@rightkit/release 0.2.13 → 0.2.14

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rightkit/release",
-  "version": "0.2.13",
+  "version": "0.2.14",
   "description": "Portable Right Suite release CLI/SDK: signed installers, updater artifacts, patch/update routing, hardening, R2 publish, and RightApps registration.",
   "type": "module",
   "bin": {

package/publish-update.mjs

@@ -49,7 +49,6 @@ if (tier === "patch") {
   const updaterManifestArtifacts = new Map();
   const installerManifestArtifacts = new Map();
   const uploadedKeys = new Set();
-  const uploadedSignatures = new Set();
   for (const artifact of artifacts) {
     assertCurrentKey(artifact.key, "updater");
     const installerKey = patchInstallerKey(artifact);
@@ -65,11 +64,6 @@ if (tier === "patch") {
       if (!dryRun) await run(process.execPath, [UPLOAD, file, installerKey, "public"], root);
       uploadedKeys.add(installerKey);
     }
-    if (!uploadedSignatures.has(`${installerKey}.sig`)) {
-      console.log(`${dryRun ? "[dry-run] " : ""}UPLOAD public/${installerKey}.sig`);
-      if (!dryRun) await run(process.execPath, [UPLOAD, signatureFile, `${installerKey}.sig`, "public"], root);
-      uploadedSignatures.add(`${installerKey}.sig`);
-    }
     const signature = dryRun ? `<signature:${artifact.signature}>` : (await readFile(signatureFile, "utf8")).trim();
     const artifactKey = artifact.artifactKey || installerKey.replaceAll("/", "__");
     const metadata = dryRun ? { sha256: null, sizeBytes: null } : await fileMetadata(file);
@@ -108,7 +102,7 @@ if (tier === "patch") {
       dryRun,
       keep: {
         public: installers.map((artifact) => artifact.key),
-        private: target.updater.artifacts.flatMap((artifact) => [artifact.key, `${artifact.key}.sig`]),
+        private: target.updater.artifacts.map((artifact) => artifact.key),
       },
     });
     process.exit(0);
@@ -144,7 +138,7 @@ if (tier === "patch") {
     platform: platform === "mac" ? "mac" : "windows",
     dryRun,
     keep: {
-      public: [...installers.map((artifact) => artifact.key), ...registrations.keys(), ...[...registrations.keys()].map((key) => `${key}.sig`)],
+      public: [...installers.map((artifact) => artifact.key), ...registrations.keys()],
       private: [],
     },
   });
@@ -157,7 +151,6 @@ const platforms = {};
 const registrations = new Map();
 const updaterManifestArtifacts = new Map();
 const uploadedKeys = new Set();
-const uploadedSignatures = new Set();
 for (const artifact of artifacts) {
   assertCurrentKey(artifact.key, "updater");
   const file = path.resolve(root, artifact.file);
@@ -171,12 +164,6 @@ for (const artifact of artifacts) {
     if (!dryRun) await run(process.execPath, [UPLOAD, file, artifact.key, "private"], root);
     uploadedKeys.add(artifact.key);
   }
-  if (!uploadedSignatures.has(`${artifact.key}.sig`)) {
-    console.log(`${dryRun ? "[dry-run] " : ""}UPLOAD private/${artifact.key}.sig`);
-    if (!dryRun) await run(process.execPath, [UPLOAD, signatureFile, `${artifact.key}.sig`, "private"], root);
-    uploadedSignatures.add(`${artifact.key}.sig`);
-  }
-
   const signature = dryRun ? `<signature:${artifact.signature}>` : (await readFile(signatureFile, "utf8")).trim();
   const artifactKey = artifact.artifactKey || artifact.key.replaceAll("/", "__");
   const metadata = dryRun ? { sha256: null, sizeBytes: null } : await fileMetadata(file);
@@ -227,7 +214,7 @@ await pruneReleaseObjects({
   dryRun,
   keep: {
     public: installers.map((artifact) => artifact.key),
-    private: [...registrations.keys(), ...[...registrations.keys()].map((key) => `${key}.sig`)],
+    private: [...registrations.keys()],
   },
 });
 

package/publish-update.test.mjs

@@ -100,7 +100,8 @@ test("patch registers a free updater manifest backed by public installer-path ob
   assert.match(result.stdout, /POST .*\/v1\/admin\/apps\/patches/);
   assert.match(result.stdout, /"tier":"patch"/);
   assert.match(result.stdout, /"platform":"windows"/);
-  assert.equal((result.stdout.match(/UPLOAD public\/fixture\/installers\/windows\/current\/Fixture\.exe\.sig/g) ?? []).length, 1);
+  assert.doesNotMatch(result.stdout, /UPLOAD .*\.sig/);
+  assert.equal((result.stdout.match(/UPLOAD /g) ?? []).length, 2, "patch may upload only one installer and one updater object per OS");
   assert.match(result.stdout, /PRUNE rightapps-downloads\/fixture\/windows/);
   assert.match(result.stdout, /PRUNE rightapps-updates\/fixture\/windows keep=<none>/);
   const body = registrationBody(result);
@@ -129,7 +130,8 @@ test("routes feature updates to the Pro-gated release endpoint", () => {
   assert.match(result.stdout, /"tier":"update"/);
   assert.match(result.stdout, /"platform":"windows"/);
   assert.match(result.stdout, /UPLOAD private\/fixture\/updates\/windows\/current\/Fixture\.exe/);
-  assert.equal((result.stdout.match(/UPLOAD private\/fixture\/updates\/windows\/current\/Fixture\.exe\.sig/g) ?? []).length, 1);
+  assert.doesNotMatch(result.stdout, /UPLOAD .*\.sig/);
+  assert.equal((result.stdout.match(/UPLOAD /g) ?? []).length, 1, "feature update may upload only one updater object per OS");
   assert.match(result.stdout, /PRUNE rightapps-downloads\/fixture\/windows/);
   assert.match(result.stdout, /PRUNE rightapps-updates\/fixture\/windows/);
   assert.doesNotMatch(result.stdout, /UPLOAD .*Fixture-Setup\.exe/);

package/right-suite-contract.test.mjs

@@ -19,7 +19,7 @@ const apps = [
 test("RightKit exposes one current version manifest", () => {
   assert.equal(existsSync(versionsPath), true, "rightkit-versions.json must be the single current-version source");
   assert.match(versions.packageManager, /^pnpm@\d+\.\d+\.\d+$/);
-  assert.equal(versions.npm["@rightkit/release"], "0.2.13");
+  assert.equal(versions.npm["@rightkit/release"], "0.2.14");
   assert.equal(versions.npm["@rightkit/license"], "0.1.5");
   assert.equal(versions.npm["@rightkit/logs"], "0.1.3");
   assert.equal(versions.npm["@rightkit/updates"], "0.1.1");

package/rightkit-versions.json

@@ -4,7 +4,7 @@
   "npm": {
     "@rightkit/license": "0.1.5",
     "@rightkit/logs": "0.1.3",
-    "@rightkit/release": "0.2.13",
+    "@rightkit/release": "0.2.14",
     "@rightkit/updates": "0.1.1"
   },
   "cargo": {