@rightkit/release 0.2.3 → 0.2.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rightkit/release",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "description": "Portable Right Suite release CLI/SDK: signed installers, updater artifacts, patch/update routing, hardening, R2 publish, and RightApps registration.",
   "type": "module",
   "bin": {

package/publish-update.mjs

@@ -37,7 +37,6 @@ const installers = target?.installer?.artifacts ?? [];
 
 if (tier === "patch") {
   if (!installers.length) fail(`${config?.app ?? "app"} ${platform} patch has no installer.artifacts`);
-  if (!artifacts.length) fail(`${config?.app ?? "app"} ${platform} patch has no updater.artifacts for the free app-update manifest`);
   for (const installer of installers) {
     assertCurrentKey(installer.key, "installer");
     const file = path.resolve(root, installer.file);
@@ -78,6 +77,10 @@ if (tier === "patch") {
       uploadedKeys.add(installer.key);
     }
   }
+  if (!artifacts.length) {
+    console.log(`${dryRun ? "[dry-run] " : ""}NO patch updater artifacts; skipping patch manifest registration`);
+    process.exit(0);
+  }
   const version = config.version || target.updater.version;
   if (!version) fail(`${config.app} config must expose version or targets.${platform}.updater.version`);
   const body = {

package/publish-update.test.mjs

@@ -51,6 +51,23 @@ function versionedFixture() {
   return config;
 }
 
+function installerOnlyFixture() {
+  const dir = mkdtempSync(path.join(os.tmpdir(), "right-publish-test-"));
+  const config = path.join(dir, "right-release.config.mjs");
+  writeFileSync(config, `export default ${JSON.stringify({
+    schema: 1,
+    app: "fixture",
+    version: "1.2.3",
+    targets: {
+      win: {
+        installer: { artifacts: [{ file: "Fixture-Setup.exe", key: "fixture/installers/windows/current/Fixture-Setup.exe" }] },
+        updater: { artifacts: [] },
+      },
+    },
+  })};\n`);
+  return config;
+}
+
 function run(tier) {
   const config = fixture();
   return spawnSync(process.execPath, [publisher, "--config", config, "--platform", "win", "--dry-run"], {
@@ -85,6 +102,19 @@ test("routes feature updates to the Pro-gated release endpoint", () => {
   assert.doesNotMatch(result.stdout, /Fixture-Setup\.exe/);
 });
 
+test("allows an installer-only patch without registering an updater manifest", () => {
+  const config = installerOnlyFixture();
+  const result = spawnSync(process.execPath, [publisher, "--config", config, "--platform", "win", "--dry-run"], {
+    encoding: "utf8",
+    env: { ...process.env, RIGHT_RELEASE_TIER: "patch" },
+  });
+  assert.equal(result.status, 0, result.stderr);
+  assert.match(result.stdout, /UPLOAD public\/fixture\/installers\/windows\/current\/Fixture-Setup\.exe/);
+  assert.match(result.stdout, /NO patch updater artifacts/);
+  assert.doesNotMatch(result.stdout, /\/v1\/admin\/apps\/patches/);
+  assert.doesNotMatch(result.stdout, /UPLOAD private\//);
+});
+
 test("refuses to publish without a valid tier", () => {
   const result = run("");
   assert.notEqual(result.status, 0);

package/release.mjs

@@ -9,11 +9,11 @@ const HARDENING_SCAN = path.resolve(TOOL_ROOT, "hardeningscan.mjs");
 const UPLOAD_LARGE = path.resolve(TOOL_ROOT, "upload-large.mjs");
 const SIGN_WINDOWS = path.resolve(TOOL_ROOT, "sign-windows.mjs");
 const SIGN_UPDATER = path.resolve(TOOL_ROOT, "sign-updater.mjs");
-const VERSION = "0.2.3";
+const VERSION = "0.2.4";
 const TIERS = new Set(["patch", "update"]);
 const RIGHTKIT_EXPECTED = new Map([
-  ["@rightkit/license", "^0.1.3"],
-  ["@rightkit/logs", "^0.1.1"],
+  ["@rightkit/license", "^0.1.5"],
+  ["@rightkit/logs", "^0.1.2"],
   ["@rightkit/release", `^${VERSION}`],
 ]);
 const FORBIDDEN_RIGHTKIT_SPEC = /^(?:git|file|link|workspace):|github|github\.com/i;

package/release.test.mjs

@@ -17,8 +17,8 @@ function fixture({ signed = true, publish = false, packageJson } = {}) {
       packageJson ?? {
         name: "fixture",
         scripts: { "release:patch:win": "right-release --platform win --tier patch" },
-        dependencies: { "@rightkit/license": "^0.1.3", "@rightkit/logs": "^0.1.1" },
-        devDependencies: { "@rightkit/release": "^0.2.3" },
+        dependencies: { "@rightkit/license": "^0.1.5", "@rightkit/logs": "^0.1.2" },
+        devDependencies: { "@rightkit/release": "^0.2.4" },
       },
       null,
       2,

package/right-suite-contract.test.mjs

@@ -6,9 +6,9 @@ import test from "node:test";
 
 const workspace = path.resolve(new URL("../..", import.meta.url).pathname.replace(/^\/(\w:)/, "$1"));
 const pubkey = "dW50cnVzdGVkIGNvbW1lbnQ6IG1pbmlzaWduIHB1YmxpYyBrZXk6IDI5Mzk1RjlGRjQ2NjI2MUQKUldRZEptYjBuMTg1S1VSUXlBdFM4WmtzaHArYko0U2hRMDVlSDJmSExVZG82Q0hoQ2srUlhqanAK";
-const licensePackage = "^0.1.3";
-const logsPackage = "^0.1.1";
-const releasePackage = "^0.2.3";
+const licensePackage = "^0.1.5";
+const logsPackage = "^0.1.3";
+const releasePackage = "^0.2.4";
 const apps = [
   { key: "viewright", root: "viewright", tauri: "src-tauri/tauri.conf.json", host: "viewright.cc" },
   { key: "scraperight", root: "scraperight", tauri: "src-tauri/tauri.conf.json", host: "scraperight.cc" },
@@ -54,8 +54,8 @@ for (const app of apps) {
       assert.equal(target.upload, undefined, "generic uploads bypass tier manifest routing");
       assert.equal(target.publish.cmd, "right-release");
       assert.match(target.publish.args.join(" "), /^publish-update\b/);
-      assert.ok(target.updater.artifacts.length);
-      assert.ok(target.installer.artifacts.length, "patch releases must refresh the public installer");
+      assert.ok(new Set(target.updater.artifacts.map((artifact) => artifact.key)).size <= 1, `${app.key} ${platform} must expose at most one current updater R2 object key`);
+      assert.ok(new Set(target.installer.artifacts.map((artifact) => artifact.key)).size <= 1, `${app.key} ${platform} must expose at most one current installer R2 object key`);
       for (const installer of target.installer.artifacts) {
         assert.match(installer.key, /\/installers\/(mac|windows)\/current\//, `${app.key} ${platform} installers must replace the stable current R2 object`);
       }