vigthoria-cli 1.13.34 → 1.13.42

package/scripts/release/LOCAL_MACHINE_USER_VERIFICATION.md

@@ -8,6 +8,7 @@ Use this checklist on real user machines before and after rollout. The goal is t
 - [ ] `npm` available
 - [ ] No stale shell aliases shadowing `vigthoria`
 - [ ] Network access to:
+  - `https://extension.vigthoria.io`
   - `https://coder.vigthoria.io`
   - `https://api.vigthoria.io`
 - [ ] If running browser runtime proofs: Microsoft Edge, Chrome, or Chromium is installed in a standard OS location
@@ -29,7 +30,7 @@ which vigthoria || where.exe vigthoria
 Commands:
 
 ```bash
-npm install -g vigthoria-cli@latest
+curl -fsSL https://extension.vigthoria.io/downloads/install.sh | bash
 vigthoria --version
 vigthoria doctor
 ```
@@ -98,7 +99,7 @@ Expected:
 ## 6. Update Path
 
 - [ ] Update check works
-- [ ] Upgrade path works from npm/manifest
+- [ ] Upgrade path works from the signed extension manifest
 
 Commands:
 
@@ -139,11 +140,9 @@ These are external dependencies, not CLI code regressions:
 - [ ] One-command rollback documented
 - [ ] Support note prepared for users
 
-Example rollback:
-
-```bash
-npm install -g vigthoria-cli@<known-good-version>
-```
+Rollback must use an approved, previously signed archive retained on the
+canonical extension origin and a separately authorized recovery procedure;
+the public updater does not permit client-selected downgrades.
 
 ## 10. Signoff Template
 

package/scripts/release/install-release.mjs

@@ -3,8 +3,9 @@ import { installReleaseTransaction } from '../../dist/utils/release-install.js';
 
 const packageSpec = String(process.argv[2] || '');
 const expectedVersion = String(process.argv[3] || '');
-if (!packageSpec || !expectedVersion) throw new Error('Usage: install-release.mjs <package-spec> <expected-version>');
-const result = installReleaseTransaction(packageSpec, expectedVersion, {
-  ...(packageSpec.startsWith('vigthoria-cli@') ? { npmRegistry: 'https://registry.npmjs.org/' } : {}),
-});
+if (!packageSpec || !expectedVersion) throw new Error('Usage: install-release.mjs <local-package.tgz> <expected-version>');
+if (!packageSpec.toLowerCase().endsWith('.tgz')) {
+  throw new Error('Release installer accepts only a locally verified .tgz archive');
+}
+const result = installReleaseTransaction(packageSpec, expectedVersion);
 process.stdout.write(`${JSON.stringify(result)}\n`);

package/scripts/release/publish-cli-release.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import fs from 'node:fs';
 import path from 'node:path';
-import { createHash, createPrivateKey, createPublicKey, sign } from 'node:crypto';
+import { createHash } from 'node:crypto';
 import { spawnSync } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
 import {
@@ -16,7 +16,7 @@ const version = String(process.argv[2] || '').trim();
 const channel = String(process.env.CHANNEL || 'stable').trim();
 const downloadsDirectory = String(process.env.HOST_DOWNLOADS_DIR || '');
 const manifestFile = String(process.env.HOST_MANIFEST_FILE || '');
-const privateKeyFile = String(process.env.RELEASE_SIGNING_PRIVATE_KEY_FILE || '');
+const signerCommand = String(process.env.RELEASE_SIGNER_COMMAND || '');
 const keyId = String(process.env.RELEASE_SIGNING_KEY_ID || '');
 const sbomFile = String(process.env.RELEASE_SBOM_FILE || '');
 const provenanceFile = String(process.env.RELEASE_PROVENANCE_FILE || '');
@@ -39,7 +39,11 @@ function exactPackageMetadata(archive) {
 
 if (!version) stop('Usage: publish-cli-release.sh <version>');
 if (!downloadsDirectory || !manifestFile) stop('HOST_DOWNLOADS_DIR and HOST_MANIFEST_FILE are required.');
-requiredFile(privateKeyFile, 'RELEASE_SIGNING_PRIVATE_KEY_FILE');
+if (!path.isAbsolute(signerCommand)) stop('RELEASE_SIGNER_COMMAND must name an absolute protected signer executable.');
+const signerStat = fs.statSync(signerCommand, { throwIfNoEntry: false });
+if (!signerStat?.isFile() || signerStat.uid !== 0 || (signerStat.mode & 0o022) !== 0 || (signerStat.mode & 0o111) === 0) {
+  stop('RELEASE_SIGNER_COMMAND must be a root-owned executable that is not group/world writable.');
+}
 requiredFile(sbomFile, 'RELEASE_SBOM_FILE');
 requiredFile(provenanceFile, 'RELEASE_PROVENANCE_FILE');
 if (!Object.hasOwn(policy.signature.trustedKeys, keyId)) stop(`RELEASE_SIGNING_KEY_ID is not trusted by release-policy.json: ${keyId || '(unset)'}`);
@@ -85,11 +89,20 @@ try {
     provenance: { url: new URL(provenanceFilename, publicBase).toString(), sha256: digest(provenanceFile) },
     notes: String(process.env.RELEASE_NOTES || 'Vigthoria CLI release'),
   };
-  const privateKey = createPrivateKey(fs.readFileSync(privateKeyFile));
-  const configuredPublic = createPublicKey(policy.signature.trustedKeys[keyId]).export({ type: 'spki', format: 'der' });
-  const signingPublic = createPublicKey(privateKey).export({ type: 'spki', format: 'der' });
-  if (!configuredPublic.equals(signingPublic)) stop('Signing private key does not match the configured verification key.');
-  const detached = sign(null, releaseSignaturePayload(channel, entry), privateKey).toString('base64');
+  const signingResult = spawnSync(signerCommand, ['--key-id', keyId], {
+    input: releaseSignaturePayload(channel, entry),
+    encoding: 'utf8',
+    timeout: 30_000,
+    maxBuffer: 16 * 1024,
+    env: {
+      PATH: '/usr/sbin:/usr/bin:/sbin:/bin',
+      LANG: 'C.UTF-8',
+      RELEASE_SIGNING_KEY_ID: keyId,
+    },
+  });
+  if (signingResult.status !== 0) stop('Protected release signer rejected the signing request.');
+  const detached = String(signingResult.stdout || '').trim();
+  if (!/^[A-Za-z0-9+/]{86}==$/.test(detached)) stop('Protected release signer returned an invalid Ed25519 signature encoding.');
   verifyReleaseSignature(channel, entry, detached);
 
   let manifest = { schemaVersion: policy.manifest.schemaVersion, channels: {} };

package/scripts/release/test-balanced-model-live.sh

@@ -40,6 +40,9 @@ import fs from 'node:fs';
 const result = JSON.parse(fs.readFileSync(process.env.BALANCED_RESULT, 'utf8'));
 if (result.success !== true) throw new Error(`balanced probe failed: ${JSON.stringify(result)}`);
 const allowed = new Set(['Vigthoria-v4-Assistant-9B', 'vigthoria-balanced-4b', 'vigthoria-v3-balanced-4b']);
-if (!allowed.has(result.model)) throw new Error(`unexpected balanced model: ${result.model}`);
+const model = result.data?.model ?? result.model;
+if (!allowed.has(model)) throw new Error(`unexpected balanced model: ${model}`);
+if (result.data?.requestedModel !== 'balanced-4b') throw new Error(`balanced alias was not preserved: ${JSON.stringify(result.data)}`);
+if (typeof result.data?.content !== 'string' || !result.data.content.trim()) throw new Error('balanced probe returned empty content');
 console.log('[pass] credentialed balanced-4b live probe');
 EOF

package/scripts/release/validate-live-service-gates.sh

@@ -24,12 +24,25 @@ export VIGTHORIA_NO_BANNER=1
 export VIGTHORIA_NO_UPDATE_CHECK=1
 
 echo "[AUTH PREFLIGHT] invalid session message"
-VIGTHORIA_AUTH_TOKEN=invalid-token-for-preflight node dist/index.js chat --no-agent --model balanced-4b --prompt "ok" --json >"$LIVE_TMP/auth.json" 2>/dev/null || true
+# This assertion belongs to the public Coder authentication gateway. Release
+# runners also configure local TestFarm transports for the service gates below;
+# do not let those overrides silently turn this into a model-router probe.
+env \
+  -u VIGTHORIA_SELF_HOSTED_MODELS_API_URL \
+  -u VIGTHORIA_LOCAL_TEST_MODE \
+  -u VIGTHORIA_LOCAL_TEST_TOKEN \
+  -u VIGTHORIA_ALLOW_LOCAL_SERVICES \
+  VIGTHORIA_AUTH_TOKEN=invalid-token-for-preflight \
+  node dist/index.js chat --no-agent --model balanced-4b --prompt "ok" --json >"$LIVE_TMP/auth.json" 2>/dev/null || true
 AUTH_RESULT="$LIVE_TMP/auth.json" node --input-type=module - <<'EOF'
 import fs from 'node:fs';
 const result = JSON.parse(fs.readFileSync(process.env.AUTH_RESULT, 'utf8'));
 const expected = 'Vigthoria Gate way user authentification failed. Please log out and login again.';
-if (result.success !== false || result.error !== expected) throw new Error(`unexpected auth preflight: ${JSON.stringify(result)}`);
+const errorMessage = typeof result.error === 'string' ? result.error : result.error?.message;
+const errorCode = typeof result.error === 'object' && result.error !== null ? result.error.code : undefined;
+if (result.success !== false || errorMessage !== expected || (errorCode && errorCode !== 'AUTH_SESSION_INVALID')) {
+  throw new Error(`unexpected auth preflight: ${JSON.stringify(result)}`);
+}
 console.log('[pass] live auth preflight message');
 EOF
 
@@ -65,9 +78,18 @@ console.log('[pass] live model inventory gates');
 EOF
 
 echo "[7.5 policy] secured hosted HyperLoop endpoint"
-if ! code="$(curl --silent --show-error --connect-timeout 5 --max-time 15 --output /dev/null --write-out '%{http_code}' https://coder.vigthoria.io/api/hyperloop/health)"; then
-  block "hosted HyperLoop endpoint is unavailable"
-fi
+code=""
+for attempt in 1 2 3; do
+  if code="$(curl --silent --show-error --connect-timeout 5 --max-time 15 --output /dev/null --write-out '%{http_code}' https://coder.vigthoria.io/api/hyperloop/health)"; then
+    break
+  fi
+  code=""
+  if [[ "$attempt" != "3" ]]; then
+    echo "[retry] hosted HyperLoop policy probe transient failure ($attempt/3)"
+    sleep 2
+  fi
+done
+[[ -n "$code" ]] || block "hosted HyperLoop endpoint is unavailable after 3 bounded attempts"
 echo "unauth_hyperloop_code=$code"
 [[ "$code" == "401" || "$code" == "302" ]]