Synced from monorepo

Synced from monorepo

Changes:
- hooks: run the prompt gate before the chat-state commit
- pager: hold the client-owned local queue after a hook-blocked turn
- hooks: enforce UserPromptSubmit blocks and hold the queue behind a blocked prompt
- hooks: parse UserPromptSubmit block decisions
- chat/gateway: identity stamp and runtime rehydration from chat store
- tools: wake task waits on child exit
- auto-mode: auto-allow mkdir/touch as safe creation
- shell: headless sessions default permission mode to always-allow so they never wedge on prompts
- shell: emit session-start context occupancy metrics
- unify websocket crates on 0.28 to drop a duplicate stack from the TUI build
- pager: fix always-dirty rebuild inputs causing no-op rebuilds
- sandbox: canonicalize socket masks and require bubblewrap on Devbox
- auth: route auth decisions through an AuthBackend trait
- shell: span profiler
- bench: add cross-transport worktree lifecycle sampler
- sampler: salvage length-truncated responses behind a per-request length policy
- TUI: retarget legacy model slugs to grok-4.6
- pager: reconstruct turn-end markers on resume
- pager: share turn-stop-reason marker classifier
- shell: persist elapsed_ms on turn completed
- hooks/shell: managed-policy hooks cannot be disabled
- workspace: allow agent messages in Auto mode
- pager: close turn-1/turn-2 race in the autoscroll copy PTY test
- workflows: smoke-check authored Rhai files
- auto-mode: prompt when the classifier blocks on interactive clients
- shell: follow-up mcpServers trust-gate review nits
- sandbox: fix Path import on Darwin enforce builds
- voice: fall back from unusable pw-record on Linux (Ubuntu 22.04)
- computer-hub: upstream connection manager for bot relay
- pager: do not auto-send a paste that ends in a newline
- computer-hub/tool-protocol: typed workspace-server metadata and ServerInfo last-seen timestamp
- shell: measure startup in CI across repo sizes
- tracing: detach turn-end uploads from the agent.prompt span
- shell: gate untrusted project-agent mcpServers on folder trust
- shell: wait for the row PUT in the reset-title writeback test
- sandbox: block io_uring child-network bypass
- subagents: add active subagent follow-up messaging
- hub/terminal: report workspace boundness explicitly instead of counting tools
- mcp: detach serve loop from the turn trace
- shell: adopt agent.prompt traceparent on session.handle_prompt
- security: stop installer from sending the deployment key as a Bearer token to an attacker-settable URL
- shell: instrument post-turn work inside session.handle_prompt
- dashboard: adopt live sessions into dashboard workspace
- dashboard: read workspace members in dashboard v2
- scheduler_create: document when to use the tool
- pager: skip unchanged Kitty overlay frames on Warp
- sandbox: feature-flag switch for workspace OIDC proactive refresh

Source-Revision: 70ec060ec3d28e77b9c4593be43c2ab0128bcd21