Hare/yoi
1
1
Fork 0
Code Actions Packages Releases Activity

feat: deliver exact Plugin artifacts through current Host authority

Browse Source 
Bind remote and in-process delivery to authenticated Worker lineage, live installation permission and persisted exact pins. Verify canonical bytes and complete descriptors in a bounded Runtime-only atomic cache; cache hits reauthorize and process-crash staging never becomes visible.

Shares the exact PluginInstallation permission shape published for T-793; no HTTPS or launch/restore integration is included. Depends on the T-465 source ancestry and the shared Host execution identity helper.
This commit is contained in:
Hare
2026-10-30 04:09:12 +09:00
parent 732fe5c4c1
commit 3a13301f75
23 changed files with 3971 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crates/plugin-runtime/Cargo.toml
+4 -1
View File
@@ -9,10 +9,13 @@ rust-version.workspace = true
async-trait.workspace = true
manifest.workspace = true
server-api.workspace = true
sha2.workspace = true
fs4.workspace = true
tempfile.workspace = true
serde = { workspace = true, features = ["derive"] }
serde_json.workspace = true
thiserror.workspace = true
tokio = { workspace = true, features = ["rt", "macros", "sync", "time"] }
tokio = { workspace = true, features = ["rt", "macros", "sync", "time", "fs", "io-util"] }
tokio-util = { version = "0.7", features = ["rt"] }
jsonschema = { version = "0.33.0", default-features = false }
wasmparser = "0.244.0"