@linzumi/cli 0.0.12-beta → 0.0.13-beta

package/src/kandanQueue.ts

@@ -8,12 +8,22 @@
   Spec: plans/2026-04-24-local-codex-runner-deep-quality-spec.md
   Relationship: Carries selected queued message seqs through interrupt fusion
   so the UI can show which pending replies were accepted by the interrupt.
+
+- Date: 2026-05-02
+  Spec: plans/2026-05-02-agent-first-zero-to-codex-launch-plan.md
+  Relationship: Carries Kandan attachment metadata through npm CLI runner queue
+  fusion so attachment-backed replies stay intact before Codex sees them.
 */
+import { type KandanChatAttachment } from "./channelSessionSupport";
+
+export type QueuedKandanAttachment = KandanChatAttachment;
+
 export type QueuedKandanMessage = {
   readonly seq: number;
   readonly actorSlug: string | undefined;
   readonly actorUserId: number | undefined;
   readonly body: string;
+  readonly attachments: readonly QueuedKandanAttachment[];
 };
 
 export type QueueInterruptResult =
@@ -98,5 +108,6 @@ function fuseQueuedMessages(
     actorSlug: "kandan",
     actorUserId: undefined,
     body: selected.map(codexInputForQueuedKandanMessage).join("\n\n---\n\n"),
+    attachments: selected.flatMap(message => message.attachments),
   };
 }

package/src/localForwarding.ts

@@ -211,14 +211,15 @@ function openLocalWebSocket(
   scheme: "ws" | "wss",
 ): void {
   let opened = false;
-  const websocket = new WebSocket(
-    localForwardUrl(
-      scheme === "ws" ? "http" : "https",
-      control.port,
-      control.path,
-      control.queryString,
-    ).replace(/^http/, scheme),
-  );
+  const url = localForwardUrl(
+    scheme === "ws" ? "http" : "https",
+    control.port,
+    control.path,
+    control.queryString,
+  ).replace(/^http/, scheme);
+  const protocols = webSocketProtocols(control.headers);
+  const websocket =
+    protocols === undefined ? new WebSocket(url) : new WebSocket(url, protocols);
   sockets.set(control.socketId, websocket);
   websocket.addEventListener("open", () => {
     opened = true;
@@ -260,6 +261,28 @@ function openLocalWebSocket(
   });
 }
 
+function webSocketProtocols(headers: JsonValue | undefined): string[] | undefined {
+  if (!Array.isArray(headers)) {
+    return undefined;
+  }
+
+  const protocols = headers.flatMap(header => {
+    if (
+      !isWireHeader(header) ||
+      header.name.toLowerCase() !== "sec-websocket-protocol"
+    ) {
+      return [];
+    }
+
+    return header.value
+      .split(",")
+      .map(protocol => protocol.trim())
+      .filter(protocol => protocol !== "");
+  });
+
+  return protocols.length === 0 ? undefined : protocols;
+}
+
 function localForwardUrl(
   scheme: "http" | "https",
   port: number,

package/src/protocol.ts

@@ -37,6 +37,11 @@
   Spec: plans/2026-04-26-local-runner-subdomain-forwarding-epr.md
   Relationship: Defines the typed WebSocket forwarding controls used by
   isolated preview subdomains.
+
+- Date: 2026-05-02
+  Spec: plans/2026-05-02-agent-first-zero-to-codex-launch-plan.md
+  Relationship: Keeps the npm CLI runner protocol in parity with the legacy
+  runner for runtime session setting updates.
 */
 export type JsonValue =
   | null
@@ -182,6 +187,16 @@ export type KandanControl =
       readonly requestId: string;
       readonly decision: "approve" | "deny";
     }
+  | {
+      readonly type: "update_session_settings";
+      readonly instanceId?: string;
+      readonly threadId: string;
+      readonly model?: string | null;
+      readonly reasoningEffort?: string | null;
+      readonly approvalPolicy?: string | null;
+      readonly sandbox?: string | null;
+      readonly fast?: boolean;
+    }
   | {
       readonly type: "resolve_port_forward_request";
       readonly instanceId: string;

package/src/runner.ts

@@ -211,6 +211,21 @@ async function openLocalCodexRunner(
     channel: options.channelSession?.channelSlug ?? null,
     capabilities: capabilitiesPayload(),
   });
+
+  const pendingControls: KandanControl[] = [];
+  const controlDispatcher: {
+    value: ((control: KandanControl) => void) | undefined;
+  } = { value: undefined };
+  kandan.onControl((control) => {
+    const dispatcher = controlDispatcher.value;
+    if (dispatcher === undefined) {
+      pendingControls.push(control);
+      return;
+    }
+
+    dispatcher(control);
+  });
+
   await kandan.join(topic, joinPayload(), { rejoinPayload: joinPayload });
 
   const started =
@@ -431,7 +446,7 @@ async function openLocalCodexRunner(
     channelSession?.handleCodexNotification(notification.method, params);
   });
 
-  kandan.onControl((control) => {
+  const handleControl = (control: KandanControl) => {
     log("kandan.control", { control });
     if (!controlTargetsInstance(control, instanceId)) {
       log("kandan.control_ignored", {
@@ -584,7 +599,10 @@ async function openLocalCodexRunner(
           message: error instanceof Error ? error.message : String(error),
         });
       });
-  });
+  };
+
+  controlDispatcher.value = handleControl;
+  pendingControls.splice(0).forEach(handleControl);
 
   return { instanceId, codexUrl, close };
 }
@@ -670,7 +688,7 @@ function normalizedWorkDescription(value: string | undefined): string | undefine
 
 function makeRunnerLogger(options: RunnerOptions): RunnerLogger {
   return createRunnerLogger(
-    options.logFile ?? join(options.cwd, ".kandan-local-codex-runner.log"),
+    options.logFile ?? join(options.cwd, ".linzumi-runner.log"),
     options.launchTui ? undefined : reportRunnerConsoleEvent,
   );
 }