@@ -116,7 +116,9 @@ directory and pair with the running server.
 **Settings → Providers** shows provider updates for the selected environment.
 **Update all** updates every outdated provider on every connected environment
 at once. Hover it to see which providers it will update. Providers that only
-offer a manual update command are not included.
+offer a manual update command are not included. Providers installed with npm or
+pnpm are checked against the registry in your npm or pnpm configuration, so a
+company registry or mirror works.
 
 After a successful provider CLI update, T3 Code refreshes model discovery for
 every enabled instance of that provider using its own configuration. Connected
 
@@ -302,6 +302,7 @@ it.layer(NodeServices.layer)("providerMaintenance", (it) => {
             ],
             lockKey: `npm-global:${normalizeCommandPath(tempDir)}`,
           },
+          lookupLatestVersion: expect.anything(),
         });
       }),
   );
@@ -712,6 +713,77 @@ it.layer(NodeServices.layer)("providerMaintenance", (it) => {
     { skip: !symlinksSupported || windowsHost },
   );
 
+  it.effect.each([
+    {
+      case: "the configured registry's release",
+      stdout: '"1.1.0"\n',
+      exitCode: 0,
+      expected: "1.1.0",
+    },
+    {
+      case: "the npm fallback when the npm probe fails",
+      stdout: "",
+      exitCode: 1,
+      expected: "9.9.9",
+    },
+  ])(
+    "advertises $case for npm-global installs",
+    (fixture) =>
+      Effect.gen(function* () {
+        const tempDir = yield* makeTempDir("t3-npm-latest");
+        const npmBinDir = NodePath.join(tempDir, "npm-bin");
+        writeExecutable(NodePath.join(npmBinDir, "npm"));
+        const link = linkIntoPackage(tempDir, "package-tool", [
+          "lib",
+          "node_modules",
+          "@example",
+          "package-tool",
+        ]);
+        const probes: Array<ReadonlyArray<string>> = [];
+
+        const capabilities = yield* resolveProviderMaintenanceCapabilitiesEffect(
+          packageToolUpdate,
+          { binaryPath: link, env: { PATH: "" } },
+        ).pipe(
+          Effect.provideService(HostProcess.Environment, { PATH: npmBinDir }),
+          Effect.provideService(
+            ChildProcessSpawner.ChildProcessSpawner,
+            stdoutSpawner(
+              (_command, args) => {
+                probes.push(args);
+                return fixture.stdout;
+              },
+              () => fixture.exitCode,
+            ),
+          ),
+        );
+
+        const provider = yield* enrichProviderSnapshotWithVersionAdvisory(
+          installedPackageToolProvider,
+          capabilities,
+        ).pipe(
+          Effect.provideServiceEffect(
+            ProviderLatestVersions.ProviderLatestVersions,
+            ProviderLatestVersions.make([["@example/package-tool", "9.9.9"]]),
+          ),
+          Effect.provideService(
+            HttpClient.HttpClient,
+            HttpClient.make(() => Effect.die("the npm version is already cached")),
+          ),
+        );
+        // The update installs into this prefix, so the lookup reads the same global npmrc.
+        expect(probes).toEqual([
+          ["view", "--prefix", tempDir, "--json", "@example/package-tool@latest", "version"],
+        ]);
+        expect(provider.versionAdvisory).toMatchObject({
+          status: "behind_latest",
+          currentVersion: "1.0.0",
+          latestVersion: fixture.expected,
+        });
+      }),
+    { skip: !symlinksSupported || windowsHost },
+  );
+
   it.effect.skipIf(windowsHost)(
     "switches to bun updates when the resolved binary lives in bun's global bin",
     () =>
 
@@ -424,6 +424,26 @@ const resolvePnpmGlobalLatestVersion = Effect.fn("resolvePnpmGlobalLatestVersion
   return nonEmptyString(listedEntries?.[0]?.dependencies?.[packageName]?.version);
 });
 
+const decodeNpmViewVersion = Schema.decodeUnknownOption(Schema.fromJsonString(Schema.String));
+
+// npm view reads the registry, scope and auth settings the update installs with,
+// so a mirror or private registry answers where registry.npmjs.org is blocked.
+const resolveNpmGlobalLatestVersion = Effect.fn("resolveNpmGlobalLatestVersion")(function* (
+  packageName: string,
+  npmPrefix: string,
+) {
+  // Match the updater's npm and server environment, rather than the instance's.
+  const npmPath = yield* resolveCommandPath("npm");
+  if (!npmPath) return null;
+  // The prefix selects the global npmrc, as it does for the update.
+  const viewed = yield* runProbe(
+    npmPath,
+    ["view", "--prefix", npmPrefix, "--json", `${packageName}@latest`, "version"],
+    {},
+  );
+  return viewed ? nonEmptyString(Option.getOrNull(decodeNpmViewVersion(viewed.trim()))) : null;
+});
+
 export const resolvePackageManagedProviderMaintenance = Effect.fn(
   "resolvePackageManagedProviderMaintenance",
 )(function* (
@@ -551,6 +571,7 @@ export const resolvePackageManagedProviderMaintenance = Effect.fn(
     // (claude copies its native binary over a placeholder stub) is left broken
     // while the update reports success. Older npm warns about the unknown
     // config and continues.
+    const services = yield* Effect.context<ProviderMaintenanceResolverServices>();
     return makeProviderMaintenanceCapabilities({
       provider: definition.provider,
       packageName,
@@ -564,6 +585,9 @@ export const resolvePackageManagedProviderMaintenance = Effect.fn(
         `${packageName}@latest`,
       ],
       updateLockKey: `npm-global:${normalizeCommandPath(npmPrefix)}`,
+      lookupLatestVersion: resolveNpmGlobalLatestVersion(packageName, npmPrefix).pipe(
+        Effect.provideContext(services),
+      ),
     });
   }