<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3194"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

## What changed
- switch the cloud sandbox upload client to a multipart
manifest-plus-file request instead of JSON `Record<string, string>`
payloads
- read synced files as raw bytes for both full and incremental uploads
while preserving `replaceAll`, `deletedFiles`, and queued incremental
sync behavior
- update the fake cloud sandbox server and desktop-side tests to
validate multipart uploads and binary byte preservation

## Why
The previous upload path decoded files as UTF-8 strings before sending
them to the engine, which corrupted binary assets and broke cloud
previews for files like images, fonts, and wasm.

## Impact
Desktop cloud sandbox syncs now send byte-exact file contents to the
engine, including incremental syncs.

## Compatibility
- depends on the engine multipart upload support in
dyad-sh/dyad-llm-engine#146
- the engine PR keeps legacy JSON uploads available for older desktop
clients, but this desktop change is required for binary-safe uploads

## Validation
- `npm test -- src/ipc/utils/cloud_sandbox_provider.test.ts`
- `npm run ts`
- `npm run lint`
- `npm run fmt:check`

<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3188"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->
Co-authored-by: Will Chen <7344640+wwwillchen@users.noreply.github.com>

## Summary
- replace context_manage snapshot assertions with narrower UI and
dump-path checks
- wait for context rows to appear or disappear before continuing so the
picker interactions are deterministic
- remove the obsolete context_manage snapshot baselines

## Test plan
- npm run build
- PLAYWRIGHT_RETRIES=0 PLAYWRIGHT_HTML_OPEN=never npm run e2e --
e2e-tests/context_manage.spec.ts --repeat-each=10
- npm run fmt
- npm run lint:fix
- npm run ts
- npm test

#skip-bugbot
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3187"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

---------
Co-authored-by: Will Chen <7344640+wwwillchen@users.noreply.github.com>

<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3179"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

- **Cloud sandbox**
- **docs: record session learnings**
- **settings: gate cloud sandbox behind experiment**
- **cloud: sync dirty paths incrementally**

<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3177"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

---------
Co-authored-by: Will Chen <willchen90@gmail.com>
Co-authored-by: Will Chen <7344640+wwwillchen@users.noreply.github.com>

<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3183"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

#skip-bb
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3176"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3173"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3172"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

## Summary
- remove unsupported `node-pty` artifacts before Windows signing runs,
including Darwin prebuild directories and the extra `bin` directory
- keep the supported Windows `node-pty` runtime binaries in place for
packaged app execution
- expand the Windows signing unit test to verify unsupported artifacts
are removed and Windows binaries remain

## Test plan
- npm run fmt
- npm run lint:fix
- npm run ts
- npm test

#skip-bugbot

<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3171"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3170"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->
Co-authored-by: Claude <noreply@anthropic.com>

## Summary
- remove the two bundled node-pty PowerShell helper scripts before
Windows signing runs
- keep the Azure Trusted Signing flow unchanged for signable binaries
and libraries
- add a unit test covering the packaging cleanup helper

## Test plan
- npm run fmt
- npm run lint:fix
- npm run ts
- npm test

Generated with Claude Code
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3169"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

---------
Co-authored-by: Claude <noreply@anthropic.com>

<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3168"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

---------
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

## Summary
- replace add-dependency command execution with a cross-platform
node-pty runner in the Electron main process
- preserve add-dependency output and failure handling while adding PTY
output normalization and command timeouts
- package node-pty correctly in Electron Forge by externalizing it from
Vite, rebuilding it, and unpacking its helper binaries

## Test plan
- npm run fmt
- npm run lint:fix
- npm run ts
- npm test
- npm run build

🤖 Generated with Claude Code
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3167"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

---------
Co-authored-by: Will Chen <7344640+wwwillchen@users.noreply.github.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: devin-ai-integration[bot] <158243242+devin-ai-integration[bot]@users.noreply.github.com>

<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3165"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

---------
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

Chat input state management to use per-chat values
 
 Closes #3128 
 
 
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3129"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

---------
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

## Summary
- run Socket Firewall through `npx sfw@2.0.4` instead of relying on a
global install
- keep the socket firewall command path reproducible and avoid Windows
global path issues
- update command-shape assertions in the related IPC tests

## Test plan
- npm run fmt
- npm run lint:fix
- npm run ts
- npm test

<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3163"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

---------
Co-authored-by: Will Chen <7344640+wwwillchen@users.noreply.github.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

## Summary
- accept `keppo-bot[bot]` in GitHub Actions author checks that read raw
`github.*` logins
- switch Claude PR Review to `allowed_bots: \"keppo-bot[bot]\"` instead
of treating the bot as a non-write user
- trust `copilot-pull-request-reviewer` in the PR comment-fixing skill

## Test plan
- `npm run fmt`
- `npm run lint:fix`
- `npm run ts`
- `npm test`

🤖 Generated with [Claude Code](https://claude.com/claude-code)
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3162"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

---------
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Will Chen <7344640+wwwillchen@users.noreply.github.com>

This PR changes the SQLite database setting to use WAL (Write-Ahead
Logging) mode. From what I can tell, it should be an easy performance
improvement with no real downside for our case. Documentation is here:
https://sqlite.org/wal.html

Also, the [docs for
better-sqlite3](https://www.npmjs.com/package/better-sqlite3) explicitly
recommend it:

> Though not required, it is generally important to set the WAL pragma
for performance reasons.

I came across this as I was looking into the issue where the chat code
blocks slow down Dyad's framerate. I'm not entirely sure whether this is
related, but I did notice that sometimes database calls were taking a
lot longer than I expected, and that would cause Dyad's framerate to
drop significantly on my machine. This change seems to be an improvement
in that regard, so it might also have an effect on the code blocks issue
as well.

It's hard to accurately benchmark this because its effect is only
substantial when there are multiple database calls going on at the same
time. I can definitely attempt a benchmark if that would be worthwhile
though.
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3140"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

#skip-bb
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3161"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->
Co-authored-by: Claude <noreply@anthropic.com>

Co-authored-by: Claude <noreply@anthropic.com>

## Summary
- stop the preview route dropdown from showing "Loading routes..." after
route discovery has already finished
- expand React Router discovery to scan common route files like
`src/routes/*`, `*routes.tsx`, and `router.tsx` instead of only
`src/App.tsx`
- add parser tests covering modular route files and merged route
discovery

## Test plan
- `npm run fmt && npm run lint:fix && npm run ts`
- `npm test`

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3158"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

---------
Co-authored-by: Will Chen <7344640+wwwillchen@users.noreply.github.com>

## Summary
- Adds a new right-click context menu option on chat tabs that reorders
tabs so they are grouped by app
- Within each app group the original relative order is preserved, and
app groups appear in the order their first tab was encountered
- The option is disabled when all open tabs belong to the same app
- Includes i18n support (en, pt-BR, zh-CN) and unit tests

Closes #3126

## Test plan
- Right-click on a chat tab and verify the "Group tabs by app" option
appears
- With tabs from multiple apps open, click the option and verify tabs
are reordered by app grouping
- With tabs from only one app, verify the option is disabled
- Run `npm test` — all 1003 tests pass

🤖 Generated with [Claude Code](https://claude.com/claude-code)
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3150"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->
Co-authored-by: Will Chen <7344640+wwwillchen@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>

Fixes #3139 

## Summary
- Fixes the bug where clicking **Sync to GitHub** on the Publish tab and
navigating away before the push finishes dropped the in-flight state —
the push actually continued in the main process, but on return the UI
showed neither success nor failure.
- Moves sync state (`isSyncing`, `syncError`, `syncSuccess`,
`conflicts`, rebase status, etc.) out of local `useState` in
`ConnectedGitHubConnector` and into a Jotai atom keyed by `appId`
(`src/atoms/githubSyncAtoms.ts`), so it survives unmount/remount.
- Adds success/error toasts on completion so users get feedback even
when they're viewing a different preview tab.

## Test plan
- [x] New unit tests in `src/atoms/githubSyncAtoms.test.tsx` verify
state is preserved across unmount/remount, that a "completion" happening
while unmounted is visible on remount, that state is isolated per
`appId`, and that `null` appId is a no-op.
- [x] `npm run ts` — clean
- [x] `npm run fmt` / `npm run lint:fix` — clean (only the pre-existing
unrelated warning in `local_agent_handler.test.ts`)
- [x] `npm test` — 1003/1003 passing
- [ ] Manual: click Sync to GitHub, immediately switch to Code tab,
switch back — spinner should still show (if still running) or the
success message should be visible (if finished); a toast should appear
on completion regardless of tab.

🤖 Generated with [Claude Code](https://claude.com/claude-code)
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3151"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

---------
Co-authored-by: Will Chen <7344640+wwwillchen@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

## Summary
- add a default-on Experiments setting to block unsafe npm packages with
Socket Firewall
- wrap shared add-dependency installs in sfw when available and
bootstrap sfw via npm install -g sfw when it is missing
- surface firewall bootstrap warnings through build-mode approvals and
local-agent add_dependency flows, with tests for the new setting and
install path

## Test plan
- npm run fmt && npm run lint:fix && npm run ts
- npm test

🤖 Generated with [Claude Code](https://claude.com/claude-code)
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3152"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

---------
Co-authored-by: Will Chen <7344640+wwwillchen@users.noreply.github.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3146"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

---------
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

This issue is causing build failure in the main branch

## Summary
- Add MiniMax-M2.7 and MiniMax-M2.7-highspeed to the model selection
list (direct provider and OpenRouter)
- Set MiniMax-M2.7 as the new default model
- Retain all previous models (M2.5, M2.5-highspeed) as available
alternatives
- Update related unit tests

## Why
MiniMax-M2.7 is the latest flagship model with enhanced reasoning and
coding capabilities.

## Changes
- `src/ipc/shared/language_model_constants.ts`: Added M2.7 and
M2.7-highspeed models to the `minimax` provider section (before existing
M2.5 models) and added M2.7 to the `openrouter` section
- `src/__tests__/minimax_provider.test.ts`: Updated tests to verify all
4 models are present, M2.7 is default (first), and model ordering is
correct

## Testing
- Unit tests updated and passing
- Integration tested with MiniMax API
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3038"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

---------
Co-authored-by: PR Bot <pr-bot@minimaxi.com>

probleme :
Before this change, developers couldn't inspect React components in the
Electron app's DevTools. The DevTools only showed the Elements tab
(DOM), not the ⚛️ React Components tab. This made debugging React
components much harder.

solution:
We added automatic loading of React DevTools extension when running in
development mode, so the React Components tab is available in Electron
DevTools.

Two simple files changed:

[main.ts]→ Added React DevTools extension loading code
[package.json] → Added npm run dev script

New script: "dev": "cross-env NODE_ENV=development npm start"
This sets [NODE_ENV=development]( so React DevTools loads


📝 Steps to Enable This Feature
For Developers Using Dyad
Step 1: Install React DevTools Extension in Chrome

Open Google Chrome
Go to:
[https://chromewebstore.google.com/detail/react-developer-tools/fmkadmapgofadopljbjfkapdkoienihi]
Click "Add to Chrome"
Confirm the installation
Step 2: Run the App in Dev Mode





expected behavior
<img width="1591" height="870" alt="Capture d&#39;écran 2026-04-01
152857"
src="https://github.com/user-attachments/assets/341130e8-38ac-4d61-84cb-5415b248278d"
/>

<!-- devin-review-badge-begin -->

---







<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3112"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

## Summary
- Raise the Basic Agent (free tier) message quota from 5 to 10 per
window.
- Add `src/lib/free_agent_quota_limit.ts` as the single source of truth;
IPC re-exports the constant.
- UI (selector, banner, chat error) uses `messagesLimit` from quota
status so copy stays in sync.
- Update `e2e-tests/free_agent_quota.spec.ts` for the new limit and
strings.

## Test plan
- `npm run fmt && npm run lint:fix && npm run ts`
- `npm test` (vitest)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Made with [Cursor](https://cursor.com)
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3147"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->
Co-authored-by: Claude <noreply@anthropic.com>

#skip-bb
Co-authored-by: Claude <noreply@anthropic.com>

<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3121"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->
Co-authored-by: Claude <noreply@anthropic.com>

Currently, `collectFiles` is calling `isGitIgnored` on each
(non-excluded) recursion. Although there is caching, we're frequently
executing Git just to check whether an individual file or directory is
gitignored, meaning that the number of Git invocations scales with the
number of files in the user's app.

This amounts to a substantial number of Git invocations. For smaller
projects it could be dozens; for larger projects it could be thousands.
It's particularly a problem for native Git, because each `exec` call
comes with a lot of overhead even though Git itself is quite fast.

Although I'm not 100% sure, I suspect that this was the underlying cause
of both #2795 and #1642, because:
1. Both mention Dyad freezing when dealing with larger projects, and
this issue is far more noticeable for large projects.
2. Both specifically mention that the freeze happens upon opening their
project, which is when `collectFiles` runs.
3. I was able to replicate the crash consistently on Windows 10 and
inconsistently on Linux Mint by importing a large project into Dyad. I
don't yet have a good automated test for this, though.

The solution that I wrote for this PR puts the responsibility of
traversing the app's files onto native Git instead of doing it manually.
This means that we'll only have one Git invocation per call to the
function (formerly named) `collectFiles`.

I've also done my best to keep the output of `collectFilesNativeGit` as
close as possible to the original `collectFiles`. The ordering of the
files will be different, but I don't think that should make a difference
given that we later sort them anyway.

Some alternatives I've thought of if we decide we want to keep the
current traversal logic:
- Run `git check-ignore` on batches of files (e.g. each result of
`fsAsync.readdir`) rather than one at a time. This would still result in
multiple Git calls, though.
- Run `git check-ignore` on all of the files at once at the end of
`collectFiles`. We wouldn't be able to prune gitignored directories in
our traversal, but at least we'd still avoid the directories in
`EXCLUDED_DIRS`, such as `node_modules` and `.next`.

I've left the logic of `collectFiles` untouched for isomorphic-git for
now. There might be a good way to optimize that as well, but it will
likely be a bit different because isomorphic-git has different
capabilities than native Git.
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3105"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

---------
Co-authored-by: Claude <noreply@anthropic.com>

## Summary
- Removed the unused `NewBadge` component from `ChatModeSelector.tsx`
- Removed "New" badge displays from Agent v2 and Plan mode options, as
these features are no longer new

## Test plan
- Verify the chat mode selector dropdown still renders correctly without
the "New" badges
- Confirm Agent v2 and Plan mode options are still selectable and
functional

🤖 Generated with [Claude Code](https://claude.com/claude-code)
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3113"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->
Co-authored-by: Will Chen <7344640+wwwillchen@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>

#skip-bb
Co-authored-by: Claude <noreply@anthropic.com>

## Summary
This PR adds visual highlighting of search query matches in the
VersionPane component, making it easier for users to identify which
versions match their search criteria.

## Key Changes
- **New `HighlightMatch` component**: Created a reusable component that
highlights matching text segments with a yellow background (with dark
mode support). The matching is case-insensitive.
- **Version number highlighting**: Applied highlighting to version
numbers in the version list header
- **Version hash highlighting**: Applied highlighting to the short
commit hash (OID) displayed next to version numbers
- **Message highlighting**: Applied highlighting to version messages,
including those with reverted version information

## Implementation Details
- The `HighlightMatch` component performs case-insensitive substring
matching and wraps matched text in a `<mark>` element with Tailwind
classes (`bg-yellow-200 dark:bg-yellow-800 rounded-sm`)
- Search query is trimmed before being passed to the highlighting
function to avoid unnecessary whitespace
- The highlighting is applied consistently across all searchable text
fields in the version pane (version numbers, hashes, and messages)
- The implementation preserves existing message transformation logic for
"Reverted" messages while adding highlighting on top
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3117"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

<!-- CURSOR_AGENT_PR_BODY_BEGIN -->
## Summary

- Replace `wwwillchen-bot` with `keppo-bot` in GitHub Actions
privileged-user checks and related docs.
- Remove `dyadbot` from all privileged workflow paths: CI author matrix,
BugBot/Claude PR review triggers, rebase allowed users, label-rebase
authors, triage duplicate-comment guidance, pr-review-responder, and
Claude `allowed_non_write_users`.
- Update `plans/faster-pr-workflows.md` and agent skills
(`deflake-e2e-recent-commits`, `pr-fix-comments`) to match.

## Testing

- Documentation and workflow YAML only; `npm run ts` not run in this
environment (tsgo package unavailable). Formatting applied via `npm run
fmt`.
<!-- CURSOR_AGENT_PR_BODY_END -->

<div><a
href="https://cursor.com/agents/bc-7b9e754e-66e4-4031-947a-9b438c3a5063"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://cursor.com/assets/images/open-in-web-dark.png"><source
media="(prefers-color-scheme: light)"
srcset="https://cursor.com/assets/images/open-in-web-light.png"><img
alt="Open in Web" width="114" height="28"
src="https://cursor.com/assets/images/open-in-web-dark.png"></picture></a>&nbsp;<a
href="https://cursor.com/background-agent?bcId=bc-7b9e754e-66e4-4031-947a-9b438c3a5063"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://cursor.com/assets/images/open-in-cursor-dark.png"><source
media="(prefers-color-scheme: light)"
srcset="https://cursor.com/assets/images/open-in-cursor-light.png"><img
alt="Open in Cursor" width="131" height="28"
src="https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a>&nbsp;</div>


<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3114"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

---------
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Will Chen <wwwillchen@users.noreply.github.com>

<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3110"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->
Co-authored-by: Claude <noreply@anthropic.com>

<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3104"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

#skip-bb
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/3080"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->