fix(desktop): sign Windows native addons by Lumbreras2306 · Pull Request #8206 · pingdotgg/t3code

Lumbreras2306 · 2026-08-25T15:33:04Z

Problem

The signed Windows desktop build only signs .exe files by default. Native addons and libraries copied into app.asar.unpacked and server.asar.unpacked remain unsigned, so Windows Smart App Control can block them independently from the signed T3 Code executable. Blocking ffi-rs.win32-x64-msvc.node crash-loops the embedded backend and leaves the renderer on the generic fetch-session-state (HTTP 500) error screen.

Fix

Add .node and .dll to Electron Builder's Windows signExts configuration. Release builds will use the existing Azure Trusted Signing configuration for these native runtime files as well as the default executable targets.

The Windows build-config test now asserts that both native extensions remain covered.

Fixes #8201.

Testing

vp test run scripts/build-desktop-artifact.test.ts -t "configures Windows executable metadata and native signing extensions"
vp lint scripts/build-desktop-artifact.ts scripts/build-desktop-artifact.test.ts
pnpm --filter @t3tools/scripts typecheck

A full run of scripts/build-desktop-artifact.test.ts reached 46 passing tests; 6 existing environment-sensitive tests failed locally on Windows because the sandbox cannot create symlinks/spawn the packaged probe and an ancestor node_modules is intentionally rejected. The focused test, lint, and typecheck pass.

Generated with GPT-5 via Codex.

Note

Medium Risk
Changes Windows release signing scope for all signed builds; misconfiguration could break signing CI or leave natives unsigned if Electron Builder behavior differs from expectations.

Overview
Extends Windows release packaging so Electron Builder signs .node and .dll files, not just the main .exe. The change sets win.signExts to ['.node', '.dll'] in createBuildConfig, so Azure Trusted Signing (when signed is enabled) also covers native addons and libraries unpacked from app.asar and the server sidecar—addressing Smart App Control blocking unsigned runtime natives (e.g. ffi-rs) that can crash-loop the embedded backend.

The build-config test was renamed and now asserts signExts alongside existing checks for icon, signAndEditExecutable, and absent azureSignOptions on unsigned builds.

^{Reviewed by Cursor Bugbot for commit 2fda067. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Add `signExts` to Windows build config in `createBuildConfig`

Sets winConfig.signExts to ['.node', '.dll'] in the Windows branch of createBuildConfig so Electron-builder signs native addons. Updates the test in build-desktop-artifact.test.ts to assert the extension list.

^{Macroscope summarized 2fda067.}

coderabbitai · 2026-08-25T15:33:12Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.config.ts
Review profile: CHILL
Plan: Advanced
Run ID: 7569121c-3656-483d-a1f0-064f68859a3b

📥 Commits

Reviewing files that changed from the base of the PR and between aacefcd and 5f915d3.

📒 Files selected for processing (2)

scripts/build-desktop-artifact.test.ts
scripts/build-desktop-artifact.ts

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 2 remain after this review.

📝 Walkthrough

Walkthrough

Windows server-sidecar packaging now unpacks shared-library and helper formats, and selectively unpacks .node files with the MZ signature. Windows signing includes .node and .dll extensions. Tests cover native-file placement and signing configuration.

Changes

Windows native addon packaging

Layer / File(s)	Summary
Selective Windows sidecar unpacking `scripts/build-desktop-artifact.ts`, `scripts/build-desktop-artifact.test.ts`	The sidecar packer applies shared-library and helper unpack globs. It adds an unpack rule for `.node` files only when their contents begin with `MZ`. Tests check that the Windows native is unpacked and the Linux native remains readable inside the ASAR.
Windows native signing extensions `scripts/build-desktop-artifact.ts`, `scripts/build-desktop-artifact.test.ts`	Windows signing configuration includes `.node` and `.dll` extensions. The test retains the executable resource-editing expectation.

Priority: ➖ Normal

Estimated code review effort: 3 (Moderate) | ~20 minutes

Change: Bug fix · Severity of issue fixed: Medium

Suggested reviewers: juliusmarminge

Merge Risk | ⚪ Minimal · up to 5f915

Merge Risk: ⚪ Minimal · up to 5f915

The changed packaging and signing paths appear to cover the Windows native addons. No merge-blocking issue remains after normal checks.

Security Architecture Review

Security architecture risk: 🔵 Low · up to 5f915

The change is narrowly scoped to Windows packaging and uses the existing signing identity. No introduced attack path was established. Remaining uncertainty is whether final release artifacts retain executable signing and successfully sign every intended native library.

Retained concerns
No architecture-level concerns identified.

Security review details

Security Blast Radius

inferred — The changed trust scope covers native files selected for Windows packages using the existing release-signing identity. Compromised staged dependency content could consequently receive that publisher signature; no new remote submission path, tenant authority, or signing credential is established by the inspected change.

Trust Boundaries and Controls

inferred — Earlier inspection of the pinned signing dependency supports selection of sidecar native files during extra-resource copying, so server.asar.unpacked placement alone does not establish missing signing coverage. Configuration and selection do not prove successful signatures; current inspection could not independently confirm the external implementation or preservation of default executable signing.

Resilience and Maintainability Implications

observed — The existing final-output copy loop is non-transactional and unlocked: interruption or concurrent builds sharing an output directory can leave partial or stale outputs. This publication limitation predates the PR and is not retained as an introduced concern. Build isolation and validation ordering remain unchanged.

Hardening Proposals

proposed — For signed releases, verify Authenticode validity and expected publisher identity on final executable, .node, and .dll outputs in both unpacked trees before distributing artifacts. This would demonstrate delegated signing coverage rather than relying solely on configuration assertions and runtime-load probes.

Pre-merge checks | 3 | 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Linked Issues check		The change satisfies the packaging requirement in [`#8201`] by adding `.node` and `.dll` to Windows `signExts`. The updated tests also cover PE `.node` unpacking and Linux prebuild exclusion. However, t…	Add automated coverage that verifies signatures for every packaged Windows native artifact. Propagate the native load error, including Windows error 4551 when available, to the desktop startup error and diagnostics. Add the requested Smart …

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title check		The title clearly identifies the primary change: signing Windows native addons.
Description check		The description explains the problem, fix, issue reference, focused verification, and known environment-sensitive failures. It is mostly complete, although it does not use explicit "Change," "Scope an…
Out of Scope Changes check		The changes stay within [`#8201`]. The server-sidecar unpack rules make Windows native files available for signing and exclude Linux native prebuilds. The fixture updates verify that packaging behavior.…

Full details: Linked Issues check

Explanation

The change satisfies the packaging requirement in [#8201] by adding .node and .dll to Windows signExts. The updated tests also cover PE .node unpacking and Linux prebuild exclusion. However, the reviewed changes do not implement the issue's other coding requirements: preserve and surface the underlying application-control or ERR_DLOPEN_FAILED error, and add a release check for native signature coverage. No Smart App Control enforcement smoke test is added either.

Resolution

Add automated coverage that verifies signatures for every packaged Windows native artifact. Propagate the native load error, including Windows error 4551 when available, to the desktop startup error and diagnostics. Add the requested Smart App Control enforcement smoke test if the CI environment supports it.

Fix all pre-merge checks with AI

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create a new PR

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Warning

⚠️ This pull request shows signs of AI-generated slop (ai_padded_prose). It has been flagged by CodeRabbit slop detection and should be reviewed carefully.

_{Comment @coderabbitai help to get the list of available commands.}

macroscopeapp · 2026-08-25T15:45:22Z

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — This patch changes Windows production artifact layout and expands Authenticode signing to native addons and DLLs. The focused tests cover representative packaging cases, but the release-signing and packaging impact warrants human review.

^{You can add or adjust custom eligibility rules. Learn more.}

cursor

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want fixes drafted automatically? Bugbot Autofix can create code changes for findings. A team admin can enable Autofix in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit 2fda067. Configure here.}

Only unpack server sidecar .node files with a PE header. Linux addons for the WSL backend stay packed in server.asar, so signExts never sends ELF binaries to Authenticode.

# Conflicts: # scripts/build-desktop-artifact.test.ts # scripts/build-desktop-artifact.ts

An empty addon list nested the brace pattern and unpacked nothing, and backslash escapes act as separators to minimatch on Windows.

@juliusmarminge

## What's Changed * feat(web): draft screen project picker is searchable by @juliusmarminge in pingdotgg/t3code#17664 * fix(server): report incomplete transcript usage scans by @maria-rcks in pingdotgg/t3code#15661 * fix(web): every resize-driven layout commits in the same frame by @maria-rcks in pingdotgg/t3code#17656 * fix(web): right panel and terminal drawer follow the pointer while dragging by @maria-rcks in pingdotgg/t3code#17657 * fix(web): terminal drawer keeps its height after the window shrinks by @maria-rcks in pingdotgg/t3code#17658 * perf(web): sidebar drags restyle only the sidebar by @maria-rcks in pingdotgg/t3code#17659 * fix(web): server browser page resizes while the panel is dragged by @maria-rcks in pingdotgg/t3code#17660 * fix(storage): make worktree cleanup work and show why it skipped by @maria-rcks in pingdotgg/t3code#17563 * test(usage): usage service tests keep their state directory until cache writes land by @tris203 in pingdotgg/t3code#17636 * fix(checkpoint): pulls and rebases no longer flood a turn's changed files by @t3dotgg in pingdotgg/t3code#17161 * fix(web): place notification icons after titles by @voltcrash in pingdotgg/t3code#12209 * fix(web): attachments on an open question are visible again by @tiliakoos in pingdotgg/t3code#15537 * fix(web): scale Files tree with interface font size by @Umais-Adeed in pingdotgg/t3code#8011 * fix(server): probe only owned preview listeners by @maria-rcks in pingdotgg/t3code#16687 * fix(chat): surface pending subagent questions on parents by @maria-rcks in pingdotgg/t3code#16634 * fix(web): section header chevrons point up when collapsed by @ZenderGoD in pingdotgg/t3code#14273 * fix(web): timeline divider pill shows a pointer, visible hover and focus ring by @jonesfionn101-dotcom in pingdotgg/t3code#15188 * fix(git): allow creating prs from dirty worktrees by @maria-rcks in pingdotgg/t3code#15625 * docs(install): polish binary install destination phrasing by @ege-arhan in pingdotgg/t3code#15732 * perf(server): keep passive terminal output flowing by @StiensWout in pingdotgg/t3code#17178 * fix(web): stop button icon no longer shifts on hover by @NK-Works in pingdotgg/t3code#16012 * fix(web): add bottom padding to expanded tool panels by @12ya in pingdotgg/t3code#16525 * fix(web): keep incremental highlighter return type portable by @luke2x in pingdotgg/t3code#17259 * fix(web): sidebar "Code" label no longer clips its letter tops by @akbarakma in pingdotgg/t3code#16134 * fix(tests): use POSIX paths for the simulated macOS device host by @Quicksaver in pingdotgg/t3code#17241 * fix(mobile): Android composer keeps the caret in view on AOSP-based keyboards by @bitmvk in pingdotgg/t3code#17492 * test(web): allow cold timeline imports on CI by @lastobelus in pingdotgg/t3code#16608 * fix(mobile): pinch zooms chat images on Android by @AKolenda in pingdotgg/t3code#15047 * fix(web): selected provider ring no longer clipped during panel resize by @jfortez in pingdotgg/t3code#17534 * docs(usage): OpenCode Go limits need a Go API key by @nexxeln in pingdotgg/t3code#15664 * fix(web): improve usage scanning indicator alignment by @AksharP5 in pingdotgg/t3code#15498 * fix(server): print pairing credential expiry as ISO timestamp by @kvnloo in pingdotgg/t3code#14128 * chore(ci): use GPT 6.1 Sol Max for check agents by @ishaanko in pingdotgg/t3code#14312 * fix(mobile): honor requested terminal native architectures by @bompus in pingdotgg/t3code#10709 * fix(server): keep preview browser connected after operation timeouts by @juliusmarminge in pingdotgg/t3code#17693 * fix(web): timeline divider focus ring stays inside the pill by @t3dotgg in pingdotgg/t3code#17702 * perf(desktop): reuse the prepared shell environment in the local backend by @Yash-Singh1 in pingdotgg/t3code#17384 * fix(web): align settings page widths by @diegoarff in pingdotgg/t3code#12158 * test(server): resolve the temp dir before matching the symlinked entrypoint by @ylcn91 in pingdotgg/t3code#9400 * fix(web): keep inline code pills intact when they wrap by @satyalyadav in pingdotgg/t3code#12038 * Revert "chore(ci): use GPT 6.1 Sol Max for check agents" by @maria-rcks in pingdotgg/t3code#17698 * fix(web): show the correct new thread shortcut in command palette by @vaishnavsm in pingdotgg/t3code#8513 * fix(desktop): declare macOS local network usage by @jsilets in pingdotgg/t3code#11922 * docs: add Scoop as Windows installation method by @Mostafa-Ben-Git in pingdotgg/t3code#10509 * fix(server): agents run in their own systemd scopes so an OOM kill spares the server by @t3dotgg in pingdotgg/t3code#17662 * fix(web): welcome wizard says where imported projects come from by @UzEE in pingdotgg/t3code#14584 * fix(web): cite works on responses that end before a tool call by @maria-rcks in pingdotgg/t3code#17713 * fix(desktop): sign Windows native addons by @Lumbreras2306 in pingdotgg/t3code#8206 * fix(server): track resumed subagent follow-ups as separate tasks by @Yash-Singh1 in pingdotgg/t3code#17696 * fix(web): nested corners follow their container's radius by @maria-rcks in pingdotgg/t3code#17695 * feat(web): pr panel actions confirm in place by @maria-rcks in pingdotgg/t3code#17710 * feat(web): reorder right panel tabs by dragging by @eimexdev in pingdotgg/t3code#17730 * fix(azure-devops): list pull requests with token sign-in and check out into worktrees by @maria-rcks in pingdotgg/t3code#17725 * fix(usage): keep one email in two workspaces as two accounts by @maria-rcks in pingdotgg/t3code#17711 * feat(pull-requests): hosts can report edit and resolve permissions per item by @juliusmarminge in pingdotgg/t3code#17667 * perf(server): run Git for Windows' real git.exe, not its launcher by @SunkenInTime in pingdotgg/t3code#17707 * fix(clients): restart continuations show as a T3 Code notice, not another agent's message by @juliusmarminge in pingdotgg/t3code#17723 * fix(mobile): browser picture in picture opens from the header button by @juliusmarminge in pingdotgg/t3code#17731 * feat(source-control): GitCafe lives in @t3tools/source-control-gitcafe by @juliusmarminge in pingdotgg/t3code#17681 * fix(web): add provider wizard no longer shifts sideways while it grows by @flamboh in pingdotgg/t3code#17292 * fix(web): PR search keeps the caret where you type by @flamboh in pingdotgg/t3code#17675 * fix(server): thread PR badges catch up when another environment reads the PR by @flamboh in pingdotgg/t3code#17729 * fix(server): refuse editor paths with line breaks or quotes when the editor is a Windows command shim by @juliusmarminge in pingdotgg/t3code#17749 ## New Contributors * @tiliakoos made their first contribution in pingdotgg/t3code#15537 * @Umais-Adeed made their first contribution in pingdotgg/t3code#8011 * @ZenderGoD made their first contribution in pingdotgg/t3code#14273 * @jonesfionn101-dotcom made their first contribution in pingdotgg/t3code#15188 * @ege-arhan made their first contribution in pingdotgg/t3code#15732 * @NK-Works made their first contribution in pingdotgg/t3code#16012 * @12ya made their first contribution in pingdotgg/t3code#16525 * @luke2x made their first contribution in pingdotgg/t3code#17259 * @akbarakma made their first contribution in pingdotgg/t3code#16134 * @Quicksaver made their first contribution in pingdotgg/t3code#17241 * @bitmvk made their first contribution in pingdotgg/t3code#17492 * @lastobelus made their first contribution in pingdotgg/t3code#16608 * @jfortez made their first contribution in pingdotgg/t3code#17534 * @diegoarff made their first contribution in pingdotgg/t3code#12158 * @ylcn91 made their first contribution in pingdotgg/t3code#9400 * @satyalyadav made their first contribution in pingdotgg/t3code#12038 * @vaishnavsm made their first contribution in pingdotgg/t3code#8513 * @jsilets made their first contribution in pingdotgg/t3code#11922 * @Mostafa-Ben-Git made their first contribution in pingdotgg/t3code#10509 * @UzEE made their first contribution in pingdotgg/t3code#14584 * @Lumbreras2306 made their first contribution in pingdotgg/t3code#8206 **Full Changelog**: pingdotgg/t3code@v0.0.46-nightly.20261010.2908...v0.0.46-nightly.20261010.2922 Upstream release: https://github.com/pingdotgg/t3code/releases/tag/v0.0.46-nightly.20261010.2922

@juliusmarminge

## What's Changed * feat(web): draft screen project picker is searchable by @juliusmarminge in pingdotgg/t3code#17664 * fix(server): report incomplete transcript usage scans by @maria-rcks in pingdotgg/t3code#15661 * fix(web): every resize-driven layout commits in the same frame by @maria-rcks in pingdotgg/t3code#17656 * fix(web): right panel and terminal drawer follow the pointer while dragging by @maria-rcks in pingdotgg/t3code#17657 * fix(web): terminal drawer keeps its height after the window shrinks by @maria-rcks in pingdotgg/t3code#17658 * perf(web): sidebar drags restyle only the sidebar by @maria-rcks in pingdotgg/t3code#17659 * fix(web): server browser page resizes while the panel is dragged by @maria-rcks in pingdotgg/t3code#17660 * fix(storage): make worktree cleanup work and show why it skipped by @maria-rcks in pingdotgg/t3code#17563 * test(usage): usage service tests keep their state directory until cache writes land by @tris203 in pingdotgg/t3code#17636 * fix(checkpoint): pulls and rebases no longer flood a turn's changed files by @t3dotgg in pingdotgg/t3code#17161 * fix(web): place notification icons after titles by @voltcrash in pingdotgg/t3code#12209 * fix(web): attachments on an open question are visible again by @tiliakoos in pingdotgg/t3code#15537 * fix(web): scale Files tree with interface font size by @Umais-Adeed in pingdotgg/t3code#8011 * fix(server): probe only owned preview listeners by @maria-rcks in pingdotgg/t3code#16687 * fix(chat): surface pending subagent questions on parents by @maria-rcks in pingdotgg/t3code#16634 * fix(web): section header chevrons point up when collapsed by @ZenderGoD in pingdotgg/t3code#14273 * fix(web): timeline divider pill shows a pointer, visible hover and focus ring by @jonesfionn101-dotcom in pingdotgg/t3code#15188 * fix(git): allow creating prs from dirty worktrees by @maria-rcks in pingdotgg/t3code#15625 * docs(install): polish binary install destination phrasing by @ege-arhan in pingdotgg/t3code#15732 * perf(server): keep passive terminal output flowing by @StiensWout in pingdotgg/t3code#17178 * fix(web): stop button icon no longer shifts on hover by @NK-Works in pingdotgg/t3code#16012 * fix(web): add bottom padding to expanded tool panels by @12ya in pingdotgg/t3code#16525 * fix(web): keep incremental highlighter return type portable by @luke2x in pingdotgg/t3code#17259 * fix(web): sidebar "Code" label no longer clips its letter tops by @akbarakma in pingdotgg/t3code#16134 * fix(tests): use POSIX paths for the simulated macOS device host by @Quicksaver in pingdotgg/t3code#17241 * fix(mobile): Android composer keeps the caret in view on AOSP-based keyboards by @bitmvk in pingdotgg/t3code#17492 * test(web): allow cold timeline imports on CI by @lastobelus in pingdotgg/t3code#16608 * fix(mobile): pinch zooms chat images on Android by @AKolenda in pingdotgg/t3code#15047 * fix(web): selected provider ring no longer clipped during panel resize by @jfortez in pingdotgg/t3code#17534 * docs(usage): OpenCode Go limits need a Go API key by @nexxeln in pingdotgg/t3code#15664 * fix(web): improve usage scanning indicator alignment by @AksharP5 in pingdotgg/t3code#15498 * fix(server): print pairing credential expiry as ISO timestamp by @kvnloo in pingdotgg/t3code#14128 * chore(ci): use GPT 6.1 Sol Max for check agents by @ishaanko in pingdotgg/t3code#14312 * fix(mobile): honor requested terminal native architectures by @bompus in pingdotgg/t3code#10709 * fix(server): keep preview browser connected after operation timeouts by @juliusmarminge in pingdotgg/t3code#17693 * fix(web): timeline divider focus ring stays inside the pill by @t3dotgg in pingdotgg/t3code#17702 * perf(desktop): reuse the prepared shell environment in the local backend by @Yash-Singh1 in pingdotgg/t3code#17384 * fix(web): align settings page widths by @diegoarff in pingdotgg/t3code#12158 * test(server): resolve the temp dir before matching the symlinked entrypoint by @ylcn91 in pingdotgg/t3code#9400 * fix(web): keep inline code pills intact when they wrap by @satyalyadav in pingdotgg/t3code#12038 * Revert "chore(ci): use GPT 6.1 Sol Max for check agents" by @maria-rcks in pingdotgg/t3code#17698 * fix(web): show the correct new thread shortcut in command palette by @vaishnavsm in pingdotgg/t3code#8513 * fix(desktop): declare macOS local network usage by @jsilets in pingdotgg/t3code#11922 * docs: add Scoop as Windows installation method by @Mostafa-Ben-Git in pingdotgg/t3code#10509 * fix(server): agents run in their own systemd scopes so an OOM kill spares the server by @t3dotgg in pingdotgg/t3code#17662 * fix(web): welcome wizard says where imported projects come from by @UzEE in pingdotgg/t3code#14584 * fix(web): cite works on responses that end before a tool call by @maria-rcks in pingdotgg/t3code#17713 * fix(desktop): sign Windows native addons by @Lumbreras2306 in pingdotgg/t3code#8206 * fix(server): track resumed subagent follow-ups as separate tasks by @Yash-Singh1 in pingdotgg/t3code#17696 * fix(web): nested corners follow their container's radius by @maria-rcks in pingdotgg/t3code#17695 * feat(web): pr panel actions confirm in place by @maria-rcks in pingdotgg/t3code#17710 * feat(web): reorder right panel tabs by dragging by @eimexdev in pingdotgg/t3code#17730 * fix(azure-devops): list pull requests with token sign-in and check out into worktrees by @maria-rcks in pingdotgg/t3code#17725 * fix(usage): keep one email in two workspaces as two accounts by @maria-rcks in pingdotgg/t3code#17711 * feat(pull-requests): hosts can report edit and resolve permissions per item by @juliusmarminge in pingdotgg/t3code#17667 * perf(server): run Git for Windows' real git.exe, not its launcher by @SunkenInTime in pingdotgg/t3code#17707 * fix(clients): restart continuations show as a T3 Code notice, not another agent's message by @juliusmarminge in pingdotgg/t3code#17723 * fix(mobile): browser picture in picture opens from the header button by @juliusmarminge in pingdotgg/t3code#17731 * feat(source-control): GitCafe lives in @t3tools/source-control-gitcafe by @juliusmarminge in pingdotgg/t3code#17681 * fix(web): add provider wizard no longer shifts sideways while it grows by @flamboh in pingdotgg/t3code#17292 * fix(web): PR search keeps the caret where you type by @flamboh in pingdotgg/t3code#17675 * fix(server): thread PR badges catch up when another environment reads the PR by @flamboh in pingdotgg/t3code#17729 * fix(server): refuse editor paths with line breaks or quotes when the editor is a Windows command shim by @juliusmarminge in pingdotgg/t3code#17749 ## New Contributors * @tiliakoos made their first contribution in pingdotgg/t3code#15537 * @Umais-Adeed made their first contribution in pingdotgg/t3code#8011 * @ZenderGoD made their first contribution in pingdotgg/t3code#14273 * @jonesfionn101-dotcom made their first contribution in pingdotgg/t3code#15188 * @ege-arhan made their first contribution in pingdotgg/t3code#15732 * @NK-Works made their first contribution in pingdotgg/t3code#16012 * @12ya made their first contribution in pingdotgg/t3code#16525 * @luke2x made their first contribution in pingdotgg/t3code#17259 * @akbarakma made their first contribution in pingdotgg/t3code#16134 * @Quicksaver made their first contribution in pingdotgg/t3code#17241 * @bitmvk made their first contribution in pingdotgg/t3code#17492 * @lastobelus made their first contribution in pingdotgg/t3code#16608 * @jfortez made their first contribution in pingdotgg/t3code#17534 * @diegoarff made their first contribution in pingdotgg/t3code#12158 * @ylcn91 made their first contribution in pingdotgg/t3code#9400 * @satyalyadav made their first contribution in pingdotgg/t3code#12038 * @vaishnavsm made their first contribution in pingdotgg/t3code#8513 * @jsilets made their first contribution in pingdotgg/t3code#11922 * @Mostafa-Ben-Git made their first contribution in pingdotgg/t3code#10509 * @UzEE made their first contribution in pingdotgg/t3code#14584 * @Lumbreras2306 made their first contribution in pingdotgg/t3code#8206 **Full Changelog**: pingdotgg/t3code@v0.0.46-nightly.20261010.2908...v0.0.46-nightly.20261010.2922 Upstream release: https://github.com/pingdotgg/t3code/releases/tag/v0.0.46-nightly.20261010.2922

* fix(web): timeline divider focus ring stays inside the pill (pingdotgg#17702) Co-authored-by: Claude Opus 5.5 <[email protected]> * perf(desktop): reuse the prepared shell environment in the local backend (pingdotgg#17384) Co-authored-by: Claude Sonnet 5.5 <[email protected]> * fix(web): align settings page widths (pingdotgg#12158) Co-authored-by: maria <[email protected]> * test(server): resolve the temp dir before matching the symlinked entrypoint (pingdotgg#9400) * fix(web): keep inline code pills intact when they wrap (pingdotgg#12038) * Revert "chore(ci): use GPT 6.1 Sol Max for check agents" (pingdotgg#17698) * fix(web): show the correct new thread shortcut in command palette (pingdotgg#8513) * fix(desktop): declare macOS local network usage (pingdotgg#11922) * docs: add Scoop as Windows installation method (pingdotgg#10509) Co-authored-by: Mostafa Ben <[email protected]> * fix(server): agents run in their own systemd scopes so an OOM kill spares the server (pingdotgg#17662) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(web): welcome wizard says where imported projects come from (pingdotgg#14584) Co-authored-by: maria <[email protected]> * fix(web): cite works on responses that end before a tool call (pingdotgg#17713) * fix(desktop): sign Windows native addons (pingdotgg#8206) Co-authored-by: maria-rcks <[email protected]> * fix(server): track resumed subagent follow-ups as separate tasks (pingdotgg#17696) * fix(web): nested corners follow their container's radius (pingdotgg#17695) Co-authored-by: maria-rcks <[email protected]> * feat(web): pr panel actions confirm in place (pingdotgg#17710) * feat(web): reorder right panel tabs by dragging (pingdotgg#17730) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(azure-devops): list pull requests with token sign-in and check out into worktrees (pingdotgg#17725) Co-authored-by: maria-rcks <[email protected]> * fix(usage): keep one email in two workspaces as two accounts (pingdotgg#17711) * feat(pull-requests): hosts can report edit and resolve permissions per item (pingdotgg#17667) Co-authored-by: Claude Opus 5.5 <[email protected]> * perf(server): run Git for Windows' real git.exe, not its launcher (pingdotgg#17707) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(clients): restart continuations show as a T3 Code notice, not another agent's message (pingdotgg#17723) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(mobile): browser picture in picture opens from the header button (pingdotgg#17731) Co-authored-by: Claude Opus 5.5 <[email protected]> * feat(source-control): GitCafe lives in @t3tools/source-control-gitcafe (pingdotgg#17681) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(web): add provider wizard no longer shifts sideways while it grows (pingdotgg#17292) * fix(web): PR search keeps the caret where you type (pingdotgg#17675) * fix(server): thread PR badges catch up when another environment reads the PR (pingdotgg#17729) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(server): refuse editor paths with line breaks or quotes when the editor is a Windows command shim (pingdotgg#17749) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(web): align compact button touch targets (pingdotgg#17748) * fix(server): t3_thread_launch refuses a new worktree whose base ref has no commit (pingdotgg#17791) * fix(web): omit underlines on markdown image links (pingdotgg#17728) * fix(server): restore auto resume for wrapped Claude gateway rate limits (pingdotgg#17778) * fix(opencode): name OpenCode 2 sessions after their thread (pingdotgg#17414) * fix(web): find update settings from the command palette (pingdotgg#17396) Co-authored-by: Claude <[email protected]> * fix(provider-opencode): tell OpenCode Zen and Go models apart (pingdotgg#17424) * fix(server): a pull that fast-forwards no longer fails on large Git output (pingdotgg#17376) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(web): cancel question auto-advance after navigation (pingdotgg#17364) * fix(server): a bare repository name resolves to the signed-in account again (pingdotgg#17379) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(web): a maximized right panel stays maximized when you return to its thread (pingdotgg#17327) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(mobile): allow starting a task with only an image (pingdotgg#17409) * fix(server): PR watch no longer reports passed while a second run of a check is still going (pingdotgg#17344) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(server): say why a thread can't be settled (pingdotgg#17258) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(server): prevent busy terminals from starving history persistence (pingdotgg#17181) * feat(server): use macOS .icns app icons as project icons (pingdotgg#17149) * fix(mobile): usage reset icon lines up with its row (pingdotgg#17175) * fix(web): paths pasted after @ keep their underscores (pingdotgg#16619) Co-authored-by: Yash Singh <[email protected]> * fix(server): settle every OpenCode subagent call one report answers (pingdotgg#17134) * perf(web): switching project keeps Diagnostics and Providers mounted (pingdotgg#17122) * perf(web): Open Source Licenses downloads its manifest once per session (pingdotgg#17119) * fix(server): restore OpenCode adapter test typecheck (pingdotgg#17810) * fix(server): Claude subagents show the reasoning effort they run at (pingdotgg#17496) Co-authored-by: Claude Opus 5.5 <[email protected]> * feat(server): stop Claude subagents without stopping their owner (pingdotgg#17826) * fix(server): stopped native subagents no longer read as Running (pingdotgg#17223) Co-authored-by: Claude Opus 5.5 <[email protected]> Co-authored-by: Yash Singh <[email protected]> * perf(server): t3_thread_list reads only the listed project's threads (pingdotgg#17843) Co-authored-by: Claude Opus 5.5 (1M context) <[email protected]> * fix(server): show diffs for projects outside the server cwd (pingdotgg#17724) Co-authored-by: maria-rcks <[email protected]> * fix(server): check the specific scope for scripts, preview input, and full-access MCP grants (pingdotgg#17772) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(source-control): stop Forgejo status refresh from scanning every pull request (pingdotgg#12223) Co-authored-by: t3-code[bot] <269035359+t3-code[bot]@users.noreply.github.com> Co-authored-by: Julius Marminge <[email protected]> Co-authored-by: Julius Marminge <[email protected]> Signed-off-by: Loïs Postula <[email protected]> * refactor(contracts): source control provider kind is an open branded slug (pingdotgg#17739) Co-authored-by: Claude Opus 5.5 <[email protected]> * feat(source-control): each host package ships a client definition (pingdotgg#17746) Co-authored-by: Claude Opus 5.5 <[email protected]> * refactor(client-runtime): add project clone sources come from host definitions (pingdotgg#17756) Co-authored-by: Claude Opus 5.5 <[email protected]> * refactor(web): host presentation and behavior come from client definitions (pingdotgg#17757) Co-authored-by: Claude Opus 5.5 <[email protected]> * refactor(source-control): reference parsing and project matching are host resolvers (pingdotgg#17770) Co-authored-by: Claude Opus 5.5 <[email protected]> * feat(pull-requests): quick actions follow each host's capabilities, not GitHub (pingdotgg#17774) Co-authored-by: Claude Opus 5.5 <[email protected]> * feat(projects): new projects can be published to any ready host (pingdotgg#17860) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(server): send Claude MCP servers over the control channel (pingdotgg#17898) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(web): a finished reply replaced by a steer is no longer labeled partial (pingdotgg#17761) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(client-runtime): queued runs that start after a steer show up in the thread (pingdotgg#17764) Co-authored-by: Claude Opus 5.5 <[email protected]> * feat(mobile): choose the microphone order for voice input (pingdotgg#17896) Co-authored-by: Claude Opus 5.5 <[email protected]> * feat(source-control): host settings live on each host's definition, with a GitCafe token (pingdotgg#17901) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(pi): preserve tool images and structured results (pingdotgg#17851) * fix(server): Claude 5 task lists reach the tasks drawer (pingdotgg#14964) * fix(web): find bar and thread details panel stop covering each other (pingdotgg#17858) Co-authored-by: Yash Singh <[email protected]> * fix(web): use server metadata for file chip icons (pingdotgg#17923) * fix(desktop): copy images from HTML previews (pingdotgg#17555) * docs(pi): update installation and remote login guidance (pingdotgg#17836) * fix(pi): preserve native abort outcomes (pingdotgg#17853) * fix(pi): keep thinking defaults specific to each model (pingdotgg#17835) * fix(pi): preserve shell command exit codes (pingdotgg#17834) * fix(pi): expire and cancel extension approvals (pingdotgg#17840) * feat(pi): include native sessions in usage reports (pingdotgg#17848) * fix(server): route Copilot ACP subagent output into subagent threads (pingdotgg#17714) Co-authored-by: maria-rcks <[email protected]> * fix(web): composer banner titles truncate beside their icon instead of wrapping (pingdotgg#17699) Co-authored-by: maria-rcks <[email protected]> * fix(server): Muse turns no longer fail on Windows (pingdotgg#17163) Co-authored-by: Claude Opus 5.5 <[email protected]> Co-authored-by: Theo Browne <[email protected]> * fix(pi): allow known read-only T3 tools without approval (pingdotgg#17852) Co-authored-by: Yash Singh <[email protected]> * fix: worktree threads keep their worktree when the agent starts, and messages sent during setup queue (pingdotgg#17654) * fix(server): keep Claude workflows alive while they report progress (pingdotgg#17715) * fix(web): media preview centers its content and pins the close button (pingdotgg#17951) * fix(server): threads without a project no longer need Git installed (pingdotgg#17959) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(web): toggling tools and thinking at the bottom keeps you at the bottom (pingdotgg#17954) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(web): Compact chip follows Claude's real prompt cache TTL (pingdotgg#17945) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(usage): bound OpenCode history reads to prevent backend OOM (pingdotgg#17961) * refactor: format diff line counts through one shared helper (pingdotgg#17948) * fix: new projects start their first thread in the project folder, not a worktree (pingdotgg#17371) Co-authored-by: Claude Opus 5.5 <[email protected]> * perf(server): drive shell last-error lookup from thread bindings (pingdotgg#17842) Co-authored-by: Victor Vogel <[email protected]> Co-authored-by: Claude Opus 5.5 (1M context) <[email protected]> * perf(server): skip parsing plain terminal history output (pingdotgg#17179) * perf(server): batch terminal history writes every 250 ms (pingdotgg#17183) * perf(server): storage cleanup no longer runs a full status or size walk for worktrees it keeps (pingdotgg#17911) * perf(usage): usage scans skip OpenCode legacy messages older than the window (pingdotgg#17254) * perf(usage): OpenCode legacy walk stats entries before checking for symlinks (pingdotgg#17638) Co-authored-by: Theo Browne <[email protected]> Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(web): MCP app permission prompts no longer overflow the screen (pingdotgg#17962) * feat(provider-antigravity): support subscription quota and usage limits (pingdotgg#17530) * fix(desktop): keep generated annotation styles in sync (pingdotgg#17838) Co-authored-by: t3-code[bot] <269035359+t3-code[bot]@users.noreply.github.com> Co-authored-by: Mike Olson <[email protected]> * fix(web): Resume continues on the model picked in the composer (pingdotgg#17867) * fix(devices): bump agent-device to 0.21.24 for native Windows hosts (pingdotgg#17706) * fix(web): keybinding group headings no longer touch the group above (pingdotgg#17766) * feat(web): configure OpenTelemetry exports in diagnostics (pingdotgg#12538) Co-authored-by: Claude Opus 5.5 (1M context) <[email protected]> * docs: update user count to 500k (pingdotgg#17783) * fix(mobile): working pill no longer bulges on its right end (pingdotgg#16143) Signed-off-by: id0sch <[email protected]> Co-authored-by: Claude Opus 5.5 (1M context) <[email protected]> * perf(opencode): stop retaining every message of a loaded OpenCode thread (pingdotgg#17784) * fix(web): switch thumbs stay in their track while scrolling (pingdotgg#15240) Co-authored-by: Claude Opus 5.5 (1M context) <[email protected]> * fix(keybindings): thread jumps no longer overlap model picker jumps (pingdotgg#14475) * fix(mobile): restore QR scanning in iPad pairing sheet (pingdotgg#16019) * fix(server): delegated Muse tasks no longer ask approval for every command (pingdotgg#18065) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(codex): prevent unsupported agent history in ChatGPT sharing (pingdotgg#17499) Co-authored-by: connorwalker <[email protected]> * fix(server): disabled providers stop checking for CLI updates (pingdotgg#16772) Signed-off-by: Yordis Prieto <[email protected]> Co-authored-by: Julius Marminge <[email protected]> * fix(mobile): round Android queued message sheet corners (pingdotgg#14934) * fix(ssh): record the archive lock owner's real PID (pingdotgg#14598) * fix(desktop): keep annotation comment direction independent of host page (pingdotgg#11005) Co-authored-by: Claude Sonnet 5 <[email protected]> * fix(ssh): qualify runner script builders in tunnel test (pingdotgg#18078) * fix(web): keep thread links open until the shell is live (pingdotgg#14697) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Claude Opus 5.5 (1M context) <[email protected]> * fix(web): scope PR title collapse to tab scrollers (pingdotgg#14644) * fix(server): detect fork PRs for branches without upstreams (pingdotgg#13894) Co-authored-by: maria-rcks <[email protected]> * fix(search): find threads by their branch PR number (pingdotgg#14658) Co-authored-by: maria-rcks <[email protected]> * feat(web): show Claude workflow phases and members in Lineage (pingdotgg#12598) Co-authored-by: Julius Marminge <[email protected]> Co-authored-by: Claude Opus 5.5 <[email protected]> Co-authored-by: GPT-6.1-Sol (Codex) <[email protected]> Co-authored-by: maria-rcks <[email protected]> * fix(mobile): round Android Agents sheet corners (pingdotgg#14925) * fix(web): the Usage page sends a signed-out browser to pairing (pingdotgg#17938) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(server): OpenCode 2 continuations end after a reconnect took a Stop's end (pingdotgg#14744) Co-authored-by: Claude Opus 5.5 (1M context) <[email protected]> * fix(server): OpenCode 2 continuations replay only their own background reply (pingdotgg#14752) Co-authored-by: Claude Opus 5.5 (1M context) <[email protected]> * fix(server): ACP reapplies a model after a switch away from it failed partway (pingdotgg#14723) Co-authored-by: Claude Opus 5.5 (1M context) <[email protected]> * fix(web): focus settings search with command-f (pingdotgg#17859) * fix(mobile): keep Android project paths on one line (pingdotgg#14178) * fix(web): unpin preview dragging on narrow chat canvases (pingdotgg#15556) * fix(web): thread details toggle no longer covers the thread title on Windows desktop (pingdotgg#16869) Co-authored-by: Claude Opus 5.5 (1M context) <[email protected]> Co-authored-by: Yash Singh <[email protected]> * fix(server): a directory no longer resolves as the resource monitor binary (pingdotgg#16838) Co-authored-by: Yash Singh <[email protected]> * fix(server): a Claude usage limit no longer resets the context meter to 0% (pingdotgg#16394) Co-authored-by: Claude Opus 5.5 (1M context) <[email protected]> Co-authored-by: Yash Singh <[email protected]> * fix(server): GitLab merge requests can expand unchanged lines (pingdotgg#17528) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(provider-cursor): a skill tree deeper than the scan limit no longer hides every skill (pingdotgg#17389) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(web): pass hex theme colors to HTML renders (pingdotgg#16325) * fix(web): align the API estimate info icon (pingdotgg#15655) * test(server): ACP teardown tests pass on Windows hosts (pingdotgg#17080) Co-authored-by: Claude Opus 5.5 <[email protected]> Co-authored-by: Yash Singh <[email protected]> * fix(server): sync device tool license versions with installer pins (pingdotgg#18121) * fix: sync model favorites and visibility across clients (pingdotgg#16816) Co-authored-by: Claude Opus 5.5 <[email protected]> Co-authored-by: Julius Marminge <[email protected]> * chore(deps-dev): bump compression from 1.8.1 to 1.8.2 in the npm_and_yarn group across 1 directory (pingdotgg#16309) Signed-off-by: dependabot[bot] <[email protected]> * fix(server): update fff to stop runaway watcher rescans (pingdotgg#14543) Co-authored-by: Claude Opus 5.5 (1M context) <[email protected]> Co-authored-by: Yash Singh <[email protected]> * fix(mobile): license generation works with filtered installs (pingdotgg#18127) * fix(mobile): image-only messages ask the agent to respond, like desktop (pingdotgg#16480) Co-authored-by: Yash Singh <[email protected]> * feat(pull-requests): guided reviews, a beta tour of a pull request (pingdotgg#18124) Co-authored-by: Claude Opus 5.5 <[email protected]> * feat(mcp): agents can write and read pull request review guides (pingdotgg#18143) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(server): Sol Ultrafast stops vanishing from the Codex model picker (pingdotgg#18200) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(usage): say resets momentarily in the final minute (pingdotgg#17869) * fix(server): preserve ambient Cursor MCP servers (pingdotgg#15875) Co-authored-by: Julius Marminge <[email protected]> * fix(server): skip Windows cleanup for exited child processes (pingdotgg#16007) * feat(settings): providers can be turned on or off per project (pingdotgg#17879) Signed-off-by: Yordis Prieto <[email protected]> Co-authored-by: Julius Marminge <[email protected]> * perf(github): resolve credentials once per GraphQL request (pingdotgg#18289) * fix(server): refresh linked PRs without a checkout (pingdotgg#17167) * fix(mobile): add compose to the single-column iPad list (pingdotgg#18157) * fix(mobile): let sheet lists scroll before dismissal (pingdotgg#17177) * fix(mobile): restore compact iPad trackpad scrolling (pingdotgg#13665) * fix(mobile): preserve filters across layout changes (pingdotgg#13085) * fix(mobile): separate unfolded thread list from header (pingdotgg#13088) * fix(android): Match thread fallback layouts to the loaded pane (pingdotgg#14669) * fix(mobile): size inline MCP apps to their content (pingdotgg#17040) * fix(mobile): preserve iPad search chrome across layout changes (pingdotgg#13667) * fix(client): apply host color scheme to saved MCP apps (pingdotgg#17026) * fix(android): Use MD3 loading spinners (pingdotgg#14282) * fix(client): merge No project filters across environments (pingdotgg#17050) Co-authored-by: Julius Marminge <[email protected]> * fix(client): tolerate blocked cookies in MCP app sandboxes (pingdotgg#17027) Co-authored-by: Julius Marminge <[email protected]> * feat(mobile): browse and review pull requests natively (pingdotgg#18126) * feat(mobile): guided reviews for pull requests (pingdotgg#18267) * fix(devices): refresh backlogged iOS video and require input admission (pingdotgg#18326) * feat(mobile): keep pull requests available offline (pingdotgg#18351) * fix(mobile): keep bot badges out of PR attachments (pingdotgg#18347) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(desktop): tooltips no longer open under the Windows and Linux window controls (pingdotgg#17672) * fix(web): revert trailing toast icons (pingdotgg#18356) Co-authored-by: t3-code[bot] <269035359+t3-code[bot]@users.noreply.github.com> Co-authored-by: maria-rcks <[email protected]> * fix(web): even 4px inset around rows in the PR badge tooltip (pingdotgg#18352) Co-authored-by: Claude Opus 5.5 <[email protected]> * ci(mobile): publish nightly Android APKs to a GitHub prerelease (pingdotgg#16271) Co-authored-by: Claude Opus 5.5 (1M context) <[email protected]> Co-authored-by: Julius Marminge <[email protected]> * fix(server): Claude 5.1+ text before a tool call shows as assistant text (pingdotgg#18364) * feat(provider-muse): native subagents open in their own child threads (pingdotgg#18353) Co-authored-by: Theo Browne <[email protected]> Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(desktop): tooltips no longer open under the macOS traffic lights (pingdotgg#17726) * fix(web): Cite button stays anchored to the selected text (pingdotgg#17650) * fix(web): terminal selection drags scroll at the window edge (pingdotgg#17653) * fix(web): scrolling over the thread minimap scrolls the chat (pingdotgg#17652) * perf(web): panel toggles no longer re-render the timeline and composer (pingdotgg#18077) * fix(web): composer keeps its border while resting and expanding (pingdotgg#18333) * fix(web): center the empty-thread placeholder above the composer (pingdotgg#18331) * fix(web): PR badge tooltip opens after a thread gains a second PR (pingdotgg#18368) * fix(web): timeline keeps live-following after returning from Settings (pingdotgg#17348) * fix(web): update toast download badge no longer hides behind the provider logo (pingdotgg#18401) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(shared): preserve generated branch namespaces (pingdotgg#15615) * fix(provider-muse): run on Muse 1.4.6, with linked web search hits and workflow results (pingdotgg#18409) Co-authored-by: Claude Opus 5.5 <[email protected]> * feat(mobile): replace custom Markdown rendering with Enriched (pingdotgg#16979) * chore(mobile): sync Screens fork with upstream v5 fixes (pingdotgg#18396) * docs(mobile): point fork links to pingdotgg (pingdotgg#18433) * perf(web): reuse the collator when sorting diff files (pingdotgg#18420) Co-authored-by: SAPHID <[email protected]> Co-authored-by: GPT-6.1 Sol <[email protected]> * perf(web): avoid quadratic markdown link scans (pingdotgg#18387) Co-authored-by: SAPHID <[email protected]> Co-authored-by: GPT-6.1 Sol <[email protected]> * perf(server): expired PR diffs no longer stay in memory until restart (pingdotgg#17786) * perf(usage): the first usage scan skips decoding transcript lines that carry no usage (pingdotgg#17255) * fix(mobile): preserve browser prompt replies across control updates (pingdotgg#18419) Co-authored-by: SAPHID <[email protected]> Co-authored-by: GPT-6.1 Sol <[email protected]> * fix(web): closed popovers no longer stay on screen and click-through (pingdotgg#18341) * fix(web): keybinding settings label Focus URL with a capitalized acronym (pingdotgg#18279) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(web): long commands no longer overflow the Add Action dialog (pingdotgg#18207) Co-authored-by: Claude Sonnet 5.5 <[email protected]> * fix(web): provider Runtime controls follow the settings row layout (pingdotgg#18190) Co-authored-by: Claude Opus 5.5 <[email protected]> * perf(web): Thinking shimmer steps instead of drawing every frame (pingdotgg#18191) Co-authored-by: Claude Opus 5.5 <[email protected]> * chore(typecheck): typecheck with tsc-rs (pingdotgg#16704) Co-authored-by: Claude Opus 5.5 <[email protected]> * test(server): finish workflow reads before changing transcripts (pingdotgg#18192) * test(server): Claude sign-in message test passes on Windows hosts (pingdotgg#18183) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(web): context menus no longer scroll when they fit the window (pingdotgg#16776) * fix(server): checkpoint restore keeps a nested workspace on Windows (pingdotgg#14874) * Reject unknown params in t3_thread_read (pingdotgg#17823) * fix(desktop): Option-click on a chat link opens the system browser (pingdotgg#18238) * fix(mobile): new thread draft names its repo and says it is a new thread (pingdotgg#17611) Signed-off-by: Tiger Kaovilai <[email protected]> Co-authored-by: Claude Sonnet 5.5 <[email protected]> * fix(web): keep queued threads subscribed (pingdotgg#15293) Co-authored-by: maria <[email protected]> * test(server): Claude reset tests are skipped on Windows hosts, where their mock CLI cannot run (pingdotgg#18184) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(web): hide stash menu behind maximized panel (pingdotgg#18115) Co-authored-by: maria <[email protected]> * fix(web): sidebar toggle no longer sits under the macOS window buttons (pingdotgg#18193) Co-authored-by: Claude Opus 5.5 <[email protected]> Co-authored-by: maria-rcks <[email protected]> * fix(server): missing agent binaries report launch failure Return exit 125 when the Linux cgroup wrapper target is missing, including when /bin/sh is Bash. Preserve arguments and child exit codes. * feat(android): add Pull Requests tab (pingdotgg#18372) * fix(mobile): Forgejo change requests ask for the summary they require (pingdotgg#18455) * fix(server): cap automatic thread continuations and turn them on by default (pingdotgg#18461) Co-authored-by: Claude Opus 5.5 <[email protected]> * feat(mobile): stock tab bar, glass filter pills, and saved list filters (pingdotgg#18476) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(mobile): keep PR surfaces and Android tab selection visible across themes (pingdotgg#18479) * fix(mobile): keep preview count badges inside the working pill (pingdotgg#18449) * fix(mobile): show rounded pull request selection in the sidebar (pingdotgg#18480) * feat(web): model options for source control writer and review guide models (pingdotgg#18488) Co-authored-by: Claude Opus 5.5 <[email protected]> * ci(mobile): cut a store build when the native fingerprint has no build (pingdotgg#18496) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(web): terminal colors no longer look washed out (pingdotgg#17168) * refactor(settings): centralize schema-declared secrets and inputs (pingdotgg#18505) * fix(mobile): restore native scroll-edge effects on forms and PRs (pingdotgg#18507) * feat(mobile): native-sized pull request action bar (pingdotgg#18527) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(mobile): preserve theme contrast across surfaces and actions (pingdotgg#18506) * refactor(mobile): share themed list rows and sections (pingdotgg#18510) * refactor(mobile): share themed toggle rows in settings (pingdotgg#18511) * refactor(mobile): share themed choice rows in settings (pingdotgg#18516) * fix(server): consolidate browser credential handling (pingdotgg#18509) Co-authored-by: Claude Opus 5.5 <[email protected]> * feat: open T3 Code from a link with a prompt ready to send (pingdotgg#18454) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(release): drop placeholder allowBuilds entry that broke nightly builds (pingdotgg#18560) Co-authored-by: Claude Opus 5.5 <[email protected]> * ci: fail PRs on invalid allowBuilds entries in pnpm-workspace.yaml (pingdotgg#18564) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(mobile): menu dismiss taps no longer press the view underneath (pingdotgg#18565) Co-authored-by: Claude Opus 5.5 <[email protected]> * feat(web): one sidebar click updates every machine and provider (pingdotgg#18053) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(release): avoid PowerShell crashes on Windows ARM (pingdotgg#18573) * fix(server): Forgejo pull requests report their head commit (pingdotgg#18463) * test(provider-acp): terminal kill test passes on Windows hosts (pingdotgg#18450) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(web): context meter no longer reads 1000k just under a million tokens (pingdotgg#17539) * fix(desktop): avoid Hyprland 0.48–0.50 Wayland color-manager startup crashes (pingdotgg#18566) Disable WaylandWpColorManagerV1 before Electron is ready only on native Wayland Hyprland sessions running a stock 0.48.0-0.50.1 release, which advertise FEATURE_SET_PRIMARIES but reject set_primaries (hyprwm/Hyprland#9444; fixed in 0.51.0 by hyprwm/Hyprland#11499). Any probe failure or explicit feature override keeps the default. Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(mobile): iPhones on iOS 27.2 beta no longer open to a black screen (pingdotgg#18654) Co-authored-by: T3 Code Test <[email protected]> Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(mobile): installs skip the Enriched math download again (pingdotgg#18679) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(web): setup wizards follow custom themes (pingdotgg#18725) Co-authored-by: Claude Opus 5.5 <[email protected]> * fix(server): resolve configured PR bases to branch names (pingdotgg#18754) * fix: expose running terminals and prevent setup install stalls (pingdotgg#18740) --------- Signed-off-by: Loïs Postula <[email protected]> Signed-off-by: id0sch <[email protected]> Signed-off-by: Yordis Prieto <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: Tiger Kaovilai <[email protected]> Co-authored-by: Theo Browne <[email protected]> Co-authored-by: Claude Opus 5.5 <[email protected]> Co-authored-by: Yash Singh <[email protected]> Co-authored-by: Diego Rincón <[email protected]> Co-authored-by: maria <[email protected]> Co-authored-by: Doksanbir <[email protected]> Co-authored-by: Satyal Yadav <[email protected]> Co-authored-by: Vaishnav Sreekanth Menon <[email protected]> Co-authored-by: Josh Silets <[email protected]> Co-authored-by: Mostafa Ben <[email protected]> Co-authored-by: Mostafa Ben <[email protected]> Co-authored-by: Uzair Sajid <[email protected]> Co-authored-by: Diego Lumbreras <[email protected]> Co-authored-by: maria-rcks <[email protected]> Co-authored-by: eimexdev <[email protected]> Co-authored-by: Julius Marminge <[email protected]> Co-authored-by: Dara Adedeji <[email protected]> Co-authored-by: oliver <[email protected]> Co-authored-by: Tristan Knight <[email protected]> Co-authored-by: Saikrishna Ambeti <[email protected]> Co-authored-by: Zach <[email protected]> Co-authored-by: Nikita Koynov <[email protected]> Co-authored-by: Sergiy Dybskiy <[email protected]> Co-authored-by: Claude <[email protected]> Co-authored-by: Karan Sharma <[email protected]> Co-authored-by: Scott Norteman <[email protected]> Co-authored-by: Maxwell Young <[email protected]> Co-authored-by: James Villarrubia <[email protected]> Co-authored-by: Claudesaul <[email protected]> Co-authored-by: Dylan Corso <[email protected]> Co-authored-by: Wout Stiens <[email protected]> Co-authored-by: Prathmesh Vhatkar <[email protected]> Co-authored-by: Afonso Ferreira <[email protected]> Co-authored-by: Derek Trimm <[email protected]> Co-authored-by: Rakshith Bhat <[email protected]> Co-authored-by: Krishna Vijay <[email protected]> Co-authored-by: only21mil <[email protected]> Co-authored-by: Loïs Postula <[email protected]> Co-authored-by: t3-code[bot] <269035359+t3-code[bot]@users.noreply.github.com> Co-authored-by: Julius Marminge <[email protected]> Co-authored-by: Julius Marminge <[email protected]> Co-authored-by: Igor Makowski <[email protected]> Co-authored-by: Matthew Feroz <[email protected]> Co-authored-by: Bilal Bakr <[email protected]> Co-authored-by: Nicholas Tindle <[email protected]> Co-authored-by: Victor Vogel <[email protected]> Co-authored-by: Maciek Geneja <[email protected]> Co-authored-by: Mike Olson <[email protected]> Co-authored-by: Akbar Danial Akma <[email protected]> Co-authored-by: TanJeeSchuan <[email protected]> Co-authored-by: fixfon <[email protected]> Co-authored-by: kamkm <[email protected]> Co-authored-by: id0Sch <[email protected]> Co-authored-by: raphaelpra <[email protected]> Co-authored-by: Fluffy-Bunny-23 <[email protected]> Co-authored-by: Arham Mahajan <[email protected]> Co-authored-by: Connor Walker <[email protected]> Co-authored-by: connorwalker <[email protected]> Co-authored-by: Yordis Prieto <[email protected]> Co-authored-by: Alex <[email protected]> Co-authored-by: Guillermo Casanova <[email protected]> Co-authored-by: Abdelrhman Ehab <[email protected]> Co-authored-by: Alex Southwell <[email protected]> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Adamulek123 <[email protected]> Co-authored-by: GPT-6.1-Sol (Codex) <[email protected]> Co-authored-by: AdEx-Partners-DE <[email protected]> Co-authored-by: Exotic <[email protected]> Co-authored-by: wellorbetter <[email protected]> Co-authored-by: freddy-d <[email protected]> Co-authored-by: Furox <[email protected]> Co-authored-by: Vantrongs <[email protected]> Co-authored-by: Cameron Varley <[email protected]> Co-authored-by: Sheehan Munim <[email protected]> Co-authored-by: Jake Leventhal <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Hasan Shoaib <[email protected]> Co-authored-by: Ali Younes <[email protected]> Co-authored-by: Arav Jain <[email protected]> Co-authored-by: Alb11747 <[email protected]> Co-authored-by: Ben Davis <[email protected]> Co-authored-by: SAPHID <[email protected]> Co-authored-by: Michael Johnston <[email protected]> Co-authored-by: Gaya KACI <[email protected]> Co-authored-by: Jonas B. <[email protected]> Co-authored-by: Miklós Fazekas <[email protected]> Co-authored-by: Tiger Kaovilai <[email protected]> Co-authored-by: ANSH SINGH <[email protected]> Co-authored-by: Jérôme Poskin <[email protected]> Co-authored-by: Ryan <[email protected]> Co-authored-by: luke <[email protected]> Co-authored-by: kronk0s <[email protected]> Co-authored-by: shivam <[email protected]> Co-authored-by: T3 Code Test <[email protected]>

Co-authored-by: maria-rcks <[email protected]> Fork adaptation: The fork's test that the Linux node-pty prebuild is unpacked for WSL gives way to upstream's: the prebuild stays packed, and the WSL server tree copies it out through Electron's asar-aware file system. (cherry picked from commit fa9f936) Upstream-PR: 8206

fix(desktop): sign Windows native addons

939a597

github-actions Bot added vouch:unvouched Author is not yet trusted in the VOUCHED list. size:XS 0-9 changed lines (additions + deletions). labels Aug 25, 2026

Merge branch 'main' into fix/windows-sign-native-addons

2fda067

cursor Bot reviewed Aug 27, 2026

View reviewed changes

Comment thread scripts/build-desktop-artifact.ts Resolved

KulovacNedim mentioned this pull request Aug 28, 2026

[Bug]: Windows Smart App Control blocks unsigned native addons and crash-loops the desktop backend #8201

Closed

2 tasks done

simplythatguy mentioned this pull request Sep 8, 2026

fix(desktop): defer keyring loading until macOS cookie import #10667

Merged

3 tasks done

juliusmarminge mentioned this pull request Sep 8, 2026

[Bug]: Nightly fails to launch on Windows Server 2025: Cannot find native binding #10814

Closed

2 tasks done

juliusmarminge added the macroscope-review Opt PRs made by unvouched contributors in for Macroscope review. Vouched contributors auto-reviews label Sep 30, 2026 — with ChatGPT Codex Connector

fix(desktop): keep WSL Linux addons out of Windows signing

4ee2e1d

Only unpack server sidecar .node files with a PE header. Linux addons for the WSL backend stay packed in server.asar, so signExts never sends ELF binaries to Authenticode.

github-actions Bot added size:S 10-29 changed lines (additions + deletions). and removed size:XS 0-9 changed lines (additions + deletions). labels Oct 10, 2026

maria-rcks added 2 commits October 10, 2026 04:13

Merge remote-tracking branch 'origin/main' into pr-8206

44f17d1

# Conflicts: # scripts/build-desktop-artifact.test.ts # scripts/build-desktop-artifact.ts

fix(desktop): keep sidecar unpack globs flat and unescaped

5f915d3

An empty addon list nested the brace pattern and unpacked nothing, and backslash escapes act as separators to minimatch on Windows.

github-actions Bot added size:M 30-99 changed lines (additions + deletions). and removed size:S 10-29 changed lines (additions + deletions). labels Oct 10, 2026

coderabbitai Bot approved these changes Oct 10, 2026

View reviewed changes

maria-rcks merged commit fa9f936 into pingdotgg:main Oct 10, 2026
29 checks passed

This was referenced Oct 19, 2026

Windows release jobs spend 83 to 135 s signing files one call at a time #21379

Closed

Windows x64 package ships 8 unused native binaries, and each is signed #21381

Open

olafura mentioned this pull request Nov 7, 2026

test(features): ledger upstream T3 Code through 99544c9c19 hal-c2/hal-c2#1085

Merged

Navigation Menu

Repository navigation

fix(desktop): sign Windows native addons - #8206

fix(desktop): sign Windows native addons#8206
maria-rcks merged 5 commits into
pingdotgg:mainfrom
Lumbreras2306:fix/windows-sign-native-addons

Lumbreras2306 commented Aug 25, 2026 •

edited by cursor Bot

Loading

Uh oh!

coderabbitai Bot commented Aug 25, 2026 •

edited

Loading

Walkthrough

Changes

❌ Failed checks (1 warning)

Uh oh!

macroscopeapp Bot commented Aug 25, 2026 •

edited

Loading

Uh oh!

cursor Bot left a comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

Lumbreras2306 commented Aug 25, 2026 • edited by cursor Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Problem

Fix

Testing

Add signExts to Windows build config in createBuildConfig

Uh oh!

coderabbitai Bot commented Aug 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

❌ Failed checks (1 warning)

Uh oh!

macroscopeapp Bot commented Aug 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Approvability

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Lumbreras2306 commented Aug 25, 2026 •

edited by cursor Bot

Loading

Add `signExts` to Windows build config in `createBuildConfig`

coderabbitai Bot commented Aug 25, 2026 •

edited

Loading

macroscopeapp Bot commented Aug 25, 2026 •

edited

Loading