Merge remote-tracking branch 'origin/main' into slim/17585

Merge remote-tracking branch 'origin/main' into slim/17585

fix(server): start background provider updates after 2 quiet minutes

fix(server): re-check the installed CLI version before a background install

refactor(server): trace the provider install lock and auto-updater picks

test(server): provide installer services in registry updates

Merge remote-tracking branch 'origin/main' into slim/17585

fix(web,mobile): disable Update automatically while provider update checks are off

chore(server): merge main into background provider updates

test(server): run resumed-owner fencing cases with it.effect.each

fix(server): fence resumed provider install owners

fix(server): narrow provider install lock errors with Schema.is

fix(server): bound detached provider installer lifetime

fix(server): preserve provider install lock ownership

chore(server): merge main into provider lock fix

fix(server): replace the provider install lock atomically

fix(server): retain provider install lock ownership through verification

chore(server): merge main into background provider updates

fix(server): reclaim a stale provider install lock exclusively

test(server): provide the install lock to the turn-start memory fixture

refactor(server): rebuild background provider updates on main

fix(provider): retain install ownership through process exit and cleanup

Merge remote-tracking branch 'origin/main' into t3/background-provider-updates-int

fix(server): a reused process id never keeps a stale install lease alive

Merge remote-tracking branch 'origin/main' into t3/background-provider-updates-int

fix(server): turns already holding the install lock never wait behind a waiting install

fix(server): installs drain readers, ignore foreign symlinks, and bound installer logs

test(server): keep the host install gate test in a temporary cache

fix(server): pull request review guides wait for provider installs like other text generation

Merge remote-tracking branch 'origin/main' into t3/background-provider-updates-int

fix(server): a provider install keeps admission until its last child exits, even when the server is removed or the disk is full

docs: describe the detached provider install supervisor

fix(server): a detached supervisor finishes provider installs after the server quits or crashes

fix(mobile): writable project settings follow write destinations and continuous input reports activity once

fix(server): background updates recognize native pi, grok symlinks, CODEX_HOME, bun, volta and vite-plus installs

fix(server): older clients no longer show background provider installs as manual updates

fix(server): background provider installs no longer stall or admit CLIs mid-install

Merge remote-tracking branch 'origin/main' into t3/background-provider-updates-int

test(server): other providers keep launching during a Codex first install

fix(server): a manual update waiting for running turns says so

fix(server): only servers share the user-wide provider install gate

fix(server): a standalone Codex reached through a linked home still updates automatically

fix(web): background provider updates stay out of the way in clients

fix(server): every provider CLI launch waits for a running install

fix(server): provider installs wait for turns on every T3 server on the host

fix(server): background provider installs only update installs they own

Merge remote-tracking branch 'origin/main' into t3/background-provider-updates

fix(opencode): a configured OpenCode server never updates the local CLI

fix(server): background provider installs never stall or race a provider launch

fix(server): background updates wait for agent background work and returning users

fix(server): an unreadable settings file keeps automatic updates off

docs(server): keep the scheduled task poll comment on listDueTasks

fix(server): a corrupt scheduled task no longer closes the update window

fix(server): only a live owning session keeps background tasks blocking updates

fix(server): queued runs and incompatible releases no longer stall background updates

fix(server): keep background updates from stalling

fix(server): a canceled provider update no longer blocks background updates

fix(server): frequent scheduled tasks no longer hold back background updates

refactor(server): simplify background provider updates

chore(updates): keep simulation tooling local

chore(server): carry lab project recovery

chore(server): carry update lab host guard

chore(server): sync provider updates with main

fix(server): preserve maintenance admission effect types

fix(server): clear canceled provider install queues

fix(server): serialize manual installs with background updates

fix(server): wait for background installs before provider startup

Merge branch 't3/update-lab' into t3/background-provider-updates

fix(server): keep background updates behind pending work

Merge branch 't3/update-lab' into t3/background-provider-updates

feat(server): update provider CLIs in the background when nothing is running

feat(dev): add an update lab for multi-environment update testing

fix(web): chat content keeps pace with sidebar resizing (#17383)

feat(web): assign a thread details panel shortcut (#16694)

fix(web): distinguish project filter from new project (#12113)

fix(web): settled and snoozed lines line up with the messages above them (#17191)

fix(web): keep chat banners inside the lane beside the docked details card (#17094)

fix(web): Local environment switch stays reachable after turning it off (#17359)

fix(connect): Cloudflare and other VPN addresses no longer show as Tailscale (#17158)

fix(server): relay client updates no longer drop the host off T3 Connect (#17366)

refactor(provider-acp-registry): move the ACP Registry into its own package (#17405)

test(provider-pi): cover continuation offers through the driver (#17407)

fix(server): reconcile Pi native session rewinds (#13839)

fix(server): keep the Claude MCP token out of process arguments (#17408)

fix(server): Pi loads every selected skill without losing prompt text (#17194)

fix(server): a logged-out Claude CLI no longer reports as authenticated (#15459)

fix(server): a timed-out browser drag no longer exits the server (#17360)

fix(web): show a row spinner instead of a banner when expanding a folder (#17378)

refactor(providers): adapter factories yield their services (#17381)

fix(desktop): cancel backend pipe reads to avoid slow shutdown (#17386)

fix(server): speed up long thread message sync (#17387)

refactor(provider-grok): move Grok into its own provider package (#17357)

refactor(provider-acp): move the shared ACP adapter into its own package (#17354)

refactor(provider-cursor): move Cursor into its own provider package (#17349)

refactor(provider-opencode): move OpenCode into its own provider package (#17345)

fix(auth): show connection permissions and enforce session lifetime (#17370)

refactor(providers): namespace-import service modules in core, Muse, Pi, and testing (#17375)

fix(web): drop sidebar context before cancelling pointer drag (#17373)

fix(web): add room for thread timeline markers (#17372)

fix(server): agent browser tools stop bloating history, fall back sensibly, and respect ownership (#16956)