mirror/LocalAI
1
0 Fork 0
mirror of https://github.com/mudler/LocalAI.git synced 2026-11-06 04:23:15 -05:00
Code Issues Packages Projects Releases Wiki Activity

docs(addons): document install from a file and make addons-zip

Browse Source 
Describe the zip, the trust model of a local file, the install, upgrade
and downgrade rules, the routes and their error types, the split
deployment upload and the make target. Regenerate the Swagger spec.

Assisted-by: Claude:claude-sonnet-5-5 swag
This commit is contained in:
Ettore Di Giacinto committed 2026-11-03 22:52:50 +00:00
1 parent cbe84cf062
commit 0e76e7ea75
4 files changed
+826
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

docs/content/features/addons.md
+162
View File
@@ -1040,6 +1040,168 @@ administrator and sees every installed add-on.
> Studio or Talk lose access until an administrator grants `addons` to them in
> **Settings → Users and keys**.
## Install from a file
You can install an add-on from one zip file, with no library and no registry.
Use it for an add-on you built yourself, for a build you want to try before it
is published, and for a host that cannot reach a library.
A zip holds one add-on for one platform. It holds the files of the add-on
package: `manifest.json`, the executable, the UI files and icon, the skills and
the files the platform needs at run time. It also holds `zip-manifest.json`,
which lists each file with its sha256 and size. The file name is
`<id>-<version>-<os>-<arch>.zip`. A `.sha256` file in `sha256sum` format goes
with it.
### Trust
Nothing signs a local file, so LocalAI cannot tell who made it. The zip checks
the files against the digests it lists. That finds a damaged or mixed-up file.
It does not prove where the file came from. You choose what you install: an
add-on from a file is trusted as far as you trust the file. LocalAI does not try
to protect you from a hostile add-on that you install on purpose.
The install dialog shows, before you confirm:
- the sha256 of the whole file, the add-on ID and version, the platform and the
host API range of the manifest;
- the host operations the add-on asks for, in the same step as for a library
add-on. A local file is never official, so the official-only blanket approval
grants it nothing;
- the notice "Local file, unsigned".
The receipt of the install records the source `local-file` and the origin
"local file, unsigned". The Add-ons page, the Details of the add-on and the
Host access page show that notice for as long as the add-on is installed.
Compare the sha256 with the `.sha256` file that came with the zip, or with
`sha256sum` on the file, when you got it from someone else.
### Install
On the Add-ons page, an administrator selects **Install from file** and picks
the zip. The server checks the file and shows the install dialog. Then:
- A new add-on is installed and turned on, as for a library add-on.
- A file with the same ID as an installed add-on and a higher version is an
upgrade. It goes through the same generations, backup, migration and recovery
as every upgrade. It does not change whether the add-on is on or off.
- A file with the same version as the installed one is refused.
- A file with a lower version is refused unless you tick the confirmation in the
dialog. An older version may not read data that a newer version wrote. The
data format rules of recovery still apply to it.
- An add-on that came from a library and one that came from a file have
different trusted identities. When the add-on has retained data, the owner
refuses a switch between them. Uninstall it first and keep the data, then
install the other one.
From a terminal, `local-ai addons inspect <file>` checks a zip on your machine
and prints what it holds. `local-ai addons install <file>` checks it, uploads it
to a running server and prints the link of the page that finishes the install:
```bash
local-ai addons install dist/addons/memory-0.1.0-linux-amd64.zip \
--target http://localhost:8080 --api-key "$LOCALAI_API_KEY"
```
The command never installs by itself. The install needs the host access review
and the confirmation of an administrator in their own browser session, like
every change of what an add-on may do on the host. `--target` and `--api-key`
come from `LOCALAI_TARGET` and `LOCALAI_API_KEY` when you leave them out.
### What the server does with the file
The routes are administrator-only. `POST /api/addons/files` takes the zip as a
multipart form with one part named `file`. An administrator's session or API key
can stage a file, because staging runs nothing and changes no add-on.
`GET /api/addons/files/{fileId}` reads a staged file and
`DELETE /api/addons/files/{fileId}` removes it. The answer of the upload has the
file ID, the sha256, the add-on ID, title, version, platform and API range, the
host operations the manifest asks for, how the file relates to the installed
add-on (`new`, `upgrade`, `same` or `downgrade`) and the origin.
The owner keeps the file in a private folder of its own storage for one hour.
The file belongs to the user that uploaded it, and no other user can read or
install it. The owner deletes the folder at start and the file after the
install. The install is the host access `preview` and `install` with
`sourceId` set to `local-file` and `version` set to the file ID. They keep every
rule of the host access routes: only the administrator's own browser session can
install, the preview nonce and the digest bind the install to this file, and the
install body has `downgrade: true` to confirm an older version. The plain
`dispatch` install does not take a file. No MCP tool maps to these routes.
The owner refuses a file, with the rule it broke as the error type, when:
| Type | Rule |
|---|---|
| `bad_zip` | It is not a zip, it is damaged, it is empty or it uses an unsupported compression. |
| `unsafe_path` | A path is absolute, has `..`, a backslash, a drive letter or a NUL, is not clean, or repeats (also when only the case differs). |
| `unsupported_entry` | An entry is a link or a special file. |
| `too_large` | The zip, or the files together, are over the add-on size limit (512 MiB). |
| `too_many_files` | It holds more than 10000 files. |
| `compression_ratio` | A file over 1 MiB expands more than 200 to 1. |
| `bad_manifest` | `zip-manifest.json` is missing or invalid, or `manifest.json` does not match it. |
| `digest_mismatch` | A file is missing, extra, or has another size or sha256 than the list. |
| `wrong_platform` | The zip is for another operating system or architecture than the host. |
| `bad_mode` | A file other than the declared executable has an executable bit. |
The add-on package rules apply after that, as for a library package: the
manifest against the host, the executable, the UI files, the icon and the skills.
The owner sets the file modes itself.
In a deployment with a separate owner, you upload to any frontend. The frontend
keeps no copy: it sends the bytes to the owner in chunks of 1 MiB over the
signed carrier, and the owner enforces the size limit while it receives them.
The owner must be a version that knows the file calls, or the page says that the
owner is unavailable.
### Build a zip
`make addons-zip` builds the zip files from the add-ons in the repository. It
calls `scripts/addons/package.sh` to build and verify the OCI package of each
add-on and platform, then writes the zip from that verified package. There is no
second build path: the zip holds the same files as the registry package.
```bash
# One add-on, for the platform of this machine
make addons-zip ADDON=memory
# Every add-on, for the platform of this machine
make addons-zip
# Other platforms need the native executables
make addons-zip ADDON=memory PLATFORMS=linux/amd64,darwin/arm64 \
ADDON_EXECUTABLES=/path/to/executables
```
The files go to `dist/addons` (`ADDONS_ZIP_DIR` changes it):
```text
dist/addons/memory-0.1.0-linux-amd64.zip
dist/addons/memory-0.1.0-linux-amd64.zip.sha256
```
| Variable | Meaning |
|---|---|
| `ADDON` | One add-on ID. Without it, every add-on that has a platform file. |
| `PLATFORMS` | A comma-separated list of `os/arch`. The default is the platform of this machine. |
| `ADDON_EXECUTABLES` | For a platform other than this machine: a folder with `<os>-<arch>/<executable name>`, built natively. |
| `ADDON_VERSION` | The version. The default is the version in the manifest of the add-on. |
| `ADDON_LOCAL_CHECK` | Set it to build a platform that the platform matrix has not enabled yet. |
| `ADDONS_ZIP_DIR` | The output folder. |
The build needs Go and Node.js, as `package.sh` does; the Tables add-on also
needs a C toolchain. Without `ADDON`, the Sandbox add-on is skipped unless
`SANDBOX_GUEST_IMAGE` is set, because its executable needs the reference of its
guest image (see `scripts/addons/package.sh`). The same layout gives the same
zip bytes, so you can rebuild a file and compare the sha256.
To build and install one add-on:
```bash
make addons-zip ADDON=memory
local-ai addons install dist/addons/memory-0.1.0-linux-amd64.zip
```
## Library sources
A library source is a place LocalAI reads entries from. There are three kinds:
swagger/docs.go
+241
View File
@@ -752,6 +752,175 @@ const docTemplate = `{
}
}
},
"/api/addons/files": {
"post": {
"description": "Administrators only (an administrator's session or API key). Multipart form with one part named file, the add-on zip made by ` + "`" + `make addons-zip` + "`" + `. The bytes stream to the add-on owner, which keeps them in a private staging area for one hour, bound to the uploading user, and verifies the file: its digest manifest, its paths and sizes, its platform and its add-on manifest. Nothing is installed. Returns the file ID, the sha256 of the file, the add-on ID, version, platform and API range, the host operations the manifest asks for, how the file relates to the installed version (new, upgrade, same or downgrade) and the origin \"local file, unsigned\": nothing signs a local file, so the administrator chooses what to install. The install is host-grants/preview and host-grants/install with sourceId local-file and version equal to the file ID; it needs the administrator's own browser session. Refusals carry the rule that failed as the error type: bad_zip, unsafe_path, unsupported_entry, too_large, too_many_files, compression_ratio, bad_manifest, digest_mismatch, wrong_platform or bad_mode. No MCP tool maps to this route.",
"consumes": [
"multipart/form-data"
],
"produces": [
"application/json"
],
"tags": [
"Addons"
],
"summary": "Upload an add-on zip file to install from a file (administrators)",
"parameters": [
{
"type": "file",
"description": "The add-on zip",
"name": "file",
"in": "formData",
"required": true
}
],
"responses": {
"200": {
"description": "The verified file",
"schema": {
"$ref": "#/definitions/addons.FileView"
}
},
"400": {
"description": "Not a multipart form with a file, or the file broke a rule",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"401": {
"description": "Named authentication required",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"403": {
"description": "Feature or administration denied",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"413": {
"description": "The file is over the size limit",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"429": {
"description": "Too many staged files",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"503": {
"description": "Addons or the owner are unavailable",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
}
}
}
},
"/api/addons/files/{fileId}": {
"get": {
"description": "Administrators only. The same answer as the upload, for a file of the calling user that has not expired. 404 when the file is gone or belongs to another user.",
"produces": [
"application/json"
],
"tags": [
"Addons"
],
"summary": "Read a staged add-on file (administrators)",
"parameters": [
{
"type": "string",
"description": "File ID from the upload",
"name": "fileId",
"in": "path",
"required": true
}
],
"responses": {
"200": {
"description": "The staged file",
"schema": {
"$ref": "#/definitions/addons.FileView"
}
},
"401": {
"description": "Named authentication required",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"403": {
"description": "Feature or administration denied",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"404": {
"description": "No such file",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"503": {
"description": "Addons or the owner are unavailable",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
}
}
},
"delete": {
"description": "Administrators only. Removes a file of the calling user that waits for an install. 404 when the file is gone or belongs to another user.",
"produces": [
"application/json"
],
"tags": [
"Addons"
],
"summary": "Remove a staged add-on file (administrators)",
"parameters": [
{
"type": "string",
"description": "File ID from the upload",
"name": "fileId",
"in": "path",
"required": true
}
],
"responses": {
"204": {
"description": "Removed"
},
"401": {
"description": "Named authentication required",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"403": {
"description": "Feature or administration denied",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"404": {
"description": "No such file",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"503": {
"description": "Addons or the owner are unavailable",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
}
}
}
},
"/api/addons/host-grants": {
"get": {
"description": "Administrators only (an administrator's session or API key). Returns the revision of the grants document, whether the deployment locks the UI store, the blanket approval switch (mode off, official or any; setBy ui or deployment), the deployment floor (the policy file and flags, read-only), the deny rules by source (file and flags, which cannot be edited here, and ui), and for each installed add-on the operations its verified manifest requests (required and optional) with a plain title, text and risk, whether each is allowed, not_allowed, blocked or unsupported, where the grant comes from (deployment, install, upgrade, edit or blanket), when and by whom, the operations granted that the manifest no longer requests, an identity mismatch flag and a pending upgrade that waits for approval. Read-only. Nothing in the answer is a credential. No MCP tool maps to this route.",
@@ -15412,6 +15581,74 @@ const docTemplate = `{
}
}
},
"addons.FileView": {
"type": "object",
"properties": {
"addonId": {
"type": "string"
},
"api": {
"description": "API is the host API range the manifest declares.",
"allOf": [
{
"$ref": "#/definitions/contract.VersionRange"
}
]
},
"fileId": {
"type": "string"
},
"installed": {
"type": "boolean"
},
"installedVersion": {
"type": "string"
},
"name": {
"type": "string"
},
"optional": {
"type": "array",
"items": {
"type": "string"
}
},
"origin": {
"type": "string"
},
"platform": {
"type": "string"
},
"relation": {
"description": "Relation is new, upgrade, same or downgrade.",
"type": "string"
},
"required": {
"description": "Required and Optional are the host operations the manifest asks for.",
"type": "array",
"items": {
"type": "string"
}
},
"sha256": {
"description": "SHA256 is the digest of the whole file, in hex. The install approval\nbinds to \"sha256:\" plus this value.",
"type": "string"
},
"size": {
"type": "integer"
},
"source": {
"description": "Source and Origin say that nothing signs the file.",
"type": "string"
},
"title": {
"type": "string"
},
"version": {
"type": "string"
}
}
},
"addons.OperationStatus": {
"type": "object",
"properties": {
@@ -17933,6 +18170,10 @@ const docTemplate = `{
"candidateDigest": {
"type": "string"
},
"downgrade": {
"description": "Downgrade confirms that a local file may install an older version than\nthe installed one. Only a sourceId of local-file reads it.",
"type": "boolean"
},
"expectedDigest": {
"description": "ExpectedDigest and CandidateDigest pin an upgrade; both or neither.",
"type": "string"
swagger/swagger.json
+241
View File
@@ -749,6 +749,175 @@
}
}
},
"/api/addons/files": {
"post": {
"description": "Administrators only (an administrator's session or API key). Multipart form with one part named file, the add-on zip made by `make addons-zip`. The bytes stream to the add-on owner, which keeps them in a private staging area for one hour, bound to the uploading user, and verifies the file: its digest manifest, its paths and sizes, its platform and its add-on manifest. Nothing is installed. Returns the file ID, the sha256 of the file, the add-on ID, version, platform and API range, the host operations the manifest asks for, how the file relates to the installed version (new, upgrade, same or downgrade) and the origin \"local file, unsigned\": nothing signs a local file, so the administrator chooses what to install. The install is host-grants/preview and host-grants/install with sourceId local-file and version equal to the file ID; it needs the administrator's own browser session. Refusals carry the rule that failed as the error type: bad_zip, unsafe_path, unsupported_entry, too_large, too_many_files, compression_ratio, bad_manifest, digest_mismatch, wrong_platform or bad_mode. No MCP tool maps to this route.",
"consumes": [
"multipart/form-data"
],
"produces": [
"application/json"
],
"tags": [
"Addons"
],
"summary": "Upload an add-on zip file to install from a file (administrators)",
"parameters": [
{
"type": "file",
"description": "The add-on zip",
"name": "file",
"in": "formData",
"required": true
}
],
"responses": {
"200": {
"description": "The verified file",
"schema": {
"$ref": "#/definitions/addons.FileView"
}
},
"400": {
"description": "Not a multipart form with a file, or the file broke a rule",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"401": {
"description": "Named authentication required",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"403": {
"description": "Feature or administration denied",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"413": {
"description": "The file is over the size limit",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"429": {
"description": "Too many staged files",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"503": {
"description": "Addons or the owner are unavailable",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
}
}
}
},
"/api/addons/files/{fileId}": {
"get": {
"description": "Administrators only. The same answer as the upload, for a file of the calling user that has not expired. 404 when the file is gone or belongs to another user.",
"produces": [
"application/json"
],
"tags": [
"Addons"
],
"summary": "Read a staged add-on file (administrators)",
"parameters": [
{
"type": "string",
"description": "File ID from the upload",
"name": "fileId",
"in": "path",
"required": true
}
],
"responses": {
"200": {
"description": "The staged file",
"schema": {
"$ref": "#/definitions/addons.FileView"
}
},
"401": {
"description": "Named authentication required",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"403": {
"description": "Feature or administration denied",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"404": {
"description": "No such file",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"503": {
"description": "Addons or the owner are unavailable",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
}
}
},
"delete": {
"description": "Administrators only. Removes a file of the calling user that waits for an install. 404 when the file is gone or belongs to another user.",
"produces": [
"application/json"
],
"tags": [
"Addons"
],
"summary": "Remove a staged add-on file (administrators)",
"parameters": [
{
"type": "string",
"description": "File ID from the upload",
"name": "fileId",
"in": "path",
"required": true
}
],
"responses": {
"204": {
"description": "Removed"
},
"401": {
"description": "Named authentication required",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"403": {
"description": "Feature or administration denied",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"404": {
"description": "No such file",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
},
"503": {
"description": "Addons or the owner are unavailable",
"schema": {
"$ref": "#/definitions/addons.AddonErrorResponse"
}
}
}
}
},
"/api/addons/host-grants": {
"get": {
"description": "Administrators only (an administrator's session or API key). Returns the revision of the grants document, whether the deployment locks the UI store, the blanket approval switch (mode off, official or any; setBy ui or deployment), the deployment floor (the policy file and flags, read-only), the deny rules by source (file and flags, which cannot be edited here, and ui), and for each installed add-on the operations its verified manifest requests (required and optional) with a plain title, text and risk, whether each is allowed, not_allowed, blocked or unsupported, where the grant comes from (deployment, install, upgrade, edit or blanket), when and by whom, the operations granted that the manifest no longer requests, an identity mismatch flag and a pending upgrade that waits for approval. Read-only. Nothing in the answer is a credential. No MCP tool maps to this route.",
@@ -15409,6 +15578,74 @@
}
}
},
"addons.FileView": {
"type": "object",
"properties": {
"addonId": {
"type": "string"
},
"api": {
"description": "API is the host API range the manifest declares.",
"allOf": [
{
"$ref": "#/definitions/contract.VersionRange"
}
]
},
"fileId": {
"type": "string"
},
"installed": {
"type": "boolean"
},
"installedVersion": {
"type": "string"
},
"name": {
"type": "string"
},
"optional": {
"type": "array",
"items": {
"type": "string"
}
},
"origin": {
"type": "string"
},
"platform": {
"type": "string"
},
"relation": {
"description": "Relation is new, upgrade, same or downgrade.",
"type": "string"
},
"required": {
"description": "Required and Optional are the host operations the manifest asks for.",
"type": "array",
"items": {
"type": "string"
}
},
"sha256": {
"description": "SHA256 is the digest of the whole file, in hex. The install approval\nbinds to \"sha256:\" plus this value.",
"type": "string"
},
"size": {
"type": "integer"
},
"source": {
"description": "Source and Origin say that nothing signs the file.",
"type": "string"
},
"title": {
"type": "string"
},
"version": {
"type": "string"
}
}
},
"addons.OperationStatus": {
"type": "object",
"properties": {
@@ -17930,6 +18167,10 @@
"candidateDigest": {
"type": "string"
},
"downgrade": {
"description": "Downgrade confirms that a local file may install an older version than\nthe installed one. Only a sourceId of local-file reads it.",
"type": "boolean"
},
"expectedDigest": {
"description": "ExpectedDigest and CandidateDigest pin an upgrade; both or neither.",
"type": "string"
swagger/swagger.yaml
+182
View File
@@ -52,6 +52,54 @@ definitions:
description: Digest is the digest of the proposal as it was displayed.
type: string
type: object
addons.FileView:
properties:
addonId:
type: string
api:
allOf:
- $ref: '#/definitions/contract.VersionRange'
description: API is the host API range the manifest declares.
fileId:
type: string
installed:
type: boolean
installedVersion:
type: string
name:
type: string
optional:
items:
type: string
type: array
origin:
type: string
platform:
type: string
relation:
description: Relation is new, upgrade, same or downgrade.
type: string
required:
description: Required and Optional are the host operations the manifest asks
for.
items:
type: string
type: array
sha256:
description: |-
SHA256 is the digest of the whole file, in hex. The install approval
binds to "sha256:" plus this value.
type: string
size:
type: integer
source:
description: Source and Origin say that nothing signs the file.
type: string
title:
type: string
version:
type: string
type: object
addons.OperationStatus:
properties:
addonID:
@@ -2011,6 +2059,11 @@ definitions:
$ref: '#/definitions/gateway.HostGrantsApprove'
candidateDigest:
type: string
downgrade:
description: |-
Downgrade confirms that a local file may install an older version than
the installed one. Only a sourceId of local-file reads it.
type: boolean
expectedDigest:
description: ExpectedDigest and CandidateDigest pin an upgrade; both or neither.
type: string
@@ -12079,6 +12132,135 @@ paths:
summary: Submit a typed addon lifecycle operation or read an addon resource
tags:
- Addons
/api/addons/files:
post:
consumes:
- multipart/form-data
description: 'Administrators only (an administrator''s session or API key).
Multipart form with one part named file, the add-on zip made by `make addons-zip`.
The bytes stream to the add-on owner, which keeps them in a private staging
area for one hour, bound to the uploading user, and verifies the file: its
digest manifest, its paths and sizes, its platform and its add-on manifest.
Nothing is installed. Returns the file ID, the sha256 of the file, the add-on
ID, version, platform and API range, the host operations the manifest asks
for, how the file relates to the installed version (new, upgrade, same or
downgrade) and the origin "local file, unsigned": nothing signs a local file,
so the administrator chooses what to install. The install is host-grants/preview
and host-grants/install with sourceId local-file and version equal to the
file ID; it needs the administrator''s own browser session. Refusals carry
the rule that failed as the error type: bad_zip, unsafe_path, unsupported_entry,
too_large, too_many_files, compression_ratio, bad_manifest, digest_mismatch,
wrong_platform or bad_mode. No MCP tool maps to this route.'
parameters:
- description: The add-on zip
in: formData
name: file
required: true
type: file
produces:
- application/json
responses:
"200":
description: The verified file
schema:
$ref: '#/definitions/addons.FileView'
"400":
description: Not a multipart form with a file, or the file broke a rule
schema:
$ref: '#/definitions/addons.AddonErrorResponse'
"401":
description: Named authentication required
schema:
$ref: '#/definitions/addons.AddonErrorResponse'
"403":
description: Feature or administration denied
schema:
$ref: '#/definitions/addons.AddonErrorResponse'
"413":
description: The file is over the size limit
schema:
$ref: '#/definitions/addons.AddonErrorResponse'
"429":
description: Too many staged files
schema:
$ref: '#/definitions/addons.AddonErrorResponse'
"503":
description: Addons or the owner are unavailable
schema:
$ref: '#/definitions/addons.AddonErrorResponse'
summary: Upload an add-on zip file to install from a file (administrators)
tags:
- Addons
/api/addons/files/{fileId}:
delete:
description: Administrators only. Removes a file of the calling user that waits
for an install. 404 when the file is gone or belongs to another user.
parameters:
- description: File ID from the upload
in: path
name: fileId
required: true
type: string
produces:
- application/json
responses:
"204":
description: Removed
"401":
description: Named authentication required
schema:
$ref: '#/definitions/addons.AddonErrorResponse'
"403":
description: Feature or administration denied
schema:
$ref: '#/definitions/addons.AddonErrorResponse'
"404":
description: No such file
schema:
$ref: '#/definitions/addons.AddonErrorResponse'
"503":
description: Addons or the owner are unavailable
schema:
$ref: '#/definitions/addons.AddonErrorResponse'
summary: Remove a staged add-on file (administrators)
tags:
- Addons
get:
description: Administrators only. The same answer as the upload, for a file
of the calling user that has not expired. 404 when the file is gone or belongs
to another user.
parameters:
- description: File ID from the upload
in: path
name: fileId
required: true
type: string
produces:
- application/json
responses:
"200":
description: The staged file
schema:
$ref: '#/definitions/addons.FileView'
"401":
description: Named authentication required
schema:
$ref: '#/definitions/addons.AddonErrorResponse'
"403":
description: Feature or administration denied
schema:
$ref: '#/definitions/addons.AddonErrorResponse'
"404":
description: No such file
schema:
$ref: '#/definitions/addons.AddonErrorResponse'
"503":
description: Addons or the owner are unavailable
schema:
$ref: '#/definitions/addons.AddonErrorResponse'
summary: Read a staged add-on file (administrators)
tags:
- Addons
/api/addons/host-grants:
get:
description: Administrators only (an administrator's session or API key). Returns