Skip to content

Spec: catalog upstream version-tracking (upstream block + watcher) - #84

Open
onel wants to merge 1 commit into
mainfrom
feat/upstream-version-tracking
Open

Spec: catalog upstream version-tracking (upstream block + watcher)#84
onel wants to merge 1 commit into
mainfrom
feat/upstream-version-tracking

Conversation

@onel

@onel onel commented Jun 5, 2026

Copy link
Copy Markdown
Collaborator

Spec-only (no Go code).

What it does

Catalog apps are pinned to an exact image tag + digest, so they never update on their own — a human has to notice each upstream release and hand-edit the manifest. This adds the design for automating that.

  • APP_MANIFEST.md # A2 — a new authoring-only upstream: block (source / repo / tracks / version_pattern, or source: manual) that declares where an app's upstream version lives and how to read it. The version_pattern regex both filters candidate tags down to real releases (no :latest/nightly/sha-…) and captures the comparable version. The brain ignores it; catalog build drops it.
  • APP_STORE.md # Upstream version tracking — a nightly molma/store CI watcher that reads those blocks, finds newer releases, and opens human-reviewed bump PRs (rewrite tag → repin digest → bump version). Never auto-merges; the permissions diff is the trust gate (UPDATES.md # 4). Recommended base: Renovate.
  • authoring-apps-with-an-agent.md — the import agent writes the upstream: block at first import.
  • Sample manifests (whoami, files-demo, hermes-agent) carry real upstream: blocks.

Status

Draft / low priority — no tracking issue. Spec + sample scaffolding only; the watcher itself (the molma/store CI job) is not built here.

…tcher)

Adds the design for keeping catalog apps up to date without hand-editing
every manifest when upstream ships a release.

- APP_MANIFEST.md # A2: an authoring-only 'upstream' block (source / repo /
  tracks / version_pattern, or source: manual) declaring where an app's
  upstream version lives and how to read it. The brain ignores it; catalog
  build drops it.
- APP_STORE.md # Upstream version tracking: a nightly molma/store CI watcher
  that reads those blocks, finds newer releases, and opens human-reviewed
  bump PRs (Renovate-based). Never auto-merges; the permissions diff is the
  trust gate.
- authoring-apps-with-an-agent.md: the import agent writes the block at first
  import.
- Sample manifests (whoami, files-demo, hermes-agent) carry real upstream blocks.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant