chore(vendor): bump tinybus to e5f1cd2 and tinyjevclient to 19ad7b1

[M3gA-Mind]

Refs tinyhumansai/openhuman#6750

Moves two nested pins to their upstream main. Nothing else changes.

Submodule vendor/tinybus 6ee8258..e5f1cd2
Submodule vendor/tinyjevclient 84b3983..19ad7b1

vendor/agent-browser (vercel-labs) is already current and is not touched.

Behaviour changes

tinybus 6ee8258..e5f1cd2 (tinybus #25–#29)

• Windows fixes for module loading and module-file ACLs.
• New static/linked-module support: LinkedModule, start_linked_module, attach_linked_with_config, and a no-dependency static-link feature on tinybus-module. This is purely additive; no public item is removed or renamed.

tinyjevclient 84b3983..19ad7b1 (tinyjevclient #7, #8)

• Exact Jev endpoint overrides (with_endpoint_url, endpoint_url).
• Host-product attribution: Jev requests now identify the host product (with_sdk_name).

Lockfile

Cargo.lock is unchanged, and this is expected. No crate version moved (tinybus 0.1.2, tinyjevclient 0.2.1), and the only manifest changes upstream are a no-dependency feature plus a dev-dependency on an already-locked crate. cargo build --locked passes.

Validation (macOS, local)

• cargo build --all-targets --all-features
• cargo fmt --all -- --check
• cargo clippy --all-targets --all-features -- -D warnings
• cargo test and cargo test --all-features
• cargo doc --no-deps --all-features
• cargo run -p tinybrowser --example basic
• cargo build --locked --release --lib --package tinybrowser

All pass.

[tinysweeper]

Tiny Sweeper review

Tiny Sweeper reviewed this change across 6 lane(s) and found 0 active actionable finding(s). Detailed lane evidence and any incomplete work are listed below.

State: Ready for maintainer review
Priority: none
Reviewed head: 33d06b8c28ab
Updated: 1790612684 (Unix time)

Review snapshot

Change surface	Files	Review signal	Count
Production	0	Active findings	0
Tests	0	Noted findings	0
Documentation	0	Resolved findings	0
Configuration	0	Pending checks/questions	0

Completeness: Complete
Test assessment: No supported feature-to-test mapping was available; this does not mean tests are absent or passed.

What changed

The review could not produce a supported behavioral summary; inspect the cited changed surface and lane details below.

Features

None identified with supported citations.

Tests

No supported feature-to-test mapping was produced. Test execution is not inferred.

Findings

No active actionable findings.

Before merge

None.

Agent review details

critique

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No added or modified lines to review.

security

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No added or modified lines to review.

tests

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No added or modified lines to review.

commits

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: Nothing sensitive found in what this pull request commits.

description

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No added or modified lines to review.

e2e

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No added or modified lines to review.

Evidence and run details

• Models: ladder/vectors
• Spend: $0.000000
• Tokens: 0 input · 0 output · 0 cached · 31 embedding

Head	State	Pass summary
33d06b8c28ab	ready for maintainer review	0 active finding(s), 0 resolved finding(s) (at 1790612684)

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 7f65d924-3a4a-46c6-8ff0-8d22a2f7243d

---

_{Comment @coderabbitai help to get the list of available commands.}

[tinysweeper]

tinysweeper found nothing blocking. Approving.

$0.0000 · 0 in / 0 out · 31 embedded · ladder/vectors

[M3gA-Mind]

Audit (no blocking findings) for tinyhumansai/openhuman#6750

• Gitlinks: only vendor/tinybus (6ee8258c, which is v0.1.2, → e5f1cd2d, tinybus main HEAD) and vendor/tinyjevclient (84b3983c → 19ad7b18, its main HEAD, a fast-forward of 5 commits) move. vendor/agent-browser is not touched and is already current: d01253d9 is upstream HEAD, as the tracker row says.
• Module ABI: unchanged. ABI_REVISION = 1 and the TBUSMOD v1 magic are the same at 6ee8258c and e5f1cd2d.
• Lockfile: leaving it unchanged is correct. tinybus is 0.1.2 and tinyjevclient 0.2.1 at both old and new pins. The PR notes cargo build --locked passes.
• Behaviour changes: tinyjevclient adds endpoint overrides and host-product attribution. That matches the compare range, which only touches crates/tinyjevclient/src/client/* and docs.
• CI: Rust (required) is still pending; every other check is green.