anypick 1.0.0 → 1.1.0

package/dist/core/model-discovery.js

@@ -1,127 +0,0 @@
-import { withMutationLock } from "./mutation-lock.js";
-import { createDirectEgress } from "../network/egress/index.js";
-//#region src/core/model-discovery.ts
-/** How long a fetched list is trusted without asking the vendor again. */
-var MODEL_CACHE_TTL_MS = 3600 * 1e3;
-var FETCH_TIMEOUT_MS = 6e3;
-var ModelDiscoveryService = class {
-	deps;
-	constructor(deps) {
-		this.deps = deps;
-	}
-	/**
-	* Best available model list for a provider/endpoint pair.
-	*
-	* Never throws for a network or vendor error — inspect `source` to see which
-	* step answered.
-	*/
-	async list(req) {
-		const policy = this.deps.policyFor(req.providerId);
-		const fallback = staticModels(policy);
-		const endpoint = normalizeEndpoint(req.endpoint ?? defaultEndpoint(policy));
-		if (!endpoint || !policy?.fetchLiveModels) return {
-			models: fallback,
-			source: "catalog",
-			note: "no live discovery for this provider"
-		};
-		const cached = await this.deps.cache.get(req.providerId, endpoint);
-		const now = this.deps.now?.() ?? Date.now();
-		if (!req.refresh && cached && isFresh(cached.fetchedAt, now)) return {
-			models: cached.models,
-			source: "cache",
-			fetchedAt: cached.fetchedAt
-		};
-		let origin;
-		try {
-			origin = new URL(endpoint).origin;
-		} catch {
-			return {
-				models: fallback,
-				source: "catalog",
-				note: `endpoint is not a URL: ${endpoint}`
-			};
-		}
-		try {
-			const fetchImpl = (this.deps.fetchImpl ?? allowlistedFetch)(origin);
-			const models = [...await policy.fetchLiveModels({
-				endpoint,
-				apiKey: req.apiKey,
-				fetch: fetchImpl
-			})];
-			if (models.length === 0) throw new Error("vendor returned no models");
-			const fetchedAt = new Date(now).toISOString();
-			await withMutationLock(this.deps.root, "model-cache", () => this.deps.cache.write({
-				provider: req.providerId,
-				endpoint,
-				models,
-				fetchedAt
-			}));
-			return {
-				models,
-				source: "live",
-				fetchedAt
-			};
-		} catch (err) {
-			const note = err instanceof Error ? err.message : String(err);
-			if (cached) return {
-				models: cached.models,
-				source: "stale",
-				fetchedAt: cached.fetchedAt,
-				note
-			};
-			return {
-				models: fallback,
-				source: "catalog",
-				note
-			};
-		}
-	}
-	/** Drop cached lists so the next `list` asks the vendor. */
-	async clearCache(providerId) {
-		await withMutationLock(this.deps.root, "model-cache", () => this.deps.cache.clear(providerId));
-	}
-};
-/**
-* A fetch bound to exactly one origin.
-*
-* The transport is built per call rather than shared because the allowed origin
-* is the endpoint being asked about: that is what makes an endpoint the user did
-* not configure unable to receive their API key.
-*/
-function allowlistedFetch(origin) {
-	const egress = createDirectEgress([origin]);
-	return async (target, init) => egress.fetch(target, {
-		...init,
-		signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
-	}, { operation: "catalog" });
-}
-function isFresh(fetchedAt, now) {
-	const at = Date.parse(fetchedAt);
-	return Number.isFinite(at) && now - at < 36e5;
-}
-function normalizeEndpoint(endpoint) {
-	return endpoint?.trim().replace(/\/+$/, "") || void 0;
-}
-function defaultEndpoint(policy) {
-	const candidate = policy?.defaultEndpoint;
-	return typeof candidate === "string" ? candidate : void 0;
-}
-/** Everything the provider offers offline: friendly ids, then alias targets. */
-function staticModels(policy) {
-	const out = [];
-	const seen = /* @__PURE__ */ new Set();
-	const push = (v) => {
-		if (v && !seen.has(v)) {
-			seen.add(v);
-			out.push(v);
-		}
-	};
-	for (const id of policy?.roleFriendlyModels?.() ?? []) push(id);
-	for (const id of Object.values(policy?.suggestModels?.() ?? {})) push(id);
-	for (const id of policy?.staticFallbackModels?.() ?? []) push(id);
-	return out;
-}
-//#endregion
-export { MODEL_CACHE_TTL_MS, ModelDiscoveryService };
-
-//# sourceMappingURL=model-discovery.js.map

package/dist/core/model-discovery.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"model-discovery.js","names":[],"sources":["../../src/core/model-discovery.ts"],"sourcesContent":["/**\n * Live model discovery with a cached fallback chain.\n *\n * The static catalog in `src/catalog/providers.ts` goes stale the moment a\n * vendor ships a model, and a user should not need a AnyPick release to select\n * one. So the answer is resolved in order:\n *\n *   1. a cache row younger than `TTL_MS`,\n *   2. a live `fetchLiveModels()` on the provider,\n *   3. a stale cache row, if the fetch failed,\n *   4. the provider's static catalog — always non-empty for known vendors.\n *\n * Nothing here can fail a caller: a model list is advisory, and a screen that\n * cannot render because a vendor is down would be worse than an outdated list.\n * `refresh` is therefore the only way to force step 2.\n *\n * Egress is allowlisted per call (ADR 0006 keeps proxy traffic on loopback; this\n * is the opposite direction — outbound, with the user's key attached). The\n * allowlist is the vendor origins AnyPick ships plus the origin already stored\n * in the user's own profile, so a rewritten endpoint cannot quietly receive a\n * credential that was issued for somewhere else.\n */\n\nimport type { ModelDiscoveryContext, ModelPolicy } from '../types';\nimport { createDirectEgress } from '../network/egress';\nimport { withMutationLock } from './mutation-lock';\nimport type { ModelCacheStore } from './model-cache-store';\n\n/** How long a fetched list is trusted without asking the vendor again. */\nexport const MODEL_CACHE_TTL_MS = 60 * 60 * 1000;\n\nconst FETCH_TIMEOUT_MS = 6000;\n\nexport type ModelListSource = 'live' | 'cache' | 'stale' | 'catalog';\n\nexport interface ModelListResult {\n  models: string[];\n  source: ModelListSource;\n  /** When the list was fetched, for `cache` and `stale`. */\n  fetchedAt?: string;\n  /** Why a live fetch did not happen or did not succeed. */\n  note?: string;\n}\n\nexport interface ModelDiscoveryRequest {\n  /** Catalog or account provider id. */\n  providerId: string;\n  /** Endpoint to query. Falls back to the provider's own default. */\n  endpoint?: string;\n  apiKey?: string;\n  /** Ignore a fresh cache row and ask the vendor. */\n  refresh?: boolean;\n}\n\nexport interface ModelDiscoveryDeps {\n  root: string;\n  cache: ModelCacheStore;\n  policyFor: (providerId: string) => ModelPolicy | undefined;\n  /** Overridden in tests; defaults to an allowlisted direct transport. */\n  fetchImpl?: (origin: string) => ModelDiscoveryContext['fetch'];\n  now?: () => number;\n}\n\nexport class ModelDiscoveryService {\n  constructor(private readonly deps: ModelDiscoveryDeps) {}\n\n  /**\n   * Best available model list for a provider/endpoint pair.\n   *\n   * Never throws for a network or vendor error — inspect `source` to see which\n   * step answered.\n   */\n  async list(req: ModelDiscoveryRequest): Promise<ModelListResult> {\n    const policy = this.deps.policyFor(req.providerId);\n    const fallback = staticModels(policy);\n    const endpoint = normalizeEndpoint(req.endpoint ?? defaultEndpoint(policy));\n\n    if (!endpoint || !policy?.fetchLiveModels) {\n      return { models: fallback, source: 'catalog', note: 'no live discovery for this provider' };\n    }\n\n    const cached = await this.deps.cache.get(req.providerId, endpoint);\n    const now = this.deps.now?.() ?? Date.now();\n    if (!req.refresh && cached && isFresh(cached.fetchedAt, now)) {\n      return { models: cached.models, source: 'cache', fetchedAt: cached.fetchedAt };\n    }\n\n    let origin: string;\n    try {\n      origin = new URL(endpoint).origin;\n    } catch {\n      return { models: fallback, source: 'catalog', note: `endpoint is not a URL: ${endpoint}` };\n    }\n\n    try {\n      const fetchImpl = (this.deps.fetchImpl ?? allowlistedFetch)(origin);\n      const models = [\n        ...(await policy.fetchLiveModels({ endpoint, apiKey: req.apiKey, fetch: fetchImpl })),\n      ];\n      if (models.length === 0) {\n        throw new Error('vendor returned no models');\n      }\n      const fetchedAt = new Date(now).toISOString();\n      // Cache writes are the one persisted mutation here, so they go through the\n      // coordinator like every other store write (ADR 0009).\n      await withMutationLock(this.deps.root, 'model-cache', () =>\n        this.deps.cache.write({ provider: req.providerId, endpoint, models, fetchedAt }),\n      );\n      return { models, source: 'live', fetchedAt };\n    } catch (err) {\n      const note = err instanceof Error ? err.message : String(err);\n      if (cached) {\n        return { models: cached.models, source: 'stale', fetchedAt: cached.fetchedAt, note };\n      }\n      return { models: fallback, source: 'catalog', note };\n    }\n  }\n\n  /** Drop cached lists so the next `list` asks the vendor. */\n  async clearCache(providerId?: string): Promise<void> {\n    await withMutationLock(this.deps.root, 'model-cache', () => this.deps.cache.clear(providerId));\n  }\n}\n\n/**\n * A fetch bound to exactly one origin.\n *\n * The transport is built per call rather than shared because the allowed origin\n * is the endpoint being asked about: that is what makes an endpoint the user did\n * not configure unable to receive their API key.\n */\nfunction allowlistedFetch(origin: string): ModelDiscoveryContext['fetch'] {\n  const egress = createDirectEgress([origin]);\n  return async (target, init) =>\n    egress.fetch(\n      target,\n      { ...init, signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) },\n      { operation: 'catalog' },\n    );\n}\n\nfunction isFresh(fetchedAt: string, now: number): boolean {\n  const at = Date.parse(fetchedAt);\n  return Number.isFinite(at) && now - at < MODEL_CACHE_TTL_MS;\n}\n\nfunction normalizeEndpoint(endpoint: string | undefined): string | undefined {\n  const trimmed = endpoint?.trim().replace(/\\/+$/, '');\n  return trimmed || undefined;\n}\n\nfunction defaultEndpoint(policy: ModelPolicy | undefined): string | undefined {\n  // `defaultEndpoint` belongs to CatalogProvider, not to ModelPolicy; account\n  // providers reach their models through a local proxy and pass an endpoint in.\n  const candidate = (policy as { defaultEndpoint?: unknown } | undefined)?.defaultEndpoint;\n  return typeof candidate === 'string' ? candidate : undefined;\n}\n\n/** Everything the provider offers offline: friendly ids, then alias targets. */\nfunction staticModels(policy: ModelPolicy | undefined): string[] {\n  const out: string[] = [];\n  const seen = new Set<string>();\n  const push = (v: string) => {\n    if (v && !seen.has(v)) {\n      seen.add(v);\n      out.push(v);\n    }\n  };\n  for (const id of policy?.roleFriendlyModels?.() ?? []) {\n    push(id);\n  }\n  for (const id of Object.values(policy?.suggestModels?.() ?? {})) {\n    push(id);\n  }\n  for (const id of policy?.staticFallbackModels?.() ?? []) {\n    push(id);\n  }\n  return out;\n}\n"],"mappings":";;;;AA6BA,IAAa,qBAAqB,OAAU;AAE5C,IAAM,mBAAmB;AAgCzB,IAAa,wBAAb,MAAmC;CACJ;CAA7B,YAAY,MAA2C;EAA1B,KAAA,OAAA;CAA2B;;;;;;;CAQxD,MAAM,KAAK,KAAsD;EAC/D,MAAM,SAAS,KAAK,KAAK,UAAU,IAAI,UAAU;EACjD,MAAM,WAAW,aAAa,MAAM;EACpC,MAAM,WAAW,kBAAkB,IAAI,YAAY,gBAAgB,MAAM,CAAC;EAE1E,IAAI,CAAC,YAAY,CAAC,QAAQ,iBACxB,OAAO;GAAE,QAAQ;GAAU,QAAQ;GAAW,MAAM;EAAsC;EAG5F,MAAM,SAAS,MAAM,KAAK,KAAK,MAAM,IAAI,IAAI,YAAY,QAAQ;EACjE,MAAM,MAAM,KAAK,KAAK,MAAM,KAAK,KAAK,IAAI;EAC1C,IAAI,CAAC,IAAI,WAAW,UAAU,QAAQ,OAAO,WAAW,GAAG,GACzD,OAAO;GAAE,QAAQ,OAAO;GAAQ,QAAQ;GAAS,WAAW,OAAO;EAAU;EAG/E,IAAI;EACJ,IAAI;GACF,SAAS,IAAI,IAAI,QAAQ,CAAC,CAAC;EAC7B,QAAQ;GACN,OAAO;IAAE,QAAQ;IAAU,QAAQ;IAAW,MAAM,0BAA0B;GAAW;EAC3F;EAEA,IAAI;GACF,MAAM,aAAa,KAAK,KAAK,aAAa,iBAAA,CAAkB,MAAM;GAClE,MAAM,SAAS,CACb,GAAI,MAAM,OAAO,gBAAgB;IAAE;IAAU,QAAQ,IAAI;IAAQ,OAAO;GAAU,CAAC,CACrF;GACA,IAAI,OAAO,WAAW,GACpB,MAAM,IAAI,MAAM,2BAA2B;GAE7C,MAAM,YAAY,IAAI,KAAK,GAAG,CAAC,CAAC,YAAY;GAG5C,MAAM,iBAAiB,KAAK,KAAK,MAAM,qBACrC,KAAK,KAAK,MAAM,MAAM;IAAE,UAAU,IAAI;IAAY;IAAU;IAAQ;GAAU,CAAC,CACjF;GACA,OAAO;IAAE;IAAQ,QAAQ;IAAQ;GAAU;EAC7C,SAAS,KAAK;GACZ,MAAM,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GAC5D,IAAI,QACF,OAAO;IAAE,QAAQ,OAAO;IAAQ,QAAQ;IAAS,WAAW,OAAO;IAAW;GAAK;GAErF,OAAO;IAAE,QAAQ;IAAU,QAAQ;IAAW;GAAK;EACrD;CACF;;CAGA,MAAM,WAAW,YAAoC;EACnD,MAAM,iBAAiB,KAAK,KAAK,MAAM,qBAAqB,KAAK,KAAK,MAAM,MAAM,UAAU,CAAC;CAC/F;AACF;;;;;;;;AASA,SAAS,iBAAiB,QAAgD;CACxE,MAAM,SAAS,mBAAmB,CAAC,MAAM,CAAC;CAC1C,OAAO,OAAO,QAAQ,SACpB,OAAO,MACL,QACA;EAAE,GAAG;EAAM,QAAQ,YAAY,QAAQ,gBAAgB;CAAE,GACzD,EAAE,WAAW,UAAU,CACzB;AACJ;AAEA,SAAS,QAAQ,WAAmB,KAAsB;CACxD,MAAM,KAAK,KAAK,MAAM,SAAS;CAC/B,OAAO,OAAO,SAAS,EAAE,KAAK,MAAM,KAAA;AACtC;AAEA,SAAS,kBAAkB,UAAkD;CAE3E,OADgB,UAAU,KAAK,CAAC,CAAC,QAAQ,QAAQ,EAAE,KACjC,KAAA;AACpB;AAEA,SAAS,gBAAgB,QAAqD;CAG5E,MAAM,YAAa,QAAsD;CACzE,OAAO,OAAO,cAAc,WAAW,YAAY,KAAA;AACrD;;AAGA,SAAS,aAAa,QAA2C;CAC/D,MAAM,MAAgB,CAAC;CACvB,MAAM,uBAAO,IAAI,IAAY;CAC7B,MAAM,QAAQ,MAAc;EAC1B,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG;GACrB,KAAK,IAAI,CAAC;GACV,IAAI,KAAK,CAAC;EACZ;CACF;CACA,KAAK,MAAM,MAAM,QAAQ,qBAAqB,KAAK,CAAC,GAClD,KAAK,EAAE;CAET,KAAK,MAAM,MAAM,OAAO,OAAO,QAAQ,gBAAgB,KAAK,CAAC,CAAC,GAC5D,KAAK,EAAE;CAET,KAAK,MAAM,MAAM,QAAQ,uBAAuB,KAAK,CAAC,GACpD,KAAK,EAAE;CAET,OAAO;AACT"}

package/dist/core/model-policy.d.ts

@@ -1,40 +0,0 @@
-/**
- * Model-policy resolution across both id spaces.
- *
- * AnyPick has two kinds of "provider": account providers (`codex`, `gemini`,
- * `grok`, …) that front a local login plus optional proxy, and catalog providers
- * (`openrouter`, `anthropic`, `grok-api`, …) that describe a remote gateway.
- * Both carry a `ModelPolicy`, and callers such as the model pickers hold only an
- * id string, so this resolves an id against whichever registry knows it.
- *
- * Account providers win on collision: `gemini` names the local CLI provider,
- * while the gateway catalog spells the API-key variant `gemini-api`.
- */
-import type { ModelCatalogDescriptor, ModelMap, ModelPolicy } from '../types.js';
-import type { ProviderRegistry } from './registry.js';
-import type { CatalogRegistry } from '../catalog/providers.js';
-export interface ModelPolicySources {
-    accountRegistry?: Pick<ProviderRegistry, 'has' | 'get'>;
-    catalog?: Pick<CatalogRegistry, 'has' | 'get'>;
-}
-/**
- * Convert a saved alias map into the picker catalog it explicitly exposes.
- * Runtime role defaults are intentionally not an input: they decide which
- * model starts a client, not which models the client advertises in its picker.
- */
-export declare function configuredModelCatalog(models: ModelMap): ModelCatalogDescriptor[];
-/**
- * Merge picker catalogs by model id while preserving source order and the
- * first source's labels. Later sources only enrich fields that were unknown;
- * this lets a configured alias remain stable while live provider metadata adds
- * truthful limits or capabilities.
- */
-export declare function mergeModelCatalogs(...sources: readonly (readonly ModelCatalogDescriptor[])[]): ModelCatalogDescriptor[];
-/**
- * Build a lookup usable by `defaultModelRolesForProxy` and friends. Returns
- * `undefined` for ids neither registry knows, which callers treat as "no
- * opinion" rather than as an error — a model picker must still render for an
- * unrecognized id.
- */
-export declare function modelPolicyLookup(sources: ModelPolicySources): (providerId: string) => ModelPolicy | undefined;
-//# sourceMappingURL=model-policy.d.ts.map

package/dist/core/model-policy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"model-policy.d.ts","sourceRoot":"","sources":["../../src/core/model-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC9E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5D,MAAM,WAAW,kBAAkB;IACjC,eAAe,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC;IACxD,OAAO,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC;CAChD;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,QAAQ,GAAG,sBAAsB,EAAE,CAgBjF;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,OAAO,EAAE,SAAS,CAAC,SAAS,sBAAsB,EAAE,CAAC,EAAE,GACzD,sBAAsB,EAAE,CAwC1B;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,kBAAkB,GAC1B,CAAC,UAAU,EAAE,MAAM,KAAK,WAAW,GAAG,SAAS,CAUjD"}

package/dist/core/model-policy.js

@@ -1,77 +0,0 @@
-//#region src/core/model-policy.ts
-/**
-* Convert a saved alias map into the picker catalog it explicitly exposes.
-* Runtime role defaults are intentionally not an input: they decide which
-* model starts a client, not which models the client advertises in its picker.
-*/
-function configuredModelCatalog(models) {
-	const result = [];
-	const seen = /* @__PURE__ */ new Set();
-	for (const [rawAlias, rawId] of Object.entries(models)) {
-		const id = rawId.trim();
-		if (!id || seen.has(id)) continue;
-		seen.add(id);
-		const alias = rawAlias.trim();
-		result.push({
-			id,
-			...alias && alias !== id ? { displayName: `${alias} (${id})` } : {}
-		});
-	}
-	return result;
-}
-/**
-* Merge picker catalogs by model id while preserving source order and the
-* first source's labels. Later sources only enrich fields that were unknown;
-* this lets a configured alias remain stable while live provider metadata adds
-* truthful limits or capabilities.
-*/
-function mergeModelCatalogs(...sources) {
-	const result = [];
-	const indexById = /* @__PURE__ */ new Map();
-	for (const source of sources) for (const descriptor of source) {
-		const id = descriptor.id.trim();
-		if (!id) continue;
-		const index = indexById.get(id);
-		if (index == null) {
-			indexById.set(id, result.length);
-			result.push({
-				...descriptor,
-				id
-			});
-			continue;
-		}
-		const current = result[index];
-		result[index] = {
-			id,
-			displayName: current.displayName ?? descriptor.displayName,
-			description: current.description ?? descriptor.description,
-			defaultReasoningLevel: current.defaultReasoningLevel ?? descriptor.defaultReasoningLevel,
-			supportedReasoningLevels: current.supportedReasoningLevels ?? descriptor.supportedReasoningLevels,
-			contextWindow: current.contextWindow ?? descriptor.contextWindow,
-			maxContextWindow: current.maxContextWindow ?? descriptor.maxContextWindow,
-			autoCompactTokenLimit: current.autoCompactTokenLimit ?? descriptor.autoCompactTokenLimit,
-			inputModalities: current.inputModalities ?? descriptor.inputModalities,
-			supportsParallelToolCalls: current.supportsParallelToolCalls ?? descriptor.supportsParallelToolCalls,
-			supportsSearchTool: current.supportsSearchTool ?? descriptor.supportsSearchTool,
-			supportsVerbosity: current.supportsVerbosity ?? descriptor.supportsVerbosity,
-			supportsImageDetailOriginal: current.supportsImageDetailOriginal ?? descriptor.supportsImageDetailOriginal
-		};
-	}
-	return result;
-}
-/**
-* Build a lookup usable by `defaultModelRolesForProxy` and friends. Returns
-* `undefined` for ids neither registry knows, which callers treat as "no
-* opinion" rather than as an error — a model picker must still render for an
-* unrecognized id.
-*/
-function modelPolicyLookup(sources) {
-	return (providerId) => {
-		if (sources.accountRegistry?.has(providerId)) return sources.accountRegistry.get(providerId);
-		if (sources.catalog?.has(providerId)) return sources.catalog.get(providerId);
-	};
-}
-//#endregion
-export { configuredModelCatalog, mergeModelCatalogs, modelPolicyLookup };
-
-//# sourceMappingURL=model-policy.js.map

package/dist/core/model-policy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"model-policy.js","names":[],"sources":["../../src/core/model-policy.ts"],"sourcesContent":["/**\n * Model-policy resolution across both id spaces.\n *\n * AnyPick has two kinds of \"provider\": account providers (`codex`, `gemini`,\n * `grok`, …) that front a local login plus optional proxy, and catalog providers\n * (`openrouter`, `anthropic`, `grok-api`, …) that describe a remote gateway.\n * Both carry a `ModelPolicy`, and callers such as the model pickers hold only an\n * id string, so this resolves an id against whichever registry knows it.\n *\n * Account providers win on collision: `gemini` names the local CLI provider,\n * while the gateway catalog spells the API-key variant `gemini-api`.\n */\n\nimport type { ModelCatalogDescriptor, ModelMap, ModelPolicy } from '../types';\nimport type { ProviderRegistry } from './registry';\nimport type { CatalogRegistry } from '../catalog/providers';\n\nexport interface ModelPolicySources {\n  accountRegistry?: Pick<ProviderRegistry, 'has' | 'get'>;\n  catalog?: Pick<CatalogRegistry, 'has' | 'get'>;\n}\n\n/**\n * Convert a saved alias map into the picker catalog it explicitly exposes.\n * Runtime role defaults are intentionally not an input: they decide which\n * model starts a client, not which models the client advertises in its picker.\n */\nexport function configuredModelCatalog(models: ModelMap): ModelCatalogDescriptor[] {\n  const result: ModelCatalogDescriptor[] = [];\n  const seen = new Set<string>();\n  for (const [rawAlias, rawId] of Object.entries(models)) {\n    const id = rawId.trim();\n    if (!id || seen.has(id)) {\n      continue;\n    }\n    seen.add(id);\n    const alias = rawAlias.trim();\n    result.push({\n      id,\n      ...(alias && alias !== id ? { displayName: `${alias} (${id})` } : {}),\n    });\n  }\n  return result;\n}\n\n/**\n * Merge picker catalogs by model id while preserving source order and the\n * first source's labels. Later sources only enrich fields that were unknown;\n * this lets a configured alias remain stable while live provider metadata adds\n * truthful limits or capabilities.\n */\nexport function mergeModelCatalogs(\n  ...sources: readonly (readonly ModelCatalogDescriptor[])[]\n): ModelCatalogDescriptor[] {\n  const result: ModelCatalogDescriptor[] = [];\n  const indexById = new Map<string, number>();\n\n  for (const source of sources) {\n    for (const descriptor of source) {\n      const id = descriptor.id.trim();\n      if (!id) {\n        continue;\n      }\n      const index = indexById.get(id);\n      if (index == null) {\n        indexById.set(id, result.length);\n        result.push({ ...descriptor, id });\n        continue;\n      }\n\n      const current = result[index];\n      result[index] = {\n        id,\n        displayName: current.displayName ?? descriptor.displayName,\n        description: current.description ?? descriptor.description,\n        defaultReasoningLevel: current.defaultReasoningLevel ?? descriptor.defaultReasoningLevel,\n        supportedReasoningLevels:\n          current.supportedReasoningLevels ?? descriptor.supportedReasoningLevels,\n        contextWindow: current.contextWindow ?? descriptor.contextWindow,\n        maxContextWindow: current.maxContextWindow ?? descriptor.maxContextWindow,\n        autoCompactTokenLimit: current.autoCompactTokenLimit ?? descriptor.autoCompactTokenLimit,\n        inputModalities: current.inputModalities ?? descriptor.inputModalities,\n        supportsParallelToolCalls:\n          current.supportsParallelToolCalls ?? descriptor.supportsParallelToolCalls,\n        supportsSearchTool: current.supportsSearchTool ?? descriptor.supportsSearchTool,\n        supportsVerbosity: current.supportsVerbosity ?? descriptor.supportsVerbosity,\n        supportsImageDetailOriginal:\n          current.supportsImageDetailOriginal ?? descriptor.supportsImageDetailOriginal,\n      };\n    }\n  }\n\n  return result;\n}\n\n/**\n * Build a lookup usable by `defaultModelRolesForProxy` and friends. Returns\n * `undefined` for ids neither registry knows, which callers treat as \"no\n * opinion\" rather than as an error — a model picker must still render for an\n * unrecognized id.\n */\nexport function modelPolicyLookup(\n  sources: ModelPolicySources,\n): (providerId: string) => ModelPolicy | undefined {\n  return (providerId: string): ModelPolicy | undefined => {\n    if (sources.accountRegistry?.has(providerId)) {\n      return sources.accountRegistry.get(providerId);\n    }\n    if (sources.catalog?.has(providerId)) {\n      return sources.catalog.get(providerId);\n    }\n    return undefined;\n  };\n}\n"],"mappings":";;;;;;AA2BA,SAAgB,uBAAuB,QAA4C;CACjF,MAAM,SAAmC,CAAC;CAC1C,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,CAAC,UAAU,UAAU,OAAO,QAAQ,MAAM,GAAG;EACtD,MAAM,KAAK,MAAM,KAAK;EACtB,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,GACpB;EAEF,KAAK,IAAI,EAAE;EACX,MAAM,QAAQ,SAAS,KAAK;EAC5B,OAAO,KAAK;GACV;GACA,GAAI,SAAS,UAAU,KAAK,EAAE,aAAa,GAAG,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC;EACrE,CAAC;CACH;CACA,OAAO;AACT;;;;;;;AAQA,SAAgB,mBACd,GAAG,SACuB;CAC1B,MAAM,SAAmC,CAAC;CAC1C,MAAM,4BAAY,IAAI,IAAoB;CAE1C,KAAK,MAAM,UAAU,SACnB,KAAK,MAAM,cAAc,QAAQ;EAC/B,MAAM,KAAK,WAAW,GAAG,KAAK;EAC9B,IAAI,CAAC,IACH;EAEF,MAAM,QAAQ,UAAU,IAAI,EAAE;EAC9B,IAAI,SAAS,MAAM;GACjB,UAAU,IAAI,IAAI,OAAO,MAAM;GAC/B,OAAO,KAAK;IAAE,GAAG;IAAY;GAAG,CAAC;GACjC;EACF;EAEA,MAAM,UAAU,OAAO;EACvB,OAAO,SAAS;GACd;GACA,aAAa,QAAQ,eAAe,WAAW;GAC/C,aAAa,QAAQ,eAAe,WAAW;GAC/C,uBAAuB,QAAQ,yBAAyB,WAAW;GACnE,0BACE,QAAQ,4BAA4B,WAAW;GACjD,eAAe,QAAQ,iBAAiB,WAAW;GACnD,kBAAkB,QAAQ,oBAAoB,WAAW;GACzD,uBAAuB,QAAQ,yBAAyB,WAAW;GACnE,iBAAiB,QAAQ,mBAAmB,WAAW;GACvD,2BACE,QAAQ,6BAA6B,WAAW;GAClD,oBAAoB,QAAQ,sBAAsB,WAAW;GAC7D,mBAAmB,QAAQ,qBAAqB,WAAW;GAC3D,6BACE,QAAQ,+BAA+B,WAAW;EACtD;CACF;CAGF,OAAO;AACT;;;;;;;AAQA,SAAgB,kBACd,SACiD;CACjD,QAAQ,eAAgD;EACtD,IAAI,QAAQ,iBAAiB,IAAI,UAAU,GACzC,OAAO,QAAQ,gBAAgB,IAAI,UAAU;EAE/C,IAAI,QAAQ,SAAS,IAAI,UAAU,GACjC,OAAO,QAAQ,QAAQ,IAAI,UAAU;CAGzC;AACF"}

package/dist/core/model-roles.d.ts

@@ -1,9 +0,0 @@
-/**
- * Core-side model-role extraction shared by core services (realign, runtime).
- *
- * Kept in core so `core` does not take value imports from the clients package.
- * Client-only role helpers remain in `src/clients/model-roles.ts`.
- */
-/** Extract modelRoles from binding clientOptions (best-effort). */
-export declare function modelRolesFromClientOptions(clientOptions: Record<string, unknown> | undefined): Record<string, string> | undefined;
-//# sourceMappingURL=model-roles.d.ts.map

package/dist/core/model-roles.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"model-roles.d.ts","sourceRoot":"","sources":["../../src/core/model-roles.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,mEAAmE;AACnE,wBAAgB,2BAA2B,CACzC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GACjD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAepC"}

package/dist/core/model-roles.js

@@ -1,20 +0,0 @@
-//#region src/core/model-roles.ts
-/**
-* Core-side model-role extraction shared by core services (realign, runtime).
-*
-* Kept in core so `core` does not take value imports from the clients package.
-* Client-only role helpers remain in `src/clients/model-roles.ts`.
-*/
-/** Extract modelRoles from binding clientOptions (best-effort). */
-function modelRolesFromClientOptions(clientOptions) {
-	if (!clientOptions || typeof clientOptions !== "object") return;
-	const raw = clientOptions.modelRoles;
-	if (!raw || typeof raw !== "object" || Array.isArray(raw)) return;
-	const out = {};
-	for (const [k, v] of Object.entries(raw)) if (typeof v === "string" && v.trim()) out[k] = v.trim();
-	return Object.keys(out).length ? out : void 0;
-}
-//#endregion
-export { modelRolesFromClientOptions };
-
-//# sourceMappingURL=model-roles.js.map

package/dist/core/model-roles.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"model-roles.js","names":[],"sources":["../../src/core/model-roles.ts"],"sourcesContent":["/**\n * Core-side model-role extraction shared by core services (realign, runtime).\n *\n * Kept in core so `core` does not take value imports from the clients package.\n * Client-only role helpers remain in `src/clients/model-roles.ts`.\n */\n\n/** Extract modelRoles from binding clientOptions (best-effort). */\nexport function modelRolesFromClientOptions(\n  clientOptions: Record<string, unknown> | undefined,\n): Record<string, string> | undefined {\n  if (!clientOptions || typeof clientOptions !== 'object') {\n    return undefined;\n  }\n  const raw = clientOptions.modelRoles;\n  if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {\n    return undefined;\n  }\n  const out: Record<string, string> = {};\n  for (const [k, v] of Object.entries(raw as Record<string, unknown>)) {\n    if (typeof v === 'string' && v.trim()) {\n      out[k] = v.trim();\n    }\n  }\n  return Object.keys(out).length ? out : undefined;\n}\n"],"mappings":";;;;;;;;AAQA,SAAgB,4BACd,eACoC;CACpC,IAAI,CAAC,iBAAiB,OAAO,kBAAkB,UAC7C;CAEF,MAAM,MAAM,cAAc;CAC1B,IAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,GACtD;CAEF,MAAM,MAA8B,CAAC;CACrC,KAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,GAA8B,GAChE,IAAI,OAAO,MAAM,YAAY,EAAE,KAAK,GAClC,IAAI,KAAK,EAAE,KAAK;CAGpB,OAAO,OAAO,KAAK,GAAG,CAAC,CAAC,SAAS,MAAM,KAAA;AACzC"}

package/dist/core/mutation-lock.d.ts

@@ -1,31 +0,0 @@
-/**
- * Scoped mutation locks for anypick data root (spec §23.3, ADR 0009).
- *
- * Locks are re-entrant *within one async context*. Services own their locking
- * (ADR 0009: correctness must not depend on the caller), which means a service
- * that locks `account/grok/work` is routinely called from an activation already
- * holding that same scope. Without re-entrancy the inner acquisition would spin
- * against its own outer lock and fail with STATE_CONFLICT, so every nested call
- * would have to know whether it was already locked — exactly the
- * caller-supplied-lock design ADR 0009 rejected.
- */
-import { type WithFileLockOptions } from '../utils/lock.js';
-export declare function mutationLockPath(root: string, scope: string): string;
-/** Lock paths held by the current async context. Exposed for assertions and tests. */
-export declare function heldMutationLocks(): ReadonlySet<string>;
-/** True when the current async context already holds `scope`. */
-export declare function holdsMutationLock(root: string, scope: string): boolean;
-/**
- * Run a mutation under a scoped exclusive lock.
- * Scopes typically: `client/<id>`, `account/<provider>/<name>`, `db`, `proxy/<provider>/<name>`.
- */
-export declare function withMutationLock<T>(root: string, scope: string, fn: () => Promise<T>, opts?: WithFileLockOptions): Promise<T>;
-/**
- * Nested locks for multi-resource mutations (client + source).
- *
- * Scopes are de-duplicated and acquired in sorted order, so two mutations whose
- * scope sets overlap can never deadlock. Scopes already held by this async
- * context are skipped instead of re-acquired.
- */
-export declare function withMutationLocks<T>(root: string, scopes: string[], fn: () => Promise<T>, opts?: WithFileLockOptions): Promise<T>;
-//# sourceMappingURL=mutation-lock.d.ts.map

package/dist/core/mutation-lock.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mutation-lock.d.ts","sourceRoot":"","sources":["../../src/core/mutation-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAgB,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAWvE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGpE;AAED,sFAAsF;AACtF,wBAAgB,iBAAiB,IAAI,WAAW,CAAC,MAAM,CAAC,CAEvD;AAED,iEAAiE;AACjE,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEtE;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EACtC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,CAAC,EAAE,mBAAmB,GACzB,OAAO,CAAC,CAAC,CAAC,CAEZ;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EAAE,EAChB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,CAAC,EAAE,mBAAmB,GACzB,OAAO,CAAC,CAAC,CAAC,CAuBZ"}

package/dist/core/mutation-lock.js

@@ -1,69 +0,0 @@
-import { getAnyPickRoot } from "./paths.js";
-import { withFileLock } from "../utils/lock.js";
-import { join } from "node:path";
-import { AsyncLocalStorage } from "node:async_hooks";
-//#region src/core/mutation-lock.ts
-/**
-* Scoped mutation locks for anypick data root (spec §23.3, ADR 0009).
-*
-* Locks are re-entrant *within one async context*. Services own their locking
-* (ADR 0009: correctness must not depend on the caller), which means a service
-* that locks `account/grok/work` is routinely called from an activation already
-* holding that same scope. Without re-entrancy the inner acquisition would spin
-* against its own outer lock and fail with STATE_CONFLICT, so every nested call
-* would have to know whether it was already locked — exactly the
-* caller-supplied-lock design ADR 0009 rejected.
-*/
-/**
-* Lock file paths held by the current async context. Identity is the resolved
-* path rather than the scope string, because scope sanitization is lossy.
-*/
-var heldLocks = new AsyncLocalStorage();
-var NO_LOCKS = /* @__PURE__ */ new Set();
-function mutationLockPath(root, scope) {
-	const safe = scope.replace(/[^a-zA-Z0-9._@/-]+/g, "_").replace(/\//g, "__");
-	return join(getAnyPickRoot(root), "locks", `${safe}.lock`);
-}
-/** Lock paths held by the current async context. Exposed for assertions and tests. */
-function heldMutationLocks() {
-	return heldLocks.getStore() ?? NO_LOCKS;
-}
-/**
-* Run a mutation under a scoped exclusive lock.
-* Scopes typically: `client/<id>`, `account/<provider>/<name>`, `db`, `proxy/<provider>/<name>`.
-*/
-async function withMutationLock(root, scope, fn, opts) {
-	return withMutationLocks(root, [scope], fn, opts);
-}
-/**
-* Nested locks for multi-resource mutations (client + source).
-*
-* Scopes are de-duplicated and acquired in sorted order, so two mutations whose
-* scope sets overlap can never deadlock. Scopes already held by this async
-* context are skipped instead of re-acquired.
-*/
-async function withMutationLocks(root, scopes, fn, opts) {
-	const held = heldMutationLocks();
-	const pending = /* @__PURE__ */ new Map();
-	for (const scope of [...new Set(scopes)].toSorted()) {
-		const path = mutationLockPath(root, scope);
-		if (!held.has(path) && !pending.has(path)) pending.set(path, scope);
-	}
-	if (pending.size === 0) return fn();
-	const nextHeld = new Set(held);
-	for (const path of pending.keys()) nextHeld.add(path);
-	return acquire([...pending], nextHeld, fn, opts);
-}
-async function acquire(pending, held, fn, opts) {
-	const head = pending[0];
-	if (!head) return heldLocks.run(held, fn);
-	const [path, scope] = head;
-	return withFileLock(path, () => acquire(pending.slice(1), held, fn, opts), {
-		resource: scope,
-		...opts
-	});
-}
-//#endregion
-export { heldMutationLocks, mutationLockPath, withMutationLock, withMutationLocks };
-
-//# sourceMappingURL=mutation-lock.js.map

package/dist/core/mutation-lock.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mutation-lock.js","names":[],"sources":["../../src/core/mutation-lock.ts"],"sourcesContent":["/**\n * Scoped mutation locks for anypick data root (spec §23.3, ADR 0009).\n *\n * Locks are re-entrant *within one async context*. Services own their locking\n * (ADR 0009: correctness must not depend on the caller), which means a service\n * that locks `account/grok/work` is routinely called from an activation already\n * holding that same scope. Without re-entrancy the inner acquisition would spin\n * against its own outer lock and fail with STATE_CONFLICT, so every nested call\n * would have to know whether it was already locked — exactly the\n * caller-supplied-lock design ADR 0009 rejected.\n */\n\nimport { AsyncLocalStorage } from 'node:async_hooks';\nimport { join } from 'node:path';\nimport { withFileLock, type WithFileLockOptions } from '../utils/lock';\nimport { getAnyPickRoot } from './paths';\n\n/**\n * Lock file paths held by the current async context. Identity is the resolved\n * path rather than the scope string, because scope sanitization is lossy.\n */\nconst heldLocks = new AsyncLocalStorage<ReadonlySet<string>>();\n\nconst NO_LOCKS: ReadonlySet<string> = new Set<string>();\n\nexport function mutationLockPath(root: string, scope: string): string {\n  const safe = scope.replace(/[^a-zA-Z0-9._@/-]+/g, '_').replace(/\\//g, '__');\n  return join(getAnyPickRoot(root), 'locks', `${safe}.lock`);\n}\n\n/** Lock paths held by the current async context. Exposed for assertions and tests. */\nexport function heldMutationLocks(): ReadonlySet<string> {\n  return heldLocks.getStore() ?? NO_LOCKS;\n}\n\n/** True when the current async context already holds `scope`. */\nexport function holdsMutationLock(root: string, scope: string): boolean {\n  return heldMutationLocks().has(mutationLockPath(root, scope));\n}\n\n/**\n * Run a mutation under a scoped exclusive lock.\n * Scopes typically: `client/<id>`, `account/<provider>/<name>`, `db`, `proxy/<provider>/<name>`.\n */\nexport async function withMutationLock<T>(\n  root: string,\n  scope: string,\n  fn: () => Promise<T>,\n  opts?: WithFileLockOptions,\n): Promise<T> {\n  return withMutationLocks(root, [scope], fn, opts);\n}\n\n/**\n * Nested locks for multi-resource mutations (client + source).\n *\n * Scopes are de-duplicated and acquired in sorted order, so two mutations whose\n * scope sets overlap can never deadlock. Scopes already held by this async\n * context are skipped instead of re-acquired.\n */\nexport async function withMutationLocks<T>(\n  root: string,\n  scopes: string[],\n  fn: () => Promise<T>,\n  opts?: WithFileLockOptions,\n): Promise<T> {\n  const held = heldMutationLocks();\n\n  // Sort by scope for a deterministic global acquisition order, then key by\n  // resolved path so two scopes that sanitize to the same file lock once.\n  const pending = new Map<string, string>();\n  for (const scope of [...new Set(scopes)].toSorted()) {\n    const path = mutationLockPath(root, scope);\n    if (!held.has(path) && !pending.has(path)) {\n      pending.set(path, scope);\n    }\n  }\n\n  if (pending.size === 0) {\n    return fn();\n  }\n\n  const nextHeld = new Set(held);\n  for (const path of pending.keys()) {\n    nextHeld.add(path);\n  }\n\n  return acquire([...pending], nextHeld, fn, opts);\n}\n\nasync function acquire<T>(\n  pending: Array<[path: string, scope: string]>,\n  held: ReadonlySet<string>,\n  fn: () => Promise<T>,\n  opts?: WithFileLockOptions,\n): Promise<T> {\n  const head = pending[0];\n  if (!head) {\n    // Every scope is held: publish the set so nested service calls re-enter.\n    return heldLocks.run(held, fn);\n  }\n  const [path, scope] = head;\n  return withFileLock(path, () => acquire(pending.slice(1), held, fn, opts), {\n    resource: scope,\n    ...opts,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAqBA,IAAM,YAAY,IAAI,kBAAuC;AAE7D,IAAM,2BAAgC,IAAI,IAAY;AAEtD,SAAgB,iBAAiB,MAAc,OAAuB;CACpE,MAAM,OAAO,MAAM,QAAQ,uBAAuB,GAAG,CAAC,CAAC,QAAQ,OAAO,IAAI;CAC1E,OAAO,KAAK,eAAe,IAAI,GAAG,SAAS,GAAG,KAAK,MAAM;AAC3D;;AAGA,SAAgB,oBAAyC;CACvD,OAAO,UAAU,SAAS,KAAK;AACjC;;;;;AAWA,eAAsB,iBACpB,MACA,OACA,IACA,MACY;CACZ,OAAO,kBAAkB,MAAM,CAAC,KAAK,GAAG,IAAI,IAAI;AAClD;;;;;;;;AASA,eAAsB,kBACpB,MACA,QACA,IACA,MACY;CACZ,MAAM,OAAO,kBAAkB;CAI/B,MAAM,0BAAU,IAAI,IAAoB;CACxC,KAAK,MAAM,SAAS,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,SAAS,GAAG;EACnD,MAAM,OAAO,iBAAiB,MAAM,KAAK;EACzC,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,GACtC,QAAQ,IAAI,MAAM,KAAK;CAE3B;CAEA,IAAI,QAAQ,SAAS,GACnB,OAAO,GAAG;CAGZ,MAAM,WAAW,IAAI,IAAI,IAAI;CAC7B,KAAK,MAAM,QAAQ,QAAQ,KAAK,GAC9B,SAAS,IAAI,IAAI;CAGnB,OAAO,QAAQ,CAAC,GAAG,OAAO,GAAG,UAAU,IAAI,IAAI;AACjD;AAEA,eAAe,QACb,SACA,MACA,IACA,MACY;CACZ,MAAM,OAAO,QAAQ;CACrB,IAAI,CAAC,MAEH,OAAO,UAAU,IAAI,MAAM,EAAE;CAE/B,MAAM,CAAC,MAAM,SAAS;CACtB,OAAO,aAAa,YAAY,QAAQ,QAAQ,MAAM,CAAC,GAAG,MAAM,IAAI,IAAI,GAAG;EACzE,UAAU;EACV,GAAG;CACL,CAAC;AACH"}

package/dist/core/paths.d.ts

@@ -1,49 +0,0 @@
-/**
- * Resolve the AnyPick data root.
- *
- * AnyPick always keeps its state under ~/.anypick unless an explicit override
- * or ANYPICK_HOME is supplied.
- */
-export declare function getAnyPickRoot(override?: string): string;
-export declare function providerDir(root: string, providerId: string): string;
-export declare function accountsDir(root: string, providerId: string): string;
-export declare function accountDir(root: string, providerId: string, accountName: string): string;
-export declare function accountMetaPath(root: string, providerId: string, accountName: string): string;
-export declare function accountSnapshotDir(root: string, providerId: string, accountName: string): string;
-/** File holding the name of the currently active account for a provider. */
-export declare function activePointerPath(root: string, providerId: string): string;
-/** Per-account proxy configuration (enabled, port, options). */
-export declare function accountProxyConfigPath(root: string, providerId: string, accountName: string): string;
-/**
- * Writable runtime directory for an account's proxy process
- * (pid, logs, state). Isolated per provider + account.
- */
-export declare function accountProxyRuntimeDir(root: string, providerId: string, accountName: string): string;
-export declare function proxyPidPath(root: string, providerId: string, accountName: string): string;
-export declare function proxyLogPath(root: string, providerId: string, accountName: string): string;
-export declare function proxyStatePath(root: string, providerId: string, accountName: string): string;
-export declare function proxyHubRuntimeDir(root: string, name: string): string;
-export declare function proxyHubPidPath(root: string, name: string): string;
-export declare function proxyHubLogPath(root: string, name: string): string;
-export declare function configPath(root: string): string;
-/** Primary SQLite database for structured anypick data. */
-export declare function anypickDbPath(root: string): string;
-export declare function profilesDir(root: string): string;
-export declare function profileDir(root: string, profileName: string): string;
-export declare function profileMetaPath(root: string, profileName: string): string;
-export declare function profileSecretsPath(root: string, profileName: string): string;
-export declare function clientsDir(root: string): string;
-export declare function clientDir(root: string, clientId: string): string;
-export declare function clientStatePath(root: string, clientId: string): string;
-export declare function clientBackupDir(root: string, clientId: string): string;
-/**
- * Owner-only recovery directory for durable crash backups (TXN-01). Backups of
- * overwritten client config files live here — inside the AnyPick root, not the
- * system temp dir — so they survive a crash and are never world-readable.
- * Created with mode 0o700 (owner-only).
- */
-export declare function recoveryDir(root: string): string;
-export declare function clientRecoveryDir(root: string, clientId: string): string;
-export declare function clientEnvPath(root: string, clientId: string): string;
-export declare function clientEnvPs1Path(root: string, clientId: string): string;
-//# sourceMappingURL=paths.d.ts.map

package/dist/core/paths.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/core/paths.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAQxD;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAExF;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAE7F;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAEhG;AAED,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED,gEAAgE;AAChE,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,MAAM,CAER;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,MAAM,CAER;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAE1F;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAE1F;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAE5F;AAID,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAElE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAElE;AAID,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,2DAA2D;AAC3D,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAElD;AAID,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAE5E;AAID,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAExE;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEvE"}

package/dist/core/paths.js

@@ -1,110 +0,0 @@
-import { expandHome } from "../utils/fs.js";
-import { join } from "node:path";
-import { homedir } from "node:os";
-//#region src/core/paths.ts
-/**
-* Resolve the AnyPick data root.
-*
-* AnyPick always keeps its state under ~/.anypick unless an explicit override
-* or ANYPICK_HOME is supplied.
-*/
-function getAnyPickRoot(override) {
-	if (override) return expandHome(override);
-	if (process.env.ANYPICK_HOME) return expandHome(process.env.ANYPICK_HOME);
-	return join(homedir(), ".anypick");
-}
-function providerDir(root, providerId) {
-	return join(root, "providers", providerId);
-}
-function accountsDir(root, providerId) {
-	return join(providerDir(root, providerId), "accounts");
-}
-function accountDir(root, providerId, accountName) {
-	return join(accountsDir(root, providerId), accountName);
-}
-function accountMetaPath(root, providerId, accountName) {
-	return join(accountDir(root, providerId, accountName), "meta.json");
-}
-function accountSnapshotDir(root, providerId, accountName) {
-	return join(accountDir(root, providerId, accountName), "snapshot");
-}
-/** File holding the name of the currently active account for a provider. */
-function activePointerPath(root, providerId) {
-	return join(providerDir(root, providerId), "active");
-}
-/** Per-account proxy configuration (enabled, port, options). */
-function accountProxyConfigPath(root, providerId, accountName) {
-	return join(accountDir(root, providerId, accountName), "proxy.json");
-}
-/**
-* Writable runtime directory for an account's proxy process
-* (pid, logs, state). Isolated per provider + account.
-*/
-function accountProxyRuntimeDir(root, providerId, accountName) {
-	return join(accountDir(root, providerId, accountName), "runtime");
-}
-function proxyPidPath(root, providerId, accountName) {
-	return join(accountProxyRuntimeDir(root, providerId, accountName), "proxy.pid");
-}
-function proxyLogPath(root, providerId, accountName) {
-	return join(accountProxyRuntimeDir(root, providerId, accountName), "proxy.log");
-}
-function proxyHubRuntimeDir(root, name) {
-	return join(root, "proxy-hub", name);
-}
-function proxyHubPidPath(root, name) {
-	return join(proxyHubRuntimeDir(root, name), "hub.pid");
-}
-function proxyHubLogPath(root, name) {
-	return join(proxyHubRuntimeDir(root, name), "hub.log");
-}
-function configPath(root) {
-	return join(root, "config.json");
-}
-/** Primary SQLite database for structured anypick data. */
-function anypickDbPath(root) {
-	return join(root, "anypick.db");
-}
-function profilesDir(root) {
-	return join(root, "profiles");
-}
-function profileDir(root, profileName) {
-	return join(profilesDir(root), profileName);
-}
-function profileMetaPath(root, profileName) {
-	return join(profileDir(root, profileName), "profile.json");
-}
-function profileSecretsPath(root, profileName) {
-	return join(profileDir(root, profileName), "secrets.json");
-}
-function clientsDir(root) {
-	return join(root, "clients");
-}
-function clientDir(root, clientId) {
-	return join(clientsDir(root), clientId);
-}
-function clientStatePath(root, clientId) {
-	return join(clientDir(root, clientId), "state.json");
-}
-function clientBackupDir(root, clientId) {
-	return join(clientDir(root, clientId), "backup");
-}
-/**
-* Owner-only recovery directory for durable crash backups (TXN-01). Backups of
-* overwritten client config files live here — inside the AnyPick root, not the
-* system temp dir — so they survive a crash and are never world-readable.
-* Created with mode 0o700 (owner-only).
-*/
-function recoveryDir(root) {
-	return join(root, "recovery");
-}
-function clientEnvPath(root, clientId) {
-	return join(clientDir(root, clientId), "env.sh");
-}
-function clientEnvPs1Path(root, clientId) {
-	return join(clientDir(root, clientId), "env.ps1");
-}
-//#endregion
-export { accountDir, accountMetaPath, accountProxyConfigPath, accountProxyRuntimeDir, accountSnapshotDir, accountsDir, activePointerPath, anypickDbPath, clientBackupDir, clientDir, clientEnvPath, clientEnvPs1Path, clientStatePath, clientsDir, configPath, getAnyPickRoot, profileDir, profileMetaPath, profileSecretsPath, profilesDir, providerDir, proxyHubLogPath, proxyHubPidPath, proxyHubRuntimeDir, proxyLogPath, proxyPidPath, recoveryDir };
-
-//# sourceMappingURL=paths.js.map

package/dist/core/paths.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"paths.js","names":[],"sources":["../../src/core/paths.ts"],"sourcesContent":["import { join } from 'node:path';\nimport { homedir } from 'node:os';\nimport { expandHome } from '../utils/fs';\n\n/**\n * Resolve the AnyPick data root.\n *\n * AnyPick always keeps its state under ~/.anypick unless an explicit override\n * or ANYPICK_HOME is supplied.\n */\nexport function getAnyPickRoot(override?: string): string {\n  if (override) {\n    return expandHome(override);\n  }\n  if (process.env.ANYPICK_HOME) {\n    return expandHome(process.env.ANYPICK_HOME);\n  }\n  return join(homedir(), '.anypick');\n}\n\nexport function providerDir(root: string, providerId: string): string {\n  return join(root, 'providers', providerId);\n}\n\nexport function accountsDir(root: string, providerId: string): string {\n  return join(providerDir(root, providerId), 'accounts');\n}\n\nexport function accountDir(root: string, providerId: string, accountName: string): string {\n  return join(accountsDir(root, providerId), accountName);\n}\n\nexport function accountMetaPath(root: string, providerId: string, accountName: string): string {\n  return join(accountDir(root, providerId, accountName), 'meta.json');\n}\n\nexport function accountSnapshotDir(root: string, providerId: string, accountName: string): string {\n  return join(accountDir(root, providerId, accountName), 'snapshot');\n}\n\n/** File holding the name of the currently active account for a provider. */\nexport function activePointerPath(root: string, providerId: string): string {\n  return join(providerDir(root, providerId), 'active');\n}\n\n/** Per-account proxy configuration (enabled, port, options). */\nexport function accountProxyConfigPath(\n  root: string,\n  providerId: string,\n  accountName: string,\n): string {\n  return join(accountDir(root, providerId, accountName), 'proxy.json');\n}\n\n/**\n * Writable runtime directory for an account's proxy process\n * (pid, logs, state). Isolated per provider + account.\n */\nexport function accountProxyRuntimeDir(\n  root: string,\n  providerId: string,\n  accountName: string,\n): string {\n  return join(accountDir(root, providerId, accountName), 'runtime');\n}\n\nexport function proxyPidPath(root: string, providerId: string, accountName: string): string {\n  return join(accountProxyRuntimeDir(root, providerId, accountName), 'proxy.pid');\n}\n\nexport function proxyLogPath(root: string, providerId: string, accountName: string): string {\n  return join(accountProxyRuntimeDir(root, providerId, accountName), 'proxy.log');\n}\n\nexport function proxyStatePath(root: string, providerId: string, accountName: string): string {\n  return join(accountProxyRuntimeDir(root, providerId, accountName), 'state.json');\n}\n\n// ── Unified Proxy Hub ────────────────────────────────────────────\n\nexport function proxyHubRuntimeDir(root: string, name: string): string {\n  return join(root, 'proxy-hub', name);\n}\n\nexport function proxyHubPidPath(root: string, name: string): string {\n  return join(proxyHubRuntimeDir(root, name), 'hub.pid');\n}\n\nexport function proxyHubLogPath(root: string, name: string): string {\n  return join(proxyHubRuntimeDir(root, name), 'hub.log');\n}\n\n// ── Global config / database ─────────────────────────────────────\n\nexport function configPath(root: string): string {\n  return join(root, 'config.json');\n}\n\n/** Primary SQLite database for structured anypick data. */\nexport function anypickDbPath(root: string): string {\n  return join(root, 'anypick.db');\n}\n\n// ── Runtime profiles ─────────────────────────────────────────────\n\nexport function profilesDir(root: string): string {\n  return join(root, 'profiles');\n}\n\nexport function profileDir(root: string, profileName: string): string {\n  return join(profilesDir(root), profileName);\n}\n\nexport function profileMetaPath(root: string, profileName: string): string {\n  return join(profileDir(root, profileName), 'profile.json');\n}\n\nexport function profileSecretsPath(root: string, profileName: string): string {\n  return join(profileDir(root, profileName), 'secrets.json');\n}\n\n// ── Client state ─────────────────────────────────────────────────\n\nexport function clientsDir(root: string): string {\n  return join(root, 'clients');\n}\n\nexport function clientDir(root: string, clientId: string): string {\n  return join(clientsDir(root), clientId);\n}\n\nexport function clientStatePath(root: string, clientId: string): string {\n  return join(clientDir(root, clientId), 'state.json');\n}\n\nexport function clientBackupDir(root: string, clientId: string): string {\n  return join(clientDir(root, clientId), 'backup');\n}\n\n/**\n * Owner-only recovery directory for durable crash backups (TXN-01). Backups of\n * overwritten client config files live here — inside the AnyPick root, not the\n * system temp dir — so they survive a crash and are never world-readable.\n * Created with mode 0o700 (owner-only).\n */\nexport function recoveryDir(root: string): string {\n  return join(root, 'recovery');\n}\n\nexport function clientRecoveryDir(root: string, clientId: string): string {\n  return join(recoveryDir(root), 'clients', clientId);\n}\n\nexport function clientEnvPath(root: string, clientId: string): string {\n  return join(clientDir(root, clientId), 'env.sh');\n}\n\nexport function clientEnvPs1Path(root: string, clientId: string): string {\n  return join(clientDir(root, clientId), 'env.ps1');\n}\n"],"mappings":";;;;;;;;;;AAUA,SAAgB,eAAe,UAA2B;CACxD,IAAI,UACF,OAAO,WAAW,QAAQ;CAE5B,IAAI,QAAQ,IAAI,cACd,OAAO,WAAW,QAAQ,IAAI,YAAY;CAE5C,OAAO,KAAK,QAAQ,GAAG,UAAU;AACnC;AAEA,SAAgB,YAAY,MAAc,YAA4B;CACpE,OAAO,KAAK,MAAM,aAAa,UAAU;AAC3C;AAEA,SAAgB,YAAY,MAAc,YAA4B;CACpE,OAAO,KAAK,YAAY,MAAM,UAAU,GAAG,UAAU;AACvD;AAEA,SAAgB,WAAW,MAAc,YAAoB,aAA6B;CACxF,OAAO,KAAK,YAAY,MAAM,UAAU,GAAG,WAAW;AACxD;AAEA,SAAgB,gBAAgB,MAAc,YAAoB,aAA6B;CAC7F,OAAO,KAAK,WAAW,MAAM,YAAY,WAAW,GAAG,WAAW;AACpE;AAEA,SAAgB,mBAAmB,MAAc,YAAoB,aAA6B;CAChG,OAAO,KAAK,WAAW,MAAM,YAAY,WAAW,GAAG,UAAU;AACnE;;AAGA,SAAgB,kBAAkB,MAAc,YAA4B;CAC1E,OAAO,KAAK,YAAY,MAAM,UAAU,GAAG,QAAQ;AACrD;;AAGA,SAAgB,uBACd,MACA,YACA,aACQ;CACR,OAAO,KAAK,WAAW,MAAM,YAAY,WAAW,GAAG,YAAY;AACrE;;;;;AAMA,SAAgB,uBACd,MACA,YACA,aACQ;CACR,OAAO,KAAK,WAAW,MAAM,YAAY,WAAW,GAAG,SAAS;AAClE;AAEA,SAAgB,aAAa,MAAc,YAAoB,aAA6B;CAC1F,OAAO,KAAK,uBAAuB,MAAM,YAAY,WAAW,GAAG,WAAW;AAChF;AAEA,SAAgB,aAAa,MAAc,YAAoB,aAA6B;CAC1F,OAAO,KAAK,uBAAuB,MAAM,YAAY,WAAW,GAAG,WAAW;AAChF;AAQA,SAAgB,mBAAmB,MAAc,MAAsB;CACrE,OAAO,KAAK,MAAM,aAAa,IAAI;AACrC;AAEA,SAAgB,gBAAgB,MAAc,MAAsB;CAClE,OAAO,KAAK,mBAAmB,MAAM,IAAI,GAAG,SAAS;AACvD;AAEA,SAAgB,gBAAgB,MAAc,MAAsB;CAClE,OAAO,KAAK,mBAAmB,MAAM,IAAI,GAAG,SAAS;AACvD;AAIA,SAAgB,WAAW,MAAsB;CAC/C,OAAO,KAAK,MAAM,aAAa;AACjC;;AAGA,SAAgB,cAAc,MAAsB;CAClD,OAAO,KAAK,MAAM,YAAY;AAChC;AAIA,SAAgB,YAAY,MAAsB;CAChD,OAAO,KAAK,MAAM,UAAU;AAC9B;AAEA,SAAgB,WAAW,MAAc,aAA6B;CACpE,OAAO,KAAK,YAAY,IAAI,GAAG,WAAW;AAC5C;AAEA,SAAgB,gBAAgB,MAAc,aAA6B;CACzE,OAAO,KAAK,WAAW,MAAM,WAAW,GAAG,cAAc;AAC3D;AAEA,SAAgB,mBAAmB,MAAc,aAA6B;CAC5E,OAAO,KAAK,WAAW,MAAM,WAAW,GAAG,cAAc;AAC3D;AAIA,SAAgB,WAAW,MAAsB;CAC/C,OAAO,KAAK,MAAM,SAAS;AAC7B;AAEA,SAAgB,UAAU,MAAc,UAA0B;CAChE,OAAO,KAAK,WAAW,IAAI,GAAG,QAAQ;AACxC;AAEA,SAAgB,gBAAgB,MAAc,UAA0B;CACtE,OAAO,KAAK,UAAU,MAAM,QAAQ,GAAG,YAAY;AACrD;AAEA,SAAgB,gBAAgB,MAAc,UAA0B;CACtE,OAAO,KAAK,UAAU,MAAM,QAAQ,GAAG,QAAQ;AACjD;;;;;;;AAQA,SAAgB,YAAY,MAAsB;CAChD,OAAO,KAAK,MAAM,UAAU;AAC9B;AAMA,SAAgB,cAAc,MAAc,UAA0B;CACpE,OAAO,KAAK,UAAU,MAAM,QAAQ,GAAG,QAAQ;AACjD;AAEA,SAAgB,iBAAiB,MAAc,UAA0B;CACvE,OAAO,KAAK,UAAU,MAAM,QAAQ,GAAG,SAAS;AAClD"}