chore(coil): merge upstream/main 7445aa733a (335 commits)

[radroid]

Closes #151.

Absorbs upstream main through 2026-09-19 (7445aa733a, 335 commits). 23 files conflicted: six retired-workflow modify/deletes kept deleted, two new upstream workflows (release-desktop.yml, desktop-macos-preview-publish.yml) retired on arrival and added to scripts/coil/sync-upstream.sh, the lockfile regenerated from the fork's pre-sync lock, and 14 source conflicts resolved by hand.

Three fork seams shrank because upstream did the fork's work itself:

• feat(web): queue messages sent client-side while the agent is working pingdotgg/t3code#11673 (client-side queue for a running turn). The fork's steer-a-running-turn decision (composerSteering.logic.ts, its label, and the steerable breadcrumb) is retired. The thread outbox now queues only while disconnected or behind earlier messages; a mid-turn send goes to upstream's queue and steers in at the next tool boundary. ChatView.tsx +237 → +217.
• feat(web): clone repositories in the background instead of holding the palette open pingdotgg/t3code#11762 (background clone with progress). Upstream keeps a redacted stderr tail itself, so the fork's allowNonZeroExit branch is gone. describeGitCloneFailure classifies upstream's tail, NON_INTERACTIVE_GIT_ENV is spread into CLONE_ENV, and the provider is still derived from the remote URL. Upstream's one test that echoed the raw tail now asserts the classified sentence (the two could not both be true). SourceControlRepositoryService.ts +101/-19 → +70/-20.
• feat(mobile): add iPad keyboard shortcuts and command palette pingdotgg/t3code#11679 (iOS enterBehavior setting). The fork's soft-keyboard Return intercept is gated on enterBehavior == .send, and its isInsertingHardLineBreak flag folds into upstream's insertNewline. Android still submits on every bare Enter; upstream's setting is iOS-only by its own doc. T3ComposerEditorView.swift +37 → +28.

Other resolutions: ThreadCoilOverlay follows the route body into ThreadRouteView.tsx (pingdotgg#12015, +5/-0); the WSL heap flag moves into upstream's command array for the node-script runtime (pingdotgg#11511); worktree-setups.reconcile takes upstream's startup slot while the fork's hoisted provider-sessions.reconcile stays (pingdotgg#11852); both settings rows, both search entries, both icon imports kept.

Effect rc.112 → rc.115 broke two fork-owned files with no seam involved: HttpServer.TcpAddress → NetAddress.InetAddress (coil/http/testAuth.ts), and stat now floors nanoseconds so a +1 ms utimes fixture read as stale (coil/loop/sentinel.test.ts, now +1 s).

docs/coil/SEAMS.md re-baselined against 7445aa733a: 78 files, +2688/-5064.

Verified locally: typecheck on contracts, shared, server, web, desktop, mobile (0 errors); vp test on every touched test file plus apps/server/src/coil, sourceControl, serverRuntimeStartup, apps/web/src/outbox, scripts/coil (all green); lint and vp fmt --check on every changed file; apps/web build and the server bundle build both pass.

Land as a merge commit, never a squash.

🤖 Generated with Claude Code

Summary by CodeRabbit

• New Features

  • Added safer preview bundle handling with checks for archive size, file paths, duplicate entries, and required content.
  • Added stronger validation for stable and nightly release sources.
  • Added support for the updated mobile testing workflow and T3 Device panel.
  • Added support for the second thread-transfer test scenario.

• Updates

  • Streamlined web and desktop testing guidance through the Browser panel.
  • Improved release reporting for incomparable scenarios.

• Removed

  • Removed dedicated iOS debugger and simulator-browser tooling.
  • Disabled the Xcode build integration.

[radroid]

Second commit: the first packaged macOS artifact built from this branch tripped the fork's asar gate on x11, ajv, ajv-formats and effect — none real. Upstream pingdotgg#11410 now stages only native externals and inlines the rest, so the gate requires only each layer's externals (scripts/lib/desktop-external-packages.ts / cli-external-packages.ts). Re-verified against the artifact: 4 packages checked, verification passed.