@open-mercato/cezar 0.9.1 → 0.9.2-pr710.1256

package/dist/workspace/config.d.ts

@@ -23,234 +23,113 @@ export declare const PROJECT_ID_RE: RegExp;
  * degrade per-key so one bad value never evicts the project.
  */
 declare const workspaceProjectSchema: z.ZodObject<{
-    /** Unique slug — URL segment, sidebar key, worktree namespace. */
     id: z.ZodString;
-    /** Absolute, realpath-normalized repo root (normalization is the writer's
-     *  job — `registerProject` in step 1.3; the schema only demands absolute). */
-    root: z.ZodEffects<z.ZodString, string, string>;
-    /** Display name (basename by default). `''` = caller derives a fallback. */
+    root: z.ZodString;
     name: z.ZodCatch<z.ZodString>;
     addedAt: z.ZodCatch<z.ZodString>;
     lastOpenedAt: z.ZodCatch<z.ZodString>;
-    source: z.ZodCatch<z.ZodEnum<["local", "checkout"]>>;
-    /** Per-project cap on concurrently running tasks. Absent = inherit the
-     *  workspace `resources.maxParallel`. Bounded like the workspace cap; a bad
-     *  value degrades to "inherit" (`.catch(undefined)`) rather than a hard
-     *  default, and `.passthrough()` preserves the key across cezar round-trips. */
+    source: z.ZodCatch<z.ZodEnum<{
+        checkout: "checkout";
+        local: "local";
+    }>>;
     maxParallel: z.ZodCatch<z.ZodOptional<z.ZodNumber>>;
-}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-    /** Unique slug — URL segment, sidebar key, worktree namespace. */
-    id: z.ZodString;
-    /** Absolute, realpath-normalized repo root (normalization is the writer's
-     *  job — `registerProject` in step 1.3; the schema only demands absolute). */
-    root: z.ZodEffects<z.ZodString, string, string>;
-    /** Display name (basename by default). `''` = caller derives a fallback. */
-    name: z.ZodCatch<z.ZodString>;
-    addedAt: z.ZodCatch<z.ZodString>;
-    lastOpenedAt: z.ZodCatch<z.ZodString>;
-    source: z.ZodCatch<z.ZodEnum<["local", "checkout"]>>;
-    /** Per-project cap on concurrently running tasks. Absent = inherit the
-     *  workspace `resources.maxParallel`. Bounded like the workspace cap; a bad
-     *  value degrades to "inherit" (`.catch(undefined)`) rather than a hard
-     *  default, and `.passthrough()` preserves the key across cezar round-trips. */
-    maxParallel: z.ZodCatch<z.ZodOptional<z.ZodNumber>>;
-}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-    /** Unique slug — URL segment, sidebar key, worktree namespace. */
-    id: z.ZodString;
-    /** Absolute, realpath-normalized repo root (normalization is the writer's
-     *  job — `registerProject` in step 1.3; the schema only demands absolute). */
-    root: z.ZodEffects<z.ZodString, string, string>;
-    /** Display name (basename by default). `''` = caller derives a fallback. */
-    name: z.ZodCatch<z.ZodString>;
-    addedAt: z.ZodCatch<z.ZodString>;
-    lastOpenedAt: z.ZodCatch<z.ZodString>;
-    source: z.ZodCatch<z.ZodEnum<["local", "checkout"]>>;
-    /** Per-project cap on concurrently running tasks. Absent = inherit the
-     *  workspace `resources.maxParallel`. Bounded like the workspace cap; a bad
-     *  value degrades to "inherit" (`.catch(undefined)`) rather than a hard
-     *  default, and `.passthrough()` preserves the key across cezar round-trips. */
-    maxParallel: z.ZodCatch<z.ZodOptional<z.ZodNumber>>;
-}, z.ZodTypeAny, "passthrough">>;
+    tags: z.ZodCatch<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+}, z.core.$loose>;
 export type WorkspaceProject = z.infer<typeof workspaceProjectSchema>;
+/**
+ * Zero-config cadence, in minutes, for re-checking a run parked with
+ * `CEZ:MONITORING` (#810). The single source of truth for that default — the
+ * schema below and `WorkspaceSemaphore`'s fallback both read it, so an install
+ * with no `~/.cezar/config.json` and a semaphore built without boot wiring
+ * agree. `null` (explicit park) is a user choice and is never replaced by it.
+ */
+export declare const DEFAULT_MONITORING_WAKE_MINUTES = 5;
 declare const workspaceConfigSchema: z.ZodObject<{
-    /** Migration cursor (src/workspace/migrations.ts). Absent/bad → 0, which
-     *  means "run every migration" — each one is idempotent, so that is safe. */
     schemaVersion: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-    /** Root exposed by the Add project folder browser. Environment supplies
-     *  the zero-config default; an explicit workspace value wins thereafter. */
     browseRoot: z.ZodCatch<z.ZodDefault<z.ZodString>>;
-    /** Checkout root for GUI-cloned projects. Stored as written (a literal
-     *  `~` is expanded by the checkout flow, not here); validated writable
-     *  when *changed*, never at load. */
     projectsDir: z.ZodCatch<z.ZodDefault<z.ZodString>>;
-    resources: z.ZodCatch<z.ZodDefault<z.ZodObject<{
-        /** Workspace-wide parallel-task cap (moved from per-repo config.json). */
+    skillsAutoUpdate: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
+    modelsLocked: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
+    resources: z.ZodCatch<z.ZodPrefault<z.ZodObject<{
         maxParallel: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-        /** Per-task memory ceiling in MiB; null = no limit (matches the file's
-         *  literal `"memoryLimitMb": null` in the spec's Data Model). */
+        maxMonitoringSessions: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
+        monitoringWakeIntervalMinutes: z.ZodCatch<z.ZodDefault<z.ZodNullable<z.ZodNumber>>>;
+        autoResumeOnUsageLimit: z.ZodCatch<z.ZodDefault<z.ZodBoolean>>;
         memoryLimitMb: z.ZodCatch<z.ZodDefault<z.ZodNullable<z.ZodNumber>>>;
-        /** Default worktree retention for projects that don't override it. */
         worktreeRetentionDefault: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-        /** Workspace-wide parallel-task cap (moved from per-repo config.json). */
-        maxParallel: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-        /** Per-task memory ceiling in MiB; null = no limit (matches the file's
-         *  literal `"memoryLimitMb": null` in the spec's Data Model). */
-        memoryLimitMb: z.ZodCatch<z.ZodDefault<z.ZodNullable<z.ZodNumber>>>;
-        /** Default worktree retention for projects that don't override it. */
-        worktreeRetentionDefault: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-        /** Workspace-wide parallel-task cap (moved from per-repo config.json). */
-        maxParallel: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-        /** Per-task memory ceiling in MiB; null = no limit (matches the file's
-         *  literal `"memoryLimitMb": null` in the spec's Data Model). */
-        memoryLimitMb: z.ZodCatch<z.ZodDefault<z.ZodNullable<z.ZodNumber>>>;
-        /** Default worktree retention for projects that don't override it. */
-        worktreeRetentionDefault: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-    }, z.ZodTypeAny, "passthrough">>>>;
-    /** Per-entry salvage: a corrupt entry is dropped, the rest of the registry
-     *  survives (a whole-array `.catch([])` would evict every project over one
-     *  bad row). */
-    projects: z.ZodEffects<z.ZodCatch<z.ZodDefault<z.ZodArray<z.ZodUnknown, "many">>>, z.objectOutputType<{
-        /** Unique slug — URL segment, sidebar key, worktree namespace. */
-        id: z.ZodString;
-        /** Absolute, realpath-normalized repo root (normalization is the writer's
-         *  job — `registerProject` in step 1.3; the schema only demands absolute). */
-        root: z.ZodEffects<z.ZodString, string, string>;
-        /** Display name (basename by default). `''` = caller derives a fallback. */
-        name: z.ZodCatch<z.ZodString>;
-        addedAt: z.ZodCatch<z.ZodString>;
-        lastOpenedAt: z.ZodCatch<z.ZodString>;
-        source: z.ZodCatch<z.ZodEnum<["local", "checkout"]>>;
-        /** Per-project cap on concurrently running tasks. Absent = inherit the
-         *  workspace `resources.maxParallel`. Bounded like the workspace cap; a bad
-         *  value degrades to "inherit" (`.catch(undefined)`) rather than a hard
-         *  default, and `.passthrough()` preserves the key across cezar round-trips. */
-        maxParallel: z.ZodCatch<z.ZodOptional<z.ZodNumber>>;
-    }, z.ZodTypeAny, "passthrough">[], unknown>;
-}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-    /** Migration cursor (src/workspace/migrations.ts). Absent/bad → 0, which
-     *  means "run every migration" — each one is idempotent, so that is safe. */
-    schemaVersion: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-    /** Root exposed by the Add project folder browser. Environment supplies
-     *  the zero-config default; an explicit workspace value wins thereafter. */
-    browseRoot: z.ZodCatch<z.ZodDefault<z.ZodString>>;
-    /** Checkout root for GUI-cloned projects. Stored as written (a literal
-     *  `~` is expanded by the checkout flow, not here); validated writable
-     *  when *changed*, never at load. */
-    projectsDir: z.ZodCatch<z.ZodDefault<z.ZodString>>;
-    resources: z.ZodCatch<z.ZodDefault<z.ZodObject<{
-        /** Workspace-wide parallel-task cap (moved from per-repo config.json). */
-        maxParallel: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-        /** Per-task memory ceiling in MiB; null = no limit (matches the file's
-         *  literal `"memoryLimitMb": null` in the spec's Data Model). */
-        memoryLimitMb: z.ZodCatch<z.ZodDefault<z.ZodNullable<z.ZodNumber>>>;
-        /** Default worktree retention for projects that don't override it. */
-        worktreeRetentionDefault: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-        /** Workspace-wide parallel-task cap (moved from per-repo config.json). */
-        maxParallel: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-        /** Per-task memory ceiling in MiB; null = no limit (matches the file's
-         *  literal `"memoryLimitMb": null` in the spec's Data Model). */
-        memoryLimitMb: z.ZodCatch<z.ZodDefault<z.ZodNullable<z.ZodNumber>>>;
-        /** Default worktree retention for projects that don't override it. */
-        worktreeRetentionDefault: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-        /** Workspace-wide parallel-task cap (moved from per-repo config.json). */
-        maxParallel: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-        /** Per-task memory ceiling in MiB; null = no limit (matches the file's
-         *  literal `"memoryLimitMb": null` in the spec's Data Model). */
-        memoryLimitMb: z.ZodCatch<z.ZodDefault<z.ZodNullable<z.ZodNumber>>>;
-        /** Default worktree retention for projects that don't override it. */
-        worktreeRetentionDefault: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-    }, z.ZodTypeAny, "passthrough">>>>;
-    /** Per-entry salvage: a corrupt entry is dropped, the rest of the registry
-     *  survives (a whole-array `.catch([])` would evict every project over one
-     *  bad row). */
-    projects: z.ZodEffects<z.ZodCatch<z.ZodDefault<z.ZodArray<z.ZodUnknown, "many">>>, z.objectOutputType<{
-        /** Unique slug — URL segment, sidebar key, worktree namespace. */
-        id: z.ZodString;
-        /** Absolute, realpath-normalized repo root (normalization is the writer's
-         *  job — `registerProject` in step 1.3; the schema only demands absolute). */
-        root: z.ZodEffects<z.ZodString, string, string>;
-        /** Display name (basename by default). `''` = caller derives a fallback. */
-        name: z.ZodCatch<z.ZodString>;
-        addedAt: z.ZodCatch<z.ZodString>;
-        lastOpenedAt: z.ZodCatch<z.ZodString>;
-        source: z.ZodCatch<z.ZodEnum<["local", "checkout"]>>;
-        /** Per-project cap on concurrently running tasks. Absent = inherit the
-         *  workspace `resources.maxParallel`. Bounded like the workspace cap; a bad
-         *  value degrades to "inherit" (`.catch(undefined)`) rather than a hard
-         *  default, and `.passthrough()` preserves the key across cezar round-trips. */
-        maxParallel: z.ZodCatch<z.ZodOptional<z.ZodNumber>>;
-    }, z.ZodTypeAny, "passthrough">[], unknown>;
-}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-    /** Migration cursor (src/workspace/migrations.ts). Absent/bad → 0, which
-     *  means "run every migration" — each one is idempotent, so that is safe. */
-    schemaVersion: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-    /** Root exposed by the Add project folder browser. Environment supplies
-     *  the zero-config default; an explicit workspace value wins thereafter. */
-    browseRoot: z.ZodCatch<z.ZodDefault<z.ZodString>>;
-    /** Checkout root for GUI-cloned projects. Stored as written (a literal
-     *  `~` is expanded by the checkout flow, not here); validated writable
-     *  when *changed*, never at load. */
-    projectsDir: z.ZodCatch<z.ZodDefault<z.ZodString>>;
-    resources: z.ZodCatch<z.ZodDefault<z.ZodObject<{
-        /** Workspace-wide parallel-task cap (moved from per-repo config.json). */
-        maxParallel: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-        /** Per-task memory ceiling in MiB; null = no limit (matches the file's
-         *  literal `"memoryLimitMb": null` in the spec's Data Model). */
-        memoryLimitMb: z.ZodCatch<z.ZodDefault<z.ZodNullable<z.ZodNumber>>>;
-        /** Default worktree retention for projects that don't override it. */
-        worktreeRetentionDefault: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-        /** Workspace-wide parallel-task cap (moved from per-repo config.json). */
-        maxParallel: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-        /** Per-task memory ceiling in MiB; null = no limit (matches the file's
-         *  literal `"memoryLimitMb": null` in the spec's Data Model). */
-        memoryLimitMb: z.ZodCatch<z.ZodDefault<z.ZodNullable<z.ZodNumber>>>;
-        /** Default worktree retention for projects that don't override it. */
-        worktreeRetentionDefault: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-        /** Workspace-wide parallel-task cap (moved from per-repo config.json). */
-        maxParallel: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-        /** Per-task memory ceiling in MiB; null = no limit (matches the file's
-         *  literal `"memoryLimitMb": null` in the spec's Data Model). */
-        memoryLimitMb: z.ZodCatch<z.ZodDefault<z.ZodNullable<z.ZodNumber>>>;
-        /** Default worktree retention for projects that don't override it. */
-        worktreeRetentionDefault: z.ZodCatch<z.ZodDefault<z.ZodNumber>>;
-    }, z.ZodTypeAny, "passthrough">>>>;
-    /** Per-entry salvage: a corrupt entry is dropped, the rest of the registry
-     *  survives (a whole-array `.catch([])` would evict every project over one
-     *  bad row). */
-    projects: z.ZodEffects<z.ZodCatch<z.ZodDefault<z.ZodArray<z.ZodUnknown, "many">>>, z.objectOutputType<{
-        /** Unique slug — URL segment, sidebar key, worktree namespace. */
-        id: z.ZodString;
-        /** Absolute, realpath-normalized repo root (normalization is the writer's
-         *  job — `registerProject` in step 1.3; the schema only demands absolute). */
-        root: z.ZodEffects<z.ZodString, string, string>;
-        /** Display name (basename by default). `''` = caller derives a fallback. */
-        name: z.ZodCatch<z.ZodString>;
-        addedAt: z.ZodCatch<z.ZodString>;
-        lastOpenedAt: z.ZodCatch<z.ZodString>;
-        source: z.ZodCatch<z.ZodEnum<["local", "checkout"]>>;
-        /** Per-project cap on concurrently running tasks. Absent = inherit the
-         *  workspace `resources.maxParallel`. Bounded like the workspace cap; a bad
-         *  value degrades to "inherit" (`.catch(undefined)`) rather than a hard
-         *  default, and `.passthrough()` preserves the key across cezar round-trips. */
-        maxParallel: z.ZodCatch<z.ZodOptional<z.ZodNumber>>;
-    }, z.ZodTypeAny, "passthrough">[], unknown>;
-}, z.ZodTypeAny, "passthrough">>;
+    }, z.core.$loose>>>;
+    composerDefaults: z.ZodCatch<z.ZodDefault<z.ZodObject<{
+        autonomous: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
+        worktree: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
+    }, z.core.$loose>>>;
+    disabledProviders: z.ZodPipe<z.ZodCatch<z.ZodDefault<z.ZodArray<z.ZodUnknown>>>, z.ZodTransform<("claude" | "codex" | "opencode" | "pi")[], unknown[]>>;
+    agentDefaults: z.ZodCatch<z.ZodDefault<z.ZodObject<{
+        runner: z.ZodCatch<z.ZodOptional<z.ZodEnum<{
+            claude: "claude";
+            codex: "codex";
+            opencode: "opencode";
+            pi: "pi";
+        }>>>;
+        models: z.ZodCatch<z.ZodOptional<z.ZodObject<{
+            claude: z.ZodCatch<z.ZodOptional<z.ZodString>>;
+            codex: z.ZodCatch<z.ZodOptional<z.ZodString>>;
+            opencode: z.ZodCatch<z.ZodOptional<z.ZodString>>;
+            pi: z.ZodCatch<z.ZodOptional<z.ZodString>>;
+        }, z.core.$loose>>>;
+    }, z.core.$loose>>>;
+    projects: z.ZodPipe<z.ZodCatch<z.ZodDefault<z.ZodArray<z.ZodUnknown>>>, z.ZodTransform<{
+        [x: string]: unknown;
+        id: string;
+        root: string;
+        name: string;
+        addedAt: string;
+        lastOpenedAt: string;
+        source: "checkout" | "local";
+        maxParallel?: number | undefined;
+        tags?: string[] | undefined;
+    }[], unknown[]>>;
+}, z.core.$loose>;
 export type WorkspaceConfig = z.infer<typeof workspaceConfigSchema>;
+/** Resolve the auto-update preference without mutating or materializing it. */
+export declare function effectiveSkillsAutoUpdate(config: Pick<WorkspaceConfig, 'skillsAutoUpdate'>, env?: NodeJS.ProcessEnv): boolean;
+export declare function effectiveComposerDefault(stored: boolean | undefined, envValue: string | undefined, fallback: boolean): boolean;
 /** The in-memory default — what a missing/corrupt file behaves like. */
 export declare function defaultWorkspaceConfig(): WorkspaceConfig;
+/**
+ * The last-known-good copy of a NON-EMPTY registry, written beside the config
+ * by every successful merge-write. The registry is cheap to rebuild in theory
+ * ("open the project again"), but in practice it is a hand-curated list, and a
+ * single bad write — a crash between `writeFileSync` and `rename`, a full
+ * disk, a stray process — costs the user every entry. One extra file, no
+ * configuration, and `loadWorkspaceConfig` falls back to it.
+ *
+ * Removing `~/.cezar` still resets cezar completely; removing only
+ * `config.json` no longer does, because this snapshot restores it.
+ *
+ * A cezar older than this change does not refresh the snapshot, so on a machine
+ * that alternates between versions it can lag behind the registry — which only
+ * shows if the config file is also lost, and the worst case is a project the
+ * user unregistered reappearing. Cheap next to losing the whole list.
+ */
+export declare function workspaceConfigBackupPath(path?: string): string;
 /**
  * Read `~/.cezar/config.json` on demand — never cached, never throws. A
  * missing file is the zero-config default (silent); an unreadable or
  * malformed one degrades to the same default with a one-line warning and is
  * left on disk untouched (the next successful merge-write replaces it).
+ *
+ * Before degrading, a missing, empty, or corrupt file is restored from the
+ * `config.json.bak` snapshot when that still holds projects. The restore is
+ * read-only: the recovered registry is handed back in memory and lands on disk
+ * again through the next merge-write, so a read never writes. A file that
+ * parses and simply has no projects is NOT restored — that is a user who
+ * removed their last project, not a lost registry.
+ *
+ * `path` defaults to the current `workspaceConfigPath()`, but a caller that
+ * will also WRITE passes the path it resolved itself — see
+ * `mergeWriteWorkspaceConfig` for why resolving it twice is a data-loss bug.
  */
-export declare function loadWorkspaceConfig(): Promise<WorkspaceConfig>;
+export declare function loadWorkspaceConfig(path?: string): Promise<WorkspaceConfig>;
 /**
  * The tmp path an atomic write stages through — UNIQUE PER WRITE, never a
  * fixed `${path}.tmp`. `~/.cezar/` is shared by every cezar process on the
@@ -276,6 +155,15 @@ export declare function atomicWriteJsonSync(path: string, value: unknown): void;
  * boot). The mutator may mutate its argument in place or return a replacement.
  * Returns the config that was written. Throws on write failure (e.g. a
  * read-only home) — degrading is the caller's policy, per house rules.
+ *
+ * The path is resolved ONCE, before the `await`, and the same value feeds the
+ * read and the write. Resolving it twice used to lose the whole registry:
+ * `workspaceConfigPath()` re-reads `CEZ_HOME` on every call, so if the variable
+ * changed while the read was in flight — a test's `afterEach` dropping its pin
+ * after a timeout is the way this happens in practice — the read came from one
+ * home and the write landed in another, replacing that file's registry with a
+ * config it never held. One resolution keeps a merge-write inside exactly one
+ * file, whatever the environment does mid-flight.
  */
 export declare function mergeWriteWorkspaceConfig(mutator: (config: WorkspaceConfig) => WorkspaceConfig | void): Promise<WorkspaceConfig>;
 export {};