pub enum AppTier {
FirstParty,
Optional,
Development,
}Expand description
Trust/distribution tier — derived at load time from the install path AND (per FR-028 cycle 4) the manifest sidecar’s GPG signature.
This is not stored in the manifest; it is computed by tier_validator.
Variants§
FirstParty
App installed at the bundled path (/usr/share/node/builtin-apps/)
OR at the apt path with a manifest sidecar signed by a node project key.
May be Native or Bun. Highest trust.
Optional
App installed at the optional apt path (/usr/lib/node/apps/) with
no/invalid project signature. MUST be Bun; Native at this tier
triggers TierError (FR-028).
Development
App loaded from a developer’s local dev directory (NODE_DEV_APPS_DIR),
via node-app-build dev or manual sideload. Bypasses signature checks
because the dev directory is owned by the developer (security gate is
the file-system path: only the dev user can write to it). Permitted
for Native apps so cdylib developers can iterate without per-build
GPG signing.
Daemon logs every Development-tier load at info! so operators of a
real node can see when a non-prod app is active. UI badges this tier
distinctly (amber/red, never green).