chore(turbo): ingest upstream through 0fcd5f906 — 0.0.54 (Codex Pro Max fix)

.coderabbit.yaml

@@ -1,4 +1,5 @@
 reviews:
+  high_level_summary: false
   review_status: false
   auto_review:
     enabled: true

.github/VOUCHED.td

@@ -68,6 +68,7 @@ github:realAhmedRoach
 github:Rishet11
 github:ryanrhughes
 github:saphid
+github:scratchyone
 github:sethwebster
 github:shiroyasha9
 github:shivamhwp

.github/triage/PLAYBOOK.md

@@ -59,8 +59,9 @@ different code depending on it:
 
 Then work from evidence, not assumption. In rough order of value:
 
-- The server log and the trace file (`server.trace.ndjson`) around the time of the
-  problem. Recent failures usually leave a trail here.
+- The trace file (`server.trace.ndjson`) around the time of the problem, plus the
+  service log or desktop backend logs from the context file if they exist. Recent
+  failures usually leave a trail here.
 - The provider event log, for problems with claude/codex/cursor sessions.
 - The SQLite database. Read it freely, but only write when a write is necessary
   to fix the problem the user described, and get their explicit permission

.github/workflows/ci.yml

@@ -52,9 +52,6 @@ jobs:
       - name: Check
         run: vp check
 
-      - name: Check className overrides on components/ui do not grow
-        run: vp run lint:restyle-ceiling
-
       - name: Typecheck
         run: vpr typecheck
 

.github/workflows/deploy-relay.yml

@@ -12,8 +12,15 @@ on:
     paths:
       - "infra/relay/**"
       - ".github/workflows/deploy-relay.yml"
+  # Alchemy does not redeploy the Worker when only a Config value read in its
+  # Init changes (alchemy-run/alchemy#1831), so a changed repository variable
+  # needs a forced deploy to reach production.
   workflow_dispatch:
     inputs:
+      force:
+        description: Redeploy every resource, including ones with no detected changes
+        type: boolean
+        default: true
       skip_external_migrations:
         description: >-
           Skip the external Postgres migrations step. Use only when the runner cannot reach the
@@ -34,6 +41,8 @@ concurrency:
 jobs:
   deploy_relay:
     name: Deploy production relay
+    # A manual run from another branch would deploy that branch to production.
+    if: github.ref == 'refs/heads/turbo'
     runs-on: ubuntu-24.04
     timeout-minutes: 15
     environment:
@@ -51,6 +60,7 @@ jobs:
       RELAY_DOMAIN: ${{ vars.RELAY_DOMAIN }}
       RELAY_API_ZONE_NAME: ${{ vars.RELAY_API_ZONE_NAME }}
       RELAY_TUNNEL_ZONE_NAME: ${{ vars.RELAY_TUNNEL_ZONE_NAME }}
+      RELAY_TUNNEL_CLEANUP_MODE: ${{ vars.RELAY_TUNNEL_CLEANUP_MODE }}
       CLERK_PUBLISHABLE_KEY: ${{ vars.CLERK_PUBLISHABLE_KEY }}
       CLERK_JWT_AUDIENCE: ${{ vars.CLERK_JWT_AUDIENCE }}
       # Optional Android push; without FCM_SERVICE_ACCOUNT the FCM resources stay off.
@@ -121,7 +131,7 @@ jobs:
 
       - name: Deploy production relay stage
         if: steps.cloudflare_config.outputs.enabled == 'true'
-        run: vp run --filter t3code-relay deploy --stage prod --yes --no-input
+        run: vp run --filter t3code-relay deploy --stage prod --yes --no-input ${{ inputs.force && '--force' || '' }}
         env:
           # The PublishClientConfig action writes the client env here instead
           # of the repo-root .env; nothing on the runner reads it.

.github/workflows/mobile-eas-preview.yml

@@ -78,7 +78,19 @@ jobs:
         working-directory: apps/mobile
         env:
           EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }}
-        run: eas env:pull preview --non-interactive
+        run: |
+          eas env:pull preview --non-interactive
+          # EAS Update disables dotenv loading. Keep the downloaded native config
+          # in its process environment so Android build and OTA fingerprints match.
+          node --input-type=module <<'NODE'
+          import { appendFileSync, readFileSync } from "node:fs";
+          import { parseEnv } from "node:util";
+          const env = parseEnv(readFileSync(".env.local", "utf8"));
+          const googleServicesFile = env.T3CODE_ANDROID_GOOGLE_SERVICES_FILE;
+          if (googleServicesFile) {
+            appendFileSync(process.env.GITHUB_ENV, `T3CODE_ANDROID_GOOGLE_SERVICES_FILE=${googleServicesFile}\n`);
+          }
+          NODE
 
       - name: Deploy with fingerprint check
         if: steps.expo-token.outputs.present == 'true'

.github/workflows/mobile-showcase-screenshots.yml

@@ -76,6 +76,17 @@ jobs:
           echo "$vp_pnpm_bin" >> "$GITHUB_PATH"
           "$vp_pnpm_bin/pnpm" --version
 
+      - name: Install AXe
+        # Locks the simulator and answers the notification prompt for the
+        # agent-activity scene.
+        # Homebrew refuses third-party tap formulae until they are trusted;
+        # older releases have no trust command and install them as is.
+        run: |
+          brew tap cameroncooke/axe
+          if brew commands | grep -qx trust; then brew trust --formula cameroncooke/axe/axe; fi
+          brew install cameroncooke/axe/axe
+          axe --version
+
       - name: Capture iOS showcase
         run: pnpm screenshots:mobile --platform ios --appearance "${{ inputs.appearance }}" --theme "${{ inputs.theme }}"
 

.github/workflows/release-desktop.yml

@@ -510,6 +510,7 @@ jobs:
             "release/*.dmg"
             "release/*.zip"
             "release/*.AppImage"
+            "release/*.deb"
             "release/*.exe"
           )
           # Preview builds have no publish config, so electron-builder writes

.github/workflows/release.yml

@@ -317,13 +317,76 @@ jobs:
       - name: Typecheck
         run: vp run typecheck
 
+  # Keep tests on their own runners, using the same package split and server
+  # shards as CI, so the release check job does not spend its budget on tests.
+  test:
+    name: Release tests
+    needs: [preflight]
+    if: ${{ !failure() && !cancelled() && needs.preflight.result == 'success' }}
+    runs-on: ${{ github.repository == 'pingdotgg/t3code' && 'blacksmith-8vcpu-ubuntu-2404' || 'ubuntu-24.04' }}
+    timeout-minutes: 10
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+        with:
+          ref: ${{ needs.preflight.outputs.ref }}
+          sparse-checkout: |
+            /*
+            !/.repos/
+          sparse-checkout-cone-mode: false
+
+      - name: Setup Vite+
+        uses: voidzero-dev/setup-vp@v1
+        with:
+          node-version-file: package.json
+          cache: true
+          run-install: true
+
+      - name: Ensure Electron runtime is installed
+        run: vp run --filter @t3tools/desktop ensure:electron
+
       - uses: ./.github/actions/setup-apt-mirrors
 
       - name: Install browser secret helper build libraries
-        run: sudo apt-get update && sudo apt-get install -y libsecret-1-dev pkg-config
+        run: |
+          sudo sed -i 's|http://|https://|g' /etc/apt/blacksmith-ubuntu-mirrors.txt /etc/apt/sources.list.d/ubuntu.sources
+          sudo apt-get update && sudo apt-get install -y libsecret-1-dev pkg-config build-essential
+
+      - name: Test
+        run: vp run --parallel --concurrency-limit 4 --filter '!t3' --filter '!@t3tools/monorepo' test
+
+  test_server:
+    name: Release server tests ${{ matrix.shard }}
+    needs: [preflight]
+    if: ${{ !failure() && !cancelled() && needs.preflight.result == 'success' }}
+    runs-on: ${{ github.repository == 'pingdotgg/t3code' && 'blacksmith-8vcpu-ubuntu-2404' || 'ubuntu-24.04' }}
+    timeout-minutes: 10
+    strategy:
+      fail-fast: false
+      matrix:
+        shard: [1, 2, 3]
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+        with:
+          ref: ${{ needs.preflight.outputs.ref }}
+          sparse-checkout: |
+            /*
+            !/.repos/
+          sparse-checkout-cone-mode: false
+
+      - name: Setup Vite+
+        uses: voidzero-dev/setup-vp@v1
+        with:
+          node-version-file: package.json
+          cache: true
+          run-install: true
 
+      # No Electron setup here: `t3` (apps/server) has no Electron dependency
+      # and none of its tests touch the runtime. Only the non-server `test`
+      # job, which covers @t3tools/desktop, needs the download.
       - name: Test
-        run: vp run test
+        run: vp run --filter t3 test --shard ${{ matrix.shard }}/${{ strategy.job-total }}
 
   relay_public_config:
     name: Resolve T3 Connect public config
@@ -675,7 +738,7 @@ jobs:
       # No relay stack, no tracing artifact to download.
       relay_client_tracing: ${{ needs.preflight.outputs.connect_enabled == 'true' }}
       label: Linux arm64
-      runner: ubuntu-24.04-arm
+      runner: ${{ github.repository == 'pingdotgg/t3code' && 'blacksmith-16vcpu-ubuntu-2404-arm' || 'ubuntu-24.04-arm' }}
       platform: linux
       target: AppImage
       arch: arm64
@@ -881,6 +944,7 @@ jobs:
             echo 'release-assets/*.dmg'
             echo 'release-assets/*.zip'
             echo 'release-assets/*.AppImage'
+            echo 'release-assets/*.deb'
             echo 'release-assets/*.exe'
             if [[ "${{ needs.preflight.outputs.release_channel }}" != "preview" ]]; then
               echo 'release-assets/*.blockmap'

.macroscope/check-run-agents/effect-service-conventions.md

@@ -1,7 +1,7 @@
 ---
 title: Effect Service Conventions
-model: gpt-5-6-sol
-effort: medium
+model: gpt-6-sol
+effort: max
 input: incremental
 tools:
   - browse_code

.macroscope/check-run-agents/ui-consistency.md

@@ -1,7 +1,7 @@
 ---
 title: UI Consistency
-model: gpt-5-6-sol
-effort: medium
+model: gpt-6-sol
+effort: max
 input: incremental
 tools:
   - browse_code

.t3-turbo/customizations.json

@@ -1175,6 +1175,10 @@
         {
           "path": "apps/web/src/components/chat/providerIconUtils.ts",
           "markers": ["[ProviderDriverKind.make(\"openrouter\")]: OpenRouterIcon,"]
+        },
+        {
+          "path": "apps/server/src/provider/model-manifest.json",
+          "markers": ["\"driver\": \"openrouter\""]
         }
       ]
     },
@@ -1206,21 +1210,6 @@
         }
       ]
     },
-    {
-      "id": "restyle-ceiling-fork-delta",
-      "status": "implemented",
-      "summary": "Upstream's shadcn no-restyle ceiling counts upstream code only; the fork's own UI adds a fixed number of className overrides, expressed as UPSTREAM_RESTYLE_CEILING + TURBO_RESTYLE_OVERRIDES so upstream changes to the ceiling merge cleanly.",
-      "checks": [
-        {
-          "path": "scripts/lint-restyle-ceiling.ts",
-          "markers": [
-            "export const UPSTREAM_RESTYLE_CEILING = ",
-            "export const TURBO_RESTYLE_OVERRIDES = 6;",
-            "export const RESTYLE_CEILING = UPSTREAM_RESTYLE_CEILING + TURBO_RESTYLE_OVERRIDES;"
-          ]
-        }
-      ]
-    },
     {
       "id": "release-from-turbo-branch",
       "status": "policy",

AGENTS.md

@@ -240,7 +240,7 @@ Full glossary with file links: `docs/internals/glossary.md`
 ## Taste
 
 - Complexity belongs at the adapter boundary. Orchestration stays pure, UI stays dumb.
-- `apps/web/src/components/ui` exports own their look. Pick a `variant` or `size`; do not restyle one with `className`. If none fits, add a variant to the component, not classes at the call site. Layout classes (width, flex, margin, position) belong on the parent. `shadcn/no-restyle` reports violations and CI caps their count.
+- `apps/web/src/components/ui` exports own their look. Pick a `variant` or `size`; do not restyle one with `className`. If none fits and the look is a generic concept, add a variant to the component; a look that belongs to one feature stays in that feature's own component, not in `components/ui`. Layout classes (width, flex, margin, position) belong on the parent. `shadcn/no-restyle` fails lint on violations.
 - Inferred types over annotations. `any` is the enemy.
 - Comments describe how a thing is used, and move when the code moves. To be used mostly to describe functions, not to annotate every line of behavior.
 - Our users drive agents all day and notice a dropped frame, a lying spinner, and a stale label. No continuously repainting animations; they peg the GPU on high-refresh displays.

README.md

@@ -78,6 +78,14 @@ winget install T3Tools.T3Code
 brew install --cask t3-code
 ```
 
+#### Debian, Ubuntu (`.deb`)
+
+Download the `.deb` from [GitHub Releases](https://github.com/pingdotgg/t3code/releases), then:
+
+```bash
+sudo apt install ./T3-Code-*.deb
+```
+
 #### Arch Linux (AUR)
 
 Stable:

SEAM.md

@@ -22,9 +22,10 @@ fork's change.
   groups.
 - **Optional** `infra/relay/alchemy.run.ts` — provider layers and tracing outputs exist only when
   configured.
-- **Tuned** `scripts/lint-restyle-ceiling.ts` — `RESTYLE_CEILING = UPSTREAM_RESTYLE_CEILING +
-TURBO_RESTYLE_OVERRIDES` (6 fork className overrides on components/ui exports). On conflict,
-  take upstream's new number into `UPSTREAM_RESTYLE_CEILING` and keep the sum.
+- **Retired 2026-09-29** `scripts/lint-restyle-ceiling.ts` (seam `restyle-ceiling-fork-delta`) —
+  upstream #13210 deleted the ceiling gate and made `shadcn/no-restyle` a lint error in
+  `vite.config.ts`. There is no ceiling left to tune; fork UI must use variants/sizes like upstream
+  code. On conflict, do not resurrect the script.
 - **Additive** `infra/relay/scripts/apply-external-migrations.ts` (+ test) — applies
   `infra/relay/migrations/postgres` to the self-hosted Supabase Postgres from `deploy-relay.yml`
   before `alchemy deploy`, one transaction per folder, ledger table `relay_external_migrations`,
@@ -367,6 +368,9 @@ Built to survive orchestrator v2 (pingdotgg/t3code#2829):
   `components/chat/providerIconUtils.ts`, `components/settings/providerDriverMeta.ts`,
   `session-logic.ts` (picker option), `composerDraftStore.ts` (provider option keys), and
   `lib/contextWindow.ts` (display name).
+- **Additive** `apps/server/src/provider/model-manifest.json` — an `openrouter` bundled
+  compatibility policy mirroring `claudeAgent` (the driver probes the same `claude` binary), so
+  every built-in harness has a bundled policy.
 - **Additive, V1-shim (retires at v2 cutover)** `Drivers/OpenRouterDriver.ts` — the
   `ProviderDriver` registration. v2's `ClaudeAdapterV2` already imports the same
   `makeClaudeEnvironment`/`mergeProviderInstanceEnvironment` plumbing and accepts per-instance
@@ -376,7 +380,8 @@ Built to survive orchestrator v2 (pingdotgg/t3code#2829):
   driver identity on events and sessions, keeping the churn-heavy file merge-clean.
 
 On a nightly-sync conflict: everything here is additive except `builtInDrivers.ts`,
-`settings.ts`/`model.ts` map entries, and the six web wiring files above — re-add the fork lines
+`settings.ts`/`model.ts` map entries, the `model-manifest.json` policy entry, and the six web
+wiring files above — re-add the fork lines
 after upstream's. If upstream ships its own OpenRouter or the ACP registry (#6071) covers it,
 prefer upstream and retire the shim first.
 
@@ -536,7 +541,7 @@ settles "do nothing".
 Two fork-owned constants, no product behavior change:
 
 - **`packages/client-runtime/src/state/shellSnapshotHttp.ts`** - `DEFAULT_SHELL_SNAPSHOT_TIMEOUT_MS`
-  is 30s (upstream: 6s) and exported. The cached shell still renders while the request runs.
+  is 30s (upstream: 6s, raised to 20s and made private in the 2026-09-30 ingest) and exported. The cached shell still renders while the request runs.
 - **`apps/server/src/project/RepositoryIdentityResolver.ts`** - `DEFAULT_POSITIVE_CACHE_TTL` is 12h
   and `DEFAULT_NEGATIVE_CACHE_TTL` is 10min (upstream: 1min each), both exported. A repository's
   remote does not change minute to minute, the identity is cosmetic (PR links, icons), and a

apps/desktop/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@t3tools/desktop",
-  "version": "0.0.53",
+  "version": "0.0.54",
   "private": true,
   "type": "module",
-  "main": "dist-electron/main.cjs",
+  "main": "dist-electron/boot.cjs",
   "scripts": {
     "ensure:electron": "node scripts/ensure-electron-runtime.mjs",
     "start": "node scripts/start-electron.mjs",