Ettore Di Giacinto 7ce4507da1 feat(addons): keep per-person settings that an add-on declares ...

An add-on can declare userSettings in its manifest: a key, the allowed
values and a default. The host keeps each person's answer in the account
database every frontend shares (one file when accounts are off), checks
every write against the declaration, and never asks the add-on.

GET and PUT /api/addons/{id}/user-settings read and write them. A write
needs the person's own browser session, so no API key, model or tool can
change one. A setting may carry a role that the host reads for its own
rules; the host fixes the values and the default of a role so a manifest
cannot loosen it. Pages reach their settings through sdk.userSettings,
which is bound to the add-on that calls it.

Assisted-by: Claude:claude-sonnet-5-5 go node

2026-11-03 22:46:22 +00:00

..

auth

feat(addons): choose the connection of a credentialed add-on explicitly

2026-11-03 22:02:30 +00:00

endpoints

feat(addons): keep per-person settings that an add-on declares

2026-11-03 22:46:22 +00:00

middleware

fix(http): believe X-Forwarded-Prefix only from a trusted proxy

2026-11-03 21:50:57 +00:00

react-ui

feat(addons): keep per-person settings that an add-on declares

2026-11-03 22:46:22 +00:00

routes

feat(addons): keep per-person settings that an add-on declares

2026-11-03 22:46:22 +00:00

static

feat(ui): serve an apple-touch-icon so iOS shows the logo on the home screen (#12917)

2026-10-26 09:42:07 +01:00

views

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

access_log_internal_test.go

feat(http): add --trusted-proxies to resolve the real client address

2026-11-03 15:48:38 +00:00

access_log.go

feat(http): add --trusted-proxies to resolve the real client address

2026-11-03 15:48:38 +00:00

admission_handler_test.go

fix: return correct HTTP status codes for saturation and no-nodes-available (#12113)

2026-09-28 00:11:51 +02:00

app_test.go

fix(http): believe X-Forwarded-Prefix only from a trusted proxy

2026-11-03 21:50:57 +00:00

app.go

feat(addons): keep per-person settings that an add-on declares

2026-11-03 22:46:22 +00:00

body_limit_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

csrf_multipart_test.go

fix(auth): require validated header credentials for CSRF exemption (#12185)

2026-09-22 04:35:09 +01:00

diagnostics_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

embeddings_pooling_test.go

feat(router): make KNN a first-class classifier with a persisted, curated corpus (#10652)

2026-08-18 09:37:43 +02:00

explorer.go

fix(http): believe X-Forwarded-Prefix only from a trusted proxy

2026-11-03 21:50:57 +00:00

http_suite_test.go

refactor(tests): split app_test.go, move real-backend coverage to e2e-backends

2026-04-27 23:09:20 +00:00

model_load_cooldown_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

model_loading_held_test.go

fix(distributed): bound, stop and cancel model loads with leases and worker operations (#12524)

2026-10-07 16:59:56 +02:00

openresponses_test.go

Revert "chore(tests): Avoid network, sleep and more during tests" (#11601)

2026-08-19 16:39:39 +02:00

render.go

feat: add distributed mode (#9124)

2026-03-30 00:47:27 +02:00

route_authmodes_test.go

refactor(addons): make manifest api 2 the only version

2026-11-03 16:15:07 +00:00

route_coverage_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

static_cache_test.go

perf(http): gzip responses, cache hashed assets, bound the trace endpoints (#11056)

2026-07-22 22:51:25 +02:00

studio_provider_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_routes_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

testport_test.go

chore: remove local pre-commit gates (#11116)

2026-07-25 01:19:32 +02:00