tebako-release 0.3.0 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: da808fc0759260d4b29d60ffb1d51622cb07c3f8cf3125b4ea01025f1db4f927
-  data.tar.gz: 8d21389348ae2bb086aaf17f3901f386e62598be12bee027e653b76b361e8d1b
+  metadata.gz: 6e91116fb240ffb5e0cb7cec20a1753fbd4177b7bd8f3c78adb8c3e260acf718
+  data.tar.gz: c5c886163f60c1ef021829015d95a1f3c50b6fc239a22a39cb890324041353d1
 SHA512:
-  metadata.gz: d73130a2cbd8d1de0df2bb1cf1d801bfe260db9b5569cc04e736eca3324d945576cf8ee9c13c22eb31000872e9229cfb5931c553a491e72188bf58d793206cba
-  data.tar.gz: c111f4d684714a0b03fbc92891b9e2f6640f8cc05369b77870e73bc04f34847367692c89cbaf06c48138fbf8d6172fe675c4124add72be2da7ba8c2bcd674915
+  metadata.gz: 78d61711350a83bc076b26472fab4b468e68368ca6f16f9f4c7bb613149d0a7c9be68821e6646e7469958e24424f59b3b88afd3d45c7b1f01db0b806550d9c69
+  data.tar.gz: 44d1ee55d6bf22f2aa8d6dfdacaa27f26a77170faa2d26a45669425879d6b5ece851d0d5e1072855c6f9fa6a7b2269578f1b112a0d62b34fecf2510bd82fa6a8

data/README.md

@@ -23,7 +23,12 @@ through a small adapter file and pin this gem — they never carry copies.
   in-bundle SHA256SUMS; fixed member order, mtime=0 — identical inputs
   yield identical bytes). A factory opts into the bundle-era publish shape
   through its adapter (`bundle_publish? → true`); the per-file shape stays
-  the default for pre-bundle lines.
+  the default for pre-bundle lines. Bundle-era lines whose consumers
+  include the lazy arm additionally opt into co-publish
+  (`per_file_alongside_bundle? → true`, spec 36 §3): the staged members
+  are served as standalone assets beside the bundle, the shard carries
+  the `per_file_assets` witness (runtime-manifest MINOR 2), the facet
+  signature declarations return, and the audit expects the union.
 - **`TebakoRelease::Blksum`** — the spec 39 §3 block-group digest sidecar
   (`<image>.blksum.json`: one sha256 per 4 MiB group of env-image bytes,
   the lazy mount's range-GET trust anchor). The uploader derives it

data/lib/tebako_release/adapter.rb

@@ -55,5 +55,18 @@ module TebakoRelease
     def bundle_publish?
       false
     end
+
+    # Spec 36 §3's co-publish: when true (and bundle_publish? holds), each
+    # leg ALSO serves the per-file assets — the exe under its historical
+    # spelling, the env image, the windows DLL — as standalone release
+    # assets beside the bundle, each with its .sha256 sidecar. The lazy
+    # arm (spec 39 §7) range-fetches the image's groups over HTTP, which
+    # is impossible inside the gzip stream; the shard gains the additive
+    # per_file_assets witness (runtime-manifest MINOR 2) that gates the
+    # loaders' lazy arm on bundle-declaring shards. Default off: a
+    # factory opts in when its consumers include the lazy arm.
+    def per_file_alongside_bundle?
+      false
+    end
   end
 end

data/lib/tebako_release/uploader.rb

@@ -437,7 +437,7 @@ module TebakoRelease
       nil
     end
 
-    def manifest_entry(package, image = nil, dll = nil, bundle: nil) # rubocop:disable Metrics/AbcSize, Metrics/MethodLength
+    def manifest_entry(package, image = nil, dll = nil, bundle: nil) # rubocop:disable Metrics/AbcSize, Metrics/MethodLength, Metrics/CyclomaticComplexity
       runtime_version, platform = parse_package_filename(package.basename.to_s)
       contract = contract_sidecar(package)
       filename = package.basename.to_s
@@ -470,6 +470,11 @@ module TebakoRelease
         entry[:image] = image_entry(image, blksum) if image
         entry[:dll] = dll_entry(dll, runtime_version, platform) if dll
         entry[:bundle] = bundle_entry(bundle) if bundle
+        # Spec 36 §3's co-publish witness (runtime-manifest MINOR 2):
+        # true declares the per-file assets are served standalone beside
+        # the bundle — the lazy arm's gate on bundle-declaring shards
+        # (spec 39 §7). Never emitted on bundle-only lines.
+        entry[:per_file_assets] = true if bundle && copublish?
         declare_signatures(entry)
       end
     end
@@ -530,7 +535,13 @@ module TebakoRelease
       return unless signing_enabled?
 
       keyid = signing_keyid
-      return declare_bundle_signature(entry, keyid) if entry[:bundle]
+      declare_bundle_signature(entry, keyid) if entry[:bundle]
+      # Bundle-only lines serve no other payload asset — declaring the
+      # members' .ascs there would be an invalid signing state (spec 09
+      # §4). A co-published line (spec 36 §3, the shard's per_file_assets
+      # witness) serves the members standalone, so the every-served-name
+      # rule covers the exe/image/dll set again.
+      return if entry[:bundle] && !entry[:per_file_assets]
 
       entry[:signature] = { keyid: keyid, asc: "#{entry[:filename]}.asc" }
       %i[image dll].each do |facet|
@@ -539,10 +550,10 @@ module TebakoRelease
       end
     end
 
-    # Bundle-era (spec 36 §3): the only served payload is the bundle —
-    # three signatures per leg (bundle, its sidecar, the shard). The
-    # exe/image/dll member pins are NOT served assets; declaring their
-    # .asc would be an invalid signing state (spec 09 §4).
+    # Bundle-era (spec 36 §3): the bundle's own signature declaration.
+    # On bundle-only lines it is the ONLY payload signature — three
+    # signatures per leg (bundle, its sidecar, the shard); co-published
+    # lines add the per-file declarations on top (declare_signatures).
     def declare_bundle_signature(entry, keyid)
       entry[:bundle][:signature] = { keyid: keyid, asc: "#{entry[:bundle][:filename]}.asc" }
     end
@@ -832,11 +843,16 @@ module TebakoRelease
     # feeds the entry's bundle block and the idempotent skip), upload the
     # bundles as the legs' only payload assets, then the metadata (shard
     # with the bundle block + the bundle's sidecar). The member files
-    # themselves never become release assets — the bundle is the unit.
+    # themselves never become release assets — the bundle is the unit —
+    # UNLESS the factory co-publishes (spec 36 §3): then the members are
+    # standalone served names beside the bundle (the lazy arm
+    # range-fetches the image), still ahead of the shard that witnesses
+    # them (a witnessed shard without its assets is the invalid publish).
     def process_bundle_release(release, packages)
       bundles = build_bundles(packages)
       entries = build_manifest_entries(packages, bundles: bundles)
       bundles.each_value { |bundle| upload_package(release, bundle) }
+      packages.each { |package| upload_package(release, package) } if copublish?
       upload_blksum_sidecars(release, entries)
       entries.each { |entry| ensure_package_metadata(release, entry) }
       print_settled_summary
@@ -877,6 +893,14 @@ module TebakoRelease
       @config.adapter.bundle_publish?
     end
 
+    # Spec 36 §3's co-publish mode: a bundle-era line that ALSO serves
+    # the per-file assets as standalone release assets (the lazy arm's
+    # serving requirement — spec 39 §7). Factory-declared through the
+    # adapter, like the era.
+    def copublish?
+      bundle_publish? && @config.adapter.per_file_alongside_bundle?
+    end
+
     # AUDIT_ONLY (the coordinator's release job / a publish dry run):
     # strictly read-only — finds the release (never creates one), needs no
     # local packages, uploads nothing, touches no notes; the release's
@@ -943,20 +967,27 @@ module TebakoRelease
     # era: the exe, its .tfs image and its .dll facet. Bundle era (spec 36
     # §3): the bundle is the ONE served payload asset — the entry's
     # exe/image/dll fields are member pins, not served names, so they earn
-    # no sidecar. Both eras: the derived blksum sidecar (spec 39 §3) IS a
-    # served standalone asset, so it earns its own .sha256 sidecar like
+    # no sidecar — UNLESS the entry carries the co-publish witness, when
+    # the members ARE served standalone beside the bundle and earn theirs.
+    # Both eras: the derived blksum sidecar (spec 39 §3) IS a served
+    # standalone asset, so it earns its own .sha256 sidecar like
     # every served name.
     def metadata_assets(entry)
-      served = if entry[:bundle]
-                 { entry[:bundle][:filename] => entry[:bundle][:sha256] }
-               else
-                 { entry[:filename] => entry[:sha256] }
-                   .merge(facet_metadata(entry, :image))
-                   .merge(facet_metadata(entry, :dll))
-               end
+      served = bundle_metadata(entry)
+      served.merge!(per_file_metadata(entry)) unless entry[:bundle] && !entry[:per_file_assets]
       served.merge(blksum_metadata(entry))
     end
 
+    def bundle_metadata(entry)
+      entry[:bundle] ? { entry[:bundle][:filename] => entry[:bundle][:sha256] } : {}
+    end
+
+    def per_file_metadata(entry)
+      { entry[:filename] => entry[:sha256] }
+        .merge(facet_metadata(entry, :image))
+        .merge(facet_metadata(entry, :dll))
+    end
+
     def facet_metadata(entry, facet)
       block = entry[facet]
       block ? { block[:filename] => block[:sha256] } : {}
@@ -1183,7 +1214,7 @@ module TebakoRelease
 
       exe = [name, "#{name}.exe"].find { |candidate| present.include?(candidate) }
       landed, missing = expected_facets(name).partition { |facet| present.include?(facet) }
-      landed, missing = split_blksum_expectation(release, present, name, landed, missing)
+      landed, missing = split_blksum_expectation(served_shard(release, present, name), present, landed, missing)
       missing.unshift(name) unless exe
       return missing if exe.nil?
 
@@ -1194,12 +1225,17 @@ module TebakoRelease
     # asset; a landed bundle owes its sidecar and the package's shard
     # (plus an .asc of each on signing-enabled audits). The declared
     # blksum sidecar (spec 39 §3) is a standalone served asset in this
-    # era too — expected, with its own metadata, when the shard pins it.
+    # era too — expected, with its own metadata, when the shard pins it —
+    # and a shard carrying the co-publish witness (spec 36 §3's
+    # per_file_assets) owes the standalone per-file assets beside the
+    # bundle.
     def missing_bundle_assets(release, present, name, require_signatures: false)
       bundle = "#{name}#{Bundler::BUNDLE_SUFFIX}"
       return [bundle] unless present.include?(bundle)
 
-      landed, missing = split_blksum_expectation(release, present, name, [bundle], [])
+      shard = served_shard(release, present, name)
+      landed, missing = split_blksum_expectation(shard, present, [bundle], [])
+      landed, missing = split_copublish_expectation(shard, present, name, landed, missing)
       missing + missing_metadata(present, name, landed, require_signatures: require_signatures)
     end
 
@@ -1212,8 +1248,8 @@ module TebakoRelease
     # the shard's own gap is the gate's business). A DECLARED sidecar that
     # never landed reports its own name only — its sidecar/.asc cascade
     # rides the landed set, one error per gap.
-    def split_blksum_expectation(release, present, name, landed, missing)
-      declared = declared_blksum_name(release, present, name)
+    def split_blksum_expectation(shard, present, landed, missing)
+      declared = shard&.dig("image", "blksum", "filename")
       return [landed, missing] unless declared
 
       if present.include?(declared)
@@ -1223,17 +1259,35 @@ module TebakoRelease
       end
     end
 
-    # The sidecar name the package's shard declares (`image.blksum`),
-    # nil when undeclared, when the shard never landed, or when it cannot
-    # be read (loudly — the audit never guesses an expectation).
-    def declared_blksum_name(release, present, name)
+    # The shard-witnessed co-publish expectation (spec 36 §3): a shard
+    # carrying per_file_assets: true owes the standalone per-file assets —
+    # the exe (either spelling), the image, the windows DLL — beside the
+    # bundle; each landed member earns its metadata through the landed
+    # set. An unwitnessed shard expects nothing (bundle-only lines audit
+    # green), and a missing exe reports its own gap only, never a
+    # cascade (the one-error-per-gap rule).
+    def split_copublish_expectation(shard, present, name, landed, missing)
+      return [landed, missing] unless shard && shard["per_file_assets"] == true
+
+      exe = [name, "#{name}.exe"].find { |candidate| present.include?(candidate) }
+      facets_landed, facets_missing = expected_facets(name).partition { |facet| present.include?(facet) }
+      gaps = facets_missing
+      gaps = [name] + gaps unless exe
+      [landed + [exe, *facets_landed].compact, missing + gaps]
+    end
+
+    # The package's served shard as parsed JSON — the declarations' only
+    # authority (the additive keys gate the audit's expectations). nil
+    # when the shard never landed (its own gap is the gate's business) or
+    # cannot be read (loudly — the audit never guesses an expectation).
+    def served_shard(release, present, name)
       shard = "#{name}#{SHARD_SUFFIX}"
       return nil unless present.include?(shard)
 
-      download_asset_json(find_asset(release, shard)).dig("image", "blksum", "filename")
+      download_asset_json(find_asset(release, shard))
     rescue StandardError => e
-      puts "::warning::could not read #{shard} for the blksum expectation (#{e.class}: #{e.message}) — " \
-           "no blksum sidecar is expected of this package"
+      puts "::warning::could not read #{shard} for the additive expectations (#{e.class}: #{e.message}) — " \
+           "no additive assets are expected of this package"
       nil
     end
 

data/lib/tebako_release/version.rb

@@ -5,5 +5,5 @@
 # This file is a part of tamatebako
 
 module TebakoRelease
-  VERSION = "0.3.0"
+  VERSION = "0.4.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: tebako-release
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.4.0
 platform: ruby
 authors:
 - Ribose Inc