feat(contracts,devices,mobile,web): adopt 2026-09-22 upstream resilience and polish batch

[rynfar]

Closes #730

Summary

Adopts upstream commits from 2026-09-22 covering server contracts resilience, device maintenance & updates, Opus 5.5 docs, and mobile/web polish:

1. Contracts (#12763): Allow legacy turnId: null on message events during schema decoding so old events don't block server startup.
2. Devices (#12819): Device tool cleanup reviewed but excluded: the install lock ends before helper spawn, so process scanning cannot prove an older install is unused. Existing completed installs are retained until a cross-host install-to-spawn lease makes pruning safe.
3. Devices (#12877): Offer manual updates in tool version details and register RpcAuthorization.
4. Models (#13094): Claude Opus 5.5 docs and model manifest timestamp update. The bundle date now matches its final Pylon content edit (2026-09-24T07:48:28Z), after GPT-6 and Opus classification edits. Refresh retains a newer bundled/live manifest when the hosted catalog lags; newer remote manifests still apply.
5. Mobile (#12855): SF Symbol fallback arrow.triangle.pull -> Tabler IconGitPullRequest on iOS.
6. Mobile (#12949): Disable autocorrect/autocapitalize on iOS search queries in react-native-screens.
7. Web (#10338): Retry failed composer attachment uploads after reconnect.

Validation

• Reviewed final head 4b2070a0f7: scoped server, web, and mobile typechecks passed; model timestamp correction passed an additional t3 typecheck.
• Focused original batch: 147 tests across seven files passed.
• Final model-manifest, local device host, and SSH device script regressions: 25 tests passed; scoped lint passed.
• Independent adversarial review cleared the final source changes and one-line timestamp correction. At exact heads 4b2070a0f7 + provider-refresh PR fix(server): bypass provider caches on explicit refresh #743 1f7cf3f949, 247 combined focused model/registry/Cursor/provider tests and t3 typecheck passed with no merge conflict. Browser/device runtime verification awaits the user’s explicit approval; final-head CI is pending.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
pylon-marketing	Ignored	Preview	Sep 24, 2026 8:57am UTC

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	14.0 KiB	14.0 KiB	−43 B (−0.3%)	15.1 KiB	✅
Codex	Thread snapshot wire	7.2 KiB	7.2 KiB	−3 B (−0.0%)	7.3 KiB	✅
Codex	Live turn WebSocket wire	6.8 KiB	6.7 KiB	−40 B (−0.6%)	7.8 KiB	✅
Codex	Live turn WebSocket decoded	58.0 KiB	58.0 KiB	−44 B (−0.1%)	66.4 KiB	✅
Codex	Live turn messages	10	9	−1 (−10.0%)	21	✅
Claude	Total thread wire	14.0 KiB	14.0 KiB	−45 B (−0.3%)	15.1 KiB	✅
Claude	Thread snapshot wire	7.2 KiB	7.2 KiB	−3 B (−0.0%)	7.3 KiB	✅
Claude	Live turn WebSocket wire	6.8 KiB	6.7 KiB	−42 B (−0.6%)	7.8 KiB	✅
Claude	Live turn WebSocket decoded	58.9 KiB	58.9 KiB	−44 B (−0.1%)	66.4 KiB	✅
Claude	Live turn messages	10	9	−1 (−10.0%)	21	✅

Baseline: eab374a · PR result: 6653fea · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 115.6 KiB
• Claude decoded thread snapshot: 116.3 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.

[rynfar]

Combined integration verification for #731 and #743, without merging either PR: I applied #743 head 1f7cf3f949 onto #731 head 0776b0b05a in an isolated scratch worktree. The merge had no conflicts. The resulting ModelManifest keeps the #731 freshness guard after #743's TTL-bypassing forceRefresh path, so a valid hosted catalog older than the live/bundled manifest is rejected for both normal and forced refresh. The existing tests cover older-hosted retention/reboot and forced refresh with newer hosted data; the combined ModelManifest and ProviderService suites passed 155/155, and the server typecheck passed. No combined branch was pushed. Browser/device verification remains subject to the repository's explicit-approval boundary.

[rynfar]

Final-head correction and combined verification: 4b2070a0f779cc984fc3722a90d3cf55f69fb341 dates the bundled model catalog at its Pylon content edit (2026-09-24T07:48:28Z). The old 2026-09-22T17:51:55Z date predated Pylon's GPT-6 classification edit and this PR's Opus 5.5 classification edit. The currently hosted Pylon catalog (blob 80318721a716f74e261de2accf62e6e8cba92cdb) has no updatedAt; the dated-bundle guard treats it as older. Existing model aliases and explicit selections are unchanged.

Independent one-line source review passed. The isolated combined tree merges this exact head with provider-refresh PR #743 at 1f7cf3f9492b894d1877c9005919ec485c8b8bd2 without conflict. ModelManifest, ProviderRegistry, CursorProvider and ProviderService focused tests pass (247/247), and t3 typecheck passes. No combined PR or push was created. Final-head CI is pending; browser/device interaction still awaits explicit approval.

[vercel]

Deployment failed for project pylon-marketing with the following error:

Resource is limited - try again in 24 hours (more than 100, code: "api-deployments-free-per-day").

Learn More: https://vercel.com/pylon-code?upgradeToPro=build-rate-limit

[rynfar]

Final-head reconciliation at 6653feaa43732e7ae674f931724ac05b96372b11 against current pylon: 295 focused tests across the changed contracts, server, web, and mobile paths pass; server, web, mobile, and contracts typechecks pass; scoped lint and format pass. The only merge conflict was pnpm-lock.yaml; the resolution retained current dependency versions and updated the native patch hash. A frozen offline install and supply-chain policy check pass. Review of the combined diff found no new source blocker.

All final-head checks are green, including Vercel, Check, Test, server tests, Rust, release smoke, and Linux/Windows packaged smoke. Native visual and browser interaction remain unverified as noted in the PR body.