silentmode/theseus
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Ship Theseus 0.0.2 (SameSite cookie shim)

Browse source 
Bump to 0.0.2; publish new installer/portable hashes across the download
site (tools + releases pages), releases-manifest.json (Theseus entry only —
Ariadne Resolver/Android entries preserved), and RELEASE-HANDOFF.md.
Artifacts rebuilt reproducibly (SOURCE_DATE_EPOCH=1785888000, unsigned).

  Setup    b3a810472b06273c1cc846adcb84366ad9114276a984bed7347c26f019497c56
  Portable 37679d293715b9e1881d38ee7e92a5a7448f3c523a14919637afe732e2478ce1
This commit is contained in:
Local Dev 2026-08-05 18:51:16 +02:00
parent ad1e5d4e1d
commit 3803202df6
2 changed files with 13 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

23
RELEASE-HANDOFF.md
View file

@ -1,7 +1,8 @@
# Theseus Navigator v0.0.1 — release handoff # Theseus Navigator v0.0.2 — release handoff
Built 2026-07-25 from `D:\Dev\SilentMode\TheseusNavigator`. The code changes Built 2026-08-05 from `D:\Dev\SilentMode\TheseusNavigator`. This release adds the
(multi-TLD, registry badge, secret-free Sia-via-gateway) and packaging are done. cross-site embed cookie shim (`applyEmbedCookieShim()` — SameSite=None; Secure on an
allowlist so captcha-gated faucet iframes work); packaging is done.
The steps below are the ones this session must NOT do for you — they spend The steps below are the ones this session must NOT do for you — they spend
on-chain and touch the VPS. Run them yourself; exact commands are given. on-chain and touch the VPS. Run them yourself; exact commands are given.
@ -9,13 +10,13 @@ on-chain and touch the VPS. Run them yourself; exact commands are given.
| File | Size | SHA-256 | | File | Size | SHA-256 |
|---|---|---| |---|---|---|
| `TheseusNavigator-Setup-0.0.1.exe` (NSIS installer) | ~92 MB | `55d6d23d950952e5dae22474e1abd4420e8d4081a17ee7be21fbcffc2141189c` | | `TheseusNavigator-Setup-0.0.2.exe` (NSIS installer) | ~92 MB | `b3a810472b06273c1cc846adcb84366ad9114276a984bed7347c26f019497c56` |
| `TheseusNavigator-0.0.1-portable.exe` (portable) | ~92 MB | `9832d8cef5c1c1b8d7025cbdf4a70ef82e1e10255f83bc700da2014f9849330f` | | `TheseusNavigator-0.0.2-portable.exe` (portable) | ~92 MB | `37679d293715b9e1881d38ee7e92a5a7448f3c523a14919637afe732e2478ce1` |
> **The binaries have been rebuilt more than once and the hashes changed each > **The binaries have been rebuilt more than once and the hashes changed each
> time** (`41df5809…` → `77e836ac…` → `f39132bc…`). The values above were > time** (unsigned reproducible builds still differ if the toolchain changes). The
> re-computed from `dist-public/` on 2026-07-26 and match what `site/` and > values above were computed from `dist-public/` on 2026-08-05 and match what `site/`
> `site/releases-manifest.json` publish. **Always re-hash immediately before the > and `site/releases-manifest.json` publish. **Always re-hash immediately before the
> Step 2 on-chain publish** — a rebuild between writing a doc and spending the > Step 2 on-chain publish** — a rebuild between writing a doc and spending the
> transaction silently invalidates it, and that step cannot be undone. > transaction silently invalidates it, and that step cannot be undone.
@ -35,7 +36,7 @@ Upload both installers + the manifest (run over the anonymous VPN/Tor per
SECURITY.md §4): SECURITY.md §4):
```bash ```bash
scp dist-public/TheseusNavigator-Setup-0.0.1.exe dist-public/TheseusNavigator-0.0.1-portable.exe site/releases-manifest.json <vps>:/opt/silent-mode/dl/ scp dist-public/TheseusNavigator-Setup-0.0.2.exe dist-public/TheseusNavigator-0.0.2-portable.exe site/releases-manifest.json <vps>:/opt/silent-mode/dl/
``` ```
**Manifest moved (2026-07-26).** `releases-manifest.json` is now multi-product **Manifest moved (2026-07-26).** `releases-manifest.json` is now multi-product
@ -58,7 +59,7 @@ inline `h` record so `releases.silentmode.bch` itself serves the hash list
```bash ```bash
cd D:\Dev\SilentMode\Argus cd D:\Dev\SilentMode\Argus
node src/update.js releases.silentmode "{\"h\":\"<html><body><pre>Theseus 0.0.1\nSetup 55d6d23d950952e5dae22474e1abd4420e8d4081a17ee7be21fbcffc2141189c\nPortable 9832d8cef5c1c1b8d7025cbdf4a70ef82e1e10255f83bc700da2014f9849330f\nAriadne Android 0.2\nAPK 635c8f04d44ef855a8390b9eeddb8cd2d50622e81cc4e5004e8daffc1bb0425c</pre></body></html>\"}" node src/update.js releases.silentmode "{\"h\":\"<html><body><pre>Theseus 0.0.2\nSetup b3a810472b06273c1cc846adcb84366ad9114276a984bed7347c26f019497c56\nPortable 37679d293715b9e1881d38ee7e92a5a7448f3c523a14919637afe732e2478ce1\nAriadne Android 0.2\nAPK 635c8f04d44ef855a8390b9eeddb8cd2d50622e81cc4e5004e8daffc1bb0425c</pre></body></html>\"}"
``` ```
- If `releases.silentmode` is not yet registered, register it first with - If `releases.silentmode` is not yet registered, register it first with
@ -88,6 +89,6 @@ CACHE="$LOCALAPPDATA/electron-builder/Cache/winCodeSign"
node_modules/7zip-bin/win/x64/7za.exe x "$CACHE"/<downloaded>.7z -o"$CACHE/winCodeSign-2.6.0" -xr!darwin -y node_modules/7zip-bin/win/x64/7za.exe x "$CACHE"/<downloaded>.7z -o"$CACHE/winCodeSign-2.6.0" -xr!darwin -y
``` ```
Build with a fixed `SOURCE_DATE_EPOCH` (set to 2026-07-25 for this release) and Build with a fixed `SOURCE_DATE_EPOCH` (set to 2026-08-05 / `1785888000` for this release) and
`CSC_IDENTITY_AUTO_DISCOVERY=false` so timestamps don't fingerprint the build `CSC_IDENTITY_AUTO_DISCOVERY=false` so timestamps don't fingerprint the build
and no signing identity is sought. and no signing identity is sought.

2
package.json
View file

@ -1,6 +1,6 @@
{ {
"name": "theseus-navigator", "name": "theseus-navigator",
"version": "0.0.1", "version": "0.0.2",
"description": "Theseus Navigator — a browser that follows the thread. By Silent Mode, a Deviant project.", "description": "Theseus Navigator — a browser that follows the thread. By Silent Mode, a Deviant project.",
"author": "Silent Mode", "author": "Silent Mode",
"main": "main.js", "main": "main.js",