Skip to content

chore(acp): bump dimcode, dirac, grok and kilo registry pins to probed versions - #859

Merged
kaizhou-lab merged 1 commit into
mainfrom
chore/acp-lock-sync-20260816
Aug 14, 2026
Merged

chore(acp): bump dimcode, dirac, grok and kilo registry pins to probed versions#859
kaizhou-lab merged 1 commit into
mainfrom
chore/acp-lock-sync-20260816

Conversation

@kaizhou-lab

Copy link
Copy Markdown
Contributor

Summary

Scheduled ACP Registry version sync. Four npx pins drifted since #848, each backed by a fresh serial ACP probe of the exact pinned version. Lock-only change — four lines; no metadata, migration, or entrypoint edits, and no lock-derived test assertion embeds any of these versions.

backend package old → new initialize session/new
dimcode dimcode 0.3.12 → 0.3.13 ok (agentInfo version 0.3.13) auth required (-32000, "Provider credentials are required")
dirac dirac-cli 0.4.35 → 0.4.36 ok (agentInfo dirac 0.4.36) success (modes plan/act)
grok @xai-official/grok 1.0.3 → 1.0.4 ok (protocolVersion 1) auth required (-32000, "no auth method id provided")
kilo @kilocode/cli 7.4.21 → 7.4.22 ok (agentInfo Kilo 7.4.22) success

All four meet the release-lock criterion: initialize succeeds and session/new either succeeds or returns a clearly classified authentication requirement. Probes ran serially with no inherited HOME or credentials.

The other 7 Registry-pinned packages (autohand, codebuddy, deepagents, glm-acp-agent, nova, pi, sigit) match the snapshot exactly. Package names and entrypoint args are unchanged for all 11. Drifted but not upgraded: none.

Note on the manifest's shape, unrelated to this bump: the lock now holds 12 entries rather than 13 — #855 moved omp off the npx bridge to its local CLI, so it no longer needs a pin. What remains is 11 Registry-pinned packages plus mimo-code, the one non-Registry builtin (no registry_json_id), which stays excluded from drift reconciliation.

dimcode continues to self-report agentInfo.title as "DimAgent" while the public Registry card and CDN entry still say "DimCode" (dimcode.dev unchanged), so the seeded display name is untouched — same standing observation as #837/#848.

Registry snapshot

  • Audit pinned to release tag v2026.08.14-ec4f9f7 of agentclientprotocol/registry, fetched via the versioned CDN path for reproducibility.
  • No newly listed and no delisted agents versus the previous baseline (38 ids).

Validation

Logging

No logging changes: lock-only version bumps; existing startup/session error paths already identify a failing agent by backend.

@kaizhou-lab
kaizhou-lab merged commit c12517d into main Aug 14, 2026
6 checks passed
@kaizhou-lab
kaizhou-lab deleted the chore/acp-lock-sync-20260816 branch August 14, 2026 17:21
kaizhou-lab added a commit that referenced this pull request Aug 16, 2026
… versions (#865)

## Summary

Scheduled ACP Registry version sync. Three npx pins drifted since #859,
each backed by a fresh serial ACP probe of the exact pinned version.
Lock-only change — three lines; no metadata, migration, or entrypoint
edits, and no lock-derived test assertion embeds any of these versions.

| backend | package | old → new | initialize | session/new |
|---|---|---|---|---|
| glm-acp-agent | `glm-acp-agent` | 1.3.0 → **1.5.0** | ok (authMethods
`z-ai-api-key`) | success, unauthenticated — modes `default` /
`accept_edits` / `bypass_permissions` |
| grok | `@xai-official/grok` | 1.0.4 → **1.0.5** | ok (authMethods
`grok.com`) | auth required (`-32000`, "no auth method id provided") |
| nova | `@compass-ai/nova` | 1.1.34 → **1.1.35** | ok (authMethods
`kore-terminal-auth`) | config required (`-32000`, "Click Nova Setup to
configure your API keys") |

All three meet the release-lock criterion: `initialize` succeeds and
`session/new` either succeeds or returns a clearly classified
authentication/configuration requirement. Probes ran serially with no
inherited HOME or credentials.

**glm-acp-agent crosses two minor versions (1.3.0 → 1.5.0), so its
stored `yolo_id` was re-checked rather than assumed.** The 1.5.0 session
catalog still advertises `bypass_permissions`, which is exactly the
value migration 025 seeded, so the existing metadata remains correct and
this stays a lock-only change. Had that mode disappeared, the `yolo_id`
would need its own migration and would not belong in this PR.

The other 8 Registry-pinned packages (autohand, codebuddy, deepagents,
dimcode, dirac, kilo, pi, sigit) match the snapshot exactly. Package
names and entrypoint args are unchanged for all 11. Drifted but not
upgraded: none. `mimo-code` remains the one non-Registry builtin (no
`registry_json_id`), excluded from drift reconciliation.

**Vendor self-reported version mismatches — three of them now, none
blocking:** glm-acp-agent 1.5.0 reports `agentInfo.version` as `1.0.0`;
nova 1.1.35 reports `kore-cli` `1.0.0`; dimcode reports
`agentInfo.title` "DimAgent" against a public listing that says
"DimCode". In every case the Registry card, the package identity and the
entrypoint are the authorities, and `initialize` succeeded — the pins
are evidenced regardless of what the handshake calls itself.

## Registry snapshot

- Audit pinned to release tag
[`v2026.08.16-e3c983d`](https://cdn.agentclientprotocol.com/registry/v1/v2026.08.16-e3c983d/registry.json)
of `agentclientprotocol/registry`, fetched via the versioned CDN path
for reproducibility.
- No newly listed and no delisted agents versus the previous baseline
(38 ids).

## Validation

- `just migration-check` — pass
- `just lint-fix` (`cargo fix` + `clippy --fix --workspace -D warnings`)
— clean
- `just fmt` — clean
- **Local `cargo nextest` intentionally skipped, by standing policy for
lock-only bumps** (established 2026-08-11; #810, #814, #822, #837, #848
and #859 all merged green under it). The Test check on this PR is the
authority for this change: the merge decision depends on CI rather than
the local run, and this host's load only manufactures timeout-shaped
test failures, which nothing in the local steps above is subject to.

## Logging

No logging changes: lock-only version bumps; existing startup/session
error paths already identify a failing agent by backend.

Co-authored-by: zk <>
kaizhou-lab added a commit that referenced this pull request Aug 17, 2026
## Summary

Scheduled ACP Registry version sync. One npx pin drifted since #865,
backed by a fresh ACP probe of the exact pinned version. Lock-only
change — one line; no metadata, migration, or entrypoint edits, and no
lock-derived test assertion embeds this version.

| backend | package | old → new | initialize | session/new |
|---|---|---|---|---|
| dimcode | `dimcode` | 0.3.13 → **0.3.15** | ok (protocolVersion 1,
agentInfo version 0.3.15) | auth required (`-32000`, "Provider
credentials are required") |

Meets the release-lock criterion: `initialize` succeeds and
`session/new` returns a clearly classified authentication requirement.
The probe ran with no inherited HOME or credentials. The Registry
advertises 0.3.15 directly (0.3.14 is skipped), and 0.3.15 is what was
probed and pinned.

The other 10 Registry-pinned packages match the snapshot exactly — no
drift. In particular glm-acp-agent 1.5.0, grok 1.0.5 and nova 1.1.35,
all bumped last night in #865, are still current. Package names and
entrypoint args are unchanged for all 11. Drifted but not upgraded:
none. `mimo-code` remains the one non-Registry builtin (no
`registry_json_id`), excluded from drift reconciliation.

dimcode continues to self-report `agentInfo.title` as "DimAgent" while
the public Registry card and CDN entry still say "DimCode"
(`dimcode.dev` unchanged), so the seeded display name is untouched — the
same standing observation carried since #814.

## Registry snapshot

- Audit pinned to release tag
[`v2026.08.17-168e146`](https://cdn.agentclientprotocol.com/registry/v1/v2026.08.17-168e146/registry.json)
of `agentclientprotocol/registry`, fetched via the versioned CDN path
for reproducibility.
- No newly listed and no delisted agents versus the previous baseline
(38 ids).

## Validation

- `just migration-check` — pass
- `just lint-fix` (`cargo fix` + `clippy --fix --workspace -D warnings`)
— clean
- `just fmt` — clean
- **Local `cargo nextest` intentionally skipped, by standing policy for
lock-only bumps** (established 2026-08-11; #810, #814, #822, #837, #848,
#859 and #865 all merged green under it). The Test check on this PR is
the authority for this change: the merge decision depends on CI rather
than the local run, and this host's load only manufactures
timeout-shaped test failures, which nothing in the local steps above is
subject to.

## Logging

No logging changes: lock-only version bump; existing startup/session
error paths already identify a failing agent by backend.

Co-authored-by: zk <>
kaizhou-lab added a commit that referenced this pull request Aug 19, 2026
… to probed versions (#880)

## Summary

Scheduled ACP Registry version sync. Four npx pins drifted since #873,
each backed by a fresh serial ACP probe of the exact pinned version.
Lock-only change — four lines; no metadata, migration, or entrypoint
edits, and no lock-derived test assertion embeds any of these versions.

| backend | package | old → new | initialize | session/new |
|---|---|---|---|---|
| dimcode | `dimcode` | 0.3.15 → **0.3.16** | ok (agentInfo version
0.3.16) | auth required (`-32000`, "Provider credentials are required")
|
| dirac | `dirac-cli` | 0.4.36 → **0.4.37** | ok (agentInfo dirac
0.4.37) | success (modes plan/act) |
| glm-acp-agent | `glm-acp-agent` | 1.5.0 → **1.6.0** | ok
(protocolVersion 1) | success, unauthenticated — modes `default` /
`accept_edits` / `bypass_permissions` |
| grok | `@xai-official/grok` | 1.0.5 → **1.0.6** | ok (protocolVersion
1) | auth required (`-32000`, "no auth method id provided") |

All four meet the release-lock criterion: `initialize` succeeds and
`session/new` either succeeds or returns a clearly classified
authentication requirement. Probes ran serially with no inherited HOME
or credentials.

**glm-acp-agent crosses another minor version, so its stored `yolo_id`
was re-verified rather than assumed** — the same check #865 applied at
1.5.0. The 1.6.0 session catalog still advertises `bypass_permissions`,
exactly the value migration 025 seeded, so the existing metadata stays
correct and this remains a lock-only change. Had that mode disappeared,
the `yolo_id` would need its own migration and would not belong in this
PR.

The other 7 Registry-pinned packages (autohand, codebuddy, deepagents,
kilo, nova, pi, sigit) match the snapshot exactly. Package names and
entrypoint args are unchanged for all 11. Drifted but not upgraded:
none. `mimo-code` remains the one non-Registry builtin (no
`registry_json_id`), excluded from drift reconciliation.

Two long-running vendor self-report quirks persist, neither actionable:
dimcode reports `agentInfo.title` as "DimAgent" against a public listing
that says "DimCode" (`dimcode.dev` unchanged), and glm-acp-agent 1.6.0
reports `agentInfo.version` as `1.0.0`. The Registry card, package
identity and entrypoint remain the authorities, and `initialize`
succeeded in both cases.

## Registry snapshot

- Audit pinned to release tag
[`v2026.08.19-28cd4e9`](https://cdn.agentclientprotocol.com/registry/v1/v2026.08.19-28cd4e9/registry.json)
of `agentclientprotocol/registry`, fetched via the versioned CDN path
for reproducibility.
- No newly listed and no delisted agents versus the previous baseline
(38 ids).

## Validation

- `just migration-check` — pass
- `just lint-fix` (`cargo fix` + `clippy --fix --workspace -D warnings`)
— clean
- `just fmt` — clean
- **Local `cargo nextest` intentionally skipped, by standing policy for
lock-only bumps** (established 2026-08-11; #810, #814, #822, #837, #848,
#859, #865 and #873 all merged green under it). The Test check on this
PR is the authority for this change: the merge decision depends on CI
rather than the local run, and this host's load only manufactures
timeout-shaped test failures, which nothing in the local steps above is
subject to.

## Logging

No logging changes: lock-only version bumps; existing startup/session
error paths already identify a failing agent by backend.

Co-authored-by: zk <>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant