e9e4e093

By: ananjiani <ananjiani@noreply.codeberg.org>

chore(ai): update Claude Code to 2.1.296 and guard incomplete reviews (#364)

## Summary

```diff
-Claude Code pin: 2.1.219
+Claude Code pin: 2.1.296
+No successful different-pool reviewer → stop and request human review
```

- Update only the Claude Code input and its own dependency tree. Keep root nixpkgs, llm-agents, Pi, the cache-fix proxy, and the isolated bridge wrapper unchanged.
- Add the missing-review rule to both Pi routing instructions. Keep all model IDs and account scopes unchanged; do not force-register unavailable Grok models.

## Evidence

- **Before:** both the installed CLI and bridge reported `2.1.219 (Claude Code)`.
  **After:** the built raw CLI, normal cache-fixed CLI wrapper, and isolated bridge wrapper report `2.1.296 (Claude Code)`.
- Aragorn evaluation resolves the new Claude Code version and retains the cache-fixed package and isolated bridge configuration.
- An independent recursive lock comparison confirms that only the Claude Code dependency tree changed. Its dedicated nixpkgs and systems inputs follow the updated upstream pin; unrelated root input trees are identical.
- 9 Node tests and 12 Bun compaction tests pass. Nix formatting, statix, deadnix, ripsecrets, JSON parsing, and whitespace checks pass.
- Independent coordinator review of the Flash worker's changes passed.
- Grok's extension already supports 4.7, but the local login and model cache expired. One normal refresh returned HTTP 400. This PR does not change credentials; fresh device login remains a user step.
- No real model request, cache-proxy API flow, full system build, or live activation ran. Required NixCI checks must pass before merge.

## Merge Danger

**Door:** two-way

Revert the pin and lock change, or roll back the prior generation.

**Blast Radius:** Claude

Hosts using the shared Claude Code package receive the new CLI after deployment. Pi's bridge uses the same package. The missing-review rule is prompt policy, not a runtime lock. Routine deployment remains owned by Comin; this PR does not activate anything.

Co-authored-by: Ammar Nanjiani <ammar.nanjiani@gmail.com>
Reviewed-on: https://codeberg.org/ananjiani/infra/pulls/364

Total

1m55s

Time to Start Worker time Duration Time to finish Idle
Config 0s 2s 2s 3s 0s
Eval 3s 1m09s 1m09s 1m13s 0s
Build 1m12s 1m04s 43s 1m56s 0s
Suite 0s 2m17s 1m55s 1m56s 0s

Timeline

Config Eval Build
0s10s20s30s40s50s1m1m10s1m20s1m30s1m40s1m50s