Skip to content

fix(agents): warn about unowned data with auth - #12669

Merged
mudler merged 1 commit into
masterfrom
fix/auth-legacy-data-warning
Oct 13, 2026
Merged

mudler merged 1 commit into
masterfrom
fix/auth-legacy-data-warning

Conversation

@localai-org-maint-bot

Copy link
Copy Markdown
Collaborator

Description

Enabling user auth on an existing standalone instance leaves root agent data outside authenticated users' storage. Startup now warns before agents start, with counts of root agents, collections, skills, and configured skill repositories. The warning links to guidance covering backups, bootstrap registration, agent state, and API keys.

Addresses the first, independently useful step in #12665. This does not close the issue: admin visibility and opt-in migration remain follow-up work. The warning does not change ownership or agent execution. It excludes user-owned resources and honors the configured collection path.

Notes for Reviewers

  • Based on latest master c44c32f15, checked again before committing.
  • Five startup regression tests cover resource counts, custom collection paths, warning-before-start ordering, auth-disabled startup, user-owned data, repository-only data, and malformed repository configuration. Two tests failed against unchanged master because the warning was absent.
  • Passed: CGO_ENABLED=0 go test ./core/services/agentpool -run TestServices -ginkgo.focus='legacy auth warning' -count=1.
  • Passed: CGO_ENABLED=0 go vet ./core/services/agentpool/... and git diff --check.
  • Full package run: 90 specs passed; 20 PostgreSQL specs failed during setup because Docker is unavailable. The fifth regression test was added and passed afterward.
  • make lint could not run because this environment lacks make. The installed golangci-lint binary also cannot execute here. Full lint remains for CI.
  • Dependencies were fetched with GOPROXY=direct because proxy.golang.org returned Forbidden. No dependency versions changed.
  • Warning scope is standalone/LocalAGI startup. Tasks, jobs, outputs, and agent state are not inventoried; the docs state these limits.

Signed commits

  • Yes, I signed my commits. Human DCO sign-off remains required; AI attribution uses Assisted-by.
  • Documentation updated (docs/content/) for user-facing changes, or not applicable

Warn before the standalone pool starts root agents with user auth enabled.
Count root agents, collections, skills, and configured skill repositories.
Document the auth transition, bootstrap rules, and agent key behavior.

Addresses the warning and documentation step of #12665.
Admin visibility and data migration remain separate work.

Assisted-by: Codex:GPT-6
@mudler
mudler merged commit f02d524 into master Oct 13, 2026
70 of 71 checks passed
@mudler
mudler deleted the fix/auth-legacy-data-warning branch October 13, 2026 15:58
@mudler-agent mudler-agent added the bug Something isn't working label Oct 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants