signetai 0.199.17 → 0.199.32

package/bin/launch.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { spawn } from "node:child_process";
-import { existsSync } from "node:fs";
+import { existsSync, readFileSync } from "node:fs";
 import { createRequire } from "node:module";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -12,6 +12,8 @@ const packageDir = dirname(dirname(fileURLToPath(import.meta.url)));
 const require = createRequire(import.meta.url);
 const binaryName = process.platform === "win32" ? "signet.exe" : "signet";
 const binaryPath = join(packageDir, "native", binaryName);
+const connectorAssetsPath = join(packageDir, "runtime", "connectors");
+const connectorMarkerPath = join(connectorAssetsPath, ".signet-connectors-version");
 
 function resolveNativePackageBinaryPath() {
 	const platform = detectNativePlatform();
@@ -33,6 +35,55 @@ function resolveBinaryPath() {
 	return null;
 }
 
+function loadNativeManifest() {
+	try {
+		const manifest = JSON.parse(readFileSync(join(packageDir, "native-manifest.json"), "utf8"));
+		if (typeof manifest !== "object" || manifest === null) return null;
+		return manifest;
+	} catch {
+		return null;
+	}
+}
+
+function connectorComponent(manifest) {
+	if (typeof manifest.components !== "object" || manifest.components === null) return null;
+	const component = manifest.components.connectors;
+	if (typeof component !== "object" || component === null) return null;
+	if (typeof manifest.version !== "string" || typeof component.sha256 !== "string") return null;
+	return component;
+}
+
+function hasConnectorAssets(manifest) {
+	const component = connectorComponent(manifest);
+	if (!existsSync(connectorAssetsPath) || !existsSync(connectorMarkerPath)) return false;
+
+	try {
+		const marker = JSON.parse(readFileSync(connectorMarkerPath, "utf8"));
+		return marker.version === manifest.version && marker.sha256.toLowerCase() === component.sha256.toLowerCase();
+	} catch {
+		return false;
+	}
+}
+
+function warnIfInstallAssetsMissing(resolvedBinaryPath) {
+	const missing = [];
+	if (resolvedBinaryPath !== binaryPath) missing.push("native/");
+	const manifest = loadNativeManifest();
+	if (manifest !== null && connectorComponent(manifest) !== null && !hasConnectorAssets(manifest)) {
+		missing.push("runtime/connectors/");
+	}
+	if (missing.length === 0) return;
+
+	console.error(`Signet install assets are incomplete: missing ${missing.join(" and ")}.`);
+	if (resolvedBinaryPath !== binaryPath) {
+		console.error("The platform native package is installed, but Signet's postinstall did not finish linking the wrapper assets.");
+	} else {
+		console.error("Signet's postinstall did not finish installing all required wrapper assets.");
+	}
+	console.error("If Bun blocked the lifecycle script, run `bun pm -g untrusted`, trust Signet's postinstall, then reinstall with `bun add -g signetai`.");
+	console.error("If the postinstall failed, reinstall with npm or use the official installer from https://signetai.sh/install.sh.");
+}
+
 export function launchSignet() {
 	const resolvedBinaryPath = resolveBinaryPath();
 	if (!resolvedBinaryPath) {
@@ -42,6 +93,8 @@ export function launchSignet() {
 		process.exit(1);
 	}
 
+	warnIfInstallAssetsMissing(resolvedBinaryPath);
+
 	// Point the binary at the wrapper's installed runtime tree so the
 	// connector's `getPluginSourceDir()` `SIGNET_DIR/runtime/connectors/...`
 	// fallback can find per-harness plugin assets that the native binary

package/dist/mcp-stdio.js

@@ -43160,6 +43160,7 @@ if (isBun) {
 } else {
   Database = require2("better-sqlite3");
 }
+var MAX_ZERO_FREE_SPACE_PROBE_BYTES = 1024 * 1024;
 var migrationBackupDeps = {
   copyFileSync,
   readdirSync: readdirSync2,
@@ -43664,6 +43665,7 @@ var ZERO_ACTIVE_ATTRIBUTE_ENTITIES_SQL = `
 	LIMIT ?`;
 
 // ../../platform/daemon/src/telemetry.ts
+var TELEMETRY_LOG_MAX_BYTES = 10 * 1024 * 1024;
 var TELEMETRY_CLAIM_TIMEOUT_MS = 10 * 60 * 1000;
 var DELIVERY_HEALTH_WINDOW_MS = 24 * 60 * 60 * 1000;
 // ../../node_modules/.bun/typebox@1.3.7/node_modules/typebox/build/system/hashing/hash.mjs
@@ -50626,6 +50628,8 @@ var GRAPHIQ_COMPAT_ALIASES = new Map([
   ["code_briefing", "signet_code_briefing"]
 ]);
 var MARKETPLACE_PROXY_REFRESH_TIMEOUT_MS = 5000;
+var MARKETPLACE_PROXY_REFRESH_TTL_MS = 30000;
+var marketplaceRefreshes = new Map;
 function readDaemonAuthToken() {
   const apiKey = process.env.SIGNET_API_KEY?.trim();
   if (apiKey)
@@ -50880,6 +50884,32 @@ async function fetchMarketplacePolicy(baseUrl, authorizationHeader) {
   }
   return result.data.policy;
 }
+function marketplaceRefreshKey(baseUrl, context, authorizationHeader) {
+  return JSON.stringify({ baseUrl, context, authorizationHeader });
+}
+async function fetchMarketplaceRefreshSnapshot(state) {
+  const key = marketplaceRefreshKey(state.baseUrl, state.context, state.authorizationHeader);
+  const now2 = Date.now();
+  const cached2 = marketplaceRefreshes.get(key);
+  if (cached2 && cached2.expiresAt > now2)
+    return cached2.promise;
+  const promise3 = (async () => {
+    const policy = await fetchMarketplacePolicy(state.baseUrl, state.authorizationHeader);
+    const routed = await daemonFetch(state.baseUrl, appendMarketplaceContext("/api/marketplace/mcp/tools?refresh=1", state.context), {
+      timeout: MARKETPLACE_PROXY_REFRESH_TIMEOUT_MS,
+      authorizationHeader: state.authorizationHeader
+    });
+    return { policy, routed };
+  })();
+  marketplaceRefreshes.set(key, { expiresAt: now2 + MARKETPLACE_PROXY_REFRESH_TTL_MS, promise: promise3 });
+  try {
+    return await promise3;
+  } catch (error51) {
+    if (marketplaceRefreshes.get(key)?.promise === promise3)
+      marketplaceRefreshes.delete(key);
+    throw error51;
+  }
+}
 async function refreshMarketplaceProxyTools(server, options) {
   const state = marketplaceProxyState.get(server);
   if (!state || !state.enabled) {
@@ -50887,14 +50917,10 @@ async function refreshMarketplaceProxyTools(server, options) {
   }
   const notify = options?.notify ?? true;
   const registeredTools = getRegisteredToolsMap(server);
-  const policy = await fetchMarketplacePolicy(state.baseUrl, state.authorizationHeader);
-  if (policy) {
-    state.policy = policy;
-  }
-  const routed = await daemonFetch(state.baseUrl, appendMarketplaceContext("/api/marketplace/mcp/tools?refresh=1", state.context), {
-    timeout: MARKETPLACE_PROXY_REFRESH_TIMEOUT_MS,
-    authorizationHeader: state.authorizationHeader
-  });
+  const snapshot = await fetchMarketplaceRefreshSnapshot(state);
+  if (snapshot.policy)
+    state.policy = snapshot.policy;
+  const routed = snapshot.routed;
   if (!routed.ok) {
     return { changed: false, count: state.names.size, error: routed.error };
   }

package/native-manifest.json

@@ -1,43 +1,43 @@
 {
   "schemaVersion": 1,
-  "version": "0.199.17",
+  "version": "0.199.32",
   "assets": [
     {
       "name": "signet-darwin-arm64",
       "platform": "darwin-arm64",
-      "sha256": "ae967e97c2259b426ca6390c8cca835091708f9758dfd1edb709a9061d05bd21",
-      "size": 125267872
+      "sha256": "0705d6ba71840d1ba81259bde0f9e9fa017686aa55fae6d1f1945a6e60da9ddb",
+      "size": 125284384
     },
     {
       "name": "signet-darwin-x64",
       "platform": "darwin-x64",
-      "sha256": "5ad9e56b136448b08acd90149e93907af5330aebf714d041153e080acd864e5f",
-      "size": 130239040
+      "sha256": "3efa9d73b0c961acb2214a4457eb27b5f26d920949e6b32ee832e99fe4134ddf",
+      "size": 130271808
     },
     {
       "name": "signet-linux-arm64",
       "platform": "linux-arm64",
-      "sha256": "d7e9af1306d0f25540f5017911646c34863521abeb54a1a32557736a3460ac4f",
-      "size": 169809705
+      "sha256": "11765339a3cf6e9b5c7c8127ce38988ba21ea4ab2be55ee858dc2df7d653d4a5",
+      "size": 169837242
     },
     {
       "name": "signet-linux-x64",
       "platform": "linux-x64",
-      "sha256": "9254dcae9dba07b0889dd4c56bfc99e376c724ec63490d123403754bc0bbbc2d",
-      "size": 172184287
+      "sha256": "48842e1d324c9ba3be9c5bdd7fac44290fa35f3284577b4a0f918f64b18afe54",
+      "size": 172211824
     },
     {
       "name": "signet-win32-x64.exe",
       "platform": "win32-x64",
-      "sha256": "07bf79fb594fa06554590d2df7d99b08f14587008a467cf09af58a96bde6959b",
-      "size": 180310528
+      "sha256": "c584ed02737f0f3e339bff60c50562513510fc5f6ef14bd9e808f90848151440",
+      "size": 180338176
     }
   ],
   "components": {
     "connectors": {
-      "url": "signet-connectors-0.199.17.tar.gz",
-      "sha256": "50894b56fbb1700a23159f0d94fe90bd080a663029e88365f51b52c67531e0e0",
-      "size": 21669
+      "url": "signet-connectors-0.199.32.tar.gz",
+      "sha256": "e1202b6b6b0d11eddde2e413130583501dab16647364cd017bf0a1823972be1c",
+      "size": 21672
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "signetai",
-  "version": "0.199.17",
+  "version": "0.199.32",
   "description": "Signet native CLI installer wrapper",
   "type": "module",
   "bin": {
@@ -65,10 +65,10 @@
     "access": "public"
   },
   "optionalDependencies": {
-    "signetai-darwin-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.199.17/signetai-darwin-arm64-0.199.17.tgz",
-    "signetai-darwin-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.199.17/signetai-darwin-x64-0.199.17.tgz",
-    "signetai-linux-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.199.17/signetai-linux-arm64-0.199.17.tgz",
-    "signetai-linux-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.199.17/signetai-linux-x64-0.199.17.tgz",
-    "signetai-win32-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.199.17/signetai-win32-x64-0.199.17.tgz"
+    "signetai-darwin-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.199.32/signetai-darwin-arm64-0.199.32.tgz",
+    "signetai-darwin-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.199.32/signetai-darwin-x64-0.199.32.tgz",
+    "signetai-linux-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.199.32/signetai-linux-arm64-0.199.32.tgz",
+    "signetai-linux-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.199.32/signetai-linux-x64-0.199.32.tgz",
+    "signetai-win32-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.199.32/signetai-win32-x64-0.199.32.tgz"
   }
 }

package/scripts/install-native.js

@@ -164,6 +164,9 @@ async function main() {
 			await chmod(destination, 0o755);
 		}
 		console.log(`Linked Signet native binary for ${platform}`);
+		if (process.platform === "darwin") {
+			console.log("macOS Gatekeeper tip: browser-downloaded unsigned binaries may require right-click Open or Open Anyway. Only bypass Gatekeeper for a trusted official Signet binary. See https://docs.signetai.sh/getting-started/install/");
+		}
 	} catch (err) {
 		rmSync(destination, { force: true });
 		throw err;
@@ -205,6 +208,16 @@ function verifySha256(path, expected) {
 	}
 }
 
+function isConnectorMarker(value) {
+	if (typeof value !== "object" || value === null) return false;
+	return (
+		typeof value.version === "string" &&
+		value.version.length > 0 &&
+		typeof value.sha256 === "string" &&
+		/^[a-f0-9]{64}$/i.test(value.sha256)
+	);
+}
+
 function nativePackageVersion() {
 	try {
 		return JSON.parse(readFileSync(join(packageDir, "package.json"), "utf8")).version;
@@ -235,9 +248,17 @@ async function installConnectorAssets() {
 
 	const targetDir = join(packageDir, "runtime", "connectors");
 	const targetMarker = join(targetDir, ".signet-connectors-version");
+	let installedMarker = null;
+	try {
+		installedMarker = JSON.parse(readFileSync(targetMarker, "utf8"));
+	} catch {
+		// Reinstall legacy or malformed markers instead of trusting stale assets.
+	}
 	if (
 		existsSync(targetMarker) &&
-		readFileSync(targetMarker, "utf8").trim() === manifest.version
+		isConnectorMarker(installedMarker) &&
+		installedMarker.version === manifest.version &&
+		installedMarker.sha256.toLowerCase() === component.sha256.toLowerCase()
 	) {
 		// Already extracted for this version. Skip to keep postinstall fast
 		// and to avoid clobbering user-tweaked assets.
@@ -270,7 +291,10 @@ async function installConnectorAssets() {
 		if (result.status !== 0) {
 			throw new Error(`tar extraction failed with status ${result.status ?? "unknown"}`);
 		}
-		writeFileSync(targetMarker, `${manifest.version}\n`);
+		writeFileSync(
+			targetMarker,
+			`${JSON.stringify({ version: manifest.version, sha256: component.sha256 })}\n`,
+		);
 		console.log(`Installed connector assets to ${targetDir}`);
 	} finally {
 		rmSync(tempPath, { force: true });