chore: sync with upstream/main (6ffde5ba3)

.agents/skills/test-t3-mobile/SKILL.md

@@ -31,11 +31,21 @@ when inspecting or seeding SQLite. Stop the test server before fixture writes.
 From the checkout being tested on the selected device host, run:
 
 ```bash
-node scripts/mobile-native-client.ts ensure <ios|android> <device-id>
+vp run mobile:install <ios|android> <device-id>
 ```
 
-This reuses a matching native client or builds and installs one. Authorized
-mobile verification includes that build step unless the user prohibits it.
+This installs the dev client for the checkout's native fingerprint: from the
+device, the local cache, or the shared cache in seconds, building once only
+when no machine has that fingerprint yet (5-15 minutes, logged to the file it
+names). The device id may be omitted when exactly one device is booted. It
+prints one JSON line; on failure it names the next command. Authorized mobile
+verification includes that step unless the user prohibits it.
+
+For a device you opened in an agent-device session elsewhere (a device pool,
+cloud, or remote host), run `vp run mobile:install <ios|android> --session <s>`
+from the directory you opened the session in. It installs the cached build into
+that session (`--abi arm64-v8a` for an ARM Android device; `--metro <url>` also
+opens it against Metro) and never builds.
 
 Start `vp run dev:client` from `apps/mobile`, or reuse a healthy Metro belonging
 to this checkout. Open its printed development-client URL with AgentDevice

.github/actions/setup-ci-deps/action.yml

@@ -1,5 +1,10 @@
 name: Setup CI dependencies
 description: Install Vite+ and the workspace dependencies from cache.
+inputs:
+  task-cache-read-token:
+    description: Read-only credential for the private maintainer task cache
+    required: false
+    default: ""
 runs:
   using: composite
   steps:
@@ -65,3 +70,20 @@ runs:
     - name: Install dependencies
       shell: bash
       run: vp install
+
+    - name: Enable shared task cache
+      if: >-
+        github.repository == 'pingdotgg/t3code' &&
+        (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) &&
+        hashFiles('.task-cache.json') != '' &&
+        inputs.task-cache-read-token != ''
+      shell: bash
+      env:
+        T3_TASK_CACHE_READ_TOKEN: ${{ inputs.task-cache-read-token }}
+      run: |
+        node infra/task-cache/scripts/install-ci.ts
+        if [[ ( "$GITHUB_EVENT_NAME" == pull_request && "$GITHUB_BASE_REF" == main ) || ( "$GITHUB_EVENT_NAME" == push && "$GITHUB_REF" == refs/heads/main ) ]]; then
+          echo 'VP_REMOTE_CACHE=read-write' >> "$GITHUB_ENV"
+        else
+          echo 'VP_REMOTE_CACHE=read' >> "$GITHUB_ENV"
+        fi

.github/scripts/ci-changes.cjs

@@ -1,37 +1,24 @@
-// Decides which CI jobs a change needs. Prints `key=value` lines for
-// $GITHUB_OUTPUT; a job runs unless its key is "false".
-//
-//   node ci-changes.cjs --paths <file>          gate by the listed paths
-//   node ci-changes.cjs --paths <file> --full   run every Linux job, gate only the macOS lint
-//   node ci-changes.cjs                         changed paths unknown: run everything
-//
-// scripts/check-changed.ts requires the same decisions so local runs match CI.
-//
-// Every changed path maps to workspace packages, which then pull in their
-// dependents from package.json. A path this file does not recognize runs
-// everything, so a new root file or directory can only cost minutes.
+// Unknown paths run every job; recognized packages pull in their dependents.
+// scripts/check-changed.ts shares these decisions so local checks match CI.
 const fs = require("node:fs");
 const path = require("node:path");
 
 const root = path.resolve(__dirname, "../..");
 
-// Never read by a build, typecheck, or test. Lint still formats them.
 const INERT = [
   /^docs\//,
   /^\.(agents|cursor|vscode|devcontainer|macroscope|repos)\//,
   /^[^/]+\.md$/,
   /^LICENSE$/,
 ];
 
-// Run everything: the root vite.config.ts loads the first as setup for every
-// package's tests, and the vendored mobile tarballs are installed dependencies.
+// Shared test setup and vendored mobile dependencies affect every package.
 const RUNS_EVERYTHING = [
   /^packages\/shared\/src\/(HostProcess|testing\/longTempDir)\.ts$/,
   /^apps\/mobile\/deps\//,
 ];
 
-// Paths outside a package, or files inside one that other packages read
-// through relative imports rather than a package.json dependency.
+// Includes cross-package reads absent from package.json dependencies.
 const EXTRA_OWNERS = [
   // Vite configs and tsconfigs of these apps import scripts/lib directly.
   [/^scripts\/lib\//, ["@t3tools/desktop", "@t3tools/mobile", "@t3tools/web", "t3"]],
@@ -43,9 +30,7 @@ const EXTRA_OWNERS = [
 ];
 const RUST = /^native\/(resource-monitor|kde-snap-shot|hyprland-snap-shot)\//;
 
-// Tests that read another package's files without declaring it. The scripts
-// tests read app manifests, assets, and sources (cursor-sdk-packaging,
-// third-party-licenses, brand-assets, build-desktop-artifact).
+// These tests read other packages without declaring dependencies.
 const TEST_ONLY_DEPS = {
   "@t3tools/provider-pi": ["@t3tools/client-runtime"],
   "@t3tools/scripts": [
@@ -56,17 +41,12 @@ const TEST_ONLY_DEPS = {
     "@t3tools/provider-cursor",
   ],
 };
-// Declared dependencies that only feed a build step: the server bundles the
-// built web app (apps/server/vite.config.ts) but never imports it.
+// The server bundles the web build without importing it.
 const BUILD_ONLY_DEPS = { t3: ["@t3tools/web"] };
 
-// Sources scripts/mobile-native-static-check.ts lints, plus the tool and rule
-// configuration that decides how it lints them, plus the root package.json
-// that defines the lint:mobile command.
 const MOBILE_NATIVE =
   /^apps\/mobile\/.*\.(swift|kt|kts)$|^apps\/mobile\/(\.swiftlint\.yml|detekt\.yml|\.editorconfig|Brewfile)$|^scripts\/mobile-native-static-check\.ts$|^package\.json$|^\.github\/workflows\/ci\.yml$|^\.github\/scripts\/ci-changes\.cjs$|^\.github\/actions\/ci-changes\//;
 
-// Jobs that test every package except these, which have jobs of their own.
 const OWN_TEST_JOB = new Set(["t3", "@t3tools/web", "@t3tools/monorepo"]);
 
 function readWorkspace() {
@@ -108,8 +88,7 @@ function readWorkspace() {
   return packages;
 }
 
-// Returns the packages a path touches, [] for an inert path, or null when the
-// path is not understood and everything must run.
+// [] means inert; null means unknown and requires every job.
 function ownersOf(file, packages) {
   if (INERT.some((pattern) => pattern.test(file))) return [];
   // A manifest can change dependencies or versions other packages read.
@@ -148,7 +127,6 @@ function decide(files, packages, full) {
   if (everything) {
     affected = all;
   } else {
-    // Add dependents until nothing changes.
     let grew = true;
     while (grew) {
       grew = false;

.github/scripts/stage-preview-bundle.py

@@ -12,8 +12,7 @@
     "server/dist/client/index.html",
     "desktop/dist-electron/main.cjs",
 }
-# The current bundle is about 32 MiB compressed. Bound extraction on the
-# trusted runner even when the PR replaces the uploader entirely.
+# Bound trusted-runner extraction even when a PR replaces the uploader.
 MAX_ARCHIVE_BYTES = 512 * 1024 * 1024
 MAX_EXPANDED_BYTES = 2 * 1024 * 1024 * 1024
 MAX_ENTRIES = 50_000
@@ -58,9 +57,7 @@ def stage_bundle(archive: Path, destination: Path):
                 files.add(name)
         if not REQUIRED_FILES <= files:
             raise ValueError("Preview bundle is missing required entry points")
-        # Validate all names before writing anything. This is a fresh directory
-        # outside the checkout; neither pre-existing links nor trusted files
-        # can be followed or overwritten. ZIP permissions are never restored.
+        # Validate before writing into a fresh directory so existing links/files cannot be followed or overwritten.
         destination.mkdir(parents=True, exist_ok=False)
         for entry in entries:
             target = destination / entry.filename

.github/scripts/thread-transfer-report.cjs

@@ -294,8 +294,7 @@ async function resolve({ github, context, core }) {
 
   const sourceArtifacts = await artifactsForRun(github, owner, repo, source.id);
   const sourceArtifact = findResultArtifact(sourceArtifacts);
-  // CI requires the artifact whenever the server tests run, so a passing run
-  // without one skipped them because the PR cannot affect the server.
+  // Successful server tests require this artifact; its absence means CI skipped them.
   if (!sourceArtifact && source.conclusion === "success") {
     core.info("CI skipped the server tests for this change; nothing to report.");
     core.setOutput("publish", "false");

.github/workflows/ci.yml

@@ -163,8 +163,10 @@ jobs:
             node apps/web/node_modules/playwright/cli.js install-deps chromium
           fi
 
+      # GitHub-hosted runners render about five times slower than upstream's, so the file
+      # preview browser tests need the browser to themselves and a longer timeout.
       - name: Test
-        run: vp run --filter @t3tools/web test
+        run: vp run --filter @t3tools/web test --maxWorkers=1 --testTimeout=60000
 
   # apps/server sets `fileParallelism: false`, so its test files run strictly
   # one at a time. Sharding spreads them over separate runners instead of

.gitignore

@@ -36,6 +36,7 @@ apps/mobile/.generated/
 apps/mobile/.android-cache/
 /.generated/
 artifacts/app-store/screenshots/
+artifacts/mobile-e2e/
 .github/pr-assets/
 native/**/target/
 node_modules/

.macroscope/ignore.md

@@ -255,3 +255,27 @@ ENV/**
 # (see scripts/lib/reference-repos.ts). Nothing imports from them; findings
 # there belong upstream.
 .repos/**
+
+# Generated code. Review its source (the script, GraphQL document, schema
+# definition, or theme) instead; review agents can still read these on demand.
+**/*.generated.ts
+**/*.graphql.ts
+apps/server/schema/expo.graphql
+packages/source-control-github/schema/github.graphql
+apps/mobile/generated-uniwind-*
+apps/mobile/clerk-theme.json
+apps/server/src/testUtils/shardWeights.json
+infra/relay/migrations/**/snapshot.json
+
+# Provider transcripts recorded from real CLI runs for the orchestration replay
+# tests. Each scenario's input.ts and *_output.ts assertions stay reviewed.
+**/*.ndjson
+
+# Ghostty build output vendored from upstream.
+apps/mobile/modules/t3-terminal/Vendor/**
+native/libghostty-vt/include/**
+
+# @pierre/highlights compiled to C by wasm2c, plus the wasm2c runtime and simde
+# it needs. Regenerated by apps/mobile/scripts/generate-highlights.mts; review
+# that script and cpp/t3_highlights.c instead.
+apps/mobile/modules/t3-highlights/Vendor/**

.pnpmfile.cjs

@@ -1,8 +1,5 @@
-// Windows WSL dev mode runs the server under Linux from the same node_modules
-// as the Windows client, so Windows installs also need Linux x64 glibc native
-// modules. Other platforms install only their own binaries; setting this
-// everywhere added ~2.2 GB of foreign binaries to every macOS install.
-// Release scripts stage their own installs with explicit architectures.
+// Windows installs need Linux x64 glibc binaries because WSL shares node_modules.
+// Keep other platforms native; release scripts set their own architectures.
 module.exports = {
   hooks: {
     // `typescript` is @tsc-rs/typescript (the catalog entry). Its npm version (0.8.x) is outside

.repos/alchemy-effect/packages/frontend-frameworks/src/core/NodeServe.ts

@@ -48,7 +48,7 @@ export interface NodeServeHandler {
 export interface NodeServeEntryOptions {
   /**
    * JS expression resolving the on-disk client-assets directory
-   * (typically `fileURLToPath(new URL("../client/", import.meta.url))`).
+   * (typically `fileURLToPath(new URL("../shared/", import.meta.url))`).
    * Omit to skip static-file serving (Next.js handles its own assets).
    */
   readonly clientDirExpression?: string | undefined;

.repos/alchemy-effect/packages/frontend-frameworks/src/core/test/NodeServe.test.ts

@@ -28,14 +28,14 @@ describe("relativeClientDirExpression", () => {
         "/project/dist/server/serve-node.mjs",
         "/project/dist/client",
       ),
-    ).toBe(`fileURLToPath(new URL("../client/", import.meta.url))`);
+    ).toBe(`fileURLToPath(new URL("../shared/", import.meta.url))`);
   });
 });
 
 describe("makeNodeServeEntrySource", () => {
   it("listens on PORT, answers /health, serves static files, then the fetch handler", () => {
     const source = makeNodeServeEntrySource({
-      clientDirExpression: `fileURLToPath(new URL("../client/", import.meta.url))`,
+      clientDirExpression: `fileURLToPath(new URL("../shared/", import.meta.url))`,
       handler: {
         kind: "fetch",
         imports: `import { handler } from "./index.mjs";`,
@@ -131,7 +131,7 @@ describe("makeNodeServeEntrySource", () => {
 
   it("does not map GET / onto public/index.html (SSR home stays on the handler)", () => {
     const source = makeNodeServeEntrySource({
-      clientDirExpression: `fileURLToPath(new URL("../client/", import.meta.url))`,
+      clientDirExpression: `fileURLToPath(new URL("../shared/", import.meta.url))`,
       handler: {
         kind: "node",
         imports: `import { handler } from "./index.mjs";`,

.task-cache.json

@@ -0,0 +1,3 @@
+{
+  "endpoint": "https://t3-task-cache.pinglabs.workers.dev/projects/t3code"
+}