fix(nix-release): activate pnpm via corepack before CLI deploy

.github/workflows/nix-release.yml

@@ -0,0 +1,202 @@
+name: Build Nix release artifacts
+
+on:
+  push:
+    tags: ["v*"]
+  workflow_dispatch:
+    inputs:
+      version:
+        description: "Version to build (without v prefix)"
+        required: true
+        default: "0.0.24-fork.1"
+
+permissions:
+  contents: write
+
+jobs:
+  build-macos:
+    runs-on: macos-14
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Vite+
+        uses: voidzero-dev/setup-vp@v1
+        with:
+          node-version-file: package.json
+          cache: true
+          run-install: true
+
+      - name: Resolve version
+        id: version
+        run: |
+          if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
+            echo "tag=v${{ inputs.version }}" >> "$GITHUB_OUTPUT"
+            echo "version=${{ inputs.version }}" >> "$GITHUB_OUTPUT"
+          else
+            echo "tag=${GITHUB_REF_NAME}" >> "$GITHUB_OUTPUT"
+            echo "version=${GITHUB_REF_NAME#v}" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Build desktop artifact
+        env:
+          CSC_IDENTITY_AUTO_DISCOVERY: "false"
+        run: |
+          vp run dist:desktop:artifact \
+            --platform mac \
+            --target zip \
+            --arch arm64 \
+            --build-version "${{ steps.version.outputs.version }}" \
+            --verbose
+
+      - name: Build CLI
+        run: vp run --filter t3 build
+
+      - name: Enable pnpm
+        # Vite+ embeds pnpm but does not expose a standalone `pnpm` on PATH,
+        # and `vp` has no `deploy` command. Activate the repo's pinned pnpm
+        # (the `packageManager` field) via corepack so the deploy step below
+        # can resolve the production dependency closure.
+        run: corepack enable
+
+      - name: Package CLI tarball
+        run: |
+          mkdir -p release
+          # Produce a pruned production tree (bundle dist/ + only runtime deps)
+          # instead of taring the full multi-GB node_modules. pnpm deploy resolves
+          # the prod dependency closure for the `t3` package into a self-contained
+          # dir containing dist/, node_modules/, and package.json.
+          rm -rf cli-deploy
+          pnpm --filter t3 deploy --prod --legacy cli-deploy
+          tar -czf release/t3code-cli-aarch64-darwin.tar.gz -C cli-deploy \
+            node_modules \
+            dist \
+            package.json
+
+      - name: Create release
+        if: startsWith(github.ref, 'refs/tags/')
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ steps.version.outputs.tag }}
+          files: |
+            release/T3-Code-*.zip
+            release/t3code-cli-aarch64-darwin.tar.gz
+
+  build-linux:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Vite+
+        uses: voidzero-dev/setup-vp@v1
+        with:
+          node-version-file: package.json
+          cache: true
+          run-install: true
+
+      - name: Resolve version
+        id: version
+        run: |
+          if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
+            echo "tag=v${{ inputs.version }}" >> "$GITHUB_OUTPUT"
+            echo "version=${{ inputs.version }}" >> "$GITHUB_OUTPUT"
+          else
+            echo "tag=${GITHUB_REF_NAME}" >> "$GITHUB_OUTPUT"
+            echo "version=${GITHUB_REF_NAME#v}" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Build CLI
+        run: vp run --filter t3 build
+
+      - name: Enable pnpm
+        # Vite+ embeds pnpm but does not expose a standalone `pnpm` on PATH,
+        # and `vp` has no `deploy` command. Activate the repo's pinned pnpm
+        # (the `packageManager` field) via corepack so the deploy step below
+        # can resolve the production dependency closure.
+        run: corepack enable
+
+      - name: Package CLI tarball
+        run: |
+          mkdir -p release
+          # Produce a pruned production tree (bundle dist/ + only runtime deps)
+          # instead of taring the full multi-GB node_modules. pnpm deploy resolves
+          # the prod dependency closure for the `t3` package into a self-contained
+          # dir containing dist/, node_modules/, and package.json.
+          rm -rf cli-deploy
+          pnpm --filter t3 deploy --prod --legacy cli-deploy
+          tar -czf release/t3code-cli-x86_64-linux.tar.gz -C cli-deploy \
+            node_modules \
+            dist \
+            package.json
+
+      - name: Create release
+        if: startsWith(github.ref, 'refs/tags/')
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ steps.version.outputs.tag }}
+          files: release/t3code-cli-x86_64-linux.tar.gz
+
+  update-hashes:
+    needs: [build-macos, build-linux]
+    if: startsWith(github.ref, 'refs/tags/')
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: personal
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+      - uses: cachix/install-nix-action@v31
+
+      - name: Download release artifacts
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          mkdir -p artifacts
+          gh release download "${GITHUB_REF_NAME}" \
+            --repo "${{ github.repository }}" \
+            --dir artifacts \
+            --pattern 't3code-cli-*.tar.gz' \
+            --pattern 'T3-Code-*-arm64.zip'
+
+      - name: Compute hashes and write nix-hashes.json
+        run: |
+          VERSION="${GITHUB_REF_NAME#v}"
+
+          CLI_DARWIN=$(nix hash file --sri --type sha256 artifacts/t3code-cli-aarch64-darwin.tar.gz)
+          CLI_LINUX=$(nix hash file --sri --type sha256 artifacts/t3code-cli-x86_64-linux.tar.gz)
+          DESKTOP=$(nix hash file --sri --type sha256 artifacts/T3-Code-*-arm64.zip)
+
+          echo "version:        $VERSION"
+          echo "cli linux:      $CLI_LINUX"
+          echo "cli darwin:     $CLI_DARWIN"
+          echo "desktop darwin: $DESKTOP"
+
+          jq -n \
+            --arg version "$VERSION" \
+            --arg cli_linux "$CLI_LINUX" \
+            --arg cli_darwin "$CLI_DARWIN" \
+            --arg desktop "$DESKTOP" \
+            '{
+              version: $version,
+              cli: {
+                "x86_64-linux": $cli_linux,
+                "aarch64-darwin": $cli_darwin
+              },
+              desktop: {
+                "aarch64-darwin": $desktop
+              }
+            }' > nix-hashes.json
+
+          cat nix-hashes.json
+
+      - name: Commit and push
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add nix-hashes.json
+          if git diff --cached --quiet; then
+            echo "nix-hashes.json already up to date"
+            exit 0
+          fi
+          git commit -m "chore(release): update artifact hashes for ${GITHUB_REF_NAME}"
+          git push origin HEAD:personal

CLAUDE.md

@@ -1 +1 @@
-AGENTS.md
+AGENTS.md

apps/mobile/src/lib/repositoryGroups.test.ts

@@ -17,6 +17,7 @@ function makeProject(
     repositoryIdentity: null,
     defaultModelSelection: null,
     scripts: [],
+    tags: [],
     createdAt: "2026-04-01T00:00:00.000Z",
     updatedAt: "2026-04-01T00:00:00.000Z",
     ...input,

apps/server/integration/OrchestrationEngineHarness.integration.ts

@@ -74,6 +74,7 @@ import {
 import { deriveServerPaths, ServerConfig } from "../src/config.ts";
 import { WorkspaceEntriesLive } from "../src/workspace/Layers/WorkspaceEntries.ts";
 import { WorkspacePathsLive } from "../src/workspace/Layers/WorkspacePaths.ts";
+import * as GitVcsDriver from "../src/vcs/GitVcsDriver.ts";
 import * as VcsDriverRegistry from "../src/vcs/VcsDriverRegistry.ts";
 import { VcsStatusBroadcaster } from "../src/vcs/VcsStatusBroadcaster.ts";
 import { GitWorkflowService } from "../src/git/GitWorkflowService.ts";
@@ -319,13 +320,17 @@ export const makeOrchestrationIntegrationHarness = (
         readonly newBranch: string;
       }) => Effect.succeed({ branch: input.newBranch }),
     });
+    const gitVcsDriverLayer = Layer.mock(GitVcsDriver.GitVcsDriver)({
+      readConfigValue: () => Effect.succeed(null),
+    });
     const textGenerationLayer = Layer.succeed(TextGeneration, {
       generateBranchName: () => Effect.succeed({ branch: "update" }),
       generateThreadTitle: () => Effect.succeed({ title: "New thread" }),
     } as unknown as TextGenerationShape);
     const providerCommandReactorLayer = ProviderCommandReactorLive.pipe(
       Layer.provideMerge(runtimeServicesLayer),
       Layer.provideMerge(gitWorkflowLayer),
+      Layer.provideMerge(gitVcsDriverLayer),
       Layer.provideMerge(textGenerationLayer),
       Layer.provideMerge(serverSettingsLayer),
     );

apps/server/src/checkpointing/Layers/CheckpointDiffQuery.test.ts

@@ -108,6 +108,8 @@ describe("CheckpointDiffQueryLive", () => {
             }),
           getThreadShellById: () => Effect.succeed(Option.none()),
           getThreadDetailById: () => Effect.succeed(Option.none()),
+          listAllTags: () => Effect.succeed([]),
+          getTagById: () => Effect.succeed(Option.none()),
         }),
       ),
     );
@@ -200,6 +202,8 @@ describe("CheckpointDiffQueryLive", () => {
           getFullThreadDiffContext: () => Effect.die("unused"),
           getThreadShellById: () => Effect.succeed(Option.none()),
           getThreadDetailById: () => Effect.succeed(Option.none()),
+          listAllTags: () => Effect.succeed([]),
+          getTagById: () => Effect.succeed(Option.none()),
         }),
       ),
     );
@@ -282,6 +286,8 @@ describe("CheckpointDiffQueryLive", () => {
           getFullThreadDiffContext: () => Effect.die("unused"),
           getThreadShellById: () => Effect.succeed(Option.none()),
           getThreadDetailById: () => Effect.succeed(Option.none()),
+          listAllTags: () => Effect.succeed([]),
+          getTagById: () => Effect.succeed(Option.none()),
         }),
       ),
     );
@@ -349,6 +355,8 @@ describe("CheckpointDiffQueryLive", () => {
           getFullThreadDiffContext: () => Effect.die("unused"),
           getThreadShellById: () => Effect.succeed(Option.none()),
           getThreadDetailById: () => Effect.succeed(Option.none()),
+          listAllTags: () => Effect.succeed([]),
+          getTagById: () => Effect.succeed(Option.none()),
         }),
       ),
     );
@@ -401,6 +409,8 @@ describe("CheckpointDiffQueryLive", () => {
           getFullThreadDiffContext: () => Effect.succeed(Option.none()),
           getThreadShellById: () => Effect.succeed(Option.none()),
           getThreadDetailById: () => Effect.succeed(Option.none()),
+          listAllTags: () => Effect.succeed([]),
+          getTagById: () => Effect.succeed(Option.none()),
         }),
       ),
     );

apps/server/src/git/GitManager.ts

@@ -1297,13 +1297,29 @@ export const makeGitManager = Effect.fn("makeGitManager")(function* () {
     });
     const rangeContext = yield* gitCore.readRangeContext(cwd, baseBranch);
 
+    const githubDir = path.join(cwd, ".github");
+    const prTemplate = yield* Effect.gen(function* () {
+      const entries = yield* fileSystem
+        .readDirectory(githubDir, { recursive: false })
+        .pipe(Effect.option);
+      const match = Option.getOrElse(entries, () => [] as Array<string>).find(
+        (name) => name.toLowerCase() === "pull_request_template.md",
+      );
+      if (!match) return undefined;
+      return yield* fileSystem
+        .readFileString(path.join(githubDir, match))
+        .pipe(Effect.option)
+        .pipe(Effect.map(Option.getOrUndefined));
+    });
+
     const generated = yield* textGeneration.generatePrContent({
       cwd,
       baseBranch,
       headBranch: headContext.headBranch,
       commitSummary: limitContext(rangeContext.commitSummary, 20_000),
       diffSummary: limitContext(rangeContext.diffSummary, 20_000),
       diffPatch: limitContext(rangeContext.diffPatch, 60_000),
+      prTemplate,
       modelSelection,
     });
 

apps/server/src/orchestration/Layers/OrchestrationEngine.test.ts

@@ -114,6 +114,7 @@ describe("OrchestrationEngine", () => {
     const projectionSnapshot = {
       snapshotSequence: 7,
       updatedAt: "2026-03-03T00:00:04.000Z",
+      tags: [],
       projects: [
         {
           id: asProjectId("project-bootstrap"),
@@ -124,6 +125,7 @@ describe("OrchestrationEngine", () => {
             model: "gpt-5-codex",
           },
           scripts: [],
+          tags: [],
           createdAt: "2026-03-03T00:00:00.000Z",
           updatedAt: "2026-03-03T00:00:01.000Z",
           deletedAt: null,
@@ -181,13 +183,15 @@ describe("OrchestrationEngine", () => {
               snapshotSequence: projectionSnapshot.snapshotSequence,
               projects: [],
               threads: [],
+              tags: [],
               updatedAt: projectionSnapshot.updatedAt,
             }),
           getArchivedShellSnapshot: () =>
             Effect.succeed({
               snapshotSequence: projectionSnapshot.snapshotSequence,
               projects: [],
               threads: [],
+              tags: [],
               updatedAt: projectionSnapshot.updatedAt,
             }),
           getSnapshotSequence: () =>
@@ -200,6 +204,8 @@ describe("OrchestrationEngine", () => {
           getFullThreadDiffContext: () => Effect.succeed(Option.none()),
           getThreadShellById: () => Effect.succeed(Option.none()),
           getThreadDetailById: () => Effect.succeed(Option.none()),
+          listAllTags: () => Effect.succeed([]),
+          getTagById: () => Effect.succeed(Option.none()),
         }),
       ),
       Layer.provide(

apps/server/src/orchestration/Layers/OrchestrationEngine.ts

@@ -2,6 +2,7 @@ import type {
   OrchestrationEvent,
   OrchestrationReadModel,
   ProjectId,
+  TagId,
   ThreadId,
 } from "@t3tools/contracts";
 import { OrchestrationCommand } from "@t3tools/contracts";
@@ -57,8 +58,8 @@ interface CommandEnvelope {
 }
 
 function commandToAggregateRef(command: OrchestrationCommand): {
-  readonly aggregateKind: "project" | "thread";
-  readonly aggregateId: ProjectId | ThreadId;
+  readonly aggregateKind: "project" | "thread" | "tag";
+  readonly aggregateId: ProjectId | ThreadId | TagId;
 } {
   switch (command.type) {
     case "project.create":
@@ -68,6 +69,13 @@ function commandToAggregateRef(command: OrchestrationCommand): {
         aggregateKind: "project",
         aggregateId: command.projectId,
       };
+    case "tag.create":
+    case "tag.rename":
+    case "tag.delete":
+      return {
+        aggregateKind: "tag",
+        aggregateId: command.tagId,
+      };
     default:
       return {
         aggregateKind: "thread",