@linzumi/cli 1.0.276 → 1.0.277

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@linzumi/cli",
-  "version": "1.0.276",
+  "version": "1.0.277",
   "description": "Linzumi CLI \u2014 point a Codex agent at the real code on your laptop, with your team watching and steering from shared threads.",
   "type": "module",
   "bin": {
@@ -25,7 +25,7 @@
     "test:startup": "npm run build && node --test --test-concurrency=1 ../linzumi-cli-rescript/src/parity/CommanderStartupRefusalConformance.res.mjs",
     "typecheck:all": "rescript build ../linzumi-cli-rescript && tsgo --noEmit -p tsconfig.json",
     "typecheck:watch": "rescript build ../linzumi-cli-rescript && tsgo --noEmit -w -p tsconfig.source.json",
-    "test:agent-source": "LINZUMI_CI_QUARANTINE=0 pnpm exec vitest run --config vitest.config.mjs test/channelSession.test.ts test/kandanQueue.test.ts test/llmProxySessionCredential.test.ts test/runnerBridge.test.ts test/threadCodexWorkerIpc.test.ts -t '(?:^| )(retains three busy accepted source snapshots without fusing or interrupting|keeps different accepted agent sources distinct through interrupt pickup|does not install an old mint after its credential is (replaced|stopped)|worker agent capability requires an exact true ready flag|starts an explicitly server-keyed OpenAI agent worker without local OpenAI credentials|applies the accepted OpenAI follow-up model on an existing worker|refuses explicit OpenAI worker creation with (passthrough|missing-token|blank-origin) binding|refuses a private agent turn without an owned relay before Codex|explicitly capable worker receives a private request through ordinary IPC|old worker receives no private agent source descriptor)$'",
+    "test:agent-source": "LINZUMI_CI_QUARANTINE=0 pnpm exec vitest run --config vitest.config.mjs test/channelSession.test.ts test/kandanQueue.test.ts -t '(retains three busy accepted source snapshots without fusing or interrupting|keeps different accepted agent sources distinct through interrupt pickup)' && pnpm --dir ../linzumi-cli-rescript build && pnpm --dir ../linzumi-cli-rescript exec node --import tsx src/parity/AgentOpenaiModelProviderConformance.res.mjs && pnpm --dir ../linzumi-cli-rescript exec node --import tsx src/parity/WorkerMintCredentialConformance.res.mjs",
     "codex:history-table": "node scripts/codex_history_table.mjs",
     "vendor:codex-app-server-protocol:check": "tsx scripts/vendor-codex-app-server-protocol.ts --check"
   },
@@ -40,7 +40,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@anthropic-ai/claude-agent-sdk": "0.3.199",
+    "@anthropic-ai/claude-agent-sdk": "0.3.283",
     "@inquirer/prompts": "^7.8.6",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@openai/codex": "0.153.2",

package/scripts/bump-cli-version.mjs

@@ -173,33 +173,6 @@ const knownSites = [
     pattern: `expect(manifest.version).toBe('${oldVersion}');`,
     replacement: `expect(manifest.version).toBe('${newVersion}');`,
   },
-  {
-    file: 'test/runnerBridge.test.ts',
-    description: 'runner join metadata version pin',
-    pattern: `version: '${oldVersion}',`,
-    replacement: `version: '${newVersion}',`,
-  },
-  {
-    // Spec: plans/2026-08-15-runner-join-refusal-observability.spec.md.
-    file: 'test/runnerBridge.test.ts',
-    description: 'runner join-refusal recovery current version pin',
-    pattern: `currentVersion: '${oldVersion}',`,
-    replacement: `currentVersion: '${newVersion}',`,
-  },
-  {
-    file: 'test/runnerLock.test.ts',
-    description: 'runner lock cliVersion pins',
-    pattern: `cliVersion: '${oldVersion}',`,
-    replacement: `cliVersion: '${newVersion}',`,
-  },
-  {
-    // Spec: plans/2026-08-15-runner-join-refusal-observability.spec.md.
-    // Recovery fixtures pin real CLI versions and must move with a release.
-    file: 'test/updateNudge.test.ts',
-    description: 'managed join-refusal update version pins',
-    pattern: oldVersion,
-    replacement: newVersion,
-  },
 ];
 
 function countOccurrences(haystack, needle) {

package/scripts/vm-provision-proof.mjs

@@ -1,7 +1,6 @@
 // PROOF that a smolvm guest can really install the coding toolchain.
 //
-// Unlike vm-smoke.mjs (which stubs the model proxy over HTTP loopback), this
-// boots a REAL microVM with network:true and runs the ACTUAL
+// This boots a REAL microVM with network:true and runs the ACTUAL
 // guestProvisionCommand from the #2111 branch - i.e. `apk add --no-cache
 // ca-certificates nodejs npm git ripgrep bash curl` fetched over real egress
 // from the Alpine package mirrors, then `npm install -g @openai/codex` - and