Skip to content

spec 018: duckdb-acl and tresor on ext-common v0.14.0 - #19

Merged
VGSML merged 1 commit into
mainfrom
018-pin-ext-common-v0.14.0
Oct 22, 2026
Merged

VGSML merged 1 commit into
mainfrom
018-pin-ext-common-v0.14.0

Conversation

@VGSML

@VGSML VGSML commented Oct 22, 2026

Copy link
Copy Markdown
Contributor

ext-common v0.14.0 (its spec 017; tag f09b0a8, commit ac39cbe) sends PKCE on the device flow when the issuer advertises S256, as Keycloak does. hugr_node compiles the OIDC core of both duckdb-acl and tresor, and the two must match, so they move together.

submodule from to
duckdb-acl 41ec046 8b938d1: its spec 142 (#252); also spec 141's addendum (#251, mssql 6df11bc)
tresor 550791c (v0.1.0) 029913c: its specs 040 (device PKCE) and 041 (an optional name in whoami, a name column appended last to corp.whoami()), ACL_COMMIT 8b938d1 (#71)

Both name ext-common ac39cbe, which I checked here before moving. No contract changes, so acl-otel stays where it is.

Tests, local

  • the build (HUGR_NODE_E2E=1);
  • test/sql/* (999 assertions) and make test-cpp;
  • the bootstrap e2e, 22 checks: Keycloak, tresor-server, kista, the orchestrated nodes, the first policy, spec 017's migration.

All green.

🤖 Generated with Claude Code

https://claude.ai/code/session_01LdLs2iBQygBKtsApdH9Sxi

ext-common v0.14.0 (its spec 017; tag f09b0a8, commit ac39cbe): PKCE on the device flow
when the issuer advertises S256 (Keycloak). hugr_node compiles both OIDC cores, which must
match, so they move together:
- duckdb-acl 41ec046 -> 8b938d1 (its spec 142, #252; spec 141's addendum #251, mssql 6df11bc)
- tresor 550791c (v0.1.0) -> 029913c (its specs 040 and 041, ACL_COMMIT 8b938d1, #71)
No contract changes; acl-otel stays. Checked here: both name ext-common ac39cbe.

Tests: the build (HUGR_NODE_E2E=1), test/sql/* (999 assertions), test-cpp and the bootstrap
e2e (22 checks: Keycloak, tresor-server, kista, the orchestrated nodes, the first policy,
spec 017's migration).

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LdLs2iBQygBKtsApdH9Sxi
@VGSML
VGSML merged commit 3797ed1 into main Oct 22, 2026
2 checks passed
@VGSML
VGSML deleted the 018-pin-ext-common-v0.14.0 branch October 22, 2026 07:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant