Skip to content

F-157: Widget pack install — OCI pull + cosign verification #10

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
fdatoo wants to merge 35 commits into
base: main
Choose a base branch
from
Open

F-157: Widget pack install — OCI pull + cosign verification #10

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
35 commits
Select commit Hold shift + click to select a range
66a62f5
docs(design): F-157 widget pack install design spec
fdatoo May 5, 2026
fe89d36
docs(design): F-157 §9.6 — authz wiring dependency on F-184/F-185
fdatoo May 5, 2026
c8f6865
docs(plan): F-157 widget pack install implementation plan
fdatoo May 5, 2026
195cadf
feat(pkl): full §15.2 PackManifest; relocate WidgetInstance into widg…
fdatoo May 5, 2026
73631fb
docs(design): F-157 §3.1 — drop ContainerInstance from widgets.pkl re…
fdatoo May 5, 2026
4d0bdd2
feat(config): add widgetPackPolicy to Pkl + proto + decoder
fdatoo May 5, 2026
662c9d3
refactor(config): move widgetPackPolicyJSON to evaluator_decode.go
fdatoo May 5, 2026
28ecace
feat(proto): add WidgetPackService
fdatoo May 5, 2026
990bb06
docs(design): F-157 §5 — note SignatureStatus reuse + EXPIRED mapping
fdatoo May 5, 2026
cf95992
feat(widgetpack): on-disk Store with persistence + Subscribe
fdatoo May 5, 2026
dfd6d75
fix(widgetpack): Store correctness — Remove rollback, event aliasing,…
fdatoo May 5, 2026
80b05a4
feat(widgetpack): real cosign keyless verification via sigstore-go
fdatoo May 5, 2026
16e26c2
fix(widgetpack): trust policy polish — pattern validation, doc, nil c…
fdatoo May 5, 2026
c648e99
feat(widgetpack): OCI artifact pull via oras-go
fdatoo May 5, 2026
961e983
fix(widgetpack): OCI fetcher polish — retry, tidy, referrer doc
fdatoo May 5, 2026
31b7218
docs(design): F-157 §6.3 — note OCI 1.1 Referrers limitation (F-289)
fdatoo May 5, 2026
d667668
feat(config): expose SwitchyardSchemeReaderOption + add manifest prop…
fdatoo May 5, 2026
2a1d28d
feat(widgetpack): Pkl-evaluator-driven manifest validation
fdatoo May 5, 2026
00ffe57
fix(widgetpack): sandbox EvalManifest for untrusted input
fdatoo May 5, 2026
a6596d9
fix(widgetpack): errcheck-clean rc.Close in readBlob
fdatoo May 5, 2026
8003f71
feat(widgetpack): bundle HTTP handler with immutable cache
fdatoo May 5, 2026
60eb59a
fix(widgetpack): bundle handler polish — request context, test hygiene
fdatoo May 5, 2026
589ef3e
feat(widgetpack): full §15.4 install flow
fdatoo May 5, 2026
1e1d40a
fix(widgetpack): propagate Store.List error in checkCollisions
fdatoo May 5, 2026
9294d48
feat(widgetpack): Uninstall with reference check
fdatoo May 5, 2026
8176d12
test(widgetpack): assert ErrPackNotFound identity in Uninstall test
fdatoo May 5, 2026
702a268
feat(widgetpack): WidgetPackService Connect handler
fdatoo May 5, 2026
866f6b5
fix(widgetpack): drop nil-installer Service contract
fdatoo May 5, 2026
8841656
feat(api): widget_pack procedure-catalog registrar (inert until F-184)
fdatoo May 5, 2026
d4c6ff3
feat(daemon): wire WidgetPackService + bundle handler
fdatoo May 5, 2026
58417b7
test(widgetpack): check err before resp.Body in serve_test
fdatoo May 5, 2026
e2503c7
feat(cli): wire switchyard widget {install,list,uninstall} to RPC
fdatoo May 5, 2026
cb8d702
test(widgetpack): end-to-end integration against in-process registry
fdatoo May 5, 2026
b866940
feat(dashboard): wire widgetpack.Store into dashboard catalog
fdatoo May 5, 2026
58615c6
refactor(widgetpack): drop unused dataDir + SetDashboardLister race
fdatoo May 5, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3,017 changes: 3,017 additions & 0 deletions docs/design/plans/2026-05-04-f157-widget-pack-install.md
View file
Open in desktop

Large diffs are not rendered by default.

510 changes: 510 additions & 0 deletions docs/design/specs/2026-05-04-f157-widget-pack-install-design.md
View file
Open in desktop

Large diffs are not rendered by default.

262 changes: 164 additions & 98 deletions gen/switchyard/config/v1/snapshot.pb.go
View file
Open in desktop

Large diffs are not rendered by default.

197 changes: 197 additions & 0 deletions gen/switchyard/v1alpha1/switchyardv1alpha1connect/widget_pack.connect.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading