[pull] main from pingdotgg:main

.github/workflows/mobile-showcase-screenshots.yml

@@ -52,6 +52,7 @@ jobs:
             args:
               - --filter=@t3tools/mobile...
               - --filter=@t3tools/scripts...
+              - --filter=t3...
 
       - name: Expose pnpm
         run: |
@@ -100,6 +101,7 @@ jobs:
             args:
               - --filter=@t3tools/mobile...
               - --filter=@t3tools/scripts...
+              - --filter=t3...
 
       - name: Expose pnpm
         run: |

apps/desktop/src/electron/ElectronProtocol.test.ts

@@ -57,7 +57,7 @@ describe("ElectronProtocol", () => {
           assert.equal(yield* Effect.promise(() => response.text()), "ok");
           assert.include(
             response.headers.get("content-security-policy") ?? "",
-            "script-src 'self' 'unsafe-inline' https://clerk.t3.codes https://challenges.cloudflare.com",
+            "script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://clerk.t3.codes https://challenges.cloudflare.com",
           );
           assert.include(
             response.headers.get("content-security-policy") ?? "",
@@ -212,6 +212,7 @@ describe("ElectronProtocol", () => {
     assert.deepEqual(directives["script-src"], [
       "'self'",
       "'unsafe-inline'",
+      "'wasm-unsafe-eval'",
       "https://clerk.t3.codes",
       "https://challenges.cloudflare.com",
     ]);

apps/desktop/src/electron/ElectronProtocol.ts

@@ -71,6 +71,7 @@ export function makeDesktopContentSecurityPolicy(input: DesktopProtocolRegistrat
   const scriptSources = [
     "'self'",
     "'unsafe-inline'",
+    "'wasm-unsafe-eval'",
     ...(clerkOrigin ? [clerkOrigin] : []),
     "https://challenges.cloudflare.com",
   ];

apps/mobile/app.config.ts

@@ -181,6 +181,9 @@ const config: ExpoConfig = {
   ios: {
     icon: variant.assets.iosIcon,
     supportsTablet: true,
+    // Multitasking-capable iPad apps cannot rotate programmatically, so the
+    // showcase capture build requires full screen (see infoPlist below).
+    requireFullScreen: process.env.T3_SHOWCASE_CAPTURE_BUILD === "1",
     bundleIdentifier: iosBundleIdentifier,
     // Pin code signing to the T3 Tools team so non-interactive `expo run:ios`
     // does not fall back to a personal team (which cannot sign app groups,
@@ -197,6 +200,21 @@ const config: ExpoConfig = {
       NSLocalNetworkUsageDescription:
         "Allow T3 Code to connect to T3 Code servers on your local network or tailnet.",
       ITSAppUsesNonExemptEncryption: false,
+      // The App Store screenshot harness rotates the iPad interface from
+      // inside the app (CI denies osascript the Accessibility access that
+      // Simulator menu scripting needs), and iPadOS ignores programmatic
+      // orientation requests for multitasking-capable apps — so the capture
+      // build opts out of multitasking and declares landscape support.
+      ...(process.env.T3_SHOWCASE_CAPTURE_BUILD === "1"
+        ? {
+            "UISupportedInterfaceOrientations~ipad": [
+              "UIInterfaceOrientationPortrait",
+              "UIInterfaceOrientationPortraitUpsideDown",
+              "UIInterfaceOrientationLandscapeLeft",
+              "UIInterfaceOrientationLandscapeRight",
+            ],
+          }
+        : {}),
     },
   },
   android: {

apps/mobile/modules/t3-native-controls/ios/T3NativeControlsModule.swift

@@ -1,5 +1,6 @@
 import ExpoModulesCore
 import Security
+import UIKit
 
 public final class T3NativeControlsModule: Module {
   public func definition() -> ModuleDefinition {
@@ -32,6 +33,50 @@ public final class T3NativeControlsModule: Module {
       return arguments[flagIndex + 1]
     }
 
+    Function("getShowcaseOrientation") { () -> String? in
+      let arguments = ProcessInfo.processInfo.arguments
+      guard
+        let flagIndex = arguments.firstIndex(of: "--showcaseOrientation"),
+        arguments.indices.contains(flagIndex + 1)
+      else {
+        return nil as String?
+      }
+      return arguments[flagIndex + 1]
+    }
+
+    // Rotates the interface without Simulator menu UI scripting, which CI
+    // runners cannot perform (osascript is denied Accessibility access there).
+    AsyncFunction("applyShowcaseOrientation") { (orientation: String) in
+      guard #available(iOS 16.0, *) else { return }
+      let mask: UIInterfaceOrientationMask = orientation == "landscape" ? .landscapeRight : .portrait
+      for case let windowScene as UIWindowScene in UIApplication.shared.connectedScenes {
+        windowScene.requestGeometryUpdate(.iOS(interfaceOrientations: mask)) { error in
+          NSLog("T3NativeControls applyShowcaseOrientation(\(orientation)) failed: \(error)")
+        }
+        for window in windowScene.windows {
+          window.rootViewController?.setNeedsUpdateOfSupportedInterfaceOrientations()
+        }
+      }
+    }.runOnQueue(.main)
+
+    // The geometry request above can fail transiently (for example before the
+    // scene is foreground-active), so callers poll this until it settles.
+    // Screen bounds — not the scene's interface orientation — decide the
+    // answer because they match the captured framebuffer: with iPadOS
+    // windowing active, a floating landscape window still reports a portrait
+    // screen, and screenshots would come out portrait.
+    AsyncFunction("getInterfaceOrientation") { () -> String in
+      guard
+        let windowScene = UIApplication.shared.connectedScenes
+          .compactMap({ $0 as? UIWindowScene })
+          .first
+      else {
+        return "unknown"
+      }
+      let bounds = windowScene.screen.coordinateSpace.bounds
+      return bounds.width > bounds.height ? "landscape" : "portrait"
+    }.runOnQueue(.main)
+
     Function("prepareShowcaseCapture") {
       for itemClass in [kSecClassGenericPassword, kSecClassInternetPassword] {
         SecItemDelete([kSecClass as String: itemClass] as CFDictionary)

apps/mobile/modules/t3-terminal/README.md

@@ -40,7 +40,7 @@ fails, run `xcodebuild -downloadComponent MetalToolchain`.
 ## Rebuilding libghostty-vt for Android
 
 The checked-in Android shared libraries and headers are pinned to the revision recorded in
-`Vendor/libghostty-vt/VERSION`. Set `ANDROID_NDK_HOME` and run:
+`native/libghostty-vt/VERSION` at the repository root. Set `ANDROID_NDK_HOME` and run:
 
 ```bash
 apps/mobile/modules/t3-terminal/scripts/build-libghostty-android.sh

apps/mobile/modules/t3-terminal/THIRD_PARTY_NOTICES.md

@@ -18,13 +18,14 @@ Ghostty's MIT license applies to the vendored framework. Keep this notice in syn
 ## Ghostty / libghostty-vt
 
 The Android terminal renderer vendors upstream `libghostty-vt` shared libraries and C headers.
+The web terminal vendors a WebAssembly build from the same revision and uses the same C ABI.
 
 - Upstream project: https://github.com/ghostty-org/ghostty
 - Vendored revision: `9f62873bf195e4d8a762d768a1405a5f2f7b1697`
 - License: MIT
 
-Ghostty's MIT license applies to the vendored Android libraries. Keep this notice in sync when
-updating `Vendor/libghostty-vt`.
+Ghostty's MIT license applies to the vendored Android and web libraries. Keep this notice and both
+artifacts in sync when updating the repository-root `native/libghostty-vt`.
 
 ## MesloLGS NF (Android terminal font)
 

apps/mobile/modules/t3-terminal/android/src/main/cpp/CMakeLists.txt

@@ -13,7 +13,7 @@ add_library(t3terminal SHARED t3_terminal_jni.cpp)
 
 target_include_directories(
   t3terminal
-  PRIVATE "${CMAKE_CURRENT_SOURCE_DIR}/../../../../Vendor/libghostty-vt/include"
+  PRIVATE "${CMAKE_CURRENT_SOURCE_DIR}/../../../../../../../../native/libghostty-vt/include"
 )
 
 target_link_options(

apps/mobile/modules/t3-terminal/scripts/build-libghostty-android.sh

@@ -4,7 +4,7 @@ set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 MODULE_DIR="$(cd "${SCRIPT_DIR}/.." && pwd)"
-VENDOR_DIR="${MODULE_DIR}/Vendor/libghostty-vt"
+VENDOR_DIR="${MODULE_DIR}/../../../../native/libghostty-vt"
 PATCH_DIR="${SCRIPT_DIR}/libghostty-android-patches"
 
 GHOSTTY_REVISION="${GHOSTTY_REVISION:-9f62873bf195e4d8a762d768a1405a5f2f7b1697}"

apps/mobile/src/features/showcase/ShowcaseCaptureCoordinator.tsx

@@ -9,6 +9,8 @@ import { enqueueThreadOutboxMessage } from "../../state/thread-outbox";
 import { holdEditingQueuedMessage } from "../../state/use-thread-outbox";
 import { useWorkspaceState } from "../../state/workspace";
 import {
+  applyNativeShowcaseOrientation,
+  getNativeShowcaseOrientation,
   getNativeShowcasePairingUrls,
   getNativeShowcaseScene,
   markNativeShowcaseReady,
@@ -47,6 +49,7 @@ export function ShowcaseCaptureCoordinator(props: { readonly pathname: string })
   const [pendingTasksReady, setPendingTasksReady] = useState(false);
   const [requestedScene, setRequestedScene] = useState<ShowcaseScene | null>(null);
   const [readyScene, setReadyScene] = useState<ShowcaseScene | null>(null);
+  const [orientationSettled, setOrientationSettled] = useState(false);
 
   useEffect(() => {
     if (!SHOWCASE_ENABLED || pairingUrls.length > 0) return;
@@ -60,6 +63,25 @@ export function ShowcaseCaptureCoordinator(props: { readonly pathname: string })
     return () => clearInterval(interval);
   }, [pairingUrls.length]);
 
+  useEffect(() => {
+    if (!SHOWCASE_ENABLED || orientationSettled) return;
+    const orientation = getNativeShowcaseOrientation();
+    if (orientation === null) {
+      setOrientationSettled(true);
+      return;
+    }
+
+    let cancelled = false;
+    void retryShowcaseOperation(async () => applyNativeShowcaseOrientation(orientation), {
+      isCancelled: () => cancelled,
+    }).then((applied) => {
+      if (!cancelled && applied) setOrientationSettled(true);
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [orientationSettled]);
+
   useEffect(() => {
     if (!SHOWCASE_ENABLED) return;
 
@@ -182,7 +204,10 @@ export function ShowcaseCaptureCoordinator(props: { readonly pathname: string })
       scene === null ||
       requestedScene === null ||
       scene !== requestedScene ||
-      !hasFixture
+      !hasFixture ||
+      // Never report a scene ready while the capture orientation is still
+      // being applied — a screenshot taken early has the wrong dimensions.
+      !orientationSettled
     ) {
       setReadyScene(null);
       return;
@@ -210,7 +235,7 @@ export function ShowcaseCaptureCoordinator(props: { readonly pathname: string })
       if (renderFrame !== null) cancelAnimationFrame(renderFrame);
       if (readyFrame !== null) cancelAnimationFrame(readyFrame);
     };
-  }, [hasFixture, requestedScene, scene]);
+  }, [hasFixture, orientationSettled, requestedScene, scene]);
 
   if (!SHOWCASE_ENABLED || readyScene === null) return null;
 

apps/mobile/src/features/showcase/nativeShowcaseScene.ts

@@ -3,9 +3,14 @@ import { requireOptionalNativeModule } from "expo";
 export const SHOWCASE_SCENES = ["threads", "thread", "terminal", "review", "environments"] as const;
 export type ShowcaseScene = (typeof SHOWCASE_SCENES)[number];
 
+export type ShowcaseOrientation = "portrait" | "landscape";
+
 interface NativeShowcaseControls {
   readonly getShowcasePairingUrl?: () => string | null;
   readonly getShowcaseScene?: () => string | null;
+  readonly getShowcaseOrientation?: () => string | null;
+  readonly applyShowcaseOrientation?: (orientation: ShowcaseOrientation) => Promise<void>;
+  readonly getInterfaceOrientation?: () => Promise<string>;
   readonly prepareShowcaseCapture?: () => void;
   readonly markShowcaseReady?: (scene: ShowcaseScene) => void;
 }
@@ -59,6 +64,35 @@ export function prepareNativeShowcaseCapture(): void {
   }
 }
 
+export function getNativeShowcaseOrientation(): ShowcaseOrientation | null {
+  try {
+    const orientation = nativeShowcaseControls()?.getShowcaseOrientation?.()?.trim();
+    return orientation === "portrait" || orientation === "landscape" ? orientation : null;
+  } catch {
+    return null;
+  }
+}
+
+export async function applyNativeShowcaseOrientation(
+  orientation: ShowcaseOrientation,
+): Promise<boolean> {
+  const controls = nativeShowcaseControls();
+  if (!controls?.applyShowcaseOrientation || !controls.getInterfaceOrientation) {
+    // A development build that predates this helper keeps its default
+    // orientation; report success so callers do not retry forever.
+    return true;
+  }
+  try {
+    await controls.applyShowcaseOrientation(orientation);
+    // The geometry request settles asynchronously; confirm it took effect so
+    // callers can retry attempts made before the scene was foreground-active.
+    await new Promise((resolve) => setTimeout(resolve, 500));
+    return (await controls.getInterfaceOrientation()) === orientation;
+  } catch {
+    return false;
+  }
+}
+
 export function markNativeShowcaseReady(scene: ShowcaseScene): void {
   try {
     nativeShowcaseControls()?.markShowcaseReady?.(scene);

apps/server/src/bin.ts

@@ -9,6 +9,7 @@ import * as NetService from "@t3tools/shared/Net";
 import packageJson from "../package.json" with { type: "json" };
 import { authCommand } from "./cli/auth.ts";
 import { connectCommand } from "./cli/connect.ts";
+import { pairCommand } from "./cli/pair.ts";
 import { hasCloudPublicConfig } from "./cloud/publicConfig.ts";
 import { sharedServerCommandFlags } from "./cli/config.ts";
 import { projectCommand } from "./cli/project.ts";
@@ -48,6 +49,7 @@ export const makeCli = ({ cloudEnabled = hasCloudPublicConfig } = {}) =>
     Command.withSubcommands([
       startCommand,
       serveCommand,
+      pairCommand,
       authCommand,
       projectCommand,
       serviceCommand,