fix(marketplace-api): close dual-write drift gaps from PR #215 review

[lilyshen0722]

Summary

Follow-up to PR #215 addressing the 4 review comments that landed after merge. All changes are localized to backend/routes/marketplace-api.ts; the 5th review comment (ESM harmonization) was retracted — every .ts route in backend/routes/ uses the same CJS-in-TS pattern, so marketplace-api.ts is already conforming.

Fixes

#	Path	Severity	Fix
1	POST /publish (update)	P1	Wrap existing.save() in try/catch so an AR-succeeds + save-fails race returns 201 + drift warning instead of a generic 500 that hides the partial commit
2	POST /fork	P1	Wrap Installable.create(forkDoc) the same way; skip source stats.forkCount bump on failure so a retry doesn't double-count
3	DELETE /manifests/:id	P2	Add ADR-001 invariant #5 comment so a future refactor doesn't "helpfully" cascade-delete User rows / memory
4	RUNTIME_MAP	P2	Add explicit 'local-cli': 'standalone' entry for ADR-005 (was falling through the || 'standalone' default silently)

Review comments addressed

• AR: Agent Registry & Marketplace - Publish and Fork #215 (comment)... (line 204 — update-path save)
• AR: Agent Registry & Marketplace - Publish and Fork #215 (comment)... (line 426 — fork-path create)
• AR: Agent Registry & Marketplace - Publish and Fork #215 (comment)... (line 347 — identity-continuity comment)
• AR: Agent Registry & Marketplace - Publish and Fork #215 (comment)... (line 37 — RUNTIME_MAP local-cli)

Tests

New: backend/__tests__/unit/routes/marketplace-api.dual-write.test.js

• update path: AR sync succeeds, existing.save() throws → 201 + warnings + isNew: false
• fork path: AR sync succeeds, Installable.create throws → 201 + warnings + forkedFrom preserved + forkCount bump skipped

Full run:

__tests__/unit/routes/marketplace-api.dual-write.test.js     2/2 ✓
__tests__/unit/routes/marketplace.official.test.js           1/1 ✓
__tests__/unit/routes/registry.publish.test.js               2/2 ✓
__tests__/unit/models/installable.test.ts                  11/11 ✓

Scope notes

• Happy paths are unchanged — diff only adds error branches + a comment + a map entry.
• No schema changes, no migration, no API surface change.
• Does not touch the legacy /api/marketplace/official router or the /api/registry/* install routes.

Test plan

• npx jest __tests__/unit/routes/marketplace-api.dual-write.test.js — 2/2 pass
• npx jest __tests__/unit/routes/marketplace.official.test.js __tests__/unit/routes/registry.publish.test.js __tests__/unit/models/installable.test.ts — 14/14 pass, no regression
• npm run lint on changed file — no new errors
• Manual smoke on dev after merge: publish v2 of an existing manifest, fork an active manifest, confirm 201 responses match shape

🤖 Generated with Claude Code