9 Commits

Include renames

Author	SHA1	Message	Date
LukeGus	2961297989	chore: lock the plugin boundary and remove 2.9.0 leftovers	2026-09-25 07:24:46 -05:00
LukeGus	a276f6898c	feat: move session sharing and collab rooms into a plugin (B12)	2026-09-23 23:42:46 -05:00
LukeGus	e88d5a52e3	feat: load plugin frontends at runtime and remove plugin ids from the shell	2026-09-22 20:15:52 -05:00
LukeGus	cc15559ea1	feat: namespace plugin permissions and keep them valid when a plugin is off	2026-09-22 17:30:00 -05:00
LukeGus	4758016f41	feat: collapse plugin runtime to one tier behind a plugin SDK	2026-09-22 14:11:50 -05:00
LukeGus	9db66d5780	feat: add cross-plugin secret references gated by the provider's RBAC permission	2026-09-21 17:09:28 -05:00
LukeGus	2d6c1cdecb	feat: add a permission-gated UI action registry and action slots for plugins ... Moves the terminal toolbar's hardwired AI button into a slot the ssh-terminal plugin offers and the ai plugin fills, gated on ai.services.use.	2026-09-21 16:56:15 -05:00
LukeGus	225f618337	feat: add a permission-gated backend service registry for plugins	2026-09-21 16:23:00 -05:00
LukeGus	0a771c9600	feat: add plugin loader with manifest validation and crash restart ... Validates an unpacked plugin, spawns a worker_threads worker and manages activate/deactivate/crash-restart with backoff, disabling after three tries. The crash counter clears only after a plugin stays up past a stability window, not on activation. Clearing it on activation let a plugin that activates cleanly and then dies restart forever, because every attempt looked like the first. loader.ts documents what the worker boundary does and does not buy you. Node's permission model is process-wide, not per-worker, so it cannot be enabled for plugin workers alone and is not claimed here.	2026-09-21 07:19:01 -05:00