feat: run each project as its own git account

.github/workflows/git-account-tests.yml

@@ -0,0 +1,106 @@
+# Git accounts inject git config, credential helpers and SSH commands that behave
+# differently per OS shell, so their tests also run on macOS and Windows (ci.yml covers Linux only).
+name: Git Account Tests
+
+on:
+  pull_request:
+    paths:
+      - apps/server/src/gitAccounts/**
+      - apps/server/src/git/GitManager*.ts
+      - apps/server/src/vcs/GitVcsDriver*.ts
+      - apps/server/src/terminal/Manager*.ts
+      - apps/server/src/pullRequest/PullRequestService*.ts
+      - packages/source-control-*/src/server/**
+      - .github/workflows/git-account-tests.yml
+  push:
+    branches: [feat/project-git-accounts]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: git-account-tests-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    name: Test (${{ matrix.os }})
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest]
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 30
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+        with:
+          sparse-checkout: |
+            /*
+            !/.repos/
+          sparse-checkout-cone-mode: false
+
+      - name: Setup Vite+
+        uses: voidzero-dev/setup-vp@v1
+        with:
+          node-version-file: package.json
+          cache: true
+          run-install: false
+
+      - name: Install
+        run: vp install
+
+      - name: Test server
+        working-directory: apps/server
+        run: >-
+          vp test run
+          src/gitAccounts
+          src/git/GitManager.test.ts
+          src/terminal/Manager.test.ts
+          src/project/ProjectSetupScriptRunner.test.ts
+          src/pullRequest/PullRequestService.test.ts
+          src/serverSettings.test.ts
+          src/auth/RpcAuthorization.test.ts
+
+      # The rest of this file has macOS-only path failures unrelated to accounts.
+      - name: Test driver env passthrough
+        working-directory: apps/server
+        run: vp test run src/vcs/GitVcsDriverCore.test.ts -t "environment the caller passes"
+
+      - name: Test source control packages
+        run: |
+          for forge in github gitlab forgejo bitbucket azure-devops gitcafe; do
+            (cd "packages/source-control-$forge" && vp test run src/server)
+          done
+
+      - name: Test shared settings
+        working-directory: packages/shared
+        run: vp test run src/projectSettings.test.ts
+
+  # Terminal shims are .cmd files on Windows, with their own quoting rules.
+  windows:
+    name: Test (windows-latest)
+    runs-on: windows-latest
+    timeout-minutes: 30
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+        with:
+          sparse-checkout: |
+            /*
+            !/.repos/
+          sparse-checkout-cone-mode: false
+
+      - name: Setup Vite+
+        uses: voidzero-dev/setup-vp@v1
+        with:
+          node-version-file: package.json
+          cache: true
+          run-install: false
+
+      - name: Install
+        run: vp install
+
+      - name: Test git accounts
+        working-directory: apps/server
+        run: vp test run src/gitAccounts

README.md

@@ -4,6 +4,14 @@ T3 Code is an "agent harness control surface". It enables control of the agents
 
 Works with your subscriptions on Claude Code, Codex, Cursor, Grok Build, OpenCode, Google Antigravity, and fx. If they're set up on your computer, T3 Code can control them.
 
+## What this fork adds
+
+This is a fork of [pingdotgg/t3code](https://github.com/pingdotgg/t3code). It adds:
+
+- **A git account per project.** Add several git accounts (author name and email, plus a saved token or an existing `gh` login, and an optional SSH key), set a default, and pick a different one for any project. Agents, terminals, setup scripts, and T3 Code's own commits, pushes, and pull requests in that project use that account, so you don't have to sign out and back in when you switch projects. If the account can't be used, T3 Code warns first and only falls back to your machine's login for a thread you confirm. Open terminals follow account switches too. Works with GitHub, GitLab, Forgejo/Gitea, Bitbucket, Azure DevOps, and GitCafe. See [Use a different git account per project](./docs/user/source-control.md#use-a-different-git-account-per-project).
+
+The installers and app stores below ship upstream T3 Code, which doesn't include these changes. To use them, build this fork from source (start at [docs/internals/overview.md](./docs/internals/overview.md)). With a server built from this fork, the published mobile app can still switch a project's account by asking an agent in a thread, and the switch only happens once you confirm it.
+
 ## "Wait, what are you selling me?"
 
 Nothing. We built T3 Code because we wanted the best possible development experience with agents. We were inspired by existing solutions like the Codex desktop app, Conductor, Claude Desktop and Cursor Glass, but none met our bar.

apps/mobile/src/features/settings/SettingsServerControlsRouteScreen.test.tsx

@@ -48,6 +48,7 @@ vi.mock("./components/AutoSettleDaysField", () => ({ AutoSettleDaysField: () =>
 vi.mock("./components/SourceControlSignInSection", () => ({
   SourceControlSignInSection: () => null,
 }));
+vi.mock("./components/GitAccountsSection", () => ({ GitAccountsSection: () => null }));
 vi.mock("react-native-safe-area-context", () => ({ useSafeAreaInsets: () => ({ bottom: 0 }) }));
 vi.mock("@react-navigation/native", () => ({ useNavigation: () => ({}) }));
 vi.mock("../../state/session", () => ({

apps/mobile/src/features/settings/SettingsServerControlsRouteScreen.tsx

@@ -1,6 +1,6 @@
 import { useNavigation } from "@react-navigation/native";
 import { SettingsRow } from "./components/SettingsRow";
-import { AuthSettingsWriteScope } from "@t3tools/contracts";
+import { AuthProvidersManageScope, AuthSettingsWriteScope, GitAccountId } from "@t3tools/contracts";
 import { readEnvironmentScope, useEnvironmentsWithScope } from "../../state/session";
 import { ScreenScrollView as ScrollView } from "../../components/ui/ScreenScrollView";
 import { AppText as Text } from "../../components/ui/AppText";
@@ -29,6 +29,7 @@ import { ListChoiceRow as SettingsChoiceRow } from "../../components/ui/ListChoi
 import { SettingsSection } from "./components/SettingsSection";
 import { SettingsSwitchRow } from "./components/SettingsSwitchRow";
 import { SourceControlSignInSection } from "./components/SourceControlSignInSection";
+import { GitAccountsSection } from "./components/GitAccountsSection";
 import { SettingsProjectOverridesSection } from "./components/SettingsProjectOverridesSection";
 import { useSettingsEnvironmentFilter } from "./settings-environment-filter";
 import { useSettingsWriter } from "./useSettingsWriter";
@@ -61,7 +62,12 @@ const PAGE_PROJECT_KEYS: Record<SettingsPage, readonly ProjectScopedServerSettin
     "sidebarAutoSettleOnMerge",
     "sidebarAutoSettleAfterDays",
   ],
-  "source-control": ["defaultAutoPull", "removeAgentCreditsOnMerge"],
+  "source-control": [
+    "defaultAutoPull",
+    "removeAgentCreditsOnMerge",
+    "gitAccountId",
+    "gitAccountWritesRepoConfig",
+  ],
   worktrees: [
     "newWorktreesStartFromOrigin",
     "worktreeSubmodules",
@@ -178,6 +184,7 @@ function ServerSettingsDetail(props: { readonly page: SettingsPage }) {
   const { selectedTargets, projectGroups, selectedProjectKey } = useSettingsEnvironmentFilter();
   const selectedProject = projectGroups.find((group) => group.key === selectedProjectKey);
   const writableEnvironments = useEnvironmentsWithScope(selectedTargets, AuthSettingsWriteScope);
+  const accountManagers = useEnvironmentsWithScope(selectedTargets, AuthProvidersManageScope);
   const projectSelected = selectedProjectKey !== null;
   const targets = resolveMobileSettingsTargets(
     selectedTargets,
@@ -399,6 +406,50 @@ function ServerSettingsDetail(props: { readonly page: SettingsPage }) {
                       onValueChange={(value) => write({ removeAgentCreditsOnMerge: value })}
                     />
                   </SettingsSection>
+                  <SettingsSection
+                    title="Git account"
+                    trailing={
+                      pendingWrites === 0 && isMixed("gitAccountId") ? (
+                        <MixedValuesLabel projectSelected={projectSelected} />
+                      ) : null
+                    }
+                  >
+                    {[
+                      ...(projectSelected ? [] : [{ id: null, label: "None", host: null }]),
+                      ...Object.entries(reference.settings.gitAccounts).map(([id, account]) => ({
+                        id: GitAccountId.make(id),
+                        label: account.label,
+                        host: account.host,
+                      })),
+                    ].map((choice, index) => (
+                      <SettingsChoiceRow
+                        key={choice.id ?? "none"}
+                        label={choice.label}
+                        description={
+                          choice.host === null ? "Use this machine's git login." : choice.host
+                        }
+                        selected={!isMixed("gitAccountId") && uniform("gitAccountId") === choice.id}
+                        separated={index > 0}
+                        disabled={disabledFor("gitAccountId")}
+                        onPress={() => write({ gitAccountId: choice.id })}
+                      />
+                    ))}
+                    <SettingsSwitchRow
+                      icon="doc.text"
+                      label="Write to repo git config"
+                      subtitle="Also set user.name and user.email in the repo. Turning it off restores the previous values."
+                      value={uniform("gitAccountWritesRepoConfig")}
+                      disabled={disabledFor("gitAccountWritesRepoConfig")}
+                      onValueChange={(value) => write({ gitAccountWritesRepoConfig: value })}
+                    />
+                  </SettingsSection>
+                  {!projectSelected && selectedTargets.length === 1 ? (
+                    <GitAccountsSection
+                      settings={reference.settings}
+                      disabled={disabled || accountManagers.size === 0}
+                      onChange={write}
+                    />
+                  ) : null}
                   <SettingsSection title="Default branch">
                     <SettingsSwitchRow
                       icon="arrow.down.circle"