[adampeterhiggins]

What's in this sync

Features: agents can request secrets through request_secret; Claude tool calls can render MCP Apps; repositories can optionally clone into ghq-style host/owner/repo folders.

Fixes: mobile gets more reliable keyboard, autocorrect, media previews, menus and Claude account controls. Web fixes Markdown editing, lineage cleanup, PR checkbox persistence, worktree setup status and touch navigation. Server fixes preserve thread history after stopped runs, recover tunnel connections and slow config links, and protect sibling wakeups.

Provider and internal changes: Codex sharing-limit recovery, Antigravity silent-prompt timeouts, shared Claude compaction logic, Effect crypto/signing and typed-error migrations, and the tsgo/tsrs toolchain update.

Included upstream commits (also covers the remaining test, documentation and build changes):

• 337c585 fix(mobile): composer keeps the keyboard when a queued edit ends (fix(mobile): composer keeps the keyboard when a queued edit ends pingdotgg/t3code#31317)
• 8a14762 fix(mobile): one aligned notice for ChatGPT sharing limits (fix(mobile): one aligned notice for ChatGPT sharing limits pingdotgg/t3code#31277)
• 01a8db0 fix(server): refresh divergence after a merged branch ref changes (fix(server): refresh divergence after a merged branch ref changes pingdotgg/t3code#31342)
• 67eebac fix(server): a stopped run no longer shrinks thread history to one row (fix(server): a stopped run no longer shrinks thread history to one row pingdotgg/t3code#31266)
• 298cb24 refactor: errors are Schema.TaggedError, not Data.TaggedError or native Error (refactor: errors are Schema.TaggedError, not Data.TaggedError or native Error pingdotgg/t3code#31216)
• 20e92ff fix(web): sidebar project filter rows line up and stay still on hover (fix(web): sidebar project filter rows line up and stay still on hover pingdotgg/t3code#29639)
• 5a90658 refactor: Effect.try calls map failures to typed errors (refactor: Effect.try calls map failures to typed errors pingdotgg/t3code#31217)
• e313a12 refactor: Effect code reads env through HostProcess.Environment (refactor: Effect code reads env through HostProcess.Environment pingdotgg/t3code#31218)
• 3470164 revert(web): working threads stay in the Working shelf when their environment disconnects (revert(web): working threads stay in the Working shelf when their environment disconnects pingdotgg/t3code#31269)
• 935818e fix(codex): sharing usage limits offer the existing recovery options (fix(codex): sharing usage limits offer the existing recovery options pingdotgg/t3code#25341)
• 3f905ca fix(acp): time out silent Antigravity prompts (fix(acp): time out silent Antigravity prompts pingdotgg/t3code#30377)
• 90f0158 fix(server): attribute usage-limit auto-resume to T3 Code (fix(server): attribute usage-limit auto-resume to T3 Code pingdotgg/t3code#29838)
• 4dff7de fix(server): preserve sibling wakeups when interrupting a completion wake (fix(server): preserve sibling wakeups when interrupting a completion wake pingdotgg/t3code#28204)
• 9bfecb8 fix(web): deleted forks no longer remain in Lineage (fix(web): deleted forks no longer remain in Lineage pingdotgg/t3code#29000)
• c15e49a fix: keep older pending questions answerable (fix: keep older pending questions answerable pingdotgg/t3code#26435)
• d520d5b fix(web): show saved service access with Local environment off (fix(web): show saved service access with Local environment off pingdotgg/t3code#26464)
• 754e1d1 fix(mobile): compact stale Claude threads before sending (fix(mobile): compact stale Claude threads before sending pingdotgg/t3code#27935)
• c192c43 fix(server): restart T3 Connect's tunnel client when Cloudflare drops it (fix(server): restart T3 Connect's tunnel client when Cloudflare drops it pingdotgg/t3code#24946)
• b9522c8 fix(client): a big server config on a slow link no longer drops the connection in a loop (fix(client): a big server config on a slow link no longer drops the connection in a loop pingdotgg/t3code#23758)
• 7384cf2 fix(web,mobile): save pull request description checkbox changes (fix(web,mobile): save pull request description checkbox changes pingdotgg/t3code#30704)
• e4e3657 fix(mobile): configure another Claude account from Providers (fix(mobile): configure another Claude account from Providers pingdotgg/t3code#28928)
• af54fe2 fix(web): make styled composer Markdown markers editable (fix(web): make styled composer Markdown markers editable pingdotgg/t3code#30421)
• 8a65c00 fix(devices): explain Windows SSH host failures (fix(devices): explain Windows SSH host failures pingdotgg/t3code#30941)
• 707dcda feat: optionally clone repos into ghq-style // folders (feat: optionally clone repos into ghq-style <host>/<owner>/<repo> folders pingdotgg/t3code#24904)
• 70738cb fix(mobile): iOS image previews open without waiting for the gallery (fix(mobile): iOS image previews open without waiting for the gallery pingdotgg/t3code#29044)
• b28bb8f fix(mobile): use H.264 for iOS previews and keep Close reachable (fix(mobile): use H.264 for iOS previews and keep Close reachable pingdotgg/t3code#28622)
• 199cb5b fix(web): show the comparison base beside Changes totals (fix(web): show the comparison base beside Changes totals pingdotgg/t3code#30085)
• c9d29e0 fix(mobile): keep iOS thread menus short enough for drag selection (fix(mobile): keep iOS thread menus short enough for drag selection pingdotgg/t3code#30944)
• b3041a8 fix(web): show Setting up during worktree setup (fix(web): show Setting up during worktree setup pingdotgg/t3code#28832)
• cda8842 fix(mobile): preserve autocorrect in custom question answers (fix(mobile): preserve autocorrect in custom question answers pingdotgg/t3code#30744)
• c94ad22 fix(mobile): pinch wide images from anywhere in the Android viewer (fix(mobile): pinch wide images from anywhere in the Android viewer pingdotgg/t3code#30929)
• c1f91b5 fix(web): keep message navigation visible on touch when there is room (fix(web): keep message navigation visible on touch when there is room pingdotgg/t3code#26806)
• 2ef6435 fix(server): idle agent tabs free a slot when the server's 32-tab browser limit is full (fix(server): idle agent tabs free a slot when the server's 32-tab browser limit is full pingdotgg/t3code#24186)
• 299f0db fix(mobile): keep iOS composer empty after sending an autocorrected word (fix(mobile): keep iOS composer empty after sending an autocorrected word pingdotgg/t3code#30308)
• 4b87a45 build: run Effect rules on mobile and lock in clean suggestion rules (build: run Effect rules on mobile and lock in clean suggestion rules pingdotgg/t3code#31111)
• a21d788 feat(server): render MCP Apps from Claude tool calls (feat(server): render MCP Apps from Claude tool calls pingdotgg/t3code#29803)
• df70f50 docs: scope managed-policy LAN note to old background services (docs: scope managed-policy LAN note to old background services pingdotgg/t3code#30900)
• 7f6f47b test(web): PDF preview tests wait on pdf.js loads and stop timing out (test(web): PDF preview tests wait on pdf.js loads and stop timing out pingdotgg/t3code#31104)
• 62db662 test(server): AgentSessionScanner blocked-repo test no longer races the git-read timeout (test(server): AgentSessionScanner blocked-repo test no longer races the git-read timeout pingdotgg/t3code#30554)
• 8ab024f fix(client-runtime): a thread keeps syncing after a stream defect (fix(client-runtime): a thread keeps syncing after a stream defect pingdotgg/t3code#31071)
• a07be97 refactor(client-runtime): share DPoP proof creation across web and mobile (refactor(client-runtime): share DPoP proof creation across web and mobile pingdotgg/t3code#30540)
• 33ba7bf refactor: hold relay signing keys in EnvironmentSigningKey and CloudMintSigner (refactor: hold relay signing keys in EnvironmentSigningKey and CloudMintSigner pingdotgg/t3code#30529)
• 16fc3cc refactor(server): sign server tokens through PayloadSigner (refactor(server): sign server tokens through PayloadSigner pingdotgg/t3code#30523)
• fb99a5e refactor: move HMAC, key, and random work to effect/crypto (refactor: move HMAC, key, and random work to effect/crypto pingdotgg/t3code#30501)
• 14e8f39 refactor: replace jose with effect/jose (refactor: replace jose with effect/jose pingdotgg/t3code#30474)
• 95e53a5 build: typecheck with tsrs and Effect's rules through @effect/tsgo (build: typecheck with tsrs and Effect's rules through @effect/tsgo pingdotgg/t3code#31028)
• dd5f98e fix(relay): use released drizzle rc.5 and fail installs on unmet peers (fix(relay): use released drizzle rc.5 and fail installs on unmet peers pingdotgg/t3code#31016)
• 9e85538 feat(server): agents ask for secrets through request_secret instead of chat (feat(server): agents ask for secrets through request_secret instead of chat pingdotgg/t3code#30257)
• 7f782b4 test(evals): measure how agents get secrets only the user has (test(evals): measure how agents get secrets only the user has pingdotgg/t3code#30256)

Discord announcements were not used: the channel returned only October 20 messages with no matching crossposts.

Stack and history

Parent: #550. This PR adds only newer upstream commits relative to that parent. Merge the parent first.

Range: 1a0c3e4619e1de3c7fece7211503001219ab17e5..337c5858c33bc7f8f6dfd391a2c279fa0f7e4d17 (49 upstream commits).

Conflict resolutions

Preserve fork provider, thread-menu, recovery and context-window behavior while adopting upstream interfaces and shared helpers. Preserve browser cancellation/deadline protections alongside upstream typed errors. Keep fork background-task retention alongside sibling-wakeup filtering. Repair the auto-merged lockfile with vp i --fix-lockfile.

Web conflict resolutions

• Editor: upstream editable Markdown source replaces decorative marker widgets; keep fork skill reconciliation, literal text mode, color codes, loading links, emphasis extensions, imported context, newline chip conversion, and all fork browser cases. Add upstream source-editing browser cases. No fork feature moved by this upstream change; source editing is new upstream code.
• Sidebar: preserve the fork split into sidebar/partitionThreads.ts and SidebarFilterMenu.tsx, tab groups, filters/exclusions, attention inbox, permission guards and row organization. Apply upstream disconnected Working-shelf revert in partitionThreads.ts and preparing status in shared SidebarTopStatus.tsx. Apply project-row fixed action slots in SidebarFilterMenu.tsx.
• Checked fork split commits: 701865a (sidebar fork features isolated), 9eaf2ec (sidebar organization isolated), 92d6ffa (fork rows in upstream files), 5843b00 (restored fork controls), 2022b89 and 3ab1d7e (excluded filter pills/options). Their partitioning, filters, tabs, and row callers remain in use.
• Relationships: retain fork agent toolbar/activity/workflow controls and use upstream title queries to remove deleted lineage rows; fresh titles used in existing fork row renderer.
• Recovery: preserve fork resume-now, account/model continuation and scheduled reset text while adding upstream ChatGPT-specific notice and admin/usage actions.
• Pull request summary: retain quote source wrapper and quote actions with upstream optimistic description edits and task-checkbox saving.
• Settings: union ghq clone layout with fork context repository owners/directory controls and search entries.
• Auth: delete upstream-unused pairing/session helpers; retain fork createServerAgentAccessToken with live AgentAccessSettings caller.
• Context types/callers: use shared client-runtime context-window helpers, preserving fork fallback (parent ports implementation).

Additional integration fixes preserve file-path paste conversion without an import callback, propagate preparing status into hidden tab summaries, cancel browser evaluation cleanup on abort, and adapt fork code to upstream Effect rules. The browser cleanup regression is covered by 22 fake CDP tests; no browser launched.

Verification

Passed: web, server, desktop, mobile, contracts and client-runtime typechecks; focused server tests (69 scanner/budget plus 449 affected fork suites), web unit tests (239), and context/mobile tests (109, with 97 repeated in narrower runs). Focused formatting/lint and merge precommit format/lint/knip passed.

Changed-files validation ran against the exact parent head. All format/lint/knip, unused-patch, GraphQL, 40 affected-package typechecks and React compiler (144 files; 149 assertions) checks passed on the corrected tree. The initial nonbrowser test pass ran 288 suites with 7,202 passing tests. Reported failures were resolved and rerun: browser read cleanup (22 fake-protocol cases), desktop dependency-install race (26 tests), mobile PR-diff test runtime isolation (6 tests), and delegated usage-limit recovery clock/grace alignment (full suite: 40 passed). No full broad rerun was performed; affected failures were rerun at their lowest layer. Its browser tests are excluded via a scratch copy of the runner to honor the no-browser-automation restriction. Browser/device/runtime verification was not performed.

The secrets model eval was attempted but could not start: the eval's configured vibeproxy provider is missing (KeyError: vibeproxy).

Merge with Create a merge commit. It keeps upstream history and the merge base for the next sync.

Model/harness: GPT-6.1 Sol through Codex in T3 Code.