@open-mercato/cezar 0.9.1 → 0.9.2-pr710.1256

package/dist/paths.d.ts

@@ -1,4 +1,4 @@
-import type { AgentHomePaths } from './agent-config/catalog.js';
+import type { AgentHomePaths } from './agent-config/catalog.ts';
 /**
  * Per-user cezar home. Literal `~/.cezar` on every platform (no XDG, no
  * `%LOCALAPPDATA%` branch) — one rule, and it matches how the existing cache
@@ -10,7 +10,22 @@ import type { AgentHomePaths } from './agent-config/catalog.js';
  * first writer owns the file, later specs import it. Do not duplicate this
  * homedir logic elsewhere.
  */
-export declare function cezarHomeDir(): string;
+export declare function cezarHomeDir(env?: NodeJS.ProcessEnv): string;
+/**
+ * The last line of defence for the developer's own `~/.cezar` while the suite
+ * runs. Every workspace test pins `CEZ_HOME` to a temp dir, but the pin lives
+ * in `process.env` — a single global for the whole worker. A test that ends
+ * before its write does (a timeout is enough) has its `afterEach` drop the pin
+ * while the write is still in flight, and the write then resolves the REAL
+ * home and replaces the developer's project registry with the fixture's.
+ *
+ * So writers into the cezar home ask here first: under vitest, a write whose
+ * destination is the real `~/.cezar` is always a leaked test, never intent —
+ * fail it loudly instead of rewriting a file the suite does not own. Outside
+ * vitest this is a no-op, and an explicitly pinned `CEZ_HOME` (the temp dir the
+ * test meant to use) never matches the real home, so honest tests are unaffected.
+ */
+export declare function assertCezarHomeWriteIsSandboxed(path: string, env?: NodeJS.ProcessEnv): void;
 /**
  * The default server-install instance id. An install with no `--domain` (the
  * original single-cockpit-per-host flow) is this instance, and it keeps the
@@ -45,13 +60,28 @@ export declare function serverStatePath(instance?: string): string;
  * been booted in. Lives directly under `cezarHomeDir()`, so the `CEZ_HOME`
  * override applies (tests/containers never touch a real home dir).
  */
-export declare function workspaceConfigPath(): string;
+export declare function workspaceConfigPath(env?: NodeJS.ProcessEnv): string;
 /**
  * Global GUI state — the workspace twin of the per-repo
  * `.ai/cezar/ui-state.json`. Cross-project UI prefs live here; per-project
  * state (pinned runs, templates) stays in each repo's file.
  */
 export declare function workspaceUiStatePath(): string;
+/**
+ * Agent accounts — extra config dirs for a second login of the same agent CLI, plus which one
+ * each project uses (spec `2026-07-29-agent-profiles.md`).
+ *
+ * Its OWN file rather than a key in `config.json`, and that is the whole point: a cezar version
+ * that has never heard of accounts does not open this file, so it cannot drop them. Living in
+ * `config.json` made their survival depend on a `.passthrough()` in *another version's* source —
+ * a guarantee this repo cannot make on behalf of a build the user might switch to, and one that
+ * evaporates entirely the moment any version fails to parse that file and degrades to defaults
+ * (the next merge-write then rewrites it without them).
+ *
+ * The per-project selections live here too, beside the accounts they name, so deleting an account
+ * and scrubbing every reference to it stays ONE atomic write.
+ */
+export declare function agentAccountsPath(): string;
 /**
  * Expand a leading `~` to the user's home. Lives here with the other homedir
  * logic (see the module note above — one place owns `homedir()`): the
@@ -70,8 +100,41 @@ export declare function expandTilde(path: string): string;
 export declare function serverLockPath(instance?: string): string;
 /**
  * Where each coding agent keeps its per-user config, honouring the env vars the
- * vendors document: `$CODEX_HOME` relocates Codex's home; `$XDG_CONFIG_HOME`
- * relocates OpenCode's config dir (falling back to `~/.config`). Claude's `~/.claude`
- * has no documented override. Read per call so tests and ops can set env live.
+ * vendors document: `$CLAUDE_CONFIG_DIR` relocates Claude Code's home;
+ * `$CODEX_HOME` relocates Codex's; `$XDG_CONFIG_HOME` relocates OpenCode's config
+ * dir (falling back to `~/.config`). Read per call so tests and ops can set env live.
+ *
+ * These are the DEFAULT profile's dirs. A second login of the same CLI is an
+ * agent profile (`src/core/agent-profiles.ts`) and resolves through
+ * `agentHomePathsForProfiles` instead — what this function answers is what the
+ * host is configured for when nothing overrides it.
  */
 export declare function agentHomePaths(env?: NodeJS.ProcessEnv): AgentHomePaths;
+/**
+ * Where Claude Code keeps `.claude.json` — its MCP/state file — for a given config dir. The
+ * location is NOT uniform: by default the file is a SIBLING of `~/.claude`, but under a
+ * `CLAUDE_CONFIG_DIR` override it moves INSIDE the overridden dir (verified against the shipped CLI
+ * 2026-07-29, and against a real second-account dir on disk). Reading it from `dirname(configDir)`
+ * unconditionally — as this repo did — lands on `~/.claude.json` for a `~/.claude-klaudiusz`
+ * profile, i.e. the wrong account's file.
+ *
+ * The condition below reads like two heuristics OR-ed together; it is one exact rule. The file sits
+ * inside precisely when the CLI will SEE `CLAUDE_CONFIG_DIR` for this dir, and cezar knows when
+ * that is:
+ *
+ *   - a stored account is always spawned with it (`profileEnv`), and its dir is by construction not
+ *     `~/.claude` — the route refuses a dir that is already the discovered account's;
+ *   - the DISCOVERED account is spawned with nothing added, so it sees the variable only when the
+ *     cezar process itself carries one — and it does reach the child, because `CLAUDE_` is in
+ *     `BACKEND_ALLOW_PREFIXES`.
+ *
+ * One case is worth naming because it looks like a bug and is not. Start cezar with
+ * `CLAUDE_CONFIG_DIR=/opt/work` and add `~/.claude` as a NAMED account (legal — the discovered
+ * account is `/opt/work`, so `~/.claude` is not a duplicate). This answers `~/.claude/.claude.json`,
+ * not the sibling `~/.claude.json`, and "Show details" can therefore say "not signed in" for a
+ * folder a bare `claude` would treat as signed in. That is correct rather than unfortunate: cezar
+ * will run that account as `CLAUDE_CONFIG_DIR=~/.claude claude`, and under that invocation the
+ * state file the CLI reads and writes IS the one inside. Reporting the sibling would describe a
+ * login this account will never use.
+ */
+export declare function claudeStateFilePath(claudeHome: string, env?: NodeJS.ProcessEnv): string;

package/dist/paths.js

@@ -1,5 +1,5 @@
 import { homedir } from 'node:os';
-import { join } from 'node:path';
+import { dirname, join, sep } from 'node:path';
 /**
  * Per-user cezar home. Literal `~/.cezar` on every platform (no XDG, no
  * `%LOCALAPPDATA%` branch) — one rule, and it matches how the existing cache
@@ -11,10 +11,33 @@ import { join } from 'node:path';
  * first writer owns the file, later specs import it. Do not duplicate this
  * homedir logic elsewhere.
  */
-export function cezarHomeDir() {
+export function cezarHomeDir(env = process.env) {
     // `|| undefined` so an EMPTY CEZ_HOME (e.g. `CEZ_HOME= cezar …`) falls back
     // to the default instead of yielding relative paths in the cwd.
-    return (process.env.CEZ_HOME || undefined) ?? join(homedir(), '.cezar');
+    return (env.CEZ_HOME || undefined) ?? join(homedir(), '.cezar');
+}
+/**
+ * The last line of defence for the developer's own `~/.cezar` while the suite
+ * runs. Every workspace test pins `CEZ_HOME` to a temp dir, but the pin lives
+ * in `process.env` — a single global for the whole worker. A test that ends
+ * before its write does (a timeout is enough) has its `afterEach` drop the pin
+ * while the write is still in flight, and the write then resolves the REAL
+ * home and replaces the developer's project registry with the fixture's.
+ *
+ * So writers into the cezar home ask here first: under vitest, a write whose
+ * destination is the real `~/.cezar` is always a leaked test, never intent —
+ * fail it loudly instead of rewriting a file the suite does not own. Outside
+ * vitest this is a no-op, and an explicitly pinned `CEZ_HOME` (the temp dir the
+ * test meant to use) never matches the real home, so honest tests are unaffected.
+ */
+export function assertCezarHomeWriteIsSandboxed(path, env = process.env) {
+    if (!env.VITEST)
+        return;
+    const realHome = join(homedir(), '.cezar');
+    if (path !== realHome && !path.startsWith(realHome + sep))
+        return;
+    throw new Error(`[cez] refusing to write ${path} from a test run — CEZ_HOME is not pinned to a sandbox. ` +
+        'Pin it (the vitest setup file does this by default) so the suite never touches the real cezar home.');
 }
 /**
  * The default server-install instance id. An install with no `--domain` (the
@@ -62,8 +85,8 @@ export function serverStatePath(instance = DEFAULT_SERVER_INSTANCE) {
  * been booted in. Lives directly under `cezarHomeDir()`, so the `CEZ_HOME`
  * override applies (tests/containers never touch a real home dir).
  */
-export function workspaceConfigPath() {
-    return join(cezarHomeDir(), 'config.json');
+export function workspaceConfigPath(env = process.env) {
+    return join(cezarHomeDir(env), 'config.json');
 }
 /**
  * Global GUI state — the workspace twin of the per-repo
@@ -73,6 +96,23 @@ export function workspaceConfigPath() {
 export function workspaceUiStatePath() {
     return join(cezarHomeDir(), 'ui-state.json');
 }
+/**
+ * Agent accounts — extra config dirs for a second login of the same agent CLI, plus which one
+ * each project uses (spec `2026-07-29-agent-profiles.md`).
+ *
+ * Its OWN file rather than a key in `config.json`, and that is the whole point: a cezar version
+ * that has never heard of accounts does not open this file, so it cannot drop them. Living in
+ * `config.json` made their survival depend on a `.passthrough()` in *another version's* source —
+ * a guarantee this repo cannot make on behalf of a build the user might switch to, and one that
+ * evaporates entirely the moment any version fails to parse that file and degrades to defaults
+ * (the next merge-write then rewrites it without them).
+ *
+ * The per-project selections live here too, beside the accounts they name, so deleting an account
+ * and scrubbing every reference to it stays ONE atomic write.
+ */
+export function agentAccountsPath() {
+    return join(cezarHomeDir(), 'agent-accounts.json');
+}
 /**
  * Expand a leading `~` to the user's home. Lives here with the other homedir
  * logic (see the module note above — one place owns `homedir()`): the
@@ -99,17 +139,54 @@ export function serverLockPath(instance = DEFAULT_SERVER_INSTANCE) {
 }
 /**
  * Where each coding agent keeps its per-user config, honouring the env vars the
- * vendors document: `$CODEX_HOME` relocates Codex's home; `$XDG_CONFIG_HOME`
- * relocates OpenCode's config dir (falling back to `~/.config`). Claude's `~/.claude`
- * has no documented override. Read per call so tests and ops can set env live.
+ * vendors document: `$CLAUDE_CONFIG_DIR` relocates Claude Code's home;
+ * `$CODEX_HOME` relocates Codex's; `$XDG_CONFIG_HOME` relocates OpenCode's config
+ * dir (falling back to `~/.config`). Read per call so tests and ops can set env live.
+ *
+ * These are the DEFAULT profile's dirs. A second login of the same CLI is an
+ * agent profile (`src/core/agent-profiles.ts`) and resolves through
+ * `agentHomePathsForProfiles` instead — what this function answers is what the
+ * host is configured for when nothing overrides it.
  */
 export function agentHomePaths(env = process.env) {
     const home = env.HOME || env.USERPROFILE || homedir();
     const xdgConfig = env.XDG_CONFIG_HOME?.trim() || join(home, '.config');
     return {
-        claude: join(home, '.claude'),
+        claude: env.CLAUDE_CONFIG_DIR?.trim() || join(home, '.claude'),
         codex: env.CODEX_HOME?.trim() || join(home, '.codex'),
         opencodeConfig: join(xdgConfig, 'opencode'),
     };
 }
+/**
+ * Where Claude Code keeps `.claude.json` — its MCP/state file — for a given config dir. The
+ * location is NOT uniform: by default the file is a SIBLING of `~/.claude`, but under a
+ * `CLAUDE_CONFIG_DIR` override it moves INSIDE the overridden dir (verified against the shipped CLI
+ * 2026-07-29, and against a real second-account dir on disk). Reading it from `dirname(configDir)`
+ * unconditionally — as this repo did — lands on `~/.claude.json` for a `~/.claude-klaudiusz`
+ * profile, i.e. the wrong account's file.
+ *
+ * The condition below reads like two heuristics OR-ed together; it is one exact rule. The file sits
+ * inside precisely when the CLI will SEE `CLAUDE_CONFIG_DIR` for this dir, and cezar knows when
+ * that is:
+ *
+ *   - a stored account is always spawned with it (`profileEnv`), and its dir is by construction not
+ *     `~/.claude` — the route refuses a dir that is already the discovered account's;
+ *   - the DISCOVERED account is spawned with nothing added, so it sees the variable only when the
+ *     cezar process itself carries one — and it does reach the child, because `CLAUDE_` is in
+ *     `BACKEND_ALLOW_PREFIXES`.
+ *
+ * One case is worth naming because it looks like a bug and is not. Start cezar with
+ * `CLAUDE_CONFIG_DIR=/opt/work` and add `~/.claude` as a NAMED account (legal — the discovered
+ * account is `/opt/work`, so `~/.claude` is not a duplicate). This answers `~/.claude/.claude.json`,
+ * not the sibling `~/.claude.json`, and "Show details" can therefore say "not signed in" for a
+ * folder a bare `claude` would treat as signed in. That is correct rather than unfortunate: cezar
+ * will run that account as `CLAUDE_CONFIG_DIR=~/.claude claude`, and under that invocation the
+ * state file the CLI reads and writes IS the one inside. Reporting the sibling would describe a
+ * login this account will never use.
+ */
+export function claudeStateFilePath(claudeHome, env = process.env) {
+    const seesOverride = (env.CLAUDE_CONFIG_DIR?.trim() || '') !== ''
+        || claudeHome !== join(env.HOME || env.USERPROFILE || homedir(), '.claude');
+    return seesOverride ? join(claudeHome, '.claude.json') : join(dirname(claudeHome), '.claude.json');
+}
 //# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY;IAC1B,4EAA4E;IAC5E,gEAAgE;IAChE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAAC;AAEjD;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,MAAiC;IAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;SAC9B,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,IAAI,IAAI,uBAAuB,CAAC;AACzC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,kBAAkB,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,QAAQ,GAAW,uBAAuB;IACxE,IAAI,QAAQ,KAAK,uBAAuB;QAAE,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,aAAa,CAAC,CAAC;IACrF,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,aAAa,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,eAAe,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IACnC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,QAAQ,GAAW,uBAAuB;IACvE,IAAI,QAAQ,KAAK,uBAAuB;QAAE,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,qBAAqB,CAAC,CAAC;IAC7F,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,GAAG,QAAQ,eAAe,CAAC,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACjE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,WAAW,IAAI,OAAO,EAAE,CAAC;IACtD,MAAM,SAAS,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACvE,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QAC7B,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QACrD,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC;KAC5C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAG/C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC/D,4EAA4E;IAC5E,gEAAgE;IAChE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,+BAA+B,CAAC,IAAY,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;IAChG,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO;IACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC;QAAE,OAAO;IAClE,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,0DAA0D;QACvF,qGAAqG,CACxG,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAAC;AAEjD;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,MAAiC;IAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;SAC9B,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,IAAI,IAAI,uBAAuB,CAAC;AACzC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,kBAAkB,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,QAAQ,GAAW,uBAAuB;IACxE,IAAI,QAAQ,KAAK,uBAAuB;QAAE,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,aAAa,CAAC,CAAC;IACrF,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACtE,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,eAAe,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,qBAAqB,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IACnC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,QAAQ,GAAW,uBAAuB;IACvE,IAAI,QAAQ,KAAK,uBAAuB;QAAE,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,qBAAqB,CAAC,CAAC;IAC7F,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,GAAG,QAAQ,eAAe,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACjE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,WAAW,IAAI,OAAO,EAAE,CAAC;IACtD,MAAM,SAAS,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACvE,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QAC9D,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QACrD,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC1F,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE;WAC5D,UAAU,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,WAAW,IAAI,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9E,OAAO,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,CAAC;AACrG,CAAC"}

package/dist/planner.d.ts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { type WorkflowStepDef } from './workflows/types.js';
+import { type WorkflowStepDef } from './workflows/types.ts';
 export interface PlanResult {
     /** The proposed workflow title (kebab-case slug), when the planner named one. The auto chain
      *  creator pre-fills the builder's name field with it. Absent on the degraded fallback. */
@@ -24,4 +24,4 @@ export declare function proposeWorkflowName(raw: string | undefined): string | u
  * then scan for balanced top-level `{...}` blocks and return the first that
  * validates. Null when nothing does — the caller decides how to recover.
  */
-export declare function parseStructured<T>(raw: string, schema: z.ZodType<T, z.ZodTypeDef, unknown>): T | null;
+export declare function parseStructured<T>(raw: string, schema: z.ZodType<T, unknown>): T | null;

package/dist/planner.js

@@ -4,6 +4,7 @@ import { z } from 'zod';
 import { createRunner } from './core/runner-factory.js';
 import { loadConfig } from './config.js';
 import { discoverSkills } from './skills.js';
+import { resolveProfileEnvForRoot } from './workspace/agent-profiles.js';
 import { workflowStepSchema } from './workflows/types.js';
 /**
  * Chain-from-prompt (spec 008): one cheap `claude` call turns the user's task
@@ -46,6 +47,10 @@ export async function planChain(repoRoot, task) {
     // OpenCode pick their own default model instead.
     const runner = createRunner(config.defaultRunner);
     const plannerModel = config.defaultRunner === 'claude' ? config.plannerModel : undefined;
+    // Plan under the SAME agent account this project's tasks run on (spec
+    // 2026-07-29-agent-profiles). Without this the planner would quietly bill the personal
+    // subscription for a project the user pointed at their work account.
+    const { env: profileEnv } = await resolveProfileEnvForRoot(repoRoot, config.defaultRunner);
     // One retry on an unparseable answer; a runner error goes straight to fallback.
     for (let attempt = 0; attempt < 2; attempt++) {
         let text;
@@ -55,6 +60,7 @@ export async function planChain(repoRoot, task) {
                 userPrompt,
                 cwd: repoRoot,
                 allowedTools: [],
+                ...(Object.keys(profileEnv).length > 0 ? { env: profileEnv } : {}),
                 model: plannerModel,
                 timeoutMs: PLANNER_TIMEOUT_MS,
             });
@@ -106,7 +112,7 @@ function buildPlannerPrompt(task, skills, verifyCommands) {
  */
 async function detectVerifyCommands(repoRoot) {
     const out = [];
-    const pkgSchema = z.object({ scripts: z.record(z.string()).default({}) });
+    const pkgSchema = z.object({ scripts: z.record(z.string(), z.string()).default({}) });
     try {
         const raw = JSON.parse(await readFile(join(repoRoot, 'package.json'), 'utf8'));
         const pkg = pkgSchema.safeParse(raw);

package/dist/planner.js.map

@@ -1 +1 @@
-{"version":3,"file":"planner.js","sourceRoot":"","sources":["../src/planner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAc,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAwB,MAAM,sBAAsB,CAAC;AAEhF;;;;;;GAMG;AAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,qBAAqB,GACzB,gGAAgG;IAChG,oHAAoH;IACpH,mGAAmG;IACnG,kGAAkG;IAClG,kGAAkG;IAClG,wDAAwD,CAAC;AAE3D,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,oGAAoG;IACpG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,CAAC;SACL,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC/B,CAAC,CACH;SACA,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,CAAC,CAAC;IACT,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CAClC,CAAC,CAAC;AAYH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,IAAY;IAC5D,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzD,cAAc,CAAC,QAAQ,CAAC;QACxB,UAAU,CAAC,QAAQ,CAAC;QACpB,oBAAoB,CAAC,QAAQ,CAAC;KAC/B,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IAEpE,0EAA0E;IAC1E,0EAA0E;IAC1E,iDAAiD;IACjD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,gFAAgF;IAChF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC;gBAC9B,YAAY,EAAE,qBAAqB;gBACnC,UAAU;gBACV,GAAG,EAAE,QAAQ;gBACb,YAAY,EAAE,EAAE;gBAChB,KAAK,EAAE,YAAY;gBACnB,SAAS,EAAE,kBAAkB;aAC9B,CAAC,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,CAAC,oCAAoC;QACnE,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC5F,CAAC;IAED,OAAO;QACL,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAChE,SAAS,EAAE,wCAAwC;QACnD,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,SAAS,kBAAkB,CAAC,IAAY,EAAE,MAAe,EAAE,cAAwB;IACjF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM;QAC3B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACtE,CAAC,CAAC,uBAAuB,CAAC;IAC5B,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM;QAClC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAChD,CAAC,CAAC,iBAAiB,CAAC;IACtB,OAAO;QACL,oDAAoD;QACpD,EAAE;QACF,OAAO;QACP,IAAI;QACJ,EAAE;QACF,qCAAqC;QACrC,OAAO;QACP,EAAE;QACF,8CAA8C;QAC9C,MAAM;KACP,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IAClD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACxF,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACnD,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACvD,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACjE,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;gBAAE,MAAM;QAC7B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qBAAqB;IACvB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CACpB,GAA+E,EAC/E,UAAuB;IAEvB,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,IAAI,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QACzC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QAC7C,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QAC/C,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC;YAAE,SAAS,CAAC,oBAAoB;QACxE,IAAI,OAAO;YAAE,KAAK,GAAG,SAAS,CAAC,CAAC,iCAAiC;QACjE,IAAI,KAAK,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,KAAK,GAAG,SAAS,CAAC,CAAC,+BAA+B;QACvF,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,kBAAkB,CAAC,SAAS,CAAC;YAC7C,EAAE;YACF,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,OAAO;YAAE,SAAS;QACjC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAuB;IACzD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,OAAO,IAAI,IAAI,SAAS,CAAC;AAC3B,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAiB;IAC/C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAI,CAAC,EAAE,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAI,GAAW,EAAE,MAA2C;IACzF,MAAM,OAAO,GAAG,GAAG;SAChB,OAAO,CAAC,2CAA2C,EAAE,EAAE,CAAC;SACxD,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,IAAI,EAAE,CAAC;IACV,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,MAAM,SAAS,IAAI,2BAA2B,CAAC,GAAG,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC;gBACH,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAW;IAC9C,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACf,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,OAAO;gBAAE,OAAO,GAAG,KAAK,CAAC;iBACxB,IAAI,EAAE,KAAK,IAAI;gBAAE,OAAO,GAAG,IAAI,CAAC;iBAChC,IAAI,EAAE,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAC;YACtC,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,IAAI,KAAK,KAAK,CAAC;gBAAE,KAAK,GAAG,CAAC,CAAC;YAC3B,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,IAAI,KAAK,KAAK,CAAC;gBAAE,SAAS;YAC1B,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBAC9B,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACzC,KAAK,GAAG,CAAC,CAAC,CAAC;YACb,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}
+{"version":3,"file":"planner.js","sourceRoot":"","sources":["../src/planner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAc,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAwB,MAAM,sBAAsB,CAAC;AAEhF;;;;;;GAMG;AAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,qBAAqB,GACzB,gGAAgG;IAChG,oHAAoH;IACpH,mGAAmG;IACnG,kGAAkG;IAClG,kGAAkG;IAClG,wDAAwD,CAAC;AAE3D,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,oGAAoG;IACpG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,CAAC;SACL,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC/B,CAAC,CACH;SACA,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,CAAC,CAAC;IACT,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CAClC,CAAC,CAAC;AAYH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,IAAY;IAC5D,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzD,cAAc,CAAC,QAAQ,CAAC;QACxB,UAAU,CAAC,QAAQ,CAAC;QACpB,oBAAoB,CAAC,QAAQ,CAAC;KAC/B,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IAEpE,0EAA0E;IAC1E,0EAA0E;IAC1E,iDAAiD;IACjD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,sEAAsE;IACtE,uFAAuF;IACvF,qEAAqE;IACrE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,MAAM,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAC3F,gFAAgF;IAChF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC;gBAC9B,YAAY,EAAE,qBAAqB;gBACnC,UAAU;gBACV,GAAG,EAAE,QAAQ;gBACb,YAAY,EAAE,EAAE;gBAChB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,KAAK,EAAE,YAAY;gBACnB,SAAS,EAAE,kBAAkB;aAC9B,CAAC,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,CAAC,oCAAoC;QACnE,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC5F,CAAC;IAED,OAAO;QACL,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAChE,SAAS,EAAE,wCAAwC;QACnD,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,SAAS,kBAAkB,CAAC,IAAY,EAAE,MAAe,EAAE,cAAwB;IACjF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM;QAC3B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACtE,CAAC,CAAC,uBAAuB,CAAC;IAC5B,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM;QAClC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAChD,CAAC,CAAC,iBAAiB,CAAC;IACtB,OAAO;QACL,oDAAoD;QACpD,EAAE;QACF,OAAO;QACP,IAAI;QACJ,EAAE;QACF,qCAAqC;QACrC,OAAO;QACP,EAAE;QACF,8CAA8C;QAC9C,MAAM;KACP,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IAClD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACxF,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACnD,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACvD,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACjE,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;gBAAE,MAAM;QAC7B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qBAAqB;IACvB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CACpB,GAA+E,EAC/E,UAAuB;IAEvB,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,IAAI,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QACzC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QAC7C,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QAC/C,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC;YAAE,SAAS,CAAC,oBAAoB;QACxE,IAAI,OAAO;YAAE,KAAK,GAAG,SAAS,CAAC,CAAC,iCAAiC;QACjE,IAAI,KAAK,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,KAAK,GAAG,SAAS,CAAC,CAAC,+BAA+B;QACvF,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,kBAAkB,CAAC,SAAS,CAAC;YAC7C,EAAE;YACF,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,OAAO;YAAE,SAAS;QACjC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAuB;IACzD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,OAAO,IAAI,IAAI,SAAS,CAAC;AAC3B,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAiB;IAC/C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAI,CAAC,EAAE,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAI,GAAW,EAAE,MAA6B;IAC3E,MAAM,OAAO,GAAG,GAAG;SAChB,OAAO,CAAC,2CAA2C,EAAE,EAAE,CAAC;SACxD,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,IAAI,EAAE,CAAC;IACV,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,MAAM,SAAS,IAAI,2BAA2B,CAAC,GAAG,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC;gBACH,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAW;IAC9C,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACf,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,OAAO;gBAAE,OAAO,GAAG,KAAK,CAAC;iBACxB,IAAI,EAAE,KAAK,IAAI;gBAAE,OAAO,GAAG,IAAI,CAAC;iBAChC,IAAI,EAAE,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAC;YACtC,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,IAAI,KAAK,KAAK,CAAC;gBAAE,KAAK,GAAG,CAAC,CAAC;YAC3B,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,IAAI,KAAK,KAAK,CAAC;gBAAE,SAAS;YAC1B,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBAC9B,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACzC,KAAK,GAAG,CAAC,CAAC,CAAC;YACb,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/release/manifests.d.ts

@@ -0,0 +1,81 @@
+/** The manifest arithmetic both release channels share — the pure half of stamping.
+ *
+ *  `stable.ts` and `snapshot.ts` differ in exactly one decision (how a released package pins
+ *  its sibling: a caret range for stable, an exact pin for a snapshot), so everything else
+ *  lives here rather than twice.
+ *
+ *  Deliberately name-agnostic: names come from the checked-out manifests at call time, never
+ *  from constants, so a package rename lands without touching this pipeline.
+ */
+/** The minimal manifest shape the stamper touches; everything else passes through. */
+export interface ManifestLike {
+    name: string;
+    version: string;
+    /** npm's own opt-out. A private package is still versioned in lockstep, never published. */
+    private?: boolean;
+    dependencies?: Record<string, string>;
+    devDependencies?: Record<string, string>;
+    [key: string]: unknown;
+}
+/**
+ * Whether a release stamps AND publishes this package, or only stamps it.
+ *
+ * The distinction exists because "in the release" and "on the registry" are different things.
+ * A package that ships nowhere yet still needs its version moved in lockstep: the api-client is
+ * the worked example — the service pins it, so a frozen version would leave that range pointing
+ * at a build the release was not cut from, which is exactly the drift this pipeline exists to
+ * prevent. Publishing is gated on npm's own `private` flag rather than a list here, so opening
+ * a package up is one line in ITS manifest and no change to the release code.
+ */
+export declare function isPublishable(pkg: ManifestLike): boolean;
+/**
+ * Every manifest a release stamps.
+ *
+ * The order of the fields is the order they must be PUBLISHED in, because each one depends on
+ * the one before it: the alias is a bin-shim over the service, and the service (from the phase
+ * where it stops merely testing against the client and starts importing it) depends on the
+ * api-client. Publishing the dependent first would briefly advertise a version of its
+ * dependency that does not exist on the registry yet.
+ */
+export interface ReleaseManifests {
+    /**
+     * The API contract (zod schemas + inferred types). FIRST in the stamped set because both the
+     * api-client and the service depend on it, so its version has to settle before their pins are
+     * rewritten. Like the api-client it is `private`, so it is stamped but never published — which
+     * is exactly why the service cannot simply depend on it at runtime: `packages/cezar/scripts/
+     * inline-contract.mjs` folds it into `dist/contract/` at build time instead. It moves to a real
+     * publish the day that script is deleted.
+     */
+    contract: ManifestLike;
+    /** The contract package a consumer installs to talk to a cezar service. */
+    apiClient: ManifestLike;
+    /** The published service + CLI. */
+    cezar: ManifestLike;
+    /** The unscoped bin alias, so `npx cezar-cli` works. */
+    alias: ManifestLike;
+}
+/** How a released package pins a sibling it depends on. */
+export type PinStyle = (version: string) => string;
+/**
+ * Rewrite `pkg`'s range for `depName`, in whichever dependency section already declares it.
+ *
+ * Absent means absent: a package that does not depend on the other is returned untouched. That
+ * is what lets the api-client dependency migrate from `devDependencies` (today: only the tests
+ * import it) to `dependencies` (once the service imports its DTOs at runtime) without the
+ * release pipeline needing to know it happened.
+ */
+export declare function pinDependency(pkg: ManifestLike, depName: string, range: string): ManifestLike;
+/**
+ * Stamp every manifest to `version` and re-pin the intra-release dependencies.
+ *
+ * Two pins, both derived from the manifests rather than hardcoded:
+ *   - the alias → the service, so `npx <alias>@<v>` runs the matching CLI;
+ *   - the service → the api-client, so a published service can never resolve a client build it
+ *     was not released with.
+ *
+ * The alias also inherits `repository`/`homepage`/`bugs` from the service manifest: we publish
+ * with `--provenance`, and npm rejects (E422) any manifest whose `repository.url` does not
+ * match the building repo. The alias file carries none of its own, so it borrows the
+ * service's — already correct, and being a git URL, unaffected by any npm-name rename.
+ */
+export declare function stampManifestSet(manifests: ReleaseManifests, version: string, pin: PinStyle): ReleaseManifests;

package/dist/release/manifests.js

@@ -0,0 +1,74 @@
+/** The manifest arithmetic both release channels share — the pure half of stamping.
+ *
+ *  `stable.ts` and `snapshot.ts` differ in exactly one decision (how a released package pins
+ *  its sibling: a caret range for stable, an exact pin for a snapshot), so everything else
+ *  lives here rather than twice.
+ *
+ *  Deliberately name-agnostic: names come from the checked-out manifests at call time, never
+ *  from constants, so a package rename lands without touching this pipeline.
+ */
+/**
+ * Whether a release stamps AND publishes this package, or only stamps it.
+ *
+ * The distinction exists because "in the release" and "on the registry" are different things.
+ * A package that ships nowhere yet still needs its version moved in lockstep: the api-client is
+ * the worked example — the service pins it, so a frozen version would leave that range pointing
+ * at a build the release was not cut from, which is exactly the drift this pipeline exists to
+ * prevent. Publishing is gated on npm's own `private` flag rather than a list here, so opening
+ * a package up is one line in ITS manifest and no change to the release code.
+ */
+export function isPublishable(pkg) {
+    return pkg.private !== true;
+}
+/**
+ * Rewrite `pkg`'s range for `depName`, in whichever dependency section already declares it.
+ *
+ * Absent means absent: a package that does not depend on the other is returned untouched. That
+ * is what lets the api-client dependency migrate from `devDependencies` (today: only the tests
+ * import it) to `dependencies` (once the service imports its DTOs at runtime) without the
+ * release pipeline needing to know it happened.
+ */
+export function pinDependency(pkg, depName, range) {
+    const sections = ['dependencies', 'devDependencies', 'peerDependencies'];
+    const out = { ...pkg };
+    for (const section of sections) {
+        const deps = pkg[section];
+        if (deps && depName in deps)
+            out[section] = { ...deps, [depName]: range };
+    }
+    return out;
+}
+/**
+ * Stamp every manifest to `version` and re-pin the intra-release dependencies.
+ *
+ * Two pins, both derived from the manifests rather than hardcoded:
+ *   - the alias → the service, so `npx <alias>@<v>` runs the matching CLI;
+ *   - the service → the api-client, so a published service can never resolve a client build it
+ *     was not released with.
+ *
+ * The alias also inherits `repository`/`homepage`/`bugs` from the service manifest: we publish
+ * with `--provenance`, and npm rejects (E422) any manifest whose `repository.url` does not
+ * match the building repo. The alias file carries none of its own, so it borrows the
+ * service's — already correct, and being a git URL, unaffected by any npm-name rename.
+ */
+export function stampManifestSet(manifests, version, pin) {
+    const { contract, apiClient, cezar, alias } = manifests;
+    const range = pin(version);
+    const inherited = {};
+    for (const field of ['repository', 'homepage', 'bugs']) {
+        if (cezar[field] !== undefined)
+            inherited[field] = cezar[field];
+    }
+    return {
+        contract: { ...contract, version },
+        apiClient: pinDependency({ ...apiClient, version }, contract.name, range),
+        cezar: pinDependency(pinDependency({ ...cezar, version }, apiClient.name, range), contract.name, range),
+        alias: {
+            ...pinDependency({ ...alias, ...inherited, version }, cezar.name, range),
+            // The alias exists only to depend on the service — an unpinned or missing entry would
+            // make `npx <alias>` install nothing useful, so this one is asserted, not merged.
+            dependencies: { ...alias.dependencies, [cezar.name]: range },
+        },
+    };
+}
+//# sourceMappingURL=manifests.js.map

package/dist/release/manifests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifests.js","sourceRoot":"","sources":["../../src/release/manifests.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,GAAiB;IAC7C,OAAO,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC;AAC9B,CAAC;AAgCD;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,GAAiB,EAAE,OAAe,EAAE,KAAa;IAC7E,MAAM,QAAQ,GAAG,CAAC,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,CAAU,CAAC;IAClF,MAAM,GAAG,GAAiB,EAAE,GAAG,GAAG,EAAE,CAAC;IACrC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAuC,CAAC;QAChE,IAAI,IAAI,IAAI,OAAO,IAAI,IAAI;YAAE,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC;IAC5E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAC9B,SAA2B,EAC3B,OAAe,EACf,GAAa;IAEb,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAE3B,MAAM,SAAS,GAA0B,EAAE,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,MAAM,CAAU,EAAE,CAAC;QAChE,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS;YAAE,SAAS,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE;QAClC,SAAS,EAAE,aAAa,CAAC,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;QACzE,KAAK,EAAE,aAAa,CAClB,aAAa,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,EAC3D,QAAQ,CAAC,IAAI,EACb,KAAK,CACN;QACD,KAAK,EAAE;YACL,GAAG,aAAa,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;YACxE,sFAAsF;YACtF,kFAAkF;YAClF,YAAY,EAAE,EAAE,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE;SAC7D;KACF,CAAC;AACJ,CAAC"}

package/dist/release/snapshot.d.ts

@@ -11,6 +11,7 @@
  *  at call time, never from constants — so the `@pat-lewczuk/cezar` →
  *  `@open-mercato/cezar` rename (PR #501) lands independently of this pipeline.
  */
+import { type ReleaseManifests as ReleaseManifestSet } from './manifests.ts';
 /** The CI facts the decision needs, straight from GitHub Actions' env/event. */
 export interface SnapshotContext {
     /** `GITHUB_EVENT_NAME` — only `pull_request` and `push` ever publish. */
@@ -40,30 +41,15 @@ export interface SnapshotPlan {
     distTag: string;
 }
 export declare function computeSnapshot(ctx: SnapshotContext): SnapshotPlan | null;
-/** The minimal manifest shape the stamper touches; everything else passes through. */
-export interface ManifestLike {
-    name: string;
-    version: string;
-    dependencies?: Record<string, string>;
-    [key: string]: unknown;
-}
-/** Stamp both manifests to the snapshot version.
- *
- *  The alias is a bin-shim whose only dependency is the scoped package; a
- *  snapshot must pin that dependency **exact** (`0.1.5-pr482.123`, no range) so
- *  `npx <alias>@<version>` runs exactly the PR's code — a `^` range would
- *  resolve to whatever newer version exists (spec, resolved Q5). Stable
- *  releases keep their `^` range and never go through this stamper.
+export type { ManifestLike, ReleaseManifests } from './manifests.ts';
+/** Stamp the release set to the snapshot version.
  *
- *  The alias also inherits `repository`/`homepage`/`bugs` from the root manifest:
- *  we publish with `--provenance`, and npm rejects (E422) any manifest whose
- *  `repository.url` doesn't match the building repo. The alias file carries no
- *  such fields of its own, so it must borrow the root's — which already matches
- *  and, being a git URL, is unaffected by any npm-name rename. */
-export declare function stampManifests(rootPkg: ManifestLike, aliasPkg: ManifestLike, version: string): {
-    root: ManifestLike;
-    alias: ManifestLike;
-};
+ *  Every intra-release dependency is pinned **exact** (`0.1.5-pr482.123`, no range) so
+ *  `npx <alias>@<version>` runs exactly the PR's code and the service resolves exactly the
+ *  api-client it was cut with — a `^` range would resolve to whatever newer version exists
+ *  (spec, resolved Q5). Stable releases keep their `^` range and never go through this
+ *  stamper. */
+export declare function stampManifests(manifests: ReleaseManifestSet, version: string): ReleaseManifestSet;
 /** The copy-pasteable commands for the sticky PR comment and the step summary.
  *  Rendered from the *actual* alias package name so a future rename of the npx
  *  command can never leave stale instructions (spec, resolved Q1). */

package/dist/release/snapshot.js

@@ -11,6 +11,7 @@
  *  at call time, never from constants — so the `@pat-lewczuk/cezar` →
  *  `@open-mercato/cezar` rename (PR #501) lands independently of this pipeline.
  */
+import { stampManifestSet } from './manifests.js';
 export function computeSnapshot(ctx) {
     const channel = resolveChannel(ctx);
     if (!channel)
@@ -48,29 +49,15 @@ function resolveChannel(ctx) {
     }
     return null;
 }
-/** Stamp both manifests to the snapshot version.
+/** Stamp the release set to the snapshot version.
  *
- *  The alias is a bin-shim whose only dependency is the scoped package; a
- *  snapshot must pin that dependency **exact** (`0.1.5-pr482.123`, no range) so
- *  `npx <alias>@<version>` runs exactly the PR's code — a `^` range would
- *  resolve to whatever newer version exists (spec, resolved Q5). Stable
- *  releases keep their `^` range and never go through this stamper.
- *
- *  The alias also inherits `repository`/`homepage`/`bugs` from the root manifest:
- *  we publish with `--provenance`, and npm rejects (E422) any manifest whose
- *  `repository.url` doesn't match the building repo. The alias file carries no
- *  such fields of its own, so it must borrow the root's — which already matches
- *  and, being a git URL, is unaffected by any npm-name rename. */
-export function stampManifests(rootPkg, aliasPkg, version) {
-    const inherited = {};
-    for (const field of ['repository', 'homepage', 'bugs']) {
-        if (rootPkg[field] !== undefined)
-            inherited[field] = rootPkg[field];
-    }
-    return {
-        root: { ...rootPkg, version },
-        alias: { ...aliasPkg, ...inherited, version, dependencies: { [rootPkg.name]: version } },
-    };
+ *  Every intra-release dependency is pinned **exact** (`0.1.5-pr482.123`, no range) so
+ *  `npx <alias>@<version>` runs exactly the PR's code and the service resolves exactly the
+ *  api-client it was cut with — a `^` range would resolve to whatever newer version exists
+ *  (spec, resolved Q5). Stable releases keep their `^` range and never go through this
+ *  stamper. */
+export function stampManifests(manifests, version) {
+    return stampManifestSet(manifests, version, (v) => v);
 }
 /** The copy-pasteable commands for the sticky PR comment and the step summary.
  *  Rendered from the *actual* alias package name so a future rename of the npx

package/dist/release/snapshot.js.map

@@ -1 +1 @@
-{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../src/release/snapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAgCH,MAAM,UAAU,eAAe,CAAC,GAAoB;IAClD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,SAAS,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5F,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,GAAG,CAAC;QACpG,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE;QACtB,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO,EAAE,GAAG,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC,SAAS,GAAG,OAAO,EAAE;QAC3E,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAoB;IAC1C,IAAI,GAAG,CAAC,SAAS,KAAK,cAAc,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC;QACvB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnE,6EAA6E;QAC7E,4EAA4E;QAC5E,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACzE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC7B,4EAA4E;QAC5E,qEAAqE;QACrE,uEAAuE;QACvE,iEAAiE;QACjE,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAUD;;;;;;;;;;;;kEAYkE;AAClE,MAAM,UAAU,cAAc,CAC5B,OAAqB,EACrB,QAAsB,EACtB,OAAe;IAEf,MAAM,SAAS,GAA0B,EAAE,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,MAAM,CAAU,EAAE,CAAC;QAChE,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,SAAS;YAAE,SAAS,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IACD,OAAO;QACL,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE;QAC7B,KAAK,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE;KACzF,CAAC;AACJ,CAAC;AAED;;sEAEsE;AACtE,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,OAAe;IAClE,MAAM,GAAG,GAAG,OAAO,SAAS,IAAI,OAAO,EAAE,CAAC;IAC1C,OAAO;QACL,GAAG,GAAG,oEAAoE;QAC1E,GAAG,GAAG,gDAAgD;QACtD,GAAG,GAAG,qEAAqE;KAC5E,CAAC;AACJ,CAAC"}
+{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../src/release/snapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,gBAAgB,EAA+C,MAAM,gBAAgB,CAAC;AAgC/F,MAAM,UAAU,eAAe,CAAC,GAAoB;IAClD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,SAAS,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5F,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,GAAG,CAAC;QACpG,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE;QACtB,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO,EAAE,GAAG,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC,SAAS,GAAG,OAAO,EAAE;QAC3E,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAoB;IAC1C,IAAI,GAAG,CAAC,SAAS,KAAK,cAAc,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC;QACvB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnE,6EAA6E;QAC7E,4EAA4E;QAC5E,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACzE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC7B,4EAA4E;QAC5E,qEAAqE;QACrE,uEAAuE;QACvE,iEAAiE;QACjE,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAID;;;;;;eAMe;AACf,MAAM,UAAU,cAAc,CAC5B,SAA6B,EAC7B,OAAe;IAEf,OAAO,gBAAgB,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;sEAEsE;AACtE,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,OAAe;IAClE,MAAM,GAAG,GAAG,OAAO,SAAS,IAAI,OAAO,EAAE,CAAC;IAC1C,OAAO;QACL,GAAG,GAAG,oEAAoE;QAC1E,GAAG,GAAG,gDAAgD;QACtD,GAAG,GAAG,qEAAqE;KAC5E,CAAC;AACJ,CAAC"}