[henrychu04]

Stage 2 of the 6d450a4284 → 32ecd71726 upstream sync: the remaining 37 commits, up to upstream's tip. Stage 1 was #285.

Upstream brought

• Stop always completes, and agents that ignore Stop can be force stopped (fix(server): Stop always completes, and an agent that ignores it can be force stopped pingdotgg/t3code#27252). This adds the orchestration.forceStopThread RPC and the threadForceStop capability.
• Restart and stop fixes (fix(server): Stop during a restart no longer leaves the thread stuck pingdotgg/t3code#27141, fix(server): restart continuations retry failed starts and respect a parent's stop pingdotgg/t3code#27222, fix(server): held queues release agent and scheduled messages once the thread completes a run pingdotgg/t3code#27221).
• Review of local commits in the Diff pane (feat(web): review local commits in the Diff pane pingdotgg/t3code#19941), with a new review.getBranchCommits RPC.
• Streaming render performance (perf(web): streaming replies re-render only their last Markdown block pingdotgg/t3code#27417–fix(web): streaming replies no longer re-render every visible timeline row pingdotgg/t3code#27420) and git actions panel performance (perf(web): the git actions panel no longer re-renders on every streamed update pingdotgg/t3code#27418).
• Image-only messages (fix(web,mobile): image-only messages show the image, not the placeholder prompt pingdotgg/t3code#26769).
• Claude mod-input failures (fix(server): fail Claude turns waiting for unsupported mod input pingdotgg/t3code#24320) and readable provider runtime failure banners (fix(server): show readable provider runtime failure banners pingdotgg/t3code#24614).
• Shared GitLab MR reads (fix(gitlab): share merge request reads across detail and checks pingdotgg/t3code#24392).
• Slow worktree checkouts (fix(server): let slow worktree checkouts finish pingdotgg/t3code#23802).
• Terminal fallback query pacing (fix(terminal): retain and pace slow fallback process queries pingdotgg/t3code#24640).
• Agents yield CPU to the server under pressure (fix(server): agents yield CPU, tasks, and reclaim to the server under pressure pingdotgg/t3code#27176).

Decisions

• Secret references in provider environment variables (feat(settings): point provider environment variables at a secret provider pingdotgg/t3code#27115) are cut, like feat(settings): add and list 1Password secret providers behind T3CODE_FEATURE_SECRETS pingdotgg/t3code#25709 and fix(settings): servers check secret provider writes and keep unknown configs to themselves pingdotgg/t3code#27044 in stage 1.
  • Contracts stay upstream's.
  • On the server, upstream's registry code runs around a stand-in resolver, secrets/coderSecretResolver.ts. It reads no reference and lists no kind.
  • Web SecretSourceInput is cut.
  • The server does not advertise secretReferences.
• Other cuts:
  • t3 service protect (feat(server): t3 service protect keeps the server alive when agents fill memory pingdotgg/t3code#27239, fix(server): t3 service protect can ask for your sudo password pingdotgg/t3code#27465) and the shared agentScopeLauncherScript;
  • desktop back/forward and swipe navigation (feat(desktop): back/forward buttons and trackpad swipe navigation pingdotgg/t3code#27430);
  • the T3 Connect tunnel cap (fix(relay): show the account's real tunnel cap in T3 Connect settings pingdotgg/t3code#27442);
  • Claude advisor usage (fix(usage): count Claude advisor calls under the advisor model pingdotgg/t3code#24139);
  • Android EAS devices;
  • guest earlier turns;
  • the thread-history-merge export, which only guest pages use.
• Commit links: when a commit isn't in the thread's workspace, the link falls back to upstream's "Open link" toast. The browser test now uses GitLab /-/commit/ URLs.
• Follow-up commit: the fork-only openPullRequestLink.react.test.tsx mock now returns readThreadShell and readProject, which feat(web): review local commits in the Diff pane pingdotgg/t3code#19941's link handler calls.

Verification

• Passed: pnpm test:coder (every package; after the mock fix, the web and knip steps were rerun), every typecheck in AGENTS.md, knip:check, pnpm build, vp fmt --check on the changed files, and the sync.md section 5 and 6 checks.
• Live check on the local Coder harness: helper install, the RPCs, assets, upload and reattach, and a fake Kilo agent turn calling t3_queue over the bridge all passed. The drive's "project created" step failed only because stage 1's run had already registered /root/live-repo in the same workspace.

🤖 Generated with Claude Code