@hearsay-tools/squawk 0.0.0-stage → 0.17.0-dev.5685

package/dist/workspace/agent-accounts.js

@@ -0,0 +1,353 @@
+import { logPrefix } from '../home/display.js';
+import { HomeOutsideWriteError, HomeStore, readHomeFile } from '../home/store.js';
+import { realpathSync } from 'node:fs';
+import { posix, resolve, win32 } from 'node:path';
+import { z } from 'zod';
+import { DEFAULT_AGENT_ACCOUNT_ID } from '../contract/index.js';
+import { PROVIDER_IDS } from '../core/provider-auth.js';
+import { ompProfileName, supportsProfiles } from '../core/agent-profiles.js';
+/**
+ * Optional agent-account store with root-keyed selections. Preserve unknown keys and salvage
+ * entries; write atomically at 0600. Corruption degrades to empty with a warning. Keep account
+ * removal and selection cleanup in one write.
+ */
+/** `id` slug rule — the project rule, for the same URL/segment-safety reason. */
+export const AGENT_ACCOUNT_ID_RE = /^[a-z0-9][a-z0-9-]{0,63}$/;
+/**
+ * Reserved discovered-default id, never allocated or stored as an account. Re-export the
+ * contract’s value so requests and storage share one spelling.
+ */
+export { DEFAULT_AGENT_ACCOUNT_ID };
+/**
+ * Is `configDir` absolute on `platform`? The account routes' only path rule, and the reason it is a
+ * named function rather than a test written inline.
+ *
+ * A relative dir would resolve against whatever cwd the agent happens to be spawned in — for a task
+ * that is a throwaway worktree — so it has to be refused. But the obvious spelling of that refusal,
+ * a leading-`/` test, refuses every real Windows path too: `C:\Users\me\.claude-work` starts with
+ * neither `/` nor `~`. That is not a corner case: `core/shell-env.ts` renders `set "VAR=v"` for
+ * `cmd.exe` precisely so an account survives a Windows terminal handoff, and the Add-account dialog
+ * delegates ALL path validation to the server, so a string test would leave the whole feature
+ * unreachable on the one platform the rest of this work went out of its way to support.
+ *
+ * `platform` is a parameter so both answers stay testable from either OS.
+ */
+export function isAbsoluteConfigDir(configDir, platform = process.platform) {
+    return (platform === 'win32' ? win32 : posix).isAbsolute(configDir);
+}
+/** C0 controls + DEL. A path containing one is never legitimate and would be interpolated into a
+ *  shell command by the CLI handoff, so it is refused at the schema, not just at the route. */
+export const CONTROL_CHARS_RE = /[\u0000-\u001f\u007f]/;
+/**
+ * One extra config dir for a provider — a second login of the same CLI
+ * (`CLAUDE_CONFIG_DIR=~/.claude-klaudiusz claude`), see `src/core/agent-profiles.ts`.
+ *
+ * `id`, `provider` and `configDir` are load-bearing and carry no `.catch`: a row missing any of
+ * them names no account, so the per-entry salvage below drops it. Display fields degrade per key.
+ *
+ * `configDir` is stored AS WRITTEN — a literal `~` survives — and every consumer expands it
+ * through `expandTilde`.
+ */
+const agentAccountSchema = z
+    .object({
+    id: z.string().regex(AGENT_ACCOUNT_ID_RE).refine((v) => v !== DEFAULT_AGENT_ACCOUNT_ID, {
+        message: `"${DEFAULT_AGENT_ACCOUNT_ID}" is reserved for the discovered account`,
+    }),
+    // Refused at the SCHEMA, not just at the route, for the same reason the reserved `default` id
+    // is: this file is designed to survive hand edits, foreign writers and the legacy import, and a
+    // provider whose credentials do not follow its config dir resolves to a LIE — `profileEnv`
+    // returns `{}` for it, so the step records the account, the UI names it, and the CLI runs on
+    // the default login anyway. Dropped by the per-entry salvage instead, which is the one
+    // degradation that cannot mislead.
+    provider: z.enum(PROVIDER_IDS).refine(supportsProfiles, {
+        message: 'this agent cannot carry more than one account (its credentials do not follow its config dir)',
+    }),
+    configDir: z
+        .string()
+        .min(1)
+        .max(4096)
+        .refine((v) => !CONTROL_CHARS_RE.test(v), 'configDir must not contain control characters'),
+    label: z.string().max(200).catch(''),
+    addedAt: z.string().max(64).catch(''),
+})
+    .passthrough()
+    // An omp account is an omp PROFILE: `OMP_PROFILE` takes a name, so a folder that is not
+    // `…/profiles/<name>` would resolve to `{}` and run on the default login — the provider lie
+    // above in another shape, dropped by the same salvage. Shape only; the route also checks the
+    // folder is under omp's current root (`ompProfileDirError`).
+    .refine((account) => account.provider !== 'omp' || ompProfileName(account.configDir) !== null, {
+    message: 'an omp account folder must be an omp profile: <omp root>/profiles/<name>',
+});
+/** Shared salvage and first-wins policy; migration also needs the discarded duplicate rows. */
+export function parseAgentAccountEntries(entries) {
+    const accounts = [], duplicates = [], selectedIndices = [];
+    const seen = new Set();
+    entries.forEach((entry, index) => {
+        const parsed = agentAccountSchema.safeParse(entry);
+        if (!parsed.success)
+            return;
+        if (seen.has(parsed.data.id)) {
+            duplicates.push(parsed.data);
+            return;
+        }
+        seen.add(parsed.data.id);
+        accounts.push(parsed.data);
+        selectedIndices.push(index);
+    });
+    return { accounts, duplicates, selectedIndices };
+}
+/** One project's choice, per provider. Explicit keys so `PROVIDER_IDS` stays the one source of
+ *  truth and the value is bounded. An absent key means the discovered default. */
+const selectionSchema = z
+    .object({
+    claude: z.string().max(64).optional().catch(undefined),
+    codex: z.string().max(64).optional().catch(undefined),
+    opencode: z.string().max(64).optional().catch(undefined),
+    pi: z.string().max(64).optional().catch(undefined),
+    cursor: z.string().max(64).optional().catch(undefined),
+    omp: z.string().max(64).optional().catch(undefined),
+})
+    .passthrough();
+/** The raw rows the salvage reads: anything that is not an array names no account. */
+const accountRowsSchema = z
+    .array(z.unknown())
+    .default(() => [])
+    .catch(() => []);
+export const storeSchema = z
+    .object({
+    /** Format cursor for THIS file, independent of `config.json`'s `schemaVersion`. Nothing reads
+     *  it yet; it exists so a future shape change has somewhere to say so. */
+    version: z.number().int().min(0).default(1).catch(1),
+    accounts: accountRowsSchema.transform((entries) => parseAgentAccountEntries(entries).accounts),
+    /**
+     * The per-provider account a repo with no selection of its own uses.
+     *
+     * A machine-wide answer to "which login do I work under", so a second account does not have to
+     * be re-chosen for every checkout. Consulted only where `selections` is silent for that repo
+     * and provider — a repo that HAS chosen keeps its choice, which is what makes this a default
+     * rather than an override.
+     */
+    defaults: selectionSchema.default(() => ({})).catch(() => ({})),
+    /** Repo root → per-provider choice. Per-entry salvage: a bad row is dropped, the rest stay. */
+    selections: z
+        .record(z.string(), z.unknown())
+        .default(() => ({}))
+        .catch(() => ({}))
+        .transform((raw) => {
+        const out = {};
+        for (const [root, value] of Object.entries(raw)) {
+            const parsed = selectionSchema.safeParse(value);
+            if (parsed.success)
+                out[root] = parsed.data;
+        }
+        return out;
+    }),
+})
+    .passthrough();
+/** The in-memory default — what a missing file behaves like, and the zero-config state. */
+export function defaultAgentAccountStore() {
+    return storeSchema.parse({});
+}
+/**
+ * Read the store on demand — never cached, never throws.
+ *
+ * Not cached because `~/.cezar/` is shared by every cezar process on the machine, so a snapshot is
+ * a staleness bug; one small JSON read is free next to spawning a CLI.
+ *
+ * A missing file is the zero-config default (silent). A corrupt one degrades to the default with a
+ * one-line warning and is left on disk untouched, so the user can repair it by hand — the next
+ * successful merge-write is what replaces it.
+ */
+function loadAgentAccountsSync(home) {
+    const path = home.agentAccounts;
+    let raw;
+    try {
+        raw = readHomeFile(path);
+    }
+    catch {
+        // Absent — but accounts may predate this file (they lived in config.json on the branch that
+        // introduced them), so give those one chance to come across.
+        return importLegacyAccounts(home);
+    }
+    try {
+        const parsed = storeSchema.safeParse(JSON.parse(raw));
+        if (parsed.success)
+            return parsed.data;
+    }
+    catch {
+        // malformed JSON — fall through to the warning + defaults
+    }
+    console.warn(`${logPrefix()} agent accounts ${path} is corrupt — ignoring it (every project falls back to its default account)`);
+    return defaultAgentAccountStore();
+}
+/** Retain the async caller contract while transactions remain synchronous. */
+export async function loadAgentAccounts(home) {
+    return loadAgentAccountsSync(home);
+}
+/**
+ * Read-modify-write merge: re-read, apply `mutator`, atomic-rename write.
+ *
+ * Every writer holds the root write.lock across the re-read and replacement, so concurrent
+ * processes cannot drop each other's account changes. Throws on write failure (a
+ * read-only home); degrading is the caller's policy.
+ */
+export async function mergeWriteAgentAccounts(mutator, home) {
+    const store = new HomeStore(home);
+    return store.transaction(() => {
+        const current = loadAgentAccountsSync(home);
+        const next = mutator(current) ?? current;
+        store.writeJson(home.agentAccounts, next);
+        return next;
+    }, [home.agentAccounts]);
+}
+/**
+ * One-time, non-destructive import of accounts that were written into `config.json` by the branch
+ * that first introduced them (before they got their own file).
+ *
+ * Reads the RAW object rather than going through the workspace schema, because that schema no
+ * longer names these keys — they only survive there as passthrough. Nothing is deleted from
+ * `config.json`: an older cezar sharing this home keeps reading what it has always read, and this
+ * import is idempotent because it only runs while `agent-accounts.json` is absent.
+ */
+function importLegacyAccounts(home) {
+    // A load may have observed absence just before another process created the store.
+    // Keep that recheck, import and publication inside one transaction as well.
+    try {
+        return new HomeStore(home).transaction(() => {
+            try {
+                readHomeFile(home.agentAccounts);
+                return loadAgentAccountsSync(home);
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw error;
+            }
+            return readLegacyAccounts(home, true);
+        }, [home.agentAccounts]);
+    }
+    catch (error) {
+        if (error instanceof HomeOutsideWriteError)
+            console.warn(`${logPrefix()} ${error.message}; imported accounts are available in memory only`);
+        // A missing marker or read-only home still permits the historical in-memory import.
+        return readLegacyAccounts(home, false);
+    }
+}
+/** The raw `config.json` keys the one-time import reads; undefined when there is nothing to read. */
+function legacyAccountInput(home, read) {
+    let parsed;
+    try {
+        parsed = JSON.parse(read(home.workspaceConfig));
+    }
+    catch {
+        return undefined;
+    }
+    if (!parsed || typeof parsed !== 'object')
+        return undefined;
+    const legacy = parsed;
+    const selections = {};
+    if (Array.isArray(legacy.projects)) {
+        for (const entry of legacy.projects) {
+            if (!entry || typeof entry !== 'object')
+                continue;
+            const { root, agentProfile } = entry;
+            if (typeof root === 'string' && agentProfile && typeof agentProfile === 'object') {
+                selections[root] = agentProfile;
+            }
+        }
+    }
+    return { accounts: legacy.agentProfiles, selections };
+}
+/**
+ * What a load reads, without the import's write: the raw account rows its salvage selects from,
+ * and the store value a rewrite starts from (the file as written, or the store an import would
+ * persist). `value` is undefined for a corrupt file, which a load ignores and never overwrites.
+ * The legacy-home migration inventories and relocates accounts through this.
+ */
+export function readAgentAccountSource(home, read = readHomeFile) {
+    let raw;
+    try {
+        raw = read(home.agentAccounts);
+    }
+    catch {
+        const input = legacyAccountInput(home, read);
+        const imported = input ? storeSchema.safeParse(input) : undefined;
+        return input && imported?.success ? { rows: accountRowsSchema.parse(input.accounts), value: imported.data } : { rows: [], value: undefined };
+    }
+    try {
+        const value = JSON.parse(raw);
+        if (storeSchema.safeParse(value).success)
+            return { rows: accountRowsSchema.parse(value.accounts), value: value };
+    }
+    catch {
+        // malformed JSON names no account, as in the loader
+    }
+    return { rows: [], value: undefined };
+}
+function readLegacyAccounts(home, persist) {
+    const input = legacyAccountInput(home, readHomeFile);
+    if (!input)
+        return defaultAgentAccountStore();
+    const imported = storeSchema.safeParse(input);
+    if (!imported.success)
+        return defaultAgentAccountStore();
+    // Only worth persisting when there was something to carry over; an empty import must not create
+    // a file, or the zero-config promise ("delete any of them and cezar rebuilds") gains a file that
+    // exists for no reason.
+    if (!persist || imported.data.accounts.length === 0)
+        return imported.data;
+    try {
+        const path = home.agentAccounts;
+        new HomeStore(home).writeJson(path, imported.data);
+    }
+    catch (error) {
+        if (error instanceof HomeOutsideWriteError)
+            console.warn(`${logPrefix()} ${error.message}; imported accounts are available in memory only`);
+        // read-only home: the import stays in memory for this process, which is still correct
+    }
+    return imported.data;
+}
+/**
+ * The account `provider` uses for `repoRoot`, or undefined when nothing has an opinion.
+ *
+ * Repo first, then the machine-wide default. The order is the whole feature: a repo that chose is
+ * never overruled by a later change to the default, and a repo that never chose follows it — so
+ * adding a second login is a one-time act rather than one per checkout.
+ */
+export function selectionFor(store, repoRoot, provider) {
+    const chosen = repoRoot === undefined ? undefined : selectionForRoot(store, repoRoot)?.[provider];
+    return chosen ?? store.defaults[provider];
+}
+/**
+ * The selection stored for `repoRoot`, matched on the literal spelling first and the realpath'd
+ * one second.
+ *
+ * The keys come from the REGISTRY, which realpath-normalizes every root it stores
+ * (`workspace/projects.ts` `normalizeRoot`); the readers hold whatever spelling their caller had —
+ * `RunManager` is constructed with `repoInfo?.root ?? cwd` for the boot project, not with the
+ * registry entry. `workspace/semaphore.ts` already normalizes at lookup for the per-project
+ * concurrency map for exactly this reason. Doing it here too matters more, not less: a missed
+ * concurrency override runs the task with the wrong ceiling, a missed account selection runs it on
+ * the wrong subscription and says nothing.
+ *
+ * The literal probe comes first because it is free and answers the overwhelmingly common case; the
+ * normalized one only pays a `realpathSync` when the literal key is absent.
+ */
+function selectionForRoot(store, repoRoot) {
+    const literal = store.selections[repoRoot];
+    if (literal !== undefined)
+        return literal;
+    const normalized = normalizeRootSync(repoRoot);
+    return normalized === repoRoot ? undefined : store.selections[normalized];
+}
+/** Realpath-normalize a root the way the registry does, but synchronously — this answers a run's
+ *  per-step lookup and must not `await`. A path that cannot be realpath'd (gone, unreadable)
+ *  degrades to `resolve()`, matching the registry's own fallback and `semaphore.ts`'s. */
+function normalizeRootSync(root) {
+    try {
+        return realpathSync(root);
+    }
+    catch {
+        return resolve(root);
+    }
+}
+//# sourceMappingURL=agent-accounts.js.map

package/dist/workspace/agent-accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-accounts.js","sourceRoot":"","sources":["../../src/workspace/agent-accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,EAAE,YAAY,EAAmB,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7E;;;;GAIG;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AAE/D;;;GAGG;AACH,OAAO,EAAE,wBAAwB,EAAE,CAAC;AAEpC;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAAiB,EACjB,QAAQ,GAAoB,OAAO,CAAC,QAAQ;IAE5C,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AACtE,CAAC;AAED;+FAC+F;AAC/F,MAAM,CAAC,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAExD;;;;;;;;;GASG;AACH,MAAM,kBAAkB,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,wBAAwB,EAAE;QACtF,OAAO,EAAE,IAAI,wBAAwB,0CAA0C;KAChF,CAAC;IACF,8FAA8F;IAC9F,gGAAgG;IAChG,2FAA2F;IAC3F,6FAA6F;IAC7F,uFAAuF;IACvF,mCAAmC;IACnC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE;QACtD,OAAO,EAAE,8FAA8F;KACxG,CAAC;IACF,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,IAAI,CAAC;SACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,+CAA+C,CAAC;IAC5F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;CACtC,CAAC;KACD,WAAW,EAAE;IACd,wFAAwF;IACxF,4FAA4F;IAC5F,6FAA6F;IAC7F,6DAA6D;KAC5D,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,IAAI,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;IAC7F,OAAO,EAAE,0EAA0E;CACpF,CAAC,CAAC;AAIL,+FAA+F;AAC/F,MAAM,UAAU,wBAAwB,CAAC,OAAkB;IACzD,MAAM,QAAQ,GAAmB,EAAE,EAAE,UAAU,GAAmB,EAAE,EAAE,eAAe,GAAa,EAAE,CAAC;IACrG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACvE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;AACnD,CAAC;AAED;kFACkF;AAClF,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACtD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACxD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACtD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CACpD,CAAC;KACD,WAAW,EAAE,CAAC;AAIjB,sFAAsF;AACtF,MAAM,iBAAiB,GAAG,CAAC;KACxB,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;KAClB,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;KACjB,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;AAEnB,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,CAAC;IACN;8EAC0E;IAC1E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACpD,QAAQ,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;IAC9F;;;;;;;OAOG;IACH,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/D,+FAA+F;IAC/F,UAAU,EAAE,CAAC;SACV,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/B,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;SACnB,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;SACjB,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE;QACjB,MAAM,GAAG,GAA0C,EAAE,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,MAAM,CAAC,OAAO;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;QAC9C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;CACL,CAAC;KACD,WAAW,EAAE,CAAC;AAIjB,2FAA2F;AAC3F,MAAM,UAAU,wBAAwB;IACtC,OAAO,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,qBAAqB,CAAC,IAAU;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC;IAChC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,4FAA4F;QAC5F,6DAA6D;QAC7D,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;IAC5D,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,EAAE,mBAAmB,IAAI,6EAA6E,CAAC,CAAC;IACjI,OAAO,wBAAwB,EAAE,CAAC;AACpC,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAU;IAChD,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAA+D,EAC/D,IAAU;IAEV,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;QAC5B,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC;QACzC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAAC,IAAU;IACtC,kFAAkF;IAClF,4EAA4E;IAC5E,IAAI,CAAC;QACH,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE;YAC1C,IAAI,CAAC;gBAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAAC,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAC3F,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YACtE,CAAC;YACD,OAAO,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,qBAAqB;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,EAAE,IAAI,KAAK,CAAC,OAAO,kDAAkD,CAAC,CAAC;QAC5I,oFAAoF;QACpF,OAAO,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,qGAAqG;AACrG,SAAS,kBAAkB,CAAC,IAAU,EAAE,IAA8B;IACpE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAyD,CAAC;IACzE,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,SAAS;YAClD,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,KAAmD,CAAC;YACnF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;gBACjF,UAAU,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,aAAa,EAAE,UAAU,EAAE,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAU,EAAE,IAAI,GAA6B,YAAY;IAC9F,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,OAAO,KAAK,IAAI,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC/I,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAE,KAAgC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAgC,EAAE,CAAC;IAC1K,CAAC;IAAC,MAAM,CAAC;QACP,oDAAoD;IACtD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAU,EAAE,OAAgB;IACtD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK;QAAE,OAAO,wBAAwB,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,wBAAwB,EAAE,CAAC;IACzD,gGAAgG;IAChG,iGAAiG;IACjG,wBAAwB;IACxB,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC;QAChC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,qBAAqB;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,EAAE,IAAI,KAAK,CAAC,OAAO,kDAAkD,CAAC,CAAC;QAC5I,sFAAsF;IACxF,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAC1B,KAAyD,EACzD,QAA4B,EAC5B,QAAoB;IAEpB,MAAM,MAAM,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAClG,OAAO,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,gBAAgB,CACvB,KAA4C,EAC5C,QAAgB;IAEhB,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC1C,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC5E,CAAC;AAED;;0FAE0F;AAC1F,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/workspace/agent-profiles.d.ts

@@ -0,0 +1,125 @@
+import type { Home } from '../home/home.ts';
+import type { ProviderId } from '../core/provider-auth.ts';
+import { type AgentAccount, type AgentAccountStore } from './agent-accounts.ts';
+/**
+ * Resolving an agent account against `~/.cezar/agent-accounts.json` — the I/O half of
+ * `src/core/agent-profiles.ts` (which stays pure and owns the vendor knowledge).
+ *
+ * Nothing here is cached. `~/.cezar/` is shared by every cezar process on the machine (a `serve`
+ * per repo, headless `cezar run`s, a settings PUT), so a snapshot is a staleness bug waiting to
+ * happen — and one small JSON read is free next to spawning an agent CLI.
+ */
+/** An account as the rest of the codebase consumes it: id, provider, and the dir to point at. */
+export interface ResolvedAgentProfile {
+    id: string;
+    provider: ProviderId;
+    label: string;
+    /** As stored (`~` kept) — what the user typed, or the discovered default's path. */
+    configDir: string;
+    /** Expanded absolute path — what actually gets handed to the CLI. */
+    path: string;
+    /** True for the discovered account, which is never stored and cannot be edited or deleted. */
+    isDefault: boolean;
+}
+/**
+ * The implicit account for a provider: whatever `agentHomePaths()` discovers, which already
+ * honours the vendors' own `CLAUDE_CONFIG_DIR` / `CODEX_HOME` / `XDG_CONFIG_HOME`. Setting one of
+ * those on the cezar process therefore moves the DEFAULT account rather than being ignored.
+ */
+export declare function defaultAgentProfile(provider: ProviderId, env?: NodeJS.ProcessEnv): ResolvedAgentProfile;
+/** Expand a stored account into its resolved form. Pure; the caller supplies the row. */
+export declare function resolveStoredProfile(account: AgentAccount): ResolvedAgentProfile;
+/** Every account for `provider`, discovered default first, then the stored extras in file order. */
+export declare function profilesForProvider(store: Pick<AgentAccountStore, 'accounts'>, provider: ProviderId, env?: NodeJS.ProcessEnv): ResolvedAgentProfile[];
+/** Every account across every provider — the listing route's source. */
+export declare function listAgentProfiles(store: Pick<AgentAccountStore, 'accounts'>, providers: readonly ProviderId[], env?: NodeJS.ProcessEnv): ResolvedAgentProfile[];
+/**
+ * Resolve explicit choice, then project selection, then discovered default. Unknown selections
+ * fall back here; a known unavailable named account must fail later availability checks.
+ */
+export declare function selectProfile(store: AgentAccountStore, options: {
+    provider: ProviderId;
+    repoRoot?: string | undefined;
+    profileId?: string | undefined;
+    env?: NodeJS.ProcessEnv;
+}): ResolvedAgentProfile;
+/**
+ * The env a spawned `provider` process needs for the account selected by `repoRoot`/`profileId`.
+ *
+ * `{}` for the default account, which is the whole point: the zero-config path adds nothing to the
+ * child environment. Reads the store per call (see the module note). An unreadable home degrades to
+ * the default account, which is the behaviour cezar had before accounts existed. The one throw is
+ * `AgentAccountUnavailableError`, for a named account that would open another folder than its own
+ * (`namedAccountUnavailable`); spawning bare instead would bill the default while the UI names the
+ * stored account.
+ */
+export declare function resolveProfileEnvForRoot(repoRoot: string | undefined, provider: ProviderId, profileId: string | undefined, env: NodeJS.ProcessEnv | undefined, home: Home): Promise<{
+    profile: ResolvedAgentProfile;
+    env: Record<string, string>;
+}>;
+/** Whether an account's directory exists and looks like the agent wrote it. Never throws. */
+export declare function profileDirState(provider: ProviderId, path: string): Promise<{
+    exists: boolean;
+    looksValid: boolean;
+}>;
+/**
+ * Which login a runtime-auth self-check must interrogate for a recorded `profileId`.
+ *
+ * Three answers, deliberately distinct because they demand different behavior from the caller:
+ *
+ * - `{ kind: 'default' }` — the step ran on the discovered account (no id, or the reserved
+ *   `default`), so probing bare is correct and is the whole zero-config path.
+ * - `{ kind: 'profile', … }` — a stored account; verify THAT login, not whichever one happens to
+ *   be default. A named account can be rejected while the default is fine, and clearing the
+ *   incident on the default's answer would let every future run on the broken account fail again.
+ * - `null` — the id names no account we can see (dangling reference, unreadable store). The caller
+ *   must KEEP the incident latched: an unverifiable rejection is not a recovered one, and
+ *   `selectProfile`'s silent degrade-to-default is exactly the wrong policy here.
+ */
+export type RuntimeAuthVerificationTarget = {
+    kind: 'default';
+} | {
+    kind: 'profile';
+    id: string;
+    configDir: string;
+};
+export declare function resolveRuntimeAuthVerificationTarget(provider: ProviderId, profileId: string | undefined, home: Home): Promise<RuntimeAuthVerificationTarget | null>;
+/**
+ * Why `path` cannot be a named omp account, or `null` when it can. `path` is already expanded.
+ *
+ * An omp account is an omp profile, selected by NAME (`OMP_PROFILE`), and omp resolves that name
+ * under its own root: `~/<PI_CONFIG_DIR or .omp>/profiles/<name>`. A folder anywhere else would
+ * make omp open a different folder than the one Settings names, so it is refused here rather than
+ * discovered at run time. The parent is compared through `realpath`, so the real spelling of a
+ * profiles dir behind a symlinked home is the same place; the profile entry itself may be a symlink
+ * to a folder elsewhere, which omp follows. Synchronous, because an owned worker's launch
+ * (`boundWorkerAccountEnv`) repeats the check through `namedAccountUnavailable`.
+ */
+export declare function ompProfileDirError(path: string, env?: NodeJS.ProcessEnv): string | null;
+/**
+ * A named account cezar refuses to spawn as it stands. The caller fails the step or answers with
+ * the message. It never falls back to the default account, which would bill an account the UI
+ * does not name.
+ */
+export declare class AgentAccountUnavailableError extends Error {
+    readonly name = "AgentAccountUnavailableError";
+}
+/**
+ * Why a named account would open another folder than its own if spawned now, or `null`.
+ *
+ * Only omp can. Its account is a profile NAME, and omp resolves the name under the root it computes
+ * at spawn from `HOME` and `PI_CONFIG_DIR`. The route checked the folder against the root of the
+ * day it was added. After either variable changes, `OMP_PROFILE=<name>` opens
+ * `<new root>/profiles/<name>`, another profile or a fresh empty one, while Settings still shows the
+ * stored folder. Every other provider is handed the folder itself. `env` is the env the child takes
+ * `HOME` and `PI_CONFIG_DIR` from.
+ */
+export declare function namedAccountUnavailable(provider: ProviderId, path: string, env?: NodeJS.ProcessEnv): string | null;
+/**
+ * Is `path` the same directory as an existing account's (or the default's)?
+ *
+ * Compared through `realpath` so two spellings of one dir — a symlink, a trailing slash — cannot
+ * become two accounts that silently share a session store. A path that does not exist yet cannot
+ * collide with anything, which is correct: the CLI has not created it, so it is nobody's home.
+ */
+export declare function sameProfileDir(a: string, b: string): Promise<boolean>;