chore(vendor): bump tinybus for owner-only Windows module cache

[senamakel]

Summary

Moves the vendor/tinybus gitlink to pick up tinyhumansai/tinybus#40, which creates the Windows module release cache with an owner-only protected DACL and repairs an existing cache that inherits a group write ACE. The strict directory gate is unchanged.

The fix is owned by TinyBus (module admission and cache staging), so OpenHuman needs only the pin bump: crates/openhuman-core/src/modules/ops.rs already installs into the persistent cache under dirs::cache_dir() and calls into tinybus' load_first_admitted, which runs the repair before loading.

Pinned to the release

tinybus#40 merged (c19d78fcdd), passed its Windows CI jobs (modules and portability on windows-latest, which run the cfg(windows) ACL tests), and shipped in v0.1.3. vendor/tinybus now points at the v0.1.3 commit (e231bf3).

Validation

• cargo check --manifest-path Cargo.toml -p openhuman: ok with the bumped pin
• tinybus tests/clippy/fmt results are in fix(module): owner-only creation and repair of the Windows release cache tinybus#40

Closes #6008

Repin validation

• cargo check -p openhuman --locked: ok
• cargo test -p openhuman --lib modules::registry: 11 passed

[coderabbitai]

Warning

Review limit reached

• Run on-demand review

_{This review includes 1 billable file and costs up to $0.25.}

Or wait 4 minutes for your next included review.

Check out review usage here.

View limit details

Limit details: You’ve used all 10 included reviews currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: d5413f41-1996-4f31-acae-2f61f3437431

---

📥 Commits

Reviewing files that changed from the base of the PR and between b0d6b78 and 16f28b0.

---

⛔ Files ignored due to path filters (2)

• Cargo.lock is excluded by !**/*.lock
• crates/openhuman-app/Cargo.lock is excluded by !**/*.lock

---

📒 Files selected for processing (1)

• vendor/tinybus

---

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-10T09:23:57.928754Z	16f28b0	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[tinysweeper]

Tiny Sweeper review

Tiny Sweeper reviewed this change across 6 lane(s) and found 0 active actionable finding(s). Detailed lane evidence and any incomplete work are listed below.

State: Ready for maintainer review
Priority: none
Reviewed head: 16f28b062656
Updated: 1791623864 (Unix time)

Review snapshot

Change surface	Files	Review signal	Count
Production	0	Active findings	0
Tests	0	Noted findings	0
Documentation	0	Resolved findings	0
Configuration	0	Pending checks/questions	0

Completeness: Complete
Test assessment: No supported feature-to-test mapping was available; this does not mean tests are absent or passed.

What changed

The review could not produce a supported behavioral summary; inspect the cited changed surface and lane details below.

Features

None identified with supported citations.

Tests

No supported feature-to-test mapping was produced. Test execution is not inferred.

Findings

No active actionable findings.

Before merge

None.

Agent review details

critique

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No added or modified lines to review.

security

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No added or modified lines to review.

tests

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No added or modified lines to review.

commits

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: Nothing sensitive found in what this pull request commits.

description

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No added or modified lines to review.

e2e

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No added or modified lines to review.

Evidence and run details

• Models: None
• Spend: $0.000000
• Tokens: 0 input · 0 output · 0 cached · 0 embedding

Head	State	Pass summary
16f28b062656	ready for maintainer review	0 active finding(s), 0 resolved finding(s) (at 1791623864)

[tinysweeper]

tinysweeper found nothing blocking. Approving.

$0.0000 · 0 in / 0 out