fix(preview): redact data: payloads from reported load errors

Merge origin/main (8acbefefc5) into fix/issue-18555

fix(preview): keep load failures tied to the current page

test(preview): tighten load failure regression coverage

Merge remote-tracking branch 'origin/main' into feat/preview-load-error-v2

fix(server,desktop): browser tools report why a page failed to load

feat: open T3 Code from a link with a prompt ready to send (#18454)

fix(server): consolidate browser credential handling (#18509)

refactor(mobile): share themed choice rows in settings (#18516)

refactor(mobile): share themed toggle rows in settings (#18511)

refactor(mobile): share themed list rows and sections (#18510)

fix(mobile): preserve theme contrast across surfaces and actions (#18506)

feat(mobile): native-sized pull request action bar (#18527)

fix(mobile): restore native scroll-edge effects on forms and PRs (#18507)

refactor(settings): centralize schema-declared secrets and inputs (#18505)

fix(web): terminal colors no longer look washed out (#17168)

ci(mobile): cut a store build when the native fingerprint has no build (#18496)

feat(web): model options for source control writer and review guide models (#18488)

fix(mobile): show rounded pull request selection in the sidebar (#18480)

fix(mobile): keep preview count badges inside the working pill (#18449)

fix(mobile): keep PR surfaces and Android tab selection visible across themes (#18479)

feat(mobile): stock tab bar, glass filter pills, and saved list filters (#18476)

fix(server): cap automatic thread continuations and turn them on by default (#18461)

fix(mobile): Forgejo change requests ask for the summary they require (#18455)

feat(android): add Pull Requests tab (#18372)

fix(server): missing agent binaries report launch failure

fix(web): sidebar toggle no longer sits under the macOS window buttons (#18193)

fix(web): hide stash menu behind maximized panel (#18115)

test(server): Claude reset tests are skipped on Windows hosts, where their mock CLI cannot run (#18184)

fix(web): keep queued threads subscribed (#15293)

fix(mobile): new thread draft names its repo and says it is a new thread (#17611)

fix(desktop): Option-click on a chat link opens the system browser (#18238)

Reject unknown params in t3_thread_read (#17823)

fix(server): checkpoint restore keeps a nested workspace on Windows (#14874)

fix(web): context menus no longer scroll when they fit the window (#16776)

test(server): Claude sign-in message test passes on Windows hosts (#18183)

test(server): finish workflow reads before changing transcripts (#18192)

chore(typecheck): typecheck with tsc-rs (#16704)

perf(web): Thinking shimmer steps instead of drawing every frame (#18191)

fix(web): provider Runtime controls follow the settings row layout (#18190)

fix(web): long commands no longer overflow the Add Action dialog (#18207)

fix(web): keybinding settings label Focus URL with a capitalized acronym (#18279)

fix(web): closed popovers no longer stay on screen and click-through (#18341)

fix(mobile): preserve browser prompt replies across control updates (#18419)

perf(usage): the first usage scan skips decoding transcript lines that carry no usage (#17255)

perf(server): expired PR diffs no longer stay in memory until restart (#17786)

perf(web): avoid quadratic markdown link scans (#18387)

perf(web): reuse the collator when sorting diff files (#18420)

docs(mobile): point fork links to pingdotgg (#18433)

chore(mobile): sync Screens fork with upstream v5 fixes (#18396)

feat(mobile): replace custom Markdown rendering with Enriched (#16979)

fix(provider-muse): run on Muse 1.4.6, with linked web search hits and workflow results (#18409)

fix(shared): preserve generated branch namespaces (#15615)

fix(web): update toast download badge no longer hides behind the provider logo (#18401)

fix(web): timeline keeps live-following after returning from Settings (#17348)

fix(web): PR badge tooltip opens after a thread gains a second PR (#18368)

fix(web): center the empty-thread placeholder above the composer (#18331)

fix(web): composer keeps its border while resting and expanding (#18333)

perf(web): panel toggles no longer re-render the timeline and composer (#18077)

fix(web): scrolling over the thread minimap scrolls the chat (#17652)

fix(web): terminal selection drags scroll at the window edge (#17653)

fix(web): Cite button stays anchored to the selected text (#17650)

fix(desktop): tooltips no longer open under the macOS traffic lights (#17726)

feat(provider-muse): native subagents open in their own child threads (#18353)

fix(server): Claude 5.1+ text before a tool call shows as assistant text (#18364)

ci(mobile): publish nightly Android APKs to a GitHub prerelease (#16271)

fix(web): even 4px inset around rows in the PR badge tooltip (#18352)

fix(web): revert trailing toast icons (#18356)

fix(desktop): tooltips no longer open under the Windows and Linux window controls (#17672)

fix(mobile): keep bot badges out of PR attachments (#18347)

feat(mobile): keep pull requests available offline (#18351)

fix(devices): refresh backlogged iOS video and require input admission (#18326)

feat(mobile): guided reviews for pull requests (#18267)

feat(mobile): browse and review pull requests natively (#18126)

fix(client): tolerate blocked cookies in MCP app sandboxes (#17027)

fix(client): merge No project filters across environments (#17050)

fix(android): Use MD3 loading spinners (#14282)

fix(client): apply host color scheme to saved MCP apps (#17026)

fix(mobile): preserve iPad search chrome across layout changes (#13667)

fix(mobile): size inline MCP apps to their content (#17040)

fix(android): Match thread fallback layouts to the loaded pane (#14669)

fix(mobile): separate unfolded thread list from header (#13088)

fix(mobile): preserve filters across layout changes (#13085)

fix(mobile): restore compact iPad trackpad scrolling (#13665)

fix(mobile): let sheet lists scroll before dismissal (#17177)

fix(mobile): add compose to the single-column iPad list (#18157)

fix(server): refresh linked PRs without a checkout (#17167)

perf(github): resolve credentials once per GraphQL request (#18289)

feat(settings): providers can be turned on or off per project (#17879)

fix(server): skip Windows cleanup for exited child processes (#16007)

fix(server): preserve ambient Cursor MCP servers (#15875)

fix(usage): say resets momentarily in the final minute (#17869)

fix(server): Sol Ultrafast stops vanishing from the Codex model picker (#18200)

feat(mcp): agents can write and read pull request review guides (#18143)

feat(pull-requests): guided reviews, a beta tour of a pull request (#18124)

fix(mobile): image-only messages ask the agent to respond, like desktop (#16480)

fix(mobile): license generation works with filtered installs (#18127)

fix(server): update fff to stop runaway watcher rescans (#14543)

chore(deps-dev): bump compression from 1.8.1 to 1.8.2 in the npm_and_yarn group across 1 directory (#16309)

fix: sync model favorites and visibility across clients (#16816)