macos: adopt rivet RivetUpdate, retire the hand-rolled UpdateService

.github/workflows/ci.yml

@@ -33,7 +33,7 @@ jobs:
           variant: CS
           version: '9.3'
       - name: Install Rivet (catalog)
-        run: raco pkg install --auto --no-docs rivet
+        run: raco pkg install --auto --no-docs 'https://github.com/turinglambdaai/rivet.git#v0.8.1'
       - name: Core contract tests
         run: raco test racket/
       # Golden CLI suite (61 cases): byte-identical stdout/stderr/exit codes
@@ -69,7 +69,7 @@ jobs:
       # crypto backs the updater's signing.
       - name: Install Rivet (catalog) and backend packages
         run: |
-          raco pkg install --auto --no-docs rivet
+          raco pkg install --auto --no-docs 'https://github.com/turinglambdaai/rivet.git#v0.8.1'
           raco pkg install --auto --no-docs db crypto
       - name: Toolchain doctor
         run: raco rivet doctor --json
@@ -109,7 +109,7 @@ jobs:
           variant: CS
           version: '9.3'
       - name: Install Rivet (catalog)
-        run: raco pkg install --auto --no-docs rivet
+        run: raco pkg install --auto --no-docs 'https://github.com/turinglambdaai/rivet.git#v0.8.1'
       - name: Build host
         run: raco rivet build
       - name: Boot smoke
@@ -136,7 +136,7 @@ jobs:
           version: '9.3'
       - name: Install Rivet (catalog)
         shell: bash
-        run: raco pkg install --auto --no-docs rivet
+        run: raco pkg install --auto --no-docs 'https://github.com/turinglambdaai/rivet.git#v0.8.1'
       - name: Build host
         shell: pwsh
         run: raco rivet build

.github/workflows/release.yml

@@ -31,7 +31,7 @@ jobs:
           variant: CS
           version: '9.3'
       - name: Install Rivet (catalog)
-        run: raco pkg install --auto --no-docs rivet
+        run: raco pkg install --auto --no-docs 'https://github.com/turinglambdaai/rivet.git#v0.8.1'
       - name: Version preflight (VERSION == rivet.rktd == updater == tag)
         run: bash scripts/check-release-version.sh "${{ github.ref_name }}"
       # DMG (human installer) + portable zip + SBOM + notices, launch
@@ -79,7 +79,7 @@ jobs:
           version: '9.3'
       - name: Install Rivet (catalog)
         shell: pwsh
-        run: raco pkg install --auto --no-docs rivet
+        run: raco pkg install --auto --no-docs 'https://github.com/turinglambdaai/rivet.git#v0.8.1'
       - name: Install WiX (v5; rivet's MSI toolchain)
         run: dotnet tool install --global wix --version 5.0.2
         shell: bash
@@ -135,7 +135,7 @@ jobs:
       # crypto backs the updater's signing.
       - name: Install Rivet (catalog) and backend packages
         run: |
-          raco pkg install --auto --no-docs rivet
+          raco pkg install --auto --no-docs 'https://github.com/turinglambdaai/rivet.git#v0.8.1'
           raco pkg install --auto --no-docs db crypto
       - name: Install GTK4, rpm and packaging tooling
         run: |
@@ -191,7 +191,7 @@ jobs:
           variant: CS
           version: '9.3'
       - name: Install Rivet (catalog)
-        run: raco pkg install --auto --no-docs rivet
+        run: raco pkg install --auto --no-docs 'https://github.com/turinglambdaai/rivet.git#v0.8.1'
       - uses: actions/download-artifact@v4
         with:
           path: artifacts

macos-host/Package.swift

@@ -27,7 +27,8 @@ let package = Package(
             dependencies: [
                 .product(name: "RivetRuntime", package: "macos"),
                 .product(name: "RivetEmbedding", package: "macos"),
-                .product(name: "RivetSystem", package: "macos")
+                .product(name: "RivetSystem", package: "macos"),
+                .product(name: "RivetUpdate", package: "macos")
             ],
             path: "Sources/RivetHost",
             linkerSettings: [