regesta-demo #
A minimal demo of installing a package from Regesta — a draft architecture for a transparent, universal package registry.
What is Regesta? #
Regesta is a registry kernel, not another npm clone. Package identity, release state, object storage, authorization, and auditability are shared primitives, so npm, PyPI, Cargo, Go, OCI, and future package managers can all consume projections over the same Regesta-native objects.
It's designed around four properties:
- Transparent — release manifests, objects, channels, and events are addressable and auditable.
- Secure — write authority is tied to explicit trust proofs, starting from domain ownership.
- Modern — source, artifacts, metadata, and verification data are structured for package managers, humans, security tools, and AI agents alike.
- Scalable — immutable objects and deterministic projections are naturally cacheable across different storage backends.
Regesta is an early, experimental draft — this repo is a working example of consuming a package served through it.
What this demo does #
It pulls @sxzz.dev/hello-regesta from the Regesta registry (https://npm.regesta.dev/) and runs it:
import { helloRegesta } from '@sxzz.dev/hello-regesta'
console.log(helloRegesta())
Because Regesta exposes an npm-compatible projection, any npm client can consume it. This demo uses pnpm's named registries to point a single dependency at Regesta without touching global config:
# pnpm-workspace.yaml
namedRegistries:
regesta: https://npm.regesta.dev/
// package.json
{
"devDependencies": {
"@sxzz.dev/hello-regesta": "regesta:^0.0.0"
}
}
The regesta: version protocol tells pnpm to resolve that package from the regesta registry instead of the default npm registry.
Usage #
pnpm install
pnpm start