Skip to content

feat(registry): add production source transports - #164

Merged
Dencyuman merged 46 commits into
mainfrom
feat/registry-source-transports-127
Jul 21, 2026
Merged

feat(registry): add production source transports#164
Dencyuman merged 46 commits into
mainfrom
feat/registry-source-transports-127

Conversation

@Dencyuman

@Dencyuman Dencyuman commented Jul 20, 2026

Copy link
Copy Markdown
Contributor

Summary

Complete the docs-defined Desktop delivery channel and its shared production foundations. This closes packaged application composition, native Registry/Library and MCP routing, installed lifecycle and recovery conformance, three-platform installer verification, signed release evidence, disabled-feature closure, accessibility/UI matrix evidence, and whole-process-tree memory budgets.

Linked Issues

Contributor Agreement

  • I have read and agree to the LayerDraw Contributor License Agreement 1.0 and confirm that I have the rights and any employer authorization required to submit this Contribution.

See the Contributor License Agreement and Contributor Privacy Notice.

Scope

  • Documentation only
  • LDL / schema / protocol
  • Engine / Runtime / Query / View
  • SDK / MCP / client integration
  • Server / storage / realtime / access
  • Registry / packs / templates
  • Release / governance / legal

Checks

  • No secrets, customer data, private deployment config, or local agent config were added.
  • Package boundaries and licensing metadata are verified.
  • Generated artifacts and conformance fixtures are synchronized.
  • Public protocol, compatibility, migration, release, and disabled-feature impact is documented.
  • The Desktop Feature x Delivery Matrix is mapped to executable evidence or a normative exclusion.

Integrated implementation

  • Production local/git and authenticated HTTPS Registry source transports.
  • Engine-owned canonical pack validation and durable content-addressed staging.
  • Runtime Registry publication with Access fencing, recovery, conditional publication, history, and checkpoints.
  • Production Desktop composition, Wails bindings, Registry/Library UI routing, and canonical MCP host operations.
  • Installed local/external project lifecycle, authoring, Search/Query/Analysis, Viewer, Review, recovery, restart, and shutdown scenarios.
  • Canonical MCP discovery, bounded operations, Registry, restore, Review, connection, revocation, and agent-scope evidence.
  • Recovery evidence for all 11 declared fault classes, with additional faults injected through installed production composition.
  • Packaged keyboard, screen-reader semantics, zoom, contrast, reduced-motion, 2D/2.5D, and supported window profiles.
  • macOS, Windows, and Linux packaged/installer workflows, failed-upgrade retention, SBOM, notices, capability and disabled-feature manifests.
  • Signed attestation binds installer, conformance, capability, disabled-feature, and whole UI process-tree RSS evidence.

Validation

Local targeted validation is green for Desktop Wails, attestation, conformance closure, Windows cross-compilation, formatting, and generated diff integrity. GitHub Actions is the final authority for the full build/race/security/license, WASM, CodeQL, native Ladybug, packaged Desktop, and three-OS installer matrices.

Comment thread internal/engine/registry_project.go Fixed
Comment thread internal/registry/staging_disk.go Fixed
Comment thread internal/application/review/application.go Fixed
Dencyuman added a commit that referenced this pull request Jul 21, 2026
)

## Summary

Compose the packaged Desktop with the production Ladybug Query, Search,
Analysis, search-index, and local-embedding owners. Add
release-conformance foundations that execute the installed Desktop
executable on macOS, Linux, and Windows, enforce documented performance
and isolated-worker memory budgets, and sign the exact scenario result
into update metadata.

This PR is the production-owner and release-attestation layer on top of
#161. It does not claim final Desktop closure. Registry, Review, real
external-provider workflows, and the packaged
Wails/WebView/MCP-descendant process-tree scenario remain required in
#164.

## Linked Issues

- Related to #127

## Contributor Agreement

- [x] I have read and agree to the LayerDraw Contributor License
Agreement 1.0 and confirm that I have the rights and any employer
authorization required to submit this Contribution.

See the [Contributor License
Agreement](https://github.com/dencyuinc/layerdraw/blob/main/docs/legal/contributor-license-agreement.md)
and [Contributor Privacy
Notice](https://github.com/dencyuinc/layerdraw/blob/main/docs/legal/contributor-privacy-notice.md).

## Scope

- [ ] Documentation only
- [ ] LDL / schema / protocol
- [x] Engine / Runtime / Query / View
- [x] SDK / MCP / client integration
- [x] Server / storage / realtime / access
- [ ] Registry / packs / templates
- [x] Release / governance / legal

## Checks

- [x] I did not add secrets, customer data, private deployment config,
or local agent config.
- [x] I checked the package boundary and licensing docs for affected
paths.
- [x] I updated generated artifacts or fixtures if a schema changed; no
schema changed in this PR.
- [x] I documented release and installer impact.
- [x] I confirmed there is no state or data migration.
- [x] I identified the release-note requirement.

## Contract Impact

- Desktop bundles production LadybugDB v0.17.0 native libraries plus
FTS, Vector, and Algo extensions.
- Installed artifacts execute nine canonical workflow scenarios in
isolated worker processes for five iterations and fail on p95 time or
isolated-worker peak-RSS budget violations.
- The isolated-worker contract does not claim Wails/WebView or MCP
descendant-process memory; #164 must add that final packaged UI
process-tree scenario.
- Signed attestation binds installer digest, conformance declaration,
exact installed scenario result, source revision, and platform.
- No LDL, schema, protocol, or container contract changes.
- Registry, Review, real external-provider, and packaged UI final
workflow proof is explicitly deferred to #164.

## Validation

- `go test ./apps/desktop ./internal/desktopwails
./tools/desktopattestation ./tools/desktopconformance
./tools/desktoprelease ./tools/licensecheck`
- `go test -race ./internal/desktopwails ./tools/desktopattestation
./tools/desktopconformance`
- `go run ./tools/desktopconformance -root . verify`
- `bash -n tools/build-desktop-installer.sh
tools/build-desktop-update-metadata.sh tools/smoke-desktop-installer.sh`
- Local installed-binary subprocess run: isolated worker peaks 459–466
MiB under the unchanged 512 MiB budget.
- `git diff --check`
- `go test ./...` passes except the local environment guard requiring
Node v24.18.0 (host has v23.6.0); CI uses the pinned version.
@Dencyuman
Dencyuman force-pushed the feat/registry-source-transports-127 branch from 159eb0d to aaf970e Compare July 21, 2026 00:16
Dencyuman added 26 commits July 21, 2026 09:25
@Dencyuman
Dencyuman merged commit 5aa6f0d into main Jul 21, 2026
16 checks passed
@Dencyuman
Dencyuman deleted the feat/registry-source-transports-127 branch July 21, 2026 06:56
@github-project-automation github-project-automation Bot moved this from Triage to Done in LayerDraw Development Jul 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

[Feature]: Prove packaged Desktop end-to-end conformance

2 participants