chore(sync): merge 274 upstream commits through 2026-11-10 by shuv1337 · Pull Request #429 · shuv1337/s2code

shuv1337 · 2026-11-10T09:23:48Z

Summary

Merge all 274 upstream commits through pingdotgg/t3code@e4d86abca9 into fork main 2d23b39403, preserving fork history and features. Ready for review: CI Full and required PR/Windows checks are green. No release, app installation, or upstream write was performed.

Plan executed

Pin both heads, inspect the 95-path single-merge conflict preview and protected fork functionality.
Merge in history-preserving milestones: nightly v0.1.8-nightly.20261107.4340 (58 commits, abf67b5ad7), v0.1.8 (156, 6ca41d664e), then pinned upstream main (60, 5064a07f11).
Resolve conflicts by combining upstream behavior with fork identity, orchestration and provider integrations; regenerate dependencies and verify.
Publish only this fork branch and this PR; no merge/release/deploy/app install.

Upstream highlights

Orchestration/delegation completion and wake handling, approvals, worktree allocation, history/transport and persistent usage-limit resume.
Pi model capabilities and atomic MCP extension updates; OpenCode runtime/usage fixes; Cursor account usage; Claude SDK, Codex, ACP, Antigravity and Muse updates.
New Welcome flow, model selection persistence, scheduled tasks, diff/search, accessibility and rendering improvements.
Mobile native/Expo updates, Android PDF/input/feed fixes, iOS column/terminal/layout work and compressed sockets.
CLI install/uninstall/PATH integration, desktop startup/download fixes, release tooling and dependency updates.

Protected fork behavior

orchestration-v2, provider pools and spent-instance failover remain.
Shared MCP service, t3_mcp_server_* tools and permissions (feat(mcp): let agents manage shared MCP servers #428), and tracked local cross-project delegation (delegate_task: run tracked tasks in another local project #427) remain.
Pi, Cursor CLI/Keychain/SDK retry patch, OpenCode Go usage, worktree/remote delegation and environment tooling remain.
Fork identity/homes/aliases/update sources, voice/GPT-Live, mobile catalog persistence, nightly-only releases and context-budget CI remain.
Focused protected-feature verification: 224 tests / 9 files passed, covering shared MCP, orchestrator/project/worktree tools, local/remote delegation, completion delivery and the context budget.

Review fixes — head `7a29f96ab6`

218444d59e: port the upstream installer-command cases to fork variables, ownership markers, aliases and messages. Every shell fixture now sets a temporary HOME; under Vitest the installer refuses a HOME outside the temporary directory. The command regression also runs on macOS.
643eeae992: disable the dev proxy under Vitest, even with agent server variables inherited. Added a failing-before/passing-after config regression; both ChatView.browser.test.tsx and ChatView.modelPick.browser.test.tsx pass with all three agent port variables present (safe port 9, not the live server).
7a29f96ab6: restore refusal to rewrite a service unit with no home and the fork-specific restart message. Extended the existing service test; it fails before and passes after the fix.
PASS: full typecheck, 42/42 tasks; final-delta check:changed (format, lint, knip, GraphQL, affected typechecks and 86 tests). All three commits passed pre-commit checks.
PASS: sandboxed full scripts suite on shuvbot: 50 files, 492 tests passed / 17 skipped. The five PowerShell installer timeouts reported during review are pre-existing on fork main, not merge-induced; they did not recur in this run.
Full web suite completed every file with agent variables present in all three attempts. The first passed 543/544 files and 5,796/5,799 tests; only src/lib/runtime.test.ts failed under concurrent validation load (two timeouts and their cascading export-count failure), and its isolated recheck passes all three tests. The two intermittent telemetry failures in the earlier sync run are the same load-related, pre-existing flake, not merge-induced. A two-worker attempt then failed three browser cases (CommandPalette, ExpandedImageDialog, AcpSessionManagementSection). The final default-worker attempt, after the server suite ended, passed 543/544 files and 5,798/5,799 tests, with only DiffFilePathCopyButton failing; that case passes a focused recheck. ExpandedImageDialog still failed the focused recheck. Both requested ChatView cases pass again with agent variables present. These local browser failures remain follow-up work, not a claim of locally green web validation; the complete CI Test Web job passes.
PASS: complete local server suite: 509 files, 7,401 tests passed / 8 skipped. The service regression verifies restart is skipped, install is refused, unit contents are unchanged, and no service-manager commands run for a unit without a home.
All validation commands use a fresh temporary HOME, XDG directories and fork/upstream home variables; scripts tests never receive the live install paths. On shuvbot, readlink -f ~/.local/bin/s2code-nightly before and after the runs remains /Users/shuv/.shuv2code-v2-nightly/runtime/versions/0.1.7-nightly.20261107.112/t3.

Earlier sync validation — head `068e8f65b0`

PASS: full typecheck (42/42 tasks), full lint (warnings only), knip, and the final desktop/server/web build (5/5 tasks). Built CLI --help was also smoke-tested against an isolated temporary home.
PASS: all 51 Node workflow/release-script tests; local actionlint. Fixed the initial PR CI failure by declaring the two retained upstream-only Blacksmith runner labels; fork job gating remains unchanged.
CORRECTED: the earlier “scripts suite passes” claim was not valid cross-platform evidence. The macOS run skipped the upstream-only Linux command cases; CI run 42792316299 failed those cases, and review found they could touch the live install because the fork ignores T3CODE_* installer settings. The sandboxed, ported suite result is reported above.
PASS: mobile, desktop, contracts, client runtime, Pi, Cursor, SSH, relay and the other completed workspace suites. OpenCode's full recheck passed 177 tests; FX's passed 19.
PASS: 224 protected-feature tests / 9 files covering shared MCP, orchestration/delegation/worktree/remote paths and the context budget.
PASS: all migration suites selected under apps/server/src/persistence/Migrations: 19 files / 33 tests. Migration 26's existing regression exposed JSON arrays becoming strings on this SQLite version; explicit json(...) at the scalar-subquery boundaries fixes it. No migration was replayed against live state.
PASS: provider/auth recheck: 61 tests; the fork's approval redirect now falls back to its local page when no hosted URL is configured (failing-before/passing-after coverage). Fixed canonical-path/case-sensitive fixture assumptions and the missing VoiceProvider wrapper without changing those provider behaviors.
Earlier full web attempt remained RED: 542/543 files and 5,796/5,798 tests passed. The remaining runtime-telemetry test timed out and its following case saw two exports; the isolated runtime recheck passes. All browser cases passed on that full attempt. This is not a fully green web suite.
Full local server run completed: 503 files / 7,395 tests passed; 6 files / 6 tests failed; 8 tests were skipped. All six failures (Git path/URL fixtures, Antigravity/Claude fixture paths, approval routing and migration 26) were fixed and pass focused rechecks. A complete server rerun on the final head is delegated to CI, not claimed locally green. The workspace sweep attempted all 36 test-bearing packages; 31 passed initially, and OpenCode, FX and scripts now also pass full package rechecks.
Full-scope check:changed origin/main did not pass: its 442-file test step hit the 900-second runner limit, and it saw a duplicate-export knip issue before that was fixed. Subsequent knip and final-delta check:changed runs pass, including formatter, lint, GraphQL, affected typechecks and tests. These do not replace the timed-out full-scope result.
Paid model evals, interactive real-client/native verification and app installs were not run. Offline eval tests and mcp-tool-use --context ran; no paid-model score is claimed.

CI

Previous full-suite run https://github.com/shuv1337/s2code/actions/runs/42792316299 failed its Test job on the merge-induced installer-command regression; its Test Web and all eight Test Server jobs passed.

Replacement full-suite run for 7a29f96ab6: https://github.com/shuv1337/s2code/actions/runs/42800316911 — SUCCESS, all 18 jobs green, including Test, Test Web, all eight Test Server shards, Build and Typecheck, and Check. Required PR CI, context budget and Socket checks pass. Windows shim and real CLI archive checks also pass: https://github.com/shuv1337/s2code/actions/runs/42800330988. Upstream-gated mobile/deploy jobs are skipped. Ready for review; not merged, released or installed.

Local evidence is retained under /tmp/s2-pr429-*.log and /tmp/s2-sync-*.log. No scratch plans or generated test artifacts are committed.

Agent context budget

The measured budget test passes. The agent-context-increase label is necessary; the CI gate itself is retained unchanged.

Budget	Fork main	This branch	Increase
Claude system append	5,366 B	5,547 B	181 B
Codex additional context	7,096 B	7,277 B	181 B
MCP tool list JSON	50,090 B	50,188 B	98 B

Risks / deliberate divergence

This is a large cross-surface sync. CI is green, but the local web flakes above and deliberate divergences still deserve review; no claim that a build proves every remote/provider path.
Marketing localization is intentionally deferred: retained the pre-v0.1.8-merge fork marketing subtree rather than replacing fork branding with upstream locale routing/content.
Cursor support is intentionally retained instead of adopting upstream's removal of CLI/Keychain support; its SDK remains on the fork's patched 1.3.1.
Package versions remain fork-controlled; this PR does not cut a release. Upstream mobile-dev-client jobs remain upstream-repository-gated, not enabled for fork publishing.
Initial merge commits bypassed pre-commit hooks after explicit checks; all follow-up fix commits passed formatter, lint and knip hooks. Full checks are reported separately.
Migration 26 now explicitly preserves JSON subquery types for fresh/unapplied migrations; it does not replay historical migrations or repair already-migrated databases.
Native device installation, live agent turns, packaged app installation and UI screenshots were not performed.

Complete conflict ledger (all staged conflicts)

Conflict ledger

Stages: 1 = upstream nightly .4340 (58 commits); 2 = v0.1.8 (156 commits); 3 = pinned main e4d86abca9 (60 commits).

97 distinct conflicted paths across 111 stage/path occurrences. Auto-merged files are not included below.

CI and releases

Kept the fork's CI/context-budget and nightly-only release policy. Ported compatible desktop build changes; removed obsolete mobile preview workflow paths, kept fork production mobile configuration. The incoming mobile-dev-client workflow remains upstream-repository-gated and does not publish from this fork.

.github/workflows/ci.yml — stage 2, 3.
.github/workflows/mobile-eas-preview-fork.yml — stage 3.
.github/workflows/mobile-eas-preview.yml — stage 3.
.github/workflows/mobile-eas-production.yml — stage 3.
.github/workflows/release-desktop.yml — stage 1, 2.
.github/workflows/release.yml — stage 1, 2.
docs/operations/release.md — stage 1.

Marketing (deferred)

Kept the pre-v0.1.8-merge fork marketing subtree. Upstream locale routing/localized landing and download pages are deliberately not ported; the earlier text-wrap fix remains.

apps/marketing/src/layouts/Layout.astro — stage 2.
apps/marketing/src/pages/[...locale]/download.astro — stage 2.
apps/marketing/src/pages/[...locale]/index.astro — stage 2.
apps/marketing/src/pages/sitemap.xml.ts — stage 2.

Desktop CLI and identity

Integrated CLI installation/removal, PATH handling and first-launch behavior using fork executable names, ownership markers and channel isolation. Updated tests to assert fork names.

apps/desktop/src/app/DesktopCliCommand.test.ts — stage 2.
apps/desktop/src/app/DesktopCliCommand.ts — stage 2.
apps/desktop/src/app/DesktopCliShim.ts — stage 2.
apps/web/src/components/settings/CliCommandSettingsRow.tsx — stage 2.

CLI/runtime/update/SSH

Combined upstream installer/uninstaller, pinned runtime, update diagnostics and SSH changes with fork release sources, aliases, home/environment isolation and launcher ownership. Preserved internal t3 runtime asset names. Agent approval URLs follow fork hosted config, never upstream defaults.

apps/server/src/cli/invocation.ts — stage 2.
apps/server/src/cli/service.ts — stage 1.
apps/server/src/cli/uninstall.test.ts — stage 2.
apps/server/src/cli/uninstall.ts — stage 2.
apps/server/src/cli/up.ts — stage 1.
apps/server/src/cloud/bootService.test.ts — stage 1.
apps/server/src/cloud/bootService.ts — stage 1.
apps/server/src/cloud/pinnedRuntime.ts — stage 2.
apps/server/src/cloud/publicConfig.ts — stage 3.
apps/server/src/cloud/selfUpdate.test.ts — stage 3.
apps/server/src/cloud/selfUpdate.ts — stage 3.
packages/shared/src/cliRelease.ts — stage 3.
packages/ssh/src/tunnel.test.ts — stage 3.
packages/ssh/src/tunnel.ts — stage 3.
scripts/build-cli-archive.test.ts — stage 1.
scripts/build-cli-archive.ts — stage 1.
scripts/build-desktop-artifact.test.ts — stage 2.
scripts/build-desktop-artifact.ts — stage 2.
scripts/install.ps1 — stage 2.
scripts/install.sh — stage 2.
scripts/lib/brand-assets.ts — stage 1.

Orchestration, MCP and remote delegation

Ported upstream lifecycle, history and transport changes while retaining shared MCP tools, local cross-project delegation, remote delegation, pools/failover and worktree support. Kept model selection on queued turns alongside spent-instance failover; included providerTurns in remote history projection.

apps/server/src/auth/PairingGrantStore.ts — stage 2.
apps/server/src/environment/ServerEnvironment.ts — stage 2.
apps/server/src/mcp/OrchestratorMcpService.ts — stage 2.
apps/server/src/observability/RpcInstrumentation.ts — stage 2.
apps/server/src/orchestration-v2/Adapters/CodexAdapterV2.test.ts — stage 2.
apps/server/src/orchestration-v2/Orchestrator.ts — stage 1, 3.
apps/server/src/peer/PeerLinks.ts — stage 2.
apps/server/src/peer/RemoteDelegation.ts — stage 2.
apps/server/src/ws.ts — stage 2.

Contracts, settings and shared client runtime

Merged new contracts/permissions/settings and client projection fields without removing fork RPC/MCP/voice/Keychain grants or shared MCP secret handling.

apps/server/src/settingsSecrets.ts — stage 1, 2.
packages/client-runtime/src/state/commandPermissions.test.ts — stage 1, 2.
packages/client-runtime/src/state/server.ts — stage 2.
packages/contracts/src/clientRpcPermissions.ts — stage 1.
packages/contracts/src/environment.ts — stage 2.
packages/contracts/src/orchestrationV2.ts — stage 1.
packages/contracts/src/rpc.ts — stage 2.
packages/contracts/src/settings.ts — stage 1, 2.

Providers

Kept Cursor CLI/Keychain usage and its 1.3.1 SDK retry patch, adding upstream usage/account improvements rather than accepting support removal. Combined OpenCode runtime-version probing/upgrade handling with fork Go usage limits and model discovery.

packages/provider-cursor/package.json — stage 1.
packages/provider-cursor/src/server/accountUsage.test.ts — stage 1.
packages/provider-cursor/src/server/accountUsage.ts — stage 1, 3.
packages/provider-cursor/src/server/usageLimits.ts — stage 1.
packages/provider-opencode/src/server/driver.ts — stage 3.

Mobile

Merged native controls, symbols, navigation/settings and draft model selection with fork mobile identity, voice/WebRTC dependencies and draft catalog persistence.

apps/mobile/app.config.ts — stage 3.
apps/mobile/modules/t3-native-controls/ios/T3NativeControlsModule.swift — stage 2.
apps/mobile/package.json — stage 2.
apps/mobile/src/App.tsx — stage 2.
apps/mobile/src/components/ui/AppSymbol.tsx — stage 2.
apps/mobile/src/features/settings/ScheduledTaskPickerScreens.tsx — stage 2.
apps/mobile/src/state/use-composer-drafts.test.ts — stage 2.
apps/mobile/src/state/use-composer-drafts.ts — stage 2.

Removed upstream UI

Accepted upstream removal; use the new WelcomePage/composer flow instead. Fork voice hosts remain mounted in the root route.

apps/web/src/components/chat/useProposedPlanSend.ts — stage 2.
apps/web/src/components/onboarding/WelcomeWizard.tsx — stage 2.
docs/user/welcome-wizard.md — stage 2.

Web UI

Combined new onboarding/settings/composer flows with fork branding, voice hosts, Keychain controls and persisted model/catalog choices. Removed obsolete settings imports/state after the upstream updates-panel rewrite.

apps/web/src/appInit.tsx — stage 2.
apps/web/src/components/HostedEmptyState.tsx — stage 2.
apps/web/src/components/auth/ConnectAgentSurface.tsx — stage 2.
apps/web/src/components/chat/useComposerSend.ts — stage 2.
apps/web/src/components/settings/SettingsPanels.tsx — stage 2, 3.
apps/web/src/components/settings/settingsSearch.ts — stage 2.
apps/web/src/components/settings/useAvailableSettingsSearchItems.ts — stage 2.
apps/web/src/composerDraftStore.test.ts — stage 2.
apps/web/src/composerDraftStore.ts — stage 2.
apps/web/src/routes/__root.tsx — stage 2.

Agent context budget

Measured the merged provider prompts/tool schemas and updated the tracked budget to actual bytes. Preserve the CI gate and request its explicit agent-context-increase label; no gate removal.

apps/server/src/provider/agentContextBudget.json — stage 2, 3.

Dependencies and manifests

Reconciled upstream dependency/native patch updates with fork-only dependencies and Cursor SDK patch. Regenerated the lockfile; retained fork package/channel identity instead of bumping fork release versions.

apps/server/package.json — stage 2, 3.
pnpm-lock.yaml — stage 1, 2.
pnpm-workspace.yaml — stage 2.
scripts/package.json — stage 2.

Documentation

Kept fork naming, provider/voice capabilities and operational constraints while incorporating upstream usage changes and removing obsolete onboarding guidance.

README.md — stage 2.
docs/internals/voice-input.md — stage 1.
docs/user/background-service.md — stage 2.
docs/user/composer.md — stage 1, 2.
docs/user/install.md — stage 2.
docs/user/outside-agents.md — stage 2, 3.
docs/user/providers-acp.md — stage 2.
docs/user/providers-antigravity.md — stage 2.
docs/user/providers-codex.md — stage 1.
docs/user/providers-muse.md — stage 2.
docs/user/providers-pi.md — stage 2.
docs/user/remote-access.md — stage 2.
docs/user/source-control.md — stage 2.

AI-assisted by gpt-6-astra (openai-codex) in pi / shuvpi.

Co-authored-by: GPT 6.1 Sol <codex@openai.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

…ingdotgg#32403) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

… of rejected (pingdotgg#32405) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

…ingdotgg#32408) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

…ingdotgg#32395) Co-authored-by: Cursor <cursoragent@cursor.com>

…2160)

…pingdotgg#32391) Co-authored-by: GPT 6.1 Sol <codex@openai.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

…32389) Co-authored-by: GPT 6.1 Sol <codex@openai.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: maria-rcks <maria@kuuro.net>

…gg#27397) Co-authored-by: maria-rcks <maria@kuuro.net>

…e's service (pingdotgg#26324) Co-authored-by: notcompromised <peyton.lamb111@gmail.com> Co-authored-by: maria-rcks <maria@kuuro.net> Co-authored-by: Yash Singh <saiansh2525@gmail.com>

…32446)

…#19659) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: maria-rcks <maria@kuuro.net> Co-authored-by: Yash Singh <saiansh2525@gmail.com> Co-authored-by: Honey Paptan <hpaptan@gmail.com>

…ngdotgg#19660) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: Yash Singh <saiansh2525@gmail.com>

Remove Cursor CLI credential and macOS Keychain fallbacks for account usage and limits, including their settings and web/mobile prompts. Preserve usage through the Cursor SDK sign-in, CURSOR_API_KEY exchange, and explicit auth tokens for limits. Verified focused Cursor tests and full CI on the final head. The scope and intended loss of usage for CLI-only environments were explicitly approved by the maintainer. Model: GPT 6.1 Sol. Harness: Codex through T3 Code.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

…gdotgg#32401) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

… level (pingdotgg#32315)

…#27450)

…d Escape to the PTY (pingdotgg#32666) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

…#27941) Co-authored-by: Orin <orin@orin.ws> Co-authored-by: maria-rcks <maria@kuuro.net>

)

…s the thread (pingdotgg#28454) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

…gg#27541) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

…etails card (pingdotgg#27582) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

…in folders (pingdotgg#25883) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

pingdotgg#33628) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

…s later subagent results (pingdotgg#33469) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

…ing CLIs (pingdotgg#33448) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

…pingdotgg#33675)

…dotgg#33438) Co-authored-by: Julius Marminge <julius0216@outlook.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

…ingdotgg#33666) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

…to itself (pingdotgg#33695) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

…ive (pingdotgg#33325)

…otgg#33263) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

) Co-authored-by: Julius Marminge <julius0216@outlook.com>

…ame is long (pingdotgg#33181) Co-authored-by: Julius Marminge <julius0216@outlook.com>

…ures

…grations

…tures

socket-security · 2026-11-10T09:25:14Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance
	npm/@clerk/clerk-js@6.40.0 ⏵ 6.42.3			⁺¹
	npm/@anthropic-ai/claude-agent-sdk@0.3.316 ⏵ 0.3.321			⁺¹
	npm/dompurify@3.4.16 ⏵ 3.4.17		⁺⁷⁵
	npm/expo-audio@58.0.9 ⏵ 58.0.11			⁺¹	^-1
	npm/@expo/metro-runtime@58.0.14 ⏵ 58.0.17	⁺¹		⁺¹
	npm/expo-dev-client@58.0.14 ⏵ 58.0.18
	npm/react-native-safe-area-context@5.10.1 ⏵ 5.11.1	⁺¹		⁺¹	⁺⁴
	npm/expo-constants@58.0.12 ⏵ 58.0.15
	npm/expo-linking@58.0.13 ⏵ 58.0.16	⁺¹
	npm/expo-glass-effect@58.0.4 ⏵ 58.0.5
	npm/expo-asset@58.0.16 ⏵ 58.0.20			⁺¹
	npm/expo-widgets@58.0.20 ⏵ 58.0.27
	npm/expo-updates@58.0.17 ⏵ 58.0.21
	npm/nitrogen@0.37.1 ⏵ 0.37.2				⁺¹
	npm/expo-clipboard@58.0.3 ⏵ 58.0.4	⁺¹		⁺¹
	npm/expo-video@58.0.11 ⏵ 58.0.13
	npm/expo-network@58.0.3 ⏵ 58.0.4
	npm/react-native-worklets@0.13.0 ⏵ 0.13.1	⁺¹		⁺¹
	npm/expo-blur@58.0.4 ⏵ 58.0.5				⁺¹
	npm/expo-notifications@58.1.5 ⏵ 58.1.8	⁺¹		⁺¹
	npm/expo-image-manipulator@58.0.14 ⏵ 58.0.16				^-1
	npm/expo-sharing@58.0.19 ⏵ 58.0.22
	npm/expo-web-browser@58.0.6 ⏵ 58.0.7	⁺¹		⁺¹
	npm/expo-font@58.0.8 ⏵ 58.0.11	⁺¹		⁺¹
	npm/expo-build-properties@58.0.11 ⏵ 58.0.12
	npm/expo-file-system@58.0.9 ⏵ 58.0.13				⁺¹
	npm/expo-paste-input@0.1.15 ⏵ 0.2.2	⁺²⁹			^-4
	npm/react-native-keyboard-controller@1.22.8 ⏵ 1.23.0	⁺¹		⁺¹	⁺¹
	npm/react-native-pdf-jsi@5.0.0 ⏵ 6.1.0	^-5		⁺³	⁺²
	npm/react-native-svg@15.16.0 ⏵ 15.16.1				⁺⁵
	npm/@pierre/highlights@0.5.0
	npm/uniwind@1.13.0 ⏵ 1.13.2				⁺¹
See 23 more rows in the dashboard

View full report

…it remotes

…bqueries

StiensWout and others added 30 commits November 7, 2026 04:41

fix(web): recover ACP settings when projects change (pingdotgg#32409)

7f7bf26

Co-authored-by: GPT 6.1 Sol <codex@openai.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(shared): inline code like allocator.cc:217 becomes a file chip (p…

48bb784

…ingdotgg#32403) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(server): theme files saved with a UTF-8 BOM are published instead…

ce9b806

… of rejected (pingdotgg#32405) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(grok): long command titles no longer end in a broken character (p…

a975217

…ingdotgg#32408) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(github): keep review-required until required reviewers approve (p…

95e7dbf

…ingdotgg#32395) Co-authored-by: Cursor <cursoragent@cursor.com>

feat(web): delete archived threads from the archive page (pingdotgg#2…

c864b1c

…2160)

fix(provider-acp): preserve UTF-8 across interleaved terminal streams (…

2d0a9df

…pingdotgg#32391) Co-authored-by: GPT 6.1 Sol <codex@openai.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(pi): preserve explicit thinking when switching models (pingdotgg#…

5cb2a7d

…32389) Co-authored-by: GPT 6.1 Sol <codex@openai.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(acp): bound unread raw notification retention (pingdotgg#19585)

beaeeff

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: maria-rcks <maria@kuuro.net>

fix(web): keep Pi thinking controls visible before selection (pingdot…

eeb6e23

…gg#27397) Co-authored-by: maria-rcks <maria@kuuro.net>

fix(desktop): published themes reach the app when it uses this machin…

67fdc53

…e's service (pingdotgg#26324) Co-authored-by: notcompromised <peyton.lamb111@gmail.com> Co-authored-by: maria-rcks <maria@kuuro.net> Co-authored-by: Yash Singh <saiansh2525@gmail.com>

fix(antigravity): check account access after installation (pingdotgg#…

e344153

…32446)

fix(acp): preserve native form questions and typed answers (pingdotgg…

f016a16

…#19659) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: maria-rcks <maria@kuuro.net> Co-authored-by: Yash Singh <saiansh2525@gmail.com> Co-authored-by: Honey Paptan <hpaptan@gmail.com>

fix(antigravity): explain missing SOCKS dependency during refresh (pi…

9f00ced

…ngdotgg#19660) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: Yash Singh <saiansh2525@gmail.com>

fix(web): agent sign-in defaults to Auto access (pingdotgg#32186)

917ce99

fix(gitlab): glab mr accept counts as a shell merge (pingdotgg#32400)

a601caa

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(forgejo): tea's pull and m aliases count as shell merges (pin…

97d04c3

…gdotgg#32401) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix: side chats start with the parent's permission mode and reasoning…

e455200

… level (pingdotgg#32315)

fix(mobile): center the Choose project empty-state buttons (pingdotgg…

25bf84a

…#27450)

fix(mobile): Android terminal sends hardware-keyboard arrows, Tab, an…

511238c

…d Escape to the PTY (pingdotgg#32666) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(mobile): group settled PR threads in the continue menu (pingdotgg…

0080084

…#27941) Co-authored-by: Orin <orin@orin.ws> Co-authored-by: maria-rcks <maria@kuuro.net>

fix(mobile): shorten the model picker save action (pingdotgg#32551)

af96a01

fix(mobile): center Android header confirmation buttons (pingdotgg#32239

a9e709f

)

fix(muse): a declined /compact reports its reason and no longer wedge…

0450f85

…s the thread (pingdotgg#28454) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(web): restore bold weight in rendered Markdown (pingdotgg#25694)

57ded10

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(web): device tool update buttons fit their popovers (pingdotgg#27030

f475de2

) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(web): mobile sidebar keeps its width when shelves expand (pingdot…

ecf7f1a

…gg#27541) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(web): lineage phase headers truncate instead of overflowing the d…

28eff11

…etails card (pingdotgg#27582) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(server): storage report lists project worktrees nested inside pla…

71c2d3a

…in folders (pingdotgg#25883) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

juliusmarminge and others added 18 commits November 9, 2026 23:59

fix(server): preview_evaluate accepts top-level await (pingdotgg#31925)

4f57044

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(server): quitting no longer restarts the relay client mid-shutdown (

5636b56

pingdotgg#33628) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(shared): relative Windows file links open the file (pingdotgg#33643)

9e12eca

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(server): a steer that restarts a completion wake no longer strand…

8d54c8b

…s later subagent results (pingdotgg#33469) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(server): provider status checks no longer make mise download miss…

5dcf69e

…ing CLIs (pingdotgg#33448) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(forgejo): find merged pull requests whose head branch was deleted (…

b37c7f6

…pingdotgg#33675)

perf(shared): speed up escaped Markdown in long PR descriptions (ping…

65ffcbf

…dotgg#33438) Co-authored-by: Julius Marminge <julius0216@outlook.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(server): a background agent tab survives a desktop window reload (p…

cec8d73

…ingdotgg#33666) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(server): Commit, push & PR no longer pushes the default branch in…

ad91636

…to itself (pingdotgg#33695) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(acp): OMP threads show html_render pages (pingdotgg#33677)

d47591f

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(ssh): Intel Mac hosts no longer try to download a missing t3 arch…

56064fc

…ive (pingdotgg#33325)

fix(server): opening the branch menu no longer wipes PR status (pingd…

a22068f

…otgg#33263) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

fix(server): failed updates report download diagnostics (pingdotgg#33239

633438d

) Co-authored-by: Julius Marminge <julius0216@outlook.com>

fix(web): remote Lineage rows keep their title when the environment n…

e4d86ab

…ame is long (pingdotgg#33181) Co-authored-by: Julius Marminge <julius0216@outlook.com>

chore(sync): merge upstream t3code nightly .4340 preserving fork feat…

abf67b5

…ures

chore(sync): merge upstream v0.1.8 with fork MCP, delegates and identity

6ca41d6

chore(sync): merge upstream main through e4d86ab preserving fork inte…

5064a07

…grations

fix(sync): preserve fork approval routing and align upstream test fix…

fb396f8

…tures

shuv1337 added the agent-context-increase Approves growth in agent context budget label Nov 10, 2026

shuv1337 added 6 commits November 10, 2026 01:26

test(sync): validate retained upstream workflow runners and isolate G…

807c57e

…it remotes

fix(auth): keep agent approvals local when fork hosting is unconfigured

e6df1a0

fix(persistence): retain JSON arrays across model-option migration su…

068e8f6

…bqueries

fix(scripts): isolate fork installer command tests

218444d

fix(web): ignore inherited server proxy during tests

643eeae

fix(server): refuse service units without an explicit home

7a29f96

shuv1337 marked this pull request as ready for review November 10, 2026 11:06

shuv1337 merged commit 9512d9a into main Nov 10, 2026
28 checks passed

This was referenced Nov 10, 2026

fix(release): account for prepared Windows server cache files #430

Merged

docs(mobile): document signed iPhone release installs #431

Merged

Navigation Menu

Repository navigation

chore(sync): merge 274 upstream commits through 2026-11-10 - #429

chore(sync): merge 274 upstream commits through 2026-11-10#429
shuv1337 merged 284 commits into
mainfrom
sync/upstream-2026-11-10

shuv1337 commented Nov 10, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Nov 10, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

Conversation

shuv1337 commented Nov 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Plan executed

Upstream highlights

Protected fork behavior

Review fixes — head 7a29f96ab6

Earlier sync validation — head 068e8f65b0

CI

Agent context budget

Risks / deliberate divergence

Conflict ledger

CI and releases

Marketing (deferred)

Desktop CLI and identity

CLI/runtime/update/SSH

Orchestration, MCP and remote delegation

Contracts, settings and shared client runtime

Providers

Mobile

Removed upstream UI

Web UI

Agent context budget

Dependencies and manifests

Documentation

Uh oh!

socket-security Bot commented Nov 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

shuv1337 commented Nov 10, 2026 •

edited

Loading

Review fixes — head `7a29f96ab6`

Earlier sync validation — head `068e8f65b0`

socket-security Bot commented Nov 10, 2026 •

edited

Loading