Skip to content

docs(social-ops): record the first host integration and its trap - #33

Merged
oratis merged 1 commit into
mainfrom
docs/social-ops-consumer-status
Sep 8, 2026
Merged

oratis merged 1 commit into
mainfrom
docs/social-ops-consumer-status

Conversation

@oratis

@oratis oratis commented Sep 8, 2026

Copy link
Copy Markdown
Owner

Follow-up to #32, now that the layer has a real consumer.

What changed

docs/SOCIAL_OPS_CAPABILITY_LAYER.md §8 and docs/memory.md §3.8 both claimed the Cuddler integration was still ahead of us and floated an npm publish. Cuddler has since consumed the package (LuddiAI/Cuddler#3482), so this replaces the stale list with what actually happened plus the one thing worth warning the next integrator about.

The trap, recorded

This package is CommonJS loaded through a runtime require. Under Next.js output: "standalone" a host must trace two paths — the real files under node_modules/.pnpm/@influencex+social-ops@*/… and its own node_modules/@influencex/social-ops, the pnpm link that makes them resolvable.

Tracing only the first ships all 30 files with none of them reachable. Local vitest, tsc and next build are all green; production answers 503 on every call. Cuddler added a CI policy suite to hold it.

Also recorded

  • The lockfile resolves to a codeload tarball at a fixed commit, not a git protocol URL, so a host container image needs no git binary — alpine bases have none.
  • bilibili / douyin / kuaishou stay endpointsVerified: false. The host deferred those developer-platform applications (enterprise qualification plus per-capability review), so nobody will be verifying them soon. Do not quietly flip them.
  • npm publish: deliberately not doing it. The git tarball already gives deterministic resolution, and npm unpublish is restricted after 72 hours. Revisit with a second external host.

Docs only — no code, no tests affected.

🤖 Generated with Claude Code

WHY: the capability layer's next-steps list said "Cuddler 侧接入" was still
to do and floated an npm publish. Cuddler has since consumed the package
(DiogenesModel/Cuddler#3482), and wiring it surfaced a packaging failure mode
that any Next.js standalone host will hit — worth writing down here
rather than leaving the next integrator to rediscover it in production.

WHAT:
- mark the Cuddler integration done; record that the lockfile pins a
  codeload tarball at a fixed commit, so a host image needs no git binary
- document the two-glob output-file-tracing requirement: tracing only the
  .pnpm files ships the package unreachable, green everywhere locally and
  503 on every call in production
- bilibili/douyin/kuaishou stay endpointsVerified:false — the host
  deferred those developer applications, so nobody is verifying them soon
- npm publish: deliberately not doing it; the git tarball already gives
  deterministic resolution and unpublish is restricted after 72h

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@oratis
oratis merged commit a36a804 into main Sep 8, 2026
5 checks passed
@oratis
oratis deleted the docs/social-ops-consumer-status branch September 8, 2026 15:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant