This commit replaces the insecure `new Function` execution of extension code with a WASM-based sandbox using `quickjs-emscripten`. This provides true isolation from the host JavaScript realm, preventing DOM tampering and cross-realm escapes while preserving synchronous API capabilities. Tests have been updated accordingly.
Co-authored-by: Horizontal42 <75383519+Horizontal42@users.noreply.github.com>
Signed by a new key (public half embedded in tauri.conf.json, private
half + password live in GitHub secrets). CI now signs release artifacts
and publishes latest.json; the app checks on boot and prompts to
install and restart.
Write plain text, get live results per line. English + Russian, units,
live currency rates with crypto, percents, dates and timezones, bitwise
ops, variables and sheet totals. Tauri 2 + TypeScript engine +
CodeMirror 6; daily backups and a deleted-sheets bin.
Inspired by Numi for macOS (numi.app); built from scratch for Windows.
