Skip to content

Consume site-wide service access and private administration - #17

Merged
DebelToni merged 1 commit into
mainfrom
feat/site-accounts
Oct 20, 2026
Merged

DebelToni merged 1 commit into
mainfrom
feat/site-accounts

Conversation

@DebelToni

Copy link
Copy Markdown
Owner

Owner-requested v2 account integration. Free site accounts and service-specific admission replace global approval. Fixes the real Node Host backchannel regression with native HTTP(S) transport; removes public admin data and retains only owner-admin navigation, with a loopback/Host/client-key-protected directory adapter. Preserves local IDs, project ACLs and scoped agents. Candidate code/tests/builds have not run on DGX. Exact-head hosted CI, owner-session source review, real authority interop and coordinated migration remain activation gates. Production updater is held; the earlier ef15999 stage must not activate.

@DebelToni
DebelToni marked this pull request as ready for review October 20, 2026 10:26

@DebelToni DebelToni left a comment

Copy link
Copy Markdown
Owner Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Owner-session review of exact head 333bb83 against ef15999. Read complete changed source, tests and integration/security/agent docs. Native HTTP(S) transport preserves issuer Host with bounded response/absolute deadline and real hosted capture tests. Current service/use and subject checks retain local ACLs and scoped agents; internal directory requires raw loopback, exact nonpublic Host and constant-time service secret, with public admin directory removed. Hosted test/analyze/CodeQL all pass. No candidate code/tests/installers/builds executed on DGX. Reviewed source may enter main; production remains gated on real three-runtime integration, verified stopped-service migration, authority/private routing and activation receipt. Previous ef15999 stage must not activate. Manual review in the existing owner session; watcher PR16 is separately pending, no watcher acknowledgement is claimed.

@DebelToni
DebelToni merged commit ac6c8d0 into main Oct 20, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant