Hare/yoi
1
1
Fork 0
Code Actions Packages Releases Activity

feat: deliver exact Plugin artifacts through current Host authority

Browse Source 
Bind remote and in-process delivery to authenticated Worker lineage, live installation permission and persisted exact pins. Verify canonical bytes and complete descriptors in a bounded Runtime-only atomic cache; cache hits reauthorize and process-crash staging never becomes visible.

Shares the exact PluginInstallation permission shape published for T-793; no HTTPS or launch/restore integration is included. Depends on the T-465 source ancestry and the shared Host execution identity helper.
This commit is contained in:
Hare
2026-10-30 04:09:12 +09:00
parent 732fe5c4c1
commit 3a13301f75
23 changed files with 3971 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
web/workspace/src/lib/generated/plugin-api.ts
+4
View File
@@ -34,3 +34,7 @@ export type PluginListResponse = { installations: Array<PluginInstallationSummar
export type PluginOperationKind = "install" | "add_artifact" | "revoke" | "uninstall";
export type PluginOperationResponse = { operation_id: string, kind: PluginOperationKind, installation: PluginInstallation, };
export type PluginArtifactDeliveryRequest = { plan_id: string, plan_fingerprint: string, installation_id: string, artifact_digest: string, };
export type PluginArtifactDeliveryMetadata = { workspace_id: string, request: PluginArtifactDeliveryRequest, artifact: PluginArtifact, };