@rightkit/release 0.2.79 → 0.2.80
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -227,7 +227,18 @@ export function validateNativeFinalizationOutput(output, {
|
|
|
227
227
|
throw new Error("native finalizer archive digest mismatch");
|
|
228
228
|
}
|
|
229
229
|
if (output.archive?.path != null && PLACEHOLDER.test(String(output.archive.path))) throw new Error("native finalizer archive path is a placeholder");
|
|
230
|
-
|
|
230
|
+
// Echo the canonical signed set only when the finalizer actually declared
|
|
231
|
+
// one. Injecting `signedArtifacts: []` into an output that never mentioned
|
|
232
|
+
// signed artifacts turns "not declared" into a declared-empty identity,
|
|
233
|
+
// which createNativeFinalizationReceipt then rejects against the real
|
|
234
|
+
// signed set as an identity mismatch.
|
|
235
|
+
const declaredSigned = output.signedArtifacts != null || output.signed != null;
|
|
236
|
+
return {
|
|
237
|
+
...output,
|
|
238
|
+
provenance,
|
|
239
|
+
...(declaredSigned ? { signedArtifacts: signed } : {}),
|
|
240
|
+
...(archiveSha256 ? { archiveSha256 } : {}),
|
|
241
|
+
};
|
|
231
242
|
}
|
|
232
243
|
|
|
233
244
|
export const validateNativeFinalization = validateNativeFinalizationOutput;
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@rightkit/release",
|
|
3
|
-
"version": "0.2.
|
|
3
|
+
"version": "0.2.80",
|
|
4
4
|
"description": "Portable Right Suite release CLI/SDK: signed native archives, direct bootstrap transactions, immutable GitHub Release upload, R2 bootstrap publication, and add-on adoption.",
|
|
5
5
|
"license": "MIT OR Apache-2.0",
|
|
6
6
|
"type": "module",
|
package/rightkit-versions.json
CHANGED