PR: https://git.cafe/pingdotgg/t3code/pulls/21650
Main: 570d4b03ee (github/main fetched this turn)
PR head: 6e037808389b02b77fcf5190db2f71ff0c579bc5

Main:
$ git worktree add ../main github/main
$ vp i
$ setsid nohup vp run dev > /tmp/main-dev.log 2>&1 &
[dev-runner] serverPort=16733 webPort=8693 baseDir=/home/user/main/.t3

Both checkouts: enabled public production configuration from .env.example.
Playwright 1.60.0 with /usr/bin/google-chrome paired with the real web client
and navigated to Settings > Connections (main now calls it Environments).
No synthetic connector, mocks, fixtures, or demo data were used.

$ node --env-file=.env apps/server/src/bin.ts connect status --base-dir /home/user/main/.t3
T3 Connect
  Exposure: disabled
  Authorization: missing
  Environment link: not provisioned
  Relay: not provisioned
  Publish agent activity: disabled
  Relay client: not installed

Next: Run `t3 connect link` to authorize and enable T3 Connect.

PR:
$ git switch --detach 6e037808389b02b77fcf5190db2f71ff0c579bc5
$ vp i
$ T3CODE_HOME=/home/user/t3code/.t3 setsid nohup vp run dev > /tmp/dev.log 2>&1 &
[dev-runner] serverPort=13773 webPort=5733

$ node --env-file=.env apps/server/src/bin.ts connect link --base-dir /home/user/t3code/.t3 --headless
Accepted real relay-client installation:
Relay client: Downloading...
Relay client: Verifying download...
Relay client: Installing...
Relay client: Validating executable...
Relay client: Activating installation...
Relay client ready: cloudflared 2026.10.0
Headless authorization
Waiting for approval (expires in 10 min). Press Ctrl+C to cancel.

Opened https://accounts.t3.codes/device in Chrome through Playwright.
Observed the real account sign-in form. No account session was available.
Cancelled pending device authorization with Ctrl+C.

$ node --env-file=.env apps/server/src/bin.ts connect status --base-dir /home/user/t3code/.t3
T3 Connect
  Exposure: disabled
  Authorization: missing
  Environment link: not provisioned
  Relay: not provisioned
  Publish agent activity: disabled
  Relay client: available via managed install
    Path: /home/user/t3code/.t3/tools/cloudflared/2026.10.0/linux-x64/cloudflared
    Version: 2026.10.0

Next: Run `t3 connect link` to authorize and enable T3 Connect.

Result: UNVERIFIABLE. No authorized Connect account or provisioned tunnel.
Original bug NOT reproduced. Changed log event NOT exercised.
No real tunnel flap, reconnection, warning handling, or token redaction verified.
No Codex turns or new projects created; those cannot supply a Connect tunnel.
No source changes, commits, pushes, or new checks. Existing CI: 28 successful.