t3code-cli 0.14.1 → 0.15.0

package/dist/rpc.js

@@ -1,2 +1,2 @@
-import { Gi as T3RpcOperations, Gn as T3RpcLive, Ji as T3Rpc, Ki as T3RpcOperationsLive, Kn as makeT3RpcLayer, Yi as RpcError, qi as makeT3RpcOperations } from "./shared.js";
+import { $i as T3RpcOperations, Xn as makeT3RpcLayer, Yn as T3RpcLive, ea as T3RpcOperationsLive, na as T3Rpc, ra as RpcError, ta as makeT3RpcOperations } from "./shared.js";
 export { RpcError, T3Rpc, T3RpcLive, T3RpcOperations, T3RpcOperationsLive, makeT3RpcLayer, makeT3RpcOperations };

package/dist/runtime.d.ts

@@ -1,2 +1,2 @@
-import { An as T3LocalAuthTokenLayer, Cn as BaseAppLayer, Dn as T3AuthTransportLayer, En as T3AuthPairingLayer, Mn as T3PreviewAutomationLayer, On as T3LocalAuthLayer, Sn as AuthAppLayer, Tn as T3AuthLayer, jn as T3OrchestrationLayer, kn as T3LocalAuthOriginLayer, wn as BaseAuthAppLayer, xn as AppLayer } from "./shared.js";
+import { Bn as T3LocalAuthOriginLayer, Fn as BaseAuthAppLayer, Hn as T3OrchestrationLayer, In as T3AuthLayer, Ln as T3AuthPairingLayer, Mn as AppLayer, Nn as AuthAppLayer, Pn as BaseAppLayer, Rn as T3AuthTransportLayer, Un as T3PreviewAutomationLayer, Vn as T3LocalAuthTokenLayer, zn as T3LocalAuthLayer } from "./shared.js";
 export { AppLayer, AuthAppLayer, BaseAppLayer, BaseAuthAppLayer, T3AuthLayer, T3AuthPairingLayer, T3AuthTransportLayer, T3LocalAuthLayer, T3LocalAuthOriginLayer, T3LocalAuthTokenLayer, T3OrchestrationLayer, T3PreviewAutomationLayer };

package/dist/runtime.js

@@ -1,2 +1,2 @@
-import { Bn as T3LocalAuthLayer, Fn as BaseAppLayer, Hn as T3LocalAuthTokenLayer, In as BaseAuthAppLayer, Ln as T3AuthLayer, Nn as AppLayer, Pn as AuthAppLayer, Rn as T3AuthPairingLayer, Un as T3OrchestrationLayer, Vn as T3LocalAuthOriginLayer, Wn as T3PreviewAutomationLayer, zn as T3AuthTransportLayer } from "./shared.js";
+import { Bn as BaseAuthAppLayer, Gn as T3LocalAuthOriginLayer, Hn as T3AuthPairingLayer, Jn as T3PreviewAutomationLayer, Kn as T3LocalAuthTokenLayer, Ln as AppLayer, Rn as AuthAppLayer, Un as T3AuthTransportLayer, Vn as T3AuthLayer, Wn as T3LocalAuthLayer, qn as T3OrchestrationLayer, zn as BaseAppLayer } from "./shared.js";
 export { AppLayer, AuthAppLayer, BaseAppLayer, BaseAuthAppLayer, T3AuthLayer, T3AuthPairingLayer, T3AuthTransportLayer, T3LocalAuthLayer, T3LocalAuthOriginLayer, T3LocalAuthTokenLayer, T3OrchestrationLayer, T3PreviewAutomationLayer };

package/dist/shared/DrainableWorker.js

@@ -1,4 +1,4 @@
-import { FO as tx, IO as txRetry, LD as acquireRelease, RO as void_, ZD as ensuring, _v as unbounded, aO as gen, gv as take, hv as shutdown, iO as forkScoped, kO as tap, mv as offer, rO as forever, vv as get, xv as update, yv as make } from "../shared.js";
+import { AM as tx, Dj as acquireRelease, Fy as unbounded, Iy as get, Ly as make, My as offer, NM as void_, Ny as shutdown, Py as take, Qj as gen, Vj as ensuring, Yj as forever, Zj as forkScoped, jM as txRetry, wM as tap, zy as update } from "../shared.js";
 //#region upstream-t3code/packages/shared/src/DrainableWorker.ts
 /**
 * Create a drainable worker that processes items from an unbounded queue.

package/dist/shared/KeyedCoalescingWorker.js

@@ -1,4 +1,4 @@
-import { $D as flatMap, FO as tx, GD as catchCause, IO as txRetry, LD as acquireRelease, RO as void_, UD as asVoid, _v as unbounded, aO as gen, bv as modify, gv as take, hv as shutdown, iO as forkScoped, kO as tap, mv as offer, rO as forever, vv as get, yv as make } from "../shared.js";
+import { AM as tx, Dj as acquireRelease, Fj as catchCause, Fy as unbounded, Gj as flatMap, Iy as get, Ly as make, My as offer, NM as void_, Nj as asVoid, Ny as shutdown, Py as take, Qj as gen, Ry as modify, Yj as forever, Zj as forkScoped, jM as txRetry, wM as tap } from "../shared.js";
 //#region upstream-t3code/packages/shared/src/KeyedCoalescingWorker.ts
 const makeKeyedCoalescingWorker = (options) => gen(function* () {
 	const queue = yield* acquireRelease(unbounded(), shutdown);

package/dist/shared/Net.d.ts

@@ -18,6 +18,11 @@ interface NetServiceShape {
    * Checks loopback availability on both IPv4 and IPv6 localhost addresses.
    */
   readonly isPortAvailableOnLoopback: (port: number) => Effect.Effect<boolean>;
+  /**
+   * Returns true when something accepts TCP connections on {host, port}.
+   * Unlike the bind-side checks this works for privileged ports (<1024).
+   */
+  readonly hasListenerOnHost: (port: number, host: string) => Effect.Effect<boolean>;
   /**
    * Reserve an ephemeral loopback port and release it immediately.
    */
@@ -35,6 +40,7 @@ declare class NetService extends NetService_base {}
 declare const make: () => {
   canListenOnHost: (port: number, host: string) => Effect.Effect<boolean>;
   isPortAvailableOnLoopback: (port: number) => Effect.Effect<boolean>;
+  hasListenerOnHost: (port: number, host: string) => Effect.Effect<boolean>;
   reserveLoopbackPort: (host?: string) => Effect.Effect<number, NetError>;
   findAvailablePort: (preferred: number) => Effect.Effect<number, NetError, never>;
 };

package/dist/shared/Net.js

@@ -1,4 +1,4 @@
-import { $k as hasProperty, BO as zipWith, EO as succeed, KO as TaggedError, OO as sync, QD as fail, WD as callback, aO as gen, iA as isString, kk as Service, rA as isObject, rk as sync$1 } from "../shared.js";
+import { AN as Service, CM as sync, FM as zipWith, HM as TaggedError, Pj as callback, Qj as gen, Uj as fail, aP as isObject, eN as sync$1, oP as isString, tP as hasProperty, xM as succeed } from "../shared.js";
 import * as NodeNet from "node:net";
 //#region upstream-t3code/packages/shared/src/Net.ts
 var NetError = class extends TaggedError("NetError") {};
@@ -114,6 +114,7 @@ const make = () => {
 	return {
 		canListenOnHost,
 		isPortAvailableOnLoopback,
+		hasListenerOnHost,
 		reserveLoopbackPort,
 		findAvailablePort: (preferred) => gen(function* () {
 			if (preferred > 0 && (yield* isPortAvailableOnLoopback(preferred))) return preferred;

package/dist/shared/advertisedEndpoint.d.ts

@@ -1,2 +1,2 @@
-import { _n as classifyHostedHttpsCompatibility, bn as normalizeHttpBaseUrl, gn as CreateAdvertisedEndpointInput, vn as createAdvertisedEndpoint, yn as deriveWsBaseUrl } from "../shared.js";
+import { An as normalizeHttpBaseUrl, Dn as classifyHostedHttpsCompatibility, En as CreateAdvertisedEndpointInput, On as createAdvertisedEndpoint, kn as deriveWsBaseUrl } from "../shared.js";
 export { CreateAdvertisedEndpointInput, classifyHostedHttpsCompatibility, createAdvertisedEndpoint, deriveWsBaseUrl, normalizeHttpBaseUrl };

package/dist/shared/advertisedEndpoint.js

@@ -1,2 +1,2 @@
-import { Bo as normalizeHttpBaseUrl, Lo as classifyHostedHttpsCompatibility, Ro as createAdvertisedEndpoint, zo as deriveWsBaseUrl } from "../shared.js";
+import { Jo as createAdvertisedEndpoint, Xo as normalizeHttpBaseUrl, Yo as deriveWsBaseUrl, qo as classifyHostedHttpsCompatibility } from "../shared.js";
 export { classifyHostedHttpsCompatibility, createAdvertisedEndpoint, deriveWsBaseUrl, normalizeHttpBaseUrl };

package/dist/shared/agentAwareness.d.ts

@@ -1,4 +1,4 @@
-import { $T as ThreadId, _v as OrchestrationThreadShell, tv as OrchestrationProjectShell, zT as EnvironmentId } from "../shared.js";
+import { Nk as ThreadId, Yy as OrchestrationProjectShell, vb as OrchestrationThreadShell, vk as EnvironmentId } from "../shared.js";
 //#region upstream-t3code/packages/shared/src/agentAwareness.d.ts
 type AgentAwarenessPhase = "starting" | "running" | "waiting_for_approval" | "waiting_for_input" | "completed" | "failed" | "stale";
 interface AgentAwarenessState {

package/dist/shared/backgroundActivitySettings.d.ts

@@ -1,4 +1,4 @@
-import { Sg as BackgroundActivitySettings, bg as BackgroundActivityProfile, i_ as ServerSettings } from "../shared.js";
+import { Y_ as BackgroundActivityProfile, Yv as ServerSettings, Z_ as BackgroundActivitySettings } from "../shared.js";
 import * as Duration from "effect/Duration";
 //#region upstream-t3code/packages/shared/src/backgroundActivitySettings.d.ts
 interface ResolvedBackgroundActivitySettings {

package/dist/shared/composerInlineTokens.js

@@ -1,7 +1,7 @@
 //#region upstream-t3code/packages/shared/src/composerInlineTokens.ts
 const SKILL_TOKEN_REGEX = /(^|\s)\$([a-zA-Z][a-zA-Z0-9:_-]*)(?=\s)/g;
 const MENTION_TOKEN_REGEX = /(^|\s)@(?:"((?:\\.|[^"\\])*)"|([^\s@"]+))(?=\s)/g;
-const FILE_LINK_TOKEN_REGEX = /(^|\s)\[((?:\\.|[^\]\\])*)\]\(([^)\s]+)\)(?=\s)/g;
+const FILE_LINK_TOKEN_REGEX = new RegExp(`(^|\\s)\\[((?:\\\\.|[^\\]\\\\]){0,512})\\]\\(([^)\\s]+)\\)(?=\\s)`, "g");
 const URI_SCHEME_REGEX = /^[A-Za-z][A-Za-z0-9+.-]*:/;
 const WINDOWS_DRIVE_PATH_REGEX = /^[A-Za-z]:[\\/]/;
 const SCOPED_PACKAGE_REFERENCE_REGEX = /^[a-z0-9][a-z0-9._-]*\/[a-z0-9][a-z0-9._-]*(?:\/[^\s@"]+)*$/;

package/dist/shared/connectAuth.d.ts

@@ -13,18 +13,37 @@ declare const CONNECT_OAUTH_SCOPES: readonly ["openid", "profile", "email"];
 interface ConnectAuthorizeRequest {
   readonly state: string;
   readonly challenge: string;
+  /**
+   * Present when a loopback CLI initiated the request: the hosted /connect
+   * page then asks Clerk to redirect the authorization code straight to
+   * `http://127.0.0.1:<port>/callback` instead of the hosted callback page.
+   */
+  readonly loopbackPort?: number;
 }
 /**
- * The URL a headless CLI prints for the user to open on a machine with a
- * browser. `state` and `code_challenge` ride the fragment so they never reach
- * the hosted app's server or CDN logs; neither is a secret.
+ * The URL the CLI prints for the user to open in a browser. `state` and
+ * `code_challenge` ride the fragment so they never reach the hosted app's
+ * server or CDN logs; neither is a secret.
+ *
+ * Both CLI flows route through the hosted /connect page rather than hitting
+ * Clerk's /oauth/authorize directly: a signed-out browser sent straight to
+ * /oauth/authorize goes through Clerk's sign-in redirect, which does not
+ * reliably preserve the authorize query parameters (state, response_type,
+ * code_challenge). The hosted page waits for a Clerk session first, then
+ * forwards the request with the parameters intact.
  */
 declare function buildConnectAuthorizeRequestUrl(input: {
   readonly hostedAppUrl: string;
   readonly state: string;
   readonly challenge: string;
+  readonly loopbackPort?: number;
 }): string;
 declare function readConnectAuthorizeRequest(url: URL): ConnectAuthorizeRequest | null;
+/**
+ * Redirect URI for the CLI's local callback listener. Must stay in sync with
+ * the redirect URI registered on the Clerk CLI OAuth application.
+ */
+declare function connectLoopbackRedirectUri(port: number): string;
 declare function connectCallbackUrl(hostedAppUrl: string): string;
 declare function buildConnectClerkAuthorizeUrl(input: {
   readonly authorizationEndpoint: string;
@@ -55,4 +74,4 @@ declare function encodeConnectAuthCode(input: ConnectAuthCode): string;
 declare function checkConnectAuthCode(blob: string, expectedState: string): ConnectAuthCode | string;
 declare function parseConnectAuthCode(blob: string): ConnectAuthCode | null;
 //#endregion
-export { CONNECT_OAUTH_SCOPES, ConnectAuthCode, ConnectAuthorizeRequest, DEFAULT_HOSTED_APP_URL, buildConnectAuthorizeRequestUrl, buildConnectClerkAuthorizeUrl, checkConnectAuthCode, connectCallbackUrl, encodeConnectAuthCode, parseConnectAuthCode, readConnectAuthorizeRequest };
+export { CONNECT_OAUTH_SCOPES, ConnectAuthCode, ConnectAuthorizeRequest, DEFAULT_HOSTED_APP_URL, buildConnectAuthorizeRequestUrl, buildConnectClerkAuthorizeUrl, checkConnectAuthCode, connectCallbackUrl, connectLoopbackRedirectUri, encodeConnectAuthCode, parseConnectAuthCode, readConnectAuthorizeRequest };

package/dist/shared/connectAuth.js

@@ -1,8 +1,10 @@
-import { Sa as readHashParams } from "../shared.js";
+import { Aa as readHashParams } from "../shared.js";
 //#region upstream-t3code/packages/shared/src/connectAuth.ts
 const CONNECT_AUTH_STATE_PARAM = "state";
 const CONNECT_AUTH_CHALLENGE_PARAM = "challenge";
+const CONNECT_AUTH_PORT_PARAM = "port";
 const CONNECT_AUTH_CODE_SEPARATOR = ".";
+const CONNECT_LOOPBACK_CALLBACK_PATH = "/callback";
 const CONNECT_AUTHORIZE_PATH = "/connect";
 const CONNECT_CALLBACK_PATH = "/connect/callback";
 /**
@@ -21,13 +23,24 @@ const CONNECT_OAUTH_SCOPES = [
 	"email"
 ];
 /**
-* The URL a headless CLI prints for the user to open on a machine with a
-* browser. `state` and `code_challenge` ride the fragment so they never reach
-* the hosted app's server or CDN logs; neither is a secret.
+* The URL the CLI prints for the user to open in a browser. `state` and
+* `code_challenge` ride the fragment so they never reach the hosted app's
+* server or CDN logs; neither is a secret.
+*
+* Both CLI flows route through the hosted /connect page rather than hitting
+* Clerk's /oauth/authorize directly: a signed-out browser sent straight to
+* /oauth/authorize goes through Clerk's sign-in redirect, which does not
+* reliably preserve the authorize query parameters (state, response_type,
+* code_challenge). The hosted page waits for a Clerk session first, then
+* forwards the request with the parameters intact.
 */
 function buildConnectAuthorizeRequestUrl(input) {
 	const url = new URL(CONNECT_AUTHORIZE_PATH, input.hostedAppUrl);
-	url.hash = new URLSearchParams([[CONNECT_AUTH_STATE_PARAM, input.state], [CONNECT_AUTH_CHALLENGE_PARAM, input.challenge]]).toString();
+	url.hash = new URLSearchParams([
+		[CONNECT_AUTH_STATE_PARAM, input.state],
+		[CONNECT_AUTH_CHALLENGE_PARAM, input.challenge],
+		...input.loopbackPort === void 0 ? [] : [[CONNECT_AUTH_PORT_PARAM, String(input.loopbackPort)]]
+	]).toString();
 	return url.toString();
 }
 function readConnectAuthorizeRequest(url) {
@@ -35,10 +48,30 @@ function readConnectAuthorizeRequest(url) {
 	const state = params.get(CONNECT_AUTH_STATE_PARAM)?.trim() ?? "";
 	const challenge = params.get(CONNECT_AUTH_CHALLENGE_PARAM)?.trim() ?? "";
 	if (!state || !challenge) return null;
-	return {
+	const port = params.get(CONNECT_AUTH_PORT_PARAM);
+	if (port === null) return {
 		state,
 		challenge
 	};
+	const loopbackPort = parseLoopbackPort(port.trim());
+	if (loopbackPort === null) return null;
+	return {
+		state,
+		challenge,
+		loopbackPort
+	};
+}
+function parseLoopbackPort(value) {
+	if (!/^\d{1,5}$/.test(value)) return null;
+	const port = Number(value);
+	return port >= 1 && port <= 65535 ? port : null;
+}
+/**
+* Redirect URI for the CLI's local callback listener. Must stay in sync with
+* the redirect URI registered on the Clerk CLI OAuth application.
+*/
+function connectLoopbackRedirectUri(port) {
+	return `http://127.0.0.1:${port}${CONNECT_LOOPBACK_CALLBACK_PATH}`;
 }
 function connectCallbackUrl(hostedAppUrl) {
 	return new URL(CONNECT_CALLBACK_PATH, hostedAppUrl).toString();
@@ -86,4 +119,4 @@ function parseConnectAuthCode(blob) {
 	};
 }
 //#endregion
-export { CONNECT_OAUTH_SCOPES, DEFAULT_HOSTED_APP_URL, buildConnectAuthorizeRequestUrl, buildConnectClerkAuthorizeUrl, checkConnectAuthCode, connectCallbackUrl, encodeConnectAuthCode, parseConnectAuthCode, readConnectAuthorizeRequest };
+export { CONNECT_OAUTH_SCOPES, DEFAULT_HOSTED_APP_URL, buildConnectAuthorizeRequestUrl, buildConnectClerkAuthorizeUrl, checkConnectAuthCode, connectCallbackUrl, connectLoopbackRedirectUri, encodeConnectAuthCode, parseConnectAuthCode, readConnectAuthorizeRequest };

package/dist/shared/devHome.js

@@ -1,4 +1,4 @@
-import { Bk as isSome, OE as FileSystem, TE as Path, _O as orElseSucceed, aO as gen, hO as option } from "../shared.js";
+import { CA as Path, HN as isSome, Qj as gen, TA as FileSystem, fM as orElseSucceed, uM as option } from "../shared.js";
 //#region upstream-t3code/packages/shared/src/devHome.ts
 /**
 * Where development state lives, and how to keep it away from the shared

package/dist/shared/dpop.js

@@ -1,4 +1,4 @@
-import { $T as Struct, AD as encodeBase64Url, KT as Int, OD as decodeBase64Url, QT as String$1, YT as Never, aE as decodeUnknownOption, dE as optionalKey, kD as decodeBase64UrlString, lE as isNonEmpty, n as normalizeDpopHtu, qT as Literal, r as stableStringify, sE as fromJsonString, t as DpopPublicJwk$1, xk as getOrThrow, zk as isNone } from "../shared.js";
+import { Gk as decodeUnknownOption, Lk as String$1, Mk as Literal, Pk as Never, Rk as Struct, VN as isNone, Yk as isNonEmpty, Zk as optionalKey, gA as encodeBase64Url, hA as decodeBase64UrlString, jk as Int, mA as decodeBase64Url, n as normalizeDpopHtu, qk as fromJsonString, r as stableStringify, t as DpopPublicJwk$1, yN as getOrThrow } from "../shared.js";
 import * as nc from "node:crypto";
 //#region node_modules/.pnpm/@noble+hashes@1.8.0/node_modules/@noble/hashes/esm/cryptoNode.js
 /**

package/dist/shared/git.d.ts

@@ -1,4 +1,4 @@
-import { $S as VcsStatusLocalResult, XS as VcsRef, eC as VcsStatusRemoteResult, gC as SourceControlProviderInfo, nC as VcsStatusStreamEvent, tC as VcsStatusResult } from "../shared.js";
+import { WD as SourceControlProviderInfo, _T as VcsStatusRemoteResult, gT as VcsStatusLocalResult, pT as VcsRef, vT as VcsStatusResult, yT as VcsStatusStreamEvent } from "../shared.js";
 //#region upstream-t3code/packages/shared/src/git.d.ts
 declare const WORKTREE_BRANCH_PREFIX = "t3code";
 /**

package/dist/shared/httpObservability.js

@@ -1,2 +1,2 @@
-import { Fo as httpHeaderRedactionLayer } from "../shared.js";
+import { Go as httpHeaderRedactionLayer } from "../shared.js";
 export { httpHeaderRedactionLayer };

package/dist/shared/httpReadiness.js

@@ -1,4 +1,4 @@
-import { AO as tapError, BC as transform, EO as succeed, GC as set, HC as get, Hk as match, IC as HttpClient, LC as filterStatusOk, QD as fail, RC as retry, Tk as millis, UC as get$1, UO as spaced, WC as make, WO as upTo, aO as gen, cO as logDebug, dO as mapError, eO as fn, jO as timeoutOption, lO as logWarning, oO as ignore, zC as tap } from "../shared.js";
+import { $j as ignore, DD as set, ED as make, EM as timeoutOption, Kj as fn, Qj as gen, RM as spaced, SD as transform, TD as get$1, TM as tapError, Uj as fail, WN as match, bD as retry, iM as mapError, nM as logWarning, tM as logDebug, vD as HttpClient, wD as get, wN as millis, xD as tap, xM as succeed, yD as filterStatusOk, zM as upTo } from "../shared.js";
 //#region upstream-t3code/packages/shared/src/httpReadiness.ts
 const DEFAULT_HTTP_READY_PROBE_TIMEOUT_MS = 1e3;
 /**

package/dist/shared/keybindings.d.ts

@@ -1,4 +1,4 @@
-import { Hu as KeybindingRule, Ku as KeybindingWhenNode, Uu as KeybindingShortcut, ad as ResolvedKeybindingsConfig, id as ResolvedKeybindingRule } from "../shared.js";
+import { Id as KeybindingWhenNode, Jd as ResolvedKeybindingRule, Md as KeybindingRule, Nd as KeybindingShortcut, Yd as ResolvedKeybindingsConfig } from "../shared.js";
 //#region upstream-t3code/packages/shared/src/keybindings.d.ts
 declare const DEFAULT_KEYBINDINGS: ReadonlyArray<KeybindingRule>;
 declare function parseKeybindingShortcut(value: string): KeybindingShortcut | null;
@@ -6,7 +6,7 @@ declare function parseKeybindingWhenExpression(expression: string): KeybindingWh
 declare function compileResolvedKeybindingRule(rule: KeybindingRule): ResolvedKeybindingRule | null;
 declare function compileResolvedKeybindingsConfig(config: ReadonlyArray<KeybindingRule>): ResolvedKeybindingsConfig;
 declare const DEFAULT_RESOLVED_KEYBINDINGS: readonly {
-  readonly command: "chat.new" | "chat.newLocal" | "commandPalette.toggle" | "composer.stash" | "diff.toggle" | "editor.openFavorite" | "modelPicker.jump.1" | "modelPicker.jump.2" | "modelPicker.jump.3" | "modelPicker.jump.4" | "modelPicker.jump.5" | "modelPicker.jump.6" | "modelPicker.jump.7" | "modelPicker.jump.8" | "modelPicker.jump.9" | "modelPicker.toggle" | "preview.focusUrl" | "preview.refresh" | "preview.resetZoom" | "preview.toggle" | "preview.zoomIn" | "preview.zoomOut" | "rightPanel.toggle" | "sidebar.toggle" | "terminal.close" | "terminal.new" | "terminal.split" | "terminal.splitVertical" | "terminal.toggle" | "thread.jump.1" | "thread.jump.2" | "thread.jump.3" | "thread.jump.4" | "thread.jump.5" | "thread.jump.6" | "thread.jump.7" | "thread.jump.8" | "thread.jump.9" | "thread.next" | "thread.previous" | `script.${string}.run`;
+  readonly command: "chat.new" | "chat.newLocal" | "commandPalette.toggle" | "composer.stash" | "diff.toggle" | "editor.openFavorite" | "filePicker.toggle" | "modelPicker.jump.1" | "modelPicker.jump.2" | "modelPicker.jump.3" | "modelPicker.jump.4" | "modelPicker.jump.5" | "modelPicker.jump.6" | "modelPicker.jump.7" | "modelPicker.jump.8" | "modelPicker.jump.9" | "modelPicker.toggle" | "preview.focusUrl" | "preview.refresh" | "preview.resetZoom" | "preview.toggle" | "preview.zoomIn" | "preview.zoomOut" | "projectSearch.toggle" | "rightPanel.toggle" | "sidebar.toggle" | "terminal.close" | "terminal.new" | "terminal.split" | "terminal.splitVertical" | "terminal.toggle" | "themeEditor.toggle" | "thread.jump.1" | "thread.jump.2" | "thread.jump.3" | "thread.jump.4" | "thread.jump.5" | "thread.jump.6" | "thread.jump.7" | "thread.jump.8" | "thread.jump.9" | "thread.next" | "thread.previous" | `script.${string}.run`;
   readonly shortcut: {
     readonly key: string;
     readonly metaKey: boolean;

package/dist/shared/keybindings.js

@@ -1,4 +1,4 @@
-import { Nm as MODEL_PICKER_JUMP_KEYBINDING_COMMANDS, Rm as THREAD_JUMP_KEYBINDING_COMMANDS } from "../shared.js";
+import { Ph as MODEL_PICKER_JUMP_KEYBINDING_COMMANDS, zh as THREAD_JUMP_KEYBINDING_COMMANDS } from "../shared.js";
 //#region upstream-t3code/packages/shared/src/keybindings.ts
 const DEFAULT_KEYBINDINGS = [
 	{
@@ -77,6 +77,20 @@ const DEFAULT_KEYBINDINGS = [
 		command: "commandPalette.toggle",
 		when: "!terminalFocus"
 	},
+	{
+		key: "mod+p",
+		command: "filePicker.toggle",
+		when: "!terminalFocus"
+	},
+	{
+		key: "mod+shift+f",
+		command: "projectSearch.toggle",
+		when: "!terminalFocus"
+	},
+	{
+		key: "mod+alt+shift+t",
+		command: "themeEditor.toggle"
+	},
 	{
 		key: "mod+s",
 		command: "composer.stash",

package/dist/shared/model.d.ts

@@ -1,4 +1,4 @@
-import { A_ as ModelSelection, Cd as ProviderOptionSelection, Kp as ProviderDriverKind, Qp as ProviderInstanceId, _d as ModelCapabilities, xd as ProviderOptionDescriptor } from "../shared.js";
+import { $m as ProviderInstanceId, cf as ModelCapabilities, ff as ProviderOptionDescriptor, mf as ProviderOptionSelection, qm as ProviderDriverKind, xy as ModelSelection } from "../shared.js";
 //#region upstream-t3code/packages/shared/src/model.d.ts
 interface SelectableModelOption {
   slug: string;

package/dist/shared/oauthScope.js

@@ -1,2 +1,2 @@
-import { Go as parseOAuthScope, Ho as encodeOAuthScope, Uo as oauthScopeSetEquals, Vo as OAuthScopeEncodingError, Wo as parseAllowedOAuthScope } from "../shared.js";
+import { $o as oauthScopeSetEquals, Qo as encodeOAuthScope, Zo as OAuthScopeEncodingError, es as parseAllowedOAuthScope, ts as parseOAuthScope } from "../shared.js";
 export { OAuthScopeEncodingError, encodeOAuthScope, oauthScopeSetEquals, parseAllowedOAuthScope, parseOAuthScope };

package/dist/shared/observability.d.ts

@@ -92,6 +92,13 @@ interface SerializableSpan {
   readonly events: ReadonlyArray<readonly [name: string, startTime: bigint, attributes: Record<string, unknown>]>;
 }
 declare function compactTraceAttributes(attributes: Readonly<Record<string, unknown>>): TraceAttributes;
+/**
+ * Clamps oversized attribute values on the serialized trace record so the file
+ * sink stays small, including strings nested inside arrays and objects (e.g.
+ * error stacks). Returns a new record when anything was clamped; never
+ * mutates the input (the live span's attributes are shared with other tracers).
+ */
+declare function truncateTraceAttributes(attributes: TraceAttributes): TraceAttributes;
 declare function spanToTraceRecord(span: SerializableSpan): EffectTraceRecord;
 declare const makeTraceSink: (options: TraceSinkOptions) => Effect.Effect<{
   filePath: string;
@@ -102,4 +109,4 @@ declare const makeTraceSink: (options: TraceSinkOptions) => Effect.Effect<{
 declare const makeLocalFileTracer: (options: LocalFileTracerOptions) => Effect.Effect<Tracer.Tracer, never, import("effect/Scope").Scope>;
 declare function decodeOtlpTraceRecords(payload: OtlpTracer.TraceData): ReadonlyArray<OtlpTraceRecord>;
 //#endregion
-export { EffectTraceRecord, LocalFileTracerOptions, OtlpTraceRecord, TraceAttributes, TraceRecord, TraceRecordEvent, TraceRecordLink, TraceSink, TraceSinkFlushStats, TraceSinkOptions, causeErrorTag, compactTraceAttributes, decodeOtlpTraceRecords, errorTag, makeLocalFileTracer, makeTraceSink, spanToTraceRecord };
+export { EffectTraceRecord, LocalFileTracerOptions, OtlpTraceRecord, TraceAttributes, TraceRecord, TraceRecordEvent, TraceRecordLink, TraceSink, TraceSinkFlushStats, TraceSinkOptions, causeErrorTag, compactTraceAttributes, decodeOtlpTraceRecords, errorTag, makeLocalFileTracer, makeTraceSink, spanToTraceRecord, truncateTraceAttributes };

package/dist/shared/observability.js

@@ -1,4 +1,4 @@
-import { $D as flatMap, BD as andThen, Bk as isSome, D as RotatingFileSink, JO as findErrorOption, OO as sync, RD as addFinalizer, RO as void_, Rk as getOrUndefined, TO as sleep, XO as pretty, YO as hasInterruptsOnly, dk as isSuccess, eO as fn, iO as forkScoped, mk as make, oO as ignore, pk as NativeSpan, rO as forever, zO as withTracerEnabled } from "../shared.js";
+import { $j as ignore, Aj as andThen, BN as getOrUndefined, CM as sync, D as RotatingFileSink, GM as hasInterruptsOnly, Gj as flatMap, HN as isSome, Kj as fn, NM as void_, Oj as addFinalizer, PM as withTracerEnabled, WM as findErrorOption, Yj as forever, Zj as forkScoped, bM as sleep, dN as NativeSpan, fN as make, lN as isSuccess, qM as pretty } from "../shared.js";
 //#region upstream-t3code/packages/shared/src/observability.ts
 const FLUSH_BUFFER_THRESHOLD = 256;
 const textEncoder = new TextEncoder();
@@ -68,6 +68,50 @@ function formatTraceExit(exit) {
 		cause: pretty(exit.cause)
 	};
 }
+const TRACE_ATTRIBUTE_MAX_LENGTH = 500;
+const TRACE_ATTRIBUTE_TRUNCATED_LENGTH = 200;
+const TRACE_ATTRIBUTE_TRUNCATION_SUFFIX = "…[truncated]";
+const ALWAYS_TRUNCATED_TRACE_ATTRIBUTES = /* @__PURE__ */ new Set(["db.query.text"]);
+function truncateNestedValue(value) {
+	if (typeof value === "string") return value.length <= TRACE_ATTRIBUTE_MAX_LENGTH ? value : `${value.slice(0, TRACE_ATTRIBUTE_MAX_LENGTH)}${TRACE_ATTRIBUTE_TRUNCATION_SUFFIX}`;
+	if (Array.isArray(value)) {
+		const truncated = value.map(truncateNestedValue);
+		return truncated.some((entry, index) => entry !== value[index]) ? truncated : value;
+	}
+	if (isPlainObject(value)) {
+		let truncated;
+		for (const [key, entry] of Object.entries(value)) {
+			const next = truncateNestedValue(entry);
+			if (next === entry) continue;
+			truncated ??= { ...value };
+			truncated[key] = next;
+		}
+		return truncated ?? value;
+	}
+	return value;
+}
+/**
+* Clamps oversized attribute values on the serialized trace record so the file
+* sink stays small, including strings nested inside arrays and objects (e.g.
+* error stacks). Returns a new record when anything was clamped; never
+* mutates the input (the live span's attributes are shared with other tracers).
+*/
+function truncateTraceAttributes(attributes) {
+	let truncated;
+	for (const [key, value] of Object.entries(attributes)) {
+		if (typeof value === "string" && ALWAYS_TRUNCATED_TRACE_ATTRIBUTES.has(key)) {
+			if (value.length <= TRACE_ATTRIBUTE_TRUNCATED_LENGTH) continue;
+			truncated ??= { ...attributes };
+			truncated[key] = `${value.slice(0, TRACE_ATTRIBUTE_TRUNCATED_LENGTH)}${TRACE_ATTRIBUTE_TRUNCATION_SUFFIX}`;
+			continue;
+		}
+		const next = truncateNestedValue(value);
+		if (next === value) continue;
+		truncated ??= { ...attributes };
+		truncated[key] = next;
+	}
+	return truncated ?? attributes;
+}
 function spanToTraceRecord(span) {
 	const status = span.status;
 	const parentSpanId = getOrUndefined(span.parent)?.spanId;
@@ -82,16 +126,16 @@ function spanToTraceRecord(span) {
 		startTimeUnixNano: String(status.startTime),
 		endTimeUnixNano: String(status.endTime),
 		durationMs: Number(status.endTime - status.startTime) / 1e6,
-		attributes: compactTraceAttributes(Object.fromEntries(span.attributes)),
+		attributes: truncateTraceAttributes(compactTraceAttributes(Object.fromEntries(span.attributes))),
 		events: span.events.map(([name, startTime, attributes]) => ({
 			name,
 			timeUnixNano: String(startTime),
-			attributes: compactTraceAttributes(attributes)
+			attributes: truncateTraceAttributes(compactTraceAttributes(attributes))
 		})),
 		links: span.links.map((link) => ({
 			traceId: link.span.traceId,
 			spanId: link.span.spanId,
-			attributes: compactTraceAttributes(link.attributes)
+			attributes: truncateTraceAttributes(compactTraceAttributes(link.attributes))
 		})),
 		exit: formatTraceExit(status.exit)
 	};
@@ -343,4 +387,4 @@ function parseBigInt(input) {
 	}
 }
 //#endregion
-export { causeErrorTag, compactTraceAttributes, decodeOtlpTraceRecords, errorTag, makeLocalFileTracer, makeTraceSink, spanToTraceRecord };
+export { causeErrorTag, compactTraceAttributes, decodeOtlpTraceRecords, errorTag, makeLocalFileTracer, makeTraceSink, spanToTraceRecord, truncateTraceAttributes };

package/dist/shared/path.js

@@ -1,2 +1,2 @@
-import { an as isUncPath, cn as normalizeProjectPathForComparison, in as isExplicitRelativePath, ln as normalizeProjectPathForDispatch, on as isWindowsAbsolutePath, sn as isWindowsDrivePath } from "../shared.js";
+import { an as isExplicitRelativePath, cn as isWindowsDrivePath, ln as normalizeProjectPathForComparison, on as isUncPath, sn as isWindowsAbsolutePath, un as normalizeProjectPathForDispatch } from "../shared.js";
 export { isExplicitRelativePath, isUncPath, isWindowsAbsolutePath, isWindowsDrivePath, normalizeProjectPathForComparison, normalizeProjectPathForDispatch };

package/dist/shared/preview.js

@@ -1,4 +1,4 @@
-import { GT as Defect, JT as Literals, QT as String, ZT as Number, cE as is, eE as TaggedErrorClass, uE as optional } from "../shared.js";
+import { Ik as Number, Jk as is, Lk as String, Nk as Literals, Xk as optional, kk as Defect, zk as TaggedErrorClass } from "../shared.js";
 //#region upstream-t3code/packages/shared/src/preview.ts
 /**
 * Pure URL helpers shared between the preview server, desktop main process,

package/dist/shared/previewViewport.d.ts

@@ -1,4 +1,4 @@
-import { Gy as PreviewAutomationResizeInput, Nb as PreviewViewportPresetId, Pb as PreviewViewportSetting } from "../shared.js";
+import { HS as PreviewViewportPresetId, US as PreviewViewportSetting, Zx as PreviewAutomationResizeInput } from "../shared.js";
 //#region upstream-t3code/packages/shared/src/previewViewport.d.ts
 interface PreviewViewportPreset {
   readonly id: PreviewViewportPresetId;

package/dist/shared/previewViewport.js

@@ -1,4 +1,4 @@
-import { J_ as PREVIEW_VIEWPORT_PRESET_IDS } from "../shared.js";
+import { fy as PREVIEW_VIEWPORT_PRESET_IDS } from "../shared.js";
 //#region upstream-t3code/packages/shared/src/previewViewport.ts
 const PREVIEW_VIEWPORT_PRESET_DEFINITIONS = {
 	"iphone-se": {

package/dist/shared/projectFavicon.d.ts

@@ -1,5 +1,6 @@
 //#region upstream-t3code/packages/shared/src/projectFavicon.d.ts
 declare const PROJECT_FAVICON_FALLBACK_MARKER = "project-favicon-missing";
+declare function getProjectFaviconCacheKey(environmentId: string, workspaceRoot: string, url: string): string;
 declare function isProjectFaviconFallbackUrl(url: string | null | undefined): boolean;
 //#endregion
-export { PROJECT_FAVICON_FALLBACK_MARKER, isProjectFaviconFallbackUrl };
+export { PROJECT_FAVICON_FALLBACK_MARKER, getProjectFaviconCacheKey, isProjectFaviconFallbackUrl };

package/dist/shared/projectFavicon.js

@@ -1,5 +1,17 @@
 //#region upstream-t3code/packages/shared/src/projectFavicon.ts
 const PROJECT_FAVICON_FALLBACK_MARKER = "project-favicon-missing";
+function getProjectFaviconCacheKey(environmentId, workspaceRoot, url) {
+	let revision = url;
+	try {
+		const pathname = new URL(url, "https://t3.invalid").pathname;
+		revision = pathname.slice(pathname.lastIndexOf("/") + 1);
+	} catch {}
+	return JSON.stringify([
+		environmentId,
+		workspaceRoot,
+		revision
+	]);
+}
 function isProjectFaviconFallbackUrl(url) {
 	if (!url) return false;
 	try {
@@ -10,4 +22,4 @@ function isProjectFaviconFallbackUrl(url) {
 	}
 }
 //#endregion
-export { PROJECT_FAVICON_FALLBACK_MARKER, isProjectFaviconFallbackUrl };
+export { PROJECT_FAVICON_FALLBACK_MARKER, getProjectFaviconCacheKey, isProjectFaviconFallbackUrl };

package/dist/shared/projectScripts.d.ts

@@ -1,4 +1,4 @@
-import { Ev as ProjectScript } from "../shared.js";
+import { Ob as ProjectScript } from "../shared.js";
 //#region upstream-t3code/packages/shared/src/projectScripts.d.ts
 interface ProjectScriptRuntimeEnvInput {
   project: {

package/dist/shared/relayAuth.js

@@ -1,4 +1,4 @@
-import { GT as Defect, JT as Literals, QT as String, eE as TaggedErrorClass, uE as optional } from "../shared.js";
+import { Lk as String, Nk as Literals, Xk as optional, kk as Defect, zk as TaggedErrorClass } from "../shared.js";
 //#region upstream-t3code/packages/shared/src/relayAuth.ts
 const ClerkPublishableKeyPrefix = Literals([
 	"pk_test",

package/dist/shared/relayClient.d.ts

@@ -1,4 +1,4 @@
-import { zC as RelayClientInstallProgressEvent } from "../shared.js";
+import { PT as RelayClientInstallProgressEvent } from "../shared.js";
 import * as Context from "effect/Context";
 import * as Effect from "effect/Effect";
 import * as Layer from "effect/Layer";

package/dist/shared/relayClient.js

@@ -1,4 +1,4 @@
-import { $D as flatMap$1, BT as string, Bk as isSome, CO as scoped, DO as suspend, EO as succeed, GO as currentTimeMillis, HC as get, HD as as, IC as HttpClient, KO as TaggedError, LT as all, Mk as flatMap, OE as FileSystem, QD as fail, QO as effect, RO as void_, RT as map, Rk as getOrUndefined, TE as Path, TO as sleep, Uk as none, VC as filterStatusOk, Wk as some, YD as catch_, ZD as ensuring, aO as gen, bE as ChildProcessSpawner, dO as mapError, eO as fn, gO as orDie, hO as option$1, jD as encodeHex, kk as Service, mD as make, oO as ignore, pE as Crypto, qD as catchTag, vE as make$1, w as HostProcessPlatform, y as HostProcessArchitecture, zT as option, zk as isNone } from "../shared.js";
+import { $j as ignore, AN as Service, BM as currentTimeMillis, BN as getOrUndefined, CA as Path, CD as filterStatusOk, GN as none, Gj as flatMap$1, HM as TaggedError, HN as isSome, KN as some, Kj as fn, Lj as catchTag, Mj as as, NM as void_, NN as flatMap, Qj as gen, SM as suspend, Sk as string, TA as FileSystem, Uj as fail, VN as isNone, Vj as ensuring, YM as effect, _A as encodeHex, aA as make$1, bM as sleep, bk as map, dM as orDie, eA as Crypto, fj as make, iM as mapError, sA as ChildProcessSpawner, uM as option$1, vD as HttpClient, vM as scoped, w as HostProcessPlatform, wD as get, xM as succeed, xk as option, y as HostProcessArchitecture, yk as all, zj as catch_ } from "../shared.js";
 //#region upstream-t3code/packages/shared/src/relayClient.ts
 const CLOUDFLARED_VERSION = "2026.5.2";
 const CLOUDFLARED_PATH_ENV_NAME = "T3CODE_CLOUDFLARED_PATH";

package/dist/shared/relayJwt.js

@@ -1,2 +1,2 @@
-import { $a as RELAY_HEALTH_REQUEST_TYP, Qa as RELAY_ACTIVITY_PUBLISH_TYP, ao as decodeRelayJwt, co as verifyRelayJwt, eo as RELAY_HEALTH_RESPONSE_TYP, io as RelayJwtError, no as RELAY_MINT_REQUEST_TYP, oo as normalizeRelayIssuer, ro as RELAY_MINT_RESPONSE_TYP, so as signRelayJwt, to as RELAY_LINK_PROOF_TYP } from "../shared.js";
+import { _o as verifyRelayJwt, co as RELAY_HEALTH_REQUEST_TYP, do as RELAY_MINT_REQUEST_TYP, fo as RELAY_MINT_RESPONSE_TYP, go as signRelayJwt, ho as normalizeRelayIssuer, lo as RELAY_HEALTH_RESPONSE_TYP, mo as decodeRelayJwt, po as RelayJwtError, so as RELAY_ACTIVITY_PUBLISH_TYP, uo as RELAY_LINK_PROOF_TYP } from "../shared.js";
 export { RELAY_ACTIVITY_PUBLISH_TYP, RELAY_HEALTH_REQUEST_TYP, RELAY_HEALTH_RESPONSE_TYP, RELAY_LINK_PROOF_TYP, RELAY_MINT_REQUEST_TYP, RELAY_MINT_RESPONSE_TYP, RelayJwtError, decodeRelayJwt, normalizeRelayIssuer, signRelayJwt, verifyRelayJwt };

package/dist/shared/relayTracing.js

@@ -1,2 +1,2 @@
-import { Jo as withRelayClientTracing, Ko as RelayClientTracer, qo as makeRelayClientTracingLayer } from "../shared.js";
+import { is as withRelayClientTracing, ns as RelayClientTracer, rs as makeRelayClientTracingLayer } from "../shared.js";
 export { RelayClientTracer, makeRelayClientTracingLayer, withRelayClientTracing };

package/dist/shared/relayUrl.js

@@ -1,2 +1,2 @@
-import { Xa as isSecureRelayUrl, Za as normalizeSecureRelayUrl } from "../shared.js";
+import { ao as isSecureRelayUrl, oo as normalizeSecureRelayUrl } from "../shared.js";
 export { isSecureRelayUrl, normalizeSecureRelayUrl };

package/dist/shared/remote.js

@@ -1,2 +1,2 @@
-import { Ca as readHostedPairingRequest, Ea as stripPairingTokenFromUrl, Sa as readHashParams, Ta as setPairingTokenOnUrl, _a as RemotePairingCodeMissingError, ba as RemotePairingUrlInvalidError, ga as RemoteBackendUrlMissingError, ha as RemoteBackendUrlInvalidError, va as RemotePairingTargetError, wa as resolveRemotePairingTarget, xa as getPairingTokenFromUrl, ya as RemotePairingTokenMissingError } from "../shared.js";
+import { Aa as readHashParams, Ca as RemoteBackendUrlInvalidError, Da as RemotePairingTokenMissingError, Ea as RemotePairingTargetError, Ma as resolveRemotePairingTarget, Na as setPairingTokenOnUrl, Oa as RemotePairingUrlInvalidError, Pa as stripPairingTokenFromUrl, Ta as RemotePairingCodeMissingError, ja as readHostedPairingRequest, ka as getPairingTokenFromUrl, wa as RemoteBackendUrlMissingError } from "../shared.js";
 export { RemoteBackendUrlInvalidError, RemoteBackendUrlMissingError, RemotePairingCodeMissingError, RemotePairingTargetError, RemotePairingTokenMissingError, RemotePairingUrlInvalidError, getPairingTokenFromUrl, readHashParams, readHostedPairingRequest, resolveRemotePairingTarget, setPairingTokenOnUrl, stripPairingTokenFromUrl };

package/dist/shared/schemaYaml.js

@@ -1,5 +1,5 @@
 import { a as __toESM } from "../rolldown-runtime.js";
-import { DD as transformOrFail, ED as Transformation, PD as InvalidValue, PO as try_, QT as String, Uk as none, jT as require_dist, rE as decodeTo } from "../shared.js";
+import { Lk as String, SA as InvalidValue, Uk as decodeTo, fA as Transformation, kM as try_, pA as transformOrFail, pk as require_dist } from "../shared.js";
 //#region upstream-t3code/packages/shared/src/schemaYaml.ts
 var import_dist = /* @__PURE__ */ __toESM(require_dist(), 1);
 function formatYamlParseError(error) {
@@ -34,7 +34,7 @@ function formatYamlParseError(error) {
 function parseYaml(options) {
 	return transformOrFail((input) => try_({
 		try: () => (0, import_dist.parse)(input, options),
-		catch: (error) => new InvalidValue(none(), { message: formatYamlParseError(error) })
+		catch: (error) => new InvalidValue({ message: formatYamlParseError(error) })
 	}));
 }
 /**
@@ -63,7 +63,7 @@ function parseYaml(options) {
 function stringifyYaml(options) {
 	return transformOrFail((input) => try_({
 		try: () => (0, import_dist.stringify)(input, options),
-		catch: () => new InvalidValue(none(), { message: "Failed to stringify YAML." })
+		catch: () => new InvalidValue({ message: "Failed to stringify YAML." })
 	}));
 }
 /**

package/dist/shared/semver.js

@@ -7,7 +7,7 @@ function normalizeSemverVersion(version) {
 		const trimmed = segment.trim();
 		if (trimmed.length > 0) segments.push(trimmed);
 	}
-	if (segments.length === 2) segments.push("0");
+	while (segments.length > 0 && segments.length < 3) segments.push("0");
 	return prerelease ? `${segments.join(".")}-${prerelease}` : segments.join(".");
 }
 function parseSemver(value) {