chore(sync): reset mobile to upstream and ship PseudoCode 0.0.74

.agents/skills/ship-pseudocode/SKILL.md

@@ -20,9 +20,9 @@ One command each. Both run from anywhere in the repo.
 .agents/skills/ship-pseudocode/scripts/ship-ios.sh          # TestFlight upload
 ```
 
-The scripts handle the parts that are easy to get wrong: they pick Node 24, put `/usr/bin` ahead of
-Homebrew, export the branding variables the desktop build needs, bump the iOS build number, build
-the voice artifacts that are not in git, pass the signing team to every target, and verify the
+The scripts handle the parts that are easy to get wrong: they pick Node 26, put `/usr/bin` ahead of
+Homebrew, export the branding variables the desktop build needs, bump the iOS build number, pass
+the signing team to every target, and verify the
 result before claiming success.
 
 `ship-mac.sh` ends with `spctl` reporting `source=Notarized Developer ID`, then publishes the DMG to
@@ -121,7 +121,7 @@ been done.
 
 | Symptom                                       | Cause                                                                                                                                                              |
 | --------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
-| `ERR_UNKNOWN_FILE_EXTENSION ".ts"`            | Node 20 on PATH. The ship scripts pick Node 24; a hand-run command must too.                                                                                       |
+| `ERR_UNKNOWN_FILE_EXTENSION ".ts"`            | Node 20 on PATH. The ship scripts pick Node 26; a hand-run command must too.                                                                                       |
 | `command not found: vp`                       | `node_modules/.bin` missing from PATH.                                                                                                                             |
 | App bundle named `T3 Code.app`                | `T3CODE_APP_NAME` not exported for the desktop build.                                                                                                              |
 | `skipped macOS notarization`                  | No notarytool keychain profile named `pseudocode`. `ROTATION.md` step 6.                                                                                           |
@@ -131,7 +131,6 @@ been done.
 | App Store Connect rejects the upload          | Build number already used. `ship-ios.sh` raises it; a hand-run archive does not.                                                                                   |
 | `requires a development team` on an extension | Expo writes `appleTeamId` onto the app target only. `ship-ios.sh` passes `DEVELOPMENT_TEAM` to every target; a hand-run archive must too.                          |
 | duplicate `.xcframework-ios.signature`        | A binary target inside a pod's SwiftPM dependency. Its signature is collected twice and both copy into one Signatures folder. Pin below the release that added it. |
-| missing `llama.xcframework` or bundled model  | The voice artifacts are gitignored. `ship-ios.sh` builds them; a hand-run archive must run the two scripts in `apps/mobile/modules/t3-voice/scripts/`.             |
 | macOS refuses to open the DMG elsewhere       | Signed but not notarized.                                                                                                                                          |
 | `Failed to create release, "workflow" scope`  | `gh` resolved to the `upstream` remote, where this account has read only. The script passes `--repo` derived from `origin`.                                        |
 | Release tag and DMG filename disagree         | The version bump missed `apps/server/package.json`.                                                                                                                |

.agents/skills/ship-pseudocode/scripts/_common.sh

@@ -5,15 +5,16 @@ repo_root() {
 }
 
 # /usr/bin first: Xcode's export step passes rsync flags only Apple's rsync accepts.
-# Node 24: the build scripts are TypeScript that Node strips types from directly.
+# Node 26, the version package.json pins: the build scripts are TypeScript that Node strips types from.
 setup_path() {
-  local root="$1" node24
-  node24="$(ls -d "$HOME"/.nvm/versions/node/v24.* 2>/dev/null | sort -V | tail -1)"
-  if [ -z "$node24" ]; then
-    echo "Node 24 is required. Install it with: nvm install 24" >&2
+  local root="$1" node26
+  node26="$(ls -d "$HOME"/.nvm/versions/node/v26.* 2>/dev/null | sort -V | tail -1 || true)"
+  [ -n "$node26" ] || node26="$(brew --prefix node@26 2>/dev/null || true)"
+  if [ -z "$node26" ] || [ ! -x "$node26/bin/node" ]; then
+    echo "Node 26 is required. Install it with: brew install node@26" >&2
     exit 1
   fi
-  export PATH="/usr/bin:$node24/bin:$root/node_modules/.bin:$PATH"
+  export PATH="/usr/bin:$node26/bin:$root/node_modules/.bin:$PATH"
 }
 
 # Branding and identifiers live in .env.local. The desktop build reads T3CODE_APP_NAME and

.agents/skills/ship-pseudocode/scripts/ship-ios.sh

@@ -33,14 +33,6 @@ else
 fi
 export T3CODE_IOS_BUILD_NUMBER="$NEXT"
 
-# On-device dictation links a llama.cpp xcframework and ships a speech model
-# inside the app. Both are built or fetched by these scripts and neither is in
-# git, so a fresh clone has an app that will not link. Both no-op when the
-# artifact is already present at the pinned version.
-echo "Preparing voice artifacts"
-bash apps/mobile/modules/t3-voice/scripts/fetch-bundled-model.sh
-bash apps/mobile/modules/t3-voice/scripts/build-llama-xcframework.sh
-
 APP="$T3CODE_APP_NAME"
 cd apps/mobile
 mkdir -p build

.github/scripts/ci-changes.cjs

@@ -1,37 +1,24 @@
-// Decides which CI jobs a change needs. Prints `key=value` lines for
-// $GITHUB_OUTPUT; a job runs unless its key is "false".
-//
-//   node ci-changes.cjs --paths <file>          gate by the listed paths
-//   node ci-changes.cjs --paths <file> --full   run every Linux job, gate only the macOS lint
-//   node ci-changes.cjs                         changed paths unknown: run everything
-//
-// scripts/check-changed.ts requires the same decisions so local runs match CI.
-//
-// Every changed path maps to workspace packages, which then pull in their
-// dependents from package.json. A path this file does not recognize runs
-// everything, so a new root file or directory can only cost minutes.
+// Unknown paths run every job; recognized packages pull in their dependents.
+// scripts/check-changed.ts shares these decisions so local checks match CI.
 const fs = require("node:fs");
 const path = require("node:path");
 
 const root = path.resolve(__dirname, "../..");
 
-// Never read by a build, typecheck, or test. Lint still formats them.
 const INERT = [
   /^docs\//,
   /^\.(agents|cursor|vscode|devcontainer|macroscope|repos)\//,
   /^[^/]+\.md$/,
   /^LICENSE$/,
 ];
 
-// Run everything: the root vite.config.ts loads the first as setup for every
-// package's tests, and the vendored mobile tarballs are installed dependencies.
+// Shared test setup and vendored mobile dependencies affect every package.
 const RUNS_EVERYTHING = [
   /^packages\/shared\/src\/(HostProcess|testing\/longTempDir)\.ts$/,
   /^apps\/mobile\/deps\//,
 ];
 
-// Paths outside a package, or files inside one that other packages read
-// through relative imports rather than a package.json dependency.
+// Includes cross-package reads absent from package.json dependencies.
 const EXTRA_OWNERS = [
   // Vite configs and tsconfigs of these apps import scripts/lib directly.
   [/^scripts\/lib\//, ["@t3tools/desktop", "@t3tools/mobile", "@t3tools/web", "t3"]],
@@ -43,9 +30,7 @@ const EXTRA_OWNERS = [
 ];
 const RUST = /^native\/(resource-monitor|kde-snap-shot|hyprland-snap-shot)\//;
 
-// Tests that read another package's files without declaring it. The scripts
-// tests read app manifests, assets, and sources (cursor-sdk-packaging,
-// third-party-licenses, brand-assets, build-desktop-artifact).
+// These tests read other packages without declaring dependencies.
 const TEST_ONLY_DEPS = {
   "@t3tools/provider-pi": ["@t3tools/client-runtime"],
   "@t3tools/scripts": [
@@ -56,17 +41,12 @@ const TEST_ONLY_DEPS = {
     "@t3tools/provider-cursor",
   ],
 };
-// Declared dependencies that only feed a build step: the server bundles the
-// built web app (apps/server/vite.config.ts) but never imports it.
+// The server bundles the web build without importing it.
 const BUILD_ONLY_DEPS = { t3: ["@t3tools/web"] };
 
-// Sources scripts/mobile-native-static-check.ts lints, plus the tool and rule
-// configuration that decides how it lints them, plus the root package.json
-// that defines the lint:mobile command.
 const MOBILE_NATIVE =
   /^apps\/mobile\/.*\.(swift|kt|kts)$|^apps\/mobile\/(\.swiftlint\.yml|detekt\.yml|\.editorconfig|Brewfile)$|^scripts\/mobile-native-static-check\.ts$|^package\.json$|^\.github\/workflows\/ci\.yml$|^\.github\/scripts\/ci-changes\.cjs$|^\.github\/actions\/ci-changes\//;
 
-// Jobs that test every package except these, which have jobs of their own.
 const OWN_TEST_JOB = new Set(["t3", "@t3tools/web", "@t3tools/monorepo"]);
 
 function readWorkspace() {
@@ -108,8 +88,7 @@ function readWorkspace() {
   return packages;
 }
 
-// Returns the packages a path touches, [] for an inert path, or null when the
-// path is not understood and everything must run.
+// [] means inert; null means unknown and requires every job.
 function ownersOf(file, packages) {
   if (INERT.some((pattern) => pattern.test(file))) return [];
   // A manifest can change dependencies or versions other packages read.
@@ -148,7 +127,6 @@ function decide(files, packages, full) {
   if (everything) {
     affected = all;
   } else {
-    // Add dependents until nothing changes.
     let grew = true;
     while (grew) {
       grew = false;

.github/scripts/mirror-play-apk.cjs

@@ -1,7 +1,4 @@
-// Publishes closed-testing betas, or downloads the internal APK for a normal
-// nightly release. Play generates and signs the APK from the
-// uploaded bundle with the app signing key, so it carries the same signature
-// as the Play Store install. Run by .github/workflows/mobile-android-apk.yml.
+// Play signs generated APKs with the app signing key, matching Play Store installs.
 const { execFileSync } = require("node:child_process");
 const crypto = require("node:crypto");
 const fs = require("node:fs");
@@ -50,10 +47,7 @@ async function play(token, method, url) {
   return response;
 }
 
-// Highest version code the track serves, with its release name. Play names a
-// release after the bundle's versionName unless the uploader sets one. This
-// endpoint reads without opening an edit; an edit would invalidate any open
-// EAS Submit edit made with the same service account.
+// Opening an edit would invalidate any EAS Submit edit using the same service account.
 async function newestTrackBuild(token, appUrl, trackName) {
   const { releases = [] } = await (
     await play(token, "GET", `${appUrl}/tracks/${trackName}/releases`)
@@ -82,8 +76,7 @@ function readRelease(tag) {
   }
 }
 
-// Download to a temporary directory so a failed request cannot leave a partial
-// APK among the release assets.
+// Stage downloads so failed requests cannot leave partial release assets.
 async function downloadApk({ token, appUrl, build, apkName }) {
   const generated = await (
     await play(token, "GET", `${appUrl}/generatedApks/${build.versionCode}`)

.github/scripts/stage-preview-bundle.py

@@ -12,8 +12,7 @@
     "server/dist/client/index.html",
     "desktop/dist-electron/main.cjs",
 }
-# The current bundle is about 32 MiB compressed. Bound extraction on the
-# trusted runner even when the PR replaces the uploader entirely.
+# Bound trusted-runner extraction even when a PR replaces the uploader.
 MAX_ARCHIVE_BYTES = 512 * 1024 * 1024
 MAX_EXPANDED_BYTES = 2 * 1024 * 1024 * 1024
 MAX_ENTRIES = 50_000
@@ -58,9 +57,7 @@ def stage_bundle(archive: Path, destination: Path):
                 files.add(name)
         if not REQUIRED_FILES <= files:
             raise ValueError("Preview bundle is missing required entry points")
-        # Validate all names before writing anything. This is a fresh directory
-        # outside the checkout; neither pre-existing links nor trusted files
-        # can be followed or overwritten. ZIP permissions are never restored.
+        # Validate before writing into a fresh directory so existing links/files cannot be followed or overwritten.
         destination.mkdir(parents=True, exist_ok=False)
         for entry in entries:
             target = destination / entry.filename

.github/scripts/thread-transfer-report.cjs

@@ -294,8 +294,7 @@ async function resolve({ github, context, core }) {
 
   const sourceArtifacts = await artifactsForRun(github, owner, repo, source.id);
   const sourceArtifact = findResultArtifact(sourceArtifacts);
-  // CI requires the artifact whenever the server tests run, so a passing run
-  // without one skipped them because the PR cannot affect the server.
+  // Successful server tests require this artifact; its absence means CI skipped them.
   if (!sourceArtifact && source.conclusion === "success") {
     core.info("CI skipped the server tests for this change; nothing to report.");
     core.setOutput("publish", "false");