- Redesign plugin management: Implement a URL-based fetch mechanism for
manifest.jsondirectly from the browser. - Validation: Move validation logic from local file-based checks to client-side schema validation of remote JSON objects.
- IndexedDB Integration: Implement local storage for agent state and plugin manifests to support "zero-clone" architecture.
- Performance: Enable local caching of fetched remote manifests to reduce network overhead.
- Remote Module Loading: Adapt
plugins/loader.jsto load JavaScript modules viaimport()using validated, cross-origin-safe URLs. - Security: Maintain sandbox wrappers around dynamically fetched code to ensure execution isolation.
- Transition to Browser-Only: Remove dependencies on local filesystem cloning.
- Persistence Layer: Use IndexedDB for all persistent storage (states, manifests).
- Network: Fetch all plugins/manifests from trusted sources via secure, validated URLs.