Repository navigation

feat(server,web,mobile): let plugins answer approval requests - #16064

Open

saphid wants to merge 92 commits into

pingdotgg:mainfrom

saphid:stack/21-plugin-approvals

Commits on Oct 10, 2026
- refactor(web): register the Diff side panel
  
  saphid
  authored and
  github-actions[bot]
  committed
  1fe8efd
- refactor(web): register the Preview side panel
  
  github-actions[bot]
  and
  claude
  committed
  bcbd324
- perf(web): keep the panel host stable across chat view renders
  
  github-actions[bot]
  and
  claude
  committed
  6befef3
- fix(web): send a late annotation only to the thread it was picked in
  
  github-actions[bot]
  and
  claude
  committed
  1b23a3e
- fix(web): lend the annotation sender only after the chat view commits
  
  github-actions[bot]
  and
  claude
  committed
  16877e3
- refactor(web): move the thread terminal panel and drawer out of ChatView
  
  github-actions[bot]
  and
  claude
  committed
  bb246d6
- refactor(web): open the right-panel terminal through the panel host
  
  github-actions[bot]
  and
  claude
  committed
  64cdb14
- fix(web): keep a local-checkout terminal launch off the thread's worktree
  
  github-actions[bot]
  and
  claude
  committed
  22f34a8
- fix(web): keep a terminal the server opened on the checkout off the thread's worktree
  
  github-actions[bot]
  and
  claude
  committed
  e34c8a4
- fix(web): keep device results in the thread that started them
  
  github-actions[bot]
  and
  claude
  committed
  f8da909
- refactor(web): open the Device side panel through the panel host
  
  github-actions[bot]
  and
  claude
  committed
  aea3b7a
- refactor(web): open the pull request side panels through the panel host
  
  github-actions[bot]
  and
  claude
  committed
  df78494
- refactor(web): open the Files side panel through the panel host
  
  github-actions[bot]
  and
  claude
  committed
  d1554f5
- fix(web): drop Files actions that settle after leaving the thread
  
  github-actions[bot]
  and
  claude
  committed
  7f84c56
- fix(web): open tree clicks in the thread the Files panel shows now
  
  github-actions[bot]
  and
  claude
  committed
  8136ad4
- fix(web): keep a Files browser open across composer draft switches
  
  github-actions[bot]
  and
  claude
  committed
  6d65c39
- fix(web): point tree clicks at the new thread as soon as it commits
  
  github-actions[bot]
  and
  claude
  committed
  3be1e97
- feat(pi): show extension statuses in the thread header
  
  github-actions[bot]
  and
  claude
  committed
  3d2de4d
- fix(pi): keep statuses when Pi refuses a rollback fork
  
  github-actions[bot]
  and
  claude
  committed
  890b0c5
- feat(mobile): show Pi extension statuses under the thread header
  
  github-actions[bot]
  and
  claude
  committed
  ee45b12
- feat(server): run consented local plugins in supervised child processes
  
  github-actions[bot]
  and
  claude
  committed
  d4e14af
- fix(server): answer every plugin result with a message the server can read
  
  github-actions[bot]
  and
  claude
  committed
  967fa41
- fix(server): drop what a plugin registered before its activation failed
  
  github-actions[bot]
  and
  claude
  committed
  c98af8e
- fix(server): exit a plugin child on a corrupt IPC line and cover its failure paths
  
  github-actions[bot]
  and
  claude
  committed
  0ebc19d
- fix(server): hold a plugin's partial IPC line in one growing buffer
  
  github-actions[bot]
  and
  claude
  committed
  f732076
- fix(server): hold plugin calls made during startup until enabled plugins are restored
  
  github-actions[bot]
  and
  claude
  committed
  8031b1c
- fix(server): count a plugin IPC line's newline against the read budget
  
  github-actions[bot]
  and
  claude
  committed
  d099322
- fix(server): restore enabled plugins before any management step at startup
  
  github-actions[bot]
  and
  claude
  committed
  b0e67fd
- fix(server): let calls waiting on a plugin start hear how it ended
  
  github-actions[bot]
  and
  claude
  committed
  af2e2f4
- fix(server): refuse a plugin file swapped for a FIFO while digesting
  
  github-actions[bot]
  and
  claude
  committed
  7861dd7
- chore(server): say why plugin host modules import Node builtins
  
  github-actions[bot]
  and
  claude
  committed
  b8617ec
- fix(server): answer a plugin call cancelled before its handler started
  
  github-actions[bot]
  and
  claude
  committed
  1bc3012
- test(server): start the cooperative handler before timing it out
  
  github-actions[bot]
  and
  claude
  committed
  c9f3193
- fix(server): close a dead plugin's stderr that a process it started holds
  
  github-actions[bot]
  and
  claude
  committed
  21b8a3d
- test(server): answer a replayed request only once its card is projected
  
  github-actions[bot]
  and
  claude
  committed
  d5a0db8
- feat(server): deliver finished runs to plugins from an acknowledged cursor
  
  github-actions[bot]
  and
  claude
  committed
  aefe6e5
- fix(server): let a run's queued checkpoint capture decide its finalization
  
  github-actions[bot]
  and
  claude
  committed
  a2c51b2
- fix(server): refuse the events capability without the proposed API opt-in
  
  github-actions[bot]
  and
  claude
  committed
  c94efe0
- fix(server): drop a plugin's event handlers when its activation fails
  
  github-actions[bot]
  and
  claude
  committed
  8f86852
- test(server): cover finalization of a run stopped through the ownership guard
  
  github-actions[bot]
  and
  claude
  committed
  3fa503e
- feat(server): let agents list and call plugin tools through MCP
  
  github-actions[bot]
  and
  claude
  committed
  6c9333a
- fix(server): list no plugins to MCP callers outside a T3 thread
  
  github-actions[bot]
  and
  claude
  committed
  06e4fcb
- fix(server): drop a reused credential's reservation when its grant update is stopped
  
  github-actions[bot]
  and
  claude
  committed
  ff7f887
- docs(plugins): say plugins run under the server's account
  
  github-actions[bot]
  and
  claude
  committed
  93566f6
- fix(server): drop a reused credential's reservation when its reuse check crashes
  
  github-actions[bot]
  and
  claude
  committed
  d57a1d6
- feat(server): typed plugin settings, write-only secrets and plugin storage
  
  github-actions[bot]
  and
  claude
  committed
  ce235d8
- docs(plugins): say plugins run under the server's account
  
  github-actions[bot]
  and
  claude
  committed
  12983f3
- fix(server): refresh open plugin settings when the declared fields change
  
  github-actions[bot]
  and
  claude
  committed
  dfb6a92
- fix(server): finish a plugin's host work before disable returns
  
  github-actions[bot]
  and
  claude
  committed
  34383e7
- fix(server): wake host calls waiting on a plugin below the stream buffer
  
  github-actions[bot]
  and
  claude
  committed
  910a13b
- feat: offer plugin actions in the palette, slash menu and thread menus
  
  github-actions[bot]
  and
  claude
  committed
  a9c53af
- fix(contracts): keep a plugin action when only its placement is unknown
  
  github-actions[bot]
  and
  claude
  committed
  bbfea1b
- fix: match plugin action names in the slash menu regardless of case
  
  github-actions[bot]
  and
  claude
  committed
  9192987
- docs(plugins): say the slash menu opens only at the start of a line
  
  github-actions[bot]
  and
  claude
  committed
  2103ba6
- fix(web,mobile): offer plugin actions only to connections that can run them
  
  github-actions[bot]
  and
  claude
  committed
  19a7f90
- test(web): stub plugin actions in the thread action menu hook test
  
  github-actions[bot]
  and
  claude
  committed
  047b5aa
- fix(web,mobile): check the live permission when a plugin action runs
  
  github-actions[bot]
  and
  claude
  committed
  cc348fb
- docs(plugins): say plugins run under the server's account
  
  github-actions[bot]
  and
  claude
  committed
  f38868a
- fix(mobile): offer environment plugin actions in the palette without an open thread
  
  github-actions[bot]
  and
  claude
  committed
  5e1ce8d
- feat: show plugin views as isolated right-panel tabs on web and desktop
  
  github-actions[bot]
  and
  claude
  committed
  4f7e07b
- fix: keep plugin view rate limits and navigation logs safe
  
  github-actions[bot]
  and
  claude
  committed
  06a6f80
- fix(server): refuse the views capability without the proposed API opt-in
  
  github-actions[bot]
  and
  claude
  committed
  4632ecb
- fix(web): keep the side-panel plugin view list stable across renders
  
  github-actions[bot]
  and
  claude
  committed
  e281442
- fix(server): type WebSocket handlers against the uninstrumented RPC group
  
  github-actions[bot]
  and
  claude
  committed
  52bf99f
- fix(server): serve plugin view files whose names start with two dots
  
  github-actions[bot]
  and
  claude
  committed
  70fb198
- fix(server): serve only plugin view bytes the approval digest covered
  
  github-actions[bot]
  and
  claude
  committed
  7d1e12a
- feat(server): install plugins from npm with integrity checks and staged updates
  
  github-actions[bot]
  and
  claude
  committed
  7f230bd
- fix(server): accept plain http npm registries only on this machine
  
  github-actions[bot]
  and
  claude
  committed
  5206d75
- fix(server): hold npm registry redirects and saved registries to the https rule
  
  github-actions[bot]
  and
  claude
  committed
  b6bc045
- fix(server): read npm tarball headers the way tar writers mean them
  
  github-actions[bot]
  and
  claude
  committed
  cae5a0c
- fix(server): list a staged npm update's tools, settings, and actions
  
  github-actions[bot]
  and
  claude
  committed
  6af8fcf
- fix(server): size the npm unpack cap by archive entries, not files
  
  github-actions[bot]
  and
  claude
  committed
  f873d31
- fix(server): refuse a pax record that does not end in a newline
  
  github-actions[bot]
  and
  claude
  committed
  6739297
- refactor(server): follow the Effect service rules in npm plugin installs
  
  github-actions[bot]
  and
  claude
  committed
  b015e65
- fix(server): size a GNU long name by its own header in npm tarballs
  
  github-actions[bot]
  and
  claude
  committed
  f3f0706
- fix(server): refuse npm tarball paths with a NUL byte
  
  github-actions[bot]
  and
  claude
  committed
  cc7119c
- fix(server): report an applied npm update whose plugin could not be enabled again
  
  github-actions[bot]
  and
  claude
  committed
  42494e1
- fix(server): refuse an npm update to the files already installed
  
  github-actions[bot]
  and
  claude
  committed
  fec5fa9
- feat(web,mobile): manage plugins in Settings
  
  github-actions[bot]
  and
  claude
  committed
  0d32e32
- docs(plugins): say plugins run under the server's account
  
  github-actions[bot]
  and
  claude
  committed
  caa9ec9
- fix(mobile): ask to select an environment when none is selected for plugins
  
  github-actions[bot]
  and
  claude
  committed
  cc15aac
- feat(web,mobile): fill in plugin settings from Settings
  
  github-actions[bot]
  and
  claude
  committed
  cc1f8c5
- feat(web,mobile): install and update plugins from npm in Settings
  
  github-actions[bot]
  and
  claude
  committed
  8a79463
- fix(client-runtime): show a downloaded same-version plugin update in the list
  
  github-actions[bot]
  and
  claude
  committed
  1d7af3b
- feat(web,mobile): show what each plugin adds and what its capabilities allow
  
  github-actions[bot]
  and
  claude
  committed
  2e1d06e
- feat(server,web,mobile): let plugins show statuses on threads
  
  github-actions[bot]
  and
  claude
  committed
  072afff
- fix(server): tell a plugin when the thread has no room for its status
  
  github-actions[bot]
  and
  claude
  committed
  9e77cde
- feat(server,web,mobile): let plugins send notifications
  
  github-actions[bot]
  and
  claude
  committed
  ec2202d
- fix(mobile): announce plugin notification banners to screen readers
  
  github-actions[bot]
  and
  claude
  committed
  3081aa4
- refactor(server): follow the Effect service rules in plugin notifications
  
  github-actions[bot]
  and
  claude
  committed
  7d0a8ad
- feat(server,web,mobile): let plugins add context to the turns you send
  
  github-actions[bot]
  and
  claude
  committed
  98939ce
- feat(server,web,mobile): let plugins answer approval requests
  
  github-actions[bot]
  and
  claude
  committed
  896210a

Commits

Commits on Oct 10, 2026