@hearsay-tools/squawk 0.0.0-stage → 0.17.0-dev.5682

package/dist/agent-config/files.js

@@ -0,0 +1,115 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { mkdir, readFile, realpath, rename, stat, writeFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { agentHomePaths } from '../paths.js';
+import { findConfigFile } from './catalog.js';
+import { validateConfig } from './validate.js';
+/**
+ * Read and write native config by catalog id. Validate syntax and content version; write exact
+ * bytes atomically through symlinks. Missing files are absent; other failures return errors.
+ */
+/** sha256 of the exact file bytes. mtime is coarse and lies across filesystems. */
+function hashBytes(content) {
+    return createHash('sha256').update(content, 'utf8').digest('hex');
+}
+function resolvePath(def, repoRoot, env) {
+    return def.resolve(repoRoot, agentHomePaths(env));
+}
+/** Read a config file by id. Unknown id → null; absent file → exists:false; unreadable → thrown-free error string via `error`. */
+export async function readConfigFile(id, repoRoot, env = process.env) {
+    const def = findConfigFile(id);
+    if (!def)
+        return null;
+    const path = resolvePath(def, repoRoot, env);
+    try {
+        const content = await readFile(path, 'utf8');
+        return { id, path, exists: true, content, version: hashBytes(content) };
+    }
+    catch (err) {
+        const e = err;
+        if (e.code === 'ENOENT')
+            return { id, path, exists: false, content: '', version: null };
+        return { error: e.message };
+    }
+}
+/**
+ * Write a config file by id. Validates the content against the file's format,
+ * refuses when `version` does not match what is on disk (stale / lost-update),
+ * creates the parent dir on demand, and writes atomically through any symlink
+ * rather than replacing the link. `version: null` means "I expect no file to
+ * exist yet" — the create path.
+ */
+export async function writeConfigFile(id, content, version, repoRoot, env = process.env) {
+    const def = findConfigFile(id);
+    if (!def)
+        return null;
+    const check = validateConfig(content, def.format);
+    if (!check.ok)
+        return { ok: false, status: 400, error: `Invalid ${def.format}: ${check.error}` };
+    const path = resolvePath(def, repoRoot, env);
+    // Stale-write guard: the version the caller read must still match disk.
+    let current = null;
+    try {
+        current = await readFile(path, 'utf8');
+    }
+    catch (err) {
+        if (err.code !== 'ENOENT') {
+            return { ok: false, status: 500, error: err.message };
+        }
+    }
+    // Footgun guard: emptying a populated file passes format validation (empty is
+    // valid TOML/markdown, and JSON just errors) but silently wipes real config —
+    // unrecoverable for the gitignored/home files that aren't in git. Refuse it;
+    // deleting a config file is a deliberate act, not a stray select-all-delete.
+    if (content.trim() === '' && current !== null && current.trim() !== '') {
+        return {
+            ok: false,
+            status: 400,
+            error: 'refusing to overwrite a non-empty config file with empty content — delete the file manually if you mean to remove it',
+        };
+    }
+    const currentVersion = current === null ? null : hashBytes(current);
+    if (currentVersion !== version) {
+        return {
+            ok: false,
+            status: 409,
+            error: currentVersion === null
+                ? 'the file no longer exists on disk — reload before saving'
+                : 'the file changed on disk since you opened it — reload before saving',
+        };
+    }
+    try {
+        // Resolve the real target so an atomic rename writes THROUGH a symlink
+        // (e.g. ~/.claude → a dotfiles repo) instead of replacing the link itself.
+        let target = path;
+        try {
+            target = await realpath(path);
+        }
+        catch {
+            // file/link absent — target stays as the resolved path (the create case)
+        }
+        await mkdir(dirname(target), { recursive: true });
+        // Unique per write (not just per process) so two concurrent saves of the same
+        // file can't rename the same tmp path over each other and tear the bytes.
+        const tmp = `${target}.cez-tmp-${process.pid}-${randomUUID()}`;
+        await writeFile(tmp, content, 'utf8');
+        await rename(tmp, target);
+        const written = await readFile(target, 'utf8');
+        return { ok: true, read: { id, path, exists: true, content: written, version: hashBytes(written) } };
+    }
+    catch (err) {
+        return { ok: false, status: 500, error: err.message };
+    }
+}
+/** Whether a path currently exists (used by the listing to report `exists`/`size`). */
+export async function statConfigPath(path) {
+    try {
+        const s = await stat(path);
+        return { exists: true, size: s.size };
+    }
+    catch {
+        return { exists: false, size: 0 };
+    }
+}
+export { resolvePath, hashBytes };
+//# sourceMappingURL=files.js.map

package/dist/agent-config/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/agent-config/files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAsB,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C;;;GAGG;AAEH,mFAAmF;AACnF,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAeD,SAAS,WAAW,CAAC,GAAkB,EAAE,QAAgB,EAAE,GAAsB;IAC/E,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,kIAAkI;AAClI,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAU,EACV,QAAgB,EAChB,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAA4B,CAAC;QACvC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACxF,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAU,EACV,OAAe,EACf,OAAsB,EACtB,QAAgB,EAChB,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAEjG,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IAE7C,wEAAwE;IACxE,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;QACnE,CAAC;IACH,CAAC;IACD,8EAA8E;IAC9E,8EAA8E;IAC9E,6EAA6E;IAC7E,6EAA6E;IAC7E,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EAAE,sHAAsH;SAC9H,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACpE,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;QAC/B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EACH,cAAc,KAAK,IAAI;gBACrB,CAAC,CAAC,0DAA0D;gBAC5D,CAAC,CAAC,qEAAqE;SAC5E,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,uEAAuE;QACvE,2EAA2E;QAC3E,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;QACD,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,8EAA8E;QAC9E,0EAA0E;QAC1E,MAAM,GAAG,GAAG,GAAG,MAAM,YAAY,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,EAAE,CAAC;QAC/D,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IACvG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IACnE,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY;IAC/C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACpC,CAAC;AACH,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC"}

package/dist/agent-config/model-settings/claude.d.ts

@@ -0,0 +1,2 @@
+import type { AgentModelSettingsStrategy } from './types.ts';
+export declare const claudeModelSettingsStrategy: AgentModelSettingsStrategy;

package/dist/agent-config/model-settings/claude.js

@@ -0,0 +1,11 @@
+import { firstConfiguredModel, readNativeSettingsFiles } from './shared.js';
+export const claudeModelSettingsStrategy = {
+    runner: 'claude',
+    async read(repoRoot, env) {
+        // Claude Code gives ANTHROPIC_MODEL higher priority than settings files.
+        if (env.ANTHROPIC_MODEL?.trim())
+            return { model: env.ANTHROPIC_MODEL.trim() };
+        return { model: firstConfiguredModel(await readNativeSettingsFiles('claude', repoRoot, env)) };
+    },
+};
+//# sourceMappingURL=claude.js.map

package/dist/agent-config/model-settings/claude.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude.js","sourceRoot":"","sources":["../../../src/agent-config/model-settings/claude.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAG5E,MAAM,CAAC,MAAM,2BAA2B,GAA+B;IACrE,MAAM,EAAE,QAAQ;IAChB,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG;QACtB,yEAAyE;QACzE,IAAI,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE;YAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9E,OAAO,EAAE,KAAK,EAAE,oBAAoB,CAAC,MAAM,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;IACjG,CAAC;CACF,CAAC"}

package/dist/agent-config/model-settings/codex.d.ts

@@ -0,0 +1,2 @@
+import type { AgentModelSettingsStrategy } from './types.ts';
+export declare const codexModelSettingsStrategy: AgentModelSettingsStrategy;

package/dist/agent-config/model-settings/codex.js

@@ -0,0 +1,16 @@
+import { firstConfiguredModel, firstConfiguredProvider, readNativeSettingsFiles, } from './shared.js';
+export const codexModelSettingsStrategy = {
+    runner: 'codex',
+    async read(repoRoot, env) {
+        const files = await readNativeSettingsFiles('codex', repoRoot, env);
+        const provider = firstConfiguredProvider(files);
+        const model = firstConfiguredModel(files);
+        return {
+            ...(model
+                ? { model: provider && provider !== 'openai' && !model.includes('/') ? `${provider}/${model}` : model }
+                : {}),
+            ...(provider ? { provider } : {}),
+        };
+    },
+};
+//# sourceMappingURL=codex.js.map

package/dist/agent-config/model-settings/codex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex.js","sourceRoot":"","sources":["../../../src/agent-config/model-settings/codex.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAGrB,MAAM,CAAC,MAAM,0BAA0B,GAA+B;IACpE,MAAM,EAAE,OAAO;IACf,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG;QACtB,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC1C,OAAO;YACL,GAAG,CAAC,KAAK;gBACP,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE;gBACvG,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClC,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/agent-config/model-settings/opencode.d.ts

@@ -0,0 +1,2 @@
+import type { AgentModelSettingsStrategy } from './types.ts';
+export declare const opencodeModelSettingsStrategy: AgentModelSettingsStrategy;

package/dist/agent-config/model-settings/opencode.js

@@ -0,0 +1,8 @@
+import { firstConfiguredModel, readNativeSettingsFiles } from './shared.js';
+export const opencodeModelSettingsStrategy = {
+    runner: 'opencode',
+    async read(repoRoot, env) {
+        return { model: firstConfiguredModel(await readNativeSettingsFiles('opencode', repoRoot, env)) };
+    },
+};
+//# sourceMappingURL=opencode.js.map

package/dist/agent-config/model-settings/opencode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode.js","sourceRoot":"","sources":["../../../src/agent-config/model-settings/opencode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAG5E,MAAM,CAAC,MAAM,6BAA6B,GAA+B;IACvE,MAAM,EAAE,UAAU;IAClB,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG;QACtB,OAAO,EAAE,KAAK,EAAE,oBAAoB,CAAC,MAAM,uBAAuB,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;IACnG,CAAC;CACF,CAAC"}

package/dist/agent-config/model-settings/pi.d.ts

@@ -0,0 +1,2 @@
+import type { AgentModelSettingsStrategy } from './types.ts';
+export declare const piModelSettingsStrategy: AgentModelSettingsStrategy;

package/dist/agent-config/model-settings/pi.js

@@ -0,0 +1,38 @@
+import { configuredString, firstConfiguredModel, firstConfiguredProvider, readNativeSettingsFiles, } from './shared.js';
+/**
+ * pi's native-settings policy, expressed the same way every other runner's is.
+ *
+ * Pi keeps its startup model as two keys — `defaultProvider` and `defaultModel` — in
+ * `~/.pi/agent/settings.json` and `.pi/settings.json` (project over global, per the catalog's
+ * `modelPriority`). Its `--model` flag accepts `provider/id`, which is also the shape cezar's own
+ * pi presets use, so the two keys compose into one id here; a bare `defaultModel` with no provider
+ * passes through unchanged rather than being guessed at. No file at all reports "no native
+ * default", and the cockpit falls back to cezar's preset for pi.
+ *
+ * The project file counts only when Pi itself would read it. cezar launches Pi in `--mode rpc`,
+ * which never prompts for project trust: without a saved decision Pi falls back to the global
+ * `defaultProjectTrust`, and `ask` (its default) or `never` ignore `.pi/settings.json` outright.
+ * The run engine passes the native default on as `--model`, so a model read from a file Pi
+ * ignores would be forced onto a run Pi would have started differently. Only the documented
+ * `"always"` value in the global file is treated as trust; Pi's saved per-folder decisions
+ * (`trust.json`) have no documented format and are not read, so a project trusted that way
+ * under-reports to the global default rather than guessing.
+ */
+function trustedByGlobalSettings(files) {
+    const global = files.find((file) => file.def.scope === 'user');
+    return global !== undefined && configuredString(global, 'defaultProjectTrust') === 'always';
+}
+export const piModelSettingsStrategy = {
+    runner: 'pi',
+    async read(repoRoot, env) {
+        const all = await readNativeSettingsFiles('pi', repoRoot, env);
+        const files = trustedByGlobalSettings(all) ? all : all.filter((file) => file.def.scope !== 'project');
+        const provider = firstConfiguredProvider(files);
+        const model = firstConfiguredModel(files);
+        return {
+            ...(model ? { model: provider && !model.includes('/') ? `${provider}/${model}` : model } : {}),
+            ...(provider ? { provider } : {}),
+        };
+    },
+};
+//# sourceMappingURL=pi.js.map

package/dist/agent-config/model-settings/pi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi.js","sourceRoot":"","sources":["../../../src/agent-config/model-settings/pi.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,uBAAuB,EAEvB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAGrB;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,uBAAuB,CAAC,KAAoC;IACnE,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;IAC/D,OAAO,MAAM,KAAK,SAAS,IAAI,gBAAgB,CAAC,MAAM,EAAE,qBAAqB,CAAC,KAAK,QAAQ,CAAC;AAC9F,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAA+B;IACjE,MAAM,EAAE,IAAI;IACZ,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG;QACtB,MAAM,GAAG,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;QACtG,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC1C,OAAO;YACL,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9F,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClC,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/agent-config/model-settings/shared.d.ts

@@ -0,0 +1,12 @@
+import type { RunnerId } from '../../core/agent-runner.ts';
+import { type ConfigFileDef, type ConfigFormat } from '../catalog.ts';
+export interface NativeSettingsFile {
+    def: ConfigFileDef;
+    content: string;
+}
+export declare function parseConfigContent(content: string, format: ConfigFormat): unknown;
+export declare function readNativeSettingsFiles(runner: RunnerId, repoRoot: string, env: NodeJS.ProcessEnv): Promise<NativeSettingsFile[]>;
+/** One string-valued key out of a native settings file, or undefined when absent, blank, or unparsable. */
+export declare function configuredString(file: NativeSettingsFile, path: string): string | undefined;
+export declare function firstConfiguredModel(files: readonly NativeSettingsFile[]): string | undefined;
+export declare function firstConfiguredProvider(files: readonly NativeSettingsFile[]): string | undefined;

package/dist/agent-config/model-settings/shared.js

@@ -0,0 +1,100 @@
+import { parse as parseToml } from 'smol-toml';
+import { parse as parseYaml } from 'yaml';
+import { CONFIG_FILES } from '../catalog.js';
+import { readConfigFile } from '../files.js';
+import { stripJsonComments } from '../validate.js';
+/** Remove JSONC trailing commas without touching commas inside string values. */
+function stripJsonTrailingCommas(input) {
+    let out = '';
+    let inString = false;
+    let escaped = false;
+    for (let index = 0; index < input.length; index++) {
+        const character = input[index];
+        if (inString) {
+            out += character;
+            if (escaped)
+                escaped = false;
+            else if (character === '\\')
+                escaped = true;
+            else if (character === '"')
+                inString = false;
+            continue;
+        }
+        if (character === '"') {
+            inString = true;
+            out += character;
+            continue;
+        }
+        if (character === ',') {
+            let next = index + 1;
+            while (/\s/.test(input[next] ?? ''))
+                next++;
+            if (input[next] === '}' || input[next] === ']')
+                continue;
+        }
+        out += character;
+    }
+    return out;
+}
+function valueAtPath(value, path) {
+    return path.split('.').reduce((current, segment) => {
+        if (!current || typeof current !== 'object' || Array.isArray(current))
+            return undefined;
+        return current[segment];
+    }, value);
+}
+export function parseConfigContent(content, format) {
+    if (format === 'toml')
+        return parseToml(content);
+    if (format === 'yaml')
+        return parseYaml(content);
+    return JSON.parse(format === 'jsonc' ? stripJsonTrailingCommas(stripJsonComments(content)) : content);
+}
+function stringAtPath(content, format, path) {
+    try {
+        const value = valueAtPath(parseConfigContent(content, format), path);
+        return typeof value === 'string' && value.trim() ? value.trim() : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function readNativeSettingsFiles(runner, repoRoot, env) {
+    const definitions = CONFIG_FILES.filter((definition) => definition.kind === 'settings' &&
+        definition.runners.includes(runner) &&
+        definition.modelKey !== undefined &&
+        definition.modelPriority !== undefined).sort((left, right) => (right.modelPriority ?? 0) - (left.modelPriority ?? 0));
+    const files = [];
+    for (const definition of definitions) {
+        const file = await readConfigFile(definition.id, repoRoot, env);
+        if (!file || 'error' in file || !file.exists)
+            continue;
+        files.push({ def: definition, content: file.content });
+    }
+    return files;
+}
+/** One string-valued key out of a native settings file, or undefined when absent, blank, or unparsable. */
+export function configuredString(file, path) {
+    return stringAtPath(file.content, file.def.format, path);
+}
+export function firstConfiguredModel(files) {
+    for (const { def, content } of files) {
+        for (const key of def.modelKeys ?? [def.modelKey]) {
+            const model = stringAtPath(content, def.format, key);
+            if (model)
+                return model;
+        }
+    }
+    return undefined;
+}
+export function firstConfiguredProvider(files) {
+    for (const { def, content } of files) {
+        if (!def.modelProviderKey)
+            continue;
+        const provider = stringAtPath(content, def.format, def.modelProviderKey);
+        if (provider)
+            return provider;
+    }
+    return undefined;
+}
+//# sourceMappingURL=shared.js.map

package/dist/agent-config/model-settings/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../../src/agent-config/model-settings/shared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EAAE,YAAY,EAAyC,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAOnD,iFAAiF;AACjF,SAAS,uBAAuB,CAAC,KAAa;IAC5C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,IAAI,SAAS,CAAC;YACjB,IAAI,OAAO;gBAAE,OAAO,GAAG,KAAK,CAAC;iBACxB,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,GAAG,IAAI,CAAC;iBACvC,IAAI,SAAS,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAC;YAC7C,SAAS;QACX,CAAC;QACD,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,QAAQ,GAAG,IAAI,CAAC;YAChB,GAAG,IAAI,SAAS,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,IAAI,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAE,IAAI,EAAE,CAAC;YAC5C,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG;gBAAE,SAAS;QAC3D,CAAC;QACD,GAAG,IAAI,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAU,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;QAC1D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QACxF,OAAQ,OAAmC,CAAC,OAAO,CAAC,CAAC;IACvD,CAAC,EAAE,KAAK,CAAC,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,MAAoB;IACtE,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,MAAoB,EAAE,IAAY;IACvE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,WAAW,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;QACrE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAgB,EAChB,QAAgB,EAChB,GAAsB;IAEtB,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CACrC,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,IAAI,KAAK,UAAU;QAC9B,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QACnC,UAAU,CAAC,QAAQ,KAAK,SAAS;QACjC,UAAU,CAAC,aAAa,KAAK,SAAS,CACzC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC,CAAC;IAChF,MAAM,KAAK,GAAyB,EAAE,CAAC;IACvC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,SAAS;QACvD,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,gBAAgB,CAAC,IAAwB,EAAE,IAAY;IACrE,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAoC;IACvE,KAAK,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,KAAK,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,QAAS,CAAC,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACrD,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAoC;IAC1E,KAAK,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,KAAK,EAAE,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,gBAAgB;YAAE,SAAS;QACpC,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACzE,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAChC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/agent-config/model-settings/types.d.ts

@@ -0,0 +1,9 @@
+import type { RunnerId } from '../../core/agent-runner.ts';
+export interface AgentModelSettings {
+    model?: string | undefined;
+    provider?: string;
+}
+export interface AgentModelSettingsStrategy {
+    readonly runner: RunnerId;
+    read(repoRoot: string, env: NodeJS.ProcessEnv): Promise<AgentModelSettings>;
+}

package/dist/agent-config/model-settings/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/agent-config/model-settings/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/agent-config/model-settings/types.ts"],"names":[],"mappings":""}

package/dist/agent-config/models.d.ts

@@ -0,0 +1,9 @@
+import { type RunnerId } from '../core/agent-runner.ts';
+import type { AgentModelSettings } from './model-settings/types.ts';
+/** The model defaults exposed by the coding agents' own settings files. */
+export type AgentModelDefaults = Partial<Record<RunnerId, string>>;
+export declare function readAgentModelSettings(runner: RunnerId, repoRoot: string, env?: NodeJS.ProcessEnv): Promise<AgentModelSettings>;
+/** Read the current default model for each installed/configured coding agent. */
+export declare function readAgentModelDefaults(repoRoot: string, env?: NodeJS.ProcessEnv): Promise<AgentModelDefaults>;
+/** Read the provider that the agent itself will use for a bare model id. */
+export declare function readAgentModelProvider(runner: RunnerId, repoRoot: string, env?: NodeJS.ProcessEnv): Promise<string | undefined>;

package/dist/agent-config/models.js

@@ -0,0 +1,40 @@
+import { RUNNER_IDS } from '../core/agent-runner.js';
+import { claudeModelSettingsStrategy } from './model-settings/claude.js';
+import { codexModelSettingsStrategy } from './model-settings/codex.js';
+import { opencodeModelSettingsStrategy } from './model-settings/opencode.js';
+import { piModelSettingsStrategy } from './model-settings/pi.js';
+/**
+ * Each runner owns its native-settings policy. Adding another backend means
+ * registering its strategy here; vendor precedence, environment variables,
+ * and provider composition stay inside that runner's module.
+ */
+const MODEL_SETTINGS_STRATEGIES = {
+    claude: claudeModelSettingsStrategy,
+    codex: codexModelSettingsStrategy,
+    opencode: opencodeModelSettingsStrategy,
+    pi: piModelSettingsStrategy,
+    // Cursor persists a model object plus CLI-managed parameter/override flags.
+    // Do not flatten that object into a guessed model string: leaving the prompt
+    // unpinned preserves the CLI's own effective default and model parameters.
+    cursor: { runner: 'cursor', async read() { return {}; } },
+    // OMP's native default model (its model roles) is not read: no native-default strategy, by the
+    // spec's scope (§ Model selection). Returning nothing leaves the prompt unpinned, so OMP's own
+    // model roles apply.
+    omp: { runner: 'omp', async read() { return {}; } },
+};
+export function readAgentModelSettings(runner, repoRoot, env = process.env) {
+    return MODEL_SETTINGS_STRATEGIES[runner].read(repoRoot, env);
+}
+/** Read the current default model for each installed/configured coding agent. */
+export async function readAgentModelDefaults(repoRoot, env = process.env) {
+    const entries = await Promise.all(RUNNER_IDS.map(async (runner) => [
+        runner,
+        (await readAgentModelSettings(runner, repoRoot, env)).model,
+    ]));
+    return Object.fromEntries(entries.filter((entry) => entry[1] !== undefined));
+}
+/** Read the provider that the agent itself will use for a bare model id. */
+export async function readAgentModelProvider(runner, repoRoot, env = process.env) {
+    return (await readAgentModelSettings(runner, repoRoot, env)).provider;
+}
+//# sourceMappingURL=models.js.map

package/dist/agent-config/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../src/agent-config/models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAiB,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAMjE;;;;GAIG;AACH,MAAM,yBAAyB,GAAiD;IAC9E,MAAM,EAAE,2BAA2B;IACnC,KAAK,EAAE,0BAA0B;IACjC,QAAQ,EAAE,6BAA6B;IACvC,EAAE,EAAE,uBAAuB;IAC3B,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;IACzD,+FAA+F;IAC/F,+FAA+F;IAC/F,qBAAqB;IACrB,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;CACpD,CAAC;AAEF,MAAM,UAAU,sBAAsB,CACpC,MAAgB,EAChB,QAAgB,EAChB,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,OAAO,yBAAyB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAgB,EAChB,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC;QAC/B,MAAM;QACN,CAAC,MAAM,sBAAsB,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK;KACnD,CAAC,CACZ,CAAC;IACF,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAwC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC;AACrH,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAgB,EAChB,QAAgB,EAChB,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,OAAO,CAAC,MAAM,sBAAsB,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;AACxE,CAAC"}

package/dist/agent-config/seed.d.ts

@@ -0,0 +1,15 @@
+import { type WorktreeFilesOptions } from '../worktree-manifest.ts';
+/** Whether the native repo-relative `rel` is one of the caller's POSIX `preserve` paths. */
+export declare function isPreserved(preserve: ReadonlySet<string>, rel: string, separator?: string): boolean;
+/**
+ * Copy the seeded personal-layer files from `repoRoot` into `worktreeCwd`.
+ * Guards every file with `git check-ignore` so a file the user genuinely tracked
+ * (against the vendor's advice) is neither copied nor excluded. `preserve` names
+ * repo-relative paths the caller already placed on purpose (a worker's explicit
+ * `--attach` files, hearsay-tools/cezarion#1149): those are left alone and not
+ * reported. A file is written only where nothing is, or where cezar's own unchanged
+ * copy is (the worktree manifest, hearsay-tools/cezarion#1814), so the agent's edit
+ * survives a re-seed. Returns the repo-relative paths that hold cezar's current copy,
+ * for the caller's note. Never throws.
+ */
+export declare function seedAgentConfigLocalLayer(repoRoot: string, worktreeCwd: string, env?: NodeJS.ProcessEnv, preserve?: ReadonlySet<string>, options?: WorktreeFilesOptions): Promise<string[]>;

package/dist/agent-config/seed.js

@@ -0,0 +1,94 @@
+import { execFile } from 'node:child_process';
+import { readFile } from 'node:fs/promises';
+import { relative, sep } from 'node:path';
+import { agentHomePaths } from '../paths.js';
+import { excludeFromGit } from '../skills-remote.js';
+import { copyIdentity, withWorktreeFiles } from '../worktree-manifest.js';
+import { CONFIG_FILES } from './catalog.js';
+/**
+ * Seed only supported gitignored personal config into task worktrees and exclude it from Git.
+ * Tracked files apply through commits and are never copied here.
+ */
+function git(cwd, args) {
+    return new Promise((resolve) => {
+        execFile('git', args, { cwd, encoding: 'utf8' }, (err, stdout) => resolve({ ok: !err, stdout: stdout ?? '' }));
+    });
+}
+async function fileExists(path) {
+    try {
+        await readFile(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Whether the native repo-relative `rel` is one of the caller's POSIX `preserve` paths. */
+export function isPreserved(preserve, rel, separator = sep) {
+    return preserve.has(rel.split(separator).join('/'));
+}
+/**
+ * Copy the seeded personal-layer files from `repoRoot` into `worktreeCwd`.
+ * Guards every file with `git check-ignore` so a file the user genuinely tracked
+ * (against the vendor's advice) is neither copied nor excluded. `preserve` names
+ * repo-relative paths the caller already placed on purpose (a worker's explicit
+ * `--attach` files, hearsay-tools/cezarion#1149): those are left alone and not
+ * reported. A file is written only where nothing is, or where cezar's own unchanged
+ * copy is (the worktree manifest, hearsay-tools/cezarion#1814), so the agent's edit
+ * survives a re-seed. Returns the repo-relative paths that hold cezar's current copy,
+ * for the caller's note. Never throws.
+ */
+export async function seedAgentConfigLocalLayer(repoRoot, worktreeCwd, env = process.env, preserve = new Set(), options = {}) {
+    if (worktreeCwd === repoRoot)
+        return [];
+    const home = agentHomePaths(env);
+    const sources = [];
+    for (const def of CONFIG_FILES) {
+        if (!def.seeded)
+            continue;
+        const src = def.resolve(repoRoot, home);
+        const rel = relative(repoRoot, src);
+        // Never seed something outside the repo, or that isn't there.
+        if (rel.startsWith('..') || !(await fileExists(src)))
+            continue;
+        if (isPreserved(preserve, rel))
+            continue;
+        // Only seed a genuinely-ignored file — never force-exclude a tracked one.
+        const ignored = await git(repoRoot, ['check-ignore', '-q', '--', rel]);
+        if (!ignored.ok)
+            continue;
+        sources.push({ id: def.id, rel, src });
+    }
+    if (sources.length === 0)
+        return [];
+    return withWorktreeFiles(worktreeCwd, 'seed', options, [], async (files) => {
+        const seeded = [];
+        for (const { id, rel, src } of sources) {
+            const path = rel.split(sep).join('/');
+            try {
+                const state = await files.inspect(path);
+                // The agent's edit, or a file cezar never wrote: left as it is.
+                if (state.owner === 'theirs')
+                    files.forget(path);
+                if (state.owner !== 'free' && state.owner !== 'ours')
+                    continue;
+                // Ignore first: a seeded file git could see must never exist, not even for a crash's length.
+                await excludeFromGit(worktreeCwd, path);
+                const meta = { kind: 'file', source: id };
+                if (state.owner === 'ours' && state.current === await copyIdentity(src)) {
+                    if (state.entry?.kind !== 'file')
+                        files.record(path, meta, state.current);
+                }
+                else if ((await files.put(path, { type: 'file', copyOf: src }, meta)) === null)
+                    continue;
+                seeded.push(rel);
+            }
+            catch {
+                // best-effort: a seed failure must not fail the run
+            }
+        }
+        await files.save().catch(() => undefined);
+        return seeded;
+    }).catch(() => []);
+}
+//# sourceMappingURL=seed.js.map

package/dist/agent-config/seed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed.js","sourceRoot":"","sources":["../../src/agent-config/seed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAA6B,MAAM,yBAAyB,CAAC;AACrG,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C;;;GAGG;AAEH,SAAS,GAAG,CAAC,GAAW,EAAE,IAAc;IACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAC/D,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC,CAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,WAAW,CAAC,QAA6B,EAAE,GAAW,EAAE,SAAS,GAAW,GAAG;IAC7F,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,QAAgB,EAChB,WAAmB,EACnB,GAAG,GAAsB,OAAO,CAAC,GAAG,EACpC,QAAQ,GAAwB,IAAI,GAAG,EAAE,EACzC,OAAO,GAAyB,EAAE;IAElC,IAAI,WAAW,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,OAAO,GAAoD,EAAE,CAAC;IACpE,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,SAAS;QAC1B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACpC,8DAA8D;QAC9D,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;YAAE,SAAS;QAC/D,IAAI,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC;YAAE,SAAS;QACzC,0EAA0E;QAC1E,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,SAAS;QAC1B,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,OAAO,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACzE,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,OAAO,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACxC,gEAAgE;gBAChE,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ;oBAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACjD,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM;oBAAE,SAAS;gBAC/D,6FAA6F;gBAC7F,MAAM,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;gBACxC,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,MAAe,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;gBACnD,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxE,IAAI,KAAK,CAAC,KAAK,EAAE,IAAI,KAAK,MAAM;wBAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC5E,CAAC;qBAAM,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI;oBAAE,SAAS;gBAC3F,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,oDAAoD;YACtD,CAAC;QACH,CAAC;QACD,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;AACrB,CAAC"}

package/dist/agent-config/service.d.ts

@@ -0,0 +1,44 @@
+import { type ConfigFileDef } from './catalog.ts';
+/**
+ * Assembles the `GET /api/agent-config` payload: every catalog file's current
+ * on-disk state plus, locally, a read-only listing of the MCP servers Claude
+ * keeps in its own state file (`~/.claude.json`). In hosted mode (`editable`
+ * false) writes are refused server-side and the `~/.claude.json` listing is
+ * withheld — it is host state a hosted client is not trusted to see.
+ */
+export interface ConfigFileListing {
+    id: string;
+    runners: ConfigFileDef['runners'];
+    kind: ConfigFileDef['kind'];
+    scope: ConfigFileDef['scope'];
+    label: string;
+    path: string;
+    format: ConfigFileDef['format'];
+    tracked: ConfigFileDef['tracked'];
+    seeded: boolean;
+    holdsMcp: boolean;
+    precedence: string;
+    hotReload?: string;
+    docsUrl: string;
+    exists: boolean;
+    size: number;
+    /** sha256 of the bytes, or null when absent. */
+    version: string | null;
+    /** False in hosted mode (whole feature) — the client renders read-only up front. */
+    writable: boolean;
+    readOnlyReason?: string;
+}
+export interface UserMcpListing {
+    path: string;
+    servers: string[];
+    readable: boolean;
+}
+export interface AgentConfigListing {
+    editable: boolean;
+    files: ConfigFileListing[];
+    /** null in hosted mode (host-state disclosure guard). */
+    userMcp: UserMcpListing | null;
+}
+/** Read the user-scope MCP server *names* from ~/.claude.json — never its contents, never for writing. */
+export declare function readUserMcpServers(env: NodeJS.ProcessEnv): Promise<UserMcpListing>;
+export declare function listAgentConfig(repoRoot: string, env: NodeJS.ProcessEnv, editable: boolean): Promise<AgentConfigListing>;