@linzumi/cli 1.0.227 → 1.0.229

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@linzumi/cli",
-  "version": "1.0.227",
+  "version": "1.0.229",
   "description": "Linzumi CLI \u2014 point a Codex agent at the real code on your laptop, with your team watching and steering from shared threads.",
   "type": "module",
   "bin": {

package/scripts/build-core-supervisor-parity-oracle.mjs

@@ -254,6 +254,10 @@ async function runSupervisionCaseInner(caseInput) {
     log: (event, payload = {}) => trace.push({ t: 'log', event, payload }),
     scheduler: timers.scheduler,
     now: () => clock.nowMs,
+    // Spec: plans/2026-08-16-pr-5159-terminal-supervisor-liveness.md.
+    // The scripted oracle acknowledges manager-visible terminal handoff just
+    // like the ReScript parity driver; notifier failure is tested separately.
+    notifyTerminalFailure: () => undefined,
     timing: caseInput.timing ?? undefined,
     ...(caseInput.overlap === undefined
       ? {}

package/scripts/build-protocol-parity-oracle.mjs

@@ -31,6 +31,7 @@ import {
   requireString,
   requirePositiveInteger,
   extractCodexIds,
+  terminalStartupFailureHeartbeatPayload,
 } from './src/protocol';
 import {
   objectValue,
@@ -161,6 +162,8 @@ function handle(testCase) {
       }
       return outcome(() => fn(...testCase.args));
     }
+    case 'terminalStartupFailureHeartbeatPayload':
+      return outcome(() => terminalStartupFailureHeartbeatPayload(testCase.controlSeqs));
     case 'constants':
       return {
         compactingConversationHistoryReason,

package/scripts/build.mjs

@@ -1,13 +1,28 @@
 // Spec: plans/2026-05-17-linzumi-cli-node-toolchain-note.md and
 // plans/2026-08-06-hosted-runner-proper-lockfile-boot-incident.md
 // Relationship: Builds the published CLI package with Node-hosted tooling.
-import { copyFile, mkdir, readFile, rm, writeFile } from 'node:fs/promises';
+import {
+  access,
+  copyFile,
+  mkdir,
+  readFile,
+  rm,
+  writeFile,
+} from 'node:fs/promises';
 import { dirname, join } from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { build } from 'esbuild';
 
 const packageRoot = dirname(dirname(fileURLToPath(import.meta.url)));
 
+// Spec: plans/2026-08-17-tcp-tunnel-cli.spec.md. The zero-TS tunnel command
+// is a mandatory ReScript build input, not a fail-soft optional rung.
+const tcpTunnelCliEntry = join(
+  packageRoot,
+  '../linzumi-cli-rescript/src/forwarding/CommanderTcpTunnelCli.res.mjs'
+);
+await access(tcpTunnelCliEntry);
+
 // M3 cluster 15: the ReScript package ships no version literal (repo rule);
 // the CLI version is esbuild-`define`d into the impl-res bundle as
 // process.env.LINZUMI_CLI_VERSION (read via CommanderEntryVersion.res), the
@@ -77,6 +92,20 @@ await build({
   banner,
 });
 
+await build({
+  entryPoints: [tcpTunnelCliEntry],
+  bundle: true,
+  platform: 'node',
+  target: 'node20',
+  format: 'esm',
+  outfile: join(packageRoot, 'dist/tcp-tunnel-cli.mjs'),
+  minify: true,
+  sourcemap: false,
+  legalComments: 'none',
+  external: ['ws'],
+  banner,
+});
+
 // The in-guest Linzumi MCP bridge: a self-contained MCP server bundle that the
 // VM Codex supervisor injects into a coding job's microVM and runs with a plain
 // `node`. Unlike dist/index.js it bundles EVERYTHING (no `external`), so the
@@ -111,6 +140,10 @@ await build({
 // head; the flat dist/mcp-server.mjs above stays as the rollback backstop
 // and the guest path contract). Same bytes, copied - never a second build.
 await mkdir(join(packageRoot, 'dist/impl-ts'), { recursive: true });
+await copyFile(
+  join(packageRoot, 'dist/tcp-tunnel-cli.mjs'),
+  join(packageRoot, 'dist/impl-ts/tcp-tunnel-cli.mjs')
+);
 await copyFile(
   join(packageRoot, 'dist/mcp-server.mjs'),
   join(packageRoot, 'dist/impl-ts/mcp-server.mjs')

package/scripts/bump-cli-version.mjs

@@ -163,7 +163,7 @@ const knownSites = [
     // Spec: plans/2026-08-15-runner-join-refusal-observability.spec.md.
     // Recovery fixtures pin real CLI versions and must move with a release.
     file: 'test/updateNudge.test.ts',
-    description: 'commander join-refusal recovery target version pins',
+    description: 'managed join-refusal update version pins',
     pattern: oldVersion,
     replacement: newVersion,
   },