Updater: tolerate unused Claude manifest metadata (#55)

Anthropic dropped the modsCommit field from the Claude Code release
manifest (it is absent from 2.1.301; the last pinned 2.1.295), and the
exact top-level key match has failed every scheduled vendor update
since 2026-10-10. Require only the fields the updater consumes;
artifacts are still pinned by sha256 and size.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Author: zurfyx

.github/workflows/update.yml

@@ -125,10 +125,10 @@ jobs:
           [[ "$claude_version" =~ ^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$ ]]
           claude_manifest=$(curl_text "https://downloads.claude.ai/claude-code-releases/$claude_version/manifest.json")
           jq -e --arg version "$claude_version" '
-            (keys == ["buildDate", "commit", "manifestSignatureEnforcement", "modsCommit", "platforms", "sdkCompat", "version"]) and
+            (has("platforms") and has("version")) and
             .version == $version and
-            (.platforms["linux-arm64"] | keys == ["binary", "checksum", "size"]) and
-            (.platforms["linux-x64"] | keys == ["binary", "checksum", "size"]) and
+            (.platforms["linux-arm64"] | has("binary") and has("checksum") and has("size")) and
+            (.platforms["linux-x64"] | has("binary") and has("checksum") and has("size")) and
             .platforms["linux-arm64"].binary == "claude" and
             .platforms["linux-x64"].binary == "claude"
           ' <<<"$claude_manifest" >/dev/null

scripts/update-versions.sh

@@ -143,10 +143,10 @@ claude_version=$(curl_text "$CLAUDE_LATEST_URL")
   die "Claude latest channel did not return a stable semantic version"
 claude_manifest=$(curl_text "$CLAUDE_RELEASE_ROOT/$claude_version/manifest.json")
 jq -e --arg version "$claude_version" '
-  (keys == ["buildDate", "commit", "manifestSignatureEnforcement", "modsCommit", "platforms", "sdkCompat", "version"]) and
+  (has("platforms") and has("version")) and
   .version == $version and
-  (.platforms["linux-arm64"] | keys == ["binary", "checksum", "size"]) and
-  (.platforms["linux-x64"] | keys == ["binary", "checksum", "size"])
+  (.platforms["linux-arm64"] | has("binary") and has("checksum") and has("size")) and
+  (.platforms["linux-x64"] | has("binary") and has("checksum") and has("size"))
 ' <<< "$claude_manifest" > /dev/null || die "Claude manifest schema changed"
 
 read_claude_field() {

tests/updater.test.mjs

@@ -254,7 +254,7 @@ case " $* " in
     case "$url" in
       */claude-code-releases/latest) printf '${claudeVersion}\\n' ;;
       */${claudeVersion}/manifest.json)
-        printf '%s\\n' '{"buildDate":"","commit":"","manifestSignatureEnforcement":false,"modsCommit":"","platforms":{"linux-arm64":{"binary":"claude","checksum":"${claudeSha}","size":101},"linux-x64":{"binary":"claude","checksum":"${claudeSha}","size":101}},"sdkCompat":{},"version":"${claudeVersion}"}'
+        printf '%s\\n' '{"buildDate":"","commit":"","manifestSignatureEnforcement":false,"platforms":{"linux-arm64":{"binary":"claude","checksum":"${claudeSha}","size":101},"linux-x64":{"binary":"claude","checksum":"${claudeSha}","size":101}},"sdkCompat":{},"version":"${claudeVersion}"}'
         ;;
       */codex/channels/latest)
         printf '%s\\n' '{"assets":[{"browser_download_url":"https://releases.openai.com/codex/releases/${codexVersion}/codex-package-aarch64-unknown-linux-musl.tar.gz","digest":"sha256:${codexSha}","name":"codex-package-aarch64-unknown-linux-musl.tar.gz"},{"browser_download_url":"https://releases.openai.com/codex/releases/${codexVersion}/codex-package-x86_64-unknown-linux-musl.tar.gz","digest":"sha256:${codexSha}","name":"codex-package-x86_64-unknown-linux-musl.tar.gz"}],"tag_name":"rust-v${codexVersion}"}'
@@ -353,7 +353,7 @@ case " $* " in
     case "$url" in
       */claude-code-releases/latest) printf '${claudeVersion}\\n' ;;
       */${claudeVersion}/manifest.json)
-        printf '%s\\n' '{"buildDate":"","commit":"","manifestSignatureEnforcement":false,"modsCommit":"","platforms":{"linux-arm64":{"binary":"claude","checksum":"${driftSha}","size":101},"linux-x64":{"binary":"claude","checksum":"${driftSha}","size":101}},"sdkCompat":{},"version":"${claudeVersion}"}'
+        printf '%s\\n' '{"buildDate":"","commit":"","manifestSignatureEnforcement":false,"platforms":{"linux-arm64":{"binary":"claude","checksum":"${driftSha}","size":101},"linux-x64":{"binary":"claude","checksum":"${driftSha}","size":101}},"sdkCompat":{},"version":"${claudeVersion}"}'
         ;;
       */codex/channels/latest)
         printf '%s\\n' '{"assets":[{"browser_download_url":"https://releases.openai.com/codex/releases/${codexVersion}/codex-package-aarch64-unknown-linux-musl.tar.gz","digest":"sha256:${"2".repeat(64)}","name":"codex-package-aarch64-unknown-linux-musl.tar.gz"},{"browser_download_url":"https://releases.openai.com/codex/releases/${codexVersion}/codex-package-x86_64-unknown-linux-musl.tar.gz","digest":"sha256:${"2".repeat(64)}","name":"codex-package-x86_64-unknown-linux-musl.tar.gz"}],"tag_name":"rust-v${codexVersion}"}'