Files
Hare 3a13301f75 feat: deliver exact Plugin artifacts through current Host authority
Bind remote and in-process delivery to authenticated Worker lineage, live installation permission and persisted exact pins. Verify canonical bytes and complete descriptors in a bounded Runtime-only atomic cache; cache hits reauthorize and process-crash staging never becomes visible.

Shares the exact PluginInstallation permission shape published for T-793; no HTTPS or launch/restore integration is included. Depends on the T-465 source ancestry and the shared Host execution identity helper.
2026-10-30 04:09:12 +09:00

31 lines
1.0 KiB
TOML

[package]
name = "yoi-plugin-runtime"
version = "0.1.0"
edition.workspace = true
license.workspace = true
rust-version.workspace = true
[dependencies]
async-trait.workspace = true
manifest.workspace = true
server-api.workspace = true
sha2.workspace = true
fs4.workspace = true
tempfile.workspace = true
serde = { workspace = true, features = ["derive"] }
serde_json.workspace = true
thiserror.workspace = true
tokio = { workspace = true, features = ["rt", "macros", "sync", "time", "fs", "io-util"] }
tokio-util = { version = "0.7", features = ["rt"] }
jsonschema = { version = "0.33.0", default-features = false }
wasmparser = "0.244.0"
wasmtime = { version = "=38.0.4", default-features = false, features = ["async", "component-model", "cranelift", "runtime", "std", "threads"] }
[dev-dependencies]
tempfile.workspace = true
wit-component = { version = "0.244.0", features = ["dummy-module"] }
wit-parser = "0.244.0"
wasmprinter = "0.244.0"
wat = "1"
tokio = { workspace = true, features = ["rt-multi-thread", "test-util", "net"] }