fix(projects): prevent invalid script IDs from crashing threads by saphid · Pull Request #10019 · pingdotgg/t3code

saphid · 2026-09-05T07:36:22Z

What Changed

Prevent invalid project script IDs from crashing thread views and project settings. New script IDs are checked against the existing shortcut schema before the server emits an update. Previously saved IDs remain readable, editable, runnable and removable; unsupported shortcut commands return null instead of throwing.

Why

A saved ID such as install-javascript-dependencies passes the project schema but exceeds the shortcut schema's 24-character limit. Rendering the script menu then throws Expected a string matching template literal parts and replaces the entire thread with an error page. Validating only newly introduced IDs avoids locking users out of repairing existing scripts or replaying old events.

Verification

CI passed on 0543a40fe, including all server test shards, release smoke, Rust and the repository check job. Cursor Bugbot and all Macroscope checks passed with no actionable findings; Macroscope submitted an approval. CodeRabbit automatic review is disabled.

Regression tests failed on the base with the exact crash and accepted invalid updates: 15 failures, 23 passes.
vp test run apps/web/src/projectScripts.test.ts apps/web/src/lib/projectScriptKeybindings.test.ts apps/web/src/keybindings.test.ts apps/server/src/orchestration/decider.projectScripts.test.ts — 91 passed.
vp exec tsgo --noEmit -p apps/web/tsconfig.json and -p apps/server/tsconfig.json — passed.
Targeted formatting and lint on the eight changed files — passed; existing ChatView effect warnings remain.
Disposable web app: reproduced the base crash, reopened the same thread with the same invalid ID after the fix, saved and ran the legacy action, edited it in project settings, verified persistence, then deleted it and verified the valid action remained. An invalid API update was rejected without changing saved scripts.

The server guard applies to all clients and connection modes; the rendering fix covers shared web/desktop UI. Native mobile and Electron-specific behavior were not exercised. HTTP retains its existing generic 500 response for command-invariant failures; the decider supplies the specific validation message. No wire or persisted-event schema changes.

UI Changes

Same synthetic project, script ID, dark theme and 1280×800 viewport. Before: upstream 363cde411; after: 0543a40fe. The action runs a harmless echo command.

Before: opening the thread crashes while building script shortcuts.

After: the thread opens and the same legacy action runs successfully.

Save and run the legacy action — 10-second web demo. Idle time removed; no playback speed change or timing claim.

Checklist

This PR is small and focused
I explained what changed and why
I included before/after screenshots for UI changes
I included a video for the affected interaction

Implemented by Codex (OpenAI) in the T3 Code Codex harness. Independent review command: claude --model claude-opus-5 --effort high --tools '' -p …; it exited 1 because OAuth was expired, so no Claude review occurred.

Note

Medium Risk
Touches orchestration invariants and shared script/keybinding UI paths, but behavior is narrowly scoped to script ID validation and graceful null handling rather than auth or data migration.

Overview
Fixes thread crashes when a project has legacy script IDs (e.g. install-javascript-dependencies) that pass project storage but fail the 24-character shortcut command schema.

Server: project.meta.update now rejects newly introduced script IDs that cannot form a valid script.{id}.run keybinding command, while still allowing existing IDs to be edited, removed, or kept alongside valid additions.

Web: commandForProjectScript returns null instead of constructing an invalid command; keybinding helpers and script persistence accept a nullable command so script menus and threads render without throwing, with no shortcut label for unsupported IDs.

^{Reviewed by Cursor Bugbot for commit 0543a40. Bugbot is set up for automated code reviews on this repo. Configure here.}

Current-base verification

Updated to upstream main b2e15185aee22bfdee78806f2734b0a4de9c2c77 at 29e3cf42d2ff5ee18daa6b913d467b67c182c4a5. All 6 applicable focused verification commands passed (38 passing test executions). Earlier runtime observations and media retain their stated revisions and limitations; these fresh runs do not constitute new client recordings. Fresh independent Claude review is unavailable because its OAuth credentials have expired. Refreshed by GPT-6 Astra in the Codex harness.

Note

Reject invalid script IDs in `project.meta.update` decider and handle null commands in web client

Adds a script-command schema matcher and max ID-length constant to the orchestration decider. During project.meta.update, only newly introduced script IDs are validated; persisted legacy IDs pass through so they can be edited or removed.
commandForProjectScript in projectScripts.ts now returns a nullable command. IDs that don't match the script-run format produce no keybinding command, so legacy scripts without shortcuts still work.
Web keybinding utilities (shortcutLabelForCommand, keybindingValueForCommand, decodeProjectScriptKeybindingRule) and the ChatView persistence callback accept null commands. Null commands yield null shortcuts and cannot be assigned a non-empty keybinding rule.
Behavioral Change: newly submitted script IDs that fail the format check now raise an OrchestrationCommandInvariantError; existing persisted invalid IDs remain accepted but produce no shortcut command.

^{Macroscope summarized 29e3cf4.}

Latest-main refresh — 7 September 2026

Merged upstream main 08c715ed93f8a6bfd85d42f5a8b7dbe12404554d into the existing branch at 8ce906ce62539a4f0bd7a69d87133a52128aa47a. The contribution remains eight focused paths and is still absent from main.

Fresh verification on that exact head passed: 16 project-script decider tests, 22 web script/keybinding tests, server and web typechecks, scoped lint, scoped formatting, and git diff --check. Scoped lint retains only existing ChatView React effect warnings. Every current commandForProjectScript caller was reviewed for the nullable legacy-ID result; no actionable issue was found.

Earlier real-client evidence and media retain their recorded revisions and limitations; this refresh did not run a client or create new media. No fresh independent Claude review occurred because the known OAuth credential remains expired. Refreshed and self-reviewed by GPT-6 in the Codex harness.

Latest-base follow-up

After upstream advanced, merged pingdotgg/t3code@5b68b2c8e1e971e4ee6956157a1698646ef52a55 and pushed exact head 5b62d5a9d0383e1e16fa05832415a9c30b14400f. The additional upstream commit changes React Native mobile and shared orchestration timing paths, with no overlap in this contribution's eight files. On the final head, the 16 server tests and 22 web tests passed again; server and web package typechecks, scoped lint, formatting, and git diff --check also passed. Existing lint warnings in ChatView.tsx and Effect typecheck suggestions remain outside the contribution.

macroscopeapp · 2026-09-05T07:39:45Z

Approvability

Verdict: Approved at 0543a40

Macroscope's review found this PR approvable — This is a narrowly scoped fix for legacy project-script IDs, adding server validation and nullable shortcut handling while preserving existing valid and persisted scripts. The affected paths are well covered by targeted regression tests, with no schema, deployment, security, billing, default, or static-analysis changes.

^{You can add or adjust custom eligibility rules. Learn more.}

…pr-10019

coderabbitai · 2026-09-07T07:11:28Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Team

Run ID: 2da3a1cd-a945-46b5-bfc9-73f76c6748eb

📥 Commits

Reviewing files that changed from the base of the PR and between 08c715e and 8ce906c.

📒 Files selected for processing (8)

apps/server/src/orchestration/decider.projectScripts.test.ts
apps/server/src/orchestration/decider.ts
apps/web/src/components/ChatView.tsx
apps/web/src/keybindings.ts
apps/web/src/lib/projectScriptKeybindings.test.ts
apps/web/src/lib/projectScriptKeybindings.ts
apps/web/src/projectScripts.test.ts
apps/web/src/projectScripts.ts

Included review availability: Your plan provides up to 10 included reviews per hour; 5 remain after this review.

📝 Walkthrough

Walkthrough

The server now validates new project script IDs against the supported format while preserving existing legacy scripts. The web application represents unsupported script commands as null and handles them during shortcut labeling, decoding, persistence, and testing.

Changes

Project script compatibility

Layer / File(s)	Summary
Server script ID validation `apps/server/src/orchestration/decider.ts`, `apps/server/src/orchestration/decider.projectScripts.test.ts`	Project updates reject invalid new script IDs, accept IDs up to `MAX_SCRIPT_ID_LENGTH`, and preserve existing legacy scripts for editing and removal.
Nullable project script commands `apps/web/src/projectScripts.ts`, `apps/web/src/projectScripts.test.ts`, `apps/web/src/components/ChatView.tsx`, `apps/web/src/keybindings.ts`	`commandForProjectScript` returns `null` for unsupported IDs. Command persistence and shortcut labels accept nullable commands.
Legacy keybinding handling `apps/web/src/lib/projectScriptKeybindings.ts`, `apps/web/src/lib/projectScriptKeybindings.test.ts`	Keybinding lookup returns `null` for absent commands, while decoding rejects shortcut rules for legacy commands. Tests cover these cases.

Estimated code review effort: 3 (Moderate) | ~20 minutes

Merge Risk: ⚪ Minimal · up to 8ce90

Project scripts with unsupported legacy IDs no longer crash thread views or settings, while new invalid IDs are rejected without changing saved scripts. The covered validation and compatibility paths indicate no remaining merge-blocking risk.

Suggested reviewers: juliusmarminge, justsomelegs, t3dotgg

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 14.29% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 7 functions across 8 files.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	The title clearly and concisely describes the main change: preventing invalid script IDs from crashing thread views.
Description check	✅ Passed	The description covers the required What Changed, Why, UI Changes, and Checklist sections. It explains the validation behavior, legacy-ID handling, verification results, and UI evidence.

Fix all pre-merge checks with AI

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests

_{Comment @coderabbitai help to get the list of available commands.}

@juliusmarminge

## What's Changed * fix(mobile): keep pending messages in the chat timeline by @juliusmarminge in pingdotgg/t3code#10449 * fix(mobile): show connection status in the floating pill instead of a second one by @juliusmarminge in pingdotgg/t3code#10440 * fix: use Pierre icons consistently for attachments by @juliusmarminge in pingdotgg/t3code#10475 * feat(mobile): open the thread screen as soon as a new task is submitted by @juliusmarminge in pingdotgg/t3code#10435 * fix(devcontainer): make repository setup work by @saphid in pingdotgg/t3code#7875 * fix(projects): prevent invalid script IDs from crashing threads by @saphid in pingdotgg/t3code#10019 * fix(mobile): hide changed-files navigator and restore refresh in raw diff fallback by @lnieuwenhuis in pingdotgg/t3code#9828 * fix(ios): scroll short source files from blank space by @juliusmarminge in pingdotgg/t3code#10178 * feat(mobile): start a new thread on an existing branch by @StiensWout in pingdotgg/t3code#10359 * fix(mobile): improve font-size slider performance and prevent maximum update depth errors by @bbernag in pingdotgg/t3code#7138 * fix(web): keep composer toolbar controls anchored during transitions by @juliusmarminge in pingdotgg/t3code#10478 * fix(web): resize the floating preview from any edge by @juliusmarminge in pingdotgg/t3code#10467 * fix(mobile): prevent chat from disappearing when scrolling by @juliusmarminge in pingdotgg/t3code#10479 * fix(mobile): smooth composer status pill resizing by @juliusmarminge in pingdotgg/t3code#10484 * fix(mobile): release initial scroll target after dragging by @juliusmarminge in pingdotgg/t3code#10483 * fix(mobile): animate thread lifecycle transitions consistently by @juliusmarminge in pingdotgg/t3code#10487 * fix(mobile): restore assistant message bottom padding by @juliusmarminge in pingdotgg/t3code#10491 * fix(mobile): preserve chat rows when toggling commands by @juliusmarminge in pingdotgg/t3code#10492 ## New Contributors * @bbernag made their first contribution in pingdotgg/t3code#7138 **Full Changelog**: pingdotgg/t3code@v0.0.39-nightly.20260907.1332...v0.0.40-nightly.20260907.1346 Upstream release: https://github.com/pingdotgg/t3code/releases/tag/v0.0.40-nightly.20260907.1346

Merges 141 upstream commits (`b438447f6..8b2838e`) into the fork, following the `fork-upstream-merge` skill. Landed as a merge commit; conflicts resolved by the path-policy verdicts in `docs/fork/inventory.json`. ## Merge shape 563 files landed (`git diff --stat HEAD^1 HEAD`) against 563 in the upstream range, so no upstream work was dropped. Fork delta 720 files. ## Conflicts 14 files, resolved by concern. The merge commit message names each. Two are worth carrying forward: - Upstream extracted the project action rows into `ProjectActionsList.tsx`. The fork's Edit gate now rides an `editable` prop that defaults to upstream's always-editable behavior, so the gate survives the next extraction. - Upstream moved the `agent-browser-access` setting onto its new `/settings/projects` page. `settingsSearch.ts` points that item there and drops a fork delta. ## Two things a clean merge did not show **Upstream can delete an export the fork still imports.** pingdotgg#10225 removed `ClientTracingLive` as unused. `apps/web/src/lib/runtime.ts` still installs it, and neither file conflicted, so the typecheck failed four ways on a merge git called clean. Restored with a `// Fork:` comment naming the consumer. **A green test step can hide a suite that never finished.** `vp run -r test` kills the packages still running when one of them fails. A `@t3tools/desktop` failure truncated `apps/web` and `@t3tools/mobile` after each had reported hundreds of passing files, and `verify.mjs` counted any package with labeled output as tested. Four failing web tests went unreported. The check now keys on the closing `Test Files` line and runs every unfinished package alone. ## Unsupported methods `unsupported-methods.mjs` reports 0 ADD, 0 DROP, 2 KEEP, against 61 dispatched backend methods and 131 contract methods. Getting there took a fix. The backend moved its dispatch from `crates/t3code/src/lib.rs` to `crates/t3code/src/rpc/dispatch.rs`, where every arm is a one-line call into a handler below the match. The script read the old path and reported zero dispatched methods, then read the new one and called `vcs.switchRef` a DROP, because the `unsupported_exit` that refuses it had moved out of the arm. It now tries both paths and follows an arm two calls deep. Contract changes: `provider.consumeResetCredit` and `server.getHostResources` gained `UnsupportedMethodError`; `server.getUsageSummary` lost it, which closes the item the previous merge left open. ## Feature classification **Usable as-is** — client-only, nothing new on the wire. Sidebar drag across sections with destination cues and a named drop action (pingdotgg#9731, pingdotgg#9750, pingdotgg#10378, pingdotgg#10453, pingdotgg#10464). Composer behavior: a multiline draft survives timeline scrolling (pingdotgg#10444), the composer stops collapsing on blur (pingdotgg#10437) and regains focus when you tab back (pingdotgg#10463). Panel and preview chrome: resize the floating preview from any edge (pingdotgg#10467), toolbar controls stay anchored (pingdotgg#10478), the stuck resize cursor clears (pingdotgg#10461), the browser hides as the right panel closes (pingdotgg#10385), manual panel choices hold during a turn (pingdotgg#10113). Settings and accessibility polish (pingdotgg#10177, pingdotgg#10262, pingdotgg#10415, pingdotgg#10258, pingdotgg#10124, pingdotgg#10125, pingdotgg#10127, pingdotgg#10128, pingdotgg#10175). Performance (pingdotgg#10413, pingdotgg#10190, pingdotgg#10118). Plus the GitHub mark on `github.com` links (pingdotgg#10324), the Tux icon for WSL (pingdotgg#8511), a remembered usage page selection (pingdotgg#10189), project settings in the legacy sidebar menu (pingdotgg#10021), and text-only preview snapshots (pingdotgg#10232). **Unsupported in Moatless** — resolves to a refusal, or falls through to its own empty state. Each is recorded in `docs/fork/gaps.md`: - Reset credits through the hub and CLIProxyAPI (pingdotgg#10462, pingdotgg#10395, pingdotgg#10308). `provider.consumeResetCredit`, new union entry. `UsageLimits.tsx` catches the refusal and shows "Could not use the reset credit." - Balancing new threads across connected machines (pingdotgg#9895, pingdotgg#10433, pingdotgg#10407). `server.getHostResources`, new union entry. Nothing polls until a user picks automatic routing, and the composer then reads "Auto balance unavailable." - Onboarding: import grouped by repository (pingdotgg#10493), the shared multi-computer wizard (pingdotgg#10465), agent install without Node or npm (pingdotgg#10402). All ride `agentSessions.scan` and `.import`, an existing gap. - Shared project defaults and scoped overrides (pingdotgg#9754). The page reads, and every write goes through `server.updateSettings`, which the backend does not dispatch. - Two new `orchestration.dispatchCommand` types: `thread.active.reorder` (pingdotgg#9729) and `thread.user-input.dismiss` (pingdotgg#10431). Both are ordinary controls, a sidebar drag and a Dismiss button, and a dispatched command cannot be refused per type. That is the standing _A command cannot be refused_ gap, now 26 members wide. **Backend behavior to consider reproducing in Moatless** — upstream server fixes whose behavior the fork's client assumes: - Invalid script IDs no longer crash threads (pingdotgg#10019). The fork ships project scripts, so this one is worth reading first. - Settlement: settle inactive threads without a PR lookup (pingdotgg#10103), skip disabled settlement lookups (pingdotgg#10424), settle threads with unanswered async questions (pingdotgg#10400). - Interrupted threads stay resumable after a restart (pingdotgg#10421). - Completed requests stay closed across clients (pingdotgg#10123). - Placeholder branches are followed after a checkout updates (pingdotgg#10441). - A thread's PR links without an open client (pingdotgg#10101), and checkpoints are captured before a PR status refresh (pingdotgg#10347). - Adapters declare their own context compaction (pingdotgg#10112). - Transcripts with oversized tool records import (pingdotgg#10430), and git status scans are skipped while the index is locked (pingdotgg#9845). - Usage limits pool per provider across accounts and environments (pingdotgg#10300). The client renders what `server.getUsageSummary` returns, so this shows something only if the Moatless payload carries per-account limits. Mobile, marketing, desktop, provider adapters and release tooling are not this fork's surface and are not classified. ## Also fixed here, and not upstream's doing - Three `browser-*` search items still routed to `/settings/integrations`, which the fork owns for its Moatless administration page. A non-administrator who searched for them was redirected away from the result. - `moatless/listSearch.ts` carried no fork-only declaration. - `pnpm fmt:check` failed on 294 files, 293 of them orval output. The generator now formats what it writes through an `afterAllFilesWrite` hook. - `@t3tools/moatless-api` exported `./generated`, a barrel that is never checked in. ## Verification `inventory-check.mjs` clean. `verify.mjs` green on seven checks: duplicate-adds, tripwires, resolution-check, unsupported-methods, `fmt:check` (3876 files), `lint` and `typecheck`. `test` is red on one package, and it is the machine. `@t3tools/desktop`'s `bundled libsecret helper` shells out to `pkg-config` for `libsecret-1`, which this sandbox does not have; it fails the same way when retried alone. Everything else passes: `apps/web` 369 files, `t3` 291, `@t3tools/mobile` 149, `t3code-relay` 27, `@t3tools/client-runtime` 71, plus the smaller packages. `spec:check` cannot run in a sandbox: it needs a sibling `moatless` checkout or a deployment URL and has neither. Written by Claude Opus 5 in Claude Code. 🤖 Generated with [Claude Code](https://claude.com/claude-code) --- Moatless task: https://moatless.soaplabstest.com/tasks/8d348ecf-f9cb-4e65-b96b-6c1054a8ed33

* origin/main: (675 commits) fix(web): tolerate servers that predate git identity in project import (pingdotgg#10547) chore(mobile): bump app version to 1.1.0 fix(mobile): wait for native thread scroll before reveal (pingdotgg#10486) fix(mobile): match Working status color to desktop fix(web): remove inserted citations on cancel (pingdotgg#10518) feat(web): group onboarding project import by repository (pingdotgg#10493) fix(mobile): preserve chat rows when toggling commands (pingdotgg#10492) fix(mobile): restore assistant message bottom padding (pingdotgg#10491) fix(mobile): animate thread lifecycle transitions consistently (pingdotgg#10487) fix(mobile): release initial scroll target after dragging (pingdotgg#10483) fix(mobile): smooth composer status pill resizing (pingdotgg#10484) fix(mobile): prevent chat from disappearing when scrolling (pingdotgg#10479) fix(web): resize the floating preview from any edge (pingdotgg#10467) fix(web): keep composer toolbar controls anchored during transitions (pingdotgg#10478) fix(mobile): improve font-size slider performance and prevent maximum update depth errors (pingdotgg#7138) feat(mobile): start a new thread on an existing branch (pingdotgg#10359) fix(ios): scroll short source files from blank space (pingdotgg#10178) fix(mobile): hide changed-files navigator and restore refresh in raw diff fallback (pingdotgg#9828) fix(projects): prevent invalid script IDs from crashing threads (pingdotgg#10019) fix(devcontainer): make repository setup work (pingdotgg#7875) ... # Conflicts: # apps/server/src/provider/builtInDrivers.ts # docs/README.md # docs/user/install.md # packages/contracts/src/settings.test.ts # packages/contracts/src/settings.ts

@juliusmarminge

## What's Changed * fix(mobile): keep pending messages in the chat timeline by @juliusmarminge in pingdotgg/t3code#10449 * fix(mobile): show connection status in the floating pill instead of a second one by @juliusmarminge in pingdotgg/t3code#10440 * fix: use Pierre icons consistently for attachments by @juliusmarminge in pingdotgg/t3code#10475 * feat(mobile): open the thread screen as soon as a new task is submitted by @juliusmarminge in pingdotgg/t3code#10435 * fix(devcontainer): make repository setup work by @saphid in pingdotgg/t3code#7875 * fix(projects): prevent invalid script IDs from crashing threads by @saphid in pingdotgg/t3code#10019 * fix(mobile): hide changed-files navigator and restore refresh in raw diff fallback by @lnieuwenhuis in pingdotgg/t3code#9828 * fix(ios): scroll short source files from blank space by @juliusmarminge in pingdotgg/t3code#10178 * feat(mobile): start a new thread on an existing branch by @StiensWout in pingdotgg/t3code#10359 * fix(mobile): improve font-size slider performance and prevent maximum update depth errors by @bbernag in pingdotgg/t3code#7138 * fix(web): keep composer toolbar controls anchored during transitions by @juliusmarminge in pingdotgg/t3code#10478 * fix(web): resize the floating preview from any edge by @juliusmarminge in pingdotgg/t3code#10467 * fix(mobile): prevent chat from disappearing when scrolling by @juliusmarminge in pingdotgg/t3code#10479 * fix(mobile): smooth composer status pill resizing by @juliusmarminge in pingdotgg/t3code#10484 * fix(mobile): release initial scroll target after dragging by @juliusmarminge in pingdotgg/t3code#10483 * fix(mobile): animate thread lifecycle transitions consistently by @juliusmarminge in pingdotgg/t3code#10487 * fix(mobile): restore assistant message bottom padding by @juliusmarminge in pingdotgg/t3code#10491 * fix(mobile): preserve chat rows when toggling commands by @juliusmarminge in pingdotgg/t3code#10492 * feat(web): group onboarding project import by repository by @t3dotgg in pingdotgg/t3code#10493 * fix(web): remove inserted citations on cancel by @extoci in pingdotgg/t3code#10518 * fix(mobile): match Working status color to desktop by @baptisteArno in pingdotgg/t3code#10515 * fix(mobile): wait for native thread scroll before reveal by @juliusmarminge in pingdotgg/t3code#10486 * fix(web): tolerate servers that predate git identity in project import by @juliusmarminge in pingdotgg/t3code#10547 * fix(web): restore settled PR colors on hover by @flamboh in pingdotgg/t3code#10023 * fix(web): keep popup triggers steady when pressed by @dominic-r in pingdotgg/t3code#10468 * fix(web): keep project favicon shape consistent across sizes by @sameerr03 in pingdotgg/t3code#10502 * fix(claude): report usage limits on retried turns by @StiensWout in pingdotgg/t3code#10549 * refactor(desktop): classify backend exports by @juliusmarminge in pingdotgg/t3code#10265 * refactor(desktop): classify electron exports by @juliusmarminge in pingdotgg/t3code#10266 * refactor(desktop): classify app exports by @juliusmarminge in pingdotgg/t3code#10267 * refactor(desktop): classify preview exports by @juliusmarminge in pingdotgg/t3code#10268 * ci(knip): enforce desktop exports by @juliusmarminge in pingdotgg/t3code#10269 * fix(web): remove excess sidebar thread spacing by @maria-rcks in pingdotgg/t3code#10569 * fix(web): make settings project scopes searchable and scrollable by @maria-rcks in pingdotgg/t3code#10570 * fix(web): use `tabular-nums` with the ui font for sidebar timer by @extoci in pingdotgg/t3code#10592 * fix(web): correct pending question attachment message by @dominic-r in pingdotgg/t3code#10599 * fix(mobile): restore brand artwork in the Android adaptive icon by @juliusmarminge in pingdotgg/t3code#10598 * fix(mobile): configure iOS Keychain access group by @VedankPurohit in pingdotgg/t3code#3665 * fix(web): remember Composer Fast mode across new chats by @aravhawk in pingdotgg/t3code#2981 * fix(server): disable executable capabilities in Claude metadata generation by @maxwellyoung in pingdotgg/t3code#4169 * Add stop thread keybinding command by @jakeleventhal in pingdotgg/t3code#4308 ## New Contributors * @bbernag made their first contribution in pingdotgg/t3code#7138 * @baptisteArno made their first contribution in pingdotgg/t3code#10515 * @aravhawk made their first contribution in pingdotgg/t3code#2981 **Full Changelog**: pingdotgg/t3code@v0.0.39...v0.0.40 Upstream release: https://github.com/pingdotgg/t3code/releases/tag/v0.0.40

…27) * fix(ui): unify loading and refresh feedback across clients (pingdotgg#9561) Co-authored-by: Julius Marminge <51714798+juliusmarminge@users.noreply.github.com> * fix(client-runtime): report terminated thread loads (pingdotgg#10216) * fix(server): settle threads using actual pull request terminal timestamps (pingdotgg#9934) * fix(clients): persist project icons across reloads and reconnects (pingdotgg#10138) * fix(mobile): use selected theme across input forms and controls (pingdotgg#10239) * fix(mobile): keep the new-task draft when switching environment (pingdotgg#10247) Co-authored-by: Claude Code <noreply@anthropic.com> * fix(web): keep timestamp tooltip dates in English (pingdotgg#10256) * fix(web): let authorized clients scrolling reach settings (pingdotgg#10080) * fix(web): remember usage page selection (pingdotgg#10189) Co-authored-by: shivam <91240327+shivamhwp@users.noreply.github.com> * fix(server): keep the Antigravity Google sign-in across server restarts (pingdotgg#10244) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(antigravity): load user skills from ~/.gemini for every project (pingdotgg#10257) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(web): respect reduced motion in shared disclosures (pingdotgg#10258) * feat(marketing): add a Windows 95 landing page (pingdotgg#10286) * refactor(web): remove unused runtime wrappers and exports (pingdotgg#10225) * refactor(web): keep feature component helpers private (pingdotgg#10226) * refactor(web): keep app utilities private and remove dead helpers (pingdotgg#10227) * ci: enforce unused runtime exports in the web app (pingdotgg#10228) * test(desktop): cover Clerk setup through the service (pingdotgg#10284) * test(desktop): cover WSL hashes through runtime resolution (pingdotgg#10285) * test(desktop): cover password store through startup (pingdotgg#10287) * test(desktop): cover WSL paths through public behavior (pingdotgg#10289) * test(desktop): exercise WSL cache safety through public scripts (pingdotgg#10301) * test(web): cover file classification through diff ordering (pingdotgg#10304) * test(web): focus command palette tests on search behavior (pingdotgg#10302) * fix(web): add project settings to legacy sidebar project menu (pingdotgg#10021) Co-authored-by: shivam <91240327+shivamhwp@users.noreply.github.com> * test(web): keep Markdown gutter styling private (pingdotgg#10306) * feat(settings): add shared project defaults and scoped overrides (pingdotgg#9754) Co-authored-by: maria-rcks <254055478+maria-rcks@users.noreply.github.com> * feat(connections): balance new threads across connected machines (pingdotgg#9895) * test(web): keep settings viewport comparison private (pingdotgg#10307) * fix(web): prevent file tree search focus ring clipping (pingdotgg#10175) * fix(mobile): stop the work log flickering during subagent runs and failing calls (pingdotgg#10273) * fix(mobile): save linked media from chat (pingdotgg#10271) * feat(markdown): show the GitHub mark for github.com links (pingdotgg#10324) Co-authored-by: Claude Code <noreply@anthropic.com> * fix(marketing): show a real preview card when t3.codes is shared (pingdotgg#10305) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * feat(usage): pool subscription limits per provider across accounts and environments (pingdotgg#10300) * chore(web): remove usage limits demo fixtures (pingdotgg#10330) * fix(web): expose error disclosure state (pingdotgg#10125) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * fix(web): name the editor picker accurately (pingdotgg#10124) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * fix(web): make task row states readable (pingdotgg#10128) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * fix(web): explain hosted connection prerequisites (pingdotgg#10129) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * fix(web): name combobox chip removal targets (pingdotgg#10127) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * fix(marketing): present the Git workflow as an illustration (pingdotgg#10130) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * feat(mobile): pool usage limits across selected environments (pingdotgg#10334) * fix(release): space automatic nightlies at least six hours apart (pingdotgg#10272) * refactor(web): share bulk thread deletion between sidebars (pingdotgg#10106) * refactor(client): share tool outcome rules (pingdotgg#10122) * refactor(server): share Claude result status and error mapping (pingdotgg#10296) * fix(server): settle inactive threads without a PR lookup (pingdotgg#10103) * fix(ssh): report remote stop failures without losing ownership (pingdotgg#10105) * perf(server): stop scanning old OpenCode parts (pingdotgg#10116) * perf(server): avoid full thread reads on turn start (pingdotgg#10108) * perf(web): skip checkpoint map rebuilds while streaming (pingdotgg#10118) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * perf(server): skip plan bodies in thread summaries (pingdotgg#10341) * fix(server): skip disabled provider instances for text generation fallback (pingdotgg#10346) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(server): capture checkpoints before refreshing PR status (pingdotgg#10347) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(web): keep manual panel choices during a turn (pingdotgg#10113) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(threads): keep completed requests closed across clients (pingdotgg#10123) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * perf(server): finish runtime messages without full thread reads (pingdotgg#10120) Co-authored-by: Ross Cawston <rcawston@users.noreply.github.com> * refactor(server): let adapters declare context compaction (pingdotgg#10112) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(server): link thread PRs without an open client (pingdotgg#10101) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(web): show Tux icon for WSL environments (pingdotgg#8511) * perf(web): speed up folder menu sorting (pingdotgg#10190) * style(web): fix inconsistencies in new settings layouts (pingdotgg#10177) Co-authored-by: shivam <91240327+shivamhwp@users.noreply.github.com> * feat(threads): persist manual active thread order (pingdotgg#9729) * feat(mobile): arrange active threads from both thread lists (pingdotgg#9730) * feat(web): drag threads across sections with consistent motion (pingdotgg#9731) * feat(web): simplify sidebar drag destination cues (pingdotgg#9750) * fix(mobile): keep pending tasks queued when a send fails in flight (pingdotgg#10245) Co-authored-by: Claude Fable 5 <noreply@anthropic.com> * feat(mobile): show new-task drafts alongside pending tasks in the thread list (pingdotgg#10260) Co-authored-by: Claude Fable 5 <noreply@anthropic.com> * feat(mobile): allow several new-task drafts per project (pingdotgg#10327) Co-authored-by: Claude Fable 5 <noreply@anthropic.com> * fix(mobile): slide settled threads out before collapsing (pingdotgg#10345) * fix(clients): show feedback results in composer banners (pingdotgg#10398) * fix(server): stop Windows terminal polling from spiking CPU (pingdotgg#9476) * fix(web): onboarding installs agents without needing Node or npm (pingdotgg#10402) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(server): allow settling threads with unanswered async questions (pingdotgg#10400) * feat(ci): ship stable releases from the latest nightly commit (pingdotgg#10410) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * feat(marketing): add a nightly channel to the download page (pingdotgg#10408) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(web): keep settings inputs focused during IME composition (pingdotgg#10262) Co-authored-by: Simone <185146821+Lucenx9@users.noreply.github.com> * fix(server): preserve Codex reset credits during usage updates (pingdotgg#10308) * docs: link the repository security reporting policy (pingdotgg#10303) * fix(web): only show auto balance errors after failed checks (pingdotgg#10407) * fix(web): improve preview recording frame delivery (pingdotgg#10403) * Modify model and budget settings in ui-consistency.md Updated model version and adjusted budget limits for PRs and runs. * Update model and effort in effect-service-conventions * Fix duplicate maxBudgetPerRun entry in UI consistency * fix(server): preserve inline provider secrets on redacted saves (pingdotgg#10054) * Fix formatting of maxBudgetPerPR in conventions file * fix(web, mobile): replace Apple desktop machine labels (pingdotgg#10396) * fix(web): hide browser when the right panel starts closing (pingdotgg#10385) * fix(web): keep settings section headings description-free (pingdotgg#10415) * fix(usage): read and redeem hub reset credits through CLIProxyAPI (pingdotgg#10395) * fix(web): deduplicate expanded tool labels and keep errors expandable (pingdotgg#10420) * fix(server): skip git status scans while the index is locked (pingdotgg#9845) * fix(mcp): allow text-only preview snapshots (pingdotgg#10232) * fix(claude): name the expired login or usage limit instead of a generic API error (pingdotgg#10321) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * feat(mobile): queue a message while its attachment is still uploading (pingdotgg#10404) Co-authored-by: Claude Fable 5 <noreply@anthropic.com> * feat(mobile): show when an existing thread has a message waiting in the outbox (pingdotgg#10405) Co-authored-by: Claude Fable 5 <noreply@anthropic.com> * fix(codex): accept misalignment policy errors on thread resume (pingdotgg#10373) * fix(server): skip disabled settlement lookups (pingdotgg#10424) Co-authored-by: adityagarud <garudaditya079@gmail.com> * fix(server): run OpenCode CLI commands sequentially (pingdotgg#10427) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * feat(web): name the drop action while dragging sidebar threads (pingdotgg#10378) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> Co-authored-by: Julius Marminge <julius0216@outlook.com> * perf(web): keep the sidebar responsive during bulk thread updates (pingdotgg#10413) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(web): onboarding wizard now supports light mode (pingdotgg#10432) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * feat(threads): dismiss async questions without replying (pingdotgg#10431) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(web): stop collapsing the composer when it loses focus (pingdotgg#10437) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(server): keep interrupted threads resumable after restarts (pingdotgg#10421) * fix(web): show load balancing note for a single machine (pingdotgg#10433) * fix(server): follow placeholder branches after checkout updates (pingdotgg#10441) * fix(mobile): expand single-line tool details in work logs (pingdotgg#10442) * fix(server): import transcripts with oversized tool records (pingdotgg#10430) * fix(marketing): deploy site with nightly releases (pingdotgg#10443) * fix(web): preserve multiline composer drafts during timeline scrolling (pingdotgg#10444) * fix(server): handle JSON-wrapped titles and verbose Claude output (pingdotgg#10446) * fix(marketing): restore continuous endorsement scrolling (pingdotgg#10450) * Revert "fix(marketing): restore continuous endorsement scrolling" (pingdotgg#10454) * fix(marketing): bring back the endorsement marquee (pingdotgg#10455) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * chore: enable CodeRabbit automatic reviews (pingdotgg#10457) * fix(codex): keep Spark limits from replacing the main allowance (pingdotgg#10458) * fix(marketing): send 95 nightly downloads to the downloads page (pingdotgg#10460) * fix(web): composer regains focus when you tab back into T3 Code (pingdotgg#10463) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(web): keep sidebar drag dividers clear and gestures smooth (pingdotgg#10453) * fix(server): mark Cursor transport error answers as failed (pingdotgg#10337) * fix(web): clear stuck panel resize cursor (pingdotgg#10461) * fix(web): clarify sidebar drag dividers and empty targets (pingdotgg#10464) * fix(web): make onboarding a shared multi-computer wizard (pingdotgg#10465) * fix(shared): redeem reset credits through the hub when it holds the account (pingdotgg#10462) Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix(mobile): keep pending messages in the chat timeline (pingdotgg#10449) * fix(mobile): show connection status in the floating pill instead of a second one (pingdotgg#10440) Co-authored-by: Claude Code <noreply@anthropic.com> * fix: use Pierre icons consistently for attachments (pingdotgg#10475) * chore(release): prepare v0.0.39 * feat(mobile): open the thread screen as soon as a new task is submitted (pingdotgg#10435) Co-authored-by: Claude Fable 5 <noreply@anthropic.com> * fix(devcontainer): make repository setup work (pingdotgg#7875) Co-authored-by: Claude Fable 5 <noreply@anthropic.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * fix(projects): prevent invalid script IDs from crashing threads (pingdotgg#10019) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * fix(mobile): hide changed-files navigator and restore refresh in raw diff fallback (pingdotgg#9828) Co-authored-by: James <jamescollard2005@gmail.com> * fix(ios): scroll short source files from blank space (pingdotgg#10178) * feat(mobile): start a new thread on an existing branch (pingdotgg#10359) * fix(mobile): improve font-size slider performance and prevent maximum update depth errors (pingdotgg#7138) Co-authored-by: Julius Marminge <julius0216@outlook.com> * fix(web): keep composer toolbar controls anchored during transitions (pingdotgg#10478) * fix(web): resize the floating preview from any edge (pingdotgg#10467) Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix(mobile): prevent chat from disappearing when scrolling (pingdotgg#10479) * fix(mobile): smooth composer status pill resizing (pingdotgg#10484) * fix(mobile): release initial scroll target after dragging (pingdotgg#10483) * fix(mobile): animate thread lifecycle transitions consistently (pingdotgg#10487) * fix(mobile): restore assistant message bottom padding (pingdotgg#10491) * fix(mobile): preserve chat rows when toggling commands (pingdotgg#10492) * feat(web): group onboarding project import by repository (pingdotgg#10493) Onboarding listed every directory Claude Code or Codex had ever run in as one flat list of paths, with everything from the last 30 days preselected. On my machine that was 270 rows and 80 preselected. Most of them were Codex scratch folders, worktrees, and one-off questions. I wanted two or three projects and had no fast way to get there. The scanner now reads each candidate's `.git/config` directly, so the client can group clones by origin and show the GitHub `owner/name`. Linked worktrees, Codex scratch directories under `~/Documents/Codex`, `~/Downloads`, and temp roots are no longer offered. Folders that are not git repositories collapse under "Other folders". The default selection requires a git repository with at least three threads. Select all and Select none sit above the list, and each row shows the source icons, thread count, and last activity. On the same machine this drops the list to 162 rows and the default selection to 16. Mobile has no project import step, so there is no mobile change. Created with Claude Fable 5.1 in Claude Code. * fix(web): remove inserted citations on cancel (pingdotgg#10518) * fix(mobile): match Working status color to desktop * fix(mobile): wait for native thread scroll before reveal (pingdotgg#10486) * chore(mobile): bump app version to 1.1.0 Co-authored-by: codex <codex@users.noreply.github.com> * fix(web): tolerate servers that predate git identity in project import (pingdotgg#10547) Co-authored-by: Claude Code <noreply@anthropic.com> * fix(web): restore settled PR colors on hover (pingdotgg#10023) * fix(web): keep popup triggers steady when pressed (pingdotgg#10468) * fix(web): keep project favicon shape consistent across sizes (pingdotgg#10502) * fix(claude): report usage limits on retried turns (pingdotgg#10549) * refactor(desktop): classify backend exports (pingdotgg#10265) * refactor(desktop): classify electron exports (pingdotgg#10266) * refactor(desktop): classify app exports (pingdotgg#10267) * refactor(desktop): classify preview exports (pingdotgg#10268) * ci(knip): enforce desktop exports (pingdotgg#10269) * fix(web): remove excess sidebar thread spacing (pingdotgg#10569) * fix(web): make settings project scopes searchable and scrollable (pingdotgg#10570) * fix(web): use `tabular-nums` with the ui font for sidebar timer (pingdotgg#10592) * fix(web): correct pending question attachment message (pingdotgg#10599) * fix(mobile): restore brand artwork in the Android adaptive icon (pingdotgg#10598) Co-authored-by: Claude Fable 5 <noreply@anthropic.com> * fix(mobile): configure iOS Keychain access group (pingdotgg#3665) Co-authored-by: Julius Marminge <jmarminge@gmail.com> Co-authored-by: Julius Marminge <julius0216@outlook.com> * fix(web): remember Composer Fast mode across new chats (pingdotgg#2981) Co-authored-by: Cursor Agent <cursoragent@cursor.com> * fix(server): disable executable capabilities in Claude metadata generation (pingdotgg#4169) * Add stop thread keybinding command (pingdotgg#4308) * fix(mobile): show the provider account badge on thread rows (pingdotgg#9899) * fix(codex): name the usage limit and its reset instead of relaying "out of credits" (pingdotgg#10473) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(web): copy selected pull request link from PR page (pingdotgg#10615) * fix(web): keep ref picker steady when opening (pingdotgg#9472) * fix(web): play pull request videos inline (pingdotgg#10617) * chore(release): prepare v0.0.40 * fix(desktop): preserve browser editing shortcuts (pingdotgg#10621) * fix(web): open pull request markdown links in the panel (pingdotgg#10623) * fix(mobile): fit the Android splash icon to its circular mask (pingdotgg#10620) Co-authored-by: Claude Fable 5 <noreply@anthropic.com> * feat(desktop): add cross-platform window capture (pingdotgg#8103) Co-authored-by: Dara Adedeji <daraadedeji07@gmail.com> Co-authored-by: Dara Adedeji <76637177+SunkenInTime@users.noreply.github.com> Co-authored-by: Wout Stiens <71498452+StiensWout@users.noreply.github.com> Co-authored-by: Julius Marminge <51714798+juliusmarminge@users.noreply.github.com> Co-authored-by: Julius Marminge <julius0216@outlook.com> Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(web): open proactive panels when entering threads (pingdotgg#10610) Co-authored-by: maria-rcks <254055478+maria-rcks@users.noreply.github.com> * fix(native): wait for the KDE feedback test listener (pingdotgg#10645) * fix(desktop): resolve local media linked from remote threads (pingdotgg#10619) Co-authored-by: maria-rcks <254055478+maria-rcks@users.noreply.github.com> * fix(web): add bottom padding to project actions header (pingdotgg#10634) * fix(web): update machines together in auto balance (pingdotgg#10596) * fix(preview): transfer recordings to the agent environment (pingdotgg#10572) * Add 'macroscope-review' label to conventions * Add 'macroscope-review' label to UI consistency * fix(web): navigate markdown images as galleries (pingdotgg#10625) * chore: upgrade to TypeScript 7.0.2 (pingdotgg#10663) * fix: hide email-bearing account labels in usage limits (pingdotgg#10668) * fix(web): keep scroll-to-end button close to composer (pingdotgg#10543) * chore(deps): upgrade Effect to rc.112 and Alchemy to beta.76 (pingdotgg#10652) * chore(refs): sync Effect reference to rc.112 (pingdotgg#10653) * chore(refs): sync Alchemy reference to beta.76 (pingdotgg#10654) * fix: generate thread titles with the selected model across connections (pingdotgg#10526) Co-authored-by: Julius Marminge <51714798+juliusmarminge@users.noreply.github.com> * fix(desktop): enable context menus in the browser (pingdotgg#10670) * fix(desktop): stop generating declarations during bundling (pingdotgg#10679) * fix(desktop): restore layout control hit targets (pingdotgg#10673) * feat(chat): attach files to question answers (pingdotgg#9871) * feat(desktop): refresh macOS installer with aurora artwork (pingdotgg#10632) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * fix(server): give completed turns a full session idle window (pingdotgg#10689) * feat(web): add pull request merge defaults (pingdotgg#8088) * fix(usage): keep account columns aligned across limit rows (pingdotgg#10690) * fix(web): chat text no longer shows through a 1px gap under composer banners (pingdotgg#10635) Co-authored-by: Claude Fable 5 <noreply@anthropic.com> * refactor(server): classify runtime exports (pingdotgg#10274) * refactor(server): classify orchestration exports (pingdotgg#10275) * refactor(server): classify service exports (pingdotgg#10276) * refactor(server): classify telemetry exports (pingdotgg#10277) * refactor(server): classify provider exports (pingdotgg#10278) * refactor(server): classify source control exports (pingdotgg#10279) * refactor(server): classify source control registry API (pingdotgg#10280) * refactor(server): classify preview toolkit exports (pingdotgg#10281) * chore(mobile): bump app version to 1.1.1 Co-authored-by: codex <codex@users.noreply.github.com> * ci(knip): enforce server exports (pingdotgg#10282) * feat(web): add previous/next turn navigation in minimap (pingdotgg#8531) * fix(web): stop the settings sidebar shifting when switching pages (pingdotgg#10705) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(web): copy terminal selection with Ctrl+Insert (pingdotgg#8541) * fix(web): show the same project icon in the command palette as everywhere else (pingdotgg#10712) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(web): stop sidebar rows flashing and shifting on click (pingdotgg#10713) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * refactor(web): pass the project record to ProjectFavicon so icons cannot drift (pingdotgg#10714) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * feat(web): accept file drops into sidebar threads (pingdotgg#7892) * feat(web): accept file drops into sidebar threads (pingdotgg#7892) * fix(mcp): keep preview snapshots usable by the agent and let it save them (pingdotgg#10501) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(server): stop Windows terminal processes when closing (pingdotgg#10771) * feat(mobile): use Android wallpaper colors (pingdotgg#10691) Co-authored-by: Pixel Perfect <me@pixp.cc> * feat(mobile): add optional Material You layout (pingdotgg#10692) Co-authored-by: Pixel Perfect <me@pixp.cc> * feat(web): show project favicon in new-thread project picker (pingdotgg#10790) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(desktop): use official logo in macOS installer (pingdotgg#10819) Co-authored-by: t3-code[bot] <269035359+t3-code[bot]@users.noreply.github.com> Co-authored-by: Julius Marminge <51714798+juliusmarminge@users.noreply.github.com> * fix(web): honor terminal link browser overrides (pingdotgg#10060) * fix(desktop): neutral artwork for stable macOS installer (pingdotgg#10820) Co-authored-by: Julius Marminge <51714798+juliusmarminge@users.noreply.github.com> * fix(web): restore text-only draft project title (pingdotgg#10821) * refactor(web): consolidate setup wizards into shared components (pingdotgg#10832) * fix(web): stop the bar under the composer popping in after threads load (pingdotgg#10727) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(web): keep the composer footer still while thread data loads (pingdotgg#10768) Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> * fix(desktop): defer keyring loading until macOS cookie import (pingdotgg#10667) * fix(relay): share notification policy and prioritize waiting agents (pingdotgg#10848) Co-authored-by: Ryan Hughes <ryan@heyoodle.com> * fix(relay): recheck queued iOS alerts and retain fast completions (pingdotgg#10849) * fix(mobile): respect notification permission when tokens rotate (pingdotgg#10850) * fix(mobile): tolerate native Headers without getSetCookie (pingdotgg#10851) Co-authored-by: Ryan Hughes <ryan@heyoodle.com> * fix(sync): repair merge fallout and migrate to Effect rc.112 Typecheck after the merge found three classes of problem: - Syntax broken by resolving several conflicts as blind unions, in ProviderService, OpenCodeAdapter, routeTree.gen, the composer draft and sidebar logic tests, and the client-runtime thread commands. - Schema.TaggedErrorClass renamed to Schema.TaggedError in rc.112, across ten fork-only files. - Upstream dead-export cleanup unexported buildEnvironmentAuthHeaders, withEnvironmentCredentials and providerLimitsLabel, which the fork's direct Apple push and usage UI still use. The usage UI takes upstream's UsageLimits and UsageLimitsSection wholesale rather than a union; the fork's contribution there is the aiusage source kind on the server, which is unaffected. prepareMcpSession keeps issuing a credential when browser access is off, with previewEnabled false, because the same credential carries the fork's mailbox and issue tools. Upstream's browser-access suite is updated to assert the capability rather than the absence of a credential. Claude Opus 5 (1M context) via T3 Code. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix(sync): clear typecheck fallout from the upstream merge Working through the 179 errors the first typecheck reported. Roughly twenty roots, most of them shortcuts taken while resolving conflicts. Cascades cleared: - ProviderService, ws.ts and ProviderCommandReactor each carried a duplicated or orphaned statement from a union-style resolution, which degraded the CLI's requirements channel to unknown and produced 62 downstream errors across the CLI test files. - ThreadNavigationSidebar carried a duplicated render switch after an unconditional return, so the item union never narrowed. That alone accounted for 51 mobile errors. Genuine upstream changes adapted rather than reverted: - moveThread supersedes the fork's movePinnedThread and covers pinned and active sections both, so the sidebar uses it. - PendingNewTask became a queued/draft union with environmentId, projectId, projectTitle and branch on the base, so reads no longer go through message or creation. - Reset-credit redemption names the credit being spent, threaded through the mobile and web usage screens. - getThreadRuntimeContext gains modelSelection so token pricing still charges against the thread's current model without a second query. - runInEnvironment, resetMillis, formatLoopbackAuthorizationPrompt and constrainPrimarySidebarWidth are exported again for fork callers. Claude Opus 5 (1M context) via T3 Code. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix(sync): finish the typecheck pass across every client Web, mobile and desktop typecheck clean; the server is down to its last few test-layer wirings. The fork's change-request status cache came back with it: upstream removed threadChangeRequestSnapshotsAtom and the displayed-PR resolvers from ThreadStatusIndicators, which would have taken the sidebar's Forgejo and GitHub PR badges with them. The store, the three resolvers and the row's parent-held snapshot are restored. Adapted to upstream's renames rather than reverting them: canMoveUp and canMoveDown replace the pin-specific move props, SettingsSection no longer takes a description, and the terminal drawer drops the cursor, trimmed and epoch fields the chunked output model supersedes. launchStartupHeartbeat is exported again so startup does not block on projection counts. Claude Opus 5 (1M context) via T3 Code. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * test(sync): follow upstream's draft persistence and theme variable set The composer draft round-trip test drove partialize then merge directly. Upstream moved that projection into the storage serializer, so the test runs partializeComposerDraftStoreState the same way storage does. The fork's per-thread subagent model survives the round trip; only the test's route through it had gone stale. The mobile theme now emits 80 variables, upstream's set plus the fork's. Claude Opus 5 (1M context) via T3 Code. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * test(sync): assert the fork's product name in runtime instructions RuntimeInstructions is shared by every adapter now, so the Claude adapter's expectation follows the fork's branding. Claude Opus 5 (1M context) via T3 Code. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * test(desktop): expect the fork's name in the Linux desktop entry Claude Opus 5 (1M context) via T3 Code. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * test(server): scope reconcile assertions to session commands Activation also runs the mailbox recovery scan, so the dispatch log carries thread.mailbox commands alongside the session transitions these tests are about. They filter for session commands instead of asserting the whole log. Claude Opus 5 (1M context) via T3 Code. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * chore(sync): satisfy upstream's new knip checks knip.jsonc arrived with the sync and had never seen the fork's code. The voice model manifest script is regenerated by hand rather than by a build step, so it is declared as an entry instead of reading as dead. The other 47 findings were exports nothing imported by name, mostly in the fork's Forgejo, issue, push and provider sign-in modules where a helper was exported but only used inside its own file. Those lose the export keyword; four unused re-exports leave the voice-input barrel. Typecheck is clean and the client-runtime and mobile suites still pass. Claude Opus 5 (1M context) via T3 Code. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * chore(sync): format merged files and drop a dead layout helper vp check flagged formatting in the eleven files where conflict resolution left the merged text off-style. constrainPrimarySidebarWidth goes with it. I restored it earlier only because the layout test imported it, but the test never called it and no screen ever did, in the fork or upstream. The import goes too. Claude Opus 5 (1M context) via T3 Code. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Wout Stiens <71498452+StiensWout@users.noreply.github.com> Co-authored-by: Julius Marminge <51714798+juliusmarminge@users.noreply.github.com> Co-authored-by: Julius Marminge <julius0216@outlook.com> Co-authored-by: maria <maria@kuuro.net> Co-authored-by: Claude Code <noreply@anthropic.com> Co-authored-by: Simone <lucenz@proton.me> Co-authored-by: oliver <97427849+flamboh@users.noreply.github.com> Co-authored-by: Exotic <118054752+extoci@users.noreply.github.com> Co-authored-by: shivam <91240327+shivamhwp@users.noreply.github.com> Co-authored-by: Theo Browne <me@t3.gg> Co-authored-by: Alex Southwell <saphid@gmail.com> Co-authored-by: Hwanseo Choi <electricvoxel@gmail.com> Co-authored-by: maria-rcks <254055478+maria-rcks@users.noreply.github.com> Co-authored-by: Guilherme Vieira <46866023+GuilhermeVieiraDev@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Ross Cawston <rcawston@users.noreply.github.com> Co-authored-by: Utkarsh Patil <73941998+UtkarshUsername@users.noreply.github.com> Co-authored-by: Akshar Patel <123344143+AksharP5@users.noreply.github.com> Co-authored-by: Simone <185146821+Lucenx9@users.noreply.github.com> Co-authored-by: Aditya Garud <153842990+yashranaway@users.noreply.github.com> Co-authored-by: Maxwell Young <maxtheyoung@gmail.com> Co-authored-by: Neel Patel <neelpatel805804@gmail.com> Co-authored-by: Yash Singh <saiansh2525@gmail.com> Co-authored-by: Guillermo Casanova <75276669+Gigioxx@users.noreply.github.com> Co-authored-by: Vitaly Iegorov <vitalyiegorov@gmail.com> Co-authored-by: Bakari Mustafa <bakarimussa06@gmail.com> Co-authored-by: adityagarud <garudaditya079@gmail.com> Co-authored-by: Dara Adedeji <76637177+SunkenInTime@users.noreply.github.com> Co-authored-by: Jono Kemball <Noojuno@users.noreply.github.com> Co-authored-by: t3-code[bot] <269035359+t3-code[bot]@users.noreply.github.com> Co-authored-by: Lars Nieuwenhuis <35393046+lnieuwenhuis@users.noreply.github.com> Co-authored-by: James <jamescollard2005@gmail.com> Co-authored-by: berna <47331045+bbernag@users.noreply.github.com> Co-authored-by: Baptiste Arnaud <baptiste@typebot.io> Co-authored-by: codex <codex@users.noreply.github.com> Co-authored-by: Dominic Roy <dominic@sdko.org> Co-authored-by: Sameer Rangwala <145998568+sameerr03@users.noreply.github.com> Co-authored-by: Vedank Purohit <VedankPurohit2@gmail.com> Co-authored-by: Julius Marminge <jmarminge@gmail.com> Co-authored-by: Arav Jain <aravhawk@gmail.com> Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: Jake Leventhal <jakeleventhal@me.com> Co-authored-by: Adamulek123 <adam.bogucki2018@gmail.com> Co-authored-by: Bilal Bakr <62337003+Bil0000@users.noreply.github.com> Co-authored-by: Dara Adedeji <daraadedeji07@gmail.com> Co-authored-by: Shadman Taqi <61359614+iamshadmantaqi@users.noreply.github.com> Co-authored-by: Pixel Perfect <me@pixp.cc> Co-authored-by: Gianmarco <gianmarcosimone89@gmail.com> Co-authored-by: Abdel Abdelwaly <aabdelwaly7@gmail.com> Co-authored-by: Ryan Hughes <ryan@heyoodle.com>

fix: prevent invalid project script IDs from crashing threads

0543a40

github-actions Bot added vouch:trusted PR author is trusted by repo permissions or the VOUCHED list. size:M 30-99 changed lines (additions + deletions). labels Sep 5, 2026

macroscopeapp Bot approved these changes Sep 5, 2026

View reviewed changes

saphid added 3 commits September 6, 2026 14:36

Merge remote-tracking branch 'refs/remotes/origin/main' into landing/…

3448ff8

…pr-10019

Merge remote-tracking branch 'refs/remotes/origin/main' into landing/…

29e3cf4

…pr-10019

Merge remote-tracking branch 'origin/main' into ready/small-main-10019

8ce906c

juliusmarminge merged commit d8bc683 into pingdotgg:main Sep 7, 2026
24 checks passed

This was referenced Sep 7, 2026

[Bug]: Server accepts project script ids that the client keybinding schema rejects, every thread view of the project crashes #7851

Closed

fix(web): tolerate external project script ids in keybinding commands #7961

Closed

patroza mentioned this pull request Sep 7, 2026

merge: sync upstream through f57d3832c0 (preview resize, mobile new-task-on-branch) patroza/t3code#460

Merged

3 tasks

berghtho mentioned this pull request Sep 9, 2026

chore(upstream): sync 2026-09-09 berghtho/t3code#34

Merged

Navigation Menu

Uh oh!

fix(projects): prevent invalid script IDs from crashing threads - #10019

fix(projects): prevent invalid script IDs from crashing threads#10019
juliusmarminge merged 4 commits into
pingdotgg:mainfrom
saphid:fix/project-script-id-guards

saphid commented Sep 5, 2026 •

edited

Loading

Uh oh!

macroscopeapp Bot commented Sep 5, 2026

Uh oh!

coderabbitai Bot commented Sep 7, 2026 •

edited

Loading

Walkthrough

Changes

❌ Failed checks (1 warning)

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

saphid commented Sep 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What Changed

Why

Verification

UI Changes

Checklist

Current-base verification

Reject invalid script IDs in project.meta.update decider and handle null commands in web client

Latest-main refresh — 7 September 2026

Latest-base follow-up

Uh oh!

macroscopeapp Bot commented Sep 5, 2026

Approvability

Uh oh!

coderabbitai Bot commented Sep 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

❌ Failed checks (1 warning)

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

saphid commented Sep 5, 2026 •

edited

Loading

Reject invalid script IDs in `project.meta.update` decider and handle null commands in web client

coderabbitai Bot commented Sep 7, 2026 •

edited

Loading