aaronrene / knowtation public
fix patch bridge main #9 / 100
aaronrene · 11 days ago · Aug 23, 2026 · Diff

fix(bridge): allow session-bound delegation consent on Business vault

Learner OAuth JWTs (type: session) were blocked by delegate vault-access maps while integration-token reads still worked. Expand allowed vaults for session-bound actors on the effective partition; add SEC-SEAM parity on delegation propose routes.

sha256:ad246cba9ca5baea41737770106379d69320ecdf56fe94d6fff9026a4f5b3d30 sha
sha256:9eaa2a7ec9aaf5866cd03d0deadf843cca97778299d1857b5452f71d92a1880a parent
+4 ~4 symbols
sha256:69067e62058caee4732d12e388eeee96c30f065bc33ad6ae40b10d564e034362 snapshot
+4
symbols added
~4
symbols modified
0
dead code introduced
Semantic Changes 8 symbols
~ test/sec-seam-delegation-hosted-consent-propose.test.mjs .mjs 1 symbol added
+ readRepo function function readRepo L17–19
~ hub/bridge/delegation-routes.mjs .mjs 1 symbol added, 3 symbols modified
+ sessionBoundFromReq function function sessionBoundFromReq L63–70
~ createProposal
~ hostedCreateProposal
~ registerBridgeDelegationRoutes
~ hub/bridge/server.mjs .mjs 1 symbol added, 1 symbol modified
+ bridgeSessionBoundFromReq function function bridgeSessionBoundFromReq L917–923
~ resolveHostedBridgeContext
~ hub/lib/hosted-workspace-resolve.mjs .mjs 1 symbol added
+ resolveAllowedVaultIdsForSessionBoundActor function function resolveAllowedVaultIdsForSessionBoundActor L102–108
~ test/hosted-allowed-vaults.test.mjs .mjs
Older feat(f24): flip DOCS_NOTION_HUB_KEY_AUTHORIZED=true (Tier 3) sha256:9eaa2a7ec9aaf5866cd03d0deadf843cca97778299d1857b5452f71d92a1880a All commits Newer fix(bridge): delegation canister propose parity + Hub code loggi… sha256:743dec0b54ca5f23d1a23f781f5c4999333ee7ccf06820ce9c07d2611c737f38

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:ad246cba9ca5baea41737770106379d69320ecdf56fe94d6fff9026a4f5b3d30 --body "your comment"