[Phase 2] Immutable registry and publishing CLI/CI
维护者通常 1 天内回复
还没有人认领这个 Issue。
评估
- 难度
- 5/5
- 预计耗时
- 一周以上
- 新手友好度
- 25/100
- Issue 类型
- 功能
- 描述清晰度
- 基本清楚
- 活跃度
- 活跃
- 技术栈
- github-actions, typescript
- 领域
- backend-api-design, ci-cd, cli, cloud, security
调研方向
Start by reading the dependencies in Epic #31 and Phases 0 and 1 (#32 and #33), then review the listed publishing CLI commands and acceptance criteria. This work spans packaging, storage, authorization, CI, and release lifecycle; it is done when immutable, idempotent manual and CI publishing works for one AgentKit skill without changing the ak installer.
由索引模型根据 Issue 内容生成。
描述
Depends on
-
Epic #31
-
Phase 0 #32 (contracts and data boundaries)
-
Phase 1 #33 (published contract surfaces)
Objective
Move SkillX from GitHub registration to immutable reproducible package releases.
Contracts come from Phase 0/1. Package-format work may begin after Phase 0.
Scope
- Deterministic artifact format.
- R2 artifact storage.
- Publisher namespace ownership.
importvspublishsemantics.validate,pack,publish,promote.- CI trusted/scoped publishing.
- Quarantine/review/yank lifecycle.
- Entitlement-aware artifact resolution.
Implementation tasks
- Define archive layout and path safety constraints.
- Implement deterministic packer + SHA-256.
- Store immutable artifacts in R2.
- Add package/release registry APIs.
- Add publisher profiles/namespaces.
- Add namespace authorization.
- Rename/deprecate old GitHub
publishsemantics towardimport. - Implement
skillx validate. - Implement
skillx pack. - Implement release
skillx publish. - Implement
skillx promote. - Add publish idempotency keys.
- Add CI-scoped publisher credentials.
- Evaluate/implement GitHub OIDC trusted publishing.
- Add quarantine and review state.
- Add yanking and release-resolution policy.
- Add authorized signed/short-lived artifact download flow.
- Publish one standalone AgentKit skill manually.
- Publish same AgentKit artifact through CI.
Acceptance criteria
- Same version cannot receive different bytes.
- Manual/CI publish of same input resolves to same digest.
- Retried publish is safe.
- Publisher token cannot change commerce/account state.
- One AgentKit standalone skill is published without altering
akinstaller behavior.
- 主要语言
- TypeScript
- 星标
- 189
- 派生
- 40
- 平均合并
- 7 小时 38 分钟
- 30 天内合并 PR
- 30
环境准备
这个项目没有提供开发容器、Dockerfile 或贡献指南，环境需要你自己搭建：先看它的 README，通用步骤见我们的新手贡献指南。
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
nextlevelbuilder/skillx 的其他 Issue
-
bug
难度 2/5 1-3 小时 新手友好度 88/100
nextlevelbuilder/skillx#49 ·
维护者通常 1 天内回复
-
bug
难度 2/5 1-3 小时 新手友好度 76/100
nextlevelbuilder/skillx#28 ·
维护者通常 1 天内回复
-
refactor
难度 2/5 1-3 小时 新手友好度 82/100
nextlevelbuilder/skillx#27 ·
维护者通常 1 天内回复
-
Personal-kit API gaps for AgentKit kit publish/sync可能已有人在做 @mrgoonie 于 1 天前认领。 未关闭
nextlevelbuilder/skillx#88 · 1 条评论 · 已指派 1 人 ·
维护者通常 1 天内回复
-
enhancement
难度 5/5 一周以上 新手友好度 12/100
nextlevelbuilder/skillx#81 ·
维护者通常 1 天内回复
查看 nextlevelbuilder/skillx 的全部 Issue
相似的 Issue
-
streams:add
难度 2/5 1 小时以内 新手友好度 70/100
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 68/100
apache/rocketmq-dashboard#6872 ·
维护者通常 3 天内回复
-
难度 2/5 1-3 小时 新手友好度 72/100
interledger/publisher-tools#931 ·
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 62/100
ARTPARK-SAHAI-ORG/calibrate-frontend#727 ·
维护者通常 1 天内回复
-
bug
难度 2/5 1-3 小时 新手友好度 70/100
fab-geocommuns/RNB-site#539 ·
维护者通常 2 天内回复