@hoardodile/cli 0.1.14 → 0.1.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +13 -7
  2. package/package.json +3 -3
package/README.md CHANGED
@@ -69,17 +69,23 @@ Then add the line to the `plugins` array of your registry repo's
69
69
  The app's **Settings → Marketplace** takes the registry repo address
70
70
  once (built-in default: [`hoardodile/marketplace`](https://github.com/hoardodile/marketplace)) and reads everything
71
71
  else — each plugin's manifest (name, description, icon, permissions) via
72
- `raw.githubusercontent.com`, and its latest release (version, notes, zip
73
- asset, optional `.sha256` sidecar) via `api.github.com`. Requirements:
74
-
75
- - all repos are **public** (raw reads and unauthenticated API calls);
72
+ `raw.githubusercontent.com`, the latest release (version + published
73
+ date + notes) via the free `releases.atom` feed, and on demand the
74
+ installable payload (zip asset, optional `.sha256` sidecar, per-locale
75
+ readme) from `github.com/<repo>/releases/expanded_assets/<tag>`. All these
76
+ channels are quota-free GitHub web endpoints — the marketplace never
77
+ touches `api.github.com`, so a shared IP with an exhausted API quota
78
+ cannot block it. Requirements:
79
+
80
+ - all repos are **public** (raw reads and unauthenticated web-channel
81
+ fetches);
76
82
  - release tags follow `v<version>` (a `v` prefix is tolerated);
77
83
  - the zip asset is what `plugin package` produces (`<id>-<version>.zip`,
78
84
  or any `*.zip` in the release).
79
85
 
80
- The unauthenticated GitHub API budget is 60 requests/hour per IP; one
81
- marketplace refresh costs one request per plugin (registry + manifests
82
- skip the API entirely), and the app caches snapshots for 10 minutes.
86
+ The server caches the catalog snapshot in memory (default 24 h) and the
87
+ per-repo release payload on disk (`local/cache/marketplace-releases.json`,
88
+ default 24 h), so the endpoints are asked at most once per repo per day.
83
89
  All these fetches go through the app's user proxy when one is
84
90
  configured (auto-detected from the proxy env vars / OS system proxy;
85
91
  `HOARDODILE_PROXY` overrides) — destinations stay GitHub-only.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@hoardodile/cli",
3
- "version": "0.1.14",
3
+ "version": "0.1.15",
4
4
  "license": "MIT",
5
5
  "description": "hoardodile developer CLI: build, run, benchmark and develop content plugins.",
6
6
  "keywords": [
@@ -44,8 +44,8 @@
44
44
  "citty": "^0.2.2",
45
45
  "sharp": "^0.35.3",
46
46
  "vite": "^8.2.2",
47
- "@hoardodile/host": "0.1.14",
48
- "@hoardodile/sdk-types": "0.1.14"
47
+ "@hoardodile/host": "0.1.15",
48
+ "@hoardodile/sdk-types": "0.1.15"
49
49
  },
50
50
  "devDependencies": {
51
51
  "@types/node": "^26.2.0",