Repository navigation

[audit] Harden plugin route patterns, i18n keys, and container user - #500

Closed

BillyOutlast wants to merge 256 commits into

Drop-OSS:developfrom

Heretek-Games:fix/semgrep-core-findings

Closed

[audit] Harden plugin route patterns, i18n keys, and container user#500
BillyOutlast wants to merge 256 commits into
Drop-OSS:developfrom
Heretek-Games:fix/semgrep-core-findings

This pull request is big! We're only showing the most recent 250 commits

Commits on Aug 26, 2026
- fix(security): resolve residual CodeQL alerts
  
  John Smith
  and
  claude
  committed
  50c0ca8
- fix(security): strip residual '<' after entity decoding in Steam metadata
  
  John Smith
  and
  claude
  committed
  d85c666
- fix(security): make Steam HTML sanitizer unable to emit angle brackets
  
  John Smith
  and
  claude
  committed
  f0dfdaf
- fix(ci): resolve lint errors and Security workflow failures
  
  John Smith
  and
  claude
  committed
  6f05ddc
- fix(security): remove angle brackets by character instead of tag matching
  
  John Smith
  and
  claude
  committed
  73e51d5
- chore(deps): bump the cargo group across 1 directory with 2 updates (#3)
  dependabot[bot]
  authored
  754932c
Commits on Aug 28, 2026
- Remediate all 680 SonarCloud issues for Heretek-AI_drop2 (#5)
  
  BillyOutlast
  and
  John Smith
  authored
  342d15b
Commits on Sep 13, 2026
- Merge upstream Drop-OSS/drop develop into fork
  John Smith
  committed
  c20e1d1
- chore: reconcile GitHub Actions SHA pinning, knip CI job, and Prisma Dockerfile alignment
  John Smith
  committed
  91f25da
- fix(toolchain): specify ./core/... module path for golangci-lint in pre-push hook
  John Smith
  committed
  dfe6d04
- feat(desktop): fix 4K scaling bug, add WinGet/Flatpak distribution, and introduce LaunchInterceptor
  John Smith
  committed
  6f912c9
- feat(plugins): implement Server Plugin SPI, Drop GSE room coordinator, and desktop multiplayer integration
  John Smith
  committed
  af65632
- feat(plugins): implement dynamic plugin discovery, state persistence, capability sandboxing, and Settings UI
  John Smith
  committed
  58ed891
- fix(ci): correct job dependency and environment context in client-release workflow
  John Smith
  committed
  b076e12
- docs: add GEMINI.md developer and AI agent architecture guide
  John Smith
  committed
  99b6462
- feat(library): add automated game distribution pipeline and recipe engine
  John Smith
  committed
  b05808f
- fix(ci): ensure REGISTRY_IMAGE is lowercase in server-release workflow
  John Smith
  committed
  da21865
- feat(desktop): add native pipeline runner and setup progress UI
  John Smith
  committed
  bcff6ed
- feat(server): add bulk auto-import discovery and admin review UI
  John Smith
  committed
  8f1514b
- feat(torrential): add opt-in content-addressed chunk cache
  John Smith
  committed
  d670c50
- docs: add canonical AGENTS.md and align CLAUDE.md/GEMINI.md
  John Smith
  committed
  252aed2
- fix(cli): migrate to opendal 0.58 API and remove dead code
  John Smith
  committed
  ad74f03
- fix(torrential): repair and slim the chunk-cache benchmark
  John Smith
  committed
  ec09e55
- refactor(server): remove dead code and unused dependencies
  John Smith
  committed
  77f7ca6
- fix(desktop): resolve GameStatus type errors and nuxt config typing
  John Smith
  committed
  cb56fe5
- chore(rust): clear clippy warnings in droplet, libarchive, native_model
  John Smith
  committed
  fb688ec
- build(torrential): generate protobuf into OUT_DIR and exclude it from lints
  John Smith
  committed
  d6163d7
- fix(torrential): harden chunk serving, cache fallback, and RPC handling
  John Smith
  committed
  7d8d4e5
- chore(security): add cargo-deny policy and CI, run torrential clippy in CI
  John Smith
  committed
  f4a31a8
- Merge pull request #2 from Heretek-Games/torrential/static-analysis-remediation
  BillyOutlast
  authored
  57d8587
- chore(deps): drop stale client Cargo.lock
  John Smith
  committed
  0a0f8a9
- chore(deps): refresh pnpm overrides for vulnerable transitive deps
  John Smith
  committed
  50f7bf5
- fix(desktop): stop logging sensitive cert and save paths
  John Smith
  committed
  5adff09
- fix(desktop): enable uuid v4 feature for cloud_saves
  John Smith
  committed
  21f82df
- fix(deps): constrain brace-expansion override to 1.x
  John Smith
  committed
  6ce2972
- feat(plugins): testable manager, server test runner, frozen A<->B contract
  John Smith
  committed
  a8b96a4
- feat(plugins): versioned contract, fail-closed capabilities, storage migrations
  John Smith
  committed
  46a9f77
- feat(gse): add gse-engine crate and engine-backed launch interceptor
  John Smith
  committed
  9590d4b
- feat(gse): opt-in launch interceptor and startup crash recovery
  John Smith
  committed
  b5f517e
- feat(gse): durable room store, mesh backends, ZeroTier provisioning
  John Smith
  committed
  3c8e11f
- feat(gse): mesh address assignment, Tailscale backend, client credential flow
  John Smith
  committed
  85fb8de
- feat(plugins): bundle integrity verification and hello-world reference plugin
  John Smith
  committed
  bd08be7
- feat(plugins): bundle signing tool, sample bundle, and ABI decision (M5/P6)
  John Smith
  committed
  9b6c787
- feat(gse): ZeroTier member authorization and network teardown (M3 B4)
  John Smith
  committed
  a21ff97
- feat(gse): AppID pinning, compatibility registry, and consent UI (M2 A9/A10)
  John Smith
  committed
  b83a01f
- feat(plugins): WebSocket plugin API and credential rotation (B3, P2 websocket)
  John Smith
  committed
  db2fe2d
- feat(gse): live WebSocket room updates in the client (M4 B8)
  John Smith
  committed
  a60758d
- feat(plugins): install/remove bundles, admin docs, license review (M5)
  John Smith
  committed
  7d2d3fd
- feat(gse): transport-agnostic release fetch in the engine (A6)
  John Smith
  committed
  f1413c0
- feat(gse): apply staged emulator payload in the interceptor (M1 A2)
  John Smith
  committed
  d6a78e5
- feat(plugins): registry allow-list and version pinning (M5)
  John Smith
  committed
  47d30b3
- docs(gse): refresh implementation status summary
  John Smith
  committed
  cc3ed6c
- feat(desktop): install/remove plugin bundles from Settings (M5)
  John Smith
  committed
  af0eb58
- feat(gse): client mesh-readiness validator (M3 B6)
  John Smith
  committed
  f1e65a7
- feat(gse): runtime emulator release download (M1 A6)
  John Smith
  committed
  de4de3f
- feat(gse): Tailscale API provisioner and backend selection (M4 B5)
  John Smith
  committed
  4ccb106
- feat(gse): durable Prisma-backed room persistence (M3 B2)
  John Smith
  committed
  ac0bd6a
- feat(gse): authenticated WebSocket credential distribution (M3 B3)
  John Smith
  committed
  57991ac
- test(gse): Prisma room-store integration check + verified against Postgres
  John Smith
  committed
  96e05d4
- feat(gse): ZTNET controller backend as the default mesh path (M3 B4)
  John Smith
  committed
  3af2fbd
- feat(gse): ZTNET compose overlay and integration check
  John Smith
  committed
  6056724
- feat(gse): client ZeroTier join/leave and ZTNET docs (M3 B6)
  John Smith
  committed
  1467793
- fix(gse): deterministic ZTNET member addresses + E2E bootstrap
  John Smith
  committed
  72417f8
- ci: add ZTNET controller E2E job
  John Smith
  committed
  268348a
- docs: cover drop-gse multiplayer and ZTNET
  John Smith
  committed
  a6be51e
- fix(gse): authorize ZeroTier members end-to-end
  John Smith
  committed
  eeaf891
- fix(gse): make mesh authorization restart-safe
  John Smith
  committed
  0879229
- fix(gse): report the server mesh backend and drop the inert selector
  John Smith
  committed
  d219c59
- fix(gse): pin release origin and honor the room emulator flavor
  John Smith
  committed
  d952667
- fix(gse): harden backend selection, room store and discovery
  John Smith
  committed
  2eebb4d
- fix(gse): validate persisted payloads, expose self address, add route e2e
  John Smith
  committed
  6985c08
- fix(plugins): authenticate desktop JWTs on plugin routes and websocket
  John Smith
  committed
  22b4c02
- fix(library): embed pipeline recipes in string droplet manifests
  John Smith
  committed
  72ba18e
- fix(desktop): materialize generated setup scripts before legacy fallback
  John Smith
  committed
  760e5a3
- ci(gse): run the ZTNET E2E check from the server workspace
  John Smith
  committed
  0d51973
- fix(gse): validate room input, redact leave broadcasts, encode mesh URLs
  John Smith
  committed
  3acf4b7
- fix(plugins): fail-closed capabilities, safe bundle paths, cached-code invalidation
  John Smith
  committed
  32cc0d8
- fix(import): make bulk import idempotent and stop fabricating launch targets
  John Smith
  committed
  eff9645
- fix(torrential): validate cache keys and verify chunks before caching
  John Smith
  committed
  4052d9d
- fix(plugins): require auth for sensitive WS subscriptions and bound peer state
  John Smith
  committed
  9b8bb7f
- fix(gse): never record patched bytes as the original binary
  John Smith
  committed
  f63b3ac
- fix(desktop): confine recipe paths and escape cleanup globs
  John Smith
  committed
  7b946eb
- fix(gse): restore nested targets and clear the room marker on crash recovery
  John Smith
  committed
  d4b8147
- fix(plugins): require apiVersion and authenticate the plugin inventory
  John Smith
  committed
  1d2e195
- fix(ci): restore job-scoped WINGET_TOKEN env
  John Smith
  committed
  3118de6
- fix(torrential): bound in-flight cache fills by the configured budget
  John Smith
  committed
  f911d37
- fix(desktop): make pipeline cancellation responsive
  John Smith
  committed
  75aa82a
- docs: document cache defaults/verification, refresh GSE status, dedupe overrides
  John Smith
  committed
  8f20019
- fix(gse): preserve pre-existing emulator config across launches
  John Smith
  committed
  1c7b9d6
- fix(security): harden session cookies and reject cross-site plugin sockets
  John Smith
  committed
  ec2fd3b
- docs: align AGENTS.md with the hardened plugin, pipeline and cache contracts
  John Smith
  committed
  458bce5
- fix(security): support forwarded-host in plugin sockets and scope session cookie deletion
  John Smith
  committed
  4f30220
- chore(desktop): disable nuxt telemetry in desktop main
  John Smith
  committed
  9293395
- feat(flatpak): add dual-track FlatPark publishing for stable and alpha channels
  John Smith
  committed
  33fbc34
- chore(flatpak): pin live alpha build 0.4.0-alpha.1.33fbc34 and allow non-blocking webhook during onboarding
  John Smith
  committed
  4bcd560
- feat(server): add generic Podman Quadlet deployment template
  John Smith
  committed
  af06c80
- fix(server): eliminate file descriptor double-close and stream leaks in object storage
  John Smith
  committed
  71f877f
- fix(server): repair age-rating migration drift
  John Smith
  committed
  7adf9c5
- fix(ci): read server version from server/package.json
  John Smith
  committed
  d4aec4c
- fix(server): correct community page title
  John Smith
  committed
  0e37f5b
- fix(torrential): apply rustfmt to cache benchmark
  John Smith
  committed
  36407e2
- fix(ci): least-privilege permissions and optional macOS signing
  John Smith
  committed
  b5893b3
- chore(knip): reduce false positives and cover desktop/main
  John Smith
  committed
  f61b698
- chore: remove unreferenced dead code
  John Smith
  committed
  9e5f550
- chore(deps): remove unused deps and declare @vueuse/core
  John Smith
  committed
  589cb1f
- chore(ci): add report-only static-analysis workflow
  John Smith
  committed
  f3ca789
- fix(server): handle object manifests and await signout
  John Smith
  committed
  1833c67
- chore(ci): add cargo-machete report-only job
  John Smith
  committed
  803c8ba
- chore(ci): pin analysis tools and bump Go to 1.26.6
  John Smith
  committed
  2d34bc0
- fix(ci): resolve actionlint and zizmor findings
  John Smith
  committed
  e701458
- chore(deps): remove unused Rust dependencies
  John Smith
  committed
  b0c4a4f
- fix(scripts): resolve shellcheck and hadolint findings
  John Smith
  committed
  9f65cee
- fix(ci): avoid unpinned-install Sonar findings
  John Smith
  committed
  6a8dba2
- Merge pull request #3 from Heretek-Games/fix/age-rating-migration-drift
  BillyOutlast
  authored
  4d0c75a
- Merge pull request #5 from Heretek-Games/chore/static-analysis-cleanup
  BillyOutlast
  authored
  18fc99e
- fix(desktop): confine GSE/pipeline writes and gate cleanup
  John Smith
  committed
  05585ab
- fix(torrential): authenticate RPC, evict responses, bound cache
  John Smith
  committed
  ddf68bc
- fix(server): harden drop-gse room membership and lifecycle
  John Smith
  committed
  79d91d1
- fix(server): authenticate plugin WS and verify whole bundles
  John Smith
  committed
  d840a34
- fix(server): correct bulk-import counting and discovery edges
  John Smith
  committed
  f3233d5
- fix(server): stop logging the setup token in cleartext
  John Smith
  committed
  df945c6
- fix(server): resolve SonarCloud findings on PR #16
  John Smith
  committed
  4bab38c
- fix(server): clear remaining SonarCloud findings in sign-plugin
  John Smith
  committed
  26eb188
- fix(server): place NOSONAR on the readdir sink line
  John Smith
  committed
  2699f09
- Merge pull request #16 from Heretek-Games/fix/fork-review-remediation
  BillyOutlast
  authored
  078221f
- ci: pin actions, lock dependency installs and enforce HTTPS downloads
  John Smith
  committed
  56ef579
- fix: resolve remaining SonarCloud security, bug and complexity findings
  John Smith
  committed
  487d216
- fix: clear SonarCloud style backlog across server and client
  John Smith
  committed
  d6be999
- fix: clear final SonarCloud findings
  John Smith
  committed
  c02399a
- fix: clear last SonarCloud findings
  John Smith
  committed
  aa636cc
- fix(server): widen WebSocketPeer request type to match crossws UpgradeRequest
  John Smith
  committed
  db9cce4
- chore: add mise toolchain, commitlint, ruff and hardened git hooks
  John Smith
  committed
  1c3695e
- refactor(server): add Sonar-equivalent eslint rules and fix findings
  John Smith
  committed
  a0311df
- chore: extend eslint coverage to every workspace
  John Smith
  committed
  6b58dfd
- chore: add agent quality integrations and CI lint jobs
  John Smith
  committed
  356a4cb
- chore: install rustfmt and clippy with the pinned rust toolchain
  John Smith
  committed
  a9eeca9
- fix(quality): address review findings on the tooling overhaul
  John Smith
  committed
  9af1a38
- fix(ci): pass base ref via env to avoid template injection
  John Smith
  committed
  4224bca
- Merge pull request #54 from Heretek-Games/chore/quality-tooling
  BillyOutlast
  authored
  1fbcec0
- docs: link sister repositories and clarify multi-repo workspace boundaries
  John Smith
  committed
  5e8de2c
- refactor: decouple GSE and ZeroTier subsystems
  John Smith
  committed
  94bbdc4
- chore: merge feat/decouple-gse-zerotier into develop
  John Smith
  committed
  f362b17
- feat(plugins): implement client runtime, play actions, and launch pipeline
  John Smith
  committed
  500548b
- chore(ci): remove obsolete ztnet e2e workflow
  John Smith
  committed
  5c6ed2f
Commits on Sep 14, 2026
- feat(plugins): support multi-file bundle and .dropplugin archive install
  John Smith
  committed
  398eb65
- test(droplet): assert UTF-8 BOM survives manifest generation
  John Smith
  committed
  00931c8
- feat(process): run admin setup installers in order after the base recipe
  John Smith
  committed
  9a847bb
- feat: game uninstallers, HTML launches, and launch diagnostics
  John Smith
  committed
  3001341
- chore: merge develop into feat/issue6-launch-gaps
  John Smith
  committed
  8ec1de4
- feat(plugins): add capability review modal before bundle install
  John Smith
  committed
  05bf69c
- feat(plugins): support remote registry url, install-by-url, and update checks
  John Smith
  committed
  eba6c86
- Merge pull request #60 from Heretek-Games/feat/issue6-launch-gaps
  BillyOutlast
  authored
  0c05871
- feat(plugins): add client serverRequest proxy and generic extension prompt
  John Smith
  committed
  15d708f
- feat(dist): add Ubuntu PPA + Fedora COPR publishing
  John Smith
  committed
  4f33488
- docs(dist): use droposs Launchpad and heretek-ai COPR namespaces
  John Smith
  committed
  eb19e6d
- feat(plugins): add client system:command native command capability
  John Smith
  committed
  4ac9637
- refactor(dist): publish PPA via yuezk/publish-ppa-package
  John Smith
  committed
  bb561ea
- refactor(deploy): stop bundling ZTNET; delegate mesh to the drop-zerotier plugin
  John Smith
  committed
  d95ac55
- feat(plugins): fail closed on system:command without a commands allowlist
  John Smith
  committed
  aeff582
- fix(dist): extract drop-app from Tauri deb without leading ./
  John Smith
  committed
  bdde5f1
- Merge pull request #61 from Heretek-Games/fix/dist-deb-binary-extraction
  BillyOutlast
  authored
  dd9331b
- fix: address SonarCloud findings (dist scripts, plugins)
  John Smith
  committed
  ff3871b
- fix(plugins): isolate plugin storage from bundle directory and harden Tauri native command registry
  John Smith
  committed
  e8a6464
- feat(plugins): dynamic public websocket channels, web admin UI, and upstream compatibility tests
  John Smith
  committed
  1aaa2f0
- feat(plugins): implement MetadataProvider and PaymentGateway SPI extensions and publish boundary plan
  John Smith
  committed
  795f61c
- fix(plugins): add collision guards, input validation, desktop SPI runtime and overlay slots
  John Smith
  committed
  585de88
- fix(server): use typed vue3-carousel-nuxt config key in nuxt.config.ts
  John Smith
  committed
  28ac0f1
- feat(cloud-saves): add Ludusavi lifecycle sync, testable save manager, and UI scaffolding
  John Smith
  committed
  44e4ef8
- fix(desktop): use buttons for conflict selection to satisfy a11y lint
  John Smith
  committed
  b45d899
- feat(plugins): add CloudSavePathResolver SPI to core server and desktop client
  John Smith
  committed
  885bc3d
- refactor(desktop): extract plugin-ownership purge helper to satisfy complexity lint
  John Smith
  committed
  aa429cc
- feat(cloud-saves): sync Ludusavi snapshots to the Drop server end-to-end
  John Smith
  committed
  9a511fb
- feat(delivery): add downpour push CDN chunker and LAN peer discovery contract (#17)
  John Smith
  committed
  dad16ed
- fix(delivery): satisfy clippy for LAN scoring and push chunk helper
  John Smith
  committed
  8ce486f
- feat(input): add Drop Input mapping core and Big Picture shell (#18)
  John Smith
  committed
  d22e494
- feat(achievements): add achievement/leaderboard models, unlock API, and event bus (#8)
  John Smith
  committed
  11abf3e
- feat(community): add verified playtime reviews and Ed25519 purchase receipts (#20/#21)
  John Smith
  committed
  cbb419f
- feat(community): add desktop community reviews page and fetch command
  John Smith
  committed
  67892a8
- docs(upstream): add PR 1 platform-stability and PR 2 generic-SPI scope
  John Smith
  committed
  536e63a
- docs(roadmap): record per-issue completion status and verification evidence
  John Smith
  committed
  1f04a51
- refactor(metadata): consume plugin MetadataProvider SPI and externalize PCGamingWiki (#310)
  John Smith
  committed
  775c2f0
- feat(cloud-saves): consume CloudSaveProvider resolver SPI in the server save path
  John Smith
  committed
  2a76fdf
- feat(cloud-saves): provision managed Ludusavi into <data>/tools/ludusavi
  John Smith
  committed
  f8d57ce
- feat(delivery): add shader-cache discovery hook and desktop export commands (#17)
  John Smith
  committed
  bbdc7a2
- feat(lan): add SSDP peer discovery backend with loopback test (#17)
  John Smith
  committed
  c6f511f
- feat(lan): add client-to-client chunk fetch contract (#17)
  John Smith
  committed
  8ef8291
- feat(commerce): dispatch payment webhooks and wire store-scanner imports (#21)
  John Smith
  committed
  49f2f61
- feat(achievements): add desktop unlock toasts for drop:achievement:unlock (#8)
  John Smith
  committed
  e4f1eff
- feat(achievements): add unlock_achievements Tauri command for plugin bridges (#8)
  John Smith
  committed
  58706fb
- feat(input): report platform backend availability and fail explicitly when absent (#18)
  John Smith
  committed
  d81df27
- feat(lan): add HTTP client-to-client chunk fetcher with tested URL builder (#17)
  John Smith
  committed
  b6e8932
- feat(cli): upload packaged depots to memory/S3 via opendal (#407)
  John Smith
  committed
  33a9417
- feat(achievements): mount unlock toasts in the desktop app shell
  John Smith
  committed
  a7b079f
- docs(roadmap): update completion status, evidence, and hard blockers
  John Smith
  committed
  44bc25f
- feat(store-import): add desktop page driving the StoreScanner SPI
  John Smith
  committed
  0ef75a6
- fix(desktop): resolve typecheck errors in client plugin manager
  John Smith
  committed
  53930c3
- ci(analysis): keep knip report running when typecheck fails
  John Smith
  committed
  8c42565
- fix(process): sweep symlink escapes after archive extraction
  John Smith
  committed
  59cccd1
- chore(security): run cargo-deny over every Rust crate
  John Smith
  committed
  e7c1786
- fix(server): clear the session cookie when a session expires
  John Smith
  committed
  41a7eab
- fix(server): require explicit opt-in to overwrite objects
  John Smith
  committed
  4264a59
- fix(server): make update checks ETag-aware and rate-limit tolerant
  John Smith
  committed
  1b6df12
- fix(cloud_saves): skip unreadable save paths instead of panicking
  John Smith
  committed
  b72dc0f
- fix(input): report only implemented virtual-gamepad backends
  John Smith
  committed
  3b99bc5
- fix(i18n): drop TODO markers from user activity strings
  John Smith
  committed
  ac9851f
- docs: correct upstream PR refs and roadmap claims
  John Smith
  committed
  08d7f35
- Merge pull request #62 from Heretek-Games/fix/desktop-typecheck
  BillyOutlast
  authored
  18ac88e
- Merge branch 'develop' into fix/core-hardening
  BillyOutlast
  authored
  e4b5106
- Merge pull request #63 from Heretek-Games/fix/core-hardening
  BillyOutlast
  authored
  1db45df
- fix(server): reclaim pruned save objects and cap uploads while streaming
  John Smith
  committed
  adede2e
- fix(desktop): consume plugin events through the Tauri event bridge
  John Smith
  committed
  d0e2953
- docs(roadmap): correct test count and record anti-cheat SPI follow-up
  John Smith
  committed
  6bcfa1b
- refactor(desktop): expose a generic findFiles host primitive
  John Smith
  committed
  8dde0ae
- docs(roadmap): record the completed findFiles anti-cheat refactor
  John Smith
  committed
  a8c8ba5
- feat(torrential): add opt-in chunk authentication for remote depots
  John Smith
  committed
  e565d0e
- feat(torrential): verify LAN peer chunk SHA-256 before commit
  John Smith
  committed
  d0aa35f
- feat(server): add leaderboard API and best-score tracking
  John Smith
  committed
  c13bfeb
- feat(cli): binary delta and branch/depot metadata for downpour push
  John Smith
  committed
  e9a126e
- feat(server): add Drop Workshop mod registry and subscriptions
  John Smith
  committed
  24a2169
- feat(desktop): stage shader caches before launch and document the pack format
  John Smith
  committed
  c6b9206
- feat(server): validate admin depot endpoints before registration
  John Smith
  committed
  664b7d1
- docs(roadmap): record workshop, leaderboards, federation and mirror progress
  John Smith
  committed
  a58e6bf
- feat(server): implement the Dropworks native SDK REST contract
  John Smith
  committed
  4551527
- feat(server): add per-game discussion forums
  John Smith
  committed
  9fca213
- feat(desktop): show per-game forum threads on the community page
  John Smith
  committed
  3db5871
- feat(torrential): add mDNS LAN discovery backend
  John Smith
  committed
  5f7ba9e
- feat(server): purchase orders and Ed25519 ownership receipts
  John Smith
  committed
  b241a69
- docs(roadmap): record commerce, forums and dropworks progress
  John Smith
  committed
  902d6ba
- feat(input): add a Linux uinput virtual-gamepad backend
  John Smith
  committed
  327996f
- feat(server): add storefront price tiers
  John Smith
  committed
  633a140
- feat(community): add a public screenshot gallery
  John Smith
  committed
  de1b808
- feat(server): global leaderboards on the Dropworks API
  John Smith
  committed
  e68dfac
- docs(roadmap): record dropworks leaderboards, sharing and moderation progress
  John Smith
  committed
  28cfbbe
- feat(server): add developer crash telemetry
  John Smith
  committed
  1513ce8
- feat(server): add local rich presence
  John Smith
  committed
  3529482
- feat(desktop): report local presence on launch and exit
  John Smith
  committed
  d7d8439
- feat(server): add dropworks presence endpoint
  John Smith
  committed
  e76589e
- docs(roadmap): add dropworks presence and refresh status evidence
  John Smith
  committed
  fd43799
- docs(roadmap): note the dropworks csharp binding
  John Smith
  committed
  6d063d9
- docs(roadmap): record the gdscript binding
  John Smith
  committed
  e31a258
- feat(server): add WebRTC ICE configuration provider
  John Smith
  committed
  afacbd0
- docs(roadmap): record the webrtc signaling relay
  John Smith
  committed
  a580892
- feat(desktop): add the client WebRTC peer module
  John Smith
  committed
  4c9e59d
- feat(desktop): add the workshop mod load planner
  John Smith
  committed
  dd54cad
- feat(workshop): include the mod in subscription listings
  John Smith
  committed
  8363593
- feat(desktop): add a workshop mod manager page
  John Smith
  committed
  8950364
- feat(input): add shareable controller profiles
  John Smith
  committed
  501b040
- feat(power): add handheld battery policy and command
  John Smith
  committed
  65313e6
- docs(roadmap): add remaining-work map and refresh verification
  John Smith
  committed
  02296fd
- fix(server): harden plugin route patterns, i18n keys, and container user
  John Smith
  committed
  37bb20e

Commits

Commits on Aug 26, 2026

Commits on Aug 28, 2026

Commits on Sep 13, 2026