> [!important] Closed Beta blocker: Must exist before the first customer (UI) > There is no way to fetch a single container manifest, and list rows lack tags and platform data. For the user: the Docker/OCI version detail page, one of the UI's core screens, cannot exist. ## Problem The Docker and OCI version detail page and the container rows of the version list need reads the management API does not serve. The manifest path `.../images/{image_id}/manifests/{digest}` has a `DELETE` and no `GET`, and the manifests list withholds three things the design renders per row. | Design element | Missing from the contract | State in the tree | | --- | --- | --- | | Manifest detail page | `GET .../manifests/{digest}` | No route. S17's "Artifact resources (Phase 3)" records the addressing intent: by digest, not by UUID. | | Tags column, tag badges, pull-by-tag snippet | `tags` per manifest | Tags are readable per image only, through `listContainerTags`, so a Tags column costs up to 10 extra requests per page at the 1,000-tag cap. | | Referrers column and tab | A referrers count per manifest, and a management referrers endpoint | The list carries `subject_digest` per row and nothing aggregates it. | | Platforms column and block | `architecture`, `os`, and `os_variant` per manifest | Stored on `container_manifests` since the image-config reader landed, withheld by the serializer. The doc-only fix that closed the earlier issue left the serialization untracked. | S17 records all of this as the "Container-redesign fast-follow" in its Follow-ups, together with `annotations` on the detail, a raw manifest payload endpoint, and an index's child digests. monolith/S06 asks S17 to give that entry a work item. This is it. ## Ask An S17 contract patch and its implementation: 1. `GET .../images/{image_id}/manifests/{digest}`: the list element plus `annotations`. 1. `tags` on each manifest, on the list and the detail. 1. A referrers count on each manifest, and `GET .../manifests/{digest}/referrers` listing direct referrers. 1. `architecture`, `os`, and `os_variant` on each manifest. 1. Child digests on an index, for the Platforms block. 1. A raw manifest payload endpoint. S17 fixes the fetch mechanism: page-bounded reads (a batched per-page query or a lateral subquery, chosen by profiling, never table-wide), with a denormalized counter as the documented fallback. Out of scope here: a source field on manifests or images. No column exists, and S17 puts it behind a schema decision. ## Impact While the detail route is missing, the Docker and OCI version detail page cannot render. While the list fields are missing, every container row of the version list shows empty Tags, Platforms, and Referrers columns. ## Related - Umbrella filed from the frontend report: gitlab-org/ops/artifact-registry#1149+s - Spec: `docs/specs/S17-rest-management-api.md`, Follow-ups, "Container-redesign fast-follow" - Consumers: `docs/specs/monolith/S14-version-list.md` (Phase 2) and `docs/specs/monolith/S06-version-detail.md` (Phase 2, "Required S17 amendments") - Design: gitlab-org/gitlab#598785+s - The image-config reader that stores the platform triple: gitlab-org/ops/artifact-registry!929+s - The doc-only fix for the platform gating sentence: gitlab-org/ops/artifact-registry#594+s ## Workstream status (2026-09-16 08:31 UTC) ```mermaid graph TD ``` | # | Step | MR | Status | Closed beta | | --- | --- | --- | --- | --- | | 1 | Remote-cached manifests-list contract case | gitlab-org/ops/artifact-registry!2506+s | Merged | Blocking | | 2 | Manifest read seams | gitlab-org/ops/artifact-registry!2515+s | Merged | Blocking | | 3 | Schema split over `ContainerManifestBase` and its pin | gitlab-org/ops/artifact-registry!2517+s | Merged | Blocking | | 4 | Manifest read operations, pending entries, and Bruno requests | gitlab-org/ops/artifact-registry!2521+s | Merged into !2517 | Blocking | | 5 | Widen the manifests-list projection to the platform triple | gitlab-org/ops/artifact-registry!2508+s | Merged | Blocking | | 6 | Manifest detail route | gitlab-org/ops/artifact-registry!2536+s | Merged | Blocking | | 7 | Platform triple on the manifest responses | gitlab-org/ops/artifact-registry!2537+s | Merged | Blocking | | 8 | Tag names by manifest ids | gitlab-org/ops/artifact-registry!2516+s | Merged | Blocking | | — | S17 amendment: remote tags window | gitlab-org/ops/artifact-registry!2504+s | Merged | Blocking (gated Step 9) | | 9 | Tag names by manifest ids, remote | gitlab-org/ops/artifact-registry!2538+s | Merged | Blocking | | 10 | Tag preview, count, and detail `tags`, with the page-facts seam | gitlab-org/ops/artifact-registry!2540+s | Merged | Blocking | | 11 | Batched referrers count | gitlab-org/ops/artifact-registry!2582+s | Merged | Follow-on | | 12 | `referrers_count` on the manifest responses | gitlab-org/ops/artifact-registry!2589+s | Merged | Follow-on | | 13 | Referrers list-row page | gitlab-org/ops/artifact-registry!2580+s | Merged | Follow-on | | 14 | Referrers list route | gitlab-org/ops/artifact-registry!2654+s | Merged | Follow-on | | 15 | Parent digests by child ids | gitlab-org/ops/artifact-registry!2579+s | Merged | Follow-on | | 16 | Parents preview, count, and detail `parent_digests` | gitlab-org/ops/artifact-registry!2661+s | Merged | Follow-on | | 17 | Children by parent ids | gitlab-org/ops/artifact-registry!2581+s | Merged | Follow-on | | 18 | Children preview, count, and detail `children` | gitlab-org/ops/artifact-registry!2588+s | Merged | Follow-on | | 19 | `annotations` on manifest detail | gitlab-org/ops/artifact-registry!2574+s | Merged | Follow-on | | 20 | Raw manifest payload route | gitlab-org/ops/artifact-registry!2587+s | Merged | Follow-on | | 21 | Covering index for the hosted tag-names read | gitlab-org/ops/artifact-registry!2659+s | Merged | Blocking |