@modelstatus/cli 0.1.73 → 0.1.74

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modelstatus/cli",
-  "version": "0.1.73",
+  "version": "0.1.74",
   "description": "Track which AI models you use, where, and never get surprised by a retirement. Free offline model-health for any repo (mm status), browser sign-in for cloud inventory + alerts.",
   "keywords": [
     "llm",

package/src/updater.js

@@ -88,6 +88,33 @@ async function fetchJson(url) {
   return res.json();
 }
 
+// Ed25519 RELEASE public key (committed: packages/cli/release-pubkey.pem). The
+// manifest is signed with the matching private key; verifying that signature is
+// what makes the manifest's sha256 trustworthy on every platform, independent of
+// the CDN. An auto-update that can't verify this signature does not proceed.
+const RELEASE_PUBKEY = `-----BEGIN PUBLIC KEY-----
+MCowBQYDK2VwAyEApu4VP7vB6iwxsPcK5KaosjK7SIp9HrWMt5IvcUwjUOM=
+-----END PUBLIC KEY-----`;
+
+/** Fetch the manifest + its detached Ed25519 signature and verify before
+ * parsing. Returns the parsed manifest, or throws if the signature is missing or
+ * invalid (fail closed — never self-update against an unverifiable manifest). */
+async function fetchVerifiedManifest(base) {
+  const [mRes, sRes] = await Promise.all([
+    fetch(`${base}/version.json`, { cache: "no-store" }),
+    fetch(`${base}/version.json.sig`, { cache: "no-store" }),
+  ]);
+  if (!mRes.ok) throw new Error(`GET version.json -> ${mRes.status}`);
+  if (!sRes.ok) throw new Error("manifest signature unavailable — refusing to self-update");
+  const manifestBytes = Buffer.from(await mRes.arrayBuffer());
+  const sig = Buffer.from((await sRes.text()).trim(), "base64");
+  const key = crypto.createPublicKey(RELEASE_PUBKEY);
+  if (!crypto.verify(null, manifestBytes, key, sig)) {
+    throw new Error("manifest signature INVALID — refusing to self-update");
+  }
+  return JSON.parse(manifestBytes.toString("utf8"));
+}
+
 /** True if we can create/rename files in `dir` (needed for an atomic swap). */
 function dirWritable(dir) {
   try {
@@ -189,7 +216,7 @@ export async function forceUpdate() {
     const key = platformKey();
     if (!key) return { status: "unsupported" };
 
-    const manifest = await fetchJson(`${CDN}/cli/${CHANNEL_PATH}/version.json`);
+    const manifest = await fetchVerifiedManifest(`${CDN}/cli/${CHANNEL_PATH}`);
     writeCache({ ...(readCache() || {}), last_check: Date.now(), latest_known: manifest.version });
     if (!manifest.version) return { status: "error", message: "manifest has no version" };
     if (compareVer(manifest.version, BUILD_VERSION) <= 0) return { status: "latest", version: dispVer(BUILD_VERSION) };
@@ -223,7 +250,7 @@ export async function maybeCheckForUpdate(flags = {}) {
     const key = platformKey();
     if (!key) return null;
 
-    const manifest = await fetchJson(`${CDN}/cli/${CHANNEL_PATH}/version.json`);
+    const manifest = await fetchVerifiedManifest(`${CDN}/cli/${CHANNEL_PATH}`);
     // Always update the cache so we don't re-check for 24 h.
     writeCache({ ...cache, last_check: Date.now(), latest_known: manifest.version });