chore(deps): pin tinyagents to main with the security migration landed upstream

crates/openhuman-rpc/src/server/http/events_tests.rs

@@ -114,20 +114,16 @@ async fn events_stream_forwards_only_the_bound_client() {
             client_id: "another-client".into(),
             ..Default::default()
         },
-        message: None,
         error_type: Some("wrong_client_probe".into()),
         error_source: None,
-        error_retryable: None,
     });
     publish_web_channel_event(WebChannelEvent::UserError {
         context: crate::core_host::web_chat::WebEventContext {
             client_id: "stream-client".into(),
             ..Default::default()
         },
-        message: None,
         error_type: Some("right_client_probe".into()),
         error_source: None,
-        error_retryable: None,
     });
 
     let chunk = tokio::time::timeout(std::time::Duration::from_secs(1), body.next())

crates/openhuman-rpc/src/server/socketio_tests.rs

@@ -217,7 +217,7 @@ async fn web_events_reach_client_and_thread_rooms_once_with_compat_aliases() {
         .all(|(_, payload)| payload["full_response"] == "finished"));
     assert!(reconnected_packets
         .iter()
-        .all(|(_, payload)| payload["context"]["threadId"] == "thread-1"));
+        .all(|(_, payload)| payload["thread_id"] == "thread-1"));
     assert_empty_queue(&mut initiator_rx);
     assert_empty_queue(&mut reconnected_rx);
     assert_empty_queue(&mut unrelated_rx);

docs/storage-schema.md

@@ -65,7 +65,7 @@ Record shapes and migrations stay with their owners.
 | `ledger.tool_effects` | `run` (`run_id`)<br>`started` (`started_ms`)<br>`status` (`status`) |  |  |
 | `ledger.workflow_runs` | `definition` (`definition_id`)<br>`status` (`status`)<br>`thread` (`parent_thread_id`)<br>`updated` (`updated_ms`) |  |  |
 | `session.transcript_entries` | `by_stem_written` (`stem`, `written`)<br>`by_stem` (`stem`, `seq`) |  |  |
-| `session.transcripts` | `by_agent_id` (`agent_id`, `created_ms`)<br>`by_agent_name` (`agent_name`, `created_ms`)<br>`by_thread` (`thread_id`, `created_ms`) |  |  |
+| `session.transcripts` | `by_agent_id_created` (`agent_id`, `created_ms`)<br>`by_agent_name_created` (`agent_name`, `created_ms`)<br>`by_thread_created` (`thread_id`, `created_ms`) |  |  |
 | `session.turn_states` | `by_thread` (`thread_id`) |  |  |
 | `tsd.counters` |  |  |  |
 | `tsd.kv` | `kv_by_key` (`owner`, `ns`, `key`) |  |  |

scripts/ci/agent-runtime-boundary-baseline.json

@@ -440,34 +440,6 @@
     "text": "pub struct RetryPolicy {",
     "occurrence": 1
   },
-  {
-    "rule": "tinyagents-openhuman-domain-name",
-    "path": "vendor/tinyagents/crates/tinyagents-harness/src/turn_runner/mod_api_tests.rs",
-    "line": 2,
-    "text": "use crate::progress::AgentProgress;",
-    "occurrence": 1
-  },
-  {
-    "rule": "tinyagents-openhuman-domain-name",
-    "path": "vendor/tinyagents/crates/tinyagents-harness/src/turn_runner/mod_api_tests.rs",
-    "line": 97,
-    "text": "let started = |call_id: &str| AgentProgress::ToolCallStarted {",
-    "occurrence": 1
-  },
-  {
-    "rule": "tinyagents-openhuman-domain-name",
-    "path": "vendor/tinyagents/crates/tinyagents-harness/src/turn_runner/mod_api_tests.rs",
-    "line": 137,
-    "text": "fn tool_completed(call_id: &str) -> AgentProgress {",
-    "occurrence": 1
-  },
-  {
-    "rule": "tinyagents-openhuman-domain-name",
-    "path": "vendor/tinyagents/crates/tinyagents-harness/src/turn_runner/mod_api_tests.rs",
-    "line": 138,
-    "text": "AgentProgress::ToolCallCompleted {",
-    "occurrence": 1
-  },
   {
     "rule": "tinyagents-openhuman-domain-name",
     "path": "vendor/tinyagents/crates/tinyagents-orchestration/src/run_progress_ledger/mod_tests.rs",