@qodeca/xezar 0.10.1 → 0.10.2

package/README.md

@@ -493,7 +493,8 @@ Useful environment variables:
 | `XEZ_CODEX_BIN=/path/to/codex` | Override which `codex` binary is used. |
 | `XEZ_OPENCODE_BIN=/path/to/opencode` | Override which `opencode` binary is used. |
 | `XEZ_PI_BIN=/path/to/pi` | Override which `pi` binary is used. |
-| `CLAUDE_CONFIG_DIR`, `CODEX_HOME` | The agents' **own** variables, honoured where the vendor documents one. Setting one moves that agent's **default account** — the config folder xezar discovers. A *second* login of the same CLI is deliberately not an environment setting, since one process-wide value cannot differ per project: add it under **Settings → Agent accounts** and pick it per project. |
+| `CLAUDE_CONFIG_DIR`, `CODEX_HOME` | The agents' **own** variables, honoured where the vendor documents one. Setting one moves that agent's **default account** — the config folder xezar discovers, credentials included. A *second* login of the same CLI is deliberately not an environment setting, since one process-wide value cannot differ per project: add it under **Settings → Agent accounts** and pick it per project. |
+| `OPENCODE_CONFIG_DIR` | Where xezar looks for OpenCode's config, ahead of `$XDG_CONFIG_HOME/opencode` (default `~/.config/opencode`). Config **only** — OpenCode keeps credentials in `~/.local/share/opencode`, so this moves settings without moving the account, which is why OpenCode cannot carry Agent accounts. |
 | `XEZ_BROWSE_ROOT=~/` | Default root for **Add project → Open local folder…**. The picker cannot navigate above it; a saved workspace value overrides the environment default and must name an existing folder. |
 | `XEZ_PROJECTS_DIR=~/xezar/projects` | Default destination for **Clone from GitHub**. Saved workspace settings override it, and missing directories are created recursively. |
 | `XEZ_SKILLS_AUTO_UPDATE=0` | Disable automatic checks and updates for upstream-CLI-tracked Open Mercato skill installations. On by default; a saved global Skills setting overrides this environment default. Checks are delayed, bounded, cached, and non-blocking. |

package/dist/paths.d.ts

@@ -101,8 +101,19 @@ export declare function serverLockPath(instance?: string): string;
 /**
  * Where each coding agent keeps its per-user config, honouring the env vars the
  * vendors document: `$CLAUDE_CONFIG_DIR` relocates Claude Code's home;
- * `$CODEX_HOME` relocates Codex's; `$XDG_CONFIG_HOME` relocates OpenCode's config
- * dir (falling back to `~/.config`). Read per call so tests and ops can set env live.
+ * `$CODEX_HOME` relocates Codex's; `$OPENCODE_CONFIG_DIR`, then `$XDG_CONFIG_HOME`,
+ * relocate OpenCode's config dir (falling back to `~/.config`). Read per call so
+ * tests and ops can set env live.
+ *
+ * OpenCode's own variable is checked FIRST because it is the narrow one. Reaching
+ * for `XDG_CONFIG_HOME` to move one agent's config relocates every XDG-aware tool
+ * in the process — inside xezar's own e2e boot that silently deauthenticated `gh`
+ * and hid the developer's global git config. `src/core/agent-profiles.ts` rejects
+ * `OPENCODE_CONFIG_DIR` for AGENT PROFILES, and rightly: it moves config without
+ * moving the credentials in `~/.local/share/opencode`, so a profile would swap
+ * settings while still billing the other account. That objection is about identity
+ * and does not reach here — this slot IS the config dir, nothing else, so the
+ * config-only variable is exactly the right precision for it.
  *
  * These are the DEFAULT profile's dirs. A second login of the same CLI is an
  * agent profile (`src/core/agent-profiles.ts`) and resolves through

package/dist/paths.js

@@ -140,8 +140,19 @@ export function serverLockPath(instance = DEFAULT_SERVER_INSTANCE) {
 /**
  * Where each coding agent keeps its per-user config, honouring the env vars the
  * vendors document: `$CLAUDE_CONFIG_DIR` relocates Claude Code's home;
- * `$CODEX_HOME` relocates Codex's; `$XDG_CONFIG_HOME` relocates OpenCode's config
- * dir (falling back to `~/.config`). Read per call so tests and ops can set env live.
+ * `$CODEX_HOME` relocates Codex's; `$OPENCODE_CONFIG_DIR`, then `$XDG_CONFIG_HOME`,
+ * relocate OpenCode's config dir (falling back to `~/.config`). Read per call so
+ * tests and ops can set env live.
+ *
+ * OpenCode's own variable is checked FIRST because it is the narrow one. Reaching
+ * for `XDG_CONFIG_HOME` to move one agent's config relocates every XDG-aware tool
+ * in the process — inside xezar's own e2e boot that silently deauthenticated `gh`
+ * and hid the developer's global git config. `src/core/agent-profiles.ts` rejects
+ * `OPENCODE_CONFIG_DIR` for AGENT PROFILES, and rightly: it moves config without
+ * moving the credentials in `~/.local/share/opencode`, so a profile would swap
+ * settings while still billing the other account. That objection is about identity
+ * and does not reach here — this slot IS the config dir, nothing else, so the
+ * config-only variable is exactly the right precision for it.
  *
  * These are the DEFAULT profile's dirs. A second login of the same CLI is an
  * agent profile (`src/core/agent-profiles.ts`) and resolves through
@@ -154,7 +165,7 @@ export function agentHomePaths(env = process.env) {
     return {
         claude: env.CLAUDE_CONFIG_DIR?.trim() || join(home, '.claude'),
         codex: env.CODEX_HOME?.trim() || join(home, '.codex'),
-        opencodeConfig: join(xdgConfig, 'opencode'),
+        opencodeConfig: env.OPENCODE_CONFIG_DIR?.trim() || join(xdgConfig, 'opencode'),
     };
 }
 /**

package/dist/paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAG/C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC/D,4EAA4E;IAC5E,gEAAgE;IAChE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,+BAA+B,CAAC,IAAY,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;IAChG,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO;IACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC;QAAE,OAAO;IAClE,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,0DAA0D;QACvF,qGAAqG,CACxG,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAAC;AAEjD;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,MAAiC;IAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;SAC9B,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,IAAI,IAAI,uBAAuB,CAAC;AACzC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,kBAAkB,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,QAAQ,GAAW,uBAAuB;IACxE,IAAI,QAAQ,KAAK,uBAAuB;QAAE,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,aAAa,CAAC,CAAC;IACrF,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACtE,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,eAAe,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,qBAAqB,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IACnC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,QAAQ,GAAW,uBAAuB;IACvE,IAAI,QAAQ,KAAK,uBAAuB;QAAE,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,qBAAqB,CAAC,CAAC;IAC7F,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,GAAG,QAAQ,eAAe,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACjE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,WAAW,IAAI,OAAO,EAAE,CAAC;IACtD,MAAM,SAAS,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACvE,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QAC9D,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QACrD,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC1F,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE;WAC5D,UAAU,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,WAAW,IAAI,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9E,OAAO,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,CAAC;AACrG,CAAC"}
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAG/C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC/D,4EAA4E;IAC5E,gEAAgE;IAChE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,+BAA+B,CAAC,IAAY,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;IAChG,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO;IACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC;QAAE,OAAO;IAClE,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,0DAA0D;QACvF,qGAAqG,CACxG,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAAC;AAEjD;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,MAAiC;IAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;SAC9B,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,IAAI,IAAI,uBAAuB,CAAC;AACzC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,kBAAkB,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,QAAQ,GAAW,uBAAuB;IACxE,IAAI,QAAQ,KAAK,uBAAuB;QAAE,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,aAAa,CAAC,CAAC;IACrF,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACtE,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,eAAe,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,qBAAqB,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IACnC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,QAAQ,GAAW,uBAAuB;IACvE,IAAI,QAAQ,KAAK,uBAAuB;QAAE,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,qBAAqB,CAAC,CAAC;IAC7F,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,GAAG,QAAQ,eAAe,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,cAAc,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACjE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,WAAW,IAAI,OAAO,EAAE,CAAC;IACtD,MAAM,SAAS,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACvE,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QAC9D,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QACrD,cAAc,EAAE,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC1F,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE;WAC5D,UAAU,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,WAAW,IAAI,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9E,OAAO,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,CAAC;AACrG,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qodeca/xezar",
-  "version": "0.10.1",
+  "version": "0.10.2",
   "description": "Local cockpit for running and tracking AI agent tasks in your repo. Uses your logged-in `claude` CLI and `gh` — zero config, zero database.",
   "license": "MIT",
   "type": "module",
@@ -50,8 +50,8 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@qodeca/xezar-api-client": "^0.10.1",
-    "@qodeca/xezar-contract": "^0.10.1",
+    "@qodeca/xezar-api-client": "^0.10.2",
+    "@qodeca/xezar-contract": "^0.10.2",
     "@types/node": "^20.14.0",
     "@types/ws": "^8.18.1",
     "esbuild": "^0.28.1",

package/dist/release/snapshot.d.ts

@@ -1,67 +0,0 @@
-/** Snapshot release decisions — the pure half of `scripts/release-snapshot.mjs`.
- *
- *  Spec `.ai/specs/2026-07-18-npm-preview-publish.md` (#482): every green CI run
- *  publishes an installable preview of the CLI. This module decides *whether* a
- *  given CI event publishes, under *which* version and dist-tag, and how the two
- *  manifests (the scoped package and its unscoped alias) are stamped. Kept
- *  dependency-free and side-effect-free so the decision is unit-testable; the
- *  script owns file writes, `npm publish`, and the exit code.
- *
- *  Deliberately name-agnostic: package names come from the checked-out manifests
- *  at call time, never from constants — so the `@pat-lewczuk/cezar` →
- *  `@open-mercato/cezar` rename (PR #501) lands independently of this pipeline.
- */
-import { type ReleaseManifests as ReleaseManifestSet } from './manifests.ts';
-/** The CI facts the decision needs, straight from GitHub Actions' env/event. */
-export interface SnapshotContext {
-    /** `GITHUB_EVENT_NAME` — `pull_request` and `push` publish previews; `schedule`
-     *  and `workflow_dispatch` publish only the explicitly requested nightly. */
-    eventName: string;
-    /** `GITHUB_REF_NAME` for push events — only `develop` publishes a snapshot;
-     *  `main` is reserved for owner-driven stable releases (see stable.ts) and for
-     *  the nightly channel below, which never moves `latest` either. */
-    refName: string;
-    /** `CEZ_RELEASE_CHANNEL` — a channel asked for by name rather than derived from
-     *  the event. Only `.github/workflows/nightly.yml` sets it (to `nightly`); every
-     *  other caller leaves it empty and gets the event-derived channel. Opt-in by
-     *  name is what keeps a `workflow_dispatch` of ci.yml from cutting a nightly by
-     *  accident — the event alone is not enough. */
-    requestedChannel?: string;
-    /** `YYYYMMDD` (UTC) of the day a nightly is cut — the nightly version is named
-     *  after its date. Required for the nightly channel, ignored by every other. */
-    nightlyDate?: string;
-    /** PR number for pull_request events; absent/invalid → no publish. */
-    prNumber?: number;
-    /** `owner/name` of the PR head repo — fork PRs (≠ `repo`) never publish. */
-    headRepo?: string;
-    /** `GITHUB_REPOSITORY` — this repo's `owner/name`. */
-    repo?: string;
-    /** The base version from the root `package.json` (e.g. `0.1.5`). */
-    baseVersion: string;
-    /** `GITHUB_RUN_NUMBER` — monotonic per workflow; makes versions unique. */
-    runNumber: number;
-    /** `GITHUB_RUN_ATTEMPT` — appended only when > 1 so re-runs never collide. */
-    runAttempt?: number;
-}
-/** A publishable snapshot: prerelease version + the explicit dist-tag.
- *  The dist-tag is structurally never `latest` — snapshots must not become the
- *  default install; stable releases stay owner-driven (spec, resolved Q2). */
-export interface SnapshotPlan {
-    channel: string;
-    version: string;
-    distTag: string;
-}
-export declare function computeSnapshot(ctx: SnapshotContext): SnapshotPlan | null;
-export type { ManifestLike, ReleaseManifests } from './manifests.ts';
-/** Stamp the release set to the snapshot version.
- *
- *  Every intra-release dependency is pinned **exact** (`0.1.5-pr482.123`, no range) so
- *  `npx <alias>@<version>` runs exactly the PR's code and the service resolves exactly the
- *  api-client it was cut with — a `^` range would resolve to whatever newer version exists
- *  (spec, resolved Q5). Stable releases keep their `^` range and never go through this
- *  stamper. */
-export declare function stampManifests(manifests: ReleaseManifestSet, version: string): ReleaseManifestSet;
-/** The copy-pasteable commands for the sticky PR comment and the step summary.
- *  Rendered from the *actual* alias package name so a future rename of the npx
- *  command can never leave stale instructions (spec, resolved Q1). */
-export declare function buildInstallLines(aliasName: string, version: string): string[];

package/dist/release/snapshot.js

@@ -1,97 +0,0 @@
-/** Snapshot release decisions — the pure half of `scripts/release-snapshot.mjs`.
- *
- *  Spec `.ai/specs/2026-07-18-npm-preview-publish.md` (#482): every green CI run
- *  publishes an installable preview of the CLI. This module decides *whether* a
- *  given CI event publishes, under *which* version and dist-tag, and how the two
- *  manifests (the scoped package and its unscoped alias) are stamped. Kept
- *  dependency-free and side-effect-free so the decision is unit-testable; the
- *  script owns file writes, `npm publish`, and the exit code.
- *
- *  Deliberately name-agnostic: package names come from the checked-out manifests
- *  at call time, never from constants — so the `@pat-lewczuk/cezar` →
- *  `@open-mercato/cezar` rename (PR #501) lands independently of this pipeline.
- */
-import { stampManifestSet } from './manifests.js';
-export function computeSnapshot(ctx) {
-    const channel = resolveChannel(ctx);
-    if (!channel)
-        return null;
-    if (!ctx.baseVersion || !Number.isInteger(ctx.runNumber) || ctx.runNumber <= 0)
-        return null;
-    const attempt = ctx.runAttempt !== undefined && Number.isInteger(ctx.runAttempt) && ctx.runAttempt > 1
-        ? `.${ctx.runAttempt}`
-        : '';
-    // A nightly is named after the day it was cut — `0.1.5-nightly.20260813.126` —
-    // so `npm view cezar-cli versions` reads as a calendar and a user can tell at a
-    // glance how old their build is. The run number still trails the date, because a
-    // manual re-cut on the same day must not collide with the scheduled one. Both are
-    // plain numeric semver identifiers, so the ordering stays chronological.
-    const nightly = channel.channel === 'nightly';
-    if (nightly && !/^\d{8}$/.test(ctx.nightlyDate ?? ''))
-        return null;
-    const stamp = nightly ? `${ctx.nightlyDate}.${ctx.runNumber}` : `${ctx.runNumber}`;
-    return {
-        channel: channel.channel,
-        version: `${ctx.baseVersion}-${channel.channel}.${stamp}${attempt}`,
-        distTag: channel.distTag,
-    };
-}
-function resolveChannel(ctx) {
-    // A named channel wins over the event-derived ones, and is the ONLY way to reach
-    // nightly — asked for explicitly by nightly.yml, never inferred from an event.
-    // An unrecognised name publishes nothing rather than silently falling back: a
-    // typo in a workflow should be a no-op, not a publish under the wrong tag.
-    if (ctx.requestedChannel) {
-        if (ctx.requestedChannel !== 'nightly')
-            return null;
-        // Nightly cuts main's tip — on the schedule, or on demand from the Actions tab
-        // when someone needs a fresh build before the next night.
-        if (ctx.eventName !== 'schedule' && ctx.eventName !== 'workflow_dispatch')
-            return null;
-        if (ctx.refName !== 'main')
-            return null;
-        return { channel: 'nightly', distTag: 'nightly' };
-    }
-    if (ctx.eventName === 'pull_request') {
-        const n = ctx.prNumber;
-        if (n === undefined || !Number.isInteger(n) || n <= 0)
-            return null;
-        // Defense in depth: the workflow's `if` already excludes forks, and fork PRs
-        // get no secrets — but the decision must not rely on workflow wiring alone.
-        if (!ctx.headRepo || !ctx.repo || ctx.headRepo !== ctx.repo)
-            return null;
-        return { channel: `pr${n}`, distTag: `pr-${n}` };
-    }
-    if (ctx.eventName === 'push') {
-        // Only `develop` publishes a snapshot. `main` is deliberately excluded so a
-        // merge to main never touches npm — stable `latest` releases are cut
-        // manually via the Release workflow (stable.ts). Defense in depth: the
-        // workflow's `if` already restricts the push channel to develop.
-        if (ctx.refName === 'develop')
-            return { channel: 'develop', distTag: 'develop' };
-        return null;
-    }
-    return null;
-}
-/** Stamp the release set to the snapshot version.
- *
- *  Every intra-release dependency is pinned **exact** (`0.1.5-pr482.123`, no range) so
- *  `npx <alias>@<version>` runs exactly the PR's code and the service resolves exactly the
- *  api-client it was cut with — a `^` range would resolve to whatever newer version exists
- *  (spec, resolved Q5). Stable releases keep their `^` range and never go through this
- *  stamper. */
-export function stampManifests(manifests, version) {
-    return stampManifestSet(manifests, version, (v) => v);
-}
-/** The copy-pasteable commands for the sticky PR comment and the step summary.
- *  Rendered from the *actual* alias package name so a future rename of the npx
- *  command can never leave stale instructions (spec, resolved Q1). */
-export function buildInstallLines(aliasName, version) {
-    const cmd = `npx ${aliasName}@${version}`;
-    return [
-        `${cmd}                                # cockpit at http://localhost:4321`,
-        `${cmd} run "…"                        # headless run`,
-        `${cmd} server-deploy --platform <id>  # roll a server to this exact build`,
-    ];
-}
-//# sourceMappingURL=snapshot.js.map

package/dist/release/snapshot.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../src/release/snapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,gBAAgB,EAA+C,MAAM,gBAAgB,CAAC;AA2C/F,MAAM,UAAU,eAAe,CAAC,GAAoB;IAClD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,SAAS,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5F,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,GAAG,CAAC;QACpG,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE;QACtB,CAAC,CAAC,EAAE,CAAC;IACP,+EAA+E;IAC/E,gFAAgF;IAChF,iFAAiF;IACjF,kFAAkF;IAClF,yEAAyE;IACzE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC;IAC9C,IAAI,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;IACnF,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO,EAAE,GAAG,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,IAAI,KAAK,GAAG,OAAO,EAAE;QACnE,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAoB;IAC1C,iFAAiF;IACjF,+EAA+E;IAC/E,8EAA8E;IAC9E,2EAA2E;IAC3E,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACzB,IAAI,GAAG,CAAC,gBAAgB,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACpD,+EAA+E;QAC/E,0DAA0D;QAC1D,IAAI,GAAG,CAAC,SAAS,KAAK,UAAU,IAAI,GAAG,CAAC,SAAS,KAAK,mBAAmB;YAAE,OAAO,IAAI,CAAC;QACvF,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACxC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,KAAK,cAAc,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC;QACvB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnE,6EAA6E;QAC7E,4EAA4E;QAC5E,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACzE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC7B,4EAA4E;QAC5E,qEAAqE;QACrE,uEAAuE;QACvE,iEAAiE;QACjE,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAID;;;;;;eAMe;AACf,MAAM,UAAU,cAAc,CAC5B,SAA6B,EAC7B,OAAe;IAEf,OAAO,gBAAgB,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;sEAEsE;AACtE,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,OAAe;IAClE,MAAM,GAAG,GAAG,OAAO,SAAS,IAAI,OAAO,EAAE,CAAC;IAC1C,OAAO;QACL,GAAG,GAAG,oEAAoE;QAC1E,GAAG,GAAG,gDAAgD;QACtD,GAAG,GAAG,qEAAqE;KAC5E,CAAC;AACJ,CAAC"}