@trillboards/edge-sdk 0.2.7 → 0.2.9

package/deploy/windows/README.md

@@ -55,16 +55,21 @@ serves every Windows 10/11 — no per-arch builds.
 
 Requires NSIS and 7-Zip on PATH (`choco install nsis 7zip -y`). The release workflow publishes
 the `.exe` to `s3://trillboards-screen-static/connector/trillboards-connector-windows.exe`
-and invalidates the `screen.trillboards.com` CloudFront distribution, so the
-portal's stable download URL never changes.
+plus `trillboards-connector-windows.version.json`, containing the exact connector
+version, production commit, SHA-256, file size, and publication time. It then
+invalidates the `screen.trillboards.com` CloudFront distribution, so the portal's
+stable download URL never changes while field tests remain artifact-verifiable.
 
 ## Notes
 
 - Production `.exe` artifacts are signed with Azure Trusted Signing and checked
   with `Get-AuthenticodeSignature` before CDN publication.
-- The one-file wrapper uses the official 7-Zip SFX installer module from the
-  LZMA SDK. 7-Zip is licensed under the GNU LGPL; source and license information
-  are available at https://www.7-zip.org/.
+- The one-file wrapper uses `7zSD.sfx` from the official LZMA SDK, which Igor
+  Pavlov places in the public domain. It launches the signed inner installer
+  directly with an empty SFX directory prefix so its absolute temporary path is
+  not rewritten as a relative command. The release workflow executes that final
+  wrapper before CDN publication. Source and license information are at
+  https://www.7-zip.org/.
 - The legacy `install-service.ps1` (local-inference: requires system Node + npm
   install + ONNX models + a hand-edited deviceToken) is a different, older path.
   This local-first installer supersedes it for BYO-CCTV onboarding.

package/deploy/windows/bundle-windows-installer.ps1

@@ -17,8 +17,8 @@ param(
   [string]$ModelPath = "",
   [string]$ModelUrl = "https://huggingface.co/litert-community/gemma-4-E2B-it-litert-lm/resolve/main/gemma-4-E2B-it.litertlm",
   [string]$ModelSha256 = "181938105e0eefd105961417e8da75903eacda102c4fce9ce90f50b97139a63c",
-  [string]$SevenZipSdkUrl = "https://www.7-zip.org/a/lzma2301.7z",
-  [string]$SevenZipSdkSha256 = "317dd834d6bbfd95433488b832e823cd3d4d420101436422c03af88507dd1370"
+  [string]$SevenZipSdkUrl = "https://www.7-zip.org/a/lzma2602.7z",
+  [string]$SevenZipSdkSha256 = "2878c85f5f43a4a4e0952b1fd4e5fe097c1c143997a8047c7e1e788892aa9357"
 )
 
 $ErrorActionPreference = "Stop"
@@ -84,27 +84,12 @@ if (-not $sfxModule) { Fail "official 7zSD.sfx installer module was not found" }
 $innerName = "TrillboardsEdgeSetup-core.exe"
 Copy-Item -LiteralPath $InnerInstaller -Destination (Join-Path $Stage $innerName) -Force
 $sevenZipNotice = @'
-This installer uses the 7-Zip SFX installer module from the LZMA SDK.
-7-Zip is licensed under the GNU LGPL and other included licenses.
+This installer uses 7zSD.sfx from the LZMA SDK.
+The LZMA SDK is placed in the public domain by Igor Pavlov.
 Source and license information: https://www.7-zip.org/
 '@
 [System.IO.File]::WriteAllText((Join-Path $Stage "7zip-NOTICE.txt"), $sevenZipNotice, [System.Text.UTF8Encoding]::new($false))
 
-$launcher = @'
-Option Explicit
-Dim shell, fso, base, installer, model, command, result
-Set shell = CreateObject("WScript.Shell")
-Set fso = CreateObject("Scripting.FileSystemObject")
-base = fso.GetParentFolderName(WScript.ScriptFullName)
-installer = fso.BuildPath(base, "TrillboardsEdgeSetup-core.exe")
-model = fso.BuildPath(base, "gemma-4-E2B-it.litertlm")
-shell.Environment("Process")("TRILLBOARDS_BUNDLED_MODEL_PATH") = model
-command = Chr(34) & installer & Chr(34) & " /MODEL_SOURCE=" & Chr(34) & model & Chr(34)
-result = shell.Run(command, 1, True)
-WScript.Quit result
-'@
-[System.IO.File]::WriteAllText((Join-Path $Stage "install-bundled-ai.vbs"), $launcher, [System.Text.UTF8Encoding]::new($false))
-
 $archive = Join-Path $Scratch "trillboards-cctv.7z"
 Push-Location $Stage
 try {
@@ -123,7 +108,8 @@ $config = @'
 Title="Trillboards CCTV Setup"
 Progress="yes"
 GUIMode="1"
-RunProgram="wscript.exe install-bundled-ai.vbs"
+Directory=""
+RunProgram="\"%%T\TrillboardsEdgeSetup-core.exe\" /MODEL_SOURCE=\"%%T\gemma-4-E2B-it.litertlm\""
 ;!@InstallEnd@!
 '@
 $configPath = Join-Path $Scratch "sfx-config.txt"

package/deploy/windows/installer.nsi

@@ -57,18 +57,43 @@ BrandingText "Trillboards"
 !insertmacro MUI_LANGUAGE "English"
 
 Function .onInit
-  ; The SFX launcher supplies a process-scoped environment value so paths with
-  ; spaces are unambiguous. Keep the command-line option as an engineering and
-  ; recovery fallback.
+  ; The SFX launcher passes its absolute extraction path. Keep the environment
+  ; value as an engineering and recovery fallback for the signed inner package.
   ReadEnvStr $ModelSource "TRILLBOARDS_BUNDLED_MODEL_PATH"
   ${If} $ModelSource == ""
     ${GetParameters} $0
     ${GetOptions} $0 "/MODEL_SOURCE=" $ModelSource
   ${EndIf}
   ${If} $ModelSource == ""
+    ReadEnvStr $1 "TRILLBOARDS_BUNDLE_RELEASE_SMOKE_MARKER"
+    ${If} $1 != ""
+      SetErrorLevel 2
+      Quit
+    ${EndIf}
     MessageBox MB_ICONSTOP|MB_OK "This installer is missing its included local AI model. Download the complete Trillboards CCTV installer and try again."
     Abort
   ${EndIf}
+
+  ; The production release runs the final signed customer SFX once before CDN
+  ; publication. This branch proves that the wrapper extracted the model and
+  ; launched this exact signed inner installer without modifying the machine.
+  ReadEnvStr $1 "TRILLBOARDS_BUNDLE_RELEASE_SMOKE_MARKER"
+  ${If} $1 != ""
+    ${IfNot} ${FileExists} "$ModelSource"
+      SetErrorLevel 2
+      Quit
+    ${EndIf}
+    ClearErrors
+    FileOpen $2 "$1" w
+    IfErrors bundle_smoke_failed
+    FileWrite $2 "Trillboards customer bundle launch OK$\r$\n"
+    FileClose $2
+    SetErrorLevel 0
+    Quit
+bundle_smoke_failed:
+    SetErrorLevel 3
+    Quit
+  ${EndIf}
 FunctionEnd
 
 Section "Install"

package/dist/EdgeAgent.js

@@ -44,7 +44,7 @@ const edge_ads_1 = require("@trillboards/edge-ads");
 const CommandRouter_1 = require("./CommandRouter");
 const config_1 = require("./config");
 const dataDir_1 = require("./dataDir");
-const SDK_VERSION = '0.2.7';
+const SDK_VERSION = '0.2.9';
 class EdgeAgent extends events_1.EventEmitter {
     constructor(config, deps) {
         super();

package/dist/diagnose.d.ts

@@ -21,7 +21,7 @@ export interface DiagnosticReport {
         warnings: number;
     };
 }
-declare const SDK_VERSION = "0.2.7";
+declare const SDK_VERSION = "0.2.9";
 declare function checkNodeVersion(): CheckResult;
 declare function checkPlatform(): CheckResult;
 declare function checkMemory(): CheckResult;

package/dist/diagnose.js

@@ -59,7 +59,7 @@ const modelIntegrity_1 = require("./modelIntegrity");
 // ---------------------------------------------------------------------------
 // SDK version — mirrors package.json; kept in sync by CI
 // ---------------------------------------------------------------------------
-const SDK_VERSION = '0.2.7';
+const SDK_VERSION = '0.2.9';
 exports._SDK_VERSION = SDK_VERSION;
 // ---------------------------------------------------------------------------
 // ANSI helpers (no external deps)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trillboards/edge-sdk",
-  "version": "0.2.7",
+  "version": "0.2.9",
   "description": "Composable cross-platform Edge AI SDK for audience sensing on DOOH/CTV devices",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",