theseus/addon-update-pubkeys.js

// Ed25519 public keys authorized to sign bundled-addon updates.
//
// A pubkey listed here can, at runtime, cause Theseus to REPLACE any user's
// bundled add-on with a signed payload fetched over the network. Only add
// pubkeys the Silent Mode operator controls.
//
// Rotation:
//   1. Generate a new keypair with scripts/generate-update-keypair.mjs.
//   2. Sign next updates.json entries with BOTH old and new key.
//   3. Ship a Theseus release adding the new pubkey to this array (both live).
//   4. After users have updated past that release, ship a follow-up release
//      removing the old pubkey; stop signing with it.
//
// Empty array means "no update endpoint" — the client short-circuits and
// makes no outbound requests. This is the safe default for a fresh build.

module.exports = {
  PUBKEYS_HEX: [
    "732b1263a236b0030383a2376597cfa43c3624b3ca2912a46134f8f2a06e6012", // Silent Mode ops, generated 2026-09-07
  ],
};