發布簽章

%%{init: {'theme':'base','themeVariables':{'primaryColor':'#E2F0F1','primaryTextColor':'#14201F','primaryBorderColor':'#0E7C86','secondaryColor':'#EEF2F3','secondaryTextColor':'#14201F','tertiaryColor':'#FBFCFC','tertiaryTextColor':'#14201F','lineColor':'#4A5A5C','textColor':'#14201F','mainBkg':'#E2F0F1','nodeBorder':'#0E7C86','nodeTextColor':'#14201F','edgeLabelBackground':'#FBFCFC','titleColor':'#14201F','clusterBkg':'#FBFCFC','clusterBorder':'#E4EAEB','actorBkg':'#E2F0F1','actorTextColor':'#14201F','actorBorder':'#0E7C86','actorLineColor':'#C7D1D2','signalColor':'#4A5A5C','signalTextColor':'#14201F','labelBoxBkgColor':'#EEF2F3','labelBoxBorderColor':'#C7D1D2','labelTextColor':'#14201F','loopTextColor':'#14201F','noteBkgColor':'#F6EBD5','noteTextColor':'#14201F','noteBorderColor':'#9C6B12','activationBkgColor':'#EEF2F3','activationBorderColor':'#C7D1D2','sequenceNumberColor':'#FFFFFF'}}}%%
sequenceDiagram
  autonumber
  participant CI as GitLab CI
  participant US as 更新站
  participant R2 as R2
  participant DM as 決策者 CLI
  participant BE as 客戶主系統
  participant H as 客戶主機
  CI->>US: register-draft（未簽 release.json 的欄位）
  US-->>CI: upload.bundle／sha256／manifest 三個 key
  CI->>R2: 上傳整包、.sha256、未簽 release.json
  DM->>US: GET /admin/releases/＜v＞（Access）
  US-->>DM: 詳情（version、sha256、size、min_base…、內部先裝狀態）
  Note over DM: 核欄位合理、內部先裝全成功<br/>輸入版號確認、passphrase 解鎖<br/>buildPayload → canonical → Ed25519<br/>用 .pub 自驗
  DM->>US: POST …/publish {signed_manifest, kid}
  BE->>US: POST /v1/check
  US-->>BE: releases[].signed_manifest（原樣）
  Note over BE: 本機印樣驗章 → 版號遞增 → 主版號 → 可直升
  BE->>US: POST /v1/download-url
  US-->>BE: 15 分鐘預簽網址
  BE->>R2: 下載整包
  Note over BE: 大小與 sha256 等於驗過章的清單
  BE->>H: 寫更新單（包＋清單放 incoming/）
  Note over H: 第 0 步與預檢：release_keys_canonical 再驗章、<br/>sha256 三方相符

%%{init: {'theme':'base','themeVariables':{'primaryColor':'#E2F0F1','primaryTextColor':'#14201F','primaryBorderColor':'#0E7C86','secondaryColor':'#EEF2F3','secondaryTextColor':'#14201F','tertiaryColor':'#FBFCFC','tertiaryTextColor':'#14201F','lineColor':'#4A5A5C','textColor':'#14201F','mainBkg':'#E2F0F1','nodeBorder':'#0E7C86','nodeTextColor':'#14201F','edgeLabelBackground':'#FBFCFC','titleColor':'#14201F','clusterBkg':'#FBFCFC','clusterBorder':'#E4EAEB','actorBkg':'#E2F0F1','actorTextColor':'#14201F','actorBorder':'#0E7C86','actorLineColor':'#C7D1D2','signalColor':'#4A5A5C','signalTextColor':'#14201F','labelBoxBkgColor':'#EEF2F3','labelBoxBorderColor':'#C7D1D2','labelTextColor':'#14201F','loopTextColor':'#14201F','noteBkgColor':'#F6EBD5','noteTextColor':'#14201F','noteBorderColor':'#9C6B12','activationBkgColor':'#EEF2F3','activationBorderColor':'#C7D1D2','sequenceNumberColor':'#FFFFFF'}}}%%
flowchart TD
  A["讀 keys.json：找主力章、有沒有換鑰中的新章"] --> B["GET /admin/releases/＜v＞"]
  B --> C{"欄位合理？<br/>版號一致、major＝版號第一段、sha256 64 hex、<br/>size 正整數、min_base／min_agent 版號格式、has_security_fix 布林"}
  C -- 否 --> X["拒絕，什麼都不送"]
  C -- 是 --> D{status}
  D -- withdrawn --> X
  D -- draft --> E{"內部先裝：清單非空、<br/>每台 installed 且 result＝succeeded"}
  E -- 否 --> X
  E -- 是 --> F
  D -- published --> F["同版重簽"]
  F --> G{"輸入版號確認"}
  G -- 不符 --> X
  G -- 符 --> H["passphrase 解鎖主力章（換鑰中再解新章）"]
  H --> I["buildPayload → canonical → 主簽＋副簽"]
  I --> J{"用 .pub 驗剛蓋的章"}
  J -- 不過 --> X
  J -- 過 --> K["POST …/publish {signed_manifest, kid}"]
  K --> L{"回 status＝published？"}
  L -- 否 --> X
  L -- 是 --> M["新章第一次隨版發出：記 endorsed_in"]

%%{init: {'theme':'base','themeVariables':{'primaryColor':'#E2F0F1','primaryTextColor':'#14201F','primaryBorderColor':'#0E7C86','secondaryColor':'#EEF2F3','secondaryTextColor':'#14201F','tertiaryColor':'#FBFCFC','tertiaryTextColor':'#14201F','lineColor':'#4A5A5C','textColor':'#14201F','mainBkg':'#E2F0F1','nodeBorder':'#0E7C86','nodeTextColor':'#14201F','edgeLabelBackground':'#FBFCFC','titleColor':'#14201F','clusterBkg':'#FBFCFC','clusterBorder':'#E4EAEB','actorBkg':'#E2F0F1','actorTextColor':'#14201F','actorBorder':'#0E7C86','actorLineColor':'#C7D1D2','signalColor':'#4A5A5C','signalTextColor':'#14201F','labelBoxBkgColor':'#EEF2F3','labelBoxBorderColor':'#C7D1D2','labelTextColor':'#14201F','loopTextColor':'#14201F','noteBkgColor':'#F6EBD5','noteTextColor':'#14201F','noteBorderColor':'#9C6B12','activationBkgColor':'#EEF2F3','activationBorderColor':'#C7D1D2','sequenceNumberColor':'#FFFFFF'}}}%%
stateDiagram-v2
  state "只有舊章（primary）" as S0
  state "換鑰中：舊章 primary＋新章 next" as S1
  state "新章已隨版發出（endorsed_in 有值）" as S2
  state "新章 primary，舊章 revoked" as S3
  [*] --> S0
  S0 --> S1: rotate-key（新章 .pub 交給主產品進 release-keys/）
  S1 --> S2: publish 一版：舊章主簽、新章副簽、endorsed_keys 帶新印樣
  S2 --> S3: rotate-key --finish
  S3 --> [*]: sync-keys；舊章私鑰確認不需要後銷毀