mauriceboe a4257f3611 fix(plugins): allow inline scripts in the sandboxed frame + fix server lint error ...

- Plugin frame CSP: the frame runs at an opaque origin (sandbox without
  allow-same-origin), so script-src 'self' matches nothing and the widget's own
  script never runs (stuck on 'Loading…'). Allow 'unsafe-inline' — the sandbox,
  not this directive, is the isolation boundary, and the plugin author controls
  the frame code either way.
- Fix a no-constant-binary-expression eslint error in registry.test.ts that was
  failing the server lint:check (eslint .) in CI.

2026-07-03 18:36:32 +02:00

..

plugin-runtime.test.ts

feat(plugins): lifecycle polish — uninstall, error log, egress guard, widget slot (M8)

2026-07-03 18:08:11 +02:00

registry.test.ts

fix(plugins): allow inline scripts in the sandboxed frame + fix server lint error

2026-07-03 18:36:32 +02:00

supervisor.test.ts

feat(plugins): isolated per-plugin runtime + capability RPC (M1)

2026-07-03 16:18:55 +02:00