anypick 1.0.0 → 1.1.0

package/dist/core/plugin-loader.d.ts

@@ -1,40 +0,0 @@
-import { type PluginLoadResult, type PluginManifest, type PluginRecord } from '../types.js';
-export declare const PLUGIN_MANIFEST_FILE = "anypick.plugin.json";
-/**
- * Resolve the entry module inside `root`, refusing anything that escapes it.
- *
- * `main` comes from a file the user may have obtained from a third party, so a
- * `../../` entry must not be able to make AnyPick import an arbitrary module
- * from elsewhere on disk under the plugin's name.
- */
-export declare function resolveEntry(root: string, main: string): string;
-export declare function parseManifest(raw: string, source: string): PluginManifest;
-export declare function readManifest(root: string): Promise<PluginManifest>;
-/**
- * SHA-256 of one file. Kept for tests and migration diagnostics; trust pins use
- * `digestPluginPackage` so helper modules cannot change under a trusted entry.
- */
-export declare function digestEntry(entry: string): Promise<string>;
-/**
- * SHA-256 over the whole plugin package, not just the entry module.
- *
- * Format (stable, path-order sorted):
- *   for each relative POSIX path under the plugin root:
- *     path\\0 + byteLength\\0 + fileBytes
- *
- * Hashing only `main` would let a compromised helper module change while the
- * trusted entry stayed identical (ADR 0012). Manifest + every shipped file are
- * included so an install is a fixed artifact.
- */
-export declare function digestPluginPackage(root: string): Promise<string>;
-/**
- * Load every enabled plugin.
- *
- * A broken or tampered plugin is reported as a failure and skipped rather than
- * aborting startup: the framework's job is switching real logins, and one bad
- * third-party extension must not make `anypick` unusable (ADR 0012).
- */
-export declare function loadPlugins(records: PluginRecord[]): Promise<PluginLoadResult>;
-/** `ANYPICK_NO_PLUGINS=1` skips loading entirely, for bisecting a bad plugin. */
-export declare function pluginsDisabledByEnv(): boolean;
-//# sourceMappingURL=plugin-loader.d.ts.map

package/dist/core/plugin-loader.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"plugin-loader.d.ts","sourceRoot":"","sources":["../../src/core/plugin-loader.ts"],"names":[],"mappings":"AAIA,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,YAAY,EAClB,MAAM,UAAU,CAAC;AAGlB,eAAO,MAAM,oBAAoB,wBAAwB,CAAC;AAsB1D;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAU/D;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc,CAoCzE;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAYxE;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGhE;AA4BD;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAmBvE;AAoDD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAsBpF;AAED,iFAAiF;AACjF,wBAAgB,oBAAoB,IAAI,OAAO,CAG9C"}

package/dist/core/plugin-loader.js

@@ -1,184 +0,0 @@
-import "../types/plugins.js";
-import { ExitCode, anypickError } from "../utils/errors.js";
-import { isAbsolute, join, relative, resolve, sep } from "node:path";
-import { readFile, readdir, stat } from "node:fs/promises";
-import { createHash } from "node:crypto";
-import { pathToFileURL } from "node:url";
-//#region src/core/plugin-loader.ts
-var PLUGIN_MANIFEST_FILE = "anypick.plugin.json";
-/** Plugin names are used as directory-independent keys and printed in receipts. */
-var NAME_PATTERN = /^[a-z0-9][a-z0-9-]{1,63}$/;
-/** Directory names skipped when hashing a plugin package (dev debris / VCS). */
-var DIGEST_SKIP_DIRS = /* @__PURE__ */ new Set([
-	".git",
-	".hg",
-	".svn",
-	"node_modules",
-	".DS_Store",
-	"__pycache__"
-]);
-function fail(message, suggestions = []) {
-	throw anypickError(message, "PLUGIN_INVALID", {
-		exitCode: ExitCode.OPERATIONAL,
-		suggestions
-	});
-}
-/**
-* Resolve the entry module inside `root`, refusing anything that escapes it.
-*
-* `main` comes from a file the user may have obtained from a third party, so a
-* `../../` entry must not be able to make AnyPick import an arbitrary module
-* from elsewhere on disk under the plugin's name.
-*/
-function resolveEntry(root, main) {
-	if (isAbsolute(main)) fail(`Plugin entry "${main}" must be a path relative to the plugin directory.`);
-	const entry = resolve(root, main);
-	const rel = relative(root, entry);
-	if (rel.startsWith("..") || isAbsolute(rel)) fail(`Plugin entry "${main}" resolves outside the plugin directory.`);
-	return entry;
-}
-function parseManifest(raw, source) {
-	let data;
-	try {
-		data = JSON.parse(raw);
-	} catch {
-		fail(`${source} is not valid JSON.`);
-	}
-	if (typeof data !== "object" || data === null) fail(`${source} must contain a JSON object.`);
-	const m = data;
-	const name = m.name;
-	if (typeof name !== "string" || !NAME_PATTERN.test(name)) fail(`${source} has an invalid "name". Use lowercase letters, digits, and hyphens (2-64 characters).`);
-	if (typeof m.version !== "string" || m.version.length === 0) fail(`${source} is missing a "version" string.`);
-	if (typeof m.main !== "string" || m.main.length === 0) fail(`${source} is missing a "main" entry module path.`);
-	if (m.apiVersion !== 1) fail(`Plugin ${name} targets AnyPick plugin API ${String(m.apiVersion)}; this build supports 1.`, [`Update the plugin, or use a AnyPick release that supports API ${String(m.apiVersion)}.`]);
-	return {
-		name,
-		version: m.version,
-		description: typeof m.description === "string" ? m.description : void 0,
-		apiVersion: 1,
-		main: m.main
-	};
-}
-async function readManifest(root) {
-	const path = join(root, PLUGIN_MANIFEST_FILE);
-	try {
-		return parseManifest(await readFile(path, "utf8"), path);
-	} catch (error) {
-		if (error.code !== "ENOENT") throw error;
-	}
-	return fail(`No ${PLUGIN_MANIFEST_FILE} found in ${root}.`, [`A AnyPick plugin is a directory containing ${PLUGIN_MANIFEST_FILE}.`]);
-}
-async function listPluginFiles(root) {
-	const out = [];
-	async function walk(dir) {
-		const entries = await readdir(dir, { withFileTypes: true });
-		for (const entry of entries) {
-			if (DIGEST_SKIP_DIRS.has(entry.name)) continue;
-			const full = join(dir, entry.name);
-			if (entry.isDirectory()) {
-				await walk(full);
-				continue;
-			}
-			if (entry.isFile() || entry.isSymbolicLink()) {
-				if ((await stat(full).catch(() => null))?.isFile()) out.push(full);
-			}
-		}
-	}
-	await walk(root);
-	return out;
-}
-/**
-* SHA-256 over the whole plugin package, not just the entry module.
-*
-* Format (stable, path-order sorted):
-*   for each relative POSIX path under the plugin root:
-*     path\\0 + byteLength\\0 + fileBytes
-*
-* Hashing only `main` would let a compromised helper module change while the
-* trusted entry stayed identical (ADR 0012). Manifest + every shipped file are
-* included so an install is a fixed artifact.
-*/
-async function digestPluginPackage(root) {
-	const rels = (await listPluginFiles(root)).map((full) => ({
-		full,
-		rel: relative(root, full).split(sep).join("/")
-	})).toSorted((a, b) => a.rel.localeCompare(b.rel));
-	const hash = createHash("sha256");
-	for (const { full, rel } of rels) {
-		const bytes = await readFile(full);
-		hash.update(rel);
-		hash.update("\0");
-		hash.update(String(bytes.byteLength));
-		hash.update("\0");
-		hash.update(bytes);
-	}
-	return hash.digest("hex");
-}
-function isPlugin(value) {
-	return typeof value === "object" && value !== null && typeof value.activate === "function";
-}
-/**
-* Import one plugin's entry module and hand back its `activate`.
-*
-* The digest is checked *before* the import: once `import()` runs, arbitrary
-* module top-level code has already executed in a process holding credential
-* file handles, so verification after the fact would be theatre.
-*/
-async function loadOne(record) {
-	const manifest = await readManifest(record.path);
-	if (manifest.name !== record.name) fail(`Plugin at ${record.path} now calls itself "${manifest.name}" but is installed as "${record.name}".`, ["Remove and re-add the plugin."]);
-	const entry = resolveEntry(record.path, manifest.main);
-	if (await digestPluginPackage(record.path) !== record.digest) throw anypickError(`Plugin ${record.name} has changed since you trusted it.`, "PLUGIN_UNTRUSTED", {
-		exitCode: ExitCode.OPERATIONAL,
-		suggestions: [`Review the change, then run: anypick plugin trust ${record.name}`, `Or remove it: anypick plugin remove ${record.name}`]
-	});
-	const mod = await import(pathToFileURL(entry).href);
-	const exported = mod.default ?? mod;
-	if (!isPlugin(exported)) fail(`Plugin ${record.name} does not export an object with an "activate" function.`);
-	return {
-		manifest,
-		plugin: exported
-	};
-}
-/**
-* Load every enabled plugin.
-*
-* A broken or tampered plugin is reported as a failure and skipped rather than
-* aborting startup: the framework's job is switching real logins, and one bad
-* third-party extension must not make `anypick` unusable (ADR 0012).
-*/
-async function loadPlugins(records) {
-	const loaded = [];
-	const failures = [];
-	for (const record of records) {
-		if (!record.enabled) continue;
-		try {
-			const { manifest, plugin } = await loadOne(record);
-			loaded.push({
-				record,
-				manifest,
-				plugin
-			});
-		} catch (err) {
-			failures.push({
-				name: record.name,
-				path: record.path,
-				reason: err instanceof Error ? err.message : String(err),
-				untrusted: typeof err.code === "string" && err.code === "PLUGIN_UNTRUSTED"
-			});
-		}
-	}
-	return {
-		loaded,
-		failures
-	};
-}
-/** `ANYPICK_NO_PLUGINS=1` skips loading entirely, for bisecting a bad plugin. */
-function pluginsDisabledByEnv() {
-	const v = process.env.ANYPICK_NO_PLUGINS;
-	return v === "1" || v === "true";
-}
-//#endregion
-export { PLUGIN_MANIFEST_FILE, digestPluginPackage, loadPlugins, parseManifest, pluginsDisabledByEnv, readManifest, resolveEntry };
-
-//# sourceMappingURL=plugin-loader.js.map

package/dist/core/plugin-loader.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"plugin-loader.js","names":[],"sources":["../../src/core/plugin-loader.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport { readdir, readFile, stat } from 'node:fs/promises';\nimport { isAbsolute, join, relative, resolve, sep } from 'node:path';\nimport { pathToFileURL } from 'node:url';\nimport {\n  PLUGIN_API_VERSION,\n  type AnyPickPlugin,\n  type PluginLoadFailure,\n  type PluginLoadResult,\n  type PluginManifest,\n  type PluginRecord,\n} from '../types';\nimport { anypickError, ExitCode } from '../utils/errors';\n\nexport const PLUGIN_MANIFEST_FILE = 'anypick.plugin.json';\n\n/** Plugin names are used as directory-independent keys and printed in receipts. */\nconst NAME_PATTERN = /^[a-z0-9][a-z0-9-]{1,63}$/;\n\n/** Directory names skipped when hashing a plugin package (dev debris / VCS). */\nconst DIGEST_SKIP_DIRS = new Set([\n  '.git',\n  '.hg',\n  '.svn',\n  'node_modules',\n  '.DS_Store',\n  '__pycache__',\n]);\n\nfunction fail(message: string, suggestions: string[] = []): never {\n  throw anypickError(message, 'PLUGIN_INVALID', {\n    exitCode: ExitCode.OPERATIONAL,\n    suggestions,\n  });\n}\n\n/**\n * Resolve the entry module inside `root`, refusing anything that escapes it.\n *\n * `main` comes from a file the user may have obtained from a third party, so a\n * `../../` entry must not be able to make AnyPick import an arbitrary module\n * from elsewhere on disk under the plugin's name.\n */\nexport function resolveEntry(root: string, main: string): string {\n  if (isAbsolute(main)) {\n    fail(`Plugin entry \"${main}\" must be a path relative to the plugin directory.`);\n  }\n  const entry = resolve(root, main);\n  const rel = relative(root, entry);\n  if (rel.startsWith('..') || isAbsolute(rel)) {\n    fail(`Plugin entry \"${main}\" resolves outside the plugin directory.`);\n  }\n  return entry;\n}\n\nexport function parseManifest(raw: string, source: string): PluginManifest {\n  let data: unknown;\n  try {\n    data = JSON.parse(raw);\n  } catch {\n    fail(`${source} is not valid JSON.`);\n  }\n  if (typeof data !== 'object' || data === null) {\n    fail(`${source} must contain a JSON object.`);\n  }\n  const m = data as Record<string, unknown>;\n  const name = m.name;\n  if (typeof name !== 'string' || !NAME_PATTERN.test(name)) {\n    fail(\n      `${source} has an invalid \"name\". Use lowercase letters, digits, and hyphens (2-64 characters).`,\n    );\n  }\n  if (typeof m.version !== 'string' || m.version.length === 0) {\n    fail(`${source} is missing a \"version\" string.`);\n  }\n  if (typeof m.main !== 'string' || m.main.length === 0) {\n    fail(`${source} is missing a \"main\" entry module path.`);\n  }\n  if (m.apiVersion !== PLUGIN_API_VERSION) {\n    fail(\n      `Plugin ${name} targets AnyPick plugin API ${String(m.apiVersion)}; this build supports ${PLUGIN_API_VERSION}.`,\n      [`Update the plugin, or use a AnyPick release that supports API ${String(m.apiVersion)}.`],\n    );\n  }\n  return {\n    name,\n    version: m.version,\n    description: typeof m.description === 'string' ? m.description : undefined,\n    apiVersion: PLUGIN_API_VERSION,\n    main: m.main,\n  };\n}\n\nexport async function readManifest(root: string): Promise<PluginManifest> {\n  const path = join(root, PLUGIN_MANIFEST_FILE);\n  try {\n    return parseManifest(await readFile(path, 'utf8'), path);\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code !== 'ENOENT') {\n      throw error;\n    }\n  }\n  return fail(`No ${PLUGIN_MANIFEST_FILE} found in ${root}.`, [\n    `A AnyPick plugin is a directory containing ${PLUGIN_MANIFEST_FILE}.`,\n  ]);\n}\n\n/**\n * SHA-256 of one file. Kept for tests and migration diagnostics; trust pins use\n * `digestPluginPackage` so helper modules cannot change under a trusted entry.\n */\nexport async function digestEntry(entry: string): Promise<string> {\n  const bytes = await readFile(entry);\n  return createHash('sha256').update(bytes).digest('hex');\n}\n\nasync function listPluginFiles(root: string): Promise<string[]> {\n  const out: string[] = [];\n  async function walk(dir: string): Promise<void> {\n    const entries = await readdir(dir, { withFileTypes: true });\n    for (const entry of entries) {\n      if (DIGEST_SKIP_DIRS.has(entry.name)) {\n        continue;\n      }\n      const full = join(dir, entry.name);\n      if (entry.isDirectory()) {\n        await walk(full);\n        continue;\n      }\n      if (entry.isFile() || entry.isSymbolicLink()) {\n        // Only regular files contribute; broken symlinks fail at read time.\n        const info = await stat(full).catch(() => null);\n        if (info?.isFile()) {\n          out.push(full);\n        }\n      }\n    }\n  }\n  await walk(root);\n  return out;\n}\n\n/**\n * SHA-256 over the whole plugin package, not just the entry module.\n *\n * Format (stable, path-order sorted):\n *   for each relative POSIX path under the plugin root:\n *     path\\\\0 + byteLength\\\\0 + fileBytes\n *\n * Hashing only `main` would let a compromised helper module change while the\n * trusted entry stayed identical (ADR 0012). Manifest + every shipped file are\n * included so an install is a fixed artifact.\n */\nexport async function digestPluginPackage(root: string): Promise<string> {\n  const files = await listPluginFiles(root);\n  const rels = files\n    .map((full) => ({\n      full,\n      rel: relative(root, full).split(sep).join('/'),\n    }))\n    .toSorted((a, b) => a.rel.localeCompare(b.rel));\n\n  const hash = createHash('sha256');\n  for (const { full, rel } of rels) {\n    const bytes = await readFile(full);\n    hash.update(rel);\n    hash.update('\\0');\n    hash.update(String(bytes.byteLength));\n    hash.update('\\0');\n    hash.update(bytes);\n  }\n  return hash.digest('hex');\n}\n\nfunction isPlugin(value: unknown): value is AnyPickPlugin {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    typeof (value as { activate?: unknown }).activate === 'function'\n  );\n}\n\n/**\n * Import one plugin's entry module and hand back its `activate`.\n *\n * The digest is checked *before* the import: once `import()` runs, arbitrary\n * module top-level code has already executed in a process holding credential\n * file handles, so verification after the fact would be theatre.\n */\nasync function loadOne(\n  record: PluginRecord,\n): Promise<{ manifest: PluginManifest; plugin: AnyPickPlugin }> {\n  const manifest = await readManifest(record.path);\n  if (manifest.name !== record.name) {\n    fail(\n      `Plugin at ${record.path} now calls itself \"${manifest.name}\" but is installed as \"${record.name}\".`,\n      ['Remove and re-add the plugin.'],\n    );\n  }\n  const entry = resolveEntry(record.path, manifest.main);\n  // Package digest is checked *before* import: once import runs, top-level code\n  // has already executed in a process holding credential file handles.\n  const digest = await digestPluginPackage(record.path);\n  if (digest !== record.digest) {\n    throw anypickError(\n      `Plugin ${record.name} has changed since you trusted it.`,\n      'PLUGIN_UNTRUSTED',\n      {\n        exitCode: ExitCode.OPERATIONAL,\n        suggestions: [\n          `Review the change, then run: anypick plugin trust ${record.name}`,\n          `Or remove it: anypick plugin remove ${record.name}`,\n        ],\n      },\n    );\n  }\n  const mod: unknown = await import(pathToFileURL(entry).href);\n  const exported = (mod as { default?: unknown }).default ?? mod;\n  if (!isPlugin(exported)) {\n    fail(`Plugin ${record.name} does not export an object with an \"activate\" function.`);\n  }\n  return { manifest, plugin: exported };\n}\n\n/**\n * Load every enabled plugin.\n *\n * A broken or tampered plugin is reported as a failure and skipped rather than\n * aborting startup: the framework's job is switching real logins, and one bad\n * third-party extension must not make `anypick` unusable (ADR 0012).\n */\nexport async function loadPlugins(records: PluginRecord[]): Promise<PluginLoadResult> {\n  const loaded: PluginLoadResult['loaded'] = [];\n  const failures: PluginLoadFailure[] = [];\n  for (const record of records) {\n    if (!record.enabled) {\n      continue;\n    }\n    try {\n      const { manifest, plugin } = await loadOne(record);\n      loaded.push({ record, manifest, plugin });\n    } catch (err) {\n      failures.push({\n        name: record.name,\n        path: record.path,\n        reason: err instanceof Error ? err.message : String(err),\n        untrusted:\n          typeof (err as { code?: unknown }).code === 'string' &&\n          (err as { code: string }).code === 'PLUGIN_UNTRUSTED',\n      });\n    }\n  }\n  return { loaded, failures };\n}\n\n/** `ANYPICK_NO_PLUGINS=1` skips loading entirely, for bisecting a bad plugin. */\nexport function pluginsDisabledByEnv(): boolean {\n  const v = process.env.ANYPICK_NO_PLUGINS;\n  return v === '1' || v === 'true';\n}\n"],"mappings":";;;;;;;AAcA,IAAa,uBAAuB;;AAGpC,IAAM,eAAe;;AAGrB,IAAM,mCAAmB,IAAI,IAAI;CAC/B;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,KAAK,SAAiB,cAAwB,CAAC,GAAU;CAChE,MAAM,aAAa,SAAS,kBAAkB;EAC5C,UAAU,SAAS;EACnB;CACF,CAAC;AACH;;;;;;;;AASA,SAAgB,aAAa,MAAc,MAAsB;CAC/D,IAAI,WAAW,IAAI,GACjB,KAAK,iBAAiB,KAAK,mDAAmD;CAEhF,MAAM,QAAQ,QAAQ,MAAM,IAAI;CAChC,MAAM,MAAM,SAAS,MAAM,KAAK;CAChC,IAAI,IAAI,WAAW,IAAI,KAAK,WAAW,GAAG,GACxC,KAAK,iBAAiB,KAAK,yCAAyC;CAEtE,OAAO;AACT;AAEA,SAAgB,cAAc,KAAa,QAAgC;CACzE,IAAI;CACJ,IAAI;EACF,OAAO,KAAK,MAAM,GAAG;CACvB,QAAQ;EACN,KAAK,GAAG,OAAO,oBAAoB;CACrC;CACA,IAAI,OAAO,SAAS,YAAY,SAAS,MACvC,KAAK,GAAG,OAAO,6BAA6B;CAE9C,MAAM,IAAI;CACV,MAAM,OAAO,EAAE;CACf,IAAI,OAAO,SAAS,YAAY,CAAC,aAAa,KAAK,IAAI,GACrD,KACE,GAAG,OAAO,sFACZ;CAEF,IAAI,OAAO,EAAE,YAAY,YAAY,EAAE,QAAQ,WAAW,GACxD,KAAK,GAAG,OAAO,gCAAgC;CAEjD,IAAI,OAAO,EAAE,SAAS,YAAY,EAAE,KAAK,WAAW,GAClD,KAAK,GAAG,OAAO,wCAAwC;CAEzD,IAAI,EAAE,eAAA,GACJ,KACE,UAAU,KAAK,8BAA8B,OAAO,EAAE,UAAU,EAAE,2BAClE,CAAC,iEAAiE,OAAO,EAAE,UAAU,EAAE,EAAE,CAC3F;CAEF,OAAO;EACL;EACA,SAAS,EAAE;EACX,aAAa,OAAO,EAAE,gBAAgB,WAAW,EAAE,cAAc,KAAA;EACjE,YAAA;EACA,MAAM,EAAE;CACV;AACF;AAEA,eAAsB,aAAa,MAAuC;CACxE,MAAM,OAAO,KAAK,MAAM,oBAAoB;CAC5C,IAAI;EACF,OAAO,cAAc,MAAM,SAAS,MAAM,MAAM,GAAG,IAAI;CACzD,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAC5C,MAAM;CAEV;CACA,OAAO,KAAK,MAAM,qBAAqB,YAAY,KAAK,IAAI,CAC1D,8CAA8C,qBAAqB,EACrE,CAAC;AACH;AAWA,eAAe,gBAAgB,MAAiC;CAC9D,MAAM,MAAgB,CAAC;CACvB,eAAe,KAAK,KAA4B;EAC9C,MAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;EAC1D,KAAK,MAAM,SAAS,SAAS;GAC3B,IAAI,iBAAiB,IAAI,MAAM,IAAI,GACjC;GAEF,MAAM,OAAO,KAAK,KAAK,MAAM,IAAI;GACjC,IAAI,MAAM,YAAY,GAAG;IACvB,MAAM,KAAK,IAAI;IACf;GACF;GACA,IAAI,MAAM,OAAO,KAAK,MAAM,eAAe;SAGrC,MADe,KAAK,IAAI,CAAC,CAAC,YAAY,IAAI,EAAA,EACpC,OAAO,GACf,IAAI,KAAK,IAAI;GAAA;EAGnB;CACF;CACA,MAAM,KAAK,IAAI;CACf,OAAO;AACT;;;;;;;;;;;;AAaA,eAAsB,oBAAoB,MAA+B;CAEvE,MAAM,QAAO,MADO,gBAAgB,IAAI,EAAA,CAErC,KAAK,UAAU;EACd;EACA,KAAK,SAAS,MAAM,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG;CAC/C,EAAE,CAAC,CACF,UAAU,GAAG,MAAM,EAAE,IAAI,cAAc,EAAE,GAAG,CAAC;CAEhD,MAAM,OAAO,WAAW,QAAQ;CAChC,KAAK,MAAM,EAAE,MAAM,SAAS,MAAM;EAChC,MAAM,QAAQ,MAAM,SAAS,IAAI;EACjC,KAAK,OAAO,GAAG;EACf,KAAK,OAAO,IAAI;EAChB,KAAK,OAAO,OAAO,MAAM,UAAU,CAAC;EACpC,KAAK,OAAO,IAAI;EAChB,KAAK,OAAO,KAAK;CACnB;CACA,OAAO,KAAK,OAAO,KAAK;AAC1B;AAEA,SAAS,SAAS,OAAwC;CACxD,OACE,OAAO,UAAU,YACjB,UAAU,QACV,OAAQ,MAAiC,aAAa;AAE1D;;;;;;;;AASA,eAAe,QACb,QAC8D;CAC9D,MAAM,WAAW,MAAM,aAAa,OAAO,IAAI;CAC/C,IAAI,SAAS,SAAS,OAAO,MAC3B,KACE,aAAa,OAAO,KAAK,qBAAqB,SAAS,KAAK,yBAAyB,OAAO,KAAK,KACjG,CAAC,+BAA+B,CAClC;CAEF,MAAM,QAAQ,aAAa,OAAO,MAAM,SAAS,IAAI;CAIrD,IAAI,MADiB,oBAAoB,OAAO,IAAI,MACrC,OAAO,QACpB,MAAM,aACJ,UAAU,OAAO,KAAK,qCACtB,oBACA;EACE,UAAU,SAAS;EACnB,aAAa,CACX,qDAAqD,OAAO,QAC5D,uCAAuC,OAAO,MAChD;CACF,CACF;CAEF,MAAM,MAAe,MAAM,OAAO,cAAc,KAAK,CAAC,CAAC;CACvD,MAAM,WAAY,IAA8B,WAAW;CAC3D,IAAI,CAAC,SAAS,QAAQ,GACpB,KAAK,UAAU,OAAO,KAAK,wDAAwD;CAErF,OAAO;EAAE;EAAU,QAAQ;CAAS;AACtC;;;;;;;;AASA,eAAsB,YAAY,SAAoD;CACpF,MAAM,SAAqC,CAAC;CAC5C,MAAM,WAAgC,CAAC;CACvC,KAAK,MAAM,UAAU,SAAS;EAC5B,IAAI,CAAC,OAAO,SACV;EAEF,IAAI;GACF,MAAM,EAAE,UAAU,WAAW,MAAM,QAAQ,MAAM;GACjD,OAAO,KAAK;IAAE;IAAQ;IAAU;GAAO,CAAC;EAC1C,SAAS,KAAK;GACZ,SAAS,KAAK;IACZ,MAAM,OAAO;IACb,MAAM,OAAO;IACb,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;IACvD,WACE,OAAQ,IAA2B,SAAS,YAC3C,IAAyB,SAAS;GACvC,CAAC;EACH;CACF;CACA,OAAO;EAAE;EAAQ;CAAS;AAC5B;;AAGA,SAAgB,uBAAgC;CAC9C,MAAM,IAAI,QAAQ,IAAI;CACtB,OAAO,MAAM,OAAO,MAAM;AAC5B"}

package/dist/core/plugin-service.d.ts

@@ -1,32 +0,0 @@
-import type { PluginRecord } from '../types.js';
-import type { PluginStore } from './plugin-store.js';
-/**
- * Install, trust, and enable plugins.
- *
- * Adding a plugin never enables it. A plugin runs in-process alongside code that
- * reads and rewrites real credential files, so becoming loadable is a separate,
- * explicit decision from being present on disk (ADR 0012).
- */
-export declare class PluginService {
-    private readonly store;
-    private readonly root;
-    constructor(store: PluginStore, root: string);
-    list(): PluginRecord[];
-    get(name: string): PluginRecord | null;
-    /** Read the manifest at `dir`, record it disabled, and pin its package digest. */
-    add(dir: string): Promise<PluginRecord>;
-    remove(name: string): Promise<void>;
-    setEnabled(name: string, enabled: boolean): Promise<PluginRecord>;
-    /**
-     * Re-pin the package digest to the code currently on disk.
-     *
-     * This is the acknowledgement step after a plugin's code changes — an upgrade,
-     * a `git pull`, or something the user did not expect. It reports the old and
-     * new digest so the caller can show what is being approved.
-     */
-    trust(name: string): Promise<{
-        record: PluginRecord;
-        previousDigest: string;
-    }>;
-}
-//# sourceMappingURL=plugin-service.d.ts.map

package/dist/core/plugin-service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"plugin-service.d.ts","sourceRoot":"","sources":["../../src/core/plugin-service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAI7C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAgBlD;;;;;;GAMG;AACH,qBAAa,aAAa;IAEtB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFvB,YACmB,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,MAAM,EAC3B;IAEJ,IAAI,IAAI,YAAY,EAAE,CAErB;IAED,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAErC;IAED,kFAAkF;IAC5E,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CA+B5C;IAEK,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMxC;IAEK,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAUtE;IAED;;;;;;OAMG;IACG,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,YAAY,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAiBnF;CACF"}

package/dist/core/plugin-service.js

@@ -1,110 +0,0 @@
-import { ExitCode, anypickError } from "../utils/errors.js";
-import { withMutationLock } from "./mutation-lock.js";
-import { digestPluginPackage, readManifest } from "./plugin-loader.js";
-import { resolve } from "node:path";
-//#region src/core/plugin-service.ts
-/** All plugin mutations serialize on one scope: the set is read as a whole at startup. */
-var PLUGIN_SCOPE = "plugins";
-function nowIso() {
-	return (/* @__PURE__ */ new Date()).toISOString();
-}
-function notFound(name) {
-	throw anypickError(`No plugin named "${name}" is installed.`, "PLUGIN_NOT_FOUND", {
-		exitCode: ExitCode.NOT_FOUND,
-		suggestions: ["List installed plugins: anypick plugin list"]
-	});
-}
-/**
-* Install, trust, and enable plugins.
-*
-* Adding a plugin never enables it. A plugin runs in-process alongside code that
-* reads and rewrites real credential files, so becoming loadable is a separate,
-* explicit decision from being present on disk (ADR 0012).
-*/
-var PluginService = class {
-	store;
-	root;
-	constructor(store, root) {
-		this.store = store;
-		this.root = root;
-	}
-	list() {
-		return this.store.list();
-	}
-	get(name) {
-		return this.store.get(name);
-	}
-	/** Read the manifest at `dir`, record it disabled, and pin its package digest. */
-	async add(dir) {
-		const path = resolve(dir);
-		const manifest = await readManifest(path);
-		const digest = await digestPluginPackage(path);
-		return withMutationLock(this.root, PLUGIN_SCOPE, async () => {
-			const existing = this.store.get(manifest.name);
-			if (existing && existing.path !== path) throw anypickError(`A different plugin directory is already installed as "${manifest.name}".`, "PLUGIN_CONFLICT", {
-				exitCode: ExitCode.OPERATIONAL,
-				details: { installedPath: existing.path },
-				suggestions: [`Remove the existing one first: anypick plugin remove ${manifest.name}`]
-			});
-			const record = {
-				name: manifest.name,
-				path,
-				version: manifest.version,
-				enabled: existing?.enabled ?? false,
-				digest,
-				addedAt: existing?.addedAt ?? nowIso(),
-				updatedAt: nowIso()
-			};
-			this.store.upsert(record);
-			return record;
-		});
-	}
-	async remove(name) {
-		await withMutationLock(this.root, PLUGIN_SCOPE, async () => {
-			if (!this.store.remove(name)) notFound(name);
-		});
-	}
-	async setEnabled(name, enabled) {
-		return withMutationLock(this.root, PLUGIN_SCOPE, async () => {
-			const existing = this.store.get(name);
-			if (!existing) notFound(name);
-			const record = {
-				...existing,
-				enabled,
-				updatedAt: nowIso()
-			};
-			this.store.upsert(record);
-			return record;
-		});
-	}
-	/**
-	* Re-pin the package digest to the code currently on disk.
-	*
-	* This is the acknowledgement step after a plugin's code changes — an upgrade,
-	* a `git pull`, or something the user did not expect. It reports the old and
-	* new digest so the caller can show what is being approved.
-	*/
-	async trust(name) {
-		const existing = this.store.get(name);
-		if (!existing) notFound(name);
-		const manifest = await readManifest(existing.path);
-		const digest = await digestPluginPackage(existing.path);
-		return withMutationLock(this.root, PLUGIN_SCOPE, async () => {
-			const record = {
-				...existing,
-				version: manifest.version,
-				digest,
-				updatedAt: nowIso()
-			};
-			this.store.upsert(record);
-			return {
-				record,
-				previousDigest: existing.digest
-			};
-		});
-	}
-};
-//#endregion
-export { PluginService };
-
-//# sourceMappingURL=plugin-service.js.map

package/dist/core/plugin-service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"plugin-service.js","names":[],"sources":["../../src/core/plugin-service.ts"],"sourcesContent":["import { resolve } from 'node:path';\nimport type { PluginRecord } from '../types';\nimport { anypickError, ExitCode } from '../utils/errors';\nimport { withMutationLock } from './mutation-lock';\nimport { digestPluginPackage, readManifest } from './plugin-loader';\nimport type { PluginStore } from './plugin-store';\n\n/** All plugin mutations serialize on one scope: the set is read as a whole at startup. */\nconst PLUGIN_SCOPE = 'plugins';\n\nfunction nowIso(): string {\n  return new Date().toISOString();\n}\n\nfunction notFound(name: string): never {\n  throw anypickError(`No plugin named \"${name}\" is installed.`, 'PLUGIN_NOT_FOUND', {\n    exitCode: ExitCode.NOT_FOUND,\n    suggestions: ['List installed plugins: anypick plugin list'],\n  });\n}\n\n/**\n * Install, trust, and enable plugins.\n *\n * Adding a plugin never enables it. A plugin runs in-process alongside code that\n * reads and rewrites real credential files, so becoming loadable is a separate,\n * explicit decision from being present on disk (ADR 0012).\n */\nexport class PluginService {\n  constructor(\n    private readonly store: PluginStore,\n    private readonly root: string,\n  ) {}\n\n  list(): PluginRecord[] {\n    return this.store.list();\n  }\n\n  get(name: string): PluginRecord | null {\n    return this.store.get(name);\n  }\n\n  /** Read the manifest at `dir`, record it disabled, and pin its package digest. */\n  async add(dir: string): Promise<PluginRecord> {\n    const path = resolve(dir);\n    const manifest = await readManifest(path);\n    const digest = await digestPluginPackage(path);\n    return withMutationLock(this.root, PLUGIN_SCOPE, async () => {\n      const existing = this.store.get(manifest.name);\n      if (existing && existing.path !== path) {\n        throw anypickError(\n          `A different plugin directory is already installed as \"${manifest.name}\".`,\n          'PLUGIN_CONFLICT',\n          {\n            exitCode: ExitCode.OPERATIONAL,\n            details: { installedPath: existing.path },\n            suggestions: [`Remove the existing one first: anypick plugin remove ${manifest.name}`],\n          },\n        );\n      }\n      const record: PluginRecord = {\n        name: manifest.name,\n        path,\n        version: manifest.version,\n        // Re-adding an already-enabled plugin from the same path keeps it\n        // enabled; the freshly computed digest re-trusts the current code.\n        enabled: existing?.enabled ?? false,\n        digest,\n        addedAt: existing?.addedAt ?? nowIso(),\n        updatedAt: nowIso(),\n      };\n      this.store.upsert(record);\n      return record;\n    });\n  }\n\n  async remove(name: string): Promise<void> {\n    await withMutationLock(this.root, PLUGIN_SCOPE, async () => {\n      if (!this.store.remove(name)) {\n        notFound(name);\n      }\n    });\n  }\n\n  async setEnabled(name: string, enabled: boolean): Promise<PluginRecord> {\n    return withMutationLock(this.root, PLUGIN_SCOPE, async () => {\n      const existing = this.store.get(name);\n      if (!existing) {\n        notFound(name);\n      }\n      const record: PluginRecord = { ...existing, enabled, updatedAt: nowIso() };\n      this.store.upsert(record);\n      return record;\n    });\n  }\n\n  /**\n   * Re-pin the package digest to the code currently on disk.\n   *\n   * This is the acknowledgement step after a plugin's code changes — an upgrade,\n   * a `git pull`, or something the user did not expect. It reports the old and\n   * new digest so the caller can show what is being approved.\n   */\n  async trust(name: string): Promise<{ record: PluginRecord; previousDigest: string }> {\n    const existing = this.store.get(name);\n    if (!existing) {\n      notFound(name);\n    }\n    const manifest = await readManifest(existing.path);\n    const digest = await digestPluginPackage(existing.path);\n    return withMutationLock(this.root, PLUGIN_SCOPE, async () => {\n      const record: PluginRecord = {\n        ...existing,\n        version: manifest.version,\n        digest,\n        updatedAt: nowIso(),\n      };\n      this.store.upsert(record);\n      return { record, previousDigest: existing.digest };\n    });\n  }\n}\n"],"mappings":";;;;;;AAQA,IAAM,eAAe;AAErB,SAAS,SAAiB;CACxB,wBAAO,IAAI,KAAK,EAAA,CAAE,YAAY;AAChC;AAEA,SAAS,SAAS,MAAqB;CACrC,MAAM,aAAa,oBAAoB,KAAK,kBAAkB,oBAAoB;EAChF,UAAU,SAAS;EACnB,aAAa,CAAC,6CAA6C;CAC7D,CAAC;AACH;;;;;;;;AASA,IAAa,gBAAb,MAA2B;CAEN;CACA;CAFnB,YACE,OACA,MACA;EAFiB,KAAA,QAAA;EACA,KAAA,OAAA;CAChB;CAEH,OAAuB;EACrB,OAAO,KAAK,MAAM,KAAK;CACzB;CAEA,IAAI,MAAmC;EACrC,OAAO,KAAK,MAAM,IAAI,IAAI;CAC5B;;CAGA,MAAM,IAAI,KAAoC;EAC5C,MAAM,OAAO,QAAQ,GAAG;EACxB,MAAM,WAAW,MAAM,aAAa,IAAI;EACxC,MAAM,SAAS,MAAM,oBAAoB,IAAI;EAC7C,OAAO,iBAAiB,KAAK,MAAM,cAAc,YAAY;GAC3D,MAAM,WAAW,KAAK,MAAM,IAAI,SAAS,IAAI;GAC7C,IAAI,YAAY,SAAS,SAAS,MAChC,MAAM,aACJ,yDAAyD,SAAS,KAAK,KACvE,mBACA;IACE,UAAU,SAAS;IACnB,SAAS,EAAE,eAAe,SAAS,KAAK;IACxC,aAAa,CAAC,wDAAwD,SAAS,MAAM;GACvF,CACF;GAEF,MAAM,SAAuB;IAC3B,MAAM,SAAS;IACf;IACA,SAAS,SAAS;IAGlB,SAAS,UAAU,WAAW;IAC9B;IACA,SAAS,UAAU,WAAW,OAAO;IACrC,WAAW,OAAO;GACpB;GACA,KAAK,MAAM,OAAO,MAAM;GACxB,OAAO;EACT,CAAC;CACH;CAEA,MAAM,OAAO,MAA6B;EACxC,MAAM,iBAAiB,KAAK,MAAM,cAAc,YAAY;GAC1D,IAAI,CAAC,KAAK,MAAM,OAAO,IAAI,GACzB,SAAS,IAAI;EAEjB,CAAC;CACH;CAEA,MAAM,WAAW,MAAc,SAAyC;EACtE,OAAO,iBAAiB,KAAK,MAAM,cAAc,YAAY;GAC3D,MAAM,WAAW,KAAK,MAAM,IAAI,IAAI;GACpC,IAAI,CAAC,UACH,SAAS,IAAI;GAEf,MAAM,SAAuB;IAAE,GAAG;IAAU;IAAS,WAAW,OAAO;GAAE;GACzE,KAAK,MAAM,OAAO,MAAM;GACxB,OAAO;EACT,CAAC;CACH;;;;;;;;CASA,MAAM,MAAM,MAAyE;EACnF,MAAM,WAAW,KAAK,MAAM,IAAI,IAAI;EACpC,IAAI,CAAC,UACH,SAAS,IAAI;EAEf,MAAM,WAAW,MAAM,aAAa,SAAS,IAAI;EACjD,MAAM,SAAS,MAAM,oBAAoB,SAAS,IAAI;EACtD,OAAO,iBAAiB,KAAK,MAAM,cAAc,YAAY;GAC3D,MAAM,SAAuB;IAC3B,GAAG;IACH,SAAS,SAAS;IAClB;IACA,WAAW,OAAO;GACpB;GACA,KAAK,MAAM,OAAO,MAAM;GACxB,OAAO;IAAE;IAAQ,gBAAgB,SAAS;GAAO;EACnD,CAAC;CACH;AACF"}

package/dist/core/plugin-store.d.ts

@@ -1,18 +0,0 @@
-import type { PluginRecord } from '../types.js';
-import type { AnyPickDatabase } from './db.js';
-/**
- * The installed plugin registry.
- *
- * Kept in SQLite rather than a config file so `anypick plugin` mutations are
- * transactional with the rest of the data root, and so a plugin cannot enable
- * itself by writing a file the loader happens to read.
- */
-export declare class PluginStore {
-    private readonly db;
-    constructor(db: AnyPickDatabase);
-    list(): PluginRecord[];
-    get(name: string): PluginRecord | null;
-    upsert(record: PluginRecord): void;
-    remove(name: string): boolean;
-}
-//# sourceMappingURL=plugin-store.d.ts.map

package/dist/core/plugin-store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"plugin-store.d.ts","sourceRoot":"","sources":["../../src/core/plugin-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AA0B5C;;;;;;GAMG;AACH,qBAAa,WAAW;IACV,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,eAAe,EAAI;IAEpD,IAAI,IAAI,YAAY,EAAE,CAKrB;IAED,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAKrC;IAED,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAoBjC;IAED,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAG5B;CACF"}

package/dist/core/plugin-store.js

@@ -1,50 +0,0 @@
-//#region src/core/plugin-store.ts
-function parse(row) {
-	return {
-		name: row.name,
-		path: row.path,
-		version: row.version,
-		enabled: row.enabled === 1,
-		digest: row.digest,
-		addedAt: row.added_at,
-		updatedAt: row.updated_at
-	};
-}
-var COLUMNS = "name, path, version, enabled, digest, added_at, updated_at";
-/**
-* The installed plugin registry.
-*
-* Kept in SQLite rather than a config file so `anypick plugin` mutations are
-* transactional with the rest of the data root, and so a plugin cannot enable
-* itself by writing a file the loader happens to read.
-*/
-var PluginStore = class {
-	db;
-	constructor(db) {
-		this.db = db;
-	}
-	list() {
-		return this.db.prepare(`SELECT ${COLUMNS} FROM plugins ORDER BY name`).all().map(parse);
-	}
-	get(name) {
-		const row = this.db.prepare(`SELECT ${COLUMNS} FROM plugins WHERE name = ?`).get(name);
-		return row ? parse(row) : null;
-	}
-	upsert(record) {
-		this.db.prepare(`INSERT INTO plugins (${COLUMNS}) VALUES (?, ?, ?, ?, ?, ?, ?)
-         ON CONFLICT(name) DO UPDATE SET
-           path = excluded.path,
-           version = excluded.version,
-           enabled = excluded.enabled,
-           digest = excluded.digest,
-           updated_at = excluded.updated_at`).run(record.name, record.path, record.version, record.enabled ? 1 : 0, record.digest, record.addedAt, record.updatedAt);
-	}
-	remove(name) {
-		const info = this.db.prepare("DELETE FROM plugins WHERE name = ?").run(name);
-		return Number(info.changes ?? 0) > 0;
-	}
-};
-//#endregion
-export { PluginStore };
-
-//# sourceMappingURL=plugin-store.js.map

package/dist/core/plugin-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"plugin-store.js","names":[],"sources":["../../src/core/plugin-store.ts"],"sourcesContent":["import type { PluginRecord } from '../types';\nimport type { AnyPickDatabase } from './db';\n\ninterface PluginRow {\n  name: string;\n  path: string;\n  version: string;\n  enabled: number;\n  digest: string;\n  added_at: string;\n  updated_at: string;\n}\n\nfunction parse(row: PluginRow): PluginRecord {\n  return {\n    name: row.name,\n    path: row.path,\n    version: row.version,\n    enabled: row.enabled === 1,\n    digest: row.digest,\n    addedAt: row.added_at,\n    updatedAt: row.updated_at,\n  };\n}\n\nconst COLUMNS = 'name, path, version, enabled, digest, added_at, updated_at';\n\n/**\n * The installed plugin registry.\n *\n * Kept in SQLite rather than a config file so `anypick plugin` mutations are\n * transactional with the rest of the data root, and so a plugin cannot enable\n * itself by writing a file the loader happens to read.\n */\nexport class PluginStore {\n  constructor(private readonly db: AnyPickDatabase) {}\n\n  list(): PluginRecord[] {\n    const rows = this.db\n      .prepare(`SELECT ${COLUMNS} FROM plugins ORDER BY name`)\n      .all() as unknown as PluginRow[];\n    return rows.map(parse);\n  }\n\n  get(name: string): PluginRecord | null {\n    const row = this.db.prepare(`SELECT ${COLUMNS} FROM plugins WHERE name = ?`).get(name) as\n      | PluginRow\n      | undefined;\n    return row ? parse(row) : null;\n  }\n\n  upsert(record: PluginRecord): void {\n    this.db\n      .prepare(\n        `INSERT INTO plugins (${COLUMNS}) VALUES (?, ?, ?, ?, ?, ?, ?)\n         ON CONFLICT(name) DO UPDATE SET\n           path = excluded.path,\n           version = excluded.version,\n           enabled = excluded.enabled,\n           digest = excluded.digest,\n           updated_at = excluded.updated_at`,\n      )\n      .run(\n        record.name,\n        record.path,\n        record.version,\n        record.enabled ? 1 : 0,\n        record.digest,\n        record.addedAt,\n        record.updatedAt,\n      );\n  }\n\n  remove(name: string): boolean {\n    const info = this.db.prepare('DELETE FROM plugins WHERE name = ?').run(name);\n    return Number(info.changes ?? 0) > 0;\n  }\n}\n"],"mappings":";AAaA,SAAS,MAAM,KAA8B;CAC3C,OAAO;EACL,MAAM,IAAI;EACV,MAAM,IAAI;EACV,SAAS,IAAI;EACb,SAAS,IAAI,YAAY;EACzB,QAAQ,IAAI;EACZ,SAAS,IAAI;EACb,WAAW,IAAI;CACjB;AACF;AAEA,IAAM,UAAU;;;;;;;;AAShB,IAAa,cAAb,MAAyB;CACM;CAA7B,YAAY,IAAsC;EAArB,KAAA,KAAA;CAAsB;CAEnD,OAAuB;EAIrB,OAHa,KAAK,GACf,QAAQ,UAAU,QAAQ,4BAA4B,CAAC,CACvD,IACI,CAAA,CAAK,IAAI,KAAK;CACvB;CAEA,IAAI,MAAmC;EACrC,MAAM,MAAM,KAAK,GAAG,QAAQ,UAAU,QAAQ,6BAA6B,CAAC,CAAC,IAAI,IAAI;EAGrF,OAAO,MAAM,MAAM,GAAG,IAAI;CAC5B;CAEA,OAAO,QAA4B;EACjC,KAAK,GACF,QACC,wBAAwB,QAAQ;;;;;;4CAOlC,CAAC,CACA,IACC,OAAO,MACP,OAAO,MACP,OAAO,SACP,OAAO,UAAU,IAAI,GACrB,OAAO,QACP,OAAO,SACP,OAAO,SACT;CACJ;CAEA,OAAO,MAAuB;EAC5B,MAAM,OAAO,KAAK,GAAG,QAAQ,oCAAoC,CAAC,CAAC,IAAI,IAAI;EAC3E,OAAO,OAAO,KAAK,WAAW,CAAC,IAAI;CACrC;AACF"}

package/dist/core/pool-store.d.ts

@@ -1,44 +0,0 @@
-/**
- * Optional per-provider proxy pool (multi-account behind one endpoint).
- *
- * Default mode is **single** (no pool row, or mode: "single"):
- * each account keeps its own proxy process — current behavior.
- *
- * Opt-in **multi**: one shared process, members enable/disable independently.
- *
- * Pool state lives in the shared SQLite database (`pools` table) so it is
- * transactional with the rest of the data root. A previously written
- * `pool.json` (the pre-SQLite layout) is still read as a fallback on `get`
- * so existing installs keep their pool without a separate migration step; any
- * write replaces it (the JSON file is removed on `set`).
- */
-import type { ProviderProxyPool } from '../types.js';
-import type { AnyPickDatabase } from './db.js';
-export declare function poolConfigPath(root: string, providerId: string): string;
-export declare function poolRuntimeDir(root: string, providerId: string): string;
-export declare const DEFAULT_POOL: Omit<ProviderProxyPool, 'provider' | 'updatedAt' | 'members'>;
-export declare class PoolStore {
-    private readonly root;
-    private readonly db;
-    constructor(root: string, db: AnyPickDatabase);
-    get(providerId: string): Promise<ProviderProxyPool | null>;
-    /** Effective pool — never null; default single with empty members. */
-    getOrDefault(providerId: string): Promise<ProviderProxyPool>;
-    set(pool: ProviderProxyPool): Promise<void>;
-    delete(providerId: string): Promise<void>;
-    /**
-     * Ensure members list tracks known accounts.
-     * New accounts are added enabled:true in multi mode, or ignored in single.
-     */
-    syncMembers(providerId: string, accountNames: string[]): Promise<ProviderProxyPool>;
-    /** Turn multi-account pool on (opt-in). */
-    enableMulti(providerId: string, accountNames: string[], opts?: {
-        port?: number;
-        host?: string;
-    }): Promise<ProviderProxyPool>;
-    /** Back to single-account proxies (default). */
-    disableMulti(providerId: string): Promise<ProviderProxyPool>;
-    setMemberEnabled(providerId: string, account: string, enabled: boolean): Promise<ProviderProxyPool>;
-    private readLegacy;
-}
-//# sourceMappingURL=pool-store.d.ts.map

package/dist/core/pool-store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pool-store.d.ts","sourceRoot":"","sources":["../../src/core/pool-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAc,MAAM,UAAU,CAAC;AAI9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAE5C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED,eAAO,MAAM,YAAY,EAAE,IAAI,CAAC,iBAAiB,EAAE,UAAU,GAAG,WAAW,GAAG,SAAS,CAItF,CAAC;AAEF,qBAAa,SAAS;IAElB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,EAAE;IAFrB,YACmB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,eAAe,EAClC;IAEE,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAU/D;IAED,sEAAsE;IAChE,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAWjE;IAEK,GAAG,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BhD;IAEK,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK9C;IAED;;;OAGG;IACG,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAsBxF;IAED,2CAA2C;IACrC,WAAW,CACf,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EAAE,EACtB,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO,GAC1C,OAAO,CAAC,iBAAiB,CAAC,CAiB5B;IAED,gDAAgD;IAC1C,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAUjE;IAEK,gBAAgB,CACpB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,iBAAiB,CAAC,CAU5B;YAEa,UAAU;CAezB"}