Skip to content

Re-vendor @intx/hub-sessions at a8bc06ae; retire three deltas upstream absorbed - #459

Merged
TheGreatAxios merged 1 commit into
cl-7107-repin-4-hub-sessionsfrom
cl-7107-repin-5-hub-api
Aug 29, 2026
Merged

TheGreatAxios merged 1 commit into
cl-7107-repin-4-hub-sessionsfrom
cl-7107-repin-5-hub-api

Conversation

@TheGreatAxios

@TheGreatAxios TheGreatAxios commented Aug 28, 2026 •

Copy link
Copy Markdown
Contributor

Re-pin wave 2, PR 5/7 — @intx/hub-api at a8bc06ae.

Retired: @types/ssri devDependency (d86c341b via catalog), bare resolveApproval export (ba4359b6), needs-you reservation (CL-7113, wave 1).
Kept: null-principal resolveApproval for policy-resolved decisions (CL-6345) rebased onto ResolveApprovalRequest/ResolveApprovalOutcome; bearer-authenticated workflow-deploy mirror (middleware/workflow-run-deploy-auth.ts, workflowRunAuthenticator).
Not done: nothing deferred.

@TheGreatAxios TheGreatAxios changed the title cl 7107 repin 5 hub api Re-vendor @intx/hub-sessions at a8bc06ae; retire three deltas upstream absorbed Aug 28, 2026
Upstream ba4359b6 exports resolveApproval for programmatic callers under
ResolveApprovalRequest/ResolveApprovalOutcome, so the bare export delta is
gone; the null-principal request (CL-6345) - a decision a standing-grant
allowance already authorized skips the per-principal resolve gate the HTTP
routes still enforce - rides on upstream's types, and the hub's
grant-allowance auto-approver keeps calling it. The bearer-authenticated
workflow-deploy mirror re-applies unchanged: upstream still has no bearer
path onto the deployments route. @types/ssri comes from the shared catalog
now, as upstream carries it (d86c341b), so that delta is gone too.
@TheGreatAxios
TheGreatAxios force-pushed the cl-7107-repin-5-hub-api branch from bfb258a to 54ad6ab Compare August 28, 2026 19:15
@TheGreatAxios
TheGreatAxios merged commit 5078024 into main Aug 29, 2026
5 checks passed
@TheGreatAxios
TheGreatAxios deleted the cl-7107-repin-5-hub-api branch August 29, 2026 14:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant