Kaspre
fd2a9adbe6
fix(ollama): bypass managed proxy for loopback embeddings ( #85707 )
...
* fix(ollama): bypass proxy for local embeddings
* fix(ollama): keep managed proxy bypass loopback-only
* fix(ollama): keep proxy bypass internal
* fix(ollama): keep proxy bypass private
* fix(ollama): harden internal proxy bypass
* chore(plugin-sdk): refresh api baseline
* fix(ollama): keep internal bypass out of qa aliases
* test(ollama): keep ssrf runtime mock complete
* fix(ollama): keep dist sdk aliases public-only
* fix(ollama): keep fetch bypass out of infra runtime
* fix(ollama): preserve packaged private sdk alias
* test(ollama): harden private ssrf alias coverage
* test(ollama): cover private ssrf resolver edges
* fix(ollama): scope private sdk native aliases
* test(ollama): audit blocked loopback bypasses
* fix(plugins): keep staged sdk aliases public-only
* test(ollama): harden proxy bypass proof
* test(ollama): cover origin mismatch proxy path
* test(ollama): cover ipv6 and batch bypass paths
* fix lint findings in Ollama proxy tests
* refactor: tighten Ollama proxy bypass
* fix: widen private sdk owner registry type
* test: stabilize Ollama proxy PR checks
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-05-23 21:17:55 +01:00
Peter Steinberger
ed8f50f240
refactor: simplify plugin dependency handling
...
Simplify plugin installation and runtime loading around package-manager-owned dependencies, with Jiti reserved for local/TS fallback paths.
Also scans npm plugin install roots so hoisted transitive dependencies are covered by dependency denylist and node_modules symlink checks.
2026-05-01 21:32:22 +01:00
Vincent Koc
443b837bd5
fix(build): harden bundled plugin runtime staging
...
Copy bundled plugin skill trees into dist-runtime, broaden Windows symlink-copy fallbacks, and harden runtime-deps fingerprinting.
2026-04-25 04:27:17 -07:00
Peter Steinberger
a2512f0243
fix: load staged dist-runtime plugins in docker
2026-04-22 18:22:39 +01:00
Peter Steinberger
4862d34925
fix: package plugin SDK alias wrappers
2026-04-19 03:01:25 +01:00
Gustavo Madeira Santana
110f8bd2e1
fix(plugins): resolve checkout plugin sdk imports
2026-04-17 23:04:11 -04:00
Sliverp
1bbe66450e
fix: copy SKILL.md as hard copy in dist-runtime to prevent realpath security check failure ( #64166 )
...
SKILL.md files were created as symlinks pointing to dist/, causing
realpathSync() in resolveContainedSkillPath to resolve outside the
dist-runtime/ directory. The security check then rejected the path,
resulting in all 23 plugin skills being skipped at load time.
Add SKILL.md to the shouldCopyRuntimeFile whitelist so it gets a hard
copy instead of a symlink, matching the existing behavior for
package.json and plugin.json files.
Fixes #64138
2026-04-10 15:41:28 +08:00
Peter Steinberger
4f5c137f88
fix: unblock windows update build
2026-04-08 07:18:31 +01:00
Vincent Koc
fd5555d5be
fix(runtime): make dist-runtime staging idempotent
2026-03-22 22:41:27 -07:00
Peter Steinberger
d7018aaf19
refactor: move bundled extension deps to plugin packages
2026-03-19 00:04:50 +00:00
Peter Steinberger
6e044ace28
fix: keep bundled runtime deps out of release pack
2026-03-18 23:18:36 +00:00
Peter Steinberger
c0c3c4824d
fix: checkpoint gate fixes before rebase
2026-03-18 15:36:18 +00:00
Muhammed Mukhthar CM
dc20a7cd89
Build: fix bundled plugin runtime symlinks
2026-03-18 05:42:51 +00:00
Val Alexander
5f89897df1
plugins: dist node_modules symlink + config raw-toggle UI fix ( #49490 )
...
* plugins: symlink node_modules into dist plugin dir for bare-specifier resolution
* UI: fix config raw-toggle button sizing and semantic markup
* Update scripts/stage-bundled-plugin-runtime.mjs
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
* Update ui/src/styles/config.css
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
* fix: hoist dist node_modules cleanup before existsSync guard; drop !important from config toggle
---------
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
2026-03-18 00:20:14 -05:00
Harold Hunt
94c27f34a1
fix(plugins): keep built plugin loading on one module graph ( #48595 )
2026-03-16 20:58:58 -04:00
Gustavo Madeira Santana
09df232f39
Plugins: stage local bundled runtime tree
2026-03-16 16:43:47 +00:00
