Merge branch 't3/background-provider-updates-int' into t3/background-server-updates-int

docs: describe crash-loop recovery without a post-commit database restore

fix(server): a crash loop after an update commit never restores the old database

Merge branch 't3/background-provider-updates-int' into t3/background-server-updates-int

docs: describe the launcher health period and post-commit rollback

perf(server): busy-terminal checks skip the process scan when a prompt is already busy

fix(server): background server updates survive redirects, clock jumps, and interrupted writes

Merge branch 't3/background-provider-updates-int' into t3/background-server-updates-int

Merge branch 't3/background-provider-updates-int' into t3/background-server-updates-int

docs: a newer T3 Code release replaces one waiting for the update window

fix(server): open tabs keep loading the previous web build's chunks after an update

fix(server): a background server restart waits for idle terminals and holds new terminal input

fix(server): background server updates roll back unhealthy releases and announce restarts

Merge branch 't3/background-provider-updates-int' into t3/background-server-updates-int

Merge branch 't3/background-provider-updates' into t3/background-server-updates

docs(updates): an exact version only stays while automatic updates are off

fix(server): background server restarts wait for first installs and stop at a protocol change

Merge branch 't3/background-provider-updates' into t3/background-server-updates

Merge branch 't3/background-provider-updates' into t3/background-server-updates

docs(updates): note that newer releases wait for a staged one to install

Merge branch 't3/background-provider-updates' into t3/background-server-updates

fix(server): background server updates back off and stage one release at a time

Merge branch 't3/background-provider-updates' into t3/background-server-updates

fix(server): background server updates no longer delete runtimes or retry blocked releases

Merge branch 't3/background-provider-updates' into t3/background-server-updates

fix(server): a failed terminal poll no longer reads as idle before a restart

fix(server): bound background server update handoffs

Merge branch 't3/background-provider-updates' into t3/background-server-updates

docs(updates): describe when background updates retry and what they install

Merge branch 't3/background-provider-updates' into t3/background-server-updates

fix(server): retry a background server update after a failed download

Merge branch 't3/background-provider-updates' into t3/background-server-updates

refactor(server): simplify background server updates

Merge branch 't3/background-provider-updates' into t3/background-server-updates

docs(updates): clarify terminal wait during server restarts

docs(updates): explain pending background work

chore(server): carry private simulation cleanup

fix(server): keep terminal input available during update checks

chore(server): carry lab project recovery

chore(server): carry update lab host guard

chore(server): sync service updates with main

fix(server): mark launcher handoff as a terminal effect

Merge branch 't3/background-provider-updates' into t3/background-server-updates

fix(server): keep replaced terminal shells busy during updates

Merge branch 't3/background-provider-updates' into t3/background-server-updates

fix(server): protect terminal commands during automatic updates

Merge branch 't3/background-provider-updates' into t3/background-server-updates

fix(server): hold startup admission through launcher handoff

Merge branch 't3/background-provider-updates' into t3/background-server-updates

Merge branch 't3/background-provider-updates' into t3/background-server-updates

fix(server): refresh staged updates without relaunching active apps

Merge branch 't3/background-provider-updates' into t3/background-server-updates

Merge branch 't3/background-provider-updates' into t3/background-server-updates

feat(server): environments update themselves when nothing is running

feat(server): update provider CLIs in the background when nothing is running

feat(dev): add an update lab for multi-environment update testing

fix(web): chat content keeps pace with sidebar resizing (#17383)

feat(web): assign a thread details panel shortcut (#16694)

fix(web): distinguish project filter from new project (#12113)

fix(web): settled and snoozed lines line up with the messages above them (#17191)

fix(web): keep chat banners inside the lane beside the docked details card (#17094)

fix(web): Local environment switch stays reachable after turning it off (#17359)

fix(connect): Cloudflare and other VPN addresses no longer show as Tailscale (#17158)

fix(server): relay client updates no longer drop the host off T3 Connect (#17366)

refactor(provider-acp-registry): move the ACP Registry into its own package (#17405)

test(provider-pi): cover continuation offers through the driver (#17407)

fix(server): reconcile Pi native session rewinds (#13839)

fix(server): keep the Claude MCP token out of process arguments (#17408)

fix(server): Pi loads every selected skill without losing prompt text (#17194)

fix(server): a logged-out Claude CLI no longer reports as authenticated (#15459)

fix(server): a timed-out browser drag no longer exits the server (#17360)

fix(web): show a row spinner instead of a banner when expanding a folder (#17378)

refactor(providers): adapter factories yield their services (#17381)

fix(desktop): cancel backend pipe reads to avoid slow shutdown (#17386)

fix(server): speed up long thread message sync (#17387)

refactor(provider-grok): move Grok into its own provider package (#17357)

refactor(provider-acp): move the shared ACP adapter into its own package (#17354)

refactor(provider-cursor): move Cursor into its own provider package (#17349)

refactor(provider-opencode): move OpenCode into its own provider package (#17345)

fix(auth): show connection permissions and enforce session lifetime (#17370)

refactor(providers): namespace-import service modules in core, Muse, Pi, and testing (#17375)

fix(web): drop sidebar context before cancelling pointer drag (#17373)

fix(web): add room for thread timeline markers (#17372)

fix(server): agent browser tools stop bloating history, fall back sensibly, and respect ownership (#16956)

feat(mobile): fade working threads and match web's status labels (#17368)

fix(mobile): restore chat image previews in the v5 stack (#17361)

fix(web): semantic branch naming hint lines up with its setting (#16972)

refactor(provider-muse): move Muse Code into its own provider package (#17331)

fix(web): images, video, HTML and PDF preview in a thread before its first message (#17352)

fix(desktop): the t3 command warns instead of installing behind another t3 (#17351)

fix(web): desktop opens remote environments' browser tabs locally (#17316)

fix(desktop): browser tab fixes for fullscreen, shortcuts, links, reload and hidden tabs (#16961)

fix(server): environment-hosted browser tabs behave like a normal browser (#16963)

fix(web): file previews handle downloads, in-page links, and repo paths, and favicons stop leaking internal hosts (#16950)

refactor(provider-core): share attachment prompts, notifications, and event loggers (#17330)

fix(muse): workflow subagents no longer stall on hidden approvals (#17329)

fix(web): collapsed composer reserves room for wide send actions (#17016)

feat(models): tell users when a CLI update unlocks a new model (#17307)

refactor(provider-pi): move Pi into its own provider package (#17302)

refactor(settings): drop the legacy per-driver providers map (#17300)