Skip to content

feat(registry): index, signed sync, catalog API, and consolidation refactors - #1097

Draft
gildesmarais wants to merge 19 commits into
mainfrom
feat/registry-index-sync
Draft

feat(registry): index, signed sync, catalog API, and consolidation refactors#1097
gildesmarais wants to merge 19 commits into
mainfrom
feat/registry-index-sync

Conversation

@gildesmarais

@gildesmarais gildesmarais commented Aug 22, 2026

Copy link
Copy Markdown
Member

Summary

  • Replace the html2rss-configs gem with an on-disk registry index (Registry::Index, Registry::Store, Registry::Config) and wire the catalog API (GET /api/v1/configs) through it.
  • Add signed registry sync: config/registries.yml, Registry::Sync, bin/registry-sync, seed bundle under app/registries/seed/, background refresh in boot, and staged promote / trust governance.
  • Document operator paths: registry sync runbook, catalog API ownership, and docs/registry-go-live.md.
  • Pin html2rss from GitHub for registry hardening and CI (SimpleCov filter fix).
  • Consolidation (reviewer-friendly): fold sync helpers into sync_transport, catalog wire/load guards into index, centralize manifest I/O and test signing helpers, dedupe fixtures and sync docs.

Test plan

  • make ready in html2rss-web
  • bundle exec rspec spec/html2rss/web/registry/ (index, store, config, sync)
  • bin/registry-sync against seed/fixture registries (dry run / promote path)
  • GET /api/v1/configs returns catalog rows after sync or seed load
  • Smoke: spec/smoke/docker_spec.rb registry-related checks
  • Confirm OpenAPI/types drift is intentional for catalog metadata changes

@gildesmarais
gildesmarais marked this pull request as draft August 22, 2026 14:11
@gildesmarais gildesmarais changed the title feat(registry): replace configs gem with signed registry sync feat(registry): signed registry sync, catalog API, and staged promote governance Aug 22, 2026
Replace sibling path pin with feat/registry-v1 branch so CI can
bundle install without a checked-out html2rss repo.
Add sync policy, staging/promote flow, trust context verification, scrape
policy guards, and seed bundle fixtures with updated registry sync specs.
Align Gemfile.lock with feat/registry-v1 b32ec095 for signed bundle verify and manifest-only catalog APIs.
Replace invalid skip_filter with add_filter so ruby and openapi CI jobs
load spec_helper; keep html2rss on feat/registry-v1 until gem release.
@gildesmarais
gildesmarais force-pushed the feat/registry-index-sync branch from ad2a378 to f03730c Compare August 22, 2026 15:17
@gildesmarais gildesmarais changed the title feat(registry): signed registry sync, catalog API, and staged promote governance feat(registry): index, signed sync, catalog API, and consolidation refactors Aug 22, 2026
…anch

Enable Style/ItBlockParameter, normalize empty-string predicates, and adopt
it blocks across registry config and transport helpers.
Promote StructuredData.deep_dup for shared cloning, add Store.manifest_mtime,
and centralize registry status lookup helpers.
Unify official GitHub asset resolution, merge catalog rows with to_h, replace
status.find duplication with status_entry_for, and memoize extra_allowed_hosts.
Cover channel allowlist via integration config load and table-drive SyncTransport
version gate examples; adopt it blocks in registry specs.
Skipped: endless-method rubocop constraints removed net LOC win on configs.rb;
root_metadata unchanged.
Use EXTRA_ALLOWED_HOSTS_CACHE instead of module ivars so thread-safety cops
pass while keeping per-process host memoization for registry sync.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant