fix(runtime,hono): an exact /approvals/act dispatcher domain for kernels with no raw app, and a catch-all that leaves the raw request readable by objectstack-fleet[bot] · Pull Request #22693 · objectstack-ai/objectstack

feat(runtime,hono): an exact /approvals/act dispatcher domain and a catch-all that leaves the raw request readable (WIP)

claude

committed

b9d9946

test(runtime): /approvals/act domain pins; the membership case measured red before any skip (WIP)

claude

committed

c24b7fb

fix(runtime): the project-membership gate skips the exact /approvals/act route — the token is its only credential

claude

committed

e13c0e8

test(hono): the catch-all hands dispatch() an unread request and the parsed body it always did

claude

committed

9bdf36c

test(http-conformance): /approvals/act through both doors on the real approvals plugin (WIP)

claude

committed

b2ed7ca

chore(changeset): runtime + hono patch for the /approvals/act hosted door

claude

committed

744ab8e

chore(route-envelope): declare the /approvals/act dispatcher domain — it hand-builds no response

claude

committed

e995746

test(dogfood): pin the /approvals/act ledger rows as unobservable on the self-hosted boot — plugin-approvals serves them off the raw app

claude

committed

36b9945

Merge remote-tracking branch 'origin/main' into claude/issue-22576-approvals-act-domain

claude

committed

63db347

chore(runtime): route-ledger census 82 -> 84 for the two /approvals/act rows

claude

committed

427772e

test(dogfood): classify the /approvals/act dispatcher domain in the authorization matrix — the action token is its only credential

claude

committed

c4763c1

test(dogfood): re-measure the authz probe blind-spot census for the two /approvals/act ledger rows

claude

committed

63769fa

Navigation Menu

Repository navigation

fix(runtime,hono): an exact /approvals/act dispatcher domain for kernels with no raw app, and a catch-all that leaves the raw request readable - #22693

fix(runtime,hono): an exact /approvals/act dispatcher domain for kernels with no raw app, and a catch-all that leaves the raw request readable#22693
objectstack-fleet[bot] merged 12 commits into
mainfrom
claude/issue-22576-approvals-act-domain

Commits on Oct 10, 2026

feat(runtime,hono): an exact /approvals/act dispatcher domain and a catch-all that leaves the raw request readable (WIP)

test(runtime): /approvals/act domain pins; the membership case measured red before any skip (WIP)

fix(runtime): the project-membership gate skips the exact /approvals/act route — the token is its only credential

test(hono): the catch-all hands dispatch() an unread request and the parsed body it always did

test(http-conformance): /approvals/act through both doors on the real approvals plugin (WIP)

chore(changeset): runtime + hono patch for the /approvals/act hosted door

chore(route-envelope): declare the /approvals/act dispatcher domain — it hand-builds no response

test(dogfood): pin the /approvals/act ledger rows as unobservable on the self-hosted boot — plugin-approvals serves them off the raw app

Merge remote-tracking branch 'origin/main' into claude/issue-22576-approvals-act-domain

chore(runtime): route-ledger census 82 -> 84 for the two /approvals/act rows

test(dogfood): classify the /approvals/act dispatcher domain in the authorization matrix — the action token is its only credential

test(dogfood): re-measure the authz probe blind-spot census for the two /approvals/act ledger rows