Repository navigation

feat(arcade): Arcade as a second connected-app provider (PR 1) - #770

Merged

davidmckayv merged 360 commits into

mainfrom

arcade-provider

Oct 21, 2026

Merged

feat(arcade): Arcade as a second connected-app provider (PR 1)#770
davidmckayv merged 360 commits into
mainfrom
arcade-provider

This pull request is big! We're only showing the most recent 250 commits

Commits on Oct 13, 2026
- docs(arcade): say which object a `provider_id` is on, and record the live run
  
  mxmzb
  and
  claude
  committed
  de98696
- test(arcade): correct the live suite against what the first real run measured
  
  mxmzb
  and
  claude
  committed
  ffef56d
- merge: bring `main` into the Arcade branch, renumbering the migrations
  
  mxmzb
  and
  claude
  committed
  9c615eb
- test(memory): name the broker the defaults fixtures already use
  
  mxmzb
  and
  claude
  committed
  75614fb
- test(arcade): give back the pools these files open
  
  mxmzb
  and
  claude
  committed
  5b2ed4c
- test(arcade): ask the trail for its order instead of assuming one
  
  mxmzb
  and
  claude
  committed
  50aae80
- fix(arcade): read every listing to its end, and tell an absent total from a zero
  
  mxmzb
  and
  claude
  committed
  b057bd2
- fix(db): refuse to migrate a database that cannot reach every migration
  
  mxmzb
  and
  claude
  committed
  6d6fd20
- merge: C3 — read every Arcade listing to its end (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  ffacc92
- merge: F1 — refuse a database that cannot reach every migration (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  047766f
- fix(arcade): cancel the authorization the path names, not whatever the actor holds
  
  mxmzb
  and
  claude
  committed
  62d5cb7
- fix(broker): a key of nothing is no key, decided where "configured" is decided
  
  mxmzb
  and
  claude
  committed
  8b0f380
- fix(broker): refuse an activation count that is not a count
  
  mxmzb
  and
  claude
  committed
  7cc00a7
- fix(plugins): refuse a provider configuration this deployment cannot decide
  
  mxmzb
  and
  claude
  committed
  3a8554b
- test(arcade): search a logged value for a credential instead of flattening it
  
  mxmzb
  and
  claude
  committed
  9a17c14
- test(plugins): spell the vendor column as production does and prove both directions of the cross-provider guard
  
  mxmzb
  and
  claude
  committed
  4dc77e3
- fix(arcade): name an authorization attempt by an instant, not by a microsecond
  
  mxmzb
  and
  claude
  committed
  437a9ec
- fix(arcade): read a string with no text in it as no text at all
  
  mxmzb
  and
  claude
  committed
  69a2cc9
- fix(arcade): read a listing's items off the body Arcade sent, not the page the SDK built
  
  mxmzb
  and
  claude
  committed
  c23644c
- merge: D1-cancel-by-id (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  cfdf85b
- merge: A4-assert-activatable (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  d05242c
- fix(arcade): read a connection's own connection_status before calling it connected
  
  mxmzb
  and
  claude
  committed
  2ef8a25
- merge: A2-empty-key-configured (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  2255cbe
- fix(db): hold pending_authorizations to the unions it declares
  
  mxmzb
  and
  claude
  committed
  2b4b2cb
- merge: A3-provider-wiring-fails-open (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  b2bc33f
- fix(broker): name the active vendor in a refused return address, and only to its operator
  
  mxmzb
  and
  claude
  committed
  f7de92f
- fix(app): look a notice code up in a map that holds only what was put in it
  
  mxmzb
  and
  claude
  committed
  15b2a8d
- merge: C1-malformed-listing (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  e2d9757
- merge: C4-connection-status (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  31bed92
- merge: C6-account-name-shadowing (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  d4e173d
- fix(arcade): answer a mint this deployment could not record, and free the actor
  
  mxmzb
  and
  claude
  committed
  224c8e2
- merge: D7-created-at-precision (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  c39f76b
- merge: F2-pending-auth-checks (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  75c865e
- merge: B1-return-url-vendor (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  22c5481
- merge: E1-authorized-prototype-keys (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  302acac
- merge: B3-fixture-vendor (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  e362167
- merge: E2-credential-gate-flattening (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  cfb771e
- fix(plugins): remove a server at the broker that minted it, not the configured one
  
  mxmzb
  and
  claude
  committed
  e095ea2
- merge: D2-mint-record-guard (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  1893c49
- merge: G1-remove-server-provenance (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  5603ce9
- fix(plugins): name the broker this deployment actually runs
  
  mxmzb
  and
  claude
  committed
  9c7dab8
- merge: B2-vendor-strings (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  eaff90b
- fix(plugins): never read an undecided provider as Composio
  
  mxmzb
  and
  claude
  committed
  17f7dc9
- merge: A1-provider-flattening (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  9cc1af5
- chore: untrack agent-mastra/bun.lock, swept in by a merge resolution
  
  mxmzb
  and
  claude
  committed
  a116c75
- fix(arcade): a failed clean-up must not replace the refusal with a bodyless 500
  
  mxmzb
  and
  claude
  committed
  a02edde
- fix(arcade): cap the text callTool puts in a model's context and the audit row
  
  mxmzb
  and
  claude
  committed
  51b79bb
- fix(arcade): refuse a confirmed return that carries no authorization id
  
  mxmzb
  and
  claude
  committed
  c0bd415
- merge: D3-discard-refusal (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  994ed1b
- fix(app): make the consent resume leg actually leave the app
  
  mxmzb
  and
  claude
  committed
  2d89e24
- fix(arcade): read the status Arcade answered the mint with
  
  mxmzb
  and
  claude
  committed
  f65c338
- merge: C10-result-text-cap (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  fc386cb
- merge: D6-confirm-return-id (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  94c22e6
- merge: D8-sign-resume-redirect (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  b65bd8c
- merge: C9-authorize-status (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  a6a55c9
- fix(plugins): offboarding must not file an ended sibling as never asked about
  
  mxmzb
  and
  claude
  committed
  1cc6c6c
- fix(arcade): an empty vendor structure is not a vendor answer
  
  mxmzb
  and
  claude
  committed
  fcb7add
- fix(arcade): refuse an attempt that cannot say whose account it is for
  
  mxmzb
  and
  claude
  committed
  1fd5661
- test(db): make the schema guards fail when a CHECK is mutated
  
  mxmzb
  and
  claude
  committed
  e7ef88f
- merge: G2-retire-siblings (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  8b860c7
- fix(tests): make the D24 pairing guard able to fail
  
  mxmzb
  and
  claude
  committed
  fe601cd
- merge: C11-empty-behavior (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  4457cb6
- fix(app): read search parameters as text, so a numeric handle is not dropped
  
  mxmzb
  and
  claude
  committed
  5ac5eba
- fix(arcade): read an app's connection kind off the listing instead of writing consent
  
  mxmzb
  and
  claude
  committed
  5b6a860
- fix(arcade): bound every outbound broker call, not just how many times we ask
  
  mxmzb
  and
  claude
  committed
  f527d43
- merge: D4-attempt-holder (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  245fe84
- merge: H3-check-mutation (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  88993c4
- merge: H2-pairing-guard (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  8d3ffdf
- merge: C7-consent-kind (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  232b040
- test(server): close the test suite's egress so no case can dial a vendor
  
  mxmzb
  and
  claude
  committed
  ceefa4d
- merge: D9-search-coercion (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  226abda
- test(arcade): see the listing defects the engine fixtures still could not
  
  mxmzb
  and
  claude
  committed
  346babd
- fix(arcade): refuse in this deployment's own sentence, not the vendor's body
  
  mxmzb
  and
  claude
  committed
  1d64fa2
- test(app): pin the callbackURL a sign-in is given, not just its default
  
  mxmzb
  and
  claude
  committed
  8225e7d
- merge: H5-live-vendor-call (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  9a98762
- merge: H1-adapter-test-blindness (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  107ec2f
- merge: C12-vendor-error-bodies (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  31c74c4
- merge: D5-poll-timeout (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  60467a0
- merge: H4-app-mutation-survivors (bucket (a), round 1 fix cycle)
  
  mxmzb
  and
  claude
  committed
  b95b503
- fix(arcade): read the auth provider off the WHOLE action listing, not page one
  
  mxmzb
  and
  claude
  committed
  334d805
- merge: C13-auth-provider-paging (bucket (a), wave 3 — surfaced by a same-pattern audit)
  
  mxmzb
  and
  claude
  committed
  54e5ba6
- fix(plugins): read a stored holder/user-id pair as the account it names, or refuse
  
  mxmzb
  and
  claude
  committed
  8d75881
- merge: D10-store-account-ref (bucket (a), wave 3 — surfaced by a same-pattern audit)
  
  mxmzb
  and
  claude
  committed
  ff7f396
- fix(test): type arcade-verify's broker bag as a BrokerProvider, not a string
  
  mxmzb
  and
  claude
  committed
  922d4ec
- fix(plugins): account for the apps a retired identity's revoke also ends
  
  mxmzb
  and
  claude
  committed
  419ce70
- Merge branch 'fix/G3-retired-identity-siblings' into arcade-provider
  mxmzb
  committed
  cfd0db8
Commits on Oct 14, 2026
- test(arcade): state revoke's outcome invariant over seven vendor response shapes
  
  mxmzb
  and
  claude
  committed
  727b0e1
- test(arcade): refuse a stub vendor that never bound a port
  
  mxmzb
  and
  claude
  committed
  3dd4582
- test(support): one shared source scanner, and the contract test for its enumerator
  
  mxmzb
  and
  claude
  committed
  1be64c6
- test(ci): type-check server/tests against a frozen baseline of its existing errors
  
  mxmzb
  and
  claude
  committed
  73b3954
- test(contract): one home per named decision, and the keyed lookup extracted into it
  
  mxmzb
  and
  claude
  committed
  061a77b
- test(guards): the six assertion shapes that cannot fail, read off the source
  
  mxmzb
  and
  claude
  committed
  332631c
- merge: lever-cl3 (convergence-audit lever)
  mxmzb
  committed
  d9b7079
- merge: lever-cl1 (convergence-audit lever)
  mxmzb
  committed
  c93b9aa
- merge: lever-cl4 (convergence-audit lever)
  mxmzb
  committed
  4bac9df
- merge: lever-cl6 (convergence-audit lever)
  mxmzb
  committed
  ebd819e
- merge: cl5-revoke-invariant (convergence-audit lever)
  mxmzb
  committed
  c040190
- style(arcade): biome format the revoke-invariant harness
  
  mxmzb
  and
  claude
  committed
  1d80c6a
- test(arcade): make the disconnect guards see the vendor side
  
  mxmzb
  and
  claude
  committed
  598f9a3
- fix(arcade): an unattributable toolkit refuses instead of answering "nothing to withdraw"
  
  mxmzb
  and
  claude
  committed
  d942c52
- fix(arcade): an unreadable listing body is not an empty page
  
  mxmzb
  and
  claude
  committed
  bbabc97
- fix(arcade): read a vendor total_count the cross-check can use, or refuse
  
  mxmzb
  and
  claude
  committed
  83a9e25
- fix(arcade): refuse a vendor body this deployment cannot read, instead of crashing on it
  
  mxmzb
  and
  claude
  committed
  293d4f1
- merge: fix-A4-disconnect-guard (round 2 fix cycle, wave 0)
  mxmzb
  committed
  01f8ca5
- merge: fix-A1-authprovider-null (round 2 fix cycle, wave 0)
  mxmzb
  committed
  3fb7289
- merge: fix-A3-nonjson-fallback (round 2 fix cycle, wave 0)
  mxmzb
  committed
  2b8f874
- merge: fix-A9-totalcount-string (round 2 fix cycle, wave 0)
  mxmzb
  committed
  2f75aa0
- merge: fix-A10-accidental-greens (round 2 fix cycle, wave 0)
  mxmzb
  committed
  076677e
- test(arcade): cover connectionIsLive in the file its three paths live in
  
  mxmzb
  and
  claude
  committed
  af911ed
- test(arcade): pin the connection listing to the vendor identity
  
  mxmzb
  and
  claude
  committed
  5dbb877
- fix(plugins): record who consented on an Arcade-completed Shared connection
  
  mxmzb
  and
  claude
  committed
  36a9625
- Hold the completed_at/outcome pairing in the database, not in a comment
  
  mxmzb
  and
  claude
  committed
  faca7c7
- fix(plugins): resolve the attempt before the app on authorize-cancel (B5)
  
  mxmzb
  and
  claude
  committed
  4887aac
- fix(plugins): refuse a late callback that would reopen a settled authorization attempt
  
  mxmzb
  and
  claude
  committed
  1169d21
- test(composio): make the grantsFor suite able to see the isolation it names
  
  mxmzb
  and
  claude
  committed
  dd00908
- fix(plugins): one place for the three rules a cascade delete obeys
  
  mxmzb
  and
  claude
  committed
  e925cd2
- fix(app): drop every consumed one-shot parameter from Connected accounts, not just ?linked=
  
  mxmzb
  and
  claude
  committed
  3d029bb
- fix(plugins): tell the truth about a completion /arcade/verify could not report
  
  mxmzb
  and
  claude
  committed
  046f05a
- Key `pending_authorizations` to the people it names, and index its keys
  
  mxmzb
  and
  claude
  committed
  538c87d
- Settle account_mode on every brokered app that has an account
  
  mxmzb
  and
  claude
  committed
  b534b35
- merge: fix-A5-disconnect-sibling (round 2 fix cycle, wave 1)
  mxmzb
  committed
  c3a08f8
- merge: fix-A6-identity-scoping (round 2 fix cycle, wave 1)
  mxmzb
  committed
  add4faa
- merge: fix-A7-connection-liveness (round 2 fix cycle, wave 1)
  mxmzb
  committed
  6c745d2
- merge: fix-A8-grantsfor-isolation (round 2 fix cycle, wave 1)
  mxmzb
  committed
  96d51d1
- merge: fix-B2-close-attempt-guard (round 2 fix cycle, wave 1)
  mxmzb
  committed
  ac8da96
- merge: fix-B3-connectedby (round 2 fix cycle, wave 1)
  mxmzb
  committed
  756ef7a
- merge: fix-B5-cancel-removed-app (round 2 fix cycle, wave 1)
  mxmzb
  committed
  bc3c3ca
- merge: fix-B6-verify-catch (round 2 fix cycle, wave 1)
  mxmzb
  committed
  037bb98
- merge: fix-B8-param-replay (round 2 fix cycle, wave 1)
  mxmzb
  committed
  4f19170
- merge: fix-B1-attempt-pairing (round 2 fix cycle, wave 1)
  mxmzb
  committed
  d49b390
- merge: fix-B7-0057-keys (round 2 fix cycle, wave 1)
  
  mxmzb
  and
  claude
  committed
  e0cb295
- merge: fix-B4-account-mode (round 2 fix cycle, wave 1)
  
  mxmzb
  and
  claude
  committed
  b6c5a29
- fix(tests): await the person/actor helpers B7 made async
  
  mxmzb
  and
  claude
  committed
  aa87758
- fix(db): read the migrations journal from the table the migrator writes
  
  mxmzb
  and
  claude
  committed
  e7d12e1
- fix(migrate): keep the out-of-reach refusal when releasing the connection fails
  
  mxmzb
  and
  claude
  committed
  c569568
- fix(plugins): clear the vendor deadline when the call throws synchronously
  
  mxmzb
  and
  claude
  committed
  163822a
- fix(arcade): read a missing authorization block one way, as needing none
  
  mxmzb
  and
  claude
  committed
  6d349ef
- fix(db): pick the migrator's high-water mark the way drizzle picks it
  
  mxmzb
  and
  claude
  committed
  783e2f6
- fix(tests): resolve every type-only import in server/tests that pointed nowhere
  
  mxmzb
  and
  claude
  committed
  e5bc7ce
- fix(db): serialise the reach check and the migrate under one lock
  
  mxmzb
  and
  claude
  committed
  e1f7a0e
- fix(tests): close every egress path the test network guard left open (C7)
  
  mxmzb
  and
  claude
  committed
  2d9e233
- Merge branch 'fix-C1-deadline-timer-leak' into arcade-provider
  mxmzb
  committed
  88573c9
- Merge branch 'fix-C2-grantstate-noauth' into arcade-provider
  mxmzb
  committed
  67db1ed
- Merge branch 'fix-C5-client-end-masks' into arcade-provider
  mxmzb
  committed
  75b278c
- Merge branch 'fix-C7-network-guard' into arcade-provider
  mxmzb
  committed
  1254d72
- Merge branch 'fix-C8-constraints-import' into arcade-provider
  mxmzb
  committed
  ca6ea39
- Merge branch 'fix-C4-migrations-table-hardcode' into arcade-provider
  mxmzb
  committed
  a0c1ebf
- Merge branch 'fix-C6-reach-serialise' into arcade-provider
  mxmzb
  committed
  c6d7ba2
- Merge branch 'fix-C3-migration-reach-max' into arcade-provider
  mxmzb
  committed
  450e54b
- fix(db): carry a NULL created_at from the journal into the reach check
  
  mxmzb
  and
  claude
  committed
  944e526
- fix(plugins): route removeServer's sibling cascade through clearEndedSiblings
  
  mxmzb
  and
  claude
  committed
  398df1b
- test(arcade): make the configs() stub honour the query it is handed (A6a)
  
  mxmzb
  and
  claude
  committed
  edfcd09
- fix(arcade): make recordAuthorizationMint write-once and never after settlement
  
  mxmzb
  and
  claude
  committed
  ba948cb
- test(arcade): exercise cancel under a broker with no authorization flow (B5a)
  
  mxmzb
  and
  claude
  committed
  9a5101a
- fix(app): drop ?action= from an app's page after one read, keeping the grant list's mark
  
  mxmzb
  and
  claude
  committed
  111af38
- fix(arcade): refuse an authorization block the provider read cannot parse
  
  mxmzb
  and
  claude
  committed
  d143fba
- fix(composio): report the scopes of the config a connection was minted on
  
  mxmzb
  and
  claude
  committed
  85eacff
- fix(plugins): refuse to discard a settled authorization attempt (B2a)
  
  mxmzb
  and
  claude
  committed
  fce3a58
- fix(arcade): file mcp.authorization_cancelled when a person retracts a pending authorization
  
  mxmzb
  and
  claude
  committed
  2844ce2
- fix(plugins): carry vendor_user_id and skill origin through their conflict arms
  
  mxmzb
  and
  claude
  committed
  7fa121b
- fix(plugins): log a context-changed withdrawal whose outcome is unknown
  
  mxmzb
  and
  claude
  committed
  0557dab
- test(broker): complete the two enable-path broker stubs, and record any reach
  
  mxmzb
  and
  claude
  committed
  2a42273
- test(broker): complete the third enable-path broker stub in plugin-store
  
  mxmzb
  and
  claude
  committed
  8c8ee84
- fix(grants): count only what an approval covers in "approves all N"
  
  mxmzb
  and
  claude
  committed
  42e8e25
- fix(db): name the journal the check read in the refusal's repair SQL
  
  mxmzb
  and
  claude
  committed
  d735179
- test(composio): make the adapter suite's vendor doubles honour the query they are handed (A8a)
  
  mxmzb
  and
  claude
  committed
  9784073
- Merge branch 'fix-C4m-refusal-literal-table' into arcade-provider
  mxmzb
  committed
  de6a700
- Merge branch 'fix-B8a-action-param-strip' into arcade-provider
  mxmzb
  committed
  58fbd7a
- Merge branch 'fix-A5a-removeserver-key-sibling' into arcade-provider
  mxmzb
  committed
  859862b
- Merge branch 'fix-A6a-configs-stub-options' into arcade-provider
  mxmzb
  committed
  4aedd0d
- Merge branch 'fix-B2b-mint-rewrite-guard' into arcade-provider
  mxmzb
  committed
  ef7d748
- Merge branch 'fix-B4a-conflict-arm-columns' into arcade-provider
  mxmzb
  committed
  e5dc438
- Merge branch 'fix-B2a-discard-state-guard' into arcade-provider
  mxmzb
  committed
  b5c67a5
- Merge branch 'fix-B5a-cancel-composio-coverage' into arcade-provider
  mxmzb
  committed
  7f80695
- Merge branch 'fix-B5b-cancel-audit-row' into arcade-provider
  mxmzb
  committed
  46cd67d
- Merge branch 'fix-B6a-composio-revoke-catch' into arcade-provider
  mxmzb
  committed
  4b07e1e
- Merge branch 'fix-C2b-authproviders-unreadable' into arcade-provider
  mxmzb
  committed
  6db827b
- Merge branch 'fix-A8a-composio-fixture-blindness' into arcade-provider
  mxmzb
  committed
  3e7cc9c
- Merge branch 'fix-C8a-broker-stub-revoke' into arcade-provider
  mxmzb
  committed
  0142f1c
- Merge branch 'fix-G14-grantsfor-config-scope' into arcade-provider
  mxmzb
  committed
  281d886
- Merge branch 'fix-C2a-approval-count-copy' into arcade-provider
  mxmzb
  committed
  81f1769
- fix(tests): carry C2a's authorization field into G14's and B8a's grant literals
  
  mxmzb
  and
  claude
  committed
  f4f6974
- test(fixtures): pin local id and vendor id distinct in account fixtures (lever L1b)
  
  mxmzb
  and
  claude
  committed
  c995b68
- test: add a mutation register that plants known defects and requires named suites to go red
  
  mxmzb
  and
  claude
  committed
  8c4febb
- test(arcade): L2 contract table over how every vendor-field reader treats an unreadable value
  
  mxmzb
  and
  claude
  committed
  d161617
- test(sole-definition): pin K5 second spellings — journal, sibling walk, key-app answer (lever L5)
  
  mxmzb
  and
  claude
  committed
  f9c72c3
- test(L3): ratchet casts past the broker type; add a throw-by-default stubBroker
  
  mxmzb
  and
  claude
  committed
  0c4859f
- test(L4): ledger every pending_authorizations write against its audit decision
  
  mxmzb
  and
  claude
  committed
  dab76a5
- Merge branch 'lever-L1-mutation-register' into arcade-provider
  mxmzb
  committed
  3274448
- Merge branch 'lever-L1b-fixture-identity' into arcade-provider
  mxmzb
  committed
  5397157
- Merge branch 'lever-L2-vendor-field-contract' into arcade-provider
  mxmzb
  committed
  6cc095a
- Merge branch 'lever-L3-stub-ratchet' into arcade-provider
  mxmzb
  committed
  eb85e42
- Merge branch 'lever-L4-authorization-trail-ledger' into arcade-provider
  mxmzb
  committed
  718295a
- Merge branch 'lever-L5-sole-definition-entries' into arcade-provider
  mxmzb
  committed
  5aa60d7
- test(levers): let two existing guards see the stubBroker factory
  
  mxmzb
  and
  claude
  committed
  a54ba3a
- merge: main (#784 server split, #789) — STRUCTURE ONLY, arcade work not yet re-homed
  
  mxmzb
  and
  claude
  committed
  1686607
- rehome(1/2): arcade store methods and shared contracts into main's split layout
  
  mxmzb
  and
  claude
  committed
  c78fe76
- rehome(2/2): arcade routes into main's route-group layout
  
  mxmzb
  and
  claude
  committed
  c870ccd
- Merge commit 'c870ccd4' into arcade-provider
  mxmzb
  committed
  b59a40b
- test(compose): assert the migrator compose actually runs
  
  mxmzb
  and
  claude
  committed
  b4e48c7
- fix(test-guard): judge raw sockets by the address they reach; assert proxy refusals on the guard's record
  
  mxmzb
  and
  claude
  committed
  695fdc8
- Merge branch 'fix-ci-network-guard' into arcade-provider
  mxmzb
  committed
  e6ee9a7
- fix(plugins): log an authorization mint whose outcome is unknown
  
  mxmzb
  and
  claude
  committed
  df1c682
- docs(accounts): say why a person's vendor id is their local id, and mint it in one place
  
  mxmzb
  and
  claude
  committed
  445259c
- fix(plugins): one judgement for what the trail says about a key app (K5: A5b, A5c, L5-a)
  
  mxmzb
  and
  claude
  committed
  180d2dc
- fix(L4-b): an attempt dies only with the person who started it
  
  mxmzb
  and
  claude
  committed
  1d4e779
- fix(arcade): do not hand out a consent url the mint could not bind (B5d)
  
  mxmzb
  and
  claude
  committed
  962137a
- fix(arcade): one absent/unreadable/read reading for every vendor authorization field (K2)
  
  mxmzb
  and
  claude
  committed
  1a9728a
- Merge branch 'fix-L1ba-accountref-identity' into arcade-provider
  mxmzb
  committed
  84b9974
- Merge branch 'fix-L4b-cascade-cross-actor' into arcade-provider
  mxmzb
  committed
  f189b46
- Merge branch 'fix-K5-retire-connections-rules' into arcade-provider
  mxmzb
  committed
  497afc1
- Merge branch 'fix-K2-fail-open-reads' into arcade-provider
  mxmzb
  committed
  7301015
- Merge branch 'fix-L4a-unknown-vendor-outcome' into arcade-provider
  mxmzb
  committed
  5aa731c
- Merge branch 'fix-B5d-ignored-mint-result' into arcade-provider
  mxmzb
  committed
  922c21a
- fix(arcade): load the app directory inside the vendor deadline
  
  mxmzb
  and
  claude
  committed
  3469999
- Merge branch 'fix-arcade-directory-deadline' into arcade-provider
  mxmzb
  committed
  1b396d4
- fix(arcade): read a large toolkit's action listing inside the vendor deadline
  
  mxmzb
  and
  claude
  committed
  6b25d8c
- Merge branch 'fix-arcade-toolkit-listing-deadline' into arcade-provider
  mxmzb
  committed
  a1ecf38
- Merge remote-tracking branch 'origin/main' into arcade-provider
  mxmzb
  committed
  6c82062
- test(types): take main's #790 debt into the baseline, deliberately
  
  mxmzb
  and
  claude
  committed
  e5f0db1
- fix(plugins): withhold the whole-app Connect where the broker authorizes per action
  
  mxmzb
  and
  claude
  committed
  9c441b7
- fix(plugins): record an action's own name apart from the vendor's spelling of it
  
  mxmzb
  and
  claude
  committed
  8e379bd
- fix(arcade): say out loud the three unknowns the verify leg used to swallow
  
  mxmzb
  and
  claude
  committed
  e224188
- fix(arcade): stop telling people to finish a consent screen that was never opened
  
  mxmzb
  and
  claude
  committed
  f76849b
- chore(tests): re-key the typecheck baseline for lines this branch moved
  
  mxmzb
  and
  claude
  committed
  9db29b1
Commits on Oct 15, 2026
- chore: untrack agent-mastra/bun.lock again, restored by merge 16866075
  
  mxmzb
  and
  claude
  committed
  5a0c618
- chore(tests): key the typecheck baseline by message, not line
  
  mxmzb
  and
  claude
  committed
  a0d973a
- chore(db): squash the arcade migrations into one schema step and one data step
  
  mxmzb
  and
  claude
  committed
  23d616c
- fix(plugins): skip a tool name no model can be offered instead of refusing the listing
  
  mxmzb
  and
  claude
  committed
  d860b91
- fix(arcade): stop a demoted admin's late return from ending the team's shared grant
  
  mxmzb
  and
  claude
  committed
  8b0d26b
- fix(arcade): stop reporting success when a cancel lands during the return leg
  
  mxmzb
  and
  claude
  committed
  6aadc57
- docs(arcade): quote the migration-reach refusal as the migrator actually prints it
  
  mxmzb
  and
  claude
  committed
  73bf383
- fix(arcade): warn at startup that nothing checks the project's verifier
  
  mxmzb
  and
  claude
  committed
  bbc764f
- fix(arcade): name what ends the other provider's connections, not an unbuilt sunset flow
  
  mxmzb
  and
  claude
  committed
  d88b38e
- docs(arcade): say when and how each measurement was taken, and that CI takes none
  
  mxmzb
  and
  claude
  committed
  8740547
- Merge remote-tracking branch 'origin/main' into arcade-provider
  mxmzb
  committed
  c558459
- chore(tests): move two ratchets for the review fixes
  
  mxmzb
  and
  claude
  committed
  90ee683
Commits on Oct 17, 2026
- fix(arcade): clear only the retired identity's row, and say when a cancelled grant stays live
  
  mxmzb
  and
  claude
  committed
  dfce0ef
- test(arcade): read back a tool row an old replica wrote without vendor_name
  
  mxmzb
  and
  claude
  committed
  1d322a7
- fix(plugins): show tools a refresh skipped as a warning, not as the app's last error
  
  mxmzb
  and
  claude
  committed
  11b56f3
- chore(tests): fix this PR's own type errors instead of baselining them
  
  mxmzb
  and
  claude
  committed
  cf4a439
- docs(arcade): date the live measurements the code comments cite
  
  mxmzb
  and
  claude
  committed
  023c217
- Merge remote-tracking branch 'origin/main' into arcade-provider
  mxmzb
  committed
  7aeab2c
- test: follow main's connect-prompt wording, the identity-matched re-check, and two moved ratchets
  
  mxmzb
  and
  claude
  committed
  cd42db9
- test: give plugin-routes' held connection the revoked field main added
  
  mxmzb
  and
  claude
  committed
  289ef45
Commits on Oct 19, 2026
- Merge remote-tracking branch 'origin/main' into arcade-provider
  mxmzb
  committed
  3d89241
Commits on Oct 21, 2026

Commits

Commits on Oct 13, 2026

Commits on Oct 14, 2026