Repository navigation

feat(server): install plugins from npm with integrity checks and staged updates - #16054

Open

saphid wants to merge 395 commits into

pingdotgg:mainfrom

saphid:stack/15-plugin-npm

Open

feat(server): install plugins from npm with integrity checks and staged updates#16054
saphid wants to merge 395 commits into
pingdotgg:mainfrom
saphid:stack/15-plugin-npm

This pull request is big! We're only showing the most recent 250 commits

Commits on Oct 19, 2026
- merge: reconcile plugin PR 16054 with current main
  saphid
  committed
  ed7c47f
- chore: resolve #16041 conflicts with current main
  saphid
  committed
  3bef9c6
- chore: resolve #16045 conflicts with current main
  saphid
  committed
  9d6c95a
- chore: resolve #16046 conflicts with current main
  saphid
  committed
  8be6c1b
Commits on Oct 20, 2026
- merge: integrate current main into panel host
  saphid
  committed
  39e3f91
- merge: integrate current main and migrate device panel coverage
  saphid
  committed
  116c5b8
- merge: integrate current main into files panel
  saphid
  committed
  9bdb7b9
- fix(web): scope file open shortcuts to the active panel
  saphid
  committed
  304575b
- merge: integrate current main into #16045
  saphid
  committed
  274afa0
- fix(web): scope file open shortcuts to the active panel
  saphid
  committed
  c6559e0
- test(web): supply the file browser composer action
  saphid
  committed
  ed6ec16
- merge: integrate current main into #16046
  saphid
  committed
  3e56355
- fix(web): scope file open shortcuts to the active panel
  saphid
  committed
  7cca359
- test(web): supply the file browser composer action
  saphid
  committed
  8e387b4
- fix(mobile): keep browser controls below contribution statuses
  saphid
  committed
  6461543
- merge: integrate current main into plugin host
  saphid
  committed
  ed343be
- fix(web): scope file open shortcuts to the active panel
  saphid
  committed
  eb0af4b
- fix(mobile): keep browser controls below contribution statuses
  saphid
  committed
  f492102
- fix(mobile): include status overlays in sent-message anchoring
  saphid
  committed
  ecee4ae
- fix(web): retain device operation state for its starting thread
  saphid
  committed
  f109887
- test(server): provide plugins to config RPC integration
  saphid
  committed
  9e66b60
- merge: integrate current main into plugin events
  saphid
  committed
  614c4f2
- fix(web): scope file open shortcuts to the active panel
  saphid
  committed
  8f6fb77
- fix(mobile): keep browser controls below contribution statuses
  saphid
  committed
  8ffd03d
- fix(mobile): include status overlays in sent-message anchoring
  saphid
  committed
  8aac62c
- test(server): provide plugins to config RPC integration
  saphid
  committed
  0e65401
- merge: integrate current main into #16049
  saphid
  committed
  0dcc5b4
- fix(web): scope file open shortcuts to the active panel
  saphid
  committed
  176e6c3
- fix(mobile): keep browser controls below contribution statuses
  saphid
  committed
  ae01f73
- fix(mobile): include status overlays in sent-message anchoring
  saphid
  committed
  c57260e
- test(server): provide plugins to config RPC integration
  saphid
  committed
  6adc994
- test(server): verify plugin grants reach the composed runtime
  saphid
  committed
  7cc224b
- merge: integrate current main into #16050
  saphid
  committed
  119b576
- fix(web): scope file open shortcuts to the active panel
  saphid
  committed
  1e3f457
- fix(mobile): keep browser controls below contribution statuses
  saphid
  committed
  41d7242
- fix(mobile): include status overlays in sent-message anchoring
  saphid
  committed
  25c0e76
- test(server): provide plugins to config RPC integration
  saphid
  committed
  fcc1b22
- fix(clients): follow current panel and mobile module APIs
  saphid
  committed
  aeab172
- test(server): verify plugin grants reach the composed runtime
  saphid
  committed
  618802f
- test(server): provide plugin settings to config RPC integration
  saphid
  committed
  89eeb46
- fix(server): preserve live secret writers during temporary cleanup
  saphid
  committed
  59b93e0
- merge: preserve plugin settings alongside current main
  saphid
  committed
  d39875f
- fix(clients): preserve current panel tests and detail tabs
  saphid
  committed
  3621e50
- fix(plugins): bound source traversal and preserve cancellation ownership
  saphid
  committed
  2b5d254
- fix(web): default the registered pull request detail tab
  saphid
  committed
  be0b931
- test(plugins): synchronize the first persisted cursor reconciliation
  saphid
  committed
  0cabfdc
- test(plugins): seed the persisted cursor timestamp
  saphid
  committed
  3e3282b
- style(plugins): name the event quarantine effect
  saphid
  committed
  a8a475b
- merge: propagate verified plugin settings repairs into actions
  saphid
  committed
  4ebc2b3
- fix(clients): reject stale plugin actions and pin action subscriptions
  saphid
  committed
  127d23a
- fix(mobile): validate the slash command trigger kind
  saphid
  committed
  bd212ad
- fix(runtime): retain the shared session pin for plugin action streams
  saphid
  committed
  38b76c3
- merge: preserve PR 15010 behavior on current main
  saphid
  committed
  f48abd2
- test(server): provide plugin actions at the config RPC boundary
  saphid
  committed
  fadaff3
- test(mobile): configure the plugin action hook environment
  saphid
  committed
  0ae5507
- merge: retain plugin views and verified ancestor repairs
  saphid
  committed
  0303f99
- merge: propagate verified plugin repairs into npm installation
  saphid
  committed
  c6db936
- merge: preserve panel host with current diff session behavior
  saphid
  committed
  cdaf638
- test(web): adapt current diff tests to the panel host
  saphid
  committed
  b006774
- merge: preserve device panel guards and current main test imports
  saphid
  committed
  1e261e2
- merge: preserve files panels and current pull request identity
  saphid
  committed
  09aa8ca
- fix(web): import detail tab type from the panel store
  saphid
  committed
  f48f6d6
- fix(web): default registered pull request detail tab
  saphid
  committed
  746f10d
- merge: preserve contribution status and files regression coverage
  saphid
  committed
  fecc4f1
- merge: retain mobile status geometry with current panel foundations
  saphid
  committed
  dd57467
- merge: preserve plugin host and migrations after current main
  saphid
  committed
  5665be2
- fix(server): bound plugin source walks and protect supervisor handoffs
  saphid
  committed
  0e14003
- merge: preserve plugin events and delegated completion transactions
  saphid
  committed
  b818ad5
- fix(server): reconcile persisted plugin event cursors
  saphid
  committed
  4876dfc
- refactor(server): keep event sink helpers under their operation spans
  saphid
  committed
  5133ae4
- merge: preserve plugin tool runtime and inherited event repairs
  saphid
  committed
  08b7f23
- test(server): deduplicate runtime session import after main integration
  saphid
  committed
  edaf580
- refactor(server): preserve plugin event sink operation tracing
  saphid
  committed
  3ea0333
- refactor(server): preserve plugin event sink operation tracing
  saphid
  committed
  12ec158
- refactor(server): preserve plugin event sink operation tracing
  saphid
  committed
  d45572a
- refactor(server): preserve plugin event sink operation tracing
  saphid
  committed
  127fbab
- fix(plugins): carry verified session and recovery repairs
  saphid
  committed
  4c09c75
- fix(plugins): carry verified session and recovery repairs
  saphid
  committed
  5cebb0c
- fix(plugins): carry verified session and recovery repairs
  saphid
  committed
  918e883
- fix(plugins): carry verified session and recovery repairs
  saphid
  committed
  e3db3e6
- fix(plugins): carry verified session and recovery repairs
  saphid
  committed
  52f6768
- fix(plugins): carry verified session and recovery repairs
  saphid
  committed
  94e8e62
- fix(plugins): carry verified session and recovery repairs
  saphid
  committed
  c043f6b
- fix(plugins): carry verified session and recovery repairs
  saphid
  committed
  995e4fc
- fix(plugins): carry verified session and recovery repairs
  saphid
  committed
  bf013c6
- fix(web): match registry fixtures to available panels
  saphid
  committed
  e41dec0
- fix(plugins): carry verified session and recovery repairs
  saphid
  committed
  4a62560
- fix(plugins): carry verified session and recovery repairs
  saphid
  committed
  1e830e8
- fix(plugins): carry verified session and recovery repairs
  saphid
  committed
  3d4cb9b
- fix(web): supply the panel host in PR tab restoration test
  saphid
  committed
  0b48776
- fix(web): supply the panel host in PR tab restoration test
  saphid
  committed
  65a86e0
- fix(web): supply the panel host in PR tab restoration test
  saphid
  committed
  a03587c
- fix(web): supply the panel host in PR tab restoration test
  saphid
  committed
  42bac51
- fix(web): supply the panel host in PR tab restoration test
  saphid
  committed
  2da00e3
- fix(web): supply the panel host in PR tab restoration test
  saphid
  committed
  55c8d53
- fix(web): supply the panel host in PR tab restoration test
  saphid
  committed
  54042f1
- fix(web): supply the panel host in PR tab restoration test
  saphid
  committed
  aaec5c3
- fix(web): supply the panel host in PR tab restoration test
  saphid
  committed
  04892a5
- fix(web): supply the panel host in PR tab restoration test
  saphid
  committed
  fa311c8
Commits on Oct 23, 2026
Commits on Oct 31, 2026

Commits

Commits on Oct 19, 2026

Commits on Oct 20, 2026

Commits on Oct 23, 2026