Add version control command center

[Quicksaver]

Summary

Adds a Git-backed Version Control command center to the right panel. It is scoped to the active project/repository cwd, works from draft or existing conversations once repository context is available, and keeps Git operations server-authoritative across browser, desktop, VS Code, and remote clients.

The panel focuses on actionable repository work rather than being a full Git dashboard: dirty working trees, local branch sync state, stashes, remotes, sibling worktrees, likely fork branches, and open change-request bases.

What Changed

• Added SOURCE_CONTROL.md as the branch-specific behavior and validation reference for the Version Control panel.
• Added server-side SourceControlPanelService RPC support for snapshots, branch/stash/commit/compare data, selected-file commit and stash flows, discard operations, branch actions, remote actions, and provider-derived PR/MR base checks.
• Extended GitHub, GitLab, Azure DevOps, and Bitbucket source-control provider plumbing so actionable rows can account for open change-request bases while preserving bounded provider diagnostics.
• Added live VCS refresh support through VcsStatusBroadcaster and VcsLocalWatch, including ref-counted local watchers, .git/ event filtering, gitignore-aware suppression, explicit local refreshes, and sibling worktree watcher retention.
• Added the React Version Control panel UI with Actionable and Remotes sections, working-tree file selection, inline diffs, branch/stash/commit rows, searchable compare bases, guarded destructive actions, context menus, manual fetch controls, and a conservative five-minute Actionable remote fetch.
• Centralized right-panel add-surface action metadata so the empty state and add menu share the same Version Control surface gating and action model.
• Added dirty sibling worktree rows and cwd-scoped right-panel File previews so Git operations and file reads target the checkout that owns the displayed changes.
• Hardened branch sync behavior around same-name remote tracking, fork branches, open PR/MR base branches, local-only publishing, diverged branch actions, branch names containing slashes, and branch worktree cwd routing.
• Hardened working-tree handling for renamed files, quoted porcelain paths, mixed staged/unstaged rows, selected-file commit pathspec semantics, discard failures, generated commit failures, and branch deletion resolution.
• Hardened review follow-ups for source-control thread metadata sequencing after a thread is closed/reopened and default compare ref selection for repositories whose checked-out default branch is not named main or master.
• Hardened right-panel fallback behavior so an unavailable active Source Control surface falls back to another visible surface instead of forcing the empty right-panel state.
• Hardened cached Version Control panel restores so cached snapshots show the refresh indicator while revalidating, and restored expanded branch/stash rows hydrate missing detail payloads even when the snapshot fingerprint is unchanged.
• Hardened restored stash expansion and cached stash details so stash@{n} renumbering after stash create/drop operations does not show details for the wrong stash.
• Extended shared RPC, IPC, Git, settings, client-runtime, and VCS contracts for the source-control snapshot and operation protocol.
• Added desktop and web context-menu separator support so destructive source-control actions can be grouped consistently.
• Added focused tests for source-control service behavior, provider base detection, VCS broadcaster/watch behavior, source-control panel state, shared Git contracts, and client-runtime VCS action helpers.

Why

T3 Code needs a compact place to answer "what repository work needs attention now?" without forcing users into a full external Git UI. This change keeps the surface decision-oriented: commit or stash selected changes, inspect branch sync state, publish or sync branches, review stashes, and notice when a PR/MR base has moved.

The server-owned design keeps behavior consistent across clients and avoids browser-side Git execution, while the periodic fetch and local watchers keep the panel current without introducing a high-frequency polling loop.

Validation

• pnpm exec vp test run apps/server/src/sourceControl/SourceControlPanelService.test.ts apps/server/src/sourceControl/GitHubSourceControlProvider.test.ts apps/server/src/sourceControl/GitLabSourceControlProvider.test.ts apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts apps/web/src/components/source-control/SourceControlPanel.logic.test.ts passed: 5 files, 74 tests.
• pnpm exec vp test run apps/server/src/sourceControl/SourceControlPanelService.test.ts apps/server/src/vcs/VcsStatusBroadcaster.test.ts apps/server/src/vcs/GitVcsDriverCore.test.ts passed: 3 files, 82 tests.
• pnpm exec vp test run apps/web/src/components/source-control/SourceControlPanel.logic.test.ts apps/web/src/state/sourceControlPanel.test.ts passed: 2 files, 14 tests.
• pnpm exec vp test run packages/contracts/src/git.test.ts packages/shared/src/git.test.ts packages/client-runtime/src/state/vcsAction.test.ts passed: 3 files, 30 tests.
• pnpm exec vp test run apps/server/src/sourceControl/SourceControlPanelService.test.ts passed: 1 file, 43 tests.
• pnpm exec vp test run apps/web/src/components/ChatView.sourceControl.test.ts passed: 1 file, 11 tests.
• pnpm exec vp test run apps/server/src/sourceControl/SourceControlPanelService.test.ts apps/server/src/vcs/VcsStatusBroadcaster.test.ts apps/server/src/vcs/GitVcsDriverCore.test.ts passed: 3 files, 85 tests.
• pnpm exec vp test run apps/web/src/components/source-control/SourceControlPanel.logic.test.ts passed: 1 file, 12 tests.
• pnpm exec vp test run apps/web/src/components/source-control/SourceControlPanel.logic.test.ts apps/web/src/state/sourceControlPanel.test.ts passed: 2 files, 16 tests.
• pnpm exec vp test run packages/contracts/src/git.test.ts packages/shared/src/git.test.ts packages/client-runtime/src/state/vcsAction.test.ts passed: 3 files, 30 tests.
• pnpm exec vp test run apps/web/src/components/RightPanelTabs.test.tsx passed: 1 file, 3 tests.
• pnpm exec vp check passed with 0 errors and 9 existing warnings in unrelated web files.
• pnpm exec vp run typecheck passed.

Proof

---

Note

Medium Risk
Touches server Git workflows, multi-provider PR/MR queries, and error payloads crossing RPC; behavior is heavily tested but mistakes could affect publish/pull or provider-derived actionable rows.

Overview
Adds SOURCE_CONTROL.md as the canonical reference for the Version Control right-panel behavior, merge status, and validation commands.

Provider and diagnostics hardening: Introduces sanitizeErrorCause and routes GitHub, GitLab, Azure DevOps, and Bitbucket failures through sourceControlProviderError so RPC-facing errors carry bounded causes instead of raw CLI objects. Change-request listing now passes remote repository context (--repo / project) parsed from each remote URL. Opt-in commit author avatars are added via getCommitAvatarUrl on all four providers (GitHub commit API, GitLab Avatar API, Azure DevOps commit imageUrl, Bitbucket avatar links), with GitLab CLI error classification tightened.

Desktop menus: Electron and web context menus honor explicit separator items and insert a separator before the first destructive action even when it leads the menu.

Tests: Adds a large SourceControlPanelService.test.ts suite covering snapshots, renames, discard/commit/merge/push/pull, worktrees, fork/PR actionable rows, avatars, and error wrapping; extends provider and GitHubCli / GitLabCli tests for the new APIs.

^{Reviewed by Cursor Bugbot for commit 41b4d6c. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Add Version Control command center panel to the right panel UI

• Introduces a full-featured SourceControlPanel React component with working tree management, file diffs, staging, commits, branch operations, remotes, and stash support.
• Adds SourceControlPanelService on the server exposing ~25 VCS operations, wired into the WebSocket RPC layer with read/operate scope enforcement and git status refresh after mutating calls.
• Extends the RPC contracts (packages/contracts) with new VcsPanel* schemas, websocket method identifiers, and EnvironmentApi surface for all panel operations.
• Adds getCommitAvatarUrl to all source control providers (GitHub, GitLab, Bitbucket, Azure DevOps) with a per-provider toggle in server settings (showCommitAuthorAvatar, default off).
• Adds file system watching in VcsStatusBroadcaster that debounces non-.git path changes and triggers forced local status refreshes, including sibling worktree discovery.
• Integrates the panel into ChatView with git-cwd awareness, thread metadata routing for branch/worktree changes, and right panel surface filtering when Version Control is unavailable.
• Changes the default automatic git fetch interval from 30 seconds to 5 minutes.
• Risk: the fetch interval change is a behavioral default shift that affects all existing installations on upgrade.

^{Macroscope summarized 41b4d6c.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: 3b0f0549-dd35-4616-aa18-37d7d37d50d2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Needs human review

Diff is too large for automated approval analysis. A human reviewer should evaluate this PR.

^{You can customize Macroscope's approvability policy. Learn more.}

[macroscopeapp]

Effect Service Conventions: one finding in DesktopBackendManager.ts. See inline comment.

^{Posted via Macroscope — Effect Service Conventions}