This repository was archived by the owner on Aug 3, 2026. It is now read-only.

feat(packages): complete storage and VPM lifecycle - #85

Merged

Yeusepe merged 64 commits into

mainfrom

feat/package-storage-vpm-lifecycle

Jul 27, 2026

Commits on Jul 24, 2026

feat(storage): implement package storage and VPM lifecycle
Yeusepe
committed
5ff1640
test(ci): bound dependency and Convex checks
Yeusepe
committed
ab61855
feat(storage): manage package version deletion
Yeusepe
committed
e8e97a5
feat(packages): complete local upload and VPM lifecycle
Yeusepe
committed
3caa1bb
refactor(web): use shared account icons
Yeusepe
committed
bb2012c
feat(storage): implement server-only package delivery
Yeusepe
committed
e1d4856
fix(auth): add resumable Better Auth migration
Yeusepe
committed
7d6a58c

Commits on Jul 25, 2026

feat(packages): complete verified bootstrap flow
Yeusepe
committed
e6548b1

Commits on Jul 26, 2026

feat(packages): complete secure package delivery
Yeusepe
committed
b8922cd

Commits on Jul 27, 2026

feat(packages): finish storage and VPM lifecycle
Yeusepe
committed
951ef7c
fix(storage): address package lifecycle review findings
Yeusepe
committed
30ecd15
fix(storage): fence package delivery review races
Yeusepe
committed
b7a0269
fix(packages): group explicitly associated products
Yeusepe
committed
ad5a379
fix(importer): authorize protected uninstall without delivery
Yeusepe
committed
7d785ff
fix(ci): restore package lifecycle acceptance gates
Yeusepe
committed
1a47952
chore(importer): pin version 0.1.42
Yeusepe
committed
7c765c4
fix(storage): preserve upgrade and retry invariants
Yeusepe
committed
e82f402
fix(ci): isolate Convex deployment preflight
Yeusepe
committed
5edf7b7
test(e2e): bind manual method identity
Yeusepe
committed
62cbbbe
fix(auth): preserve package broker resource
Yeusepe
committed
2d74856
chore(importer): pin version 0.1.43
Yeusepe
committed
74e9846
fix(storage): configure production TUF reader
Yeusepe
committed
6229760
chore(importer): pin version 0.1.44
Yeusepe
committed
ce36791
fix(storage): configure materialization control plane
Yeusepe
committed
8f57a38
fix(storage): migrate legacy ready releases
Yeusepe
committed
62d78c3
fix(delivery): reject same-isolate DPoP replays
Yeusepe
committed
b665e1f
chore(importer): pin version 0.1.45
Yeusepe
committed
c695e2f
chore(importer): pin version 0.1.46
Yeusepe
committed
df5ed75
fix(delivery): recover completed authorization retries
Yeusepe
committed
7b10c12
test(importer): preserve failed Unity results
Yeusepe
committed
055b038
chore(importer): pin version 0.1.47
Yeusepe
committed
3910ec1
fix(materialization): configure bounded local cache
Yeusepe
committed
d2f24a7
fix(delivery): renew bounded install grants
Yeusepe
committed
7bd3ba2
fix(vpm): enforce persistent importer pins
Yeusepe
committed
e89ed38
fix(tuf): renew installer metadata publications
Yeusepe
committed
bd3fcd9
fix(materialization): complete control secret inventory
Yeusepe
committed
149ac2f
style(materialization): format local capacity settings
Yeusepe
committed
91f2623
style(vpm): organize importer pin imports
Yeusepe
committed
84639a2
fix(delivery): retain protected release pins
Yeusepe
committed
9fba0da
fix(materialization): recover expired verification jobs
Yeusepe
committed
14b6d6a
fix(storage): align imported storage format
Yeusepe
committed
7b3a994
chore(vpm): pin importer version 0.1.49
Yeusepe
committed
5d84cd8
fix(broker): isolate user credential flows
Yeusepe
committed
c45e127
ci(broker): verify native module builds
Yeusepe
committed
744e45b
chore(vpm): pin importer version 0.1.50
Yeusepe
committed
56ea8a6
ci(broker): align native platform verification
Yeusepe
committed
383870c
chore(vpm): pin importer version 0.1.52
Yeusepe
committed
8412068
fix(delivery): harden protected rendition delivery
Yeusepe
committed
a7eca48
fix(installer): authorize retained release uninstall
Yeusepe
committed
2ef58cb
chore(vpm): pin importer version 0.1.53
Yeusepe
committed
f4a5f81
feat(installer): bootstrap signed package runtime
Yeusepe
committed
5aff6bc
fix(installer): contain broker process lifetime
Yeusepe
committed
2645b73
fix(installer): sign local runtime on Linux
Yeusepe
committed
1591e68
fix(delivery): reject materialization source replay
Yeusepe
committed
9203d19
fix(installer): verify portable runtime publisher
Yeusepe
committed
6a28ed1
fix(dev): recover interrupted Convex lock
Yeusepe
committed
feac472
fix(storage): fence exact-version deletion
Yeusepe
committed
87618e5
feat(storage): operate exact-version garbage collection
Yeusepe
committed
50e39a2
fix(coupling): isolate unavailable source jobs
Yeusepe
committed
08f8a38
fix(dev): use kernel-owned Convex lock
Yeusepe
committed
51d8253
fix(storage): use database time for garbage collection
Yeusepe
committed
5748f79
fix(dev): verify portable importer runtime
Yeusepe
committed
2886cc6
fix(ci): cache licensed icon module by generation fingerprint
Yeusepe
committed
654a41e
chore(ci): retrigger builds after B2 download-cap reset
Yeusepe
committed
5242f43