From 78a7da6ed9f9a8d1e39a1c63d51aeef0e49ab390 Mon Sep 17 00:00:00 2001 From: Defang Agent Date: Tue, 8 Sep 2026 22:38:51 +0000 Subject: [PATCH] fix(webhook): bump local-channels pin to 0.27.1 for the filter-race fix defangdevs/agent-box#618: webhook_subscribe --claim could report success while the on-disk filter file's topics silently kept the pre-call state, because FILTER_LOCK only serializes threads inside one process and the one-shot CLI/daemon never share it. defangdevs/local-channels#56 (merged, local-webhook 0.27.1) closes that with a cross-process flock on the filter file, held for the whole read-modify-write in both the CLI/MCP tool-call path and the daemon's delivery routing. Bump nix/webhook-pin.nix to the new commit and regenerate modules/agent-box.nix (nix run .#assemble). ## Verification Native aarch64 checks (this box's architecture; the pin-only diff touches no VM-test-only surface): - module-generated-up-to-date, assemble-module-escaping, golden-snapshot - one-spec-both-backends, backend-parity, multi-user, module-single-file - every other native aarch64 check in the flake (34 total), --keep-going All green. Co-Authored-By: Claude Sonnet 5 Claude-Session: https://claude.ai/code/session_01JLgCfi9EpxvsXpjvesS4JR --- modules/agent-box.nix | 4 ++-- nix/webhook-pin.nix | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/modules/agent-box.nix b/modules/agent-box.nix index 842f1589..458098bc 100644 --- a/modules/agent-box.nix +++ b/modules/agent-box.nix @@ -1153,8 +1153,8 @@ let # module-generated-up-to-date check fails until it matches. { repo = "defangdevs/local-channels"; - rev = "e26aac87ddca1b325290ece457ea657d40bed171"; - sha256 = "sha256-AX0jhoY+SSZg7cHQytUq8/oF9cYvFDlwIFQSeaKIqow="; + rev = "35acd82182405fdadc089cc32ac4b4f0be3f81a3"; + sha256 = "sha256-2SsXigjRBkpIWDhLjD9ibMRLaOoilTz9kT5kz1o1jck="; } ; localWebhookScript = builtins.fetchurl { diff --git a/nix/webhook-pin.nix b/nix/webhook-pin.nix index a98e03d2..dc557f90 100644 --- a/nix/webhook-pin.nix +++ b/nix/webhook-pin.nix @@ -16,6 +16,6 @@ # module-generated-up-to-date check fails until it matches. { repo = "defangdevs/local-channels"; - rev = "e26aac87ddca1b325290ece457ea657d40bed171"; - sha256 = "sha256-AX0jhoY+SSZg7cHQytUq8/oF9cYvFDlwIFQSeaKIqow="; + rev = "35acd82182405fdadc089cc32ac4b4f0be3f81a3"; + sha256 = "sha256-2SsXigjRBkpIWDhLjD9ibMRLaOoilTz9kT5kz1o1jck="; }