fix(vendor): restore tinyagents pin that predates tool rules; sync app lockfile by senamakel · Pull Request #7200 · tinyhumansai/openhuman

senamakel · 2026-10-09T14:39:15Z

Summary

Restores vendor/tinyagents to 33a86887 (tinyagents main, feat: extract and load user working memory from skill sync payloads #357). A hook auto-commit (c55984b024) had moved the pin back to 37185fdc (tinyagents #352), which predates the tool rules, so tinyagents_harness::tool::ToolRulePolicy and tinytools::ToolRules/Surface/ToolSubject did not resolve and main stopped compiling. 33a86887 contains #352 as well.
Syncs crates/openhuman-app/Cargo.lock with the hmac 0.13 / sha2 0.11 bump (fix(saas): harden the user shell sandbox (#7154 review follow-ups) #7195), which left it stale and failed the linux-tls-policy lane under --locked.

Problem

cargo check -p openhuman --lib --tests on main fails with E0432/E0433 on the tool-rules types, and cargo metadata --locked in crates/openhuman-app fails. Every open PR inherits both.

Solution

Two gitlink/lockfile corrections, nothing else.

Submission Checklist

Tests added or updated: N/A, no behavior change; it restores a pin and a lockfile.
Diff coverage ≥ 80%: N/A, no source lines changed.
Coverage matrix: N/A.
Affected feature IDs: none.
No new external network dependencies.
Manual smoke checklist: N/A.
Linked issue: N/A.

Validation

cargo check -p openhuman --lib --tests passes on this branch.
cargo metadata --locked in crates/openhuman-app passes after the lock sync.

Summary by CodeRabbit

Chores
- Updated a bundled component.

… tool rules A hook auto-commit moved the pin back to 37185fdc (tinyagents #352), which lacks ToolRulePolicy / tinytools::ToolRules, so main no longer compiled. 33a86887 is tinyagents main (tinyhumansai#357) and includes #352 and the tool rules. Co-authored-by: Medulla <medulla@tinyhumans.ai>

Auto-committed-on: dragonfly Co-authored-by: Medulla <medulla@tinyhumans.ai>

tinysweeper · 2026-10-09T14:39:21Z

Tiny Sweeper review

Tiny Sweeper reviewed this change across 6 lane(s) and found 0 active actionable finding(s). Detailed lane evidence and any incomplete work are listed below.

State: Ready for maintainer review
Priority: none
Reviewed head: a221c0f9e140
Updated: 1791556790 (Unix time)

Review snapshot

Change surface	Files	Review signal	Count
Production	0	Active findings	0
Tests	0	Noted findings	0
Documentation	0	Resolved findings	0
Configuration	0	Pending checks/questions	0

Completeness: Complete
Test assessment: No supported feature-to-test mapping was available; this does not mean tests are absent or passed.

What changed

The review could not produce a supported behavioral summary; inspect the cited changed surface and lane details below.

Features

None identified with supported citations.

Tests

No supported feature-to-test mapping was produced. Test execution is not inferred.

Findings

No active actionable findings.

Before merge

None.

Agent review details

critique

Conclusion: Neutral
Scope reviewed: all assigned evidence
Lane summary: No added or modified lines to review.

security

Conclusion: Neutral
Scope reviewed: all assigned evidence
Lane summary: No added or modified lines to review.

tests

Conclusion: Neutral
Scope reviewed: all assigned evidence
Lane summary: No added or modified lines to review.

commits

Conclusion: Neutral
Scope reviewed: all assigned evidence
Lane summary: Nothing sensitive found in what this pull request commits.

description

Conclusion: Neutral
Scope reviewed: all assigned evidence
Lane summary: No added or modified lines to review.

e2e

Conclusion: Neutral
Scope reviewed: all assigned evidence
Lane summary: No added or modified lines to review.

Evidence and run details

Models: None
Spend: $0.000000
Tokens: 0 input · 0 output · 0 cached · 0 embedding

Head	State	Pass summary
`a221c0f9e140`	ready for maintainer review	0 active finding(s), 0 resolved finding(s) (at 1791556790)

chatgpt-codex-connector · 2026-10-09T14:39:32Z

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-09T14:41:37.942670Z	`a221c0f`	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

tinysweeper

tinysweeper found nothing blocking. Approving.

$0.0000 · 0 in / 0 out

coderabbitai · 2026-10-09T14:40:45Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI
Review profile: CHILL
Plan: Advanced
Run ID: 29a284c1-50d3-400c-90cd-df97743ed74c

📥 Commits

Reviewing files that changed from the base of the PR and between 26c6234 and a221c0f.

⛔ Files ignored due to path filters (2)

Cargo.lock is excluded by !**/*.lock
crates/openhuman-app/Cargo.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

vendor/tinyagents

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 6 remain after this review.

📝 Walkthrough

Walkthrough

The vendor/tinyagents submodule reference changes from commit 37185fdcfc513ea2d9ea53608c069683975966e0 to 33a86887d52f1dba4e39fdb598b7694c20cfdc84.

Changes

Tinyagents Reference Update

Layer / File(s)	Summary
Update submodule pointer `vendor/tinyagents`	The submodule pointer changes to commit `33a86887d52f1dba4e39fdb598b7694c20cfdc84`.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Bug fix

Suggested reviewers: m3ga-mind

Merge Risk: ⚪ Minimal · up to a221c

The tinyagents pin and both lockfiles were updated together. No concrete failure is established, so no actionable merge blocker remains based on the available evidence.

Architecture Summary

Architecture risk: 🔵 Low · up to a221c

The changed surface does not map to a changed system, dependency edge, entrypoint, or external dependency.

Changed systems: None identified.

Architecture concerns
No architecture-level concerns identified.

Review details

Before / after behavior

observed — Modified behavior in vendor/tinyagents: The vendor/tinyagents submodule pointer is updated to commit 33a86887d52f1dba4e39fdb598b7694c20cfdc84 from 37185fdcfc513ea2d9ea53608c069683975966e0.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly identifies the primary change: restoring the tinyagents pin and synchronizing the app lockfile. It is specific, concise, and matches the stated objectives.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{A rabbit notes the pointer’s new place,
One commit forward in the tinyagents trace.
No code lines hop, no tests take flight,
Just a submodule set aright.
The rabbit thumps and rests tonight.}

_{Comment @coderabbitai help to get the list of available commands.}

senamakel and others added 3 commits October 9, 2026 17:36

chore(deps): add tinytools to lockfile dependencies

49fc639

Auto-committed-on: dragonfly Co-authored-by: Medulla <medulla@tinyhumans.ai>

chore: files changed crates/openhuman-app/Cargo.lock

a221c0f

Auto-committed-on: dragonfly Co-authored-by: Medulla <medulla@tinyhumans.ai>

tinysweeper Bot approved these changes Oct 9, 2026

View reviewed changes

tinysweeper Bot added the priority: p3 Whenever. Cosmetic, a nicety, or a cleanup with no user visible effect. label Oct 9, 2026

coderabbitai Bot approved these changes Oct 9, 2026

View reviewed changes

senamakel merged commit d98a779 into tinyhumansai:main Oct 9, 2026
27 of 28 checks passed

oxoxDev mentioned this pull request Oct 9, 2026

feat(mcp): add hosted servers from the Registry in one click (#7194) #7203

Merged

11 of 12 tasks

senamakel mentioned this pull request Oct 9, 2026

revert: restore the tinyagents pin #7197 moved back (main does not compile) #7201

Closed

12 tasks done

oxoxDev mentioned this pull request Oct 9, 2026

feat(conversations): render MCP Apps widgets inline in chat (#7202) #7205

Open

12 tasks done

Navigation Menu

Repository navigation

fix(vendor): restore tinyagents pin that predates tool rules; sync app lockfile - #7200

fix(vendor): restore tinyagents pin that predates tool rules; sync app lockfile#7200
senamakel merged 3 commits into
tinyhumansai:mainfrom
senamakel:fix-tinyagents-pin

senamakel commented Oct 9, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

tinysweeper Bot commented Oct 9, 2026 •

edited

Loading

critique

security

tests

commits

description

e2e

Uh oh!

chatgpt-codex-connector Bot commented Oct 9, 2026 •

edited

Loading

Uh oh!

tinysweeper Bot left a comment

Uh oh!

coderabbitai Bot commented Oct 9, 2026 •

edited

Loading

Walkthrough

Changes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

senamakel commented Oct 9, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Problem

Solution

Submission Checklist

Validation

Summary by CodeRabbit

Uh oh!

tinysweeper Bot commented Oct 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Tiny Sweeper review

Review snapshot

What changed

Features

Tests

Findings

Before merge

critique

security

tests

commits

description

e2e

Uh oh!

chatgpt-codex-connector Bot commented Oct 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codex Review Summary

Uh oh!

tinysweeper Bot left a comment

Choose a reason for hiding this comment

Uh oh!

coderabbitai Bot commented Oct 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Architecture Summary

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

senamakel commented Oct 9, 2026 •

edited by coderabbitai Bot

Loading

tinysweeper Bot commented Oct 9, 2026 •

edited

Loading

chatgpt-codex-connector Bot commented Oct 9, 2026 •

edited

Loading

coderabbitai Bot commented Oct 9, 2026 •

edited

Loading