iamtoruk 5fe757b25a fix(plugins): codepoint-ordered signature canonicalization; sign fails loudly on unreadable files ... localeCompare is locale/ICU dependent and fed the signed digest, so a plugin signed on one machine could false-reject on another (live even in ASCII: README.md vs codeburn-plugin.json order flips between locale-aware and codepoint comparison). All four sort sites now use plain codepoint order, commented as a canonicalization requirement. The sign script now throws on unreadable files instead of signing an incomplete list; the loader keeps skipping (its omission causes a digest mismatch and rejection, the fail-closed direction). New test drives the real sign script over a tree with mixed-case and non-ASCII names, so test and production canonicalization cannot diverge again.		2026-08-28 05:52:36 -07:00
..
upgrade-path	merge(main): rematch #1118 after #1116/#1122 — daily cache v29	2026-08-23 21:18:07 +05:30
bundle-litellm.mjs	fix(models): price gpt-5.6-codex and gpt-5.6-codex-max	2026-08-21 14:53:00 -07:00
sign-plugin.mjs	fix(plugins): codepoint-ordered signature canonicalization; sign fails loudly on unreadable files	2026-08-28 05:52:36 -07:00
smoke-plugin-socket.mjs	feat(plugins): ed25519 release-key verification and plugin add/remove (9b)	2026-08-28 00:30:43 -07:00