opencode-clm 0.1.1 → 0.2.0

package/src/budget.ts

@@ -360,7 +360,7 @@ export function budgetNoticeText(
  * odd sample cannot run away.
  */
 export class EstimateCalibrator {
-	private pending: { estimate: number; rawCount: number } | undefined;
+	private pending: { estimate: number; rawCount: number; offset: number } | undefined;
 	private current = 1;
 	private samples = 0;
 
@@ -390,9 +390,11 @@ export class EstimateCalibrator {
 	 * Remember the raw (uncalibrated) estimate of the request about to be sent. The estimate
 	 * must cover the same scope as the provider count it will be compared with; an estimate
 	 * that omits the system prompt and tool schemas reads their size as undercounting.
+	 * `offset`: tokens of the provider count the estimate does not cover, already measured
+	 * (the fixed overhead); they are subtracted from the observation before the comparison.
 	 */
-	record(estimate: number, rawCount: number): void {
-		if (estimate > 0) this.pending = { estimate, rawCount };
+	record(estimate: number, rawCount: number, offset = 0): void {
+		if (estimate > 0) this.pending = { estimate, rawCount, offset };
 	}
 
 	/**
@@ -402,7 +404,7 @@ export class EstimateCalibrator {
 	 */
 	observe(observed: { tokens: number; index: number } | undefined): number {
 		if (!observed || !this.pending || observed.index < this.pending.rawCount) return this.current;
-		const sample = observed.tokens / this.pending.estimate;
+		const sample = (observed.tokens - this.pending.offset) / this.pending.estimate;
 		this.pending = undefined;
 		if (!Number.isFinite(sample) || sample <= 0) return this.current;
 		const smoothing = this.options.smoothing ?? 0.5;

package/src/clm.ts

@@ -33,7 +33,7 @@
  * included) was estimated; without those sizes it stays at 1.
  */
 import { randomUUID } from "node:crypto";
-import { appendFile, mkdir, writeFile } from "node:fs/promises";
+import { appendFile, mkdir, stat, writeFile } from "node:fs/promises";
 import { join } from "node:path";
 
 import {
@@ -75,7 +75,11 @@ import {
 	type LiveContextState,
 } from "./state.ts";
 import type { SteeringDocument } from "./steering.ts";
-import type { ContextDocumentSnapshot, LiveContextMessage, TurnBaseline } from "./types.ts";
+import { overridesPath, readOverrides, stageSettings, type ChangeRequest, type StagedSettings } from "./overrides.ts";
+import { changedSummary, settingsAsOverrides, type ClmOverrides, type SettingsValues } from "./settings-table.ts";
+import type { ContextDocumentSnapshot, ContextEditTrace, LiveContextMessage, TurnBaseline } from "./types.ts";
+import { writeJsonAtomic } from "./atomic.ts";
+import { SNAPSHOT_FILE, type RevisionFile, type RevisionFileRow, type SnapshotFile } from "./panel/files.ts";
 
 export interface ModelLimits {
 	/** Model context window, tokens. */
@@ -213,28 +217,124 @@ export class ClmSession {
 	private saving: Promise<void> = Promise.resolve();
 	private running: Promise<unknown> = Promise.resolve();
 
+	/** Settings in force: `baseSettings` with this session's overrides.json applied (`refreshSettings`). */
+	settings: ClmSettings;
+	/** Overrides in force, as read from overrides.json. */
+	overrides: ClmOverrides = {};
+	/** The steering document in force for this session; undefined is protocol only. */
+	steering?: SteeringDocument;
+	/** Why saved settings or the steering document were (partly) ignored; shown by `/clm status`. */
+	settingsWarning?: string;
+	/** stat key of the overrides.json last read; a change triggers a re-read. */
+	private overridesKey = "";
+
 	private constructor(
 		readonly sessionID: string,
 		readonly store: MirrorStore,
-		readonly settings: ClmSettings,
+		readonly baseSettings: ClmSettings,
 		loaded: { state: LiveContextState; warning?: string },
+		readonly baseSteering?: SteeringDocument,
 	) {
+		this.settings = baseSettings;
+		this.steering = baseSteering;
 		this.state = loaded.state;
 		this.loadWarning = loaded.warning;
 		this.annotations = new AnnotationStore(store.directory, { estimateTokens: (text) => this.textTokens(text) });
 	}
 
-	/** Open (or resume) the session directory `<mirrorDir>/clm-<sessionID>/`. */
-	static async open(sessionID: string, settings: ClmSettings): Promise<ClmSession> {
+	/**
+	 * Open (or resume) the session directory `<mirrorDir>/clm-<sessionID>/`. `steering` is the
+	 * document the base settings name, already loaded (the plugin loads it strictly at start).
+	 */
+	static async open(sessionID: string, settings: ClmSettings, options: { steering?: SteeringDocument } = {}): Promise<ClmSession> {
 		if (!SESSION_ID_RE.test(sessionID)) throw new Error(`Invalid session id for CLM: ${JSON.stringify(sessionID)}`);
 		const store = await MirrorStore.create(sessionID, settings.mirrorDir);
 		const loaded = await loadLiveContextState(store.directory);
-		const session = new ClmSession(sessionID, store, settings, loaded);
+		const session = new ClmSession(sessionID, store, settings, loaded, options.steering);
 		if (loaded.warning) await session.log({ event: "state-warning", warning: loaded.warning });
 		if (loaded.repaired) await session.log({ event: "state-repaired", message: loaded.repaired });
+		await session.refreshSettings();
 		return session;
 	}
 
+	/** Whether CLM edits apply in this session: the `editing` override, else state.json. */
+	get enabled(): boolean {
+		return this.overrides.editing ?? this.state.enabled;
+	}
+
+	/** Base and effective values, for the settings table. */
+	settingsValues(): { base: SettingsValues; effective: SettingsValues } {
+		return {
+			base: { editing: this.state.enabled, settings: this.baseSettings },
+			effective: { editing: this.enabled, settings: this.settings },
+		};
+	}
+
+	/** For `changeSetting` (overrides.ts): where and against what a change is validated. */
+	changeRequest(projectDirectory: string): ChangeRequest {
+		return {
+			sessionDirectory: this.store.directory,
+			base: this.baseSettings,
+			baseEditing: this.state.enabled,
+			projectDirectory,
+			format: { modelWindow: this.limits.context },
+		};
+	}
+
+	/**
+	 * Re-read overrides.json when it changed (stat: mtime, size, inode) and activate it.
+	 * Runs before every request and every `/clm` command, so a change written by the TUI or
+	 * the server's `/clm config` applies from the next request. Invalid keys are dropped; a
+	 * set that does not resolve falls back to the base settings; a steering document that
+	 * does not load leaves the session protocol-only. Each case is kept in `settingsWarning`.
+	 * `force` re-reads even when the file looks unchanged.
+	 */
+	async refreshSettings(force = false): Promise<void> {
+		const path = overridesPath(this.store.directory);
+		let key = "missing";
+		try {
+			const info = await stat(path);
+			key = `${info.mtimeMs}:${info.size}:${info.ino}`;
+		} catch {
+			// missing: no overrides
+		}
+		if (!force && key === this.overridesKey) return;
+		this.overridesKey = key;
+		const read = key === "missing" ? { overrides: {} as ClmOverrides } : await readOverrides(this.store.directory);
+		const warnings: string[] = read.warning ? [read.warning] : [];
+		let staged: StagedSettings;
+		let overrides = read.overrides;
+		try {
+			staged = stageSettings(this.baseSettings, overrides, { strict: false, loaded: this.steering ?? this.baseSteering });
+		} catch (error) {
+			warnings.push(`ignored saved settings: ${describe(error)}`);
+			overrides = {};
+			staged = { settings: this.baseSettings, ...(this.baseSteering ? { steering: this.baseSteering } : {}) };
+		}
+		if (staged.steeringError) warnings.push(`steering document not loaded: ${staged.steeringError}`);
+		await this.activateSettings(staged, overrides);
+		this.settingsWarning = warnings.length > 0 ? warnings.join("; ") : undefined;
+	}
+
+	private async activateSettings(staged: StagedSettings, overrides: ClmOverrides): Promise<void> {
+		const before = this.settings.budget;
+		const after = staged.settings.budget;
+		const wasEnabled = this.enabled;
+		const changed = JSON.stringify(this.overrides) !== JSON.stringify(overrides);
+		this.settings = staged.settings;
+		this.steering = staged.steering;
+		this.overrides = overrides;
+		if (before.contextBudget !== after.contextBudget || before.reserve !== after.reserve ||
+			before.remindAtFractions.join(",") !== after.remindAtFractions.join(",") || before.remindAtReserve !== after.remindAtReserve) {
+			this.tracker.reset();
+		}
+		if (wasEnabled !== this.enabled) {
+			this.baseline = undefined;
+			if (!this.enabled) this.continuitySize.observe(0);
+		}
+		if (changed) await this.log({ event: "settings", overrides });
+	}
+
 	get mirrorPath(): string {
 		return this.store.filePath;
 	}
@@ -460,7 +560,7 @@ export class ClmSession {
 	 * calls that only read it or do not touch it.
 	 */
 	receipt(tool: string, args: Record<string, unknown> | undefined, cwd: string): string | undefined {
-		if (!this.settings.enabled || !this.state.enabled) return undefined;
+		if (!this.settings.enabled || !this.enabled) return undefined;
 		if (classifyMirrorToolCall(tool, args ?? {}, cwd, this.mirrorPath) !== "write") return undefined;
 		const check = this.validateMirror(this.store.readSync());
 		if (!check) return undefined;
@@ -545,6 +645,10 @@ export class ClmSession {
 		const revisions = join(this.store.directory, "revisions");
 		await mkdir(revisions, { recursive: true, mode: 0o700 }).catch(() => undefined);
 		await writeFile(join(revisions, `r${revision}.md`), text, { mode: 0o600 }).catch(() => undefined);
+		if (trace) {
+			await writeJsonAtomic(join(revisions, `r${revision}.json`), this.revisionFile(revision, at, baseline, result.messages, trace, sizes))
+				.catch((error: unknown) => this.log({ event: "revision-file-error", revision, error: describe(error) }));
+		}
 		const notes = result.diagnostics.length > 0 ? ` ${result.diagnostics.join(" ")}` : "";
 		this.pendingNotices.push(`[CLM] ${applied}${notes}`);
 		await this.log({
@@ -566,6 +670,101 @@ export class ClmSession {
 		});
 	}
 
+	/** `revisions/rN.json` for the panel: every row's full text and role before and after. */
+	private revisionFile(
+		revision: number,
+		at: string,
+		baseline: Baseline,
+		output: readonly LiveContextMessage[],
+		trace: ContextEditTrace,
+		sizes: { beforeEstimate: number; afterEstimate: number },
+	): RevisionFile {
+		const rows: RevisionFileRow[] = [];
+		const roleOf = (message: LiveContextMessage | undefined) => (message ? String(message.role) : "?");
+		for (const source of trace.sources) {
+			const before = baseline.snapshot.blocks[source.sourceIndex]?.source;
+			const after = source.outputIndex !== undefined ? output[source.outputIndex] : undefined;
+			const row: RevisionFileRow = { kind: source.kind, sourceIndex: source.sourceIndex, role: roleOf(after ?? before) };
+			if (source.outputIndex !== undefined) row.outputIndex = source.outputIndex;
+			if (before && after && roleOf(before) !== roleOf(after)) {
+				row.beforeRole = roleOf(before);
+				row.afterRole = roleOf(after);
+			}
+			if (before) row.beforeTokens = this.estimate([before]);
+			if (after && source.kind !== "removed") row.afterTokens = this.estimate([after]);
+			const beforeText = before ? renderMessage(before) : undefined;
+			const afterText = after && source.kind !== "removed" ? renderMessage(after) : undefined;
+			// Unchanged rows (kept, most restored) store their text once.
+			if (beforeText !== undefined && beforeText === afterText) row.text = beforeText;
+			else {
+				if (beforeText !== undefined) row.before = beforeText;
+				if (afterText !== undefined) row.after = afterText;
+			}
+			rows.push(row);
+		}
+		for (const addition of trace.additions) {
+			const after = output[addition.outputIndex];
+			rows.push({
+				kind: "added",
+				outputIndex: addition.outputIndex,
+				role: roleOf(after),
+				...(after ? { after: renderMessage(after), afterTokens: this.estimate([after]) } : {}),
+			});
+		}
+		return {
+			version: 1,
+			revision,
+			sourceRevision: trace.sourceRevision,
+			at,
+			beforeTokens: sizes.beforeEstimate,
+			afterTokens: sizes.afterEstimate,
+			rows,
+		};
+	}
+
+	/** `snapshot.json` for the panel: the request just built, replaced atomically. */
+	private snapshotFile(input: {
+		pinned: readonly LiveContextMessage[];
+		effective: readonly LiveContextMessage[];
+		sourceTokens: number;
+		raw: number;
+		sent: number;
+		suffix: number;
+		estimated: number;
+		observed?: number;
+	}): SnapshotFile | undefined {
+		const base = resolveBudget(this.settings.budget, this.limits.context, this.limits.output);
+		const resolved = this.resolvedBudget();
+		if (!base || !resolved) return undefined;
+		const shown = [...input.pinned, ...input.effective];
+		const steering = this.steering;
+		return {
+			at: new Date().toISOString(),
+			request: this.requests,
+			revision: this.state.revision,
+			enabled: this.enabled,
+			budget: { budget: base.budget, reserve: base.reserve, limit: overflowGuardLimit(resolved.budget, resolved.reserve), source: base.source },
+			calibration: { factor: this.calibrator.factor, samples: this.calibrator.sampleCount },
+			...(steering ? { steering: { name: steering.name, hash: steering.hash, path: steering.path } } : {}),
+			sizes: { estimated: input.estimated, ...(input.observed !== undefined ? { observedPrevious: input.observed } : {}) },
+			input: {
+				raw: input.raw,
+				sent: input.sent,
+				suffix: input.suffix,
+				rawTokens: input.sourceTokens,
+				effectiveTokens: this.estimate([...shown]),
+				messages: shown.map((message, index) => ({
+					index: index + 1,
+					role: String(message.role),
+					tokens: this.estimate([message]),
+					preview: renderMessage(message).replace(/\s+/g, " ").trim().slice(0, 120),
+				})),
+			},
+			...(this.state.budgetCheck ? { overhead: this.state.budgetCheck.overhead } : {}),
+			base: settingsAsOverrides(this.baseSettings) as Record<string, unknown>,
+		};
+	}
+
 	// ---- the transform -----------------------------------------------------------------
 
 	/** Transforms of one session run one at a time. */
@@ -583,7 +782,7 @@ export class ClmSession {
 
 	/** Text for `experimental.session.compacting`'s `output.context`: the instruction plus the active annotations. */
 	async compactionContext(): Promise<string | undefined> {
-		if (!this.settings.enabled || !this.state.enabled) return undefined;
+		if (!this.settings.enabled || !this.enabled) return undefined;
 		const continuity = formatContinuityMessage({ annotations: await this.loadAnnotations(), effectiveMessages: [] });
 		return continuity ? `${COMPACTION_INSTRUCTION}\n\n${continuity}` : COMPACTION_INSTRUCTION;
 	}
@@ -623,7 +822,8 @@ export class ClmSession {
 	}
 
 	private async transformNow(raw: OcMessage[]): Promise<TransformResult> {
-		if (!this.settings.enabled || !this.state.enabled) {
+		await this.refreshSettings();
+		if (!this.settings.enabled || !this.enabled) {
 			this.baseline = undefined;
 			this.compacting = false;
 			return { messages: raw, notices: [] };
@@ -654,6 +854,9 @@ export class ClmSession {
 		// Before the guard and the reading, so a raise applies to this request already.
 		const measured = this.state.budgetCheck?.source === "provider" ? undefined : this.measureOverhead(raw, observed);
 		const alert = measured ? await this.checkBudget(measured) : undefined;
+		// Samples taken before the overhead was measured read the unmeasured part of the
+		// overhead (built-in tool schemas) as undercounting; start calibration over.
+		if (measured?.source === "provider") this.calibrator.reset();
 
 		let projection = applyProjection(source, this.state.checkpoint);
 		// A late or repeated compaction signal must not swallow a later revert: rebase only
@@ -693,9 +896,15 @@ export class ClmSession {
 		const resolved = this.resolvedBudget();
 		const limit = resolved ? overflowGuardLimit(resolved.budget, resolved.reserve) : undefined;
 		// System prompt and tool schemas, when the hooks reported them (one request late).
+		// A provider-measured overhead replaces them: it is in real tokens, so it is not
+		// calibrated, and it includes the built-in tool schemas the hooks cannot size. The
+		// hook sizes stay a floor, since they count text that is certainly sent.
 		const { systemTokens, toolTokens } = this.scope;
-		const scopeTokens = this.calibrator.apply((systemTokens ?? 0) + (toolTokens ?? 0));
-		const excluded = [
+		const measuredOverhead = this.state.budgetCheck?.source === "provider"
+			? Math.max(this.state.budgetCheck.overhead, (systemTokens ?? 0) + (toolTokens ?? 0))
+			: undefined;
+		const scopeTokens = measuredOverhead ?? this.calibrator.apply((systemTokens ?? 0) + (toolTokens ?? 0));
+		const excluded = measuredOverhead !== undefined ? [] : [
 			...(systemTokens === undefined ? ["the system prompt"] : []),
 			...(toolTokens === undefined ? ["tool schemas"] : []),
 		];
@@ -786,11 +995,15 @@ export class ClmSession {
 		];
 
 		// Calibrate only against a same-scope estimate: the provider count includes the system
-		// prompt and tool schemas, so both sizes must be known.
-		if (systemTokens !== undefined && toolTokens !== undefined) {
-			const conversation = this.rawTokens(flatten(pinnedMessages)) + this.rawTokens(effective) +
-				(continuity ? this.textTokens(continuity) : 0) + this.noticeTokens(notices);
-			this.calibrator.record(systemTokens + toolTokens + conversation, raw.length);
+		// prompt and tool schemas. With a measured overhead the calibrator compares the
+		// conversation with the provider count minus that overhead; otherwise both hook sizes
+		// must be known.
+		const conversationRaw = this.rawTokens(flatten(pinnedMessages)) + this.rawTokens(effective) +
+			(continuity ? this.textTokens(continuity) : 0) + this.noticeTokens(notices);
+		if (measuredOverhead !== undefined) {
+			this.calibrator.record(conversationRaw, raw.length, measuredOverhead);
+		} else if (systemTokens !== undefined && toolTokens !== undefined) {
+			this.calibrator.record(systemTokens + toolTokens + conversationRaw, raw.length);
 		}
 
 		this.previousRequest = { rawCount: raw.length, conversation: conversationTokens + this.calibrator.apply(this.noticeTokens(notices)) };
@@ -800,16 +1013,33 @@ export class ClmSession {
 			await mkdir(directory, { recursive: true, mode: 0o700 }).catch(() => undefined);
 			await writeFile(join(directory, `n${this.requests}.json`), JSON.stringify(messages, null, 1), { mode: 0o600 }).catch(() => undefined);
 		}
+		const snapshotFile = this.snapshotFile({
+			pinned: flatten(pinnedMessages),
+			effective,
+			sourceTokens: pinnedTokens + this.estimate(source),
+			raw: raw.length,
+			sent: messages.length,
+			suffix: suffixLength,
+			estimated: reading?.estimated ?? requestTokens,
+			...(observed ? { observed: observed.tokens } : {}),
+		});
+		if (snapshotFile) {
+			await writeJsonAtomic(join(this.store.directory, SNAPSHOT_FILE), snapshotFile)
+				.catch((error: unknown) => this.log({ event: "snapshot-error", error: describe(error) }));
+		}
 		await this.log({
 			event: "request",
 			n: this.requests,
 			revision: this.state.revision,
+			users: raw.filter((message) => message.info.role === "user").length,
 			raw: raw.length,
 			sent: messages.length,
 			blocks: snapshot.blocks.length,
 			withheld: withheldCount,
 			estimated: reading?.estimated ?? requestTokens,
 			observedPrevious: observed?.tokens,
+			// The assistant message that reported `observedPrevious`; a new id means a new count.
+			observedMessage: observed?.messageID,
 			calibration: this.calibrator.factor,
 			notices: notices.map((notice) => notice.slice(0, 80)),
 		});
@@ -817,9 +1047,13 @@ export class ClmSession {
 	}
 
 	/** Inputs for presentation.ts `statusText` / `statusLine`. */
-	status(steering?: SteeringDocument): ClmStatus {
+	status(steering: SteeringDocument | undefined = this.steering): ClmStatus {
 		const checkpoint = this.state.checkpoint;
+		const { base, effective } = this.settingsValues();
+		const changed = changedSummary(base, effective, { modelWindow: this.limits.context });
 		return {
+			...(changed ? { changed } : {}),
+			...(this.settingsWarning ? { settingsWarning: this.settingsWarning } : {}),
 			sessionID: this.sessionID,
 			mirrorPath: this.mirrorPath,
 			revision: this.state.revision,

package/src/commands.ts

@@ -0,0 +1,18 @@
+// The slash commands the server plugin defines, shared with the TUI so its Enter intercept
+// can tell this package's `/clm` from a user's own. Written for this package.
+
+export const STATUS_COMMAND = "clm";
+export const COMPACT_COMMAND = "clm-compact";
+export const STATUS_TEMPLATE = "Show the CLM status. $ARGUMENTS";
+export const COMPACT_TEMPLATE = "Compact your context. $ARGUMENTS";
+
+/**
+ * True when the config's `command.clm` is not this package's: a user-defined `/clm` keeps
+ * its owner, as the server's config hook leaves it alone. Absent → ours (or none yet).
+ */
+export function userOwnsStatusCommand(commands: unknown): boolean {
+	if (!commands || typeof commands !== "object") return false;
+	const entry = (commands as Record<string, unknown>)[STATUS_COMMAND];
+	if (entry === undefined) return false;
+	return !(entry && typeof entry === "object" && (entry as { template?: unknown }).template === STATUS_TEMPLATE);
+}

package/src/mirror-store.ts

@@ -14,7 +14,7 @@ export function defaultMirrorParent(): string {
 	return join(stateHome, "opencode-clm", "mirrors");
 }
 
-function safeSessionId(sessionId: string): string {
+export function safeSessionId(sessionId: string): string {
 	const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, "-").slice(0, 64);
 	return safe || "session";
 }

package/src/overrides.ts

@@ -0,0 +1,193 @@
+/**
+ * Per-session settings changes on disk: `<session dir>/overrides.json` =
+ * `{ version: 1, overrides }`, holding only what differs from the base (the plugin options,
+ * environment and defaults; for `editing`, state.json's `enabled`). A separate file because
+ * state.json belongs to the server's save queue: the TUI writes this file and never state.json.
+ *
+ * Writers (the TUI panel, typed `/clm config` in the TUI, and the server's `/clm config`)
+ * all go through `changeSetting`: parse → merge → drop base-equal keys → stage (resolve the
+ * policies, load a steering document or compact prompt strictly) → write atomically. A
+ * change that fails any step is reported and not written. The server reads the file before
+ * each request (`ClmSession.refreshSettings`). Staging follows pi-clm src/index.ts
+ * `changeSetting` / `stageSettings` (MIT, Copyright 2026 Emanuel Casco); written for this package.
+ */
+import { readFile, stat } from "node:fs/promises";
+import { join } from "node:path";
+
+import { writeJsonAtomic } from "./atomic.ts";
+import { loadCompactPrompt } from "./compact.ts";
+import {
+	applyOverrides,
+	describeSetting,
+	mergeOverrides,
+	sanitizeOverrides,
+	settingDescriptor,
+	unknownSettingText,
+	type ClmOverrides,
+	type FormatContext,
+	type SettingsValues,
+} from "./settings-table.ts";
+import type { ClmSettings } from "./settings.ts";
+import { loadSteeringDocument, type SteeringDocument } from "./steering.ts";
+
+export const OVERRIDES_FILE = "overrides.json";
+export const OVERRIDES_VERSION = 1;
+
+export interface OverridesRead {
+	overrides: ClmOverrides;
+	/** Keys dropped as invalid, or a description of why the whole file was unusable. */
+	warning?: string;
+}
+
+export function overridesPath(sessionDirectory: string): string {
+	return join(sessionDirectory, OVERRIDES_FILE);
+}
+
+/** Reads and sanitizes overrides.json. Missing → no overrides. Never throws. */
+export async function readOverrides(sessionDirectory: string): Promise<OverridesRead> {
+	const path = overridesPath(sessionDirectory);
+	let text: string;
+	try {
+		text = await readFile(path, "utf8");
+	} catch (error) {
+		if ((error as NodeJS.ErrnoException)?.code === "ENOENT") return { overrides: {} };
+		return { overrides: {}, warning: `could not read ${path}: ${describe(error)}` };
+	}
+	return parseOverridesText(text, path);
+}
+
+export function parseOverridesText(text: string, path = OVERRIDES_FILE): OverridesRead {
+	let parsed: unknown;
+	try {
+		parsed = JSON.parse(text);
+	} catch (error) {
+		return { overrides: {}, warning: `${path} is not valid JSON (${describe(error)}); using the defaults` };
+	}
+	if (!parsed || typeof parsed !== "object" || (parsed as { version?: unknown }).version !== OVERRIDES_VERSION) {
+		return { overrides: {}, warning: `${path} has an unknown format; using the defaults` };
+	}
+	const { overrides, ignored } = sanitizeOverrides((parsed as { overrides?: unknown }).overrides);
+	return ignored.length > 0 ? { overrides, warning: `ignored invalid saved settings: ${ignored.join(", ")}` } : { overrides };
+}
+
+export async function writeOverrides(sessionDirectory: string, overrides: ClmOverrides): Promise<void> {
+	await writeJsonAtomic(overridesPath(sessionDirectory), { version: OVERRIDES_VERSION, overrides });
+}
+
+export interface StagedSettings {
+	settings: ClmSettings;
+	steering?: SteeringDocument;
+	/** Set when the steering document could not be loaded (non-strict staging only). */
+	steeringError?: string;
+}
+
+/**
+ * Resolves base + overrides without activating anything. Strict (an interactive change):
+ * a steering document or compact prompt that does not load rejects the change. Not strict
+ * (reading the file before a request): a steering failure is recorded and the session runs
+ * protocol-only. `loaded` reuses an already loaded document for the same path.
+ */
+export function stageSettings(
+	base: ClmSettings,
+	overrides: ClmOverrides,
+	options: { strict: boolean; loaded?: SteeringDocument },
+): StagedSettings {
+	const settings = applyOverrides(base, overrides);
+	const staged: StagedSettings = { settings };
+	const path = settings.steeringPath;
+	if (path) {
+		if (options.loaded && !options.strict && options.loaded.path === path) {
+			staged.steering = options.loaded;
+		} else {
+			try {
+				staged.steering = loadSteeringDocument(path);
+			} catch (error) {
+				if (options.strict) throw new Error(`steering document not loaded: ${describe(error)}`);
+				staged.steeringError = describe(error);
+			}
+		}
+	}
+	if (options.strict && settings.compactPromptPath && settings.compactPromptPath !== base.compactPromptPath) {
+		loadCompactPrompt(settings.compactPromptPath);
+	}
+	return staged;
+}
+
+export interface ChangeRequest {
+	/** The session directory (`<mirrorDir>/clm-<id>`). */
+	sessionDirectory: string;
+	/** Settings at load (options, environment, defaults). */
+	base: ClmSettings;
+	/** `editing` base: state.json's `enabled`. */
+	baseEditing: boolean;
+	/** Relative paths resolve against the project directory. */
+	projectDirectory: string;
+	format?: FormatContext;
+}
+
+export interface ChangeResult {
+	overrides: ClmOverrides;
+	values: SettingsValues;
+	/** `Budget: 20k`. */
+	text: string;
+}
+
+function valuesOf(base: ClmSettings, baseEditing: boolean, overrides: ClmOverrides, settings?: ClmSettings): SettingsValues {
+	return { editing: overrides.editing ?? baseEditing, settings: settings ?? applyOverrides(base, overrides) };
+}
+
+/**
+ * `/clm config <setting> <value>` and the panel's apply: validate, then write. Throws a
+ * user-facing message; nothing is written then.
+ */
+export async function changeSetting(request: ChangeRequest, name: string, text: string): Promise<ChangeResult> {
+	const descriptor = settingDescriptor(name);
+	if (!descriptor) throw new Error(unknownSettingText(name));
+	const parsed = descriptor.parse(text, { directory: request.projectDirectory });
+	const current = await readOverrides(request.sessionDirectory);
+	const baseValues = valuesOf(request.base, request.baseEditing, {}, request.base);
+	const overrides = mergeOverrides(baseValues, current.overrides, parsed);
+	const staged = stageSettings(request.base, overrides, { strict: true });
+	try {
+		await writeOverrides(request.sessionDirectory, overrides);
+	} catch (error) {
+		throw new Error(`Settings unchanged: saving ${overridesPath(request.sessionDirectory)} failed (${describe(error)}).`);
+	}
+	const values = valuesOf(request.base, request.baseEditing, overrides, staged.settings);
+	return { overrides, values, text: `${descriptor.label}: ${descriptor.format(values, request.format)}` };
+}
+
+/** `/clm config reset`: drop this session's changes. */
+export async function resetSettings(sessionDirectory: string): Promise<void> {
+	try {
+		await writeOverrides(sessionDirectory, {});
+	} catch (error) {
+		throw new Error(`Settings unchanged: saving ${overridesPath(sessionDirectory)} failed (${describe(error)}).`);
+	}
+}
+
+/**
+ * Current values of one session, read from its overrides.json (non-strict, never throws for
+ * bad files). `mtimeMs`: when overrides.json was last written, if it exists.
+ */
+export async function sessionValues(sessionDirectory: string, base: ClmSettings, baseEditing: boolean): Promise<{ values: SettingsValues; warning?: string; overrides: ClmOverrides; mtimeMs?: number }> {
+	const read = await readOverrides(sessionDirectory);
+	const mtimeMs = await stat(overridesPath(sessionDirectory)).then((info) => info.mtimeMs, () => undefined);
+	const at = mtimeMs !== undefined ? { mtimeMs } : {};
+	try {
+		return { values: valuesOf(base, baseEditing, read.overrides), overrides: read.overrides, ...(read.warning ? { warning: read.warning } : {}), ...at };
+	} catch (error) {
+		return { values: valuesOf(base, baseEditing, {}, base), overrides: {}, warning: `ignored saved settings: ${describe(error)}`, ...at };
+	}
+}
+
+/** `/clm config <setting>`: `Label: value — description`. */
+export function showSetting(name: string, values: SettingsValues, format?: FormatContext): string {
+	const descriptor = settingDescriptor(name);
+	if (!descriptor) throw new Error(unknownSettingText(name));
+	return describeSetting(descriptor, values, format);
+}
+
+function describe(error: unknown): string {
+	return error instanceof Error ? error.message : String(error);
+}