@linzumi/cli 0.0.4-beta → 0.0.5-beta

package/README.md

@@ -27,7 +27,7 @@ runner. It wraps the same local runner that was previously started with
 Install the exact beta version:
 
 ```bash
-npm install -g @linzumi/cli@0.0.4-beta
+npm install -g @linzumi/cli@0.0.5-beta
 ```
 
 Or install the current beta tag:
@@ -47,7 +47,7 @@ linzumi --version
 Expected CLI output:
 
 ```bash
-linzumi 0.0.4-beta
+linzumi 0.0.5-beta
 ```
 
 ## Prod Quick Start
@@ -55,7 +55,7 @@ linzumi 0.0.4-beta
 For the Linzumi workspace in prod, this is the first command to try:
 
 ```bash
-npm install -g @linzumi/cli@0.0.4-beta
+npm install -g @linzumi/cli@0.0.5-beta
 
 linzumi connect \
   --kandan-url wss://serve.kandanai.com \

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@linzumi/cli",
-  "version": "0.0.4-beta",
+  "version": "0.0.5-beta",
   "description": "Linzumi local Codex runner CLI.",
   "type": "module",
   "bin": {

package/src/index.ts

@@ -66,7 +66,7 @@ async function main(args: readonly string[]): Promise<void> {
       process.stdout.write(connectGuideText());
       return;
     case "version":
-      process.stdout.write("linzumi 0.0.4-beta\n");
+      process.stdout.write("linzumi 0.0.5-beta\n");
       return;
     case "auth":
       await runAuthCommand(parsed.args);
@@ -144,7 +144,7 @@ export async function parseRunnerArgs(args: readonly string[]): Promise<RunnerOp
   }
 
   if (values.get("version") === true) {
-    process.stdout.write("linzumi 0.0.4-beta\n");
+    process.stdout.write("linzumi 0.0.5-beta\n");
     process.exit(0);
   }
 

package/src/phoenix.ts

@@ -13,6 +13,11 @@
   Spec: plans/2026-04-24-local-codex-runner-deep-quality-spec.md
   Relationship: Treats the Kandan websocket as a reconnectable transport so
   server restarts do not terminate the durable local Codex session.
+
+- Date: 2026-04-26
+  Spec: plans/2026_04_26_linzumi_cli_review_followups_note.md
+  Relationship: Treats non-ok Phoenix replies for runner pushes as transport
+  failures so failed Kandan writes cannot be mistaken for synchronized state.
 */
 import {
   type JsonObject,
@@ -23,6 +28,7 @@ import {
 } from "./protocol";
 
 type PendingPush = {
+  readonly event: string;
   readonly resolve: (payload: JsonValue) => void;
   readonly reject: (error: Error) => void;
 };
@@ -112,6 +118,8 @@ export async function connectPhoenixClient(
 
         if (name === "phx_error") {
           pendingPush.reject(new Error("phoenix push failed"));
+        } else if (isNonOkPushReply(payload) && pendingPush.event !== "phx_join") {
+          pendingPush.reject(new Error(`phoenix push failed: ${replyErrorMessage(payload)}`));
         } else {
           pendingPush.resolve(payload);
         }
@@ -143,7 +151,7 @@ export async function connectPhoenixClient(
     const frame: PhoenixFrame = [null, ref, topic, event, payload];
 
     return new Promise((resolve, reject) => {
-      pending.set(ref, { resolve, reject });
+      pending.set(ref, { event, resolve, reject });
       websocket.send(JSON.stringify(frame));
     });
   };
@@ -304,6 +312,10 @@ function isJoinReply(value: JsonValue): value is {
 }
 
 function joinErrorMessage(value: JsonValue): string {
+  return replyErrorMessage(value);
+}
+
+function replyErrorMessage(value: JsonValue): string {
   if (!isJsonObject(value)) {
     return "invalid reply";
   }
@@ -321,6 +333,10 @@ function joinErrorMessage(value: JsonValue): string {
   return "unknown";
 }
 
+function isNonOkPushReply(value: JsonValue): boolean {
+  return isJsonObject(value) && value.status !== "ok";
+}
+
 function isKandanControl(value: JsonValue): value is KandanControl {
   return isJsonObject(value) && typeof value.type === "string";
 }

package/src/runner.ts

@@ -30,6 +30,11 @@
   Relationship: Leaves channel-scoped approval controls to `channelSession.ts`
   so the process runner remains lifecycle-only while Kandan safely resolves
   Codex app-server approval requests from the thread UI.
+
+- Date: 2026-04-26
+  Spec: plans/2026_04_26_linzumi_cli_review_followups_note.md
+  Relationship: Rejects stale Kandan controls for previous local runner
+  instances before they can mutate the current Codex app-server session.
 */
 import { spawn, type ChildProcess } from "node:child_process";
 import { randomUUID } from "node:crypto";
@@ -270,6 +275,16 @@ async function openLocalCodexRunner(
 
   kandan.onControl(control => {
     log("kandan.control", { control });
+    if (!controlTargetsInstance(control, instanceId)) {
+      log("kandan.control_ignored", {
+        reason: "instance_id_mismatch",
+        instanceId,
+        controlInstanceId: control.instanceId,
+        controlType: control.type,
+      });
+      return;
+    }
+
     void (channelSession?.handleControl(control) ?? Promise.resolve(undefined))
       .then(handled => {
         if (handled !== undefined) {
@@ -286,12 +301,21 @@ async function openLocalCodexRunner(
           instanceId,
           message: error instanceof Error ? error.message : String(error),
         });
+      })
+      .catch(error => {
+        log("kandan.control_response_push_failed", {
+          message: error instanceof Error ? error.message : String(error),
+        });
       });
   });
 
   return { instanceId, codexUrl, close };
 }
 
+function controlTargetsInstance(control: KandanControl, instanceId: string): boolean {
+  return control.instanceId === undefined || control.instanceId === instanceId;
+}
+
 async function closeCleanupStack(cleanup: CleanupStack): Promise<void> {
   if (cleanup.closePromise !== undefined) {
     return cleanup.closePromise;