@thelioo/opencode-balancer 0.1.0 → 0.1.4

package/INSTALL.txt

@@ -4,7 +4,7 @@ Goal
 Install @thelioo/opencode-balancer as an opencode npm plugin without removing or rewriting the user's existing opencode configuration.
 
 What this plugin does
-opencode-balancer lets opencode users save multiple authenticated accounts per provider, switch active accounts with /balancer commands, and automatically retry with another saved account when the active account is rate-limited.
+opencode-balancer lets opencode users save multiple authenticated accounts per provider, switch active accounts from the Balancer TUI sidebar/dashboard, and automatically retry with another saved account when the active account is rate-limited.
 
 Important rules
 - Do not run npm install for this plugin. opencode installs npm plugins automatically with Bun at startup.
@@ -41,18 +41,27 @@ Expected config shape
 }
 
 After restart
-The user can connect and save accounts with:
-/connect anthropic
-/balancer alias work
+1. Tell the user to run opencode's native connect flow:
+   /connect <provider>
 
-Useful commands
+2. Tell the user to use the Balancer TUI modal/sidebar to save the detected pending connection with an alias.
+
+3. If the Balancer dashboard is not visible, tell the user to open it from the opencode command palette.
+
+4. Remind the user to restart opencode after any later config changes.
+
+Security note
+The plugin stores saved provider credentials locally in balancer.sqlite under the opencode config directory, usually ~/.config/opencode/balancer.sqlite or OPENCODE_CONFIG_DIR/balancer.sqlite. Keep this file private and never commit, paste, or share it.
+
+Fallback commands
+/balancer commands are compatibility and troubleshooting fallbacks. Alias creation is handled by the TUI pending-connection flow.
 /balancer help
 /balancer list
 /balancer status
 /balancer use <provider> <alias>
-/balancer remove <provider> <alias>
+/balancer active <provider>
 
 Verification
 - Confirm the opencode config contains @thelioo/opencode-balancer@latest in the plugin array.
 - Confirm no existing plugin entries were removed.
-- Remind the user that opencode must be restarted before /balancer becomes available.
+- Remind the user that opencode must be restarted before the plugin UI and fallback commands become available.

package/README.md

@@ -9,13 +9,13 @@ _Use multiple accounts per opencode provider and switch automatically when one h
 [![opencode plugin](https://img.shields.io/badge/opencode-plugin-111?style=flat-square)](https://opencode.ai/docs/plugins)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow?style=flat-square)](LICENSE)
 
-[Features](#features) | [Installation](#installation) | [Usage](#usage) | [Commands](#commands) | [Troubleshooting](#troubleshooting)
+[Features](#features) | [Installation](#installation) | [Usage](#usage) | [Fallback Commands](#fallback-commands) | [Troubleshooting](#troubleshooting)
 
 </div>
 
 `opencode-balancer` is an [opencode](https://opencode.ai/) plugin that lets you save multiple authenticated accounts for the same provider, give each one a friendly alias, and keep working when the active account becomes rate-limited.
 
-It works with opencode's existing auth flow: connect a provider, save the detected credentials as an alias, then let the plugin inject the active account credentials into future model requests.
+It works with opencode's existing auth flow: connect a provider, save the detected credentials from the Balancer TUI, then let the plugin inject the active account credentials into future model requests.
 
 > [!NOTE]
 > This plugin manages credentials already configured through opencode. It does not create accounts, bypass provider limits, or modify provider-side quotas.
@@ -24,10 +24,10 @@ It works with opencode's existing auth flow: connect a provider, save the detect
 
 - **Multiple accounts per provider**: Save aliases like `work`, `personal`, or `backup` for the same provider.
 - **Automatic failover**: Switches to another saved account on retryable rate-limit/server responses.
-- **Native opencode commands**: Adds `/balancer` directly inside opencode.
-- **OAuth-friendly setup**: Adds an optional alias prompt to provider OAuth flows.
+- **TUI-first account management**: Save aliases, switch accounts, and inspect pending connections from the Balancer sidebar/dashboard.
+- **OAuth-friendly setup**: Uses opencode's native `/connect` flow, then prompts you to save the detected credentials in the TUI.
 - **Agent tool support**: Exposes a `balancer_command` tool so opencode agents can manage accounts when asked.
-- **Local credential store**: Saves account metadata under your opencode config directory.
+- **Local credential store**: Saves account credentials and status data under your opencode config directory.
 
 ## Installation
 
@@ -62,60 +62,39 @@ Then restart opencode.
 
 ### Save Your First Account
 
-Connect a provider as usual:
+Connect a provider with opencode's native flow:
 
 ```text
 /connect anthropic
 ```
 
-After the connection is detected, save it with an alias:
-
-```text
-/balancer alias work
-```
+After the connection is detected, use the Balancer TUI modal or sidebar to save it with an alias such as `work`.
 
 ### Add Another Account
 
-Connect the same provider with a different account, then save it:
+Connect the same provider with a different account, then save the new pending connection from the Balancer TUI:
 
 ```text
 /connect anthropic
-/balancer alias personal
-```
-
-### Switch Accounts Manually
-
-```text
-/balancer use anthropic work
 ```
 
-### List Saved Accounts
+### Manage Accounts
 
-```text
-/balancer list
-```
-
-Example output:
-
-```text
-anthropic:
-  * work (oauth, healthy)
-    personal (oauth, healthy)
-```
+Use the Balancer sidebar or dashboard to switch accounts, view usage, and review pending connections. If the dashboard is not visible, open it from opencode's command palette.
 
 When the active account receives a retryable response such as `429`, `500`, `502`, `503`, `504`, or `529`, the plugin marks it as temporarily rate-limited and retries with another available account for the same provider.
 
-## Commands
+## Fallback Commands
+
+`opencode-balancer` is TUI-first. `/balancer` commands are compatibility and troubleshooting fallbacks, not the primary account management workflow. Alias creation is intentionally handled by the TUI pending-connection flow.
 
 | Command | Description |
 | --- | --- |
-| `/balancer help` | Show available commands. |
-| `/balancer alias <name>` | Save the last detected connection with an alias. |
-| `/balancer save <provider> <name>` | Save the provider's current native credentials. |
-| `/balancer use <provider> <name>` | Switch the active account for a provider. |
-| `/balancer list` | List saved accounts. |
-| `/balancer status` | Show saved accounts, last capture, and storage path. |
-| `/balancer remove <provider> <name>` | Remove a saved account. |
+| `/balancer help` | Show fallback commands. |
+| `/balancer list` | List saved accounts as `provider/alias`. |
+| `/balancer status` | Show saved and pending counts. |
+| `/balancer use <provider> <alias>` | Switch the active account for a provider. |
+| `/balancer active <provider>` | Show the active account for a provider. |
 
 Aliases are normalized to lowercase and may contain letters, numbers, dots, hyphens, and underscores.
 
@@ -123,15 +102,15 @@ Aliases are normalized to lowercase and may contain letters, numbers, dots, hyph
 
 `opencode-balancer` hooks into opencode's plugin lifecycle and request flow:
 
-1. It watches opencode auth changes and records the last detected provider credentials.
-2. `/balancer alias <name>` stores those credentials under a provider-specific alias.
+1. It watches opencode auth changes and records detected provider credentials as pending connections.
+2. The Balancer TUI saves pending connections under provider-specific aliases.
 3. Before model requests, the plugin selects the active account for the request provider.
 4. If the provider returns a retryable rate-limit or server response, the plugin marks the account as temporarily unavailable and retries with another saved account.
 
 Saved account data is written to:
 
 ```text
-~/.config/opencode/balancer-accounts.json
+~/.config/opencode/balancer.sqlite
 ```
 
 If `OPENCODE_CONFIG_DIR` is set, the plugin uses that directory instead.
@@ -161,9 +140,9 @@ To test a local checkout with opencode, point your config to the package directo
 | --- | --- |
 | Plugin does not load | Confirm `plugin` is singular, restart opencode, and check that the package name is `@thelioo/opencode-balancer@latest`. |
 | `/balancer` is unavailable | Restart opencode after editing the config. |
-| No connection detected | Run `/connect <provider>` first, then `/balancer alias <name>`. |
-| Account is not switching | Run `/balancer list` and confirm there is another healthy account for the same provider. |
-| Need to inspect storage | Run `/balancer status` to see the account store path. |
+| No connection detected | Run `/connect <provider>` first, then save the pending connection from the Balancer TUI modal/sidebar. |
+| Account is not switching | Open the Balancer sidebar/dashboard and confirm there is another saved account for the same provider. |
+| Need command-line fallback | Run `/balancer help` for compatibility commands. |
 
 ## Resources
 

package/dist/core/accounts.d.ts

@@ -0,0 +1,14 @@
+import type { Database } from "bun:sqlite";
+import type { Account, AuthInfo, SelectedModel } from "./types";
+export declare function normalizeAlias(alias: string): string;
+export declare function saveAccount(db: Database, providerID: string, aliasInput: string, auth: AuthInfo): Account;
+export declare function updateAccountAuth(db: Database, providerID: string, aliasInput: string, auth: AuthInfo): Account | undefined;
+export declare function renameAccount(db: Database, providerID: string, fromAliasInput: string, toAliasInput: string): Account;
+export declare function getAccount(db: Database, providerID: string, alias: string): Account | undefined;
+export declare function listAccounts(db: Database, providerID?: string): Account[];
+export declare function setActiveAccount(db: Database, providerID: string, alias: string): Account;
+export declare function removeAccount(db: Database, providerID: string, alias: string): boolean;
+export declare function getActiveAccount(db: Database, providerID: string): Account | undefined;
+export declare function getSelectedAccount(db: Database): Account | undefined;
+export declare function setSelectedModel(db: Database, providerID: string, modelID: string): SelectedModel;
+export declare function getSelectedModel(db: Database, providerID: string): SelectedModel | undefined;

package/dist/core/accounts.js

@@ -0,0 +1,260 @@
+import { now } from "./time";
+const authTypes = ["api", "oauth", "wellknown"];
+export function normalizeAlias(alias) {
+    return alias
+        .trim()
+        .toLowerCase()
+        .replace(/[^a-z0-9._-]+/g, "-")
+        .replace(/^-+|-+$/g, "");
+}
+function accountRowID(row) {
+    return `${row.provider_id}/${row.alias}`;
+}
+function isAuthType(value) {
+    return authTypes.includes(value);
+}
+function parseAccountAuth(row) {
+    const id = accountRowID(row);
+    let auth;
+    try {
+        auth = JSON.parse(row.auth_json);
+    }
+    catch {
+        throw new Error(`Invalid account row for ${id}: auth_json is invalid`);
+    }
+    if (!auth || typeof auth !== "object" || !("type" in auth) || typeof auth.type !== "string") {
+        throw new Error(`Invalid account row for ${id}: auth_json type is invalid`);
+    }
+    if (!isAuthType(auth.type)) {
+        throw new Error(`Invalid account row for ${id}: auth_json type ${auth.type} is invalid`);
+    }
+    return auth;
+}
+function validateAccountAuthType(row) {
+    if (!isAuthType(row.auth_type)) {
+        throw new Error(`Invalid account row for ${accountRowID(row)}: auth_type ${row.auth_type} is invalid`);
+    }
+    return row.auth_type;
+}
+function validateDisabled(row) {
+    if (row.disabled !== 0 && row.disabled !== 1) {
+        throw new Error(`Invalid account row for ${accountRowID(row)}: disabled ${row.disabled} is invalid`);
+    }
+    return Boolean(row.disabled);
+}
+function accountFromRow(row) {
+    const auth = parseAccountAuth(row);
+    const authType = validateAccountAuthType(row);
+    if (auth.type !== authType) {
+        throw new Error(`Invalid account row for ${accountRowID(row)}: auth_type ${authType} does not match auth_json type ${auth.type}`);
+    }
+    return {
+        providerID: row.provider_id,
+        alias: row.alias,
+        auth,
+        authType,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+        lastUsedAt: row.last_used_at ?? undefined,
+        rateLimitedUntil: row.rate_limited_until ?? undefined,
+        failures: row.failures,
+        disabled: validateDisabled(row),
+    };
+}
+function setActiveAlias(db, providerID, alias) {
+    db.query(`INSERT INTO provider_state (provider_id, active_alias, updated_at, metadata_json)
+         VALUES (?, ?, ?, '{}')
+         ON CONFLICT(provider_id) DO UPDATE SET
+             active_alias = excluded.active_alias,
+             updated_at = excluded.updated_at`).run(providerID, alias, now());
+    db.query(`INSERT INTO settings (key, value) VALUES ('selected_provider_id', ?)
+         ON CONFLICT(key) DO UPDATE SET value = excluded.value`).run(providerID);
+}
+function parseMetadataJson(value) {
+    if (!value)
+        return {};
+    try {
+        const metadata = JSON.parse(value);
+        return metadata && typeof metadata === "object" && !Array.isArray(metadata) ? metadata : {};
+    }
+    catch {
+        return {};
+    }
+}
+export function saveAccount(db, providerID, aliasInput, auth) {
+    const alias = normalizeAlias(aliasInput);
+    if (!alias)
+        throw new Error("Invalid alias");
+    const save = db.transaction(() => {
+        const timestamp = now();
+        db.query(`INSERT INTO accounts (
+                 provider_id,
+                 alias,
+                 auth_json,
+                 auth_type,
+                 created_at,
+                 updated_at,
+                 failures,
+                 disabled
+             ) VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+             ON CONFLICT(provider_id, alias) DO UPDATE SET
+                 auth_json = excluded.auth_json,
+                 auth_type = excluded.auth_type,
+                 updated_at = excluded.updated_at`).run(providerID, alias, JSON.stringify(auth), auth.type, timestamp, timestamp, 0, 0);
+        setActiveAlias(db, providerID, alias);
+        const account = getAccount(db, providerID, alias);
+        if (!account)
+            throw new Error(`Account not found: ${providerID}/${alias}`);
+        return account;
+    });
+    return save();
+}
+export function updateAccountAuth(db, providerID, aliasInput, auth) {
+    const alias = normalizeAlias(aliasInput);
+    if (!alias)
+        throw new Error("Invalid alias");
+    db.query(`UPDATE accounts
+         SET auth_json = ?,
+             auth_type = ?,
+             updated_at = ?
+         WHERE provider_id = ? AND alias = ?`).run(JSON.stringify(auth), auth.type, now(), providerID, alias);
+    return getAccount(db, providerID, alias);
+}
+export function renameAccount(db, providerID, fromAliasInput, toAliasInput) {
+    const fromAlias = normalizeAlias(fromAliasInput);
+    const toAlias = normalizeAlias(toAliasInput);
+    if (!fromAlias || !toAlias)
+        throw new Error("Invalid alias");
+    if (fromAlias === toAlias) {
+        const account = getAccount(db, providerID, fromAlias);
+        if (!account)
+            throw new Error(`Account not found: ${providerID}/${fromAlias}`);
+        return account;
+    }
+    const rename = db.transaction(() => {
+        const existing = getAccount(db, providerID, fromAlias);
+        if (!existing)
+            throw new Error(`Account not found: ${providerID}/${fromAlias}`);
+        if (getAccount(db, providerID, toAlias))
+            throw new Error(`Account already exists: ${providerID}/${toAlias}`);
+        db.query(`UPDATE accounts
+             SET alias = ?, updated_at = ?
+             WHERE provider_id = ? AND alias = ?`).run(toAlias, now(), providerID, fromAlias);
+        db.query(`UPDATE usage_snapshots
+             SET alias = ?
+             WHERE provider_id = ? AND alias = ?`).run(toAlias, providerID, fromAlias);
+        const active = db
+            .query("SELECT active_alias FROM provider_state WHERE provider_id = ?")
+            .get(providerID);
+        if (active?.active_alias === fromAlias)
+            setActiveAlias(db, providerID, toAlias);
+        const account = getAccount(db, providerID, toAlias);
+        if (!account)
+            throw new Error(`Account not found: ${providerID}/${toAlias}`);
+        return account;
+    });
+    return rename();
+}
+export function getAccount(db, providerID, alias) {
+    const normalizedAlias = normalizeAlias(alias);
+    const row = db
+        .query(`SELECT provider_id, alias, auth_json, auth_type, created_at, updated_at,
+                    last_used_at, rate_limited_until, failures, disabled
+             FROM accounts
+             WHERE provider_id = ? AND alias = ?`)
+        .get(providerID, normalizedAlias);
+    return row ? accountFromRow(row) : undefined;
+}
+export function listAccounts(db, providerID) {
+    const sql = `SELECT provider_id, alias, auth_json, auth_type, created_at, updated_at,
+                        last_used_at, rate_limited_until, failures, disabled
+                 FROM accounts`;
+    const rows = providerID
+        ? db
+            .query(`${sql} WHERE provider_id = ? ORDER BY alias`)
+            .all(providerID)
+        : db.query(`${sql} ORDER BY provider_id, alias`).all();
+    return rows.map(accountFromRow);
+}
+export function setActiveAccount(db, providerID, alias) {
+    const normalizedAlias = normalizeAlias(alias);
+    const account = getAccount(db, providerID, normalizedAlias);
+    if (!account)
+        throw new Error(`Account not found: ${providerID}/${normalizedAlias}`);
+    setActiveAlias(db, providerID, normalizedAlias);
+    return account;
+}
+export function removeAccount(db, providerID, alias) {
+    const normalizedAlias = normalizeAlias(alias);
+    const remove = db.transaction(() => {
+        const existing = getAccount(db, providerID, normalizedAlias);
+        if (!existing)
+            return false;
+        db.query("DELETE FROM accounts WHERE provider_id = ? AND alias = ?").run(providerID, normalizedAlias);
+        db.query("DELETE FROM usage_snapshots WHERE provider_id = ? AND alias = ?").run(providerID, normalizedAlias);
+        const active = db
+            .query("SELECT active_alias FROM provider_state WHERE provider_id = ?")
+            .get(providerID);
+        if (active?.active_alias === normalizedAlias) {
+            const next = db
+                .query("SELECT alias FROM accounts WHERE provider_id = ? ORDER BY alias LIMIT 1")
+                .get(providerID);
+            db.query(`UPDATE provider_state
+                 SET active_alias = ?, updated_at = ?
+                 WHERE provider_id = ?`).run(next?.alias ?? null, now(), providerID);
+        }
+        return true;
+    });
+    return remove();
+}
+export function getActiveAccount(db, providerID) {
+    const row = db
+        .query("SELECT active_alias FROM provider_state WHERE provider_id = ?")
+        .get(providerID);
+    if (!row?.active_alias)
+        return undefined;
+    return getAccount(db, providerID, row.active_alias);
+}
+export function getSelectedAccount(db) {
+    const selectedProvider = db
+        .query("SELECT value FROM settings WHERE key = 'selected_provider_id'")
+        .get();
+    if (selectedProvider?.value) {
+        const active = getActiveAccount(db, selectedProvider.value);
+        if (active)
+            return active;
+    }
+    const row = db
+        .query(`SELECT provider_id, active_alias
+             FROM provider_state
+             WHERE active_alias IS NOT NULL
+             ORDER BY updated_at DESC, provider_id
+             LIMIT 1`)
+        .get();
+    if (!row?.active_alias)
+        return undefined;
+    return getAccount(db, row.provider_id, row.active_alias);
+}
+export function setSelectedModel(db, providerID, modelID) {
+    const row = db
+        .query("SELECT metadata_json FROM provider_state WHERE provider_id = ?")
+        .get(providerID);
+    const metadata = parseMetadataJson(row?.metadata_json);
+    metadata.selected_model_id = modelID;
+    db.query(`INSERT INTO provider_state (provider_id, active_alias, updated_at, metadata_json)
+         VALUES (?, NULL, ?, ?)
+         ON CONFLICT(provider_id) DO UPDATE SET
+             updated_at = excluded.updated_at,
+             metadata_json = excluded.metadata_json`).run(providerID, now(), JSON.stringify(metadata));
+    return { providerID, modelID };
+}
+export function getSelectedModel(db, providerID) {
+    const row = db
+        .query("SELECT metadata_json FROM provider_state WHERE provider_id = ?")
+        .get(providerID);
+    const modelID = parseMetadataJson(row?.metadata_json).selected_model_id;
+    if (typeof modelID !== "string" || modelID.length === 0)
+        return undefined;
+    return { providerID, modelID };
+}
+//# sourceMappingURL=accounts.js.map

package/dist/core/accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts.js","sourceRoot":"","sources":["../../src/core/accounts.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAe7B,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAU,CAAC;AAEzD,MAAM,UAAU,cAAc,CAAC,KAAa;IACxC,OAAO,KAAK;SACP,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,YAAY,CAAC,GAAe;IACjC,OAAO,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC7B,OAAO,SAAS,CAAC,QAAQ,CAAC,KAAyB,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAe;IACrC,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,KAAK,CAAC,2BAA2B,EAAE,wBAAwB,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,2BAA2B,EAAE,6BAA6B,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,2BAA2B,EAAE,oBAAoB,IAAI,CAAC,IAAI,aAAa,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,IAAgB,CAAC;AAC5B,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAe;IAC5C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,2BAA2B,YAAY,CAAC,GAAG,CAAC,eAAe,GAAG,CAAC,SAAS,aAAa,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,GAAG,CAAC,SAAS,CAAC;AACzB,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAe;IACrC,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,2BAA2B,YAAY,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,QAAQ,aAAa,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,cAAc,CAAC,GAAe;IACnC,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACX,2BAA2B,YAAY,CAAC,GAAG,CAAC,eAAe,QAAQ,kCAAkC,IAAI,CAAC,IAAI,EAAE,CACnH,CAAC;IACN,CAAC;IAED,OAAO;QACH,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI;QACJ,QAAQ;QACR,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,UAAU,EAAE,GAAG,CAAC,YAAY,IAAI,SAAS;QACzC,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,IAAI,SAAS;QACrD,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC;KAClC,CAAC;AACN,CAAC;AAED,SAAS,cAAc,CAAC,EAAY,EAAE,UAAkB,EAAE,KAAa;IACnE,EAAE,CAAC,KAAK,CACJ;;;;8CAIsC,CACzC,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAChC,EAAE,CAAC,KAAK,CACJ;+DACuD,CAC1D,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAgC;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAChG,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,CAAC;IACd,CAAC;AACL,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,EAAY,EAAE,UAAkB,EAAE,UAAkB,EAAE,IAAc;IAC5F,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IAE7C,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAC7B,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;QACxB,EAAE,CAAC,KAAK,CACJ;;;;;;;;;;;;;kDAasC,CACzC,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACtF,cAAc,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QAEtC,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,UAAU,IAAI,KAAK,EAAE,CAAC,CAAC;QAC3E,OAAO,OAAO,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,EAAE,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,EAAY,EAAE,UAAkB,EAAE,UAAkB,EAAE,IAAc;IAClG,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IAE7C,EAAE,CAAC,KAAK,CACJ;;;;6CAIqC,CACxC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IACjE,OAAO,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAY,EAAE,UAAkB,EAAE,cAAsB,EAAE,YAAoB;IACxG,MAAM,SAAS,GAAG,cAAc,CAAC,cAAc,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IAC7D,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,UAAU,IAAI,SAAS,EAAE,CAAC,CAAC;QAC/E,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAC/B,MAAM,QAAQ,GAAG,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,UAAU,IAAI,SAAS,EAAE,CAAC,CAAC;QAChF,IAAI,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,UAAU,IAAI,OAAO,EAAE,CAAC,CAAC;QAE7G,EAAE,CAAC,KAAK,CACJ;;iDAEqC,CACxC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QAC7C,EAAE,CAAC,KAAK,CACJ;;iDAEqC,CACxC,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QAEtC,MAAM,MAAM,GAAG,EAAE;aACZ,KAAK,CAA4C,+DAA+D,CAAC;aACjH,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,IAAI,MAAM,EAAE,YAAY,KAAK,SAAS;YAAE,cAAc,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAEhF,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,UAAU,IAAI,OAAO,EAAE,CAAC,CAAC;QAC7E,OAAO,OAAO,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EAAY,EAAE,UAAkB,EAAE,KAAa;IACtE,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,EAAE;SACT,KAAK,CACF;;;iDAGqC,CACxC;SACA,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACtC,OAAO,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAY,EAAE,UAAmB;IAC1D,MAAM,GAAG,GAAG;;+BAEe,CAAC;IAC5B,MAAM,IAAI,GAAG,UAAU;QACnB,CAAC,CAAC,EAAE;aACG,KAAK,CAAuB,GAAG,GAAG,uCAAuC,CAAC;aAC1E,GAAG,CAAC,UAAU,CAAC;QACtB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAiB,GAAG,GAAG,8BAA8B,CAAC,CAAC,GAAG,EAAE,CAAC;IAC3E,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAY,EAAE,UAAkB,EAAE,KAAa;IAC5E,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IAC5D,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,UAAU,IAAI,eAAe,EAAE,CAAC,CAAC;IAErF,cAAc,CAAC,EAAE,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IAChD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAY,EAAE,UAAkB,EAAE,KAAa;IACzE,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAC/B,MAAM,QAAQ,GAAG,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAE5B,EAAE,CAAC,KAAK,CAA4B,0DAA0D,CAAC,CAAC,GAAG,CAC/F,UAAU,EACV,eAAe,CAClB,CAAC;QACF,EAAE,CAAC,KAAK,CAA4B,iEAAiE,CAAC,CAAC,GAAG,CACtG,UAAU,EACV,eAAe,CAClB,CAAC;QAEF,MAAM,MAAM,GAAG,EAAE;aACZ,KAAK,CAA4C,+DAA+D,CAAC;aACjH,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,IAAI,MAAM,EAAE,YAAY,KAAK,eAAe,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,EAAE;iBACV,KAAK,CAA8B,yEAAyE,CAAC;iBAC7G,GAAG,CAAC,UAAU,CAAC,CAAC;YACrB,EAAE,CAAC,KAAK,CACJ;;uCAEuB,CAC1B,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAY,EAAE,UAAkB;IAC7D,MAAM,GAAG,GAAG,EAAE;SACT,KAAK,CACF,+DAA+D,CAClE;SACA,GAAG,CAAC,UAAU,CAAC,CAAC;IACrB,IAAI,CAAC,GAAG,EAAE,YAAY;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAY;IAC3C,MAAM,gBAAgB,GAAG,EAAE;SACtB,KAAK,CAAwB,+DAA+D,CAAC;SAC7F,GAAG,EAAE,CAAC;IACX,IAAI,gBAAgB,EAAE,KAAK,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC9B,CAAC;IAED,MAAM,GAAG,GAAG,EAAE;SACT,KAAK,CACF;;;;qBAIS,CACZ;SACA,GAAG,EAAE,CAAC;IACX,IAAI,CAAC,GAAG,EAAE,YAAY;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAY,EAAE,UAAkB,EAAE,OAAe;IAC9E,MAAM,GAAG,GAAG,EAAE;SACT,KAAK,CAA6C,gEAAgE,CAAC;SACnH,GAAG,CAAC,UAAU,CAAC,CAAC;IACrB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACvD,QAAQ,CAAC,iBAAiB,GAAG,OAAO,CAAC;IAErC,EAAE,CAAC,KAAK,CACJ;;;;oDAI4C,CAC/C,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEnD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAY,EAAE,UAAkB;IAC7D,MAAM,GAAG,GAAG,EAAE;SACT,KAAK,CAA6C,gEAAgE,CAAC;SACnH,GAAG,CAAC,UAAU,CAAC,CAAC;IACrB,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,iBAAiB,CAAC;IACxE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1E,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC"}

package/dist/core/database.d.ts

@@ -0,0 +1,4 @@
+import { Database } from "bun:sqlite";
+export declare function secureDatabaseFiles(path: string): void;
+export declare function openBalancerDatabase(path: string): Database;
+export declare function closeBalancerDatabase(path: string): void;

package/dist/core/database.js

@@ -0,0 +1,69 @@
+import { chmodSync, mkdirSync } from "node:fs";
+import { dirname } from "node:path";
+import { Database } from "bun:sqlite";
+const databases = new Map();
+function isMissingFileError(error) {
+    return error.code === "ENOENT";
+}
+function isClosedDatabaseError(error) {
+    return error instanceof Error && /closed/i.test(error.message);
+}
+function cachedDatabaseIsOpen(database) {
+    try {
+        database.exec("SELECT 1;");
+        return true;
+    }
+    catch (error) {
+        if (isClosedDatabaseError(error))
+            return false;
+        throw error;
+    }
+}
+export function secureDatabaseFiles(path) {
+    for (const file of [path, `${path}-wal`, `${path}-shm`]) {
+        try {
+            chmodSync(file, 0o600);
+        }
+        catch (error) {
+            if (!isMissingFileError(error))
+                throw error;
+        }
+    }
+}
+export function openBalancerDatabase(path) {
+    const existing = databases.get(path);
+    if (existing) {
+        if (cachedDatabaseIsOpen(existing))
+            return existing;
+        databases.delete(path);
+    }
+    mkdirSync(dirname(path), { recursive: true });
+    const database = new Database(path);
+    try {
+        database.exec("PRAGMA journal_mode = WAL; PRAGMA foreign_keys = ON;");
+        secureDatabaseFiles(path);
+        databases.set(path, database);
+        return database;
+    }
+    catch (error) {
+        try {
+            database.close();
+        }
+        catch { }
+        throw error;
+    }
+}
+export function closeBalancerDatabase(path) {
+    const existing = databases.get(path);
+    if (!existing)
+        return;
+    databases.delete(path);
+    try {
+        existing.close();
+    }
+    catch (error) {
+        if (!isClosedDatabaseError(error))
+            throw error;
+    }
+}
+//# sourceMappingURL=database.js.map

package/dist/core/database.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.js","sourceRoot":"","sources":["../../src/core/database.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;AAE9C,SAAS,kBAAkB,CAAC,KAAc;IACtC,OAAQ,KAA2B,CAAC,IAAI,KAAK,QAAQ,CAAC;AAC1D,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IACzC,OAAO,KAAK,YAAY,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAkB;IAC5C,IAAI,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,qBAAqB,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC5C,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC;YACD,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QAChD,CAAC;IACL,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC7C,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,QAAQ,EAAE,CAAC;QACX,IAAI,oBAAoB,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;QACpD,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QACtE,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC1B,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC9B,OAAO,QAAQ,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,CAAC;YACD,QAAQ,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAC9C,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ;QAAE,OAAO;IAEtB,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC;QACD,QAAQ,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;IACnD,CAAC;AACL,CAAC"}

package/dist/core/events.d.ts

@@ -0,0 +1,18 @@
+import type { Database } from "bun:sqlite";
+import type { BalancerEvent, BalancerEventType } from "./types";
+export declare function appendEvent(db: Database, input: {
+    type: BalancerEventType;
+    providerID?: string;
+    alias?: string;
+    message: string;
+    metadata?: Record<string, string>;
+}): BalancerEvent;
+export declare function listEvents(db: Database, limit?: number): {
+    id: string;
+    type: BalancerEventType;
+    providerID: string | undefined;
+    alias: string | undefined;
+    message: string;
+    createdAt: number;
+    metadata: Record<string, string>;
+}[];

package/dist/core/events.js

@@ -0,0 +1,39 @@
+import { now } from "./time";
+export function appendEvent(db, input) {
+    const event = {
+        id: crypto.randomUUID(),
+        type: input.type,
+        providerID: input.providerID,
+        alias: input.alias,
+        message: input.message,
+        createdAt: now(),
+        metadata: input.metadata ?? {},
+    };
+    db.query(`INSERT INTO events (id, type, provider_id, alias, message, created_at, metadata_json)
+         VALUES (?, ?, ?, ?, ?, ?, ?)`).run(event.id, event.type, event.providerID ?? null, event.alias ?? null, event.message, event.createdAt, JSON.stringify(event.metadata));
+    return event;
+}
+export function listEvents(db, limit = 50) {
+    return db
+        .query("SELECT * FROM events ORDER BY created_at DESC LIMIT ?")
+        .all(limit)
+        .map((row) => {
+        let metadata;
+        try {
+            metadata = JSON.parse(row.metadata_json);
+        }
+        catch (error) {
+            throw new Error(`Invalid event metadata JSON for event ${row.id}`, { cause: error });
+        }
+        return {
+            id: row.id,
+            type: row.type,
+            providerID: row.provider_id ?? undefined,
+            alias: row.alias ?? undefined,
+            message: row.message,
+            createdAt: row.created_at,
+            metadata,
+        };
+    });
+}
+//# sourceMappingURL=events.js.map

package/dist/core/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/core/events.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAa7B,MAAM,UAAU,WAAW,CACvB,EAAY,EACZ,KAMC;IAED,MAAM,KAAK,GAAkB;QACzB,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,GAAG,EAAE;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;KACjC,CAAC;IACF,EAAE,CAAC,KAAK,CACJ;sCAC8B,CACjC,CAAC,GAAG,CACD,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,UAAU,IAAI,IAAI,EACxB,KAAK,CAAC,KAAK,IAAI,IAAI,EACnB,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,SAAS,EACf,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CACjC,CAAC;IACF,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EAAY,EAAE,KAAK,GAAG,EAAE;IAC/C,OAAO,EAAE;SACJ,KAAK,CAAqB,uDAAuD,CAAC;SAClF,GAAG,CAAC,KAAK,CAAC;SACV,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACT,IAAI,QAAgC,CAAC;QACrC,IAAI,CAAC;YACD,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAA2B,CAAC;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,OAAO;YACH,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;YACxC,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,SAAS;YAC7B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,QAAQ;SACX,CAAC;IACN,CAAC,CAAC,CAAC;AACX,CAAC"}

package/dist/core/native-auth-suppression.d.ts

@@ -0,0 +1,3 @@
+import type { Database } from "bun:sqlite";
+export declare function suppressNativeAuthCapture(db: Database, providerID: string, durationMs?: number): void;
+export declare function isNativeAuthCaptureSuppressed(db: Database, providerID: string): boolean;

package/dist/core/native-auth-suppression.js

@@ -0,0 +1,19 @@
+import { now } from "./time";
+function key(providerID) {
+    return `native_auth_suppressed_until:${providerID}`;
+}
+export function suppressNativeAuthCapture(db, providerID, durationMs = 10_000) {
+    db.query(`INSERT INTO settings (key, value) VALUES (?, ?)
+         ON CONFLICT(key) DO UPDATE SET value = excluded.value`).run(key(providerID), String(now() + durationMs));
+}
+export function isNativeAuthCaptureSuppressed(db, providerID) {
+    const settingKey = key(providerID);
+    const row = db.query("SELECT value FROM settings WHERE key = ?").get(settingKey);
+    const suppressedUntil = Number(row?.value ?? 0);
+    if (Number.isFinite(suppressedUntil) && suppressedUntil > now())
+        return true;
+    if (row)
+        db.query("DELETE FROM settings WHERE key = ?").run(settingKey);
+    return false;
+}
+//# sourceMappingURL=native-auth-suppression.js.map

package/dist/core/native-auth-suppression.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-auth-suppression.js","sourceRoot":"","sources":["../../src/core/native-auth-suppression.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAE7B,SAAS,GAAG,CAAC,UAAkB;IAC3B,OAAO,gCAAgC,UAAU,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,EAAY,EAAE,UAAkB,EAAE,UAAU,GAAG,MAAM;IAC3F,EAAE,CAAC,KAAK,CACJ;+DACuD,CAC1D,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,EAAY,EAAE,UAAkB;IAC1E,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAA8B,0CAA0C,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9G,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,eAAe,GAAG,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7E,IAAI,GAAG;QAAE,EAAE,CAAC,KAAK,CAAoB,oCAAoC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC;AACjB,CAAC"}

package/dist/core/native-connect.d.ts

@@ -0,0 +1,4 @@
+import type { Database } from "bun:sqlite";
+export declare function markNativeConnectInProgress(db: Database, durationMs?: number): void;
+export declare function isNativeConnectInProgress(db: Database): boolean;
+export declare function clearNativeConnectInProgress(db: Database): void;