Skip to content

Re-pin @corbits/artifacts to dc435ba7 (CL-7464) - #652

Merged
TheGreatAxios merged 2 commits into
mainfrom
cl-7464-repin-corbits-artifacts
Sep 6, 2026
Merged

TheGreatAxios merged 2 commits into
mainfrom
cl-7464-repin-corbits-artifacts

Conversation

@TheGreatAxios

Copy link
Copy Markdown
Contributor

Summary

Resolves CL-7464

Moves @corbits/artifacts from 81049ed2 to dc435ba7 in package.json, apps/hub/package.json, and packages/artifacts-hub/package.json, picking up three upstream commits:

  • Export windowContent from the package index
  • Use native Interchange authorization for artifacts
  • Add findOrVersionArtifact to close the tenant+title+kind race

What changed

  • Pins bumped in all three manifests; bun.lock regenerated.
  • The upstream Identity port (and the anonymousIdentity stub) was removed along with the creatorKind list filter it existed to serve, and SerializedArtifact.ownerName was dropped. Updated the three listArtifacts call sites (routes.ts, workflow-routes.ts, template-library.ts) to the new two-argument signature, and dropped the now-nonexistent ownerName field from two test fixtures.
  • Workbench's own tenant-facing Library routes already authorize through its own RequireGrant/asset:* grants rather than the package's mountArtifacts HTTP surface, so the native-authorization change upstream needed no adaptation here.
  • Not adopted: template-library.ts's reconcileEntry still does its own find-by-title-then-create for a not-yet-seed-tracked template. This looks like the find-then-create race findOrVersionArtifact closes, but its clash semantics differ — on a title clash it deliberately returns "kept" and leaves the existing row untouched (protecting a member's own artifact that happens to share a title), where findOrVersionArtifact would revise it with the shipped content. Converting it would be a real behavior change beyond the scope of this re-pin, so it was left as-is.

Test plan

  • bunx tsc --noEmit -p packages/artifacts-hub
  • bunx tsc --noEmit -p apps/hub
  • bun test packages/artifacts-hub (69 pass)
  • bun run check:structural catalog-pins

Moves all three pins (root, apps/hub, packages/artifacts-hub) from
81049ed2 to dc435ba7, picking up three upstream commits: exporting
windowContent from the package index, native Interchange authorization
for artifacts, and findOrVersionArtifact for the tenant+title+kind
race.
Upstream removed the identity-resolving Identity port and the creatorKind
list filter it existed to serve, and dropped SerializedArtifact's
ownerName field along with it (display names are now a client-side
concern). Updates the three listArtifacts call sites and test fixtures
to the new two-argument signature and drops the now-nonexistent field
from test literals.
@linear-code

linear-code Bot commented Sep 6, 2026

Copy link
Copy Markdown

CL-7464

@TheGreatAxios
TheGreatAxios merged commit ac2df60 into main Sep 6, 2026
7 checks passed
@TheGreatAxios
TheGreatAxios deleted the cl-7464-repin-corbits-artifacts branch September 6, 2026 15:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant