@open-mercato/cezar 0.8.0 → 0.9.0-pr470.650

package/dist/agent-config/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/agent-config/files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAsB,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C;;;;;;;GAOG;AAEH,mFAAmF;AACnF,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAeD,SAAS,WAAW,CAAC,GAAkB,EAAE,QAAgB,EAAE,GAAsB;IAC/E,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,kIAAkI;AAClI,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAU,EACV,QAAgB,EAChB,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAA4B,CAAC;QACvC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACxF,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAU,EACV,OAAe,EACf,OAAsB,EACtB,QAAgB,EAChB,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAEjG,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IAE7C,wEAAwE;IACxE,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;QACnE,CAAC;IACH,CAAC;IACD,8EAA8E;IAC9E,8EAA8E;IAC9E,6EAA6E;IAC7E,6EAA6E;IAC7E,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EAAE,sHAAsH;SAC9H,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACpE,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;QAC/B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EACH,cAAc,KAAK,IAAI;gBACrB,CAAC,CAAC,0DAA0D;gBAC5D,CAAC,CAAC,qEAAqE;SAC5E,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,uEAAuE;QACvE,2EAA2E;QAC3E,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;QACD,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,8EAA8E;QAC9E,0EAA0E;QAC1E,MAAM,GAAG,GAAG,GAAG,MAAM,YAAY,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,EAAE,CAAC;QAC/D,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IACvG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IACnE,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY;IAC/C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACpC,CAAC;AACH,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC"}

package/dist/agent-config/seed.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Copy the seeded personal-layer files from `repoRoot` into `worktreeCwd`.
+ * Guards every file with `git check-ignore` so a file the user genuinely tracked
+ * (against the vendor's advice) is neither copied nor excluded. Returns the
+ * repo-relative paths actually seeded, for the caller's note. Never throws.
+ */
+export declare function seedAgentConfigLocalLayer(repoRoot: string, worktreeCwd: string, env?: NodeJS.ProcessEnv): Promise<string[]>;

package/dist/agent-config/seed.js

@@ -0,0 +1,90 @@
+import { execFile } from 'node:child_process';
+import { copyFile, mkdir, readFile, writeFile } from 'node:fs/promises';
+import { dirname, join, relative } from 'node:path';
+import { agentHomePaths } from '../paths.js';
+import { CONFIG_FILES } from './catalog.js';
+/**
+ * Seed the agents' gitignored personal config layer into a run's worktree
+ * (spec #404 §"The worktree problem"). A run's cwd is a worktree, so a repo-root
+ * edit to a gitignored file (`.claude/settings.local.json`, `CLAUDE.local.md`)
+ * would never reach the agent — the file does not exist there. Copying it in,
+ * and excluding it via the shared `info/exclude`, makes the personal layer take
+ * effect immediately without ever committing it. Mirrors `materializeSkillDir`.
+ *
+ * Only Claude's gitignored layer is seeded (the only vendor with a documented
+ * untracked personal file). Tracked files keep honest "applies after commit"
+ * semantics and are never touched here.
+ */
+function git(cwd, args) {
+    return new Promise((resolve) => {
+        execFile('git', args, { cwd, encoding: 'utf8' }, (err, stdout) => resolve({ ok: !err, stdout: stdout ?? '' }));
+    });
+}
+async function fileExists(path) {
+    try {
+        await readFile(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Append `line` to `info/exclude` only if it is not already present (idempotent across runs). */
+async function ensureExcluded(commonGitDir, line) {
+    const excludePath = join(commonGitDir, 'info', 'exclude');
+    let current = '';
+    try {
+        current = await readFile(excludePath, 'utf8');
+    }
+    catch {
+        // no exclude file yet — created below
+    }
+    const lines = current.split('\n').map((l) => l.trim());
+    if (lines.includes(line))
+        return;
+    await mkdir(dirname(excludePath), { recursive: true });
+    const sep = current.length === 0 || current.endsWith('\n') ? '' : '\n';
+    await writeFile(excludePath, `${current}${sep}${line}\n`, 'utf8');
+}
+/**
+ * Copy the seeded personal-layer files from `repoRoot` into `worktreeCwd`.
+ * Guards every file with `git check-ignore` so a file the user genuinely tracked
+ * (against the vendor's advice) is neither copied nor excluded. Returns the
+ * repo-relative paths actually seeded, for the caller's note. Never throws.
+ */
+export async function seedAgentConfigLocalLayer(repoRoot, worktreeCwd, env = process.env) {
+    if (worktreeCwd === repoRoot)
+        return [];
+    const home = agentHomePaths(env);
+    const seeded = [];
+    const commonDir = await git(worktreeCwd, ['rev-parse', '--git-common-dir']);
+    if (!commonDir.ok)
+        return [];
+    const commonGitDir = commonDir.stdout.trim();
+    const absCommonGitDir = commonGitDir.startsWith('/') ? commonGitDir : join(worktreeCwd, commonGitDir);
+    for (const def of CONFIG_FILES) {
+        if (!def.seeded)
+            continue;
+        const src = def.resolve(repoRoot, home);
+        const rel = relative(repoRoot, src);
+        // Never seed something outside the repo, or that isn't there.
+        if (rel.startsWith('..') || !(await fileExists(src)))
+            continue;
+        // Only seed a genuinely-ignored file — never force-exclude a tracked one.
+        const ignored = await git(repoRoot, ['check-ignore', '-q', '--', rel]);
+        if (!ignored.ok)
+            continue;
+        const dest = join(worktreeCwd, rel);
+        try {
+            await mkdir(dirname(dest), { recursive: true });
+            await copyFile(src, dest);
+            await ensureExcluded(absCommonGitDir, rel);
+            seeded.push(rel);
+        }
+        catch {
+            // best-effort: a seed failure must not fail the run
+        }
+    }
+    return seeded;
+}
+//# sourceMappingURL=seed.js.map

package/dist/agent-config/seed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed.js","sourceRoot":"","sources":["../../src/agent-config/seed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C;;;;;;;;;;;GAWG;AAEH,SAAS,GAAG,CAAC,GAAW,EAAE,IAAc;IACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAC/D,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC,CAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,KAAK,UAAU,cAAc,CAAC,YAAoB,EAAE,IAAY;IAC9D,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC1D,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO;IACjC,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,MAAM,SAAS,CAAC,WAAW,EAAE,GAAG,OAAO,GAAG,GAAG,GAAG,IAAI,IAAI,EAAE,MAAM,CAAC,CAAC;AACpE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,QAAgB,EAChB,WAAmB,EACnB,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,IAAI,WAAW,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,eAAe,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAEtG,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,SAAS;QAC1B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACpC,8DAA8D;QAC9D,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;YAAE,SAAS;QAC/D,0EAA0E;QAC1E,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,SAAS;QAE1B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC1B,MAAM,cAAc,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/agent-config/service.d.ts

@@ -0,0 +1,44 @@
+import { type ConfigFileDef } from './catalog.js';
+/**
+ * Assembles the `GET /api/agent-config` payload: every catalog file's current
+ * on-disk state plus, locally, a read-only listing of the MCP servers Claude
+ * keeps in its own state file (`~/.claude.json`). In hosted mode (`editable`
+ * false) writes are refused server-side and the `~/.claude.json` listing is
+ * withheld — it is host state a hosted client is not trusted to see.
+ */
+export interface ConfigFileListing {
+    id: string;
+    runners: ConfigFileDef['runners'];
+    kind: ConfigFileDef['kind'];
+    scope: ConfigFileDef['scope'];
+    label: string;
+    path: string;
+    format: ConfigFileDef['format'];
+    tracked: ConfigFileDef['tracked'];
+    seeded: boolean;
+    holdsMcp: boolean;
+    precedence: string;
+    hotReload?: string;
+    docsUrl: string;
+    exists: boolean;
+    size: number;
+    /** sha256 of the bytes, or null when absent. */
+    version: string | null;
+    /** False in hosted mode (whole feature) — the client renders read-only up front. */
+    writable: boolean;
+    readOnlyReason?: string;
+}
+export interface UserMcpListing {
+    path: string;
+    servers: string[];
+    readable: boolean;
+}
+export interface AgentConfigListing {
+    editable: boolean;
+    files: ConfigFileListing[];
+    /** null in hosted mode (host-state disclosure guard). */
+    userMcp: UserMcpListing | null;
+}
+/** Read the user-scope MCP server *names* from ~/.claude.json — never its contents, never for writing. */
+export declare function readUserMcpServers(env: NodeJS.ProcessEnv): Promise<UserMcpListing>;
+export declare function listAgentConfig(repoRoot: string, env: NodeJS.ProcessEnv, editable: boolean): Promise<AgentConfigListing>;

package/dist/agent-config/service.js

@@ -0,0 +1,71 @@
+import { readFile } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { agentHomePaths } from '../paths.js';
+import { CONFIG_FILES } from './catalog.js';
+import { hashBytes, statConfigPath } from './files.js';
+const HOSTED_REASON = 'agent config is edited from the machine that owns the checkout (this cockpit runs in hosted mode)';
+/** ~/.claude.json can be large (per-project history); cap the read. */
+const CLAUDE_JSON_CAP = 2 * 1024 * 1024;
+async function versionOf(path, exists) {
+    if (!exists)
+        return null;
+    try {
+        return hashBytes(await readFile(path, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+/** Read the user-scope MCP server *names* from ~/.claude.json — never its contents, never for writing. */
+export async function readUserMcpServers(env) {
+    // ~/.claude.json is a sibling of ~/.claude/ — Claude's own MCP state file.
+    const path = join(dirname(agentHomePaths(env).claude), '.claude.json');
+    try {
+        const { size } = await statConfigPath(path);
+        if (size > CLAUDE_JSON_CAP)
+            return { path, servers: [], readable: false };
+        const raw = await readFile(path, 'utf8');
+        const parsed = JSON.parse(raw);
+        const servers = parsed.mcpServers && typeof parsed.mcpServers === 'object' ? Object.keys(parsed.mcpServers) : [];
+        return { path, servers, readable: true };
+    }
+    catch (err) {
+        // ENOENT → readable (no servers); anything else → not readable
+        if (err.code === 'ENOENT')
+            return { path, servers: [], readable: true };
+        return { path, servers: [], readable: false };
+    }
+}
+export async function listAgentConfig(repoRoot, env, editable) {
+    const home = agentHomePaths(env);
+    const files = await Promise.all(CONFIG_FILES.map(async (def) => {
+        const path = def.resolve(repoRoot, home);
+        const { exists, size } = await statConfigPath(path);
+        return {
+            id: def.id,
+            runners: def.runners,
+            kind: def.kind,
+            scope: def.scope,
+            label: def.label,
+            path,
+            format: def.format,
+            tracked: def.tracked,
+            seeded: Boolean(def.seeded),
+            holdsMcp: Boolean(def.holdsMcp),
+            precedence: def.precedence,
+            hotReload: def.hotReload,
+            docsUrl: def.docsUrl,
+            exists,
+            size,
+            version: await versionOf(path, exists),
+            writable: editable,
+            readOnlyReason: editable ? undefined : HOSTED_REASON,
+        };
+    }));
+    return {
+        editable,
+        files,
+        userMcp: editable ? await readUserMcpServers(env) : null,
+    };
+}
+//# sourceMappingURL=service.js.map

package/dist/agent-config/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/agent-config/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AA8CvD,MAAM,aAAa,GAAG,mGAAmG,CAAC;AAC1H,uEAAuE;AACvE,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAExC,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,MAAe;IACpD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,0GAA0G;AAC1G,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAsB;IAC7D,2EAA2E;IAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,IAAI,GAAG,eAAe;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC1E,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6C,CAAC;QAC3E,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,+DAA+D;QAC/D,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACnG,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAChD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAgB,EAChB,GAAsB,EACtB,QAAiB;IAEjB,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAA8B,EAAE;QACzD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;QACpD,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI;YACJ,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAC3B,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC/B,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,MAAM;YACN,IAAI;YACJ,OAAO,EAAE,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC;YACtC,QAAQ,EAAE,QAAQ;YAClB,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;SACrD,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IACF,OAAO;QACL,QAAQ;QACR,KAAK;QACL,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;KACzD,CAAC;AACJ,CAAC"}

package/dist/agent-config/validate.d.ts

@@ -0,0 +1,21 @@
+import type { ConfigFormat } from './catalog.js';
+/**
+ * On save, cezar proves a config file PARSES in its own format — refusing to
+ * write bytes that would break the user's agent — but it never checks the
+ * vendor's *schema* (that is the drift a raw editor exists to avoid) and it
+ * never re-serializes: a valid file is written back byte-for-byte as typed.
+ */
+export interface ValidationResult {
+    ok: boolean;
+    /** Human-readable parser message when `ok` is false. */
+    error?: string;
+}
+/**
+ * Strip `//` line and slash-star block comments from JSONC, string-aware so a
+ * `//` or `/*` inside a JSON string is preserved. Whitespace-preserving (spans
+ * are blanked, not removed) so parser error offsets still line up with the
+ * source. Only used to validate — the original bytes are what gets written.
+ */
+export declare function stripJsonComments(input: string): string;
+/** Validate `content` against `format`. Markdown is always valid; empty is always valid (a new file). */
+export declare function validateConfig(content: string, format: ConfigFormat): ValidationResult;

package/dist/agent-config/validate.js

@@ -0,0 +1,76 @@
+import { parse as parseToml } from 'smol-toml';
+/**
+ * Strip `//` line and slash-star block comments from JSONC, string-aware so a
+ * `//` or `/*` inside a JSON string is preserved. Whitespace-preserving (spans
+ * are blanked, not removed) so parser error offsets still line up with the
+ * source. Only used to validate — the original bytes are what gets written.
+ */
+export function stripJsonComments(input) {
+    let out = '';
+    let inString = false;
+    let escaped = false;
+    for (let i = 0; i < input.length; i++) {
+        const ch = input[i];
+        if (inString) {
+            out += ch;
+            if (escaped)
+                escaped = false;
+            else if (ch === '\\')
+                escaped = true;
+            else if (ch === '"')
+                inString = false;
+            continue;
+        }
+        if (ch === '"') {
+            inString = true;
+            out += ch;
+            continue;
+        }
+        if (ch === '/' && input[i + 1] === '/') {
+            // Line comment runs to EOL; nothing follows it on the line, so dropping the
+            // body doesn't shift any later token — only the newline must be preserved.
+            while (i < input.length && input[i] !== '\n')
+                i++;
+            out += input[i] === '\n' ? '\n' : '';
+            continue;
+        }
+        if (ch === '/' && input[i + 1] === '*') {
+            out += '  '; // the opening `/*`, blanked in place so same-line offsets after it hold
+            i += 2;
+            while (i < input.length && !(input[i] === '*' && input[i + 1] === '/')) {
+                out += input[i] === '\n' ? '\n' : ' ';
+                i++;
+            }
+            i++; // land on the closing '/'
+            out += '  '; // the closing `*/`
+            continue;
+        }
+        out += ch;
+    }
+    return out;
+}
+/** Validate `content` against `format`. Markdown is always valid; empty is always valid (a new file). */
+export function validateConfig(content, format) {
+    if (format === 'markdown')
+        return { ok: true };
+    if (content.trim() === '')
+        return { ok: true };
+    try {
+        switch (format) {
+            case 'json':
+                JSON.parse(content);
+                return { ok: true };
+            case 'jsonc':
+                JSON.parse(stripJsonComments(content));
+                return { ok: true };
+            case 'toml':
+                parseToml(content);
+                return { ok: true };
+        }
+    }
+    catch (err) {
+        return { ok: false, error: err instanceof Error ? err.message : String(err) };
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=validate.js.map

package/dist/agent-config/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/agent-config/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,WAAW,CAAC;AAgB/C;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACrB,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,IAAI,EAAE,CAAC;YACV,IAAI,OAAO;gBAAE,OAAO,GAAG,KAAK,CAAC;iBACxB,IAAI,EAAE,KAAK,IAAI;gBAAE,OAAO,GAAG,IAAI,CAAC;iBAChC,IAAI,EAAE,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAC;YACtC,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,QAAQ,GAAG,IAAI,CAAC;YAChB,GAAG,IAAI,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACvC,4EAA4E;YAC5E,2EAA2E;YAC3E,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;YAClD,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACvC,GAAG,IAAI,IAAI,CAAC,CAAC,wEAAwE;YACrF,CAAC,IAAI,CAAC,CAAC;YACP,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;gBACvE,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;gBACtC,CAAC,EAAE,CAAC;YACN,CAAC;YACD,CAAC,EAAE,CAAC,CAAC,0BAA0B;YAC/B,GAAG,IAAI,IAAI,CAAC,CAAC,mBAAmB;YAChC,SAAS;QACX,CAAC;QACD,GAAG,IAAI,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,MAAoB;IAClE,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC;QACH,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,MAAM;gBACT,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACpB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,KAAK,OAAO;gBACV,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;gBACvC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,KAAK,MAAM;gBACT,SAAS,CAAC,OAAO,CAAC,CAAC;gBACnB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAChF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/config.d.ts

@@ -18,6 +18,8 @@ declare const skillsRepoSchema: z.ZodObject<{
 }>;
 export type SkillsRepoSource = z.infer<typeof skillsRepoSchema>;
 export declare const DEFAULT_SKILLS_REPOS: SkillsRepoSource[];
+/** Last-resort retention when neither the repo nor the workspace says anything. */
+export declare const DEFAULT_WORKTREE_RETENTION = 10;
 declare const configSchema: z.ZodObject<{
     skillsRepos: z.ZodDefault<z.ZodArray<z.ZodObject<{
         /** `owner/name` (GitHub shorthand), a full git URL, or a local/file:// path. */
@@ -52,7 +54,7 @@ declare const configSchema: z.ZodObject<{
      * step (workflow). The GUI only offers runners actually installed; this is
      * the preselected default. Also the runner the chain planner uses.
      */
-    defaultRunner: z.ZodDefault<z.ZodEnum<["claude", "codex", "opencode"]>>;
+    defaultRunner: z.ZodDefault<z.ZodEnum<["claude", "codex", "opencode", "pi"]>>;
     /** Model for the chain planner (spec 008) — cheap but reliable at JSON. */
     plannerModel: z.ZodDefault<z.ZodString>;
     /** Model for the task namer (spec 2026-07-17-task-auto-naming) — the cheapest
@@ -92,14 +94,17 @@ declare const configSchema: z.ZodObject<{
         claude: z.ZodOptional<z.ZodString>;
         codex: z.ZodOptional<z.ZodString>;
         opencode: z.ZodOptional<z.ZodString>;
+        pi: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         claude?: string | undefined;
         codex?: string | undefined;
         opencode?: string | undefined;
+        pi?: string | undefined;
     }, {
         claude?: string | undefined;
         codex?: string | undefined;
         opencode?: string | undefined;
+        pi?: string | undefined;
     }>>>;
 }, "strip", z.ZodTypeAny, {
     skillsRepos: {
@@ -108,10 +113,10 @@ declare const configSchema: z.ZodObject<{
     }[];
     maxParallel: number;
     worktreeRetention: number;
-    defaultRunner: "claude" | "codex" | "opencode";
+    memoryLimitMb?: number | undefined;
+    defaultRunner: "claude" | "codex" | "opencode" | "pi";
     plannerModel: string;
     namerModel: string;
-    memoryLimitMb?: number | undefined;
     liveTitleUpdates?: boolean | undefined;
     reviewGate?: boolean | undefined;
     baseBranch?: string | undefined;
@@ -120,6 +125,7 @@ declare const configSchema: z.ZodObject<{
         claude?: string | undefined;
         codex?: string | undefined;
         opencode?: string | undefined;
+        pi?: string | undefined;
     } | undefined;
 }, {
     skillsRepos?: {
@@ -129,7 +135,7 @@ declare const configSchema: z.ZodObject<{
     maxParallel?: number | undefined;
     worktreeRetention?: unknown;
     memoryLimitMb?: unknown;
-    defaultRunner?: "claude" | "codex" | "opencode" | undefined;
+    defaultRunner?: "claude" | "codex" | "opencode" | "pi" | undefined;
     plannerModel?: string | undefined;
     namerModel?: string | undefined;
     liveTitleUpdates?: boolean | undefined;
@@ -141,4 +147,28 @@ declare const configSchema: z.ZodObject<{
 export type CezConfig = z.infer<typeof configSchema>;
 /** Read `.ai/cezar/config.json` on demand — never cached, never throws. */
 export declare function loadConfig(repoRoot: string): Promise<CezConfig>;
+/**
+ * The default skills repos that are *opt-in per skill* (the "import OM skills"
+ * flow): the set of repo identifiers a user must explicitly import from before
+ * their skills join the catalog. This is exactly `DEFAULT_SKILLS_REPOS` when the
+ * repo has NOT configured its own `skillsRepos` — the zero-config majority — and
+ * empty once a repo takes control by setting `skillsRepos` (then everything it
+ * lists auto-loads, unchanged).
+ *
+ * `loadConfig` cannot answer this: the schema's `.default(DEFAULT_SKILLS_REPOS)`
+ * materializes the key, so a parsed config can't tell "the user chose these" from
+ * "the user said nothing". So we probe the raw file for the key's presence — the
+ * same reason `ownWorktreeRetention` below reads the raw JSON.
+ */
+export declare function gatedSkillsRepos(repoRoot: string): Promise<Set<string>>;
+/**
+ * Effective worktree retention for a repo (#483 + spec
+ * 2026-07-20-multi-project-workspace). Precedence, exactly what Settings →
+ * Worktrees promises: the repo's own `worktreeRetention` wins whenever it sets
+ * one; otherwise the workspace's `resources.worktreeRetentionDefault` seeds it;
+ * an absent/unreadable workspace config keeps the historical 10. Every
+ * enforcement site (boot sweeps, terminal transitions, the reclaim route) must
+ * go through here so the setting can never be a lie.
+ */
+export declare function resolveWorktreeRetention(repoRoot: string): Promise<number>;
 export {};

package/dist/config.js

@@ -1,6 +1,8 @@
 import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { z } from 'zod';
+import { loadWorkspaceConfig } from './workspace/config.js';
+import { RUNNER_IDS } from './core/agent-runner.js';
 /**
  * Optional advanced config at `.ai/cezar/config.json`. Zero-config rule:
  * a missing file behaves exactly like the default below, an unreadable or
@@ -15,6 +17,12 @@ const skillsRepoSchema = z.object({
 export const DEFAULT_SKILLS_REPOS = [
     { repo: 'open-mercato/skills', ref: 'main' },
 ];
+/** Last-resort retention when neither the repo nor the workspace says anything. */
+export const DEFAULT_WORKTREE_RETENTION = 10;
+/** Bounds for `worktreeRetention` — shared with the presence probe below, so the
+ *  "does this repo set its own?" question is answered by the same rule the
+ *  schema enforces (and mirrors the workspace default's bounds). */
+const worktreeRetentionSchema = z.number().int().min(0).max(1000);
 const configSchema = z.object({
     skillsRepos: z.array(skillsRepoSchema).default(DEFAULT_SKILLS_REPOS),
     /** How many tasks may run at once (spec 006). Non-git dirs always run 1. */
@@ -26,7 +34,7 @@ const configSchema = z.object({
      * (never auto-reclaim). Default 10. `.catch(10)` keeps it additive-safe: a
      * bad value degrades to the default instead of discarding the rest.
      */
-    worktreeRetention: z.number().int().min(0).max(1000).default(10).catch(10),
+    worktreeRetention: worktreeRetentionSchema.default(DEFAULT_WORKTREE_RETENTION).catch(DEFAULT_WORKTREE_RETENTION),
     /**
      * Per-task memory ceiling in MiB (whole process tree). When a running task's
      * RSS crosses this the engine pauses it with a warning and lets the queue
@@ -39,7 +47,7 @@ const configSchema = z.object({
      * step (workflow). The GUI only offers runners actually installed; this is
      * the preselected default. Also the runner the chain planner uses.
      */
-    defaultRunner: z.enum(['claude', 'codex', 'opencode']).default('claude'),
+    defaultRunner: z.enum(RUNNER_IDS).default('claude'),
     /** Model for the chain planner (spec 008) — cheap but reliable at JSON. */
     plannerModel: z.string().min(1).default('sonnet'),
     /** Model for the task namer (spec 2026-07-17-task-auto-naming) — the cheapest
@@ -80,6 +88,7 @@ const configSchema = z.object({
         claude: z.string().trim().min(1).max(200).optional(),
         codex: z.string().trim().min(1).max(200).optional(),
         opencode: z.string().trim().min(1).max(200).optional(),
+        pi: z.string().trim().min(1).max(200).optional(),
     })
         .optional()
         .catch(undefined),
@@ -103,4 +112,90 @@ export async function loadConfig(repoRoot) {
     }
     return configSchema.parse({});
 }
+/**
+ * The repo's OWN `worktreeRetention`, or `undefined` when it doesn't set one.
+ *
+ * `loadConfig` cannot answer this: the schema's `.default(10).catch(10)`
+ * materializes the key, so a parsed config can't tell "the user chose 10" from
+ * "the user said nothing". So we probe the raw file — a key that is absent (or
+ * carries a value the schema would refuse) means the repo has no opinion, and
+ * the workspace default gets to seed it.
+ */
+async function ownWorktreeRetention(repoRoot) {
+    let raw;
+    try {
+        raw = await readFile(join(repoRoot, '.ai/cezar', 'config.json'), 'utf8');
+    }
+    catch {
+        return undefined; // no file — nothing set
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object')
+            return undefined;
+        const value = parsed.worktreeRetention;
+        if (value === undefined)
+            return undefined;
+        const field = worktreeRetentionSchema.safeParse(value);
+        return field.success ? field.data : undefined;
+    }
+    catch {
+        return undefined; // malformed JSON — same as unset
+    }
+}
+/**
+ * The default skills repos that are *opt-in per skill* (the "import OM skills"
+ * flow): the set of repo identifiers a user must explicitly import from before
+ * their skills join the catalog. This is exactly `DEFAULT_SKILLS_REPOS` when the
+ * repo has NOT configured its own `skillsRepos` — the zero-config majority — and
+ * empty once a repo takes control by setting `skillsRepos` (then everything it
+ * lists auto-loads, unchanged).
+ *
+ * `loadConfig` cannot answer this: the schema's `.default(DEFAULT_SKILLS_REPOS)`
+ * materializes the key, so a parsed config can't tell "the user chose these" from
+ * "the user said nothing". So we probe the raw file for the key's presence — the
+ * same reason `ownWorktreeRetention` below reads the raw JSON.
+ */
+export async function gatedSkillsRepos(repoRoot) {
+    const none = new Set();
+    let raw;
+    try {
+        raw = await readFile(join(repoRoot, '.ai/cezar', 'config.json'), 'utf8');
+    }
+    catch {
+        // No file — the defaults are in effect, so they are the opt-in set.
+        return new Set(DEFAULT_SKILLS_REPOS.map((r) => r.repo));
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object') {
+            return new Set(DEFAULT_SKILLS_REPOS.map((r) => r.repo));
+        }
+        // The user took control of the source list — nothing is gated; a value the
+        // schema would refuse degrades to the default too (same as `loadConfig`).
+        if (parsed.skillsRepos !== undefined)
+            return none;
+        return new Set(DEFAULT_SKILLS_REPOS.map((r) => r.repo));
+    }
+    catch {
+        // Malformed JSON degrades to the default (which loadConfig also does).
+        return new Set(DEFAULT_SKILLS_REPOS.map((r) => r.repo));
+    }
+}
+/**
+ * Effective worktree retention for a repo (#483 + spec
+ * 2026-07-20-multi-project-workspace). Precedence, exactly what Settings →
+ * Worktrees promises: the repo's own `worktreeRetention` wins whenever it sets
+ * one; otherwise the workspace's `resources.worktreeRetentionDefault` seeds it;
+ * an absent/unreadable workspace config keeps the historical 10. Every
+ * enforcement site (boot sweeps, terminal transitions, the reclaim route) must
+ * go through here so the setting can never be a lie.
+ */
+export async function resolveWorktreeRetention(repoRoot) {
+    const own = await ownWorktreeRetention(repoRoot);
+    if (own !== undefined)
+        return own;
+    const workspace = await loadWorkspaceConfig().catch(() => null);
+    return workspace?.resources.worktreeRetentionDefault ?? DEFAULT_WORKTREE_RETENTION;
+}
 //# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,gFAAgF;IAChF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACvC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,oBAAoB,GAAuB;IACtD,EAAE,IAAI,EAAE,qBAAqB,EAAE,GAAG,EAAE,MAAM,EAAE;CAC7C,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IACpE,4EAA4E;IAC5E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD;;;;;;OAMG;IACH,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1E;;;;;OAKG;IACH,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACjF;;;;OAIG;IACH,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACxE,2EAA2E;IAC3E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACjD;sFACkF;IAClF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC9C;;gCAE4B;IAC5B,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACxC;;;mEAG+D;IAC/D,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC;;;OAGG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C;;;;;;;OAOG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IAC9E;;;;;;OAMG;IACH,aAAa,EAAE,CAAC;SACb,MAAM,CAAC;QACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACvD,CAAC;SACD,QAAQ,EAAE;SACV,KAAK,CAAC,SAAS,CAAC;CACpB,CAAC,CAAC;AAIH,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC/C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;IAC1D,CAAC;IACD,OAAO,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAChC,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,gFAAgF;IAChF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACvC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,oBAAoB,GAAuB;IACtD,EAAE,IAAI,EAAE,qBAAqB,EAAE,GAAG,EAAE,MAAM,EAAE;CAC7C,CAAC;AAEF,mFAAmF;AACnF,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C;;oEAEoE;AACpE,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAElE,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IACpE,4EAA4E;IAC5E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD;;;;;;OAMG;IACH,iBAAiB,EAAE,uBAAuB,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC;IAChH;;;;;OAKG;IACH,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACjF;;;;OAIG;IACH,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACnD,2EAA2E;IAC3E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACjD;sFACkF;IAClF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC9C;;gCAE4B;IAC5B,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACxC;;;mEAG+D;IAC/D,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC;;;OAGG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C;;;;;;;OAOG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IAC9E;;;;;;OAMG;IACH,aAAa,EAAE,CAAC;SACb,MAAM,CAAC;QACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACtD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACjD,CAAC;SACD,QAAQ,EAAE;SACV,KAAK,CAAC,SAAS,CAAC;CACpB,CAAC,CAAC;AAIH,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC/C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;IAC1D,CAAC;IACD,OAAO,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IAClD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC,CAAC,wBAAwB;IAC5C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC5D,MAAM,KAAK,GAAI,MAAkC,CAAC,iBAAiB,CAAC;QACpE,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,KAAK,GAAG,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC,CAAC,iCAAiC;IACrD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IACrD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,OAAO,IAAI,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,IAAI,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,2EAA2E;QAC3E,0EAA0E;QAC1E,IAAK,MAAkC,CAAC,WAAW,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC/E,OAAO,IAAI,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,OAAO,IAAI,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,QAAgB;IAC7D,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IAClC,MAAM,SAAS,GAAG,MAAM,mBAAmB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAChE,OAAO,SAAS,EAAE,SAAS,CAAC,wBAAwB,IAAI,0BAA0B,CAAC;AACrF,CAAC"}

package/dist/core/agent-env.js

@@ -192,26 +192,32 @@ const BASE_ALLOW_PREFIXES = [
     'MISE_',
     'COMPOSER_',
 ];
+/** The provider credentials a backend that selects models as `provider/model` may need — it can
+ *  be pointed at any of them, so none can be pruned without breaking a legitimate model id. */
+const MULTI_PROVIDER_PREFIXES = [
+    'OPENAI_',
+    'ANTHROPIC_',
+    'AZURE_OPENAI_',
+    'OPENROUTER_',
+    'GROQ_',
+    'MISTRAL_',
+    'GEMINI_',
+    'GOOGLE_GENERATIVE_AI_',
+    'DEEPSEEK_',
+    'XAI_',
+    'PERPLEXITY_',
+    'TOGETHER_',
+    'FIREWORKS_',
+];
 /** Per-backend auth/config the runner genuinely needs, by prefix. */
 const BACKEND_ALLOW_PREFIXES = {
     claude: ['ANTHROPIC_', 'CLAUDE_'],
     'claude-cli': ['ANTHROPIC_', 'CLAUDE_'],
     codex: ['OPENAI_', 'CODEX_', 'AZURE_OPENAI_'],
-    opencode: [
-        'OPENAI_',
-        'ANTHROPIC_',
-        'AZURE_OPENAI_',
-        'OPENROUTER_',
-        'GROQ_',
-        'MISTRAL_',
-        'GEMINI_',
-        'GOOGLE_GENERATIVE_AI_',
-        'DEEPSEEK_',
-        'XAI_',
-        'PERPLEXITY_',
-        'TOGETHER_',
-        'FIREWORKS_',
-    ],
+    opencode: MULTI_PROVIDER_PREFIXES,
+    // pi drives a Claude-compatible CLI but selects models as `provider/model` (#387), so it
+    // needs both the Claude-side config and any provider a `provider/model` id can name.
+    pi: ['PI_', 'CLAUDE_', ...MULTI_PROVIDER_PREFIXES],
 };
 /** `gh` handoff (draft PRs) works in every backend — the one credential the
  *  project deliberately keeps in the environment (AGENTS.md "No secrets in