3 Commits

Include renames

Author	SHA1	Message	Date
LukeGus	c58ccbfc3f	fix: harden plugin auth and add per-request identity for ctx calls ... Require auth on /plugin-api, gate plugin enable/grant/revoke routes behind admin.plugins.manage, and thread the calling user through worker ctx.hosts/ctx.ssh calls instead of always using the install owner. Also adds the plugin permissions grant/revoke UI.	2026-09-21 14:32:59 -05:00
LukeGus	c94a453f1e	feat: ship the ssh terminal as a first-party in-process plugin ... Adds a hardcoded process:transport-owner tier so the terminal can own its WebSocket server and ssh2 clients, which cannot cross the worker boundary.	2026-09-21 08:28:50 -05:00
LukeGus	248698f62d	feat: add plugin worker protocol, bootstrap and plugin_storage table ... Worker-side ctx proxy plus the message envelope it talks over, and the per-plugin key/value table behind ctx.storage with migrations for all three dialects. Rows cascade with the plugin so uninstalling leaves nothing behind.	2026-09-21 07:19:01 -05:00