app-store

app-store

Extension framework for the Pilot Protocol. Defines the manifest schema, grant policy engine, and IPC contract that let third-party apps plug into a Pilot daemon with capability-scoped access to peer messaging, identity, and storage primitives.

Install

import "github.com/pilot-protocol/app-store"

Usage

import (
    "github.com/pilot-protocol/app-store/pkg/manifest"
    "github.com/pilot-protocol/app-store/plugin/appstore"
)

// Load + validate an app manifest.
m, err := manifest.Load("examples/wallet.manifest.json")
if err != nil { return err }
if err := manifest.Validate(m); err != nil { return err }

// Construct the appstore plugin for the daemon's runtime registry.
svc := appstore.NewService(appstore.Config{
    InstallRoot:   "~/.pilot/apps",
    CatalogPubkey: appstore.EmbeddedCatalogPubkey,
})

Run the tests:

go test ./...

Layout

Trust chain

The daemon embeds a catalog public key; the catalog signs each manifest; each manifest pins its binary's sha256; the daemon re-verifies the binary on every launch and brokers IPC calls only when the user has explicitly accepted the app's declared grants.

License

AGPL-3.0-or-later. See LICENSE.