[pmwoz]

Pins the T3 contract from 8b44f42 to 67eebac. One upstream commit: pingdotgg/t3code#30257 (agents ask for secrets through request_secret instead of chat).

Three contract files changed: orchestrator/tools.ts, orchestratorMcp.ts, orchestrationInstructions.ts. The plugin is unchanged, so no version bump.

Breaks a mapping

None. The adapter's Secrets section already keeps secret values out of briefs and passes only the file path, which matches the new delegate_task rule "No secrets in task" and the rewritten injected instruction for request_secret. delivery: "file" and the 24-hour file lifetime are unchanged.

Opportunities

• request_secret takes a new value input: a secret the user already pasted in this thread becomes a secretRef or a file without a second card. The Secrets section of skills/poteto-mode/references/t3-adapter.md could tell the root to use it before it puts a file path in a child's brief.

Irrelevant to the skills

7 changes.

Checks

bun run check, bun test tools (39 pass), and bun run typecheck pass.