chore(v2): merge main into the V2 branch

[juliusmarminge]

V2 (t3code/codex-turn-mapping) was 16 commits behind main. This merges origin/main (a3abb52) into V2 (a2ca40a), V2 as first parent. The merge commit only resolves conflicts.

What came in

• Expo SDK 58 + React Native 0.88 RC (chore(mobile): upgrade to Expo SDK 58 and React Native 0.88 RC #12045) and the mobile stack on top: Android subscription widget via expo-widgets (feat(mobile): render the Android subscription widget with expo-widgets #12046), stale Live Activity degrade (feat(mobile): degrade the agent Live Activity once its content goes stale #12047), alerts stacked by thread (feat(notifications): stack agent alerts by thread on both platforms #12048), dev-menu suppression via launch URL (chore(mobile): drive dev-menu suppression from the dev-client launch URL #12049), scene-based display scale (fix(mobile): read display scale and width from the view's scene, not UIScreen.main #12050), Expo Modules 2.0 members (refactor(mobile): adopt Expo Modules 2.0 for function-only native members #12051), Android on-screen thread alert suppression (feat(mobile): suppress only the on-screen thread's alert on Android #12052).
  • The native fingerprint changes. A new V2 mobile preview needs a fresh native build; an existing dev client won't load this JS.
• fix: cloned projects show their favicon instead of a monogram #14635 cloned-project favicon: ws.ts, AssetAccess.ts, client-runtime assets.ts, web/mobile clone state.
• docs: server features are services, and handlers stay thin #14613 docs: AGENTS.md, docs/internals/effect-services.md, macroscope check. Taken as-is.
• fix(desktop): agent clicks in the browser no longer pop Save dialogs #14573 desktop Save-dialog fix, fix(ci): pin eas-cli so mobile PR previews deploy again #14659 eas-cli pin, test(web): remove duplicate sidebar ordering tests #14558 web test dedupe, docs: update user count in AGENTS.md #11413 / marketing stats / feat(marketing): replace the screenshot crop with a designed social card #13487 social card. Taken as-is.

Conflicts and how they were resolved

• apps/server/src/server.test.ts (fix: cloned projects show their favicon instead of a monogram #14635 added a case): V2 deleted this V1 router-seam suite in 59ceaa9, so it stays deleted.
• apps/server/src/ws.ts (textually clean, but it didn't typecheck): main's favicon hunk reads project.value.id. V2's project record has projectId, so the merge uses project.value.projectId. Otherwise V2's ws.ts is unchanged.
• apps/web/src/components/Sidebar.logic.test.ts (test(web): remove duplicate sidebar ordering tests #14558): kept V2's file and applied main's dedupe. That drops the sortThreadsForSidebar and planPinnedReorder blocks, which were byte-identical to the merge base and are covered by client-runtime's threadSort.test.ts. Main's drag-and-drop describe blocks stay out because V2 removed them earlier (c4bcd1e).
• infra/relay/src/agentActivity/FcmDeliveries.test.ts (feat(notifications): stack agent alerts by thread on both platforms #12048): took main's new expectation (grouped alerts route to /) with V2's namespace import (FcmDeliveries.FcmDeliveries). Also namespaced the slash-identifier test that came in during the merge.
• pnpm-workspace.yaml / pnpm-lock.yaml (chore(mobile): upgrade to Expo SDK 58 and React Native 0.88 RC #12045): took main's SDK 58 overrides and kept V2's @opencode/{protocol,schema}>effect pins. Both sides edited the @react-native-menu/menu patch in separate hunks, so the merged patch gets a fresh hash from vp i.
• third-party-licenses.config.json: kept V2's OpenCode entry and main's noxcturnal entries.

No V2-only mobile code broke against SDK 58 types, so there is no fix commit on top.

Verification

• vp i: clean install.
• tsc --noEmit -p ., all exit 0: apps/server (after the projectId fix above), apps/web, apps/mobile, apps/desktop, packages/contracts, packages/client-runtime, packages/shared.
• packages/client-runtime src/state/assets.test.ts: 21/21 passed.
• apps/server AssetAccess.test.ts, ws.test.ts, ProjectCloneTracker.test.ts, run inside unshare -U --map-current-user -p -f --mount-proc: 45/45 passed.
• infra/relay FcmDeliveries.test.ts + ApnsClient.test.ts: 56/56 passed.
• apps/web Sidebar.logic.test.ts: 134/134 passed.
• vp lint on the conflicted/touched files: exit 0. The only warnings (unused imports in ws.ts, react refs in Sidebar.logic.ts) were already on V2.
• vp run knip:check: exit 0, no findings (both passes).
• Grepped the diff for sk-or- and crsr_: no hits.

Left over

• Main's new favicon test lived in server.test.ts, which V2 doesn't have. V2 also has no WS-level harness that drives assets.createUrl with a clone in flight, so that case is not ported. The code path compiles and the AssetAccess tests pass, but nothing on V2 exercises "a lookup during a clone doesn't cache a miss".
• Mobile was checked by typecheck only. No native build or device run.

Model: Claude Opus 5.5 (Claude Code)

🤖 Generated with Claude Code

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

ℹ️ No successful main baseline artifact is available yet. This run establishes the initial measurement.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	—	4.9 KiB	—	6.8 KiB	✅
Codex	Thread snapshot wire	—	3.7 KiB	—	4.9 KiB	✅
Codex	Live turn WebSocket wire	—	1.2 KiB	—	2.0 KiB	✅
Codex	Live turn WebSocket decoded	—	20.4 KiB	—	29.3 KiB	✅
Codex	Live turn messages	—	2	—	8	✅
Claude	Total thread wire	—	4.9 KiB	—	6.8 KiB	✅
Claude	Thread snapshot wire	—	3.7 KiB	—	4.9 KiB	✅
Claude	Live turn WebSocket wire	—	1.2 KiB	—	2.0 KiB	✅
Claude	Live turn WebSocket decoded	—	20.8 KiB	—	29.3 KiB	✅
Claude	Live turn messages	—	2	—	8	✅

Baseline: unavailable · PR result: 1485e01 · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 106.1 KiB
• Claude decoded thread snapshot: 106.4 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.

[macroscopeapp]

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — This merge includes a major Expo/React Native platform upgrade, new Android widget and alarm functionality, notification and desktop runtime behavior changes, and product-default changes across mobile. It also modifies Macroscope configuration, so the scope and review-control impact require human review.

^{Adjust the Minimum Blocking Severity for this repo — including turning it Off — in Settings. You can add or adjust custom eligibility rules. Learn more.}