fix: unblock SP calls for UC in production#351

Open

atilafassina wants to merge 18 commits intomainfrom

feat/files-obo-auth

Commits on May 6, 2026

feat(files): policy-gated SP fallback on HTTP routes (phase 1)
atilafassina
committed
feat(appkit): files plugin policy docs and JSDoc (phase 2)
atilafassina
committed
chore: update dev fallback and docs
atilafassina
committed
feat(files): per-volume auth field + _resolveAuth helper (phase 1)
atilafassina
committed
feat(appkit): files OBO identity extraction + policy gate (phase 2)
atilafassina
committed
feat(appkit): files OBO read routes via runInUserContext (phase 3)
atilafassina
committed
feat(appkit): files OBO write routes + upload-headers test (phase 4)
atilafassina
committed
feat(appkit): files asUser routes SDK calls as the user (phase 5)
atilafassina
committed
feat(appkit): files.auth_mode span attribute + manifest scope JSDoc (phase 6)
atilafassina
committed
docs(appkit): files OBO docs, playground demo, changelog (phase 7)
atilafassina
committed
fix(appkit): files OBO review fixes — auth strictness, allocation, cache, spans
atilafassina
committed
fix(appkit): files invalidate-cache await + integration ephemeral ports
atilafassina
committed
fix(appkit): files plugin OBO review hardening (5 findings)

atilafassina
and
orca-ide
committed
fix(appkit): files /read atomic 413 + list-cache key parity for ?path=/
atilafassina
committed
fix(appkit): files Copilot review findings — root invalidation, error msg, docs
atilafassina
committed
fix(appkit): rename files plugin _extractObiUser → _extractOboUser
atilafassina
committed
docs(appkit): refresh stale _enforcePolicy NOTE about SDK identity
atilafassina
committed
chore(appkit): drop removed autoStart from files integration tests
atilafassina
committed