anypick 1.0.0 → 1.1.1

package/dist/core/app.d.ts

@@ -1,149 +0,0 @@
-import { AccountStore } from './store.js';
-import { AccountService } from './service.js';
-import { ProxyService } from './proxy-service.js';
-import { ProviderRegistry } from './registry.js';
-import { ProfileStore } from './profile-store.js';
-import { ProfileService } from './profile-service.js';
-import { RuntimeService } from './runtime-service.js';
-import { DoctorService } from './doctor.js';
-import { GlobalConfigStore } from './config.js';
-import { ConfigService } from './config-service.js';
-import { TraySettingsService } from './tray-settings-service.js';
-import { type AnyPickDatabase } from './db.js';
-import { CatalogRegistry } from '../catalog/providers.js';
-import { ClientRegistry } from '../clients/index.js';
-import { makeEmitter, type AnyPickEvent, type AnyPickEventSink } from './events.js';
-import { BindingStore } from './binding-store.js';
-import { PresetStore } from './preset-store.js';
-import { OperationJournal } from './journal.js';
-import { LeaseStore } from './lease-store.js';
-import { BindingService } from './binding-service.js';
-import { PoolStore } from './pool-store.js';
-import { ProxyHubStore } from './proxy-hub-store.js';
-import { ProxyHubService } from './proxy-hub-service.js';
-import { PluginStore } from './plugin-store.js';
-import { ModelCacheStore } from './model-cache-store.js';
-import { ModelDiscoveryService } from './model-discovery.js';
-import { PluginService } from './plugin-service.js';
-import { type LoadedPlugin, type PluginLoadFailure } from '../types.js';
-/**
- * The supported programmatic surface: services, registries, and lifecycle.
- *
- * Deliberately excludes the database and every raw store. Stores own SQL and
- * assume the coordinator locks held by the services above them (ADR 0009), so
- * an embedder that writes through a store directly bypasses both. Annotate
- * embedding code as `AnyPick` rather than `AnyPickApp` and the compiler enforces
- * that for you.
- */
-export interface AnyPick {
-    root: string;
-    accounts: AccountService;
-    proxy: ProxyService;
-    /** Unified public proxy endpoint and its token-scoped route manifests. */
-    hub: ProxyHubService;
-    accountRegistry: ProviderRegistry;
-    profiles: ProfileService;
-    runtime: RuntimeService;
-    /** Service-owned global config mutations (ADR 0009). */
-    config: ConfigService;
-    /** Tray-local settings (login item) under the coordinator. */
-    traySettings: TraySettingsService;
-    clients: ClientRegistry;
-    catalog: CatalogRegistry;
-    doctor: DoctorService;
-    bindingService: BindingService;
-    /** Live vendor model lists, cached; falls back to the static catalog. */
-    modelDiscovery: ModelDiscoveryService;
-    plugins: PluginService;
-    /**
-     * Plugins that contributed to the registries above, and those that were
-     * enabled but refused. Failures are surfaced (doctor, `plugin list`) rather
-     * than thrown, so one bad extension cannot make AnyPick unusable.
-     */
-    pluginRuntime: {
-        loaded: readonly LoadedPlugin[];
-        failures: readonly PluginLoadFailure[];
-    };
-    /** Structured event sink + emitter for degraded/lifecycle conditions (OBS-01). */
-    events: {
-        sink: AnyPickEventSink;
-        emit: ReturnType<typeof makeEmitter>;
-        /** Snapshot of framework lifecycle events, oldest first. */
-        list: () => readonly AnyPickEvent[];
-    };
-    /** Release framework-owned resources. Safe to call more than once. */
-    close: () => void;
-}
-/**
- * The composition root, including the raw persistence layer.
- *
- * This is what `createApp` builds and what the CLI, TUI, and tray consume. It is
- * **not** a stability promise: members may be added, renamed, or removed as the
- * internal graph changes. Programmatic consumers should depend on `AnyPick`.
- */
-export interface AnyPickApp extends AnyPick {
-    db: AnyPickDatabase;
-    accountStore: AccountStore;
-    profileStore: ProfileStore;
-    /** Raw store for composition/migration only — prefer `config` for mutations. */
-    configStore: GlobalConfigStore;
-    bindings: BindingStore;
-    presets: PresetStore;
-    journal: OperationJournal;
-    leases: LeaseStore;
-    pools: PoolStore;
-    hubStore: ProxyHubStore;
-    pluginStore: PluginStore;
-    modelCacheStore: ModelCacheStore;
-    /**
-     * Raw event sink under the name `ExecutorDeps` expects. Callers that hand the
-     * whole app to `executeActivation` therefore get structured events instead of
-     * silently dropping them.
-     */
-    eventSink: AnyPickEventSink;
-}
-export interface CreateAppOptions {
-    root?: string;
-    /** Skip registering builtins (tests). */
-    bare?: boolean;
-    /** Skip FS→SQLite migration. */
-    skipMigrate?: boolean;
-    accountRegistry?: ProviderRegistry;
-    catalog?: CatalogRegistry;
-    clients?: ClientRegistry;
-    db?: AnyPickDatabase;
-    /** Injectable structured event sink (OBS-01). Defaults to an in-memory ring
-     * plus a debug-stderr echo (behind ANYPICK_DEBUG). */
-    events?: AnyPickEventSink;
-    /**
-     * Already-imported plugins to activate before the registries seal.
-     *
-     * `createApp` is synchronous, so `createAppReady` does the async discovery and
-     * `import()` and passes the result down. A synchronous `activate` is what lets
-     * plugin contributions land inside the same window as the builtins.
-     */
-    plugins?: LoadedPlugin[];
-    /** Failures from that load pass, carried through for reporting. */
-    pluginFailures?: PluginLoadFailure[];
-}
-/**
- * Wire stores, registries, and services for CLI or tests.
- * All structured data shares one SQLite database under ~/.anypick/anypick.db.
- */
-export declare function createApp(opts?: CreateAppOptions): AnyPickApp;
-/**
- * Create app and run one-time filesystem → SQLite migration if needed.
- *
- * The migration and config-ensure run under a process-scoped file lock so two
- * concurrent `anypick` invocations (e.g. a CLI call while the TUI is open) cannot
- * race the schema bootstrap. The lock is best-effort: a contended lock fails
- * fast rather than blocking the user.
- */
-export declare function createAppReady(opts?: CreateAppOptions): Promise<AnyPickApp>;
-/**
- * @deprecated Process-wide sync construction skips plugin load, migration lock,
- * and startup recovery. Use `createAppReady` / `createAnyPickApp` instead.
- * Kept only so accidental callers fail loudly rather than silently half-init.
- */
-export declare function getDefaultApp(): never;
-//# sourceMappingURL=app.d.ts.map

package/dist/core/app.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/core/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAA6C,KAAK,eAAe,EAAE,MAAM,MAAM,CAAC;AAEvF,OAAO,EAAE,eAAe,EAA0B,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAA0B,MAAM,kBAAkB,CAAC;AAK1E,OAAO,EACL,WAAW,EAGX,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACtB,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAInD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAQjD,OAAO,EAAsB,KAAK,YAAY,EAAE,KAAK,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAEzF;;;;;;;;GAQG;AACH,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,cAAc,CAAC;IACzB,KAAK,EAAE,YAAY,CAAC;IACpB,0EAA0E;IAC1E,GAAG,EAAE,eAAe,CAAC;IACrB,eAAe,EAAE,gBAAgB,CAAC;IAClC,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,cAAc,CAAC;IACxB,wDAAwD;IACxD,MAAM,EAAE,aAAa,CAAC;IACtB,8DAA8D;IAC9D,YAAY,EAAE,mBAAmB,CAAC;IAClC,OAAO,EAAE,cAAc,CAAC;IACxB,OAAO,EAAE,eAAe,CAAC;IACzB,MAAM,EAAE,aAAa,CAAC;IACtB,cAAc,EAAE,cAAc,CAAC;IAC/B,yEAAyE;IACzE,cAAc,EAAE,qBAAqB,CAAC;IACtC,OAAO,EAAE,aAAa,CAAC;IACvB;;;;OAIG;IACH,aAAa,EAAE;QACb,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;QAChC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;KACxC,CAAC;IACF,kFAAkF;IAClF,MAAM,EAAE;QACN,IAAI,EAAE,gBAAgB,CAAC;QACvB,IAAI,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;QACrC,4DAA4D;QAC5D,IAAI,EAAE,MAAM,SAAS,YAAY,EAAE,CAAC;KACrC,CAAC;IACF,sEAAsE;IACtE,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,UAAW,SAAQ,OAAO;IACzC,EAAE,EAAE,eAAe,CAAC;IACpB,YAAY,EAAE,YAAY,CAAC;IAC3B,YAAY,EAAE,YAAY,CAAC;IAC3B,gFAAgF;IAChF,WAAW,EAAE,iBAAiB,CAAC;IAC/B,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,EAAE,SAAS,CAAC;IACjB,QAAQ,EAAE,aAAa,CAAC;IACxB,WAAW,EAAE,WAAW,CAAC;IACzB,eAAe,EAAE,eAAe,CAAC;IACjC;;;;OAIG;IACH,SAAS,EAAE,gBAAgB,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,gCAAgC;IAChC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,eAAe,CAAC,EAAE,gBAAgB,CAAC;IACnC,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,EAAE,CAAC,EAAE,eAAe,CAAC;IACrB;0DACsD;IACtD,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,mEAAmE;IACnE,cAAc,CAAC,EAAE,iBAAiB,EAAE,CAAC;CACtC;AAuDD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,GAAE,gBAAqB,GAAG,UAAU,CA+QjE;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC,CAkGrF;AAED;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,KAAK,CAIrC"}

package/dist/core/app.js

@@ -1,372 +0,0 @@
-import "../types/plugins.js";
-import { DebugStderrEventSink, InMemoryEventSink, makeEmitter } from "./events.js";
-import { getAnyPickRoot } from "./paths.js";
-import { AccountStore } from "./store.js";
-import { PoolStore } from "./pool-store.js";
-import { withFileLock } from "../utils/lock.js";
-import { ProxyService } from "./proxy-service.js";
-import { AccountService } from "./service.js";
-import { ProviderRegistry } from "./registry.js";
-import { ProfileStore } from "./profile-store.js";
-import { ProfileService } from "./profile-service.js";
-import { ClientStateStore } from "./client-state-store.js";
-import { CatalogRegistry, registerBuiltinCatalog } from "../catalog/providers.js";
-import { RuntimeService } from "./runtime-service.js";
-import { recoverIncompleteOperations } from "./activation-executor.js";
-import { DoctorService } from "./doctor.js";
-import { migrateLegacyRootIfPristine, openDatabase } from "./db.js";
-import { GlobalConfigStore } from "./config.js";
-import { ConfigService } from "./config-service.js";
-import { quotaGuardPolicy } from "./quota-guard-policy.js";
-import { TraySettingsService } from "./tray-settings-service.js";
-import { migrateFilesystemIfNeeded } from "./migrate-fs.js";
-import { modelPolicyLookup } from "./model-policy.js";
-import { ClientRegistry } from "../clients/registry.js";
-import { registerBuiltinClients } from "../clients/index.js";
-import { registerBuiltinProviders } from "../providers/index.js";
-import { logInternalError } from "../utils/log.js";
-import { BindingStore } from "./binding-store.js";
-import { PresetStore } from "./preset-store.js";
-import { OperationJournal } from "./journal.js";
-import { LeaseStore } from "./lease-store.js";
-import { BindingService } from "./binding-service.js";
-import { migrateBindingsIfNeeded } from "./migrate-bindings.js";
-import { reapStaleLeases } from "./proxy-lifecycle.js";
-import { ProxyHubStore } from "./proxy-hub-store.js";
-import { ProxyHubService } from "./proxy-hub-service.js";
-import { runningTrayPid } from "./tray-runtime.js";
-import { PluginStore } from "./plugin-store.js";
-import { ModelCacheStore } from "./model-cache-store.js";
-import { ModelDiscoveryService } from "./model-discovery.js";
-import { loadPlugins, pluginsDisabledByEnv } from "./plugin-loader.js";
-import { PluginService } from "./plugin-service.js";
-import { publishCodexLiveRoute, restoreCodexLiveForNative, syncCodexLiveConfig } from "./codex-live-config.js";
-import { dirname, join } from "node:path";
-//#region src/core/app.ts
-/**
-* Run each plugin's `activate`, collecting any that throw as failures.
-*
-* A plugin that throws here is dropped, but everything it registered before
-* throwing is already in the registry. Registration is idempotent per id and
-* the adapters are inert until something resolves them, so a partial
-* contribution is reported rather than unwound — unwinding would mean removing
-* items from a registry, which is precisely the mutable-graph behavior sealing
-* exists to prevent.
-*/
-function activatePlugins(plugins, registries) {
-	const loaded = [];
-	const failures = [];
-	for (const entry of plugins) {
-		const checkpoints = {
-			accountRegistry: registries.accountRegistry.checkpoint(),
-			catalog: registries.catalog.checkpoint(),
-			clients: registries.clients.checkpoint()
-		};
-		try {
-			entry.plugin.activate({
-				apiVersion: 1,
-				pluginRoot: entry.record.path,
-				registerProvider: (p) => registries.accountRegistry.register(p),
-				registerClient: (c) => registries.clients.register(c),
-				registerCatalogProvider: (p) => registries.catalog.register(p)
-			});
-			loaded.push(entry);
-		} catch (err) {
-			registries.accountRegistry.restore(checkpoints.accountRegistry);
-			registries.catalog.restore(checkpoints.catalog);
-			registries.clients.restore(checkpoints.clients);
-			failures.push({
-				name: entry.record.name,
-				path: entry.record.path,
-				reason: err instanceof Error ? err.message : String(err),
-				untrusted: false
-			});
-		}
-	}
-	return {
-		loaded,
-		failures
-	};
-}
-/**
-* Wire stores, registries, and services for CLI or tests.
-* All structured data shares one SQLite database under ~/.anypick/anypick.db.
-*/
-function createApp(opts = {}) {
-	const root = getAnyPickRoot(opts.root);
-	const db = opts.db ?? openDatabase(root);
-	const ownsDatabase = !opts.db;
-	const accountRegistry = opts.accountRegistry ?? new ProviderRegistry();
-	const catalog = opts.catalog ?? new CatalogRegistry();
-	const clients = opts.clients ?? new ClientRegistry();
-	if (!opts.bare) {
-		if (!opts.accountRegistry) registerBuiltinProviders(accountRegistry);
-		if (!opts.catalog) registerBuiltinCatalog(catalog);
-		if (!opts.clients) registerBuiltinClients(clients);
-	}
-	const pluginRuntime = activatePlugins(opts.plugins ?? [], {
-		accountRegistry,
-		catalog,
-		clients
-	});
-	const pluginFailures = [...opts.pluginFailures ?? [], ...pluginRuntime.failures];
-	accountRegistry.seal();
-	catalog.seal();
-	clients.seal();
-	const accountStore = new AccountStore(root, db);
-	const pools = new PoolStore(root, db);
-	const hubStore = new ProxyHubStore(db);
-	const profileStore = new ProfileStore(root, db);
-	const profiles = new ProfileService(profileStore, catalog);
-	const clientState = new ClientStateStore(root, db);
-	const configStore = new GlobalConfigStore(root, db);
-	const config = new ConfigService(configStore);
-	const traySettings = new TraySettingsService(root);
-	const runtime = new RuntimeService(profileStore, clientState, clients, config, root, accountRegistry);
-	const bindings = new BindingStore(db);
-	const presets = new PresetStore(db);
-	const journal = new OperationJournal(db);
-	const leases = new LeaseStore(db);
-	const pluginStore = new PluginStore(db);
-	const plugins = new PluginService(pluginStore, root);
-	const modelCacheStore = new ModelCacheStore(root, db);
-	const modelDiscovery = new ModelDiscoveryService({
-		root,
-		cache: modelCacheStore,
-		policyFor: modelPolicyLookup({
-			accountRegistry,
-			catalog
-		})
-	});
-	const proxy = new ProxyService(accountStore, accountRegistry, pools, {
-		bindings,
-		runtime,
-		clientState
-	}, leases, async () => quotaGuardPolicy(await configStore.read()));
-	const accounts = new AccountService(accountStore, accountRegistry, proxy);
-	const hub = new ProxyHubService(root, hubStore, {
-		hubs: hubStore,
-		accounts,
-		pools,
-		accountRegistry
-	});
-	accounts.setAfterDelete(async (providerId, accountName) => {
-		await hub.forgetAccount(providerId, accountName);
-		try {
-			const remaining = (await accounts.list(providerId)).map((row) => row.name);
-			await proxy.pools.syncMembers(providerId, remaining);
-		} catch {}
-	});
-	const eventSink = opts.events ?? new InMemoryEventSink();
-	const eventLog = eventSink instanceof InMemoryEventSink ? eventSink : void 0;
-	let closed = false;
-	const emit = makeEmitter(new class extends DebugStderrEventSink {
-		emit(e) {
-			super.emit(e);
-			eventSink.emit(e);
-		}
-	}());
-	const codexLiveDeps = {
-		hub: {
-			getAttachedRoute: (routeId) => hub.getAttachedRoute(routeId),
-			status: (name) => hub.status(name)
-		},
-		proxy: { listProxyRows: () => proxy.listProxyRows() },
-		accounts: {
-			getAccount: (provider, name) => accountStore.getAccount(provider, name),
-			readProxyState: (provider, name) => accountStore.readProxyState(provider, name)
-		},
-		accountRegistry,
-		getCodexSource: () => bindings.getGlobal("codex")?.spec.source ?? null,
-		getCodexModelId: () => {
-			const binding = bindings.getGlobal("codex");
-			if (!binding) return;
-			if (binding.spec.model.mode === "explicit") return binding.spec.model.id;
-			const roles = binding.spec.clientOptions?.modelRoles;
-			if (roles && typeof roles === "object" && !Array.isArray(roles)) {
-				const def = roles.default;
-				return typeof def === "string" ? def : void 0;
-			}
-		},
-		getCodexModelRoles: () => {
-			const roles = bindings.getGlobal("codex")?.spec.clientOptions?.modelRoles;
-			if (!roles || typeof roles !== "object" || Array.isArray(roles)) return;
-			const out = {};
-			for (const [key, value] of Object.entries(roles)) if (typeof value === "string" && value.trim()) out[key] = value.trim();
-			return Object.keys(out).length > 0 ? out : void 0;
-		},
-		log: (message) => emit("info", "CODEX_LIVE_SYNC", message)
-	};
-	const syncCodexLive = (syncOpts) => syncCodexLiveConfig(codexLiveDeps, syncOpts);
-	runtime.setCodexLiveConfigSync(syncCodexLive);
-	runtime.setCodexLiveConfigRestoreNative(() => restoreCodexLiveForNative(codexLiveDeps));
-	runtime.setCodexLiveConfigPublish((provider) => publishCodexLiveRoute(codexLiveDeps, provider));
-	proxy.setCodexLiveConfigSync(() => syncCodexLiveConfig(codexLiveDeps));
-	hub.setCodexLiveConfigSync(() => syncCodexLiveConfig(codexLiveDeps));
-	return {
-		root,
-		db,
-		accounts,
-		proxy,
-		accountStore,
-		accountRegistry,
-		profiles,
-		profileStore,
-		runtime,
-		clients,
-		catalog,
-		doctor: new DoctorService({
-			accounts,
-			proxy,
-			profiles,
-			runtime,
-			catalog,
-			clients,
-			root,
-			bindings,
-			leases,
-			journal,
-			accountStore,
-			plugins: {
-				installed: () => pluginStore.list(),
-				loadedNames: pluginRuntime.loaded.map((l) => l.record.name),
-				failures: pluginFailures
-			}
-		}),
-		config,
-		configStore,
-		traySettings,
-		bindings,
-		presets,
-		journal,
-		leases,
-		bindingService: new BindingService({
-			accounts,
-			proxy,
-			accountRegistry,
-			profiles,
-			profileStore,
-			bindings,
-			presets,
-			catalog,
-			clients,
-			pools,
-			hubStore,
-			hub,
-			journal,
-			leases,
-			runtime,
-			eventSink
-		}),
-		modelDiscovery,
-		pools,
-		hubStore,
-		hub,
-		plugins,
-		pluginStore,
-		modelCacheStore,
-		pluginRuntime: {
-			loaded: pluginRuntime.loaded,
-			failures: pluginFailures
-		},
-		eventSink,
-		events: {
-			sink: eventSink,
-			emit,
-			list: () => eventLog?.list() ?? []
-		},
-		close: () => {
-			if (closed) return;
-			closed = true;
-			for (const entry of [...pluginRuntime.loaded].reverse()) try {
-				entry.plugin.dispose?.();
-			} catch (err) {
-				emit("warn", "plugin_dispose_failed", `Plugin ${entry.record.name} failed to dispose`, {
-					resourceIds: [`plugin/${entry.record.name}`],
-					context: { error: err instanceof Error ? err.message : String(err) }
-				});
-			}
-			if (ownsDatabase) db.close();
-		}
-	};
-}
-/**
-* Create app and run one-time filesystem → SQLite migration if needed.
-*
-* The migration and config-ensure run under a process-scoped file lock so two
-* concurrent `anypick` invocations (e.g. a CLI call while the TUI is open) cannot
-* race the schema bootstrap. The lock is best-effort: a contended lock fails
-* fast rather than blocking the user.
-*/
-async function createAppReady(opts = {}) {
-	const root = getAnyPickRoot(opts.root);
-	let app;
-	const ownsDatabase = !opts.db;
-	try {
-		await withFileLock(join(root, ".migrate.lock"), async () => {
-			if (!opts.root && !process.env.ANYPICK_HOME) migrateLegacyRootIfPristine(root, join(dirname(root), ".hotplug"));
-			const db = opts.db ?? openDatabase(root);
-			const pluginLoad = opts.bare || opts.plugins || pluginsDisabledByEnv() ? void 0 : await loadPlugins(new PluginStore(db).list());
-			app = createApp({
-				...opts,
-				root,
-				db,
-				plugins: opts.plugins ?? pluginLoad?.loaded,
-				pluginFailures: opts.pluginFailures ?? pluginLoad?.failures
-			});
-			if (!opts.skipMigrate) {
-				await migrateFilesystemIfNeeded(app.db, root);
-				await app.config.ensure();
-				await migrateBindingsIfNeeded(app);
-			} else await app.config.ensure();
-		});
-	} catch (err) {
-		if (app && ownsDatabase) app.db.close();
-		throw err;
-	}
-	if (!app) throw new Error("AnyPick app initialization did not complete");
-	for (const failure of app.pluginRuntime.failures) app.events.emit("warn", "plugin_load_failed", `Plugin ${failure.name} was not loaded`, {
-		resourceIds: [`plugin/${failure.name}`],
-		context: {
-			reason: failure.reason,
-			untrusted: failure.untrusted
-		}
-	});
-	try {
-		await recoverIncompleteOperations({
-			journal: app.journal,
-			events: app.events.sink,
-			resolve: {
-				accounts: app.accounts,
-				proxy: app.proxy,
-				accountRegistry: app.accountRegistry,
-				profiles: app.profiles,
-				profileStore: app.profileStore,
-				bindings: app.bindings,
-				presets: app.presets,
-				catalog: app.catalog,
-				clients: app.clients,
-				pools: app.pools,
-				hub: app.hub
-			}
-		});
-	} catch (err) {
-		logInternalError("startup journal recovery", err);
-		app.events.emit("error", "startup_recovery_failed", "Automatic journal recovery failed", { context: { error: err instanceof Error ? err.message : String(err) } });
-	}
-	try {
-		if (await runningTrayPid(root) == null) await reapStaleLeases({
-			proxy: app.proxy,
-			leases: app.leases,
-			pools: app.pools
-		});
-	} catch (err) {
-		logInternalError("startup lease reap", err);
-		app.events.emit("error", "startup_lease_reap_failed", "Stale proxy lease reaping failed", { context: { error: err instanceof Error ? err.message : String(err) } });
-	}
-	return app;
-}
-//#endregion
-export { createApp, createAppReady };
-
-//# sourceMappingURL=app.js.map

package/dist/core/app.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app.js","names":[],"sources":["../../src/core/app.ts"],"sourcesContent":["import { AccountStore } from './store';\nimport { AccountService } from './service';\nimport { ProxyService } from './proxy-service';\nimport { ProviderRegistry } from './registry';\nimport { ProfileStore } from './profile-store';\nimport { ProfileService } from './profile-service';\nimport { ClientStateStore } from './client-state-store';\nimport { RuntimeService } from './runtime-service';\nimport { DoctorService } from './doctor';\nimport { GlobalConfigStore } from './config';\nimport { ConfigService } from './config-service';\nimport { TraySettingsService } from './tray-settings-service';\nimport { migrateLegacyRootIfPristine, openDatabase, type AnyPickDatabase } from './db';\nimport { migrateFilesystemIfNeeded } from './migrate-fs';\nimport { CatalogRegistry, registerBuiltinCatalog } from '../catalog/providers';\nimport { ClientRegistry, registerBuiltinClients } from '../clients/index';\nimport { registerBuiltinProviders } from '../providers/index';\nimport { getAnyPickRoot } from './paths';\nimport { dirname, join } from 'node:path';\nimport { logInternalError } from '../utils/log';\nimport {\n  makeEmitter,\n  InMemoryEventSink,\n  DebugStderrEventSink,\n  type AnyPickEvent,\n  type AnyPickEventSink,\n} from './events';\nimport { withFileLock } from '../utils/lock';\nimport { BindingStore } from './binding-store';\nimport { PresetStore } from './preset-store';\nimport { OperationJournal } from './journal';\nimport { LeaseStore } from './lease-store';\nimport { BindingService } from './binding-service';\nimport { migrateBindingsIfNeeded } from './migrate-bindings';\nimport { recoverIncompleteOperations } from './activation-executor';\nimport { reapStaleLeases } from './proxy-lifecycle';\nimport { PoolStore } from './pool-store';\nimport { ProxyHubStore } from './proxy-hub-store';\nimport { ProxyHubService } from './proxy-hub-service';\nimport { runningTrayPid } from './tray-runtime';\nimport { PluginStore } from './plugin-store';\nimport { ModelCacheStore } from './model-cache-store';\nimport { ModelDiscoveryService } from './model-discovery';\nimport { modelPolicyLookup } from './model-policy';\nimport { PluginService } from './plugin-service';\nimport {\n  publishCodexLiveRoute,\n  restoreCodexLiveForNative,\n  syncCodexLiveConfig,\n} from './codex-live-config';\nimport { quotaGuardPolicy } from './quota-guard-policy';\nimport { loadPlugins, pluginsDisabledByEnv } from './plugin-loader';\nimport { PLUGIN_API_VERSION, type LoadedPlugin, type PluginLoadFailure } from '../types';\n\n/**\n * The supported programmatic surface: services, registries, and lifecycle.\n *\n * Deliberately excludes the database and every raw store. Stores own SQL and\n * assume the coordinator locks held by the services above them (ADR 0009), so\n * an embedder that writes through a store directly bypasses both. Annotate\n * embedding code as `AnyPick` rather than `AnyPickApp` and the compiler enforces\n * that for you.\n */\nexport interface AnyPick {\n  root: string;\n  accounts: AccountService;\n  proxy: ProxyService;\n  /** Unified public proxy endpoint and its token-scoped route manifests. */\n  hub: ProxyHubService;\n  accountRegistry: ProviderRegistry;\n  profiles: ProfileService;\n  runtime: RuntimeService;\n  /** Service-owned global config mutations (ADR 0009). */\n  config: ConfigService;\n  /** Tray-local settings (login item) under the coordinator. */\n  traySettings: TraySettingsService;\n  clients: ClientRegistry;\n  catalog: CatalogRegistry;\n  doctor: DoctorService;\n  bindingService: BindingService;\n  /** Live vendor model lists, cached; falls back to the static catalog. */\n  modelDiscovery: ModelDiscoveryService;\n  plugins: PluginService;\n  /**\n   * Plugins that contributed to the registries above, and those that were\n   * enabled but refused. Failures are surfaced (doctor, `plugin list`) rather\n   * than thrown, so one bad extension cannot make AnyPick unusable.\n   */\n  pluginRuntime: {\n    loaded: readonly LoadedPlugin[];\n    failures: readonly PluginLoadFailure[];\n  };\n  /** Structured event sink + emitter for degraded/lifecycle conditions (OBS-01). */\n  events: {\n    sink: AnyPickEventSink;\n    emit: ReturnType<typeof makeEmitter>;\n    /** Snapshot of framework lifecycle events, oldest first. */\n    list: () => readonly AnyPickEvent[];\n  };\n  /** Release framework-owned resources. Safe to call more than once. */\n  close: () => void;\n}\n\n/**\n * The composition root, including the raw persistence layer.\n *\n * This is what `createApp` builds and what the CLI, TUI, and tray consume. It is\n * **not** a stability promise: members may be added, renamed, or removed as the\n * internal graph changes. Programmatic consumers should depend on `AnyPick`.\n */\nexport interface AnyPickApp extends AnyPick {\n  db: AnyPickDatabase;\n  accountStore: AccountStore;\n  profileStore: ProfileStore;\n  /** Raw store for composition/migration only — prefer `config` for mutations. */\n  configStore: GlobalConfigStore;\n  bindings: BindingStore;\n  presets: PresetStore;\n  journal: OperationJournal;\n  leases: LeaseStore;\n  pools: PoolStore;\n  hubStore: ProxyHubStore;\n  pluginStore: PluginStore;\n  modelCacheStore: ModelCacheStore;\n  /**\n   * Raw event sink under the name `ExecutorDeps` expects. Callers that hand the\n   * whole app to `executeActivation` therefore get structured events instead of\n   * silently dropping them.\n   */\n  eventSink: AnyPickEventSink;\n}\n\nexport interface CreateAppOptions {\n  root?: string;\n  /** Skip registering builtins (tests). */\n  bare?: boolean;\n  /** Skip FS→SQLite migration. */\n  skipMigrate?: boolean;\n  accountRegistry?: ProviderRegistry;\n  catalog?: CatalogRegistry;\n  clients?: ClientRegistry;\n  db?: AnyPickDatabase;\n  /** Injectable structured event sink (OBS-01). Defaults to an in-memory ring\n   * plus a debug-stderr echo (behind ANYPICK_DEBUG). */\n  events?: AnyPickEventSink;\n  /**\n   * Already-imported plugins to activate before the registries seal.\n   *\n   * `createApp` is synchronous, so `createAppReady` does the async discovery and\n   * `import()` and passes the result down. A synchronous `activate` is what lets\n   * plugin contributions land inside the same window as the builtins.\n   */\n  plugins?: LoadedPlugin[];\n  /** Failures from that load pass, carried through for reporting. */\n  pluginFailures?: PluginLoadFailure[];\n}\n\n/**\n * Run each plugin's `activate`, collecting any that throw as failures.\n *\n * A plugin that throws here is dropped, but everything it registered before\n * throwing is already in the registry. Registration is idempotent per id and\n * the adapters are inert until something resolves them, so a partial\n * contribution is reported rather than unwound — unwinding would mean removing\n * items from a registry, which is precisely the mutable-graph behavior sealing\n * exists to prevent.\n */\nfunction activatePlugins(\n  plugins: LoadedPlugin[],\n  registries: {\n    accountRegistry: ProviderRegistry;\n    catalog: CatalogRegistry;\n    clients: ClientRegistry;\n  },\n): { loaded: LoadedPlugin[]; failures: PluginLoadFailure[] } {\n  const loaded: LoadedPlugin[] = [];\n  const failures: PluginLoadFailure[] = [];\n  for (const entry of plugins) {\n    const checkpoints = {\n      accountRegistry: registries.accountRegistry.checkpoint(),\n      catalog: registries.catalog.checkpoint(),\n      clients: registries.clients.checkpoint(),\n    };\n    try {\n      entry.plugin.activate({\n        apiVersion: PLUGIN_API_VERSION,\n        pluginRoot: entry.record.path,\n        registerProvider: (p) => registries.accountRegistry.register(p),\n        registerClient: (c) => registries.clients.register(c),\n        registerCatalogProvider: (p) => registries.catalog.register(p),\n      });\n      loaded.push(entry);\n    } catch (err) {\n      // Registration is atomic per plugin. A plugin may throw after registering\n      // one adapter; leaving that adapter active would make startup depend on a\n      // failed, unreviewed partial setup.\n      registries.accountRegistry.restore(checkpoints.accountRegistry);\n      registries.catalog.restore(checkpoints.catalog);\n      registries.clients.restore(checkpoints.clients);\n      failures.push({\n        name: entry.record.name,\n        path: entry.record.path,\n        reason: err instanceof Error ? err.message : String(err),\n        untrusted: false,\n      });\n    }\n  }\n  return { loaded, failures };\n}\n\n/**\n * Wire stores, registries, and services for CLI or tests.\n * All structured data shares one SQLite database under ~/.anypick/anypick.db.\n */\nexport function createApp(opts: CreateAppOptions = {}): AnyPickApp {\n  const root = getAnyPickRoot(opts.root);\n  const db = opts.db ?? openDatabase(root);\n  const ownsDatabase = !opts.db;\n\n  const accountRegistry = opts.accountRegistry ?? new ProviderRegistry();\n  const catalog = opts.catalog ?? new CatalogRegistry();\n  const clients = opts.clients ?? new ClientRegistry();\n\n  if (!opts.bare) {\n    if (!opts.accountRegistry) {\n      registerBuiltinProviders(accountRegistry);\n    }\n    if (!opts.catalog) {\n      registerBuiltinCatalog(catalog);\n    }\n    if (!opts.clients) {\n      registerBuiltinClients(clients);\n    }\n  }\n\n  // Plugins extend the same three registries the builtins use, and must land\n  // inside the same window: after builtins (so a plugin cannot shadow a builtin\n  // id) and before sealing.\n  const pluginRuntime = activatePlugins(opts.plugins ?? [], {\n    accountRegistry,\n    catalog,\n    clients,\n  });\n  const pluginFailures = [...(opts.pluginFailures ?? []), ...pluginRuntime.failures];\n\n  // Extension registration is a startup concern. Freezing registries prevents\n  // a long-lived process from resolving a different provider/client graph half\n  // way through an activation. Consumers register extensions before creating\n  // the app, which also keeps tests and embedding deterministic.\n  accountRegistry.seal();\n  catalog.seal();\n  clients.seal();\n\n  const accountStore = new AccountStore(root, db);\n  const pools = new PoolStore(root, db);\n  const hubStore = new ProxyHubStore(db);\n  const profileStore = new ProfileStore(root, db);\n  const profiles = new ProfileService(profileStore, catalog);\n  const clientState = new ClientStateStore(root, db);\n  const configStore = new GlobalConfigStore(root, db);\n  const config = new ConfigService(configStore);\n  const traySettings = new TraySettingsService(root);\n  const runtime = new RuntimeService(\n    profileStore,\n    clientState,\n    clients,\n    config,\n    root,\n    accountRegistry,\n  );\n  const bindings = new BindingStore(db);\n  const presets = new PresetStore(db);\n  const journal = new OperationJournal(db);\n  const leases = new LeaseStore(db);\n  const pluginStore = new PluginStore(db);\n  const plugins = new PluginService(pluginStore, root);\n  const modelCacheStore = new ModelCacheStore(root, db);\n  const modelDiscovery = new ModelDiscoveryService({\n    root,\n    cache: modelCacheStore,\n    policyFor: modelPolicyLookup({ accountRegistry, catalog }),\n  });\n\n  // The lease store is constructed before the proxy service so it can be a real\n  // constructor dependency: proxies started outside the activation pipeline\n  // (e.g. `anypick proxy start`) record leases and are reaped on restart.\n  const proxy = new ProxyService(\n    accountStore,\n    accountRegistry,\n    pools,\n    { bindings, runtime, clientState },\n    leases,\n    async () => quotaGuardPolicy(await configStore.read()),\n  );\n  const accounts = new AccountService(accountStore, accountRegistry, proxy);\n  const hub = new ProxyHubService(root, hubStore, {\n    hubs: hubStore,\n    accounts,\n    pools,\n    accountRegistry,\n  });\n  // Account delete must drop Hub sources/owners and pool membership for that\n  // login — otherwise a removed grok/work stays enabled and blocks attach.\n  accounts.setAfterDelete(async (providerId, accountName) => {\n    await hub.forgetAccount(providerId, accountName);\n    try {\n      const remaining = (await accounts.list(providerId)).map((row) => row.name);\n      await proxy.pools.syncMembers(providerId, remaining);\n    } catch {\n      // Pools are optional; hub prune above is the load-bearing cleanup.\n    }\n  });\n\n  const eventSink: AnyPickEventSink = opts.events ?? new InMemoryEventSink();\n  const eventLog = eventSink instanceof InMemoryEventSink ? eventSink : undefined;\n  let closed = false;\n  const emit = makeEmitter(\n    // Default behavior: in-memory ring + debug-stderr echo (no-op unless ANYPICK_DEBUG).\n    new (class extends DebugStderrEventSink {\n      emit(e: Parameters<AnyPickEventSink['emit']>[0]): void {\n        super.emit(e);\n        eventSink.emit(e);\n      }\n    })(),\n  );\n\n  // Keep the live ~/.codex/config.toml managed block in step with the active\n  // Codex route. Re-rendered whenever a proxy/hub lifecycle event could change\n  // which endpoint Codex should point at. Best-effort: never throws.\n  const codexLiveDeps = {\n    hub: {\n      getAttachedRoute: (routeId: string) => hub.getAttachedRoute(routeId),\n      status: (name?: string) => hub.status(name),\n    },\n    proxy: {\n      listProxyRows: () => proxy.listProxyRows(),\n    },\n    accounts: {\n      getAccount: (provider: string, name: string) => accountStore.getAccount(provider, name),\n      readProxyState: (provider: string, name: string) =>\n        accountStore.readProxyState(provider, name),\n    },\n    accountRegistry,\n    // Binding is authoritative — never publish Claude's hub route onto Codex.\n    getCodexSource: () => bindings.getGlobal('codex')?.spec.source ?? null,\n    getCodexModelId: () => {\n      const binding = bindings.getGlobal('codex');\n      if (!binding) {\n        return undefined;\n      }\n      if (binding.spec.model.mode === 'explicit') {\n        return binding.spec.model.id;\n      }\n      const roles = binding.spec.clientOptions?.modelRoles;\n      if (roles && typeof roles === 'object' && !Array.isArray(roles)) {\n        const def = (roles as Record<string, unknown>).default;\n        return typeof def === 'string' ? def : undefined;\n      }\n      return undefined;\n    },\n    getCodexModelRoles: () => {\n      const binding = bindings.getGlobal('codex');\n      const roles = binding?.spec.clientOptions?.modelRoles;\n      if (!roles || typeof roles !== 'object' || Array.isArray(roles)) {\n        return undefined;\n      }\n      const out: Record<string, string> = {};\n      for (const [key, value] of Object.entries(roles as Record<string, unknown>)) {\n        if (typeof value === 'string' && value.trim()) {\n          out[key] = value.trim();\n        }\n      }\n      return Object.keys(out).length > 0 ? out : undefined;\n    },\n    log: (message: string) => emit('info', 'CODEX_LIVE_SYNC', message),\n  };\n  const syncCodexLive = (syncOpts?: { forceRouted?: boolean }) =>\n    syncCodexLiveConfig(codexLiveDeps, syncOpts);\n  runtime.setCodexLiveConfigSync(syncCodexLive);\n  runtime.setCodexLiveConfigRestoreNative(() => restoreCodexLiveForNative(codexLiveDeps));\n  runtime.setCodexLiveConfigPublish((provider) => publishCodexLiveRoute(codexLiveDeps, provider));\n  // Proxy/hub lifecycle: respect native mode (no forceRouted).\n  proxy.setCodexLiveConfigSync(() => syncCodexLiveConfig(codexLiveDeps));\n  hub.setCodexLiveConfigSync(() => syncCodexLiveConfig(codexLiveDeps));\n\n  const doctor = new DoctorService({\n    accounts,\n    proxy,\n    profiles,\n    runtime,\n    catalog,\n    clients,\n    root,\n    bindings,\n    leases,\n    journal,\n    accountStore,\n    plugins: {\n      installed: () => pluginStore.list(),\n      loadedNames: pluginRuntime.loaded.map((l) => l.record.name),\n      failures: pluginFailures,\n    },\n  });\n\n  const resolveDeps = {\n    accounts,\n    proxy,\n    accountRegistry,\n    profiles,\n    profileStore,\n    bindings,\n    presets,\n    catalog,\n    clients,\n    pools,\n    hubStore,\n    hub,\n    journal,\n    leases,\n    runtime,\n    eventSink,\n  };\n\n  const bindingService = new BindingService(resolveDeps);\n\n  const app: AnyPickApp = {\n    root,\n    db,\n    accounts,\n    proxy,\n    accountStore,\n    accountRegistry,\n    profiles,\n    profileStore,\n    runtime,\n    clients,\n    catalog,\n    doctor,\n    config,\n    configStore,\n    traySettings,\n    bindings,\n    presets,\n    journal,\n    leases,\n    bindingService,\n    modelDiscovery,\n    pools,\n    hubStore,\n    hub,\n    plugins,\n    pluginStore,\n    modelCacheStore,\n    pluginRuntime: {\n      loaded: pluginRuntime.loaded,\n      failures: pluginFailures,\n    },\n    eventSink,\n    events: {\n      sink: eventSink,\n      emit,\n      list: () => eventLog?.list() ?? [],\n    },\n    close: (): void => {\n      if (closed) {\n        return;\n      }\n      closed = true;\n      for (const entry of [...pluginRuntime.loaded].reverse()) {\n        try {\n          entry.plugin.dispose?.();\n        } catch (err) {\n          emit('warn', 'plugin_dispose_failed', `Plugin ${entry.record.name} failed to dispose`, {\n            resourceIds: [`plugin/${entry.record.name}`],\n            context: { error: err instanceof Error ? err.message : String(err) },\n          });\n        }\n      }\n      if (ownsDatabase) {\n        db.close();\n      }\n    },\n  };\n\n  return app;\n}\n\n/**\n * Create app and run one-time filesystem → SQLite migration if needed.\n *\n * The migration and config-ensure run under a process-scoped file lock so two\n * concurrent `anypick` invocations (e.g. a CLI call while the TUI is open) cannot\n * race the schema bootstrap. The lock is best-effort: a contended lock fails\n * fast rather than blocking the user.\n */\nexport async function createAppReady(opts: CreateAppOptions = {}): Promise<AnyPickApp> {\n  const root = getAnyPickRoot(opts.root);\n  let app: AnyPickApp | undefined;\n  const ownsDatabase = !opts.db;\n\n  try {\n    // `openDatabase()` runs schema migration. It must therefore be inside the\n    // same lock as the legacy filesystem import and initial config bootstrap;\n    // constructing the app first used to race before this lock was acquired.\n    await withFileLock(join(root, '.migrate.lock'), async () => {\n      if (!opts.root && !process.env.ANYPICK_HOME) {\n        migrateLegacyRootIfPristine(root, join(dirname(root), '.hotplug'));\n      }\n      const db = opts.db ?? openDatabase(root);\n      // Plugins must be imported before `createApp`, which seals the registries\n      // the moment it returns. `bare` builds (tests) skip this so a stray\n      // installed plugin cannot leak into an isolated fixture.\n      const pluginLoad =\n        opts.bare || opts.plugins || pluginsDisabledByEnv()\n          ? undefined\n          : await loadPlugins(new PluginStore(db).list());\n      app = createApp({\n        ...opts,\n        root,\n        db,\n        plugins: opts.plugins ?? pluginLoad?.loaded,\n        pluginFailures: opts.pluginFailures ?? pluginLoad?.failures,\n      });\n      if (!opts.skipMigrate) {\n        await migrateFilesystemIfNeeded(app.db, root);\n        await app.config.ensure();\n        await migrateBindingsIfNeeded(app);\n      } else {\n        await app.config.ensure();\n      }\n    });\n  } catch (err) {\n    if (app && ownsDatabase) {\n      app.db.close();\n    }\n    throw err;\n  }\n  if (!app) {\n    throw new Error('AnyPick app initialization did not complete');\n  }\n  // A refused plugin is a degraded condition, not a crash: report it as an\n  // event so `doctor` can show it even when the user never runs `plugin list`.\n  for (const failure of app.pluginRuntime.failures) {\n    app.events.emit('warn', 'plugin_load_failed', `Plugin ${failure.name} was not loaded`, {\n      resourceIds: [`plugin/${failure.name}`],\n      context: { reason: failure.reason, untrusted: failure.untrusted },\n    });\n  }\n\n  // Best-effort journal recovery on startup (re-resolves adapters from ResourceRefs).\n  // A failure here means a partial/crashed operation could not be rolled back\n  // automatically — log it (ANYPICK_DEBUG) rather than discarding, since silent\n  // inconsistency is the exact condition this tool must not hide.\n  try {\n    await recoverIncompleteOperations({\n      journal: app.journal,\n      events: app.events.sink,\n      resolve: {\n        accounts: app.accounts,\n        proxy: app.proxy,\n        accountRegistry: app.accountRegistry,\n        profiles: app.profiles,\n        profileStore: app.profileStore,\n        bindings: app.bindings,\n        presets: app.presets,\n        catalog: app.catalog,\n        clients: app.clients,\n        pools: app.pools,\n        hub: app.hub,\n      },\n    });\n  } catch (err) {\n    logInternalError('startup journal recovery', err);\n    app.events.emit('error', 'startup_recovery_failed', 'Automatic journal recovery failed', {\n      context: { error: err instanceof Error ? err.message : String(err) },\n    });\n  }\n\n  // Reap detached proxy processes whose owning CLI/TUI session has exited,\n  // so stale leases do not hold ports across sessions.\n  try {\n    // A live menu-bar supervisor is the lifecycle owner. CLI invocations must\n    // not reap its children while it is keeping local client endpoints alive.\n    if ((await runningTrayPid(root)) == null) {\n      await reapStaleLeases({ proxy: app.proxy, leases: app.leases, pools: app.pools });\n    }\n  } catch (err) {\n    logInternalError('startup lease reap', err);\n    app.events.emit('error', 'startup_lease_reap_failed', 'Stale proxy lease reaping failed', {\n      context: { error: err instanceof Error ? err.message : String(err) },\n    });\n  }\n  return app;\n}\n\n/**\n * @deprecated Process-wide sync construction skips plugin load, migration lock,\n * and startup recovery. Use `createAppReady` / `createAnyPickApp` instead.\n * Kept only so accidental callers fail loudly rather than silently half-init.\n */\nexport function getDefaultApp(): never {\n  throw new Error(\n    'getDefaultApp() is removed. Use createAppReady() (CLI/tests) or createAnyPickApp() (embedders).',\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuKA,SAAS,gBACP,SACA,YAK2D;CAC3D,MAAM,SAAyB,CAAC;CAChC,MAAM,WAAgC,CAAC;CACvC,KAAK,MAAM,SAAS,SAAS;EAC3B,MAAM,cAAc;GAClB,iBAAiB,WAAW,gBAAgB,WAAW;GACvD,SAAS,WAAW,QAAQ,WAAW;GACvC,SAAS,WAAW,QAAQ,WAAW;EACzC;EACA,IAAI;GACF,MAAM,OAAO,SAAS;IACpB,YAAA;IACA,YAAY,MAAM,OAAO;IACzB,mBAAmB,MAAM,WAAW,gBAAgB,SAAS,CAAC;IAC9D,iBAAiB,MAAM,WAAW,QAAQ,SAAS,CAAC;IACpD,0BAA0B,MAAM,WAAW,QAAQ,SAAS,CAAC;GAC/D,CAAC;GACD,OAAO,KAAK,KAAK;EACnB,SAAS,KAAK;GAIZ,WAAW,gBAAgB,QAAQ,YAAY,eAAe;GAC9D,WAAW,QAAQ,QAAQ,YAAY,OAAO;GAC9C,WAAW,QAAQ,QAAQ,YAAY,OAAO;GAC9C,SAAS,KAAK;IACZ,MAAM,MAAM,OAAO;IACnB,MAAM,MAAM,OAAO;IACnB,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;IACvD,WAAW;GACb,CAAC;EACH;CACF;CACA,OAAO;EAAE;EAAQ;CAAS;AAC5B;;;;;AAMA,SAAgB,UAAU,OAAyB,CAAC,GAAe;CACjE,MAAM,OAAO,eAAe,KAAK,IAAI;CACrC,MAAM,KAAK,KAAK,MAAM,aAAa,IAAI;CACvC,MAAM,eAAe,CAAC,KAAK;CAE3B,MAAM,kBAAkB,KAAK,mBAAmB,IAAI,iBAAiB;CACrE,MAAM,UAAU,KAAK,WAAW,IAAI,gBAAgB;CACpD,MAAM,UAAU,KAAK,WAAW,IAAI,eAAe;CAEnD,IAAI,CAAC,KAAK,MAAM;EACd,IAAI,CAAC,KAAK,iBACR,yBAAyB,eAAe;EAE1C,IAAI,CAAC,KAAK,SACR,uBAAuB,OAAO;EAEhC,IAAI,CAAC,KAAK,SACR,uBAAuB,OAAO;CAElC;CAKA,MAAM,gBAAgB,gBAAgB,KAAK,WAAW,CAAC,GAAG;EACxD;EACA;EACA;CACF,CAAC;CACD,MAAM,iBAAiB,CAAC,GAAI,KAAK,kBAAkB,CAAC,GAAI,GAAG,cAAc,QAAQ;CAMjF,gBAAgB,KAAK;CACrB,QAAQ,KAAK;CACb,QAAQ,KAAK;CAEb,MAAM,eAAe,IAAI,aAAa,MAAM,EAAE;CAC9C,MAAM,QAAQ,IAAI,UAAU,MAAM,EAAE;CACpC,MAAM,WAAW,IAAI,cAAc,EAAE;CACrC,MAAM,eAAe,IAAI,aAAa,MAAM,EAAE;CAC9C,MAAM,WAAW,IAAI,eAAe,cAAc,OAAO;CACzD,MAAM,cAAc,IAAI,iBAAiB,MAAM,EAAE;CACjD,MAAM,cAAc,IAAI,kBAAkB,MAAM,EAAE;CAClD,MAAM,SAAS,IAAI,cAAc,WAAW;CAC5C,MAAM,eAAe,IAAI,oBAAoB,IAAI;CACjD,MAAM,UAAU,IAAI,eAClB,cACA,aACA,SACA,QACA,MACA,eACF;CACA,MAAM,WAAW,IAAI,aAAa,EAAE;CACpC,MAAM,UAAU,IAAI,YAAY,EAAE;CAClC,MAAM,UAAU,IAAI,iBAAiB,EAAE;CACvC,MAAM,SAAS,IAAI,WAAW,EAAE;CAChC,MAAM,cAAc,IAAI,YAAY,EAAE;CACtC,MAAM,UAAU,IAAI,cAAc,aAAa,IAAI;CACnD,MAAM,kBAAkB,IAAI,gBAAgB,MAAM,EAAE;CACpD,MAAM,iBAAiB,IAAI,sBAAsB;EAC/C;EACA,OAAO;EACP,WAAW,kBAAkB;GAAE;GAAiB;EAAQ,CAAC;CAC3D,CAAC;CAKD,MAAM,QAAQ,IAAI,aAChB,cACA,iBACA,OACA;EAAE;EAAU;EAAS;CAAY,GACjC,QACA,YAAY,iBAAiB,MAAM,YAAY,KAAK,CAAC,CACvD;CACA,MAAM,WAAW,IAAI,eAAe,cAAc,iBAAiB,KAAK;CACxE,MAAM,MAAM,IAAI,gBAAgB,MAAM,UAAU;EAC9C,MAAM;EACN;EACA;EACA;CACF,CAAC;CAGD,SAAS,eAAe,OAAO,YAAY,gBAAgB;EACzD,MAAM,IAAI,cAAc,YAAY,WAAW;EAC/C,IAAI;GACF,MAAM,aAAa,MAAM,SAAS,KAAK,UAAU,EAAA,CAAG,KAAK,QAAQ,IAAI,IAAI;GACzE,MAAM,MAAM,MAAM,YAAY,YAAY,SAAS;EACrD,QAAQ,CAER;CACF,CAAC;CAED,MAAM,YAA8B,KAAK,UAAU,IAAI,kBAAkB;CACzE,MAAM,WAAW,qBAAqB,oBAAoB,YAAY,KAAA;CACtE,IAAI,SAAS;CACb,MAAM,OAAO,YAEX,IAAK,cAAc,qBAAqB;EACtC,KAAK,GAAkD;GACrD,MAAM,KAAK,CAAC;GACZ,UAAU,KAAK,CAAC;EAClB;CACF,EAAG,CACL;CAKA,MAAM,gBAAgB;EACpB,KAAK;GACH,mBAAmB,YAAoB,IAAI,iBAAiB,OAAO;GACnE,SAAS,SAAkB,IAAI,OAAO,IAAI;EAC5C;EACA,OAAO,EACL,qBAAqB,MAAM,cAAc,EAC3C;EACA,UAAU;GACR,aAAa,UAAkB,SAAiB,aAAa,WAAW,UAAU,IAAI;GACtF,iBAAiB,UAAkB,SACjC,aAAa,eAAe,UAAU,IAAI;EAC9C;EACA;EAEA,sBAAsB,SAAS,UAAU,OAAO,CAAC,EAAE,KAAK,UAAU;EAClE,uBAAuB;GACrB,MAAM,UAAU,SAAS,UAAU,OAAO;GAC1C,IAAI,CAAC,SACH;GAEF,IAAI,QAAQ,KAAK,MAAM,SAAS,YAC9B,OAAO,QAAQ,KAAK,MAAM;GAE5B,MAAM,QAAQ,QAAQ,KAAK,eAAe;GAC1C,IAAI,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG;IAC/D,MAAM,MAAO,MAAkC;IAC/C,OAAO,OAAO,QAAQ,WAAW,MAAM,KAAA;GACzC;EAEF;EACA,0BAA0B;GAExB,MAAM,QADU,SAAS,UAAU,OACrB,CAAA,EAAS,KAAK,eAAe;GAC3C,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAC5D;GAEF,MAAM,MAA8B,CAAC;GACrC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAgC,GACxE,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,GAC1C,IAAI,OAAO,MAAM,KAAK;GAG1B,OAAO,OAAO,KAAK,GAAG,CAAC,CAAC,SAAS,IAAI,MAAM,KAAA;EAC7C;EACA,MAAM,YAAoB,KAAK,QAAQ,mBAAmB,OAAO;CACnE;CACA,MAAM,iBAAiB,aACrB,oBAAoB,eAAe,QAAQ;CAC7C,QAAQ,uBAAuB,aAAa;CAC5C,QAAQ,sCAAsC,0BAA0B,aAAa,CAAC;CACtF,QAAQ,2BAA2B,aAAa,sBAAsB,eAAe,QAAQ,CAAC;CAE9F,MAAM,6BAA6B,oBAAoB,aAAa,CAAC;CACrE,IAAI,6BAA6B,oBAAoB,aAAa,CAAC;CAqGnE,OAAO;EA1DL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,QAAA,IApDiB,cAAc;GAC/B;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,SAAS;IACP,iBAAiB,YAAY,KAAK;IAClC,aAAa,cAAc,OAAO,KAAK,MAAM,EAAE,OAAO,IAAI;IAC1D,UAAU;GACZ;EACF,CAmCE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,gBAAA,IAtByB,eAAe;GAlBxC;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EAGwC,CAsBxC;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,eAAe;GACb,QAAQ,cAAc;GACtB,UAAU;EACZ;EACA;EACA,QAAQ;GACN,MAAM;GACN;GACA,YAAY,UAAU,KAAK,KAAK,CAAC;EACnC;EACA,aAAmB;GACjB,IAAI,QACF;GAEF,SAAS;GACT,KAAK,MAAM,SAAS,CAAC,GAAG,cAAc,MAAM,CAAC,CAAC,QAAQ,GACpD,IAAI;IACF,MAAM,OAAO,UAAU;GACzB,SAAS,KAAK;IACZ,KAAK,QAAQ,yBAAyB,UAAU,MAAM,OAAO,KAAK,qBAAqB;KACrF,aAAa,CAAC,UAAU,MAAM,OAAO,MAAM;KAC3C,SAAS,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE;IACrE,CAAC;GACH;GAEF,IAAI,cACF,GAAG,MAAM;EAEb;CAGK;AACT;;;;;;;;;AAUA,eAAsB,eAAe,OAAyB,CAAC,GAAwB;CACrF,MAAM,OAAO,eAAe,KAAK,IAAI;CACrC,IAAI;CACJ,MAAM,eAAe,CAAC,KAAK;CAE3B,IAAI;EAIF,MAAM,aAAa,KAAK,MAAM,eAAe,GAAG,YAAY;GAC1D,IAAI,CAAC,KAAK,QAAQ,CAAC,QAAQ,IAAI,cAC7B,4BAA4B,MAAM,KAAK,QAAQ,IAAI,GAAG,UAAU,CAAC;GAEnE,MAAM,KAAK,KAAK,MAAM,aAAa,IAAI;GAIvC,MAAM,aACJ,KAAK,QAAQ,KAAK,WAAW,qBAAqB,IAC9C,KAAA,IACA,MAAM,YAAY,IAAI,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC;GAClD,MAAM,UAAU;IACd,GAAG;IACH;IACA;IACA,SAAS,KAAK,WAAW,YAAY;IACrC,gBAAgB,KAAK,kBAAkB,YAAY;GACrD,CAAC;GACD,IAAI,CAAC,KAAK,aAAa;IACrB,MAAM,0BAA0B,IAAI,IAAI,IAAI;IAC5C,MAAM,IAAI,OAAO,OAAO;IACxB,MAAM,wBAAwB,GAAG;GACnC,OACE,MAAM,IAAI,OAAO,OAAO;EAE5B,CAAC;CACH,SAAS,KAAK;EACZ,IAAI,OAAO,cACT,IAAI,GAAG,MAAM;EAEf,MAAM;CACR;CACA,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,6CAA6C;CAI/D,KAAK,MAAM,WAAW,IAAI,cAAc,UACtC,IAAI,OAAO,KAAK,QAAQ,sBAAsB,UAAU,QAAQ,KAAK,kBAAkB;EACrF,aAAa,CAAC,UAAU,QAAQ,MAAM;EACtC,SAAS;GAAE,QAAQ,QAAQ;GAAQ,WAAW,QAAQ;EAAU;CAClE,CAAC;CAOH,IAAI;EACF,MAAM,4BAA4B;GAChC,SAAS,IAAI;GACb,QAAQ,IAAI,OAAO;GACnB,SAAS;IACP,UAAU,IAAI;IACd,OAAO,IAAI;IACX,iBAAiB,IAAI;IACrB,UAAU,IAAI;IACd,cAAc,IAAI;IAClB,UAAU,IAAI;IACd,SAAS,IAAI;IACb,SAAS,IAAI;IACb,SAAS,IAAI;IACb,OAAO,IAAI;IACX,KAAK,IAAI;GACX;EACF,CAAC;CACH,SAAS,KAAK;EACZ,iBAAiB,4BAA4B,GAAG;EAChD,IAAI,OAAO,KAAK,SAAS,2BAA2B,qCAAqC,EACvF,SAAS,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE,EACrE,CAAC;CACH;CAIA,IAAI;EAGF,IAAK,MAAM,eAAe,IAAI,KAAM,MAClC,MAAM,gBAAgB;GAAE,OAAO,IAAI;GAAO,QAAQ,IAAI;GAAQ,OAAO,IAAI;EAAM,CAAC;CAEpF,SAAS,KAAK;EACZ,iBAAiB,sBAAsB,GAAG;EAC1C,IAAI,OAAO,KAAK,SAAS,6BAA6B,oCAAoC,EACxF,SAAS,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE,EACrE,CAAC;CACH;CACA,OAAO;AACT"}