Signed update channel and release automation #477

Activity

1. BunsDev

   added this to the v0.1.0 — macOS production milestone on Oct 1, 2026
2. BunsDev

   self-assigned this

   on Oct 1, 2026
3. BunsDev

   added the

   Feature

   issue type on Oct 1, 2026
4. BunsDev

   added

   outcomePublic outcome: owns an exit gate and evidence indexPublic outcome: owns an exit gate and evidence index

   area:releaseArea: releaseArea: release

   on Oct 1, 2026
5. BunsDev

   added this to Psyche Buildon Oct 1, 2026
6. BunsDev

   moved this to Backlog in Psyche Buildon Oct 1, 2026
7. BunsDev

   added 8 commits that reference this issue on Oct 1, 2026

   fix(release): name the manifest that fails to read or parse

   ...

   f7a4f97

   fix(updater): stop consulting a package registry the CLI is not publi…

   ...

   fa99862

   fix(updater): stop consulting a package registry the CLI is not publi…

   ...

   10070b4

   ci: fail every change whose release versions disagree

   ...

   68955ba

   fix(release): name the manifest that fails to read or parse

   ...

   5499d83

   ci: fail every change whose release versions disagree (#482)

   ...

   e405ec6

   docs(release): design record for the in-app update channel

   ...

   f94a222

   docs(release): design record for the in-app update channel (#501)

   ...

   0d26626
8. 18 remaining items

   Load more
9. BunsDev

   added 14 commits that reference this issue on Oct 3, 2026

   feat(desktop): notify-only update banner

   ...

   67249a8

   fix(desktop): banner focus return, quieter live region, toggle resync

   ...

   1cbe91b

   feat(desktop): notify-only update banner

   ...

   53528e7

   fix(desktop): banner focus return, quieter live region, toggle resync

   ...

   f7391b4

   fix(desktop): keep the update banner clear of native webviews; consum…

   ...

   b80c230

   fix(test): drop the Node-build-dependent small-order update vector

   ...

   a556586

   feat(desktop): notify-only update banner

   ...

   d4a2abe

   fix(desktop): banner focus return, quieter live region, toggle resync

   ...

   f839257

   fix(desktop): keep the update banner clear of native webviews; consum…

   ...

   942b3b7

   feat(desktop): verify the signed update manifest; notify-only check s…

   ...

   acf7c90

   feat(desktop): notify-only update banner

   ...

   e0a9a12

   fix(desktop): banner focus return, quieter live region, toggle resync

   ...

   d269522

   fix(desktop): keep the update banner clear of native webviews; consum…

   ...

   bf15a57

   feat(desktop): notify-only update banner (#477 3.2b, stacked on #529) (…

   ...

   1a128d4
10. BunsDev commented on Oct 3, 2026

    

    BunsDev

    on Oct 3, 2026

    MemberAuthor

    More actions

    Desktop verifier and update banner merged — 2026-10-03

    PR	Merged	What
    #529	acf7c904	Rust verifier, a byte-for-byte port of scripts/update-manifest.mjs. Ed25519 verify_strict, canonical-JSON check, current/next key ids, expiry with 300 s skew, stable newer-version rule. Checked against 44 Node-signed cross-implementation vectors. App-scoped update-check.json (atomic, lenient per-field load, newer-schema files never rewritten, failed saves reported to the user). Checks every 24 h with backoff up to 7 days. Four commands restricted to the main webview
    #530	1a128d4e	Notify-only banner in its own app row, so native web panes can't cover it. Cask installs show brew upgrade --cask psyche-build; DMG installs get a release link and the arch SHA-256. Skip / Dismiss, an accessible live title, focus return, and Escape that doesn't leak to the workspace

    Still inert: release/update-manifest-keys.json has current: null, so the app makes no network request and the setting stays hidden. It activates once the owner provisions the key (see the previous comment), and a signed release then publishes a manifest.

    Along the way:

    • Flaky paneLifecycle test: cancels blocked cleanup before awaited existing-worktree setup #531 filed (flaky paneLifecycle test).
    • One Node-build-dependent vector moved to a Rust-only test: Node 24.18 and 24.20 disagree on a small-order key.

    Remaining on #477:

    • 3.5, uninstall/reinstall/zap observation (operator on a real Mac);
    • first real exercise of the candidate build (ci(release): add a non-publishing release candidate build #526), the tap PR (ci(release): open and verify the Homebrew Cask bump as a tap pull request #527) and manifest signing (feat(release): sign an update manifest when a current key is provisioned #528), all at the next release;
    • post-upgrade project-config reconciliation through the feat(config): version the persisted project config and gate its read path #464 gate (out of scope so far).