Andrey Antukh 7b73fb9b30 🐛 Add dedicated RPC methods for plugin registry operations ...

Add `add-profile-plugin` and `remove-profile-plugin` RPC methods for
atomic plugin registry operations, preventing manipulation via the
broader `update-profile-props` endpoint.

- Close the `:plugins` field in `update-profile-props` schema to
  eliminate the mass assignment attack vector for plugin data.
- Define `valid-permissions` and a closed `schema:permissions` enum to
  restrict plugin permissions to known values.
- Migrate the frontend to use the new granular RPC methods with
  optimistic updates and rollback on failure.
- Add comprehensive backend tests covering valid/invalid permissions,
  updates, removal, and rejection via old endpoint.

AI-assisted-by: qwen3.7-plus

2026-07-30 10:57:49 +02:00

..

dev

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

scripts

📎 Update common test script to match package.json changes

2026-07-20 07:42:27 +00:00

src/app/common

🐛 Add dedicated RPC methods for plugin registry operations

2026-07-30 10:57:49 +02:00

target/classes/app/common

…

test

🐛 Fix text content repair and remove blast-radius containment (#10731)

2026-07-28 11:00:53 +02:00

build.clj

…

deps.edn

⬆️ Update dependencies

2026-06-30 16:15:30 +02:00

package.json

🐛 Fix issues with ci script

2026-07-28 13:08:29 +02:00

pnpm-lock.yaml

⬆️ Update dependencies

2026-06-30 16:15:30 +02:00

pnpm-workspace.yaml

⬆️ Update backend and common dependencies (#10108)

2026-06-11 10:11:23 +02:00

shadow-cljs.edn

🐛 Fix nodejs incompatibility with common tests prepend script (#5730)

2025-01-30 14:32:43 +01:00

tests.edn

✨ Add improvements to AGENTS.md (#8586)

2026-03-11 15:24:40 +01:00