stacklok / toolhive-studio
71%
main: 71%

LAST BUILD BRANCH: v0.38.0
DEFAULT BRANCH: main
Repo Added
Files 525
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH v0.38.0-rc.0
branch: v0.38.0-rc.0
CHANGE BRANCH
x

coverage: 71.204% (+0.03%) from 71.179%
29506253221

push

github

web-flow 
fix: make network isolation mode explicit instead of inferred (#2469)

* fix: make network isolation mode explicit instead of inferred

Studio always sent `network_isolation: false`, silently overriding the
backend's new default of isolating new workloads. A prior attempt (#2332)
derived `insecure_allow_all` from whether the allow-list arrays were empty,
but reviewers flagged that as ambiguous — it couldn't distinguish "isolate
with no restrictions" from "isolate and block everything".

Replaces the boolean toggle with an explicit `networkAccess` mode (none /
host / proxy) and an explicit `allowedDestinations` (anywhere / selected)
field that drives `insecure_allow_all` directly, consolidates the duplicated
tab-content components into one, and wires up the previously-unused
`permission_profile.network.mode: "host"` backend field.

Closes #2326

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* fix: wire up allow_docker_gateway and fix network-access defaults

Wires the new backend `allow_docker_gateway` field (not yet released
upstream; openapi.json patched against the unreleased backend PR) through
to the "Allow host machine access" checkbox in both the local-server and
registry-server payload builders.

Also fixes three gaps found in review:

- Registry install now reads the entry's actual declared
  `insecure_allow_all`/`network.mode` instead of inferring destinations
  from allow-list array length, so entries like `fetch` (declaring
  `insecure_allow_all: true`) and entries recommending host networking
  are honored, and an entry that explicitly declares an empty allow-list
  defaults to restricted rather than silently allowing everything.
- The edit round-trip derived `allowedDestinations` from a strict
  `=== false` check, which misread an omitted (rather than explicit
  `false`) `insecure_allow_all` as unrestricted, risking silently
  widening a restricted server's egress on save.
- Allowed-host validation now accepts IPv4 addresses, m... (continued)

5402 of 8126 branches covered (66.48%)

45 of 45 new or added lines in 5 files covered. (100.0%)

7841 of 11012 relevant lines covered (71.2%)

140.77 hits per line

Relevant lines Covered
11012 RELEVANT LINES 7841 COVERED LINES
140.77 HITS PER LINE
Source Files on v0.38.0-rc.0

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
29506253221 v0.38.0-rc.0 fix: make network isolation mode explicit instead of inferred (#2469) * fix: make network isolation mode explicit instead of inferred Studio always sent `network_isolation: false`, silently overriding the backend's new default of isolating new w... push web-flow github
71.2
See All Builds (2995)