@wjarka/cezarion 0.10.0-pr30.54

package/dist/agent-config/account-identity.d.ts

@@ -0,0 +1,44 @@
+import type { ProviderId } from '../core/provider-auth.ts';
+/**
+ * Who an agent account is logged in AS — the "Show details" read (spec
+ * `2026-07-29-agent-profiles.md`).
+ *
+ * This is the second place vendor knowledge lives about an agent's home, beside
+ * `catalog.ts` (which config FILES exist) and `core/agent-profiles.ts` (which env var relocates
+ * the home). This one knows where each agent writes its own identity. Facts verified against the
+ * files on disk 2026-07-29; re-verify before changing them.
+ *
+ * ## Two rules that are not negotiable
+ *
+ * 1. **Named fields only, never pass-through.** `~/.codex/auth.json` holds `OPENAI_API_KEY`,
+ *    `access_token` and `refresh_token` right beside the identity claims. Every reader below picks
+ *    fields by name and builds a fresh object; nothing here spreads, forwards or stringifies a
+ *    parsed vendor object, so a key the vendor adds tomorrow cannot leak through. The JWT is read
+ *    for its CLAIMS and its signature is never a credential we hold onto.
+ * 2. **Read on demand, answered to exactly one route.** This never joins the accounts listing,
+ *    never enters `runs.json` or the NDJSON, and is never logged. `provider-auth.ts` keeps account
+ *    identity out of its own boundary on purpose; this is the deliberate, opt-in exception —
+ *    localHandoff-gated, and only when the user asks for it — not a widening of that rule.
+ */
+/** One labelled row, as the pane renders it. Deliberately not a fixed per-provider shape: what an
+ *  agent knows about its own login differs, and inventing an empty "Organization" for one that has
+ *  no concept of it would be a worse answer than omitting the row. */
+export interface AccountIdentityField {
+    label: string;
+    value: string;
+}
+export interface AccountIdentity {
+    /** False when there is nothing to show — not signed in, no file, or a file we cannot parse. */
+    available: boolean;
+    /** Why, in the user's terms, when `available` is false. */
+    reason?: string;
+    fields: AccountIdentityField[];
+}
+/**
+ * What this account is logged in as, or an honest reason there is nothing to show.
+ *
+ * Never throws. OpenCode answers "unsupported": its credentials live in a SQLite DB outside the
+ * config dir (see `core/agent-profiles.ts`), so there is nothing in a config folder to read — and
+ * guessing from the default login would attribute one account's identity to another.
+ */
+export declare function readAccountIdentity(provider: ProviderId, configDir: string): Promise<AccountIdentity>;

package/dist/agent-config/account-identity.js

@@ -0,0 +1,128 @@
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { claudeStateFilePath } from '../paths.js';
+/** `.claude.json` can carry per-project history; cap the read like `readUserMcpServers` does. */
+const READ_CAP = 2 * 1024 * 1024;
+const NOT_SIGNED_IN = 'Not signed in on this account yet — use Connect.';
+const UNREADABLE = 'Could not read this account’s details.';
+/** Read a JSON file under the cap. `null` for absent, unreadable, oversized or malformed. */
+async function readJsonCapped(path) {
+    try {
+        const raw = await readFile(path, 'utf8');
+        if (raw.length > READ_CAP)
+            return null;
+        const parsed = JSON.parse(raw);
+        return parsed && typeof parsed === 'object' ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** A non-empty display string, or undefined — so a blank vendor value never renders as an empty row. */
+function text(value) {
+    if (typeof value === 'string' && value.trim() !== '')
+        return value.trim();
+    if (typeof value === 'number' && Number.isFinite(value))
+        return String(value);
+    return undefined;
+}
+/** Push a row only when the value is really there. */
+function push(fields, label, value) {
+    const shown = text(value);
+    if (shown !== undefined)
+        fields.push({ label, value: shown });
+}
+/**
+ * Claude Code keeps its login in `.claude.json`'s `oauthAccount` — a *sibling* of `~/.claude` by
+ * default, but INSIDE an overridden config dir (`claudeStateFilePath` owns that rule, and getting
+ * it wrong is how one account reports another's email).
+ */
+async function readClaudeIdentity(configDir) {
+    const state = await readJsonCapped(claudeStateFilePath(configDir));
+    if (state === null)
+        return { available: false, reason: NOT_SIGNED_IN, fields: [] };
+    const account = state.oauthAccount;
+    if (!account || typeof account !== 'object') {
+        return { available: false, reason: NOT_SIGNED_IN, fields: [] };
+    }
+    const a = account;
+    const fields = [];
+    push(fields, 'Email', a.emailAddress);
+    push(fields, 'Name', a.displayName);
+    push(fields, 'Organization', a.organizationName);
+    push(fields, 'Role', a.organizationRole);
+    // `seatTier`/`billingType` are the closest thing to a plan the file states; neither is
+    // documented, so they are shown under a label that promises no more than they are.
+    push(fields, 'Seat', a.seatTier);
+    push(fields, 'Billing', a.billingType);
+    return fields.length > 0
+        ? { available: true, fields }
+        : { available: false, reason: UNREADABLE, fields: [] };
+}
+/**
+ * Codex keeps its login in `auth.json`'s `id_token` — a JWT whose payload carries the identity
+ * claims. Read for its claims only: the same file holds `OPENAI_API_KEY`, `access_token` and
+ * `refresh_token`, none of which this function so much as names.
+ *
+ * The signature is NOT verified, and that is correct here: this is a local file the user's own CLI
+ * wrote, read to display who they are — not a token cezar is accepting as proof of anything.
+ */
+async function readCodexIdentity(configDir) {
+    const auth = await readJsonCapped(join(configDir, 'auth.json'));
+    if (auth === null)
+        return { available: false, reason: NOT_SIGNED_IN, fields: [] };
+    const tokens = auth.tokens;
+    const idToken = tokens && typeof tokens === 'object'
+        ? tokens.id_token
+        : undefined;
+    const fields = [];
+    const claims = typeof idToken === 'string' ? decodeJwtClaims(idToken) : null;
+    if (claims !== null) {
+        push(fields, 'Email', claims.email);
+        push(fields, 'Name', claims.name);
+        const openai = claims['https://api.openai.com/auth'];
+        if (openai && typeof openai === 'object') {
+            push(fields, 'Plan', openai.chatgpt_plan_type);
+        }
+    }
+    // An API-key login has no id_token at all — say which kind of login this is rather than
+    // reporting "not signed in" for an account that is perfectly usable.
+    if (fields.length === 0 && typeof auth.OPENAI_API_KEY === 'string' && auth.OPENAI_API_KEY !== '') {
+        return { available: true, fields: [{ label: 'Login', value: 'API key' }] };
+    }
+    return fields.length > 0
+        ? { available: true, fields }
+        : { available: false, reason: NOT_SIGNED_IN, fields: [] };
+}
+/** A JWT's payload claims, or null when it is not a readable three-part token. */
+function decodeJwtClaims(token) {
+    const parts = token.split('.');
+    if (parts.length !== 3 || !parts[1])
+        return null;
+    try {
+        const parsed = JSON.parse(Buffer.from(parts[1], 'base64url').toString('utf8'));
+        return parsed && typeof parsed === 'object' ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * What this account is logged in as, or an honest reason there is nothing to show.
+ *
+ * Never throws. OpenCode answers "unsupported": its credentials live in a SQLite DB outside the
+ * config dir (see `core/agent-profiles.ts`), so there is nothing in a config folder to read — and
+ * guessing from the default login would attribute one account's identity to another.
+ */
+export async function readAccountIdentity(provider, configDir) {
+    if (provider === 'claude')
+        return readClaudeIdentity(configDir);
+    if (provider === 'codex')
+        return readCodexIdentity(configDir);
+    return {
+        available: false,
+        reason: 'OpenCode keeps its login outside its config folder, so cezar cannot read it.',
+        fields: [],
+    };
+}
+//# sourceMappingURL=account-identity.js.map

package/dist/agent-config/account-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-identity.js","sourceRoot":"","sources":["../../src/agent-config/account-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAwClD,iGAAiG;AACjG,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjC,MAAM,aAAa,GAAG,kDAAkD,CAAC;AACzE,MAAM,UAAU,GAAG,wCAAwC,CAAC;AAE5D,6FAA6F;AAC7F,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,GAAG,CAAC,MAAM,GAAG,QAAQ;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,wGAAwG;AACxG,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,sDAAsD;AACtD,SAAS,IAAI,CAAC,MAA8B,EAAE,KAAa,EAAE,KAAc;IACzE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACjD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;IACnE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACnF,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC;IACnC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,CAAC,GAAG,OAAkC,CAAC;IAC7C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACzC,uFAAuF;IACvF,mFAAmF;IACnF,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC;QACtB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7B,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IAChD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;IAChE,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAClF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAClD,CAAC,CAAE,MAAkC,CAAC,QAAQ;QAC9C,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,6BAA6B,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAG,MAAkC,CAAC,iBAAiB,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,wFAAwF;IACxF,qEAAqE;IACrE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,KAAK,EAAE,EAAE,CAAC;QACjG,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC7E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC;QACtB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7B,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC9D,CAAC;AAED,kFAAkF;AAClF,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACxF,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAoB,EACpB,SAAiB;IAEjB,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC9D,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,8EAA8E;QACtF,MAAM,EAAE,EAAE;KACX,CAAC;AACJ,CAAC"}

package/dist/agent-config/catalog.d.ts

@@ -0,0 +1,72 @@
+import type { RunnerId } from '../core/agent-runner.ts';
+/**
+ * The catalog of coding-agent config files cezar can surface and edit (spec
+ * `.ai/specs/2026-07-16-agent-config-files.md`). This file is the ONLY place
+ * vendor knowledge lives: where each agent keeps its files, at which scope, in
+ * what format, and — the load-bearing part — the vendor's OWN documented
+ * precedence, quoted so a UI label never claims a merge cezar does not perform.
+ *
+ * Hardcoding is the design. cezar's value here is knowing where the files are
+ * and what the docs say; an unknown file is not shown rather than guessed at.
+ * A raw editor cannot drift on a vendor's *schema*; it can drift on *paths and
+ * precedence strings*, so every entry carries a `docsUrl` and this table is the
+ * single maintenance surface. Facts verified against primary docs 2026-07-16.
+ */
+export type ConfigFormat = 'json' | 'jsonc' | 'toml' | 'markdown';
+export type ConfigScope = 'user' | 'project' | 'local';
+/** `settings` = behavior knobs; `memory` = instruction/markdown; `mcp` = a dedicated MCP file. */
+export type ConfigKind = 'settings' | 'memory' | 'mcp';
+/**
+ * Git status *by convention* — it drives the honest label, it is not read from
+ * git. The seed path re-checks with `git check-ignore` before trusting it.
+ */
+export type ConfigTracked = 'tracked' | 'gitignored' | 'outside-repo';
+/** Resolved home directories per agent, injected so the catalog stays pure and testable. */
+export interface AgentHomePaths {
+    /** `~/.claude` */
+    claude: string;
+    /** `$CODEX_HOME` or `~/.codex` */
+    codex: string;
+    /** `$XDG_CONFIG_HOME/opencode` or `~/.config/opencode` */
+    opencodeConfig: string;
+}
+export interface ConfigFileDef {
+    /** Stable, opaque, URL-safe. The ONLY thing a client may name (traversal-proof). */
+    id: string;
+    /** Every runner that reads this file. `<repo>/AGENTS.md` is one file, two readers. */
+    runners: RunnerId[];
+    kind: ConfigKind;
+    scope: ConfigScope;
+    /** Absolute path, resolved per request so `$CODEX_HOME`/`$XDG_CONFIG_HOME` are honoured. */
+    resolve: (repoRoot: string, home: AgentHomePaths) => string;
+    /** What the user sees, e.g. `~/.claude/settings.json`, `.claude/settings.local.json`. */
+    label: string;
+    format: ConfigFormat;
+    tracked: ConfigTracked;
+    /** True only for Claude's gitignored personal layer — the files seeded into a run's worktree. */
+    seeded?: boolean;
+    /** True when this file holds MCP server definitions (drives the MCP section's filter). */
+    holdsMcp?: boolean;
+    /** Top-level native setting that supplies the agent's new-session model, when present. */
+    modelKey?: string;
+    /** Native model keys checked in precedence order, including nested `env.*` settings. */
+    modelKeys?: readonly string[];
+    /** Native provider key paired with the model, when the vendor separates the two. */
+    modelProviderKey?: string;
+    /** Higher values win when resolving a native default model across config scopes. */
+    modelPriority?: number;
+    /** VERBATIM from the vendor docs. Never computed, never generic. */
+    precedence: string;
+    /** Documented mid-run reload behaviour, or undefined when the vendor is silent. */
+    hotReload?: string;
+    docsUrl: string;
+}
+/**
+ * The table. Order is presentation order: per runner, then user → project →
+ * local so each scope ladder reads top (broad) to bottom (specific).
+ */
+export declare const CONFIG_FILES: ConfigFileDef[];
+/** The whole catalog. */
+export declare function listConfigFiles(): ConfigFileDef[];
+/** Look up one entry by its stable id, or undefined when the id is unknown. */
+export declare function findConfigFile(id: string): ConfigFileDef | undefined;

package/dist/agent-config/catalog.js

@@ -0,0 +1,223 @@
+import { join } from 'node:path';
+const CLAUDE_SETTINGS_DOCS = 'https://code.claude.com/docs/en/settings';
+const CLAUDE_MEMORY_DOCS = 'https://code.claude.com/docs/en/memory';
+const CLAUDE_MCP_DOCS = 'https://code.claude.com/docs/en/mcp';
+const CODEX_CONFIG_DOCS = 'https://developers.openai.com/codex/config-reference';
+const CODEX_AGENTS_DOCS = 'https://developers.openai.com/codex/guides/agents-md';
+const OPENCODE_CONFIG_DOCS = 'https://opencode.ai/docs/config/';
+const OPENCODE_RULES_DOCS = 'https://opencode.ai/docs/rules/';
+/**
+ * The table. Order is presentation order: per runner, then user → project →
+ * local so each scope ladder reads top (broad) to bottom (specific).
+ */
+export const CONFIG_FILES = [
+    // ---- Claude Code ----
+    {
+        id: 'claude.user.settings',
+        runners: ['claude'],
+        kind: 'settings',
+        scope: 'user',
+        resolve: (_repo, home) => join(home.claude, 'settings.json'),
+        label: '~/.claude/settings.json',
+        format: 'json',
+        tracked: 'outside-repo',
+        modelKey: 'model',
+        modelKeys: ['env.ANTHROPIC_MODEL', 'model'],
+        modelPriority: 1,
+        precedence: 'Lowest priority. Project and local settings override it key by key — except permission rules, which merge across all scopes.',
+        hotReload: 'Edits to most keys — including permissions and hooks — apply to a running session without a restart.',
+        docsUrl: CLAUDE_SETTINGS_DOCS,
+    },
+    {
+        id: 'claude.project.settings',
+        runners: ['claude'],
+        kind: 'settings',
+        scope: 'project',
+        resolve: (repo) => join(repo, '.claude', 'settings.json'),
+        label: '.claude/settings.json',
+        format: 'json',
+        tracked: 'tracked',
+        modelKey: 'model',
+        modelKeys: ['env.ANTHROPIC_MODEL', 'model'],
+        modelPriority: 2,
+        precedence: 'Overrides user settings key by key (permission rules merge). Local settings override this.',
+        hotReload: 'Edits to most keys — including permissions and hooks — apply to a running session without a restart.',
+        docsUrl: CLAUDE_SETTINGS_DOCS,
+    },
+    {
+        id: 'claude.local.settings',
+        runners: ['claude'],
+        kind: 'settings',
+        scope: 'local',
+        resolve: (repo) => join(repo, '.claude', 'settings.local.json'),
+        label: '.claude/settings.local.json',
+        format: 'json',
+        tracked: 'gitignored',
+        seeded: true,
+        modelKey: 'model',
+        modelKeys: ['env.ANTHROPIC_MODEL', 'model'],
+        modelPriority: 3,
+        precedence: 'Highest of the file scopes — overrides project and user (permission rules merge). Git-ignored; copied into each run’s worktree so it takes effect immediately.',
+        hotReload: 'Edits to most keys — including permissions and hooks — apply to a running session without a restart.',
+        docsUrl: CLAUDE_SETTINGS_DOCS,
+    },
+    {
+        id: 'claude.project.mcp',
+        runners: ['claude'],
+        kind: 'mcp',
+        scope: 'project',
+        resolve: (repo) => join(repo, '.mcp.json'),
+        label: '.mcp.json',
+        format: 'json',
+        tracked: 'tracked',
+        holdsMcp: true,
+        precedence: 'Project-scoped MCP servers (key: mcpServers), shared via version control. Each requires approval before use; user- and local-scoped servers live in ~/.claude.json, which cezar does not edit.',
+        docsUrl: CLAUDE_MCP_DOCS,
+    },
+    {
+        id: 'claude.user.memory',
+        runners: ['claude'],
+        kind: 'memory',
+        scope: 'user',
+        resolve: (_repo, home) => join(home.claude, 'CLAUDE.md'),
+        label: '~/.claude/CLAUDE.md',
+        format: 'markdown',
+        tracked: 'outside-repo',
+        precedence: 'Not overridden — every CLAUDE.md that loads is concatenated, this user file first.',
+        docsUrl: CLAUDE_MEMORY_DOCS,
+    },
+    {
+        id: 'claude.project.memory',
+        runners: ['claude'],
+        kind: 'memory',
+        scope: 'project',
+        resolve: (repo) => join(repo, 'CLAUDE.md'),
+        label: 'CLAUDE.md',
+        format: 'markdown',
+        tracked: 'tracked',
+        precedence: 'Concatenated after the user file, not replacing it. Claude does not read AGENTS.md — import it here with @AGENTS.md. Runs read the committed copy.',
+        docsUrl: CLAUDE_MEMORY_DOCS,
+    },
+    {
+        id: 'claude.local.memory',
+        runners: ['claude'],
+        kind: 'memory',
+        scope: 'local',
+        resolve: (repo) => join(repo, 'CLAUDE.local.md'),
+        label: 'CLAUDE.local.md',
+        format: 'markdown',
+        tracked: 'gitignored',
+        seeded: true,
+        precedence: 'Loads alongside CLAUDE.md, concatenated last. Git-ignored; copied into each run’s worktree so it takes effect immediately.',
+        docsUrl: CLAUDE_MEMORY_DOCS,
+    },
+    // ---- Codex ----
+    {
+        id: 'codex.user.config',
+        runners: ['codex'],
+        kind: 'settings',
+        scope: 'user',
+        resolve: (_repo, home) => join(home.codex, 'config.toml'),
+        label: '~/.codex/config.toml',
+        format: 'toml',
+        tracked: 'outside-repo',
+        holdsMcp: true,
+        modelKey: 'model',
+        modelProviderKey: 'model_provider',
+        modelPriority: 1,
+        precedence: 'User-level defaults. A trusted project’s .codex/config.toml overrides these; some keys (provider, auth, telemetry) cannot be overridden at project scope. MCP servers live here under [mcp_servers.<id>].',
+        docsUrl: CODEX_CONFIG_DOCS,
+    },
+    {
+        id: 'codex.project.config',
+        runners: ['codex'],
+        kind: 'settings',
+        scope: 'project',
+        resolve: (repo) => join(repo, '.codex', 'config.toml'),
+        label: '.codex/config.toml',
+        format: 'toml',
+        tracked: 'tracked',
+        modelKey: 'model',
+        modelPriority: 2,
+        holdsMcp: true,
+        precedence: 'Applies only in projects you have trusted. Some keys (provider, auth, telemetry) cannot be overridden here. MCP servers go under [mcp_servers.<id>]. Runs read the committed copy.',
+        docsUrl: CODEX_CONFIG_DOCS,
+    },
+    {
+        id: 'codex.user.memory',
+        runners: ['codex'],
+        kind: 'memory',
+        scope: 'user',
+        resolve: (_repo, home) => join(home.codex, 'AGENTS.md'),
+        label: '~/.codex/AGENTS.md',
+        format: 'markdown',
+        tracked: 'outside-repo',
+        precedence: 'Global instructions, read first (an AGENTS.override.md beside it wins if present). Project AGENTS.md files are concatenated after and override it.',
+        docsUrl: CODEX_AGENTS_DOCS,
+    },
+    // ---- OpenCode ----
+    {
+        id: 'opencode.user.config',
+        runners: ['opencode'],
+        kind: 'settings',
+        scope: 'user',
+        resolve: (_repo, home) => join(home.opencodeConfig, 'opencode.json'),
+        label: '~/.config/opencode/opencode.json',
+        format: 'jsonc',
+        tracked: 'outside-repo',
+        holdsMcp: true,
+        modelKey: 'model',
+        modelPriority: 1,
+        precedence: 'Global config. Merged with the project config, not replaced — later configs override earlier ones only for conflicting keys. MCP servers live under the "mcp" key.',
+        docsUrl: OPENCODE_CONFIG_DOCS,
+    },
+    {
+        id: 'opencode.project.config',
+        runners: ['opencode'],
+        kind: 'settings',
+        scope: 'project',
+        resolve: (repo) => join(repo, 'opencode.json'),
+        label: 'opencode.json',
+        format: 'jsonc',
+        tracked: 'tracked',
+        holdsMcp: true,
+        modelKey: 'model',
+        modelPriority: 2,
+        precedence: 'Merged over the global config per conflicting key (not a wholesale replace). MCP servers live under the "mcp" key. Runs read the committed copy.',
+        docsUrl: OPENCODE_CONFIG_DOCS,
+    },
+    {
+        id: 'opencode.user.memory',
+        runners: ['opencode'],
+        kind: 'memory',
+        scope: 'user',
+        resolve: (_repo, home) => join(home.opencodeConfig, 'AGENTS.md'),
+        label: '~/.config/opencode/AGENTS.md',
+        format: 'markdown',
+        tracked: 'outside-repo',
+        precedence: 'Global rules. First match wins across scopes: if a project AGENTS.md exists, this global file is not read at all.',
+        docsUrl: OPENCODE_RULES_DOCS,
+    },
+    // ---- Shared: <repo>/AGENTS.md is read by BOTH Codex and OpenCode ----
+    {
+        id: 'project.agents',
+        runners: ['codex', 'opencode'],
+        kind: 'memory',
+        scope: 'project',
+        resolve: (repo) => join(repo, 'AGENTS.md'),
+        label: 'AGENTS.md',
+        format: 'markdown',
+        tracked: 'tracked',
+        precedence: 'Read by Codex and OpenCode (Claude ignores it). Codex concatenates it root-down; OpenCode uses the first match and prefers it over CLAUDE.md. Runs read the committed copy.',
+        docsUrl: OPENCODE_RULES_DOCS,
+    },
+];
+/** The whole catalog. */
+export function listConfigFiles() {
+    return CONFIG_FILES;
+}
+/** Look up one entry by its stable id, or undefined when the id is unknown. */
+export function findConfigFile(id) {
+    return CONFIG_FILES.find((f) => f.id === id);
+}
+//# sourceMappingURL=catalog.js.map

package/dist/agent-config/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/agent-config/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAqEjC,MAAM,oBAAoB,GAAG,0CAA0C,CAAC;AACxE,MAAM,kBAAkB,GAAG,wCAAwC,CAAC;AACpE,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAC9D,MAAM,iBAAiB,GAAG,sDAAsD,CAAC;AACjF,MAAM,iBAAiB,GAAG,sDAAsD,CAAC;AACjF,MAAM,oBAAoB,GAAG,kCAAkC,CAAC;AAChE,MAAM,mBAAmB,GAAG,iCAAiC,CAAC;AAE9D;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAoB;IAC3C,wBAAwB;IACxB;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC;QAC5D,KAAK,EAAE,yBAAyB;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,CAAC,qBAAqB,EAAE,OAAO,CAAC;QAC3C,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,8HAA8H;QAChI,SAAS,EAAE,sGAAsG;QACjH,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC;QACzD,KAAK,EAAE,uBAAuB;QAC9B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,CAAC,qBAAqB,EAAE,OAAO,CAAC;QAC3C,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,4FAA4F;QAC9F,SAAS,EAAE,sGAAsG;QACjH,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,CAAC;QAC/D,KAAK,EAAE,6BAA6B;QACpC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,CAAC,qBAAqB,EAAE,OAAO,CAAC;QAC3C,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,gKAAgK;QAClK,SAAS,EAAE,sGAAsG;QACjH,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAC1C,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,IAAI;QACd,UAAU,EACR,gMAAgM;QAClM,OAAO,EAAE,eAAe;KACzB;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;QACxD,KAAK,EAAE,qBAAqB;QAC5B,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,cAAc;QACvB,UAAU,EAAE,oFAAoF;QAChG,OAAO,EAAE,kBAAkB;KAC5B;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAC1C,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,SAAS;QAClB,UAAU,EACR,oJAAoJ;QACtJ,OAAO,EAAE,kBAAkB;KAC5B;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC;QAChD,KAAK,EAAE,iBAAiB;QACxB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,IAAI;QACZ,UAAU,EACR,4HAA4H;QAC9H,OAAO,EAAE,kBAAkB;KAC5B;IAED,kBAAkB;IAClB;QACE,EAAE,EAAE,mBAAmB;QACvB,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC;QACzD,KAAK,EAAE,sBAAsB;QAC7B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,OAAO;QACjB,gBAAgB,EAAE,gBAAgB;QAClC,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,2MAA2M;QAC7M,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC;QACtD,KAAK,EAAE,oBAAoB;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,OAAO;QACjB,aAAa,EAAE,CAAC;QAChB,QAAQ,EAAE,IAAI;QACd,UAAU,EACR,oLAAoL;QACtL,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC;QACvD,KAAK,EAAE,oBAAoB;QAC3B,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,cAAc;QACvB,UAAU,EACR,oJAAoJ;QACtJ,OAAO,EAAE,iBAAiB;KAC3B;IAED,qBAAqB;IACrB;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC;QACpE,KAAK,EAAE,kCAAkC;QACzC,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,OAAO;QACjB,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,oKAAoK;QACtK,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC;QAC9C,KAAK,EAAE,eAAe;QACtB,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,OAAO;QACjB,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,kJAAkJ;QACpJ,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC;QAChE,KAAK,EAAE,8BAA8B;QACrC,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,cAAc;QACvB,UAAU,EACR,mHAAmH;QACrH,OAAO,EAAE,mBAAmB;KAC7B;IAED,wEAAwE;IACxE;QACE,EAAE,EAAE,gBAAgB;QACpB,OAAO,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;QAC9B,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAC1C,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,SAAS;QAClB,UAAU,EACR,6KAA6K;QAC/K,OAAO,EAAE,mBAAmB;KAC7B;CACF,CAAC;AAEF,yBAAyB;AACzB,MAAM,UAAU,eAAe;IAC7B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/C,CAAC"}

package/dist/agent-config/files.d.ts

@@ -0,0 +1,46 @@
+import { type ConfigFileDef } from './catalog.ts';
+/**
+ * Read and write the coding agents' own config files, addressed by catalog id
+ * (never by a client-supplied path, so traversal is impossible by
+ * construction). Every function degrades — a missing file is "absent", an
+ * unreadable one is an honest error — and none throw. Writes validate first,
+ * refuse a stale overwrite via a content hash, write atomically through
+ * symlinks, and never touch a byte the user did not type.
+ */
+/** sha256 of the exact file bytes. mtime is coarse and lies across filesystems. */
+declare function hashBytes(content: string): string;
+export interface ReadResult {
+    id: string;
+    path: string;
+    exists: boolean;
+    content: string;
+    /** sha256 of the bytes, or null when the file does not exist. */
+    version: string | null;
+}
+export type WriteOutcome = {
+    ok: true;
+    read: ReadResult;
+} | {
+    ok: false;
+    status: 400 | 409 | 500;
+    error: string;
+};
+declare function resolvePath(def: ConfigFileDef, repoRoot: string, env: NodeJS.ProcessEnv): string;
+/** Read a config file by id. Unknown id → null; absent file → exists:false; unreadable → thrown-free error string via `error`. */
+export declare function readConfigFile(id: string, repoRoot: string, env?: NodeJS.ProcessEnv): Promise<ReadResult | {
+    error: string;
+} | null>;
+/**
+ * Write a config file by id. Validates the content against the file's format,
+ * refuses when `version` does not match what is on disk (stale / lost-update),
+ * creates the parent dir on demand, and writes atomically through any symlink
+ * rather than replacing the link. `version: null` means "I expect no file to
+ * exist yet" — the create path.
+ */
+export declare function writeConfigFile(id: string, content: string, version: string | null, repoRoot: string, env?: NodeJS.ProcessEnv): Promise<WriteOutcome | null>;
+/** Whether a path currently exists (used by the listing to report `exists`/`size`). */
+export declare function statConfigPath(path: string): Promise<{
+    exists: boolean;
+    size: number;
+}>;
+export { resolvePath, hashBytes };

package/dist/agent-config/files.js

@@ -0,0 +1,119 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { mkdir, readFile, realpath, rename, stat, writeFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { agentHomePaths } from '../paths.js';
+import { findConfigFile } from './catalog.js';
+import { validateConfig } from './validate.js';
+/**
+ * Read and write the coding agents' own config files, addressed by catalog id
+ * (never by a client-supplied path, so traversal is impossible by
+ * construction). Every function degrades — a missing file is "absent", an
+ * unreadable one is an honest error — and none throw. Writes validate first,
+ * refuse a stale overwrite via a content hash, write atomically through
+ * symlinks, and never touch a byte the user did not type.
+ */
+/** sha256 of the exact file bytes. mtime is coarse and lies across filesystems. */
+function hashBytes(content) {
+    return createHash('sha256').update(content, 'utf8').digest('hex');
+}
+function resolvePath(def, repoRoot, env) {
+    return def.resolve(repoRoot, agentHomePaths(env));
+}
+/** Read a config file by id. Unknown id → null; absent file → exists:false; unreadable → thrown-free error string via `error`. */
+export async function readConfigFile(id, repoRoot, env = process.env) {
+    const def = findConfigFile(id);
+    if (!def)
+        return null;
+    const path = resolvePath(def, repoRoot, env);
+    try {
+        const content = await readFile(path, 'utf8');
+        return { id, path, exists: true, content, version: hashBytes(content) };
+    }
+    catch (err) {
+        const e = err;
+        if (e.code === 'ENOENT')
+            return { id, path, exists: false, content: '', version: null };
+        return { error: e.message };
+    }
+}
+/**
+ * Write a config file by id. Validates the content against the file's format,
+ * refuses when `version` does not match what is on disk (stale / lost-update),
+ * creates the parent dir on demand, and writes atomically through any symlink
+ * rather than replacing the link. `version: null` means "I expect no file to
+ * exist yet" — the create path.
+ */
+export async function writeConfigFile(id, content, version, repoRoot, env = process.env) {
+    const def = findConfigFile(id);
+    if (!def)
+        return null;
+    const check = validateConfig(content, def.format);
+    if (!check.ok)
+        return { ok: false, status: 400, error: `Invalid ${def.format}: ${check.error}` };
+    const path = resolvePath(def, repoRoot, env);
+    // Stale-write guard: the version the caller read must still match disk.
+    let current = null;
+    try {
+        current = await readFile(path, 'utf8');
+    }
+    catch (err) {
+        if (err.code !== 'ENOENT') {
+            return { ok: false, status: 500, error: err.message };
+        }
+    }
+    // Footgun guard: emptying a populated file passes format validation (empty is
+    // valid TOML/markdown, and JSON just errors) but silently wipes real config —
+    // unrecoverable for the gitignored/home files that aren't in git. Refuse it;
+    // deleting a config file is a deliberate act, not a stray select-all-delete.
+    if (content.trim() === '' && current !== null && current.trim() !== '') {
+        return {
+            ok: false,
+            status: 400,
+            error: 'refusing to overwrite a non-empty config file with empty content — delete the file manually if you mean to remove it',
+        };
+    }
+    const currentVersion = current === null ? null : hashBytes(current);
+    if (currentVersion !== version) {
+        return {
+            ok: false,
+            status: 409,
+            error: currentVersion === null
+                ? 'the file no longer exists on disk — reload before saving'
+                : 'the file changed on disk since you opened it — reload before saving',
+        };
+    }
+    try {
+        // Resolve the real target so an atomic rename writes THROUGH a symlink
+        // (e.g. ~/.claude → a dotfiles repo) instead of replacing the link itself.
+        let target = path;
+        try {
+            target = await realpath(path);
+        }
+        catch {
+            // file/link absent — target stays as the resolved path (the create case)
+        }
+        await mkdir(dirname(target), { recursive: true });
+        // Unique per write (not just per process) so two concurrent saves of the same
+        // file can't rename the same tmp path over each other and tear the bytes.
+        const tmp = `${target}.cez-tmp-${process.pid}-${randomUUID()}`;
+        await writeFile(tmp, content, 'utf8');
+        await rename(tmp, target);
+        const written = await readFile(target, 'utf8');
+        return { ok: true, read: { id, path, exists: true, content: written, version: hashBytes(written) } };
+    }
+    catch (err) {
+        return { ok: false, status: 500, error: err.message };
+    }
+}
+/** Whether a path currently exists (used by the listing to report `exists`/`size`). */
+export async function statConfigPath(path) {
+    try {
+        const s = await stat(path);
+        return { exists: true, size: s.size };
+    }
+    catch {
+        return { exists: false, size: 0 };
+    }
+}
+export { resolvePath, hashBytes };
+//# sourceMappingURL=files.js.map