feat(web): add Plugin Composer -- visual drag-and-drop plugin builder - #413

Open

ChuckBuilds wants to merge 16 commits into

mainfrom

feat/plugin-composer

Commits on Jul 14, 2026

feat(web): add Plugin Composer -- visual drag-and-drop plugin builder

ChuckBuilds
and
claude
committed
e319540
fix: address Codacy findings in the Composer blueprint

ChuckBuilds
and
claude
committed
47e3021
fix(security): validate plugin_id before path construction in /api/install

ChuckBuilds
and
claude
committed
cd7e16e

Commits on Aug 21, 2026

fix(composer): resolve plugin paths at the filesystem boundary

ChuckBuilds
and
claude
committed
e499efb
fix(composer): recognisable path containment, and define md:inline

ChuckBuilds
and
claude
committed
79ba93f
fix(composer): sanitise the id with the form CodeQL recognises

ChuckBuilds
and
claude
committed
5929190
fix(composer): build the font path from the allowlist entry

ChuckBuilds
and
claude
committed
5133643
fix(composer): stop payload text reaching generated Python as code

ChuckBuilds
and
claude
committed
e450a6d
fix(composer): reject config keys that shadow plugin state

ChuckBuilds
and
claude
committed
986f74e

Commits on Aug 22, 2026

fix(composer): eight editor bugs from review

ChuckBuilds
and
claude
committed
f0bef77
Merge main into feat/plugin-composer, and fix three review findings

ChuckBuilds
and
claude
committed
d42593e
fix(composer): an element the template cannot draw broke generation

ChuckBuilds
and
claude
committed
732c7d1
fix(composer): clamp width/height before they reach generated source

ChuckBuilds
and
claude
committed
1a0864e
fix(composer): scale strokes, anchor lines, snapshot state changes

ChuckBuilds
and
claude
committed
acc55ef
fix(composer): coerce prefixed colour channels, non-finite numbers, marquee ids

ChuckBuilds
and
claude
committed
37fc1b5
fix(composer): point the align toolbar at the anchor-clearing path

ChuckBuilds
and
claude
committed
2f42d17