Skip to content

feat(registry): publish immutable workspace dependency definitions - #20

Merged
sheepbox8646 merged 2 commits into
mainfrom
feat/workspace-dependencies
Sep 8, 2026
Merged

sheepbox8646 merged 2 commits into
mainfrom
feat/workspace-dependencies

Conversation

@sheepbox8646

@sheepbox8646 sheepbox8646 commented Sep 7, 2026

Copy link
Copy Markdown
Member

Workspace dependency recipes currently ship inside Memoh, so adding a tool or fixing its installer requires a Server release. This adds an official Dependency resource to Supermarket and moves the Codex, Claude Code, Node.js, Python and uv definitions here.

  • Publishes digest-verified, immutable releases/artifacts with an independent snapshot, reviewed release lock and conditional publication; Skill publication remains independent.
  • Adds catalog/current/release/artifact APIs, localized metadata and icons, bounded manifest/archive validation, and --kind all|skills|dependencies to the registry commands.
  • Exports producer-generated fixtures for Memoh's Go consumer. Each management operation resolves the current definition, while preview and execution retain the same revision; software versions remain separate.

Companion Memoh stack: felinics/Memoh#1132 → #1135 → #1137 → #1138 → #1141 → #1144. The six existing PRs now consume this protocol with persistent caching and first-use workspace installation. Only the official memoh registry is supported in this release.

Validation: 83 Bun tests, typechecks and build passed with pinned Bun 1.3.14. Local Supermarket and Memoh HTTP APIs verified the catalog, immutable content, icons, and actual installation/update/rollback of all five dependencies. All five also completed reinstall/remove/install cycles. A temporary dependency published only in Supermarket appeared and installed without a Go/TS change; publishing a second revision preserved an already-previewed operation while the next operation used the new recipe. Retirement and cache-only management were verified. With Supermarket stopped and Memoh restarted, the persisted catalog, icons and launcher preflight remained available. A transient GitHub download failure was retried successfully.

⚠️ No human QA — this PR has not been verified by a human yet. Remove this line once a human confirms the happy path.

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Sep 7, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
✅ Deployment successful!
View logs
supermarket ce15ee7 Sep 08 2026, 10:51 AM

Restore working trees when replacement fails and verify upstream checksums
before extracting mirrored runtime archives. Disable npm lifecycle scripts,
link Claude's native launcher explicitly, and keep Python requests stable.

Preserve translation bytes, avoid downgrade updates, scope recipe caches,
and validate publication inputs before changing catalog pointers.

Validate with 161 Bun tests, shellcheck, typechecks, registry validation and
build using Bun 1.3.14.

Model: gpt-6
@sheepbox8646
sheepbox8646 marked this pull request as ready for review September 8, 2026 11:17
@sheepbox8646
sheepbox8646 merged commit 000164e into main Sep 8, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant