feat(security): plugin architecture + Aikido Safe Chain install-gate + Patches-style /security - #123

Merged

alamb-hex merged 37 commits into

mainfrom

feat/security-plugins-and-restyle

Jun 3, 2026

Commits on May 24, 2026

chore(security): convert override pins to version floors

alamb-hex
and
claude
committed
167ce28
feat(patches): dev-server-aware patching — stop→apply→restart, refuse self-patch (#109)

alamb-hex
and
claude
committed
d020f56

Commits on May 26, 2026

feat(security/plugins): define SecurityPlugin discriminated-union types

alamb-hex
and
claude
committed
be4c983
feat(security/plugins): empty static registry + getPlugin lookup

alamb-hex
and
claude
committed
da1ba77
feat(security/plugins): per-project plugin config + helpers

alamb-hex
and
claude
committed
dfa9ad1
feat(security/plugins): runAllPluginCards — parallel, isolated errors

alamb-hex
and
claude
committed
d010260
feat(security/plugins/safe-chain): host detection + 30s cache

alamb-hex
and
claude
committed
de4a60c
feat(security/plugins/safe-chain): pure command rewriter

alamb-hex
and
claude
committed
f7f5905
feat(security/plugins/safe-chain): parser for block/clean output

alamb-hex
and
claude
committed
dad3e14
feat(security/plugins): SafeChainPlugin (installGate) + register

alamb-hex
and
claude
committed
5749048
feat(security/plugins): applyInstallGate orchestrator

alamb-hex
and
claude
committed
a47871b
feat(api): GET /api/security/plugins — registry + host availability

alamb-hex
and
claude
committed
c69f400
feat(api): GET /api/security/plugins/[id]/status?projectId

alamb-hex
and
claude
committed
a09ed80
feat(security/ui): SecurityHeader — Patches-style header chrome

alamb-hex
and
claude
committed
1dc16d4
feat(security/ui): SecuritySummaryBar — color-dot stats row

alamb-hex
and
claude
committed
2ad783c
feat(security/ui): SourcePluginCards — sources + plugins row

alamb-hex
and
claude
committed
5f94da5
feat(security): wire new chrome into /security page

alamb-hex
and
claude
committed
bdbb927

Commits on May 27, 2026

feat(api): POST /api/projects/[id]/plugins/[pluginId] — enable/disable

alamb-hex
and
claude
committed
af686d2
feat(update): wire installGate plugins via binary override

alamb-hex
and
claude
committed
f384c33
feat(security): /security/safe-chain detail page

alamb-hex
and
claude
committed
0e41a18
feat(security): drop FleetProjectRail, Patches-style project accordion

alamb-hex
and
claude
committed
52ee3a3
feat(security/ui): Rescan now actually scans the fleet + better empty state

alamb-hex
and
claude
committed
4fe4c5b
feat(security/ui): Scan menu + OSV DB sync + per-source meters

alamb-hex
and
claude
committed
12507d5
feat(security/ui): severity pills on accordion row headers

alamb-hex
and
claude
committed
c0a14f9
feat(security/ui): merged findings list in accordion body

alamb-hex
and
claude
committed
e25f0a1
feat(security/ui): group findings by package + CVE hover + clearer SourceCard status

alamb-hex
and
claude
committed
db485a0
feat(security/ui): group findings by parent npm package

alamb-hex
and
claude
committed
ef4d76c
feat(security): SecurityException tracking — classification + audit trail

alamb-hex
and
claude
committed
ceee343
fix(security/ui): PackageRow outer wrapper is a div, not nested <button>

alamb-hex
and
claude
committed
d768e37
feat(security/ui): exceptions get bright amber + view-details + edit

alamb-hex
and
claude
committed
38fece3
feat(security): finding lifecycle logging + scope labels

alamb-hex
and
claude
committed
d6c0724
feat(security/ui): fix-version is now a cyan pill

alamb-hex
and
claude
committed
c9c4045
feat(security/ui): RemediationPanel — multi-option grype remediation

alamb-hex
and
claude
committed
87a995c
feat(security/ui): phase-aware Apply with auto-rescan + verify outcome

alamb-hex
and
claude
committed
433c228
feat(security): change-control-style logging for remediation attempts

alamb-hex
and
claude
committed
02b82a1
feat(security): change-control attemptId on cve-lite Apply paths

alamb-hex
and
claude
committed
1ab55ed

Commits on Jun 3, 2026

chore(security): strip dead plugin orchestrators (#116) + drop cve-lite self-link (#117)

alamb-hex
and
claude
committed
6fa88c8