mirror of
https://github.com/jhd3197/ServerKit.git
synced 2026-11-03 10:36:45 +09:00
Juan DenisandClaude Opus 5
c3d70ed18b
DEFAULT_REPOS pointed at raw.githubusercontent.com/serverkit/templates -- the org `serverkit` does not exist (the registry is jhd3197/serverkit-templates, and its default branch is master, not main). So it has 404'd for its entire existence: no panel has ever fetched a template remotely, and every /templates page has been showing only the 118 bundled backend/templates/*.yaml. Now points at https://serverkit.ai/templates, which proxies the registry and was built for this consumer -- it serves <repo_url>/index.json and the <repo_url>/templates/<id>.yaml path this class derives, behind a TTL cache with last-good fallback. Using the product domain also means a branch rename upstream cannot silently empty every panel's catalog, which is the exact failure this is fixing. Fixing the default alone would only help fresh installs, because get_config returns whatever a saved templates.json holds. Known-dead URLs are therefore healed on read. Nothing is lost by rewriting a URL that never once resolved. The checksum half is here rather than in a follow-up because this commit ACTIVATES a download path that has never run: sync_templates wrote whatever came back straight to disk, ignoring the sha256 the index pins for every one of the 106 official entries. Turning on an unverified fetch days after the panel learned to verify ed25519 signatures on extensions would be shipping a known downgrade. Mismatch is now a hard refusal that never reaches disk; absent hash is allowed and counted, mirroring unsigned-vs-invalid for extensions. Content is written as bytes so the file on disk is exactly what was hashed. Note get_template's in-memory remote read (it parses without saving) is not covered -- it has no index entry on hand and would need an extra fetch. DEPLOY ORDER: serverkit.ai must ship the master-branch fix before this helps. Until then the proxy 502s and sync finds nothing, same as today. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>