Plugin Security Advanced — Kernel Protocol

Defines comprehensive security mechanisms for plugin isolation, permission management, and threat protection in the ObjectStack ecosystem.

Plugin Security and Sandboxing Protocol

Defines comprehensive security mechanisms for plugin isolation, permission management, and threat protection in the ObjectStack ecosystem.

Features:

Fine-grained permission system
Resource access control
Sandboxing and isolation
Runtime security monitoring

⛔ NOT security scanning. The scan-result family — KernelSecurityScanResult, KernelSecurityVulnerability, PluginSecurityManifest.scanResults and its sibling list .vulnerabilities — was retired under ADR-0049 enforce-or-remove (#15932), after the runtime scanner that was its last type-only importer went the same way. That scanner retirement was issue 14919 — a number DELETED from the board and no longer resolving; its live record is PR #15930, which landed the removal. Nothing on this platform scans a plugin.

Source: packages/spec/src/kernel/plugin-security-advanced.zod.ts

TypeScript Usage

import { KernelSecurityPolicySchema, PermissionActionSchema, PermissionScopeSchema, PluginPermissionSchema, PluginPermissionSetSchema, PluginSecurityManifestSchema, PluginTrustLevelSchema, ResourceTypeSchema, RuntimeConfigSchema, SandboxConfigSchema } from '@objectstack/spec/kernel';
import type { KernelSecurityPolicy, PermissionAction, PermissionScope, PluginPermission, PluginPermissionSet, PluginSecurityManifest, PluginTrustLevel, ResourceType, RuntimeConfig, SandboxConfig } from '@objectstack/spec/kernel';

// Validate data
const result = KernelSecurityPolicySchema.parse(data);

KernelSecurityPolicy

Properties

Property	Type	Required
csp	`{ directives?: Record<string, string[]>; reportOnly?: boolean }`	optional
cors	`{ allowedOrigins: string[]; allowedMethods: string[]; allowedHeaders: string[]; allowCredentials?: boolean; … }`	optional
rateLimit	`{ enabled?: boolean; maxRequests: integer; windowMs: integer; strategy?: Enum<'fixed' \| 'sliding' \| 'token-bucket'> }`	optional
authentication	`{ required?: boolean; methods: Enum<'jwt' \| 'oauth2' \| 'api-key' \| 'session' \| 'certificate'>[]; tokenExpirationSeconds?: integer }`	optional
encryption	`{ dataAtRest?: boolean; dataInTransit?: boolean; algorithm?: string; minKeyLength?: integer }`	optional
auditLog	`{ enabled?: boolean; events?: string[]; retentionDays?: integer }`	optional

Nested Shape: `KernelSecurityPolicy.cors`

Property	Type	Required	Description
allowedOrigins	`string[]`	✅
allowedMethods	`string[]`	✅
allowedHeaders	`string[]`	✅
allowCredentials	`boolean`	optional (default: `false`)
maxAge	`integer`	optional	Preflight cache duration in seconds (unit per CORS `Access-Control-Max-Age` (WHATWG Fetch))

Nested Shape: `KernelSecurityPolicy.rateLimit`

Property	Type	Required	Description
enabled	`boolean`	optional (default: `true`)
maxRequests	`integer`	✅
windowMs	`integer`	✅	Time window in milliseconds
strategy	`Enum<'fixed' \| 'sliding' \| 'token-bucket'>`	optional (default: `"sliding"`)

Nested Shape: `KernelSecurityPolicy.authentication`

Property	Type	Required	Description
required	`boolean`	optional (default: `true`)
methods	`Enum<'jwt' \| 'oauth2' \| 'api-key' \| 'session' \| 'certificate'>[]`	✅
tokenExpirationSeconds	`integer`	optional	Token expiration in seconds
tokenExpiration	`never`	optional	[REMOVED] `KernelSecurityPolicy.authentication.tokenExpiration` was renamed to `tokenExpirationSeconds` in @objectstack/spec 17 — the unit of a duration-shaped number lives in the key name, not only in the describe prose, and the sibling rate-limit window on this same policy is already `windowMs`. Rename the key to `tokenExpirationSeconds`; the value (seconds) is unchanged.

Nested Shape: `KernelSecurityPolicy.encryption`

Property	Type	Required	Description
dataAtRest	`boolean`	optional (default: `false`)	Encrypt data at rest
dataInTransit	`boolean`	optional (default: `true`)	Enforce HTTPS/TLS
algorithm	`string`	optional	Encryption algorithm
minKeyLength	`integer`	optional	Minimum key length in bits

Nested Shape: `KernelSecurityPolicy.auditLog`

Property	Type	Required	Description
enabled	`boolean`	optional (default: `true`)
events	`string[]`	optional	Events to log
retentionDays	`integer`	optional	Log retention in days
retention	`never`	optional	[REMOVED] `KernelSecurityPolicy.auditLog.retention` was renamed to `retentionDays` in @objectstack/spec 17 — the unit of a duration-shaped number lives in the key name, not only in the describe prose. Rename the key to `retentionDays`; the value (days) is unchanged.

PermissionAction

Type of action being permitted

Allowed Values

create
read
update
delete
execute
manage
configure
share
export
import
admin

PermissionScope

Scope of permission application

Allowed Values

global
tenant
user
resource
plugin

PluginPermission

Properties

Property	Type	Required	Description
id	`string`	✅	Unique permission identifier
resource	`Enum<'data.object' \| 'data.record' \| 'data.field' \| 'ui.view' \| 'ui.dashboard' \| 'ui.report' \| 'system.config' \| 'system.plugin' \| 'system.api' \| 'system.service' \| … +6 more>`	✅	Type of resource being accessed
actions	`Enum<'create' \| 'read' \| 'update' \| 'delete' \| 'execute' \| 'manage' \| 'configure' \| 'share' \| 'export' \| 'import' \| 'admin'>[]`	✅
scope	`Enum<'global' \| 'tenant' \| 'user' \| 'resource' \| 'plugin'>`	optional (default: `"plugin"`)	Scope of permission application
filter	`{ resourceIds?: string[]; condition?: string \| object; fields?: string[] }`	optional
description	`string`	✅
required	`boolean`	optional (default: `true`)
justification	`string`	optional	Why this permission is needed

Allowed Values: `PluginPermission.resource`

data.object
data.record
data.field
ui.view
ui.dashboard
ui.report
system.config
system.plugin
system.api
system.service
storage.file
storage.database
network.http
network.websocket
process.spawn
process.env

Nested Shape: `PluginPermission.filter`

Property	Type	Required	Description
resourceIds	`string[]`	optional
condition	`string \| { dialect: Enum<'cel' \| 'cron' \| 'template'>; source: string; ast?: any; meta?: object }`	optional	Predicate (CEL) filter, e.g. P`record.owner == os.user.id`.
fields	`string[]`	optional	Allowed fields for data resources

PluginPermissionSet

Properties

Property	Type	Required
permissions	`{ id: string; resource: Enum<'data.object' \| 'data.record' \| 'data.field' \| 'ui.view' \| 'ui.dashboard' \| …>; actions: Enum<'create' \| 'read' \| 'update' \| 'delete' \| 'execute' \| 'manage' \| 'configure' \| …>[]; scope?: Enum<'global' \| 'tenant' \| 'user' \| 'resource' \| 'plugin'>; … }[]`	✅
groups	`{ name: string; description: string; permissions: string[] }[]`	optional
defaultGrant	`Enum<'prompt' \| 'allow' \| 'deny' \| 'inherit'>`	optional (default: `"prompt"`)

Nested Shape: `PluginPermissionSet.permissions[number]`

Property	Type	Required	Description
id	`string`	✅	Unique permission identifier
resource	`Enum<'data.object' \| 'data.record' \| 'data.field' \| 'ui.view' \| 'ui.dashboard' \| …>`	✅	Type of resource being accessed
actions	`Enum<'create' \| 'read' \| 'update' \| 'delete' \| 'execute' \| 'manage' \| 'configure' \| …>[]`	✅
scope	`Enum<'global' \| 'tenant' \| 'user' \| 'resource' \| 'plugin'>`	optional (default: `"plugin"`)	Scope of permission application
filter	`{ resourceIds?: string[]; condition?: string \| object; fields?: string[] }`	optional
description	`string`	✅
required	`boolean`	optional (default: `true`)
justification	`string`	optional	Why this permission is needed

Nested Shape: `PluginPermissionSet.groups[number]`

Property	Type	Required	Description
name	`string`	✅	Group name
description	`string`	✅
permissions	`string[]`	✅	Permission IDs in this group

PluginSecurityManifest

Properties

Property	Type	Required	Description
pluginId	`string`	✅
trustLevel	`Enum<'verified' \| 'trusted' \| 'community' \| 'untrusted' \| 'blocked'>`	✅	Trust level of the plugin
permissions	`{ permissions: object[]; groups?: object[]; defaultGrant?: Enum<'prompt' \| 'allow' \| 'deny' \| 'inherit'> }`	✅
sandbox	`{ enabled?: boolean; level?: Enum<'none' \| 'minimal' \| 'standard' \| 'strict' \| 'paranoid'>; runtime?: object; filesystem?: object; … }`	✅
policy	`{ csp?: object; cors?: object; rateLimit?: object; authentication?: object; … }`	optional
scanResults	`never`	optional	[REMOVED] `PluginSecurityManifest.scanResults` was removed in @objectstack/spec 17 (ADR-0049 enforce-or-remove) — nothing on this platform ever produced, stored or read a security scan result, so an authored array parsed cleanly and changed nothing. Delete the key. There is no replacement key: plugin security scanning is not a platform capability. What this manifest still enforces is `permissions` and `sandbox`; artifact provenance is answered by the plugin signature verifier, which tells you an artifact is the one its publisher signed and never that it is safe. Audit dependencies with a tool built for it (npm audit, pnpm audit, Dependabot, the GitHub Advisory Database, OSV).
vulnerabilities	`never`	optional	[REMOVED] `PluginSecurityManifest.vulnerabilities` was removed in @objectstack/spec 17 (ADR-0049 enforce-or-remove) — it was an array of `KernelSecurityVulnerability`, the other half of the scan-result family, and leaves with it: nothing ever wrote the list and nothing ever read it, so declaring a known vulnerability against a plugin warned nobody and blocked no install. Delete the key. There is no replacement key: plugin security scanning is not a platform capability. Publish vulnerability contact and disclosure terms through the surviving `securityContact` and `vulnerabilityDisclosure` blocks on this same manifest, and audit dependencies with a tool built for it (npm audit, pnpm audit, Dependabot, the GitHub Advisory Database, OSV).
codeSigning	`{ signed: boolean; signature?: string; certificate?: string; algorithm?: string; … }`	optional
certifications	`{ name: string; issuer: string; issuedDate: string; expiryDate?: string; … }[]`	optional
securityContact	`{ email?: string; url?: string; pgpKey?: string }`	optional
vulnerabilityDisclosure	`{ policyUrl?: string; responseTimeHours?: integer; bugBounty?: boolean }`	optional

Nested Shape: `PluginSecurityManifest.sandbox`

Property	Type	Required	Description
enabled	`boolean`	optional (default: `true`)
level	`Enum<'none' \| 'minimal' \| 'standard' \| 'strict' \| 'paranoid'>`	optional (default: `"standard"`)
runtime	`{ engine?: Enum<'v8-isolate' \| 'wasm' \| 'container' \| 'process'>; engineConfig?: object; resourceLimits?: object }`	optional	Execution environment and isolation settings
filesystem	`{ mode?: Enum<'none' \| 'readonly' \| 'restricted' \| 'full'>; allowedPaths?: string[]; deniedPaths?: string[]; maxFileSize?: integer }`	optional
network	`{ mode?: Enum<'none' \| 'local' \| 'restricted' \| 'full'>; allowedHosts?: string[]; deniedHosts?: string[]; allowedPorts?: number[]; … }`	optional
process	`{ allowSpawn?: boolean; allowedCommands?: string[]; timeoutMs?: integer }`	optional
memory	`{ maxHeap?: integer; maxStack?: integer }`	optional
cpu	`{ maxCpuPercent?: number; maxThreads?: integer }`	optional
environment	`{ mode?: Enum<'none' \| 'readonly' \| 'restricted' \| 'full'>; allowedVars?: string[]; deniedVars?: string[] }`	optional

Nested Shape: `PluginSecurityManifest.certifications[number]`

Property	Type	Required	Description
name	`string`	✅	Certification name (e.g., SOC 2, ISO 27001)
issuer	`string`	✅
issuedDate	`string`	✅
expiryDate	`string`	optional
certificateUrl	`string`	optional

Nested Shape: `PluginSecurityManifest.vulnerabilityDisclosure`

Property	Type	Required	Description
policyUrl	`string`	optional
responseTimeHours	`integer`	optional	Expected response time in hours
responseTime	`never`	optional	[REMOVED] `PluginSecurityManifest.vulnerabilityDisclosure.responseTime` was renamed to `responseTimeHours` in @objectstack/spec 17 — the unit of a duration-shaped number lives in the key name, not only in the describe prose. This one is HOURS, while the same bare name on `PluginHealthReport.metrics` was milliseconds — which is the confusion the rule exists to remove. Rename the key to `responseTimeHours`; the value (hours) is unchanged.
bugBounty	`boolean`	optional (default: `false`)

PluginTrustLevel

Trust level of the plugin

Allowed Values

verified
trusted
community
untrusted
blocked

ResourceType

Type of resource being accessed

Allowed Values

data.object
data.record
data.field
ui.view
ui.dashboard
ui.report
system.config
system.plugin
system.api
system.service
storage.file
storage.database
network.http
network.websocket
process.spawn
process.env

RuntimeConfig

Properties

Property	Type	Required	Description
engine	`Enum<'v8-isolate' \| 'wasm' \| 'container' \| 'process'>`	optional (default: `"v8-isolate"`)	Execution environment engine
engineConfig	`{ wasm?: object; container?: object; v8Isolate?: object }`	optional
resourceLimits	`{ maxMemory?: integer; maxCpu?: number; timeoutMs?: integer }`	optional

Nested Shape: `RuntimeConfig.resourceLimits`

Property	Type	Required	Description
maxMemory	`integer`	optional	Maximum memory allocation
maxCpu	`number`	optional	Maximum CPU usage percentage
timeoutMs	`integer`	optional	Maximum execution time in milliseconds
timeout	`never`	optional	[REMOVED] `RuntimeConfig.resourceLimits.timeout` was renamed to `timeoutMs` in @objectstack/spec 17 — the unit of a duration-shaped number lives in the key name, not only in the describe prose. Its unit (milliseconds) lived in a source JSDoc only and the published description read "Maximum execution time", naming no unit at all, so a reader of the reference page could not tell 60000 milliseconds from 60000 seconds. Rename the key to `timeoutMs`; the value (milliseconds) is unchanged.

SandboxConfig

Properties

Property	Type	Required	Description
enabled	`boolean`	optional (default: `true`)
level	`Enum<'none' \| 'minimal' \| 'standard' \| 'strict' \| 'paranoid'>`	optional (default: `"standard"`)
runtime	`{ engine?: Enum<'v8-isolate' \| 'wasm' \| 'container' \| 'process'>; engineConfig?: object; resourceLimits?: object }`	optional	Execution environment and isolation settings
filesystem	`{ mode?: Enum<'none' \| 'readonly' \| 'restricted' \| 'full'>; allowedPaths?: string[]; deniedPaths?: string[]; maxFileSize?: integer }`	optional
network	`{ mode?: Enum<'none' \| 'local' \| 'restricted' \| 'full'>; allowedHosts?: string[]; deniedHosts?: string[]; allowedPorts?: number[]; … }`	optional
process	`{ allowSpawn?: boolean; allowedCommands?: string[]; timeoutMs?: integer }`	optional
memory	`{ maxHeap?: integer; maxStack?: integer }`	optional
cpu	`{ maxCpuPercent?: number; maxThreads?: integer }`	optional
environment	`{ mode?: Enum<'none' \| 'readonly' \| 'restricted' \| 'full'>; allowedVars?: string[]; deniedVars?: string[] }`	optional

Nested Shape: `SandboxConfig.runtime`

Property	Type	Required	Description
engine	`Enum<'v8-isolate' \| 'wasm' \| 'container' \| 'process'>`	optional (default: `"v8-isolate"`)	Execution environment engine
engineConfig	`{ wasm?: object; container?: object; v8Isolate?: object }`	optional
resourceLimits	`{ maxMemory?: integer; maxCpu?: number; timeoutMs?: integer }`	optional

Nested Shape: `SandboxConfig.filesystem`

Property	Type	Required	Description
mode	`Enum<'none' \| 'readonly' \| 'restricted' \| 'full'>`	optional (default: `"restricted"`)
allowedPaths	`string[]`	optional	Whitelisted paths
deniedPaths	`string[]`	optional	Blacklisted paths
maxFileSize	`integer`	optional	Maximum file size in bytes

Nested Shape: `SandboxConfig.network`

Property	Type	Required	Description
mode	`Enum<'none' \| 'local' \| 'restricted' \| 'full'>`	optional (default: `"restricted"`)
allowedHosts	`string[]`	optional	Whitelisted hosts
deniedHosts	`string[]`	optional	Blacklisted hosts
allowedPorts	`number[]`	optional	Allowed port numbers
maxConnections	`integer`	optional

Nested Shape: `SandboxConfig.process`

Property	Type	Required	Description
allowSpawn	`boolean`	optional (default: `false`)	Allow spawning child processes
allowedCommands	`string[]`	optional	Whitelisted commands
timeoutMs	`integer`	optional	Process timeout in ms
timeout	`never`	optional	[REMOVED] `SandboxConfig.process.timeout` was renamed to `timeoutMs` in @objectstack/spec 17 — the unit of a duration-shaped number lives in the key name, not only in the describe prose. Rename the key to `timeoutMs`; the value (milliseconds) is unchanged.

Nested Shape: `SandboxConfig.memory`

Property	Type	Required	Description
maxHeap	`integer`	optional	Maximum heap size in bytes
maxStack	`integer`	optional	Maximum stack size in bytes

Plugin Security Advanced — Kernel Protocol

On this page