Repository navigation

feat(web,mobile): install and update plugins from npm in Settings - #16057

Open

saphid wants to merge 107 commits into

pingdotgg:mainfrom

saphid:stack/17-plugin-npm-ui

Open

feat(web,mobile): install and update plugins from npm in Settings#16057
saphid wants to merge 107 commits into
pingdotgg:mainfrom
saphid:stack/17-plugin-npm-ui

Commits on Oct 11, 2026
- refactor(web): register the Diff side panel
  
  saphid
  authored and
  github-actions[bot]
  committed
  920770b
- refactor(web): register the Preview side panel
  
  github-actions[bot]
  and
  claude
  committed
  e1ae808
- perf(web): keep the panel host stable across chat view renders
  
  github-actions[bot]
  and
  claude
  committed
  4851ae8
- fix(web): send a late annotation only to the thread it was picked in
  
  github-actions[bot]
  and
  claude
  committed
  30972c6
- fix(web): lend the annotation sender only after the chat view commits
  
  github-actions[bot]
  and
  claude
  committed
  52a78e7
- refactor(web): move the thread terminal panel and drawer out of ChatView
  
  github-actions[bot]
  and
  claude
  committed
  7be7fb5
- refactor(web): open the right-panel terminal through the panel host
  
  github-actions[bot]
  and
  claude
  committed
  a0ea164
- fix(web): keep a local-checkout terminal launch off the thread's worktree
  
  github-actions[bot]
  and
  claude
  committed
  02d7fe8
- fix(web): keep a terminal the server opened on the checkout off the thread's worktree
  
  github-actions[bot]
  and
  claude
  committed
  ca03345
- fix(web): keep device results in the thread that started them
  
  github-actions[bot]
  and
  claude
  committed
  4b7aa2e
- refactor(web): open the pull request side panels through the panel host
  
  github-actions[bot]
  and
  claude
  committed
  bcb7b41
- refactor(web): open the Device side panel through the panel host
  
  github-actions[bot]
  and
  claude
  committed
  a1d256b
- test(web): build the pull request panel fixture against current main
  
  github-actions[bot]
  and
  claude
  committed
  cfd56f6
- refactor(web): open the Files side panel through the panel host
  
  github-actions[bot]
  and
  claude
  committed
  4a90882
Commits on Oct 12, 2026
- test(web): stub the server environment atoms in the Files panel test
  
  github-actions[bot]
  and
  claude
  committed
  3fe8920
- fix(web): drop Files actions that settle after leaving the thread
  
  github-actions[bot]
  and
  claude
  committed
  8cf75b7
- fix(web): open tree clicks in the thread the Files panel shows now
  
  github-actions[bot]
  and
  claude
  committed
  4f15c62
- fix(web): keep a Files browser open across composer draft switches
  
  github-actions[bot]
  and
  claude
  committed
  0e86f37
- fix(web): point tree clicks at the new thread as soon as it commits
  
  github-actions[bot]
  and
  claude
  committed
  419306d
- feat(pi): show extension statuses in the thread header
  
  github-actions[bot]
  and
  claude
  committed
  3b7aa41
- fix(pi): keep statuses when Pi refuses a rollback fork
  
  github-actions[bot]
  and
  claude
  committed
  083f6ab
- fix(pi): carry each status generation's thread on its marker
  
  github-actions[bot]
  and
  claude
  committed
  e8f8f57
- feat(mobile): show Pi extension statuses under the thread header
  
  github-actions[bot]
  and
  claude
  committed
  b08374b
- feat(server): run consented local plugins in supervised child processes
  
  github-actions[bot]
  and
  claude
  committed
  20b745e
- fix(server): answer every plugin result with a message the server can read
  
  github-actions[bot]
  and
  claude
  committed
  c4da6af
- fix(server): drop what a plugin registered before its activation failed
  
  github-actions[bot]
  and
  claude
  committed
  a3ca98c
- fix(server): exit a plugin child on a corrupt IPC line and cover its failure paths
  
  github-actions[bot]
  and
  claude
  committed
  1829ea3
- fix(server): hold a plugin's partial IPC line in one growing buffer
  
  github-actions[bot]
  and
  claude
  committed
  c59bd7e
- fix(server): hold plugin calls made during startup until enabled plugins are restored
  
  github-actions[bot]
  and
  claude
  committed
  d563b47
- fix(server): count a plugin IPC line's newline against the read budget
  
  github-actions[bot]
  and
  claude
  committed
  5b1946f
- fix(server): restore enabled plugins before any management step at startup
  
  github-actions[bot]
  and
  claude
  committed
  d11ac2c
- fix(server): let calls waiting on a plugin start hear how it ended
  
  github-actions[bot]
  and
  claude
  committed
  9ffc0ea
- fix(server): refuse a plugin file swapped for a FIFO while digesting
  
  github-actions[bot]
  and
  claude
  committed
  7c900a8
- chore(server): say why plugin host modules import Node builtins
  
  github-actions[bot]
  and
  claude
  committed
  4122e0d
- fix(server): answer a plugin call cancelled before its handler started
  
  github-actions[bot]
  and
  claude
  committed
  04704fb
- test(server): start the cooperative handler before timing it out
  
  github-actions[bot]
  and
  claude
  committed
  7a956a0
- test(server): answer a replayed request only once its card is projected
  
  github-actions[bot]
  and
  claude
  committed
  14d57ad
- fix(server): close a dead plugin's stderr that a process it started holds
  
  github-actions[bot]
  and
  claude
  committed
  8c823b3
- feat(server): deliver finished runs to plugins from an acknowledged cursor
  
  github-actions[bot]
  and
  claude
  committed
  5da52d5
- refactor(server): build the plugin RPC handlers in their own layer
  
  github-actions[bot]
  and
  claude
  committed
  914b34e
- fix(server): let a run's queued checkpoint capture decide its finalization
  
  github-actions[bot]
  and
  claude
  committed
  1a02508
- fix(server): refuse the events capability without the proposed API opt-in
  
  github-actions[bot]
  and
  claude
  committed
  b82a25b
- fix(server): drop a plugin's event handlers when its activation fails
  
  github-actions[bot]
  and
  claude
  committed
  2e20f0a
- test(server): cover finalization of a run stopped through the ownership guard
  
  github-actions[bot]
  and
  claude
  committed
  6f11331
- fix(server): stop a cancelled setup's branch rename before forgetting its worktree
  
  github-actions[bot]
  and
  claude
  committed
  0e827f1
- feat(server): let agents list and call plugin tools through MCP
  
  github-actions[bot]
  and
  claude
  committed
  ff5dbc8
- feat(server): typed plugin settings, write-only secrets and plugin storage
  
  github-actions[bot]
  and
  claude
  committed
  f1844a2
- fix(server): list no plugins to MCP callers outside a T3 thread
  
  github-actions[bot]
  and
  claude
  committed
  ab90f2f
- docs(plugins): say plugins run under the server's account
  
  github-actions[bot]
  and
  claude
  committed
  428902e
- fix(server): drop a reused credential's reservation when its grant update is stopped
  
  github-actions[bot]
  and
  claude
  committed
  3c780d4
- fix(server): refresh open plugin settings when the declared fields change
  
  github-actions[bot]
  and
  claude
  committed
  5605a8b
- docs(plugins): say plugins run under the server's account
  
  github-actions[bot]
  and
  claude
  committed
  1561cf5
- fix(server): finish a plugin's host work before disable returns
  
  github-actions[bot]
  and
  claude
  committed
  a2a5171
- feat: offer plugin actions in the palette, slash menu and thread menus
  
  github-actions[bot]
  and
  claude
  committed
  15a8bcf
- fix(server): drop a reused credential's reservation when its reuse check crashes
  
  github-actions[bot]
  and
  claude
  committed
  1fcbcb2
- fix(server): wake host calls waiting on a plugin below the stream buffer
  
  github-actions[bot]
  and
  claude
  committed
  a4e2d88
- fix(contracts): keep a plugin action when only its placement is unknown
  
  github-actions[bot]
  and
  claude
  committed
  d7988f8
- fix: match plugin action names in the slash menu regardless of case
  
  github-actions[bot]
  and
  claude
  committed
  265b135
- docs(plugins): say the slash menu opens only at the start of a line
  
  github-actions[bot]
  and
  claude
  committed
  52be65f
- feat: show plugin views as isolated right-panel tabs on web and desktop
  
  github-actions[bot]
  and
  claude
  committed
  c5b6a68
- fix(web,mobile): offer plugin actions only to connections that can run them
  
  github-actions[bot]
  and
  claude
  committed
  3b4ca09
- fix: keep plugin view rate limits and navigation logs safe
  
  github-actions[bot]
  and
  claude
  committed
  4b74d88
- test(web): stub plugin actions in the thread action menu hook test
  
  github-actions[bot]
  and
  claude
  committed
  5cd5113
- fix(server): refuse the views capability without the proposed API opt-in
  
  github-actions[bot]
  and
  claude
  committed
  2fa3277
- fix(web,mobile): check the live permission when a plugin action runs
  
  github-actions[bot]
  and
  claude
  committed
  545cbfe
- fix(web): keep the side-panel plugin view list stable across renders
  
  github-actions[bot]
  and
  claude
  committed
  667d8f4
- docs(plugins): say plugins run under the server's account
  
  github-actions[bot]
  and
  claude
  committed
  7de52de
- fix(server): type WebSocket handlers against the uninstrumented RPC group
  
  github-actions[bot]
  and
  claude
  committed
  950642c
- fix(mobile): offer environment plugin actions in the palette without an open thread
  
  github-actions[bot]
  and
  claude
  committed
  e982989
- fix(server): serve plugin view files whose names start with two dots
  
  github-actions[bot]
  and
  claude
  committed
  97acb8c
- test(web): pass the active project to the plugin actions composer fixture
  
  github-actions[bot]
  and
  claude
  committed
  4c6cd43
- feat(server): install plugins from npm with integrity checks and staged updates
  
  github-actions[bot]
  and
  claude
  committed
  d42fae0
- fix(server): accept plain http npm registries only on this machine
  
  github-actions[bot]
  and
  claude
  committed
  dc7d7b1
- fix(server): hold npm registry redirects and saved registries to the https rule
  
  github-actions[bot]
  and
  claude
  committed
  beb9d20
- fix(server): read npm tarball headers the way tar writers mean them
  
  github-actions[bot]
  and
  claude
  committed
  846d385
- fix(server): list a staged npm update's tools, settings, and actions
  
  github-actions[bot]
  and
  claude
  committed
  095c1cf
- fix(server): size the npm unpack cap by archive entries, not files
  
  github-actions[bot]
  and
  claude
  committed
  9b0aab8
- fix(server): refuse a pax record that does not end in a newline
  
  github-actions[bot]
  and
  claude
  committed
  22014bc
- refactor(server): follow the Effect service rules in npm plugin installs
  
  github-actions[bot]
  and
  claude
  committed
  232bcca
- fix(server): size a GNU long name by its own header in npm tarballs
  
  github-actions[bot]
  and
  claude
  committed
  9a29542
- fix(server): refuse npm tarball paths with a NUL byte
  
  github-actions[bot]
  and
  claude
  committed
  574e4ca
- feat(web,mobile): manage plugins in Settings
  
  github-actions[bot]
  and
  claude
  committed
  b09b51b
- fix(server): report an applied npm update whose plugin could not be enabled again
  
  github-actions[bot]
  and
  claude
  committed
  1308f78
- docs(plugins): say plugins run under the server's account
  
  github-actions[bot]
  and
  claude
  committed
  ab5a245
- fix(server): serve only plugin view bytes the approval digest covered
  
  github-actions[bot]
  and
  claude
  committed
  8995989
- fix(server): refuse an npm update to the files already installed
  
  github-actions[bot]
  and
  claude
  committed
  65966f6
- fix(mobile): ask to select an environment when none is selected for plugins
  
  github-actions[bot]
  and
  claude
  committed
  9f62660
- feat(web,mobile): fill in plugin settings from Settings
  
  github-actions[bot]
  and
  claude
  committed
  61a2196
- feat(web,mobile): install and update plugins from npm in Settings
  
  github-actions[bot]
  and
  claude
  committed
  a0ebe84
- fix(client-runtime): show a downloaded same-version plugin update in the list
  
  github-actions[bot]
  and
  claude
  committed
  2bbd01c
Commits on Oct 17, 2026
- merge: adapt panel host to current chat surface renderer
  saphid
  committed
  31ca0af
- merge: preserve device and terminal panels on current chat renderer
  saphid
  committed
  090f510
- merge: integrate registered Files and pull request panels with main
  saphid
  committed
  1986ba1
- merge: preserve Pi contribution statuses and scoped Files actions
  saphid
  committed
  461ef0b
- Merge remote-tracking branch 'upstream/main' into resolve-16045
  saphid
  committed
  06c8449
- merge: retain mobile provider status strip on current thread screen
  saphid
  committed
  8afc8ce
- merge: reconcile plugin host stack with main
  saphid
  committed
  d5c6b3b
- merge: reconcile plugin events stack with main
  saphid
  committed
  63ef2f6
- merge: reconcile plugin tools stack with main
  saphid
  committed
  fb82997
- merge: reconcile plugin settings stack with main
  saphid
  committed
  a9a535d
- merge: reconcile plugin actions stack with main
  saphid
  committed
  4049942
- merge: reconcile plugin views stack with main
  saphid
  committed
  fe8f345
- merge: reconcile npm plugin stack with main
  saphid
  committed
  d5f51d9
- merge: reconcile plugin management UI with main
  saphid
  committed
  3c1fd73
- merge: reconcile plugin settings forms with main
  saphid
  committed
  c677c22
- merge: reconcile npm plugin UI with main
  saphid
  committed
  83d83ca
Commits on Oct 18, 2026
- fix(plugins): repair inherited imports, forms, and panel tests
  github-actions[bot]
  committed
  835ae94

Commits

Commits on Oct 11, 2026

Commits on Oct 12, 2026

Commits on Oct 17, 2026

Commits on Oct 18, 2026