chore(acp): bump dimcode and grok registry pins to probed versions

[kaizhou-lab]

Registry snapshot

• Release tag: v2026.10.14-5f08813
• CDN JSON: https://cdn.agentclientprotocol.com/registry/v1/v2026.10.14-5f08813/registry.json
• Public page: https://agentclientprotocol.com/get-started/registry.md
• 42 listed agent ids; no new and no delisted entries against the previous audited snapshot (v2026.10.14-2bb9475).

Version drift

backend	package	old	new
dimcode	dimcode	0.5.17	0.5.18
grok	@xai-official/grok	1.0.57	1.0.58

The other Registry-pinned entries (autohand, codebuddy, deepagents, dirac, glm-acp-agent, kilo, minimax-code, nova, pi, sigit) match the snapshot. mimo-code is a non-Registry builtin and is excluded from drift reconciliation.

Probe evidence

Each package was probed serially at the exact new version with the Registry's declared argv, no inherited HOME and no credentials. Both completed ACP initialize at protocolVersion 1.

backend	probed argv	session/new	classification
dimcode	npx -y dimcode@0.5.18 acp	-32000 "Authentication required: Provider credentials are required"	auth required
grok	npx -y @xai-official/grok@1.0.58 agent stdio	-32000 "Authentication required", data "no auth method id provided"	auth required

Drifted but not upgraded: none.

Structural diff

The previous snapshot (v2026.10.14-2bb9475) was fetched from its versioned CDN path and diffed per agent. For both npx entries above, args and env are byte-identical. The only other changes are binary artifacts for antigravity-acp and kimchi, neither of which AionCore pins. No distribution type was added or removed for any pinned backend.

Scope

Lock-only. A fixed-string scan (grep -rnF) for each outgoing version across crates/**/*.rs returned no match, so no lock-derived test assertion needed updating. The version literals in npx_cache_repair.rs are cache-path hash fixtures and are deliberately untouched.

Validation

• just migration-check: passed.
• just lint-fix (cargo fix + clippy --fix --workspace -D warnings): clean, no fixes produced.
• just fmt: clean.
• just _auto-commit-fixes: nothing to commit.
• Local cargo nextest run --workspace skipped by standing policy for a lock-only bump; the Test check on this PR is the authority.

Logging

No logging change. This is a resource-manifest version bump on an existing, already-instrumented spawn path.