A copy installed by its own installer (the macOS app, the AppImage, the
Debian or RPM package, the Windows installer) asks latest.json on the
pre-release wai-quantum-desktop-latest for a newer version as it opens.
The Studio offers it in a bar above the frame (src/update.js, its words
in English and Chinese); nothing installs until the person says so, and
then only an update whose signature verifies with the public key in
tauri.conf.json and names the version announced (requireSignedVersion),
after which the app restarts into it.
- The updater plugin 2.14.0 registered; commands update_check and
update_install. A copy built from source or unpacked by a package
manager does not update itself, and the check answers why
(installed_by / updates_itself).
- verify-update FILE SIG VERSION: the same signature and version check
from the command line, for the release to run on every update it signs.
- update-status: the installer this copy came from, as JSON, for the
release to ask of each installer's copy.
- tauri.conf.json: the updater's one https endpoint, an empty public key
until the owner makes the release key, update artifacts off unless a
release turns them on, the macOS app signed ad hoc unless a Developer ID
is given, and the publisher and homepage the packages carry.
- icons/icon.ico and icons/icon.icns, made from icons/icon.png by the
bundler's icon command: a Windows build needs the .ico for its resource
file (the app had not been built on Windows before), and the macOS app
takes the .icns.
- Tests: the published test vectors held to the key and the signed
version (tampered bytes, another key, another version, no version, no
key, bad base64 all refused); which copies update themselves; the
configuration's endpoint and flags; test/update.test.mjs for the bar.
- New crates in the lockfile at versions at least two weeks old, except
webpki-root-certs at 1.0.10, the first release with RUSTSEC-2026-0383
fixed.
- The Studio's README and its translation say what the bar does.
- The views page rebuilt (bash wai/wai-quantum-views/build.sh), since it
is built from the Studio's English words and styles.
Co-Authored-By: Claude Opus 5.5 <[email protected]>