Ettore Di Giacinto 5295c932c0 fix(addons): check the private egress phrase on the owner ...

With add-ons enabled /api/settings rejects chats_egress_allow_private, so
the typed phrase check there never ran on the only write path, the
host-settings-update action. The page asked for the phrase but dropped it
from the patch, and a direct admin call could turn the switch on without
it.

The patch now carries chats_egress_private_confirm and hostsettings.apply
rejects turning the switch on without it. The phrase is hashed into the
operation receipt like the rest of the patch and is never stored. The e2e
fixture enforces the same rule and the egress spec asserts the phrase in
the owner patch again.

Assisted-by: Claude Code:claude-sonnet-5-5
Signed-off-by: Ettore Di Giacinto <mudler@localai.io>

2026-11-03 08:45:52 +00:00

..

authority_test.go

fix(addons): check the private egress phrase on the owner

2026-11-03 08:45:52 +00:00

migration.go

fix(addons): make owner settings authoritative (#13033)

2026-11-02 18:48:39 +01:00

policy.go

fix(addons): check the private egress phrase on the owner

2026-11-03 08:45:52 +00:00

store.go

fix(addons): make owner settings authoritative (#13033)

2026-11-02 18:48:39 +01:00

wildcards_test.go

fix(addons): make owner settings authoritative (#13033)

2026-11-02 18:48:39 +01:00