PR Custody

fix(enhanced-link): proxy permission saves to Apollo

@CryogenicPlanetchecks n/achecks…pi/fix-onboarding-toast-error-01c222c1 → main1 files · +81 −97review: @shamsharoonupdated 1w ago

▸Description · 1 noise

Replace the broken enhanced-link permission save path that tried to recover a removed project API key from the dashboard DB.
Proxy the permission selection to Apollo's link-token permission endpoint, sending only the server-validated config version and risk-group choices.
Normalize backend error payloads so the public link UI gets a useful message instead of the generic internal-server toast/HTML fallback.

pnpm exec prettier --check 'src/app/api/enhanced/link/[token]/permissions/route.ts' ✅
pnpm exec oxlint --config .oxlintrc.json src/app/api/enhanced/link/'[token]'/permissions/route.ts ✅
SKIP_ENV_VALIDATION=1 pnpm typecheck ⚠️ fails on existing repo-wide issues unrelated to this change (missing generated operation names, existing MCP route typing errors, etc.)
pnpm lint ⚠️ fails on existing repo-wide lint errors/warnings unrelated to this change (e.g. scripts/print-mcpjam-fixtures.ts no-console)

Depends on Apollo/Hermes link-token permission endpoint from https://github.com/ComposioHQ/platform/pull/10437 being deployed.

tsgo typecheck GitHub check currently fails before checkout because the workflow uses unpinned actions/checkout@v4, pnpm/action-setup@v4, and actions/setup-node@v4. This is unrelated to this code change.

▸ 1 bot/status comment hidden

@vercel[bot]1w ago

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
dashboard	Error		Jun 3, 2026 2:21am

loading diff…