@standardagents/code-web 0.14.1-canary.cc5a19 → 0.14.1-canary.d309b7

package/README.md

@@ -14,8 +14,14 @@ build and publishes under that build's version and dist-tag (`canary`,
 `@standardagents/code-web@1.2.3-canary.abcdef` is the viewer for the fleet
 running `@standardagents/code@1.2.3-canary.abcdef`; the wire protocol has no
 negotiation, so a site pins the runtime that matches a fleet version exactly.
-The runtime is built in the publication workflow on GitHub Actions and is not
-yet signed by the native artifact key; depend on it by exact version.
+The runtime is built and signed on the build coordinator's own workers as
+the build's `wasm32-unknown-unknown` target (see
+`docs/owned-build-workers.md`), with the same Ed25519 key as the native
+artifacts. The publication workflow only ingests that signed artifact,
+verifies it, and publishes it; `dist/manifest.json` and `dist/manifest.sig`
+are the exact signed bytes, so a consumer can verify `dist/` as an artifact
+root (`verifyWebArtifact` in `packages/npm/lib/artifact.mjs`). Depend on it
+by exact version.
 
 ## Contents
 
@@ -26,6 +32,8 @@ dist/pkg/standard_web_bg.wasm     the module
 dist/fonts/*.ttf                  JetBrains Mono Nerd Font (Mono): Regular, Bold, Italic, BoldItalic
 dist/licenses/*.txt               font licenses (OFL 1.1; Nerd Fonts patch MIT)
 dist/build.json                   {schema, commit, version} of the native build
+dist/manifest.json                signed schema-4 `standard-npm-web-target-v1` manifest: every file above with size and sha256
+dist/manifest.sig                 its Ed25519 signature
 ```
 
 Exports:
@@ -37,6 +45,7 @@ Exports:
 | `@standardagents/code-web/fonts/<file>.ttf` | `dist/fonts/<file>.ttf` |
 | `@standardagents/code-web/licenses/<file>.txt` | `dist/licenses/<file>.txt` |
 | `@standardagents/code-web/build.json` | `dist/build.json` |
+| `@standardagents/code-web/manifest.json`, `.../manifest.sig` | `dist/manifest.json`, `dist/manifest.sig` |
 
 ## Using it from a Vite app
 
@@ -99,4 +108,10 @@ command otherwise. `node scripts/serve.mjs [host] [port]` serves `dist/` as
 the preview.
 
 The version in this package's `package.json` is a placeholder; the publisher
-sets the native build's version at publication time.
+sets the native build's version at publication time. A local build is not a
+publishable artifact: the build worker's recipe
+(`scripts/build-release-target.sh --target wasm32-unknown-unknown`) is what
+runs this script with the build identity, stages `pkg/`, `fonts/`,
+`licenses/`, and `build.json`, signs the manifest, and uploads the archive.
+`STANDARD_WEB_CARGO_ARTIFACT_LOG`, when set, receives Cargo's JSON artifact
+list so the worker's target-directory sweep keeps the units this build used.

package/dist/build.json

@@ -1 +1 @@
-{"schema":1,"commit":"cc5a19edd6c1ea054c782fe09a4d91792559d867","version":"0.14.1-canary.cc5a19"}
+{"schema":1,"commit":"d309b7fee6dc2aa352d45d9d54577b678fcf23b9","version":"0.14.1-canary.d309b7"}

package/dist/manifest.json

@@ -0,0 +1 @@
+{"schema":4,"format":"standard-npm-web-target-v1","repository":"standardagents/code-rs","commit":"d309b7fee6dc2aa352d45d9d54577b678fcf23b9","version":"0.14.1-canary.d309b7","target":"wasm32-unknown-unknown","signing":{"algorithm":"ed25519","keyId":"team-2026-1","platformCodeSignature":"ed25519-only"},"files":[{"path":"build.json","size":98,"sha256":"a3060b221c4853ffe57ee59fa6a38db5e7664b7385752473b498643fa2372161"},{"path":"fonts/JetBrainsMonoNerdFontMono-Bold.ttf","size":2473884,"sha256":"5bdd4a873f3cd32f882d2c55545089123926e27707d5880fc9eaf84eb01b6686"},{"path":"fonts/JetBrainsMonoNerdFontMono-BoldItalic.ttf","size":2475144,"sha256":"d931df2928b3216892d35980cddcad9edade1b9c9cd2e09a6c2937139f474742"},{"path":"fonts/JetBrainsMonoNerdFontMono-Italic.ttf","size":2472232,"sha256":"ccd88b36d325e6a905edc8dd3f2522718d9690d9bed3fbb4684c7e746c34f846"},{"path":"fonts/JetBrainsMonoNerdFontMono-Regular.ttf","size":2470116,"sha256":"f01031f40e48dc29e1112e6b0b0450a2c6cd097f3f35cfff05c55cb311f8034c"},{"path":"licenses/JetBrainsMono-OFL.txt","size":4413,"sha256":"add1f8a9fd7ff33c923114eede3a6fb5a6254dc5b59f031fa59feed8a4f0938a"},{"path":"licenses/NerdFonts-MIT.txt","size":1456,"sha256":"b880baeed54757299e39e404743837a8f4d375828cab87b46ac55126160b237d"},{"path":"pkg/standard_web.d.ts","size":6939,"sha256":"02c1eb35226b008e34ad82d78624e50b9fac8acd6007b98d433419c29d873576"},{"path":"pkg/standard_web.js","size":55968,"sha256":"c7f529a7d012eed43643be7b394b74b54e4f368e290974b0885f71f2254e2f79"},{"path":"pkg/standard_web_bg.wasm","size":6568237,"sha256":"1d5f574d602568bae3f1556b7f7dd2cbec04f92b38d53302cb01c7495ca891ac"},{"path":"pkg/standard_web_bg.wasm.d.ts","size":2678,"sha256":"7852bc4cdfce195b9b17ce794e44114706c5efd7b396c8181dbba76bf2d196ec"}]}

package/dist/manifest.sig

@@ -0,0 +1 @@
+k24/tNZ/lnvCp4sI6ww3aNUGU1RcBrDTefBS/ZDemmoqwGwJJx04kTXuqZrt2KhHEZ41HlYQK+uEFReXWRNQAg==

package/dist/pkg/standard_web.d.ts

@@ -98,13 +98,6 @@ export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembl
 
 export interface InitOutput {
     readonly memory: WebAssembly.Memory;
-    readonly __wbg_devicelogin_free: (a: number, b: number) => void;
-    readonly devicelogin_code: (a: number, b: number) => void;
-    readonly devicelogin_intervalMs: (a: number) => number;
-    readonly devicelogin_poll: (a: number) => number;
-    readonly devicelogin_start: (a: number, b: number) => number;
-    readonly devicelogin_verificationUrl: (a: number, b: number) => void;
-    readonly forget_browser: (a: number, b: number, c: number, d: number) => number;
     readonly __wbg_session_free: (a: number, b: number) => void;
     readonly link_check: (a: number) => void;
     readonly session_columns: (a: number) => number;
@@ -119,11 +112,18 @@ export interface InitOutput {
     readonly session_take_clipboard: (a: number, b: number) => void;
     readonly session_wheel: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => void;
     readonly start: () => void;
-    readonly __wasm_bindgen_func_elem_9239: (a: number, b: number, c: number, d: number) => void;
-    readonly __wasm_bindgen_func_elem_9241: (a: number, b: number, c: number, d: number) => void;
-    readonly __wasm_bindgen_func_elem_1321: (a: number, b: number, c: number) => void;
-    readonly __wasm_bindgen_func_elem_1321_2: (a: number, b: number, c: number) => void;
-    readonly __wasm_bindgen_func_elem_1321_3: (a: number, b: number, c: number) => void;
+    readonly __wbg_devicelogin_free: (a: number, b: number) => void;
+    readonly devicelogin_code: (a: number, b: number) => void;
+    readonly devicelogin_intervalMs: (a: number) => number;
+    readonly devicelogin_poll: (a: number) => number;
+    readonly devicelogin_start: (a: number, b: number) => number;
+    readonly devicelogin_verificationUrl: (a: number, b: number) => void;
+    readonly forget_browser: (a: number, b: number, c: number, d: number) => number;
+    readonly __wasm_bindgen_func_elem_9255: (a: number, b: number, c: number, d: number) => void;
+    readonly __wasm_bindgen_func_elem_9257: (a: number, b: number, c: number, d: number) => void;
+    readonly __wasm_bindgen_func_elem_1423: (a: number, b: number, c: number) => void;
+    readonly __wasm_bindgen_func_elem_1423_2: (a: number, b: number, c: number) => void;
+    readonly __wasm_bindgen_func_elem_1423_3: (a: number, b: number, c: number) => void;
     readonly __wbindgen_export: (a: number, b: number) => number;
     readonly __wbindgen_export2: (a: number, b: number, c: number, d: number) => number;
     readonly __wbindgen_export3: (a: number) => void;

package/dist/pkg/standard_web.js

@@ -682,7 +682,7 @@ function __wbg_get_imports() {
                     const a = state0.a;
                     state0.a = 0;
                     try {
-                        return __wasm_bindgen_func_elem_9241(a, state0.b, arg0, arg1);
+                        return __wasm_bindgen_func_elem_9257(a, state0.b, arg0, arg1);
                     } finally {
                         state0.a = a;
                     }
@@ -720,7 +720,7 @@ function __wbg_get_imports() {
                     const a = state0.a;
                     state0.a = 0;
                     try {
-                        return __wasm_bindgen_func_elem_9241(a, state0.b, arg0, arg1);
+                        return __wasm_bindgen_func_elem_9257(a, state0.b, arg0, arg1);
                     } finally {
                         state0.a = a;
                     }
@@ -1003,23 +1003,23 @@ function __wbg_get_imports() {
             return ret;
         },
         __wbindgen_cast_0000000000000001: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 1113, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
-            const ret = makeMutClosure(arg0, arg1, __wasm_bindgen_func_elem_9239);
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 1091, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, __wasm_bindgen_func_elem_9255);
             return addHeapObject(ret);
         },
         __wbindgen_cast_0000000000000002: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("CloseEvent")], shim_idx: 152, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
-            const ret = makeMutClosure(arg0, arg1, __wasm_bindgen_func_elem_1321);
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("CloseEvent")], shim_idx: 208, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, __wasm_bindgen_func_elem_1423);
             return addHeapObject(ret);
         },
         __wbindgen_cast_0000000000000003: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("Event")], shim_idx: 152, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
-            const ret = makeMutClosure(arg0, arg1, __wasm_bindgen_func_elem_1321_2);
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("Event")], shim_idx: 208, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, __wasm_bindgen_func_elem_1423_2);
             return addHeapObject(ret);
         },
         __wbindgen_cast_0000000000000004: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("MessageEvent")], shim_idx: 152, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
-            const ret = makeMutClosure(arg0, arg1, __wasm_bindgen_func_elem_1321_3);
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("MessageEvent")], shim_idx: 208, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, __wasm_bindgen_func_elem_1423_3);
             return addHeapObject(ret);
         },
         __wbindgen_cast_0000000000000005: function(arg0, arg1) {
@@ -1046,22 +1046,22 @@ function __wbg_get_imports() {
     };
 }
 
-function __wasm_bindgen_func_elem_1321(arg0, arg1, arg2) {
-    wasm.__wasm_bindgen_func_elem_1321(arg0, arg1, addHeapObject(arg2));
+function __wasm_bindgen_func_elem_1423(arg0, arg1, arg2) {
+    wasm.__wasm_bindgen_func_elem_1423(arg0, arg1, addHeapObject(arg2));
 }
 
-function __wasm_bindgen_func_elem_1321_2(arg0, arg1, arg2) {
-    wasm.__wasm_bindgen_func_elem_1321_2(arg0, arg1, addHeapObject(arg2));
+function __wasm_bindgen_func_elem_1423_2(arg0, arg1, arg2) {
+    wasm.__wasm_bindgen_func_elem_1423_2(arg0, arg1, addHeapObject(arg2));
 }
 
-function __wasm_bindgen_func_elem_1321_3(arg0, arg1, arg2) {
-    wasm.__wasm_bindgen_func_elem_1321_3(arg0, arg1, addHeapObject(arg2));
+function __wasm_bindgen_func_elem_1423_3(arg0, arg1, arg2) {
+    wasm.__wasm_bindgen_func_elem_1423_3(arg0, arg1, addHeapObject(arg2));
 }
 
-function __wasm_bindgen_func_elem_9239(arg0, arg1, arg2) {
+function __wasm_bindgen_func_elem_9255(arg0, arg1, arg2) {
     try {
         const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
-        wasm.__wasm_bindgen_func_elem_9239(retptr, arg0, arg1, addHeapObject(arg2));
+        wasm.__wasm_bindgen_func_elem_9255(retptr, arg0, arg1, addHeapObject(arg2));
         var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
         var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
         if (r1) {
@@ -1072,8 +1072,8 @@ function __wasm_bindgen_func_elem_9239(arg0, arg1, arg2) {
     }
 }
 
-function __wasm_bindgen_func_elem_9241(arg0, arg1, arg2, arg3) {
-    wasm.__wasm_bindgen_func_elem_9241(arg0, arg1, addHeapObject(arg2), addHeapObject(arg3));
+function __wasm_bindgen_func_elem_9257(arg0, arg1, arg2, arg3) {
+    wasm.__wasm_bindgen_func_elem_9257(arg0, arg1, addHeapObject(arg2), addHeapObject(arg3));
 }
 
 

package/dist/pkg/standard_web_bg.wasm.d.ts

@@ -1,13 +1,6 @@
 /* tslint:disable */
 /* eslint-disable */
 export const memory: WebAssembly.Memory;
-export const __wbg_devicelogin_free: (a: number, b: number) => void;
-export const devicelogin_code: (a: number, b: number) => void;
-export const devicelogin_intervalMs: (a: number) => number;
-export const devicelogin_poll: (a: number) => number;
-export const devicelogin_start: (a: number, b: number) => number;
-export const devicelogin_verificationUrl: (a: number, b: number) => void;
-export const forget_browser: (a: number, b: number, c: number, d: number) => number;
 export const __wbg_session_free: (a: number, b: number) => void;
 export const link_check: (a: number) => void;
 export const session_columns: (a: number) => number;
@@ -22,11 +15,18 @@ export const session_rows: (a: number) => number;
 export const session_take_clipboard: (a: number, b: number) => void;
 export const session_wheel: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => void;
 export const start: () => void;
-export const __wasm_bindgen_func_elem_9239: (a: number, b: number, c: number, d: number) => void;
-export const __wasm_bindgen_func_elem_9241: (a: number, b: number, c: number, d: number) => void;
-export const __wasm_bindgen_func_elem_1321: (a: number, b: number, c: number) => void;
-export const __wasm_bindgen_func_elem_1321_2: (a: number, b: number, c: number) => void;
-export const __wasm_bindgen_func_elem_1321_3: (a: number, b: number, c: number) => void;
+export const __wbg_devicelogin_free: (a: number, b: number) => void;
+export const devicelogin_code: (a: number, b: number) => void;
+export const devicelogin_intervalMs: (a: number) => number;
+export const devicelogin_poll: (a: number) => number;
+export const devicelogin_start: (a: number, b: number) => number;
+export const devicelogin_verificationUrl: (a: number, b: number) => void;
+export const forget_browser: (a: number, b: number, c: number, d: number) => number;
+export const __wasm_bindgen_func_elem_9255: (a: number, b: number, c: number, d: number) => void;
+export const __wasm_bindgen_func_elem_9257: (a: number, b: number, c: number, d: number) => void;
+export const __wasm_bindgen_func_elem_1423: (a: number, b: number, c: number) => void;
+export const __wasm_bindgen_func_elem_1423_2: (a: number, b: number, c: number) => void;
+export const __wasm_bindgen_func_elem_1423_3: (a: number, b: number, c: number) => void;
 export const __wbindgen_export: (a: number, b: number) => number;
 export const __wbindgen_export2: (a: number, b: number, c: number, d: number) => number;
 export const __wbindgen_export3: (a: number) => void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@standardagents/code-web",
-  "version": "0.14.1-canary.cc5a19",
+  "version": "0.14.1-canary.d309b7",
   "type": "module",
   "description": "The Standard viewer runtime for the browser: the TUI compiled to wasm, its JS glue, and its fonts",
   "license": "UNLICENSED",
@@ -28,6 +28,8 @@
     "./fonts/*": "./dist/fonts/*",
     "./licenses/*": "./dist/licenses/*",
     "./build.json": "./dist/build.json",
+    "./manifest.json": "./dist/manifest.json",
+    "./manifest.sig": "./dist/manifest.sig",
     "./package.json": "./package.json"
   },
   "files": [
@@ -35,6 +37,8 @@
     "dist/fonts",
     "dist/licenses",
     "dist/build.json",
+    "dist/manifest.json",
+    "dist/manifest.sig",
     "README.md"
   ],
   "scripts": {