molecule-ai/molecule-core
34
0
Fork 2
Code Issues 16 Pull Requests 2 Actions 49 Packages Projects Releases Wiki Activity

core#113 follow-up: plugin drift detector + queue + admin apply endpoint #123

New Issue
Open
opened 2026-05-08 15:54:13 +00:00 by claude-ceo-assistant · 0 comments
claude-ceo-assistant commented 2026-05-08 15:54:13 +00:00
Owner
Copy Link

Sub-issue of core#113 (version subscription)

The DB foundation merged in PR #122 (workspace_plugins table + tracked_ref column + install hook). Remaining pieces:

  1. plugin_update_queue table — queued upstream-drift updates pending operator apply.
  2. Drift detector — periodic job (cron OR Gitea webhook on tag-create) that:
    • Scans SELECT * FROM workspace_plugins WHERE tracked_ref != 'none'
    • For each row, resolves the tracked ref upstream (Gitea API) to current SHA
    • Compares to installed SHA (need to extend workspace_plugins with installed_sha column — second migration)
    • On drift, INSERT INTO plugin_update_queue
  3. Admin endpoint GET /admin/plugin-updates-pending — returns queued updates.
  4. Admin endpoint POST /admin/plugin-updates/:id/apply — triggers install for queued update. Composes with core#115 canary tier filter.

Acceptance criteria

  • Migration adds plugin_update_queue + installed_sha column on workspace_plugins
  • Drift detector job exists (cron OR webhook handler)
  • Admin endpoints respond with proper data
  • Tests cover: drift detected → queued → apply triggers install + restart

Refs

  • core#113 (foundation, merged in PR #122)
  • core#115 (canary tier filter, composes here)
## Sub-issue of core#113 (version subscription) The DB foundation merged in PR #122 (workspace_plugins table + tracked_ref column + install hook). Remaining pieces: 1. **plugin_update_queue table** — queued upstream-drift updates pending operator apply. 2. **Drift detector** — periodic job (cron OR Gitea webhook on tag-create) that: - Scans `SELECT * FROM workspace_plugins WHERE tracked_ref != 'none'` - For each row, resolves the tracked ref upstream (Gitea API) to current SHA - Compares to installed SHA (need to extend workspace_plugins with installed_sha column — second migration) - On drift, INSERT INTO plugin_update_queue 3. **Admin endpoint `GET /admin/plugin-updates-pending`** — returns queued updates. 4. **Admin endpoint `POST /admin/plugin-updates/:id/apply`** — triggers install for queued update. Composes with core#115 canary tier filter. ## Acceptance criteria - Migration adds plugin_update_queue + installed_sha column on workspace_plugins - Drift detector job exists (cron OR webhook handler) - Admin endpoints respond with proper data - Tests cover: drift detected → queued → apply triggers install + restart ## Refs - core#113 (foundation, merged in PR #122) - core#115 (canary tier filter, composes here)
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels   
tier:high

High risk per dev-sop §SOP-6 — ceo only, 24h cooldown

  
tier:low

Low risk per dev-sop §SOP-6 — engineers/managers/ceo can approve

  
tier:medium

Medium risk per dev-sop §SOP-6 — managers/ceo can approve

No Label
tier:high
tier:low
tier:medium
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: molecule-ai/molecule-core#123
No description provided.
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?