chore(upstream): sync 2026-08-29

[berghtho]

Batch

Previous integrated upstream: a6797b3
New upstream: 053affb
Tested integration head: 6fc0e34

54 commits, 50 linked source PRs, 425 changed files.

• 73f8cfc test: remove low-signal test files (#8397)
• f6f2be3 test: prune trivial error and layout tests (#8400)
• 348367d Fix Android adaptive launcher icon (#4332)
• e2d4d12 feat(web): split provider settings into list and editor (#8380)
• 94401d0 fix(codex): accept Codex 0.150 account plans (#8447)
• b0ae3f3 fix(tooling): allow ignored-only staged changes (#8468)
• b982847 fix(mobile): keep iOS home header stable (#8467)
• f1e6f0c fix(web): stop showing red x summaries for ordinary tool failures (#8395)
• 850e458 fix(mobile): refine Git action toast glass styling (#8399)
• 2fbe313 fix(desktop): allow preview automation in agent-created threads (#8483)
• c8aba25 test(web): remove redundant cache key test (#8484)
• 5766dfb fix(release): move nightly schedule to minute 38
• f276e63 fix(web): stabilize the provider settings editor (#8472)
• 7068e86 fix(web): open GitHub pull requests in browser when loading fails (#8507)
• 49f6241 fix(codex): show sub-agent models (#8502)
• 88be563 feat(analytics): report connected client platforms (#8481)
• 8f49132 feat(server): accept PDF, ZIP, and other file uploads up to 50MB (#8235)
• 4c51b4c feat(web): toggle thread pin from the keyboard
• 9257bd8 fix(web): add back button to project settings (#8168)
• 018d7f2 refactor(mobile): compile semantic themes for Uniwind (#7327)
• f94a0d6 fix(desktop): Cache Runtime locally on WSL Filesystem, dramatically improving launch times (#5769)
• acb599d fix(mobile): show OpenCode model sources in picker (#8573)
• 84b9d9b fix(clients): honor project default models in new threads (#6011)
• 45c0dff fix(mobile): show file actions on Android (#8215)
• 94f1948 fix(connect): explain DPoP connection failures (#8351)
• 48c176b feat(web): make the sidebar project filter a searchable combobox (#5931)
• a40aef4 fix(server): a draft can retry its first send after a failed bootstrap (#8226)
• ff17610 fix(desktop): stop hidden previews draining battery (#8567)
• 0e2905e fix(desktop): oauth popups open from the browser preview (#8435)
• 0009aac fix(web): keep long task drawers usable on small screens (#8313)
• cb49e5d fix(opencode): handle child approvals, stops, and model catalogs (#8480)
• 0bbecfa fix: make thread auto-settling opt-in (#8321)
• b654911 fix(web): stop session activity timing test from blocking releases (#8585)
• e898008 fix(mobile): show composer menus when starting a task (#8587)
• ac3b2ad fix(web): show the configured stash shortcut (#8437)
• 22c311d feat(web): add toggleable confirmation before unpinning a thread (#7313)
• 3815438 fix: restore automatic thread settling defaults (#8596)
• 8fc7f22 fix(mobile): restore composer glass and rounded shadows (#8597)
• ac3a331 Remove Messages Glass Lab experiment (#8599)
• 3251b75 chore(release): prepare v0.0.36
• 2bc9e8e Require human review for pull requests changing product defaults (#8603)
• 702a6ad fix(codex): avoid quadratic app-server input buffering (#8605)
• 4669eab fix(mobile): stabilize iOS header item transitions (#8607)
• 3e6ab36 chore(mobile): upgrade to Expo SDK 57 (#8609)
• 38dcd7a fix(mobile): harden native header toolbar items (#8611)
• c131f28 fix(server): stop querying Claude context usage after turns (#8610)
• 6a9d9f9 chore: vouch ryanrhughes (#8613)
• bcb855a feat(web): attach PDFs, ZIPs, and other files to a turn (#8236)
• d22709f fix(web): pass stashShortcutLabel in the mixed-attachments stash test
• be218ac feat(web): keybinding settings as settings rows (#8532)
• c1c2d54 feat: let an environment publish themes as a file (#8569)
• 5e63aea fix(web): clean up provider settings list and editor (#8504)
• 074bcd6 fix(web): keep project picker popup inside the sidebar (#8627)
• 053affb fix(mobile): prevent header overflow and back-button artifacts (#8624)

Risk and review

• Provider/orchestration: OpenCode lifecycle and catalog rewrite, Codex sub-agent metadata and buffering, Claude usage behavior. Riker remains a separate presentation bridge.
• State/auth/files: generic 50 MiB attachments, projection changes, DPoP error categories, relay/client metadata. Focused changed tests cover contracts, projections, authorization, uploads, and reconnect/error paths.
• Clients: web settings/composer/sidebar, mobile Expo 57/themes/navigation, desktop WSL runtime and preview behavior.
• Dependencies/release: frozen install stayed clean. Incoming workflow files remain inert because repository Actions is disabled. The downstream first-release identity gate is unchanged.
• Governance/defaults: fork boundary/support routes are unchanged. The settling changes cancel within this batch; final behavior restores the prior automatic defaults.

No browser or native simulator pass was run; repository policy requires explicit user approval for computer use. Linked source PRs retain upstream UI/native evidence.

Conflicts

Two content conflicts:

• packages/contracts/src/environment.test.ts: retained Lead Agent capability coverage and added upstream generic attachment-limit coverage.
• docs/internals/glossary.md: retained CMD Riker terms and added upstream environment-theme terms with distinct link references.

Added patches/*.patch whitespace=-trailing-space in .gitattributes. Unified-diff blank context lines require a trailing space; this keeps git diff --check meaningful without corrupting dependency patches.

Capability delta

• Lead Agent inputs still accept branded projectId plus Owner content only. T3 does not select a stock provider, model, or Native Harness.
• Server still resolves and canonicalizes the configured project path before riker gateway --project.
• Lead Agent RPCs remain versioned, authenticated, project-isolated, reconnect-safe, and sanitize client-visible failures.
• Copilot remains valid behind CMD Riker Model Policy despite no stock T3 Copilot adapter.
• Incoming provider/catalog changes do not gate or narrow the Riker boundary.

Verification

Windows isolated checkout, Node 24.16.0:

• pnpm install --frozen-lockfile: passed; supply-chain policy 2010/2010; no tracked diff.
• pnpm exec vp i --frozen-lockfile: passed; no tracked diff.
• vp test run packages/contracts/src/leadAgent.test.ts apps/server/src/riker/LeadAgentProjectResolver.test.ts apps/server/src/riker/RikerOwnerGateway.test.ts apps/server/src/riker/LeadAgentBridge.test.ts: 25/25 passed.
• vp test run apps/server/src/server.test.ts -t "Lead Agent": 2 passed, 139 skipped by filter.
• vp run --filter @t3tools/contracts typecheck: passed.
• vp run --filter t3 typecheck: passed.
• vp run --filter @t3tools/mobile typecheck: passed.
• vp run --filter @t3tools/desktop --filter @t3tools/web --filter @t3tools/client-runtime --filter t3code-relay --filter @t3tools/shared --filter effect-codex-app-server --filter @t3tools/oxlint-plugin-t3code --filter @t3tools/scripts typecheck: passed.
• 109 added/modified test files batched by surface with vp test run: 2,046 passed, 44 Windows-host failures, 139 skipped. Mandatory-filter overlap is included.
• vp lint --report-unused-disable-directives on 354 changed non-generated TS/TSX files: passed with 8 existing-rule warnings.
• vp fmt --check on the same 354 files: passed.
• git diff --check: passed.

The 44 Windows failures were POSIX permission/symlink assumptions, a .sh fixture, Windows shell escaping/path fixtures, and two ProviderRegistry timing/reprobe assertions. Failing source/test paths are byte-identical to upstream/main.

Native Ubuntu 22.04 reproduction, Node 24.16.0 and pnpm 11.10.0:

• corepack pnpm@11.10.0 install --frozen-lockfile --ignore-scripts: passed; no tracked diff. Full scripts were unavailable because this WSL image lacks make for node-pty.
• corepack pnpm@11.10.0 exec vp test run apps/server/src/environmentTheme.test.ts apps/server/src/keybindings.test.ts apps/server/src/cli/theme.test.ts apps/server/src/provider/Layers/CodexCollabRuntime.integration.test.ts apps/server/src/provider/Layers/ProviderRegistry.test.ts scripts/build-desktop-artifact.test.ts: 6/6 files, 172/172 passed.
• Final Windows and Linux checkouts: clean.

Pre-push safeguards:

• Actions: enabled=false.
• origin: berghtho/t3code.
• upstream push URL: DISABLED; fetch limited to main without tags.
• remote.pushDefault: origin.
• Branch protection remains strict, administrator-enforced, conversation-resolved, and blocks force-push/deletion.
• All publication targets for this sync are fork-local.

Model: GPT-5. Native Harness: Codex.