Synced from monorepo

Synced from monorepo

Changes:
- Keep user-expanded Execute panels open while progress updates
- Default compaction to two-pass mode
- Add a headless session resume page
- Classify headless sessions in the shell
- Emit startup phases as tracing spans
- Reassemble relay-mangled X10 mouse reports instead of typing them as text
- Default chat compaction mode to segments
- Security: trusting a parent directory no longer implicitly trusts every repo cloned under it later
- Make the interactive default permission mode configurable
- Sanitize and quote remote text in the failed-server reminder
- Announce MCP server failures once per episode
- Reduce auto-mode permission friction and harden always-allow scoping
- Enforce exclusive source selection for workflows
- Reuse a linked codebase for session worktrees
- Route session picker results to the requesting picker
- Hide the workflow tool from child agents
- Gate the bubblewrap lockdown helper on enforce mode
- Revert auto as the default permission mode
- Stop print-once from freezing streaming wake-turn replies at their first chunk
- Treat recalled memory context as advisory
- Reuse a local codebase when cloning with grok
- Improve compaction telemetry
- Add bot-client role and bot-relay skeleton in computer-hub
- Make grok clone bootstrap depth one
- Ground durable memory summaries in reusable facts
- Add fail-closed shallow clone protocol
- Add bot-client connection kind and bot-relay wire types

Source-Revision: 28439e8a8712c363321cf6ff0c2d70cd058d2a7d