mptyl/ThothII
1
0
Fork 0
Code Issues 25 Pull Requests Actions Packages Projects Releases 1 Wiki Activity

fix: expose catalog identity as a sha256 content digest

Browse Source
This commit is contained in:
marcopan
2026-08-11 19:25:04 +02:00
parent 82b5453c88
commit ad3c3125a8
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/workspaces/runtime-config-lease.ts
+2 -1
View File
@@ -354,6 +354,7 @@ export async function renderActiveWorkspaceRuntime(options: {
const snapshotPath = options.registry.snapshotPath(revision.commit, revision.id); const snapshotPath = options.registry.snapshotPath(revision.commit, revision.id);
const descriptorSource = await readFileAsync(snapshotPath, "utf8"); const descriptorSource = await readFileAsync(snapshotPath, "utf8");
const workspace = parseWorkspaceYaml(descriptorSource); const workspace = parseWorkspaceYaml(descriptorSource);
const catalogSource = await repository.readCatalog(revision.commit);
const rendered = renderWorkspaceRuntimeFromWorkspace({ const rendered = renderWorkspaceRuntimeFromWorkspace({
workspace, workspace,
workspaceId: revision.id, workspaceId: revision.id,
@@ -369,7 +370,7 @@ export async function renderActiveWorkspaceRuntime(options: {
...rendered, ...rendered,
snapshotPath, snapshotPath,
descriptorBlob: `sha256:${createHash("sha256").update(descriptorSource).digest("hex")}`, descriptorBlob: `sha256:${createHash("sha256").update(descriptorSource).digest("hex")}`,
catalogBlob: (await repository.catalogBlob(revision.commit)).trim(), catalogBlob: `sha256:${createHash("sha256").update(catalogSource).digest("hex")}`,
}; };
} }
backend/test/workspace-runtime-config-lease.test.ts
+1 -1
View File
@@ -160,7 +160,7 @@ test("active workspace rendering is byte-identical to direct snapshot rendering"
expect(active.renderedConfig).toBe(direct.renderedConfig); expect(active.renderedConfig).toBe(direct.renderedConfig);
expect(active.workspaceRevision).toBe(f.revision.commit); expect(active.workspaceRevision).toBe(f.revision.commit);
expect(active.descriptorBlob).toMatch(/^sha256:[0-9a-f]{64}$/); expect(active.descriptorBlob).toMatch(/^sha256:[0-9a-f]{64}$/);
expect(active.catalogBlob).toMatch(/^[0-9a-f]{40}$/); expect(active.catalogBlob).toMatch(/^sha256:[0-9a-f]{64}$/);
}); });
test("deterministic operator leases publish one revision-bound protected config and refuse changed same-revision bytes", async () => { test("deterministic operator leases publish one revision-bound protected config and refuse changed same-revision bytes", async () => {