Skip to content

release: migrate plugin catalog to SDK v2#25

Merged
TONresistor merged 10 commits into
mainfrom
dev
Jul 12, 2026
Merged

release: migrate plugin catalog to SDK v2#25
TONresistor merged 10 commits into
mainfrom
dev

Conversation

@TONresistor

Copy link
Copy Markdown
Owner

Summary

  • migrate the maintained plugin catalog to Teleton SDK v2 while retaining the two legacy SDK v1 plugins
  • generate and validate catalog metadata from plugin manifests
  • add the Uranus launchpad plugin with 13 tools and hardened on-chain/account checks
  • remove EVAA from the catalog
  • pin Uranus metadata requests to validated public IPs to prevent DNS rebinding

Verification

  • 33 tests passed on Node 22
  • catalog validation: 26 plugins, 193 tools, 24 SDK v2 supported, 2 quarantined
  • runtime validation passed against SDK 2.1.0
  • dependency audit: 0 critical/high/moderate/low
  • independent review: no Critical/Important findings

Add an explicit SDK compatibility policy, quarantine legacy raw-access plugins, and publish only validated entries. Migrate DeDust and STON.fi swaps to the public SDK transaction broker, harden dependency auditing, and consolidate CI with batched Telegram notifications.
Derive the marketplace registry and README catalog sections from manifests and compatibility policy. Remove duplicated count assertions and align runtime validation with the public SDK v2 scopes, categories, and version constants.
Remove the legacy SDK v1 EVAA plugin and its compatibility entry. Regenerate the catalog summary to reflect 26 plugins and two remaining quarantined plugins.
Prevent DNS rebinding by connecting metadata requests directly to the validated public address for every redirect hop while preserving the original Host and TLS identity. Harden IPv6 private-address detection and cover rebinding and redirect behavior with regression tests.
Resolve SDK migration test dependencies through TELETON_AGENT_DIR and pass the CI checkout path to the test step so standalone pull-request runs do not depend on a sibling repository.
@TONresistor TONresistor merged commit 8aedbd3 into main Jul 12, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant