Hold update relaunches on the shared agent classifier

[azooz2003-bit]

Summary

Stacks on #15296 and #15276, and must merge after both. The branch contains a merge of both.

The update relaunch gate from #15296 classified agents from hook lifecycle state alone, which cannot tell a model request from a foreground build, so any mid-turn local agent counted as risky and held automatic installs. This switches the gate to the shared classifier from #15276 (AgentActivityIndex), which also reads the pane's process tree.

Mapping, per AgentActivitySnapshot (a pure static AppDelegate.updateRelaunchBlockers(agents:workspaceTitles:shellPanels:)):

• id is the panel id; location is the workspace title looked up by workspaceID; name is the agent's display name from its kind (the snapshot's name is the pane title, so it is not used).
• A pane that survives the relaunch (cmux ssh or cloud) is safe, with "Keeps running on the remote host".
• Any other agent takes the classifier's safety as is: safe, care or risky. Only a running command, an open question or permission, or a draft is risky; a model request in flight is care and resumes.
• The activity line is the tool command (whitespace collapsed, cut at 60 characters), else the tool name, else a label for the activity kind. A question or permission prompt always says it is waiting on you.
• A local panel with no live agent that is running a foreground command still counts as a running command. Agents whose activity is ended count as plain panels.

The classifier reads the process census asynchronously, so UpdateActionDelegate.updaterRelaunchBlockers() is now async. UpdateRelaunchGate awaits its readiness closure on the first publish, every re-check and after prepare, and re-checks that the hold is still current after each await. An install the user asks for reads the blockers in a main-actor task before deciding to relaunch or ask. The interim hook-lifecycle classifier is removed; midTaskPanelIds and UpdateRelaunchContinuationNudges stay.

New activity labels are localized in all nine app locales.

Testing

• swift test in Packages/macOS/CmuxUpdater: 146 tests passed, three runs. The gate tests now wait for the hold's first async publish before asserting on it; the behaviors they check are unchanged.
• cmuxTests/UpdateRelaunchBlockersTests.swift is rewritten for the mapping. Not run locally: it needs the app test target, so CI runs it.
• python3 scripts/verify-local.py (16/16 passed, including Swift syntax, test wiring and localization parity) and python3 scripts/localization_catalog.py check (0 parity errors).
• The app was not compiled or run locally.

Changelog

Changed: Automatic updates no longer wait on an agent that only looks busy; they wait only for agents running a command or waiting on you

Checklist

• Behavior changes have added or updated tests, or Testing says why not
• UI, settings, menu, schema, help-text or user-facing docs change: localization audited, six new update.agentActivity.* keys with all nine locales
• Reviewed with a subagent before merge, and all bot and human review comments resolved

🤖 Generated with Claude Code

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

---

Summary by cubic

Switches the update relaunch gate from hook lifecycle state to the shared AgentActivityIndex classifier, so an automatic install only waits on agents running a command, blocked on a prompt, or sitting on a draft — a mid-turn agent that is only thinking resumes as care and no longer holds the install. Adds an Install Updates Automatically setting (on for nightly builds) where updates download in the background and install at a quiet moment. The interim hook-lifecycle classifier is removed.

Agent classification

• The gate now reads AgentActivityIndex snapshots; the blockers read is async and re-awaited on every check.
• Only a running command, an open question or permission, or a draft is risky; a model request in flight resumes as care.
• A cmux ssh or cloud pane counts as safe because it keeps running on the remote host.
• A local pane with no live agent but a foreground command still counts as a running command.
• The classifier also powers a new local-only agent.list worker surface.

Automatic installs

• New "Install Updates Automatically" setting, on by default for nightly, drives Sparkle's background downloads.
• An explicit install relaunches as soon as session capture finishes; automatic installs wait for quiet.
• Every relaunch first captures fresh resume indexes, so sessions started since the last scan still resume.
• Interrupted agents resume with a continue-nudge prompt; unused nudges expire.

^{Written for commit 0596e2e. Summary will update on new commits.}

---

Migrated from #15417 after correcting the PR author identity. The original head commit 0596e2e is preserved.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Note

Pull Request opener @azooz2003-bit is not an author or co-author of any commit in this PR (commit identities: teamleaderleo, claude). The CLA check will still proceed and requires every listed identity plus @azooz2003-bit to have signed.

All contributors have signed the CLA ✍️ ✅
_{Posted by the CLA Assistant Lite bot.}