vigthoria-cli 1.13.18 → 1.13.22

package/install.sh

@@ -26,34 +26,59 @@ else
 fi
 
 # Configuration
-CLI_VERSION="1.13.18"
+CLI_VERSION="1.13.20"
 INSTALL_DIR="$HOME/.vigthoria"
-REPO_URL="https://market.vigthoria.io/vigthoria/vigthoria-cli"
-GIT_PACKAGE_URL="git+https://market.vigthoria.io/vigthoria/vigthoria-cli.git"
 MANIFEST_URL="${VIGTHORIA_UPDATE_MANIFEST_URL:-https://extension.vigthoria.io/downloads/manifest.json}"
 HOSTED_TARBALL_URL="https://extension.vigthoria.io/downloads/vigthoria-cli-${CLI_VERSION}.tgz"
 HOSTED_TARBALL_SHA256=""
+INSTALLER_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd || true)"
+RELEASE_RESOLVER="$INSTALLER_ROOT/scripts/release/resolve-release-manifest.mjs"
+RELEASE_INSTALLER="$INSTALLER_ROOT/scripts/release/install-release.mjs"
+
+validate_release_url() {
+    python3 - "$1" <<'PY'
+import sys
+from urllib.parse import urlsplit
+allowed = {
+    'extension.vigthoria.io', 'landing.vigthoria.io', 'cli.vigthoria.io',
+    'coder.vigthoria.io', 'market.vigthoria.io', 'registry.npmjs.org',
+}
+try:
+    parsed = urlsplit(sys.argv[1])
+    valid = parsed.scheme == 'https' and parsed.hostname in allowed and parsed.port in (None, 443) and not parsed.username and not parsed.password and '\\' not in sys.argv[1]
+except Exception:
+    valid = False
+raise SystemExit(0 if valid else 1)
+PY
+}
 
 resolve_release_manifest() {
-    if ! command -v curl >/dev/null 2>&1 || ! command -v python3 >/dev/null 2>&1; then
+    # Direct artifacts are accepted only when the packaged shared verifier is
+    # present and validates the strict manifest plus detached Ed25519 signature.
+    # A curl-piped legacy installer therefore falls back to the exact pinned npm
+    # version instead of trusting an unsigned manifest.
+    if [[ ! -f "$RELEASE_RESOLVER" ]] || ! command -v node >/dev/null 2>&1 || ! command -v python3 >/dev/null 2>&1; then
         return 0
     fi
 
-    local manifest_json
-    manifest_json="$(curl -fsSL "$MANIFEST_URL" 2>/dev/null || true)"
-    if [[ -z "$manifest_json" ]]; then
+    if ! validate_release_url "$MANIFEST_URL"; then
+        echo "Refusing untrusted release manifest URL" >&2
+        exit 1
+    fi
+    local resolved_json
+    resolved_json="$(node "$RELEASE_RESOLVER" "$MANIFEST_URL" stable 2>/dev/null || true)"
+    if [[ -z "$resolved_json" ]]; then
         return 0
     fi
 
     local resolved
-    resolved="$(printf '%s' "$manifest_json" | python3 -c "
+    resolved="$(printf '%s' "$resolved_json" | python3 -c "
 import json, sys
 try:
     data = json.load(sys.stdin)
-    stable = (data.get('channels') or {}).get('stable') or {}
-    version = str(stable.get('version') or '').strip()
-    url = str(stable.get('url') or '').strip()
-    sha256 = str(stable.get('sha256') or '').strip().lower()
+    version = str(data.get('version') or '').strip()
+    url = str(data.get('url') or '').strip()
+    sha256 = str(data.get('sha256') or '').strip().lower()
     if version:
         print(version)
     if url:
@@ -74,6 +99,10 @@ except Exception:
             CLI_VERSION="$manifest_version"
         fi
         if [[ -n "$manifest_url" ]]; then
+            if ! validate_release_url "$manifest_url"; then
+                echo "Refusing untrusted release artifact URL" >&2
+                exit 1
+            fi
             HOSTED_TARBALL_URL="$manifest_url"
         elif [[ -n "$manifest_version" ]]; then
             HOSTED_TARBALL_URL="https://extension.vigthoria.io/downloads/vigthoria-cli-${CLI_VERSION}.tgz"
@@ -193,7 +222,11 @@ install_cli() {
         echo "Downloading checksum-verified hosted release package..."
         RELEASE_TMP_DIR="$(mktemp -d "${TMPDIR:-/tmp}/vigthoria-cli-install.XXXXXX")"
         RELEASE_ARCHIVE="$RELEASE_TMP_DIR/vigthoria-cli-${CLI_VERSION}.tgz"
-        if ! curl -fsSL "$HOSTED_TARBALL_URL" -o "$RELEASE_ARCHIVE"; then
+        if ! validate_release_url "$HOSTED_TARBALL_URL"; then
+            echo -e "${RED}Refusing untrusted release artifact URL${NC}"
+            return 1
+        fi
+        if ! curl -fsS --proto '=https' --max-redirs 0 "$HOSTED_TARBALL_URL" -o "$RELEASE_ARCHIVE"; then
             rm -rf "$RELEASE_TMP_DIR"
             echo -e "${RED}✗ Failed to download verified release package${NC}"
             exit 1
@@ -212,42 +245,23 @@ install_cli() {
             echo -e "${RED}✗ Release checksum verification failed${NC}"
             exit 1
         fi
-        npm install -g --force "$RELEASE_ARCHIVE"
+        if [[ -f "$RELEASE_INSTALLER" ]]; then
+            node "$RELEASE_INSTALLER" "$RELEASE_ARCHIVE" "$CLI_VERSION"
+        else
+            echo -e "${RED}✗ Transactional release installer is unavailable${NC}"
+            exit 1
+        fi
         rm -rf "$RELEASE_TMP_DIR"
-    elif npm view vigthoria-cli version &> /dev/null; then
-        echo "Installing from npm registry..."
-        npm install -g --force vigthoria-cli
-    elif npm install -g --force "$GIT_PACKAGE_URL"; then
-        echo "Installed from git package fallback."
-    else
-        # Option 2: Install from local or git
-        echo "Installing from source..."
-        
-        # Check if we're in the CLI directory
-        if [ -f "package.json" ] && grep -q '"name": "vigthoria-cli"' package.json; then
-            echo "Installing from current directory..."
-            npm install
-            npm run build
-            npm link
+    elif npm view --registry=https://registry.npmjs.org/ "vigthoria-cli@${CLI_VERSION}" version &> /dev/null; then
+        echo "Installing exact version ${CLI_VERSION} from npm registry..."
+        if [[ -f "$RELEASE_INSTALLER" ]]; then
+            node "$RELEASE_INSTALLER" "vigthoria-cli@${CLI_VERSION}" "$CLI_VERSION"
         else
-            # Clone from repo
-            echo "Cloning from repository..."
-            git clone "$REPO_URL" "$INSTALL_DIR/cli" 2>/dev/null || {
-                echo -e "${YELLOW}Repository not available, using local install${NC}"
-                # Copy local files for development
-                SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
-                if [ -d "$SCRIPT_DIR/../src" ]; then
-                    cp -r "$SCRIPT_DIR/.." "$INSTALL_DIR/cli"
-                fi
-            }
-            
-            if [ -d "$INSTALL_DIR/cli" ]; then
-                cd "$INSTALL_DIR/cli"
-                npm install
-                npm run build
-                npm link
-            fi
+            npm install -g --force --registry=https://registry.npmjs.org/ "vigthoria-cli@${CLI_VERSION}"
         fi
+    else
+        echo -e "${RED}✗ No checksum-verified artifact or exact npm release ${CLI_VERSION} is available${NC}"
+        return 1
     fi
     
     echo -e "${GREEN}✓ Installation complete${NC}"
@@ -280,55 +294,36 @@ create_symlinks() {
 # Setup shell completion
 setup_completion() {
     echo -e "${CYAN}Setting up shell completion...${NC}"
-    
-    # Detect shell
+    COMPLETION_ROOT="$INSTALLER_ROOT/completions"
+    if [[ ! -d "$COMPLETION_ROOT" ]] && [[ -d "$HOME/.vigthoria/cli/current/node_modules/vigthoria-cli/completions" ]]; then
+        COMPLETION_ROOT="$HOME/.vigthoria/cli/current/node_modules/vigthoria-cli/completions"
+    fi
+    if [[ ! -d "$COMPLETION_ROOT" ]]; then
+        echo -e "${YELLOW}⚠ Generated completions are unavailable; no stale static list was installed.${NC}"
+        return 0
+    fi
     SHELL_NAME=$(basename "$SHELL")
-    
     case "$SHELL_NAME" in
         bash)
             COMPLETION_FILE="$HOME/.bash_completion.d/vigthoria"
             mkdir -p "$HOME/.bash_completion.d"
-            cat > "$COMPLETION_FILE" << 'EOF'
-_vigthoria_completions() {
-    local cur="${COMP_WORDS[COMP_CWORD]}"
-    local commands="chat edit generate explain fix review login logout status config init"
-    COMPREPLY=($(compgen -W "$commands" -- "$cur"))
-}
-complete -F _vigthoria_completions vigthoria
-complete -F _vigthoria_completions vig
-EOF
+            install -m 0644 "$COMPLETION_ROOT/vigthoria.bash" "$COMPLETION_FILE"
             echo -e "${GREEN}✓ Bash completion installed${NC}"
             echo "  Run: source ~/.bash_completion.d/vigthoria"
             ;;
         zsh)
             COMPLETION_FILE="$HOME/.zsh/completion/_vigthoria"
             mkdir -p "$HOME/.zsh/completion"
-            cat > "$COMPLETION_FILE" << 'EOF'
-#compdef vigthoria vig
-
-_vigthoria() {
-    local -a commands
-    commands=(
-        'chat:Start interactive chat with AI'
-        'edit:Edit a file with AI assistance'
-        'generate:Generate code from description'
-        'explain:Explain code in a file'
-        'fix:Fix issues in a file'
-        'review:Review code quality'
-        'login:Login to Vigthoria'
-        'logout:Logout from Vigthoria'
-        'status:Show account status'
-        'config:Configure settings'
-        'init:Initialize project'
-    )
-    _describe 'command' commands
-}
-
-_vigthoria "$@"
-EOF
+            install -m 0644 "$COMPLETION_ROOT/_vigthoria" "$COMPLETION_FILE"
             echo -e "${GREEN}✓ Zsh completion installed${NC}"
             echo "  Add to ~/.zshrc: fpath=(~/.zsh/completion \$fpath)"
             ;;
+        fish)
+            COMPLETION_FILE="$HOME/.config/fish/completions/vigthoria.fish"
+            mkdir -p "$HOME/.config/fish/completions"
+            install -m 0644 "$COMPLETION_ROOT/vigthoria.fish" "$COMPLETION_FILE"
+            echo -e "${GREEN}✓ Fish completion installed${NC}"
+            ;;
         *)
             echo -e "${YELLOW}⚠ Shell completion not available for $SHELL_NAME${NC}"
             ;;

package/package.json

@@ -1,11 +1,13 @@
 {
   "name": "vigthoria-cli",
-  "version": "1.13.18",
+  "version": "1.13.22",
   "description": "Vigthoria Coder CLI - AI-powered terminal coding assistant",
   "type": "module",
   "main": "dist/index.js",
   "files": [
     "dist",
+    "completions",
+    "release-policy.json",
     "scripts/release",
     "README.md",
     "SECURITY_HARDENING.md",
@@ -16,6 +18,8 @@
   "publishConfig": {
     "files": [
       "dist/",
+      "completions/",
+      "release-policy.json",
       "scripts/release/",
       "README.md",
       "SECURITY_HARDENING.md",
@@ -32,10 +36,14 @@
   },
   "scripts": {
     "clean": "node -e \"require('fs').rmSync('dist', { recursive: true, force: true })\"",
-    "build": "npm run clean && tsc && node -e \"const fs=require('fs'); try { fs.chmodSync('dist/index.js', 0o755); } catch (error) { if (!error || error.code !== 'ENOENT') throw error; }\"",
+    "build": "npm run clean && tsc && node scripts/release/generate-completions.mjs && node -e \"const fs=require('fs'); try { fs.chmodSync('dist/index.js', 0o755); } catch (error) { if (!error || error.code !== 'ENOENT') throw error; }\"",
     "start": "node dist/index.js",
     "dev": "ts-node src/index.ts",
-    "test": "npm run test:cli",
+    "test": "npm run test:hermetic",
+    "test:hermetic": "npm run validate:no-go",
+    "test:integration:local": "npm run build && node scripts/run-test-suite.mjs local",
+    "test:live:all": "npm run build && node scripts/run-test-suite.mjs live",
+    "test:suite:policy": "node scripts/run-test-suite.mjs check",
     "test:agent:outcome": "npm run build && node scripts/test-agent-run-outcome.js",
     "test:cli": "npm run build && npm run precheck:services && node scripts/test-cli-suite.js && npm run test:agent:outcome && npm run test:v3-stream-mutation",
     "test:regression": "npm run build && node scripts/test-regression-1.6.22.js",
@@ -62,6 +70,8 @@
     "test:repo:live": "npm run build && node scripts/test-live-repo-e2e.js",
     "test:repo:auth-fallback": "node scripts/test-community-repo-auth-fallback.mjs",
     "test:repo:payload-fallback": "node scripts/test-repo-payload-fallback.mjs",
+    "test:repo:public-clone": "npm run build && node scripts/test-public-repo-clone.mjs",
+    "test:command:timeouts": "npm run build && node scripts/test-timeout-cancellation.mjs",
     "test:game:live": "npm run build && node scripts/test-live-game-push.js",
     "proof:agent": "npm run build && node scripts/proof-agent-mode.js",
     "test:fresh-install": "node scripts/test-fresh-install.js",
@@ -69,16 +79,34 @@
     "precheck:services": "node scripts/precheck-local-services.js",
     "test:model:governance": "npm run build && node scripts/test-model-governance-no-agent.js",
     "validate:no-go": "bash scripts/release/validate-no-go-gates.sh",
+    "test:model:balanced-live": "bash scripts/release/test-balanced-model-live.sh",
+    "test:release:live-services": "bash scripts/release/validate-live-service-gates.sh",
     "test:legion:billing:e2e": "npm run build && node scripts/test-legion-godmode-billing-e2e.js",
     "test:windows:v3-sync": "npm run build && node scripts/test-windows-v3-sync-recovery.js",
     "test:v3-workspace-path": "npm run build && node scripts/test-v3-workspace-path.js",
     "test:v3-server-tool-execution": "npm run build && node scripts/test-v3-server-tool-execution.js",
     "test:session:project-match": "npm run build && node scripts/test-session-project-match.mjs",
+    "test:external-client-resume": "npm run build && node scripts/test-external-client-resume.mjs",
     "test:v3-stream-mutation": "npm run build && node scripts/test-v3-stream-mutation.js",
     "test:context:budget": "npm run build && node scripts/test-context-budget.js",
     "test:v3-client-tool-quality": "npm run build && node scripts/test-v3-client-tool-quality.mjs",
     "test:pitfall:context": "npm run build && node scripts/test-pitfall-context-smoke.js",
-    "test:game:command": "node scripts/test-game-command.mjs"
+    "test:game:command": "node scripts/test-game-command.mjs",
+    "test:security:dependencies": "node scripts/test-dependency-security.mjs",
+    "test:security:network": "npm run build && node scripts/test-network-policy.mjs && node scripts/test-installer-trust-policy.mjs",
+    "test:security:workspace": "npm run build && node scripts/test-workspace-archive-containment.mjs",
+    "test:security:process": "npm run build && node scripts/test-process-approval-safety.mjs",
+    "test:security:mutation-preview": "npm run build && node scripts/test-mutation-preview-transaction.mjs",
+    "test:security:context-secrets": "npm run build && node scripts/test-context-secret-hygiene.mjs",
+    "test:architecture:vigflow": "npm run build && node scripts/test-vigflow-client.mjs",
+    "test:state:durable": "npm run build && node scripts/test-durable-json-state.mjs",
+    "test:state:auth": "npm run build && node scripts/test-auth-state.mjs",
+    "test:state:sessions": "npm run build && node scripts/test-session-durable-lifecycle.mjs && node scripts/test-session-project-match.mjs && node scripts/test-external-client-resume.mjs",
+    "test:state:context": "npm run build && node scripts/test-context-state-ownership.mjs && node scripts/test-context-secret-hygiene.mjs",
+    "test:phase3:command-contract": "npm run build && node scripts/test-command-contract.mjs",
+    "test:phase3:update-policy": "npm run build && node scripts/test-update-policy.mjs",
+    "test:phase6:delivery": "npm run build && node scripts/test-release-delivery.mjs",
+    "architecture:graph": "node scripts/architecture/verify-import-graph.mjs"
   },
   "keywords": [
     "ai",
@@ -92,7 +120,6 @@
   "author": "Vigthoria Technologies",
   "license": "MIT",
   "dependencies": {
-    "archiver": "^8.0.0",
     "axios": "^1.6.0",
     "chalk": "^5.3.0",
     "chokidar": "^5.0.0",
@@ -104,12 +131,9 @@
     "marked": "^11.0.0",
     "marked-terminal": "^6.2.0",
     "ora": "^7.0.1",
-    "rxjs": "^7.8.2",
-    "simple-git": "^3.21.0",
     "ws": "^8.14.2"
   },
   "devDependencies": {
-    "@types/archiver": "^6.0.2",
     "@types/diff": "^5.0.8",
     "@types/inquirer": "^9.0.7",
     "@types/node": "^20.10.0",
@@ -118,11 +142,22 @@
     "ts-node": "^10.9.2",
     "typescript": "^5.3.2"
   },
+  "peerDependencies": {
+    "puppeteer": "^24.40.0"
+  },
+  "peerDependenciesMeta": {
+    "puppeteer": {
+      "optional": true
+    }
+  },
   "engines": {
     "node": ">=20.19.0"
   },
   "overrides": {
     "glob": "^13.0.6",
-    "brace-expansion": "^5.0.8"
+    "brace-expansion": "5.0.9",
+    "fast-uri": "3.1.5",
+    "ip-address": "10.3.1",
+    "js-yaml": "4.3.1"
   }
 }

package/release-policy.json

@@ -0,0 +1,43 @@
+{
+  "schemaVersion": 1,
+  "packageName": "vigthoria-cli",
+  "manifest": {
+    "schemaVersion": 1,
+    "maximumBytes": 262144,
+    "requiredChannels": ["stable"],
+    "allowedChannels": ["stable", "candidate"]
+  },
+  "origins": {
+    "manifest": "https://extension.vigthoria.io/downloads/manifest.json",
+    "artifacts": "https://extension.vigthoria.io/downloads/",
+    "allowedHosts": [
+      "extension.vigthoria.io",
+      "cli.vigthoria.io",
+      "coder.vigthoria.io",
+      "landing.vigthoria.io",
+      "market.vigthoria.io"
+    ],
+    "port": 443,
+    "maximumRedirects": 0
+  },
+  "artifact": {
+    "maximumBytes": 104857600,
+    "filenamePattern": "^vigthoria-cli-(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-[0-9A-Za-z.-]+)?\\.tgz$"
+  },
+  "signature": {
+    "algorithm": "Ed25519",
+    "trustedKeys": {
+      "vigthoria-release-2026-01": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAotTXdcHwZ+D1z5lJMdgAAeMU99BRdMCaCZ465DN2aug=\n-----END PUBLIC KEY-----\n"
+    }
+  },
+  "channels": {
+    "stable": { "allowPrerelease": false, "allowDowngrade": false },
+    "candidate": { "allowPrerelease": true, "allowDowngrade": false }
+  },
+  "installation": {
+    "versionsDirectory": ".vigthoria/cli/versions",
+    "currentLink": ".vigthoria/cli/current",
+    "binDirectory": ".local/bin",
+    "preservePrevious": 1
+  }
+}

package/scripts/release/LOCAL_MACHINE_USER_VERIFICATION.md

@@ -85,7 +85,7 @@ Commands:
 
 ```bash
 vigthoria hyper-loop status
-vigthoria devtools connect
+vigthoria devtools status
 vigthoria bridge status
 vigthoria operator --prompt "status check" --json
 ```

package/scripts/release/generate-completions.mjs

@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '../..');
+const manifest = JSON.parse(fs.readFileSync(path.join(root, 'contracts/phase-0/command-manifest.json'), 'utf8'));
+const commands = manifest.commands
+  .filter((command) => !command.path.includes(' '))
+  .map((command) => command.path)
+  .sort();
+const descriptions = new Map(manifest.commands.filter((command) => !command.path.includes(' ')).map((command) => [command.path, command.description || 'Vigthoria command']));
+if (commands.length !== new Set(commands).size || commands.length === 0) throw new Error('Authoritative command manifest has duplicate or missing top-level commands.');
+
+const bash = `# Generated from contracts/phase-0/command-manifest.json; do not edit.\n_vigthoria_completions() {\n  local cur="\${COMP_WORDS[COMP_CWORD]}"\n  COMPREPLY=( $(compgen -W '${commands.join(' ')}' -- "$cur") )\n}\ncomplete -F _vigthoria_completions vigthoria vig vigthoria-chat\n`;
+const zshRows = commands.map((command) => `    '${command.replaceAll("'", "''")}:${String(descriptions.get(command)).replaceAll("'", "''")}'`).join('\n');
+const zsh = `#compdef vigthoria vig vigthoria-chat\n# Generated from contracts/phase-0/command-manifest.json; do not edit.\n_vigthoria() {\n  local -a commands\n  commands=(\n${zshRows}\n  )\n  _describe 'command' commands\n}\n_vigthoria "$@"\n`;
+const fish = `# Generated from contracts/phase-0/command-manifest.json; do not edit.\n${commands.map((command) => `complete -c vigthoria -c vig -c vigthoria-chat -n '__fish_use_subcommand' -a '${command}' -d '${String(descriptions.get(command)).replaceAll("'", "\\'")}'`).join('\n')}\n`;
+const output = path.join(root, 'completions');
+fs.mkdirSync(output, { recursive: true });
+fs.writeFileSync(path.join(output, 'vigthoria.bash'), bash);
+fs.writeFileSync(path.join(output, '_vigthoria'), zsh);
+fs.writeFileSync(path.join(output, 'vigthoria.fish'), fish);
+console.log(`Generated bash, zsh, and fish completion definitions for ${commands.length} commands.`);

package/scripts/release/install-release.mjs

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+import { installReleaseTransaction } from '../../dist/utils/release-install.js';
+
+const packageSpec = String(process.argv[2] || '');
+const expectedVersion = String(process.argv[3] || '');
+if (!packageSpec || !expectedVersion) throw new Error('Usage: install-release.mjs <package-spec> <expected-version>');
+const result = installReleaseTransaction(packageSpec, expectedVersion, {
+  ...(packageSpec.startsWith('vigthoria-cli@') ? { npmRegistry: 'https://registry.npmjs.org/' } : {}),
+});
+process.stdout.write(`${JSON.stringify(result)}\n`);

package/scripts/release/publish-cli-release.mjs

@@ -0,0 +1,116 @@
+#!/usr/bin/env node
+import fs from 'node:fs';
+import path from 'node:path';
+import { createHash, createPrivateKey, createPublicKey, sign } from 'node:crypto';
+import { spawnSync } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import {
+  getReleasePolicy,
+  parseReleaseManifest,
+  releaseSignaturePayload,
+  verifyReleaseSignature,
+} from '../../dist/utils/release-policy.js';
+
+const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '../..');
+const version = String(process.argv[2] || '').trim();
+const channel = String(process.env.CHANNEL || 'stable').trim();
+const downloadsDirectory = String(process.env.HOST_DOWNLOADS_DIR || '');
+const manifestFile = String(process.env.HOST_MANIFEST_FILE || '');
+const privateKeyFile = String(process.env.RELEASE_SIGNING_PRIVATE_KEY_FILE || '');
+const keyId = String(process.env.RELEASE_SIGNING_KEY_ID || '');
+const sbomFile = String(process.env.RELEASE_SBOM_FILE || '');
+const provenanceFile = String(process.env.RELEASE_PROVENANCE_FILE || '');
+const policy = getReleasePolicy();
+
+function stop(message) { throw new Error(message); }
+function digest(file) { return createHash('sha256').update(fs.readFileSync(file)).digest('hex'); }
+function requiredFile(file, label) { if (!file || !fs.statSync(file, { throwIfNoEntry: false })?.isFile()) stop(`${label} is required: ${file || '(unset)'}`); }
+function exactPackageMetadata(archive) {
+  const result = spawnSync('tar', ['-xOf', archive, 'package/package.json'], {
+    cwd: root, encoding: 'utf8', timeout: 15_000, maxBuffer: 1024 * 1024,
+  });
+  if (result.status !== 0) stop(`Unable to inspect archive metadata: ${result.stderr || result.stdout}`);
+  const metadata = JSON.parse(result.stdout);
+  return { name: String(metadata.name || ''), version: String(metadata.version || '') };
+}
+
+if (!version) stop('Usage: publish-cli-release.sh <version>');
+if (!downloadsDirectory || !manifestFile) stop('HOST_DOWNLOADS_DIR and HOST_MANIFEST_FILE are required.');
+requiredFile(privateKeyFile, 'RELEASE_SIGNING_PRIVATE_KEY_FILE');
+requiredFile(sbomFile, 'RELEASE_SBOM_FILE');
+requiredFile(provenanceFile, 'RELEASE_PROVENANCE_FILE');
+if (!Object.hasOwn(policy.signature.trustedKeys, keyId)) stop(`RELEASE_SIGNING_KEY_ID is not trusted by release-policy.json: ${keyId || '(unset)'}`);
+
+const pkg = JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8'));
+const lock = JSON.parse(fs.readFileSync(path.join(root, 'package-lock.json'), 'utf8'));
+if ([pkg.version, lock.version, lock.packages?.['']?.version].some((identity) => identity !== version)) stop('Requested version conflicts with package.json or package-lock.json.');
+const runtime = spawnSync(process.execPath, ['dist/index.js', '--version'], { cwd: root, encoding: 'utf8', env: { ...process.env, VIGTHORIA_OFFLINE: '1', VIGTHORIA_NO_BANNER: '1' } });
+if (runtime.status !== 0 || runtime.stdout.trim() !== version) stop('Requested version conflicts with the built CLI banner.');
+
+const archiveFilename = `${policy.packageName}-${version}.tgz`;
+const archive = path.join(root, archiveFilename);
+requiredFile(archive, 'Release archive');
+const metadata = exactPackageMetadata(archive);
+if (metadata.name !== policy.packageName || metadata.version !== version) stop('Requested version conflicts with archive metadata.');
+
+fs.mkdirSync(downloadsDirectory, { recursive: true });
+fs.mkdirSync(path.dirname(manifestFile), { recursive: true });
+const lockPath = `${manifestFile}.lock`;
+let lockHandle;
+const published = [];
+try {
+  lockHandle = fs.openSync(lockPath, 'wx', 0o600);
+  const suffix = `${process.pid}-${Date.now()}`;
+  const publicBase = new URL(policy.origins.artifacts);
+  const signatureFilename = `${archiveFilename}.sig`;
+  const sbomFilename = `${archiveFilename}.sbom.json`;
+  const provenanceFilename = `${archiveFilename}.provenance.json`;
+  const entry = {
+    version,
+    url: new URL(archiveFilename, publicBase).toString(),
+    sha256: digest(archive),
+    size: fs.statSync(archive).size,
+    archiveFilename,
+    packageName: policy.packageName,
+    packageVersion: version,
+    publishedAt: new Date().toISOString(),
+    signature: { algorithm: policy.signature.algorithm, keyId, url: new URL(signatureFilename, publicBase).toString() },
+    sbom: { url: new URL(sbomFilename, publicBase).toString(), sha256: digest(sbomFile) },
+    provenance: { url: new URL(provenanceFilename, publicBase).toString(), sha256: digest(provenanceFile) },
+    notes: String(process.env.RELEASE_NOTES || 'Vigthoria CLI release'),
+  };
+  const privateKey = createPrivateKey(fs.readFileSync(privateKeyFile));
+  const configuredPublic = createPublicKey(policy.signature.trustedKeys[keyId]).export({ type: 'spki', format: 'der' });
+  const signingPublic = createPublicKey(privateKey).export({ type: 'spki', format: 'der' });
+  if (!configuredPublic.equals(signingPublic)) stop('Signing private key does not match the configured verification key.');
+  const detached = sign(null, releaseSignaturePayload(channel, entry), privateKey).toString('base64');
+  verifyReleaseSignature(channel, entry, detached);
+
+  let manifest = { schemaVersion: policy.manifest.schemaVersion, channels: {} };
+  if (fs.existsSync(manifestFile)) manifest = JSON.parse(fs.readFileSync(manifestFile, 'utf8'));
+  manifest.channels = { ...manifest.channels, [channel]: entry };
+  parseReleaseManifest(manifest, channel);
+
+  const inputs = [[archive, archiveFilename], [sbomFile, sbomFilename], [provenanceFile, provenanceFilename]];
+  const staged = [];
+  for (const [source, filename] of inputs) {
+    const temporary = path.join(downloadsDirectory, `.${filename}.${suffix}.tmp`);
+    fs.copyFileSync(source, temporary, fs.constants.COPYFILE_EXCL);
+    staged.push([temporary, path.join(downloadsDirectory, filename)]);
+  }
+  const signatureTemporary = path.join(downloadsDirectory, `.${signatureFilename}.${suffix}.tmp`);
+  fs.writeFileSync(signatureTemporary, `${detached}\n`, { flag: 'wx', mode: 0o644 });
+  staged.push([signatureTemporary, path.join(downloadsDirectory, signatureFilename)]);
+  for (const [, destination] of staged) if (fs.existsSync(destination)) stop(`Refusing to overwrite published release component: ${destination}`);
+  for (const [temporary, destination] of staged) { fs.renameSync(temporary, destination); published.push(destination); }
+  const manifestTemporary = `${manifestFile}.${suffix}.tmp`;
+  fs.writeFileSync(manifestTemporary, `${JSON.stringify(manifest, null, 2)}\n`, { flag: 'wx', mode: 0o644 });
+  fs.renameSync(manifestTemporary, manifestFile);
+  console.log(JSON.stringify({ status: 'published', channel, version, sha256: entry.sha256, size: entry.size, manifestFile }, null, 2));
+} catch (error) {
+  for (const file of published.reverse()) { try { fs.unlinkSync(file); } catch {} }
+  throw error;
+} finally {
+  if (lockHandle !== undefined) fs.closeSync(lockHandle);
+  try { fs.unlinkSync(lockPath); } catch {}
+}

package/scripts/release/publish-cli-release.sh

@@ -1,73 +1,5 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
-# Publish Vigthoria CLI release artifact + manifest entry.
-# Usage:
-#   HOST_DOWNLOADS_DIR=/path/to/downloads \
-#   HOST_MANIFEST_FILE=/path/to/releases/manifest.json \
-#   ./scripts/release/publish-cli-release.sh 1.9.0
-
-VERSION="${1:-}"
-if [[ -z "$VERSION" ]]; then
-  echo "Usage: $0 <version>"
-  exit 1
-fi
-
-REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
-PKG_FILE="$REPO_ROOT/vigthoria-cli-${VERSION}.tgz"
-HOST_DOWNLOADS_DIR="${HOST_DOWNLOADS_DIR:-}"
-HOST_MANIFEST_FILE="${HOST_MANIFEST_FILE:-}"
-PUBLIC_BASE_URL="${PUBLIC_BASE_URL:-https://extension.vigthoria.io/downloads}"
-CHANNEL="${CHANNEL:-stable}"
-
-if [[ ! -f "$PKG_FILE" ]]; then
-  echo "Artifact not found: $PKG_FILE"
-  echo "Run: npm pack"
-  exit 1
-fi
-
-if [[ -z "$HOST_DOWNLOADS_DIR" || -z "$HOST_MANIFEST_FILE" ]]; then
-  echo "Set HOST_DOWNLOADS_DIR and HOST_MANIFEST_FILE before running."
-  exit 1
-fi
-
-SHA256="$(sha256sum "$PKG_FILE" | awk '{print $1}')"
-URL="$PUBLIC_BASE_URL/vigthoria-cli-${VERSION}.tgz"
-
-echo "Publishing vigthoria-cli v${VERSION}"
-echo "Artifact: $PKG_FILE"
-echo "SHA256:   $SHA256"
-echo "URL:      $URL"
-
-install -d "$HOST_DOWNLOADS_DIR"
-cp -f "$PKG_FILE" "$HOST_DOWNLOADS_DIR/"
-
-echo "Copied artifact to $HOST_DOWNLOADS_DIR"
-
-if [[ ! -f "$HOST_MANIFEST_FILE" ]]; then
-  echo "Manifest does not exist at: $HOST_MANIFEST_FILE"
-  echo "Create it first with {\"channels\":{\"stable\":{}}}"
-  exit 1
-fi
-
-python3 - << PYEOF
-import json, pathlib
-manifest_path = pathlib.Path(r"$HOST_MANIFEST_FILE")
-data = json.loads(manifest_path.read_text())
-data.setdefault("channels", {})
-data["channels"].setdefault("$CHANNEL", {})
-data["channels"]["$CHANNEL"].update({
-  "version": "$VERSION",
-  "url": "$URL",
-  "sha256": "$SHA256",
-  "notes": "Automated publish via scripts/release/publish-cli-release.sh"
-})
-manifest_path.write_text(json.dumps(data, indent=2) + "\n")
-print("Manifest updated:", manifest_path)
-PYEOF
-
-echo "Publish complete."
-echo "Verification commands:"
-echo "  curl -I $URL"
-echo "  curl -fsSL https://coder.vigthoria.io/releases/manifest.json | head -40"
-echo "  node dist/index.js update --check --manifest https://coder.vigthoria.io/releases/manifest.json --channel $CHANNEL"
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+exec node "$ROOT/scripts/release/publish-cli-release.mjs" "$@"