@claudinite/cli 1.61008.1 → 1.61008.3

package/launch

@@ -7,7 +7,9 @@
 #
 # It reads engine.version and engine.manifest from .claudinite/settings.yaml,
 # .toml or .json, downloads that release's manifest.json and this platform's
-# binary from the npm registry, checks the manifest against the pin and the
+# binary from the npm registry, or from the GitHub releases of the
+# repository engine.releases names (owner/name, tag v<version>, assets named
+# as npm's tarballs), checks the manifest against the pin and the
 # binary against the manifest, caches the binary read-only, links
 # .claudinite/bin/cn to it and execs it. Nothing is trusted that the pin
 # does not cover; the registry's identity is immaterial to integrity.
@@ -27,11 +29,13 @@
 # Any other command run through that bin runs the member's own pin, the
 # member being the directory --repo names or else the working directory.
 #
-# CLAUDINITE_REGISTRY overrides the registry and CLAUDINITE_MAX_DOWNLOAD_BYTES
-# the download size cap; both exist for tests and the rehearsal.
+# CLAUDINITE_REGISTRY overrides the registry, CLAUDINITE_GITHUB the GitHub
+# host releases are read from and CLAUDINITE_MAX_DOWNLOAD_BYTES the download
+# size cap; all three exist for tests and the rehearsal.
 set -u
 
 registry=${CLAUDINITE_REGISTRY:-https://registry.npmjs.org}
+github=${CLAUDINITE_GITHUB:-https://github.com}
 max_bytes=${CLAUDINITE_MAX_DOWNLOAD_BYTES:-67108864}
 
 if [ "${GITHUB_ACTIONS:-}" = true ]; then
@@ -187,6 +191,7 @@ else
   manifest_pin=$(engine_value manifest)
   package=$(engine_value package)
   [ -n "$package" ] || package=@claudinite/cli
+  releases=$(engine_value releases)
 
   matches "$version" '[0-9]+\.[0-9]+\.[0-9]+' \
     || refuse "engine.version in $settings must be a quoted version like \"1.60928.1\""
@@ -194,6 +199,8 @@ else
     || refuse "engine.manifest in $settings must be a quoted sha512-... integrity string"
   matches "$package" '@claudinite/cli(-rc)?' \
     || refuse "engine.package in $settings must be \"@claudinite/cli\" or \"@claudinite/cli-rc\""
+  [ -z "$releases" ] || matches "$releases" '[A-Za-z0-9-]+/[A-Za-z0-9_-][A-Za-z0-9._-]*' \
+    || refuse "engine.releases in $settings must be a quoted GitHub repository like \"owner/name\""
 fi
 
 case $(uname -s) in
@@ -324,8 +331,13 @@ if ! cached_ok; then
   }
 
   name=${package#@claudinite/}
-  manifest_url=$registry/$package/-/$name-$version.tgz
-  binary_url=$registry/$package-$platform/-/$name-$platform-$version.tgz
+  if [ -n "${releases:-}" ]; then
+    manifest_url=$github/$releases/releases/download/v$version/$name-$version.tgz
+    binary_url=$github/$releases/releases/download/v$version/$name-$platform-$version.tgz
+  else
+    manifest_url=$registry/$package/-/$name-$version.tgz
+    binary_url=$registry/$package-$platform/-/$name-$platform-$version.tgz
+  fi
 
   fetch "$manifest_url" "$tmp/manifest.tgz"
   tar -xzf "$tmp/manifest.tgz" -C "$tmp" package/manifest.json 2>/dev/null \

package/manifest.json

@@ -1,16 +1,12 @@
 {
   "v": 1,
-  "version": "1.61008.1",
-  "builtAt": "2026-10-08T13:25:23Z",
-  "commit": "d3d2f1b",
+  "version": "1.61008.3",
+  "builtAt": "2026-10-08T15:23:06Z",
+  "commit": "d90d5c5",
   "goVersion": "go1.24.13",
-  "updaterDigest": "9d56979acdeef22a2e37ff8375ef4bf2528751024e14020bbcbcc56697bef821",
+  "updaterDigest": "9da77ea4d0cd1d2431034632f73e9a917e5bbbf57f63d848c3d4d9dc92becef9",
   "binaries": {
-    "linux-x64": {"file": "cn", "sha256": "8590ccc3fe2c798171ee02089bff17084473ebf0c8b3e1632eff9ad7c020affa", "size": 11124920},
-    "linux-arm64": {"file": "cn", "sha256": "6d27e6de6f926e35b7d7074e35da75018e82abc70239175fedc0c6140fc0526e", "size": 10289336},
-    "darwin-x64": {"file": "cn", "sha256": "1508b26c7c0c79ed9325cc3e0228a357ac3fa3211af49ad08b83efd1f6f0f634", "size": 11349904},
-    "darwin-arm64": {"file": "cn", "sha256": "81ece6f3e28aa88af0228cd57de9c85618bd7ce70ea4a31fa227626207727748", "size": 10513778},
-    "windows-x64": {"file": "cn.exe", "sha256": "e4463be81111d198385909fb8f10ab7b5482a937f46bd9ec6cfa48063da973f4", "size": 11384320}
+    "linux-x64": {"file": "cn", "sha256": "4469323d5a1c7366674372b7157c25da7ea1b483e6944ea04f128315362b71d2", "size": 10920120}
   },
   "testedPacks": {}
 }

package/manifest.sig.json

@@ -3,5 +3,5 @@
     "payload": "eyJ2IjoxLCJrZXlJZCI6ImM3NzQwNWM2ZDA4NzExODYiLCJwdWJsaWNLZXkiOiI0UHlTQzRTbG5MakJ1cVY2Qll4eU9XWUtLOWkzV295NkZCQ1ZNckF6clRzIiwidXNlIjoibWFuaWZlc3QiLCJpc3N1ZXIiOiJlYTg1ZjM1NDIxZjM3NWZjIiwibm90QmVmb3JlIjoiMjAyNi0xMC0wM1QxNjozNjozN1oiLCJub3RBZnRlciI6IjIwMjctMTAtMDNUMTY6MzY6MzdaIn0",
     "signature": "ex4GNEE3PIUj3Ue6X2TZnbB5E6G-DVrGNaYdvI13NuOauoJYilB_54TyAH490IS9-IZiu3BKVYpigm3uDTXSBw"
   },
-  "signature": "QmM2fJ9Vqk7__7bjn73r9XutbvGR9uSY_6wOkydnAm-abgYRPzuYlwkdB1rEKW3_D23Xr0Jm_4RcBYDQXIqYDw"
+  "signature": "ExfqPGnJ204faaM0vMomfB6FWaxcOExCXcg_LvVcvPCXuzbk23pioLMtsdVyg8LXQCluR5mpufSYm708nc2JCA"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claudinite/cli",
-  "version": "1.61008.1",
+  "version": "1.61008.3",
   "description": "Claudinite engine release manifest and launcher",
   "license": "UNLICENSED",
   "repository": {"type": "git", "url": "git+https://github.com/missingbulb/ClaudiniteEngine.git"},