catalogue: backfill product demos into all 19 apps (signed)#398
Merged
Conversation
Inject the example-driven `product_demo` (authored in the app-template submissions, app-template#88) into each app's store-page metadata.json, so that `pilotctl appstore install` (pilotprotocol#395) prints the usage banner and the website renders the "Full usage demo". This is the DATA half of the feature — #395 is the renderer and is inert until this lands. - 18 apps: product_demo appended to the existing catalogue/apps/<id>/metadata.json (byte-preserving append; only the new key is added). - io.telepat.ideon-free had no rich metadata page (no metadata_url); created one from its submission via BuildMetadata, and added metadata_url + metadata_sha256 to its catalogue entry. - io.pilot.sixtyfour's demo is injected here at the metadata layer (its third-party-owned app-template submission is under the update gate and could not carry the demo). - catalogue.json: every touched app's metadata_sha256 recomputed; catalogue.json re-signed (catalogue.json.sig) with the catalogue key. Verified: every metadata_url entry's sha matches its file and the signature validates. Additive + non-breaking: product_demo is an optional metadata field; clients that don't render it ignore it. Merging deploys instantly (metadata_url is raw main).
…bstone (signed once) Fold the six sibling catalogue PRs into this one so the catalogue is signed and deployed once instead of seven times: - Product demos for the 4 apps that still lacked one — cosift, primitive, wallet, slipstream — authored against each app's real method set (validated by internal/demo). All 23 installable apps now carry a product_demo. - Consistency fixes: wallet's metadata had NO methods array (now its 16 methods); slipstream had NO metadata page at all (created one). Every installable entry is now schema_version 1 with methods + a demo whose skill == the app id. - Demos for agentphone / bowmark / didit / docker / duckdb (PRs #390–#394) are already present here — byte-identical — with main's richer entry metadata kept (the sibling PRs carried unenriched entries that would have regressed it). - Smol rename collapse (from #360): io.pilot.smolmachines replaced with a tombstone (renamed_to io.pilot.smol, hidden), its detail page removed, and the "Renaming an app" convention documented in catalogue/README.md. - Every metadata_sha256 recomputed; catalogue.json re-signed once. Verified: all 23 metadata_url entries' shas match, the tombstone is well-formed, and the signature validates against the catalogue trust anchor.
This was referenced Jul 16, 2026
…consolidated catalogue aegis 0.1.3's live bundle has the cli.args argv bug that killed 6 of 7 methods. Adopt the rev2 rebuild: bundle_url -> .../0.1.3/rev2/..., new bundle_sha256/size and per-platform bundles map, metadata size updated, aegis metadata_sha256 recomputed, catalogue re-signed. Verified all 3 rev2 platform bundles resolve (HTTP 200) and their sha256 match. The aegis product_demo (already present) is byte-identical to #389/#396. Consolidates the aegis catalogue content of #389 (demo + go-live) and #396 (rev2 fix).
This was referenced Jul 16, 2026
added 4 commits
July 16, 2026 12:49
…data
Reviewed the 4 hand-authored demos against each app's real API. Fixes:
- cosift: params were wrong — search/answer/research take "q" (not "query")
and contents takes "url"/"urls" (not "id"). Verified against the
cosift-app adapter (cmd/cosift-app/main.go methodTable) + cosift docs/API.md.
- wallet: it exposes NO wallet.help method — removed the phantom method from the
metadata list (15 real methods) and from the demo's next. wallet.balance takes
{"asset":"USDC"}. Method summaries corrected against pkg/walletipc source.
- slipstream: replaced hand-written method summaries with the authoritative ones
from the live slipstream.help (installed + queried the app); demo args ({})
confirmed valid (all list params optional).
- primitive: verified clean (all 5 demo methods exist, take no required params).
Recomputed the 3 metadata_sha256 and re-signed the catalogue.
Folds the dynamic-context dependency graphs into this consolidated catalogue PR so the whole rollout is one signature, not a second re-sign after a separate merge. Each app's next_steps is copied verbatim from its app-template submission (the same object BuildMetadata would emit) into catalogue/apps/<id>/metadata.json, its metadata_sha256 re-pinned, and catalogue.json re-signed. 18 apps gain next_steps here; io.telepat.ideon-free already carried a matching graph. Purely additive to each metadata.json (+next_steps, nothing else touched); aegis's rev2 argv-fix bundle pin is unchanged. Verified: every metadata_sha256 pin matches its file bytes, every graph equals its submission source, and the re-signed catalogue.json.sig verifies against the embedded catalogue public key (and rejects tampering).
Completes dynamic-context coverage: cosift, wallet, sixtyfour and slipstream gain a next_steps graph here (authored from each app's own source + live testing where free — cosift's flow was exercised end-to-end; sixtyfour used help only, no metered calls; wallet/slipstream from their repos/metadata). Every step is a full `pilotctl appstore call ...` command. io.pilot.smolmachines is intentionally NOT covered: it is a hidden, non-installable tombstone (renamed_to io.pilot.smol) with no metadata.json, so there is nothing to attach a graph to and nothing can call it. That leaves 23/24 catalogue entries with a graph — every real, installable app. Each metadata.json gains only next_steps; metadata_sha256 re-pinned and catalogue.json re-signed. Verified: all pins match, signature valid.
… view` parses
Pre-existing data bug, surfaced while verifying that the added product_demo/next_steps
fields don't break parsers: postgres's `links` was a JSON object
{"documentation":...,"psql_reference":...} but appMetadata.Links is []{label,url}
(the shape every other app uses). `pilotctl appstore view io.pilot.postgres` failed
to unmarshal the detail metadata on BOTH the released client and this one — unrelated
to next_steps. Converted to the array form; re-pinned + re-signed.
Authoritative typed-parse over all 23 metadata files now passes; product_demo and
next_steps parse cleanly everywhere (Go ignores unknown fields — no client strictness).
Alexgodoroja
enabled auto-merge (squash)
July 16, 2026 20:43
TeoSlayer
approved these changes
Jul 16, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Injects the example-driven
product_demo(authored in app-template#88) into the store-pagemetadata.jsonof all 19 apps that have a demo, and re-signs the catalogue. This is the data half of the install-time usage guide — pilotprotocol#395 is the renderer and stays inert until this lands.On merge this deploys instantly to every client (metadata is served from
raw…/main); no binary rollout is needed for the content. (Apilotctlrelease is still needed for the render — #395 — to reach the fleet.)Changes
product_demoappended to the existingcatalogue/apps/<id>/metadata.json. Byte-preserving append: only the new key is added, matching the files' Go-MarshalIndentescaping, so the diff is additions-only.io.telepat.ideon-free— had no rich metadata page (nometadata_url); created one from its submission viaBuildMetadataand addedmetadata_url+metadata_sha256to its catalogue entry.io.pilot.sixtyfour— demo injected here at the metadata layer, because its third-party-owned app-template submission is under the update gate and can't carry the demo.catalogue.json— every touched app'smetadata_sha256recomputed;catalogue.json.sigre-signed with the catalogue key.Verification
metadata_urlentry'smetadata_sha256matches its file on disk (checked across all 24 entries).catalogue.json.sigvalidates against the catalogue trust anchor (the same key that signs the live catalogue).metadata.jsonparses and itsproduct_demo.skillequals the app id.Safety
Additive + non-breaking —
product_demois an optional metadata field; clients that don't render it ignore it. No change to bundles, publishers, or signing of anything except the catalogue root.