QRun-IO/qbit-custom-apps
3
0 Fork 0
Code Issues 2 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

feat: per-session custom apps, local widget backend, restricted permissions on QQQ 4.1.0-RC.22 #22

Merged
james.maes merged 2 commits from kof22/release-1.0-prep into develop 2026-11-06 23:28:05 +00:00
Conversation 0 Commits 2 Files Changed 11
+1022 -22
2 Commits
Author SHA1 Message Date
james.maesandClaude Sonnet 5.5 a389bfb8b0 build: pin QQQ 4.1.0-RC.22 from the Gitea registry and update README status
QRun-IO/ci-policy: ci / fork-guard (pull_request) Skipped
Details
QRun-IO/ci-policy: native / fork-deny (pull_request) Skipped
Details
QRun-IO/ci-policy: native / dotnet-0 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / Scoped workflow [workflow 9cb8c13124a99d18da83cbcd4faa795859ac9e55] (pull_request) Successful in 7s
Details
QRun-IO/ci-policy: native / native-result (pull_request) Successful in 5s
Details
QRun-IO/ci-policy: ci / head-profile (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / repository-policy (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / application-template-0 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / gradle-1 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / java-core-2-head (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / java-docker-3 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / java-docker-3-head (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / java-docker-4 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / java-frontend-browser-5 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / java-maven-6 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / java-maven-6-head (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / java-maven-7 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / java-maven-7-head (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / node-8 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / node-9 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / node-10 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / node-playwright-11 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / repository-policy-12 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / source-config-13 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / source-config-14 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / android-0 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / original-business (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / original-mcp (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / original-voyage (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / original-cli (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / not-enrolled (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / shared-pipeline (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / ci-result (pull_request) Successful in 8s
Details
maven / build (push) Successful in 4m31s
Details
build / maven (push) Successful in 4m30s
Details 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-06 17:20:10 -06:00
james.maesandClaude Sonnet 5.5 0d876645b9 feat: per-session custom apps, a local widget backend and restricted permissions on QQQ 4.1 
Port the host-proven Custom Apps work onto upstream develop (9ba3336f):
- LOCAL_WIDGET backend for custom screens that show a widget over local data, and the
  allowed-component-hosts and backend-name settings in CustomAppsQBitConfig (https hosts
  only, lower-cased, no embedded credentials);
- CustomAppsMetaDataActionCustomizer, which gives each session exactly the containers,
  apps and widgets whose "<name>.hasAccess" permission it holds;
- permission widgets for custom apps and custom app containers (the roles that hold the
  permission, as a child record list) and the metadata producer changes behind them;
- CustomAppsPostgresTest and TestDdl: the schema owner creates the tables, the application
  runs as a DML-only role, on a real PostgreSQL 17 (Testcontainers, UTC surefire argLine).

Build against the published QQQ 4.1 core (qqq-bom-pom 4.1.0-RC.21) and
qbit-user-role-permissions 0.33.0-RC.1 (canonical registry and Maven Central; its core
dependency is excluded so the QQQ BOM governs). The only SNAPSHOT left is the project's own
development revision. Every qqq class the sources import exists in the published RC.21 and
URP jars and every QQQ-style call name resolves in them (read-only javap); not compiled here.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-06 17:19:58 -06:00