发布

  • v1234 be4efecbcd

    cog-ha-matter (ADR-116 P8): app-registry entry stub + release checklist

    frostbyte_neo 发布于 2026-05-24 03:12:14 +00:00

    Two closing P8 deliverables that complete the local-side publishing
    scaffolding. The remaining work is all credential-bearing user
    action.

    1. cog/app-registry-entry.json — the exact JSON payload to paste
      into cognitum-one's app-registry.json. Schema discovered by
      fetching the live registry (105 cogs, 11 categories) and
      matching the existing ruview-densepose entry verbatim. Keys:

      id, name, category, version, size_kb, difficulty, description,
      featured, config[], sha256, binary_size

      cog-ha-matter slots in under category: "building" (smart home
      / building automation — the natural HA / Matter category, vs
      network which is more about transport bridges).

      7 config[] entries mirror our CLI surface:
      sensing_url, mqtt_host, mqtt_port, privacy_mode,
      mdns_hostname, mdns_ipv4, no_mdns

      Two post-build fields left as <FILL_IN_...> markers:
      sha256 (paste from the workflow artifact's .sha256)
      binary_size (wc -c < the binary)

      Schema validated: all 10 required keys present, parses as JSON.

    2. cog/RELEASE-CHECKLIST.md — one-page mechanical playbook with
      four explicit "🔑 USER ACTION" gates. Each gate names exactly
      what the user (or org admin) has to do that the pipeline cannot:

      a) provision GCP_CREDENTIALS + HAS_GCP_CREDENTIALS org var
      b) provision COGNITUM_OWNER_SIGNING_KEY GH secret
      c) gcloud auth login (only if uploading locally)
      d) PR app-registry.json into cognitum-one

      Plus pre-release test gate, tag-push command, post-release
      verification curl, and a rollback procedure using GCS object
      versioning (per ADR-100 §"GCS misconfiguration risks").

    Stop-condition check (cron's predicate: "ALL local-side publishing
    scaffolding is complete and the only remaining work requires user
    action"):

    cog/manifest.template.json
    cog/Makefile (build / sign / upload / verify / clean)
    cog/README.md
    cog/app-registry-entry.json (this commit)
    cog/RELEASE-CHECKLIST.md (this commit)
    .github/workflows/cog-ha-matter-release.yml (3 jobs, gated)
    dist/ handling (gitignored, created by make)

    🔑 4 user-action gates explicitly enumerated in the checklist

    The cron should STOP after this iter — the local-side scaffolding
    is complete and the remaining work is the four named credential
    gates that the pipeline cannot self-serve.

    Co-Authored-By: claude-flow ruv@ruv.net

    下载附件