Ettore Di Giacinto d71df56a66 fix(addons): take a local file only with the dialog's approval ...

The plain typed install and the owner's automatic upgrade never install
a package from a file. Only the host access install, which needs the
administrator's own browser session, sets an approval, so a key or a
tool cannot install a staged file. Add auth tests for the file routes.

Assisted-by: Claude:claude-sonnet-5-5 go gofmt

2026-11-03 22:52:50 +00:00

..

apps_test.go

feat(addons): keep per-person settings that an add-on declares

2026-11-03 22:46:22 +00:00

apps.go

feat(addons): log the reason behind a generic denial (#12875)

2026-10-24 01:30:41 +02:00

artifacts_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

artifacts.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

assets_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

assets.go

feat(addons): log the reason behind a generic denial (#12875)

2026-10-24 01:30:41 +02:00

browserguard_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

builtin_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

builtin.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

catalogui_test.go

fix(addons): run accepted upgrades on the owner (#13035)

2026-11-02 22:47:17 +01:00

files_auth_test.go

fix(addons): take a local file only with the dialog's approval

2026-11-03 22:52:50 +00:00

files_test.go

feat(addons): upload a zip to the owner and install it from the Add-ons API

2026-11-03 22:52:50 +00:00

files.go

feat(addons): upload a zip to the owner and install it from the Add-ons API

2026-11-03 22:52:50 +00:00

forwarding_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

gateway_auth_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

gateway_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

gateway.go

feat(addons): upload a zip to the owner and install it from the Add-ons API

2026-11-03 22:52:50 +00:00

hostgrants_auth_test.go

fix(addons): fail closed on audit errors at install, audit refused callers and restarts

2026-11-03 22:52:09 +00:00

hostgrants_test.go

feat(addons): match the host access routes to the React client

2026-11-03 21:55:38 +00:00

hostgrants.go

fix(addons): fail closed on audit errors at install, audit refused callers and restarts

2026-11-03 22:52:09 +00:00

human_surface_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

installrefusal_test.go

refactor(addons): make manifest api 2 the only version

2026-11-03 16:15:07 +00:00

pins_test.go

feat(addons): declare typed host capabilities (#13034)

2026-11-02 23:50:40 +00:00

pins.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

proposals_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

proposals.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

recovery.go

feat(addons): log the reason behind a generic denial (#12875)

2026-10-24 01:30:41 +02:00

resources.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

resulterror_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

routes_test.go

feat(addons): add the /api/addons/host-grants routes

2026-11-03 21:55:38 +00:00

tools_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

updates_test.go

refactor(addons): make manifest api 2 the only version

2026-11-03 16:15:07 +00:00

updates.go

feat(addons): log the reason behind a generic denial (#12875)

2026-10-24 01:30:41 +02:00

usersettings_test.go

feat(addons): keep per-person settings that an add-on declares

2026-11-03 22:46:22 +00:00

usersettings.go

feat(addons): keep per-person settings that an add-on declares

2026-11-03 22:46:22 +00:00