From 9760aecacaad90104385c689a891ada493544817 Mon Sep 17 00:00:00 2001
From: Local Dev <dev@localhost>
Date: Tue, 8 Sep 2026 00:09:09 +0200
Subject: [PATCH] Ship Theseus 0.3.19 4830da01 (signed add-on update endpoint
 now live)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Setup    4830da019914019c5d3575420b490a278bc3ba63606680f84c30d58de5ff9500
Portable 1ef76b5b0fae9ac5a201956f6f3da55b1f1ceec8a035cc0d498147a210491b5f

One theseus change since 0.3.18:

7672ce0 - Signed add-on update endpoint activates. The Silent Mode
operator Ed25519 pubkey (generated 2026-09-07,
732b1263a236b0030383a2376597cfa43c3624b3ca2912a46134f8f2a06e6012)
is baked into addon-update-pubkeys.js, so on every boot Theseus polls
each installed add-on's updateURL 30 s in, verifies the signed
updates.json against the pubkey, and stages any newer signed version
under <userData>/addons-updates-staged/ for promotion on the next
launch. Verification, backup, and promotion mechanics unchanged from
0.3.18. The screenshot add-on already advertises
https://addons.silentmode.st/screenshot/updates.json; publishing a
signed entry there is what activates real updates. No entry is
published yet, so this build's boot-time fetch fails silently until
the operator lands the first signed payload via
scripts/sign-addon-update.mjs.

3be152a - Also in this ship: package-lock.json resynced with
package.json. The 0.3.18 ship inadvertently committed WIP dependency
additions (bitcoinjs-lib, bip32, bip39, ecpair,
@bitcoinerlab/secp256k1) via git commit -o's file-scoped semantics
without a matching lock update. Fresh clones now build cleanly with
npm ci. Deps are unused by shipped code at this time but ride along
in node_modules — installer size grew ~400 KB.

Deployed. Verified LIVE 0.3.19.
---
 index.html | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/index.html b/index.html
index de095c0..22af280 100644
--- a/index.html
+++ b/index.html
@@ -233,14 +233,14 @@
       <h3>Theseus for Windows</h3>
       <p>Full-window desktop browser with Tor toggle and the multi-source BNS
         warm-start.</p>
-      <div class="meta">v0.3.18 · installer ~118 MB (bundles Ariadne's Thread) · portable ~117 MB · unsigned</div>
+      <div class="meta">v0.3.19 · installer ~118 MB (bundles Ariadne's Thread) · portable ~117 MB · unsigned</div>
       <div class="btns">
-        <a class="btn acid"  href="https://dl.silentmode.st/TheseusNavigator-Setup-0.3.18.exe">Installer</a>
-        <a class="btn ghost" href="https://dl.silentmode.st/TheseusNavigator-0.3.18-portable.exe">Portable .exe</a>
+        <a class="btn acid"  href="https://dl.silentmode.st/TheseusNavigator-Setup-0.3.19.exe">Installer</a>
+        <a class="btn ghost" href="https://dl.silentmode.st/TheseusNavigator-0.3.19-portable.exe">Portable .exe</a>
       </div>
       <div class="hashes" id="hashes-win">
-        <div class="h"><b>Installer</b><code>b751b5deea997bb7e0e894104dcb7411358728987196cb610f316edacaf9be54</code></div>
-        <div class="h"><b>Portable</b><code>8a258f29c62a03b745e93ea0265285e6d5df38d4f25cdbdadc20b4d2a54b97d7</code></div>
+        <div class="h"><b>Installer</b><code>4830da019914019c5d3575420b490a278bc3ba63606680f84c30d58de5ff9500</code></div>
+        <div class="h"><b>Portable</b><code>1ef76b5b0fae9ac5a201956f6f3da55b1f1ceec8a035cc0d498147a210491b5f</code></div>
       </div>
     </div>