feat(connect): raise device limit to five

[t3dotgg]

T3 Connect accounts currently allow only three devices.

Raise the default limit to five and update the existing limit test. Per-account overrides are unchanged.

Made with GPT-5.6 Sol in the Codex harness.

---

Note

Low Risk
Single constant change with matching tests; per-user overrides and limit-check logic are unchanged, only the default provisioning ceiling increases.

Overview
Raises the default concurrent managed tunnel cap for Connect users from 3 to 5 by changing DEFAULT_MANAGED_TUNNEL_LIMIT in relay’s ManagedTunnelLimits service. ensureCapacity still uses per-user rows in relay_managed_tunnel_limits when present; only accounts without an override get the higher ceiling.

The unit test that asserts rejection at the default cap is updated so expectations match 5 active tunnels.

^{Reviewed by Cursor Bugbot for commit 5dd7ca0. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Raise DEFAULT_MANAGED_TUNNEL_LIMIT from 3 to 5

Increases the default managed tunnel capacity for users without an override. Updates the corresponding test in ManagedTunnelLimits.test.ts to assert rejection at the new limit of 5.

^{Macroscope summarized 5dd7ca0.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: c0cfa718-bf9e-4a1e-9653-e2d5bdc650ee

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	13.4 KiB	13.4 KiB	+1 B (+0.0%)	15.1 KiB	✅
Codex	Thread snapshot wire	6.9 KiB	6.9 KiB	−4 B (−0.1%)	7.3 KiB	✅
Codex	Live turn WebSocket wire	6.5 KiB	6.5 KiB	+5 B (+0.1%)	7.8 KiB	✅
Codex	Live turn WebSocket decoded	55.0 KiB	55.0 KiB	0 B (0.0%)	66.4 KiB	✅
Codex	Live turn messages	16	16	0 (0.0%)	21	✅
Claude	Total thread wire	13.5 KiB	13.4 KiB	−4 B (−0.0%)	15.1 KiB	✅
Claude	Thread snapshot wire	6.9 KiB	6.9 KiB	+4 B (+0.1%)	7.3 KiB	✅
Claude	Live turn WebSocket wire	6.6 KiB	6.6 KiB	−8 B (−0.1%)	7.8 KiB	✅
Claude	Live turn WebSocket decoded	55.8 KiB	55.8 KiB	0 B (0.0%)	66.4 KiB	✅
Claude	Live turn messages	16	16	0 (0.0%)	21	✅

Baseline: 5f1147c · PR result: 5dd7ca0 · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 109.4 KiB
• Claude decoded thread snapshot: 110.1 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.

[macroscopeapp]

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — The change raises the production managed-tunnel provisioning ceiling from three to five, allowing additional devices for accounts without overrides. Although the diff is small and isolated, it changes a user-facing capacity policy and the gate controlling provisioning.

^{You can add or adjust custom eligibility rules. Learn more.}