@aletheia-ios/tools 0.2.2 → 0.2.3

package/dist/cli.js

@@ -748,23 +748,37 @@ async function create(repo, slug, name) {
 }
 //#endregion
 //#region src/lib/zip.ts
+/** The calendar fields stamped on every entry, as a zip records them. */
+const EPOCH = {
+	year: 2e3,
+	month: 0,
+	day: 1
+};
 /**
 * The modification time stamped on every entry.
 *
-* A fixed mtime is what makes two builds of the same content byte-identical, which the app
-* relies on to treat one package published by two lists as one package.
+* Built from the local-time constructor rather than a UTC instant, because a zip stores a DOS
+* timestamp of the *local* calendar fields. A UTC instant renders as 00:00 on a runner in UTC
+* and 11:00 on a machine in Sydney, which produced byte-different archives of identical files
+* and broke the one guarantee this function exists to make. These arguments read back as
+* 2000-01-01 00:00 from every timezone.
+*
+* Constructed per call so that construction and encoding always see the same timezone.
 */
-const EPOCH = /* @__PURE__ */ new Date("2000-01-01T00:00:00Z");
+function epoch() {
+	return new Date(EPOCH.year, EPOCH.month, EPOCH.day);
+}
 /**
 * Zips files into bytes that depend only on their names and contents.
 *
-* Entries are written in sorted name order with the fixed mtime and maximum deflate, so
-* the same input always produces the same archive and the same sha256.
+* Entries are written in sorted name order with a fixed mtime and maximum deflate, so the same
+* input produces the same archive and the same sha256 on any machine, in any timezone.
 */
 function deterministicZip(files) {
+	const mtime = epoch();
 	const entries = {};
 	for (const name of Object.keys(files).sort()) entries[name] = [files[name], {
-		mtime: EPOCH,
+		mtime,
 		level: 9
 	}];
 	return zipSync(entries);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aletheia-ios/tools",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "description": "The aletheia CLI: build, check, pack, index and serve source packages",
   "license": "MIT",
   "repository": {