ruby_everywhere 0.12.0 → 0.13.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2d7635a3c08d751d6941f39975c28a1582a80b2190fb7da09403bfe6e4537136
-  data.tar.gz: 03d515b70b0ced051c159ec1010c0a20addbe61024c1fb23694beab7e8bd1ca6
+  metadata.gz: 0afe4b448a6f964a0b013d31762aac332b71682717c04d25194271d9d1c92b67
+  data.tar.gz: '039d951d08c4d3be2d8a22c4de5a862d5dc1ca9635b978f989d4ba56807da148'
 SHA512:
-  metadata.gz: 8f5683963a2de224a6810f0489b768c0160077c8e70fc2edb3bb9bdf3df8049262d5d4ed882d764f48fc033d690a6d61c0a16639f81d42dc961a1eae62e7ffb8
-  data.tar.gz: ab10fdb4f6d80662325f942ae1b53f8bad702cd324db71fca7421094cc9bfaf3625398abda78f4b03ee2790d04056d447a5b5fe364b73ee233e4414fa8986f85
+  metadata.gz: 2656b49706209ee27c7aeb0410ea9ebff73ee833f58df43b9d51ceb2049b2e7540436b561e4a301fa89e6afb87c48056d1b0556598982cfaafb4367be55f8266
+  data.tar.gz: aca89fa867ba1aa8a1053e0d2324e358a02d9dd94e19129d984ca593e9598d3f031c91d95077b037fcb86a3a11d04535a0b70695f4eb3443ea7548f825617d83

data/README.md

@@ -324,11 +324,13 @@ the middle:
 ```sh
 every updates keygen                  # once, per app
 every release                         # build, sign, notarize, staple
-every publish --notes-file NOTES.md   # sign the manifest, upload, flip latest.json
+every publish --notes-file NOTES.md   # sign the artifact, upload, flip latest.json
 ```
 
-The public key ships in the app; the secret key never leaves your machine. Apps
-can check, install, and switch channels at runtime via `Everywhere.updates`.
+`every publish` signs the artifact and publishes that signature in the update
+manifest, which the app checks the download against before installing. The
+public key ships in the app; the secret key never leaves your machine. Apps can
+check, install, and switch channels at runtime via `Everywhere.updates`.
 
 ## Hosted builds
 

data/lib/everywhere/commands/build.rb

@@ -41,6 +41,28 @@ module Everywhere
 
       ANDROID_FORMATS = %w[apk aab].freeze
 
+      # Valid --channel per target os — the pairing the Platform accepts, minus
+      # nothing: macOS has no store channel (every macOS release signs with
+      # Developer ID and notarizes regardless), iOS `direct` exports an .ipa
+      # without the App Store Connect upload, and Android's `play` selects the
+      # .aab path even though the Play upload itself happens platform-side.
+      CHANNELS = {
+        "macos"   => %w[direct],
+        "ios"     => %w[direct testflight app_store],
+        "android" => %w[direct play]
+      }.freeze
+
+      # An os/channel pair nothing implements has to be refused before the
+      # build runs — it used to land in the receipt, where the only thing
+      # reading it (a store upload, a Platform distributor) has no idea what
+      # it means. Unknown os falls through: builder dispatch owns that error.
+      def self.check_channel!(os, channel)
+        allowed = CHANNELS[os] || return
+        return if allowed.include?(channel)
+
+        UI.die!("unsupported --channel #{channel} for #{os} — one of #{allowed.join(", ")}")
+      end
+
       desc "Package the app natively — desktop (tebako press + shell + .app), iOS (--ios) or Android (--android)"
 
       option :root,       default: ".",              desc: "App root directory"
@@ -52,7 +74,7 @@ module Everywhere
       option :shell_dir,  default: nil,              desc: "Path to the shell's src-tauri directory"
       option :template_dir, default: nil,             desc: "Path to the mobile shell template (iOS/Android)"
       option :format,     default: nil,               desc: "Android artifact format (#{ANDROID_FORMATS.join(" | ")}), default: apk"
-      option :channel,    default: "direct",          desc: "Distribution channel (direct | testflight | app_store | ...)"
+      option :channel,    default: "direct",          desc: "Distribution channel (#{CHANNELS.map { |os, chs| "#{os}: #{chs.join("|")}" }.join(" · ")})"
       option :ios,        type: :boolean, default: false, desc: "Build the iOS shell (shorthand for --target #{IOS_TARGET})"
       option :android,    type: :boolean, default: false, desc: "Build the Android shell (shorthand for --target #{ANDROID_TARGET})"
       option :device,     type: :boolean, default: false, desc: "iOS: archive and export a device .ipa instead of a simulator .app"
@@ -62,6 +84,7 @@ module Everywhere
                app_name: nil, target: nil, shell_dir: nil, template_dir: nil, format: nil,
                channel: "direct", ios: false, android: false, device: false, skip_press: false, **)
         target = resolve_target(target, ios: ios, android: android)
+        self.class.check_channel!(Everywhere::Config.os_of(target), channel)
         root_path = File.expand_path(root)
         config = Everywhere::Config.load(root_path)
 
@@ -70,11 +93,7 @@ module Everywhere
         identity_errors = config.identity_errors
         UI.die!("app: in config/everywhere.yml:\n#{identity_errors.join("\n")}") unless identity_errors.empty?
 
-        # Baked into the shell here, so this is the last moment an unusable
-        # feed URL can still be a message instead of a shipped app that never
-        # updates.
-        updates_errors = config.updates_errors
-        UI.die!("updates: in config/everywhere.yml:\n#{updates_errors.join("\n")}") unless updates_errors.empty?
+        check_updates!(config)
 
         # Builder dispatch on the target's os (build-engine.md §5): macOS is
         # the tebako+tauri path below; the mobile targets are Hotwire Native
@@ -150,6 +169,17 @@ module Everywhere
 
       private
 
+      # The `updates:` section is baked into the shell during this build, so
+      # this is the last moment an unusable feed URL — or a missing signing key,
+      # which turns the updater off without failing anything — can still be a
+      # message instead of a shipped app that never updates. Once per build:
+      # every target stamps everywhere.json from the same config.
+      def check_updates!(config)
+        errors = config.updates_errors
+        UI.die!("updates: in config/everywhere.yml:\n#{errors.join("\n")}") unless errors.empty?
+        config.updates_warnings.each { |warning| UI.warn(warning) }
+      end
+
       # `--ios` is the shorthand `every dev` already has; --target stays the
       # general escape hatch. Both given is only an error when they disagree —
       # `--ios --target ios-arm64` is redundant, not wrong.

data/lib/everywhere/commands/release.rb

@@ -33,7 +33,7 @@ module Everywhere
 
       option :root,       default: ".",              desc: "App root directory"
       option :target,     default: Build::DEFAULT_TARGET, desc: "Build target (os-arch)"
-      option :channel,    default: "direct",         desc: "Distribution channel (direct | mac_app_store | ...)"
+      option :channel,    default: "direct",         desc: "Distribution channel (#{Build::CHANNELS.map { |os, chs| "#{os}: #{chs.join("|")}" }.join(" · ")})"
       option :ruby,       default: nil,              desc: "Ruby version to package (default: build.ruby or 4.0.6)"
       option :entry,      default: "native_boot.rb", desc: "Entry point script relative to root"
       option :app_name,   default: nil,              desc: "Bundle name (default from config)"
@@ -50,7 +50,7 @@ module Everywhere
         ruby ||= config.build_ruby || "4.0.6"
         os = Everywhere::Config.os_of(target)
 
-        preflight!(target, os)
+        preflight!(target, os, channel)
 
         framework = config.remote? ? nil : Framework.detect(root_path)
         dist_dir = File.expand_path("dist", root_path)
@@ -82,7 +82,7 @@ module Everywhere
 
       private
 
-      def preflight!(target, os)
+      def preflight!(target, os, channel)
         case os
         when "macos"
           UI.die!("`every release --target #{target}` runs on macOS only") unless Host.darwin?
@@ -94,6 +94,10 @@ module Everywhere
         else
           UI.die!("no release builder for #{target} — macos-*, ios-* and android-* are supported")
         end
+
+        # After the os check: the channel table is keyed by os, so an unknown
+        # target has to die on the missing builder, not a nil channel list.
+        Build.check_channel!(os, channel)
       end
 
 

data/lib/everywhere/config/updates.rb

@@ -44,6 +44,16 @@ module Everywhere
         ["updates.url #{url.inspect} is not a URL (#{e.message})"]
       end
 
+      # Not an error — no `updates:` at all is a perfectly good app — but a feed
+      # URL without a key drops #updates_shell_hash to nil, so the app ships
+      # looking configured with the updater off.
+      def updates_warnings
+        return [] unless updates_url && updates_public_key.to_s.empty?
+
+        ["updates.url is set but updates.public_key is missing — the updater will be disabled " \
+         "in this build; run `every updates keygen`"]
+      end
+
       # The client subset for the shell; nil (and thus absent from
       # everywhere.json) until both url and public_key are configured — an
       # unsigned update feed is not a thing.

data/lib/everywhere/version.rb

@@ -3,7 +3,7 @@
 require "json"
 
 module Everywhere
-  VERSION = "0.12.0"
+  VERSION = "0.13.0"
 
   # Version of the @rubyeverywhere/bridge JS this gem ships. bridge/ in the
   # gem IS the npm package (served to Rails apps by Everywhere::Engine,

data/support/desktop/src-tauri/src/updater.rs

@@ -480,7 +480,7 @@ fn verify_signature(path: &Path, signature: &str, public_key: &str) -> Result<()
     let pk = minisign_verify::PublicKey::from_base64(public_key)
         .map_err(|e| format!("bad updates.public_key: {e}"))?;
     let sig = minisign_verify::Signature::decode(signature)
-        .map_err(|e| format!("bad manifest signature: {e}"))?;
+        .map_err(|e| format!("unreadable artifact signature: {e}"))?;
     let data = std::fs::read(path).map_err(|e| e.to_string())?;
     pk.verify(&data, &sig, false)
         .map_err(|_| "signature verification FAILED — artifact does not match the app's signing key".to_string())

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ruby_everywhere
 version: !ruby/object:Gem::Version
-  version: 0.12.0
+  version: 0.13.0
 platform: ruby
 authors:
 - Andrea Fomera