Skip to content

chore: promote backlog development commits to main#33

Merged
jeanmachuca merged 1 commit into
mainfrom
promote/backlog
Jul 5, 2026
Merged

chore: promote backlog development commits to main#33
jeanmachuca merged 1 commit into
mainfrom
promote/backlog

Conversation

@jeanmachuca

Copy link
Copy Markdown
Member

Promotes 6 older development commits that were never brought to main: #22, #24, #25, #26, #27, #30.\n\nThese commits predate PR #31. Most changes were superseded by #31's file store + validation refactor. The remaining diffs are:\n- .gitignore: add !go.sum pattern\n- go.sum: create empty file\n\nCherry-picks were attempted in order; all except #22's .gitignore/go.sum produced empty commits (changes already in main via later PRs).

* feat: .cgp package registry server

- 6 REST endpoints: search, get, download, publish, unlock, health
- In-memory package store with search (name+description+tags)
- Token-based auth for publish/unlock endpoints
- .cgp file serving from data directory
- 27 tests across server, store, and auth packages
- CI: build, lint, test, vet

* chore: attribute project to Jean Machuca with GitHub Sponsors

* chore: add * 2.* pattern to .gitignore for editor backups

* docs: expand README with build, API, and usage details (#4)

* docs: add cross-repo navigation links to README (#7)

* docs: add contributing section to README (#9)

* Fix CI blockers: commit go.sum, fix errcheck, fix build paths, wire up CI

* feat: add source URL validation (source_repository, source_issues) on publish

* fix: CI integrity and .gitignore repairs across repos (#17)

* feat: refactor to proxy/notary — 302 redirect + checksum ledger

BREAKING: registry-server no longer stores .cgp files on disk.
- handleDownload() now returns 302 redirect to package's download_url
- handlePublish() computes SHA-256 from multipart upload (discards file)
- handlePublish() accepts sha256 + download_url via JSON (no fetch)
- Package struct gains DownloadURL field
- Removed cgpPath(), downloadFile(), DataDir filesystem usage
- Notary audit trail logged on each publish
- Updated all tests for proxy/redirect mode
@jeanmachuca jeanmachuca merged commit b72a396 into main Jul 5, 2026
@jeanmachuca jeanmachuca deleted the promote/backlog branch July 5, 2026 01:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant