feat(store): show module maintainers (0.79.0)
Some checks failed
Security / Security check (push) Failing after 2s

The detail sheet always answers 'who maintains this?': one
selectable line per maintainer from the store index's new
maintainers list, or an honest 'not specified' when the index
names nobody (StoreMaintainersSection, public for the widget
tests). The install trust gate carries the same fact when
present and stays terse otherwise. DE+EN; dialog-harness proof
captured with the maintainer row.

Signed-off-by: flemming-it <stefan.a.flemming@googlemail.com>
This commit is contained in:
flemming-it 2026-07-22 22:06:18 +02:00
parent 66886389a6
commit 351c5a82bc
13 changed files with 198 additions and 2 deletions

View file

@ -1630,6 +1630,9 @@
"installConfirmNeedsCapabilities": "Benötigte Fähigkeiten",
"installConfirmTrustTitle": "Vertrauen & Sicherheit",
"installConfirmTrustBody": "Das Modul läuft in einer Sandbox: Es darf nur auf die Netzwerk-Endpunkte, Dateien und Umgebungsvariablen zugreifen, die es selbst deklariert — der Hub setzt diese Liste durch. Die vollständige Berechtigungsliste sehen Sie nach der Installation in den Modul-Details.",
"storeSectionMaintainers": "Maintainer",
"storeMaintainersNone": "nicht angegeben",
"installConfirmMaintainers": "Maintainer",
"storePolicyUnverifiedNotice": "Die Signaturpflicht ist in der Hub-Richtlinie ausgeschaltet — Installationen werden nicht kryptografisch geprüft. Der Installations-Dialog zeigt den Status je Modul; für geprüfte Installationen security.require_signatures aktivieren.",
"verifPillBlocked": "blockiert",
"verifPinnedKey": "Signatur wird geprüft — hinterlegter Store-Schlüssel",

View file

@ -1654,6 +1654,9 @@
"installConfirmNeedsCapabilities": "Required capabilities",
"installConfirmTrustTitle": "Trust & security",
"installConfirmTrustBody": "The module runs in a sandbox: it may only touch the network endpoints, files, and environment variables it declares itself — the hub enforces that list. The full permission list is visible in the module details after installation.",
"storeSectionMaintainers": "Maintainers",
"storeMaintainersNone": "not specified",
"installConfirmMaintainers": "Maintainers",
"storePolicyUnverifiedNotice": "Signature enforcement is switched off in the hub policy — installs are not cryptographically verified. The install dialog shows the per-module status; enable security.require_signatures for verified installs.",
"verifPillBlocked": "blocked",
"verifPinnedKey": "Signature checked — pinned store key",

View file

@ -4946,6 +4946,24 @@ abstract class AppLocalizations {
/// **'The module runs in a sandbox: it may only touch the network endpoints, files, and environment variables it declares itself — the hub enforces that list. The full permission list is visible in the module details after installation.'**
String get installConfirmTrustBody;
/// No description provided for @storeSectionMaintainers.
///
/// In en, this message translates to:
/// **'Maintainers'**
String get storeSectionMaintainers;
/// No description provided for @storeMaintainersNone.
///
/// In en, this message translates to:
/// **'not specified'**
String get storeMaintainersNone;
/// No description provided for @installConfirmMaintainers.
///
/// In en, this message translates to:
/// **'Maintainers'**
String get installConfirmMaintainers;
/// No description provided for @storePolicyUnverifiedNotice.
///
/// In en, this message translates to:

View file

@ -2914,6 +2914,15 @@ class AppLocalizationsDe extends AppLocalizations {
String get installConfirmTrustBody =>
'Das Modul läuft in einer Sandbox: Es darf nur auf die Netzwerk-Endpunkte, Dateien und Umgebungsvariablen zugreifen, die es selbst deklariert — der Hub setzt diese Liste durch. Die vollständige Berechtigungsliste sehen Sie nach der Installation in den Modul-Details.';
@override
String get storeSectionMaintainers => 'Maintainer';
@override
String get storeMaintainersNone => 'nicht angegeben';
@override
String get installConfirmMaintainers => 'Maintainer';
@override
String get storePolicyUnverifiedNotice =>
'Die Signaturpflicht ist in der Hub-Richtlinie ausgeschaltet — Installationen werden nicht kryptografisch geprüft. Der Installations-Dialog zeigt den Status je Modul; für geprüfte Installationen security.require_signatures aktivieren.';

View file

@ -2909,6 +2909,15 @@ class AppLocalizationsEn extends AppLocalizations {
String get installConfirmTrustBody =>
'The module runs in a sandbox: it may only touch the network endpoints, files, and environment variables it declares itself — the hub enforces that list. The full permission list is visible in the module details after installation.';
@override
String get storeSectionMaintainers => 'Maintainers';
@override
String get storeMaintainersNone => 'not specified';
@override
String get installConfirmMaintainers => 'Maintainers';
@override
String get storePolicyUnverifiedNotice =>
'Signature enforcement is switched off in the hub policy — installs are not cryptographically verified. The install dialog shows the per-module status; enable security.require_signatures for verified installs.';