feat(prism): integrate mic.sc sign-in and session-bound inference

.github/workflows/fork-identity-qa.yml

@@ -0,0 +1,65 @@
+name: Fork identity browser QA
+
+on:
+  pull_request:
+    branches: [fork]
+    paths:
+      - "apps/web/**"
+      - "packages/client-runtime/**"
+      - "packages/fork-core/**"
+      - "scripts/fork/mic-identity-browser-qa.mjs"
+      - ".github/workflows/fork-identity-qa.yml"
+      - "pnpm-lock.yaml"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: fork-identity-qa-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  browser:
+    name: Identity browser acceptance and screenshots
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          sparse-checkout: |
+            /*
+            !/.repos/
+          sparse-checkout-cone-mode: false
+
+      - name: Setup Vite+
+        uses: voidzero-dev/setup-vp@v1
+        with:
+          node-version-file: package.json
+          cache: true
+          run-install: true
+
+      - name: Install Chromium
+        run: vp exec --filter @t3tools/web -- playwright install --with-deps chromium
+
+      - name: Verify identity UI with synthetic service fixtures
+        env:
+          Q1_IDENTITY_QA_OUTPUT: ${{ runner.temp }}/mic-identity-qa
+        run: node scripts/fork/mic-identity-browser-qa.mjs
+
+      - name: Upload screenshots and acceptance results
+        id: evidence
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: mic-identity-browser-qa-${{ github.sha }}
+          path: ${{ runner.temp }}/mic-identity-qa/
+          if-no-files-found: warn
+          retention-days: 14
+
+      - name: Link review evidence
+        if: always() && steps.evidence.outputs.artifact-url != ''
+        env:
+          ARTIFACT_URL: ${{ steps.evidence.outputs.artifact-url }}
+        run: |
+          printf '### mic.sc identity UI evidence\n\n[Screenshots and acceptance results](%s)\n\nReal Chromium using synthetic Clerk, authority, gateway and provider fixtures. This does not certify live Clerk or production backend access.\n' "$ARTIFACT_URL" >> "$GITHUB_STEP_SUMMARY"

apps/desktop/package.json

@@ -16,7 +16,6 @@
     "@clerk/electron-passkeys": "catalog:",
     "@effect/platform-node": "catalog:",
     "@napi-rs/keyring": "^1.3.0",
-    "@q1code/core": "workspace:*",
     "@t3tools/client-runtime": "workspace:*",
     "@t3tools/contracts": "workspace:*",
     "@t3tools/shared": "workspace:*",

apps/desktop/src/app/DesktopStatePaths.ts

@@ -1,4 +1,4 @@
-import { BRAND } from "@q1code/core/brand"; // fork: base
+import { BRAND } from "@t3tools/client-runtime/fork/brand"; // fork: base
 import * as Option from "effect/Option";
 
 export type JoinPath = (first: string, ...segments: string[]) => string;

apps/mobile/src/Stack.tsx

@@ -58,7 +58,7 @@ import { SettingsLegalRouteScreen } from "./features/settings/SettingsLegalRoute
 import { SettingsProjectGroupingRouteScreen } from "./features/settings/SettingsProjectGroupingRouteScreen";
 import { UsageRouteScreen } from "./features/usage/UsageRouteScreen";
 import { SettingsRouteScreen } from "./features/settings/SettingsRouteScreen";
-import { prismSettingsStackScreen } from "./fork/prism/PrismSettingsScreen"; // fork: prism
+import { prismSettingsStackScreen, withMicPrismIdentity } from "./fork/prism/PrismSettingsScreen"; // fork: prism
 import { ShowcaseCaptureCoordinator } from "./features/showcase/ShowcaseCaptureCoordinator";
 import {
   SettingsLegalDocumentCloseHeaderButton,
@@ -449,7 +449,7 @@ function NotFoundScreen() {
 
 export const RootStack = createNativeStackNavigator({
   initialRouteName: "Home",
-  layout: RootStackLayout,
+  layout: withMicPrismIdentity(RootStackLayout), // fork: prism
   screenOptions: {
     headerShown: false,
   },

apps/mobile/src/fork/prism/MicPrismInferenceSection.tsx

@@ -0,0 +1,223 @@
+import { completeMicPrismChat, listMicPrismModels } from "@t3tools/client-runtime/fork";
+import type { MicIdentityClientInput } from "@t3tools/client-runtime/fork";
+import * as Effect from "effect/Effect";
+import { useCallback, useEffect, useLayoutEffect, useRef, useState } from "react";
+import { Modal, Pressable, ScrollView, View } from "react-native";
+
+import { AppText as Text, AppTextInput as TextInput } from "../../components/AppText";
+import { SettingsSection } from "../../features/settings/components/SettingsSection";
+import { runtime } from "../../lib/runtime";
+
+/** A small inference surface; these service grants never start an environment coding agent. */
+export function MicPrismInferenceSection(props: {
+  readonly input: MicIdentityClientInput;
+  readonly enabled: boolean;
+}) {
+  const [models, setModels] = useState<ReadonlyArray<string>>([]);
+  const [model, setModel] = useState("");
+  const [prompt, setPrompt] = useState("");
+  const [response, setResponse] = useState("");
+  const [error, setError] = useState<string | null>(null);
+  const [busy, setBusy] = useState(false);
+  const [modelPickerOpen, setModelPickerOpen] = useState(false);
+  const request = useRef<AbortController | null>(null);
+  const catalogRequest = useRef<AbortController | null>(null);
+  const currentInput = useRef<MicIdentityClientInput | null>(props.input);
+  useLayoutEffect(() => {
+    currentInput.current = props.input;
+    return () => {
+      currentInput.current = null;
+      request.current?.abort();
+    };
+  }, [props.input]);
+
+  const loadModels = useCallback(() => {
+    catalogRequest.current?.abort();
+    const abort = new AbortController();
+    catalogRequest.current = abort;
+    void runtime
+      .runPromise(listMicPrismModels(props.input).pipe(Effect.result), { signal: abort.signal })
+      .then((result) => {
+        if (
+          abort.signal.aborted ||
+          currentInput.current !== props.input ||
+          props.input.isCurrent?.() === false
+        )
+          return;
+        if (result._tag === "Success") {
+          setModels(result.success);
+          setError(null);
+          setModel((previous) =>
+            result.success.includes(previous) ? previous : (result.success[0] ?? ""),
+          );
+        } else {
+          setModels([]);
+          setModel("");
+          setError("Could not load Prism models. Refresh access and try again.");
+        }
+      })
+      .catch(() => {
+        if (!abort.signal.aborted) setError("Could not load Prism models. Try again.");
+      });
+    return abort;
+  }, [props.input]);
+  useEffect(() => {
+    const abort = loadModels();
+    return () => {
+      abort.abort();
+      catalogRequest.current?.abort();
+    };
+  }, [loadModels]);
+
+  const send = async () => {
+    if (!props.enabled || request.current || !model || !prompt.trim()) return;
+    const input = props.input;
+    const abort = new AbortController();
+    request.current = abort;
+    setBusy(true);
+    setResponse("");
+    setError(null);
+    try {
+      const result = await runtime.runPromise(
+        completeMicPrismChat({
+          ...input,
+          model,
+          messages: [{ role: "user", content: prompt.trim() }],
+        }).pipe(Effect.result),
+        { signal: abort.signal },
+      );
+      if (abort.signal.aborted || currentInput.current !== input || input.isCurrent?.() === false)
+        return;
+      if (result._tag === "Success") setResponse(result.success);
+      else {
+        if (
+          result.failure._tag === "MicIdentityUnauthorizedError" ||
+          result.failure._tag === "MicIdentityForbiddenError"
+        ) {
+          setModels([]);
+          setModel("");
+          setResponse("");
+          setError("Prism access was denied. Refresh your mic.sc sign-in to continue.");
+        } else
+          setError(
+            "Prism could not complete this request. Check model availability and try again.",
+          );
+      }
+    } catch {
+      if (!abort.signal.aborted) setError("The request did not complete. Try again.");
+    } finally {
+      if (request.current === abort) {
+        request.current = null;
+        setBusy(false);
+      }
+    }
+  };
+
+  return (
+    <SettingsSection title="Try a model">
+      <View className="gap-3 p-4">
+        <Text className="text-sm text-foreground-muted">
+          Send a prompt through your paired Prism service. Listed models may be unavailable when
+          provider capacity changes.
+        </Text>
+        <Pressable
+          accessibilityRole="button"
+          accessibilityLabel="Choose Prism model"
+          disabled={!props.enabled || busy || models.length === 0}
+          onPress={() => setModelPickerOpen(true)}
+          className="rounded-xl bg-subtle px-4 py-3"
+        >
+          <Text className="text-sm text-foreground">{model || "Models unavailable"}</Text>
+        </Pressable>
+        <Pressable
+          accessibilityRole="button"
+          disabled={!props.enabled || busy}
+          onPress={() => {
+            loadModels();
+          }}
+          className="self-start rounded-full bg-subtle px-4 py-2"
+        >
+          <Text className="text-sm text-foreground">Refresh models</Text>
+        </Pressable>
+        <TextInput
+          accessibilityLabel="Prompt for Prism"
+          placeholder="Ask a question…"
+          multiline
+          maxLength={8000}
+          value={prompt}
+          onChangeText={setPrompt}
+          editable={props.enabled && !busy}
+          className="min-h-24 rounded-xl bg-subtle p-3 text-foreground"
+        />
+        <Pressable
+          accessibilityRole="button"
+          accessibilityState={{ disabled: !busy && (!props.enabled || !model || !prompt.trim()) }}
+          disabled={!busy && (!props.enabled || !model || !prompt.trim())}
+          onPress={() => {
+            if (busy) {
+              request.current?.abort();
+              setError("Request cancelled.");
+            } else void send();
+          }}
+          className="self-start rounded-full bg-subtle px-4 py-2"
+        >
+          <Text className="text-sm text-foreground">
+            {busy ? "Cancel request" : "Send to Prism"}
+          </Text>
+        </Pressable>
+        {busy ? (
+          <Text accessibilityLiveRegion="polite" className="text-sm text-foreground-muted">
+            Waiting for a response…
+          </Text>
+        ) : null}
+        {error ? (
+          <Text accessibilityLiveRegion="polite" className="text-sm text-adaptive-rose-700-300">
+            {error}
+          </Text>
+        ) : null}
+        {response ? (
+          <Text selectable className="text-sm leading-relaxed text-foreground">
+            {response}
+          </Text>
+        ) : null}
+      </View>
+      <Modal
+        visible={modelPickerOpen}
+        animationType="slide"
+        onRequestClose={() => setModelPickerOpen(false)}
+      >
+        <ScrollView
+          contentInsetAdjustmentBehavior="automatic"
+          className="flex-1 bg-sheet"
+          contentContainerClassName="gap-2 p-5"
+        >
+          <Text className="text-lg font-t3-medium text-foreground">Choose a model</Text>
+          <Pressable
+            accessibilityRole="button"
+            onPress={() => setModelPickerOpen(false)}
+            className="self-start rounded-full bg-subtle px-4 py-2"
+          >
+            <Text className="text-foreground">Done</Text>
+          </Pressable>
+          {models.map((name) => (
+            <Pressable
+              key={name}
+              accessibilityRole="radio"
+              accessibilityState={{ selected: name === model }}
+              onPress={() => {
+                setModel(name);
+                setModelPickerOpen(false);
+              }}
+              className="rounded-xl bg-subtle p-4"
+            >
+              <Text className="text-foreground">
+                {name === model ? "✓ " : ""}
+                {name}
+              </Text>
+            </Pressable>
+          ))}
+        </ScrollView>
+      </Modal>
+    </SettingsSection>
+  );
+}