Module trust 

Trust store for marketplace plugin installs.

Persisted at ~/.caliban/marketplaces-allowlist.json (and a per-plugin trust file at $XDG_DATA_HOME/caliban/trust/plugins.json). The first install of a plugin from a new marketplace triggers a trust prompt; on approval the record is cached and subsequent installs from the same (marketplace, plugin, manifest_hash) triple skip the prompt.

Structs

MarketplacesAllowlist

On-disk format of the marketplaces allowlist.

PluginTrustRecord

Per-plugin trust record. Persisted under plugins.json.

TrustFile

On-disk format of the per-plugin trust file.

TrustStore

In-memory wrapper around the two on-disk files.