@rightkit/release 0.2.56 → 0.2.58

package/tauri-bundle-marker.test.mjs

@@ -0,0 +1,81 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import { BUNDLE_MARKERS, patchTauriBundleType, patchTauriBundleTypeForNsis, readTauriBundleMarkers } from "./tauri-bundle-marker.mjs";
+
+/** A stand-in binary: filler, one marker, filler. */
+function fakeBinary(code = BUNDLE_MARKERS.unknown, { copies = 1 } = {}) {
+  const parts = [Buffer.alloc(64, 0x41)];
+  for (let index = 0; index < copies; index += 1) {
+    parts.push(Buffer.from(`__TAURI_BUNDLE_TYPE_VAR_${code}`, "ascii"), Buffer.alloc(32, 0x42));
+  }
+  return Buffer.concat(parts);
+}
+
+function memoryFs(initial) {
+  const store = new Map([["binary.exe", Buffer.from(initial)]]);
+  return {
+    store,
+    read: (file) => {
+      const key = file.endsWith("binary.exe") ? "binary.exe" : file;
+      const value = store.get(key);
+      if (!value) throw Object.assign(new Error("ENOENT"), { code: "ENOENT" });
+      return Buffer.from(value);
+    },
+    write: (file, bytes) => {
+      store.set(file.endsWith("binary.exe") ? "binary.exe" : file, Buffer.from(bytes));
+    },
+  };
+}
+
+test("rewrites the single unknown marker to the NSIS marker and nothing else", () => {
+  const fs = memoryFs(fakeBinary());
+  const before = fs.read("binary.exe");
+  const receipt = patchTauriBundleTypeForNsis("binary.exe", { read: fs.read, write: fs.write });
+  const after = fs.read("binary.exe");
+
+  assert.equal(receipt.alreadyPatched, false);
+  assert.equal(receipt.bundle, "nsis");
+  assert.equal(receipt.changedBytes, 3, "only the 3-character bundle code may change");
+  assert.equal(after.length, before.length, "patching must not resize the binary");
+  assert.equal(after.includes(Buffer.from("__TAURI_BUNDLE_TYPE_VAR_NSS")), true);
+  assert.equal(after.includes(Buffer.from("__TAURI_BUNDLE_TYPE_VAR_UNK")), false);
+  assert.notEqual(receipt.beforeSha256, receipt.afterSha256);
+});
+
+test("is idempotent: an already-patched binary is reported, not rewritten", () => {
+  const fs = memoryFs(fakeBinary(BUNDLE_MARKERS.nsis));
+  const receipt = patchTauriBundleTypeForNsis("binary.exe", { read: fs.read, write: fs.write });
+  assert.equal(receipt.alreadyPatched, true);
+  assert.equal(receipt.changedBytes, 0);
+  assert.equal(receipt.beforeSha256, receipt.afterSha256, "an already-patched binary keeps its signed bytes");
+});
+
+test("fails closed when the binary carries more than one unknown marker", () => {
+  const fs = memoryFs(fakeBinary(BUNDLE_MARKERS.unknown, { copies: 2 }));
+  assert.throws(
+    () => patchTauriBundleTypeForNsis("binary.exe", { read: fs.read, write: fs.write }),
+    /found 2/,
+  );
+});
+
+test("fails closed when no marker of any kind is present", () => {
+  const fs = memoryFs(Buffer.alloc(128, 0x41));
+  assert.throws(
+    () => patchTauriBundleTypeForNsis("binary.exe", { read: fs.read, write: fs.write }),
+    /refusing to guess the bundle identity/,
+  );
+});
+
+test("rejects an unsupported bundle kind before touching the file", () => {
+  const fs = memoryFs(fakeBinary());
+  assert.throws(() => patchTauriBundleType("binary.exe", { bundle: "zip", read: fs.read, write: fs.write }), /unsupported Tauri bundle kind/);
+  assert.equal(fs.read("binary.exe").includes(Buffer.from("__TAURI_BUNDLE_TYPE_VAR_UNK")), true);
+});
+
+test("readTauriBundleMarkers reports offsets without writing", () => {
+  const fs = memoryFs(fakeBinary(BUNDLE_MARKERS.nsis));
+  const report = readTauriBundleMarkers("binary.exe", { read: fs.read });
+  assert.deepEqual(report.markers.nsis, [64]);
+  assert.equal(report.markers.unknown, undefined);
+  assert.match(report.sha256, /^[0-9a-f]{64}$/);
+});

package/standalone-clone-evidence.json

@@ -1,32 +0,0 @@
-{
-  "schemaVersion": 1,
-  "generatedAt": "2026-08-10T04:42:36.444Z",
-  "workRoot": "C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR",
-  "apps": [
-    {
-      "key": "viewright",
-      "remote": "https://github.com/bogusyogi/viewright.git",
-      "appDir": ".",
-      "revision": "21a4171fa8add2d8114bc5f07498b60d7e8eafe5",
-      "packageManager": "pnpm@11.18.0",
-      "clone": {
-        "command": "git clone --depth 1 --single-branch https://github.com/bogusyogi/viewright.git C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR\\viewright",
-        "status": 0,
-        "stdout": "",
-        "stderr": "Cloning into 'C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR\\viewright'...\nUpdating files:  91% (1902/2080)\rUpdating files:  92% (1914/2080)\rUpdating files:  93% (1935/2080)\rUpdating files:  94% (1956/2080)\rUpdating files:  95% (1976/2080)\rUpdating files:  96% (1997/2080)\rUpdating files:  97% (2018/2080)\rUpdating files:  98% (2039/2080)\rUpdating files:  99% (2060/2080)\rUpdating files: 100% (2080/2080)\rUpdating files: 100% (2080/2080), done."
-      },
-      "install": {
-        "command": "C:\\nvm4w\\nodejs\\node.exe C:\\nvm4w\\nodejs\\node_modules\\pnpm\\bin\\pnpm.mjs install --frozen-lockfile",
-        "status": 0,
-        "stdout": "✓ Lockfile passes supply-chain policies (verified 8h ago)\nLockfile is up to date, resolution step is skipped\nProgress: resolved 1, reused 0, downloaded 0, added 0\nPackages: +619\n++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\nProgress: resolved 619, reused 0, downloaded 0, added 0\nProgress: resolved 619, reused 60, downloaded 0, added 0\nPackages are hard linked from the content-addressable store to the virtual store.\n  Content-addressable store is at: C:\\Users\\adrds\\AppData\\Local\\pnpm\\store\\v11\n  Virtual store is at:             node_modules/.pnpm\nProgress: resolved 619, reused 573, downloaded 7, added 7\nProgress: resolved 619, reused 574, downloaded 9, added 10\nProgress: resolved 619, reused 574, downloaded 22, added 11\nProgress: resolved 619, reused 574, downloaded 23, added 11\nProgress: resolved 619, reused 574, downloaded 26, added 14\nProgress: resolved 619, reused 574, downloaded 30, added 24\nProgress: resolved 619, reused 574, downloaded 31, added 57\nProgress: resolved 619, reused 574, downloaded 34, added 128\nProgress: resolved 619, reused 574, downloaded 38, added 135\nProgress: resolved 619, reused 574, downloaded 38, added 136\nProgress: resolved 619, reused 574, downloaded 39, added 141\nProgress: resolved 619, reused 574, downloaded 39, added 148\nProgress: resolved 619, reused 574, downloaded 39, added 182\nProgress: resolved 619, reused 574, downloaded 40, added 201\nProgress: resolved 619, reused 574, downloaded 41, added 218\nProgress: resolved 619, reused 574, downloaded 41, added 242\nProgress: resolved 619, reused 574, downloaded 42, added 312\nProgress: resolved 619, reused 574, downloaded 42, added 371\nProgress: resolved 619, reused 574, downloaded 42, added 430\nProgress: resolved 619, reused 574, downloaded 42, added 486\nProgress: resolved 619, reused 574, downloaded 43, added 543\nProgress: resolved 619, reused 574, downloaded 43, added 578\nProgress: resolved 619, reused 574, downloaded 44, added 596\nProgress: resolved 619, reused 574, downloaded 44, added 611\nProgress: resolved 619, reused 574, downloaded 44, added 612\nProgress: resolved 619, reused 574, downloaded 44, added 613\nProgress: resolved 619, reused 574, downloaded 44, added 615\nProgress: resolved 619, reused 574, downloaded 44, added 616\nProgress: resolved 619, reused 574, downloaded 44, added 617\nProgress: resolved 619, reused 574, downloaded 44, added 618\nProgress: resolved 619, reused 574, downloaded 45, added 618\nProgress: resolved 619, reused 574, downloaded 45, added 619\nProgress: resolved 619, reused 574, downloaded 45, added 619, done\n\ndependencies:\n+ @codemirror/autocomplete 6.20.3\n+ @codemirror/commands 6.10.4\n+ @codemirror/lang-html 6.4.11\n+ @codemirror/lang-javascript 6.2.5\n+ @codemirror/lang-markdown 6.5.0\n+ @codemirror/language 6.12.4\n+ @codemirror/lint 6.9.7\n+ @codemirror/search 6.7.1\n+ @codemirror/state 6.7.1\n+ @codemirror/view 6.43.6\n+ @eigenpal/docx-editor-agents @eigenpal/docx-editor-agents@file:vendor/docx-editor/packages/agents(react@19.2.7)\n+ @eigenpal/docx-editor-core @eigenpal/docx-editor-core@file:vendor/docx-editor/packages/core(prosemirror-commands@1.7.1)(prosemirror-dropcursor@1.8.2)(prosemirror-history@1.5.0)(prosemirror-keymap@1.2.3)(prosemirror-model@1.25.10)(prosemirror-state@1.4.4)(prosemirror-tables@1.8.5)(prosemirror-transform@1.12.0)(prosemirror-view@1.42.0)\n+ @eigenpal/docx-editor-i18n @eigenpal/docx-editor-i18n@file:vendor/docx-editor/packages/i18n\n+ @eigenpal/docx-editor-react @eigenpal/docx-editor-react@file:vendor/docx-editor/packages/react(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(prosemirror-commands@1.7.1)(prosemirror-dropcursor@1.8.2)(prosemirror-history@1.5.0)(prosemirror-keymap@1.2.3)(prosemirror-model@1.25.10)(prosemirror-state@1.4.4)(prosemirror-tables@1.8.5)(prosemirror-transform@1.12.0)(prosemirror-view@1.42.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)\n+ @lezer/highlight 1.2.3\n+ @mdx-js/mdx 3.1.1\n+ @phosphor-icons/react 2.1.10\n+ @radix-ui/react-select 2.3.2\n+ @rightkit/legal-ui 0.1.0\n+ @rightkit/license 0.1.6\n+ @rightkit/logs 0.1.3\n+ @rightkit/tauri 0.1.0\n+ @rightkit/updates 0.2.3\n+ @tauri-apps/api 2.11.1\n+ @tauri-apps/plugin-http 2.5.9\n+ @tauri-apps/plugin-process 2.3.1\n+ @tauri-apps/plugin-updater 2.10.1\n+ clsx 2.1.1\n+ docxtemplater 3.69.0\n+ dompurify 3.4.13\n+ fabric 7.4.0\n+ github-slugger 2.0.0\n+ jszip 3.10.1\n+ katex 0.17.0\n+ mermaid 11.16.1\n+ pdfjs-dist 6.2.108\n+ pizzip 3.2.0\n+ prosemirror-commands 1.7.1\n+ prosemirror-dropcursor 1.8.2\n+ prosemirror-history 1.5.0\n+ prosemirror-keymap 1.2.3\n+ prosemirror-model 1.25.10\n+ prosemirror-state 1.4.4\n+ prosemirror-tables 1.8.5\n+ prosemirror-transform 1.12.0\n+ prosemirror-view 1.42.0\n+ react 19.2.7\n+ react-dom 19.2.7\n+ react-image-crop 11.1.2\n+ rehype-stringify 10.0.1\n+ remark-frontmatter 5.0.0\n+ remark-gfm 4.0.1\n+ remark-math 6.0.0\n+ remark-parse 11.0.0\n+ remark-rehype 11.1.2\n+ remark-smartypants 3.0.2\n+ shiki 4.3.1\n+ sonner 2.0.7\n+ sucrase 3.35.1\n+ unified 11.0.5\n+ xml-js 1.6.11\n+ yaml 2.9.0\n\ndevDependencies:\n+ @biomejs/biome 2.5.3\n+ @rightkit/legal 0.3.0\n+ @rightkit/release 0.2.50\n+ @tailwindcss/vite 4.3.2\n+ @tauri-apps/cli 2.11.4\n+ @testing-library/dom 10.4.1\n+ @testing-library/jest-dom 6.9.1\n+ @testing-library/react 16.3.2\n+ @types/mdast 4.0.4\n+ @types/react 19.2.17\n+ @types/react-dom 19.2.3\n+ @types/ws 8.18.1\n+ @vitejs/plugin-react 6.0.3\n+ happy-dom 20.10.6\n+ jscpd 5.0.12\n+ jsdom 29.1.1\n+ knip 6.25.0\n+ tailwindcss 4.3.2\n+ typescript 6.0.3\n+ vite 8.1.4\n+ vitest 4.1.10\n+ ws 8.21.0\n\nDone in 40.8s using pnpm v11.18.0",
-        "stderr": ""
-      },
-      "doctor": {
-        "command": "C:\\nvm4w\\nodejs\\node.exe C:\\nvm4w\\nodejs\\node_modules\\pnpm\\bin\\pnpm.mjs release:doctor",
-        "status": 0,
-        "stdout": "right-release 0.2.50\nconfig: C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR\\viewright\\right-release.config.mjs\napp: viewright\nplatform: win\ntier: <required for release/publish>\npackageManager: pnpm\nworkdir: C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR\\viewright\nhardeningscan: C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR\\viewright\\node_modules\\.pnpm\\@rightkit+release@0.2.50\\node_modules\\@rightkit\\release\\hardeningscan.mjs\nlegal: C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR\\viewright\\legal\\legal-manifest.json\nlegalAcceptance: viewright-2026-07-17-v3\nlegalManifestSha256: 035ea7cbd040ef001dbdc1385f114c8bb126178fea9a9f705016a726f96a7830\nsign: src-tauri/target/release/bundle/nsis/ViewRight_0.1.60_x64-setup.exe\npreflight:\n  [ok  ] target-bridge: src-tauri/target is ready for the shared cache bridge\n  [ok  ] version: 0.1.60 is free to build\n  [ok  ] windows-sdk: makeappx.exe from SDK 10.0.26100.0\n  [ok  ] signtool: signtool.exe from SDK 10.0.26100.0\n  [ok  ] sccache: sccache 0.17.0\n  [ok  ] disk: 628.7GB free",
-        "stderr": "$ right-release doctor"
-      }
-    }
-  ]
-}