feat(server): install provider CLI updates in the background#17585

test(server): wait on provider install lock milestones instead of the real clock

Merge remote-tracking branch 'origin/main' into slim/17585

Merge remote-tracking branch 'origin/main' into slim/17585

fix(server): start background provider updates after 2 quiet minutes

fix(server): re-check the installed CLI version before a background install

refactor(server): trace the provider install lock and auto-updater picks

test(server): provide installer services in registry updates

Merge remote-tracking branch 'origin/main' into slim/17585

fix(web,mobile): disable Update automatically while provider update checks are off

chore(server): merge main into background provider updates

test(server): run resumed-owner fencing cases with it.effect.each

fix(server): fence resumed provider install owners

fix(server): narrow provider install lock errors with Schema.is

fix(server): bound detached provider installer lifetime

fix(server): preserve provider install lock ownership

chore(server): merge main into provider lock fix

fix(server): replace the provider install lock atomically

fix(server): retain provider install lock ownership through verification

chore(server): merge main into background provider updates

fix(server): reclaim a stale provider install lock exclusively

fix(server): reclaim a stale provider install lock exclusively

test(server): provide the install lock to the turn-start memory fixture

test(server): provide the install lock to the turn-start memory fixture

refactor(server): rebuild background provider updates on main

feat(server): install provider CLI updates in the background

fix(provider): retain install ownership through process exit and cleanup

Merge remote-tracking branch 'origin/main' into t3/background-provider-updates-int

fix(server): a reused process id never keeps a stale install lease alive

Merge remote-tracking branch 'origin/main' into t3/background-provider-updates-int

fix(server): turns already holding the install lock never wait behind a waiting install

fix(server): installs drain readers, ignore foreign symlinks, and bound installer logs

test(server): keep the host install gate test in a temporary cache

fix(server): pull request review guides wait for provider installs like other text generation

Merge remote-tracking branch 'origin/main' into t3/background-provider-updates-int

fix(server): a provider install keeps admission until its last child exits, even when the server is removed or the disk is full

docs: describe the detached provider install supervisor

fix(server): a detached supervisor finishes provider installs after the server quits or crashes

fix(mobile): writable project settings follow write destinations and continuous input reports activity once

fix(server): background updates recognize native pi, grok symlinks, CODEX_HOME, bun, volta and vite-plus installs

fix(server): older clients no longer show background provider installs as manual updates

fix(server): background provider installs no longer stall or admit CLIs mid-install

Merge remote-tracking branch 'origin/main' into t3/background-provider-updates-int

test(server): other providers keep launching during a Codex first install

fix(server): a manual update waiting for running turns says so

fix(server): only servers share the user-wide provider install gate

fix(server): a standalone Codex reached through a linked home still updates automatically

fix(web): background provider updates stay out of the way in clients

fix(server): every provider CLI launch waits for a running install

fix(server): provider installs wait for turns on every T3 server on the host

fix(server): background provider installs only update installs they own