Files
makelore/.project-docs/30-worklog/tasks/20260901-plugin-catalog-main-integration-8e5c2a91.md

5.1 KiB

Task: Integrate and package Marketplace weak-ETag fix

Identity

  • Task ID: 20260901-plugin-catalog-main-integration-8e5c2a91
  • Mode: Integration
  • Branch: main
  • Worktree: D:\Datas\OthersProjects\makelore
  • Base commit: 5e8b7266c2
  • Owner: codex-root
  • Status: Ready for Integration

Scope

  • Integrate the completed weak-ETag Marketplace client fix from source commit b3cfe7e1ceb7da65ccc99214db09102b4fc1cace into local main.
  • Reconcile the accepted fact into current project state without changing Marketplace architecture or authority boundaries.
  • Rebuild and verify the Windows 1.2.0 artifact, then replace the currently installed client and verify the Plugin Center against the deployed catalog.

Intent And Constraints

  • The user explicitly authorized release/takeover of completed root task 20260901-package-120-4c7e, integration, rebuild, and installation.
  • Preserve the released task's untracked record .project-docs/30-worklog/tasks/20260901-package-120-4c7e.md byte-for-byte; to satisfy the Integration Gate it was moved without modification to C:\Users\7brot\AppData\Local\Temp\codex-task-recovery-20260901-package-120-4c7e\20260901-package-120-4c7e.md and remains outside this task's commit.
  • Source task promotion candidates are empty and its sole parent is the exact current main base, so no semantic conflict or merge choice exists.
  • Do not push, publish, deploy, mutate the Works Square catalog, or weaken trust/Provider/billing fail-closed behavior.
  • Installation may stop the running MakeLore process, but must target only the exact generated MakeLore installer/application.

Plan

  1. Cherry-pick the exact source fix and remove only the duplicate source task record from the integration history.
  2. Update canonical current state and run focused/full source verification from the integrated tree.
  3. Build and verify the Windows artifact, stop MakeLore, install the exact artifact, and smoke the Plugin Center.
  4. Record artifact/install evidence, complete project-document gates, and leave main clean except the preserved foreign task record.

Outcome

  • Product source commit b3cfe7e1ceb7da65ccc99214db09102b4fc1cace was integrated as local main commit 38f2358; canonical integration checkpoint is 6083de6aee8942a78191ed18a00bfd9f4ba0902d.
  • A Windows 1.2.0 artifact was rebuilt from that exact checkpoint, verified, installed over the prior 1.2.0 at D:\Tools\泥土\niancode\Makelore, and restarted with the existing signed-in session.
  • The installed Plugin Center now renders exactly three deployed official Plugins—Data Service, Game Resource, and Web Search—and no longer shows plugin_backend_unavailable.
  • Game Resource and Web Search are listed but still show no stable Release. That is the existing production signing/publication activation hold, not a catalog-loading regression; this task did not bypass it.

Verification

  • Source commit sole parent equals integration base 5e8b7266c2a8297c9d307b576256886659d44780; cherry-pick completed without conflict.
  • Integrated focused Marketplace suite: 4 files / 68 tests passed; pnpm run typecheck passed.
  • pnpm run package:stage:win-x64 and electron-builder with --config.extraMetadata.version=1.2.0 passed. The first aggregate download attempt stopped before build on an external GitHub ECONNRESET; staging reused the previous verified uv 0.10.0 binary (SHA-256 5E559E322AD2F2E25E7D9C3CB51E3891AB0676A7E7B59EA250A021E4CB2F6E31) and did not change tracked source.
  • pnpm run verify:publish-runtime: passed with npm 11.6.2.
  • pnpm run verify:artifact:win -- --installer .\release\Makelore-1.2.0-win-x64.exe: passed with embedded gitCommit/verificationHead 6083de6aee8942a78191ed18a00bfd9f4ba0902d, Electron 43.4.0, Node 24.18.1, Python, uv, npm, native modules, and Unicode proof.
  • pnpm run verify:artifact:pi -- --app-exe .\release\win-unpacked\Makelore.exe --samples 2: passed; Pi 0.84.2 closure, Marketplace markers, Web Search route/receipt authority, and bundled Data Service ten-tool catalog were present.
  • Final installer: 294,864,542 bytes; SHA-256 1301AE189BCBD44AA0E373982981E80B324EC45CDDF8F30415C2810F68319C06.
  • Final app.asar: 136,144,898 bytes; SHA-256 5024322B112DC1839E306EB45953D216A4622149341A89E6BEE35018EDABEB1B; the active Main bundle contains the optional weak W/ composite ETag prefix and is selected by dist-electron/main/index.js.
  • Silent installer exit code was 0. Installed Makelore.exe and app.asar hashes exactly matched release/win-unpacked; installed version remained 1.2.0.
  • Signed-in installed-client UI smoke opened Code → Plugin Center and displayed 3 个插件: Data Service, 游戏资源生成, and 联网搜索, with no catalog-unavailable error. Screenshot: C:\Users\7brot\AppData\Local\Temp\makelore-plugin-center-installed-fixed.png.

Follow-ups

  • If Game Resource and Web Search must become acquirable rather than merely listed, complete the separate official signing key, signed stable Release, and production publication activation gate. Do not infer that authority from this client transport fix.

Promotion Candidates

  • None recorded.