feat: publish Mimir open core updates

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -22,7 +22,7 @@ body:
     id: version
     attributes:
       label: Mimir version
-      placeholder: "pnpm exec kb --version"
+      placeholder: "pnpm exec mimir --version"
     validations:
       required: true
   - type: textarea

.github/PULL_REQUEST_TEMPLATE.md

@@ -8,5 +8,5 @@
 
 ## Security
 
-- [ ] No secrets, private documents, `.env` files, or generated `.kb/storage` files are included.
-- [ ] Public documentation does not expose private project details.
+- [ ] No secrets, private documents, `.env` files, generated `.kb/` or generated `.mimir/` state are included.
+- [ ] Public documentation does not expose private project, customer, pricing, or validation details.

.github/workflows/ci.yml

@@ -2,9 +2,9 @@ name: CI
 
 on:
   pull_request:
-    branches: [main]
+    branches: [main, develop]
   push:
-    branches: [main]
+    branches: [main, develop, "feature/**"]
   merge_group:
 
 permissions:
@@ -51,7 +51,7 @@ jobs:
         run: pnpm smoke
 
       - name: Verify generated dist is committed
-        run: git diff --exit-code -- packages/mimir/dist packages/mimir-tts/dist
+        run: git diff --exit-code -- packages/mimir-core/dist packages/mimir-tts/dist
 
       - name: Verify npm package metadata
         run: pnpm package:check

.github/workflows/native-app-build.yml

@@ -0,0 +1,158 @@
+name: Native App Build
+
+on:
+  workflow_dispatch:
+    inputs:
+      target:
+        description: "Native target to build"
+        required: true
+        default: "linux"
+        type: choice
+        options:
+          - linux
+          - macos
+          - windows
+          - desktop-all
+
+permissions:
+  contents: read
+
+concurrency:
+  group: native-app-build-${{ github.ref }}-${{ inputs.target }}
+  cancel-in-progress: false
+
+jobs:
+  linux:
+    name: Build Linux AppImage and deb
+    if: inputs.target == 'linux' || inputs.target == 'desktop-all'
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Install Linux Tauri dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf
+
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+
+      - name: Set up pnpm
+        run: |
+          corepack enable
+          corepack prepare pnpm@11.9.0 --activate
+
+      - name: Set up Rust
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Run release preflight
+        run: pnpm --filter @jcode.labs/mimir-app release:preflight -- --target linux --soft
+
+      - name: Build native bundle
+        run: pnpm --filter @jcode.labs/mimir-app tauri:build:linux
+
+      - name: Generate checksums
+        run: pnpm --filter @jcode.labs/mimir-app release:checksums
+
+      - name: Generate release manifest
+        run: pnpm --filter @jcode.labs/mimir-app release:manifest -- --target linux
+
+      - name: Upload native bundle
+        uses: actions/upload-artifact@v4
+        with:
+          name: mimir-app-linux-${{ github.sha }}
+          path: packages/mimir-app/src-tauri/target/release/bundle/
+          if-no-files-found: error
+
+  macos:
+    name: Build macOS app and dmg
+    if: inputs.target == 'macos' || inputs.target == 'desktop-all'
+    runs-on: macos-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+
+      - name: Set up pnpm
+        run: |
+          corepack enable
+          corepack prepare pnpm@11.9.0 --activate
+
+      - name: Set up Rust
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Run release preflight
+        run: pnpm --filter @jcode.labs/mimir-app release:preflight -- --target macos --soft
+
+      - name: Build native bundle
+        run: pnpm --filter @jcode.labs/mimir-app tauri:build:macos
+
+      - name: Generate checksums
+        run: pnpm --filter @jcode.labs/mimir-app release:checksums
+
+      - name: Generate release manifest
+        run: pnpm --filter @jcode.labs/mimir-app release:manifest -- --target macos
+
+      - name: Upload native bundle
+        uses: actions/upload-artifact@v4
+        with:
+          name: mimir-app-macos-${{ github.sha }}
+          path: packages/mimir-app/src-tauri/target/release/bundle/
+          if-no-files-found: error
+
+  windows:
+    name: Build Windows NSIS and MSI
+    if: inputs.target == 'windows' || inputs.target == 'desktop-all'
+    runs-on: windows-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+
+      - name: Set up pnpm
+        shell: bash
+        run: |
+          corepack enable
+          corepack prepare pnpm@11.9.0 --activate
+
+      - name: Set up Rust
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Run release preflight
+        run: pnpm --filter @jcode.labs/mimir-app release:preflight -- --target windows --soft
+
+      - name: Build native bundle
+        run: pnpm --filter @jcode.labs/mimir-app tauri:build:windows
+
+      - name: Generate checksums
+        run: pnpm --filter @jcode.labs/mimir-app release:checksums
+
+      - name: Generate release manifest
+        run: pnpm --filter @jcode.labs/mimir-app release:manifest -- --target windows
+
+      - name: Upload native bundle
+        uses: actions/upload-artifact@v4
+        with:
+          name: mimir-app-windows-${{ github.sha }}
+          path: packages/mimir-app/src-tauri/target/release/bundle/
+          if-no-files-found: error

.github/workflows/npm-publish.yml

@@ -47,7 +47,7 @@ jobs:
 
       - name: Verify version input
         run: |
-          test "$(node -p "require('./packages/mimir/package.json').version")" = "${{ inputs.version }}"
+          test "$(node -p "require('./packages/mimir-core/package.json').version")" = "${{ inputs.version }}"
           test "$(node -p "require('./packages/mimir-tts/package.json').version")" = "${{ inputs.version }}"
 
       - name: Install dependencies
@@ -69,7 +69,7 @@ jobs:
         run: pnpm smoke
 
       - name: Verify generated dist is committed
-        run: git diff --exit-code -- packages/mimir/dist packages/mimir-tts/dist
+        run: git diff --exit-code -- packages/mimir-core/dist packages/mimir-tts/dist
 
       - name: Verify npm package metadata
         run: pnpm package:check
@@ -89,6 +89,6 @@ jobs:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Publish Mimir
-        run: pnpm --dir packages/mimir publish --access public --provenance --no-git-checks
+        run: pnpm --dir packages/mimir-core publish --access public --provenance --no-git-checks
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.gitignore

@@ -8,13 +8,21 @@ private/**
 .mimir/
 *.tgz
 release-artifacts/
+*.pid
+
+packages/mimir-app/dist/
+packages/mimir-app/src-tauri/target/
+packages/mimir-app/src-tauri/gen/
+packages/mimir-landing/.astro/
+packages/mimir-landing/dist/
+packages/mimir-license-webhook/dist/
 
 # Tracked synthetic examples. Keep generated example runtime state ignored.
-!packages/mimir/examples/
-!packages/mimir/examples/**/
-!packages/mimir/examples/**/.kb/
-!packages/mimir/examples/**/.kb/config.json
-!packages/mimir/examples/**/.kb/sources.txt
-packages/mimir/examples/**/.kb/storage/
-packages/mimir/examples/**/.kb/access.log
-packages/mimir/examples/**/.mimir/
+!packages/mimir-core/examples/
+!packages/mimir-core/examples/**/
+!packages/mimir-core/examples/**/.kb/
+!packages/mimir-core/examples/**/.kb/config.json
+!packages/mimir-core/examples/**/.kb/sources.txt
+packages/mimir-core/examples/**/.kb/storage/
+packages/mimir-core/examples/**/.kb/access.log
+packages/mimir-core/examples/**/.mimir/