@open-mercato/cezar 0.9.2 → 0.10.0-pr892.1298

package/dist/contract/workspace.d.ts

@@ -36,9 +36,24 @@ export declare const workspaceConfigResponseSchema: z.ZodObject<{
         maxParallel: z.ZodNumber;
         maxMonitoringSessions: z.ZodNumber;
         monitoringWakeIntervalMinutes: z.ZodNullable<z.ZodNumber>;
+        autoResumeOnUsageLimit: z.ZodBoolean;
         memoryLimitMb: z.ZodNullable<z.ZodNumber>;
         worktreeRetentionDefault: z.ZodNumber;
     }, z.core.$strip>;
+    agentDefaults: z.ZodObject<{
+        runner: z.ZodOptional<z.ZodEnum<{
+            claude: "claude";
+            codex: "codex";
+            opencode: "opencode";
+            pi: "pi";
+        }>>;
+        models: z.ZodOptional<z.ZodObject<{
+            claude: z.ZodOptional<z.ZodString>;
+            codex: z.ZodOptional<z.ZodString>;
+            opencode: z.ZodOptional<z.ZodString>;
+            pi: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
 }, z.core.$strip>;
 export type WorkspaceConfigResponse = z.infer<typeof workspaceConfigResponseSchema>;
 /**
@@ -56,10 +71,25 @@ export declare const setWorkspaceConfigInputSchema: z.ZodObject<{
         autonomous: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
         worktree: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
     }, z.core.$strip>>;
+    agentDefaults: z.ZodOptional<z.ZodObject<{
+        runner: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+            claude: "claude";
+            codex: "codex";
+            opencode: "opencode";
+            pi: "pi";
+        }>>>;
+        models: z.ZodOptional<z.ZodObject<{
+            claude: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            codex: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            opencode: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            pi: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
     resources: z.ZodOptional<z.ZodObject<{
         maxParallel: z.ZodOptional<z.ZodNumber>;
         maxMonitoringSessions: z.ZodOptional<z.ZodNumber>;
         monitoringWakeIntervalMinutes: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        autoResumeOnUsageLimit: z.ZodOptional<z.ZodBoolean>;
         memoryLimitMb: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         worktreeRetentionDefault: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>>;
@@ -116,6 +146,10 @@ export declare const uiStateSchema: z.ZodObject<{
             compact: "compact";
             ultra: "ultra";
         }>>;
+        width: z.ZodOptional<z.ZodEnum<{
+            narrow: "narrow";
+            wide: "wide";
+        }>>;
     }, z.core.$strip>>;
     promptTemplates: z.ZodOptional<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -149,6 +183,7 @@ export declare const workspaceUiStateSchema: z.ZodObject<{
         claude: z.ZodOptional<z.ZodString>;
         codex: z.ZodOptional<z.ZodString>;
         opencode: z.ZodOptional<z.ZodString>;
+        pi: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
     appearance: z.ZodOptional<z.ZodObject<{
         accent: z.ZodOptional<z.ZodEnum<{
@@ -160,10 +195,17 @@ export declare const workspaceUiStateSchema: z.ZodObject<{
             compact: "compact";
             ultra: "ultra";
         }>>;
+        width: z.ZodOptional<z.ZodEnum<{
+            narrow: "narrow";
+            wide: "wide";
+        }>>;
     }, z.core.$strip>>;
     notifications: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$loose>>;
+    taskTable: z.ZodOptional<z.ZodObject<{
+        expandedColumns: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
+    }, z.core.$loose>>;
     lastLocation: z.ZodOptional<z.ZodObject<{
         projectId: z.ZodString;
         pathname: z.ZodString;
@@ -173,6 +215,51 @@ export declare const workspaceUiStateSchema: z.ZodObject<{
     importedSkills: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$loose>;
 export type WorkspaceUiState = z.infer<typeof workspaceUiStateSchema>;
+/**
+ * `PUT /api/v1/workspace/ui-state` body. The response remains an open, tolerant bag so data from
+ * a newer cockpit survives an older server; this write-side schema adds bounded known fields so
+ * the current cockpit cannot grow the user-owned file without limit.
+ */
+export declare const setWorkspaceUiStateInputSchema: z.ZodObject<{
+    appearance: z.ZodOptional<z.ZodObject<{
+        accent: z.ZodOptional<z.ZodEnum<{
+            lime: "lime";
+            violet: "violet";
+        }>>;
+        density: z.ZodOptional<z.ZodEnum<{
+            comfortable: "comfortable";
+            compact: "compact";
+            ultra: "ultra";
+        }>>;
+        width: z.ZodOptional<z.ZodEnum<{
+            narrow: "narrow";
+            wide: "wide";
+        }>>;
+    }, z.core.$strip>>;
+    notifications: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$loose>>;
+    lastLocation: z.ZodOptional<z.ZodObject<{
+        projectId: z.ZodString;
+        pathname: z.ZodString;
+        search: z.ZodOptional<z.ZodString>;
+        hash: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    sidebar: z.ZodOptional<z.ZodObject<{
+        collapsed: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
+    }, z.core.$loose>>;
+    dismissedProviderAuthFailures: z.ZodOptional<z.ZodObject<{
+        claude: z.ZodOptional<z.ZodString>;
+        codex: z.ZodOptional<z.ZodString>;
+        opencode: z.ZodOptional<z.ZodString>;
+        pi: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    importedSkills: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    taskTable: z.ZodOptional<z.ZodObject<{
+        expandedColumns: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
+    }, z.core.$loose>>;
+}, z.core.$loose>;
+export type SetWorkspaceUiStateInput = z.infer<typeof setWorkspaceUiStateInputSchema>;
 /** Per-runner default model preset (Settings → Agents): the composer preselects this model id for
  *  the runner. Absent = auto (the runner decides). Keyed by runner name rather than derived from
  *  `runnerSchema` because the server's own `defaultModels` object (src/config.ts:92) is spelled
@@ -181,6 +268,7 @@ export declare const runnerModelsSchema: z.ZodObject<{
     claude: z.ZodOptional<z.ZodString>;
     codex: z.ZodOptional<z.ZodString>;
     opencode: z.ZodOptional<z.ZodString>;
+    pi: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type RunnerModels = z.infer<typeof runnerModelsSchema>;
 /** `GET /api/v1/config` — every Settings → Agents knob in one read. */
@@ -190,13 +278,16 @@ export declare const configResponseSchema: z.ZodObject<{
         claude: "claude";
         codex: "codex";
         opencode: "opencode";
+        pi: "pi";
     }>;
     systemPrompt: z.ZodNullable<z.ZodString>;
     defaultModels: z.ZodObject<{
         claude: z.ZodOptional<z.ZodString>;
         codex: z.ZodOptional<z.ZodString>;
         opencode: z.ZodOptional<z.ZodString>;
+        pi: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>;
+    modelsLocked: z.ZodBoolean;
     maxParallel: z.ZodNumber;
     memoryLimitMb: z.ZodNullable<z.ZodNumber>;
     worktreeRetention: z.ZodNumber;
@@ -211,13 +302,16 @@ export declare const setConfigResponseSchema: z.ZodObject<{
         claude: "claude";
         codex: "codex";
         opencode: "opencode";
+        pi: "pi";
     }>;
     systemPrompt: z.ZodNullable<z.ZodString>;
     defaultModels: z.ZodObject<{
         claude: z.ZodOptional<z.ZodString>;
         codex: z.ZodOptional<z.ZodString>;
         opencode: z.ZodOptional<z.ZodString>;
+        pi: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>;
+    modelsLocked: z.ZodBoolean;
     maxParallel: z.ZodNumber;
     memoryLimitMb: z.ZodNullable<z.ZodNumber>;
     worktreeRetention: z.ZodNumber;
@@ -238,12 +332,14 @@ export declare const setConfigInputSchema: z.ZodObject<{
         claude: "claude";
         codex: "codex";
         opencode: "opencode";
+        pi: "pi";
     }>>;
     systemPrompt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     defaultModels: z.ZodOptional<z.ZodObject<{
         claude: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         codex: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         opencode: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        pi: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$strip>>;
     maxParallel: z.ZodOptional<z.ZodNumber>;
     memoryLimitMb: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
@@ -329,6 +425,7 @@ export declare const providerIdSchema: z.ZodEnum<{
     claude: "claude";
     codex: "codex";
     opencode: "opencode";
+    pi: "pi";
 }>;
 export type ProviderId = Runner;
 /** Coarse host authentication state. Credentials, account identity, and raw CLI output never
@@ -352,6 +449,7 @@ export declare const providerStatusSchema: z.ZodObject<{
         claude: "claude";
         codex: "codex";
         opencode: "opencode";
+        pi: "pi";
     }>;
     status: z.ZodEnum<{
         connected: "connected";
@@ -362,6 +460,7 @@ export declare const providerStatusSchema: z.ZodObject<{
     enabled: z.ZodOptional<z.ZodBoolean>;
     hint: z.ZodOptional<z.ZodString>;
     authFailureId: z.ZodOptional<z.ZodString>;
+    profileId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type ProviderStatus = z.infer<typeof providerStatusSchema>;
 /** `GET /api/v1/providers/status`, and the answer of the enabled/retry mutators. */
@@ -371,6 +470,7 @@ export declare const providerStatusResponseSchema: z.ZodObject<{
             claude: "claude";
             codex: "codex";
             opencode: "opencode";
+            pi: "pi";
         }>;
         status: z.ZodEnum<{
             connected: "connected";
@@ -381,6 +481,7 @@ export declare const providerStatusResponseSchema: z.ZodObject<{
         enabled: z.ZodOptional<z.ZodBoolean>;
         hint: z.ZodOptional<z.ZodString>;
         authFailureId: z.ZodOptional<z.ZodString>;
+        profileId: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type ProviderStatusResponse = z.infer<typeof providerStatusResponseSchema>;
@@ -396,19 +497,35 @@ export declare const providerConnectResponseSchema: z.ZodDiscriminatedUnion<[z.Z
     command: z.ZodString;
 }, z.core.$strip>], "opened">;
 export type ProviderConnectResponse = z.infer<typeof providerConnectResponseSchema>;
+/**
+ * The runners whose model list is discovered from the host rather than hard-coded: Codex
+ * through its app-server protocol, OpenCode through its own `models` listing (#794). Claude has
+ * no equivalent local source, so its picker keeps static presets and `GET /api/v1/models`
+ * rejects it. One definition, used by the route's query validator and by the cockpit's picker.
+ */
+export declare const modelDiscoveryRunnerSchema: z.ZodEnum<{
+    codex: "codex";
+    opencode: "opencode";
+}>;
+export type ModelDiscoveryRunner = z.infer<typeof modelDiscoveryRunnerSchema>;
+export declare const MODEL_DISCOVERY_RUNNERS: readonly ModelDiscoveryRunner[];
+/** True when `runner` has a host-discovered catalog (and therefore a `/models` answer). */
+export declare function runnerDiscoversModels(runner: Runner): runner is ModelDiscoveryRunner;
 export declare const runnerModelOptionSchema: z.ZodObject<{
     id: z.ZodString;
     label: z.ZodString;
     description: z.ZodString;
 }, z.core.$strip>;
 export type RunnerModelOption = z.infer<typeof runnerModelOptionSchema>;
-/** `GET /api/v1/models?runner=codex` — discovered models, plus how fresh the answer is. Never an
- *  error: an unavailable CLI degrades to `source: 'unavailable'` with a `reason`. */
+/** `GET /api/v1/models?runner=codex|opencode` — the models discovered from that runner's own
+ *  host installation, plus how fresh the answer is. Never an error: an unavailable CLI degrades
+ *  to `source: 'unavailable'` with a `reason`. Claude has no host-local catalog and is rejected. */
 export declare const runnerModelCatalogResponseSchema: z.ZodObject<{
     runner: z.ZodEnum<{
         claude: "claude";
         codex: "codex";
         opencode: "opencode";
+        pi: "pi";
     }>;
     models: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -440,3 +557,21 @@ export declare const openTargetsResponseSchema: z.ZodObject<{
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type OpenTargetsResponse = z.infer<typeof openTargetsResponseSchema>;
+/**
+ * `POST /api/v1/open-in` — open THIS PROJECT'S root in a detected app (Settings → the project
+ * folder row). The path is never sent: it is the scoped project's own registered root, resolved
+ * server-side, so the route has no traversal surface at all. `target` is an
+ * `/api/v1/open-targets` id; unlike the run route there is no `default`/`cli:` handling, because
+ * a repo root is a directory and an agent CLI belongs in a task worktree.
+ */
+export declare const openProjectInSchema: z.ZodObject<{
+    target: z.ZodString;
+}, z.core.$strip>;
+export type OpenProjectInRequest = z.infer<typeof openProjectInSchema>;
+/** The 200 for the above — `opened` is a literal because every failure is a 409 with `{ error }`,
+ *  so a `false` would be unreachable and would only invite a client to branch on it. */
+export declare const openProjectInResponseSchema: z.ZodObject<{
+    opened: z.ZodLiteral<true>;
+    path: z.ZodString;
+}, z.core.$strip>;
+export type OpenProjectInResponse = z.infer<typeof openProjectInResponseSchema>;

package/dist/core/agent-env.js

@@ -192,26 +192,36 @@ const BASE_ALLOW_PREFIXES = [
     'MISE_',
     'COMPOSER_',
 ];
+/** The provider credentials a backend that selects models as `provider/model` may need — it can
+ *  be pointed at any of them, so none can be pruned without breaking a legitimate model id. */
+const MULTI_PROVIDER_PREFIXES = [
+    'OPENAI_',
+    'ANTHROPIC_',
+    'AZURE_OPENAI_',
+    'OPENROUTER_',
+    'GROQ_',
+    'MISTRAL_',
+    'GEMINI_',
+    'GOOGLE_GENERATIVE_AI_',
+    'DEEPSEEK_',
+    'XAI_',
+    'PERPLEXITY_',
+    'TOGETHER_',
+    'FIREWORKS_',
+];
 /** Per-backend auth/config the runner genuinely needs, by prefix. */
 const BACKEND_ALLOW_PREFIXES = {
     claude: ['ANTHROPIC_', 'CLAUDE_'],
     'claude-cli': ['ANTHROPIC_', 'CLAUDE_'],
     codex: ['OPENAI_', 'CODEX_', 'AZURE_OPENAI_'],
-    opencode: [
-        'OPENAI_',
-        'ANTHROPIC_',
-        'AZURE_OPENAI_',
-        'OPENROUTER_',
-        'GROQ_',
-        'MISTRAL_',
-        'GEMINI_',
-        'GOOGLE_GENERATIVE_AI_',
-        'DEEPSEEK_',
-        'XAI_',
-        'PERPLEXITY_',
-        'TOGETHER_',
-        'FIREWORKS_',
-    ],
+    opencode: MULTI_PROVIDER_PREFIXES,
+    // pi selects models as `provider/model` (#387), so it needs both its own config and any
+    // provider a configured model id can name — the same set OpenCode gets, for the same reason.
+    // Deliberately NOT `CLAUDE_`: pi is not Claude Code and reads none of its variables, and the
+    // prefix is load-bearing below — it is what unlocks the Bedrock/Vertex cloud credentials, so
+    // granting it here handed pi the whole `AWS_*` / `GOOGLE_CLOUD_*` family on any host that had
+    // set `CLAUDE_CODE_USE_BEDROCK=1` for Claude Code, plus Claude's own config dir.
+    pi: ['PI_', ...MULTI_PROVIDER_PREFIXES],
 };
 /** `gh` handoff (draft PRs) works in every backend — the one credential the
  *  project deliberately keeps in the environment (AGENTS.md "No secrets in
@@ -278,12 +288,25 @@ function isTruthy(value) {
 export function buildChildEnv(opts) {
     const source = opts.source ?? process.env;
     const extra = opts.extraEnv ?? {};
+    // Names `extra` is about to define, normalized. The host copy of a var the
+    // per-run env overrides must be DROPPED, not merely shadowed: env names are
+    // matched case-insensitively here (and by Windows itself), so a host `Temp`
+    // and a per-run `TEMP` are the same variable spelled two ways — leaving both
+    // in the child env hands the backend the host value under one of them. That
+    // is exactly the temp-directory bug #785 fixes, so the override has to be
+    // total. `extra` is cezar's own, never a host secret, and always wins.
+    const overridden = upperSet(Object.keys(extra));
     // Escape hatch: restore legacy full-inheritance (opt-in, off by default).
     // Parsed with the same `isTruthy` the Bedrock/Vertex toggles use (#456
     // review) — an exact `=== '1'` made `CEZ_AGENT_ENV_FULL=true` silently do
     // nothing, which is a confusing way to fail open-vs-closed.
     if (isTruthy(readVar(source, 'CEZ_AGENT_ENV_FULL'))) {
-        return { ...source, ...extra };
+        const full = {};
+        for (const [name, value] of Object.entries(source)) {
+            if (!overridden.has(name.toUpperCase()))
+                full[name] = value;
+        }
+        return { ...full, ...extra };
     }
     const backendPrefixes = BACKEND_ALLOW_PREFIXES[opts.backend] ?? BACKEND_ALLOW_PREFIXES.claude;
     const passthrough = upperSet((readVar(source, 'CEZ_ENV_PASSTHROUGH') ?? '')
@@ -307,6 +330,8 @@ export function buildChildEnv(opts) {
     for (const [name, value] of Object.entries(source)) {
         if (value === undefined)
             continue;
+        if (overridden.has(name.toUpperCase()))
+            continue; // the per-run value replaces it, whatever the spelling
         if (allow(name))
             out[name] = value;
     }

package/dist/core/agent-env.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-env.js","sourceRoot":"","sources":["../../src/core/agent-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD;;;;;;;GAOG;AACH,SAAS,QAAQ,CAAC,KAAwB;IACxC,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,6EAA6E;AAC7E,MAAM,gBAAgB,GAAwB,QAAQ,CAAC;IACrD,gCAAgC;IAChC,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,SAAS;IACT,OAAO;IACP,KAAK;IACL,QAAQ;IACR,OAAO;IACP,UAAU;IACV,MAAM;IACN,UAAU;IACV,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,KAAK;IACL,IAAI;IACJ,SAAS;IACT,MAAM;IACN,UAAU;IACV,qBAAqB;IACrB,MAAM;IACN,UAAU;IACV,WAAW;IACX,SAAS;IACT,OAAO;IACP,UAAU;IACV,aAAa;IACb,UAAU;IACV,SAAS;IACT,iBAAiB;IACjB,YAAY;IACZ,uEAAuE;IACvE,eAAe;IACf,eAAe;IACf,mBAAmB;IACnB,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,MAAM;IACN,SAAS;IACT,UAAU;IACV,oCAAoC;IACpC,WAAW;IACX,YAAY;IACZ,qBAAqB;IACrB,SAAS;IACT,iBAAiB;IACjB,eAAe;IACf,yEAAyE;IACzE,YAAY;IACZ,aAAa;IACb,WAAW;IACX,WAAW;IACX,UAAU;IACV,2EAA2E;IAC3E,wEAAwE;IACxE,wEAAwE;IACxE,4EAA4E;IAC5E,oCAAoC;IACpC,YAAY;IACZ,aAAa;IACb,QAAQ;IACR,SAAS;IACT,SAAS;IACT,aAAa;IACb,WAAW;IACX,UAAU;IACV,SAAS;IACT,cAAc;IACd,aAAa;IACb,iBAAiB;IACjB,QAAQ;IACR,cAAc;IACd,mBAAmB;IACnB,cAAc;IACd,oBAAoB;IACpB,yBAAyB;IACzB,oBAAoB;IACpB,cAAc;IACd,UAAU;IACV,YAAY;IACZ,cAAc;IACd,aAAa;IACb,aAAa;IACb,IAAI;IACJ,sBAAsB;IACtB,wBAAwB;IACxB,sBAAsB;IACtB,iBAAiB;IACjB,oBAAoB;CACrB,CAAC,CAAC;AAEH;;gEAEgE;AAChE,MAAM,mBAAmB,GAAsB;IAC7C,KAAK;IACL,MAAM;IACN,OAAO;IACP,YAAY;IACZ,OAAO;IACP,aAAa;IACb,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;IACN,WAAW;IACX,SAAS;IACT,OAAO;IACP,QAAQ;IACR,MAAM;IACN,SAAS;IACT,SAAS;IACT,aAAa;IACb,QAAQ;IACR,KAAK;IACL,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,SAAS;IACT,OAAO;IACP,SAAS;IACT,QAAQ;IACR,OAAO;IACP,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,SAAS;IACT,YAAY;IACZ,SAAS;IACT,SAAS;IACT,WAAW;IACX,aAAa;IACb,MAAM;IACN,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,aAAa;IACb,yBAAyB;IACzB,MAAM;IACN,MAAM;IACN,QAAQ;IACR,SAAS;IACT,SAAS;IACT,UAAU;IACV,SAAS;IACT,eAAe;IACf,SAAS;IACT,QAAQ;IACR,OAAO;IACP,OAAO;IACP,WAAW;IACX,OAAO;IACP,OAAO;IACP,WAAW;CACZ,CAAC;AAEF,qEAAqE;AACrE,MAAM,sBAAsB,GAA4C;IACtE,MAAM,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;IACjC,YAAY,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;IACvC,KAAK,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,eAAe,CAAC;IAC7C,QAAQ,EAAE;QACR,SAAS;QACT,YAAY;QACZ,eAAe;QACf,aAAa;QACb,OAAO;QACP,UAAU;QACV,SAAS;QACT,uBAAuB;QACvB,WAAW;QACX,MAAM;QACN,aAAa;QACb,WAAW;QACX,YAAY;KACb;CACF,CAAC;AAEF;;+DAE+D;AAC/D,MAAM,cAAc,GAAwB,QAAQ,CAAC;IACnD,cAAc;IACd,UAAU;IACV,SAAS;IACT,qBAAqB;IACrB,eAAe;CAChB,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AACH,MAAM,cAAc,GAAG,yBAAyB,CAAC;AACjD,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAC/C;gFACgF;AAChF,MAAM,sBAAsB,GAAsB,CAAC,MAAM,CAAC,CAAC;AAC3D,MAAM,kBAAkB,GAAwB,QAAQ,CAAC;IACvD,gCAAgC;IAChC,iBAAiB;IACjB,2EAA2E;CAC5E,CAAC,CAAC;AACH,MAAM,qBAAqB,GAAsB,CAAC,eAAe,CAAC,CAAC;AAEnE,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,0EAA0E;AAC1E,SAAS,aAAa,CAAC,IAAY,EAAE,QAA2B;IAC9D,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,+EAA+E;AAC/E,SAAS,OAAO,CAAC,MAAyB,EAAE,IAAY;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK;YAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,oEAAoE;AACpE,SAAS,QAAQ,CAAC,KAAyB;IACzC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,OAAO,CAAC;AAChD,CAAC;AAUD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAA0B;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAElC,0EAA0E;IAC1E,uEAAuE;IACvE,0EAA0E;IAC1E,4DAA4D;IAC5D,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,eAAe,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,sBAAsB,CAAC,MAAM,CAAC;IAC9F,MAAM,WAAW,GAAG,QAAQ,CAC1B,CAAC,OAAO,CAAC,MAAM,EAAE,qBAAqB,CAAC,IAAI,EAAE,CAAC;SAC3C,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;IAEF,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,IAAI,WAAW,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;QAC7D,aAAa,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,WAAW,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;QAC5D,aAAa,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC,IAAI,kBAAkB;YAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,KAAK,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACrC,CAAC;IACD,2EAA2E;IAC3E,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACrE,OAAO,GAAG,CAAC;IAEX,4EAA4E;IAC5E,SAAS,KAAK,CAAC,IAAY;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/B,wEAAwE;QACxE,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,uEAAuE;QACvE,4EAA4E;QAC5E,qEAAqE;QACrE,wDAAwD;QACxD,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,IAAI,aAAa,CAAC,GAAG,EAAE,eAAe,CAAC;YAAE,OAAO,IAAI,CAAC;QACrD,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,GAAG,EAAE,aAAa,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1E,+BAA+B;QAC/B,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,0EAA0E;QAC1E,uEAAuE;QACvE,uEAAuE;QACvE,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,aAAa,CAAC,GAAG,EAAE,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9E,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}
+{"version":3,"file":"agent-env.js","sourceRoot":"","sources":["../../src/core/agent-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD;;;;;;;GAOG;AACH,SAAS,QAAQ,CAAC,KAAwB;IACxC,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,6EAA6E;AAC7E,MAAM,gBAAgB,GAAwB,QAAQ,CAAC;IACrD,gCAAgC;IAChC,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,SAAS;IACT,OAAO;IACP,KAAK;IACL,QAAQ;IACR,OAAO;IACP,UAAU;IACV,MAAM;IACN,UAAU;IACV,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,KAAK;IACL,IAAI;IACJ,SAAS;IACT,MAAM;IACN,UAAU;IACV,qBAAqB;IACrB,MAAM;IACN,UAAU;IACV,WAAW;IACX,SAAS;IACT,OAAO;IACP,UAAU;IACV,aAAa;IACb,UAAU;IACV,SAAS;IACT,iBAAiB;IACjB,YAAY;IACZ,uEAAuE;IACvE,eAAe;IACf,eAAe;IACf,mBAAmB;IACnB,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,MAAM;IACN,SAAS;IACT,UAAU;IACV,oCAAoC;IACpC,WAAW;IACX,YAAY;IACZ,qBAAqB;IACrB,SAAS;IACT,iBAAiB;IACjB,eAAe;IACf,yEAAyE;IACzE,YAAY;IACZ,aAAa;IACb,WAAW;IACX,WAAW;IACX,UAAU;IACV,2EAA2E;IAC3E,wEAAwE;IACxE,wEAAwE;IACxE,4EAA4E;IAC5E,oCAAoC;IACpC,YAAY;IACZ,aAAa;IACb,QAAQ;IACR,SAAS;IACT,SAAS;IACT,aAAa;IACb,WAAW;IACX,UAAU;IACV,SAAS;IACT,cAAc;IACd,aAAa;IACb,iBAAiB;IACjB,QAAQ;IACR,cAAc;IACd,mBAAmB;IACnB,cAAc;IACd,oBAAoB;IACpB,yBAAyB;IACzB,oBAAoB;IACpB,cAAc;IACd,UAAU;IACV,YAAY;IACZ,cAAc;IACd,aAAa;IACb,aAAa;IACb,IAAI;IACJ,sBAAsB;IACtB,wBAAwB;IACxB,sBAAsB;IACtB,iBAAiB;IACjB,oBAAoB;CACrB,CAAC,CAAC;AAEH;;gEAEgE;AAChE,MAAM,mBAAmB,GAAsB;IAC7C,KAAK;IACL,MAAM;IACN,OAAO;IACP,YAAY;IACZ,OAAO;IACP,aAAa;IACb,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;IACN,WAAW;IACX,SAAS;IACT,OAAO;IACP,QAAQ;IACR,MAAM;IACN,SAAS;IACT,SAAS;IACT,aAAa;IACb,QAAQ;IACR,KAAK;IACL,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,SAAS;IACT,OAAO;IACP,SAAS;IACT,QAAQ;IACR,OAAO;IACP,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,SAAS;IACT,YAAY;IACZ,SAAS;IACT,SAAS;IACT,WAAW;IACX,aAAa;IACb,MAAM;IACN,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,aAAa;IACb,yBAAyB;IACzB,MAAM;IACN,MAAM;IACN,QAAQ;IACR,SAAS;IACT,SAAS;IACT,UAAU;IACV,SAAS;IACT,eAAe;IACf,SAAS;IACT,QAAQ;IACR,OAAO;IACP,OAAO;IACP,WAAW;IACX,OAAO;IACP,OAAO;IACP,WAAW;CACZ,CAAC;AAEF;+FAC+F;AAC/F,MAAM,uBAAuB,GAAsB;IACjD,SAAS;IACT,YAAY;IACZ,eAAe;IACf,aAAa;IACb,OAAO;IACP,UAAU;IACV,SAAS;IACT,uBAAuB;IACvB,WAAW;IACX,MAAM;IACN,aAAa;IACb,WAAW;IACX,YAAY;CACb,CAAC;AAEF,qEAAqE;AACrE,MAAM,sBAAsB,GAA4C;IACtE,MAAM,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;IACjC,YAAY,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;IACvC,KAAK,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,eAAe,CAAC;IAC7C,QAAQ,EAAE,uBAAuB;IACjC,wFAAwF;IACxF,6FAA6F;IAC7F,6FAA6F;IAC7F,6FAA6F;IAC7F,8FAA8F;IAC9F,iFAAiF;IACjF,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,uBAAuB,CAAC;CACxC,CAAC;AAEF;;+DAE+D;AAC/D,MAAM,cAAc,GAAwB,QAAQ,CAAC;IACnD,cAAc;IACd,UAAU;IACV,SAAS;IACT,qBAAqB;IACrB,eAAe;CAChB,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AACH,MAAM,cAAc,GAAG,yBAAyB,CAAC;AACjD,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAC/C;gFACgF;AAChF,MAAM,sBAAsB,GAAsB,CAAC,MAAM,CAAC,CAAC;AAC3D,MAAM,kBAAkB,GAAwB,QAAQ,CAAC;IACvD,gCAAgC;IAChC,iBAAiB;IACjB,2EAA2E;CAC5E,CAAC,CAAC;AACH,MAAM,qBAAqB,GAAsB,CAAC,eAAe,CAAC,CAAC;AAEnE,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,0EAA0E;AAC1E,SAAS,aAAa,CAAC,IAAY,EAAE,QAA2B;IAC9D,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,+EAA+E;AAC/E,SAAS,OAAO,CAAC,MAAyB,EAAE,IAAY;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK;YAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,oEAAoE;AACpE,SAAS,QAAQ,CAAC,KAAyB;IACzC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,OAAO,CAAC;AAChD,CAAC;AAUD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAA0B;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAElC,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAEhD,0EAA0E;IAC1E,uEAAuE;IACvE,0EAA0E;IAC1E,4DAA4D;IAC5D,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAsB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC9D,CAAC;QACD,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,eAAe,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,sBAAsB,CAAC,MAAM,CAAC;IAC9F,MAAM,WAAW,GAAG,QAAQ,CAC1B,CAAC,OAAO,CAAC,MAAM,EAAE,qBAAqB,CAAC,IAAI,EAAE,CAAC;SAC3C,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;IAEF,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,IAAI,WAAW,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;QAC7D,aAAa,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,WAAW,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;QAC5D,aAAa,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC,IAAI,kBAAkB;YAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS,CAAC,uDAAuD;QACzG,IAAI,KAAK,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACrC,CAAC;IACD,2EAA2E;IAC3E,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACrE,OAAO,GAAG,CAAC;IAEX,4EAA4E;IAC5E,SAAS,KAAK,CAAC,IAAY;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/B,wEAAwE;QACxE,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,uEAAuE;QACvE,4EAA4E;QAC5E,qEAAqE;QACrE,wDAAwD;QACxD,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,IAAI,aAAa,CAAC,GAAG,EAAE,eAAe,CAAC;YAAE,OAAO,IAAI,CAAC;QACrD,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,GAAG,EAAE,aAAa,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1E,+BAA+B;QAC/B,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,0EAA0E;QAC1E,uEAAuE;QACvE,uEAAuE;QACvE,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,aAAa,CAAC,GAAG,EAAE,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9E,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/core/agent-model-policy.d.ts

@@ -0,0 +1,10 @@
+/** The server-side switch that makes native agent settings authoritative. */
+export declare const AGENT_MODELS_LOCKED_ENV = "CEZ_AGENT_MODELS_LOCKED";
+/**
+ * Only the exact environment value `1` enables the process-wide lock. The
+ * global workspace config or one repository may additionally opt in with
+ * `"modelsLocked": true`; missing, unreadable, malformed, and false values
+ * preserve ordinary model selection unless another source enables the lock.
+ */
+export declare function agentModelsLocked(repoRoot?: string, env?: NodeJS.ProcessEnv): boolean;
+export declare const AGENT_MODELS_LOCKED_ERROR = "agent models are locked \u2014 configure the model in the native coding-agent settings";

package/dist/core/agent-model-policy.js

@@ -0,0 +1,36 @@
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { z } from 'zod';
+import { workspaceConfigPath } from '../paths.js';
+/** The server-side switch that makes native agent settings authoritative. */
+export const AGENT_MODELS_LOCKED_ENV = 'CEZ_AGENT_MODELS_LOCKED';
+const modelPolicyConfigSchema = z.object({
+    modelsLocked: z.boolean().optional(),
+}).passthrough();
+/**
+ * Only the exact environment value `1` enables the process-wide lock. The
+ * global workspace config or one repository may additionally opt in with
+ * `"modelsLocked": true`; missing, unreadable, malformed, and false values
+ * preserve ordinary model selection unless another source enables the lock.
+ */
+export function agentModelsLocked(repoRoot, env = process.env) {
+    if (env[AGENT_MODELS_LOCKED_ENV] === '1')
+        return true;
+    const paths = [
+        workspaceConfigPath(env),
+        ...(repoRoot ? [join(repoRoot, '.ai', 'cezar', 'config.json')] : []),
+    ];
+    for (const path of paths) {
+        try {
+            const parsed = modelPolicyConfigSchema.safeParse(JSON.parse(readFileSync(path, 'utf8')));
+            if (parsed.success && parsed.data.modelsLocked === true)
+                return true;
+        }
+        catch {
+            // Each source is optional and independently degradable.
+        }
+    }
+    return false;
+}
+export const AGENT_MODELS_LOCKED_ERROR = 'agent models are locked — configure the model in the native coding-agent settings';
+//# sourceMappingURL=agent-model-policy.js.map

package/dist/core/agent-model-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-model-policy.js","sourceRoot":"","sources":["../../src/core/agent-model-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAEjE,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAiB,EACjB,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,IAAI,GAAG,CAAC,uBAAuB,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,KAAK,GAAG;QACZ,mBAAmB,CAAC,GAAG,CAAC;QACxB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAC9C,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CACvC,CAAC;YACF,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GACpC,mFAAmF,CAAC"}

package/dist/core/agent-profiles.d.ts

@@ -0,0 +1,62 @@
+import type { ProviderId } from './provider-auth.ts';
+/**
+ * Agent profiles — a second (third, …) login of the SAME agent CLI.
+ *
+ * The binary never changes; only the environment does. `CLAUDE_CONFIG_DIR=~/.claude-klaudiusz claude`
+ * is the same Claude Code talking to a different account, because that one variable relocates the
+ * agent's ENTIRE per-user home: credentials, settings, projects and — the part that bites —
+ * `sessions/`, so a session id only means something inside the dir it was created in.
+ *
+ * This module is the single maintenance surface for that vendor knowledge, and it is deliberately
+ * the SIBLING of `src/agent-config/catalog.ts` rather than part of it: the catalog owns config
+ * *file* knowledge (paths, formats, verbatim precedence strings), this owns the *home-relocation*
+ * variable. Splitting them also keeps the layering honest — `agent-config/` may import `paths.ts`,
+ * while this is imported BY the runners, provider auth and the terminal handoff.
+ *
+ * Pure by construction: no filesystem, no `process.env`, nothing to stub. Resolution against the
+ * workspace config lives in `src/workspace/agent-profiles.ts`.
+ *
+ * Facts verified against the shipped CLIs on 2026-07-29.
+ */
+/**
+ * Which env var relocates each agent's whole per-user home.
+ *
+ * `null` means the agent has no such variable and therefore cannot carry profiles:
+ *
+ * - **claude** → `CLAUDE_CONFIG_DIR`. Documented; moves credentials, settings, projects, sessions.
+ * - **codex** → `CODEX_HOME`. Documented; `auth.json` lives inside it, so identity moves too.
+ * - **opencode** → nothing usable. `OPENCODE_CONFIG_DIR`/`OPENCODE_CONFIG` move CONFIG ONLY;
+ *   credentials live in `~/.local/share/opencode/opencode.db`, behind a separate `OPENCODE_DB`.
+ *   A config-dir-only profile would swap settings while still billing the other account — the UI
+ *   would say "Work" and the run would not be — so OpenCode is unsupported until it documents a
+ *   single home variable. `XDG_CONFIG_HOME` is rejected regardless: it is machine-wide and would
+ *   relocate every other XDG-aware tool the agent's own Bash calls touch.
+ * - **pi** → nothing documented. pi ships no per-user home variable of its own, so — exactly like
+ *   OpenCode — a second account cannot be carried without silently billing the wrong one. `null`
+ *   until pi documents a single home variable that moves credentials as well as config.
+ */
+export declare const PROFILE_ENV_VAR: Record<ProviderId, string | null>;
+/** Providers that can carry more than one account — what the UI offers "Add account" for. */
+export declare const PROFILE_CAPABLE_PROVIDERS: readonly ProviderId[];
+export declare function supportsProfiles(provider: ProviderId): boolean;
+/**
+ * The env a spawned agent needs to run under `configDir`, or `{}` for the default profile.
+ *
+ * `{}` is load-bearing, not a convenience: `buildChildEnv` applies `extraEnv` AFTER its allowlist
+ * and so bypasses it entirely, which makes this function the only thing standing between a
+ * profile and the child environment. Returning nothing for the zero-config case means the
+ * overwhelmingly common path adds literally no variable — the same environment cezar has always
+ * spawned. It also means this can never emit one provider's variable for another provider's
+ * process: the name comes from `PROFILE_ENV_VAR[provider]` and nowhere else.
+ */
+export declare function profileEnv(provider: ProviderId, configDir: string | null | undefined): Record<string, string>;
+/**
+ * Does `entries` look like a config dir this provider actually wrote?
+ *
+ * ADVISORY, never a gate. The honest first-run flow for a second account is *add the profile →
+ * Connect → the CLI creates the dir on login*, so refusing an unrecognized directory would break
+ * the very case the feature exists for. The answer drives a warning line in the UI, nothing more.
+ *
+ * Takes the directory listing rather than a path so it stays pure; the caller reads the dir.
+ */
+export declare function looksLikeProfileDir(provider: ProviderId, entries: readonly string[]): boolean;

package/dist/core/agent-profiles.js

@@ -0,0 +1,90 @@
+/**
+ * Agent profiles — a second (third, …) login of the SAME agent CLI.
+ *
+ * The binary never changes; only the environment does. `CLAUDE_CONFIG_DIR=~/.claude-klaudiusz claude`
+ * is the same Claude Code talking to a different account, because that one variable relocates the
+ * agent's ENTIRE per-user home: credentials, settings, projects and — the part that bites —
+ * `sessions/`, so a session id only means something inside the dir it was created in.
+ *
+ * This module is the single maintenance surface for that vendor knowledge, and it is deliberately
+ * the SIBLING of `src/agent-config/catalog.ts` rather than part of it: the catalog owns config
+ * *file* knowledge (paths, formats, verbatim precedence strings), this owns the *home-relocation*
+ * variable. Splitting them also keeps the layering honest — `agent-config/` may import `paths.ts`,
+ * while this is imported BY the runners, provider auth and the terminal handoff.
+ *
+ * Pure by construction: no filesystem, no `process.env`, nothing to stub. Resolution against the
+ * workspace config lives in `src/workspace/agent-profiles.ts`.
+ *
+ * Facts verified against the shipped CLIs on 2026-07-29.
+ */
+/**
+ * Which env var relocates each agent's whole per-user home.
+ *
+ * `null` means the agent has no such variable and therefore cannot carry profiles:
+ *
+ * - **claude** → `CLAUDE_CONFIG_DIR`. Documented; moves credentials, settings, projects, sessions.
+ * - **codex** → `CODEX_HOME`. Documented; `auth.json` lives inside it, so identity moves too.
+ * - **opencode** → nothing usable. `OPENCODE_CONFIG_DIR`/`OPENCODE_CONFIG` move CONFIG ONLY;
+ *   credentials live in `~/.local/share/opencode/opencode.db`, behind a separate `OPENCODE_DB`.
+ *   A config-dir-only profile would swap settings while still billing the other account — the UI
+ *   would say "Work" and the run would not be — so OpenCode is unsupported until it documents a
+ *   single home variable. `XDG_CONFIG_HOME` is rejected regardless: it is machine-wide and would
+ *   relocate every other XDG-aware tool the agent's own Bash calls touch.
+ * - **pi** → nothing documented. pi ships no per-user home variable of its own, so — exactly like
+ *   OpenCode — a second account cannot be carried without silently billing the wrong one. `null`
+ *   until pi documents a single home variable that moves credentials as well as config.
+ */
+export const PROFILE_ENV_VAR = {
+    claude: 'CLAUDE_CONFIG_DIR',
+    codex: 'CODEX_HOME',
+    opencode: null,
+    pi: null,
+};
+/** Providers that can carry more than one account — what the UI offers "Add account" for. */
+export const PROFILE_CAPABLE_PROVIDERS = Object.keys(PROFILE_ENV_VAR).filter((provider) => PROFILE_ENV_VAR[provider] !== null);
+export function supportsProfiles(provider) {
+    return PROFILE_ENV_VAR[provider] !== null;
+}
+/**
+ * The env a spawned agent needs to run under `configDir`, or `{}` for the default profile.
+ *
+ * `{}` is load-bearing, not a convenience: `buildChildEnv` applies `extraEnv` AFTER its allowlist
+ * and so bypasses it entirely, which makes this function the only thing standing between a
+ * profile and the child environment. Returning nothing for the zero-config case means the
+ * overwhelmingly common path adds literally no variable — the same environment cezar has always
+ * spawned. It also means this can never emit one provider's variable for another provider's
+ * process: the name comes from `PROFILE_ENV_VAR[provider]` and nowhere else.
+ */
+export function profileEnv(provider, configDir) {
+    const name = PROFILE_ENV_VAR[provider];
+    const dir = configDir?.trim();
+    if (name === null || !dir)
+        return {};
+    return { [name]: dir };
+}
+/**
+ * Does `entries` look like a config dir this provider actually wrote?
+ *
+ * ADVISORY, never a gate. The honest first-run flow for a second account is *add the profile →
+ * Connect → the CLI creates the dir on login*, so refusing an unrecognized directory would break
+ * the very case the feature exists for. The answer drives a warning line in the UI, nothing more.
+ *
+ * Takes the directory listing rather than a path so it stays pure; the caller reads the dir.
+ */
+export function looksLikeProfileDir(provider, entries) {
+    const present = new Set(entries);
+    const markers = PROFILE_DIR_MARKERS[provider];
+    return markers.some((marker) => present.has(marker));
+}
+/** What each agent drops into its home on first login. Any one is enough. */
+const PROFILE_DIR_MARKERS = {
+    // `.claude.json` sits INSIDE the dir once it is overridden (see `claudeStateFilePath`), which
+    // is exactly the case being probed here.
+    claude: ['.claude.json', 'settings.json', 'projects', 'sessions'],
+    codex: ['auth.json', 'config.toml'],
+    opencode: [],
+    // pi cannot carry profiles (`PROFILE_ENV_VAR.pi === null`), so nothing ever probes a pi
+    // profile dir; the entry exists to keep this table exhaustive over `ProviderId`.
+    pi: [],
+};
+//# sourceMappingURL=agent-profiles.js.map

package/dist/core/agent-profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-profiles.js","sourceRoot":"","sources":["../../src/core/agent-profiles.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,eAAe,GAAsC;IAChE,MAAM,EAAE,mBAAmB;IAC3B,KAAK,EAAE,YAAY;IACnB,QAAQ,EAAE,IAAI;IACd,EAAE,EAAE,IAAI;CACT,CAAC;AAEF,6FAA6F;AAC7F,MAAM,CAAC,MAAM,yBAAyB,GACpC,MAAM,CAAC,IAAI,CAAC,eAAe,CAC5B,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;AAE3D,MAAM,UAAU,gBAAgB,CAAC,QAAoB;IACnD,OAAO,eAAe,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;AAC5C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CAAC,QAAoB,EAAE,SAAoC;IACnF,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;AACzB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAoB,EAAE,OAA0B;IAClF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC9C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,6EAA6E;AAC7E,MAAM,mBAAmB,GAA0C;IACjE,8FAA8F;IAC9F,yCAAyC;IACzC,MAAM,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,CAAC;IACjE,KAAK,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC;IACnC,QAAQ,EAAE,EAAE;IACZ,wFAAwF;IACxF,iFAAiF;IACjF,EAAE,EAAE,EAAE;CACP,CAAC"}