freecode-sh 0.1.0-alpha.42 → 0.1.0-rc.4

package/release.mjs

@@ -0,0 +1,64 @@
+import { verifyReleaseSignature } from './release-trust.mjs'
+import versions from './release-version.cjs'
+export const DESKTOP_ORIGIN = 'https://releases.freecode.sh'
+export const NATIVE_TARGETS = ['darwin-arm64', 'windows-x64']
+export function desktopAssetName(version, target) {
+  versions.releaseVersion(version)
+  if (!NATIVE_TARGETS.includes(target)) throw new Error('Unsupported desktop target')
+  return `freecode-desktop-${version}-${target}.${target === 'darwin-arm64' ? 'dmg' : 'zip'}`
+}
+export function terminalAssetName(version, target) {
+  desktopAssetName(version, target) // Shared version and platform validation.
+  return `freecode-terminal-${version}-${target}.zip`
+}
+export function candidateAssetNames(version, target, terminalVersion = version) {
+  const desktop = desktopAssetName(version, target)
+  return [desktop, ...(target === 'darwin-arm64' ? [desktop.replace(/\.dmg$/, '.zip')] : []), terminalAssetName(terminalVersion, target)]
+}
+function validateInventory(manifest, surface, archives, assetName) {
+  if (manifest.product !== `freecode-${surface}` || manifest.automaticUpdates !== false || manifest.engineVersion !== '2.1.1' ||
+      !/^[a-f0-9]{40}$/.test(manifest.sourceRevision)) throw new Error(`Invalid ${surface} release metadata`)
+  if (!Number.isSafeInteger(manifest.buildNumber)) throw new Error('Invalid release build number')
+  versions.nativeVersions(manifest.version, manifest.buildNumber)
+  if (Object.keys(manifest.assets || {}).sort().join(',') !== NATIVE_TARGETS.join(',')) throw new Error(`Unexpected ${surface} targets`)
+  if (Object.keys(manifest.archives || {}).sort().join(',') !== archives.sort().join(',')) throw new Error(`Incomplete ${surface} archive inventory`)
+  for (const name of archives) {
+    const asset = manifest.archives[name]
+    if (!/^[a-f0-9]{64}$/.test(asset?.sha256) || !Number.isSafeInteger(asset?.size) || asset.size < 1) throw new Error('Invalid archive digest')
+  }
+  for (const target of NATIVE_TARGETS) {
+    const name = assetName(manifest.version, target), asset = manifest.assets[target]
+    if (asset?.name !== name || asset.url !== `${DESKTOP_ORIGIN}/native/${surface}/releases/v${manifest.version}/${name}` ||
+        asset.sha256 !== manifest.archives[name].sha256 || asset.size !== manifest.archives[name].size)
+      throw new Error(`Invalid ${surface} asset: ${target}`)
+  }
+  return manifest
+}
+export function validateDesktopManifest(manifest) {
+  if (manifest.schemaVersion !== 2) throw new Error('Invalid desktop release metadata')
+  if (!Number.isSafeInteger(manifest.terminal?.buildNumber)) throw new Error('Invalid bundled terminal build number')
+  versions.nativeVersions(manifest.terminal?.version, manifest.terminal.buildNumber)
+  const archives = NATIVE_TARGETS.flatMap(target => candidateAssetNames(manifest.version, target))
+    .filter(name => name.startsWith('freecode-desktop-'))
+  return validateInventory(manifest, 'desktop', archives, desktopAssetName)
+}
+export function validateTerminalManifest(manifest) {
+  if (manifest.schemaVersion !== 1) throw new Error('Invalid terminal release metadata')
+  return validateInventory(manifest, 'terminal', NATIVE_TARGETS.map(target => terminalAssetName(manifest.version, target)), terminalAssetName)
+}
+export function signedDesktopManifest(bytes, signature, publicKey) {
+  if (!verifyReleaseSignature(bytes, signature, publicKey)) throw new Error('Invalid desktop release signature')
+  return validateDesktopManifest(JSON.parse(bytes.toString('utf8')))
+}
+export function signedTerminalManifest(bytes, signature, publicKey) {
+  if (!verifyReleaseSignature(bytes, signature, publicKey)) throw new Error('Invalid terminal release signature')
+  return validateTerminalManifest(JSON.parse(bytes.toString('utf8')))
+}
+// Runtime readers accept only the current per-product format. Migration is offline tooling.
+export async function downloadManifest(surface, { publicFetch = fetch, publicKey } = {}) {
+  if (!['desktop', 'terminal'].includes(surface)) throw new Error('Unsupported release product')
+  const response = await publicFetch(`${DESKTOP_ORIGIN}/native/${surface}/channels/rc.json`, { cache: 'no-store', redirect: 'error', signal: AbortSignal.timeout(10000) })
+  if (!response.ok) throw new Error(`${surface} RC unavailable`)
+  const envelope = await response.json()
+  return (surface === 'terminal' ? signedTerminalManifest : signedDesktopManifest)(Buffer.from(envelope.manifest, 'base64'), Buffer.from(envelope.signature, 'base64'), publicKey)
+}

package/terminal-release.json

@@ -0,0 +1,33 @@
+{
+  "schemaVersion": 1,
+  "product": "freecode-terminal",
+  "version": "0.1.0-rc.4",
+  "buildNumber": 56,
+  "engineVersion": "2.1.1",
+  "sourceRevision": "f4853b72980d4dddc6d8126bd0cb5017b785b83d",
+  "automaticUpdates": false,
+  "assets": {
+    "darwin-arm64": {
+      "name": "freecode-terminal-0.1.0-rc.4-darwin-arm64.zip",
+      "sha256": "4a3c31c3d1e8501f5a446d5bf3a35c49913bc56362e32605c91f092935cd9a83",
+      "size": 111313948,
+      "url": "https://releases.freecode.sh/native/terminal/releases/v0.1.0-rc.4/freecode-terminal-0.1.0-rc.4-darwin-arm64.zip"
+    },
+    "windows-x64": {
+      "name": "freecode-terminal-0.1.0-rc.4-windows-x64.zip",
+      "sha256": "9c2155e099cc83dae6cc6de0c66a8dd03452c17fadb03de6168a86f2bd05fdb8",
+      "size": 143622315,
+      "url": "https://releases.freecode.sh/native/terminal/releases/v0.1.0-rc.4/freecode-terminal-0.1.0-rc.4-windows-x64.zip"
+    }
+  },
+  "archives": {
+    "freecode-terminal-0.1.0-rc.4-darwin-arm64.zip": {
+      "sha256": "4a3c31c3d1e8501f5a446d5bf3a35c49913bc56362e32605c91f092935cd9a83",
+      "size": 111313948
+    },
+    "freecode-terminal-0.1.0-rc.4-windows-x64.zip": {
+      "sha256": "9c2155e099cc83dae6cc6de0c66a8dd03452c17fadb03de6168a86f2bd05fdb8",
+      "size": 143622315
+    }
+  }
+}