@north-light/crouter 0.3.306 → 0.3.308

package/dist/api/plugin-manifest-schema.d.ts

@@ -103,7 +103,8 @@ export interface ManifestTimeouts {
     streamIdleMs?: number;
 }
 /** Exec transport only: forward every argv token after this branch to an
- *  external binary instead of parsing children. A passthrough branch is
+ *  external binary instead of parsing children. `bin` is either a bare PATH
+ *  command or a plugin-root-relative executable path. A passthrough branch is
  *  childless by construction; an HTTP manifest rejects it, because an HTTP
  *  transport must not name a local binary to execute. */
 export interface ManifestPassthrough {

package/dist/builtin-memory/internal/plugins.md

@@ -266,7 +266,7 @@ An HTTP-transport plugin replaces that declaration with:
 "transport": { "kind": "http", "endpoint": "https://example.com", "authEnv": "DEPLOY_TOKEN" }
 ```
 
-For `exec`, `executable` is required when the manifest has any executable leaf; a passthrough-only manifest omits it. When declared, it is plugin-root-relative, resolves inside the plugin root to a regular file, and carries the POSIX exec bit. For `http`, `transport.endpoint` is the backend origin and `authEnv` is optional. crouter stores only the environment variable **name**, never its credential; it reads the credential when invoking a leaf. A crouter-materialized archive plugin additionally records its archive URL separately in `bundle` for installation and update.
+For `exec`, `executable` is required when the manifest has any executable leaf; a passthrough-only manifest omits it. When declared, it is plugin-root-relative, resolves inside the plugin root to a regular file, and carries the POSIX exec bit. A passthrough `bin` is either a bare command resolved through `PATH` or a plugin-root-relative executable path subject to the same containment and permission checks. For `http`, `transport.endpoint` is the backend origin and `authEnv` is optional. crouter stores only the environment variable **name**, never its credential; it reads the credential when invoking a leaf. A crouter-materialized archive plugin additionally records its archive URL separately in `bundle` for installation and update.
 
 Only an installed, **enabled** plugin's command manifest contributes. Discovery is per-invocation and reads the installed `commands.json` only: enable, disable, update, and remove take effect on the next `crtr` call with no daemon restart, cache clearing, or network fetch.