[riccardovandra]

What's new from upstream

New features

Providers

• Kiro (Kiro CLI V3) is available as an Early Access ACP provider, off by default, under Settings → Providers → Add provider → Show more. It uses a signed-in kiro-cli or KIRO_API_KEY and needs CLI 2.27.0+. (feat(provider-kiro): add Kiro as an ACP provider pingdotgg/t3code#14693)
• Pi extension status text now shows in the composer banners on web and desktop and in the floating control on mobile, and clears when the runtime retires. (feat(pi): show extension status in existing controls pingdotgg/t3code#23901)
• Claude Ultracode is a separate On/Off toggle that works at any effort level, shown beside Standard and Fast in the model picker footer; old effort: "ultracode" selections still map to xhigh with Ultracode on. (feat(claude): Ultracode works with any effort, like Claude Desktop pingdotgg/t3code#27034)
• Ultracode is offered on Claude Sonnet 5.5 and Haiku 5.5, with Sonnet 5.5 split into its own manifest profile so Sonnet 5 is unaffected. (feat(claude): expose Ultracode on Claude Sonnet 5.5 and Haiku 5.5 pingdotgg/t3code#30781)
• The Claude model picker lists models that Claude Code reports from an Anthropic-compatible gateway (ANTHROPIC_BASE_URL with gateway model discovery), not only the bundled catalog. (feat(server): list Claude models reported by Claude Code pingdotgg/t3code#30511)
• Antigravity moves to managed runtime 1.4.5: quota and provider errors now fail the turn, subagent work is visible, and the agent no longer writes a stray run-workflow/SKILL.md into the project. (feat(antigravity): runtime 1.4.5 with real turn failures and subagent work pingdotgg/t3code#28629)
• Antigravity identifies itself as t3-code to agy acp 1.5.1+, which offers every account model to any ACP client; older runtimes keep the zed client name. (feat(antigravity): identify as T3 Code to agy acp 1.5.1+ pingdotgg/t3code#31158)
• Antigravity's custom binaryPath accepts the agy CLI, resolves agy.exe/agy.cmd on Windows, and launches mise/aqua/volta shims by the name they were called with. (feat(antigravity): support agy CLI as custom binaryPath pingdotgg/t3code#32503)
• MCP Apps now render in Claude threads (Claude Code 2.1.280+): the adapter reads the tool's ui:// resource and the session implements mcpApps.listTools, callTool and readResource. (feat(server): render MCP Apps from Claude tool calls pingdotgg/t3code#29803)
• Provider status banners on web and desktop have a Refresh button that rechecks the provider and its models without leaving the thread. (feat(web): add refresh to provider status banners pingdotgg/t3code#24861)

Threads and sessions

• message.dispatch takes freshContext, which starts a new provider conversation inside the same T3 thread with no context handoff and acts as a boundary for later resumes and handoffs. (feat(server): sends can start a fresh provider session pingdotgg/t3code#30323)
• /clear arms a fresh session for the next message on web, desktop and mobile, shows a New session divider, and is available to agents through t3_thread_send. (feat: /clear starts a fresh session in the same thread pingdotgg/t3code#30325)
• Scheduled tasks gain a threadMode (new_thread, continue, fresh_session) with a Destination picker in Settings on web and mobile; schedule_task takes freshSession. (feat: scheduled tasks can run in one thread with a fresh session each run pingdotgg/t3code#30326)
• Scheduled tasks bound to a thread link to it: a thread-title link on web and desktop, an Open thread menu action on mobile. (feat(scheduled-tasks): tasks link to their thread pingdotgg/t3code#31764)
• Threads can carry tags via a new thread.tag.set command, and hiddenThreadTags in settings.json hides tagged threads from the UI (for recording) while they keep running. No tag UI yet. (feat: tag threads and hide tagged threads while recording pingdotgg/t3code#29053)
• Copy thread now copies https://app.t3.codes/threads/<environmentId>/<threadId>, which opens the thread from anywhere and renders as an in-app thread chip on every client. (feat(server,web,mobile,desktop): Copy thread copies a link that opens the thread pingdotgg/t3code#26290)
• Those copied thread links open directly in the installed iOS or Android app via universal links and app links scoped to /threads/*. (feat(mobile,web): copied thread links open the mobile app pingdotgg/t3code#29815)
• The default for auto-settling inactive threads (sidebarAutoSettleAfterDays) moves from 3 to 7 days; explicit values, including off, are kept. (feat: auto-settle inactive threads after 7 days by default pingdotgg/t3code#32325)
• Settings → Archive adds an icon-only Delete button beside Unarchive, with a confirmation that names the thread. (feat(web): delete archived threads from the archive page pingdotgg/t3code#22160)
• Settings → Labs → Beta → Tool calls in chat can show all, hide successful, hide all, or Zen mode, where each turn shows only your messages and the agent's last reply. (feat(web): a Labs setting hides tool calls so threads read like a chat pingdotgg/t3code#30000)
• Project actions can set stopOnSettle to close their terminal and child processes when the thread settles; the repository's Dev action enables it. (feat(server): stop opted-in project actions when threads settle pingdotgg/t3code#31857)

Voice

• Android gets on-device dictation through ML Kit GenAI Speech Recognition, with the microphone shown only when the device and language are supported. (feat(mobile): add on-device Android dictation pingdotgg/t3code#26734)
• A T3 environment can run its own transcription engine (Whisper batch, Moonshine streaming) with digest-pinned models, available only to clients allowed to operate it. (feat(server): transcribe audio on a chosen environment pingdotgg/t3code#30625)
• On web and desktop, Settings → Voice starts Off and dictation sends audio only after you pick a named environment on that device; transcript cleanup is a separate opt-in. (feat(web): opt into environment dictation on this device pingdotgg/t3code#30623)
• The desktop browser annotation editor can dictate through the same consent-gated path; the guest page never gets microphone access. (feat(desktop): dictate into browser annotations with the same consent pingdotgg/t3code#30624)
• iOS and Android keep on-device dictation as default and can opt in to a paired environment under Settings → Voice, which also checks that the host has a transcription model. (feat(mobile): opt in to dictation on a paired environment pingdotgg/t3code#31059)
• Settings → Voice → Transcribe with offers cloud dictation through OpenAI, Grok Voice Transcribe or OpenRouter on all clients, opted in per device. (feat(voice): opt into cloud dictation with OpenAI, Grok, or OpenRouter pingdotgg/t3code#31769)
• The transcription model list on web and desktop can sort by size, speed or error rate and filter to downloaded models. (feat(web): sort and filter transcription models pingdotgg/t3code#32045)

Secrets and policy

• Per-host source control tokens (GitHub and others) accept a secret provider reference such as 1Password instead of a pasted literal. (feat(server): read source control host tokens from a secret provider pingdotgg/t3code#27756)
• Usage-limit source management keys accept a secret reference; older clients get a capability flag so a saved reference does not break config decoding. (feat(server): read usage limit source keys from a secret provider pingdotgg/t3code#27760)
• The EAS device host's Expo access token accepts a secret reference, and an unreadable reference never falls back to a different Expo login. (feat(device): read the EAS access token from a secret provider pingdotgg/t3code#27763)
• Simlock agentToken, Antigravity apiKey and OpenCode serverPassword accept secret references too. (feat(settings): Simlock, Antigravity and OpenCode credentials can come from a secret provider pingdotgg/t3code#31652)
• A secret request card can be answered with a secret provider reference instead of a typed value. (feat(secrets): answer a secret request with a secret provider reference pingdotgg/t3code#31670)
• Agents are steered to request_secret instead of asking in chat: on Claude the tool is loaded up front rather than hidden behind ToolSearch, and pasted secrets are not copied into child briefs. (feat(server): agents ask for secrets through request_secret instead of chat pingdotgg/t3code#30257)
• t3 policy templates <dir> writes Windows ADMX/ADML Group Policy templates so admins can set managed policy from Group Policy or Intune. (feat(policy): admins set managed policy from a Group Policy template pingdotgg/t3code#29862)

Pull requests and source control

• PR comments in the Summary, Timeline and Code tabs get an Add to chat action that quotes them into the adjacent composer without framing them as a fix. (feat(web): add pull request comments to the chat pingdotgg/t3code#30579)
• PR and merge request composers on web and mobile complete @user mentions using the existing pullRequests.filterOptions authors search. (feat(pull-requests): PR composers complete @user mentions pingdotgg/t3code#30747)
• PR composers complete #123 issue and PR references, plus !123 on GitLab, through a new references kind on pullRequests.filterOptions. (feat(pull-requests): PR composers complete #123 and GitLab !123 references pingdotgg/t3code#30857)
• GitLab merge requests from forks show an "Allow edits from maintainers" toggle (allow_collaboration), editable only by the author with push access. (feat(gitlab): merge requests from forks can toggle maintainer edits pingdotgg/t3code#30518)
• GitLab descriptions and comments link #12, !12, commit SHAs and @user references on web and mobile. (feat(gitlab): link issue, merge request, commit and user references pingdotgg/t3code#30524)
• GitLab reviews can submit a Request changes verdict, and changes requested on GitLab now show in T3. (feat(gitlab): reviews can request changes pingdotgg/t3code#30549)
• An optional Clone into host folders setting clones repos to <base>/<host>/<owner>/<repo> (ghq layout), avoiding name collisions between forks. Web: Settings → Threads; mobile: Settings → Source control. (feat: optionally clone repos into ghq-style <host>/<owner>/<repo> folders pingdotgg/t3code#24904)

Web, desktop and mobile

• Mobile: /side <question> (or /btw) forks the thread into a side chat and opens it, under the same rules as web. (feat(mobile): start side chats with /side pingdotgg/t3code#31709)
• Mobile: windows 600-720 points wide get a medium layout where the sidebar floats over the page above a scrim. (feat(mobile): medium windows float the sidebar over the page pingdotgg/t3code#27088)
• Mobile: when the window has no inspector column, the files and git inspectors open in a sheet instead of separate routes. (feat(mobile): without an inspector column, the inspector is a sheet pingdotgg/t3code#27090)
• In a new thread, clicking the context strip's permission mode opens the permissions menu directly instead of the model selector first. (feat(web): open full access menu from the new thread context strip pingdotgg/t3code#30275)
• A pairing link created in Settings → Sharing & access shows with its QR panel open without expanding the Authorized clients list. (feat(web): show a newly created pairing link without expanding the client list pingdotgg/t3code#30498)
• html_preview and html_render accept a path to a local .html file (full-access threads only), so agents stop retyping whole pages. (feat(server): html tools take a file path, so agents stop retyping pages pingdotgg/t3code#32833)
• The "Star on GitHub" toast waits for 30 seconds of idle time and stars the repo in one click through the server. (feat(web): ask for a GitHub star when idle, and star in one click pingdotgg/t3code#29922)
• A successful star fires a one-shot confetti burst, skipped under prefers-reduced-motion. (feat(web): celebrate a GitHub star with confetti pingdotgg/t3code#29987)
• Analytics events provider.turn.completed and provider.request.completed include serviceTier (standard, flex, fast, ultrafast). (feat(server): log fast and ultrafast service tiers in analytics pingdotgg/t3code#29348)
• Marketing site: the GitHub star count is fetched at build time. (feat(marketing): fetch GitHub stars at build time pingdotgg/t3code#29555)
• Marketing site: canonical URLs, sitemap, structured data, robots.txt, llms.txt and security.txt help search engines identify the official t3.codes. (feat(marketing): help search engines tell t3.codes apart from copycat sites pingdotgg/t3code#31142)

Bug fixes

Providers and agents

• Codex threads also open in another Codex client (app, CLI, IDE) were silently rebound to a fresh native thread on thread/resume failure; the active-writer error is now reported as thread in use. (fix(server): Codex threads open in another client are no longer silently replaced pingdotgg/t3code#21045)
• Codex turns failing with an unlisted codexErrorInfo code (for example modelNotFound) stayed running forever because the notifications failed to decode; they now end the run. (fix(server): Codex turns that fail with an unlisted error code no longer stay running pingdotgg/t3code#28040)
• Text cut mid-emoji left lone surrogates in wake, restart, side-chat, PR-watch, preview-snapshot and text-generation payloads, so Codex, Anthropic and Grok rejected the request and turns hung or failed; cuts now end on whole characters, titles included. (fix(codex): a background command's wake no longer hangs when its output tail splits an emoji pingdotgg/t3code#29168) (fix(server): restart notes no longer split an emoji in a long background task label pingdotgg/t3code#29647) (fix(server): side chat and merge-back context no longer cut an emoji in half pingdotgg/t3code#29572) (fix(server): PR watch wakes no longer split an emoji in a long comment pingdotgg/t3code#29633) (fix(server): preview snapshots no longer cut an emoji in half pingdotgg/t3code#29600) (fix(provider-core): text generation context cuts no longer split an emoji pingdotgg/t3code#29653) (fix(server): create_threads titles no longer end in a broken character pingdotgg/t3code#29163) (fix(cli): t3 thread start titles no longer end in a broken character pingdotgg/t3code#29563)
• Restoring a checkpoint on, or forking, a Codex thread archived outside T3 Code failed with "session is archived"; both now unarchive and retry like resume. (fix(codex): restoring a checkpoint works after the Codex session was archived pingdotgg/t3code#29582) (fix(server): forking a Codex thread archived outside T3 Code no longer fails pingdotgg/t3code#29618)
• Settling a Codex parent unsubscribed an attached delegated child, so the child's later replies never showed or completed. (fix(server): delegated children keep replies after their parent settles pingdotgg/t3code#23456)
• Imported Claude Code terminal sessions failed their first follow-up with "Session ID is already in use"; they now resume on the first turn. (fix(server): imported Claude sessions resume on their first turn pingdotgg/t3code#23219)
• A Claude wake run could show "working" indefinitely after a queued user turn absorbed its wake; it now settles. (fix(claude): a background-task wake run no longer hangs after a user turn absorbed its wake pingdotgg/t3code#28010)
• Claude subagents left by a stopped process stayed Running and Stop could not clear them; nested subagent completions could also be lost across turns. (fix(server): Claude subagents left by a stopped process no longer stay Running pingdotgg/t3code#28356) (fix(server): preserve nested Claude subagent completion across turns pingdotgg/t3code#23561)
• Forking a compacted Claude thread produced dangling compaction references, so the fork resent its full pre-compaction history. (fix(server): forked Claude threads keep their compaction chain pingdotgg/t3code#27577)
• Spawned claude processes inherited the launching Claude Code session's variables and ELECTRON_RUN_AS_NODE=1, which broke Electron apps started by Claude; those variables are now stripped. (fix(server): Claude threads no longer join the Claude session that launched T3 pingdotgg/t3code#29169) (fix(server): Claude's commands no longer run Electron apps as Node pingdotgg/t3code#29413)
• Sending to a second Claude instance left the first instance's session and process alive; it is now released once background work finishes. (fix(server): release the previous session when sending to another instance pingdotgg/t3code#23198)
• Native Claude installs stayed on an update warning after claude update (compared against npm), and npm installs under ~/.local were offered native updates. (fix(server): native Claude updates use the native release feed pingdotgg/t3code#27958) (fix(provider-core): npm-installed Claude in ~/.local gets npm updates pingdotgg/t3code#27957)
• Claude run as root in Full access failed with only "Provider turn failed."; the CLI's root-refusal reason is now shown. (fix(server): show why Claude refuses full access as root pingdotgg/t3code#23804)
• A Cursor SDK write after end unhandled rejection called process.exit(1) and took down the whole server; it is now tolerated. (fix(cursor): a write-after-end in the Cursor SDK no longer stops the server pingdotgg/t3code#27703)
• /compact on Cursor sent /compress as plain chat text and never compacted; it now calls the SDK's agent.summarize(). (fix(cursor): /compact compacts with the SDK's summarize pingdotgg/t3code#29398)
• After Sign in with Cursor, no Cursor limits, cost or token usage appeared; the SDK-minted API key is now accepted. (fix(cursor): show Cursor usage after signing in with Cursor pingdotgg/t3code#29419)
• OpenCode sessions failed to open after an in-place 1.x to 2.x upgrade until a manual refresh. (fix(opencode): sessions open through OpenCode 2 after an in-place upgrade from 1.x pingdotgg/t3code#27779)
• OpenCode 2.1+ compaction history missing recent broke rollback and every send in forks of compacted threads. (fix(opencode): decode compaction history from OpenCode 2.1 pingdotgg/t3code#22661) (fix(opencode): forks from compacted threads no longer fail pingdotgg/t3code#29221)
• OpenCode dropped $skill mentions before its directory scan finished, rejected ~/ binary paths, and showed tools stopped mid-run as failed instead of interrupted. (fix(server): OpenCode no longer drops a $skill read before its directory scan ends pingdotgg/t3code#29535) (fix(opencode): expand home-relative executable paths pingdotgg/t3code#29326) (fix(opencode): tools stopped mid-run show as interrupted, not failed pingdotgg/t3code#29762)
• Pi messages sent during compaction could be rejected and lost; they are now held and delivered in order. (fix(pi): hold messages until compaction ends pingdotgg/t3code#24388)
• A Muse /compact refused by the host wedged the thread so every later message failed; the refusal now ends its own turn with the host's reason. (fix(muse): a declined /compact reports its reason and no longer wedges the thread pingdotgg/t3code#28454)
• ACP threads stopped consuming events after a rollback, and Stop then timed out with "did not finish cancellation". (fix(provider-acp): ACP threads keep receiving events after a rollback pingdotgg/t3code#28987)
• ACP: Always allow this session cancelled the turn when the agent offered only allow-once; a final message without a trailing newline was dropped; only the first diff of a multi-file tool call was kept. (fix(acp): Always allow no longer cancels the turn when an agent only offers allow-once pingdotgg/t3code#29463) (fix(acp): a final agent message without a trailing newline is no longer dropped pingdotgg/t3code#29605) (fix(acp): file changes show the patch of every diff in a tool call pingdotgg/t3code#28631)
• Antigravity threads in Auto silently approved every permission request; Auto now falls back to Supervised as documented. (fix(server): Antigravity Auto asks instead of approving every request pingdotgg/t3code#23698)
• Usage-limit failures lost their reset time or recovery for Claude via OpenCode, Antigravity rate limits and Codex Sharing limits, so snooze and auto-resume never armed. (fix(opencode): Claude usage limits through OpenCode keep their reset time pingdotgg/t3code#29301) (fix(antigravity): rate-limited turns keep their reset time pingdotgg/t3code#29594) (fix(codex): sharing usage limits offer the existing recovery options pingdotgg/t3code#25341)
• Thread titles, branch names and commit messages failed silently when Codex (the default text-generation provider) was missing or signed out, or the thread's worktree was cleaned up; they now fall back. (fix(server): thread titles no longer fail when the text generation provider can't run pingdotgg/t3code#29607) (fix(server): title regeneration works after a thread's worktree is cleaned up pingdotgg/t3code#29606)
• Toggling Linked environments did not change tools in running agent sessions until a restart; tools now reload at the next turn. (fix(server): refresh linking tools in existing agent sessions pingdotgg/t3code#26737)
• OpenCode: nested custom commands such as /git/commit were sent to the model as plain text; both the 1.x and 2.x adapters now run them through session.command. (fix(opencode): nested custom commands like /git/commit run as commands pingdotgg/t3code#29765)
• OpenCode: shell commands that exited non-zero were stored as completed, so t3_thread_read told agents they succeeded. They are now stored as failed. (fix(opencode): a command that exits non-zero is stored as failed, not completed pingdotgg/t3code#29824)
• OpenCode 2: an /api/event subscription that never returned headers could hold session open for about five minutes. It now times out after 10 s and retries. (fix(opencode): fail stalled event subscriptions promptly pingdotgg/t3code#30201)
• Antigravity: a silent ACP session/prompt kept threads working indefinitely. A 15-minute inactivity deadline now fails the turn and the next message starts a fresh runtime. (fix(acp): time out silent Antigravity prompts pingdotgg/t3code#30377)
• Antigravity: Windows sign-in wrongly blamed the network while the runtime was still unpacking, Intel Mac installs hung at "Checking the downloaded runtime", and account access was not checked after install. All three are fixed. (fix(server): Antigravity sign-in no longer blames the network while the runtime starts pingdotgg/t3code#30079, fix(server): Antigravity installs on Intel Macs pingdotgg/t3code#30189, fix(antigravity): check account access after installation pingdotgg/t3code#32446)
• Text generation (commit messages, PR text, branch names, titles) failed with generic text, raw <none> or full result JSON. Antigravity, OpenCode and Claude now show the actual error. (fix(server): Antigravity text generation shows sign-in and setup errors pingdotgg/t3code#29823, fix(opencode): text generation errors explain known provider failures without raw provider text pingdotgg/t3code#29877, fix(server): failed Claude text generation shows Claude's error instead of raw JSON pingdotgg/t3code#30331)
• Codex: GPT-6.1 Sol compacted after every tool call on managed Codex. The managed runtime moves to 0.166.0, and existing installs upgrade at startup. (fix(server): GPT-6.1 Sol no longer compacts after every tool call on managed Codex pingdotgg/t3code#30004)
• Codex: titles, commit messages and branch names failed on ChatGPT accounts without gpt-6-luna. Text generation now falls back to a model the account lists. (fix(server): Codex titles no longer fail on ChatGPT accounts without gpt-6-luna pingdotgg/t3code#30078)
• Codex: picking a custom model whose slug matched a built-in alias (for example gpt-5-codex) silently ran a different built-in model. The exact pick is now kept. (fix(web): picking a custom model named like a Codex alias keeps that model pingdotgg/t3code#29789)
• Claude: turns used the bundled catalog, so new manifest options such as Ultracode were silently dropped. On custom models the context meter showed no limit. Turns now use the live catalog and the SDK-reported window. (fix(claude): turns use the downloaded model catalog pingdotgg/t3code#31717, fix(server): Claude context meter shows the window for models outside the catalog pingdotgg/t3code#30051)
• Pi: teardown closed stdin before SIGTERM, which killed Pi mid-shutdown and orphaned its bash commands. SIGTERM now comes first. (fix(pi): send SIGTERM before closing Pi's stdin on teardown pingdotgg/t3code#30025)
• Pi: short-lived probe processes spent rotated OAuth tokens, so ChatGPT sign-in died after an idle hour. Probes now launch with --offline. (fix(pi): short-lived Pi processes no longer lose rotated OAuth tokens pingdotgg/t3code#30187)
• Pi: an explicit thinking level was replaced by the new model's default after a model switch, and a half-written MCP extension file could break session launch. Both are fixed. (fix(pi): preserve explicit thinking when switching models pingdotgg/t3code#32389, fix(pi): the T3 MCP extension file is written atomically pingdotgg/t3code#32231)
• Muse: a resumed session whose history projection was unavailable left the thread running forever. It now recovers into a fresh native session. (fix(muse): recover from unavailable session views pingdotgg/t3code#32154)
• ACP: tool calls with U+2028/U+2029 in their arguments hung in t3 acp-mcp-bridge, and child sessions dropped streamed tool output. Both are fixed, and ACP agents now get T3CODE_THREAD_ID. (fix(server): ACP MCP bridge no longer splits messages on U+2028/U+2029 pingdotgg/t3code#30719, fix(acp): retain streamed child tool output pingdotgg/t3code#32411, fix(server): ACP agents get T3CODE_THREAD_ID like Claude and Codex sessions pingdotgg/t3code#30361)

Threads and orchestration

• Two commands sharing a commandId on different threads both reported success while only one applied; the loser now fails with a conflict. (fix(server): a command id reused for two threads at once no longer succeeds for both pingdotgg/t3code#18385)
• Changing a delegated task's wake policy could revert a checkpointed parent run to running, stalling queued work behind it. (fix(server): changing a task's wake policy no longer reverts a checkpointed parent run pingdotgg/t3code#25662)
• Interrupting a completion wake discarded undelivered sibling results, and usage-limit auto-resume could wake children of settled parents back to active. (fix(server): preserve sibling wakeups when interrupting a completion wake pingdotgg/t3code#28204) (fix(server): usage-limit auto-resume no longer arms children of settled parents pingdotgg/t3code#27951)
• Replies cut by a server restart stayed marked as streaming and rendered as live output. (fix(server): messages cut by a restart no longer stay marked as streaming pingdotgg/t3code#28646)
• In long threads the sidebar showed Input while the pending question was outside loaded history and could not be answered or dismissed. (fix: keep older pending questions answerable pingdotgg/t3code#26435)
• Bursts of running-tool output could overflow the live-event buffer with LiveStreamBufferError; superseded updates are now coalesced on arrival. (fix(server): coalesce tool output before it fills the live buffer pingdotgg/t3code#16317)
• Up to five notices showed for one usage-limit pause across clients; there is now one recovery notice with one Wake now. (fix(chat): show one usage-limit recovery notice pingdotgg/t3code#29292)
• Coalesced webhook task runs used the prompt from when the window opened instead of the saved one. (fix(server): coalesced webhook runs use the prompt saved before dispatch pingdotgg/t3code#29476)
• A server restart between saving a message and the provider starting its run could leave the thread marked done. Unstarted runs now go back to the queue and retry. (fix(server): retry unstarted runs after recovery pingdotgg/t3code#30560)
• A usage-limit auto-resume was lost if the server restarted before the run started, and it could arm subagents whose parents were archived or deleted. Both are fixed. (fix(server): a usage-limit auto-resume survives a server restart pingdotgg/t3code#31292, fix(server): usage-limit auto-resume no longer arms subagents of archived or deleted parents pingdotgg/t3code#30363)
• Subagent questions queued behind a long parent turn and never arrived. They now steer into the running parent turn on providers that support steering. (fix(server): subagent questions reach a busy parent agent pingdotgg/t3code#29909)
• A queued message that switched provider or model ended Claude native subagents and background shells without warning. Sessions are now checked for background work first. (fix(server): a queued provider switch no longer ends background work pingdotgg/t3code#30401)
• An agent's settle request was dropped when a background notification started another turn first. It is now kept and retried. Ignored link cards no longer block auto-settle. (fix(server): wait for automatic follow-ups before settling threads pingdotgg/t3code#31815, fix(server): a link card the user moved past no longer blocks auto-settle pingdotgg/t3code#29847)
• Idle compaction ("Compact before the cache expires") was skipped after a queued message was removed or steered. It now runs. (fix(server): idle compaction still runs after a queued message is removed or steered pingdotgg/t3code#29904)
• After any Stop, threads with large control state could open showing a single history row. The visible-window floor is restored. (fix(server): a stopped run no longer shrinks thread history to one row pingdotgg/t3code#31266)
• Native forks made after an undo gave the agent turns the user had rolled back. Forks now skip those turns. (fix(server): native forks after an undo no longer copy later turns pingdotgg/t3code#29902)
• "Revert files too" left behind files that a new .gitignore from the reverted turn had been hiding, such as node_modules and .env. They are now removed. (fix(server): reverting files removes what a new .gitignore from the turn was hiding pingdotgg/t3code#29795)
• A late checkpoint for a stopped run took its baselines from the next run, which corrupted diffs. It now records the stopped run's own baselines. (fix(server): a late checkpoint keeps the stopped run's baselines pingdotgg/t3code#30830)
• Side chats (/side, /btw) started as Supervised from Full access threads. They now inherit the parent composer's permission mode, model and reasoning level. (fix(threads): side chats inherit parent permissions by default pingdotgg/t3code#31114, fix: side chats start with the parent's permission mode and reasoning level pingdotgg/t3code#32315)
• Provider-switch history and side-chat context listed only the first file of a multi-file patch. Every changed file is now listed. (fix(server): handoff context names every file of a multi-file patch pingdotgg/t3code#29905)
• Threads kept showing a stale branch after an agent or terminal checked out another one in their worktree, and ahead/behind counts went stale after a merge. Both now update. (fix(server): threads follow their worktree's branch changes pingdotgg/t3code#31599, fix(server): refresh divergence after a merged branch ref changes pingdotgg/t3code#31342)
• Worktree cleanup: finished subagent worktrees were kept forever after the parent settled, and a cancelled worktree setup left its t3/<hex> branch behind. Both are now removed. (fix(server): clean up child worktrees after their parent settles pingdotgg/t3code#30026, fix(server): cancelling worktree setup no longer leaves its new branch behind pingdotgg/t3code#29781)
• orchestrator_capabilities offered providers the project had turned off, and t3_worktree_handoff ignored the project's start-from-origin override. Both now follow project settings. (fix(server): orchestrator_capabilities no longer offers providers the project turned off pingdotgg/t3code#29842, fix(server): worktree handoff follows the project's start-from-origin setting pingdotgg/t3code#29810)
• Importing a rewound Codex thread lost everything before the last rewind. The rollout chain is now followed. (fix(server): rewound Codex threads import their history from before the rewind pingdotgg/t3code#30652)
• Mark unread did not stick on a thread reopened within ten minutes, and snoozed failed threads could reappear as active. Both are fixed. (fix(client): mark unread sticks on a thread reopened within ten minutes pingdotgg/t3code#29814, fix(client): keep snoozed failures hidden without completion times pingdotgg/t3code#30063)

Web and desktop

• Quitting the desktop app could orphan a backend slow to stop, which kept holding statev2.sqlite and provider agents. (fix(desktop): quit no longer orphans a backend that is slow to stop pingdotgg/t3code#22572)
• Adding a second PR finding or diff selection to the composer replaced the earlier ones; handoffs now append. (fix(web): adding to the composer no longer drops earlier findings and selections pingdotgg/t3code#24990)
• Deleting the open thread opened a snoozed or settled thread, and deleted forks lingered in Lineage as Queued. (fix(web): deleting the open thread no longer opens a snoozed or settled thread pingdotgg/t3code#29643) (fix(web): deleted forks no longer remain in Lineage pingdotgg/t3code#29000)
• Removing or resetting a provider instance in Settings → Providers deleted its saved configuration on one click; it now asks for confirmation. (fix(web): confirm before removing a provider instance's saved settings pingdotgg/t3code#29480)
• File names in Claude and ACP tool-call diffs could not be opened because their paths were absolute. (fix(web): open files from Claude and ACP tool-call diffs pingdotgg/t3code#29309)
• The sidebar reopened after relaunch, and screen readers could no longer Tab through threads since the ARIA tree change. (fix(web): the main sidebar stays collapsed after relaunch pingdotgg/t3code#24202) (fix(web): screen readers can browse and Tab through the threads sidebar again without going into focus mode pingdotgg/t3code#26690)
• With Local environment off, Sharing & access showed "No environment selected" and published themes did not apply while connected to this machine's service. (fix(web): show saved service access with Local environment off pingdotgg/t3code#26464) (fix(desktop): published themes reach the app when it uses this machine's service pingdotgg/t3code#26324)
• The web client never connected to the server that served it when the browser falsely reported offline, and diagnosis blamed the host while sign-in loaded. (fix(client-runtime): connect to the primary environment while the browser reports offline pingdotgg/t3code#29347) (fix(client-runtime): connection diagnosis no longer blames the host while this device's sign-in loads pingdotgg/t3code#29352)
• Terminals reverted to their original size after a reconnect, and terminal controls covered the first prompt line. (fix(client-runtime): terminals fit their pane again after a reconnect pingdotgg/t3code#29696) (fix(web): terminal controls no longer cover the first line pingdotgg/t3code#23373)
• Chat images kept showing stale content after an agent rewrote the file; copied code blocks lost blank lines inside lists, quotes and nested fences. (fix(web,mobile): chat images reload when the agent rewrites the file pingdotgg/t3code#29741) (fix(web): copied code blocks keep their blank lines in lists, quotes and longer fences pingdotgg/t3code#29755)
• The desktop window could not shrink below 840x620 to fit half-screen tiles; the minimum is now 400x360. (fix(desktop): let the window shrink to 400x360 so it fits half-screen tiles pingdotgg/t3code#28223)
• Linux .deb and AppImage installed files any local user could overwrite; group and other write access is now removed. (fix(desktop): Linux .deb no longer installs files any local user can overwrite pingdotgg/t3code#28351)
• Updating from storage v3-v5 wiped every saved composer draft (selection.options.map is not a function). Those drafts now load. (fix(web): drafts saved by older versions load instead of being wiped pingdotgg/t3code#29828)
• Adding a terminal selection over 64,000 characters to chat made the send fail schema validation. The text is now truncated to the limit. (fix(web): big terminal selections no longer break sending pingdotgg/t3code#29804)
• Opening a project from the command palette landed in a subagent or side chat instead of the main thread. (fix(web): opening a project from the command palette no longer lands in a subagent or side chat pingdotgg/t3code#29891)
• In a subfolder project, picking a branch moved the thread to the repo root and stopped its session. It now stays in the project folder. (fix(web): picking a branch in a subfolder project keeps the thread in the project folder pingdotgg/t3code#29908)
• Dragging a sidebar thread scrolled the list away from the pointer, both when reordering and when tagging into the composer. (fix(web): dragging a sidebar thread no longer scrolls the list out from under the pointer pingdotgg/t3code#30346, fix(web): tagging a thread by drag no longer scrolls the sidebar pingdotgg/t3code#31924)
• The Changes row now shows which base it compares against, so a fallback to origin/master no longer produces unexplained huge totals. (fix(web): show the comparison base beside Changes totals pingdotgg/t3code#30085)
• Terminal links: truncated branch names became broken file links, and route or pnpm paths split at [ ] ( ) @ + $. Links are now checked against the filesystem and kept whole. (fix(web): validate terminal links against filesystem metadata pingdotgg/t3code#30526, fix(web): terminal links keep route and pnpm paths in one piece pingdotgg/t3code#30603)
• Markdown markers such as ** in the rich composer could not be selected or deleted. They are now editable. (fix(web): make styled composer Markdown markers editable pingdotgg/t3code#30421)
• Desktop preview: Ctrl+R on macOS now reaches the page instead of reloading it, and Teams web loads instead of rejecting the Electron User-Agent. (fix(desktop): Ctrl+R on macOS reaches the preview page instead of reloading it pingdotgg/t3code#29893, fix(desktop): open Teams web in the preview browser pingdotgg/t3code#31489)
• Voice: a relay-connected microphone destination failed with "No relay authorization service". First-run setup offered an English-only model, and the microphone was hidden on fresh profiles. (fix(web): relay-connected microphone destinations authorize speech requests pingdotgg/t3code#31778, fix(web): first-run voice setup offers a model for the user's language pingdotgg/t3code#32035, fix(web): make first-run dictation setup discoverable pingdotgg/t3code#32197)

Mobile

• A large server config over a slow link made the app reconnect in a loop; messages now arrive in parts that keep the connection alive. (fix(client): a big server config on a slow link no longer drops the connection in a loop pingdotgg/t3code#23758)
• On Android 15+, reopening the app could leave it on "You are offline" with no reconnect attempts. (fix(mobile): Android app no longer stays offline after reopening pingdotgg/t3code#28625)
• On iOS, sending with a pending autocorrection refilled the composer with the corrected draft. (fix(mobile): sending on iOS no longer leaves an autocorrected draft behind pingdotgg/t3code#26452)
• Android: terminal Backspace was swallowed on some keyboards, the composer accepted autofilled one-time codes, and the follow-up menu was clipped with the keyboard open. (fix(mobile): Android terminal Backspace deletes on the first press pingdotgg/t3code#24983) (fix(mobile): Android composer no longer accepts autofill pingdotgg/t3code#27489) (fix(mobile): Android follow-up menu shows in full with the keyboard open pingdotgg/t3code#29263)
• The Android review sheet's Uncommitted diff could go blank after switching sections. (fix(mobile): review diff no longer goes blank after switching sections pingdotgg/t3code#27960)
• Drafts on threads with colons in their ids skipped early attachment upload and sign-out archiving. (fix(mobile): drafts on threads with colons in their ids upload attachments early pingdotgg/t3code#29717)
• Mobile sends skipped Claude's idle compaction; Settings → Providers now lists Claude instances for adding another account. (fix(mobile): compact stale Claude threads before sending pingdotgg/t3code#27935) (fix(mobile): configure another Claude account from Providers pingdotgg/t3code#28928)
• A stale file-picker card survived a dropped preview stream, and iOS simulator previews hid Close. (fix(preview): a dropped stream withdraws its stale file picker pingdotgg/t3code#29655) (fix(mobile): use H.264 for iOS previews and keep Close reachable pingdotgg/t3code#28622)
• Android showed two notifications per thread completion, and the work-row shimmer updated every frame. (fix(mobile): show one Android notification per thread completion pingdotgg/t3code#27699) (fix(mobile): stop the work-row shimmer from updating every frame pingdotgg/t3code#28530)
• iOS: composer text could stop drawing mid-draft, through a TextKit 1 fallback or the iOS 26 scroll edge effect. Typing after in-app dictation stopped reaching the draft. All three are fixed. (fix(mobile): iOS composer text no longer turns invisible mid-draft pingdotgg/t3code#30135, fix(mobile): iOS 26 scroll edge effect no longer hides composer text pingdotgg/t3code#30138, fix(mobile): typing after in-app dictation reaches the draft again on iOS pingdotgg/t3code#30139)
• iOS: a pending autocorrection could put the whole message back after Send, and the follow-up fix dropped the keyboard when a queued edit ended. Both are fixed. (fix(mobile): keep iOS composer empty after sending an autocorrected word pingdotgg/t3code#30308, fix(mobile): composer keeps the keyboard when a queued edit ends pingdotgg/t3code#31317)
• Delivered messages could reappear at the bottom of reopened long threads. A main thread stopped updating after one stream defect until the app was killed. (fix(mobile): delivered messages no longer reappear at the bottom of reopened long threads pingdotgg/t3code#31182, fix(client-runtime): a thread keeps syncing after a stream defect pingdotgg/t3code#31071)
• Multi-file patches showed as "Changed 1 file" with only the first path. (fix(mobile): multi-file patches show every changed file pingdotgg/t3code#29878)
• Terminal: the iOS terminal now accepts Chinese, Japanese and Korean IMEs. Android hardware-keyboard arrows, Tab and Escape now reach the PTY. (fix(mobile): iOS terminal accepts Chinese, Japanese and Korean input pingdotgg/t3code#30546, fix(mobile): Android terminal sends hardware-keyboard arrows, Tab, and Escape to the PTY pingdotgg/t3code#32666)
• Dictation: Android showed it as unavailable when regional preferences were set, and transcribed only after Stop. iPhone ignored preferred languages and dropped the opening words. (fix(mobile): Android dictation works with regional preferences set pingdotgg/t3code#31030, fix(mobile): transcribe Android audio during recording pingdotgg/t3code#31300, fix(mobile): use preferred languages for on-device iPhone dictation pingdotgg/t3code#31800, fix(mobile): keep the opening words of local iPhone dictation pingdotgg/t3code#31801)
• iPad: the composer stayed lifted after the keyboard floated or minimized. On iPhone Duo, widening the inspector made it vanish until restart. (fix(mobile): iPad composer drops when the keyboard floats or minimizes pingdotgg/t3code#31251, fix(mobile): the Duo inspector stops at its widest instead of vanishing pingdotgg/t3code#31665)
• Android PDF viewer now has Save or share. The ⋯ menu gains Close and Reopen for pull requests. (fix(mobile): share PDFs from the Android attachment viewer pingdotgg/t3code#32266, fix(mobile): close and reopen pull requests from the actions menu pingdotgg/t3code#29962)
• Android secret request fields offered password manager logins. A native input now blocks autofill. (fix(mobile): Android secret requests no longer offer password manager logins pingdotgg/t3code#29825)

Server, remote and auth

• Agent session scans on an unreadable .git/config pinned libuv threads and hung the whole server; Windows startup hung on a PowerShell stuck in the kernel. (fix(server): agent session scans no longer hang the server on an unreadable .git/config pingdotgg/t3code#23690) (fix(server): startup no longer hangs on a shell stuck in the kernel pingdotgg/t3code#27938)
• A plain t3 service install moved a --base-dir service onto an empty ~/.t3, hiding all projects; it now refuses. (fix(server): t3 service install no longer moves a --base-dir service onto an empty ~/.t3 pingdotgg/t3code#23878)
• T3 Connect left a stale cloudflared running after Cloudflare error 1033, and the relay ignored tunnel ingress drifted to a dead port. (fix(server): restart T3 Connect's tunnel client when Cloudflare drops it pingdotgg/t3code#24946) (fix(relay): T3 Connect repairs tunnel ingress that drifted from a matching origin pingdotgg/t3code#27961)
• Relay unlink reported success when the relay delete failed, and Desktop users were told to run t3 service restart. (fix(connect): show why relay unlink failed pingdotgg/t3code#25198) (fix(server): T3 Connect not-linked fix no longer tells Desktop users to run t3 service restart pingdotgg/t3code#27660)
• WSL servers advertised ports already used on Windows, so pairing links pointed at the wrong server. (fix(server): WSL servers avoid ports already used by Windows pingdotgg/t3code#22962)
• Updates killed mid-backup left multi-GB partial database copies that blocked later updates on disk space. (fix(server): server updates reclaim partial database backups left by killed updates pingdotgg/t3code#29464)
• The first server config waited about two seconds on Tailscale discovery; hung tailscale serve commands now escalate to SIGKILL. (fix(server): defer Tailscale endpoint discovery during startup pingdotgg/t3code#29432) (fix(tailscale): escalate hung serve commands to SIGKILL pingdotgg/t3code#28529)
• A rejected ChatGPT sign-in left a connection that could not be removed. (fix(providers): remove incomplete ChatGPT connections pingdotgg/t3code#29280)
• preview_open turned mailto:alice@example.com into an https URL with credentials; non-web schemes are now rejected. (fix(shared): preview_open reports about: and mailto: as unsupported instead of misreading them pingdotgg/t3code#29614)
• Terminal history stopped recording after an unterminated OSC or a C1 character, so reattaching showed a gap. (fix(server): terminal history keeps output after an unterminated OSC pingdotgg/t3code#29604) (fix(server): terminal history keeps text with C1 characters pingdotgg/t3code#29649)
• Agent browser tabs could fill the 32-tab limit; idle hidden agent tabs now free a slot. (fix(server): idle agent tabs free a slot when the server's 32-tab browser limit is full pingdotgg/t3code#24186)
• PR images and videos from SAML SSO organizations failed to load. (fix(assets): preserve the PR repository for GitHub media pingdotgg/t3code#21631) (fix(server): load PR uploads from SSO organizations pingdotgg/t3code#21632)
• t3 service uninstall --base-dir <test home> stopped and removed the service for the real ~/.t3. It now refuses when the unit serves another home. (fix(server): t3 service uninstall leaves another T3 home's service alone pingdotgg/t3code#29872)
• t3 connect unlink after a crash could send a fresh relay:write token to whatever process now held the port. It now checks the recorded server is still alive. (fix(cli): t3 connect unlink no longer warns about a server that is gone pingdotgg/t3code#30324)
• A source control token that could not be read (for example, a locked vault) silently fell back to GH_TOKEN or gh, running as another account. It now fails with a clear error. (fix(server): a saved source control token that can't be read no longer falls back to another account pingdotgg/t3code#31646)
• Secret providers: removing one now clears the fields that used it, and a settings save no longer re-reads a locked vault. A stored reference always counts as sensitive. (fix(settings): removing a secret provider clears the fields that used it pingdotgg/t3code#31651, fix(server): a settings save no longer reads an unreadable secret again pingdotgg/t3code#31226, fix(contracts): a stored secret reference is always sensitive pingdotgg/t3code#31403)
• Secrets leaked in two places: screen readers read the web secret field aloud, and the Muse error banner showed unredacted provider text. Both are fixed. (fix(web): screen readers no longer read out a secret typed into the request card pingdotgg/t3code#31653, fix(muse): the thread error banner no longer shows unredacted failure text pingdotgg/t3code#29910)
• Managed policy: t3 update and remote self-update now use the policy's mirror. Kiro is covered, observability locks are refused rather than ignored, and a policy that blocks startup no longer suggests another release. (fix(server): t3 update installs from the policy's update mirror pingdotgg/t3code#29911, fix(server): managed policy covers Kiro pingdotgg/t3code#29915, fix(server): a policy that manages observability endpoints is refused instead of ignored pingdotgg/t3code#30973, fix(desktop): a policy that stops startup no longer points at another release pingdotgg/t3code#30319)
• Linked environments now pick up a peer's new name, and one refused call no longer marks the whole link as failing. (fix(server): linked environments pick up the other machine's new name pingdotgg/t3code#29779, fix(server): a peer refusing one call no longer marks its link as failing pingdotgg/t3code#29914)
• Guests of a shared fork can now open attachments on the messages it inherited. (fix(server): guests of a forked thread can open files on the messages it inherited pingdotgg/t3code#29794)
• Electron moves to 44.10.1 and the preview browser to Chrome 157 for Chromium security fixes. (fix(desktop): bump Electron to 44.10.1 for October Chromium security backports pingdotgg/t3code#30161, fix(server): preview browser picks up Chrome 157 security fixes pingdotgg/t3code#30820)
• Agent previews: a preview_open whose first load failed, or a tab that failed during setup, left hidden tabs behind. A console line with an emoji broke the html_preview JSON for Codex and Grok. (fix(server): a preview_open whose first load fails no longer leaves a hidden tab behind pingdotgg/t3code#29865, fix(server): preview tabs that fail during setup no longer leave their page open pingdotgg/t3code#29885, fix(server): html_preview no longer splits an emoji in a long console line pingdotgg/t3code#29844)
• Provider settings changed during a status refresh reverted to the old probe result or brought back removed providers. (fix(server): provider settings changed mid-refresh no longer revert to the old status pingdotgg/t3code#29894)
• Quitting waited on an unreachable telemetry endpoint (9.2 s in one case). It now gives up after 1 s. A larger WAL limit stops writer stalls behind long readers. (fix(server): quitting no longer waits on an unreachable telemetry endpoint pingdotgg/t3code#30033, fix(server): keep writes moving with a larger WAL limit pingdotgg/t3code#31804)
• An SSH device host reconnected after a single slow health probe and tore down active device forwards. (fix(server): SSH device host no longer reconnects on a single slow health probe pingdotgg/t3code#30159)

Source control

• One skip-worktree entry made checkpoint capture rehash every file and time out; slow forge CLIs also blocked checkpoints and turn starts. (fix(server): checkpoints no longer rehash every file when one entry is skip-worktree or assume-unchanged pingdotgg/t3code#23624) (fix(server): slow forge CLI calls no longer delay checkpoints and turn starts pingdotgg/t3code#28431)
• A failed git worktree add left its new branch behind, and forcing LC_ALL=C broke git hooks needing UTF-8. (fix(server): a failed worktree add no longer leaves its new branch behind pingdotgg/t3code#28373) (fix(server): git hooks keep the user's locale pingdotgg/t3code#27778)
• Reverting before the first commit left every checkpoint file staged. (fix(server): reverting files before the first commit no longer leaves them staged pingdotgg/t3code#28647)
• The Changes row could show hundreds of thousands of lines after the automatic branch rename. (fix(server): Changes totals no longer diff against a guessed base after a branch rename pingdotgg/t3code#26125)
• Squash- or rebase-merged branches still offered Push & create PR. (fix(server): squash-merged branches no longer offer push & create PR pingdotgg/t3code#28494)
• log.showSignature, color.ui=always and diff.suppressBlankEmpty corrupted turn diffs, changed files and generated commit and PR text. (fix(server): turn diffs keep signed commits' files under log.showSignature pingdotgg/t3code#29124) (fix(server): generated commit and PR text no longer reads colored git output pingdotgg/t3code#29126) (fix(server): generated commit and PR text ignores git signature output pingdotgg/t3code#29580) (fix(server): diffs keep blank context lines under diff.suppressBlankEmpty pingdotgg/t3code#29579)
• Review failed entirely on huge untracked listings, hid staged deletions paired as renames, and could not load nested repositories in large diffs. (fix(server): review keeps tracked changes when untracked files overflow the listing pingdotgg/t3code#29615) (fix(server): Uncommitted review keeps a staged deletion that git pairs into a rename pingdotgg/t3code#29571) (fix(server): review rows for nested repositories load in large diffs pingdotgg/t3code#29693)
• Upstream misreads made status fetch nonexistent remotes and write wrong merge bases; github.com:owner/repo remotes got no provider. (fix(server): an upstream shadowed by a local origin/<branch> branch keeps its real remote pingdotgg/t3code#29180) (fix(server): status no longer fetches a remote named after a local tracked branch pingdotgg/t3code#29670) (fix(source-control): remotes like github.com:owner/repo reach their host pingdotgg/t3code#29457)
• Branch lists stayed stale after outside changes or PR checkout. (fix(client-runtime): branch picker shows branches changed outside T3 Code pingdotgg/t3code#27438) (fix(client-runtime): checking out a pull request refreshes cached branch lists pingdotgg/t3code#29161)
• PR watches stopped after eight failed reads, and emptied worktree folders triggered endless failing PR lookups. (fix(server): keep PR watches active after host failures pingdotgg/t3code#29450) (fix(server): stop PR lookups in emptied worktree folders pingdotgg/t3code#24803)
• Older clients saving one source control token wiped all other hosts' tokens. (fix(shared): saving one source control token no longer drops the other hosts' tokens pingdotgg/t3code#29554)
• GitLab showed Not authenticated when glab's default host was signed out; Azure DevOps default-branch lookup always failed. (fix(gitlab): a signed-out default glab host no longer hides other signed-in hosts pingdotgg/t3code#27840) (fix(azure-devops): default-branch lookup no longer fails for missing --repository pingdotgg/t3code#29586)
• A publish whose first push failed kept offering Publish again. (fix(server): a publish whose first push fails still shows the new remote pingdotgg/t3code#29688)
• Git: core.safecrlf=true broke turn checkpoints and new project creation, and Git messages in the system language broke lock-retry detection. Both are handled. (fix(server): turn checkpoints keep LF files when core.safecrlf is true pingdotgg/t3code#29826, fix(server): new projects are created when core.safecrlf refuses LF files pingdotgg/t3code#29843, fix(server): git failures are read in English when macOS git follows the system language pingdotgg/t3code#32252)
• Diffs: submodule changes under diff.submodule=log, changes outside a subfolder under diff.relative, and untracked files outside a sparse cone were missing or broke review. All three now work. (fix(server): diffs keep submodule changes under diff.submodule=log pingdotgg/t3code#29852, fix(server): commits and PR text see changes outside a subfolder project under diff.relative pingdotgg/t3code#29879, fix(server): review diffs keep working with untracked files outside the sparse cone pingdotgg/t3code#29880)
• Renamed files in GitHub, GitLab and Azure DevOps diffs now show as renames, and hunk expansion on them works. (fix(source-control): renamed files in GitHub, GitLab and Azure DevOps diffs show as renames pingdotgg/t3code#29774)
• A branch tracking another local branch got that branch's PR linked and could settle when it merged. (fix(server): a branch tracking another local branch no longer shows that branch's PR pingdotgg/t3code#30563)
• Azure DevOps missed existing PRs when a fork had a same-named branch or the branch contained #. (fix(azure-devops): a fork's same-named branch no longer hides the branch's own pull request pingdotgg/t3code#29817, fix(azure-devops): existing pull requests are found for branches containing # pingdotgg/t3code#31928)
• PR watches now wake again when a push leaves the branch still conflicting. (fix(server): PR watches wake again when a push leaves the branch conflicting pingdotgg/t3code#29767)
• Rebase stack no longer conflicts after a lower GitHub layer is squash-merged. GitHub Enterprise PR URLs can be pasted to check out. (fix(github): Rebase stack no longer conflicts after a lower layer is squash-merged pingdotgg/t3code#29919, fix(github): Enterprise Server pull request URLs can be pasted to check out pingdotgg/t3code#29892)
• The PR list showed Approved after one review while GitHub still required more. (fix(github): keep review-required until required reviewers approve pingdotgg/t3code#32395)
• Publishing now falls back to HTTPS when SSH is refused, instead of leaving an SSH remote that broke every later fetch. (fix(server): published repos fall back to HTTPS when SSH is refused pingdotgg/t3code#30142)
• Review guides failed or timed out on the repository's own post-checkout hooks, such as git-lfs and husky. (fix(server): review guides no longer fail on the repository's checkout hooks pingdotgg/t3code#29907)
• GitLab review: bot comments are flagged, overview threads count as findings, and edited comments wake watchers. Outdated, file and image threads now show correctly. (fix(gitlab): bot authors are flagged as bots pingdotgg/t3code#30383, fix(gitlab): unresolved overview threads count as review findings pingdotgg/t3code#30397, fix(gitlab): edited comments wake PR watchers pingdotgg/t3code#30403, fix(gitlab): threads on changed code show as outdated pingdotgg/t3code#30423, fix(gitlab): file and image comments appear as review threads pingdotgg/t3code#30425)
• GitLab merge requests: the checks and review filters work, "Remove agent credits" applies, source branches can be deleted, labels can be edited, and glab mr accept is detected. (fix(gitlab): the checks and review list filters work pingdotgg/t3code#30433, fix(gitlab): merge messages drop agent credits pingdotgg/t3code#30441, fix(gitlab): merge requests can delete their source branch pingdotgg/t3code#30453, fix(gitlab): merge requests can edit their labels pingdotgg/t3code#30483, fix(gitlab): glab mr accept counts as a shell merge pingdotgg/t3code#32400)
• PR description checkboxes now save, and GitCafe attachments render instead of showing "Image unavailable". (fix(web,mobile): save pull request description checkbox changes pingdotgg/t3code#30704, fix(pr): GitCafe attachments render in pull request bodies pingdotgg/t3code#31741)
• PR generation no longer turns a later babysitting message into the title and body, and new independent worktrees no longer inherit the feature branch. (fix(server): keep PR generation focused on the change pingdotgg/t3code#31819)

216 smaller fixes are not listed individually; see the commit list for the full set.

Other notable changes

Performance: server startup and recovery

• Runtime, delegated and streaming recovery reads are scoped to owned rows, delivery records and active runs, with new partial indexes (migration 79); recovery reads are batched into one query and shutdown commits grouped 32 per transaction. (perf(server): bound runtime recovery reads by thread ownership pingdotgg/t3code#29429, perf(server): narrow delegated recovery reads to delivery records pingdotgg/t3code#29435, perf(server): seek live nodes for the subagent recovery probe pingdotgg/t3code#29644, perf(server): bound streaming recovery reads by active runs pingdotgg/t3code#30357, perf(server): index delegated recovery candidates pingdotgg/t3code#30359, perf(server): batch projection recovery reads into one query pingdotgg/t3code#31842, perf(server): batch shutdown recovery commits pingdotgg/t3code#31854)
• Hot SQLite queries now hit indexes: the unscoped agent event high-water, provider-thread reads in MCP calls, bounded message ordinals and linked task status. (perf(server): pin the index for the unscoped agent event high-water pingdotgg/t3code#29623, perf(server): provider-thread reads start from owned rows, not every node of the thread pingdotgg/t3code#31012, perf(server): bound ordinal recovery to selected messages pingdotgg/t3code#27495, perf(server): skip unused parent history in linked task status pingdotgg/t3code#27913)
• Agent awareness startup reads only activity fields instead of full thread shells. (perf(server): narrow agent awareness startup reads pingdotgg/t3code#30561)

Performance: memory and storage

• Events already applied by projections are pruned, so the event log no longer grows without bound. (perf(server): prune events the projections already cover pingdotgg/t3code#29806)
• Idle compaction and task cancellation read only the rows they need, addressing heap spikes up to 1 GB. (perf(server): idle compaction reads only the latest run, live work and newest usage pingdotgg/t3code#29648, perf(server): cancelling a task reads only the tasks and runs it uses pingdotgg/t3code#29652)
• The background service launcher uses a 31 KB bootstrap: 259 MiB to 66 MiB, 467 ms to 29 ms to start the server. (perf(server): background service launcher uses 75% less memory pingdotgg/t3code#29284)
• The shared headless browser closes after five idle minutes (about 517 MiB freed). (perf(server): the headless browser closes after five idle minutes (517 MiB → 1.6 MiB median) pingdotgg/t3code#30306)
• Short CLI commands such as t3 --version and t3 status no longer load the server and Claude SDK. (perf(cli): short commands like t3 --version no longer load the whole server pingdotgg/t3code#29127)

Performance: pull requests

• PR actions update clients from the host's reply, PR views paint from cached data on web, desktop and mobile, and the code tab derives its file model once per diff load. (perf(pr): actions update every client from the host's reply instead of re-reads pingdotgg/t3code#25761, perf(pr): pull requests paint from data already held, on web, desktop and mobile pingdotgg/t3code#27798, perf(web): the pull request code tab derives its file model once per diff load pingdotgg/t3code#27833)
• PR sync stops re-spawning git for settled closed/merged PRs and stops polling PRs closed over a day ago; background discovery no longer starves git status after a restart. (perf(server): settled PR lookups stop re-spawning git every sweep pingdotgg/t3code#29721, perf(server): PR sync stops reading pull requests closed over a day ago pingdotgg/t3code#30071, perf(server): background PR discovery no longer delays git status after a restart pingdotgg/t3code#32162)
• One slow host no longer delays other watched PRs (935 ms to 65 ms), cache invalidation stops waiting on other projects (1,163 ms to 0.12 ms), and later GitHub review-thread pages skip PR-wide fields. (perf(server): a slow host no longer delays other watched PRs' wakes (935 ms → 65 ms median) pingdotgg/t3code#30291, perf(server): PR cache invalidation no longer waits on other projects' reads (1,163 ms → 0.12 ms median) pingdotgg/t3code#30293, perf(server): GitHub activity reads skip PR-wide fields on later review-thread pages (8.9 s → 6.8 s median) pingdotgg/t3code#30294)

Performance: streaming and clients

• Live events are projected once for all subscribers, shell updates batch-read threads, snapshots skip serializing rows past the limit, and provider writes batch without a timer. (perf(server): each live event is projected once for all subscribers pingdotgg/t3code#30860, perf(server): shell updates read a burst of threads once pingdotgg/t3code#29101, perf(server): thread snapshots skip serializing a row past the row limit pingdotgg/t3code#29103, perf(server): batch queued provider writes without waiting pingdotgg/t3code#31656)
• Mobile on bad Wi-Fi: shell, thread and config streams keep 8 chunks in flight, and reconnects skip a 1 s wait per stream. (perf(mobile): faster thread sync, connects, and reconnects on bad wifi pingdotgg/t3code#28487)
• Long threads stream with about 70% less work-row derivation; question history, deferred work, inbox placement, visibility, message search and skill lookup skip redundant work. (perf(web): long threads stream with 70% less work-row derivation pingdotgg/t3code#29971, perf(client): streamed row updates no longer rescan question history pingdotgg/t3code#29105, perf(client-runtime): expanding deferred work skips an unused timeline rebuild pingdotgg/t3code#29114, perf(client): skip idle inbox placement serialization pingdotgg/t3code#27460, perf(shared): avoid redundant visibility work on status updates pingdotgg/t3code#28965, perf(shared): stop single-token message search at the best hit pingdotgg/t3code#28930, perf(web): reuse repeated inline skill lookups pingdotgg/t3code#29008, perf(shared): scan usage-limit support once per provider catalog pingdotgg/t3code#32179)
• PDF previews reuse one pdf.js worker instead of starting a new one per load. (perf(web): PDF previews reload without starting a new pdf.js worker pingdotgg/t3code#29626)
• Mobile Markdown, native diff and terminal toolbar skip obsolete or redundant work; the syntax highlighter is called through Nitro (up to 10x faster on Android) and avoids a thread-local lookup on iOS. (perf(mobile): assemble HTML replacements in one pass pingdotgg/t3code#25278, perf(mobile): skip obsolete queued iOS diff row decodes pingdotgg/t3code#25287, perf(mobile): skip unchanged terminal toolbar fade updates pingdotgg/t3code#25312, perf(mobile): skip canceled SVG parsing pingdotgg/t3code#25314, perf(mobile): skip obsolete queued full token decodes pingdotgg/t3code#25320, perf(mobile): avoid code row scans while dragging file paths pingdotgg/t3code#25484, perf(mobile): stop iOS syntax highlighting from looking up a thread-local on every lexer call pingdotgg/t3code#31187, perf(mobile): call the highlights lexer through Nitro, up to 10x faster calls on Android pingdotgg/t3code#31188)

Performance: providers and processes

• Claude sessions skip a redundant native naming request (about 1.1k input tokens each); Claude skill discovery resolves each repository root once. (perf(server): skip redundant claude session naming pingdotgg/t3code#28910, perf(server): Claude skill discovery resolves each repository root once pingdotgg/t3code#29757)
• ACP agents stop decoding output twice, OpenCode logs skip per-token deltas, and context handoff skips oversized history early. (perf(acp): ACP agents skip decoding output twice for unused diagnostics pingdotgg/t3code#29100, perf(opencode): provider event logs skip per-token reply deltas pingdotgg/t3code#29673, perf(server): skip oversized history during handoff selection pingdotgg/t3code#23821)
• Windows git commands no longer start a hidden conhost.exe; diff previews skip unused repository lookups; Linux uses /proc instead of lsof for port discovery and terminal process checks. (perf(server): Windows git reads no longer start a console host pingdotgg/t3code#19288, perf(server): loading a file's diff skips unused repository lookups pingdotgg/t3code#29115, perf(server): avoid lsof polling when Linux proc is usable pingdotgg/t3code#30011, perf(resource-monitor): Linux terminal process checks use a third of the CPU pingdotgg/t3code#30381)
• Packaged Linux desktop launches no longer wait on MIME helper registration. (perf(desktop): keep Linux MIME helpers off the startup path pingdotgg/t3code#29247)
• High-frequency spans are no longer traced (enrichment cache, live coalescer, port polling, thread batches, Cursor usage hash, background-work probe, usage scan files), so trace files keep more history. (perf(server): stop tracing project enrichment cache reads pingdotgg/t3code#29640, perf(server): stop tracing per-event live coalescer work pingdotgg/t3code#29758, perf(server): stop tracing routine port polling helpers pingdotgg/t3code#30678, perf(client-runtime): stop tracing streamed thread batches pingdotgg/t3code#30679, perf(cursor): stop tracing the per-event account usage hash pingdotgg/t3code#31017, perf(server): stop tracing the per-event background-work probe pingdotgg/t3code#31584, perf(server): stop tracing each transcript file in usage scans pingdotgg/t3code#31586)

Refactors

• Mobile workspace split: Android headers all go through AppBar, one <Inspector> column, pane bars draw their own sidebar toggle, Android's sidebar is the Home route, and inspector bars use AppBar. Documented in docs/internals/mobile-layout.md. (refactor(android): every header goes through AppBar, so the filter stays put pingdotgg/t3code#26741, refactor(mobile): one inspector column, declared with <Inspector> pingdotgg/t3code#27085, refactor(mobile): a pane's bar draws its own sidebar toggle pingdotgg/t3code#27086, refactor(mobile): Android's sidebar is the Home route in the sidebar column pingdotgg/t3code#27087, refactor(mobile): the inspector's bar is its pane's AppBar pingdotgg/t3code#27205, docs(mobile): the five layers of the mobile layout, with x-ray diagrams pingdotgg/t3code#27107)
• Crypto moves to Effect 4.1: jose replaced by effect/jose, HMAC and keys by effect/crypto, tokens signed through PayloadSigner, signing keys held in EnvironmentSigningKey/CloudMintSigner, and DPoP proofs shared in client-runtime. (refactor: replace jose with effect/jose pingdotgg/t3code#30474, refactor: move HMAC, key, and random work to effect/crypto pingdotgg/t3code#30501, refactor(server): sign server tokens through PayloadSigner pingdotgg/t3code#30523, refactor: hold relay signing keys in EnvironmentSigningKey and CloudMintSigner pingdotgg/t3code#30529, refactor(client-runtime): share DPoP proof creation across web and mobile pingdotgg/t3code#30540)
• Effect error and env hygiene enforced as errors: Schema.TaggedError everywhere, Effect.try calls map to typed errors, and env reads go through Config/HostProcess.Environment. (refactor: errors are Schema.TaggedError, not Data.TaggedError or native Error pingdotgg/t3code#31216, refactor: Effect.try calls map failures to typed errors pingdotgg/t3code#31217, refactor: Effect code reads env through HostProcess.Environment pingdotgg/t3code#31218)
• ProviderRegistry.invalidateModelCaches takes over model cache invalidation from the ws.ts handler. (refactor(server): provider registry owns explicit model cache invalidation pingdotgg/t3code#19599)

Build and dependencies

• Effect upgraded from 4.0.5 to 4.1.2 and alchemy to beta.85, with fixes for X-Forwarded-Proto handling behind TLS proxies and the PR cache key format. (chore(deps): upgrade Effect to 4.1.2 and alchemy to beta.85 pingdotgg/t3code#26833)
• Typecheck runs on effect-tsgo tsrs from @effect/tsgo, replacing @tsc-rs/typescript; mobile now runs Effect rules and clean suggestion rules are locked as errors. (build: typecheck with tsrs and Effect's rules through @effect/tsgo pingdotgg/t3code#31028, build: run Effect rules on mobile and lock in clean suggestion rules pingdotgg/t3code#31111)
• vpr sync:repos uses shallow clones, so foreign upstream tags no longer break fetches; .repos/effect-smol is renamed .repos/effect and synced to 4.1.2. (chore(repos): sync reference repos from shallow clones pingdotgg/t3code#30472, chore(repos): sync Effect 4.1.2 and Alchemy beta.85, rename effect-smol pingdotgg/t3code#30481)
• knip:check runs its two passes in parallel (34 s to 26 s), and the built web boot check moves from Test Web to Build and Typecheck. (perf(dev): knip:check runs its two passes side by side (34 s → 26 s median on 4 CPUs) pingdotgg/t3code#30737, perf(ci): boot the built web client in Build and Typecheck, not Test Web (about 22 s off the longest job) pingdotgg/t3code#30752)
• CI and release speedups: npm publish skips the workspace install, stacked PRs stop saving pnpm stores, macOS arm64 stops compressing an unsaveable store, bundle jobs skip an unused Linux helper, uploads skip recompression, CLI notarization runs alongside the desktop build, and the nightly APK fetch runs in the background. (ci(release): npm publish no longer checks out and installs the workspace pingdotgg/t3code#31936, ci: stacked PRs stop evicting the shared pnpm cache pingdotgg/t3code#31937, ci(release): macOS arm64 stops compressing a pnpm store it cannot save pingdotgg/t3code#31955, ci(release): JS bundle jobs stop building an unused Linux helper pingdotgg/t3code#31941, perf(ci): release uploads stop recompressing installers and CLI archives pingdotgg/t3code#31942, perf(release): macOS CLI notarization no longer blocks the desktop build pingdotgg/t3code#31945, perf(release): fetch the nightly Android APK in a background step pingdotgg/t3code#31949)
• Desktop shutdown phases are traced. (chore(desktop): trace shutdown phases pingdotgg/t3code#31850)

Reverts

• Reverted the hover timestamp change to the chat timeline (fix(web): finished replies keep their hover timestamp while commands run pingdotgg/t3code#28610), pending UI review. (revert(web): undo hover timestamp change from #28610 pingdotgg/t3code#29680)
• Reverted "terminal controls no longer cover the first line" (fix(web): terminal controls no longer cover the first line pingdotgg/t3code#23373). (Revert "fix(web): terminal controls no longer cover the first line" pingdotgg/t3code#30493)
• Working threads stay in the Working shelf when their environment disconnects, reverting fix(web): threads on an unreachable environment no longer hide in the Working shelf pingdotgg/t3code#26195. (revert(web): working threads stay in the Working shelf when their environment disconnects pingdotgg/t3code#31269)

Docs

• New user guide for secret providers and secret requests (docs/user/secrets.md); Linux desktop install steps; managed-policy guidance on pinning absolute binaryPaths and on old background services' LAN access; recurring-task MCP tools documented. (docs(user): explain secret providers and secret requests pingdotgg/t3code#31654, docs: explain Linux desktop installation pingdotgg/t3code#30819, docs: pin an absolute binary path under a permission cap pingdotgg/t3code#29916, docs: scope managed-policy LAN note to old background services pingdotgg/t3code#30900, docs(mcp): document existing recurring-task tools pingdotgg/t3code#23199)

Merge details

Commits merged: 677 upstream commits (origin/main..upstream/main, up to dff0b1159b), 667 of them from upstream PRs. Merge commit on sync/upstream-2026-11-08.

Conflicts (25 files) and how each was resolved

Server

• apps/server/src/bin.ts: upstream moved the CLI fast paths into binMain.ts behind a new service launcher. Took upstream's bin.ts and moved the fork's skills-cli fast path into binMain.ts.
• apps/server/src/mcp/McpHttpServer.ts: upstream's layerMcpTransport now takes the tool registrations and adds layerInProcessMcpServer. Kept the fork's Docs, AI PM, MCP servers, skill trash and skill library toolkits and the /mcp/upstream/:serverId route; they are now passed into layerMcpTransport(...) with upstream's tools, and the upstream route is merged beside it.
• apps/server/src/ws.ts: upstream added a settings-client argument to layerWsRpc; applied it to the fork's chain that merges the fork RPC layers. Upstream also renamed the request URL variable, so the MCP OAuth origin now reads url.value.origin.
• apps/server/src/serverSettings.ts: kept the fork's MCP secret redaction inside upstream's new redactServerSettingsForClient(settings, client) signature, and the fork's patch-builder form of updateAndPersistSettings inside upstream's echoed-secret-reference restore.
• apps/server/src/orchestration-v2/Adapters/CodexAdapterV2.ts: took upstream's archived-thread retry for thread/fork, with the fork's effectful threadRuntimeParams (user MCP servers) in the shared fork request.
• apps/server/src/provider/agentContextBudget.json: re-measured. New values: Claude append 7064, Codex context 8790, MCP tool list 51163 bytes.
• Tests (serverSettings.test.ts, ProviderSessionManager.test.ts, runtimeLayer.test.ts, mcp/toolkits/project/handlers.test.ts): kept both sides' tests and imports; fork redaction tests pass { secretReferences: true }.

Packages

• packages/contracts/src/settings.ts: kept the fork's MCP server and disabled-skills settings beside upstream's speech settings, and both scope rules (fork: project MCP servers need provider scope; upstream: removing a secret provider needs settings scope).
• packages/provider-core/src/server/orchestrationInstructions.ts: combined the secret line. Upstream's wording ("A login, token, PIN or pairing code only the user can give... Not for access you have") plus the fork's secretRef, delivery: "file" and /secret NAME button guidance. Kept the fork's thread-link fallback.
• packages/provider-opencode/src/server/v2/adapter.ts: upstream replaced Crypto with Digest; ported the fork's upstream-hub and user MCP prefix helpers to Digest.sha256.
• packages/shared/src/toolOutput.ts: kept the fork's docOpenFromToolItem and upstream's previewRecordingIdFromToolItem, and both imports.

Web

• ChatView.tsx: upstream wrapped the composer in a new container and re-indented it; took upstream's layout and re-added the fork's skillsProjectId prop.
• Sidebar.tsx: kept the fork's folder-aware project-scope rows (checkbox plus favicon) over upstream's ProjectScopeRowIcon, which the fork removed. Applied upstream's legacySidebarEnabled condition to the new-thread hint while keeping the fork's single-project-scope check.
• shortcuts/chatRouteCommands.ts: took upstream's legacySidebarEnabled-only condition; kept settings for the fork's scoped new-thread lookup.
• chat/ChatComposer.tsx, composer-logic.ts: kept the fork's /secret command and upstream's new /clear command.
• settings/settingsSearch.ts: kept the fork's "Usage limit failover" entry; dropped "Cursor account usage" because upstream removed it (fix(cursor): use the SDK account for usage data pingdotgg/t3code#32448).
• reopenClosedView.ts and its test: kept both imports; kept the fork's AI PM restore test and took upstream's rewritten file-tab tests.
• routeTree.gen.ts: regenerated with the TanStack router generator so the fork's /ai-pm, settings/tools, settings/mcp-servers routes and upstream's new routes are all present.

Mobile

• ThreadHeader.tsx, ThreadGitControls.tsx: upstream rewrote the thread header as one AppBar on both platforms (refactor(mobile): the inspector's bar is its pane's AppBar pingdotgg/t3code#27205 and the mobile AppBar refactors). Took upstream's versions and re-added the fork's Docs button as an AppBar action shown when onOpenDocsCloud is set.

Changes needed beyond the conflict markers

• Effect crypto split. Upstream's Effect bump removed effect/Crypto. Ported six fork server modules: random IDs and bytes now use SecureRandom (McpServerOAuth, McpServerRegistry, DocCommentsService, SkillTrash), hashes use Digest (DocCommentDelivery, SkillLibrary). Fork tests now provide NodeCrypto.layer next to NodeServices.layer.
• Mobile settings. Upstream removed SettingsEnvironmentFilterHeader and SETTINGS_PAGE_OPTIONS. The fork's MCP servers settings screen now uses useSettingsEnvironmentMenu() and settingsPage("MCP servers").
• Tests adapted to upstream changes. The new upstream ws publish test serves WsRpcGroup.omit(...FORK_RPC_METHODS) (exported from ws.ts), as the fork's other ws tests do. The fork's Claude user-tools test stub gained the four new query-session methods and uses random: instead of crypto:. The fork docs-tool tests use layerInProcessMcpServer.
• Lint fixes needed for the pre-commit hook. These were already failing on the fork's main: shortened four over-long comments (SkillLibrary.ts, SkillTrash.ts, DocCommentDelivery.ts), removed nine per-test timeouts in SkillLibrary.test.ts (the project timeout is already 120 s), and added two processEnvInEffect exemptions in ChatCommandRunner.test.ts.

Judgment calls worth a look

• Fork bug fixed: t3_project_folders_list (added in feat: group sidebar projects into folders #92) is read-only but was missing from CLAUDE_READ_ONLY_T3_MCP_ALLOWED_TOOLS, so the allowlist test failed. Added it.
• Fork test fixed: ChatMarkdown.browser.test.tsx expected onRunShellCommand("echo hello"), but the fork's run-code-block feature passes "terminal" as the target. This also failed on the fork's main. Updated the assertion.
• The orchestration instructions keep the fork's [title](t3-thread://v1/<id>) fallback, which upstream dropped in favour of always using link.

Verification

• node scripts/fork-brand.ts --check: passes (branding applies cleanly to 202 files).
• vp run typecheck: passes in apps/server, apps/web, apps/mobile, packages/contracts, packages/shared, packages/provider-core, packages/provider-opencode, packages/client-runtime.
• Fork test files (86 files across server, web, mobile, client-runtime, providers, shared) plus tests next to conflicted files: everything passes except:
  • ServerEnvironment.test.ts "publishes proven install ownership": a known upstream failure on macOS.
  • OpenCode2OrchestratorV2.integration.test.ts: 6 tests fail with a replay mismatch (event.subscribe sent before session.create). The same 6 fail on the fork's current main (8a16b90e6e), and all pass on pristine upstream, so this predates the merge and comes from the fork's OpenCode MCP changes. Not fixed here.
  • apps/desktop update tests could not run: Electron is not installed in this worktree. This is an environment issue.
• Pre-commit hook (format, lint, knip) passes on the merge commit.

Not done

• vp run check:changed and repo-wide checks were not run. Against main, the diff covers the whole 677-commit merge.
• No dev server or real-client pass was run.

Model and harness: Claude Opus 5.5 (claude-opus-5-5) in Claude Code, run from T3 Code.

🤖 Generated with Claude Code