[henrychu04]

Stage 1 of the be1d066 → becf853 upstream sync: upstream main through 7df7cb9 (258 commits). It stops at the parent of pingdotgg#25324, which turns the new design on by default; stage 2 (pingdotgg#25324 → becf853, about 111 commits) follows separately.

Carried

• New design behind the Beta toggle (feat(web): UI design overhaul, with the new look behind a Beta toggle pingdotgg/t3code#24865). Settings opens as a modal over the thread (feat(web): Settings and Usage open as large modals over your thread pingdotgg/t3code#24847).
• File previews: office, PDF, archives, SQLite, fonts, Mermaid, notebooks, audio (feat(web): preview office files, fonts, and mermaid diagrams pingdotgg/t3code#21362, feat(web): virtualize large file previews pingdotgg/t3code#21466, feat(web): preview archives, sqlite databases, and decoded images pingdotgg/t3code#21467, feat(web): preview opendocument, epub, rich text, and notebooks pingdotgg/t3code#21469, feat(web): play audio inline and open any file the agent shares in the viewer pingdotgg/t3code#21363). All assets come from the bundle; the build output has no CDN references.
• PDF and office-document text for Claude (feat(server): send pdf attachments to claude and antigravity as documents pingdotgg/t3code#21358). Upstream's text worker runs as a child of the helper's own entry point.
• Unchanged from upstream: request_secret file delivery (feat(server): request_secret can save a CLI token to a private file pingdotgg/t3code#24809), thread families, worktree thread ids, older settled threads, queued-run editing, the effect-free React refactors, and the lint rewrites.
• @pierre/diffs 1.6.1. Its patch still carries the fork's null-return loader guard.

Cut

• Guest thread sharing (feat: share a thread with a guest who watches live and sends messages you approve pingdotgg/t3code#24104). Upstream's share links run through server HTTP routes and T3 Connect, neither of which T3 Coder has. The contracts and the orchestration guest decider stay because the contract unions need them; with no share service, they never run.
• LAN direct endpoints (feat(server): devices on the same network reach background services over LAN pingdotgg/t3code#24588), plus the telemetry and usage additions, the usage route, desktop SnapShot state, the host-freeze toast, the legacy-permission notice, and render-metrics scenarios.
• @napi-rs/canvas (pdfjs's Node-only renderer) is ignored, so no new native binary installs on the laptop.

Adaptations after the merge commit

• Gateway CSP hash updated for upstream's edited index.html boot script.
• Restored the "run when the thread settles" switch. Upstream and the fork both still had it, but the merge dropped it.
• Six new transitive packages pinned to upstream's resolved versions. The license overrides name upstream's versions, so the newer ones broke the build.
• knip cleanup.
• coder-only.md updated with the seams. sync.md gains the lockfile pin, restored dependencies, the CSP hash, and a new check for lines lost even though both sides kept them.

Open choice

The GitLab merge request summary keeps the fork's batched GraphQL read instead of upstream's new one-call-per-MR summary (pingdotgg#22583). The hover preview is now upstream's.

Verification

• All typechecks in AGENTS.md pass. pnpm knip:check, pnpm build, and vp fmt --check on the changed files pass.
• pnpm test:coder passes. Server: 3,162 tests. Web: 3,767 unit and browser tests. The known localApi.test.ts hook-timeout flake (Tests that flake under full-suite load #236) failed once under full-suite load, then passed alone and on a full web rerun.
• Section 6 checks: marker counts, lost upstream lines, unused locals, and the new check for lines both sides kept.
• Smoke tests with mocks: the gateway with the helper (web client, thread search, MR filter options), and signed assets (images, video, HTML, PDF, favicon, uploads).
• The bundled Linux helper boots in a node:24 amd64 container and extracts notebook text through __document-text.
• Not done: a live Coder workspace check.

🤖 Generated with Claude Code