Merge remote-tracking branch 'upstream/master' into feat/gui-full-access-confirmation

# Conflicts:
#	packages/client/ui-primitives/src/Modal.tsx
#	packages/client/ui-primitives/tests/atoms.spec.tsx

tsconfig.host.json

@@ -20,6 +20,8 @@
     "apps/web/tests/lifecycle-chrome.e2e.ts",
     "apps/web/tests/details-session-lifecycle.e2e.ts",
     "apps/web/tests/settings-chrome.e2e.ts",
+    "apps/web/tests/models-settings.e2e.ts",
+    "apps/web/tests/onboarding-deepseek-config.e2e.ts",
     "apps/web/tests/workspace-management.e2e.ts",
     "apps/web/tests/replay-round-trip.e2e.ts",
     "apps/web/tests/seeded-history.e2e.ts",
@@ -62,6 +64,7 @@
     { "path": "./packages/util/paths" },
     { "path": "./packages/util/timeout" },
     { "path": "./packages/util/retention" },
+    { "path": "./packages/util/atomic-write" },
     { "path": "./packages/llm/llm" },
     { "path": "./packages/llm/token-meter" },
     { "path": "./packages/core/session" },
@@ -78,6 +81,8 @@
     { "path": "./packages/session-query/session-query-sqlite" },
     { "path": "./packages/settings/settings" },
     { "path": "./packages/settings/settings-local" },
+    { "path": "./packages/credentials/credentials" },
+    { "path": "./packages/credentials/credentials-local" },
     { "path": "./packages/session-query/tool-session-query" },
     { "path": "./packages/storage/storage" },
     { "path": "./packages/storage/storage-json" },