[riccardovandra]

What's new from upstream

New features

• Managed policy: administrators can configure T3 Code organization-wide with their device management tool, through a native policy (macOS configuration profile, Windows registry) or a policy.json file on macOS, Windows and Linux. A machine with both refuses to start. feat: managed policy for organization-wide T3 Code configuration pingdotgg/t3code#27197
• Parent threads show pending approvals from delegated children on web, desktop and mobile. Responses go to the child's environment and thread, and failures show an error with retry. Claude removal safety checks in bypass mode now return the original warning with guidance to use only a safe rewrite it supplies. feat(clients): surface child approvals in parent threads pingdotgg/t3code#28516
• Scheduled tasks get a Once schedule ({ type: "once", runAt }) with date and time fields on web and mobile, also available through schedule_task. A missed time runs when the server is back; a past time is refused on save. feat(scheduler): run a scheduled task once at a specific date and time pingdotgg/t3code#28104
• Threads show a quiet divider above the message where the model or effort changed, within the same harness. The server stores it on the user message item (modelSwitch), so it survives paging, guest pages and thread reads. feat(chat): threads show when you switch models or effort pingdotgg/t3code#28995
• server.getUsageSummary accepts an optional modelFilter, matched on original provider and model ID. The Usage tab reads usageModelFilter from each environment's settings.json; there is no new UI. feat(usage): filter Usage totals by provider and model pingdotgg/t3code#28952
• New MCP tool unlink_pull_requests unlinks every PR in given states in one call, and work-log rows report the count. feat(mcp): unlink every PR in given states with one call pingdotgg/t3code#27925
• New MCP tool link_pull_requests links a list of PR URLs in one call, grouping linked and alreadyLinked by repository and returning non-PR URLs in invalidUrls. feat(mcp): link several PRs to a thread with one call pingdotgg/t3code#27994
• preview_open takes the same dev-server target as preview_navigate, so an agent opens a port in one call. feat(mcp): preview_open goes straight to a dev-server port pingdotgg/t3code#28027
• GitLab merge requests carry a review decision, so the PR list shows approval badges and Review > Approved works. A failed approvals read leaves the decision unknown and the list still loads. fix(gitlab): merge requests show their approval state pingdotgg/t3code#26877
• Codex sessions now get T3CODE_THREAD_ID per thread, so tools started from a Codex shell can reach their T3 thread (for example t3 thread send). fix(server): Codex sessions get T3CODE_THREAD_ID like Claude sessions pingdotgg/t3code#28604
• Lineage rows, workflow member rows, subagent cards and mobile's Agents sheet and feed show which account each subagent runs on when a provider has several accounts. fix(web,mobile): lineage and agent rows show which account a subagent runs on pingdotgg/t3code#24833 fix(web,mobile): subagent cards show which account each subagent runs on pingdotgg/t3code#24898
• Tab completes folder names in the Add project local folder browser, shell style. fix(web): Tab completes folder names in the add-project browser pingdotgg/t3code#28243
• The file lists in Changes and PR Code are resizable, with keyboard support and saved widths. fix(web): make Changes and PR Code file lists resizable pingdotgg/t3code#28244
• The Fallback model row in Settings > Threads now has a reasoning control, shown for an explicitly configured model. fix(web): configure reasoning for the fallback model pingdotgg/t3code#27593
• Pages in the desktop built-in browser can use pointer lock, so browser games and 3D viewers with mouse-look work in the preview. fix(desktop): allow pointer lock in the built-in browser pingdotgg/t3code#25275
• <details> folds in agent replies stay closed until tapped on mobile, matching web and desktop. fix(mobile): chat folds stay closed until tapped, as on web and desktop pingdotgg/t3code#28072
• T3 Connect writes a rotating relay-client.ndjson in the server logs folder (1 MiB, two rotated copies), so tunnel connector activity is on disk after an outage. fix(server): T3 Connect keeps a log file of its tunnel connector pingdotgg/t3code#24485
• T3 Connect remembers an automatic HTTP/2 fallback for 24 hours across restarts, instead of repeating the slow QUIC stall. An explicit TUNNEL_TRANSPORT_PROTOCOL still wins. fix(server): remember T3 Connect HTTP/2 fallback across restarts pingdotgg/t3code#28105
• Update notes open with up to 7 highlight bullets and one count line, and the desktop popover shows the bold labels and the count. feat(release): update notes lead with up to 7 highlights pingdotgg/t3code#28593
• vp run profile:startup captures CPU profiles and module-loading timelines for cold-start diagnosis. Initial server config no longer waits for remote-target discovery. feat(dev): add startup profiling for cold-start diagnosis pingdotgg/t3code#28566
• Native desktop builds ship prepared server bytecode so the first launch of a build reuses it, with fallback to source. Linux targets skip it because Linux packaging was not validated. feat(desktop): prepare server bytecode cache in native builds pingdotgg/t3code#28572 fix(desktop): skip prepared server bytecode on Linux pingdotgg/t3code#28700

Bug fixes

Providers

• Claude: Stop could hang forever if the CLI never acknowledged the interrupt, leaving the turn running. The wait is now 10 seconds, then the query closes and the turn settles as interrupted. fix(server): stopping a Claude turn no longer hangs without an acknowledgement pingdotgg/t3code#16419
• Claude: a foreground fork showed as completed about a second after starting, with "Fork started" as its result. It now stays running until the real result arrives. fix(server): foreground Claude forks no longer show as finished the moment they start pingdotgg/t3code#26459
• Claude: reverting to the message right after a /compact turn always failed because that turn has no resume cursor. Rollback now falls back to the latest earlier turn's cursor. fix(server): Claude threads revert to the message after a /compact pingdotgg/t3code#27381
• Claude: when Claude withdrew a permission request (control_cancel_request), "Approval needed" stayed forever. The request, node and turn item now close as cancelled, including AskUserQuestion. fix(claude): approval cards close when Claude withdraws the request pingdotgg/t3code#27320
• Claude: a gateway's direct 429 showed "Reset time unavailable" even with (reset after ...) in the error text. The reset time is now kept. fix(server): keep a gateway's Claude reset time on a direct 429 pingdotgg/t3code#25438
• Claude: refreshing usage through CLIProxy dropped the monthly spending budget during decoding. Both budget formats are now preserved. fix(usage): preserve Claude monthly spend through CLIProxy pingdotgg/t3code#23435
• Claude: claude -p text generation saved a resumable session for every title, commit message, PR, branch name and review guide. It now passes --no-session-persistence. fix(claude): Claude text generation stops saving throwaway transcripts pingdotgg/t3code#28367
• Claude: Chocolatey installs on Windows were compared with npm and offered an Update now that always failed. They are now manual-only and compare against choco search. fix(provider-core): Chocolatey Claude installs stay manual-only and compare against choco pingdotgg/t3code#22941
• Claude: on a mise command wrapper layout, Update ran claude update, which declined and still exited 0. Those paths now count as mise-owned and get no update command. fix(server): Claude no longer tries to update itself through a mise command wrapper pingdotgg/t3code#27466
• Provider updates were killed at 5 minutes, which left a partial Claude download that blocked retries. The limit is now 30 minutes. fix(server): provider updates no longer time out mid-download pingdotgg/t3code#28132
• Provider updates failed with npm: NotFound when npm lived only on the provider's custom PATH. npm, pnpm, bun, yarn, Volta and Vite+ updates now run with the provider's environment. fix(provider-core): provider updates find npm on the provider's custom PATH pingdotgg/t3code#27321
• OpenCode installs T3 cannot identify showed an Update now button that hung or failed. The button no longer appears for them. fix(opencode): OpenCode installs T3 can't identify no longer get an Update button that hangs pingdotgg/t3code#28278
• Open clients could stay on "Updating Claude" after the server recorded the final result, until a reload. The final provider state now reaches them. fix(server): open clients no longer stay on "Updating" after a provider update pingdotgg/t3code#27992
• Grok, Pi and fx showed as Unavailable when --version took over 4 seconds on a healthy CLI. The budget is now 10 seconds. fix(providers): slow Grok, Pi and fx starts no longer show as unavailable pingdotgg/t3code#28400
• Codex: a failed write to the app-server's stdin (for example EPIPE) left requests hanging and the instance stuck until restart. Writer failures now terminate the transport. fix(codex): a failed write to the app-server no longer leaves requests hanging pingdotgg/t3code#27924
• Codex: a turn stopped by a hook showed only "Stopped by the provider." The hook's reason now appears in the interruption message. fix(server): show why Codex hooks stopped a turn pingdotgg/t3code#27399
• Codex: instances with different CODEX_HOME environment values shared a continuation identity, so switching skipped the handoff and resumed in the wrong home. Each instance now uses its own home. fix(server): Codex switches respect each instance's CODEX_HOME variable pingdotgg/t3code#24664
• Cursor: tools left unfinished at the end of a normal run were stored as successful, such as a read denied by .cursorignore. They now close as interrupted, and Claude workflow members do the same. fix(cursor): avoid reporting unfinished tool calls as successful pingdotgg/t3code#21448
• Cursor: the Usage page asked users without Cursor to sign in again because of a stale Keychain token. The Keychain is now read only when ~/.cursor exists. fix(cursor): ignore a stale Keychain login when Cursor is not installed pingdotgg/t3code#27143
• OpenCode: default text generation failed for users without access to openai/gpt-5. The default is now opencode/big-pickle; saved selections are unchanged. fix(opencode): use Big Pickle for default text generation pingdotgg/t3code#22442
• OpenCode 1.x: steering dropped the turn's agent, reasoning variant and T3 system instructions, and a Plan turn could continue as build. Steers now keep them. fix(opencode): steers keep the turn's agent, variant and instructions pingdotgg/t3code#23270
• OpenCode: Go limits stayed unavailable after a startup timeout even once the credential worked. The usage read now retries on the health interval. fix(opencode): recover Go limits after a startup timeout pingdotgg/t3code#27757
• OpenCode 1.x: text generation left a T3 Code <operation> session in the user's history every run. The session is now deleted afterward. fix(opencode): OpenCode 1.x text generation deletes its scratch session pingdotgg/t3code#28294
• OpenCode 1.x: text generation had no time limit and could leave work running on the server. It now fails after 3 minutes and aborts the session. fix(opencode): OpenCode 1.x text generation gives up after 3 minutes like every other runner pingdotgg/t3code#28372
• ACP: idle turn totals overwrote context usage and discarded the window size, which blocked provider handoffs with "Insufficient context allowance". Only usage_update sets context usage now. fix(acp): turn token spend no longer blocks provider handoffs pingdotgg/t3code#22608 fix(acp): keep turn spending out of context usage pingdotgg/t3code#27927
• ACP: a cancelled plan step mapped to pending and the plan never completed. Cancelled entries are now dropped from todo steps. fix(acp): cancelled plan steps no longer keep the plan running pingdotgg/t3code#25564
• ACP: clients rejected session/delete for every v1-shaped agent, even those advertising it. The request now follows sessionCapabilities.delete. fix(effect-acp): honor advertised session delete capability pingdotgg/t3code#27771
• ACP: a process crash during session startup showed a generic error and an internal session id. It now shows the stage and signal or exit code. fix(provider): show exit details when ACP session startup crashes pingdotgg/t3code#28419
• GitHub Copilot: a lost or locked session failed on every message. It now restarts on the next message. fix(acp): a lost or locked Copilot session restarts on the next message instead of failing every time pingdotgg/t3code#26651
• GitHub Copilot: Plan mode did nothing because Copilot's mode ids are URLs. T3 now matches the part after #, so Plan switches Copilot's native mode. fix(acp): Plan mode switches Copilot into its native plan mode pingdotgg/t3code#26951
• Kimi: reopening a thread collapsed the model picker to "Default" until restart, because session/load returns an empty configuration. The probed model list is now kept. fix(provider-acp-registry): reopening a Kimi thread no longer collapses its model picker to Default pingdotgg/t3code#25786
• Pi: extension dialogs showed their title twice and long titles overflowed the card. The title now shows once, as the question. fix(pi): show an extension dialog's title once pingdotgg/t3code#22463
• Pi: oversized RPC records were dropped silently, so a lost response looked like a hang. Each drop now logs a warning with lengths only. fix(pi): log oversized RPC records instead of dropping them silently pingdotgg/t3code#23947
• Muse: background children were listed under itemId instead of their turn item's id, so a child could show twice. The ids now match. fix(muse): list background children under their turn item's native id pingdotgg/t3code#23856
• Antigravity: text generation failed with "wrote files" because ACP creates empty skill directories at startup. Those known empty directories are now accepted. fix(antigravity): accept empty startup skill directories pingdotgg/t3code#27191
• Antigravity: server startup waited on deleting old runtime temp directories, 7.17 s in one Windows trace. That deletion no longer holds up startup. fix(server): Antigravity no longer delays server startup by deleting old runtimes pingdotgg/t3code#27651
• Antigravity: API-key and Agent Platform setups said "Sign in" with Google wording. They now say "Connect" on web, desktop and mobile. fix(providers): Antigravity API-key setup says Connect pingdotgg/t3code#27759
• Antigravity: Gemini quota buckets never came back for the old client version in the probe's User-Agent. It now sends hub/2.24.0, so Gemini limits appear. fix(server): bump Antigravity quota probe UA to hub/2.24.0 so Gemini limits appear pingdotgg/t3code#28090
• Usage: bare model names such as gemini-4-argon, grok-4.3 and muse-spark-1.1 showed as Unpriced when a reseller entry in LiteLLM disagreed on price. They are now priced at the maker's rate. fix(server): usage prices bare model names at the maker's rate when a reseller marks them up pingdotgg/t3code#28004

Server

• Questions and approvals asked before a run kept working fell outside the thread's snapshot window, so the sidebar said Input while the thread showed no answer panel. Pending requests now stay in the window. fix(server): an open question stays in the thread window, so its answer panel shows pingdotgg/t3code#22291
• Stop did nothing on a run left running after its attempt and provider turn had finished, and later messages stayed queued until restart. Stop and Force stop now end it. fix(server): Stop ends a run whose provider turn already finished pingdotgg/t3code#28520
• A stored boolean settledOverride stopped the app and server from starting. Such a row no longer blocks startup. fix(server): a stored boolean settledOverride no longer stops startup pingdotgg/t3code#28314
• After a restart, a resumed agent could repeat a command that was still running, such as a deploy. The continue prompt now requires confirming a state-changing action did not take effect before repeating it. fix(server): restart continuation checks before repeating side effects pingdotgg/t3code#27836
• A parent stayed stuck on a finished delegated task when the child left a non-awaited watcher running. Delegated tasks now use the same completion check as the sidebar. fix(server): delegated tasks finish even when the child leaves a watcher running pingdotgg/t3code#27468
• delegate_task refused the inheritedOptions that orchestrator_capabilities reports, such as fastMode: false on Haiku 5.5. Those inherited options are now accepted. fix(server): delegate_task accepts the inherited options orchestrator_capabilities reports pingdotgg/t3code#28133
• A queued delegated-completion notice reverted the thread's model when it started. It now uses the thread's current selection. fix(server): queued delegated completions keep a newer model choice pingdotgg/t3code#22579
• Steer on a queued message dropped the model picked for it, so the old model answered. Promote-to-steer now keeps the queued selection. fix(server): Steer on a queued message keeps the model picked for it pingdotgg/t3code#23240
• Forks inherited the source's pin, sidebar order, auto-settle opt-out, last snooze wake and linked-environment delegation. The fork plan now resets them. fix(server): a fork no longer inherits the source thread's pin, auto-settle and delegation state pingdotgg/t3code#28378
• Subagent threads inherited a pending title job and stayed on "Regenerating..." forever. Child threads now start with none. fix(server): subagent threads no longer inherit a pending title job pingdotgg/t3code#27990
• Long generated titles could split an emoji into a lone surrogate. Truncation now keeps pairs whole in generated titles, t3_thread_read pages, CSV cells and the shared truncate helper. fix(server): preserve surrogate pairs in generated thread titles pingdotgg/t3code#27483 fix(server): t3_thread_read pages no longer split an emoji in half pingdotgg/t3code#27273 fix(shared): preserve surrogate pairs in truncated CSV cells pingdotgg/t3code#27497 fix(shared): truncate keeps emoji whole pingdotgg/t3code#27841
• Truncated tool text changed each time it was projected, so multibyte text could gain blank lines before the marker. Projection is now stable. fix(server): truncated text stays the same when projected again pingdotgg/t3code#28418
• Imported Claude and Codex threads silently lost older messages at the 200-message cap. New imports now start with a notice saying how many were omitted. fix(server): disclose truncated history in imported threads pingdotgg/t3code#27743
• Idle compaction never ran after a delegated-task completion, because a late run.updated for the earlier run replaced the timer. The timer now survives it. fix(server): idle compaction survives a late update for an earlier run pingdotgg/t3code#28102
• Generated PR text and commit messages could describe diff.<driver>.textconv output and run the converter. Both now read source patches with --no-textconv. fix(server): generated PR text reads source diffs instead of textconv output pingdotgg/t3code#22503 fix(server): generated commit messages use source patches pingdotgg/t3code#23164
• Selected-file commits ignored a failed git reset, so a commit could include excluded files. The reset failure now stops the commit. fix(server): selected-file commits stop when the index reset fails pingdotgg/t3code#28275
• Create PR reported failure when only the lookup after a successful create failed. It now reports the PR as created. fix(server): report a created PR as created when its lookup fails pingdotgg/t3code#23242
• A repository whose only remote was not named origin lost Push and Create PR and offered "Publish repository". That remote now counts as primary. fix(server): treat a repository's only non-origin remote as its primary remote pingdotgg/t3code#22119
• PR checkout could pick a same-named repository on the checkout's host when the PR came from another GitHub host. Clone lookup now uses the PR's host, including Forgejo and Gitea. fix(vcs): look up pull request clone URLs on the pull request's host pingdotgg/t3code#15000
• Worktree threads never got their generated branch name in a repository with a local branch named t3, because Git refused the nested name. They now get it. fix(server): worktree threads get their generated branch name when a branch named t3 exists pingdotgg/t3code#27815
• Unchanged-worktree cleanup failed with No git remote is configured in local-only repositories. It now compares against the branch checked out in the project workspace. fix(server): clean unchanged worktrees without a remote pingdotgg/t3code#27175
• Slow submodule clones were cut off at 30 seconds while worktree creation still succeeded. The submodule update now has no fixed deadline and stays cancellable. fix(server): let slow worktree submodule checkouts finish pingdotgg/t3code#28482
• Turn diffs dropped the agent's edits with diff.relative=true in a project below the repo root. Checkpoint reads now force diff.relative=false. fix(server): turn diffs keep the agent's files when git's diff.relative is on pingdotgg/t3code#28361
• Changes totals could stay stale after the base branch or merge base moved. They are now recalculated after remote polls and refreshes. fix(server): refresh Changes totals after remote polls pingdotgg/t3code#28600
• Tracked clones started with protocol: "ssh" still fell back to HTTPS, including on Retry. The protocol is now kept. fix(server): tracked clones keep an explicit SSH protocol on fallback and Retry pingdotgg/t3code#28365
• Unbound scheduled tasks hardcoded baseRef: "main" and failed with ref_not_found on other default branches. They now resolve the project's default branch. fix(server): scheduled tasks start from the default branch, not always main pingdotgg/t3code#27983
• An interrupt could leave a scheduled task busy until restart, so Run now failed and webhook rows stopped draining. Both reservations now always release. fix(server): interrupted scheduled task runs no longer stay busy pingdotgg/t3code#28474
• run_scheduled_task_now hid the refusal reason behind a generic error. It now returns the service's message. fix(server): run_scheduled_task_now says why a run was refused pingdotgg/t3code#25647
• A webhook existence filter on a wildcard path rejected nonempty arrays of objects, such as an issue's labels. It now matches them. fix(server): match webhook existence filters on wildcard objects pingdotgg/t3code#23414
• A retry of t3_environment_link returned linked but left the card waiting and the thread on Input. The retry now closes the card it names. fix(server): a linked retry closes the waiting link card it names pingdotgg/t3code#28387
• An ignored link card kept a thread on Input for every later turn. It now stops flagging the thread once the user writes again, and stays answerable. fix(server): an old link card no longer keeps a thread asking for input pingdotgg/t3code#28491
• unlink_pull_request reported a hidden stack-dismissed PR as linked and sent a real unlink command. It now reports not linked. fix(server): unlink_pull_request reports a dismissed stack PR as not linked pingdotgg/t3code#25561
• Device tools returned empty results for a host label. resolveHostId now accepts a label and errors on unknown or ambiguous hosts. fix(server): device tools accept a host's label and reject unknown hosts pingdotgg/t3code#25836
• Device list warnings dropped expo-device-hub's error field, hiding the cause. The head of that detail is now appended, in the Device panel and device_list. fix(server): device list warnings keep the hub's error detail pingdotgg/t3code#25248
• Preview status and snapshots could expose a data: page's contents through its URL. They now keep only the media type. fix(server): preview status and snapshot never echo a data: page's contents pingdotgg/t3code#22302
• Preview tabs that loaded before the server attached stayed on Loading in t3_preview_list, and a navigation failing mid-load could show Success. Both now report the real state. fix(server): preview tab list shows desktop tabs that loaded before the server attached pingdotgg/t3code#27456 fix(server): a preview navigation that fails mid-load keeps its failure pingdotgg/t3code#27537
• Review guide stops could show the same lines twice when a third excerpt spanned two earlier ones. Excerpts now merge into one. fix(server): review guide stops no longer show the same lines twice pingdotgg/t3code#23725
• Bearer schemes such as bearer were rejected before verification on MCP. The scheme now matches case-insensitively, and rejections state a fixed reason. fix(server): accept case-insensitive MCP bearer schemes pingdotgg/t3code#23782
• An empty primary session cookie blocked a valid bearer token. Blank cookies are now skipped. fix(server): empty primary cookie no longer blocks bearer auth pingdotgg/t3code#27848
• Content search failed after a refresh timed out on a slow workspace, because the working index was thrown away. The live index is now kept. fix(server): keep the live search index when a refresh times out pingdotgg/t3code#23182
• The Files panel could open part of a file on a short read, such as on SMB, NFS or sshfs. The server now finishes the read. fix(server): finish short reads before returning workspace text pingdotgg/t3code#14989
• Saving a shortcut deleted keybindings.json rules this build could not decode, including nightly-only ones. Those rules now stay in the file. fix(server): saving a shortcut no longer deletes rules it can't read pingdotgg/t3code#24494
• Server startup could block on a login-shell probe that ignored SIGTERM. The probe's 5-second timeout now uses SIGKILL. fix(server): force-stop timed out login shell probes pingdotgg/t3code#7295
• Terminal labels cut a command at the first space, so Google Chrome showed as Google. The whole name is now kept. fix(server): terminal labels keep the whole name of a command with spaces pingdotgg/t3code#23140
• SSH: when an agent could not sign (1Password or Secretive on a locked Mac), T3 kept opening password prompts, 172 for one host. Agent signing failures are now recognized. fix(ssh): stop asking for a password when the SSH agent can't sign pingdotgg/t3code#23437
• Remote updates failed on loaded hosts when the staged preflight outlived a fixed 30-second timeout. A slow preflight no longer fails the update. fix(server): remote updates no longer fail when the staged preflight is slow on a loaded host pingdotgg/t3code#28201
• On macOS, t3 update left the service PATH on the previous runtime, so agents ran the old t3. It now points at the updated runtime. fix(server): put the updated runtime on the macOS service PATH pingdotgg/t3code#23239
• t3 update did not record its launcher, so prune could delete the runtime it pointed at. The launcher is now recorded before it moves. fix(server): t3 update no longer deletes the runtime its launcher runs pingdotgg/t3code#24289
• Opening a database failed at once with database is locked when another process held it. The writer now waits 5 seconds. fix(shared): opening a database waits for another process's lock pingdotgg/t3code#28288
• Command projection read failures lost their cause, hiding SQLite recovery hints. Seven sites now keep it. fix(server): command projection failures keep their cause pingdotgg/t3code#28389
• Log rotation startup could delete neighbors such as debug.log.04. Only exact rotated names are now pruned. fix(shared): preserve files outside log rotation naming pingdotgg/t3code#27503
• Atomic saves rejected a chain of exactly 40 symlinks that Linux can read. The 40-link budget is now honored. fix(shared): allow atomic saves through 40 symlinks pingdotgg/t3code#25604
• Browser traces with omitted empty fields (valid OTLP/JSON) failed to decode, losing the batch from Diagnostics. Those spans are now recorded. fix(observability): record OTLP/JSON spans that leave out empty fields pingdotgg/t3code#23177
• t3 doctor failed with EBUSY deleting the pre-0.1.0 database on Windows. The check connection now closes first there. fix(cli): close legacy database before deleting it on Windows pingdotgg/t3code#27629
• t3 trace summary printed values between 999.5 ms and 1 s as 1000ms. They now print as 1s. fix(cli): trace summary no longer prints near-second durations as "1000ms" pingdotgg/t3code#27266
• Escaped trailing whitespace in the last CLI argument was lost, breaking paths like --add-dir /tmp/project\ . It is now preserved. fix(shared): preserve escaped trailing whitespace in CLI arguments pingdotgg/t3code#27485
• Branch names lost accented letters and split words (validaci-n). Accents now fold to plain letters. fix(shared): branch names keep accented letters as plain letters pingdotgg/t3code#27274
• An inverted terminal range invented line numbers in the agent payload. It now emits only the label. fix(shared): inverted terminal ranges emit no fake lines pingdotgg/t3code#27843
• Azure DevOps clone URLs kept the wrong host and path when switching SSH and HTTPS. Both directions now map correctly. fix(shared): keep Azure clone URLs valid when switching protocols pingdotgg/t3code#24005
• GitLab canceling pipelines showed as pending because of a spelling mismatch. They now show as cancelled. fix(gitlab): canceling pipelines no longer show as pending pingdotgg/t3code#21543
• An expired glab OAuth login showed a generic failure. invalid_grant now gives the glab auth login error. fix(gitlab): report an expired glab OAuth login as an auth error pingdotgg/t3code#27511
• Forgejo merged and closed lists returned each other's rows, so lists fell short or stalled. Rows are now filtered by state. fix(forgejo): merged and closed pull request lists only return their own rows pingdotgg/t3code#24772
• Long CJK titles pushed Live Activity payloads over the 4096-byte APNs limit and the iPhone card stopped updating. The relay now shrinks titles and alert text to fit. fix(relay): long CJK titles no longer stop Live Activity updates pingdotgg/t3code#24679
• A linked GitHub PR churned updates while mergeability flipped to unknown and back. The last known value is now kept while updatedAt is unchanged. fix(server): avoid transient GitHub mergeability sync churn pingdotgg/t3code#22022

Web

• Thread content stayed blank when an early fetch hit 404 before the create committed. Only thread.deleted is now remembered across mounts. fix(client): a new thread's content no longer stays blank after an early 404 pingdotgg/t3code#27722
• A saved sensitive provider variable lost its value when renamed or when its lock was clicked, with nothing on screen saying so. It now keeps its value. fix(web): keep saved sensitive variables from losing their value pingdotgg/t3code#23168
• Expanding Settled with several projects filtered crashed the app with React Add drag-and-drop project reordering to the sidebar pingdotgg/t3code#185, on every reload. The shelf no longer loops. fix(web): settled shelf no longer crashes with several projects filtered pingdotgg/t3code#27231
• A failed plan follow-up overwrote the next draft, or landed in another thread's composer. Restores now respect newer draft content. fix(web): a failed plan follow-up no longer overwrites the next draft pingdotgg/t3code#24684
• Renaming in the chat header without typing could overwrite a newer title. An untouched edit is now a no-op. fix(web): keep newer titles when an untouched header rename ends pingdotgg/t3code#23171
• Queued messages could not be saved while Compact and send ran. The composer now treats the server-acknowledged message as sent. fix(web): Queued messages can be edited during Compact and send pingdotgg/t3code#27310
• Choosing a diff base with no common commit hid the selector, even after reload. The controls now stay available. fix(web): keep diff base selector available after errors pingdotgg/t3code#27635
• Background work Stop flipped back to enabled after about 25 ms, inviting repeat interrupts. It now stays "Stopping..." until the tasks are gone (web and mobile). fix(clients): background work Stop stays pending until the stopped tasks leave pingdotgg/t3code#25002
• Clients stopped refreshing provider health after one activity report never answered. Reports now time out after 15 s (web and mobile). fix(web,mobile): time out client activity reports that never settle pingdotgg/t3code#24362
• Threads with hundreds of images flooded a remote with assets.createUrl requests. Client requests are now limited. fix(client-runtime): threads with many images no longer flood a remote with URL requests pingdotgg/t3code#27440
• Questions kept threads in Working when a run continued. Any pending user_input request now shows Input on all clients. fix(clients): questions always move a thread out of Working pingdotgg/t3code#28515
• A delegated child's approval link on a linked environment opened the new-thread page. It now opens on the child's environment (web and mobile). fix(clients): open a delegated child's approval on the environment it runs in pingdotgg/t3code#28592
• Threads on an unreachable environment hid in the collapsed Working shelf. They now show in the inbox. fix(web): threads on an unreachable environment no longer hide in the Working shelf pingdotgg/t3code#26195
• With the Local environment disabled, PR links at launch could open a scratch thread, and a deleted project's sidebar filter was never dropped. Both now wait on the right readiness. fix(web): PR links at launch open the PR view with the local environment disabled pingdotgg/t3code#26099 fix(web): sidebar drops a deleted project's filter with the local environment disabled pingdotgg/t3code#28179
• Local visit migration could undo Mark unread. It now seeds only a null server watermark. fix(web): local visit migration preserves mark unread pingdotgg/t3code#25746
• Re-pairing at a new address of the same kind kept the old token and permissions. The new token now applies. fix(client-runtime): re-pairing at a new address uses the new token pingdotgg/t3code#25591
• Bulk provider updates included environments without providers:manage and failed. They are now filtered out. fix(web): respect provider permissions in bulk updates pingdotgg/t3code#23183
• Installing two providers at once sent only the first request. Each instance now sends its own. fix(web): installing two providers at once starts both pingdotgg/t3code#24655
• A custom instance could inherit the default instance's draft model, hiding Reasoning. The model no longer carries over. fix(web): keep the default instance's draft model off custom instances pingdotgg/t3code#25511
• Composer fallback lost the effort of a model saved under an alias, such as 5.4. Aliases now count as the same model. fix(web): composer fallback keeps the effort of a model saved under an alias pingdotgg/t3code#27859
• Settings showed one environment's automatic default across environments. It now shows Automatic (mixed). fix(web): show mixed automatic defaults across environments pingdotgg/t3code#28005
• Model picker: it moved under the pointer when its label changed, broke on long names and agent options, squeezed in short windows, and kept an empty slot after Default. All four are fixed, and the popup holds its place. fix(web): keep the model picker in place when its label changes pingdotgg/t3code#28307 fix(web): model picker stays put with long names and agent options pingdotgg/t3code#28409 fix(web): model picker uses the full window height in short windows pingdotgg/t3code#29017 fix(web): effort picker shows Default or the checkmark, flush right pingdotgg/t3code#28162
• Typing /Model opus closed the picker because the spaced form was case-sensitive. It now matches. fix(shared): /Model with a query still opens the model picker pingdotgg/t3code#27837
• Skill menus said "No matching command" while project skills loaded, leaving a typed skill as plain text. They now show loading. fix(web): skill menus show loading while project skills arrive pingdotgg/t3code#28209
• Skill labels title-cased names such as superpowers:brainstorming. They now show the name as written unless a provider sets displayName. fix(web): skill labels show the skill's own name pingdotgg/t3code#27741
• Pressing Enter in the branch picker did nothing after a search. The first result is now highlighted and selected (bumps @base-ui/react to ^1.9.0). fix(web): Enter selects the first branch search result pingdotgg/t3code#27434
• Composer inline code: reverse-typed backticks, dead-key backticks and emphasis delimiters inside code spans misformatted. All now behave like Markdown. fix(web): format inline code when the opening backtick is typed last pingdotgg/t3code#23940 fix(web): format inline code typed with a dead-key backtick pingdotgg/t3code#27457 fix(web): composer emphasis shortcuts ignore delimiters inside inline code pingdotgg/t3code#25659
• Backspace looped re-nesting a checkbox under a bullet. It now removes it. fix(web): Backspace no longer re-nests a checkbox under a bullet pingdotgg/t3code#27384
• Paste-as-text did nothing on Cyrillic or Greek layouts. It now falls back to the physical KeyV. fix: paste-as-text shortcut on non-Latin layouts pingdotgg/t3code#28470
• A typed answer moved to the draft by an option click reappeared unannounced. A toast now says so. fix(web): typed answer moved to the draft by an option click is announced pingdotgg/t3code#24331
• Composer image thumbnails flickered to alt text. A local preview now stays visible. fix(web): prevent composer image thumbnail flicker pingdotgg/t3code#28499
• Citing chat text failed with a file find bar open, because the editor took the selection. It now works. fix(web): chat text can be cited while file search is open pingdotgg/t3code#27131
• Finished replies had no hover timestamp while commands ran. The latest finished reply now shows it. fix(web): finished replies keep their hover timestamp while commands run pingdotgg/t3code#28610
• Streamed replies rendered a list's code block differently from the finished reply. The splitter now matches. fix(web): streamed replies render a list's code block as the finished reply does pingdotgg/t3code#28285
• Bare URLs ending in _ or ~ lost that character from the link. It is now restored. fix(web): bare URL links keep trailing underscores and tildes pingdotgg/t3code#27794
• Dark-mode <picture> images showed "Image unavailable". The <source> is now resolved too. fix(web): dark-mode <picture> images load instead of showing "Image unavailable" pingdotgg/t3code#26398
• Hebrew and Arabic now read right to left in questions, citations, attachments and diff comments, and Arabic paragraphs with many English terms stay RTL. fix(web,mobile): Hebrew and Arabic read right to left in questions, citations, attachments and diff comments pingdotgg/t3code#24050 fix(web): Arabic paragraphs with many English terms now read right to left pingdotgg/t3code#26095
• Copy and Save image failed on data: URLs and on images the renderer could not fetch. data: URLs now decode locally and desktop reads through the main process. fix(web): copy and save images embedded as data URLs pingdotgg/t3code#23621 fix(desktop): save and copy any image the app can show pingdotgg/t3code#29079
• Expanded D2 and Mermaid SVGs stayed tiny in the image viewer. They now fill it. fix(web): expanded SVG diagrams fill the image viewer pingdotgg/t3code#27519
• Portrait videos in the Files panel played inside a 16:9 frame. They now keep their aspect ratio. fix(web): file preview videos keep their own aspect ratio pingdotgg/t3code#21839
• PDF previews lost their page on thread switch. Position and zoom are now cached. fix(web): PDF previews keep their page across thread switches pingdotgg/t3code#25496
• Clicking a file in the Files tree moved focus to another row. Focus now stays on it. fix(web): clicking a file in the Files tree keeps focus on that row pingdotgg/t3code#28521
• Terminal URLs like redis:// became broken file links. Paths inside a scheme:// URL are now dropped. fix(web): terminal URLs like redis:// no longer become broken file links pingdotgg/t3code#28189
• Interval settings saved on every keystroke, applying partial values such as 0 or 1. They now save when editing ends. fix(web): interval settings save when editing ends, not per keystroke pingdotgg/t3code#24673
• Esc while recording a shortcut closed Settings. It now only leaves the field. fix(web): Escape while recording a shortcut no longer closes Settings pingdotgg/t3code#27151
• Standalone shortcut handlers such as the sidebar toggle ignored editableFocus. They now honor it. fix(web): honor editableFocus in shortcut conditions pingdotgg/t3code#24134
• Settings search missed real rows and the Fallback model, and IME Enter or Escape jumped or cleared it. All fixed. fix(web): Settings search finds rows by their titles pingdotgg/t3code#27540 fix(web): find the fallback model in Settings search pingdotgg/t3code#27376 fix(web): settings search no longer jumps or clears on an IME Enter or Escape pingdotgg/t3code#28298
• IME Enter saved unfinished project names. Composing keys are now ignored. fix(web): keep project name edits open during IME composition pingdotgg/t3code#23231
• Theme editor: non-Latin names collided on one id, HEX dropped alpha, Esc kept the dragged color, and VS Code JSONC imports failed. All fixed. fix(web): give non-Latin theme names distinct stable ids pingdotgg/t3code#23162 fix(web): keep theme color alpha when a hex value is typed pingdotgg/t3code#23136 fix(web): Esc in the theme color picker restores the previous color pingdotgg/t3code#27472 fix(themes): accept VS Code JSONC imports pingdotgg/t3code#25375
• Custom dark themes ignored the sidebar's secondary text color. It now follows secondaryLabel. fix(web): sidebar metadata uses the theme's colors in dark mode pingdotgg/t3code#27268
• Appearance kept showing saved artwork a custom theme hides. The row now explains it. fix(web): explain when a theme hides environment artwork pingdotgg/t3code#27936
• The welcome wizard lost the project selection when going back a stage. It now stays. fix(web): the welcome wizard keeps the project selection when you go back a stage pingdotgg/t3code#24719
• Add Project looked up owner/ paths and showed a generic failure. Web and mobile now say the name is incomplete. fix(client): reject incomplete GitHub owner paths before lookup pingdotgg/t3code#23024
• The folder browser showed stale listings for up to five minutes. Listings now drop after 5 seconds idle. fix(client): the folder browser shows folders added or removed while T3 runs pingdotgg/t3code#28064
• Pasted Finder or Explorer paths could create a junk folder and project. The box now reads the named folder (web and mobile). fix(clients): pasting a path copied from Finder or Explorer adds that folder pingdotgg/t3code#28460
• PR lists and timelines compared timestamp text, misordering offsets. They now sort by time. fix(web): sort pull request lists and timelines by time pingdotgg/t3code#23588
• PR Code listed .logic.test.ts files at the end of the tests. They now sit beside their source. fix(web): PR diffs list a .logic.test.ts file beside the source it covers pingdotgg/t3code#23129
• PR merge buttons appeared late and shifted controls. They now stay mounted, disabled while the stack loads. fix(web): PR merge buttons stay in place while the stack loads pingdotgg/t3code#26077
• Merge stack and Rebase stack errors showed an internal prefix. They now read cleanly. fix(web): show readable errors when a stack action fails pingdotgg/t3code#24118
• Pending PR actions followed you to other threads. They now stay with their PR. fix(web): keep pending pull request actions scoped to each request pingdotgg/t3code#29005
• The command palette showed linked PRs as pending. It now shows the known state. fix(web): show linked pull request state in command palette rows pingdotgg/t3code#23156
• The Changes row showed +0 while Diff had edits. It now falls back to working tree totals. fix(web): Changes row no longer shows +0 while Diff has edits pingdotgg/t3code#28439
• Horizontal scrolling in diff and file panes could switch threads. The swipe guard now sees inside shadow roots. fix(web): horizontal scrolling inside diff and file panes no longer switches threads pingdotgg/t3code#28091
• mod+L did nothing with a page focused in the desktop browser. It now focuses the address bar. fix(web): mod+L focuses the browser address bar from a focused page pingdotgg/t3code#22328
• Inward mini browser resizes could grow it. The width now holds. fix(web): keep inward mini browser resizes from growing pingdotgg/t3code#26027
• Background command details jumped and flickered and showed the shell wrapper. They now open above the button with clean text. fix(web): background command details open above their button pingdotgg/t3code#28446
• Background work banners used "Waiting on" and styled non-commands as code. Status and label now separate with a dot (all clients). fix(web): clarify the waiting label for background work pingdotgg/t3code#28969
• Many automations hid the thread details section. The list now scrolls in a capped height. fix(web): many automations no longer hide the thread details Automations section pingdotgg/t3code#28585
• Device tools cleared typed text on failure. Fields now clear only on success. fix(web): device tools keep the typed text when a command fails pingdotgg/t3code#28323
• Lineage and side-chat tooltips hid the truncated title. They now show it. Show the full title in lineage/side-chat row tooltips pingdotgg/t3code#28326
• Deleting a thread left its right-panel, diff-panel and mini-player state behind. It is now cleared. fix(web): deleting a thread clears its saved right-panel, diff-panel and mini-player state pingdotgg/t3code#28386
• The star prompt appeared for servers without sourceControl.starred. It is now skipped for that session. fix(web): skip star prompt when the server check is unavailable pingdotgg/t3code#28364
• Diagnostics showed "1024.0 MB". It now uses the shared formatter. fix(web): Diagnostics memory no longer reads "1024.0 MB" pingdotgg/t3code#28300
• Usage limit toasts showed the Input icon. They now show the Limited icon. fix(web): usage limit toast shows the Limited icon pingdotgg/t3code#24260
• Changing the sidebar project filter kept the old scroll offset, and picking a project refocused the button with its ring and tooltip. Both fixed. fix(web): changing the sidebar project filter starts the list at the top pingdotgg/t3code#27327 fix(web): sidebar project filter no longer refocuses after a pick pingdotgg/t3code#28605
• Sidebar visual fixes: shelf animations overlapping headers, jump hints, folder rows jumping at large fonts, the undo notice pushing out the update button. fix(web): prevent sidebar shelf animations from overlapping headers pingdotgg/t3code#25384 fix(web): sidebar jump hints are readable and sit in the status slot pingdotgg/t3code#26112 fix(web): folder rows no longer jump at larger interface font sizes pingdotgg/t3code#28428 fix(web): the undo notice no longer pushes the update button out of the sidebar pingdotgg/t3code#27695
• Layout fixes: custom snooze fields, the maximize button jump, composer context icons, PR metadata spacing, PR viewed checkboxes. fix(web): line up the Date and Time fields in custom snooze pingdotgg/t3code#23360 fix(web): maximize button no longer jumps when the right panel closes pingdotgg/t3code#26232 fix(web): align composer context icons and space their labels pingdotgg/t3code#28083 fix(web): add spacing above PR detail metadata pingdotgg/t3code#28573 fix(web): align pull request file viewed checkboxes pingdotgg/t3code#28665

Desktop

• Agent browser use stole composer focus through clicks, reveals and overlapping presses. Host focus is now preserved and restored. fix(desktop): preserve host focus on preview pointer presses pingdotgg/t3code#28549 fix(preview): agent browser use no longer steals composer focus pingdotgg/t3code#28613
• Browser preview could redirect app exports to a temp folder, because its download settings hit the default session. They no longer do. fix(desktop): keep preview download settings out of app exports pingdotgg/t3code#25428
• A settings relaunch replayed the t3code:// link that launched the app on Linux and Windows. Relaunch now drops such arguments. fix(desktop): a settings relaunch no longer replays the link that launched the app pingdotgg/t3code#28464
• Slow backends hit the recovery screen at 60 seconds. The limit is now 3 minutes. fix(desktop): allow slow backends to start before showing recovery pingdotgg/t3code#26247
• Login-shell discovery blocked startup, and noisy shells could fail it. Startup now uses a cached environment and refreshes in the background, and stderr is ignored. fix(desktop): discover shell environment without blocking startup pingdotgg/t3code#28556 fix(desktop): keep noisy shell probes from blocking PATH capture pingdotgg/t3code#21913
• Packaged Linux startup could hang on xdg-mime default. It now has a 5-second timeout. fix(desktop): bound the Linux xdg-mime registration like its sibling helpers pingdotgg/t3code#28368
• Importing Chrome cookies froze all windows on macOS keychain prompts. The read now runs off the main thread. fix(desktop): read the Chrome cookie key off the main thread on macOS pingdotgg/t3code#23157
• macOS SnapShots captured helper strips instead of the content window. Auxiliary windows are now skipped. fix(desktop): skip auxiliary macOS snapshot windows pingdotgg/t3code#22624
• Hyprland SnapShots failed after every app update. An installed helper now updates itself, and setup errors are shown. fix(desktop): SnapShots keep working on Hyprland after an app update pingdotgg/t3code#28240
• Settings > About offered an Install that t3 on PATH blocked. It is now disabled. fix(desktop): disable blocked t3 CLI installation pingdotgg/t3code#27286
• Folder references were refused on saved loopback servers with Local environment off. They are now allowed. fix(web): allow folder references on saved local desktop servers pingdotgg/t3code#27785

Mobile

• Resume queue did nothing on a usage-limited thread. It now continues the limited run first. fix(mobile): resume continues a usage-limited thread before its queue pingdotgg/t3code#27662
• Finished threads stayed in Working after the grace period. They now leave it. fix(mobile): finished threads leave Working once the grace ends pingdotgg/t3code#28169
• Images re-downloaded on every thread open because URLs are re-signed. Images are now cached by identity. fix(mobile): images stop re-downloading when their URL is re-signed pingdotgg/t3code#21527
• Android: markdown images and text below them shook without touch. The first decoded size is now kept. fix(mobile): markdown images no longer shake on Android pingdotgg/t3code#27943
• Android: files with brackets in their names failed to attach. They now attach. fix(mobile): files with brackets in their names attach on Android pingdotgg/t3code#28983
• Android 7-11: image drops added no attachment. The native composer now handles them. fix(mobile): handle image drops in the Android composer pingdotgg/t3code#25573
• Android: the commit sheet could not scroll to its buttons. It now does. fix(mobile): Android commit sheet scrolls to the commit buttons pingdotgg/t3code#28272
• Android: TalkBack read Send before the message field. It now follows the screen order. fix(mobile): TalkBack reads the message field before Send pingdotgg/t3code#27249
• Android: larger system text left extra space under single-line thread titles, and the reserved compose space was restored. fix(mobile): keep Android thread title spacing consistent pingdotgg/t3code#26666 fix(mobile): restore the reserved compose space on Android pingdotgg/t3code#28819
• Home list: it could open scrolled down on iOS, closed search reopened on iOS 27, and returning from PRs could jump the list back to the top. All fixed. fix(mobile): Home list no longer opens scrolled down pingdotgg/t3code#27155 fix(mobile): a closed empty search stays closed after returning pingdotgg/t3code#27184 fix(mobile): preserve chat scroll position on tab returns pingdotgg/t3code#27393
• Thread links never showed titles on Hermes. They now do. fix(mobile): thread links show their thread's title pingdotgg/t3code#26485
• The worktree base stayed on main after Git status loaded. An untouched field now follows the current branch. fix(mobile): use loaded branch for untouched worktree base pingdotgg/t3code#23241
• Long approval prompts produced unbounded live work-log summaries. They are now capped at 200 characters. fix(mobile): cap live work-log summaries for long approval prompts pingdotgg/t3code#23227
• Reduced motion could leave model names invisible and labels overlapping. Views now stay visible and aligned. fix(mobile): keep reduced-motion views visible and aligned pingdotgg/t3code#23230
• PR timeline: Bitbucket and GitCafe approvals showed as commented, and single discussions said "1 comments". Both fixed. fix(mobile): Bitbucket and GitCafe approvals show as approved on the PR timeline pingdotgg/t3code#23138 fix(mobile): single-comment PR discussions say "1 comment", not "1 comments" pingdotgg/t3code#22926
• The microphone settings page offered permission when voice input was unavailable. It now explains why. fix(mobile): explain why voice input is unavailable pingdotgg/t3code#28698
• Inactive drafts held Git-status demand for hidden repositories. It is now released. fix(mobile): release inactive draft Git status demand pingdotgg/t3code#25254
• Visual fixes: terminal Attach button above the home indicator, Material You disabled send button, sent messages rising from the composer, drafts using the thread card layout. fix(mobile): iOS terminal's Attach visible output clears the home indicator pingdotgg/t3code#22418 fix(mobile): disabled send button is readable in Material You dark pingdotgg/t3code#23155 fix(mobile): sent messages rise into place instead of dropping in pingdotgg/t3code#28660 fix(mobile): give drafts the current thread card layout pingdotgg/t3code#28789

Other notable changes

• Security: server preview browser moves to chrome-headless-shell 156.0.8078.80, picking up Google's Oct 29 fixes including Critical CVE-2026-76024. fix(server): preview browser picks up Chrome 156.0.8078.79 security fixes pingdotgg/t3code#27822
• Desktop startup loads the renderer alongside the backend, showing the logo splash while the backend starts. fix(desktop): load the renderer while the backend starts pingdotgg/t3code#28715
• Cursor's agent SDK and SQLite store load only when needed; metadata comes from Cursor's HTTP endpoints. perf(cursor): load the agent SDK only when needed pingdotgg/t3code#28718
• Startup and CLI: t3 reuses Node's compile cache, and connects no longer wait on editor and SSH target discovery. perf(server): reuse compiled modules for CLI commands pingdotgg/t3code#27433 perf(server): connects no longer wait on editor and SSH target discovery pingdotgg/t3code#14519
• Codex calls t3_thread_wait directly instead of from Code Mode through a second MCP entry, renamed t3-code-direct. perf(server): Codex calls t3_thread_wait directly instead of from Code Mode pingdotgg/t3code#29026 refactor(server): name Codex's direct-only T3 MCP server t3-code-direct pingdotgg/t3code#29068
• Opening a chat no longer auto-loads its thread family, which held the database reader for 10 s in one trace. fix(clients): stop loading thread families when opening chats pingdotgg/t3code#26762
• Claude processes now set CLAUDE_CODE_ENTRYPOINT=t3-code unless instance or settings.json values override it. update the claude entrypoint identifier for accuracy pingdotgg/t3code#28410
• Telemetry adds provider.request.completed and confirmed-model reporting so token reports compare models fairly. fix(server): token telemetry counts each request once and only confirmed models pingdotgg/t3code#29001
• Codex request spans now carry RPC method and request ID attributes. perf(codex): trace app server request latency pingdotgg/t3code#28666
• Device: expo-device-hub 0.19.1 replaces the H.264 metadata workaround. fix(device): use expo-device-hub 0.19.1 pingdotgg/t3code#28346
• Server query performance: turn start uses a run index, t3_thread_read loads pages in one query, MCP calls skip message history, sends skip projection rereads, projects hydrate per page, and forks skip unused data. fix(server): look up a run's turn-start items by run, not by walking thread history pingdotgg/t3code#28343 perf(server): t3_thread_read loads a page's items in one query pingdotgg/t3code#23176 perf(server): MCP calls skip the caller's message history pingdotgg/t3code#28282 perf(server): sending a message no longer rereads the thread from the database after settle, snooze or title updates pingdotgg/t3code#28301 perf(server): hydrate only the requested project page pingdotgg/t3code#26655 perf(server): skip unused parent data when forking threads pingdotgg/t3code#28265
• Task and settlement performance: thread and task waits skip unused history and unrelated siblings, acknowledgments read less, settlement skips no-op decisions, and side chat context stops at its cap. perf(server): avoid unused history reads during thread waits pingdotgg/t3code#27032 perf(server): task waits skip unrelated sibling updates pingdotgg/t3code#27920 perf(server): avoid unused history when acknowledging tasks pingdotgg/t3code#27803 perf(server): skip no-op settlement decisions pingdotgg/t3code#27897 perf(server): stop summarizing side chat context at its cap pingdotgg/t3code#28266
• Git performance: fewer processes for worktree creation, status reuses untracked paths and sorts once, and projects without a repository stop spawning git each lookup. perf(server): worktree creation spawns fewer git processes pingdotgg/t3code#28582 perf(server): reuse untracked paths in Git status pingdotgg/t3code#28374 perf(server): sort the working-tree file list once per status read pingdotgg/t3code#22499 perf(server): projects without a repository stop spawning git on every lookup pingdotgg/t3code#27980
• Protocol and output performance: ACP stdout framing is linear, command output folding stops copying scrollback, terminal styles skip parsing on cache hits, resume counts lines without allocations, and replay measurement stops at its cap. perf(effect-acp): frame large ACP stdout lines in linear time pingdotgg/t3code#26686 perf(shared): fold command output without copying scrollback per chunk pingdotgg/t3code#26691 perf(shared): skip parsing cached terminal styles pingdotgg/t3code#27041 perf(shared): count terminal resume lines without allocations pingdotgg/t3code#28539 perf(server): stop measuring replay bytes once over budget pingdotgg/t3code#27405
• Peer linking builds only the HTTP endpoints it uses. perf(server): avoid building unused peer HTTP clients pingdotgg/t3code#28405
• Web rendering: fewer re-renders from terminal updates, chat redraws, main-thread events, typing and resumes, and repeated settings keep object identity. perf(web): terminal updates no longer re-render every sidebar row and chat pingdotgg/t3code#28563 perf(web): chat view redraws no longer re-render the composer or side chat timeline pingdotgg/t3code#28564 perf(web): main thread updates no longer re-render an open side chat pingdotgg/t3code#28264 perf(web): typing in a thread no longer re-renders sidebar drafts pingdotgg/t3code#28267 fix(client): a resume no longer re-renders every home row five times pingdotgg/t3code#27404 perf(client): repeated server settings keep the same settings object pingdotgg/t3code#27818
• Web and client work: the composer serializes once per keystroke, thread search reuses fields, Ghostty snapshots reuse WASM views, and shell deltas merge per batch. perf(web): composer serializes each draft doc once per keystroke pingdotgg/t3code#26720 perf(clients): thread search reuses per-thread fields across keystrokes pingdotgg/t3code#26936 perf(web): terminal snapshots reuse WASM memory views pingdotgg/t3code#26717 perf(client-runtime): merge shell deltas once per received batch pingdotgg/t3code#18416
• Smaller client savings: file tree refreshes coalesce, subagent previews stop at the visible prefix, checkpoint answers use one scan, changed-file trees compact once, inbox snapshots avoid arrays, minimap highlights drop extra nodes, and plan prefixes strip linearly. perf(web): coalesce overlapping file tree refreshes pingdotgg/t3code#18421 perf(clients): bound subagent preview processing to the visible prefix pingdotgg/t3code#21277 perf(client-runtime): index checkpoint answers in one bounded scan pingdotgg/t3code#25258 perf(web): compact changed-file directories once pingdotgg/t3code#27073 perf(client): avoid temporary arrays in inbox snapshots pingdotgg/t3code#27467 perf(web): render minimap highlights without extra nodes pingdotgg/t3code#28270 perf(shared): strip plan prefixes in linear time pingdotgg/t3code#28537
• Mobile performance: chat lists are reused across navigation, and text files open with one less round trip on remote hosts. perf(mobile): reuse chat lists across navigation renders pingdotgg/t3code#27026 perf(mobile): text files open in half the time on a remote host pingdotgg/t3code#27850
• SnapShots on Hyprland and KDE encode PNGs faster at DEFLATE level 2. perf(desktop): speed up Hyprland and KDE SnapShots pingdotgg/t3code#23137
• Linux desktop drops the unused --class switch. refactor(desktop): Drop the unused Linux --class switch pingdotgg/t3code#14482
• CI and release: PR Vouch skips ordinary comments, the thread transfer report stops paging all runs, preview releases run from any branch, and the change classifier now covers the T3 Connect guide and providerEnv.ts. perf(ci): skip PR vouch jobs for ordinary comments pingdotgg/t3code#23387 perf(ci): thread transfer report stops paging all main CI runs pingdotgg/t3code#23633 ci(release): preview releases run from any branch pingdotgg/t3code#27828 fix(ci): a change to the T3 Connect troubleshooting guide runs the server test that reads it pingdotgg/t3code#28273 fix(ci): a providerEnv.ts change runs every package's tests pingdotgg/t3code#28286
• Maintainer scripts: check:changed works on Windows and runs .github/scripts tests with node --test, Alchemy sync reads the catalog, report:renders no longer needs ~/.cache, dev seeding accepts bootable ledgers, screenshot validation decodes PNGs, and eval summaries stop calling proxied runs free. fix(scripts): launch check:changed on Windows without a vp shim pingdotgg/t3code#24164 fix(scripts): check:changed no longer passes failing .github/scripts tests pingdotgg/t3code#28296 fix(scripts): Alchemy reference sync reads the catalog version pingdotgg/t3code#28268 fix(scripts): report:renders works on machines without ~/.cache pingdotgg/t3code#28274 fix(server): dev seeding accepts migration histories the server boots pingdotgg/t3code#24665 fix(screenshots): reject corrupt PNGs during validation pingdotgg/t3code#23161 fix(evals): GPT eval summaries no longer call a proxied run free pingdotgg/t3code#28403
• Copy: clearer settings, task and webhook text, including "Duplicate request key" replacing "Replay key". fix(copy): clarify thread and source control settings pingdotgg/t3code#24148 fix(copy): clarify unavailable tasks and duplicate requests pingdotgg/t3code#24149
• Docs: context meter setup, OpenCode compaction, Claude idle compaction fallback, Android 16 Agent Live Updates, fx in the README, store links in the mobile README, and corrections to Codex rollback and composer banner guidance. docs: explain how to enable the context window indicator pingdotgg/t3code#21678 docs(opencode): say where compaction is configured pingdotgg/t3code#27614 docs(claude): explain idle compaction fallback pingdotgg/t3code#28532 docs(mobile): name the Android 16 Agent Live Updates switch in the notifications guide pingdotgg/t3code#28310 docs(readme): list fx as a supported provider pingdotgg/t3code#25974 docs(mobile): mobile README links the store apps instead of calling the app unreleased pingdotgg/t3code#28269 docs(orchestration-v2): Codex rollback uses thread/revert on paginated threads pingdotgg/t3code#25705 docs: composer banner guidance names a consumer that still exists pingdotgg/t3code#28276

Merge report

Commits merged: 351 upstream commits (350 PRs plus the v0.1.6 release commit), through c65f8d552b. Merged as a merge commit. Please land this PR as a merge commit too, not a squash.

Conflicts resolved (11 files):

• apps/desktop/src/main.ts, updates/DesktopUpdates.ts, updates/updatesTestHarness.ts: kept the fork's MacSelfInstall alongside upstream's new DesktopUpdatePolicy and DesktopManagedPolicy. Both layers are provided.
• apps/mobile/src/features/threads/ThreadRouteScreen.tsx, packages/contracts/src/index.ts, packages/provider-acp/src/server/adapter.ts: kept both sides' imports and exports.
• packages/contracts/src/settings.ts: kept the fork's mcpServers and disabledSkills plus upstream's usageModelFilter.
• packages/provider-opencode/src/server/adapter.test.ts: kept both sides' tests.
• apps/web/src/components/chat/ChatComposer.tsx: kept the fork's disabled-skills filter and took upstream's { refresh, scanning } return shape.
• apps/server/src/orchestration-v2/Adapters/CodexAdapterV2.ts: combined upstream's new threadId param and t3-code-direct server with the fork's user MCP servers and threadRuntimeParams wrapper. All four call sites pass threadId.
• apps/server/src/provider/agentContextBudget.json: set to the measured values on the merged tree (claudeSystemAppendBytes 6785, codexAdditionalContextBytes 8511, mcpToolListJsonBytes 49914).

Judgment calls and clean auto-merges that needed fixing:

• apps/server/src/serverSettings.ts: upstream's managed policy made updateAndPersistSettings take the patch so it can vet writes. The fork's updateSettingsWith builds its patch inside the write lock, so the helper now accepts a patch or a builder. Fork writes go through the same policy check.
• t3-code-direct is now a reserved MCP server name in both packages/contracts/src/mcpServers.ts and agentTools.ts. Without this, a user server with that name could replace the Codex direct-call registration.
• CodexAdapterV2.test.ts: fork tests updated for the required threadId and the extra t3-code-direct server.
• packages/contracts/src/agentTools.ts: shortened one fork comment that failed the no-low-value-comments pre-commit lint.

Verification:

• node scripts/fork-brand.ts --check: passes (197 files).
• Typecheck: passes on apps/server, apps/web, apps/desktop, apps/mobile, packages/contracts, packages/shared, packages/client-runtime, packages/provider-acp, packages/provider-opencode.
• Fork test files and tests beside conflicted files: all pass in web, desktop, mobile, client-runtime, shared, contracts, every provider package, and scripts/. apps/server has failures, listed here:

Failure	origin/main	Pristine upstream/main	Status
ServerEnvironment.test.ts "publishes proven install ownership"	not run	fails	Known upstream macOS failure
OpenCode2OrchestratorV2.integration.test.ts (5 tests)	fails	passes	Already broken on the fork before this merge. The replay fixture expects a session.update where the adapter sends event.subscribe. Not fixed here
McpUpstreamRoute.test.ts "reports a rejected credential without answering 401"	passes 12 of 12 runs	not run	Intermittent on this branch: failed 3 of 24 runs with status 200 instead of 503. Root cause not found. Its failure did not reproduce in the 12 instrumented runs

The last row needs a follow-up. It may be a test race, but I could not rule out a real problem, so treat the rejected-credential path as unverified until it is understood.

Worked by Claude Opus 5.5 in Claude Code.

🤖 Generated with Claude Code