Repository navigation
BOT-2527: share with communities through the Blox proxy where it's enabled - #41
Open
nathan-thillairajah wants to merge 1 commit into
Open
nathan-thillairajah wants to merge 1 commit into
nathan-thillairajah wants to merge 1 commit into
Conversation
…abled On a Blox workstation `bl apps community grant|revoke` goes through Roxy. bb-public's Roxy now asks Kgoose for the community-bound credential on the community sharing route, so the CLI no longer needs to refuse there. bb-public workstations opt in with BL_APPS_COMMUNITY_SHARING=enabled. bb-block has no community sharing and leaves it unset, so `bl` keeps refusing before any request and points the owner to Share & manage. Co-authored-by: Irving B <6c4c50b3b6dee89feaca78ea87eb5c8fde651d2d7b39d6da8c9354ce7a34e313@remote-agent-pilot.communities.buzz.xyz> Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
nathan-thillairajah
marked this pull request as ready for review
October 30, 2026 20:03
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
On a Blox workstation,
bl apps community grant|revokerefuses to run and sends owners to Share & manage, because the workstation proxy couldn't get a community sharing credential (BOT-2527). On bb-public it now can: Kgoose mints the credential (squareup/cash-server#144809) and Roxy asks for it (squareup/blox#4975).blcan't tell bb-public from bb-block, since both use the same proxy origin, so the workstation says so withBL_APPS_COMMUNITY_SHARING=enabled. bb-public sets it (squareup/builderbot-platform-core-infrastructure#2694). With exactly that value, grant and revoke go through the proxy the same way the otherbl appscalls do. With any other value, or none,blkeeps refusing as before, which is what bb-block should do. Test runs clear the variable, so a developer's shell can't leak it into them.bl apps community liststill needs abl auth loginsession on Blox. That's out of scope here.Release this after the bpci change is on bb-public staging workstations.
Deploy order
blrelease with BOT-2527: share with communities through the Blox proxy where it's enabled #41, after 3🤖 Generated with Claude Code