Stallari/plugins
4
0
Fork 0
Code Issues 6 Pull requests Projects Releases Packages Activity

feat(catalog): enforce add-on admission gate + carry provisions_scopes #33

Merged
piersdd merged 1 commit from feat/add-on-provisions-scopes into main 2026-07-25 06:50:08 +00:00
Conversation 0 Commits 1 Files changed 3 +196 -161
piersdd commented 2026-06-27 13:29:10 +00:00 (Migrated from github.com)
Copy link

CI fail-fast mirror of the registry add-on admission gate, so violations fail the catalog build before R2 upload.

What

  • build-catalog.js: assertAddOnAdmission() on add_on entries — first-party only, scopes within the reviewed allowlist, credential scopes a subset of the provisions_scopes envelope. Carries provisions_scopes through addOnToCatalogEntry into the served catalog.
  • catalog-entry schema: adds provisions_scopes.
  • Synced vendored add-on schema.

The allowlist mirrors the canonical gate in the registry worker.

Test

Verified live against throwaway add-on sources: a valid first-party add-on flows into the catalog with provisions_scopes; allowlist / third-party / subset violations each fail the build. Clean build = 70 entries.

🤖 Generated with Claude Code

CI fail-fast mirror of the registry add-on admission gate, so violations fail the catalog build before R2 upload. ## What - **`build-catalog.js`**: `assertAddOnAdmission()` on `add_on` entries — first-party only, scopes within the reviewed allowlist, credential scopes a subset of the `provisions_scopes` envelope. Carries `provisions_scopes` through `addOnToCatalogEntry` into the served catalog. - **catalog-entry schema**: adds `provisions_scopes`. - Synced vendored add-on schema. The allowlist mirrors the canonical gate in the registry worker. ## Test Verified live against throwaway add-on sources: a valid first-party add-on flows into the catalog with `provisions_scopes`; allowlist / third-party / subset violations each fail the build. Clean build = 70 entries. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
boundary:crosses
Confirmed trust/privilege boundary; always grill-routed regardless of wording

  
boundary:none
Operator-audited: no trust/privilege boundary; exempt from the flow.py boundary floor

  
bug
Something isn't working

  
devfu
dev-followup (DD-422 sweep / CONV-39)

  
documentation
Improvements or additions to documentation

  
duplicate
This issue or pull request already exists

  
enhancement
New feature or request

  
epic
DD/spec tracking umbrella — never dispatchable; state lives on sub-issues

  
good first issue
Good for newcomers

  
help wanted
Extra attention is needed

  
invalid
This doesn't seem right

  
needs-info
under-specified

  
needs-triage
awaiting triage

  
question
Further information is requested

  
ready-for-agent
triaged agent-dispatchable

  
ready-for-human
Triage: needs a human decision/action

  
svd:fire
gate: operator-authorised the Half-B fire from the phone

  
svd:go
flow-drain: operator-approved — dispatch on next tick

  
svd:hold
flow-drain: held for an operator svd:go / svd:skip decision

  
svd:respec
flow-drain: discard the held spec/manifest and re-run Half-A fresh

  
svd:skip
flow-drain: operator-declined — drop from the drain

  
wontfix
This will not be worked on

No labels
boundary:crosses
boundary:none
bug
devfu
documentation
duplicate
enhancement
epic
good first issue
help wanted
invalid
needs-info
needs-triage
question
ready-for-agent
ready-for-human
svd:fire
svd:go
svd:hold
svd:respec
svd:skip
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Stallari/plugins!33
No description provided.