chore(coil): merge upstream/main 580948708b (552 commits)

[radroid]

Daily sync #161 stopped on 25 conflicts, with upstream 552 commits ahead. The range includes upstream's new orchestrator (pingdotgg#2829, orchestration v2), which deletes the v1 engine most fork server features hooked into. The maintainer chose to merge all of it and park the features that broke rather than port them in the same change.

Summary

 main
+  merge upstream/main cdd331b6c3 (547)       # conflict resolutions only
+  park fork features built on orchestration v1
+  ci: Chromium for server tests, retire release-workflow test
+  fix: fork code on Effect 4.0.1 + v2 thread shell
+  docs(coil-home): drop parked features
+  docs: seam ledger at cdd331b6c3
+  ci: 40-minute test gate
+  merge upstream/main 580948708b (5)        # relay-client fixes, no seam touched
+  docs: repoint the ledger at 580948708b

Parked (unwired, original paths under coil-parked/; see its README for each feature's dropped upstream edits and upstream replacement):

Feature	Upstream now ships
Auto-resume	Usage-limit recovery, Auto-resume limited threads (Settings → General)
Loops	Scheduled tasks (partial overlap)
Web Push	nothing
Needs-input notifications	Opt-in Thread notifications (pingdotgg#11481)
Offline outbox + Queue button	Server-side follow-up queue while a run is active; nothing while disconnected
Crash-recovery reconciler	ProviderRuntimeRecoveryService at startup
#21 supervisor tolerance + heartbeat	pingdotgg#14897 jittered backoff; no heartbeat

Still live: update delivery, branding (#71), mobile bare-Return send, clone diagnostics (#98), Azure auth classification (#122), backend heap headroom, the security overrides.

Review the resolutions with git log --merges -1 -p --cc <merge>; the seam ledger (docs/coil/SEAMS.md) now reads 65 files, +1100/-5774.

Evidence

Local, per package (vp test run --testTimeout=120000 --hookTimeout=120000, realpath'd TMPDIR):

Package	Result
contracts / shared / client-runtime	651 / 1426 / 1957 passed
web	6621 passed
desktop	1482 passed (2 Electron-download races pass on re-run)
server	7189 passed, 1 failed
mobile	2165 passed, 2 failed
scripts	433 passed, 1 failed

None of the failures come from the merge:

• server: UsageService v4-cache test. ENOTEMPTY on its own temp dir on macOS. The fork's server footprint does not touch it.
• mobile: swiftc timeout under load. The EXPermissionsService TSan race happens because upstream's patch still targets expo-modules-core 57; the test is darwin-only, so Linux CI skips it.
• scripts: the known Apple Silicon cross-arch Windows test.

Typecheck: 0 errors in every package (tsc --noEmit, including scripts). vp lint: clean.

Desktop release gates, run locally with the release's environment (unsigned): build:desktop, then the mac arm64 dmg with T3CODE_DESKTOP_UPDATE_REPOSITORY=disabled, the fork's app id and its 67 exclusions. Result: no app-update.yml was packaged, and verify-desktop-bundle.mjs passed (109.42 MiB asar, 3411 files, 4 native imports resolved).

Merge Danger

Door: one-way, in practice.

The first v2 launch copies state.sqlite into statev2.sqlite and works there; the v1 database stays untouched, so git revert -m 1 restores the old app but not anything done after the upgrade. The desktop app moves its browser profile to t3code-v2; upstream's one-time import carries localStorage (drafts, settings) but not cookies or IndexedDB, so a re-sign-in to T3 Connect or preview-browser sites may be needed. Clients and server must both speak orchestration protocol 2.

Blast Radius: everything

Every surface takes upstream's v2. The fork loses auto-resume (use upstream's), loops, Web Push, needs-input notifications (use upstream's thread notifications), and the offline outbox until each is ported.

Resolved locally by Claude Opus 5.5 in Claude Code.

🤖 Generated with Claude Code