@linzumi/cli 1.0.182 → 1.0.183

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@linzumi/cli",
-  "version": "1.0.182",
+  "version": "1.0.183",
   "description": "Linzumi CLI \u2014 point a Codex agent at the real code on your laptop, with your team watching and steering from shared threads.",
   "type": "module",
   "bin": {

package/scripts/build-harness-codex-parity-oracle.mjs

@@ -85,6 +85,7 @@ import {
   codexThreadRuntimeOverrides,
   codexTurnRuntimeOverrides,
   codexWireApprovalPolicy,
+  codexWireApprovalPolicyIsNeverEquivalentGranular,
 } from './src/codexRuntimeOptions';
 import { upstreamHttpStatusFate } from './src/terminalFailureRetry';
 import {
@@ -282,6 +283,13 @@ function runCase(input) {
           sandboxedNeverDefault: input.sandboxedNeverDefault,
         })
       );
+    case 'wireApprovalPolicyIsNeverEquivalentGranular':
+      // Total (never throws) - the #3819 pin-scoping predicate.
+      return codexWireApprovalPolicyIsNeverEquivalentGranular(
+        input.approvalPolicy ?? undefined,
+        input.sandbox ?? undefined,
+        { sandboxedNeverDefault: input.sandboxedNeverDefault }
+      );
     case 'threadRuntimeOverrides':
       return tryCall(() => codexThreadRuntimeOverrides(input.options));
     case 'turnRuntimeOverrides':

package/scripts/build-mcp-parity-oracle.mjs

@@ -197,7 +197,18 @@ async function handle(testCase) {
       }
       return {
         config,
-        codexArgs: outcome(() => codexMcpConfigArgs(config.value)),
+        // Both approval-scoping branches (#3819 security P1): the pin rides
+        // codexArgs ONLY for granular never-equivalent sessions.
+        codexArgs: outcome(() =>
+          codexMcpConfigArgs(config.value, {
+            neverEquivalentGranularApprovalPolicy: false,
+          })
+        ),
+        codexArgsNeverEquivalentGranular: outcome(() =>
+          codexMcpConfigArgs(config.value, {
+            neverEquivalentGranularApprovalPolicy: true,
+          })
+        ),
         codexToml: outcome(() => codexMcpConfigToml(config.value)),
         claudeCodeJson: outcome(() => claudeCodeMcpConfigJson(config.value)),
         claudeSdkMcpServers: outcome(() =>

package/scripts/build-onboarding-discovery-parity-oracle.mjs

@@ -182,7 +182,12 @@ function handleAgentSeams(testCase) {
               operatingMode: testCase.mcp.operatingMode,
               toolScope: testCase.mcp.toolScope,
               cwd: testCase.mcp.cwd,
-            })
+            }),
+            // The discovery exec lane rides the plain approval_policy
+            // "never" config string, never the granular never-equivalent
+            // wire object - no tool-approval pin (#3819 security P1),
+            // matching onboardingDiscoveryAgent.ts.
+            { neverEquivalentGranularApprovalPolicy: false }
           ),
     dangerousReason: assessment.dangerous ? assessment.reason : null,
   };
@@ -372,7 +377,10 @@ await build({
   platform: 'node',
   target: 'node20',
   format: 'esm',
-  outfile: join(packageRoot, '.differential/onboarding-discovery-parity-oracle.mjs'),
+  outfile: join(
+    packageRoot,
+    '.differential/onboarding-discovery-parity-oracle.mjs'
+  ),
   minify: false,
   sourcemap: false,
   legalComments: 'none',

package/scripts/build-vm-sandbox-parity-oracle.mjs

@@ -1023,6 +1023,13 @@ async function handle(testCase) {
                   ...(testCase.mcp.agentSession === undefined
                     ? {}
                     : { agentSession: testCase.mcp.agentSession }),
+                  ...(testCase.mcp.neverEquivalentGranularApprovalPolicy ===
+                  undefined
+                    ? {}
+                    : {
+                        neverEquivalentGranularApprovalPolicy:
+                          testCase.mcp.neverEquivalentGranularApprovalPolicy,
+                      }),
                 },
           mcpServerBundlePath: bundlePath,
         })