[WIP] Build Frontend from versioned UI and contract packages #84

Closed
weichen wants to merge 4 commits from feature/versioned-dependencies into main
Owner

Summary

Frontend imports fixed UI and Core contract packages through their package exports. Its Vite and TypeScript builds no longer require neighboring source checkouts. The UI Git pin advances to the repaired export commit while all 249 registry lock entries remain unchanged.

This is the Frontend consumer for Dev dependency-workspace PR #537. Source HEAD: 74511db9a6fb12e17954cb0c3f8e8846a6ecf831, including upstream export controls from 5313cfad4e633d0909ed40dcdfa28a11bc1902c0.

Evidence

  • Before: A clean npm install could not acquire its private UI source in CI because Frontend had no read credential for that repository.
  • After: User-authorized independent read:repository credential is configured only as Frontend SUBMODULE_TOKEN; the token value is never stored in source. Frontend run 3051, job 4616, completed successfully at this exact HEAD on Node 22: checkout, dependency prefetch, and credential-free package/contract validation all passed (actor weichen/id1, home-runner/id3). Earlier cold-cache npm 10/11 checks remain bounded to their recorded objects.
  • Upstream preservation: Frontend PR #73 merged export controls while this branch was open. A disposable merge replay at 74511db9a6fb12e17954cb0c3f8e8846a6ecf831 passed offline npm ci, 264 Vitest tests, the packed-package consumer check, and production build (SELF receipts /tmp/dependency-frontend-upstream-replay-{install,test,build}-20261014-01a1345f.json). The tested merge was fast-forwarded into this actual PR branch and pushed without changing its tree.

The Dev source lock has selected this Frontend commit locally. The complete Dev/RDM product combination, formal stage 7 human acceptance, and PR merge remain pending; this PR is work in progress.

Merge Danger

Door: two-way; revert through an ordinary PR while retaining consumed package commits.

Blast Radius: Frontend dependency resolution, bundle and embedded product asset. This PR does not deploy a site or service.

## Summary Frontend imports fixed UI and Core contract packages through their package exports. Its Vite and TypeScript builds no longer require neighboring source checkouts. The UI Git pin advances to the repaired export commit while all 249 registry lock entries remain unchanged. This is the Frontend consumer for [Dev dependency-workspace PR #537](https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/pulls/537). Source HEAD: `74511db9a6fb12e17954cb0c3f8e8846a6ecf831`, including upstream export controls from `5313cfad4e633d0909ed40dcdfa28a11bc1902c0`. ## Evidence - **Before:** A clean npm install could not acquire its private UI source in CI because Frontend had no read credential for that repository. - **After:** User-authorized independent `read:repository` credential is configured only as Frontend `SUBMODULE_TOKEN`; the token value is never stored in source. [Frontend run 3051](https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Frontend/actions/runs/3051), job 4616, completed successfully at this exact HEAD on Node 22: checkout, dependency prefetch, and credential-free package/contract validation all passed (actor weichen/id1, home-runner/id3). Earlier cold-cache npm 10/11 checks remain bounded to their recorded objects. - **Upstream preservation:** [Frontend PR #73](https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Frontend/pulls/73) merged export controls while this branch was open. A disposable merge replay at `74511db9a6fb12e17954cb0c3f8e8846a6ecf831` passed offline npm ci, 264 Vitest tests, the packed-package consumer check, and production build (SELF receipts `/tmp/dependency-frontend-upstream-replay-{install,test,build}-20261014-01a1345f.json`). The tested merge was fast-forwarded into this actual PR branch and pushed without changing its tree. The Dev source lock has selected this Frontend commit locally. The complete Dev/RDM product combination, formal stage 7 human acceptance, and PR merge remain pending; this PR is work in progress. ## Merge Danger **Door:** two-way; revert through an ordinary PR while retaining consumed package commits. **Blast Radius:** Frontend dependency resolution, bundle and embedded product asset. This PR does not deploy a site or service.
weichen added 3 commits 2026-10-14 01:53:26 +00:00
Why: Build the application without requiring adjacent Core or UI source checkouts.

Evidence: SELF full frontend tests, isolated no-sibling package consumption, design guards and production build are recorded in the Dev dependency-workspace task card.

Impact: Pin exact provider Git revisions and package exports; preserve component behavior, visual tokens and third-party versions.

Refs: Versioned dependencies U4; Core f32d431; UI 468776e; feature/dependency-workspace
Why:
Make independent version consumption work from ordinary clones while retaining historical commits and existing branch workspaces.

Evidence:
SELF Dev task receipts record 24 CI boundary cases, all workflow syntax checks, readonly private-source prefetch in clean exports, provider tests and package installation without acquisition scripts. Platform CI remains pending.

Impact:
Remove only replaced index links, preserve old physical checkouts, and update dependency guidance. Library consumers retain their immutable versions until an explicit dependency update.

Refs:
Agent-System-Dev feature/dependency-workspace; approved versioned-dependency r1, U3-U7 and R15.
Why:
Frontend and formal provider gates must use the repaired UI consumer, with registry metadata available before offline execution.

Evidence:
SELF npm 10 and 11 cold-cache consumer regressions passed; the UI adoption preserves all 249 registry lock entries and advances only its immutable Git source.

Impact:
Cache installed exact-version metadata during trusted acquisition; keep package generation and candidate execution free of checkout credentials.

Refs:
R6-R8, R14; dependency-workspace U4/U5; UI 63d289e6bc15b701356cfe2d5b8740210fac0dcc
weichen added 1 commit 2026-10-14 03:37:03 +00:00
Replay export controls with versioned package consumption
ci / test (pull_request) Successful in 1m14s
74511db9a6
Why: Frontend main gained authorized export controls while the package migration branch remained open.

Evidence: SELF offline npm install, 264 Vitest tests, packed-package consumer and full build passed in /tmp/dependency-frontend-upstream-replay-{install,test,build}-20261014-01a1345f.json.

Impact: Disposable integration fixture only; no provider feature branch or remote PR was advanced.

Refs: Frontend PR #84; upstream Frontend PR #73; Dev PR #537
weichen closed this pull request 2026-10-14 13:25:10 +00:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.
This pull request is marked as a work in progress.
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: weichen/Agent-System-Frontend#84