Pin CL-7927 hardening expectations before fixing

Failing tests for the Codex non-JSON passthrough, the grant-notice force spelling, and the markdown link underline absence; the telemetry comment softening rides along.

Author: TheGreatAxios

src/permission/gate.test.ts

@@ -345,7 +345,7 @@ describe("grant-mismatch asks carry the guard reason as a notice (CL-6824)", ()
     expect(verdict.allowed).toBe(false);
     expect(seen).toHaveLength(1);
     expect(seen[0]?.notice).toBe(
-      "A standing grant matches this command, but it uses --force, so it still needs approval.",
+      "A standing grant matches this command, but it uses --force=true, so it still needs approval.",
     );
   });
 
@@ -357,7 +357,7 @@ describe("grant-mismatch asks carry the guard reason as a notice (CL-6824)", ()
     expect(verdict.allowed).toBe(false);
     expect(seen).toHaveLength(1);
     expect(seen[0]?.notice).toBe(
-      "A standing grant matches this command, but it uses --force, so it still needs approval.",
+      "A standing grant matches this command, but it uses -f=true, so it still needs approval.",
     );
   });
 
@@ -369,7 +369,7 @@ describe("grant-mismatch asks carry the guard reason as a notice (CL-6824)", ()
     expect(verdict.allowed).toBe(false);
     expect(seen).toHaveLength(1);
     expect(seen[0]?.notice).toBe(
-      "A standing grant matches this command, but it uses --force, so it still needs approval.",
+      "A standing grant matches this command, but it uses -ftrue, so it still needs approval.",
     );
   });
 

src/provider/codex-responses.test.ts

@@ -1,12 +1,14 @@
 import { describe, expect, test } from "bun:test";
 import { BEARER_CREDENTIAL_SENTINEL } from "@intx/inference";
+import type { ProviderAdapter } from "@intx/inference";
 import type { ConversationTurn, LastCycleSource } from "@intx/types/runtime";
 import { ENVIRONMENT_TAG_NAME, PRODUCT_NAME } from "../branding.js";
 import {
   CODEX_ACCOUNT_ID_OPTION,
   CODEX_RESPONSES_PROVIDER,
   CODEX_SESSION_ID_OPTION,
   createCodexResponsesAdapter,
+  withParallelToolCalls,
 } from "./codex-responses.js";
 
 const source: LastCycleSource = {
@@ -74,6 +76,22 @@ describe("createCodexResponsesAdapter", () => {
     expect(body.parallel_tool_calls).toBe(true);
   });
 
+  test("passes a non-JSON body through unrewritten (CL-7927)", () => {
+    const stub = {
+      buildRequest: () => ({
+        url: "/codex/responses",
+        headers: {},
+        body: "not-json",
+      }),
+    } as unknown as ProviderAdapter;
+    const request = withParallelToolCalls(stub).buildRequest(
+      [userTurn("hello")],
+      "gpt-5.1-codex",
+      {},
+    );
+    expect(request.body).toBe("not-json");
+  });
+
   test("wraps the system prompt with host product identity as a developer item", () => {
     const adapter = createCodexResponsesAdapter(source);
     const request = adapter.buildRequest([userTurn("x")], "gpt-5.1-codex", {

src/tui/stream.test.ts

@@ -11,6 +11,7 @@ import {
   streamRowGutter,
   toolRowLines,
   toolSentenceLines,
+  transcriptSyntaxStyle,
   type RowLayout,
   type StreamRow,
 } from "./stream";
@@ -533,3 +534,15 @@ describe("sub-agent dispatch row marks", () => {
     expect(streamRowGutter(merged, SOLO).content).toContain("✓");
   });
 });
+
+// TUI markdown links are click-only: there is no hover tracking, so no hover
+// state may add an affordance the idle render does not have. Pin
+// underline-absence on the link scopes so a future hover style cannot sneak
+// one in (CL-7927).
+describe("transcriptSyntaxStyle markdown links", () => {
+  test("link cells carry no underline", () => {
+    const styles = transcriptSyntaxStyle().getAllStyles();
+    expect(styles.get("markup.link")?.underline).not.toBe(true);
+    expect(styles.get("markup.link.url")?.underline).not.toBe(true);
+  });
+});

tests/unit/telemetry-product-events.test.ts

@@ -245,9 +245,9 @@ test("first-party skill names are reported by name; everything else stays custom
   expect(classifySkillName("acme-internal-deploy")).toBe("custom");
   // Bundled catalog skills outside the closed allowlist are not reported by
   // name either — the allowlist is the closed set, not the skills directory.
-  // All four bake-only background skills (user-invocable: false, baked into
-  // agent prompts rather than invoked as skills) stay custom, while the
-  // seven flagged-but-allowlisted use_skill-only recipes assert by name above.
+  // All four hidden-from-discovery background skills (explicit loads still
+  // resolve) stay custom, while the seven flagged-but-allowlisted
+  // use_skill-only recipes assert by name above.
   expect(classifySkillName("idiot-proof")).toBe("custom");
   expect(classifySkillName("native-integration")).toBe("custom");
   expect(classifySkillName("native-runtime")).toBe("custom");