@open-mercato/cezar 0.9.1 → 0.9.2-pr780.1061

package/dist/todos.js

@@ -121,7 +121,7 @@ export async function removeTodo(dataDir, id) {
 /** The task text "▶ Run" turns an entry into: the suggested prompt (or the summary when the
  *  entry carries none), plus the suggested args as a trailing line. The single server-side
  *  source for `POST /api/todos/:id/start`; the cockpit's prefill copy
- *  (`web/app/src/routes/inbox.tsx`, #374) lives in another process and cannot import this, so
+ *  (`packages/web/src/routes/inbox.tsx`, #374) lives in another process and cannot import this, so
  *  the two are pinned to the shared cases in `test/fixtures/todo-task-text.json`. */
 export function todoTaskText(todo) {
     let task = (todo.suggestedPrompt ?? todo.summary).trim() || todo.summary;

package/dist/ui-state.d.ts

@@ -1,3 +1,4 @@
+import type { UiState } from './contract/index.js';
 /**
  * `.ai/cezar/ui-state.json` — small GUI preferences the cockpit persists (files, not a DB).
  * The server owns the schema and the writes (`PUT /api/ui-state` in `src/server/server.ts`);
@@ -8,5 +9,18 @@
  * `{}` — an absent preference, never a throw, never a blocked startup.
  */
 export declare function uiStatePath(repoRoot: string): string;
-/** Read `ui-state.json` on demand — never cached, never throws. */
-export declare function readUiState(repoRoot: string): Promise<Record<string, unknown>>;
+/**
+ * Read `ui-state.json` on demand — never cached, never throws.
+ *
+ * Typed by the CONTRACT (`UiState`), not by a loose record: `GET /api/v1/ui-state` answers this
+ * value verbatim, so a `Record<string, unknown>` here made the route name no key at all and the
+ * per-route parity guard vacuous — the same defect `healthSnapshot` had. `UiState` is a
+ * `z.looseObject`, so the index signature (and with it the round-trip promise of
+ * BACKWARD_COMPATIBILITY.md §3) survives; what it adds is the NAMES of the keys the server knows.
+ *
+ * The cast is unchanged in kind — the file is user-editable JSON and is deliberately NOT parsed
+ * through the schema, because a single malformed pref must not discard the whole bag (§3). What
+ * the type asserts is the wire shape the route promises; the write side (`PUT /ui-state`, validated
+ * by `uiStateBody`) is what actually enforces it.
+ */
+export declare function readUiState(repoRoot: string): Promise<UiState>;

package/dist/ui-state.js

@@ -12,7 +12,20 @@ import { join } from 'node:path';
 export function uiStatePath(repoRoot) {
     return join(repoRoot, '.ai/cezar', 'ui-state.json');
 }
-/** Read `ui-state.json` on demand — never cached, never throws. */
+/**
+ * Read `ui-state.json` on demand — never cached, never throws.
+ *
+ * Typed by the CONTRACT (`UiState`), not by a loose record: `GET /api/v1/ui-state` answers this
+ * value verbatim, so a `Record<string, unknown>` here made the route name no key at all and the
+ * per-route parity guard vacuous — the same defect `healthSnapshot` had. `UiState` is a
+ * `z.looseObject`, so the index signature (and with it the round-trip promise of
+ * BACKWARD_COMPATIBILITY.md §3) survives; what it adds is the NAMES of the keys the server knows.
+ *
+ * The cast is unchanged in kind — the file is user-editable JSON and is deliberately NOT parsed
+ * through the schema, because a single malformed pref must not discard the whole bag (§3). What
+ * the type asserts is the wire shape the route promises; the write side (`PUT /ui-state`, validated
+ * by `uiStateBody`) is what actually enforces it.
+ */
 export async function readUiState(repoRoot) {
     try {
         const parsed = JSON.parse(await readFile(uiStatePath(repoRoot), 'utf8'));

package/dist/ui-state.js.map

@@ -1 +1 @@
-{"version":3,"file":"ui-state.js","sourceRoot":"","sources":["../src/ui-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,OAAO,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;AACtD,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAClF,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"ui-state.js","sourceRoot":"","sources":["../src/ui-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,OAAO,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAClF,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/workflows/load.d.ts

@@ -1,4 +1,4 @@
-import { type WorkflowDef } from './types.js';
+import { type WorkflowDef } from './types.ts';
 export declare const WORKFLOWS_DIR = ".ai/cezar/workflows";
 export interface WorkflowLoadIssue {
     path: string;

package/dist/workflows/run.d.ts

@@ -1,9 +1,9 @@
-import type { RunnerId } from '../core/agent-runner.js';
-import type { ContentBlock } from '../core/agent-runner.js';
-import { type Skill } from '../skills.js';
-import type { QueuedMessage, RunRecord, RunStore } from '../runs/store.js';
-import { WorkspaceSemaphore } from '../workspace/semaphore.js';
-import { type WorkflowDef } from './types.js';
+import type { RunnerId } from '../core/agent-runner.ts';
+import type { ContentBlock } from '../core/agent-runner.ts';
+import { type Skill } from '../skills.ts';
+import type { QueuedMessage, RunRecord, RunStore } from '../runs/store.ts';
+import { WorkspaceSemaphore } from '../workspace/semaphore.ts';
+import { type WorkflowDef } from './types.ts';
 /** An interactive session that hears nothing from the user closes itself. */
 export declare const IDLE_TIMEOUT_MS: number;
 /**
@@ -25,6 +25,10 @@ export interface StartRunInput {
     model?: string;
     /** Agent backend chosen for this task (GUI). Unset = the config default. */
     runner?: RunnerId;
+    /** Agent account for this task (spec 2026-07-29-agent-profiles), applying to steps that run
+     *  on `runner`. Unset = the project's own selection. Persisted on the record so the choice
+     *  survives into resume and Continue, and so the thread can say which account did the work. */
+    agentProfile?: string;
     /** Screenshots pasted into the new-task form — persisted when the run is
      *  created and delivered once, with the first agent step's opening message. */
     images?: ContentBlock[];
@@ -33,9 +37,8 @@ export interface StartRunInput {
      *  `resolveExtraSystemPrompt` for the precedence contract. */
     systemPrompt?: string;
     /** Composer opt-out (#worktree-toggle): `false` runs the task in the repo
-     *  working tree instead of an isolated worktree — for read-only skills that
-     *  don't need a branch. Undefined/`true` keeps the default per-task worktree.
-     *  Ignored for variants (they always isolate). */
+     *  working tree instead of an isolated worktree. Undefined/`true` keeps the
+     *  default per-task worktree. Ignored for variants (they always isolate). */
     worktree?: boolean;
     /** Autonomous mode (#autonomous): the run never parks at `waiting` for the
      *  user — turn-ends auto-continue until the agent signals done or the safety
@@ -123,7 +126,13 @@ export declare class RunManager {
     private readonly queue;
     private readonly starting;
     private readonly waiting;
+    /** Durable monitoring subset. Only the configured number receives the waiting-slot exemption. */
+    private readonly monitoring;
     private readonly pendingJobs;
+    /** Interrupted agent turns recovered after a process restart. Unlike an
+     *  explicit user Continue, these are bulk scheduler work and must re-enter
+     *  through `pump()` so both workspace and per-project caps are honored. */
+    private readonly pendingContinuations;
     /** Per-run image counter behind `pasted-<n>` / `screenshot-<n>` (#472). Lives on
      *  the manager rather than the `ActiveRun` so a *queued* run — which has no
      *  `ActiveRun` at all — can persist attachments. Seeded lazily from disk. */
@@ -188,6 +197,25 @@ export declare class RunManager {
      *  write follow-ups into the parent's inbox despite the opt-out. Empty is the
      *  established "absent" spelling — consumers guard with `if (todosFile)`. */
     private agentEnv;
+    /**
+     * `agentEnv` plus the agent-account variable for the profile this STEP runs under (spec
+     * 2026-07-29-agent-profiles), and the id it resolved to so the caller can record it.
+     *
+     * Resolved per step, not per run, because a workflow can mix backends: an override naming a
+     * Claude account says nothing about which Codex account a codex step should use. Resolution
+     * order, most specific first:
+     *
+     *   1. the step's ALREADY-RECORDED `profileId` — a resume or Continue must reattach to the
+     *      account that created the session, whatever the project has since been switched to;
+     *   2. the run's composer override, but only for steps on the run's own runner;
+     *   3. the project's stored selection, and failing that the discovered default.
+     *
+     * Read fresh every time. `~/.cezar/config.json` is shared by every cezar process on this
+     * machine, so a cached snapshot is a staleness bug, and one small JSON read is free next to
+     * spawning a CLI. Never throws: an unreadable home degrades to the default profile, which is
+     * exactly the behaviour that predates profiles.
+     */
+    private agentEnvForStep;
     startRun(workflow: WorkflowDef, input: StartRunInput, group?: {
         groupId: string;
         variant: string;
@@ -295,12 +323,18 @@ export declare class RunManager {
      * bound — asserted directly by a test.
      */
     private hydrateQueuedInput;
+    /** Apply edits and messages made while a restart continuation waits for
+     * capacity. The durable record remains the source of truth, just as it is for
+     * an ordinary queued workflow (#472), so a second restart reconstructs and
+     * hydrates the same amendments instead of dropping them. */
+    private hydrateQueuedContinuation;
+    private readPersistedImages;
     /**
      * Still waiting for a slot? Checked against the engine's own queue rather than
      * the record's `status` (#472): the record is written by `execute()` a tick
      * after `pump()` dequeues, so a status read can see `queued` for a run that has
-     * already started. `pendingJobs` is deleted synchronously at dequeue, so it is
-     * the authoritative answer for "can this prompt still be amended".
+     * already started. The pending maps are deleted synchronously at dequeue, so
+     * they are the authoritative answer for "can this prompt still be amended".
      */
     private isQueued;
     /** Split `ContentBlock[]` into the persisted shape a stacked message holds. */
@@ -351,6 +385,9 @@ export declare class RunManager {
      * then offers "Continue" instead.
      */
     sendMessage(runId: string, content: ContentBlock[]): boolean;
+    /** Shared live-session delivery. Synthetic scheduler prompts reuse lifecycle
+     * bookkeeping without masquerading as user-authored transcript messages. */
+    private deliverMessage;
     /** Close the open session gracefully — the run then completes as `done`
      *  (or rests at `review` when the worktree holds changes, spec 009).
      *  On a run already resting at `review` (no session — the engine loop is
@@ -368,7 +405,10 @@ export declare class RunManager {
         images?: ContentBlock[];
         runner?: RunnerId;
         model?: string;
-    }): {
+    }, 
+    /** Restart recovery may discover several interrupted tasks at once. Those
+     *  continuations are queued; an explicit user Continue remains immediate. */
+    deferForCapacity?: boolean): {
         ok: boolean;
         error?: string;
     };
@@ -389,6 +429,17 @@ export declare class RunManager {
     /** Native backend asks arrive before turn-end. Persist and park immediately
      * so the cockpit shows attention and the run releases its workspace slot. */
     private handleRunnerUiEvent;
+    /** Persist the invocation checkpoint before launching a runner. A throw or
+     * process exit before `turn.started` therefore leaves a durable mismatch. */
+    private beginUsageInvocation;
+    /** Fold backend-neutral completed-turn usage into the current step exactly
+     * once. Invocation/turn counters are written before the event reaches the
+     * NDJSON sink so crashes cannot preserve a falsely complete subtotal. */
+    private recordUsageUiEvent;
+    /** Usage completeness is a crash boundary, unlike high-frequency token
+     * snapshots: the checkpoint must reach `runs.json` before the runner starts
+     * or the matching UI event is persisted and forwarded. */
+    private persistUsageCheckpoint;
     /**
      * Turn-end bookkeeping (#389), shared by `runAgentStep` and
      * `runContinuation` — called (fire-and-forget) from every `turn-end` event:
@@ -464,6 +515,9 @@ export declare class RunManager {
     private persistImage;
     private armIdleTimer;
     private clearIdleTimer;
+    private reconcileMonitoringWakeTimers;
+    private armMonitoringWakeTimer;
+    private clearMonitoringWakeTimer;
     /** Autosave-commit the worktree every 90 s while the run lives (spec 006).
      *  Opt-in via CEZ_AUTOSAVE=1 (#471) — see periodicAutosaveEnabled. */
     private armAutosave;
@@ -492,3 +546,13 @@ export declare function makeRunTitle(task: string, workflow: WorkflowDef): strin
  * they are materialized into the worktree separately (see the call site).
  */
 export declare function skillSystemPrompt(skill: Pick<Skill, 'name' | 'description' | 'body'> & Partial<Pick<Skill, 'path' | 'source'>>): string;
+/**
+ * Expand a registry-backed slash skill in a live chat message before it reaches
+ * a backend. Claude otherwise intercepts an unknown leading slash command, and
+ * Codex/OpenCode have no native slash-skill lookup at all (#676).
+ *
+ * Only the first text block is eligible, only at character zero, and unknown
+ * commands pass through byte-for-byte. The caller persists the original user
+ * content before applying this delivery-only rewrite.
+ */
+export declare function expandRegistrySlashSkill(content: ContentBlock[], skills: readonly Skill[]): ContentBlock[];