chore(server): bump device tooling versions

[juliusmarminge]

Update the on-demand device tool installs to expo-device-hub 0.10.1 from 0.9.0 and agent-device 0.21.7 from 0.20.10. Keep the third-party license metadata in sync. The shared pins cover local and SSH device hosts; these tools are installed separately, so there is no workspace lockfile change.

Compatibility review found no required T3 API or CLI changes. Agent-device's removed legacy batch inputs, aggregate perf commands, and SDK rotate wrapper are not used by T3. The hub now defaults to 60 FPS and Android RGB888 capture; T3 inherits those defaults, so streaming resource use remains a live-device verification consideration.

Validation: 27 tests passed across toolchain installation, SSH scripts, local/SSH hosts, target configuration, proxy rules, and MCP handlers. Targeted lint and git diff --check passed. Reviewed upstream release changes and published package entry points and runtime requirements. Live-device streaming was not tested. Screenshots are not applicable to this version-pin change.

Model: GPT-6. Harness: Codex.

---

Summary by CodeRabbit

• Chores
  • Updated the device tooling versions used by the application.
  • Updated the corresponding third-party license records to reflect the newer versions.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: pingdotgg/t3code/.coderabbit.yaml

Review profile: CHILL

Plan: Team

Run ID: c8a77347-0460-43e7-9870-2c10be18c5b7

📥 Commits

Reviewing files that changed from the base of the PR and between 9f73ca3 and 39367ff.

📒 Files selected for processing (2)

• apps/server/src/device/DeviceToolchain.ts
• third-party-licenses.config.json

Included review availability: Your plan provides up to 10 included reviews per hour; 6 remain after this review.

---

📝 Walkthrough

Walkthrough

The device toolchain pins newer versions of expo-device-hub and agent-device. The third-party license configuration records the same versions.

Changes

Device tool version updates

Layer / File(s)	Summary
Update device tool versions apps/server/src/device/DeviceToolchain.ts, third-party-licenses.config.json	The pinned expo-device-hub version changed from 0.9.0 to 0.10.1. The pinned agent-device version changed from 0.20.10 to 0.21.7. The license configuration records both updates.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and concisely describes the main change: updating server device tooling versions.
Description check	✅ Passed	The description clearly explains the version updates, rationale, compatibility review, validation results, and why UI screenshots are not applicable. It does not reproduce the template headings or che…
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 1…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	13.5 KiB	13.5 KiB	+30 B (+0.2%)	15.1 KiB	✅
Codex	Thread snapshot wire	7.1 KiB	7.1 KiB	−1 B (−0.0%)	7.3 KiB	✅
Codex	Live turn WebSocket wire	6.4 KiB	6.5 KiB	+31 B (+0.5%)	7.8 KiB	✅
Codex	Live turn WebSocket decoded	56.2 KiB	56.3 KiB	+44 B (+0.1%)	66.4 KiB	✅
Codex	Live turn messages	9	10	+1 (+11.1%)	21	✅
Claude	Total thread wire	13.5 KiB	13.5 KiB	−23 B (−0.2%)	15.1 KiB	✅
Claude	Thread snapshot wire	7.1 KiB	7.1 KiB	−5 B (−0.1%)	7.3 KiB	✅
Claude	Live turn WebSocket wire	6.5 KiB	6.4 KiB	−18 B (−0.3%)	7.8 KiB	✅
Claude	Live turn WebSocket decoded	57.0 KiB	57.0 KiB	0 B (0.0%)	66.4 KiB	✅
Claude	Live turn messages	9	9	0 (0.0%)	21	✅

Baseline: 9f73ca3 · PR result: 39367ff · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 113.9 KiB
• Claude decoded thread snapshot: 114.6 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.

[macroscopeapp]

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — The updated pins change the external device tools used by existing local and SSH device workflows, including streaming defaults that affect live-device resource usage. Live-device behavior was not validated, so the runtime impact warrants human review.

^{You can add or adjust custom eligibility rules. Learn more.}