Spec: catalog upstream version-tracking (upstream block + watcher) - #84
Open
onel wants to merge 1 commit into
Open
Spec: catalog upstream version-tracking (upstream block + watcher)#84onel wants to merge 1 commit into
onel wants to merge 1 commit into
Conversation
…tcher) Adds the design for keeping catalog apps up to date without hand-editing every manifest when upstream ships a release. - APP_MANIFEST.md # A2: an authoring-only 'upstream' block (source / repo / tracks / version_pattern, or source: manual) declaring where an app's upstream version lives and how to read it. The brain ignores it; catalog build drops it. - APP_STORE.md # Upstream version tracking: a nightly molma/store CI watcher that reads those blocks, finds newer releases, and opens human-reviewed bump PRs (Renovate-based). Never auto-merges; the permissions diff is the trust gate. - authoring-apps-with-an-agent.md: the import agent writes the block at first import. - Sample manifests (whoami, files-demo, hermes-agent) carry real upstream blocks.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Spec-only (no Go code).
What it does
Catalog apps are pinned to an exact image tag + digest, so they never update on their own — a human has to notice each upstream release and hand-edit the manifest. This adds the design for automating that.
APP_MANIFEST.md# A2 — a new authoring-onlyupstream:block (source/repo/tracks/version_pattern, orsource: manual) that declares where an app's upstream version lives and how to read it. Theversion_patternregex both filters candidate tags down to real releases (no:latest/nightly/sha-…) and captures the comparable version. The brain ignores it; catalog build drops it.APP_STORE.md# Upstream version tracking — a nightlymolma/storeCI watcher that reads those blocks, finds newer releases, and opens human-reviewed bump PRs (rewrite tag → repin digest → bumpversion). Never auto-merges; the permissions diff is the trust gate (UPDATES.md# 4). Recommended base: Renovate.authoring-apps-with-an-agent.md— the import agent writes theupstream:block at first import.upstream:blocks.Status
Draft / low priority — no tracking issue. Spec + sample scaffolding only; the watcher itself (the
molma/storeCI job) is not built here.