From b6499d4127544ff41431e37fe4f7d2bac7599003 Mon Sep 17 00:00:00 2001 From: Claude Date: Sun, 6 Sep 2026 13:50:29 +0000 Subject: [PATCH] deps: repoint lance-graph git deps from the feature branch to main AdaWorldAPI/lance-graph#1206 (the Axis-4 WideFieldMask widening) is merged, so `main` now carries the widened `ClassRbac::field_mask` these crates were pinned to a branch to reach. Leaving the branch ref on OGAR main was the real exposure: a branch can be deleted after its PR merges, and OGAR main would then stop resolving its dependencies. Pointing at a feature branch was correct only while that branch was the sole place the widened trait existed. Resolves to main#2918421. ogar-auth 19/19, ogar-rbac 7/7, fmt and clippy -D warnings clean. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01PGkLH5cYiiWM4QmNkvBBvf --- crates/ogar-auth/Cargo.toml | 2 +- crates/ogar-rbac/Cargo.toml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/crates/ogar-auth/Cargo.toml b/crates/ogar-auth/Cargo.toml index 7997f05..ebb33eb 100644 --- a/crates/ogar-auth/Cargo.toml +++ b/crates/ogar-auth/Cargo.toml @@ -21,7 +21,7 @@ ogar-encryption = { path = "../ogar-encryption" } # the parallel identity normalizer the ownership ruling forbids. Downward dep # only — the contract is zero-dep and never reaches back into OGAR. Same git # pattern as `ogar-class-view`. -lance-graph-contract = { git = "https://github.com/AdaWorldAPI/lance-graph", branch = "claude/patient-identity-architecture-r8lhi5" } +lance-graph-contract = { git = "https://github.com/AdaWorldAPI/lance-graph", branch = "main" } # Argon2id PHC hash+verify (the login-credential path — distinct from the # envelope KDF). Default features carry `password-hash` + `rand` (OsRng salt). diff --git a/crates/ogar-rbac/Cargo.toml b/crates/ogar-rbac/Cargo.toml index c84105b..f70c786 100644 --- a/crates/ogar-rbac/Cargo.toml +++ b/crates/ogar-rbac/Cargo.toml @@ -21,9 +21,9 @@ ogar-vocab = { path = "../ogar-vocab" } # The zero-dep socket: `ClassRbac`, `ClassId`, `Operation`, `ClassGrant`, # `OpMask`, `WideFieldMask`. Downward dep only — the contract never reaches # back into OGAR. -lance-graph-contract = { git = "https://github.com/AdaWorldAPI/lance-graph", branch = "claude/patient-identity-architecture-r8lhi5" } +lance-graph-contract = { git = "https://github.com/AdaWorldAPI/lance-graph", branch = "main" } # The GENERIC kernel (`authorize`, `authorize_scoped`, `ScopedDecision`). # Consumed, never cloned: the algorithm is consumer-agnostic and stays where it # is. This crate supplies the impl and the grant data, not the mechanics. -lance-graph-rbac = { git = "https://github.com/AdaWorldAPI/lance-graph", branch = "claude/patient-identity-architecture-r8lhi5" } +lance-graph-rbac = { git = "https://github.com/AdaWorldAPI/lance-graph", branch = "main" }