ARC package management
A CLI and library for the lifecycle of Synapse Cortex power-ups: author, validate, install, promote, and roll back.
Synapse Cortex power-ups have to move from a draft to an installed package, and then from one environment to another, without losing track of what was approved. ARC package management is the CLI and library for that lifecycle.
The commands cover scaffold, build, validate, publish, install, lock, drift detection, sync, promote, rollback, verify, and diagnose. Packages are stored as static JSON in a Git-backed registry, so the registry does not need its own server. A lockfile records the desired state. Builds are deterministic and checked with SHA-256. Install, promote, rollback, and sync follow the configured signature policy. If two packages request different versions of the same dependency, the install fails instead of choosing one.
Draft authoring is library-driven: a spec, a package draft, test inputs, and an author review checkpoint, then a candidate build and verification. Diagnose reads a failed candidate and its verification report and explains the failure without changing that state. Push installs go to a designated test Cortex. Updating a production Cortex means an operator installs an approved version there.