refactor(vendor): un-vendor zero-delta @intx/* packages and strip dead fork deltas (CL-10996)

VENDORED.md

@@ -30,26 +30,21 @@ Pinned to [faremeter/interchange](https://github.com/faremeter/interchange)
 | `apps/sidecar`                 | Copy of upstream's sidecar app; apps are never npm-published. Local delta: `bin/workflow-child` and `bin/workflow-probe-child` run under plain `bun` instead of upstream's `intx-src` resolve condition (the substrate-factory and deploy-router wiring moved to `@intx/workflow-host` upstream) | maintainers | 2026-11-17 |
 | `vendor/intx/agent`            | `@intx/agent` at a newer commit than npm has published                    | maintainers | 2026-11-17 |
 | `vendor/intx/authz`            | `@intx/authz` at a newer commit than npm has published                    | maintainers | 2026-11-17 |
-| `vendor/intx/db`                | `@intx/db`, with local fork migrations (wire_projection, launch origin, tolerate rewrite, tenant slug check, plus upstream 0095–0110 renumbered to 0100–0115) and an openai-responses catalog id | maintainers | 2026-11-17 |
+| `vendor/intx/db`                | `@intx/db` at a newer commit than npm has published                       | maintainers | 2026-11-17 |
 | `vendor/intx/harness`           | `@intx/harness` at a newer commit than npm has published                  | maintainers | 2026-11-17 |
-| `vendor/intx/hub-agent`         | `@intx/hub-agent`, with local childRunId event threading                  | maintainers | 2026-11-17 |
-| `vendor/intx/hub-api`           | `@intx/hub-api`, with the local workflow-deploy-bearer route              | maintainers | 2026-11-17 |
-| `vendor/intx/hub-sessions`      | `@intx/hub-sessions`, with local childRunId event threading and prepared-deploy step staging | maintainers | 2026-11-17 |
+| `vendor/intx/hub-api`           | `@intx/hub-api` at a newer commit than npm has published                  | maintainers | 2026-11-17 |
+| `vendor/intx/hub-sessions`      | `@intx/hub-sessions`, with local prepared-deploy step staging             | maintainers | 2026-11-17 |
 | `vendor/intx/inference`         | `@intx/inference`, with one local Google file-upload compile fix          | maintainers | 2026-11-17 |
-| `vendor/intx/mail-memory`       | `@intx/mail-memory` at a newer commit than npm has published              | maintainers | 2026-11-17 |
-| `vendor/intx/mailbox`           | `@intx/mailbox`, never yet published to npm                               | maintainers | 2026-11-17 |
-| `vendor/intx/mime`              | `@intx/mime` at a newer commit than npm has published                     | maintainers | 2026-11-17 |
-| `vendor/intx/types`             | `@intx/types`, with local childRunId, openai-responses plugin id, and `formatSafetyRatingText` re-export on `./runtime` | maintainers | 2026-11-17 |
-| `vendor/intx/hub-common`        | `@intx/hub-common` at a newer commit than npm has published               | maintainers | 2026-11-17 |
+| `vendor/intx/types`             | `@intx/types`, with local openai-responses plugin id and `formatSafetyRatingText` re-export on `./runtime` | maintainers | 2026-11-17 |
 | `vendor/intx/workflow`          | `@intx/workflow`, with one local step-timeout-budget delta                | maintainers | 2026-11-17 |
 | `vendor/intx/workflow-deploy`   | `@intx/workflow-deploy` at a newer commit than npm has published          | maintainers | 2026-11-17 |
-| `vendor/intx/workflow-host`     | `@intx/workflow-host`, with local childRunId event threading, `@corbits/credential-header` and `@corbits/credential-mcp` provider registration + closure director loading in `child/substrate-factory.ts`, and a temporary delta omitting an empty inbound `Subject` header instead of passing it through empty (kill condition: upstream tolerates an empty Subject, INTR-577) | maintainers | 2026-11-17 |
+| `vendor/intx/workflow-host`     | `@intx/workflow-host`, with `@corbits/credential-header` and `@corbits/credential-mcp` provider registration + closure director loading in `child/substrate-factory.ts`, and a temporary delta omitting an empty inbound `Subject` header instead of passing it through empty (kill condition: upstream tolerates an empty Subject, INTR-577) | maintainers | 2026-11-17 |
 
 Every row above is re-vendored at the same commit rather than mixed pins
-(npm's `0.5.0` is `d89f87c`; `0a4eb59` is `origin/main` HEAD; rows with no
-local delta are un-vendoring candidates); the root
-`package.json` `overrides` point each vendored name at `workspace:*` so
-their own `@intx/*` dependencies resolve onto the vendored copies too.
+(npm's `0.5.0` is `aa7b78e`; `0a4eb59` is 24 commits ahead of `v0.5.0`; rows
+with no local delta are un-vendoring candidates once npm publishes `0a4eb59`+);
+the root `package.json` `overrides` point each vendored name at `workspace:*`
+so their own `@intx/*` dependencies resolve onto the vendored copies too.
 Local deltas are restated in each package's own `VENDORED-FROM` file.
 
 ## Un-vendoring `vendor/intx`

apps/hub/package.json

@@ -29,10 +29,10 @@
     "@intx/crypto": "0.5.0",
     "@intx/db": "workspace:*",
     "@intx/hub-api": "workspace:*",
-    "@intx/hub-common": "workspace:*",
+    "@intx/hub-common": "0.5.0",
     "@intx/hub-sessions": "workspace:*",
     "@intx/log": "0.5.0",
-    "@intx/mime": "workspace:*",
+    "@intx/mime": "0.5.0",
     "@intx/types": "workspace:*",
     "@intx/workflow": "workspace:*",
     "@intx/workflow-deploy": "workspace:*",

apps/hub/src/server.ts

@@ -590,7 +590,6 @@ export async function createHubServer({
     assetService,
     repoStore: agentRepoStore.repoStore,
     maxTarballBytes: hubMaxTarballBytes,
-    workflowRunAuthenticator: createWorkflowRunAuthenticator({ db }),
     sidecarWsHandler: upgradeWebSocket((_c) => {
       let handle: WsHandle;
       return {

apps/sidecar/package.json

@@ -18,11 +18,11 @@
     "@intx/authz": "workspace:*",
     "@intx/crypto": "0.5.0",
     "@intx/harness": "workspace:*",
-    "@intx/hub-agent": "workspace:*",
+    "@intx/hub-agent": "0.5.0",
     "@intx/hub-sessions": "workspace:*",
     "@intx/inference": "workspace:*",
     "@intx/log": "0.5.0",
-    "@intx/mail-memory": "workspace:*",
+    "@intx/mail-memory": "0.5.0",
     "@intx/pack-transport": "0.5.0",
     "@intx/storage-isogit": "0.5.0",
     "@intx/tool-packaging": "0.5.0",

apps/sidecar/tsconfig.json

@@ -19,18 +19,12 @@
     {
       "path": "../../vendor/intx/harness/tsconfig.src.json"
     },
-    {
-      "path": "../../vendor/intx/hub-agent/tsconfig.src.json"
-    },
     {
       "path": "../../vendor/intx/hub-sessions/tsconfig.src.json"
     },
     {
       "path": "../../vendor/intx/inference/tsconfig.src.json"
     },
-    {
-      "path": "../../vendor/intx/mail-memory/tsconfig.src.json"
-    },
     {
       "path": "../../vendor/intx/types/tsconfig.src.json"
     },

apps/sidecar/tsconfig.src.json

@@ -16,18 +16,12 @@
     {
       "path": "../../vendor/intx/harness/tsconfig.src.json"
     },
-    {
-      "path": "../../vendor/intx/hub-agent/tsconfig.src.json"
-    },
     {
       "path": "../../vendor/intx/hub-sessions/tsconfig.src.json"
     },
     {
       "path": "../../vendor/intx/inference/tsconfig.src.json"
     },
-    {
-      "path": "../../vendor/intx/mail-memory/tsconfig.src.json"
-    },
     {
       "path": "../../vendor/intx/types/tsconfig.src.json"
     },

apps/web/package.json

@@ -22,7 +22,7 @@
     "@corbits/mcp": "^0.3.0",
     "@corbits/react-ui": "0.3.0",
     "@corbits/worker": "workspace:*",
-    "@intx/mime": "workspace:*",
+    "@intx/mime": "0.5.0",
     "@intx/types": "workspace:*",
     "@isomorphic-git/lightning-fs": "4.7.0",
     "@radix-ui/react-dialog": "^1.1.15",
@@ -39,6 +39,7 @@
     "react-joyride": "^2.9.3"
   },
   "devDependencies": {
+    "@intx/hub-common": "0.5.0",
     "@intx/inference": "workspace:*",
     "@types/bun": "catalog:",
     "@types/react": "^19.2.2",

apps/web/src/chat/wire/id-leak-guard.test.ts

@@ -1,5 +1,5 @@
 import { describe, expect, test } from "bun:test";
-import { generateId } from "../../../../../vendor/intx/hub-common/src/ids";
+import { generateId } from "@intx/hub-common";
 import { assertNoLeakedInternalId } from "./id-leak-guard";
 
 const KINDS: Parameters<typeof generateId>[0][] = [

apps/web/src/chat/wire/id-leak-guard.ts

@@ -1,4 +1,4 @@
-// Mirrors PREFIXES in vendor/intx/hub-common/src/ids.ts.
+// Mirrors PREFIXES in @intx/hub-common.
 
 // Matches `_`, space, or `-` as separator so both the raw id and
 // `humanizeSlug`'s Title-Cased reading of one ("Run 737a058d…") trip it.