feat(registry): add label verification primitives#1952
Merged
ascorbic merged 1 commit intoJul 11, 2026
Merged
Conversation
🦋 Changeset detectedLatest commit: 2ef6185 The changes in this PR will be included in the next version bump. This PR includes changesets to release 2 packages
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
github-actions
Bot
added
review/needs-review
Deploying with
|
| Status | Name | Latest Commit | Updated (UTC) |
|---|---|---|---|
| ✅ Deployment successful! View logs |
emdash-playground | 2ef6185 | Jul 11 2026, 02:29 PM |
Deploying with
|
| Status | Name | Latest Commit | Updated (UTC) |
|---|---|---|---|
| ✅ Deployment successful! View logs |
emdash-demo-cache | 2ef6185 | Jul 11 2026, 02:29 PM |
Deploying with
|
| Status | Name | Latest Commit | Updated (UTC) |
|---|---|---|---|
| ✅ Deployment successful! View logs |
emdash-demo-do | 2ef6185 | Jul 11 2026, 02:30 PM |
ascorbic
merged commit 2d6ad44
into
feat/plugin-registry-labelling-service
8 checks passed
81 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What does this PR do?
Adds the shared signed-label parsing, canonical encoding, and resolved-key verification primitives required before the aggregator can consume label subscriptions. Invalid cryptographic signatures now have a distinguishable
InvalidLabelSignatureErrorwhile remaining compatible with existingTypeErrorhandling.This is the shared-contract precursor for W4.2 in the plugin registry labelling service plan. The outbound subscription Durable Object remains paused until this contract lands.
Related to #1909 and RFC #694.
Type of change
Checklist
pnpm typecheckpassespnpm lintpassespnpm testpasses (or targeted tests for my change)pnpm formathas been runmessages.pochanges except in translation PRs; a workflow extracts catalogs on merge tomain.RFC #694 and the umbrella implementation PR #1909 are the approved design sources. There are no admin UI strings or translation changes.
AI-generated code disclosure
Screenshots / test output
pnpm buildpassespnpm typecheckpassespnpm lintpasses with 0 warnings and 0 errorsgit diff --checkpasspublintpasses;attwreaches its known internalfilenamecrash while checking the packed packageTry this PR
Open a fresh playground →
A full working EmDash site, deployed from this branch. Each visit gets its own session-scoped sandbox: no login needed and no shared state. Try the admin, edit content, hit the public site.
Tracks
feat/labeler-17-label-verification. Updated automatically when the playground redeploys.