chore(deps): upgrade @effect/tsgo to 0.46.1 (#16360)

fix(mcp): preserve thread command rejection reasons (#15627)

fix(release): unblock nightly browser tests and cli builds (#16515)

fix(mcp): mark declared tool failures as errors (#15617)

fix: restore service references breaking ci (#16495)

feat(preview): run the browser on the environment server (#15328)

fix(server): OpenCode 2 threads get T3 Code's MCP tools (#16142)

fix(shared): find versioned JetBrains macOS app bundles (#16246)

fix(desktop): use the crypto service for screenshot IDs (#16415)

fix(server): reject invalid explicit Bitbucket repositories (#15876)

fix(web): queued messages no longer split the composer notice stack (#16400)

fix(server): end clone options before the repository URL (#14781)

fix(desktop): prevent browser screenshot filename collisions (#14784)

fix(web): type in front of bold that starts a composer line (#13217)

fix(release): resolve version-qualified catalog overrides (#16411)

fix(orchestration-v2): let Stop recover stalled runs (#15442)

fix(server): avoid scanning completed history for pending secrets (#16409)

fix(desktop): retry transient bearer bootstrap and degrade on session fetch failure (#12919)

fix(server): Pi thread titles use linked PR context (#16210)

fix(relay): export traces through one tracer, one request span each (#16382)

refactor: Effect code gets UUIDs and SHA-256 from Effect's Crypto (#16377)

fix(web): bring back the live shimmer on work log rows (#16372)

fix(relay): error and deadline responses carry CORS headers (#16253)

fix(observability): T3 Connect tracing stops at the relay boundary (#16314)

chore(lint): catch known tags with Effect.catchTags (#16361)

fix(server): main's settings, keybindings and session tests compile again (#16363)

fix(contracts): trimmed IDs round-trip (#16300)

refactor(web): import connection storage as a namespace in its test (#16315)

fix(server): metrics count interrupted work on the monotonic clock (#16207)

fix(shared): DrainableWorker keeps running after a failed item (#16223)

chore: keep one copy each of undici 8 and ws 8 (#16211)

fix(server): the PR cache sweep only removes real entry files (#16285)

fix(server): one-shot initializers no longer race (#16260)

fix(server): caches and ids are written atomically (#16242)

Add esthor to the list of GitHub users

fix(server): Claude limits load again for users with large transcript histories (#16358)

fix(server): project favicons stop being rescanned every minute (#16206)

fix(server): main's startup auto-pull test compiles again (#16357)

perf(shared): scan PATH once per command before spawning, not on every spawn (#12600)

fix(server): status polling no longer locks the git index (#14718)

fix(observability): a failing trace disk no longer stalls the server (#13758)

fix(server): probe project favicon candidates concurrently (#12543)

fix(server): return partial workspace index on timeout (#11500)

fix(web): avoid blocking image preparation conversions (#13342)

fix(server): stop the startup project sync from delaying the app window (#14912)

fix(server): forks no longer merge into their upstream repo's project group (#16353)

refactor(server): replay guards stay in CloudLink (#16349)

refactor(server): CloudLink fails with its own errors; the connect routes map them to HTTP (#16341)

refactor(server): CloudLink keeps only the link lifecycle; pure checks live beside it (#16340)

chore(review): turn off CodeRabbit's docstring coverage check (#16328)

chore(review): point CodeRabbit at the web UI conventions (#16324)

docs(relay): add the legacy tunnel cleanup rollout runbook (#13568)

feat(connect): tell users when an idle tunnel was removed (#13567)

perf(relay): delete expired tunnels four at a time within a time budget (#13566)

feat(relay): clean up tunnels of hosts that never registered recovery (#13565)

feat(relay): measure the managed tunnel backlog (#13564)

fix(relay): stop forcing manual relay deploys by default (#13563)

fix(web): recover from a closed IndexedDB connection (#16311)

feat(desktop): the renderer's bootstrap token rotates every 12 hours (#16275)

fix(web): a rejected desktop-local credential is not retried every poll (#16273)

refactor(relay): import HookInboxObject once, as a namespace (#16307)

chore(lint): require a reason on every lint and type-checker suppression (#16294)

docs: put the Effect and web UI review rules in the docs (#16286)

chore(review): configure CodeRabbit in TypeScript (#16281)

refactor(server): one module per service instead of Services/ and Layers/ folders (#16295)

fix(web): inline HTML renders no longer trap the thread's scroll (#16283)

fix(web): sidebar drag and drop no longer snaps back (#16291)

refactor(server): T3 Connect link capabilities live in a CloudLink service (#16265)

refactor: layer variables are named layer or layerXyz (#16282)

fix(pull-requests): PR detail reads no longer drain the GitHub quota (#16280)

perf(server): PR watches spend ~90% fewer GitHub points by checking a 1-point fingerprint first (#16270)

perf(server): idle status polls and PR sweeps start fewer git processes (#16272)

feat(server,web): choose where new worktrees are created (#16231)

feat(server): log how long PR watches stay quiet before they end (#16262)

refactor(server): import service modules as namespaces, not aliased layers (#16267)

fix(server): a T3 Connect preferences save finishes even if the client disconnects (#16266)

refactor(server,relay): webhook capabilities live in services, not handlers (#16232)

fix(relay): releasing a tunnel that still has a connector no longer 500s (#16250)

fix(server): finished outbox rows and old PR cache files are pruned (#16247)

fix(server): ACP mode states with null descriptions are no longer dropped (#16218)

feat(web): see and stop pull request watches in the thread details card (#16235)

feat: agents ask the user for a secret through a private card (#15907)

chore(relay): match Alchemy to the PS-80 Postgres cluster (#16228)

feat: agents can show HTML pages inline in threads (#15968)

perf: cheaper shell refreshes, one copy of Codex streaming text, no MCP wait polling (#15033)

feat: new branches use the shorter t3/ prefix (#16220)

fix(server): delegation sees a fixed provider without the app open (#16219)

fix(server): PR watches stop burning GitHub's rate limit and giving up (#16208)

feat(relay,server,web,mobile): opt-in to hold webhooks while offline (#15487)

feat(web): create webhook automations and inspect their deliveries (#15088)

feat(mobile): create and copy webhook automations (#15087)

feat(relay): forward webhook requests to the environment's tunnel (#15086)

feat(server): scheduled tasks can run on a webhook (#15085)

fix(server): PR sync waits out a GitHub rate limit pause instead of failing every PR (#16203)

chore(deps): bump cursor sdk and astro to clear vulnerable transitives (#16214)

fix(threads): threads watching a PR stay in Working instead of bouncing to the inbox (#16204)

docs(mcp): thread tools reach threads in any project (#15947)

fix: tool screenshots show as images, not base64 text (#16199)

fix: a failed DPoP key load and a fresh maintenance read are no longer cached (#15500)

fix(server): PR watch reports a required check that first appears already passed (#15804)