chore: sync upstream main (105 commits)

[jamesainslie]

Brings Lathe level with upstream main at f23d008 (105 upstream commits since the 2026-10-10 sync). The merge hit 19 conflicted files, almost all where both sides appended to the same list, plus four places where fork code had to follow an upstream change.

What's coming in

74 fixes, 13 features, 9 perf changes. Features:

• Guided pull request reviews, a beta tour of a pull request, and MCP tools so agents can write and read review guides (feat(pull-requests): guided reviews, a beta tour of a pull request pingdotgg/t3code#18124, feat(mcp): agents can write and read pull request review guides pingdotgg/t3code#18143).
• Providers can be turned on or off per project (feat(settings): providers can be turned on or off per project pingdotgg/t3code#17879).
• Source control hosts are pluggable: each host package ships its own client definition and settings, GitCafe gets a token, new projects can be published to any ready host, and PR quick actions follow each host's capabilities (feat(source-control): each host package ships a client definition pingdotgg/t3code#17746, feat(pull-requests): quick actions follow each host's capabilities, not GitHub pingdotgg/t3code#17774, feat(projects): new projects can be published to any ready host pingdotgg/t3code#17860, feat(source-control): host settings live on each host's definition, with a GitCafe token pingdotgg/t3code#17901).
• Claude subagents can be stopped without stopping their owner (feat(server): stop Claude subagents without stopping their owner pingdotgg/t3code#17826). Claude workflow phases show in Lineage (feat(web): show Claude workflow phases and members in Lineage pingdotgg/t3code#12598).
• OpenTelemetry export settings in Diagnostics (feat(web): configure OpenTelemetry exports in diagnostics pingdotgg/t3code#12538). This exports only to an endpoint you configure, so Lathe's telemetry-off default is unaffected.
• Antigravity quota and usage limits, Pi native sessions in usage reports, and microphone order for mobile voice input.

Conflicts

• Both sides added entries (kept both): server environment capabilities (gitHubAccountRouting and projectProviderInstanceOverrides), mobile preferences, MCP test layers, settings schema keys, test imports.
• Project-scoped settings: the fork's gitHubAccount override sits next to upstream's new providerInstances override. Upstream's t3ProjectFile mapped type is taken, which is equivalent to the fork's.
• Host settings: upstream replaced the Bitbucket and GitHub per-host settings structs with SourceControlHostSettings. The fork's usage-limit secret helpers stay.
• Run execution: the fork's open-tool-item tracking stays, and upstream's tighter delivery condition for owned child threads is applied after it.
• Server layers: upstream's ProjectStore provide goes in front of the fork's layerGitVcsDriver.
• Pull request providers: upstream's per-host actions are mapped over the fork's deduplicated hostResults.
• Timeline imports: upstream's WorkspaceEntryIcon and the fork's SelectionCitationToolbar.

Fork code adapted to upstream

• SourceControlProviderKind is now branded, so GitHub account routing and its tests build kinds with SourceControlProviderKind.make.
• ProjectService now reads ServerSettings, so the project sync test provides ServerSettings.layerTest.
• Upstream's new review guide diffs use useDiffThemeName, so they follow the fork's syntax theme like every other diff surface.
• Both sides added the same DateTime import to MessagesTimeline.logic.ts.

Verification

• Typecheck passes for contracts, shared, client-runtime, provider-core, source-control-core, -github, -gitcafe and -bitbucket, ssh, scripts, server, web, desktop and mobile.
• Format is clean and lint reports no errors (warnings only) on every touched file.
• Identity greps show no drift. The merge adds no new upstream workflows to disable.
• Targeted tests (21 files, 977 tests) in the conflicted and adapted areas pass. The only failure is the install ownership case in ServerEnvironment.test.ts, which is the known macOS /var symlink issue from the last sync. It passes with TMPDIR set to its real path.

Done by Claude Opus 5.5 in Claude Code, running in Lathe.