onbuzz 5.4.8 → 5.4.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "onbuzz",
-  "version": "5.4.8",
+  "version": "5.4.9",
   "description": "Loxia OnBuzz - Your AI Fleet",
   "type": "module",
   "main": "src/index.js",
@@ -128,9 +128,9 @@
     "uuid": "$uuid"
   },
   "build": {
-    "appId": "com.loxia.autopilot",
-    "productName": "Loxia Autopilot",
-    "executableName": "loxia-autopilot",
+    "appId": "com.loxia.onbuzz",
+    "productName": "Loxia OnBuzz",
+    "executableName": "loxia-onbuzz",
     "npmRebuild": false,
     "publish": [
       {
@@ -154,20 +154,20 @@
     },
     "win": {
       "target": "nsis",
-      "icon": "electron/icon.png"
+      "icon": "electron/icon-onbuzz.png"
+    },
+    "nsis": {
+      "artifactName": "Loxia-OnBuzz-Setup-${version}.${ext}"
     },
     "mac": {
       "target": "dmg",
-      "icon": "electron/icon.png",
-      "artifactName": "Loxia-Autopilot-${version}-${arch}.${ext}"
+      "icon": "electron/icon-onbuzz.png",
+      "artifactName": "Loxia-OnBuzz-${version}-${arch}.${ext}"
     },
     "linux": {
       "target": "AppImage",
-      "icon": "electron/icon.png",
-      "artifactName": "Loxia-Autopilot-${version}.${ext}"
-    },
-    "nsis": {
-      "artifactName": "Loxia-Autopilot-Setup-${version}.${ext}"
+      "icon": "electron/icon-onbuzz.png",
+      "artifactName": "Loxia-OnBuzz-${version}.${ext}"
     }
   },
   "pkg": {

package/scripts/swap-brand.js

@@ -0,0 +1,66 @@
+#!/usr/bin/env node
+/**
+ * Brand swap for publishing: rewrite package.json as the OnBuzz identity
+ * (after snapshotting the current file to package.autopilot.json for restore).
+ *
+ * CRITICAL: the swap must cover the COMPLETE brand surface, including the
+ * electron-builder `build` section. The v5.4.8 release was built with a swap
+ * that changed only name/bin/description — the base config's hardcoded
+ * "Loxia-Autopilot-Setup-…" artifactName leaked into the OnBuzz build, both
+ * brands produced identically-named installers, the OnBuzz upload CLOBBERED
+ * the Autopilot one, and Autopilot updaters sha-failed (installed apps kept
+ * crash-looping). Any build that reads a swapped package.json must inherit
+ * brand-correct artifact names.
+ *
+ * Usage: node scripts/swap-brand.js onbuzz
+ * (Restore is a plain copy: package.autopilot.json → package.json.)
+ */
+
+import fs from 'fs';
+import path from 'path';
+import { fileURLToPath } from 'url';
+
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const pkgPath = path.join(ROOT, 'package.json');
+const backupPath = path.join(ROOT, 'package.autopilot.json');
+
+const target = process.argv[2];
+if (target !== 'onbuzz') {
+  console.error('Usage: node scripts/swap-brand.js onbuzz');
+  process.exit(1);
+}
+
+// Snapshot the Autopilot identity for the post-publish restore — byte-exact
+// copy (NOT a re-serialization, which shuffles key order and leaves phantom
+// diffs after the restore).
+fs.copyFileSync(pkgPath, backupPath);
+
+const p = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
+
+// npm identity
+p.name = 'onbuzz';
+p.bin = { onbuzz: './bin/cli.js' };
+p.description = 'Loxia OnBuzz - Your AI Fleet';
+delete p.scripts.prepublishOnly;
+
+// electron-builder identity — keep EVERY brand-bearing field consistent so
+// any electron build from this file produces OnBuzz-named, OnBuzz-branded
+// artifacts that cannot collide with Autopilot's on the shared release.
+if (p.build) {
+  p.build.appId = 'com.loxia.onbuzz';
+  p.build.productName = 'Loxia OnBuzz';
+  p.build.executableName = 'loxia-onbuzz';
+  p.build.nsis = { ...(p.build.nsis || {}), artifactName: 'Loxia-OnBuzz-Setup-${version}.${ext}' };
+  if (p.build.win) p.build.win.icon = 'electron/icon-onbuzz.png';
+  if (p.build.mac) {
+    p.build.mac.artifactName = 'Loxia-OnBuzz-${version}-${arch}.${ext}';
+    p.build.mac.icon = 'electron/icon-onbuzz.png';
+  }
+  if (p.build.linux) {
+    p.build.linux.artifactName = 'Loxia-OnBuzz-${version}.${ext}';
+    p.build.linux.icon = 'electron/icon-onbuzz.png';
+  }
+}
+
+fs.writeFileSync(pkgPath, JSON.stringify(p, null, 2) + '\n');
+console.log('  name: ' + p.name + ' | nsis artifact: ' + p.build?.nsis?.artifactName);

package/scripts/verify-update-feed.js

@@ -0,0 +1,121 @@
+#!/usr/bin/env node
+/**
+ * Update-feed verifier — the guarantee that INSTALLED apps can always find
+ * and download the next version.
+ *
+ * How updates actually work: an installed app (any vintage, either naming
+ * era) fetches `<brand>.yml` from the LATEST GitHub release and downloads
+ * exactly the filename that yml names, from that same release. It never
+ * guesses names — so artifact renames between releases are safe IF AND ONLY
+ * IF each release's yml matches its real assets. Every updater incident so
+ * far was a violation of that contract:
+ *   - ≤5.4.7: yml said hyphens, GitHub dot-sanitized the space-named
+ *     uploads → 404 → installed apps crash-looped.
+ *   - 5.4.8: onbuzz.yml pointed at the AUTOPILOT installer with a mismatched
+ *     sha512 (brand artifactName collision) → OnBuzz updates dead.
+ *
+ * Checks, per brand (autopilot + onbuzz), against the live feed:
+ *   1. <brand>.yml exists on the latest release.
+ *   2. yml version matches the release tag.
+ *   3. Every files[].url names an asset that EXISTS on that release
+ *      (byte-for-byte name match).
+ *   4. yml size matches the asset's actual size (catches wrong-file uploads
+ *      even when the name matches — sha512 isn't exposed by the GitHub API,
+ *      size is the practical proxy).
+ *   5. The two brands' installers are DISTINCT files (collision guard).
+ *
+ * Usage:
+ *   node scripts/verify-update-feed.js            → verify latest release
+ *   node scripts/verify-update-feed.js v5.4.8     → verify a specific tag
+ *
+ * Exit 0 = feed healthy. Exit 1 = installed apps cannot update — fix the
+ * release BEFORE walking away.
+ */
+
+const REPO = 'Loxia-ai/autopilot-releases';
+const BRANDS = ['autopilot', 'onbuzz'];
+
+async function getJson(url) {
+  const res = await fetch(url, { headers: { 'User-Agent': 'loxia-feed-verify' } });
+  if (!res.ok) throw new Error(`GET ${url} → ${res.status}`);
+  return res.json();
+}
+
+async function getText(url) {
+  const res = await fetch(url, { headers: { 'User-Agent': 'loxia-feed-verify' } });
+  if (!res.ok) return null;
+  return res.text();
+}
+
+/** Minimal yml field extraction — the electron-builder yml is flat enough. */
+function parseYml(text) {
+  const version = (text.match(/^version:\s*(.+)$/m) || [])[1]?.trim();
+  const files = [];
+  // files: - url: NAME \n sha512: … \n size: N   (block list)
+  const fileBlocks = text.matchAll(/-\s+url:\s*(.+)\n(?:\s+sha512:.*\n)?\s+size:\s*(\d+)/g);
+  for (const m of fileBlocks) files.push({ url: m[1].trim(), size: Number(m[2]) });
+  // fallback: top-level path (older shape) — no size guaranteed
+  const path = (text.match(/^path:\s*(.+)$/m) || [])[1]?.trim();
+  if (path && !files.some((f) => f.url === path)) files.push({ url: path, size: null });
+  return { version, files };
+}
+
+const argTag = process.argv[2];
+const release = argTag
+  ? await getJson(`https://api.github.com/repos/${REPO}/releases/tags/${argTag}`)
+  : await getJson(`https://api.github.com/repos/${REPO}/releases/latest`);
+
+const tag = release.tag_name;
+const tagVersion = tag.replace(/^v/, '');
+const assets = new Map(release.assets.map((a) => [a.name, a]));
+
+console.log(`\n  Verifying update feed on ${tag} (${assets.size} assets)\n`);
+
+const problems = [];
+const brandInstallers = {};
+
+for (const brand of BRANDS) {
+  const ymlName = `${brand}.yml`;
+  if (!assets.has(ymlName)) {
+    problems.push(`[${brand}] ${ymlName} MISSING from ${tag} — installed ${brand} apps see no update feed.`);
+    continue;
+  }
+  const text = await getText(`https://github.com/${REPO}/releases/download/${tag}/${ymlName}`);
+  if (!text) { problems.push(`[${brand}] ${ymlName} exists but could not be fetched.`); continue; }
+
+  const { version, files } = parseYml(text);
+  if (version !== tagVersion) {
+    problems.push(`[${brand}] ${ymlName} says version ${version} but the release tag is ${tagVersion}.`);
+  }
+  if (files.length === 0) {
+    problems.push(`[${brand}] ${ymlName} lists no files — malformed yml.`);
+  }
+
+  for (const f of files) {
+    const asset = assets.get(f.url);
+    if (!asset) {
+      problems.push(`[${brand}] yml names "${f.url}" but NO asset with that exact name exists → updater 404s.`);
+      continue;
+    }
+    if (f.size != null && asset.size !== f.size) {
+      problems.push(`[${brand}] "${f.url}": yml size ${f.size} != asset size ${asset.size} → WRONG FILE uploaded under this name (sha will fail).`);
+    }
+    if (f.url.endsWith('.exe')) brandInstallers[brand] = f.url;
+    console.log(`  [${brand}] ${f.url}  → asset ${asset ? 'found' : 'MISSING'}${f.size != null && asset ? (asset.size === f.size ? ', size OK' : ', SIZE MISMATCH') : ''}`);
+  }
+}
+
+// Cross-brand collision: both ymls must not claim the same installer file.
+if (brandInstallers.autopilot && brandInstallers.onbuzz
+    && brandInstallers.autopilot === brandInstallers.onbuzz) {
+  problems.push(`BRAND COLLISION: autopilot.yml and onbuzz.yml both point at "${brandInstallers.autopilot}" — one brand's users get the other brand's app (or a sha failure).`);
+}
+
+console.log('');
+if (problems.length) {
+  console.error(`  ❌ Update feed BROKEN on ${tag} — installed apps cannot update cleanly:\n`);
+  for (const p of problems) console.error(`   • ${p}`);
+  console.error('');
+  process.exit(1);
+}
+console.log(`  ✅ Update feed healthy on ${tag} — installed apps (all vintages, both brands) can find and download this version.\n`);