LocalAI

0 Fork 0

mirror of https://github.com/mudler/LocalAI.git synced 2026-11-06 04:23:15 -05:00

Files

T

Ettore Di Giacinto 18e667cafb feat(addons): add the owner service and split forwarding for host access

The owner now serves the host access calls: read the grants, preview what an
install would ask for, install or upgrade with an approval, edit or revoke
the grants of one add-on, change the blanket approval and the deny rules.
Every write needs the human surface mark and is refused when the deployment
locks the store. Typed refusals (revision_conflict, approval_stale,
blocked_by_policy, locked_by_deployment and others) cross the carrier
unchanged, so every frontend gives the answer of the owner.

A frontend carries the mark as a signed field of the forwarded request, and
only for a host access call. The owner honors it and nothing else: a
frontend with its own flags or store still forwards, and an owner without the
calls is reported as unavailable with its reason.

The preview issues a single-use nonce bound to the credential, the add-on,
the package digest and the grants revision. The install must present it.

Assisted-by: Claude:claude-sonnet-5-5 go gofmt ginkgo

2026-11-03 21:55:38 +00:00

application

fix(studio): use the backend's default window when context_size is unset

2026-11-03 21:50:57 +00:00

backend

feat(realtime): LFM3-Audio speech-to-speech on llama.cpp, remove liquid-audio (#12958 )

2026-10-29 22:06:41 +01:00

cli

feat(addons): add schemaVersion 2 host policy with a deny list

2026-11-03 21:22:56 +00:00

clients

security(http): refuse redirects on outbound clients via hardened pkg/httpclient (#10087 )