You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@maka.apache.org by "Phoenix500526 (via GitHub)" <gi...@apache.org> on 2026/08/31 07:50:07 UTC
[I] tracking(storage): complete managed dependencies [maka]
Phoenix500526 opened a new issue, #4326:
URL: https://github.com/apache/maka/issues/4326
## Problem
`ManagedDependencyEnvironmentAuthority` landed in #2485, but it remains a
stacked foundation without a production consumer. The producer boundary,
bundled runtime supply chain, and owner/worker composition are documented but
have no focused tracker, so M1.3 can remain indefinitely incomplete.
#4174 removed the dormant Git-executable managed-workspace path. The follow-up
must compose with the current Gitoxide direction rather than restore that path.
## Completed baseline
- Canonical dependency identity, exclusive storage-root ownership, immutable artifact publication, external SQLite receipts, leases, pending reservations, GC, crash convergence, and tamper/ADS/reparse checks are implemented by #2485.
- The storage authority is intentionally fail-closed and still has no production owner or consumer.
## Remaining work
- [ ] Add a producer boundary that proves the process tree exited before `provision()` resolves, with quota, cancellation, timeout, and real npm `.bin` symlink coverage
- [ ] Add the bundled npm runtime supply chain and hermetic network policy, including manifest, audit, license/SBOM material, packaging, and packaged-runtime smoke
- [ ] Bind an admitted Gitoxide workspace baseline to an owner-scoped dependency lease and expose only read-only `Read`/`Glob`/`Grep` access
- [ ] Compose the lifecycle through Desktop, CLI, and Runtime Host, including drain/close ordering and execution-scope revalidation
- [ ] Keep the storage build, focused authority/crash suites, and real Windows ADS gate green
## Non-goals
- Shell/Build execution, dependency mutation, secrets, or scratch access
- Automatically enabling managed mode for existing users
- Restoring the retired Git CLI owner or weakening fail-closed rules
## Design
- [Managed Dependency Storage Authority v1](https://github.com/apache/maka/blob/main/docs/architecture/managed-dependency-storage-authority-v1.zh-CN.md)
- Baseline implementation: #2485
- Retired dormant path: #4174
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For additional commands, e-mail: commits-help@maka.apache.org
Re: [I] tracking(storage): complete managed dependencies [maka]
Posted by "github-actions[bot] (via GitHub) via commits" <co...@maka.apache.org>.
github-actions[bot] commented on issue #4326:
URL: https://github.com/apache/maka/issues/4326#issuecomment-6552997209
<!-- maka-lifecycle:stale-close -->
This issue has been closed because it received no human response during the 30-day grace period. This is not a judgement on the value of the report.
If the issue still applies to the latest `main`, please comment with updated evidence so a maintainer can reopen it, or open a follow-up issue with the missing information.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For additional commands, e-mail: commits-help@maka.apache.org
Re: [I] tracking(storage): complete managed dependencies [maka]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #4326:
URL: https://github.com/apache/maka/issues/4326#issuecomment-5924408777
<!-- maka-lifecycle:stale-warning -->
This issue has had no human activity for 30 days and has been marked stale. It will be closed in 30 days unless someone comments.
If the issue is still current, please confirm it against the latest `main` and add any information that would help move it forward. Assigned issues and issues labelled `pinned` are exempt from this policy.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For additional commands, e-mail: commits-help@maka.apache.org
Re: [I] tracking(storage): complete managed dependencies [maka]
Posted by "github-actions[bot] (via GitHub) via commits" <co...@maka.apache.org>.
github-actions[bot] closed issue #4326: tracking(storage): complete managed dependencies
URL: https://github.com/apache/maka/issues/4326
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For additional commands, e-mail: commits-help@maka.apache.org