Maurice 91c9909dc4 feat(plugins): enable the plugin system by default ...

The runtime and the Admin -> Plugins panel are now available out of the box;
TREK_PLUGINS_ENABLED becomes an opt-out (set it to false to switch the whole
system off). Installed plugins are still registered inactive and have to be
activated one by one, so no third-party code runs until an admin turns a
specific plugin on.

Update the kill-switch default test and the plugin/env-var wiki pages to match.

2026-07-04 23:29:57 +02:00

..

create-rpc-host.test.ts

fix(plugins): security hardening from the PR #1415 audit

2026-07-04 19:11:23 +02:00

discovery.test.ts

fix(plugins): tolerate a UTF-8 BOM in trek-plugin.json

2026-07-04 20:21:06 +02:00

egress-policy.test.ts

fix(plugins): security hardening from the PR #1415 audit

2026-07-04 19:11:23 +02:00

manifest.test.ts

fix(plugins): close the 4 PARTIAL findings + regressions from the fix-verify pass

2026-07-04 19:11:23 +02:00

native-scan.test.ts

feat(plugins): secure installer — manifest, discovery, safe extract/fetch/scan (M4)

2026-07-04 19:11:23 +02:00

plugin-audit.test.ts

feat(plugins): zero-config L1 hardening — SSRF egress, RSS reaper, capability audit, no popups

2026-07-04 19:11:23 +02:00

plugin-data.test.ts

fix(plugins): close the 4 PARTIAL findings + regressions from the fix-verify pass

2026-07-04 19:11:23 +02:00

plugin-frame.test.ts

feat(plugins): zero-config L1 hardening — SSRF egress, RSS reaper, capability audit, no popups

2026-07-04 19:11:23 +02:00

plugin-sdk.test.ts

feat(plugins): sandbox hardening — OS permission model, egress choke point, bound acting user, author signatures

2026-07-04 19:11:23 +02:00

plugins-proxy.test.ts

feat(plugins): sandbox hardening — OS permission model, egress choke point, bound acting user, author signatures

2026-07-04 19:11:23 +02:00

plugins-service.test.ts

feat(plugins): enable the plugin system by default

2026-07-04 23:29:57 +02:00

protocol-paths.test.ts

test(plugins): cover pluginRealCodeDir fallback + ensurePluginModuleType

2026-07-04 19:11:23 +02:00

rpc-host.test.ts

fix(plugins): security hardening from the PR #1415 audit

2026-07-04 19:11:23 +02:00

safe-extract.test.ts

feat(plugins): TREK-side registry — browse + one-click install (M5)

2026-07-04 19:11:23 +02:00

safe-fetch.test.ts

fix(plugins): allow GitHub's rotating release-asset host in the installer

2026-07-04 19:11:23 +02:00

verify-signature.test.ts

feat(plugins): sandbox hardening — OS permission model, egress choke point, bound acting user, author signatures

2026-07-04 19:11:23 +02:00