chore(vendor): bump @intx/* pins to 0.5.0 and re-vendor to upstream main HEAD (CL-10976)

VENDORED.md

@@ -23,30 +23,31 @@ never a convenience.
 ## Ledger
 
 Pinned to [faremeter/interchange](https://github.com/faremeter/interchange)
-@ `9febf69` (origin/main, v0.4.0).
+@ `0a4eb59` (origin/main, v0.5.0).
 
 | Vendored path                 | What it is                                                              | Owner  | Kill date  |
 | ------------------------------ | ------------------------------------------------------------------------ | ------ | ---------- |
-| `apps/sidecar`                 | Copy of upstream's sidecar app; apps are never npm-published. Three local deltas: `workflow-substrate-factory.ts` registers `@corbits/credential-header`'s and `@corbits/credential-mcp`'s providers alongside `builtinCredentialProviders()`; `bin/workflow-child` and `bin/workflow-probe-child` run under plain `bun` instead of upstream's `intx-src` resolve condition; `createSidecarStepBuildEnv` resolves the step's director registry from the closure package (`interchange.directors`) instead of the built-ins only, so a workflow's own director runs and not just probes (kill condition: upstream's step env loads the closure registry) | maintainers | 2026-11-03 |
-| `vendor/intx/agent`            | `@intx/agent` at a newer commit than npm has published                    | maintainers | 2026-11-03 |
-| `vendor/intx/db`                | `@intx/db`, with local fork migrations (wire_projection, launch origin, tolerate rewrite, tenant slug check), a serving-time credential-refresh seam, and an openai-responses catalog id | maintainers | 2026-11-03 |
-| `vendor/intx/harness`           | `@intx/harness` at a newer commit than npm has published                  | maintainers | 2026-11-03 |
-| `vendor/intx/hub-agent`         | `@intx/hub-agent`, with local childRunId event threading and an OAuth-login-over-websocket delta | maintainers | 2026-11-03 |
-| `vendor/intx/hub-api`           | `@intx/hub-api`, with the local workflow-deploy-bearer route and a serving-time credential-refresh hook | maintainers | 2026-11-03 |
-| `vendor/intx/hub-sessions`      | `@intx/hub-sessions`, with local childRunId event threading, serving-time credential refresh, loopback OAuth login, and prepared-deploy step staging | maintainers | 2026-11-03 |
-| `vendor/intx/inference`         | `@intx/inference`, with one local Google file-upload compile fix          | maintainers | 2026-11-03 |
-| `vendor/intx/mail-memory`       | `@intx/mail-memory` at a newer commit than npm has published              | maintainers | 2026-11-03 |
-| `vendor/intx/mailbox`           | `@intx/mailbox`, never yet published to npm                               | maintainers | 2026-11-03 |
-| `vendor/intx/mime`              | `@intx/mime` at a newer commit than npm has published                     | maintainers | 2026-11-03 |
-| `vendor/intx/types`             | `@intx/types`, with local childRunId, openai-responses plugin id, and OAuth-login token shapes | maintainers | 2026-11-03 |
-| `vendor/intx/hub-common`        | `@intx/hub-common` at a newer commit than npm has published               | maintainers | 2026-11-03 |
-| `vendor/intx/workflow`          | `@intx/workflow`, with one local step-timeout-budget delta                | maintainers | 2026-11-03 |
-| `vendor/intx/workflow-deploy`   | `@intx/workflow-deploy` at a newer commit than npm has published          | maintainers | 2026-11-03 |
-| `vendor/intx/workflow-host`     | `@intx/workflow-host`, with local credential-wiring/childRunId threading, a step-grants-collapse delta, and a temporary delta omitting an empty inbound `Subject` header instead of passing it through empty (kill condition: upstream tolerates an empty Subject, INTR-577) | maintainers | 2026-11-03 |
+| `apps/sidecar`                 | Copy of upstream's sidecar app; apps are never npm-published. Local delta: `bin/workflow-child` and `bin/workflow-probe-child` run under plain `bun` instead of upstream's `intx-src` resolve condition (the substrate-factory and deploy-router wiring moved to `@intx/workflow-host` upstream) | maintainers | 2026-11-17 |
+| `vendor/intx/agent`            | `@intx/agent` at a newer commit than npm has published                    | maintainers | 2026-11-17 |
+| `vendor/intx/authz`            | `@intx/authz` at a newer commit than npm has published                    | maintainers | 2026-11-17 |
+| `vendor/intx/db`                | `@intx/db`, with local fork migrations (wire_projection, launch origin, tolerate rewrite, tenant slug check, plus upstream 0095–0110 renumbered to 0100–0115) and an openai-responses catalog id | maintainers | 2026-11-17 |
+| `vendor/intx/harness`           | `@intx/harness` at a newer commit than npm has published                  | maintainers | 2026-11-17 |
+| `vendor/intx/hub-agent`         | `@intx/hub-agent`, with local childRunId event threading                  | maintainers | 2026-11-17 |
+| `vendor/intx/hub-api`           | `@intx/hub-api`, with the local workflow-deploy-bearer route              | maintainers | 2026-11-17 |
+| `vendor/intx/hub-sessions`      | `@intx/hub-sessions`, with local childRunId event threading and prepared-deploy step staging | maintainers | 2026-11-17 |
+| `vendor/intx/inference`         | `@intx/inference`, with one local Google file-upload compile fix          | maintainers | 2026-11-17 |
+| `vendor/intx/mail-memory`       | `@intx/mail-memory` at a newer commit than npm has published              | maintainers | 2026-11-17 |
+| `vendor/intx/mailbox`           | `@intx/mailbox`, never yet published to npm                               | maintainers | 2026-11-17 |
+| `vendor/intx/mime`              | `@intx/mime` at a newer commit than npm has published                     | maintainers | 2026-11-17 |
+| `vendor/intx/types`             | `@intx/types`, with local childRunId, openai-responses plugin id, and `formatSafetyRatingText` re-export on `./runtime` | maintainers | 2026-11-17 |
+| `vendor/intx/hub-common`        | `@intx/hub-common` at a newer commit than npm has published               | maintainers | 2026-11-17 |
+| `vendor/intx/workflow`          | `@intx/workflow`, with one local step-timeout-budget delta                | maintainers | 2026-11-17 |
+| `vendor/intx/workflow-deploy`   | `@intx/workflow-deploy` at a newer commit than npm has published          | maintainers | 2026-11-17 |
+| `vendor/intx/workflow-host`     | `@intx/workflow-host`, with local childRunId event threading, `@corbits/credential-header` and `@corbits/credential-mcp` provider registration + closure director loading in `child/substrate-factory.ts`, and a temporary delta omitting an empty inbound `Subject` header instead of passing it through empty (kill condition: upstream tolerates an empty Subject, INTR-577) | maintainers | 2026-11-17 |
 
 Every row above is re-vendored at the same commit rather than mixed pins
-(npm's `0.4.0` is this commit; rows with no local delta are un-vendoring
-candidates); the root
+(npm's `0.5.0` is `d89f87c`; `0a4eb59` is `origin/main` HEAD; rows with no
+local delta are un-vendoring candidates); the root
 `package.json` `overrides` point each vendored name at `workspace:*` so
 their own `@intx/*` dependencies resolve onto the vendored copies too.
 Local deltas are restated in each package's own `VENDORED-FROM` file.

apps/hub/package.json

@@ -25,13 +25,13 @@
     "@corbits/oauth-core": "^0.3.0",
     "@corbits/webhooks": "github:corbitsdev/webhooks#3f4f83147fd826d3aec5bcac7ef4b0ae7f75c00d",
     "@corbits/xai-provider": "0.1.2",
-    "@intx/authz": "0.4.0",
-    "@intx/crypto": "0.4.0",
+    "@intx/authz": "workspace:*",
+    "@intx/crypto": "0.5.0",
     "@intx/db": "workspace:*",
     "@intx/hub-api": "workspace:*",
     "@intx/hub-common": "workspace:*",
     "@intx/hub-sessions": "workspace:*",
-    "@intx/log": "0.4.0",
+    "@intx/log": "0.5.0",
     "@intx/mime": "workspace:*",
     "@intx/types": "workspace:*",
     "@intx/workflow": "workspace:*",

apps/hub/src/provisioners/process.ts

@@ -426,7 +426,7 @@ function isErrnoCode(error: unknown, code: string): boolean {
   return error instanceof Error && "code" in error && error.code === code;
 }
 
-const PROVISIONER_API_VERSION = 1 as const;
+const PROVISIONER_API_VERSION = 2 as const;
 
 export const PROCESS_PROVISIONER_ID = "process";
 

apps/hub/src/provisioners/sandbox-sidecar.ts

@@ -358,7 +358,7 @@ function isErrorCode(error: unknown, code: string): boolean {
 
 export type CreateSidecarProvisionerOpts = {
   readonly id: string;
-  readonly apiVersion: 1;
+  readonly apiVersion: 2;
   readonly bindingFingerprint: string;
   /**
    * Empty matches any deployment stating no requirement — the behaviour
@@ -491,7 +491,7 @@ export function createSidecarProvisioner(opts: CreateSidecarProvisionerOpts): Si
           return rejected(...classify(error, "destroy_unit_failed"));
         }
       }
-      return { kind: "destroyed" };
+      return { kind: "destroyed", cleanup: "confirmed" };
     },
   };
 }