phase4-foundation #8

Merged

Snider merged 10 commits from phase4-foundation into dev

2026-02-17 21:03:50 +00:00

Snider commented

2026-02-17 21:03:37 +00:00

Owner

No description provided.

Snider added 10 commits 2026-02-17 21:03:37 +00:00

feat(manifest): add .core/view.yml types and parser d2f2f0984c

Manifest struct, Permissions, Parse() from YAML, SlotNames() helper.
Foundation for Phase 4 module system.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

feat(manifest): add ed25519 signing and verification ea63c3acae

Sign() computes signature over canonical YAML (excluding sign field),
Verify() checks against public key. Tampered manifests are rejected.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

feat(manifest): auto-discovery loader with signature verification c7102826ba

Load() reads .core/view.yml from any directory via io.Medium,
LoadVerified() adds ed25519 signature check. Uses MockMedium for tests.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

feat(store): group-namespaced key-value store with template rendering 262f0eb5d5

SQLite-backed KV store with get/set/delete/count/deleteGroup/render.
Extracted from dAppServer object store pattern.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

feat(coredeno): sidecar types, permission flags, socket path 01924059ae

Options, Permissions with Deno --allow-* flag generation,
DefaultSocketPath with XDG_RUNTIME_DIR support, Sidecar struct.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

feat(coredeno): sidecar Start/Stop/IsRunning lifecycle 93be6c5ed2

Process launch with context cancellation, socket directory auto-creation,
channel-based stop synchronization. Uses sleep as fake Deno in tests.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

feat(coredeno): gRPC proto definitions for I/O fortress c490a05733

CoreService (Go-side: file, store, process) and DenoService (Deno-side:
module lifecycle). Generated Go code pending protoc installation.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

feat(coredeno): permission engine for I/O fortress f065c0a5be

CheckPath (prefix-based), CheckNet (exact match), CheckRun (exact match).
Empty allowed list = deny all. Secure by default.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

feat(marketplace): Git-based module index parser and search 5b737a4933

Module/Index types, ParseIndex from JSON, Search (fuzzy across code/name/
category), ByCategory filter, Find by code. Foundation for git-based
plugin marketplace.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

feat(coredeno): framework service with Startable/Stoppable lifecycle 0681fba48e

Service wraps Sidecar for DI registration. OnStartup/OnShutdown hooks
for framework lifecycle integration.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>