Files
kandev/docs/plans/plugins/task-15-spec-verify.md
T
2026-08-24 11:09:03 +00:00

52 lines
2.1 KiB
Markdown

---
id: task-15
title: Spec update + docs + full verification
status: pending
wave: 4
depends_on: [task-09, task-13, task-14]
plan: docs/plans/plugins/plan.md
---
# Spec update + docs + full verification
## Title
Reconcile the spec with what was built, update docs, and run the full
format/typecheck/test/lint gate across backend and web.
## Inputs
- Spec `docs/specs/plugins/requirements/plugins.md` (status: draft).
- Implemented deltas from this plan.
## Acceptance
1. Spec edits to `docs/specs/plugins/requirements/plugins.md`:
- Add the `ui.pages[]` manifest field (key/title/path/surface) and a new
"UI page proxy" subsection under API surface (GET/POST
`/api/plugins/{id}/ui/*`, header stripping for iframe embedding).
- Narrow "Out of scope → UI extensions": iframe pages are now IN; native JS
slots / registry remain OUT.
- Note tool invocation is implemented as a client + listing endpoint but NOT
wired into live agent sessions yet (deferred).
- Correct the credential-storage line: api_key stored as bcrypt hash;
webhook_secret stored encrypted (recoverable) because kandev must HMAC-sign
outbound deliveries. Keep "returned once at registration".
- Keep marketplace / managed-runtime / process-management OUT of scope.
- Keep `status: draft`; add a dated note if the spec has a changelog convention.
2. Update `docs/plans/plugins/plan.md` task statuses to `done`.
3. If a public-docs surface changed, run `/docs-maintainer` judgment (new
operator-facing `/api/plugins` API + settings page likely warrants a short
`docs/public/**` page — add one if the repo documents other settings pages).
## Verification (full gate)
- `make -C apps/backend fmt` (FIRST — formatters may split lines)
- `make -C apps/backend typecheck test lint`
- `make -C apps/backend build`
- `cd apps/web && pnpm run typecheck && pnpm lint && pnpm test`
- `cd apps/web && pnpm e2e -g "plugin"`
## Output contract
Report: spec sections changed, docs added, and the full verification results
(paste failing output if any). This task closes the plan.
## Dependencies
task-09, task-13, task-14.