Epic: WASM & QuickJS Sandboxed Plugin Runtime Engine #80

New Issue

2026-07-23T20:22:04Z

KofTwentyTwo commented

2026-07-23 20:22:04 +00:00

(Migrated from github.com)

Feature Overview

Design and implement a sandboxed WebAssembly (WASM via wasmtime) and QuickJS plugin extension engine allowing developers to execute custom mail triage and automation scripts inside
unciod.

Technical Requirements

WASI capability security sandbox restricting network/disk access to declared manifest permissions.
JavaScript / TypeScript plugin API bindings using QuickJS (
quickjs).
Event hooks: on_mail_received, on_mail_sending, on_calendar_rsvp, on_filter_rule.
Plugin management CLI:
uncio plugin install ,
uncio plugin list,
uncio plugin remove.

## Feature Overview Design and implement a sandboxed WebAssembly (WASM via wasmtime) and QuickJS plugin extension engine allowing developers to execute custom mail triage and automation scripts inside unciod. ## Technical Requirements - WASI capability security sandbox restricting network/disk access to declared manifest permissions. - JavaScript / TypeScript plugin API bindings using QuickJS ( quickjs). - Event hooks: on_mail_received, on_mail_sending, on_calendar_rsvp, on_filter_rule. - Plugin management CLI: uncio plugin install <url>, uncio plugin list, uncio plugin remove.

KofTwentyTwo commented

2026-07-23 20:44:58 +00:00

(Migrated from github.com)

Implemented Sandboxed WASM / QuickJS plugin extension runtime engine in nuncio-core.

KofTwentyTwo commented

2026-07-27 18:14:06 +00:00

(Migrated from github.com)

Reopening: this was closed but the implementation is fabricated, not real.

crates/nuncio-core/src/plugin.rs (PluginRuntime) has no WASM or QuickJS
runtime anywhere in the file. trigger_hook unconditionally returns
"plugin {} executed successfully" for any payload -- nothing is actually
executed, sandboxed, or otherwise run. Declared permissions are accepted at
plugin-registration time but never enforced anywhere. Existing tests assert
on the canned success string, which is why they were passing.

Currently dead code (nothing outside the module calls it), so it isn't
actively lying to a live user today -- but it will be the moment something
wires it up trusting this epic's "closed" label.

Leaving this open and explicitly backlogged behind the mail-completion work
(#182, #183, filter-engine wiring, contacts) rather than building a fake
plugin sandbox as filler. When a real plugin runtime is actually
prioritized, it needs a genuine WASM engine (e.g. wasmtime) or QuickJS
embed, real capability-based permission enforcement matching the declared
permissions, and tests that actually execute untrusted plugin code inside
the sandbox -- not a canned return string.

Reopening: this was closed but the implementation is fabricated, not real. `crates/nuncio-core/src/plugin.rs` (`PluginRuntime`) has no WASM or QuickJS runtime anywhere in the file. `trigger_hook` unconditionally returns `"plugin {} executed successfully"` for any payload -- nothing is actually executed, sandboxed, or otherwise run. Declared `permissions` are accepted at plugin-registration time but never enforced anywhere. Existing tests assert on the canned success string, which is why they were passing. Currently dead code (nothing outside the module calls it), so it isn't actively lying to a live user today -- but it will be the moment something wires it up trusting this epic's "closed" label. Leaving this open and explicitly backlogged behind the mail-completion work (#182, #183, filter-engine wiring, contacts) rather than building a fake plugin sandbox as filler. When a real plugin runtime is actually prioritized, it needs a genuine WASM engine (e.g. wasmtime) or QuickJS embed, real capability-based permission enforcement matching the declared `permissions`, and tests that actually execute untrusted plugin code inside the sandbox -- not a canned return string.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: KofTwentyTwo/nuncio#80