[bk-agent-01]

Refs: no Linear ticket (requested in the T3 session by tushar; promotion asked by his Manager session after the stage smoke test).

What this does

This PR promotes the full stage to bkmain (production bkt3). It carries 2 PRs, and both are upstream merges from this session:

• #331: upstream main to dac3437d94, including upstream's idle-thread compaction (feat(server): compact idle Claude threads before the prompt cache expires (beta) pingdotgg/t3code#21682), and the member-scope security fix.
• #336: upstream main to 163bdeaa11 (68 more commits, including upstream's test pruning and webhook dedupe).

bkmain had no content of its own beyond earlier promotion merges. Merging it into this branch gave no conflicts and no file changes.

Merging deploys bkt3 and restarts t3-nextbkt3. That stops every live session on bkt3. Merge at a quiet time.

New database migrations on bkt3: fork ids 1054–1059 (upstream 061, 062, 064, 065, 066 and 067). Upstream 063 stays unregistered, so old-thread history is kept. Stage ran the same migrations on a copy of the bkt3 database without errors.

Idle compaction is off by default. Turn it on in Settings → "Compact idle threads".

How I tested

Stagebkt3 runs this exact code: stage at 6586cce8d2, server version 0.1.2-nightly.20261021.3457.upstream.g163bdeaa119f. I ran these smoke tests on 2026-10-21 between 08:21 and 09:45 UTC:

Check	Result
Deploy	~/.t3/stage-dev/deployed-sha = 6586cce8d2; t3-stage active since 08:21; 0 ERROR lines in the server log since then
Health	/.well-known/t3/environment 200; https://stagebkt3.dev.beknown.live/ 200
Migrations	1054–1059 applied; the V1 history tables, plan reviews, thread comments, session webhooks and the new webhook-dedupe tables are all present
Manager MCP tools	/mcp initialize OK; 129 tools (t3_whoami, t3_inbox, t3_start_session, t3_session_brief, t3_schedule …)
New session	t3_start_session (Claude Sonnet, scratch project) answered "SMOKE OK"
Claude accounts	The new thread was placed on account audit (Auto). The limits stream (subscribeClaudeAccounts) returned all profiles with 5-hour and weekly usage, eligibility and reasons
Callbacks (webhook)	A webhook schedule into the session: the POST returned 202 with a delivery id; the prompt arrived wrapped as untrusted data; the agent replied "WEBHOOK OK"
Toolyard / session webhooks	Both are refused for an operator key without a signed-in user ("verified_identity_required" / "authenticated user … required"). These are the fork's intended access checks; a signed-in user must test the full Toolyard flow
Idle compaction	A Claude thread with 233,895 context tokens and a 1-hour cache was left idle. At 09:34:01, exactly 2 minutes before the cache expiry at 09:36:01, the server sent /compact by itself. The run finished at 09:34:17, and the context dropped to 18,172 tokens

Cleanup: the temporary operator key and the compaction setting were removed from stage settings.json (the file matches the pre-test backup, and the key returns 401). The smoke auth session was revoked, the webhook schedule deleted and both smoke sessions archived.

CI: every check was green on #331 (4e457c5a49) and #336 (ed0da715fc). "Mobile Native Static Analysis" waits for a macOS runner that this fork does not have.

🤖 Generated with Claude Code