[codex] Use updated web splash icon

.env.example

@@ -1,24 +1,2 @@
-# Optional: T3 Connect source builds
-# Leave these unset to disable optional T3 Connect features in local source builds.
-# Release builds inject their public values at build time. Do not add server-side
-# secrets to this file.
-
-# Get these from the Clerk Dashboard under API keys, JWT templates, and OAuth applications.
-# T3CODE_CLERK_PUBLISHABLE_KEY=pk_test_...
-# T3CODE_CLERK_JWT_TEMPLATE=t3-relay
-# T3CODE_CLERK_CLI_OAUTH_CLIENT_ID=oauthapp_...
-
-# Optional: signed macOS passkey builds. The RP domain defaults to the Frontend API
-# hostname encoded in T3CODE_CLERK_PUBLISHABLE_KEY. Set the override only when Clerk
-# returns a different RP ID or when multiple domains must be entitled.
-# T3CODE_APPLE_TEAM_ID=ABC1234567
-# T3CODE_MACOS_PROVISIONING_PROFILE=/absolute/path/to/t3code.provisionprofile
-# T3CODE_CLERK_PASSKEY_RP_DOMAINS=example.clerk.accounts.dev,clerk.example.com
-
-# Get this from your relay deployment. `infra/relay` deploys update it automatically.
-# T3CODE_RELAY_URL=https://relay.example.com
-
-# Public, ingest-only mobile OpenTelemetry configuration.
-# T3CODE_MOBILE_OTLP_TRACES_URL=https://api.axiom.co/v1/traces
-# T3CODE_MOBILE_OTLP_TRACES_DATASET=t3-code-mobile-traces-dev
-# T3CODE_MOBILE_OTLP_TRACES_TOKEN=xaat-...
+# Optional local development overrides.
+# Do not add server-side secrets to this file.

.github/workflows/ci.yml

@@ -6,44 +6,14 @@ on:
     branches:
       - main
 
-jobs:
-  check:
-    name: Check
-    runs-on: blacksmith-8vcpu-ubuntu-2404
-    timeout-minutes: 10
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Setup Vite+
-        uses: voidzero-dev/setup-vp@v1
-        with:
-          node-version-file: package.json
-          cache: true
-          run-install: true
+permissions:
+  contents: read
 
-      - name: Ensure Electron runtime is installed
-        run: vp run --filter @t3tools/desktop ensure:electron
-
-      - name: Check
-        run: vp check
-
-      - name: Typecheck
-        run: vpr typecheck
-
-      - name: Build desktop pipeline
-        run: vp run build:desktop
-
-      - name: Verify preload bundle output
-        run: |
-          test -f apps/desktop/dist-electron/preload.cjs
-          grep -nE "desktopBridge|getLocalEnvironmentBootstrap|PICK_FOLDER_CHANNEL|wsUrl" apps/desktop/dist-electron/preload.cjs
-          grep -n "__clerk_internal_electron_passkeys" apps/desktop/dist-electron/preload.cjs
-
-  test:
-    name: Test
-    runs-on: blacksmith-8vcpu-ubuntu-2404
-    timeout-minutes: 10
+jobs:
+  quality:
+    name: Desktop Core Quality
+    runs-on: ubuntu-24.04
+    timeout-minutes: 20
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -58,44 +28,8 @@ jobs:
       - name: Ensure Electron runtime is installed
         run: vp run --filter @t3tools/desktop ensure:electron
 
-      - name: Test
-        run: vp run test
-
-  mobile_native_static_analysis:
-    name: Mobile Native Static Analysis
-    runs-on: blacksmith-12vcpu-macos-26
-    timeout-minutes: 10
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Setup Vite+
-        uses: voidzero-dev/setup-vp@v1
-        with:
-          node-version-file: package.json
-          cache: true
-          run-install: true
-
-      - name: Install mobile native static analysis tools
-        run: brew bundle install --file apps/mobile/Brewfile
-
-      - name: Lint mobile native sources
-        run: vp run lint:mobile
-
-  release_smoke:
-    name: Release Smoke
-    runs-on: blacksmith-8vcpu-ubuntu-2404
-    timeout-minutes: 10
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Setup Vite+
-        uses: voidzero-dev/setup-vp@v1
-        with:
-          node-version-file: package.json
-          cache: true
-          run-install: true
+      - name: Typecheck desktop core
+        run: vp run --filter @t3tools/contracts --filter @t3tools/shared --filter @t3tools/client-runtime --filter effect-acp --filter effect-codex-app-server --filter @t3tools/ssh --filter @t3tools/tailscale --filter @t3tools/web --filter t3 --filter @t3tools/desktop --filter @t3tools/scripts --filter @t3tools/oxlint-plugin-t3code --concurrency-limit 2 typecheck
 
-      - name: Exercise release-only workflow steps
-        run: node scripts/release-smoke.ts
+      - name: Test desktop core
+        run: vp run --filter @t3tools/contracts --filter @t3tools/shared --filter @t3tools/client-runtime --filter effect-acp --filter effect-codex-app-server --filter @t3tools/ssh --filter @t3tools/tailscale --filter @t3tools/web --filter t3 --filter @t3tools/desktop --filter @t3tools/scripts --filter @t3tools/oxlint-plugin-t3code test