wizardchen 591e4d591b feat(plugin): signed packages and trust levels ...

A package can carry plugin.sig: an ed25519 signature over the digest of its
files. Keys listed in WEKNORA_PLUGIN_TRUSTED_KEYS make a package official or
verified; unsigned packages and unknown keys are community. A signature
that does not hold is refused. WEKNORA_PLUGIN_MIN_TRUST (default community)
gates install, version switches and loading on every node.

pluginsdk gains pluginsign and the weknora-plugin keygen/sign/verify
command. The install review and version list show the trust level.

2026-09-26 15:17:35 +08:00

..

weknora-plugin

feat(plugin): signed packages and trust levels

2026-09-26 15:17:35 +08:00

weknora-plugin-conformance

feat(pluginsdk): extension protocol v1, Go SDK and conformance suite

2026-09-25 22:26:29 +08:00