chore: sync with upstream pingdotgg/t3code main

[yordis]

• Dropped ledger entry 0027 because upstream now writes through symlinked settings itself, covering cycles, relative targets, and repointed links beyond what the fork carried.
• Kept ledger entry 0025: upstream fixed the stranded process in the Claude probe fixture, but the provider registry test still leaks one, so the fork fix there still matters.
• Pull request failures carry both the new not-found reason from upstream and the refusal detail from 0024, since they answer different questions and neither replaces the other.
• Folded the delegated-task handling from upstream into the extracted reconciliation planner instead of keeping two copies of the recovery logic, so a process loss leaves delegated work to its child thread on both paths.
• Took the race-safe live session removal from upstream and pointed it at the per-run busy tracking the fork uses, because the clean auto-merge still referenced a counter that no longer exists.
• The fork test for runs left running after a session release now expects delegated subagents to stay running, matching the upstream rule that their child thread settles them.
• The 1Password environment editor keeps its account-picking layout and adopts the animated lock icon from upstream.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[cursor]

PR Summary

Medium Risk
Touches thread-list ordering, desktop webview attach timing, and production OTA fingerprinting—user-visible inbox behavior and release delivery boundaries—not just docs or test style.

Overview
Syncs upstream main into the fork with broad mobile UX, desktop preview, release-safety, and maintainer-doc updates.

Mobile adds an optional Working section beta: unpinned active/monitoring threads fold into a collapsible shelf, the inbox orders by local “return” time (active reorder disabled while on), and Settings → Thread behavior exposes the toggle. Thread list status logic distinguishes monitors vs command-only background work; the floating status pill uses a background state with bolt vs terminal icons. Review defaults to Changes (branch diff) with renamed Uncommitted / Changes labels. Usage gains cost breakdown bars (by type/speed) and metric-aware model ranking. Subagent rows are unified (SubagentRow) in the Agents sheet and transcript. Thread settings can show reported provider option values; composer passes reported model selection through.

Desktop preview attaches debugger control on did-attach-webview via prepareWebview, sending opaque background color before other CDP commands so dark-scheme pages don’t flash white-on-white; destroyed guests are skipped or cleaned up safely. Settings writes surface resolve-symlink failures.

Release / CI: fingerprint.config.js folds app major version into Expo fingerprint so production OTA won’t cross major store binaries; Android ProGuard keeps InputMerger for WorkManager/Glance widgets. CI Check now depends on transfer-report; triage exemptions and CONTRIBUTING clarify maintainer batching vs one-problem PRs for outsiders.

Docs / agents: dev DB guidance moves to statev2.sqlite and vp run migrate-dev-db; SQLite fixture docs target orchestration_v2_projection_* tables; AGENTS describes orchestration v2 commit/outbox/effect-worker testing.

Misc: desktop tests refactored to it.each / it.effect.each; thread.pull-request.watch in server testkit; keyboard-controller patch bump.

^{Reviewed by Cursor Bugbot for commit 2093851. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 2093851. Configure here.}

[cursor]

Subagent cards drop fallback model

Low Severity

Transcript subagent cards set model to live?.model ?? null instead of falling back the way status, progress, and result do. When the live projection is missing or has no model, SubagentRow loses the turn item's model and can render without a model label.

 

^{Reviewed by Cursor Bugbot for commit 2093851. Configure here.}

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	4.9 KiB	4.9 KiB	+40 B (+0.8%)	6.8 KiB	✅
Codex	Thread snapshot wire	3.7 KiB	3.7 KiB	0 B (0.0%)	4.9 KiB	✅
Codex	Live turn WebSocket wire	1.1 KiB	1.2 KiB	+40 B (+3.4%)	2.0 KiB	✅
Codex	Live turn WebSocket decoded	20.4 KiB	20.4 KiB	+41 B (+0.2%)	29.3 KiB	✅
Codex	Live turn messages	1	2	+1 (+100.0%)	8	✅
Claude	Total thread wire	4.9 KiB	4.9 KiB	0 B (0.0%)	6.8 KiB	✅
Claude	Thread snapshot wire	3.7 KiB	3.7 KiB	0 B (0.0%)	4.9 KiB	✅
Claude	Live turn WebSocket wire	1.2 KiB	1.2 KiB	0 B (0.0%)	2.0 KiB	✅
Claude	Live turn WebSocket decoded	20.8 KiB	20.8 KiB	0 B (0.0%)	29.3 KiB	✅
Claude	Live turn messages	2	2	0 (0.0%)	8	✅

Baseline: eb04317 · PR result: 2093851 · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 106.1 KiB
• Claude decoded thread snapshot: 106.4 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.