From 23aa3f6a3b617392a3878f41981cf8d49862c744 Mon Sep 17 00:00:00 2001 From: Ralf Anton Beier Date: Sat, 13 Jun 2026 14:37:49 +0200 Subject: [PATCH 1/2] fix(checksums): restore wsc wasm_component platform (unbreaks wasm_signing) The wsc bump to per-OS binaries (#471) replaced wsc.json's universal wasm-component entry with per-platform binaries, dropping the `wasm_component` platform. But `@wasmsign2_cli_wasm` is a wasm_component_download(tool_name="wsc") that resolves only the `wasm`/`wasm_component` platform, so it failed to fetch: Error in fail: Tool 'wsc' version '0.7.0' not found in registry (tried platforms: wasm, wasm_component) This cascaded into analysis failures for //tools/wasmsign2_wrapper and the entire //examples/wasm_signing tree on every PR (the Test workflow runs on pull_request, not on main pushes, so it landed uncaught). Restore the `wasm_component` platform for 0.7.0 (pinned) and 0.9.0 (latest), pointing at the wsc-component.wasm asset. Checksums verified against the authoritative pulseengine/sigil release .sha256 sidecars: 0.7.0 15efa8033741c4613165ae49b002847df9afcc27af876778884c79aaea4d45b2 0.9.0 b40f70180a3c448b2f2fef21f42966c43a6cc11a7d5796db89de7abf969a1ba4 Verified locally: `bazel build //tools/wasmsign2_wrapper:wasmsign2_wrapper` now fetches wsc-component.wasm and builds successfully. Co-Authored-By: Claude Opus 4.8 (1M context) --- checksums/tools/wsc.json | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/checksums/tools/wsc.json b/checksums/tools/wsc.json index b2411553..1bdffcd2 100644 --- a/checksums/tools/wsc.json +++ b/checksums/tools/wsc.json @@ -3,11 +3,15 @@ "github_repo": "pulseengine/sigil", "description": "WebAssembly Signature Component - signing, verification, and attestation toolkit", "latest_version": "0.9.0", - "supported_platforms": ["darwin_amd64", "darwin_arm64", "linux_amd64", "linux_arm64", "windows_amd64"], + "supported_platforms": ["darwin_amd64", "darwin_arm64", "linux_amd64", "linux_arm64", "windows_amd64", "wasm_component"], "versions": { "0.9.0": { "release_date": "2026-05-21", "platforms": { + "wasm_component": { + "sha256": "b40f70180a3c448b2f2fef21f42966c43a6cc11a7d5796db89de7abf969a1ba4", + "url_suffix": "wsc-component.wasm" + }, "darwin_amd64": { "sha256": "390182be41aeda8165d40103ab10487ea84f9f52b6d3a336d8a59ead9c88da3b", "url_suffix": "wsc-macos-x86_64" @@ -33,6 +37,10 @@ "0.7.0": { "release_date": "2026-03-28", "platforms": { + "wasm_component": { + "sha256": "15efa8033741c4613165ae49b002847df9afcc27af876778884c79aaea4d45b2", + "url_suffix": "wsc-component.wasm" + }, "darwin_amd64": { "sha256": "ac429b11a4bf70cff96ad29f7c21466b3034fc91bcd2f385f6210bc5e2040e5e", "url_suffix": "wsc-macos-x86_64" From f27ff165ea67995240359cf3cef8d552a274a522 Mon Sep 17 00:00:00 2001 From: Ralf Anton Beier Date: Sat, 13 Jun 2026 15:27:09 +0200 Subject: [PATCH 2/2] fix(checksums): use wsc-cli.wasm (runnable module), drop 0.9.0 wasm entry Correcting the prior commit: I pointed the wasm_component platform at wsc-component.wasm, which fetches but is a *component* that `wasmtime run keygen ...` cannot execute as a command module: Error: failed to run main module `.../wasmsign2.wasm` The wrapper runs the WASI *CLI* module. v0.7.0 ships both wsc-cli.wasm and wsc-component.wasm; the pre-#471 registry used wsc-cli.wasm. Point 0.7.0 at wsc-cli.wasm (sha a57139921f87e91282f22f788155177eadf2085e21a7f2f8ceb8d9fac1c761ef, verified against the pulseengine/sigil sidecar). Drop the 0.9.0 wasm_component entry: v0.9.0 ships only wsc-component.wasm (no CLI module), so the current wrapper can't run it. Nothing fetches 0.9.0 (the pin is 0.7.0); bumping past 0.7.0 needs the wrapper to handle the component form (tracked in #498). Verified by RUNNING it: `bazel build //examples/wasm_signing:example_keys` fetches wsc-cli.wasm and successfully generates a key pair via the wrapper. Co-Authored-By: Claude Opus 4.8 (1M context) --- checksums/tools/wsc.json | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/checksums/tools/wsc.json b/checksums/tools/wsc.json index 1bdffcd2..a064f81a 100644 --- a/checksums/tools/wsc.json +++ b/checksums/tools/wsc.json @@ -8,10 +8,6 @@ "0.9.0": { "release_date": "2026-05-21", "platforms": { - "wasm_component": { - "sha256": "b40f70180a3c448b2f2fef21f42966c43a6cc11a7d5796db89de7abf969a1ba4", - "url_suffix": "wsc-component.wasm" - }, "darwin_amd64": { "sha256": "390182be41aeda8165d40103ab10487ea84f9f52b6d3a336d8a59ead9c88da3b", "url_suffix": "wsc-macos-x86_64" @@ -38,8 +34,8 @@ "release_date": "2026-03-28", "platforms": { "wasm_component": { - "sha256": "15efa8033741c4613165ae49b002847df9afcc27af876778884c79aaea4d45b2", - "url_suffix": "wsc-component.wasm" + "sha256": "a57139921f87e91282f22f788155177eadf2085e21a7f2f8ceb8d9fac1c761ef", + "url_suffix": "wsc-cli.wasm" }, "darwin_amd64": { "sha256": "ac429b11a4bf70cff96ad29f7c21466b3034fc91bcd2f385f6210bc5e2040e5e",