mirror of
https://github.com/jhd3197/ServerKit.git
synced 2026-11-01 17:47:38 +09:00
Juan Denis
e8d84297f2
Review feedback + follow-up on the review-stamps feature: - The 409 trust gate now distinguishes reason 'unreviewed' (community code not vetted) from 'unverified' (no pinned checksum, possible even for first_party), each with an accurate message; the risk dialog carries the reason and matches its title/body to the actual case instead of always claiming 'unreviewed community extension' - Unreviewed registry entries are now developer-stage content: hidden from the Marketplace catalog and refused at the install endpoint (404) unless the panel runs in a development context (Flask debug / testing config, or the dev_mode setting). Hidden means not installable; the 409 acknowledgment flow only exists where they list - dev_mode setting description mentions the Marketplace effect - tests: reason assertions on both 409 cases; catalog visibility and 404-on-hidden-install coverage (38 passing)