Ettore Di Giacinto e28dd8a2a0 feat(addons): connect the host grants store, the Authority and the routes ...

Open the grants document and its audit file under the owner state
directory, and make the Authority read them on every call, with the
deployment floor, the deny rules and the blanket switch from the flags.
An unreadable document refuses every operation. Adapt the store to the
manager's GrantStore and the manager to the host access service of the
routes, and wire that service on the owner only. A frontend keeps the
floor and stores nothing.

Add an end-to-end test of install with approval, revoke, deny, a held
upgrade, restart and the split deployment.

Assisted-by: Claude:claude-sonnet-5-5 go

2026-11-03 22:06:43 +00:00

..

addon_admin_auth_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

addon_admin_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

addon_auto_upgrade_test.go

refactor(addons): make manifest api 2 the only version

2026-11-03 16:15:07 +00:00

addon_auto_upgrade.go

fix(addons): make owner settings authoritative (#13033)

2026-11-02 18:48:39 +01:00

addon_egress_internal_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

addon_egress.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

addon_engine_jobs_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

addon_gateway.go

feat(addons): connect the host grants store, the Authority and the routes

2026-11-03 22:06:43 +00:00

addon_host_ops_auth_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

addon_host_ops_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

addon_hostgrants_test.go

feat(addons): connect the host grants store, the Authority and the routes

2026-11-03 22:06:43 +00:00

addon_hostgrants.go

feat(addons): connect the host grants store, the Authority and the routes

2026-11-03 22:06:43 +00:00

addon_library_refresh_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

addon_pin_store_internal_test.go

feat(addons): declare typed host capabilities (#13034)

2026-11-02 23:50:40 +00:00

addon_pin_sweep_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

addon_pins_test.go

feat(addons): declare typed host capabilities (#13034)

2026-11-02 23:50:40 +00:00

addon_pins.go

feat(addons): declare typed host capabilities (#13034)

2026-11-02 23:50:40 +00:00

addon_policy_reader.go

feat(addons): move connector file bytes by handle

2026-11-03 15:54:45 +00:00

addon_provider_consumers_test.go

fix(addons): make owner settings authoritative (#13033)

2026-11-02 18:48:39 +01:00

addon_settings_authority_internal_test.go

fix(addons): make owner settings authoritative (#13033)

2026-11-02 18:48:39 +01:00

addon_settings_bootstrap_test.go

fix(addons): make owner settings authoritative (#13033)

2026-11-02 18:48:39 +01:00

addon_settings.go

fix(addons): make owner settings authoritative (#13033)

2026-11-02 18:48:39 +01:00

addon_tool_feature_test.go

feat(addons): ask the Authority on every host operation call

2026-11-03 21:33:36 +00:00

addon_upgrade_policy_test.go

fix(addons): make owner settings authoritative (#13033)

2026-11-02 18:48:39 +01:00

addon_workspace_principal_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

addons_auth_test.go

feat(addons): declare typed host capabilities (#13034)

2026-11-02 23:50:40 +00:00

addons_feature.go

feat(addons): run the add-on owner as its own workload (#12867)

2026-10-24 14:29:39 +02:00

addons_models_probe.go

feat(addons): run the add-on owner as its own workload (#12867)

2026-10-24 14:29:39 +02:00

addons_other_test.go

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

addons_split_test.go

refactor(addons): make manifest api 2 the only version

2026-11-03 16:15:07 +00:00

addons_test.go

refactor(addons): make manifest api 2 the only version

2026-11-03 16:15:07 +00:00

application_suite_test.go

feat(branding): admin-configurable instance name, tagline, and assets (#9635)

2026-05-02 15:51:36 +02:00

application.go

feat(addons): connect the host grants store, the Authority and the routes

2026-11-03 22:06:43 +00:00

background_context_internal_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

config_file_watcher.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

connector_owner_routing_test.go

test(studio): create connector bindings with a kind

2026-11-03 17:05:24 +00:00

credential_source_test.go

feat(addons): choose the connection of a credentialed add-on explicitly

2026-11-03 22:02:30 +00:00

decision_runner.go

feat(router): route with native decision models (#12449)

2026-10-04 09:34:21 +02:00

development_preference_test.go

fix(backends): prefer installed development builds (#12782)

2026-10-19 22:58:38 +02:00

distributed.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

execution_binding_test.go

feat(addons): ask the Authority on every host operation call

2026-11-03 21:33:36 +00:00

execution_binding.go

feat(addons): ask the Authority on every host operation call

2026-11-03 21:33:36 +00:00

failover_distributed_test.go

fix(failover): keep the probe leader until its session ends

2026-09-27 07:42:20 +00:00

failover_distributed.go

fix(failover): free the leader lock soon after the leader's host dies

2026-09-27 07:42:20 +00:00

failover_test.go

fix(failover): never load a warm target inside a probe

2026-09-27 07:42:20 +00:00

failover.go

feat(failover): run one prober per cluster and pin warm targets on workers

2026-09-27 07:42:20 +00:00

library_frontend_test.go

feat(addons): run the add-on owner as its own workload (#12867)

2026-10-24 14:29:39 +02:00

library_owner.go

feat(addons): run the add-on owner as its own workload (#12867)

2026-10-24 14:29:39 +02:00

library_remote.go

feat(addons): run the add-on owner as its own workload (#12867)

2026-10-24 14:29:39 +02:00

library_snapshot.go

feat(addons): run the add-on owner as its own workload (#12867)

2026-10-24 14:29:39 +02:00

library_sources_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

library_sources.go

feat(addons): run the add-on owner as its own workload (#12867)

2026-10-24 14:29:39 +02:00

library_system_test.go

feat(addons): run the add-on owner as its own workload (#12867)

2026-10-24 14:29:39 +02:00

mitm_test.go

fix(router): production-ready request router + auto-size batch for embedding/rerank (#10104)

2026-06-12 16:21:15 +02:00

mitm.go

feat(pii): NER tier engine — privacy-filter.cpp backend + NER-centric PII filter (#10360)

2026-06-18 11:45:22 +01:00

model_artifact_materializer_test.go

feat: materialize Hugging Face model artifacts (#10825)

2026-07-15 01:09:33 +02:00

model_files_test.go

fix(distributed): stage the files a model install declares (#12309)

2026-09-28 08:34:56 +02:00

model_files.go

fix(distributed): stage the files a model install declares (#12309)

2026-09-28 08:34:56 +02:00

optional_services_test.go

feat(router): route with native decision models (#12449)

2026-10-04 09:34:21 +02:00

p2p.go

fix(p2p): bind resource limits at CLI boundaries

2026-11-03 09:21:06 +00:00

pii_policy_test.go

feat(pii): NER tier engine — privacy-filter.cpp backend + NER-centric PII filter (#10360)

2026-06-18 11:45:22 +01:00

readiness_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

router_factories_test.go

fix(routing): keep embedder fingerprint stable across probed reasoning

2026-10-13 08:06:49 +00:00

router_factories.go

fix(routing): keep embedder fingerprint stable across probed reasoning

2026-10-13 08:06:49 +00:00

runtime_settings_branding_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

runtime_settings_galleries_test.go

fix(gallery): verification follow-ups for oci:// galleries (#12243)

2026-09-24 21:20:21 +02:00

startup_auth_test.go

feat(addons): declare typed host capabilities (#13034)

2026-11-02 23:50:40 +00:00

startup.go

refactor(application): tidy workspace file setup

2026-11-03 08:38:35 +00:00

studio_addons_test.go

feat(addons): ask the Authority on every host operation call

2026-11-03 21:33:36 +00:00

studio_agentopts_internal_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_assistant_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_assistant.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_chatworker_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_chatworker.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_collections.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_connectors.go

test(e2e): give the test connector transport to the first application only

2026-11-03 21:42:50 +00:00

studio_convert_old_data_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_convert_startup_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_convert_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_convert.go

refactor(addons): remove the shims for older add-on data

2026-11-03 16:56:49 +00:00

studio_egress_settings_internal_test.go

fix(addons): make owner settings authoritative (#13033)

2026-11-02 18:48:39 +01:00

studio_egress_settings.go

refactor(studio): word the command provider text without naming an add-on

2026-11-03 10:43:37 +00:00

studio_execution.go

fix(chats): show the network switcher and say why execution status is unknown

2026-11-03 08:39:30 +00:00

studio_files_test.go

feat(workspace): use filesystem storage without S3 (#13012)

2026-11-01 18:41:33 +01:00

studio_files.go

feat(addons): move connector file bytes by handle

2026-11-03 15:54:45 +00:00

studio_jobs.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_leader_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_leader.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_loops.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_mcpconns_timeout_internal_test.go

test(chats): clarify configured timeout success

2026-11-03 09:21:06 +00:00

studio_mcpconns.go

fix(chats): give MCP connector tool calls the MCP tool timeout

2026-11-03 09:17:42 +00:00

studio_mcpcontent.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_media_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_media.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_owner_role_test.go

fix(addons): stop the add-on owner from running chat background work

2026-11-03 08:38:11 +00:00

studio_permissions.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_service_test.go

fix(studio): use the backend's default window when context_size is unset

2026-11-03 21:50:57 +00:00

studio_service.go

fix(studio): use the backend's default window when context_size is unset

2026-11-03 21:50:57 +00:00

studio_shared_files_test.go

refactor(application): tidy workspace file setup

2026-11-03 08:38:35 +00:00

studio_shared_files.go

feat(workspace): use filesystem storage without S3 (#13012)

2026-11-01 18:41:33 +01:00

studio_store_test.go

feat(addons): declare typed host capabilities (#13034)

2026-11-02 23:50:40 +00:00

studio_store.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_triggers.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_user_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_web_test.go

refactor(studio): word the command provider text without naming an add-on

2026-11-03 10:43:37 +00:00

studio_web.go

refactor(studio): word the command provider text without naming an add-on

2026-11-03 10:43:37 +00:00

upgrade_checker_library_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

upgrade_checker.go

feat(addons): list and install backends from a library (#12816)

2026-10-23 01:00:07 +02:00

watchdog_test.go

fix(watchdog): guard StopWatchdog with watchdogMutex to prevent double close (#10841) (#10859)

2026-07-16 09:40:29 +02:00

watchdog.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

workspace_automatic_test.go

refactor(application): tidy workspace file setup

2026-11-03 08:38:35 +00:00