@rightkit/release 0.6.3 → 0.6.5

package/suite-api.generated.mjs

@@ -0,0 +1,78 @@
+// GENERATED by scripts/gen-suite-api.mjs from contracts/right-suite-api.v1.json; do not edit.
+// Right Suite API host constants (contract right-suite-api.v1) for @rightkit/release.
+
+export const RIGHT_SUITE_API_HOST = "api.orthiclabs.com";
+export const RIGHT_SUITE_API_ORIGIN = "https://api.orthiclabs.com";
+export const RIGHT_SUITE_LEGACY_HOSTS = ["api.spoares.com"];
+export const RIGHT_SUITE_UPDATER_MANIFEST_PATH = "/v1/apps/{app}/releases/latest.json?platform={{target}}";
+export const RIGHT_SUITE_RELEASE_STATUS_PATH = "/v1/apps/{app}/releases/status.json";
+export const RIGHT_SUITE_ADMIN_PATCHES_PATH = "/v1/admin/apps/patches";
+export const RIGHT_SUITE_ADMIN_RELEASES_PATH = "/v1/admin/apps/releases";
+export const RIGHT_SUITE_ADMIN_RUNTIME_ARTIFACTS_PATH = "/v1/admin/apps/runtime-artifacts";
+export const RIGHT_SUITE_GATED_ARTIFACT_HOST = "rightapps-license-gate.adrdsouza.workers.dev";
+export const RIGHT_SUITE_PUBLIC_ARTIFACT_HOST = "pub-6c73208d46c245a9b4881d5e02f6b618.r2.dev";
+export const RIGHT_SUITE_PUBLIC_INSTALLER_BASE = "https://pub-6c73208d46c245a9b4881d5e02f6b618.r2.dev";
+export const RIGHT_SUITE_ARTIFACT_PATH_PREFIX = "/{app}";
+export const APP_ARTIFACT_HOSTS = {
+  "coderight": [
+    "rightapps-license-gate.adrdsouza.workers.dev",
+    "pub-6c73208d46c245a9b4881d5e02f6b618.r2.dev"
+  ],
+  "heardright": [
+    "rightapps-license-gate.adrdsouza.workers.dev",
+    "pub-6c73208d46c245a9b4881d5e02f6b618.r2.dev"
+  ],
+  "mailright": [
+    "rightapps-license-gate.adrdsouza.workers.dev",
+    "pub-6c73208d46c245a9b4881d5e02f6b618.r2.dev"
+  ],
+  "viewright": [
+    "pub-6c73208d46c245a9b4881d5e02f6b618.r2.dev"
+  ]
+};
+export const RIGHT_SUITE_API_CONTRACT = {
+  "apps": {
+    "coderight": {
+      "artifactHosts": [
+        "gated",
+        "public"
+      ]
+    },
+    "heardright": {
+      "artifactHosts": [
+        "gated",
+        "public"
+      ]
+    },
+    "mailright": {
+      "artifactHosts": [
+        "gated",
+        "public"
+      ]
+    },
+    "viewright": {
+      "artifactHosts": [
+        "public"
+      ]
+    }
+  },
+  "artifactHostSets": {
+    "gated": "rightapps-license-gate.adrdsouza.workers.dev",
+    "public": "pub-6c73208d46c245a9b4881d5e02f6b618.r2.dev"
+  },
+  "artifactPathPrefix": "/{app}",
+  "host": "api.orthiclabs.com",
+  "origin": "https://api.orthiclabs.com",
+  "paths": {
+    "adminPatches": "/v1/admin/apps/patches",
+    "adminReleases": "/v1/admin/apps/releases",
+    "adminRuntimeArtifacts": "/v1/admin/apps/runtime-artifacts",
+    "releaseStatus": "/v1/apps/{app}/releases/status.json",
+    "updaterManifest": "/v1/apps/{app}/releases/latest.json?platform={{target}}"
+  },
+  "pendingNativeUpdater": [
+    "heardright"
+  ],
+  "publicInstallerBase": "https://pub-6c73208d46c245a9b4881d5e02f6b618.r2.dev",
+  "schema": "right-suite-api.v1"
+};

package/swap-helper-bundle.mjs

@@ -37,7 +37,7 @@ export function isSwapHelperSigned(file, { execFileSync = nodeExecFileSync } = {
 }
 
 /**
- * Local-pack step. darwin: build through the managed cargo wrapper (`run("cargo", ...)` is `rightkit cargo` in
+ * Local-pack step. darwin: build through the managed cargo wrapper (`run("cargo", ...)` is `rustright cargo` in
  * local-publish), copy to <packageDir>/bin/darwin/rightkit-swap, Developer ID sign with the shared identity
  * resolver and `macCodesignArgs` (--options runtime --timestamp), verify strictly, write a sha256 receipt.
  * Anywhere else: refuse unless the helper is present and its receipt matches its bytes. Fails closed with SwapHelperError.
@@ -66,7 +66,7 @@ export function prepareSwapHelper({
   }
   const fail = (code, message) => { throw new SwapHelperError(code, message); };
   const built = run("cargo", SWAP_HELPER_CARGO_ARGS, { cwd: workspaceRoot, env });
-  if (built.error || built.status !== 0) fail("SWAP_HELPER_BUILD_FAILED", `rightkit cargo ${SWAP_HELPER_CARGO_ARGS.join(" ")} failed (${built.error?.message ?? `exit ${built.status}`})\n${tail(`${built.stdout ?? ""}\n${built.stderr ?? ""}`)}`);
+  if (built.error || built.status !== 0) fail("SWAP_HELPER_BUILD_FAILED", `rustright cargo ${SWAP_HELPER_CARGO_ARGS.join(" ")} failed (${built.error?.message ?? `exit ${built.status}`})\n${tail(`${built.stdout ?? ""}\n${built.stderr ?? ""}`)}`);
   const meta = run("cargo", ["metadata", "--format-version", "1", "--no-deps"], { cwd: workspaceRoot, env });
   let targetDir;
   try { targetDir = JSON.parse(meta.stdout).target_directory; } catch { /* refused below */ }

package/win-package-recipe.mjs

@@ -130,6 +130,9 @@ export function validateWinPackage({ appRoot, config = {}, target } = {}) {
     }
   }
   if (spec.updater === true && target.updater !== undefined && !isPlainObject(target.updater)) issues.push("target.updater must be an object when winPackage.updater is true");
+  if (isPlainObject(target.updater) && Object.prototype.hasOwnProperty.call(target.updater, "keyFile")) {
+    issues.push("target.updater.keyFile is not supported: updater signing keys come from the OS credential provider (rightkit-credentials, namespace rightsuite-updater-key; see protected-credentials.mjs and sign-updater.mjs), never from a key file. Remove updater.keyFile");
+  }
 
   if (issues.length) throw new WinPackageConfigError(issues);
   return Object.freeze({
@@ -142,7 +145,6 @@ export function validateWinPackage({ appRoot, config = {}, target } = {}) {
     installerFile,
     sidecars: Object.freeze(sidecars),
     tauriCwd,
-    updaterKeyFile: typeof target.updater?.keyFile === "string" ? target.updater.keyFile : null,
   });
 }
 
@@ -181,11 +183,12 @@ export function defaultWinPackageDeps({ appRoot, target, env }) {
       const evidence = JSON.parse(readFileSync(receipt, "utf8"));
       return evidence.files.map((item) => ({ file: path.resolve(item.file), sha256: item.after?.sha256 }));
     },
-    signUpdater(file, { keyFile, dryRun = false }) {
+    // The signing key comes from the OS credential provider inside sign-updater; no key path is ever passed down.
+    signUpdater(file, { dryRun = false } = {}) {
       const childEnv = { ...env };
       delete childEnv.TAURI_SIGNING_PRIVATE_KEY;
       delete childEnv.TAURI_SIGNING_PRIVATE_KEY_PASSWORD;
-      const result = spawn("node", [SIGN_UPDATER, "--file", file, ...(dryRun ? ["--dry-run"] : []), ...(keyFile ? ["--key-file", keyFile] : [])], { cwd: appRoot, env: childEnv });
+      const result = spawn("node", [SIGN_UPDATER, "--file", file, ...(dryRun ? ["--dry-run"] : [])], { cwd: appRoot, env: childEnv });
       if (result.error || result.status !== 0) throw new Error(`sign-updater exited ${result.status ?? result.error?.message}`);
     },
     patchMarker: (file, options) => patchTauriBundleType(file, options),
@@ -299,7 +302,7 @@ export function runWinPackageRecipe({ appRoot, config = {}, target, deps = {} }
   if (plan.updater) {
     phase("updater", () => {
       if (!dry) fs.rmSync(`${installer}.sig`, { force: true });
-      d.signUpdater(installer, { keyFile: plan.updaterKeyFile, dryRun: dry });
+      d.signUpdater(installer, { dryRun: dry });
       if (dry) return;
       if (!fs.existsSync(`${installer}.sig`)) throw new Error(`sign-updater did not write ${installer}.sig`);
       updaterSignature = `${installer}.sig`;