[yordis]

• Upstream's custom Claude endpoint tests and the fork's revoked-token tests landed in the same spot; both are kept so a custom endpoint still reads as signed in while a token Anthropic rejects still reads as revoked.
• Upstream's new server resource metrics and the fork's provider runtime event counter were added side by side, so both are kept to preserve the fork's restored orchestration metrics.

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}

[cursor]

PR Summary

Medium Risk
Touches authentication-adjacent cloud link proof rules, MCP session liveness, and CI pull_request_target semantics alongside broad product behavior; no single area is a full rewrite but several paths are security- or infra-sensitive.

Overview
Large upstream sync that bundles security, desktop/mobile fixes, server relay/MCP behavior, and observability in one merge.

CI: The Cursor hygiene webhook switches from pull_request to pull_request_target so fork PRs can use repo secrets without checking out PR code; outbound webhooks still advertise pull_request when the event is pull_request_target.

Desktop: Unpackaged production Windows registers the custom URL scheme with setAsDefaultProtocolClient and the real main.cjs path. WSL state no longer calls wsl.exe to list distros until the backend is enabled. Chromium cookie import casts encrypted_value to BLOB so TEXT-stored ciphertext is not UTF-8 corrupted. PowerShell profile probing shares a 5s budget, falls back to powershell.exe, and honors remaining time per candidate. Minimum main window width drops 840 → 600 (schema, Electron mins, tests).

Mobile: Android composer paste joins multi-item clips with newlines (URI clips stay native). iOS composer can remount via hidden key; thread detail keyboard/safe-area handling changes on Android vs iOS. Browser tab menu adds Close tab, remounts by streaming state, and keeps a minimal menu when idle. Native PR review diffs cap at 2,000 rows per file with a truncation notice. Pending user-input cards show option previews; pull-to-refresh can run invalidation before atom refresh; duo-unfolded home gets a sidebar filter header item; widgets apply deep links to more chrome.

Server: t3 update may send GH_TOKEN / GITHUB_TOKEN to the GitHub releases API. Cloud link proof allows desktop-bootstrap sessions over a non-loopback request host while still requiring a loopback tunnel origin; new HTTP tests cover abuse cases. Relay clients honor Retry-After, with longer backoff for registration/recovery and recovery cooldown doubling up to 30 minutes. MCP tokens stay in the registry after idle expiry so a trusted touch can refresh liveness without re-issue; explicit revocation still wins. Event loop monitor exports RSS, heap, CPU, and delay gauges. Smaller fixes: SSH remote run error tail, Claude terminal API error messaging / full-access fallback, ACP thread-wait blocking on open message streams, workflow member completedAt from progress timestamps.

^{Reviewed by Cursor Bugbot for commit 38c6b3d. Bugbot is set up for automated code reviews on this repo. Configure here.}