Summary

• reserve the internal plugin IPC namespace across voltkit and the runtime IPC module
• split plugin storage persistence and plugin process transport helpers into focused modules
• split volt-core security validation from CSP policy and apply rust formatting

Validation

• pnpm --filter voltkit test
• pnpm --filter voltkit lint
• pnpm --filter voltkit typecheck
• cargo fmt --all -- --check
• cargo clippy -p volt-core -- -D warnings
• cargo clippy -p volt-runner -- -D warnings
• cargo test -p volt-core --test security_fs_integration -- --nocapture
• cargo test -p volt-core --lib security:: -- --nocapture
• cargo test -p volt-core
• cargo test -p volt-runner plugin_manager::tests::storage -- --nocapture
• cargo test -p volt-runner plugin_manager::tests::request_access -- --nocapture
• cargo test -p volt-runner bounded_stderr_reader_caps_capture_size -- --nocapture
• cargo test -p volt-runner drain_waiters_disconnects_pending_receivers -- --nocapture
• cargo test -p volt-runner ipc_main_rejects_reserved -- --nocapture
• cargo test -p volt-runner ipc_bridge::response::tests -- --nocapture
• cargo test -p volt-runner