13 Commits

Author	SHA1	Message	Date
lilleman	ea4777c099	Declare plugin settings in the manifest, resolve them from the environment	2026-08-23 13:17:03 +02:00
lilleman	c5c9cce2b6	Keep role re-assertion within a non-superuser provisioner's rights, and test the second boot	2026-08-19 00:44:49 +02:00
lilleman	bf638dfb19	Give a plugin a Postgres database of its own	2026-08-18 23:12:13 +02:00
lilleman	7d1f7750d3	Refuse a node_modules at the plugins/ root, where it outranks the host's	2026-08-18 08:14:21 +02:00
lilleman	3f9787df48	Follow symlinked plugin folders, and keep a plugin .npmrc out of the image	2026-08-18 07:49:51 +02:00
lilleman	77343e859a	Fail loud on a null package.json and a stray plugins/package.json	2026-08-17 22:50:29 +02:00
lilleman	616040fda6	Refuse a shadowing barrel copy, and record the packaging contract	2026-08-17 22:34:56 +02:00
lilleman	fee4fe632b	Let a plugin carry its own package.json and npm dependencies	2026-08-17 22:23:53 +02:00
lilleman	45b16824f1	Point a failed discovery at the stale plugins/ copy, and document upgrading	2026-08-05 17:52:43 +02:00
lilleman	fb4382be9d	Enforce the permission-name rule at discovery, for every plugin	2026-08-05 15:38:00 +02:00
lilleman	096720904e	Rename the coarse gate from role to permission, matching RBAC	2026-08-03 17:41:40 +02:00
lilleman	b580f7d06e	Rename the plugin-API permission gate to role	2026-08-03 17:41:40 +02:00
lilleman	de22f51c12	Organize src/ into concern folders (http, auth, admin, plugin-host, ui); co-locate tests, move plugin-api barrel into plugin-host, sync docs + AGENTS layout	2026-06-24 00:23:55 +02:00