mauriceboe c98bf7977d feat(plugins): TREK-side registry — browse + one-click install (M5) ...

Connects TREK to the static GitHub registry (mauriceboe/TREK-Plugins). The
registry repo + CI gates were already live; this is the server side.

- registry.service: fetches the single aggregated dist/index.json (never
  per-plugin GitHub API calls — the HACS rate-limit lesson), caches it 30 min,
  soft-fails to a stale/empty registry, and installs a pinned version through
  the M4 pipeline: safe download -> sha256 verify -> slip-safe extract ->
  manifest re-validate -> native re-scan -> atomic move -> discover (inactive),
  recording repo/commit/sha provenance. Handles the codeload {repo}-{sha}/
  wrapper directory.
- Admin endpoints: GET /api/admin/plugins/registry (browse metadata) and
  POST /api/admin/plugins/install { id, version }. Install never executes code;
  activation stays a separate, deliberate step.

2026-07-03 17:38:10 +02:00

..

plugin-runtime.test.ts

feat(plugins): secure installer — manifest, discovery, safe extract/fetch/scan (M4)

2026-07-03 17:26:46 +02:00

registry.test.ts

feat(plugins): TREK-side registry — browse + one-click install (M5)

2026-07-03 17:38:10 +02:00

supervisor.test.ts

feat(plugins): isolated per-plugin runtime + capability RPC (M1)

2026-07-03 16:18:55 +02:00