -3014,6 +3038,41 @@ dependencies = [
  "windows-sys 0.61.2",
 ]
 
+[[package]]
+name = "rustls"
+version = "0.23.42"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3c54fcab019b409d04215d3a17cb438fd7fbf192ee61461f20f4fe18704bc138"
+dependencies = [
+ "log",
+ "once_cell",
+ "ring",
+ "rustls-pki-types",
+ "rustls-webpki",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-pki-types"
+version = "1.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "764899a24af3980067ee14bc143654f297b22eaebfe3c7b6b211920a5a59b046"
+dependencies = [
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-webpki"
+version = "0.103.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e"
+dependencies = [
+ "ring",
+ "rustls-pki-types",
+ "untrusted",
+]
+
 [[package]]
 name = "rustversion"
 version = "1.0.23"
@@ -3418,6 +3477,12 @@ version = "0.11.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
 
+[[package]]
+name = "subtle"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
+
 [[package]]
 name = "swift-rs"
 version = "1.0.7"
@@ -4326,6 +4391,30 @@ version = "1.13.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c6f5d3c3b1bf09027a88a6bc961fc00497d651009560b5463668dc81b0fa87a8"
 
+[[package]]
+name = "untrusted"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
+
+[[package]]
+name = "ureq"
+version = "2.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "02d1a66277ed75f640d608235660df48c8e3c19f3b4edb6a263315626cc3c01d"
+dependencies = [
+ "base64 0.22.1",
+ "flate2",
+ "log",
+ "once_cell",
+ "rustls",
+ "rustls-pki-types",
+ "serde",
+ "serde_json",
+ "url",
+ "webpki-roots 0.26.11",
+]
+
 [[package]]
 name = "url"
 version = "2.5.8"
@@ -4639,6 +4728,24 @@ dependencies = [
  "system-deps",
 ]
 
+[[package]]
+name = "webpki-roots"
+version = "0.26.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "521bc38abb08001b01866da9f51eb7c5d647a19260e00054a8c7fd5f9e57f7a9"
+dependencies = [
+ "webpki-roots 1.0.9",
+]
+
+[[package]]
+name = "webpki-roots"
+version = "1.0.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7dcd9d09a39985f5344844e66b0c530a33843579125f23e21e9f0f220850f22a"
+dependencies = [
+ "rustls-pki-types",
+]
+
 [[package]]
 name = "webview2-com"
 version = "0.38.2"
@@ -4875,6 +4982,15 @@ dependencies = [
  "windows-targets 0.42.2",
 ]
 
+[[package]]
+name = "windows-sys"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
 [[package]]
 name = "windows-sys"
 version = "0.59.0"
@@ -5377,6 +5493,12 @@ dependencies = [
  "synstructure",
 ]
 
+[[package]]
+name = "zeroize"
+version = "1.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e13c156562582aa81c60cb29407084cdb54c4164760106ab78e6c5b0858cf64e"
+
 [[package]]
 name = "zerotrie"
 version = "0.2.4"

data/support/shell/src-tauri/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "example-shell"
-version = "0.1.0"
+version = "0.2.0"
 description = "Generic desktop shell: boots a packaged Rails app as a sidecar and shows it in a webview"
 edition = "2021"
 
@@ -13,6 +13,12 @@ serde_json = "1"
 tauri-plugin-notification = "2"
 tauri-plugin-dialog = "2"
 tauri-plugin-clipboard-manager = "2"
+# Self-updater (src/updater.rs): blocking HTTP fits the shell's plain-thread
+# style; minisign-verify is the zero-dep verifier for our publish signatures.
+ureq = { version = "2", features = ["json"] }
+semver = "1"
+sha2 = "0.10"
+minisign-verify = "0.2"
 
 # macOS: set the WebView's `applicationNameForUserAgent`, which WKWebView
 # natively APPENDS to its real default UA — so we get the true system UA plus

data/support/shell/src-tauri/src/main.rs

@@ -19,6 +19,8 @@ use std::time::{Duration, Instant};
 
 use tauri::{Manager, RunEvent, WebviewUrl, WebviewWindowBuilder};
 
+mod updater;
+
 struct Sidecar(Mutex<Option<Child>>);
 
 struct MenuEntry {
@@ -141,6 +143,16 @@ fn main() {
         .plugin(tauri_plugin_clipboard_manager::init())
         .invoke_handler(tauri::generate_handler![notify_command])
         .setup(move |app| {
+            // A persisted user channel choice (Everywhere.updates.setChannel)
+            // overrides everywhere.yml's updates.channel. Fold it in before
+            // anything reads raw_json — the updater, the menu, and the
+            // __EVERYWHERE_CONFIG__ page injection all see the same channel.
+            let mut config = config;
+            if let Ok(mut value) = serde_json::from_str::<serde_json::Value>(&config.raw_json) {
+                updater::apply_channel_override(app.handle(), &mut value);
+                config.raw_json = value.to_string();
+            }
+
             // Bridge channel: pages emit events (the sanctioned webview->shell
             // path for remote-origin content in Tauri v2; invoke is reserved
             // for local content). Fire-and-forget, Strada-style.
@@ -158,6 +170,7 @@ fn main() {
                 });
             }
             build_menu(app, &config)?;
+            updater::init(app, &config.raw_json);
 
             // Dev mode (`every dev`): no sidecar, just point the webview at the
             // developer's normal dev server.
@@ -295,6 +308,9 @@ fn main() {
         .expect("error while building tauri application")
         .run(|app, event| {
             if let RunEvent::Exit = event {
+                // A fully staged silent update (updates.auto: install) swaps
+                // in now — two renames, no perceptible quit latency.
+                updater::install_pending_on_exit(app);
                 // No sidecar state in dev mode (NATIVE_DEV_URL).
                 if let Some(sidecar) = app.try_state::<Sidecar>() {
                     if let Some(mut child) = sidecar.0.lock().unwrap().take() {
@@ -332,6 +348,11 @@ fn build_menu(app: &tauri::App, config: &AppConfig) -> tauri::Result<()> {
         .name(Some(config.name.clone()))
         .build();
     let mut app_menu = SubmenuBuilder::new(app, &config.name).about(Some(about));
+    if updater::enabled(&config.raw_json) {
+        app_menu = app_menu.separator().item(
+            &MenuItemBuilder::with_id("update-check", "Check for Updates…").build(app)?,
+        );
+    }
     if !config.menu.is_empty() {
         app_menu = app_menu.separator();
         for entry in &config.menu {
@@ -406,6 +427,11 @@ fn handle_menu_id(app: &tauri::AppHandle, id: &str) {
     match id {
         "quit" => app.exit(0),
         "show" => focus_main(app),
+        // Blocking dialogs + network — never on the main thread.
+        "update-check" => {
+            let handle = app.clone();
+            std::thread::spawn(move || updater::interactive_check(&handle));
+        }
         "reload" => {
             if let Some(w) = app.get_webview_window("main") {
                 let _ = w.eval("location.reload()");