alexei.dolgolyov 582e7e39e3 feat(volume-browser): absolute scope with allowlist security ...

- Add 'absolute' volume scope for direct host paths (NFS, external mounts)
- Allowlist in settings: allowed_volume_paths (JSON array of prefixes)
- Validation: absolute source must be under an allowed prefix
- Empty allowlist = absolute scope disabled entirely
- Settings API exposes/validates allowed_volume_paths
- Frontend type updated with absolute scope

2026-04-01 23:31:27 +03:00

..

browser.go

fix(volume-browser): address security review findings

2026-04-01 23:17:35 +03:00

resolver.go

feat(volume-browser): absolute scope with allowlist security

2026-04-01 23:31:27 +03:00