Hosts, permissions and approvals

The management view separates Click panel definitions from isolated plugins owned by the connected Host.

Host profiles

Settings → Hosts stores public profiles locally: Host ID, alias, URL, and browser-key handle. Pairing creates a scoped, expiring Host session. Click automatically retries a disconnected Host but cannot remotely start a stopped Host daemon.

Use distinct, human-readable aliases. A workspace, panel catalog, grants, and plugin inventory are Host-scoped; switching a profile changes the authority being displayed.

Panel permissions

Panels declare required capabilities and operations. Click rejects undeclared calls before provider dispatch. User grants remain separate from dependency satisfaction: a compatible provider may exist while access is still denied.

Plugin permissions

Host plugins declare exact runtime permissions in their immutable manifest. Enablement requires approval of that permission set. Network grants name exact external host and port; filesystem and secret access are not implied by general plugin enablement.

Approvals

The native Approvals view shows the requesting actor, target, risk, requested scope, and causal task or command. Treat approval as an authority change, not a notification. Denial is a normal typed outcome and is recorded in the Host journal.