Follow-up from the kars-upgrade-flow review.
Problem: The set of kars images is hand-duplicated ≥4×, each slightly different:
cli/src/lib/release.ts releaseImagePlancli/src/commands/up/images.ts release list (~81-98), build list (~221-231), customer list (~264-279).github/workflows/release-public-interim.yml publish matrix
This drift caused: kars-runtime-langgraph-ts referenced by the CLI but not published (now added to the matrix in the fix), and kars-a2a-gateway in none of the CLI lists (placeholder karsacr.azurecr.io default image, enabled:false).
Proposed: One exported KARS_IMAGES ({ghcrRepo, acrRepo, required, kind: core|runtime|mesh|gateway}) in lib/release.ts; derive every list from it, plus a CI test that asserts az acr manifest show-tags parity against GHCR for each required image (would have caught langgraph-ts before a customer did).
Severity: P2 (maintainability/supply-chain).
Follow-up from the kars-upgrade-flow review.
Problem: The set of kars images is hand-duplicated ≥4×, each slightly different:
cli/src/lib/release.tsreleaseImagePlancli/src/commands/up/images.tsrelease list (~81-98), build list (~221-231), customer list (~264-279).github/workflows/release-public-interim.ymlpublish matrixThis drift caused:
kars-runtime-langgraph-tsreferenced by the CLI but not published (now added to the matrix in the fix), andkars-a2a-gatewayin none of the CLI lists (placeholderkarsacr.azurecr.iodefault image,enabled:false).Proposed: One exported
KARS_IMAGES({ghcrRepo, acrRepo, required, kind: core|runtime|mesh|gateway}) inlib/release.ts; derive every list from it, plus a CI test that assertsaz acr manifest show-tagsparity against GHCR for eachrequiredimage (would have caught langgraph-ts before a customer did).Severity: P2 (maintainability/supply-chain).