Fix Command Center chats on native desktop hosts by awtprod · Pull Request #9 · awtprod/t3-code

awtprod · 2026-08-01T23:34:30Z

Summary

enable user-started Command Center Codex chats on native macOS and Windows hosts
keep scheduled and unattended Command Center automation restricted to verified Linux hosts
add Windows elevated sandbox setup with a strict, live-verified unelevated fallback
add native runtime validation and cross-platform filesystem, secret, Git, and network isolation probes
surface actionable startup failures without exposing raw stack traces
document the behavior and add focused macOS/Windows CI coverage

Root cause

Command Center treated every cc: task as an unattended run and rejected all non-Linux Codex dispatch before session startup. That conflated interactive chats with automation and prevented the native Codex sandbox capabilities on Windows and macOS from being used.

Impact

After rebuilding or installing this version, newly started Command Center chats can run natively on Windows and macOS without WSL. Existing legacy cc: task IDs remain fail-closed on non-Linux hosts because their execution class cannot be safely inferred.

Validation

157 focused tests across provider isolation, Codex runtime/adapter, dispatch, acceptance, and error presentation
focused lint passed
server typecheck passed
formatting and git diff --check passed

) Co-authored-by: Shoaib Ansari <shoaibansari@Shoaibs-Mac-mini.local> Co-authored-by: Julius Marminge <julius0216@outlook.com>

…otgg#2093) Co-authored-by: Julius Marminge <julius0216@outlook.com>

Co-authored-by: Julius Marminge <julius0216@outlook.com> Co-authored-by: Julius Marminge <jmarminge@gmail.com> Co-authored-by: root <root@localhost.localdomain>

…pingdotgg#3159) Co-authored-by: Julius Marminge <julius0216@outlook.com>

Co-authored-by: codex <codex@users.noreply.github.com>

Co-authored-by: Julius Marminge <julius0216@outlook.com> Co-authored-by: codex <codex@users.noreply.github.com>

…tgg#4163) Co-authored-by: codex <codex@users.noreply.github.com>

Co-authored-by: codex <codex@users.noreply.github.com>

…tarting an empty one (pingdotgg#3617) Co-authored-by: codex <codex@users.noreply.github.com>

…rver (pingdotgg#4153)

…gdotgg#3869) Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Signed-off-by: Yordis Prieto <yordis.prieto@gmail.com>

Co-authored-by: Rhiz3K <rhiz3k@protonmail.com> Co-authored-by: Julius Marminge <julius0216@outlook.com>

…otgg#4140) Co-authored-by: Julius Marminge <julius0216@outlook.com> Signed-off-by: Yordis Prieto <yordis.prieto@gmail.com>

Co-authored-by: Julius Marminge <julius0216@outlook.com> Co-authored-by: codex <codex@users.noreply.github.com>

…up (pingdotgg#4177) Co-authored-by: codex <codex@users.noreply.github.com> Co-authored-by: Julius Marminge <julius0216@outlook.com>

…g#4113) Co-authored-by: Julius Marminge <julius0216@outlook.com>

Co-authored-by: codex <codex@users.noreply.github.com>

…#4217) Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

…om origin main (pingdotgg#4240) Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

…arning rows (pingdotgg#4244) Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

…cle (pingdotgg#4026) Co-authored-by: Claude Fable 5 <noreply@anthropic.com> Co-authored-by: maria-rcks <maria@kuuro.net>

…pingdotgg#2813) (pingdotgg#3100) Co-authored-by: Julius Marminge <julius0216@outlook.com> Co-authored-by: codex <codex@users.noreply.github.com>

…g#4015) Co-authored-by: codex <codex@users.noreply.github.com>

…yout (pingdotgg#5066)

…ngdotgg#4955) Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

…dotgg#5095) Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

…pingdotgg#5094) Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

…oot (pingdotgg#5102) Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Co-authored-by: T3 Code Test <t3code-test@example.com>

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

…7f848 # Conflicts: # .github/workflows/ci.yml # apps/server/src/orchestration/Layers/ProviderCommandReactor.test.ts # apps/server/src/provider/Layers/CodexSessionRuntime.test.ts # apps/server/src/provider/security/CommandCenterProviderIsolation.test.ts

tris203 and others added 30 commits July 20, 2026 08:43

fix: delegate OpenCode session titles to provider (pingdotgg#3720)

3235658

Archive selected threads from the context menu (pingdotgg#3895)

df65a6c

fix(cli): support force removing projects (pingdotgg#3922)

5fcfe24

fix: allow sidebar to be shrunk when wider than viewport (pingdotgg#2456

d266c06

) Co-authored-by: Shoaib Ansari <shoaibansari@Shoaibs-Mac-mini.local> Co-authored-by: Julius Marminge <julius0216@outlook.com>

fix(codex): show web search query and url in tool call details (pingd…

33f1cb4

…otgg#2093) Co-authored-by: Julius Marminge <julius0216@outlook.com>

Add Codex launch arguments setting (pingdotgg#2892)

40c0ab0

Co-authored-by: Julius Marminge <julius0216@outlook.com> Co-authored-by: Julius Marminge <jmarminge@gmail.com> Co-authored-by: root <root@localhost.localdomain>

[orchestration] Clear stale active turn when session becomes inactive (…

501ce27

…pingdotgg#3159) Co-authored-by: Julius Marminge <julius0216@outlook.com>

Regenerate Codex reset credit protocol bindings (pingdotgg#4173)

08993a5

Co-authored-by: codex <codex@users.noreply.github.com>

fix(preview): preserve direct localhost navigation (pingdotgg#3939)

2fae0d0

Co-authored-by: Julius Marminge <julius0216@outlook.com> Co-authored-by: codex <codex@users.noreply.github.com>

Synchronize mobile threads with authoritative shell snapshots (pingdo…

8e3467f

…tgg#4163) Co-authored-by: codex <codex@users.noreply.github.com>

Gate iOS glass layout on native support (pingdotgg#4032)

b6d9ce3

Co-authored-by: codex <codex@users.noreply.github.com>

fix(opencode): resume the OpenCode session on follow-ups instead of s…

f4da4f3

…tarting an empty one (pingdotgg#3617) Co-authored-by: codex <codex@users.noreply.github.com>

fix(server): use CLI for OpenCode health check instead of spawning se…

0ca3240

…rver (pingdotgg#4153)

fix(web): scope timeline minimap hover target to the side gutter (pin…

946b867

…gdotgg#3869) Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

[codex] show complete approval details (pingdotgg#4111)

a135f2c

fix(web): paint text selection over composer chips (pingdotgg#4139)

c710167

Signed-off-by: Yordis Prieto <yordis.prieto@gmail.com>

[codex] preserve custom model slugs (pingdotgg#4168)

fa69f05

fix(web): preview workspace images in the file panel (pingdotgg#3996)

0936fd2

Co-authored-by: Rhiz3K <rhiz3k@protonmail.com> Co-authored-by: Julius Marminge <julius0216@outlook.com>

feat(web): drag files from the explorer into the chat composer (pingd…

8ca4eec

…otgg#4140) Co-authored-by: Julius Marminge <julius0216@outlook.com> Signed-off-by: Yordis Prieto <yordis.prieto@gmail.com>

fix(desktop): preserve main window bounds (pingdotgg#3851)

2c199aa

Co-authored-by: Julius Marminge <julius0216@outlook.com> Co-authored-by: codex <codex@users.noreply.github.com>

perf(orchestration): speed up new-chat propagation and offline catch-…

db4b2d8

…up (pingdotgg#4177) Co-authored-by: codex <codex@users.noreply.github.com> Co-authored-by: Julius Marminge <julius0216@outlook.com>

Finale: upgrade changed files card to fix various UI issues (pingdotg…

c8a04bd

…g#4113) Co-authored-by: Julius Marminge <julius0216@outlook.com>

Pass CLI OAuth config to hosted web deploy (pingdotgg#4186)

5d34f9f

Co-authored-by: codex <codex@users.noreply.github.com>

fix(web): always show environment chip for remote projects (pingdotgg…

c0bb237

…#4217) Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

fix(web): keep composer editable while disconnected (pingdotgg#4241)

23c18fd

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

fix: better defaults — Claude 1M context, Codex gpt-5.6, worktrees fr…

62cf461

…om origin main (pingdotgg#4240) Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

fix(claude): handle all SDK stream messages; stop spurious work-log w…

6f34ad3

…arning rows (pingdotgg#4244) Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Sidebar v2 beta: flat thread list with a server-backed settled lifecy…

32c6012

…cle (pingdotgg#4026) Co-authored-by: Claude Fable 5 <noreply@anthropic.com> Co-authored-by: maria-rcks <maria@kuuro.net>

fix(settings): validate the add-provider wizard step before advancing (…

282ecb3

…pingdotgg#2813) (pingdotgg#3100) Co-authored-by: Julius Marminge <julius0216@outlook.com> Co-authored-by: codex <codex@users.noreply.github.com>

fix(claude): isolate capability probe from user MCP servers (pingdotg…

aa5ec80

…g#4015) Co-authored-by: codex <codex@users.noreply.github.com>

mwolson and others added 23 commits July 31, 2026 11:45

fix(oxlint-plugin): Resolve the oxlint bin without assuming a pnpm la…

894d6d6

…yout (pingdotgg#5066)

feat(cli): npx t3 pair - generate QR code from a running server (pi…

61514c1

…ngdotgg#4955) Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

fix(server): self-update no longer rolls itself back on restart (ping…

ef4ec2a

…dotgg#5095) Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

fix(ci): rotate iPad showcase captures without Simulator UI scripting (…

ab8182c

…pingdotgg#5094) Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

feat(web): render terminals with libghostty-vt (pingdotgg#4860)

acf761b

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

refactor: move the canonical libghostty-vt vendor to the repository r…

964cc27

…oot (pingdotgg#5102) Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

feat(mobile): add thread snoozing (pingdotgg#5053)

a041981

feat(mobile): make settled threads collapsible (pingdotgg#5056)

916cff7

follow-up normalization after pingdotgg#4700. (pingdotgg#4498)

03adf21

Co-authored-by: T3 Code Test <t3code-test@example.com>

feat(web): search threads from the sidebar (pingdotgg#4769)

bfc3150

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

feat(release): prepare Command Center desktop v1

96dd1a0

fix(ci): allow public release publisher identity

2ef0cb4

fix(web): avoid Windows preview path collision

2743988

test(release): reject Windows module path collisions

581d86c

fix(release): bundle command center core

650e977

feat: integrate t3 code upstream bfc3150

ea38beb

fix: audit preserved upstream history safely

87d15f3

feat(providers): add Kimi, subagents, and usage analytics

3ba2c73

fix(ci): repair reconnects and PNG safety scanning

6c8879f

test(desktop): update Clerk environment fixture

ebfc3d2

fix(ci): align provider and server integration contracts

4e7a488

perf(web): skip impossible image encodings

2c8f3b6

fix command center chats on native desktop hosts

693d64f

github-actions Bot added vouch:trusted PR author is trusted by repo permissions or the VOUCHED list. size:XXL labels Aug 1, 2026

github-actions Bot added size:XL and removed size:XXL labels Aug 1, 2026

awtprod marked this pull request as ready for review August 1, 2026 23:43

awtprod merged commit 1a6f364 into main Aug 2, 2026
17 of 18 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Fix Command Center chats on native desktop hosts - #9

Fix Command Center chats on native desktop hosts#9
awtprod merged 260 commits into
mainfrom
upstream-sync/bfc31507f848

awtprod commented Aug 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

Conversation

awtprod commented Aug 1, 2026

Summary

Root cause

Impact

Validation

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants