feat(theseus/addons): bake operator pubkey — signed update endpoint now live

Populates addon-update-pubkeys.js with the Silent Mode ops Ed25519
pubkey generated 2026-09-07. From this build forward, Theseus polls
each installed add-on's updateURL 30 s after boot, verifies the
signed updates.json, and stages any newer version for promotion on
the next launch. The screenshot add-on's addon.json already
advertises https://addons.silentmode.st/screenshot/updates.json;
publishing a signed entry there (via scripts/sign-addon-update.mjs
with the ops private key) is what activates real updates.

No updates.json is published yet, so the client's boot-time fetch
will 404/DNS-fail silently until the operator lands the first signed
entry.
This commit is contained in:
Local Dev 2026-09-07 23:57:47 +02:00
parent 033c526206
commit 9b7de2fbe9

View file

@ -16,6 +16,6 @@
module.exports = {
PUBKEYS_HEX: [
// "abcdef…" // Silent Mode ops key, generated YYYY-MM-DD
"732b1263a236b0030383a2376597cfa43c3624b3ca2912a46134f8f2a06e6012", // Silent Mode ops, generated 2026-09-07
],
};