Ettore Di Giacinto c605b26fc7 feat(addons): ask the Authority on every host operation call ...

The broker copied the allowed prefixes when an add-on started, so a
change of grants needed a restart of the add-on. Take an Authority
instead and ask it on each call: a revoke or a deny applies to the next
call, and a call that already runs finishes. A refused call answers the
same text whatever the reason; the reason goes to the log.

The supervisor opens the host endpoint when the add-on holds an
operation or its manifest declares one, so an add-on with an optional
operation and no grant starts degraded and a later grant works at once.
The broker now exists whenever the add-on manager does. The manager,
the apps list and the tool filters read the same Authority, which is the
startup policy until another one is set. Admission also tells a denied
operation from a missing grant.

Assisted-by: Claude:claude-sonnet-5-5 go

2026-11-03 21:33:36 +00:00

..

addon_admin_auth_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

addon_admin_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

addon_auto_upgrade_test.go

refactor(addons): make manifest api 2 the only version

2026-11-03 16:15:07 +00:00

addon_auto_upgrade.go

fix(addons): make owner settings authoritative (#13033)

2026-11-02 18:48:39 +01:00

addon_egress_internal_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

addon_egress.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

addon_engine_jobs_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

addon_gateway.go

feat(addons): ask the Authority on every host operation call

2026-11-03 21:33:36 +00:00

addon_host_ops_auth_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

addon_host_ops_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

addon_library_refresh_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

addon_pin_store_internal_test.go

feat(addons): declare typed host capabilities (#13034)

2026-11-02 23:50:40 +00:00

addon_pin_sweep_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

addon_pins_test.go

feat(addons): declare typed host capabilities (#13034)

2026-11-02 23:50:40 +00:00

addon_pins.go

feat(addons): declare typed host capabilities (#13034)

2026-11-02 23:50:40 +00:00

addon_policy_reader.go

feat(addons): move connector file bytes by handle

2026-11-03 15:54:45 +00:00

addon_provider_consumers_test.go

fix(addons): make owner settings authoritative (#13033)

2026-11-02 18:48:39 +01:00

addon_settings_authority_internal_test.go

fix(addons): make owner settings authoritative (#13033)

2026-11-02 18:48:39 +01:00

addon_settings_bootstrap_test.go

fix(addons): make owner settings authoritative (#13033)

2026-11-02 18:48:39 +01:00

addon_settings.go

fix(addons): make owner settings authoritative (#13033)

2026-11-02 18:48:39 +01:00

addon_tool_feature_test.go

feat(addons): ask the Authority on every host operation call

2026-11-03 21:33:36 +00:00

addon_upgrade_policy_test.go

fix(addons): make owner settings authoritative (#13033)

2026-11-02 18:48:39 +01:00

addon_workspace_principal_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

addons_auth_test.go

feat(addons): declare typed host capabilities (#13034)

2026-11-02 23:50:40 +00:00

addons_feature.go

feat(addons): run the add-on owner as its own workload (#12867)

2026-10-24 14:29:39 +02:00

addons_models_probe.go

feat(addons): run the add-on owner as its own workload (#12867)

2026-10-24 14:29:39 +02:00

addons_other_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

addons_split_test.go

refactor(addons): make manifest api 2 the only version

2026-11-03 16:15:07 +00:00

addons_test.go

refactor(addons): make manifest api 2 the only version

2026-11-03 16:15:07 +00:00

application_suite_test.go

feat(branding): admin-configurable instance name, tagline, and assets (#9635)

2026-05-02 15:51:36 +02:00

application.go

feat(addons): ask the Authority on every host operation call

2026-11-03 21:33:36 +00:00

background_context_internal_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

config_file_watcher.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

connector_owner_routing_test.go

test(studio): create connector bindings with a kind

2026-11-03 17:05:24 +00:00

decision_runner.go

feat(router): route with native decision models (#12449)

2026-10-04 09:34:21 +02:00

development_preference_test.go

fix(backends): prefer installed development builds (#12782)

2026-10-19 22:58:38 +02:00

distributed.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

execution_binding_test.go

feat(addons): ask the Authority on every host operation call

2026-11-03 21:33:36 +00:00

execution_binding.go

feat(addons): ask the Authority on every host operation call

2026-11-03 21:33:36 +00:00

failover_distributed_test.go

fix(failover): keep the probe leader until its session ends

2026-09-27 07:42:20 +00:00

failover_distributed.go

fix(failover): free the leader lock soon after the leader's host dies

2026-09-27 07:42:20 +00:00

failover_test.go

fix(failover): never load a warm target inside a probe

2026-09-27 07:42:20 +00:00

failover.go

feat(failover): run one prober per cluster and pin warm targets on workers

2026-09-27 07:42:20 +00:00

library_frontend_test.go

feat(addons): run the add-on owner as its own workload (#12867)

2026-10-24 14:29:39 +02:00

library_owner.go

feat(addons): run the add-on owner as its own workload (#12867)

2026-10-24 14:29:39 +02:00

library_remote.go

feat(addons): run the add-on owner as its own workload (#12867)

2026-10-24 14:29:39 +02:00

library_snapshot.go

feat(addons): run the add-on owner as its own workload (#12867)

2026-10-24 14:29:39 +02:00

library_sources_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

library_sources.go

feat(addons): run the add-on owner as its own workload (#12867)

2026-10-24 14:29:39 +02:00

library_system_test.go

feat(addons): run the add-on owner as its own workload (#12867)

2026-10-24 14:29:39 +02:00

mitm_test.go

fix(router): production-ready request router + auto-size batch for embedding/rerank (#10104)

2026-06-12 16:21:15 +02:00

mitm.go

feat(pii): NER tier engine — privacy-filter.cpp backend + NER-centric PII filter (#10360)

2026-06-18 11:45:22 +01:00

model_artifact_materializer_test.go

feat: materialize Hugging Face model artifacts (#10825)

2026-07-15 01:09:33 +02:00

model_files_test.go

fix(distributed): stage the files a model install declares (#12309)

2026-09-28 08:34:56 +02:00

model_files.go

fix(distributed): stage the files a model install declares (#12309)

2026-09-28 08:34:56 +02:00

optional_services_test.go

feat(router): route with native decision models (#12449)

2026-10-04 09:34:21 +02:00

p2p.go

fix(p2p): bind resource limits at CLI boundaries

2026-11-03 09:21:06 +00:00

pii_policy_test.go

feat(pii): NER tier engine — privacy-filter.cpp backend + NER-centric PII filter (#10360)

2026-06-18 11:45:22 +01:00

readiness_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

router_factories_test.go

fix(routing): keep embedder fingerprint stable across probed reasoning

2026-10-13 08:06:49 +00:00

router_factories.go

fix(routing): keep embedder fingerprint stable across probed reasoning

2026-10-13 08:06:49 +00:00

runtime_settings_branding_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

runtime_settings_galleries_test.go

fix(gallery): verification follow-ups for oci:// galleries (#12243)

2026-09-24 21:20:21 +02:00

startup_auth_test.go

feat(addons): declare typed host capabilities (#13034)

2026-11-02 23:50:40 +00:00

startup.go

refactor(application): tidy workspace file setup

2026-11-03 08:38:35 +00:00

studio_addons_test.go

feat(addons): ask the Authority on every host operation call

2026-11-03 21:33:36 +00:00

studio_agentopts_internal_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_assistant_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_assistant.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_chatworker_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_chatworker.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_collections.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_connectors.go

feat(connectors): grant the usual permissions once to old bindings

2026-11-03 21:17:39 +00:00

studio_convert_old_data_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_convert_startup_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_convert_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_convert.go

refactor(addons): remove the shims for older add-on data

2026-11-03 16:56:49 +00:00

studio_egress_settings_internal_test.go

fix(addons): make owner settings authoritative (#13033)

2026-11-02 18:48:39 +01:00

studio_egress_settings.go

refactor(studio): word the command provider text without naming an add-on

2026-11-03 10:43:37 +00:00

studio_execution.go

fix(chats): show the network switcher and say why execution status is unknown

2026-11-03 08:39:30 +00:00

studio_files_test.go

feat(workspace): use filesystem storage without S3 (#13012)

2026-11-01 18:41:33 +01:00

studio_files.go

feat(addons): move connector file bytes by handle

2026-11-03 15:54:45 +00:00

studio_jobs.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_leader_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_leader.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_loops.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_mcpconns_timeout_internal_test.go

test(chats): clarify configured timeout success

2026-11-03 09:21:06 +00:00

studio_mcpconns.go

fix(chats): give MCP connector tool calls the MCP tool timeout

2026-11-03 09:17:42 +00:00

studio_mcpcontent.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_media_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_media.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_owner_role_test.go

fix(addons): stop the add-on owner from running chat background work

2026-11-03 08:38:11 +00:00

studio_permissions.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_service_test.go

fix(studio): read an alias's model settings from its target

2026-11-03 12:07:30 +00:00

studio_service.go

fix(studio): read an alias's model settings from its target

2026-11-03 12:07:30 +00:00

studio_shared_files_test.go

refactor(application): tidy workspace file setup

2026-11-03 08:38:35 +00:00

studio_shared_files.go

feat(workspace): use filesystem storage without S3 (#13012)

2026-11-01 18:41:33 +01:00

studio_store_test.go

feat(addons): declare typed host capabilities (#13034)

2026-11-02 23:50:40 +00:00

studio_store.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_triggers.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_user_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_web_test.go

refactor(studio): word the command provider text without naming an add-on

2026-11-03 10:43:37 +00:00

studio_web.go

refactor(studio): word the command provider text without naming an add-on

2026-11-03 10:43:37 +00:00

upgrade_checker_library_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

upgrade_checker.go

feat(addons): list and install backends from a library (#12816)

2026-10-23 01:00:07 +02:00

watchdog_test.go

fix(watchdog): guard StopWatchdog with watchdogMutex to prevent double close (#10841) (#10859)

2026-07-16 09:40:29 +02:00

watchdog.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

workspace_automatic_test.go

refactor(application): tidy workspace file setup

2026-11-03 08:38:35 +00:00