chore(release): pin product versions to 0.0.1 + add verify-fixed-versions gate

NathanFlurry · NathanFlurry · commit 770b1944478e · 2026-07-05T17:34:08.000-07:00
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -82,6 +82,8 @@ jobs:
           workspaces: . -> target
           key: js-checks
       - run: npx --yes zx@8 scripts/ci.mjs js-checks
+      - run: node --test scripts/verify-fixed-versions.test.mjs
+      - run: pnpm --filter=publish exec tsx src/ci/verify-fixed-versions.ts
 
   rust-lint:
     runs-on: [self-hosted, agentos-builder]
diff --git a/CLAUDE.md b/CLAUDE.md
@@ -124,6 +124,7 @@ Every bound that protects a shared resource — memory/heap, CPU/wall-clock, fd/
 ### Release Tracks
 
 - **secure-exec runtime** — `@secure-exec/*` npm packages and `secure-exec-*` crates; releases keep npm/crates in sync, previews are npm-only. See "Release-previewing" and "Publishing" for details.
+- **GATE — secure-exec product versions are always `0.0.1` in the committed tree.** Every package returned by `scripts/publish/src/lib/packages.ts` `discoverPackages(repoRoot)` and the root `Cargo.toml [workspace.package]` version stays pinned at `0.0.1`; the real version is applied ONLY transiently in the CI publish checkout by `bump-versions`, never committed. `scripts/publish/src/ci/verify-fixed-versions.ts` enforces this in CI. `@agentos-software/*` registry packages under `registry/{software,agent}/*` are exempt and stay independently versioned.
 - **`@agentos-software/*` registry packages** — generic VM software from secure-exec `registry/software/*` plus agent adapters from secure-exec `registry/agent/*`; versioned independently of secure-exec runtime packages.
 - **agent-os product/API** — `@rivet-dev/agentos*`, AgentOs APIs, sidecar wrapper, docs, quickstarts, and examples; see agent-os `CLAUDE.md` for its pinning workflow.
 
diff --git a/Cargo.toml b/Cargo.toml
@@ -18,23 +18,23 @@ members = [
 ]
 
 [workspace.package]
-version = "0.3.4-rc.1"
+version = "0.0.1"
 edition = "2021"
 license = "Apache-2.0"
 repository = "https://github.com/rivet-dev/secure-exec"
 
 [workspace.dependencies]
-secure-exec-bridge = { path = "crates/bridge", version = "0.3.4-rc.1" }
-secure-exec-build-support = { path = "crates/build-support", version = "0.3.4-rc.1" }
-secure-exec-kernel = { path = "crates/kernel", version = "0.3.4-rc.1" }
-secure-exec-sidecar-protocol = { path = "crates/sidecar-protocol", version = "0.3.4-rc.1" }
-secure-exec-sidecar-core = { path = "crates/sidecar-core", version = "0.3.4-rc.1" }
-secure-exec-execution = { path = "crates/execution", version = "0.3.4-rc.1" }
-secure-exec-vm-config = { path = "crates/vm-config", version = "0.3.4-rc.1" }
-secure-exec-v8-runtime = { path = "crates/v8-runtime", version = "0.3.4-rc.1" }
-secure-exec-client = { path = "crates/secure-exec-client", version = "0.3.4-rc.1" }
-secure-exec-sidecar = { path = "crates/sidecar", version = "0.3.4-rc.1" }
-secure-exec-vfs = { path = "crates/secure-exec-vfs", version = "0.3.4-rc.1" }
-vfs = { package = "secure-exec-vfs-core", path = "crates/vfs", version = "0.3.4-rc.1" }
+secure-exec-bridge = { path = "crates/bridge", version = "0.0.1" }
+secure-exec-build-support = { path = "crates/build-support", version = "0.0.1" }
+secure-exec-kernel = { path = "crates/kernel", version = "0.0.1" }
+secure-exec-sidecar-protocol = { path = "crates/sidecar-protocol", version = "0.0.1" }
+secure-exec-sidecar-core = { path = "crates/sidecar-core", version = "0.0.1" }
+secure-exec-execution = { path = "crates/execution", version = "0.0.1" }
+secure-exec-vm-config = { path = "crates/vm-config", version = "0.0.1" }
+secure-exec-v8-runtime = { path = "crates/v8-runtime", version = "0.0.1" }
+secure-exec-client = { path = "crates/secure-exec-client", version = "0.0.1" }
+secure-exec-sidecar = { path = "crates/sidecar", version = "0.0.1" }
+secure-exec-vfs = { path = "crates/secure-exec-vfs", version = "0.0.1" }
+vfs = { package = "secure-exec-vfs-core", path = "crates/vfs", version = "0.0.1" }
 vbare = "0.0.4"
 vbare-compiler = { package = "rivet-vbare-compiler", version = "0.0.5" }
diff --git a/packages/browser/package.json b/packages/browser/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@secure-exec/browser",
-	"version": "0.3.4-rc.1",
+	"version": "0.0.1",
 	"type": "module",
 	"license": "Apache-2.0",
 	"main": "./dist/index.js",
diff --git a/packages/core/package.json b/packages/core/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@secure-exec/core",
-	"version": "0.3.4-rc.1",
+	"version": "0.0.1",
 	"type": "module",
 	"license": "Apache-2.0",
 	"main": "./dist/index.js",
diff --git a/packages/manifest/package.json b/packages/manifest/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@agentos-software/manifest",
-	"version": "0.3.4-rc.1",
+	"version": "0.0.1",
 	"type": "module",
 	"license": "Apache-2.0",
 	"main": "./dist/index.js",
diff --git a/packages/secure-exec/package.json b/packages/secure-exec/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "secure-exec",
-	"version": "0.3.4-rc.1",
+	"version": "0.0.1",
 	"type": "module",
 	"license": "Apache-2.0",
 	"main": "./dist/index.js",
diff --git a/packages/sidecar/npm/darwin-arm64/package.json b/packages/sidecar/npm/darwin-arm64/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@secure-exec/sidecar-darwin-arm64",
-	"version": "0.3.4-rc.1",
+	"version": "0.0.1",
 	"description": "Secure Exec native sidecar binary for macOS arm64",
 	"license": "Apache-2.0",
 	"repository": {
diff --git a/packages/sidecar/npm/darwin-x64/package.json b/packages/sidecar/npm/darwin-x64/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@secure-exec/sidecar-darwin-x64",
-	"version": "0.3.4-rc.1",
+	"version": "0.0.1",
 	"description": "Secure Exec native sidecar binary for macOS x64",
 	"license": "Apache-2.0",
 	"repository": {
diff --git a/packages/sidecar/npm/linux-arm64-gnu/package.json b/packages/sidecar/npm/linux-arm64-gnu/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@secure-exec/sidecar-linux-arm64-gnu",
-	"version": "0.3.4-rc.1",
+	"version": "0.0.1",
 	"description": "Secure Exec native sidecar binary for Linux arm64 (glibc)",
 	"license": "Apache-2.0",
 	"repository": {
diff --git a/packages/sidecar/npm/linux-x64-gnu/package.json b/packages/sidecar/npm/linux-x64-gnu/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@secure-exec/sidecar-linux-x64-gnu",
-	"version": "0.3.4-rc.1",
+	"version": "0.0.1",
 	"description": "Secure Exec native sidecar binary for Linux x64 (glibc)",
 	"license": "Apache-2.0",
 	"repository": {
diff --git a/packages/sidecar/package.json b/packages/sidecar/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@secure-exec/sidecar",
-	"version": "0.3.4-rc.1",
+	"version": "0.0.1",
 	"description": "Platform-specific resolver for the Secure Exec native sidecar binary",
 	"license": "Apache-2.0",
 	"repository": {
diff --git a/packages/typescript/package.json b/packages/typescript/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@secure-exec/typescript",
-	"version": "0.3.4-rc.1",
+	"version": "0.0.1",
 	"type": "module",
 	"license": "Apache-2.0",
 	"main": "./dist/index.js",
diff --git a/registry/tool/sandbox/package.json b/registry/tool/sandbox/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@secure-exec/sandbox",
-	"version": "0.3.4-rc.1",
+	"version": "0.0.1",
 	"type": "module",
 	"license": "Apache-2.0",
 	"main": "./dist/index.js",
diff --git a/scripts/publish/src/ci/verify-fixed-versions.ts b/scripts/publish/src/ci/verify-fixed-versions.ts
@@ -0,0 +1,157 @@
+#!/usr/bin/env tsx
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, join, relative, resolve, sep } from "node:path";
+import { fileURLToPath } from "node:url";
+import { discoverPackages } from "../lib/packages.js";
+
+const EXPECTED_VERSION = "0.0.1";
+const defaultRoot = resolve(dirname(fileURLToPath(import.meta.url)), "../../../..");
+
+function parseArgs(argv: string[]) {
+	const options = { root: defaultRoot };
+	for (let i = 0; i < argv.length; i++) {
+		const arg = argv[i];
+		if (arg === "--root") {
+			options.root = argv[++i];
+			continue;
+		}
+		if (arg.startsWith("--root=")) {
+			options.root = arg.slice("--root=".length);
+			continue;
+		}
+		throw new Error(`unknown argument: ${arg}`);
+	}
+	return { root: resolve(options.root) };
+}
+
+function toRel(root: string, path: string) {
+	return relative(root, path).split(sep).join("/");
+}
+
+function readPackageVersion(
+	path: string,
+	relPath: string,
+	failures: string[],
+) {
+	let manifest: { version?: unknown };
+	try {
+		manifest = JSON.parse(readFileSync(path, "utf8"));
+	} catch (err) {
+		failures.push(
+			`${relPath} could not be parsed: ${err instanceof Error ? err.message : String(err)}`,
+		);
+		return undefined;
+	}
+	return manifest.version;
+}
+
+function readWorkspacePackageVersion(root: string, failures: string[]) {
+	const cargoPath = join(root, "Cargo.toml");
+	if (!existsSync(cargoPath)) {
+		failures.push("Cargo.toml is missing");
+		return undefined;
+	}
+
+	let inWorkspacePackage = false;
+	for (const line of readFileSync(cargoPath, "utf8").split("\n")) {
+		const header = line.match(/^\[([^\]]+)\]\s*$/);
+		if (header) {
+			inWorkspacePackage = header[1] === "workspace.package";
+			continue;
+		}
+		if (!inWorkspacePackage) continue;
+		const version = line.match(/^\s*version\s*=\s*"([^"]+)"/)?.[1];
+		if (version) return version;
+	}
+
+	failures.push("Cargo.toml [workspace.package] is missing version");
+	return undefined;
+}
+
+function checkWorkspaceCrateDeps(root: string, failures: string[]) {
+	const cargoPath = join(root, "Cargo.toml");
+	if (!existsSync(cargoPath)) return;
+
+	let inDeps = false;
+	for (const line of readFileSync(cargoPath, "utf8").split("\n")) {
+		const header = line.match(/^\[([^\]]+)\]\s*$/);
+		if (header) {
+			inDeps = header[1] === "workspace.dependencies";
+			continue;
+		}
+		if (!inDeps) continue;
+		if (!/path\s*=\s*"crates\//.test(line)) continue;
+
+		const name = line.match(/^\s*([A-Za-z0-9_-]+)\s*=/)?.[1];
+		const version = line.match(/version\s*=\s*"([^"]+)"/)?.[1];
+		if (version !== EXPECTED_VERSION) {
+			failures.push(
+				`Cargo.toml [workspace.dependencies] ${name ?? "(unknown)"} version is ${version === undefined ? "missing" : `"${version}"`}`,
+			);
+		}
+	}
+}
+
+export function auditFixedVersions(options: { root?: string } = {}) {
+	const root = resolve(options.root ?? defaultRoot);
+	const failures: string[] = [];
+
+	if (!existsSync(root)) {
+		return {
+			root,
+			ok: false,
+			packageCount: 0,
+			failures: [`${root} does not exist`],
+		};
+	}
+
+	const packages = discoverPackages(root).sort((a, b) =>
+		a.relDir.localeCompare(b.relDir),
+	);
+
+	for (const pkg of packages) {
+		const pkgJsonPath = join(pkg.dir, "package.json");
+		const relPath = toRel(root, pkgJsonPath);
+		const version = readPackageVersion(pkgJsonPath, relPath, failures);
+		if (version !== EXPECTED_VERSION) {
+			failures.push(
+				`${relPath} version is ${version === undefined ? "missing" : `"${String(version)}"`}`,
+			);
+		}
+	}
+
+	const cargoVersion = readWorkspacePackageVersion(root, failures);
+	if (cargoVersion !== undefined && cargoVersion !== EXPECTED_VERSION) {
+		failures.push(
+			`Cargo.toml [workspace.package] version is "${cargoVersion}"`,
+		);
+	}
+	checkWorkspaceCrateDeps(root, failures);
+
+	return {
+		root,
+		ok: failures.length === 0,
+		packageCount: packages.length,
+		failures,
+	};
+}
+
+export function main(argv = process.argv.slice(2)) {
+	const options = parseArgs(argv);
+	const result = auditFixedVersions(options);
+	if (result.ok) {
+		process.stdout.write(
+			`verify-fixed-versions: OK (${result.packageCount} packages + Cargo.toml pinned to ${EXPECTED_VERSION})\n`,
+		);
+		return 0;
+	}
+
+	for (const failure of result.failures) {
+		process.stderr.write(`verify-fixed-versions: ${failure}\n`);
+	}
+	return 1;
+}
+
+if (import.meta.url === `file://${process.argv[1]}`) {
+	process.exitCode = main();
+}
diff --git a/scripts/publish/src/local/cut-release.ts b/scripts/publish/src/local/cut-release.ts
diff --git a/scripts/verify-fixed-versions.test.mjs b/scripts/verify-fixed-versions.test.mjs

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@secure-exec/browser",`
`3`		`- "version": "0.3.4-rc.1",`
	`3`	`+ "version": "0.0.1",`
`4`	`4`	`"type": "module",`
`5`	`5`	`"license": "Apache-2.0",`
`6`	`6`	`"main": "./dist/index.js",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@secure-exec/core",`
`3`		`- "version": "0.3.4-rc.1",`
	`3`	`+ "version": "0.0.1",`
`4`	`4`	`"type": "module",`
`5`	`5`	`"license": "Apache-2.0",`
`6`	`6`	`"main": "./dist/index.js",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@agentos-software/manifest",`
`3`		`- "version": "0.3.4-rc.1",`
	`3`	`+ "version": "0.0.1",`
`4`	`4`	`"type": "module",`
`5`	`5`	`"license": "Apache-2.0",`
`6`	`6`	`"main": "./dist/index.js",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "secure-exec",`
`3`		`- "version": "0.3.4-rc.1",`
	`3`	`+ "version": "0.0.1",`
`4`	`4`	`"type": "module",`
`5`	`5`	`"license": "Apache-2.0",`
`6`	`6`	`"main": "./dist/index.js",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@secure-exec/sidecar-darwin-arm64",`
`3`		`- "version": "0.3.4-rc.1",`
	`3`	`+ "version": "0.0.1",`
`4`	`4`	`"description": "Secure Exec native sidecar binary for macOS arm64",`
`5`	`5`	`"license": "Apache-2.0",`
`6`	`6`	`"repository": {`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@secure-exec/sidecar-darwin-x64",`
`3`		`- "version": "0.3.4-rc.1",`
	`3`	`+ "version": "0.0.1",`
`4`	`4`	`"description": "Secure Exec native sidecar binary for macOS x64",`
`5`	`5`	`"license": "Apache-2.0",`
`6`	`6`	`"repository": {`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@secure-exec/sidecar-linux-arm64-gnu",`
`3`		`- "version": "0.3.4-rc.1",`
	`3`	`+ "version": "0.0.1",`
`4`	`4`	`"description": "Secure Exec native sidecar binary for Linux arm64 (glibc)",`
`5`	`5`	`"license": "Apache-2.0",`
`6`	`6`	`"repository": {`