[kalvenschraut]

Summary

Merge 94 upstream commits, 30afc56076c8..618761a2d6d6, into the pinned RTVision base 6dcefd82e5d7 while preserving upstream merge ancestry. Prepare RTVision 0.0.90. Existing 0.0.89 and 0.0.87 drafts remain untouched.

• Add webhook event filters, replay deduplication and coalescing; keep the composer usable during approvals; replace Mermaid rendering with upstream Pele.
• Bring mobile thread status, background work, undo, model controls, plans, project removal and permission handling closer to web.
• Take upstream delegate-stop/settlement, Grok completion, Codex usage, runtime cleanup, storage reporting and Electron 44.9.3 fixes.
• Retain Gitea, RTVision registry/update routing, Node/OpenRC, Alpine/musl/node-pty, SSH/WSL and editor/Vim behavior where upstream has no equivalent. Layer upstream webhook controls and pruning over fork settings and Node runtime support.
• Fix the real npm resource-monitor executable-mode blocker from 0.0.89 using pnpm executableFiles metadata. Preserve the Alpine architecture workaround for ffi-rs metadata and repair retained fork tests after upstream test pruning.

Verification and gates

Focused test runs passed: 118 runtime/Gitea/monitor tests, 69 SSH tests, 151 webhook/delegate-stop/pruning/assets/publish-config tests, 56 desktop packaging tests, plus 138 web non-browser and 35 desktop tests. Scoped server, shared-client, scripts, web and desktop typechecks passed; resolved-file lint/format passed. The monitor repair has real pnpm archive fail-first and successful executable-mode/execution proof.

CI, independent exact-candidate high-level review and CodeRabbit review are pending. No browser qualification claimed. A large-diff CodeRabbit fallback is authorized only with recorded coverage limitation, primary GO, independent GPT-6 Astra exact-SHA GO, green applicable CI and no blocking findings. Artifact, registry-integrity and isolated Node/Alpine/service-preflight gates remain required before publication. No live restart/deploy.

Model: GPT-6.1 Sol, Codex harness.

[kalvenschraut]

@coderabbitai review

Please review candidate a52bd8b at a high-level integration scope: changelog, selected merge/conflict decisions, retained RTVision behavior, dependency changes and obvious regressions. Exclude vendored .repos reference contents from substantive source review. Please state any file/coverage limitation explicitly rather than treating a green status as approval.

[coderabbitai]

⚠️ Action not completed

Review skipped: 2240 files exceed the limit of 100.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[kalvenschraut]

Review gate for candidate a52bd8bdb09b3c1bba7b3e4814cbd1c6309a48d6: NO-GO pending targeted repair.

Independent GPT-6 Astra task node:delegated-task:command%3Amcp%3A100e3928-a23d-4c22-9c70-155969840738%3Adelegate-task%3Artvision-sync-20261021-astra-round1-a52bd8b identified a verified fork overlap: upstream pruning records Node's executable, not the npm service-launcher script. Across A→B→C, the first launcher can be deleted even though the boot unit still needs it. I am adding a fail-first regression and leaving npm cleanup to the existing launcher, which already protects boot-version/restart markers and its own script. Both primary and Astra source approval will be renewed on the repaired SHA.

CodeRabbit explicitly reports: “Review skipped: 2240 files exceed the limit of 100.” Receipt: #101 (comment) . Its green status is not approval. This is the recorded large-diff coverage limitation for the maintainer-authorized primary-plus-Astra fallback. Applicable CI must still pass, and release/artifact/npm/install gates remain separate.

[kalvenschraut]

Primary SOURCE GO for aaeb8c28847c86c999efd680439fb737cb57457a.

High-level integration review covers the 94-commit upstream changelog, selected actual conflict/integration diffs, dependency changes, retained fork routing/packaging and obvious client/provider/remote-mode regressions. Upstream implementation replaces Mermaid rendering and supplies webhook controls, approval redirects, mobile parity, delegate/usage/runtime fixes. Gitea, RTVision npm/update routing, Node/OpenRC/Alpine, SSH/WSL/editor/Vim remain where upstream has no equivalent. Vendored read-only references were excluded from substantive review. This is not a whole-tree audit or browser qualification.

Astra round1's only blocking finding is fixed. Fail-first regression reproduced deletion of the npm service launcher across successive updates with ENOENT. The three-line production repair excludes npm trees from the new generic pruner and leaves them to the existing launcher-owned cleanup, which preserves boot/restart markers and its own script. All 68 focused runtime/self-update/service-launcher/CLI-update tests pass, including the new regression and archive-pruning preservation. Scoped server typecheck, lint/format and diff checks pass. Earlier focused packaging, webhook, Gitea, SSH and client checks remain applicable; no broad suite claim.

Independent Astra round2 task: node:delegated-task:command%3Amcp%3A100e3928-a23d-4c22-9c70-155969840738%3Adelegate-task%3Artvision-sync-20261021-astra-round2-aaeb8c2. Fresh explicit GO and applicable latest-head CI are still pending. CodeRabbit's explicit 2240-files/100-limit skip is recorded above; green bot status is not approval. Merge and release are not yet authorized by these source receipts alone. Produced-artifact checksums/layout, exact npm tarball/integrity, clean Node/Alpine/PTY/service-preflight validation and final draft publication remain separate gates. No live deployment/restart.

Reviewer: GPT-6.1 Sol, Codex harness.

[kalvenschraut]

Independent GPT-6 Astra SOURCE GO for aaeb8c28847c86c999efd680439fb737cb57457a.

Round2 task node:delegated-task:command%3Amcp%3A100e3928-a23d-4c22-9c70-155969840738%3Adelegate-task%3Artvision-sync-20261021-astra-round2-aaeb8c2 completed with explicit GO on the actual local integration diff. No blocking source findings remain. The reviewer verified the npm-pruning repair and A→B→C regression, reviewed the changelog, selected integration overlaps, dependencies and monitor metadata, and retained Gitea/private-registry, Node/OpenRC/musl, SSH/WSL/editor/Vim and packaging behavior. All four release packages are 0.0.90. This is high-level source approval excluding vendored references, not exhaustive coverage or browser verification.

Primary GO for the same SHA is recorded above. CodeRabbit's explicit 2240-files/100-limit skip qualifies the maintainer-authorized fallback, not a bot approval. Latest-head CI is still running; no merge or publication yet. Artifact/npm/integrity/isolated-install/service-preflight gates remain mandatory after merge.

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	5.0 KiB	5.0 KiB	0 B (0.0%)	6.8 KiB	✅
Codex	Thread snapshot wire	3.8 KiB	3.8 KiB	0 B (0.0%)	4.9 KiB	✅
Codex	Live turn WebSocket wire	1.2 KiB	1.2 KiB	0 B (0.0%)	2.0 KiB	✅
Codex	Live turn WebSocket decoded	20.9 KiB	20.9 KiB	0 B (0.0%)	29.3 KiB	✅
Codex	Live turn messages	2	2	0 (0.0%)	8	✅
Claude	Total thread wire	5.0 KiB	5.0 KiB	0 B (0.0%)	6.8 KiB	✅
Claude	Thread snapshot wire	3.8 KiB	3.8 KiB	0 B (0.0%)	4.9 KiB	✅
Claude	Live turn WebSocket wire	1.2 KiB	1.2 KiB	0 B (0.0%)	2.0 KiB	✅
Claude	Live turn WebSocket decoded	21.2 KiB	21.2 KiB	0 B (0.0%)	29.3 KiB	✅
Claude	Live turn messages	2	2	0 (0.0%)	8	✅

Baseline: 6dcefd8 · PR result: 51c9fa2 · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 108.5 KiB
• Claude decoded thread snapshot: 108.8 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.

[kalvenschraut]

Primary SOURCE GO for 51c9fa22fee93f11292185d3c25968a9418f1f74.

The verified CI failures on aaeb8c2 are repaired without changing production behavior or removing the retained behavioral assertions:

• Lint: retained React tests now use upstream's act/cleanup conventions. Its existing act implementation moved unchanged into a browser-independent helper and remains reexported by the browser renderer. Browser fixtures own their cleanup; the PR detail test awaits unmount before removing globals.
• Server shard 5: sudo/npx expectations now assert the retained RTVision private registry and package name, rather than upstream's public package.
• Package Test: GitHub listing fixtures now contain the two required schema fields. The stack fake answers actual remote-head checks, including heads updated by earlier pushes.

Fail-first reproduction: the three affected GitHub files had 15 failing and 148 passing tests. After repair, all 163 pass. The final focused run covers 256 tests across 16 files, exit 0 and no unhandled errors. Scoped changed-file lint, web and GitHub-package typechecks, web Knip with schema preprocessor, formatting and diff checks pass. Browser execution was not authorized or performed. CI still owns repository-wide checks.

Renewed high-level integration approval retains the prior changelog, selected integration/conflict, dependency and fork-behavior review. The npm runtime-pruning repair remains intact; no new production changes were made after the prior source GO. Upstream ancestry and all four 0.0.90 release versions are preserved. This is bounded source approval, not whole-tree or browser qualification.

Independent GPT-6 Astra round3 has been requested on this exact SHA and actual local integration diff. Task ID: node:delegated-task:command%3Amcp%3A100e3928-a23d-4c22-9c70-155969840738%3Adelegate-task%3Artvision-sync-20261021-astra-round3-51c9fa2.

CodeRabbit's explicit 2240-files/100-limit skip remains the recorded large-diff limitation: #101 (comment) . Its status is not approval. The authorized fallback still requires independent Astra GO and applicable latest-candidate CI, with no unresolved blocking findings. Merge, release build, produced artifacts/checksums, exact npm tarball/integrity, isolated Node/Alpine/PTY/service preflight and final GitHub publication remain pending. No live service restart or deployment.

Ref refresh confirms fork base remains 6dcefd82e5d7ffa1099f33d2afbbb6681deec267. This in-progress release keeps its original incoming upstream pin 618761a2d6d615b2c0a07e5de4d82384a583f717, 94 commits after 30afc56076c86580d5d913897280bea660d44c79. Upstream advanced during the run to efdda5e52128c873da07f97c2ffb8ae4b55db8a3; those later commits are left for the next recurring sync, not silently added to the reviewed candidate.

Reviewer: GPT-6.1 Sol, Codex harness.

[kalvenschraut]

Independent GPT-6 Astra SOURCE GO for 51c9fa22fee93f11292185d3c25968a9418f1f74.

Round3 task node:delegated-task:command%3Amcp%3A100e3928-a23d-4c22-9c70-155969840738%3Adelegate-task%3Artvision-sync-20261021-astra-round3-51c9fa2 completed with explicit GO on the exact candidate and actual local integration diff. No blocking source findings remain within the maintainer's high-level scope.

The reviewer verified HEAD, clean worktree and both pinned-input ancestries; reviewed the 21-file test/helper repair delta with preserved assertions and unchanged extracted act wrapper; confirmed the npm-launcher pruning fix; and reviewed the upstream changelog, dependency changes, four 0.0.90 manifests and selected fork/integration behavior. Supplied test receipts were inspected, not rerun by the reviewer. Vendored references and newer upstream commits remain outside this pinned release.

Primary GO for the same SHA is recorded at #101 (comment) . CodeRabbit explicitly skipped the large diff, so the authorized primary-plus-Astra fallback is used; its green status is not approval.

The latest Test failure notification points to the superseded aaeb8c2 job119123328659, whose verified fixture failures were fixed in51c9fa2 and reproduced passing locally. Current 51c9fa2 CI is still running; Build and Typecheck, Rust and Release Smoke already pass. No merge or publication until every applicable gate passes. Artifact/npm/install/runtime validation remains separate.

[kalvenschraut]

Merge readiness verified for 51c9fa2: all 26 reported checks are successful or intentionally skipped, aggregate Check and exact-SHA transfer ceilings pass, primary and independent GPT-6 Astra SOURCE GO receipts are recorded, and no blocking review findings remain. CodeRabbit explicitly skipped the 2240-file diff, so the maintainer-authorized large-diff fallback applies. Fork/base/head identities and pinned upstream ancestry rechecked; 0.0.90 tag/registry version remain unused. Merging with upstream ancestry preserved. Release/artifact/npm/install validation remains mandatory before publication.

[kalvenschraut]

Released RTVision 0.0.90

Published: https://github.com/RTVision/t3code/releases/tag/v0.0.90 . PR merged as f62240169b2847134e354e12bb6ccd2994aba7f6, with merge parents and tree equality to approved candidate 51c9fa22fee93f11292185d3c25968a9418f1f74 verified. Upstream ancestry is preserved.

• Pinned upstream range: 30afc56076c86580d5d913897280bea660d44c79 through 618761a2d6d615b2c0a07e5de4d82384a583f717, 94 commits. Later upstream commits observed during this run are left for the next recurring sync.
• Primary GO: chore(sync): merge upstream for RTVision 0.0.90 #101 (comment) . Independent GPT-6 Astra exact-candidate GO and round3 task ID: chore(sync): merge upstream for RTVision 0.0.90 #101 (comment) . No unresolved blocking source findings. CodeRabbit explicitly skipped 2240 files against a 100-file limit, so the maintainer-authorized fallback applies; its status was never treated as review approval.
• All 26 PR check outcomes satisfied. Final PR CI: https://github.com/RTVision/t3code/actions/runs/39572742948 . Exact merged-head CI: https://github.com/RTVision/t3code/actions/runs/39574180246 . Release build: https://github.com/RTVision/t3code/actions/runs/39574180294 . All applicable CI, aggregate Check and transfer ceilings passed.
• All 11 expected artifacts are present; every one of the 10 SHA256SUMS entries matches. Updater versions, SHA-512 hashes and sizes match. CLI layouts/native payloads, Linux AppImage/Deb metadata and matching contents, Windows server entry/12 unpacked native files, and exact bundled WSL archive bytes validate.
• Produced npm tarball contains an executable mode0755 POSIX monitor, which successfully runs its protocol handshake on glibc. Exact tarball published to https://npm-registry.rtvision.com/ as @rtvision/t3@0.0.90, with latest=0.0.90. Registry SHA-512 integrity and a downloaded tarball match the release asset byte-for-byte. Integrity: sha512-jR3jrVuizGW4/xwu3/KfDPR1DQ7sDLxxtch3DIYZnkXfXH6u0v9sQvy+xW/o954G7pD2gWLQ8dab+Tt6W0beyA==. An immediate metadata read reused stale cache; fresh-cache/prefer-online verification passed without republishing.
• Both artifact and fresh registry installations pass with engine-strict on Node22.19.0 Debian, Node24.22.0 Debian and Node24.22.0 Alpine/musl. CLI version/help, service protocol3 ready/protocol2 blocked, actual PTY shell output/exit and Alpine node-pty source compilation pass. OpenRC is available and packaged service entry paths validate. The unprivileged namespace emitted a nonblocking /dev/null warning during compiler cleanup; compilation and real PTY assertions passed.

Upstream provides webhook filters/replay/coalescing, approval redirects, Pele Mermaid, mobile parity and delegate/usage/runtime fixes. RTVision Gitea/private-registry/update routing, Node/npm/OpenRC/Alpine, SSH/WSL/editor/Vim and packaging behavior remains where needed. The verified npm-launcher pruning overlap and monitor executable-mode issue are fixed.

The GitHub draft was published only after npm and isolated-install gates passed. Version/tag/latest/publication read back successfully. Older 0.0.89 and 0.0.87 drafts were not changed. No local GUI/browser use, live userdata writes, live service installation/restart or deployment. No pending gate remains for this pinned release; qualification is bounded to the authorized high-level review and stated checks.

Execution: GPT-6.1 Sol through Codex; independent review: GPT-6 Astra.