fix(provider): retain install ownership through process exit and cleanup

Merge remote-tracking branch 'origin/main' into t3/background-provider-updates-int

fix(server): a reused process id never keeps a stale install lease alive

Merge remote-tracking branch 'origin/main' into t3/background-provider-updates-int

fix(server): turns already holding the install lock never wait behind a waiting install

fix(server): installs drain readers, ignore foreign symlinks, and bound installer logs

test(server): keep the host install gate test in a temporary cache

fix(server): pull request review guides wait for provider installs like other text generation

Merge remote-tracking branch 'origin/main' into t3/background-provider-updates-int

fix(server): a provider install keeps admission until its last child exits, even when the server is removed or the disk is full

docs: describe the detached provider install supervisor

fix(server): a detached supervisor finishes provider installs after the server quits or crashes

fix(mobile): writable project settings follow write destinations and continuous input reports activity once

fix(server): background updates recognize native pi, grok symlinks, CODEX_HOME, bun, volta and vite-plus installs

fix(server): older clients no longer show background provider installs as manual updates

fix(server): background provider installs no longer stall or admit CLIs mid-install

Merge remote-tracking branch 'origin/main' into t3/background-provider-updates-int

test(server): other providers keep launching during a Codex first install

fix(server): a manual update waiting for running turns says so

fix(server): only servers share the user-wide provider install gate

fix(server): a standalone Codex reached through a linked home still updates automatically

fix(web): background provider updates stay out of the way in clients

fix(server): every provider CLI launch waits for a running install

fix(server): provider installs wait for turns on every T3 server on the host

fix(server): background provider installs only update installs they own

Merge remote-tracking branch 'origin/main' into t3/background-provider-updates

fix(opencode): a configured OpenCode server never updates the local CLI

fix(server): background provider installs never stall or race a provider launch

fix(server): background updates wait for agent background work and returning users

fix(server): an unreadable settings file keeps automatic updates off

docs(server): keep the scheduled task poll comment on listDueTasks

fix(server): a corrupt scheduled task no longer closes the update window

fix(server): only a live owning session keeps background tasks blocking updates

fix(server): queued runs and incompatible releases no longer stall background updates

fix(server): keep background updates from stalling

fix(server): a canceled provider update no longer blocks background updates

fix(server): frequent scheduled tasks no longer hold back background updates

refactor(server): simplify background provider updates

chore(updates): keep simulation tooling local

chore(server): carry lab project recovery

chore(server): carry update lab host guard

chore(server): sync provider updates with main

fix(server): preserve maintenance admission effect types

fix(server): clear canceled provider install queues

fix(server): serialize manual installs with background updates

fix(server): wait for background installs before provider startup

Merge branch 't3/update-lab' into t3/background-provider-updates

fix(server): keep background updates behind pending work

Merge branch 't3/update-lab' into t3/background-provider-updates

feat(server): update provider CLIs in the background when nothing is running

feat(dev): add an update lab for multi-environment update testing

fix(web): chat content keeps pace with sidebar resizing (#17383)

feat(web): assign a thread details panel shortcut (#16694)

fix(web): distinguish project filter from new project (#12113)

fix(web): settled and snoozed lines line up with the messages above them (#17191)

fix(web): keep chat banners inside the lane beside the docked details card (#17094)

fix(web): Local environment switch stays reachable after turning it off (#17359)

fix(connect): Cloudflare and other VPN addresses no longer show as Tailscale (#17158)

fix(server): relay client updates no longer drop the host off T3 Connect (#17366)

refactor(provider-acp-registry): move the ACP Registry into its own package (#17405)

test(provider-pi): cover continuation offers through the driver (#17407)

fix(server): reconcile Pi native session rewinds (#13839)

fix(server): keep the Claude MCP token out of process arguments (#17408)

fix(server): Pi loads every selected skill without losing prompt text (#17194)

fix(server): a logged-out Claude CLI no longer reports as authenticated (#15459)

fix(server): a timed-out browser drag no longer exits the server (#17360)

fix(web): show a row spinner instead of a banner when expanding a folder (#17378)

refactor(providers): adapter factories yield their services (#17381)

fix(desktop): cancel backend pipe reads to avoid slow shutdown (#17386)

fix(server): speed up long thread message sync (#17387)

refactor(provider-grok): move Grok into its own provider package (#17357)

refactor(provider-acp): move the shared ACP adapter into its own package (#17354)

refactor(provider-cursor): move Cursor into its own provider package (#17349)

refactor(provider-opencode): move OpenCode into its own provider package (#17345)

fix(auth): show connection permissions and enforce session lifetime (#17370)

refactor(providers): namespace-import service modules in core, Muse, Pi, and testing (#17375)

fix(web): drop sidebar context before cancelling pointer drag (#17373)

fix(web): add room for thread timeline markers (#17372)

fix(server): agent browser tools stop bloating history, fall back sensibly, and respect ownership (#16956)

feat(mobile): fade working threads and match web's status labels (#17368)

fix(mobile): restore chat image previews in the v5 stack (#17361)

fix(web): semantic branch naming hint lines up with its setting (#16972)

refactor(provider-muse): move Muse Code into its own provider package (#17331)

fix(web): images, video, HTML and PDF preview in a thread before its first message (#17352)

fix(desktop): the t3 command warns instead of installing behind another t3 (#17351)

fix(web): desktop opens remote environments' browser tabs locally (#17316)

fix(desktop): browser tab fixes for fullscreen, shortcuts, links, reload and hidden tabs (#16961)

fix(server): environment-hosted browser tabs behave like a normal browser (#16963)

fix(web): file previews handle downloads, in-page links, and repo paths, and favicons stop leaking internal hosts (#16950)

refactor(provider-core): share attachment prompts, notifications, and event loggers (#17330)

fix(muse): workflow subagents no longer stall on hidden approvals (#17329)

fix(web): collapsed composer reserves room for wide send actions (#17016)

feat(models): tell users when a CLI update unlocks a new model (#17307)

refactor(provider-pi): move Pi into its own provider package (#17302)

refactor(settings): drop the legacy per-driver providers map (#17300)

refactor(provider-core): add provider-core and provider-testing packages (#17299)

fix(shared): bound cloudflared download with 10-minute timeout (#14139)

chore(shared): bump managed cloudflared to 2026.10.0 (#11184)

fix(shared): release relay install locks on cancellation (#10585)

fix(shared): relay client install waits out a brief Windows file lock (#16998)