Commit Graph
3 Commits
Author SHA1 Message Date
Dylan M. Taylor 4cd7313ca2 address review: give plugins a fixed message for library failures 2026-11-04 00:20:16 +00:00
Dylan M. Taylor 02db900cc8 fix(engine): keep plugins out of branches, saved versions and library links
A read-only plugin could archive, merge, create or update a branch: branch
state lives beside the document, so neither the command's history flag nor
the document Arc check saw the write. Any plugin could read a saved version
through dev.compare's version parameter although version.* is denied, and
library.list handed plugins each library's path, which for a server library
is the share link with its token.
2026-11-03 15:46:13 +00:00
BFlat b2885452fb M8: doc.list gives AI agents and plugins file names, not paths (#1117) (#1620) 2026-10-30 12:14:34 +07:00