Skip to content

feat: full publish cycle with SSH signing and official mode - #45

Merged
jeanmachuca merged 2 commits into
mainfrom
feature/full-publish-cycle
Jul 19, 2026
Merged

feat: full publish cycle with SSH signing and official mode#45
jeanmachuca merged 2 commits into
mainfrom
feature/full-publish-cycle

Conversation

@jeanmachuca

Copy link
Copy Markdown
Member

Brings CPM to feature parity with registry-server for the full publish cycle:

Changes from main:

  • SSH key auth for publish (signManifest with ed25519)
  • Official publish mode: sends multipart (metadata + .cgp) when no --download-url
  • Proxy publish mode: sends JSON metadata only when --download-url provided
  • Token fallback with deprecation warning
  • cpm auth register command
  • PublishRequest.Manifest field for raw manifest bytes
  • ReadManifestBytes() in archive package
  • CI: Go 1.25, golangci-lint-action@v7, golangci-lint v2.12.2

jeanmachuca and others added 2 commits July 6, 2026 22:37
Adds:
- cpm download-weights --provider hf --kind <raw|wide> --type <gguf|safetensors> <name>
- weights.Provider interface for future providers (models.dev)
- HF Hub search via public API (library=gguf, sorted by downloads)
- Large-file streaming download with SHA-256 verification
- Decoupled progress reporting (TextProgress/NoopProgress callbacks)
- Auto-download when cpm install encounters manifest brain.*.weights.remote
- cpm init --template gguf-model for model publishers
- Raw model skip-if-exists; wide model always overwrites
@jeanmachuca
jeanmachuca merged commit 5ec7a5d into main Jul 19, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant