[Noext]

Syncs the fork with pingdotgg/t3code at a852de0b7b — 4,126 upstream commits.

Conflict resolutions

Fork behaviour is kept wherever it is additive:

• GitHub — adopts packages/source-control-github while keeping per-owner credential selection: GitHubCredentials.get(host, request) with GitHubCredentialRequest { account, ownerOnly }, getForHost / getForOwner, and the ./server/credentials export. gitRemoteAccountEnv and GitVcsDriverCore keep env injection; server.ts provides GitHubCredentials.layer.
• Pi — adapter rebuilt from upstream (the 20-hunk merge produced a syntactically broken file), then the fork stores rewired into it: PiWorkflowStore, PiSubagentRunStore, PiWorkflowProgress, now under packages/provider-pi/src/server/, plus workflowStoreRoot / workflowSubagentRunsRoot / workflowSweepIntervalMs, rememberWorkflowSession, and latestRootNodeId.
• Workflow contract — upstream shape workflow = { name?, runHandles?, phases[], agents[] }; the fork's flat kind/phaseIndex/agentIndex block is gone.
• ProjectionStore — orphan-subagent settlement kept, gated on needsEndedRuns so threads without such rows issue no extra query.
• ProviderSessionManager — subagent.updated case for runless workflow rows kept, with its test.
• Desktop — WSLg toggleFullscreen / bounds guard kept alongside upstream's menu and revealWhenReady changes.
• CI — 9 jobs on [self-hosted, linux, x64, t3code-ci]; setup-worktree.ts keeps the .env check and self-link guard.

Removed (covered upstream)

PiClaudeWorkflowStore (+test), PiAdapterV2.test.ts, ThreadWorkflowsPanel (+test), mobile WorkflowCard (+test), AgentSheetRow, workflowCardPresentation (+test), client-runtime workflowGroups (+test and its ./state/workflow-groups export).

Verification

Run under the pinned Node 26.12.1 (engines.node):

Check	Result
format, lint, knip (both passes), graphql, unused patches	pass
typecheck (39 packages)	pass
node --test	41/41
full workspace vitest	1,434 files / 19,434 tests pass

One known residual: two apps/server/src/cli/theme.test.ts cases chmod a file to 0o000/0o555 and expect the read to fail. They cannot pass as root, which bypasses file permissions — the file is byte-identical to upstream, so this is environmental, not a merge regression. CI runs unprivileged.

Deferred to follow-up PRs

1. Orphan-turn handling (discardOrphanedTurn) not reintroduced; upstream still rejects an active turn from a prior run.
2. Fork's Pi wakes abandoned — upstream's pendingWake covers the same need.
3. settleSubagentsOfTerminalRuns (client-runtime) keeps its 8 tests but has no UI caller left; needs rewiring onto the upstream panel.

🤖 Generated with Claude Code