anypick 1.0.0 → 1.1.0

package/dist/utils/fs.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fs.js","names":[],"sources":["../../src/utils/fs.ts"],"sourcesContent":["import { copyFile, mkdir, open, readdir, readFile, rename, rm, stat } from 'node:fs/promises';\nimport { dirname, join } from 'node:path';\nimport { homedir } from 'node:os';\nimport { existsSync } from 'node:fs';\nimport { randomUUID } from 'node:crypto';\nimport { AnyPickError } from './errors';\n\n/** Expand ~ and normalize a path. */\nexport function expandHome(path: string): string {\n  if (path === '~') {\n    return homedir();\n  }\n  if (path.startsWith('~/') || path.startsWith('~\\\\')) {\n    return join(homedir(), path.slice(2));\n  }\n  return path;\n}\n\nexport async function pathExists(path: string): Promise<boolean> {\n  try {\n    await stat(path);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nexport async function ensureDir(path: string): Promise<void> {\n  // AnyPick stores credentials, snapshots, and proxy logs below this tree.\n  // New directories are owner-only even under a permissive umask.\n  await mkdir(path, { recursive: true, mode: 0o700 });\n}\n\nexport async function readJsonFile<T>(path: string): Promise<T> {\n  const raw = await readFile(path, 'utf8');\n  return JSON.parse(raw) as T;\n}\n\n/**\n * Read a JSON file and decode through a versioned record decoder (DATA-02).\n * The decoder validates the shape and rejects corrupt/future-version data\n * with a structured error carrying the file path (no secret values).\n */\nexport async function readAndDecodeJsonFile<T>(\n  path: string,\n  decoder: (v: unknown, key: string) => { ok: true; value: T } | { ok: false; error: string },\n): Promise<T> {\n  const raw = await readFile(path, 'utf8');\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    throw new Error(`Corrupt JSON in ${path}`);\n  }\n  const result = decoder(parsed, path);\n  if (result.ok) {\n    return result.value;\n  }\n  throw new Error(`Corrupt record in ${path}: ${result.error}`);\n}\n\nexport async function writeJsonFile(path: string, data: unknown, mode = 0o600): Promise<void> {\n  await writeTextFile(path, `${JSON.stringify(data, null, 2)}\\n`, mode);\n}\n\n/**\n * Copy a single file, creating parent dirs. Preserves mode when possible.\n * Returns false if source is missing.\n */\nexport async function copyFileSafe(src: string, dest: string, mode = 0o600): Promise<boolean> {\n  if (!(await pathExists(src))) {\n    return false;\n  }\n  await ensureDir(dirname(dest));\n  const tmp = `${dest}.${randomUUID()}.tmp`;\n  try {\n    await copyFile(src, tmp);\n    const { chmod } = await import('node:fs/promises');\n    await chmod(tmp, mode);\n    const handle = await open(tmp, 'r');\n    try {\n      await handle.sync();\n    } finally {\n      await handle.close();\n    }\n    await rename(tmp, dest);\n  } catch (err) {\n    await rm(tmp, { force: true }).catch(() => {});\n    throw err;\n  }\n  return true;\n}\n\n/**\n * Write text atomically with restrictive permissions.\n */\nexport async function writeTextFile(path: string, content: string, mode = 0o600): Promise<void> {\n  await ensureDir(dirname(path));\n  const tmp = `${path}.${randomUUID()}.tmp`;\n  let handle: Awaited<ReturnType<typeof open>> | undefined;\n  try {\n    handle = await open(tmp, 'wx', mode);\n    await handle.writeFile(content, { encoding: 'utf8' });\n    await handle.sync();\n    await handle.close();\n    handle = undefined;\n    await rename(tmp, path);\n  } catch (err) {\n    await handle?.close().catch(() => {});\n    await rm(tmp, { force: true }).catch(() => {});\n    throw err;\n  }\n}\n\n/**\n * Copy live file into snapshot, or throw a clear error if missing.\n */\nexport async function backupRequiredFile(\n  livePath: string,\n  destPath: string,\n  label: string,\n): Promise<void> {\n  const ok = await copyFileSafe(livePath, destPath);\n  if (!ok) {\n    throw new AnyPickError(`No live ${label} found at ${livePath}. Log in first, then save.`, {\n      code: 'NO_LIVE_AUTH',\n      suggestions: [`Sign in with the official tool, then try again.`],\n    });\n  }\n}\n\n/**\n * Restore a snapshot file to a live path (required).\n */\nexport async function restoreRequiredFile(\n  srcPath: string,\n  livePath: string,\n  label: string,\n): Promise<void> {\n  if (!(await pathExists(srcPath))) {\n    throw new Error(`Snapshot is missing ${label}: ${srcPath}`);\n  }\n  await copyFileSafe(srcPath, livePath, 0o600);\n}\n\nexport async function listSubdirs(dir: string): Promise<string[]> {\n  if (!(await pathExists(dir))) {\n    return [];\n  }\n  const entries = await readdir(dir, { withFileTypes: true });\n  return entries\n    .filter((e) => e.isDirectory())\n    .map((e) => e.name)\n    .toSorted();\n}\n\nexport async function removePath(path: string): Promise<void> {\n  if (existsSync(path)) {\n    await rm(path, { recursive: true, force: true });\n  }\n}\n\nexport async function emptyDir(path: string): Promise<void> {\n  await removePath(path);\n  await ensureDir(path);\n}\n"],"mappings":";;;;;;;;AAQA,SAAgB,WAAW,MAAsB;CAC/C,IAAI,SAAS,KACX,OAAO,QAAQ;CAEjB,IAAI,KAAK,WAAW,IAAI,KAAK,KAAK,WAAW,KAAK,GAChD,OAAO,KAAK,QAAQ,GAAG,KAAK,MAAM,CAAC,CAAC;CAEtC,OAAO;AACT;AAEA,eAAsB,WAAW,MAAgC;CAC/D,IAAI;EACF,MAAM,KAAK,IAAI;EACf,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAsB,UAAU,MAA6B;CAG3D,MAAM,MAAM,MAAM;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;AACpD;AAEA,eAAsB,aAAgB,MAA0B;CAC9D,MAAM,MAAM,MAAM,SAAS,MAAM,MAAM;CACvC,OAAO,KAAK,MAAM,GAAG;AACvB;;;;;;AAOA,eAAsB,sBACpB,MACA,SACY;CACZ,MAAM,MAAM,MAAM,SAAS,MAAM,MAAM;CACvC,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,GAAG;CACzB,QAAQ;EACN,MAAM,IAAI,MAAM,mBAAmB,MAAM;CAC3C;CACA,MAAM,SAAS,QAAQ,QAAQ,IAAI;CACnC,IAAI,OAAO,IACT,OAAO,OAAO;CAEhB,MAAM,IAAI,MAAM,qBAAqB,KAAK,IAAI,OAAO,OAAO;AAC9D;AAEA,eAAsB,cAAc,MAAc,MAAe,OAAO,KAAsB;CAC5F,MAAM,cAAc,MAAM,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,EAAE,KAAK,IAAI;AACtE;;;;;AAMA,eAAsB,aAAa,KAAa,MAAc,OAAO,KAAyB;CAC5F,IAAI,CAAE,MAAM,WAAW,GAAG,GACxB,OAAO;CAET,MAAM,UAAU,QAAQ,IAAI,CAAC;CAC7B,MAAM,MAAM,GAAG,KAAK,GAAG,WAAW,EAAE;CACpC,IAAI;EACF,MAAM,SAAS,KAAK,GAAG;EACvB,MAAM,EAAE,UAAU,MAAM,OAAO;EAC/B,MAAM,MAAM,KAAK,IAAI;EACrB,MAAM,SAAS,MAAM,KAAK,KAAK,GAAG;EAClC,IAAI;GACF,MAAM,OAAO,KAAK;EACpB,UAAU;GACR,MAAM,OAAO,MAAM;EACrB;EACA,MAAM,OAAO,KAAK,IAAI;CACxB,SAAS,KAAK;EACZ,MAAM,GAAG,KAAK,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;EAC7C,MAAM;CACR;CACA,OAAO;AACT;;;;AAKA,eAAsB,cAAc,MAAc,SAAiB,OAAO,KAAsB;CAC9F,MAAM,UAAU,QAAQ,IAAI,CAAC;CAC7B,MAAM,MAAM,GAAG,KAAK,GAAG,WAAW,EAAE;CACpC,IAAI;CACJ,IAAI;EACF,SAAS,MAAM,KAAK,KAAK,MAAM,IAAI;EACnC,MAAM,OAAO,UAAU,SAAS,EAAE,UAAU,OAAO,CAAC;EACpD,MAAM,OAAO,KAAK;EAClB,MAAM,OAAO,MAAM;EACnB,SAAS,KAAA;EACT,MAAM,OAAO,KAAK,IAAI;CACxB,SAAS,KAAK;EACZ,MAAM,QAAQ,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;EACpC,MAAM,GAAG,KAAK,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;EAC7C,MAAM;CACR;AACF;;;;AAKA,eAAsB,mBACpB,UACA,UACA,OACe;CAEf,IAAI,CAAC,MADY,aAAa,UAAU,QAAQ,GAE9C,MAAM,IAAI,aAAa,WAAW,MAAM,YAAY,SAAS,6BAA6B;EACxF,MAAM;EACN,aAAa,CAAC,iDAAiD;CACjE,CAAC;AAEL;;;;AAKA,eAAsB,oBACpB,SACA,UACA,OACe;CACf,IAAI,CAAE,MAAM,WAAW,OAAO,GAC5B,MAAM,IAAI,MAAM,uBAAuB,MAAM,IAAI,SAAS;CAE5D,MAAM,aAAa,SAAS,UAAU,GAAK;AAC7C;AAEA,eAAsB,YAAY,KAAgC;CAChE,IAAI,CAAE,MAAM,WAAW,GAAG,GACxB,OAAO,CAAC;CAGV,QAAO,MADe,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC,EAAA,CAEvD,QAAQ,MAAM,EAAE,YAAY,CAAC,CAAC,CAC9B,KAAK,MAAM,EAAE,IAAI,CAAC,CAClB,SAAS;AACd;AAEA,eAAsB,WAAW,MAA6B;CAC5D,IAAI,WAAW,IAAI,GACjB,MAAM,GAAG,MAAM;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;AAEnD"}

package/dist/utils/lock.d.ts

@@ -1,33 +0,0 @@
-/**
- * Scoped file locks for concurrent mutations (spec §23.3).
- *
- * Lock file content: `{ "pid": number, "startedAt": string }`
- * Stale locks (dead owner PID) are stolen after a brief wait.
- */
-export interface LockInfo {
-    pid: number;
-    startedAt: string;
-    /** Random ownership nonce prevents PID-reuse ABA on release. */
-    ownerId?: string;
-}
-export interface WithFileLockOptions {
-    /** Max wait for another holder (ms). Default 5000. */
-    timeoutMs?: number;
-    /** Poll interval while waiting (ms). Default 25. */
-    pollMs?: number;
-    /** Human label for errors. */
-    resource?: string;
-}
-export declare function readLockInfo(lockPath: string): Promise<LockInfo | null>;
-/** True when lock file is absent or owner process is dead. */
-export declare function isLockStale(lockPath: string): Promise<boolean>;
-/**
- * Acquire an exclusive lock via O_EXCL create, run fn, release.
- * Retries while another live process holds the lock.
- */
-export declare function withFileLock<T>(lockPath: string, fn: () => Promise<T>, opts?: WithFileLockOptions): Promise<T>;
-/**
- * Atomically write a file under an exclusive lock sibling (`path.lock`).
- */
-export declare function writeFileLocked(path: string, content: string, mode?: number): Promise<void>;
-//# sourceMappingURL=lock.d.ts.map

package/dist/utils/lock.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"lock.d.ts","sourceRoot":"","sources":["../../src/utils/lock.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAe7E;AAED,8DAA8D;AAC9D,wBAAsB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAYpE;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAClC,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,CAAC,CAAC,CAiEZ;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,SAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhG"}

package/dist/utils/lock.js

@@ -1,95 +0,0 @@
-import { ExitCode, anypickError } from "./errors.js";
-import { isProcessRunning } from "./process/pid.js";
-import { dirname } from "node:path";
-import { mkdir, open, readFile, rm } from "node:fs/promises";
-import { randomUUID } from "node:crypto";
-//#region src/utils/lock.ts
-/**
-* Scoped file locks for concurrent mutations (spec §23.3).
-*
-* Lock file content: `{ "pid": number, "startedAt": string }`
-* Stale locks (dead owner PID) are stolen after a brief wait.
-*/
-function sleep(ms) {
-	return new Promise((r) => setTimeout(r, ms));
-}
-async function readLockInfo(lockPath) {
-	try {
-		const raw = await readFile(lockPath, "utf8");
-		const data = JSON.parse(raw);
-		if (typeof data.pid === "number" && data.pid > 0) return {
-			pid: data.pid,
-			startedAt: typeof data.startedAt === "string" ? data.startedAt : "",
-			ownerId: typeof data.ownerId === "string" ? data.ownerId : void 0
-		};
-		return null;
-	} catch {
-		return null;
-	}
-}
-/** True when lock file is absent or owner process is dead. */
-async function isLockStale(lockPath) {
-	const info = await readLockInfo(lockPath);
-	if (!info) try {
-		await readFile(lockPath);
-		return true;
-	} catch {
-		return true;
-	}
-	return !isProcessRunning(info.pid);
-}
-/**
-* Acquire an exclusive lock via O_EXCL create, run fn, release.
-* Retries while another live process holds the lock.
-*/
-async function withFileLock(lockPath, fn, opts = {}) {
-	const timeoutMs = opts.timeoutMs ?? 5e3;
-	const pollMs = opts.pollMs ?? 25;
-	const resource = opts.resource ?? lockPath;
-	const deadline = Date.now() + timeoutMs;
-	await mkdir(dirname(lockPath), {
-		recursive: true,
-		mode: 448
-	});
-	const ownerId = randomUUID();
-	while (true) try {
-		const handle = await open(lockPath, "wx", 384);
-		const info = {
-			pid: process.pid,
-			startedAt: (/* @__PURE__ */ new Date()).toISOString(),
-			ownerId
-		};
-		try {
-			await handle.writeFile(JSON.stringify(info) + "\n", { encoding: "utf8" });
-		} finally {
-			await handle.close();
-		}
-		break;
-	} catch (err) {
-		if ((err && typeof err === "object" && "code" in err ? String(err.code) : "") !== "EEXIST") throw err;
-		const info = await readLockInfo(lockPath);
-		if (info && !isProcessRunning(info.pid)) {
-			await rm(lockPath, { force: true });
-			continue;
-		}
-		if (Date.now() >= deadline) throw anypickError(`Resource locked: ${resource}` + (info ? ` (held by pid ${info.pid})` : "") + ". Retry after the other anypick process finishes.", "STATE_CONFLICT", {
-			exitCode: ExitCode.CAPABILITY_CONFLICT,
-			details: {
-				lockPath,
-				ownerPid: info?.pid
-			}
-		});
-		await sleep(pollMs);
-	}
-	try {
-		return await fn();
-	} finally {
-		try {
-			if ((await readLockInfo(lockPath))?.ownerId === ownerId) await rm(lockPath, { force: true });
-		} catch {}
-	}
-}
-//#endregion
-export { isLockStale, readLockInfo, withFileLock };
-
-//# sourceMappingURL=lock.js.map

package/dist/utils/lock.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"lock.js","names":[],"sources":["../../src/utils/lock.ts"],"sourcesContent":["/**\n * Scoped file locks for concurrent mutations (spec §23.3).\n *\n * Lock file content: `{ \"pid\": number, \"startedAt\": string }`\n * Stale locks (dead owner PID) are stolen after a brief wait.\n */\n\nimport { mkdir, open, readFile, rename, rm, writeFile } from 'node:fs/promises';\nimport { dirname } from 'node:path';\nimport { randomUUID } from 'node:crypto';\nimport { isProcessRunning } from './process';\nimport { anypickError, ExitCode } from './errors';\n\nexport interface LockInfo {\n  pid: number;\n  startedAt: string;\n  /** Random ownership nonce prevents PID-reuse ABA on release. */\n  ownerId?: string;\n}\n\nexport interface WithFileLockOptions {\n  /** Max wait for another holder (ms). Default 5000. */\n  timeoutMs?: number;\n  /** Poll interval while waiting (ms). Default 25. */\n  pollMs?: number;\n  /** Human label for errors. */\n  resource?: string;\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((r) => setTimeout(r, ms));\n}\n\nexport async function readLockInfo(lockPath: string): Promise<LockInfo | null> {\n  try {\n    const raw = await readFile(lockPath, 'utf8');\n    const data = JSON.parse(raw) as Partial<LockInfo>;\n    if (typeof data.pid === 'number' && data.pid > 0) {\n      return {\n        pid: data.pid,\n        startedAt: typeof data.startedAt === 'string' ? data.startedAt : '',\n        ownerId: typeof data.ownerId === 'string' ? data.ownerId : undefined,\n      };\n    }\n    return null;\n  } catch {\n    return null;\n  }\n}\n\n/** True when lock file is absent or owner process is dead. */\nexport async function isLockStale(lockPath: string): Promise<boolean> {\n  const info = await readLockInfo(lockPath);\n  if (!info) {\n    // corrupt or unreadable — treat as stale so doctor can delete\n    try {\n      await readFile(lockPath);\n      return true;\n    } catch {\n      return true; // missing\n    }\n  }\n  return !isProcessRunning(info.pid);\n}\n\n/**\n * Acquire an exclusive lock via O_EXCL create, run fn, release.\n * Retries while another live process holds the lock.\n */\nexport async function withFileLock<T>(\n  lockPath: string,\n  fn: () => Promise<T>,\n  opts: WithFileLockOptions = {},\n): Promise<T> {\n  const timeoutMs = opts.timeoutMs ?? 5000;\n  const pollMs = opts.pollMs ?? 25;\n  const resource = opts.resource ?? lockPath;\n  const deadline = Date.now() + timeoutMs;\n\n  await mkdir(dirname(lockPath), { recursive: true, mode: 0o700 });\n  const ownerId = randomUUID();\n\n  while (true) {\n    try {\n      const handle = await open(lockPath, 'wx', 0o600);\n      const info: LockInfo = {\n        pid: process.pid,\n        startedAt: new Date().toISOString(),\n        ownerId,\n      };\n      try {\n        await handle.writeFile(JSON.stringify(info) + '\\n', { encoding: 'utf8' });\n      } finally {\n        await handle.close();\n      }\n      break;\n    } catch (err) {\n      const code = err && typeof err === 'object' && 'code' in err ? String(err.code) : '';\n      if (code !== 'EEXIST') {\n        throw err;\n      }\n\n      const info = await readLockInfo(lockPath);\n      if (info && !isProcessRunning(info.pid)) {\n        // Stale — remove and retry\n        await rm(lockPath, { force: true });\n        continue;\n      }\n\n      if (Date.now() >= deadline) {\n        throw anypickError(\n          `Resource locked: ${resource}` +\n            (info ? ` (held by pid ${info.pid})` : '') +\n            '. Retry after the other anypick process finishes.',\n          'STATE_CONFLICT',\n          {\n            exitCode: ExitCode.CAPABILITY_CONFLICT,\n            details: { lockPath, ownerPid: info?.pid },\n          },\n        );\n      }\n      await sleep(pollMs);\n    }\n  }\n\n  try {\n    return await fn();\n  } finally {\n    try {\n      const info = await readLockInfo(lockPath);\n      // Only release if we still own it\n      if (info?.ownerId === ownerId) {\n        await rm(lockPath, { force: true });\n      }\n    } catch {\n      // best-effort\n    }\n  }\n}\n\n/**\n * Atomically write a file under an exclusive lock sibling (`path.lock`).\n */\nexport async function writeFileLocked(path: string, content: string, mode = 0o600): Promise<void> {\n  await withFileLock(`${path}.lock`, async () => {\n    await mkdir(dirname(path), { recursive: true, mode: 0o700 });\n    const tmp = `${path}.${randomUUID()}.tmp`;\n    try {\n      await writeFile(tmp, content, { mode, flag: 'wx' });\n      await rename(tmp, path);\n    } catch (err) {\n      await rm(tmp, { force: true }).catch(() => {});\n      throw err;\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;;;AA6BA,SAAS,MAAM,IAA2B;CACxC,OAAO,IAAI,SAAS,MAAM,WAAW,GAAG,EAAE,CAAC;AAC7C;AAEA,eAAsB,aAAa,UAA4C;CAC7E,IAAI;EACF,MAAM,MAAM,MAAM,SAAS,UAAU,MAAM;EAC3C,MAAM,OAAO,KAAK,MAAM,GAAG;EAC3B,IAAI,OAAO,KAAK,QAAQ,YAAY,KAAK,MAAM,GAC7C,OAAO;GACL,KAAK,KAAK;GACV,WAAW,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY;GACjE,SAAS,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,KAAA;EAC7D;EAEF,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,eAAsB,YAAY,UAAoC;CACpE,MAAM,OAAO,MAAM,aAAa,QAAQ;CACxC,IAAI,CAAC,MAEH,IAAI;EACF,MAAM,SAAS,QAAQ;EACvB,OAAO;CACT,QAAQ;EACN,OAAO;CACT;CAEF,OAAO,CAAC,iBAAiB,KAAK,GAAG;AACnC;;;;;AAMA,eAAsB,aACpB,UACA,IACA,OAA4B,CAAC,GACjB;CACZ,MAAM,YAAY,KAAK,aAAa;CACpC,MAAM,SAAS,KAAK,UAAU;CAC9B,MAAM,WAAW,KAAK,YAAY;CAClC,MAAM,WAAW,KAAK,IAAI,IAAI;CAE9B,MAAM,MAAM,QAAQ,QAAQ,GAAG;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CAC/D,MAAM,UAAU,WAAW;CAE3B,OAAO,MACL,IAAI;EACF,MAAM,SAAS,MAAM,KAAK,UAAU,MAAM,GAAK;EAC/C,MAAM,OAAiB;GACrB,KAAK,QAAQ;GACb,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;GAClC;EACF;EACA,IAAI;GACF,MAAM,OAAO,UAAU,KAAK,UAAU,IAAI,IAAI,MAAM,EAAE,UAAU,OAAO,CAAC;EAC1E,UAAU;GACR,MAAM,OAAO,MAAM;EACrB;EACA;CACF,SAAS,KAAK;EAEZ,KADa,OAAO,OAAO,QAAQ,YAAY,UAAU,MAAM,OAAO,IAAI,IAAI,IAAI,QACrE,UACX,MAAM;EAGR,MAAM,OAAO,MAAM,aAAa,QAAQ;EACxC,IAAI,QAAQ,CAAC,iBAAiB,KAAK,GAAG,GAAG;GAEvC,MAAM,GAAG,UAAU,EAAE,OAAO,KAAK,CAAC;GAClC;EACF;EAEA,IAAI,KAAK,IAAI,KAAK,UAChB,MAAM,aACJ,oBAAoB,cACjB,OAAO,iBAAiB,KAAK,IAAI,KAAK,MACvC,qDACF,kBACA;GACE,UAAU,SAAS;GACnB,SAAS;IAAE;IAAU,UAAU,MAAM;GAAI;EAC3C,CACF;EAEF,MAAM,MAAM,MAAM;CACpB;CAGF,IAAI;EACF,OAAO,MAAM,GAAG;CAClB,UAAU;EACR,IAAI;GAGF,KAAI,MAFe,aAAa,QAAQ,EAAA,EAE9B,YAAY,SACpB,MAAM,GAAG,UAAU,EAAE,OAAO,KAAK,CAAC;EAEtC,QAAQ,CAER;CACF;AACF"}

package/dist/utils/log.d.ts

@@ -1,10 +0,0 @@
-/**
- * Low-noise diagnostic logging for internal failures that are best-effort
- * (startup recovery, lease reaping, cleanup). These are intentionally not
- * thrown — the operation is optional — but swallowing them silently hides
- * exactly the partial-state conditions this tool exists to catch, so we log
- * them to stderr behind ANYPICK_DEBUG instead of discarding them.
- */
-/** Log an internal/best-effort failure to stderr (no-op unless ANYPICK_DEBUG). */
-export declare function logInternalError(label: string, err: unknown): void;
-//# sourceMappingURL=log.d.ts.map

package/dist/utils/log.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"log.d.ts","sourceRoot":"","sources":["../../src/utils/log.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI,CAMlE"}

package/dist/utils/log.js

@@ -1,21 +0,0 @@
-//#region src/utils/log.ts
-/**
-* Low-noise diagnostic logging for internal failures that are best-effort
-* (startup recovery, lease reaping, cleanup). These are intentionally not
-* thrown — the operation is optional — but swallowing them silently hides
-* exactly the partial-state conditions this tool exists to catch, so we log
-* them to stderr behind ANYPICK_DEBUG instead of discarding them.
-*/
-function debugEnabled() {
-	return process.env.ANYPICK_DEBUG === "1" || process.env.ANYPICK_DEBUG === "true";
-}
-/** Log an internal/best-effort failure to stderr (no-op unless ANYPICK_DEBUG). */
-function logInternalError(label, err) {
-	if (!debugEnabled()) return;
-	const message = err instanceof Error ? err.stack ?? err.message : String(err);
-	process.stderr.write(`[anypick:debug] ${label}: ${message}\n`);
-}
-//#endregion
-export { logInternalError };
-
-//# sourceMappingURL=log.js.map

package/dist/utils/log.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"log.js","names":[],"sources":["../../src/utils/log.ts"],"sourcesContent":["/**\n * Low-noise diagnostic logging for internal failures that are best-effort\n * (startup recovery, lease reaping, cleanup). These are intentionally not\n * thrown — the operation is optional — but swallowing them silently hides\n * exactly the partial-state conditions this tool exists to catch, so we log\n * them to stderr behind ANYPICK_DEBUG instead of discarding them.\n */\n\nfunction debugEnabled(): boolean {\n  return process.env.ANYPICK_DEBUG === '1' || process.env.ANYPICK_DEBUG === 'true';\n}\n\n/** Log an internal/best-effort failure to stderr (no-op unless ANYPICK_DEBUG). */\nexport function logInternalError(label: string, err: unknown): void {\n  if (!debugEnabled()) {\n    return;\n  }\n  const message = err instanceof Error ? (err.stack ?? err.message) : String(err);\n  process.stderr.write(`[anypick:debug] ${label}: ${message}\\n`);\n}\n"],"mappings":";;;;;;;;AAQA,SAAS,eAAwB;CAC/B,OAAO,QAAQ,IAAI,kBAAkB,OAAO,QAAQ,IAAI,kBAAkB;AAC5E;;AAGA,SAAgB,iBAAiB,OAAe,KAAoB;CAClE,IAAI,CAAC,aAAa,GAChB;CAEF,MAAM,UAAU,eAAe,QAAS,IAAI,SAAS,IAAI,UAAW,OAAO,GAAG;CAC9E,QAAQ,OAAO,MAAM,mBAAmB,MAAM,IAAI,QAAQ,GAAG;AAC/D"}

package/dist/utils/network.d.ts

@@ -1,3 +0,0 @@
-export declare function isLoopbackHost(host: string): boolean;
-export declare function assertLoopbackHost(host: string): void;
-//# sourceMappingURL=network.d.ts.map

package/dist/utils/network.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../../src/utils/network.ts"],"names":[],"mappings":"AAEA,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMpD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAOrD"}

package/dist/utils/network.js

@@ -1,13 +0,0 @@
-import { AnyPickError } from "./errors.js";
-//#region src/utils/network.ts
-function isLoopbackHost(host) {
-	const value = host.trim().toLowerCase().replace(/^\[|\]$/g, "");
-	return value === "127.0.0.1" || value === "::1" || value === "localhost";
-}
-function assertLoopbackHost(host) {
-	if (!isLoopbackHost(host)) throw new AnyPickError(`Proxy host must be loopback-only (127.0.0.1, ::1, or localhost), got "${host}".`, "PROXY_UNSAFE_HOST");
-}
-//#endregion
-export { assertLoopbackHost, isLoopbackHost };
-
-//# sourceMappingURL=network.js.map

package/dist/utils/network.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"network.js","names":[],"sources":["../../src/utils/network.ts"],"sourcesContent":["import { AnyPickError } from './errors';\n\nexport function isLoopbackHost(host: string): boolean {\n  const value = host\n    .trim()\n    .toLowerCase()\n    .replace(/^\\[|\\]$/g, '');\n  return value === '127.0.0.1' || value === '::1' || value === 'localhost';\n}\n\nexport function assertLoopbackHost(host: string): void {\n  if (!isLoopbackHost(host)) {\n    throw new AnyPickError(\n      `Proxy host must be loopback-only (127.0.0.1, ::1, or localhost), got \"${host}\".`,\n      'PROXY_UNSAFE_HOST',\n    );\n  }\n}\n"],"mappings":";;AAEA,SAAgB,eAAe,MAAuB;CACpD,MAAM,QAAQ,KACX,KAAK,CAAC,CACN,YAAY,CAAC,CACb,QAAQ,YAAY,EAAE;CACzB,OAAO,UAAU,eAAe,UAAU,SAAS,UAAU;AAC/D;AAEA,SAAgB,mBAAmB,MAAoB;CACrD,IAAI,CAAC,eAAe,IAAI,GACtB,MAAM,IAAI,aACR,yEAAyE,KAAK,KAC9E,mBACF;AAEJ"}

package/dist/utils/process/binary.d.ts

@@ -1,14 +0,0 @@
-export declare function resolveBinary(names: string[], extraPaths?: string[]): Promise<string | null>;
-/**
- * Locate an executable on PATH (and common locations). No hardcoded developer homes.
- * Returns absolute path or null.
- */
-export declare function whichExecutable(name: string): string | null;
-/**
- * Tail a file like `tail -f`: emits each new line via onLine.
- * Polls every 200ms (reliable across macOS/Linux/Windows and immune to the
- * missed-event races fs.watchFile can hit when an external process appends
- * rapidly). A read-position cursor ensures we only emit appended content
- * (survives rotation/truncation). Resolves when signal aborts.
- */
-//# sourceMappingURL=binary.d.ts.map

package/dist/utils/process/binary.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"binary.d.ts","sourceRoot":"","sources":["../../../src/utils/process/binary.ts"],"names":[],"mappings":"AAEA,wBAAsB,aAAa,CACjC,KAAK,EAAE,MAAM,EAAE,EACf,UAAU,GAAE,MAAM,EAAO,GACxB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA+BxB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAqC3D;AASD;;;;;;GAMG"}

package/dist/utils/process/binary.js

@@ -1,29 +0,0 @@
-import "node:fs";
-//#region src/utils/process/binary.ts
-async function resolveBinary(names, extraPaths = []) {
-	const { access, constants } = await import("node:fs/promises");
-	const dirs = (process.env.PATH ?? "").split(process.platform === "win32" ? ";" : ":");
-	const candidates = [...extraPaths];
-	for (const name of names) if (name.includes("/") || name.includes("\\")) candidates.push(name);
-	else for (const dir of dirs) {
-		if (!dir) continue;
-		candidates.push(`${dir}/${name}`);
-		if (process.platform === "win32") candidates.push(`${dir}\\${name}.cmd`, `${dir}\\${name}.exe`);
-	}
-	for (const c of candidates) try {
-		await access(c, constants.X_OK);
-		return c;
-	} catch {}
-	return null;
-}
-/**
-* Tail a file like `tail -f`: emits each new line via onLine.
-* Polls every 200ms (reliable across macOS/Linux/Windows and immune to the
-* missed-event races fs.watchFile can hit when an external process appends
-* rapidly). A read-position cursor ensures we only emit appended content
-* (survives rotation/truncation). Resolves when signal aborts.
-*/
-//#endregion
-export { resolveBinary };
-
-//# sourceMappingURL=binary.js.map

package/dist/utils/process/binary.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"binary.js","names":[],"sources":["../../../src/utils/process/binary.ts"],"sourcesContent":["import { existsSync } from 'node:fs';\n\nexport async function resolveBinary(\n  names: string[],\n  extraPaths: string[] = [],\n): Promise<string | null> {\n  const { access, constants } = await import('node:fs/promises');\n  const pathEnv = process.env.PATH ?? '';\n  const dirs = pathEnv.split(process.platform === 'win32' ? ';' : ':');\n\n  const candidates: string[] = [...extraPaths];\n  for (const name of names) {\n    if (name.includes('/') || name.includes('\\\\')) {\n      candidates.push(name);\n    } else {\n      for (const dir of dirs) {\n        if (!dir) {\n          continue;\n        }\n        candidates.push(`${dir}/${name}`);\n        if (process.platform === 'win32') {\n          candidates.push(`${dir}\\\\${name}.cmd`, `${dir}\\\\${name}.exe`);\n        }\n      }\n    }\n  }\n\n  for (const c of candidates) {\n    try {\n      await access(c, constants.X_OK);\n      return c;\n    } catch {\n      // try next\n    }\n  }\n  return null;\n}\n\n/**\n * Locate an executable on PATH (and common locations). No hardcoded developer homes.\n * Returns absolute path or null.\n */\nexport function whichExecutable(name: string): string | null {\n  if (!name || name.includes('/') || name.includes('\\\\')) {\n    // Absolute/relative path — check existence only\n    try {\n      if (existsSync(name)) {\n        return name;\n      }\n    } catch {\n      return null;\n    }\n    return null;\n  }\n  const pathEnv = process.env.PATH ?? '';\n  const sep = process.platform === 'win32' ? ';' : ':';\n  const exts =\n    process.platform === 'win32'\n      ? (process.env.PATHEXT ?? '.EXE;.CMD;.BAT').split(';').filter(Boolean)\n      : [''];\n  for (const dir of pathEnv.split(sep)) {\n    if (!dir) {\n      continue;\n    }\n    for (const ext of exts) {\n      const candidate = joinPath(\n        dir,\n        name + (ext && !name.toUpperCase().endsWith(ext.toUpperCase()) ? ext : ''),\n      );\n      try {\n        if (existsSync(candidate)) {\n          return candidate;\n        }\n      } catch {\n        // continue\n      }\n    }\n  }\n  return null;\n}\n\nfunction joinPath(a: string, b: string): string {\n  if (a.endsWith('/') || a.endsWith('\\\\')) {\n    return a + b;\n  }\n  return a + (process.platform === 'win32' ? '\\\\' : '/') + b;\n}\n\n/**\n * Tail a file like `tail -f`: emits each new line via onLine.\n * Polls every 200ms (reliable across macOS/Linux/Windows and immune to the\n * missed-event races fs.watchFile can hit when an external process appends\n * rapidly). A read-position cursor ensures we only emit appended content\n * (survives rotation/truncation). Resolves when signal aborts.\n */\n"],"mappings":";;AAEA,eAAsB,cACpB,OACA,aAAuB,CAAC,GACA;CACxB,MAAM,EAAE,QAAQ,cAAc,MAAM,OAAO;CAE3C,MAAM,QADU,QAAQ,IAAI,QAAQ,GAAA,CACf,MAAM,QAAQ,aAAa,UAAU,MAAM,GAAG;CAEnE,MAAM,aAAuB,CAAC,GAAG,UAAU;CAC3C,KAAK,MAAM,QAAQ,OACjB,IAAI,KAAK,SAAS,GAAG,KAAK,KAAK,SAAS,IAAI,GAC1C,WAAW,KAAK,IAAI;MAEpB,KAAK,MAAM,OAAO,MAAM;EACtB,IAAI,CAAC,KACH;EAEF,WAAW,KAAK,GAAG,IAAI,GAAG,MAAM;EAChC,IAAI,QAAQ,aAAa,SACvB,WAAW,KAAK,GAAG,IAAI,IAAI,KAAK,OAAO,GAAG,IAAI,IAAI,KAAK,KAAK;CAEhE;CAIJ,KAAK,MAAM,KAAK,YACd,IAAI;EACF,MAAM,OAAO,GAAG,UAAU,IAAI;EAC9B,OAAO;CACT,QAAQ,CAER;CAEF,OAAO;AACT"}

package/dist/utils/process/follow.d.ts

@@ -1,2 +0,0 @@
-export declare function followFile(path: string, onLine: (line: string) => void, signal?: AbortSignal): Promise<void>;
-//# sourceMappingURL=follow.d.ts.map

package/dist/utils/process/follow.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"follow.d.ts","sourceRoot":"","sources":["../../../src/utils/process/follow.ts"],"names":[],"mappings":"AAeA,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,EAC9B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAmGf"}

package/dist/utils/process/follow.js

@@ -1,90 +0,0 @@
-import { open, stat } from "node:fs/promises";
-//#region src/utils/process/follow.ts
-function identityOf(file) {
-	return {
-		dev: file.dev,
-		ino: file.ino
-	};
-}
-function sameFile(a, b) {
-	return a?.dev === b.dev && a.ino === b.ino;
-}
-async function followFile(path, onLine, signal) {
-	if (signal?.aborted) return;
-	let cursor = 0;
-	let buffer = "";
-	let stopped = false;
-	let decoder = new TextDecoder();
-	let identity;
-	let reading = false;
-	const flush = (text) => {
-		buffer += text;
-		let idx;
-		while ((idx = buffer.indexOf("\n")) >= 0) {
-			const line = buffer.slice(0, idx).replace(/\r$/, "");
-			buffer = buffer.slice(idx + 1);
-			if (line.length > 0) onLine(line);
-		}
-	};
-	const readFrom = async () => {
-		if (stopped || reading) return;
-		reading = true;
-		try {
-			const current = await stat(path);
-			const currentIdentity = identityOf(current);
-			if (!sameFile(identity, currentIdentity) || current.size < cursor) {
-				cursor = 0;
-				buffer = "";
-				decoder = new TextDecoder();
-			}
-			identity = currentIdentity;
-			const unread = current.size - cursor;
-			if (unread > 0) {
-				const handle = await open(path, "r");
-				try {
-					const appended = Buffer.allocUnsafe(unread);
-					const { bytesRead } = await handle.read(appended, 0, unread, cursor);
-					cursor += bytesRead;
-					flush(decoder.decode(appended.subarray(0, bytesRead), { stream: true }));
-				} finally {
-					await handle.close();
-				}
-			}
-		} catch {} finally {
-			reading = false;
-		}
-	};
-	try {
-		const s = await stat(path);
-		cursor = s.size;
-		identity = identityOf(s);
-	} catch {
-		cursor = 0;
-	}
-	return new Promise((resolve) => {
-		let timer;
-		const onAbort = () => {
-			if (stopped) return;
-			stopped = true;
-			if (timer) clearInterval(timer);
-			signal?.removeEventListener("abort", onAbort);
-			resolve();
-		};
-		signal?.addEventListener("abort", onAbort);
-		if (signal?.aborted) {
-			onAbort();
-			return;
-		}
-		timer = setInterval(() => {
-			if (stopped) {
-				clearInterval(timer);
-				return;
-			}
-			readFrom();
-		}, 200);
-	});
-}
-//#endregion
-export { followFile };
-
-//# sourceMappingURL=follow.js.map

package/dist/utils/process/follow.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"follow.js","names":[],"sources":["../../../src/utils/process/follow.ts"],"sourcesContent":["import { open, stat } from 'node:fs/promises';\n\ninterface FileIdentity {\n  dev: number;\n  ino: number;\n}\n\nfunction identityOf(file: { dev: number; ino: number }): FileIdentity {\n  return { dev: file.dev, ino: file.ino };\n}\n\nfunction sameFile(a: FileIdentity | undefined, b: FileIdentity): boolean {\n  return a?.dev === b.dev && a.ino === b.ino;\n}\n\nexport async function followFile(\n  path: string,\n  onLine: (line: string) => void,\n  signal?: AbortSignal,\n): Promise<void> {\n  if (signal?.aborted) {\n    return;\n  }\n\n  let cursor = 0;\n  let buffer = '';\n  let stopped = false;\n  let decoder = new TextDecoder();\n  let identity: FileIdentity | undefined;\n  let reading = false;\n\n  const flush = (text: string) => {\n    buffer += text;\n    let idx: number;\n    while ((idx = buffer.indexOf('\\n')) >= 0) {\n      const line = buffer.slice(0, idx).replace(/\\r$/, '');\n      buffer = buffer.slice(idx + 1);\n      if (line.length > 0) {\n        onLine(line);\n      }\n    }\n  };\n\n  const readFrom = async () => {\n    if (stopped || reading) {\n      return;\n    }\n    reading = true;\n    try {\n      const current = await stat(path);\n      const currentIdentity = identityOf(current);\n      if (!sameFile(identity, currentIdentity) || current.size < cursor) {\n        // A renamed replacement can be longer than its predecessor, so size\n        // alone is not enough. Reset both byte and UTF-8 decoder state.\n        cursor = 0;\n        buffer = '';\n        decoder = new TextDecoder();\n      }\n      identity = currentIdentity;\n      const unread = current.size - cursor;\n      if (unread > 0) {\n        // Read only the appended range. A proxy log can run for days; polling\n        // must be proportional to new bytes, not the lifetime file size.\n        const handle = await open(path, 'r');\n        try {\n          const appended = Buffer.allocUnsafe(unread);\n          const { bytesRead } = await handle.read(appended, 0, unread, cursor);\n          cursor += bytesRead;\n          flush(decoder.decode(appended.subarray(0, bytesRead), { stream: true }));\n        } finally {\n          await handle.close();\n        }\n      }\n    } catch {\n      // file not present yet — keep cursor, wait for next poll\n    } finally {\n      reading = false;\n    }\n  };\n\n  // Seed cursor at end of current file so we only emit *new* lines.\n  try {\n    const s = await stat(path);\n    cursor = s.size;\n    identity = identityOf(s);\n  } catch {\n    cursor = 0;\n  }\n\n  return new Promise<void>((resolve) => {\n    let timer: ReturnType<typeof setInterval> | undefined;\n    const onAbort = () => {\n      if (stopped) {\n        return;\n      }\n      stopped = true;\n      if (timer) {\n        clearInterval(timer);\n      }\n      signal?.removeEventListener('abort', onAbort);\n      resolve();\n    };\n    signal?.addEventListener('abort', onAbort);\n    if (signal?.aborted) {\n      onAbort();\n      return;\n    }\n    // Poll every 200ms — reliable across macOS/Linux and immune to the\n    // missed-event races that fs.watchFile can hit when an external process\n    // (the proxy) appends rapidly.\n    timer = setInterval(() => {\n      if (stopped) {\n        clearInterval(timer);\n        return;\n      }\n      void readFrom();\n    }, 200);\n  });\n}\n"],"mappings":";;AAOA,SAAS,WAAW,MAAkD;CACpE,OAAO;EAAE,KAAK,KAAK;EAAK,KAAK,KAAK;CAAI;AACxC;AAEA,SAAS,SAAS,GAA6B,GAA0B;CACvE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE;AACzC;AAEA,eAAsB,WACpB,MACA,QACA,QACe;CACf,IAAI,QAAQ,SACV;CAGF,IAAI,SAAS;CACb,IAAI,SAAS;CACb,IAAI,UAAU;CACd,IAAI,UAAU,IAAI,YAAY;CAC9B,IAAI;CACJ,IAAI,UAAU;CAEd,MAAM,SAAS,SAAiB;EAC9B,UAAU;EACV,IAAI;EACJ,QAAQ,MAAM,OAAO,QAAQ,IAAI,MAAM,GAAG;GACxC,MAAM,OAAO,OAAO,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,OAAO,EAAE;GACnD,SAAS,OAAO,MAAM,MAAM,CAAC;GAC7B,IAAI,KAAK,SAAS,GAChB,OAAO,IAAI;EAEf;CACF;CAEA,MAAM,WAAW,YAAY;EAC3B,IAAI,WAAW,SACb;EAEF,UAAU;EACV,IAAI;GACF,MAAM,UAAU,MAAM,KAAK,IAAI;GAC/B,MAAM,kBAAkB,WAAW,OAAO;GAC1C,IAAI,CAAC,SAAS,UAAU,eAAe,KAAK,QAAQ,OAAO,QAAQ;IAGjE,SAAS;IACT,SAAS;IACT,UAAU,IAAI,YAAY;GAC5B;GACA,WAAW;GACX,MAAM,SAAS,QAAQ,OAAO;GAC9B,IAAI,SAAS,GAAG;IAGd,MAAM,SAAS,MAAM,KAAK,MAAM,GAAG;IACnC,IAAI;KACF,MAAM,WAAW,OAAO,YAAY,MAAM;KAC1C,MAAM,EAAE,cAAc,MAAM,OAAO,KAAK,UAAU,GAAG,QAAQ,MAAM;KACnE,UAAU;KACV,MAAM,QAAQ,OAAO,SAAS,SAAS,GAAG,SAAS,GAAG,EAAE,QAAQ,KAAK,CAAC,CAAC;IACzE,UAAU;KACR,MAAM,OAAO,MAAM;IACrB;GACF;EACF,QAAQ,CAER,UAAU;GACR,UAAU;EACZ;CACF;CAGA,IAAI;EACF,MAAM,IAAI,MAAM,KAAK,IAAI;EACzB,SAAS,EAAE;EACX,WAAW,WAAW,CAAC;CACzB,QAAQ;EACN,SAAS;CACX;CAEA,OAAO,IAAI,SAAe,YAAY;EACpC,IAAI;EACJ,MAAM,gBAAgB;GACpB,IAAI,SACF;GAEF,UAAU;GACV,IAAI,OACF,cAAc,KAAK;GAErB,QAAQ,oBAAoB,SAAS,OAAO;GAC5C,QAAQ;EACV;EACA,QAAQ,iBAAiB,SAAS,OAAO;EACzC,IAAI,QAAQ,SAAS;GACnB,QAAQ;GACR;EACF;EAIA,QAAQ,kBAAkB;GACxB,IAAI,SAAS;IACX,cAAc,KAAK;IACnB;GACF;GACA,SAAc;EAChB,GAAG,GAAG;CACR,CAAC;AACH"}

package/dist/utils/process/health.d.ts

@@ -1,43 +0,0 @@
-export interface VerifyHealthOptions {
-    timeoutMs?: number;
-    intervalMs?: number;
-    /** Require this exact instance id echoed by the health endpoint (PROC-01). */
-    expectInstanceId?: string;
-    /** When set, the check fails if this pid is no longer alive. */
-    requirePid?: number;
-}
-/**
- * Poll a health endpoint and (optionally) verify the child's identity by
- * matching the instance id it echoes. A mismatch means the PID is alive but
- * belongs to a different process — we must NOT treat it as owned (PROC-01).
- *
- * The endpoint should respond with JSON containing `{ instanceId }`. When
- * `expectInstanceId` is set, only a matching echo counts as ready.
- */
-export declare function verifyProcessHealth(endpoint: string, opts?: VerifyHealthOptions): Promise<boolean>;
-/**
- * True if nothing is currently listening on host:port.
- * Uses a temporary bind probe (same as OS EADDRINUSE check).
- */
-export declare function isListenPortFree(port: number, host?: string): Promise<boolean>;
-/** Poll until port is free or timeout. */
-export declare function waitForPortFree(port: number, host?: string, timeoutMs?: number): Promise<boolean>;
-export declare function waitForHttp(endpoint: string, opts?: {
-    timeoutMs?: number;
-    intervalMs?: number;
-    /** When set, HTTP ready only counts if this pid is still alive (avoids EADDRINUSE ghost). */
-    requirePid?: number;
-    /** When set, the endpoint must echo this exact instance id to count as ready. */
-    expectInstanceId?: string;
-}): Promise<boolean>;
-export declare function sleep(ms: number): Promise<void>;
-/**
- * Best-effort PIDs listening on host:port (loopback proxies).
- * Used to re-attach a pid record after a stale file left a live hub orphaned.
- * Returns [] when lsof/ss is unavailable or nothing is listening.
- */
-export declare function listenPidsOnPort(port: number, host?: string): Promise<number[]>;
-/**
- * Resolve a binary from PATH (and optional extra candidates).
- */
-//# sourceMappingURL=health.d.ts.map

package/dist/utils/process/health.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../src/utils/process/health.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,OAAO,CAAC,CAgClB;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,SAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAkBzF;AAED,0CAA0C;AAC1C,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,IAAI,SAAc,EAClB,SAAS,SAAO,GACf,OAAO,CAAC,OAAO,CAAC,CAYlB;AAED,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IACJ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6FAA6F;IAC7F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACtB,GACL,OAAO,CAAC,OAAO,CAAC,CAsClB;AAED,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,SAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAwC1F;AAED;;GAEG"}

package/dist/utils/process/health.js

@@ -1,132 +0,0 @@
-import { isProcessRunning } from "./pid.js";
-//#region src/utils/process/health.ts
-/**
-* Poll a health endpoint and (optionally) verify the child's identity by
-* matching the instance id it echoes. A mismatch means the PID is alive but
-* belongs to a different process — we must NOT treat it as owned (PROC-01).
-*
-* The endpoint should respond with JSON containing `{ instanceId }`. When
-* `expectInstanceId` is set, only a matching echo counts as ready.
-*/
-async function verifyProcessHealth(endpoint, opts = {}) {
-	const timeoutMs = opts.timeoutMs ?? 5e3;
-	const intervalMs = opts.intervalMs ?? 100;
-	const start = Date.now();
-	while (Date.now() - start < timeoutMs) {
-		if (opts.requirePid != null && !isProcessRunning(opts.requirePid)) return false;
-		try {
-			const res = await fetch(endpoint, {
-				method: "GET",
-				signal: AbortSignal.timeout(500),
-				headers: { accept: "application/json" }
-			});
-			if (!res.ok) {
-				await sleep(intervalMs);
-				continue;
-			}
-			if (opts.expectInstanceId == null) return true;
-			if ((await res.json()).instanceId === opts.expectInstanceId) return true;
-			return false;
-		} catch {
-			await sleep(intervalMs);
-		}
-	}
-	return false;
-}
-/**
-* True if nothing is currently listening on host:port.
-* Uses a temporary bind probe (same as OS EADDRINUSE check).
-*/
-async function isListenPortFree(port, host = "127.0.0.1") {
-	if (port === 0) return true;
-	const net = await import("node:net");
-	return new Promise((resolve) => {
-		const server = net.createServer();
-		server.unref();
-		server.once("error", () => resolve(false));
-		server.once("listening", () => {
-			server.close(() => resolve(true));
-		});
-		try {
-			server.listen(port, host);
-		} catch {
-			resolve(false);
-		}
-	});
-}
-async function waitForHttp(endpoint, opts = {}) {
-	const timeoutMs = opts.timeoutMs ?? 5e3;
-	const intervalMs = opts.intervalMs ?? 100;
-	const start = Date.now();
-	while (Date.now() - start < timeoutMs) {
-		if (opts.requirePid != null && !isProcessRunning(opts.requirePid)) return false;
-		try {
-			const res = await fetch(endpoint, {
-				method: "GET",
-				signal: AbortSignal.timeout(500),
-				headers: { accept: "application/json" }
-			});
-			if (opts.requirePid != null && !isProcessRunning(opts.requirePid)) return false;
-			if (opts.expectInstanceId != null) {
-				let echoedId;
-				try {
-					echoedId = (await res.clone().json()).instanceId;
-				} catch {
-					echoedId = void 0;
-				}
-				if (echoedId !== opts.expectInstanceId) return false;
-			}
-			return true;
-		} catch {
-			await sleep(intervalMs);
-		}
-	}
-	return false;
-}
-function sleep(ms) {
-	return new Promise((r) => setTimeout(r, ms));
-}
-/**
-* Best-effort PIDs listening on host:port (loopback proxies).
-* Used to re-attach a pid record after a stale file left a live hub orphaned.
-* Returns [] when lsof/ss is unavailable or nothing is listening.
-*/
-async function listenPidsOnPort(port, host = "127.0.0.1") {
-	if (!Number.isInteger(port) || port <= 0) return [];
-	const { execFile } = await import("node:child_process");
-	const { promisify } = await import("node:util");
-	const execFileAsync = promisify(execFile);
-	try {
-		const { stdout } = await execFileAsync("lsof", [
-			"-nP",
-			`-iTCP@${host}:${port}`,
-			"-sTCP:LISTEN",
-			"-t"
-		], {
-			timeout: 2e3,
-			encoding: "utf8"
-		});
-		return [...new Set(stdout.split(/\r?\n/u).map((line) => Number.parseInt(line.trim(), 10)).filter((pid) => Number.isInteger(pid) && pid > 0 && isProcessRunning(pid)))];
-	} catch {}
-	try {
-		const { stdout } = await execFileAsync("ss", ["-lptn", `sport = :${port}`], {
-			timeout: 2e3,
-			encoding: "utf8"
-		});
-		const pids = [];
-		for (const match of stdout.matchAll(/pid=(\d+)/gu)) {
-			const pid = Number.parseInt(match[1] ?? "", 10);
-			if (Number.isInteger(pid) && pid > 0 && isProcessRunning(pid)) pids.push(pid);
-		}
-		return [...new Set(pids)];
-	} catch {
-		return [];
-	}
-}
-/**
-* Resolve a binary from PATH (and optional extra candidates).
-*/
-//#endregion
-export { isListenPortFree, listenPidsOnPort, sleep, verifyProcessHealth, waitForHttp };
-
-//# sourceMappingURL=health.js.map

package/dist/utils/process/health.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"health.js","names":[],"sources":["../../../src/utils/process/health.ts"],"sourcesContent":["import { isProcessRunning } from './pid';\n\nexport interface VerifyHealthOptions {\n  timeoutMs?: number;\n  intervalMs?: number;\n  /** Require this exact instance id echoed by the health endpoint (PROC-01). */\n  expectInstanceId?: string;\n  /** When set, the check fails if this pid is no longer alive. */\n  requirePid?: number;\n}\n\n/**\n * Poll a health endpoint and (optionally) verify the child's identity by\n * matching the instance id it echoes. A mismatch means the PID is alive but\n * belongs to a different process — we must NOT treat it as owned (PROC-01).\n *\n * The endpoint should respond with JSON containing `{ instanceId }`. When\n * `expectInstanceId` is set, only a matching echo counts as ready.\n */\nexport async function verifyProcessHealth(\n  endpoint: string,\n  opts: VerifyHealthOptions = {},\n): Promise<boolean> {\n  const timeoutMs = opts.timeoutMs ?? 5000;\n  const intervalMs = opts.intervalMs ?? 100;\n  const start = Date.now();\n  while (Date.now() - start < timeoutMs) {\n    if (opts.requirePid != null && !isProcessRunning(opts.requirePid)) {\n      return false;\n    }\n    try {\n      const res = await fetch(endpoint, {\n        method: 'GET',\n        signal: AbortSignal.timeout(500),\n        headers: { accept: 'application/json' },\n      });\n      if (!res.ok) {\n        await sleep(intervalMs);\n        continue;\n      }\n      if (opts.expectInstanceId == null) {\n        return true;\n      }\n      const body = (await res.json()) as { instanceId?: unknown };\n      if (body.instanceId === opts.expectInstanceId) {\n        return true;\n      }\n      // Alive but wrong identity → fail closed, do not retry-loop forever.\n      return false;\n    } catch {\n      await sleep(intervalMs);\n    }\n  }\n  return false;\n}\n\n/**\n * True if nothing is currently listening on host:port.\n * Uses a temporary bind probe (same as OS EADDRINUSE check).\n */\nexport async function isListenPortFree(port: number, host = '127.0.0.1'): Promise<boolean> {\n  if (port === 0) {\n    return true;\n  }\n  const net = await import('node:net');\n  return new Promise((resolve) => {\n    const server = net.createServer();\n    server.unref();\n    server.once('error', () => resolve(false));\n    server.once('listening', () => {\n      server.close(() => resolve(true));\n    });\n    try {\n      server.listen(port, host);\n    } catch {\n      resolve(false);\n    }\n  });\n}\n\n/** Poll until port is free or timeout. */\nexport async function waitForPortFree(\n  port: number,\n  host = '127.0.0.1',\n  timeoutMs = 3000,\n): Promise<boolean> {\n  if (port === 0) {\n    return true;\n  }\n  const start = Date.now();\n  while (Date.now() - start < timeoutMs) {\n    if (await isListenPortFree(port, host)) {\n      return true;\n    }\n    await sleep(50);\n  }\n  return isListenPortFree(port, host);\n}\n\nexport async function waitForHttp(\n  endpoint: string,\n  opts: {\n    timeoutMs?: number;\n    intervalMs?: number;\n    /** When set, HTTP ready only counts if this pid is still alive (avoids EADDRINUSE ghost). */\n    requirePid?: number;\n    /** When set, the endpoint must echo this exact instance id to count as ready. */\n    expectInstanceId?: string;\n  } = {},\n): Promise<boolean> {\n  const timeoutMs = opts.timeoutMs ?? 5000;\n  const intervalMs = opts.intervalMs ?? 100;\n  const start = Date.now();\n  while (Date.now() - start < timeoutMs) {\n    if (opts.requirePid != null && !isProcessRunning(opts.requirePid)) {\n      return false;\n    }\n    try {\n      const res = await fetch(endpoint, {\n        method: 'GET',\n        signal: AbortSignal.timeout(500),\n        headers: { accept: 'application/json' },\n      });\n      // Any HTTP response means the server is up (even 404).\n      void res;\n      if (opts.requirePid != null && !isProcessRunning(opts.requirePid)) {\n        return false;\n      }\n      // Identity gate (PROC-01): a live but wrong-identity process is not ours.\n      if (opts.expectInstanceId != null) {\n        let echoedId: unknown;\n        try {\n          const body = (await res.clone().json()) as { instanceId?: unknown };\n          echoedId = body.instanceId;\n        } catch {\n          echoedId = undefined;\n        }\n        if (echoedId !== opts.expectInstanceId) {\n          return false;\n        }\n      }\n      return true;\n    } catch {\n      await sleep(intervalMs);\n    }\n  }\n  return false;\n}\n\nexport function sleep(ms: number): Promise<void> {\n  return new Promise((r) => setTimeout(r, ms));\n}\n\n/**\n * Best-effort PIDs listening on host:port (loopback proxies).\n * Used to re-attach a pid record after a stale file left a live hub orphaned.\n * Returns [] when lsof/ss is unavailable or nothing is listening.\n */\nexport async function listenPidsOnPort(port: number, host = '127.0.0.1'): Promise<number[]> {\n  if (!Number.isInteger(port) || port <= 0) {\n    return [];\n  }\n  const { execFile } = await import('node:child_process');\n  const { promisify } = await import('node:util');\n  const execFileAsync = promisify(execFile);\n  try {\n    const { stdout } = await execFileAsync(\n      'lsof',\n      ['-nP', `-iTCP@${host}:${port}`, '-sTCP:LISTEN', '-t'],\n      { timeout: 2000, encoding: 'utf8' },\n    );\n    return [\n      ...new Set(\n        stdout\n          .split(/\\r?\\n/u)\n          .map((line) => Number.parseInt(line.trim(), 10))\n          .filter((pid) => Number.isInteger(pid) && pid > 0 && isProcessRunning(pid)),\n      ),\n    ];\n  } catch {\n    // Fall through — try ss on Linux if lsof is missing.\n  }\n  try {\n    const { stdout } = await execFileAsync('ss', ['-lptn', `sport = :${port}`], {\n      timeout: 2000,\n      encoding: 'utf8',\n    });\n    const pids: number[] = [];\n    for (const match of stdout.matchAll(/pid=(\\d+)/gu)) {\n      const pid = Number.parseInt(match[1] ?? '', 10);\n      if (Number.isInteger(pid) && pid > 0 && isProcessRunning(pid)) {\n        pids.push(pid);\n      }\n    }\n    return [...new Set(pids)];\n  } catch {\n    return [];\n  }\n}\n\n/**\n * Resolve a binary from PATH (and optional extra candidates).\n */\n"],"mappings":";;;;;;;;;;AAmBA,eAAsB,oBACpB,UACA,OAA4B,CAAC,GACX;CAClB,MAAM,YAAY,KAAK,aAAa;CACpC,MAAM,aAAa,KAAK,cAAc;CACtC,MAAM,QAAQ,KAAK,IAAI;CACvB,OAAO,KAAK,IAAI,IAAI,QAAQ,WAAW;EACrC,IAAI,KAAK,cAAc,QAAQ,CAAC,iBAAiB,KAAK,UAAU,GAC9D,OAAO;EAET,IAAI;GACF,MAAM,MAAM,MAAM,MAAM,UAAU;IAChC,QAAQ;IACR,QAAQ,YAAY,QAAQ,GAAG;IAC/B,SAAS,EAAE,QAAQ,mBAAmB;GACxC,CAAC;GACD,IAAI,CAAC,IAAI,IAAI;IACX,MAAM,MAAM,UAAU;IACtB;GACF;GACA,IAAI,KAAK,oBAAoB,MAC3B,OAAO;GAGT,KAAI,MADgB,IAAI,KAAK,EAAA,CACpB,eAAe,KAAK,kBAC3B,OAAO;GAGT,OAAO;EACT,QAAQ;GACN,MAAM,MAAM,UAAU;EACxB;CACF;CACA,OAAO;AACT;;;;;AAMA,eAAsB,iBAAiB,MAAc,OAAO,aAA+B;CACzF,IAAI,SAAS,GACX,OAAO;CAET,MAAM,MAAM,MAAM,OAAO;CACzB,OAAO,IAAI,SAAS,YAAY;EAC9B,MAAM,SAAS,IAAI,aAAa;EAChC,OAAO,MAAM;EACb,OAAO,KAAK,eAAe,QAAQ,KAAK,CAAC;EACzC,OAAO,KAAK,mBAAmB;GAC7B,OAAO,YAAY,QAAQ,IAAI,CAAC;EAClC,CAAC;EACD,IAAI;GACF,OAAO,OAAO,MAAM,IAAI;EAC1B,QAAQ;GACN,QAAQ,KAAK;EACf;CACF,CAAC;AACH;AAqBA,eAAsB,YACpB,UACA,OAOI,CAAC,GACa;CAClB,MAAM,YAAY,KAAK,aAAa;CACpC,MAAM,aAAa,KAAK,cAAc;CACtC,MAAM,QAAQ,KAAK,IAAI;CACvB,OAAO,KAAK,IAAI,IAAI,QAAQ,WAAW;EACrC,IAAI,KAAK,cAAc,QAAQ,CAAC,iBAAiB,KAAK,UAAU,GAC9D,OAAO;EAET,IAAI;GACF,MAAM,MAAM,MAAM,MAAM,UAAU;IAChC,QAAQ;IACR,QAAQ,YAAY,QAAQ,GAAG;IAC/B,SAAS,EAAE,QAAQ,mBAAmB;GACxC,CAAC;GAGD,IAAI,KAAK,cAAc,QAAQ,CAAC,iBAAiB,KAAK,UAAU,GAC9D,OAAO;GAGT,IAAI,KAAK,oBAAoB,MAAM;IACjC,IAAI;IACJ,IAAI;KAEF,YAAW,MADS,IAAI,MAAM,CAAC,CAAC,KAAK,EAAA,CACrB;IAClB,QAAQ;KACN,WAAW,KAAA;IACb;IACA,IAAI,aAAa,KAAK,kBACpB,OAAO;GAEX;GACA,OAAO;EACT,QAAQ;GACN,MAAM,MAAM,UAAU;EACxB;CACF;CACA,OAAO;AACT;AAEA,SAAgB,MAAM,IAA2B;CAC/C,OAAO,IAAI,SAAS,MAAM,WAAW,GAAG,EAAE,CAAC;AAC7C;;;;;;AAOA,eAAsB,iBAAiB,MAAc,OAAO,aAAgC;CAC1F,IAAI,CAAC,OAAO,UAAU,IAAI,KAAK,QAAQ,GACrC,OAAO,CAAC;CAEV,MAAM,EAAE,aAAa,MAAM,OAAO;CAClC,MAAM,EAAE,cAAc,MAAM,OAAO;CACnC,MAAM,gBAAgB,UAAU,QAAQ;CACxC,IAAI;EACF,MAAM,EAAE,WAAW,MAAM,cACvB,QACA;GAAC;GAAO,SAAS,KAAK,GAAG;GAAQ;GAAgB;EAAI,GACrD;GAAE,SAAS;GAAM,UAAU;EAAO,CACpC;EACA,OAAO,CACL,GAAG,IAAI,IACL,OACG,MAAM,QAAQ,CAAC,CACf,KAAK,SAAS,OAAO,SAAS,KAAK,KAAK,GAAG,EAAE,CAAC,CAAC,CAC/C,QAAQ,QAAQ,OAAO,UAAU,GAAG,KAAK,MAAM,KAAK,iBAAiB,GAAG,CAAC,CAC9E,CACF;CACF,QAAQ,CAER;CACA,IAAI;EACF,MAAM,EAAE,WAAW,MAAM,cAAc,MAAM,CAAC,SAAS,YAAY,MAAM,GAAG;GAC1E,SAAS;GACT,UAAU;EACZ,CAAC;EACD,MAAM,OAAiB,CAAC;EACxB,KAAK,MAAM,SAAS,OAAO,SAAS,aAAa,GAAG;GAClD,MAAM,MAAM,OAAO,SAAS,MAAM,MAAM,IAAI,EAAE;GAC9C,IAAI,OAAO,UAAU,GAAG,KAAK,MAAM,KAAK,iBAAiB,GAAG,GAC1D,KAAK,KAAK,GAAG;EAEjB;EACA,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC;CAC1B,QAAQ;EACN,OAAO,CAAC;CACV;AACF"}