Skip to content

feat(agent-vault)!: sessions carry one accessBundle - #67

Merged
saifsmailbox98 merged 1 commit into
mainfrom
saif/age2-282-make-a-session-use-one-access-bundle-instead-of-a-list
Nov 4, 2026
Merged

saifsmailbox98 merged 1 commit into
mainfrom
saif/age2-282-make-a-session-use-one-access-bundle-instead-of-a-list

Conversation

@saifsmailbox98

@saifsmailbox98 saifsmailbox98 commented Nov 2, 2026 •

Copy link
Copy Markdown
Member

Agent Vault sessions now carry one accessBundle instead of an accessBundles list, matching the session API change in Infisical/infisical#9099.

  • sessions.create(access_bundle=...) sends accessBundle
  • AgentVaultSession and CreatedAgentVaultSession have accessBundle: Optional[AgentVaultSessionAccessBundle] instead of accessBundles. id is None once the bundle is deleted. accessBundle is None for a session with only inline services, and revoke still returns it as None
  • AgentVaultSessionAccessBundle drops position

Breaking: code that reads session.accessBundles needs to read session.accessBundle.

Merge after Infisical/infisical#9099 is deployed to Cloud: a server without it rejects accessBundle.

Related: Infisical/cli#481, Infisical/agent-reference-architectures#4

AGE2-282

@infisical-review-police

Copy link
Copy Markdown

💬 Discussion in Slack: #pr-review-python-sdk-official-67-feat-agent-vault-sessions-carry-one-accessbundl

Posted by Review Police — reviews, comments, new commits, and CI failures will stream into this channel.

@linear

linear Bot commented Nov 2, 2026 •

Copy link
Copy Markdown

AGE2-282

AGE2-315

@greptile-apps

greptile-apps Bot commented Nov 2, 2026 •

Copy link
Copy Markdown
Contributor

RetriggerView in GreptileConfidence Score: 5/5 Tier: plus

[Medium impact] The PR appears safe to merge under the stated server deployment requirement.

Summary

Changes Agent Vault sessions from an accessBundles list to one optional accessBundle.

  • Agent Vault sessions now carry one optional access bundle.

No actionable issues were found.

Reviews (1) · Last reviewed commit: "feat(agent-vault)!: sessions carry one a..." · Reviewed by Greptile

@claude claude Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nothing blocking. The comments below are optional suggestions. There is no need to push a fix for them before merging.

Comment thread infisical_sdk/api_types.py Resolved

@scott-ray-wilson scott-ray-wilson left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@saifsmailbox98
saifsmailbox98 merged commit a85bacc into main Nov 4, 2026
14 checks passed
scott-ray-wilson added a commit to Infisical/node-sdk-v2 that referenced this pull request Nov 4, 2026
Matches the session API change in Infisical/infisical#9099 and the Python
SDK's Infisical/python-sdk-official#67. sessions.create sends accessBundle,
and sessions have accessBundle ({ id, name }, or null for a session with only
inline services) instead of an accessBundles list. id is null once the bundle
is deleted, and position is gone. sessions.revoke leaves out accessBundle and
services, as the API does.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
scott-ray-wilson added a commit that referenced this pull request Nov 4, 2026
Brings in #67, so sessions carry one accessBundle instead of an accessBundles
list. The conflicts were in the session models, sessions.create and the tests:
this branch's onBehalfOf and inline services now sit beside #67's
accessBundle, sessions.create sends accessBundle with services, and #67's
tests are kept.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants