l0ng-ai 0024a1c705 feat(plugins): keep a plugin's signer across updates and announce updates ...

- Index format: fields are only added; an IDE reading a newer `format`
  still applies its revocations and `moved`, lists no plugins and asks to
  be updated, instead of failing to read the index.
- Key continuity: an installed plugin updates silently only to a package
  signed with the same key, or a key it endorsed (`KeyEntry.endorsement`,
  `index --previous-key`, `openidea-plugin endorse`). Another signer, or an
  unsigned package replacing a signed one, is shown on the install page and
  needs the user's confirmation (`Consent.signerChange`).
- Official key: release builds carry the official publisher's public key
  (`OPENIDEA_OFFICIAL_PLUGIN_KEYS`, derived from PLUGIN_SIGNING_KEY);
  `openidea.*` plugins must be signed with it or a key it endorsed,
  whatever the index lists.
- Updates: the daily marketplace check announces new versions once, with
  Update All (also in the gear menu and as an action). An update that asks
  for nothing new installs with the grants the installed version has.
- Index entries need `engine`; `categories` beyond the first three are
  ignored instead of rejecting the manifest.

2026-11-04 17:47:46 +08:00

..

ci.yml

feat(plugins): plugin system with extension points, consent, Wasm runtime and plugin API 1.0 (#971)

2026-11-04 02:54:31 +08:00

plugins-index.yml

feat(plugins): list community plugins from a registry in the marketplace

2026-11-04 17:46:51 +08:00

pr-check.yml

chore: add issue/PR templates, PR check, AGENTS.md and shared agent skills (#1043)

2026-11-03 21:49:31 +08:00

release.yml

feat(plugins): keep a plugin's signer across updates and announce updates

2026-11-04 17:47:46 +08:00