igneum-network/igneum
1
0
Fork 0
Code Issues Pull requests Releases Activity

publish-public.sh: the public manifest leaves the signed interface entry out (the apps read it from the token manifest; the --public arm had refused every publish since interface 1.0.1 because the entry carried the token)

Browse source 
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This commit is contained in:
igneum-labs 2026-10-07 21:49:03 +00:00
parent ea983fc195
commit 1cdc5dd8ab
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
packaging/ota/publish-public.sh
View file

@ -94,6 +94,10 @@ src, out, base = sys.argv[1:4]
m = json.load(open(src))
for e in m.get("platforms", {}).values():
e["url"] = base + "/" + e["url"].rsplit("/", 1)[1]
# the interface entry is signed over its own URL in the token folder and the apps read it from the token manifest,
# never from here; the public copy is the site's download index, so the entry is left out (7 October 2026: the
# --public arm had refused every publish since interface 1.0.1 because the entry carried the token)
m.pop("ui", None)
open(out, "w").write(json.dumps(m, sort_keys=True, separators=(",", ":"), ensure_ascii=False))
PY
if grep -q "$TOKEN" "$tmp"; then rm -f "$tmp"; log "ERROR: the public $name would still carry the token" >&2; return 1; fi