@claudinite/cli 1.61008.2 → 1.61008.4

package/launch

@@ -7,7 +7,9 @@
 #
 # It reads engine.version and engine.manifest from .claudinite/settings.yaml,
 # .toml or .json, downloads that release's manifest.json and this platform's
-# binary from the npm registry, checks the manifest against the pin and the
+# binary from the npm registry, or from the GitHub releases of the
+# repository engine.releases names (owner/name, tag v<version>, assets named
+# as npm's tarballs), checks the manifest against the pin and the
 # binary against the manifest, caches the binary read-only, links
 # .claudinite/bin/cn to it and execs it. Nothing is trusted that the pin
 # does not cover; the registry's identity is immaterial to integrity.
@@ -27,11 +29,13 @@
 # Any other command run through that bin runs the member's own pin, the
 # member being the directory --repo names or else the working directory.
 #
-# CLAUDINITE_REGISTRY overrides the registry and CLAUDINITE_MAX_DOWNLOAD_BYTES
-# the download size cap; both exist for tests and the rehearsal.
+# CLAUDINITE_REGISTRY overrides the registry, CLAUDINITE_GITHUB the GitHub
+# host releases are read from and CLAUDINITE_MAX_DOWNLOAD_BYTES the download
+# size cap; all three exist for tests and the rehearsal.
 set -u
 
 registry=${CLAUDINITE_REGISTRY:-https://registry.npmjs.org}
+github=${CLAUDINITE_GITHUB:-https://github.com}
 max_bytes=${CLAUDINITE_MAX_DOWNLOAD_BYTES:-67108864}
 
 if [ "${GITHUB_ACTIONS:-}" = true ]; then
@@ -187,6 +191,7 @@ else
   manifest_pin=$(engine_value manifest)
   package=$(engine_value package)
   [ -n "$package" ] || package=@claudinite/cli
+  releases=$(engine_value releases)
 
   matches "$version" '[0-9]+\.[0-9]+\.[0-9]+' \
     || refuse "engine.version in $settings must be a quoted version like \"1.60928.1\""
@@ -194,6 +199,8 @@ else
     || refuse "engine.manifest in $settings must be a quoted sha512-... integrity string"
   matches "$package" '@claudinite/cli(-rc)?' \
     || refuse "engine.package in $settings must be \"@claudinite/cli\" or \"@claudinite/cli-rc\""
+  [ -z "$releases" ] || matches "$releases" '[A-Za-z0-9-]+/[A-Za-z0-9_-][A-Za-z0-9._-]*' \
+    || refuse "engine.releases in $settings must be a quoted GitHub repository like \"owner/name\""
 fi
 
 case $(uname -s) in
@@ -324,8 +331,13 @@ if ! cached_ok; then
   }
 
   name=${package#@claudinite/}
-  manifest_url=$registry/$package/-/$name-$version.tgz
-  binary_url=$registry/$package-$platform/-/$name-$platform-$version.tgz
+  if [ -n "${releases:-}" ]; then
+    manifest_url=$github/$releases/releases/download/v$version/$name-$version.tgz
+    binary_url=$github/$releases/releases/download/v$version/$name-$platform-$version.tgz
+  else
+    manifest_url=$registry/$package/-/$name-$version.tgz
+    binary_url=$registry/$package-$platform/-/$name-$platform-$version.tgz
+  fi
 
   fetch "$manifest_url" "$tmp/manifest.tgz"
   tar -xzf "$tmp/manifest.tgz" -C "$tmp" package/manifest.json 2>/dev/null \

package/manifest.json

@@ -1,16 +1,13 @@
 {
   "v": 1,
-  "version": "1.61008.2",
-  "builtAt": "2026-10-08T15:12:25Z",
-  "commit": "d151bb7",
+  "version": "1.61008.4",
+  "builtAt": "2026-10-08T16:30:15Z",
+  "commit": "bfb7cce",
   "goVersion": "go1.24.13",
-  "updaterDigest": "91c37044eda32ccfdb4c436314de9e0de3d7df3cc77a4ac36073958f91859c8c",
+  "updaterDigest": "969a19cb37284acf2139965118a0996e8c8470642ca3981e74105e9e06dab1b0",
   "binaries": {
-    "linux-x64": {"file": "cn", "sha256": "ff40c3eb645a85072b851c9f548b16208f6148fc106db1843631c28b5b9256b1", "size": 10911928},
-    "linux-arm64": {"file": "cn", "sha256": "f8df34007ac9d35de2964d1e9ebedd8a6ba73603def4af4111f8aa5fb400d062", "size": 10092728},
-    "darwin-x64": {"file": "cn", "sha256": "0429f4fee7223aaef61a334da0f701847e51c09c609210dececff7cf52a40b81", "size": 11134608},
-    "darwin-arm64": {"file": "cn", "sha256": "6386a73eca311ccac347a186ff98d69ad6736f1571896894359e1fdf2c5a3799", "size": 10346338},
-    "windows-x64": {"file": "cn.exe", "sha256": "263ef47fc6a89f6d44fe6000f1cedbb5138e9e5623a5ea92e624666b634f6704", "size": 11173376}
+    "linux-x64": {"file": "cn", "sha256": "0814b512fd460c41b2e8e1b7fbb42371eefd95e424565e71ebd7c8a3b8f815a2", "size": 10928312}
   },
+  "launcher": "82defc0fd3c22332d24bbc9ba207723bf6c88962bb5213afc79660fefa09c9bb",
   "testedPacks": {}
 }

package/manifest.sig.json

@@ -3,5 +3,5 @@
     "payload": "eyJ2IjoxLCJrZXlJZCI6ImM3NzQwNWM2ZDA4NzExODYiLCJwdWJsaWNLZXkiOiI0UHlTQzRTbG5MakJ1cVY2Qll4eU9XWUtLOWkzV295NkZCQ1ZNckF6clRzIiwidXNlIjoibWFuaWZlc3QiLCJpc3N1ZXIiOiJlYTg1ZjM1NDIxZjM3NWZjIiwibm90QmVmb3JlIjoiMjAyNi0xMC0wM1QxNjozNjozN1oiLCJub3RBZnRlciI6IjIwMjctMTAtMDNUMTY6MzY6MzdaIn0",
     "signature": "ex4GNEE3PIUj3Ue6X2TZnbB5E6G-DVrGNaYdvI13NuOauoJYilB_54TyAH490IS9-IZiu3BKVYpigm3uDTXSBw"
   },
-  "signature": "Lsia0CNTM4aMhZN7g_mFLqSgwgtulMmpceMAK4VaWycIqPtWopEcb_nA-A-hfBSh8d7Z63xw1AtEAAHcOZ2lCw"
+  "signature": "02t2k9mhXQAEc11esKSXmKL0iGb2Tg7xcCS4KLcC0W0RPy5vIxuZKdmmITADUCAZewILbtt1wnChoNly1Xc5Aw"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claudinite/cli",
-  "version": "1.61008.2",
+  "version": "1.61008.4",
   "description": "Claudinite engine release manifest and launcher",
   "license": "UNLICENSED",
   "repository": {"type": "git", "url": "git+https://github.com/missingbulb/ClaudiniteEngine.git"},