[TheGreatAxios]

Re-vendors vendor/intx/* and apps/sidecar from faremeter/interchange 79adc433 to 5453d0b0 (v0.4.0, origin/main).

Method. Per package, a 3-way merge of (old upstream 79adc433, our vendored copy, new upstream). Every local delta in the ledger survives; conflicts were resolved by hand (below). apps/sidecar is merged against the oxfmt-formatted upstream.

Deltas re-applied

• hub-sessions: session-service.ts prepared-deploy staging (preparedStepStageArgs, per-step stageWorkflowStep before the deployment frame), re-applied onto upstream's reworked initialization-lease flow; OAuth-login exports kept beside upstream's new AllocatedSenderDeployAttempt.
• workflow: per-step timeout budget in run.ts, kept beside upstream's new abort bridge.
• db: upstream 0093_sidecar_initialization.sql vendored verbatim as 0098 (journal idx 98, no snapshot) behind our 0093-0097.
• Everything else (exports repoint, types/hub-api/hub-agent/workflow-host/inference deltas, sidecar plain-bun bins, credential providers, closure director registry) merged cleanly.
• New upstream ./testing exports and test helpers are not vendored, except agent/src/testing/reactor-waiters.ts, which agent/src/testing/index.ts imports.

Other changes

• @intx/* pins 0.3.0 -> 0.4.0 everywhere (npm now publishes 0.4.0).
• Root overrides pin @corbits/oauth-core and @corbits/openai-responses to their current commits: the codex/xai provider libraries depend on them unpinned, and their newer HEADs ship dist-only (no src), which breaks git installs.
• VENDORED.md pin and per-package VENDORED-FROM updated. No Workbench (apps/packages/agents/e2e) code changes were needed.

Local: fmt, fmt:check, typecheck, lint (existing warnings only), CI=true bun run test:e2e (14/14, fresh database) pass. Existing databases need a reset (one-shot platform SQL).

Note: npm 0.4.0 now equals this pin, so rows with no local delta (harness, mail-memory, mailbox, mime, workflow-deploy, hub-common) are un-vendoring candidates.

Upstream commits 79adc433..5453d0b0

• 5453d0b0 Update interchange version to v0.4.0
• abf2d428 Expose the statement timeout to the database scripts
• 568987da Fail lingering sender attempts when an allocation retires
• 68a1670e Preserve healthy workers when identity validation is inconclusive
• 84e2a97e Apply a configurable timeout to database statements
• 7933d823 Bound unfinished dispatch work across delivery drains
• b801f01b Bound unfinished allocation reconciliation work
• 8b9638ab Keep recovered mail beside its signing key
• 86ed4dcc Retry reconciliation when lease validation queries fail
• 0fa328c7 Preserve uncertain workflow initialization durably
• 29a377b4 Retry workflow dispatch independently of enqueue drains
• 056ac8f1 Bound outstanding allocation claims across timeouts
• 9e1763ee Release allocation slots while readiness checks and writes stall
• 8b5bae2c Renew leases throughout allocation reconciliation
• e8ea80cb Serialize local sidecar provisioning and cleanup
• d4619414 Stop sidecar deadlines from keeping shutdown alive
• 554514f2 Document where an untimed signal gate can hold
• 21a67508 Gate the provisioning test on the env it actually reads
• be793b24 Consolidate the outer-abort bridge behind one helper
• 7e21c083 Document that a child workflow cannot hold a human gate
• ad53c341 Cover the refused child gate against a deployed hub
• 80600715 Drop drain coverage for a state that can no longer exist
• 322ad012 Refuse a park that nothing upstream can answer
• 9d6522f6 Require every local run to declare whether a park can be answered
• 46ba8ee9 Declare whether a run tree can answer a park
• 85c36eb1 Refuse an action whose run is already cancelled
• 7eade4be Refuse a local child spawn whose parent has already cancelled
• c2aeacc4 Check the outer abort before bridging it into an invocation
• b0681984 Honor an outer abort that lands during the pre-park flush
• bca283b7 Name the transport a two-sidecar deployment binds to
• 74626715 Report both sidecars when the federated mail test wedges
• 6ffe10c7 Verify the pinned reconnect delay where the scheduler receives it
• 844545ba Let the runner own the integration tests' wait budgets
• 214966f7 Wait on reported state in the remaining package tests
• 22746835 Wait on reported state in the sidecar deploy tests
• 9a511084 Wait on reported state in the hub tests
• f421882c Wait on the workflow runtime's own signals
• 5a3ec165 Wait on reported state in the workflow-host tests
• b6c42645 Let a caller fire the host scheduler's queued timers
• ee2c9721 Drive the session layer's deadlines through an injected timer
• 6c13f3a2 Verify the log configuration contract where leftovers cannot satisfy it
• e093de1d Await the LSP client's protocol notification writes
• aff0ef41 Report a respawn bail so a superseded cohort is not silent
• 1d55f3f2 Share the waiting helpers the tests had copied
• 76b1e6ab Require tests to synchronize on state rather than elapsed time

Resolves CL-9611

[linear-code]

CL-9611