@namzu/sdk 58.1.0 → 59.0.0

package/CHANGELOG.md

@@ -1,5 +1,35 @@
 # Changelog
 
+## 59.0.0
+
+### Major Changes
+
+- 153dd6f: Breaking: a spent allowance is no longer retried, and two unions gain a member. `ProviderErrorCode` gains `usage_limit`, and the classifier now maps the codes `insufficient_quota`, `usage_limit_reached`, `usage_limit_exceeded` and `billing_error` to it, and a `ProviderRequestError` that names a spent allowance (by provider code, or by an exhausted credit balance or quota in its own words) is `usage_limit` and not retried, where these were a retryable `rate_limit`. A caller that retried or waited on `rate_limit` for a spent allowance now gets `usage_limit` and no retry: handle it by switching account or telling the user the allowance is spent. An exhaustive `switch` over `ProviderErrorCode`, or over `SessionRecord` types (which gains `account_bound`), needs a new case to keep compiling.
+
+  Also adds an account registry: several credentials for one provider, each session bound to one. `createAccountRegistry` keeps labelled API-key accounts (each with an optional endpoint and starting model) and private Codex-home accounts (the codex provider only) in a new `accounts.json` under `NAMZU_HOME`; today's sign-in is always the provider's `default` account and `credentials.json` and `api-keys.json` are read as before. A session log that contains `account_bound` is refused by earlier builds; a session that stays on the default account never writes one.
+
+### Minor Changes
+
+- 7a472bb: A live-session registry record can now carry five optional fields: `hostSlot`, `conversationId`, `account`, `limited` and `limitedUntil` (when a spent allowance is expected back). A spaces host uses them to match a terminal to its sidebar row and to show which conversation, account and allowance state it is on. Records without them are unchanged and still valid. A session started inside a spaces host writes them; a plain `namzu` session does not, so it stays visible to older builds. Builds before this release skip a record that carries any of them (they list the terminal as absent from `list_sessions` and peer messaging), so upgrade every build that shares a registry before starting a spaces host.
+
+### Patch Changes
+
+- ea5da1d: A tool-result guardrail's `halt` verdict now ends the turn instead of reaching the model as an ordinary failed tool result.
+
+  `ToolExecutor` caught every exception from a tool call and turned it into a failed result, including the `ToolResultHalted` that a `halt` verdict throws. The model then read it as a rejected call and tried another way, which is what `refuse` means and `halt` must not. The executor now lets `ToolResultHalted` through, so the turn stops with `stopReason: 'error'` and the model is not asked again.
+
+  This only affects hosts that configure a guardrail returning `{ action: 'halt' }`. Nothing to change unless you relied on a `halt` being retried; return `{ action: 'refuse' }` to keep that behaviour.
+
+- 153dd6f: A live-session registry record that carries a field this build does not know is now read instead of dropped, so a session started by a newer build stays visible to `list_sessions` in an older one. Writing a record is still strict.
+
+## 58.1.1
+
+### Patch Changes
+
+- 60ca139: Prevent bounded tool previews and delegated-agent activity rows from retaining the backing storage of much larger source strings. Visible text, output limits and retained full-output recovery are unchanged; copied previews preserve all UTF-16 code units.
+
+  Explain that repeated compaction refills can result from little reclaimed space even with small outputs. Suggest checking the model context window instead of diagnosing an oversized file from the refill count alone. The compaction safety limits remain unchanged.
+
 ## 58.1.0
 
 ### Minor Changes

package/dist/account/binding.d.ts

@@ -0,0 +1,20 @@
+import type { AccountBoundRecord } from '../types/session/records.js';
+import { type AccountId, type AccountRegistry } from './types.js';
+export type AccountBoundReason = AccountBoundRecord['reason'];
+/** The fields of an `account_bound` record that a writer supplies; the log adds the envelope. */
+export declare function accountBoundPayload(id: AccountId, provider: string, reason: AccountBoundReason): Pick<AccountBoundRecord, 'type' | 'accountId' | 'provider' | 'reason'>;
+export interface BoundAccount {
+    readonly accountId: AccountId;
+    /** The recorded account was removed; the session continues on `<provider>:default`. */
+    readonly fellBack: boolean;
+}
+/**
+ * The account a session continues under, from its replayed records: the last
+ * `account_bound` for `provider`, else that provider's `default`. When the
+ * recorded account has since been removed the result is the default with
+ * `fellBack` set, so the caller can say so and append a `user_switch` record.
+ */
+export declare function resolveBoundAccount(records: readonly {
+    readonly type: string;
+}[], provider: string, registry: Pick<AccountRegistry, 'get'>): BoundAccount;
+//# sourceMappingURL=binding.d.ts.map

package/dist/account/binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.d.ts","sourceRoot":"","sources":["../../src/account/binding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAErE,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,eAAe,EAAyB,MAAM,YAAY,CAAA;AAExF,MAAM,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;AAE7D,iGAAiG;AACjG,wBAAgB,mBAAmB,CAClC,EAAE,EAAE,SAAS,EACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,kBAAkB,GACxB,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,WAAW,GAAG,UAAU,GAAG,QAAQ,CAAC,CAExE;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;IAC7B,uFAAuF;IACvF,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAC1B;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAClC,OAAO,EAAE,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,EAC7C,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,GACpC,YAAY,CAWd"}

package/dist/account/binding.js

@@ -0,0 +1,27 @@
+import { accountId } from './registry.js';
+import { DEFAULT_ACCOUNT_LABEL } from './types.js';
+/** The fields of an `account_bound` record that a writer supplies; the log adds the envelope. */
+export function accountBoundPayload(id, provider, reason) {
+    return { type: 'account_bound', accountId: id, provider, reason };
+}
+/**
+ * The account a session continues under, from its replayed records: the last
+ * `account_bound` for `provider`, else that provider's `default`. When the
+ * recorded account has since been removed the result is the default with
+ * `fellBack` set, so the caller can say so and append a `user_switch` record.
+ */
+export function resolveBoundAccount(records, provider, registry) {
+    const fallback = accountId(provider, DEFAULT_ACCOUNT_LABEL);
+    let last;
+    for (const record of records) {
+        if (record.type === 'account_bound' && record.provider === provider) {
+            last = record;
+        }
+    }
+    if (!last)
+        return { accountId: fallback, fellBack: false };
+    if (registry.get(last.accountId))
+        return { accountId: last.accountId, fellBack: false };
+    return { accountId: fallback, fellBack: last.accountId !== fallback };
+}
+//# sourceMappingURL=binding.js.map

package/dist/account/binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.js","sourceRoot":"","sources":["../../src/account/binding.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AACzC,OAAO,EAAwC,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAIxF,iGAAiG;AACjG,MAAM,UAAU,mBAAmB,CAClC,EAAa,EACb,QAAgB,EAChB,MAA0B;IAE1B,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;AAClE,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAClC,OAA6C,EAC7C,QAAgB,EAChB,QAAsC;IAEtC,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAA;IAC3D,IAAI,IAAoC,CAAA;IACxC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,IAAK,MAA6B,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC7F,IAAI,GAAG,MAA4B,CAAA;QACpC,CAAC;IACF,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;IAC1D,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;IACvF,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAA;AACtE,CAAC"}

package/dist/account/index.d.ts

@@ -0,0 +1,9 @@
+export { ACCOUNTS_FILE_NAME, ACCOUNTS_FILE_VERSION, accountId, createAccountRegistry, parseAccountId, } from './registry.js';
+export type { AccountRegistryOptions } from './registry.js';
+export { codexRefreshLockPath, withAccountLock, withAccountLockSync, withAccountRefreshLock, } from './lock.js';
+export type { AccountLockOptions, AccountLockSyncOptions } from './lock.js';
+export { accountBoundPayload, resolveBoundAccount } from './binding.js';
+export type { AccountBoundReason, BoundAccount } from './binding.js';
+export { AccountLockError, AccountRegistryError, CredentialWithdrawnError, DEFAULT_ACCOUNT_LABEL, } from './types.js';
+export type { Account, AccountCredentialReaders, AccountId, AccountRegistry, AccountSource, NewAccount, ResolvedAccountCredential, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/account/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/account/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,kBAAkB,EAClB,qBAAqB,EACrB,SAAS,EACT,qBAAqB,EACrB,cAAc,GACd,MAAM,eAAe,CAAA;AACtB,YAAY,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAC3D,OAAO,EACN,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,sBAAsB,GACtB,MAAM,WAAW,CAAA;AAClB,YAAY,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAA;AAC3E,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AACvE,YAAY,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AACpE,OAAO,EACN,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,GACrB,MAAM,YAAY,CAAA;AACnB,YAAY,EACX,OAAO,EACP,wBAAwB,EACxB,SAAS,EACT,eAAe,EACf,aAAa,EACb,UAAU,EACV,yBAAyB,GACzB,MAAM,YAAY,CAAA"}

package/dist/account/index.js

@@ -0,0 +1,5 @@
+export { ACCOUNTS_FILE_NAME, ACCOUNTS_FILE_VERSION, accountId, createAccountRegistry, parseAccountId, } from './registry.js';
+export { codexRefreshLockPath, withAccountLock, withAccountLockSync, withAccountRefreshLock, } from './lock.js';
+export { accountBoundPayload, resolveBoundAccount } from './binding.js';
+export { AccountLockError, AccountRegistryError, CredentialWithdrawnError, DEFAULT_ACCOUNT_LABEL, } from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/account/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/account/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,kBAAkB,EAClB,qBAAqB,EACrB,SAAS,EACT,qBAAqB,EACrB,cAAc,GACd,MAAM,eAAe,CAAA;AAEtB,OAAO,EACN,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,sBAAsB,GACtB,MAAM,WAAW,CAAA;AAElB,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAEvE,OAAO,EACN,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,GACrB,MAAM,YAAY,CAAA"}

package/dist/account/lock.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The lock file beside a Codex account's `auth.json`. One lock per account
+ * directory, so a stuck account never blocks another.
+ */
+export declare function codexRefreshLockPath(dir: string): string;
+export interface AccountLockOptions {
+    /** How many times to try before refusing. Default 1: a held lock is refused at once. */
+    readonly attempts?: number;
+    /** Waits between attempts; injected so a test never depends on the clock. */
+    readonly wait?: (attempt: number) => Promise<void>;
+}
+/**
+ * Run `operation` while holding the lock file at `lockPath`. The lock is held
+ * across local read/write work, never across a user prompt. A lock whose
+ * recorded process has exited is reclaimed; a lock held by a live process is a
+ * refusal (or a wait, when attempts and a wait function are given).
+ */
+export declare function withAccountLock<T>(lockPath: string, operation: () => Promise<T> | T, options?: AccountLockOptions): Promise<T>;
+export interface AccountLockSyncOptions {
+    /** How many times to try before refusing. Default 1. */
+    readonly attempts?: number;
+    /** Blocks between attempts; injected so a test never depends on the clock. */
+    readonly wait?: (attempt: number) => void;
+}
+/** Synchronous form for short store mutations. */
+export declare function withAccountLockSync<T>(lockPath: string, operation: () => T, options?: AccountLockSyncOptions): T;
+/**
+ * Serialise a Codex account's read-refresh-write. A reader that implements
+ * `AccountCredentialReaders.codexHome` takes this around the whole cycle and
+ * compares the file's tokens with what it read before writing back.
+ */
+export declare function withAccountRefreshLock<T>(dir: string, operation: () => Promise<T> | T, options?: AccountLockOptions): Promise<T>;
+//# sourceMappingURL=lock.d.ts.map

package/dist/account/lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.d.ts","sourceRoot":"","sources":["../../src/account/lock.ts"],"names":[],"mappings":"AAKA;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,MAAM,WAAW,kBAAkB;IAClC,wFAAwF;IACxF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAClD;AAoGD;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,CAAC,EACtC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAC/B,OAAO,GAAE,kBAAuB,GAC9B,OAAO,CAAC,CAAC,CAAC,CAcZ;AAED,MAAM,WAAW,sBAAsB;IACtC,wDAAwD;IACxD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CACzC;AAED,kDAAkD;AAClD,wBAAgB,mBAAmB,CAAC,CAAC,EACpC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,CAAC,EAClB,OAAO,GAAE,sBAA2B,GAClC,CAAC,CAcH;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EACvC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAC/B,OAAO,GAAE,kBAAuB,GAC9B,OAAO,CAAC,CAAC,CAAC,CAEZ"}

package/dist/account/lock.js

@@ -0,0 +1,170 @@
+import { randomBytes } from 'node:crypto';
+import { closeSync, mkdirSync, openSync, readFileSync, rmSync, writeSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { AccountLockError } from './types.js';
+/**
+ * The lock file beside a Codex account's `auth.json`. One lock per account
+ * directory, so a stuck account never blocks another.
+ */
+export function codexRefreshLockPath(dir) {
+    return join(dir, 'auth.json.namzu.lock');
+}
+function acquire(lockPath) {
+    const token = `${process.pid}:${Date.now()}:${randomBytes(12).toString('hex')}`;
+    mkdirSync(dirname(lockPath), { recursive: true, mode: 0o700 });
+    for (let pass = 0; pass < 2; pass++) {
+        let fd;
+        try {
+            fd = openSync(lockPath, 'wx', 0o600);
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST')
+                throw error;
+            if (pass === 0 && reclaimIfStale(lockPath))
+                continue;
+            return undefined;
+        }
+        try {
+            writeSync(fd, token);
+        }
+        finally {
+            closeSync(fd);
+        }
+        return token;
+    }
+    return undefined;
+}
+function pidOf(token) {
+    const pid = Number.parseInt(token.split(':', 1)[0] ?? '', 10);
+    return Number.isInteger(pid) && pid > 0 ? pid : undefined;
+}
+function processIsDead(pid) {
+    try {
+        process.kill(pid, 0);
+        return false;
+    }
+    catch (error) {
+        // EPERM means the process exists but belongs to someone else: alive.
+        return error.code === 'ESRCH';
+    }
+}
+/**
+ * Remove a lock whose recorded owner process no longer exists. Reclaimers are
+ * serialised by a guard file, and the lock is re-read under the guard, so a
+ * lock that was replaced by a live owner in the meantime is never removed.
+ */
+function reclaimIfStale(lockPath) {
+    let observed;
+    try {
+        observed = readFileSync(lockPath, 'utf8');
+    }
+    catch {
+        return true; // already gone; the caller may simply try again
+    }
+    const pid = pidOf(observed);
+    if (pid === undefined || !processIsDead(pid))
+        return false;
+    const guard = `${lockPath}.reclaim`;
+    let fd;
+    try {
+        fd = openSync(guard, 'wx', 0o600);
+    }
+    catch (error) {
+        if (error.code !== 'EEXIST')
+            throw error;
+        try {
+            const holder = pidOf(readFileSync(guard, 'utf8'));
+            if (holder !== undefined && processIsDead(holder))
+                rmSync(guard, { force: true });
+        }
+        catch {
+            // The guard vanished or is unreadable; the next attempt decides.
+        }
+        return false;
+    }
+    try {
+        writeSync(fd, `${process.pid}`);
+        closeSync(fd);
+        let again;
+        try {
+            again = readFileSync(lockPath, 'utf8');
+        }
+        catch {
+            return true;
+        }
+        if (again !== observed)
+            return false;
+        rmSync(lockPath, { force: true });
+        return true;
+    }
+    finally {
+        rmSync(guard, { force: true });
+    }
+}
+function release(lockPath, token) {
+    // Never remove a successor's lock if something else replaced the file.
+    try {
+        if (readFileSync(lockPath, 'utf8') === token)
+            rmSync(lockPath, { force: true });
+    }
+    catch {
+        // The work already has its result; a missing lock is not its failure.
+    }
+}
+function refusal(lockPath) {
+    return new AccountLockError(lockPath, `another owner holds the account lock ${lockPath}. The lock is reclaimed on its own when the process that recorded it has exited; if that process is still running, wait for it to finish.`);
+}
+/**
+ * Run `operation` while holding the lock file at `lockPath`. The lock is held
+ * across local read/write work, never across a user prompt. A lock whose
+ * recorded process has exited is reclaimed; a lock held by a live process is a
+ * refusal (or a wait, when attempts and a wait function are given).
+ */
+export async function withAccountLock(lockPath, operation, options = {}) {
+    const attempts = Math.max(1, options.attempts ?? 1);
+    let token;
+    for (let attempt = 0; attempt < attempts; attempt++) {
+        token = acquire(lockPath);
+        if (token !== undefined)
+            break;
+        if (attempt + 1 < attempts && options.wait)
+            await options.wait(attempt);
+    }
+    if (token === undefined)
+        throw refusal(lockPath);
+    try {
+        return await operation();
+    }
+    finally {
+        release(lockPath, token);
+    }
+}
+/** Synchronous form for short store mutations. */
+export function withAccountLockSync(lockPath, operation, options = {}) {
+    const attempts = Math.max(1, options.attempts ?? 1);
+    let token;
+    for (let attempt = 0; attempt < attempts; attempt++) {
+        token = acquire(lockPath);
+        if (token !== undefined)
+            break;
+        if (attempt + 1 < attempts && options.wait)
+            options.wait(attempt);
+    }
+    if (token === undefined)
+        throw refusal(lockPath);
+    try {
+        return operation();
+    }
+    finally {
+        release(lockPath, token);
+    }
+}
+/**
+ * Serialise a Codex account's read-refresh-write. A reader that implements
+ * `AccountCredentialReaders.codexHome` takes this around the whole cycle and
+ * compares the file's tokens with what it read before writing back.
+ */
+export function withAccountRefreshLock(dir, operation, options = {}) {
+    return withAccountLock(codexRefreshLockPath(dir), operation, options);
+}
+//# sourceMappingURL=lock.js.map

package/dist/account/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../src/account/lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACzF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAE7C;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC/C,OAAO,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAA;AACzC,CAAC;AASD,SAAS,OAAO,CAAC,QAAgB;IAChC,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAA;IAC/E,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9D,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;QACrC,IAAI,EAAU,CAAA;QACd,IAAI,CAAC;YACJ,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;YACnE,IAAI,IAAI,KAAK,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC;gBAAE,SAAQ;YACpD,OAAO,SAAS,CAAA;QACjB,CAAC;QACD,IAAI,CAAC;YACJ,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;QACrB,CAAC;gBAAS,CAAC;YACV,SAAS,CAAC,EAAE,CAAC,CAAA;QACd,CAAC;QACD,OAAO,KAAK,CAAA;IACb,CAAC;IACD,OAAO,SAAS,CAAA;AACjB,CAAC;AAED,SAAS,KAAK,CAAC,KAAa;IAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;IAC7D,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1D,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IACjC,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QACpB,OAAO,KAAK,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,qEAAqE;QACrE,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAA;IACzD,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,QAAgB;IACvC,IAAI,QAAgB,CAAA;IACpB,IAAI,CAAC;QACJ,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC1C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAA,CAAC,gDAAgD;IAC7D,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC3B,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IAC1D,MAAM,KAAK,GAAG,GAAG,QAAQ,UAAU,CAAA;IACnC,IAAI,EAAU,CAAA;IACd,IAAI,CAAC;QACJ,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;QACnE,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;YACjD,IAAI,MAAM,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,CAAC;gBAAE,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAClF,CAAC;QAAC,MAAM,CAAC;YACR,iEAAiE;QAClE,CAAC;QACD,OAAO,KAAK,CAAA;IACb,CAAC;IACD,IAAI,CAAC;QACJ,SAAS,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;QAC/B,SAAS,CAAC,EAAE,CAAC,CAAA;QACb,IAAI,KAAyB,CAAA;QAC7B,IAAI,CAAC;YACJ,KAAK,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QACvC,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAA;QACZ,CAAC;QACD,IAAI,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QACpC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACjC,OAAO,IAAI,CAAA;IACZ,CAAC;YAAS,CAAC;QACV,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/B,CAAC;AACF,CAAC;AAED,SAAS,OAAO,CAAC,QAAgB,EAAE,KAAa;IAC/C,uEAAuE;IACvE,IAAI,CAAC;QACJ,IAAI,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,KAAK;YAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAChF,CAAC;IAAC,MAAM,CAAC;QACR,sEAAsE;IACvE,CAAC;AACF,CAAC;AAED,SAAS,OAAO,CAAC,QAAgB;IAChC,OAAO,IAAI,gBAAgB,CAC1B,QAAQ,EACR,wCAAwC,QAAQ,2IAA2I,CAC3L,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,QAAgB,EAChB,SAA+B,EAC/B,UAA8B,EAAE;IAEhC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAA;IACnD,IAAI,KAAyB,CAAA;IAC7B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;QACrD,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;QACzB,IAAI,KAAK,KAAK,SAAS;YAAE,MAAK;QAC9B,IAAI,OAAO,GAAG,CAAC,GAAG,QAAQ,IAAI,OAAO,CAAC,IAAI;YAAE,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAA;IAChD,IAAI,CAAC;QACJ,OAAO,MAAM,SAAS,EAAE,CAAA;IACzB,CAAC;YAAS,CAAC;QACV,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IACzB,CAAC;AACF,CAAC;AASD,kDAAkD;AAClD,MAAM,UAAU,mBAAmB,CAClC,QAAgB,EAChB,SAAkB,EAClB,UAAkC,EAAE;IAEpC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAA;IACnD,IAAI,KAAyB,CAAA;IAC7B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;QACrD,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;QACzB,IAAI,KAAK,KAAK,SAAS;YAAE,MAAK;QAC9B,IAAI,OAAO,GAAG,CAAC,GAAG,QAAQ,IAAI,OAAO,CAAC,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAClE,CAAC;IACD,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAA;IAChD,IAAI,CAAC;QACJ,OAAO,SAAS,EAAE,CAAA;IACnB,CAAC;YAAS,CAAC;QACV,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IACzB,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACrC,GAAW,EACX,SAA+B,EAC/B,UAA8B,EAAE;IAEhC,OAAO,eAAe,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;AACtE,CAAC"}

package/dist/account/registry.d.ts

@@ -0,0 +1,21 @@
+import { type AccountCredentialReaders, type AccountId, type AccountRegistry } from './types.js';
+export declare const ACCOUNTS_FILE_NAME = "accounts.json";
+export declare const ACCOUNTS_FILE_VERSION = 1;
+export interface AccountRegistryOptions {
+    /** The Namzu home. Defaults to `resolveNamzuHome()`. */
+    readonly home?: string;
+    /** Providers that always have a synthesised `default` account, even with no stored one. */
+    readonly defaultProviders?: readonly string[];
+    readonly readers?: AccountCredentialReaders;
+    readonly now?: () => Date;
+    /** Blocks between attempts to take the store lock. Defaults to a short real sleep. */
+    readonly lockWait?: (attempt: number) => void;
+}
+export declare function accountId(provider: string, label: string): AccountId;
+/** Split an id into provider and label, or `undefined` if it is not shaped `<provider>:<label>`. */
+export declare function parseAccountId(id: string): {
+    provider: string;
+    label: string;
+} | undefined;
+export declare function createAccountRegistry(options?: AccountRegistryOptions): AccountRegistry;
+//# sourceMappingURL=registry.d.ts.map

package/dist/account/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/account/registry.ts"],"names":[],"mappings":"AAkBA,OAAO,EAEN,KAAK,wBAAwB,EAC7B,KAAK,SAAS,EACd,KAAK,eAAe,EAOpB,MAAM,YAAY,CAAA;AAEnB,eAAO,MAAM,kBAAkB,kBAAkB,CAAA;AACjD,eAAO,MAAM,qBAAqB,IAAI,CAAA;AA+BtC,MAAM,WAAW,sBAAsB;IACtC,wDAAwD;IACxD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,2FAA2F;IAC3F,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,wBAAwB,CAAA;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;IACzB,sFAAsF;IACtF,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CAC7C;AAMD,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,CAEpE;AAED,oGAAoG;AACpG,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAI1F;AAuBD,wBAAgB,qBAAqB,CAAC,OAAO,GAAE,sBAA2B,GAAG,eAAe,CA8S3F"}