Repository navigation
Consume site-wide service access and private administration - #17
Conversation
DebelToni
left a comment
There was a problem hiding this comment.
Owner-session review of exact head 333bb83 against ef15999. Read complete changed source, tests and integration/security/agent docs. Native HTTP(S) transport preserves issuer Host with bounded response/absolute deadline and real hosted capture tests. Current service/use and subject checks retain local ACLs and scoped agents; internal directory requires raw loopback, exact nonpublic Host and constant-time service secret, with public admin directory removed. Hosted test/analyze/CodeQL all pass. No candidate code/tests/installers/builds executed on DGX. Reviewed source may enter main; production remains gated on real three-runtime integration, verified stopped-service migration, authority/private routing and activation receipt. Previous ef15999 stage must not activate. Manual review in the existing owner session; watcher PR16 is separately pending, no watcher acknowledgement is claimed.
Owner-requested v2 account integration. Free site accounts and service-specific admission replace global approval. Fixes the real Node Host backchannel regression with native HTTP(S) transport; removes public admin data and retains only owner-admin navigation, with a loopback/Host/client-key-protected directory adapter. Preserves local IDs, project ACLs and scoped agents. Candidate code/tests/builds have not run on DGX. Exact-head hosted CI, owner-session source review, real authority interop and coordinated migration remain activation gates. Production updater is held; the earlier ef15999 stage must not activate.