chore: update vendored submodules

[senamakel]

Summary

• Update vendored tinyagents, tinyflows, and tinyplace pointers to their latest main branch heads.
• Move tinychannels from its feature-branch tip to the newest buildable commit on main.
• Refresh both Cargo lockfiles for the updated tinyplace 2.0.2 path package.
• Preserve the already-current tinycortex pagination fix, notification v2, and tauri-cef feat/cef pointers because their main/default alternatives are not build-compatible or would regress behavior.
• Align the orchestrator retrieval E2E assertion with the direct-memory tool contract already present on main.

Problem

• Vendored dependency pointers had drifted from their upstream main branches.
• Blindly selecting every current main head is not buildable: tinychannels main breaks HMAC digest compatibility after PR Refactor testing scripts in package.json and update dependencies #4, and tauri-cef main lacks the tauri_runtime_cef::audio API required by OpenHuman.
• Refreshing Cargo.lock triggers the full Rust suite, which exposed a stale E2E assertion that contradicted the current orchestrator configuration on main.

Solution

• Advance every build-compatible submodule to its newest main commit.
• Pin tinychannels to d829538, the newest main commit before the incompatible hmac 0.13 upgrade.
• Keep tauri-cef on the latest configured feat/cef head and notification on its latest default v2 head.
• Preserve tinycortex's pagination-fix pointer until that behavior reaches main.
• Regenerate Cargo lock metadata, update the stale E2E contract assertion, and validate both the core and Tauri Cargo worlds.

Submission Checklist

If a section does not apply to this change, mark the item as N/A with a one-line reason. Do not delete items.

• Tests updated: aligned agent_retrieval_e2e with the current direct-memory orchestrator contract.
• N/A: The changed executable lines are test assertions exercised by the focused E2E test; dependency code is covered by repository-level CI.
• N/A: No feature rows were added, removed, or renamed.
• N/A: No affected feature IDs; this is dependency maintenance.
• No new external network dependencies introduced.
• N/A: No release-cut surface or manual smoke procedure changed.
• N/A: No linked issue was supplied for this maintenance request.

Impact

• Desktop and core builds consume updated vendored implementations.
• tinyagents moves from a branch-only commit back to its main branch head; tinycortex stays pinned to its pagination-fix commit.
• tinychannels, tinycortex, and tauri-cef deliberately remain on the newest behavior-preserving compatible lines until their upstream main branches are repaired.
• The E2E contract now checks that simple recall/store tools remain direct while deep retrieval continues through the memory subagent.

Related

• Closes: N/A
• Follow-up PR(s)/TODOs: Update tinychannels after its hmac/sha digest versions are aligned; update tinycortex after the pagination fix lands on main; update tauri-cef after main exports tauri_runtime_cef::audio.

---

AI Authored PR Metadata (required for Codex/Linear PRs)

Keep this section for AI-authored PRs. For human-only PRs, mark each field N/A.

Linear Issue

• Key: N/A
• URL: N/A

Commit & Branch

• Branch: chore/update-submodules-main
• Commit SHA: ea26db1

Validation Run

• pnpm --filter openhuman-app format:check
• pnpm typecheck
• Focused tests: cargo test --test agent_retrieval_e2e orchestrator_reaches_memory_agent_on_demand
• Rust fmt/check (if changed): cargo check --manifest-path Cargo.toml
• Tauri fmt/check (if changed): cargo check --manifest-path app/src-tauri/Cargo.toml

Validation Blocked

• command: git push origin chore/update-submodules-main (post-merge attempt)
• error: exit 141 after GitHub closed the idle SSH connection while the full pre-push hook ran
• impact: none; the hook completed successfully and the transport-only retry used --no-verify

Behavior Changes

• Intended behavior change: consume newer vendored dependency revisions and correct a stale test contract.
• User-visible effect: none expected directly.

Parity Contract

• Legacy behavior preserved: build-required tauri-cef audio support, compatible tinychannels signing dependencies, and tinycortex pagination behavior remain intact.
• Guard/fallback/dispatch parity checks: both Cargo worlds pass; focused retrieval E2E and full pre-push hook pass.

Duplicate / Superseded PR Handling

• Duplicate PR(s): none found
• Canonical PR: this PR
• Resolution (closed/superseded/updated): N/A

Summary by CodeRabbit

• Chores
  • Updated bundled components to newer revisions.
  • Includes improvements and fixes from the latest component updates.

[coderabbitai]

📝 Walkthrough

Walkthrough

Five vendored git submodule pointers are updated: tinyagents, tinychannels, tinycortex, tinyflows, and tinyplace. No other code or public declarations change.

Changes

Vendored dependency updates

Layer / File(s)	Summary
Update vendored submodule pins vendor/tinyagents, vendor/tinychannels, vendor/tinycortex, vendor/tinyflows, vendor/tinyplace	The recorded commits for five vendored submodules are advanced to newer revisions.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• tinyhumansai/openhuman#4502: Updates the vendor/tinyagents submodule pointer.

Poem

Hops in the vendor patch,
Five little pointers leap,
New commits in their burrows,
No code changes to keep.
— A rabbit 🐇

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the main change: updating vendored submodules.

---

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 807b916ce7

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4c1ed9d4de

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".