[unlockdigital]

Completed threads can remain in Working because of unattended monitors, native child completion can leave parents idle, and PR watches can miss check transitions. This change backports seven focused upstream fixes while preserving Unlock Digital privacy routing, cancellation ownership, and Home read-state behavior.

Depends on #3. This draft targets fix/home-activity-statuses to keep the review limited to the maintenance delta. After #3 merges, reconcile this branch onto its final merged commit, retarget to unlock-digital/main, and repeat affected validation before merge or deployment.

Included upstream changes:

• fix(threads): Working holds only background work the agent waits on pingdotgg/t3code#24610: explicitly awaited background commands and monitors hold Working; unattended work allows Unread/Done. Preserve canonical PR-watch IDs and mark PR-watch monitors awaited.
• fix(server): resume Codex parents after native children finish pingdotgg/t3code#23840 and fix(server): Stop stops a thread's subagents again pingdotgg/t3code#23886: resume eligible Codex parents after native children finish, and stop delegated children with their parent while preserving caller permission limits.
• fix(server): wake PR watches when no checks report pingdotgg/t3code#23863 and fix(server): wake PR watches when remaining CI checks finish pingdotgg/t3code#23904: report absent checks and remaining-check completion with persisted deduplication.
• fix(server): server preview browser rejects the compromised eMudhra intermediates pingdotgg/t3code#24542: update the server preview browser security pin.
• fix(claude): ENABLE_TOOL_SEARCH=auto no longer costs 10x cache writes per session pingdotgg/t3code#24654: avoid excessive Claude cache writes with automatic tool search while preserving explicit settings and inference routing.

Validation on commit 4f93511b0f36b54c2175326b5f0c9cef2df565b7, against base 84ef3f03c4cc1db9228ab87ec465d622242a66b9:

• vp run check:changed 84ef3f03c4cc1db9228ab87ec465d622242a66b9: passed formatting, lint, knip, generated GraphQL verification, 29 affected-package typechecks, and 874 tests across 30 files.
• Server bundle and web production builds passed.
• Separate Claude, MCP ownership, model-routing, preview-installer, and Home browser suites passed 268 tests. Additional privacy and authorization suites passed 28 tests. Counts overlap the main run where applicable.
• Added Home regressions for awaited/unawaited work, read state, child activity, approvals, and settled exclusion; Codex regressions cover failed children, failed/interrupted parents, duplicate terminal events, and late completion after Stop. Claude regressions cover malformed settings, explicit override precedence, and settings-file paths.
• Independent Codex plan and security reviews found no blocking findings after the plan amendments. Added-source screening found no credentials, personal filesystem paths, or email addresses.
• The macOS ARM preview archive matched the pinned byte count and SHA-256, and its executable reported version 156.0.8078.70. Other platform archives and a live compromised-certificate scenario were not exercised locally.

GitHub Actions remains externally blocked for #3: workflow dispatch reports HTTP 422, "Actions has been disabled for this repository", despite enabled repository settings and an active CI workflow. The underlying platform reason is unconfirmed. Local validation is recorded here; hosted CI, final-base reconciliation, and deployment verification remain pending. No protection bypass, runtime restart, or deployment is part of this publication.

Implemented with GPT-6 Astra through Codex; independently reviewed and regression-tested with GPT-6.1 Sol through Codex.