[henrychu04]

Merges upstream pingdotgg/t3code main at 8760d063e9 (172 commits from 15fe283272) into coder-only. The merge commit holds only the merge itself; each adaptation after it is its own commit.

What upstream brings

• Child approvals answered in the parent thread (feat(clients): surface child approvals in parent threads pingdotgg/t3code#28516); run-once scheduled tasks (feat(scheduler): run a scheduled task once at a specific date and time pingdotgg/t3code#28104, advertised as oneTimeSchedules)
• The Claude stop-hang fix (fix(server): stopping a Claude turn no longer hangs without an acknowledgement pingdotgg/t3code#16419), the Codex write-failure fix (fix(codex): a failed write to the app-server no longer leaves requests hanging pingdotgg/t3code#27924), and GitLab fixes (fix(gitlab): report an expired glab OAuth login as an auth error pingdotgg/t3code#27511 expired OAuth login, fix(gitlab): canceling pipelines no longer show as pending pingdotgg/t3code#21543 cancelled pipelines)
• Bulk MR link and unlink tools over the bridge (feat(mcp): link several PRs to a thread with one call pingdotgg/t3code#27994, feat(mcp): unlink every PR in given states with one call pingdotgg/t3code#27925); PR clone URLs looked up on the PR's own host (fix(vcs): look up pull request clone URLs on the pull request's host pingdotgg/t3code#15000)
• Changes totals refresh after remote polls (fix(server): refresh Changes totals after remote polls pingdotgg/t3code#28600); repository lookups skip git for folders without a repository (perf(server): projects without a repository stop spawning git on every lookup pingdotgg/t3code#27980)
• Generic ACP fixes on Kilo Code's path (fix(acp): cancelled plan steps no longer keep the plan running pingdotgg/t3code#25564, fix(acp): keep turn spending out of context usage pingdotgg/t3code#27927, fix(acp): turn token spend no longer blocks provider handoffs pingdotgg/t3code#22608, fix(provider-acp-registry): reopening a Kimi thread no longer collapses its model picker to Default pingdotgg/t3code#25786); fix(server): delegate_task accepts the inherited options orchestrator_capabilities reports pingdotgg/t3code#28133, fix(server): scheduled tasks start from the default branch, not always main pingdotgg/t3code#27983, and many web fixes

Cut

• fix(observability): record OTLP/JSON spans that leave out empty fields pingdotgg/t3code#23177 (OTLP), feat(mcp): preview_open goes straight to a dev-server port pingdotgg/t3code#28027 (preview_open), feat(release): update notes lead with up to 7 highlights pingdotgg/t3code#28593 (release notes), fix(server): remember T3 Connect HTTP/2 fallback across restarts pingdotgg/t3code#28105 (T3 Connect HTTP/2 fallback, cloud/), and desktop and mobile commits
• perf(server): reuse compiled modules for CLI commands pingdotgg/t3code#27433 CLI compile cache (only the uncarried bin.ts uses it)
• perf(server): connects no longer wait on editor and SSH target discovery pingdotgg/t3code#14519 staleWhileRevalidate.ts and the late remote-open-target discovery in ws.ts
• feat(dev): add startup profiling for cold-start diagnosis pingdotgg/t3code#28566 startup profiling scripts (they preload into the uncarried dev runner and CLI; its Sqlite.setup span is carried)
• fix(desktop): discover shell environment without blocking startup pingdotgg/t3code#28556 applyShellEnvironment
• Copilot lost-session restart (fix(acp): a lost or locked Copilot session restarts on the next message instead of failing every time pingdotgg/t3code#26651)
• The fallback model's settings row, effort picker, and search item (fix(web): find the fallback model in Settings search pingdotgg/t3code#27376, fix(web): configure reasoning for the fallback model pingdotgg/t3code#27593)
• The ChatGPT sharing footer in the docked model picker

New cut paths are added to DELETED_PATHS in scripts/sync-resolve-deleted.mjs.

Restored or adapted

• resolveProjectDefaultProviderModelSelection and jsonc-parser 3.3.1 are restored, because carried web code imports them again.
• Upstream test cases for cut surfaces are dropped. New upstream tests are adapted to merge request wording, GitLab URLs, Claude instances, and the Coder context.
• RepositoryIdentityResolver.test.ts's mocked cases now read a folder-reporting FileSystem (perf(server): projects without a repository stop spawning git on every lookup pingdotgg/t3code#27980).
• VcsStatusBroadcaster.test.ts gets upstream's fix(server): refresh Changes totals after remote polls pingdotgg/t3code#28600 tests, plus the explicit-refresh test that an older fork adaptation had dropped.
• The seams doc lists the new deltas, SYNC_BASE is now 8760d063e9, and the GitLabCli fixes are rechecked against 8760d063e9.

Verification

• pnpm test:coder: exit 0. The first runs found the test adaptations above. One gateway free-port test failed once because another process held the port; it passed twice when rerun alone, and the full suite then passed.
• Every typecheck in AGENTS.md, pnpm knip:check, node scripts/seams-check.mjs 8760d063e9, the unused-locals check, pnpm build, and vp fmt --check over the changed files: all pass.
• Live check against real Coder 2.34.5 with the gateway: helper install and connect, assets, uploads, file search, reattach, a fake Kilo turn calling a T3 tool over the file bridge, the bulk MR tools in the bridge catalog, and saving and deleting a run-once task. All passed.

Open upstream issues: #275 and #229 are unchanged. Their upstream fixes are not in this range. pingdotgg#28516 lets you answer a child approval in the parent, but the parent's "Open approval" link still opens the task in the parent's workspace.

🤖 Generated with Claude Code