[henrychu04]

Fable reviewed the e923627 → 67661cf sync (#262–#267) in three areas, plus the gateway-hub delegation work (#268–#270). It found no merge losses or lost seams in the sync. This PR fixes what it did find.

Linked workspaces (from the #268 review)

• Restart race: after a gateway restart, a linked workspace that hadn't connected yet got capability_denied ("not linked"). RemoteDelegation treats that as final, so a re-followed task failed even though the rule existed and the work was still running. It's now a retryable orchestration_error until that workspace connects. A call with no matching rule is still refused for good.
• Labs switch off in the target: this is now upstream PeerMcpClient's non-final orchestration_error, so a running task resumes once the switch is back on. Before, it failed the task permanently.
• Unreadable request: the gateway answers an undecodable outbox request at once instead of letting the caller wait out its 2-minute timeout.
• Rule editing: editing a link rule's endpoints now mints a new rule id. The id is the origin the linkOrigin fence compares, so a re-pointed rule could otherwise inherit another workspace's fenced work.

Sync follow-ups

• scripts/sync-resolve-deleted.mjs and sync.md §3 list the triage, dev-servers and dev-replay paths the sync cut, so the next sync auto-resolves them.
• Seams doc:
  • names threadContextsOutsideEnvironment (it said strandedThreadContexts, which doesn't exist);
  • bumps the GitLab fixes' "checked against" SHA to 67661cf;
  • states the hub's retry and Labs-off behaviour;
  • lists three machine-chip files.
• Coder: markers at the machine-chip and feat(web,mobile): the @ picker lists threads on linked machines pingdotgg/t3code#26201 cut sites and at the dropped secret-request metric.
• docs/user/keyboard-focus.md (F6 workspace navigation, carried in Merge upstream/main 3b2f958603 into coder-only (sync stage 3 of 4) #264) is carried with merge-request wording and linked from Keyboard shortcuts.

Not changed

• ClaudeSkills.test.ts failing on macOS is upstream's (ClaudeSkills plugin-order test fails on macOS (/var symlink) #235).
• A gateway-side timeout for forwarded calls is left as is: the requester gives up after 2 minutes, and the target finishes or the call ends with its connection.

Verification:

• Server, web, gateway and helper typechecks, pnpm knip:check and vp fmt --check pass.
• coderHub.test.ts and OrchestratorMcpService.test.ts pass (44 tests). Gateway and coder-cli node tests pass (119). 37 web settings/composer/ChatView test files pass.
• Throwaway gateway tests (not committed) confirmed all three hub cases: a never-connected linked workspace gets orchestration_error, an unknown environment with no rule gets capability_denied, and an unreadable request is answered with its id at once.

🤖 Generated with Claude Code