Maurice ef5f8b9d38 fix(plugins): make the permission-model child load from the real plugin path ...

The prod data dir is a symlink (server/data -> volume), so resolving the plugin
under it tripped the permission model, and Node's module-type lookup walked up
into the (denied) data dir. Fork the child from the plugin's realpath and drop a
{"type":"commonjs"} package.json at its root so resolution stops there — trek.db
and the secret files stay unreadable, verified against Koffi.

2026-07-04 19:11:23 +02:00

..

assets

v3.1.1 bug fixes (#1228)

2026-06-18 20:13:30 +02:00

public

v3.0.16 — bug fixes (#964)

2026-05-06 21:38:40 +02:00

scripts

v3.1.1 bug fixes (#1228)

2026-06-18 20:13:30 +02:00

src

fix(plugins): make the permission-model child load from the real plugin path

2026-07-04 19:11:23 +02:00

tests

feat(plugins): sandbox hardening — OS permission model, egress choke point, bound acting user, author signatures

2026-07-04 19:11:23 +02:00

.env.example

fix(setup): warn when ADMIN_EMAIL/ADMIN_PASSWORD are ignored, ship reset-admin

2026-06-28 11:10:40 +02:00

.gitignore

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

.prettierrc

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

eslint.config.mjs

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

package.json

feat(extract): extract data using LLM

2026-06-28 11:53:19 +02:00

reset-admin.js

fix(setup): warn when ADMIN_EMAIL/ADMIN_PASSWORD are ignored, ship reset-admin

2026-06-28 11:10:40 +02:00

tsconfig.build.json

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

tsconfig.json

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

vitest.config.ts

feat(plugins): isolated per-plugin runtime + capability RPC (M1)

2026-07-04 19:11:23 +02:00