3 commits

Author	SHA1	Message	Date
Snider	19e3fd3af7	fix(coredeno): harden security and fix review issues ... - Path traversal: CheckPath now requires separator after prefix match - Store namespace: block reserved '_' prefixed groups - StoreGet: distinguish ErrNotFound from real DB errors via sentinel - Store: add rows.Err() checks in GetAll and Render - gRPC leak: cleanupGRPC on all early-return error paths in OnStartup - DenoClient: fix fmt.Sprint(nil) → type assertions - Socket permissions: 0700 dirs, 0600 sockets (owner-only) - Marketplace: persist SignKey, re-verify manifest on Update - io/local: resolve symlinks in New() (macOS /var → /private/var) - Tests: fix sun_path length overflow on macOS Co-Authored-By: Virgil <virgil@lethean.io>	2026-02-19 14:39:56 +00:00
Claude	9899398153	feat(coredeno): Tier 4 marketplace install pipeline — clone, verify, register, auto-load ... Wire the marketplace to actually install modules from Git repos, verify manifest signatures, track installations in the store, and auto-load them as Workers at startup. A module goes from marketplace entry to running Worker with Install() + LoadModule(). - Add Store.GetAll() for group-scoped key listing - Create marketplace.Installer with Install/Remove/Update/Installed - Export manifest.MarshalYAML for test fixtures - Wire installer into Service with auto-load on startup (step 8) - Expose Service.Installer() accessor - Full integration test: install → load → verify store write → unload → remove Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-18 08:04:13 +00:00
Claude	262f0eb5d5	feat(store): group-namespaced key-value store with template rendering ... SQLite-backed KV store with get/set/delete/count/deleteGroup/render. Extracted from dAppServer object store pattern. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-17 21:02:37 +00:00