sync: classic-merge upstream/main (52e4b44293) into fork/dev

apps/desktop/package.json

@@ -24,9 +24,9 @@
     "@t3tools/tailscale": "workspace:*",
     "dbus-next": "0.10.2",
     "effect": "catalog:",
-    "electron": "44.1.0",
+    "electron": "44.4.2",
     "electron-store": "^8.2.0",
-    "electron-updater": "^6.6.2",
+    "electron-updater": "^6.8.9",
     "ffi-rs": "1.3.2",
     "playwright-core": "1.60.0",
     "react-grab": "^0.1.32"

apps/marketing/package.json

@@ -16,7 +16,7 @@
     "sharp": "0.35.4"
   },
   "devDependencies": {
-    "@astrojs/check": "^0.9.7",
+    "@astrojs/check": "^0.9.10",
     "@vercel/config": "^0.3.0",
     "typescript": "~6.0.3"
   }

apps/server/package.json

@@ -23,7 +23,7 @@
     "test": "vp test run"
   },
   "dependencies": {
-    "@anthropic-ai/claude-agent-sdk": "^0.3.260",
+    "@anthropic-ai/claude-agent-sdk": "^0.3.276",
     "@effect/platform-node": "catalog:",
     "@effect/platform-node-shared": "catalog:",
     "@ff-labs/fff-node": "0.9.4",

infra/relay/package.json

@@ -18,7 +18,7 @@
     "@t3tools/client-runtime": "workspace:*",
     "@t3tools/contracts": "workspace:*",
     "@t3tools/shared": "workspace:*",
-    "alchemy": "2.0.0-beta.78",
+    "alchemy": "2.0.0-beta.79",
     "drizzle-orm": "1.0.0-rc.5-ab785fc",
     "effect": "catalog:"
   },

pnpm-workspace.yaml

@@ -15,7 +15,7 @@ allowBuilds:
   electron: true
   electron-winstaller: false
   esbuild: true
-  msgpackr-extract: set this to true or false
+  msgpackr-extract: true
   msw: false
   node-pty: true
   sharp: true
@@ -74,7 +74,7 @@ minimumReleaseAgeExclude:
   - "@effect/platform-node@4.0.0-rc.115"
   - "@effect/sql-pg@4.0.0-rc.115"
   - "@effect/vitest@4.0.0-rc.115"
-  - alchemy@2.0.0-beta.78
+  - alchemy@2.0.0-beta.79
   - effect@4.0.0-rc.115
   - "@legendapp/list@3.3.5"
   - "@expo/cli@57.0.20"
@@ -86,11 +86,11 @@ minimumReleaseAgeExclude:
   - expo-updates@57.0.19
   - expo@57.0.18
   - expo-widgets@57.0.15
-  - electron@44.1.0
-  - "@anthropic-ai/claude-agent-sdk@0.3.260"
-  - "@alchemy.run/cloudflare-runtime@2.0.0-beta.78"
-  - "@alchemy.run/floci@2.0.0-beta.78"
-  - "@alchemy.run/node-utils@2.0.0-beta.78"
+  - electron@44.4.2
+  - "@anthropic-ai/claude-agent-sdk@0.3.276"
+  - "@alchemy.run/cloudflare-runtime@2.0.0-beta.79"
+  - "@alchemy.run/floci@2.0.0-beta.79"
+  - "@alchemy.run/node-utils@2.0.0-beta.79"
   - "@distilled.cloud/fly-io@1.0.0-rc.12"
   - "@distilled.cloud/hetzner@1.0.0-rc.12"
   - "@distilled.cloud/prisma@1.0.0-rc.12"
@@ -118,6 +118,10 @@ overrides:
   "@alchemy.run/sigil>react": "-"
   "@alchemy.run/sigil>react-reconciler": "-"
   "@alchemy.run/sigil>scheduler": "-"
+  # Alchemy only reaches @prisma/dev through a lazy import inside the Prisma
+  # database provider, which the relay never deploys. Its exact hono/valibot
+  # pins are also the bulk of our open dependency advisories.
+  "alchemy>@prisma/dev": "-"
   "@clerk/backend": "catalog:"
   "@clerk/clerk-js": "catalog:"
   "@clerk/clerk-js>@base-org/account": "-"

scripts/build-desktop-artifact.test.ts

@@ -1,5 +1,6 @@
 // @effect-diagnostics nodeBuiltinImport:off - Tests use Node's glob matcher to verify electron-builder exclusions.
 import * as NodeCrypto from "node:crypto";
+import * as NodeFS from "node:fs";
 import * as NodePath from "node:path";
 
 import * as NodeServices from "@effect/platform-node/NodeServices";
@@ -10,6 +11,8 @@ import * as FileSystem from "effect/FileSystem";
 import * as Layer from "effect/Layer";
 import * as Option from "effect/Option";
 import * as Path from "effect/Path";
+import * as Schema from "effect/Schema";
+import { fromYaml } from "@t3tools/shared/schemaYaml";
 import * as Sink from "effect/Sink";
 import * as Stream from "effect/Stream";
 import { ChildProcess, ChildProcessSpawner } from "effect/unstable/process";
@@ -509,6 +512,23 @@ it.layer(NodeServices.layer)("build-desktop-artifact", (it) => {
     });
   });
 
+  it("keeps repo allowBuilds entries as booleans", () => {
+    const text = NodeFS.readFileSync(
+      NodePath.join(import.meta.dirname, "..", "pnpm-workspace.yaml"),
+      "utf8",
+    );
+    const decoded = Schema.decodeUnknownSync(
+      fromYaml(
+        Schema.Struct({
+          allowBuilds: Schema.optional(Schema.Record(Schema.String, Schema.Boolean)),
+        }),
+      ),
+    )(text);
+    const allowBuilds = decoded.allowBuilds ?? {};
+    assert.ok(Object.keys(allowBuilds).length > 0);
+    assert.strictEqual(allowBuilds["msgpackr-extract"], true);
+  });
+
   it("stages pnpm 11 allowBuilds and patchedDependencies in the workspace yaml", () => {
     assert.deepStrictEqual(
       createStageWorkspaceConfig({

scripts/build-desktop-artifact.ts

@@ -2888,27 +2888,17 @@ export const packWindowsServerAsar = Effect.fn("packWindowsServerAsar")(function
   readonly arch: typeof BuildArch.Type;
 }) {
   const fs = yield* FileSystem.FileSystem;
-  const archiveStream = yield* Effect.tryPromise({
+  yield* Effect.tryPromise({
     try: () =>
       createPackageWithOptions(input.sourceDir, input.asarPath, {
         dot: true,
         unpack: WINDOWS_NATIVE_ASAR_UNPACK_GLOB,
-        globOptions: { ignore: resolveWindowsServerAsarIgnoreGlobs(input.arch) },
-      }),
-    catch: (cause) => new WindowsServerSidecarPackError({ asarPath: input.asarPath, cause }),
-  });
-  yield* Effect.tryPromise({
-    try: () =>
-      new Promise<void>((resolve, reject) => {
-        const stream = archiveStream as NodeJS.WritableStream & {
-          readonly writableFinished?: boolean;
-        };
-        if (stream.writableFinished === true) {
-          resolve();
-          return;
-        }
-        stream.once("finish", resolve);
-        stream.once("error", reject);
+        // glob 13 (via @electron/asar 4) matches `ignore` relative to `cwd`,
+        // not against the absolute paths it crawls, so anchor it at the source.
+        globOptions: {
+          cwd: input.sourceDir,
+          ignore: resolveWindowsServerAsarIgnoreGlobs(input.arch),
+        },
       }),
     catch: (cause) => new WindowsServerSidecarPackError({ asarPath: input.asarPath, cause }),
   });

scripts/package.json

@@ -8,7 +8,7 @@
   },
   "dependencies": {
     "@effect/platform-node": "catalog:",
-    "@electron/asar": "^3.4.1",
+    "@electron/asar": "^4.3.0",
     "@electron/osx-sign": "2.7.0",
     "@t3tools/shared": "workspace:*",
     "@t3tools/tailscale": "workspace:*",