Add the public extension surface and platform services #41

Merged

weichen merged 2 commits from feature/base-extension-roadmap into main

2026-10-01 10:47:13 +00:00

Author	SHA1	Message	Date
weichen	88f8a476f0	Merge remote-tracking branch 'origin/main' into feature/base-extension-roadmap	2026-10-01 10:36:01 +00:00
weichenandCursor	cd5b82186d	Add the public extension surface and platform services Why: Downstream products must extend the base through a public package and host API instead of editing internal code. Evidence: go test ./... passed, including plugin v2 assets, sidecar startup, migration v13, pending confirms, HITL timeout, hash embedder, command pairs, and the extension surface snapshot. Impact: apiVersion 2.0-experimental rejects empty network allowlists for declarative HTTP. Hash embeddings stay opt-in via models.embedding.provider=hash. Plugin secrets resolve per owner at execution time. Refs: docs/proposals/2026-10-01-plugin-contract-v2.md Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-01 10:35:02 +00:00

Author

SHA1

Message

Date

weichen

88f8a476f0

Merge remote-tracking branch 'origin/main' into feature/base-extension-roadmap

2026-10-01 10:36:01 +00:00

weichenandCursor

cd5b82186d

Add the public extension surface and platform services

Why: Downstream products must extend the base through a public package and host API instead of editing internal code.
Evidence: go test ./... passed, including plugin v2 assets, sidecar startup, migration v13, pending confirms, HITL timeout, hash embedder, command pairs, and the extension surface snapshot.
Impact: apiVersion 2.0-experimental rejects empty network allowlists for declarative HTTP. Hash embeddings stay opt-in via models.embedding.provider=hash. Plugin secrets resolve per owner at execution time.
Refs: docs/proposals/2026-10-01-plugin-contract-v2.md
Co-authored-by: Cursor <cursoragent@cursor.com>

2026-10-01 10:35:02 +00:00