anypick 1.0.0 → 1.1.1

package/dist/core/brand.js

@@ -1,22 +0,0 @@
-//#region src/core/brand.ts
-var BRAND_TAGLINE = "Pick any. Code on.";
-var BRAND_HUES = {
-	violet: "#7C3AED",
-	/**
-	* Selection and focus. This is the semantic info color rather than the bright
-	* brand signal, which does not have enough contrast on a light terminal.
-	*/
-	blue: "#60A5FA",
-	/** Brand signal. Safe only where the background is known to be dark. */
-	lavender: "#A78BFA"
-};
-var COLOR_OFF = Boolean(process.env.NO_COLOR) || process.env.TERM === "dumb" || !process.stdout.isTTY;
-var TRUECOLOR = process.env.COLORTERM === "truecolor" || process.env.COLORTERM === "24bit";
-function brandTint(text) {
-	if (COLOR_OFF) return text;
-	return `${TRUECOLOR ? "\x1B[38;2;124;58;237m" : "\x1B[35m"}${text}\u001b[39m`;
-}
-//#endregion
-export { BRAND_HUES, BRAND_TAGLINE, brandTint };
-
-//# sourceMappingURL=brand.js.map

package/dist/core/brand.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"brand.js","names":[],"sources":["../../src/core/brand.ts"],"sourcesContent":["/**\n * Brand strings and hues, shared by the Ink TUI and the dependency-light CLI\n * bootstrap. Kept free of picocolors/Ink so `--help` stays on the fast path.\n */\n\nexport const BRAND_NAME = 'AnyPick';\nexport const BRAND_TAGLINE = 'Pick any. Code on.';\n\nexport const BRAND_HUES = {\n  violet: '#7C3AED',\n  /**\n   * Selection and focus. This is the semantic info color rather than the bright\n   * brand signal, which does not have enough contrast on a light terminal.\n   */\n  blue: '#60A5FA',\n  /** Brand signal. Safe only where the background is known to be dark. */\n  lavender: '#A78BFA',\n} as const;\n\nconst COLOR_OFF =\n  Boolean(process.env.NO_COLOR) || process.env.TERM === 'dumb' || !process.stdout.isTTY;\n// Hex hues need 24-bit escapes; below that the closest stock hue is magenta.\nconst TRUECOLOR = process.env.COLORTERM === 'truecolor' || process.env.COLORTERM === '24bit';\n\nexport function brandTint(text: string): string {\n  if (COLOR_OFF) {\n    return text;\n  }\n  const open = TRUECOLOR ? '\\u001b[38;2;124;58;237m' : '\\u001b[35m';\n  return `${open}${text}\\u001b[39m`;\n}\n"],"mappings":";AAMA,IAAa,gBAAgB;AAE7B,IAAa,aAAa;CACxB,QAAQ;;;;;CAKR,MAAM;;CAEN,UAAU;AACZ;AAEA,IAAM,YACJ,QAAQ,QAAQ,IAAI,QAAQ,KAAK,QAAQ,IAAI,SAAS,UAAU,CAAC,QAAQ,OAAO;AAElF,IAAM,YAAY,QAAQ,IAAI,cAAc,eAAe,QAAQ,IAAI,cAAc;AAErF,SAAgB,UAAU,MAAsB;CAC9C,IAAI,WACF,OAAO;CAGT,OAAO,GADM,YAAY,0BAA4B,aACpC,KAAK;AACxB"}

package/dist/core/capabilities.d.ts

@@ -1,30 +0,0 @@
-/**
- * Provider capability descriptors.
- *
- * A single source of truth for "what can this provider do" so the core, the
- * TUI, and the CLI all agree. Proxy capability is the presence of a
- * `startProxy` lifecycle (the old boolean `supportsProxy` flag is gone).
- *
- * Prefer these helpers over ad-hoc `typeof provider.foo === 'function'` checks
- * at call sites. Full composition of Provider into Auth/Proxy/Hub facets is a
- * later semver-friendly step; this matrix is the intermediate contract.
- */
-import type { Provider } from '../types.js';
-/** Proxy capability: presence of startProxy lifecycle (replaces supportsProxy). */
-export declare function providerCanProxy(provider: Provider): boolean;
-/** Refresh capability: presence of refreshAuth. */
-export declare function providerCanRefresh(provider: Provider): boolean;
-export interface ProviderCapabilities {
-    canProxy: boolean;
-    canRefresh: boolean;
-    canClear: boolean;
-    canDescribe: boolean;
-    canBackupInput: boolean;
-    canHubBackend: boolean;
-    canPool: boolean;
-    requiresAccountSourcePick: boolean;
-    proxyRequiresApiKey: boolean;
-}
-/** Single capability descriptor for a provider. */
-export declare function providerCapabilities(provider: Provider): ProviderCapabilities;
-//# sourceMappingURL=capabilities.d.ts.map

package/dist/core/capabilities.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../src/core/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEzC,mFAAmF;AACnF,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAE5D;AAED,mDAAmD;AACnD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAE9D;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,yBAAyB,EAAE,OAAO,CAAC;IACnC,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAED,mDAAmD;AACnD,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,GAAG,oBAAoB,CAY7E"}

package/dist/core/capabilities.js

@@ -1,27 +0,0 @@
-//#region src/core/capabilities.ts
-/** Proxy capability: presence of startProxy lifecycle (replaces supportsProxy). */
-function providerCanProxy(provider) {
-	return typeof provider.startProxy === "function";
-}
-/** Refresh capability: presence of refreshAuth. */
-function providerCanRefresh(provider) {
-	return typeof provider.refreshAuth === "function";
-}
-/** Single capability descriptor for a provider. */
-function providerCapabilities(provider) {
-	return {
-		canProxy: providerCanProxy(provider),
-		canRefresh: providerCanRefresh(provider),
-		canClear: typeof provider.clearLive === "function",
-		canDescribe: typeof provider.describeSnapshot === "function",
-		canBackupInput: typeof provider.backupInput === "function",
-		canHubBackend: typeof provider.createProxyHubBackend === "function",
-		canPool: typeof provider.poolSourceAdapter === "function",
-		requiresAccountSourcePick: provider.requiresAccountSourcePick === true,
-		proxyRequiresApiKey: provider.proxyRequiresApiKey === true
-	};
-}
-//#endregion
-export { providerCanProxy, providerCanRefresh, providerCapabilities };
-
-//# sourceMappingURL=capabilities.js.map

package/dist/core/capabilities.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"capabilities.js","names":[],"sources":["../../src/core/capabilities.ts"],"sourcesContent":["/**\n * Provider capability descriptors.\n *\n * A single source of truth for \"what can this provider do\" so the core, the\n * TUI, and the CLI all agree. Proxy capability is the presence of a\n * `startProxy` lifecycle (the old boolean `supportsProxy` flag is gone).\n *\n * Prefer these helpers over ad-hoc `typeof provider.foo === 'function'` checks\n * at call sites. Full composition of Provider into Auth/Proxy/Hub facets is a\n * later semver-friendly step; this matrix is the intermediate contract.\n */\nimport type { Provider } from '../types';\n\n/** Proxy capability: presence of startProxy lifecycle (replaces supportsProxy). */\nexport function providerCanProxy(provider: Provider): boolean {\n  return typeof provider.startProxy === 'function';\n}\n\n/** Refresh capability: presence of refreshAuth. */\nexport function providerCanRefresh(provider: Provider): boolean {\n  return typeof provider.refreshAuth === 'function';\n}\n\nexport interface ProviderCapabilities {\n  canProxy: boolean;\n  canRefresh: boolean;\n  canClear: boolean;\n  canDescribe: boolean;\n  canBackupInput: boolean;\n  canHubBackend: boolean;\n  canPool: boolean;\n  requiresAccountSourcePick: boolean;\n  proxyRequiresApiKey: boolean;\n}\n\n/** Single capability descriptor for a provider. */\nexport function providerCapabilities(provider: Provider): ProviderCapabilities {\n  return {\n    canProxy: providerCanProxy(provider),\n    canRefresh: providerCanRefresh(provider),\n    canClear: typeof provider.clearLive === 'function',\n    canDescribe: typeof provider.describeSnapshot === 'function',\n    canBackupInput: typeof provider.backupInput === 'function',\n    canHubBackend: typeof provider.createProxyHubBackend === 'function',\n    canPool: typeof provider.poolSourceAdapter === 'function',\n    requiresAccountSourcePick: provider.requiresAccountSourcePick === true,\n    proxyRequiresApiKey: provider.proxyRequiresApiKey === true,\n  };\n}\n"],"mappings":";;AAcA,SAAgB,iBAAiB,UAA6B;CAC5D,OAAO,OAAO,SAAS,eAAe;AACxC;;AAGA,SAAgB,mBAAmB,UAA6B;CAC9D,OAAO,OAAO,SAAS,gBAAgB;AACzC;;AAeA,SAAgB,qBAAqB,UAA0C;CAC7E,OAAO;EACL,UAAU,iBAAiB,QAAQ;EACnC,YAAY,mBAAmB,QAAQ;EACvC,UAAU,OAAO,SAAS,cAAc;EACxC,aAAa,OAAO,SAAS,qBAAqB;EAClD,gBAAgB,OAAO,SAAS,gBAAgB;EAChD,eAAe,OAAO,SAAS,0BAA0B;EACzD,SAAS,OAAO,SAAS,sBAAsB;EAC/C,2BAA2B,SAAS,8BAA8B;EAClE,qBAAqB,SAAS,wBAAwB;CACxD;AACF"}

package/dist/core/client-state-store.d.ts

@@ -1,17 +0,0 @@
-import type { ClientState } from '../types.js';
-import type { AnyPickDatabase } from './db.js';
-/**
- * SQLite-backed client runtime state.
- * Client file backups remain on disk under clients/<id>/backup/.
- */
-export declare class ClientStateStore {
-    readonly root: string;
-    readonly db: AnyPickDatabase;
-    constructor(root: string, db: AnyPickDatabase);
-    get(clientId: string): Promise<ClientState | null>;
-    list(): Promise<ClientState[]>;
-    write(state: ClientState): Promise<void>;
-    clear(clientId: string): Promise<void>;
-    backupDir(clientId: string): string;
-}
-//# sourceMappingURL=client-state-store.d.ts.map

package/dist/core/client-state-store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"client-state-store.d.ts","sourceRoot":"","sources":["../../src/core/client-state-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAG5C;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAC;IAE7B,YAAY,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,eAAe,EAG5C;IAEK,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAgBvD;IAEK,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAanC;IAEK,KAAK,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ7C;IAEK,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE3C;IAED,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAElC;CACF"}

package/dist/core/client-state-store.js

@@ -1,47 +0,0 @@
-import { decode, decoders } from "./codec.js";
-import { clientBackupDir, getAnyPickRoot } from "./paths.js";
-//#region src/core/client-state-store.ts
-/**
-* SQLite-backed client runtime state.
-* Client file backups remain on disk under clients/<id>/backup/.
-*/
-var ClientStateStore = class {
-	root;
-	db;
-	constructor(root, db) {
-		this.root = getAnyPickRoot(root);
-		this.db = db;
-	}
-	async get(clientId) {
-		const row = this.db.prepare(`SELECT state_json FROM client_state WHERE client_id = ?`).get(clientId);
-		if (!row) return null;
-		try {
-			return decode(row.state_json, decoders.clientState, `client-state/${clientId}`);
-		} catch {
-			return null;
-		}
-	}
-	async list() {
-		const rows = this.db.prepare(`SELECT state_json FROM client_state`).all();
-		const out = [];
-		for (const row of rows) try {
-			out.push(decode(row.state_json, decoders.clientState, "client-state/list"));
-		} catch {}
-		return out;
-	}
-	async write(state) {
-		this.db.prepare(`INSERT INTO client_state (client_id, state_json)
-         VALUES (?, ?)
-         ON CONFLICT(client_id) DO UPDATE SET state_json = excluded.state_json`).run(state.clientId, JSON.stringify(state));
-	}
-	async clear(clientId) {
-		this.db.prepare(`DELETE FROM client_state WHERE client_id = ?`).run(clientId);
-	}
-	backupDir(clientId) {
-		return clientBackupDir(this.root, clientId);
-	}
-};
-//#endregion
-export { ClientStateStore };
-
-//# sourceMappingURL=client-state-store.js.map

package/dist/core/client-state-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"client-state-store.js","names":[],"sources":["../../src/core/client-state-store.ts"],"sourcesContent":["import type { ClientState } from '../types';\nimport { decode, decoders } from './codec';\nimport type { AnyPickDatabase } from './db';\nimport { clientBackupDir, getAnyPickRoot } from './paths';\n\n/**\n * SQLite-backed client runtime state.\n * Client file backups remain on disk under clients/<id>/backup/.\n */\nexport class ClientStateStore {\n  readonly root: string;\n  readonly db: AnyPickDatabase;\n\n  constructor(root: string, db: AnyPickDatabase) {\n    this.root = getAnyPickRoot(root);\n    this.db = db;\n  }\n\n  async get(clientId: string): Promise<ClientState | null> {\n    const row = this.db\n      .prepare(`SELECT state_json FROM client_state WHERE client_id = ?`)\n      .get(clientId) as { state_json: string } | undefined;\n    if (!row) {\n      return null;\n    }\n    try {\n      return decode(\n        row.state_json,\n        decoders.clientState,\n        `client-state/${clientId}`,\n      ) as ClientState;\n    } catch {\n      return null;\n    }\n  }\n\n  async list(): Promise<ClientState[]> {\n    const rows = this.db.prepare(`SELECT state_json FROM client_state`).all() as Array<{\n      state_json: string;\n    }>;\n    const out: ClientState[] = [];\n    for (const row of rows) {\n      try {\n        out.push(decode(row.state_json, decoders.clientState, 'client-state/list') as ClientState);\n      } catch {\n        // skip corrupt\n      }\n    }\n    return out;\n  }\n\n  async write(state: ClientState): Promise<void> {\n    this.db\n      .prepare(\n        `INSERT INTO client_state (client_id, state_json)\n         VALUES (?, ?)\n         ON CONFLICT(client_id) DO UPDATE SET state_json = excluded.state_json`,\n      )\n      .run(state.clientId, JSON.stringify(state));\n  }\n\n  async clear(clientId: string): Promise<void> {\n    this.db.prepare(`DELETE FROM client_state WHERE client_id = ?`).run(clientId);\n  }\n\n  backupDir(clientId: string): string {\n    return clientBackupDir(this.root, clientId);\n  }\n}\n"],"mappings":";;;;;;;AASA,IAAa,mBAAb,MAA8B;CAC5B;CACA;CAEA,YAAY,MAAc,IAAqB;EAC7C,KAAK,OAAO,eAAe,IAAI;EAC/B,KAAK,KAAK;CACZ;CAEA,MAAM,IAAI,UAA+C;EACvD,MAAM,MAAM,KAAK,GACd,QAAQ,yDAAyD,CAAC,CAClE,IAAI,QAAQ;EACf,IAAI,CAAC,KACH,OAAO;EAET,IAAI;GACF,OAAO,OACL,IAAI,YACJ,SAAS,aACT,gBAAgB,UAClB;EACF,QAAQ;GACN,OAAO;EACT;CACF;CAEA,MAAM,OAA+B;EACnC,MAAM,OAAO,KAAK,GAAG,QAAQ,qCAAqC,CAAC,CAAC,IAAI;EAGxE,MAAM,MAAqB,CAAC;EAC5B,KAAK,MAAM,OAAO,MAChB,IAAI;GACF,IAAI,KAAK,OAAO,IAAI,YAAY,SAAS,aAAa,mBAAmB,CAAgB;EAC3F,QAAQ,CAER;EAEF,OAAO;CACT;CAEA,MAAM,MAAM,OAAmC;EAC7C,KAAK,GACF,QACC;;+EAGF,CAAC,CACA,IAAI,MAAM,UAAU,KAAK,UAAU,KAAK,CAAC;CAC9C;CAEA,MAAM,MAAM,UAAiC;EAC3C,KAAK,GAAG,QAAQ,8CAA8C,CAAC,CAAC,IAAI,QAAQ;CAC9E;CAEA,UAAU,UAA0B;EAClC,OAAO,gBAAgB,KAAK,MAAM,QAAQ;CAC5C;AACF"}

package/dist/core/codec/account.d.ts

@@ -1,52 +0,0 @@
-import { type DecoderResult } from './primitives.js';
-export interface DecodedAccountMeta {
-    name: string;
-    provider: string;
-    createdAt: string;
-    updatedAt: string;
-    label?: string;
-    identity?: string;
-    notes?: string;
-    credentialKind?: 'native' | 'proxy-only';
-}
-export declare function decodeAccountMeta(v: unknown, key: string): DecoderResult<DecodedAccountMeta>;
-export interface DecodedAccountProxyConfig {
-    enabled: boolean;
-    port?: number;
-    host?: string;
-    options?: Record<string, unknown>;
-}
-export declare function decodeAccountProxyConfig(v: unknown, key: string): DecoderResult<DecodedAccountProxyConfig>;
-export interface DecodedProxyRuntimeState {
-    accountName: string;
-    endpoint: string;
-    compatibility?: string;
-    pid?: number;
-    logPath?: string;
-    startedAt: string;
-    token?: string;
-}
-export declare function decodeProxyRuntimeState(v: unknown, key: string): DecoderResult<DecodedProxyRuntimeState>;
-export interface DecodedGlobalConfig {
-    schemaVersion: number;
-    defaultClient?: string;
-    activeProfile?: string;
-    defaults?: {
-        proxyHost?: string;
-    };
-    ui?: {
-        color?: boolean;
-        defaultSurface?: 'tui' | 'tray';
-        quotaGuard?: {
-            enabled?: boolean;
-            cooldownMinutes?: number;
-        };
-        tray?: {
-            startEnabledProxies?: boolean;
-            showQuota?: boolean;
-            guideSeen?: boolean;
-        };
-    };
-}
-export declare function decodeGlobalConfig(v: unknown, key: string): DecoderResult<DecodedGlobalConfig>;
-//# sourceMappingURL=account.d.ts.map

package/dist/core/codec/account.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../../src/core/codec/account.ts"],"names":[],"mappings":"AAAA,OAAO,EASL,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,QAAQ,GAAG,YAAY,CAAC;CAC1C;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,aAAa,CAAC,kBAAkB,CAAC,CA6B5F;AAID,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,wBAAgB,wBAAwB,CACtC,CAAC,EAAE,OAAO,EACV,GAAG,EAAE,MAAM,GACV,aAAa,CAAC,yBAAyB,CAAC,CAa1C;AAID,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,uBAAuB,CACrC,CAAC,EAAE,OAAO,EACV,GAAG,EAAE,MAAM,GACV,aAAa,CAAC,wBAAwB,CAAC,CAsBzC;AAID,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClC,EAAE,CAAC,EAAE;QACH,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,cAAc,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;QAChC,UAAU,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,OAAO,CAAC;YAAC,eAAe,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC7D,IAAI,CAAC,EAAE;YAAE,mBAAmB,CAAC,EAAE,OAAO,CAAC;YAAC,SAAS,CAAC,EAAE,OAAO,CAAC;YAAC,SAAS,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;KACpF,CAAC;CACH;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,aAAa,CAAC,mBAAmB,CAAC,CA2E9F"}

package/dist/core/codec/account.js

@@ -1,69 +0,0 @@
-import { fail, fieldPath, isNumber, isOptionalNumber, isOptionalString, isRecord, isString, ok } from "./primitives.js";
-//#region src/core/codec/account.ts
-function decodeAccountMeta(v, key) {
-	if (!isRecord(v)) return fail(fieldPath("AccountMeta", key, "<root>"));
-	if (!isString(v.name)) return fail(fieldPath("AccountMeta", key, "name"));
-	if (!isString(v.provider)) return fail(fieldPath("AccountMeta", key, "provider"));
-	if (!isString(v.createdAt)) return fail(fieldPath("AccountMeta", key, "createdAt"));
-	if (!isString(v.updatedAt)) return fail(fieldPath("AccountMeta", key, "updatedAt"));
-	return ok({
-		name: v.name,
-		provider: v.provider,
-		createdAt: v.createdAt,
-		updatedAt: v.updatedAt,
-		label: isOptionalString(v.label) ? v.label : void 0,
-		identity: isOptionalString(v.identity) ? v.identity : void 0,
-		notes: isOptionalString(v.notes) ? v.notes : void 0,
-		credentialKind: v.credentialKind === "proxy-only" ? "proxy-only" : void 0
-	});
-}
-function decodeAccountProxyConfig(v, key) {
-	if (!isRecord(v)) return fail(fieldPath("AccountProxyConfig", key, "<root>"));
-	return ok({
-		enabled: Boolean(v.enabled),
-		port: isOptionalNumber(v.port) ? v.port : void 0,
-		host: isOptionalString(v.host) ? v.host : void 0,
-		options: v.options && typeof v.options === "object" && !Array.isArray(v.options) ? v.options : void 0
-	});
-}
-function decodeProxyRuntimeState(v, key) {
-	if (!isRecord(v)) return fail(fieldPath("ProxyRuntimeState", key, "<root>"));
-	if (!isString(v.accountName)) return fail(fieldPath("ProxyRuntimeState", key, "accountName"));
-	if (!isString(v.endpoint)) return fail(fieldPath("ProxyRuntimeState", key, "endpoint"));
-	if (!isString(v.startedAt)) return fail(fieldPath("ProxyRuntimeState", key, "startedAt"));
-	return ok({
-		accountName: v.accountName,
-		endpoint: v.endpoint,
-		compatibility: isOptionalString(v.compatibility) ? v.compatibility : void 0,
-		pid: isOptionalNumber(v.pid) ? v.pid : void 0,
-		logPath: isOptionalString(v.logPath) ? v.logPath : void 0,
-		startedAt: v.startedAt,
-		token: isOptionalString(v.token) ? v.token : void 0
-	});
-}
-function decodeGlobalConfig(v, key) {
-	if (!isRecord(v)) return fail(fieldPath("GlobalConfig", key, "<root>"));
-	return ok({
-		schemaVersion: isNumber(v.schemaVersion) ? v.schemaVersion : 0,
-		defaultClient: isOptionalString(v.defaultClient) ? v.defaultClient : void 0,
-		activeProfile: isOptionalString(v.activeProfile) ? v.activeProfile : void 0,
-		defaults: v.defaults && typeof v.defaults === "object" ? { proxyHost: isOptionalString(v.defaults.proxyHost) ? v.defaults.proxyHost : void 0 } : void 0,
-		ui: v.ui && typeof v.ui === "object" ? {
-			color: typeof v.ui.color === "boolean" ? v.ui.color : void 0,
-			defaultSurface: v.ui.defaultSurface === "tui" || v.ui.defaultSurface === "tray" ? v.ui.defaultSurface : void 0,
-			quotaGuard: v.ui.quotaGuard && typeof v.ui.quotaGuard === "object" ? {
-				enabled: typeof v.ui.quotaGuard.enabled === "boolean" ? v.ui.quotaGuard.enabled : void 0,
-				cooldownMinutes: isOptionalNumber(v.ui.quotaGuard.cooldownMinutes) ? v.ui.quotaGuard.cooldownMinutes : void 0
-			} : void 0,
-			tray: v.ui.tray && typeof v.ui.tray === "object" ? {
-				startEnabledProxies: typeof v.ui.tray.startEnabledProxies === "boolean" ? v.ui.tray.startEnabledProxies : void 0,
-				showQuota: typeof v.ui.tray.showQuota === "boolean" ? v.ui.tray.showQuota : void 0,
-				guideSeen: typeof v.ui.tray.guideSeen === "boolean" ? v.ui.tray.guideSeen : void 0
-			} : void 0
-		} : void 0
-	});
-}
-//#endregion
-export { decodeAccountMeta, decodeAccountProxyConfig, decodeGlobalConfig, decodeProxyRuntimeState };
-
-//# sourceMappingURL=account.js.map

package/dist/core/codec/account.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"account.js","names":[],"sources":["../../../src/core/codec/account.ts"],"sourcesContent":["import {\n  fail,\n  fieldPath,\n  isNumber,\n  isOptionalNumber,\n  isOptionalString,\n  isRecord,\n  isString,\n  ok,\n  type DecoderResult,\n} from './primitives';\n\nexport interface DecodedAccountMeta {\n  name: string;\n  provider: string;\n  createdAt: string;\n  updatedAt: string;\n  label?: string;\n  identity?: string;\n  notes?: string;\n  credentialKind?: 'native' | 'proxy-only';\n}\n\nexport function decodeAccountMeta(v: unknown, key: string): DecoderResult<DecodedAccountMeta> {\n  if (!isRecord(v)) {\n    return fail(fieldPath('AccountMeta', key, '<root>'));\n  }\n  if (!isString(v.name)) {\n    return fail(fieldPath('AccountMeta', key, 'name'));\n  }\n  if (!isString(v.provider)) {\n    return fail(fieldPath('AccountMeta', key, 'provider'));\n  }\n  if (!isString(v.createdAt)) {\n    return fail(fieldPath('AccountMeta', key, 'createdAt'));\n  }\n  if (!isString(v.updatedAt)) {\n    return fail(fieldPath('AccountMeta', key, 'updatedAt'));\n  }\n  return ok({\n    name: v.name,\n    provider: v.provider,\n    createdAt: v.createdAt,\n    updatedAt: v.updatedAt,\n    label: isOptionalString(v.label) ? v.label : undefined,\n    identity: isOptionalString(v.identity) ? v.identity : undefined,\n    notes: isOptionalString(v.notes) ? v.notes : undefined,\n    // An unrecognised value decodes to native, which is the safe reading: a\n    // proxy-only account is exempted from paths that touch the live login, and\n    // wrongly exempting one is how a real login stops being switchable.\n    credentialKind: v.credentialKind === 'proxy-only' ? 'proxy-only' : undefined,\n  });\n}\n\n// ── AccountProxyConfig (v0) ───────────────────────────────────\n\nexport interface DecodedAccountProxyConfig {\n  enabled: boolean;\n  port?: number;\n  host?: string;\n  options?: Record<string, unknown>;\n}\n\nexport function decodeAccountProxyConfig(\n  v: unknown,\n  key: string,\n): DecoderResult<DecodedAccountProxyConfig> {\n  if (!isRecord(v)) {\n    return fail(fieldPath('AccountProxyConfig', key, '<root>'));\n  }\n  return ok({\n    enabled: Boolean(v.enabled),\n    port: isOptionalNumber(v.port) ? v.port : undefined,\n    host: isOptionalString(v.host) ? v.host : undefined,\n    options:\n      v.options && typeof v.options === 'object' && !Array.isArray(v.options)\n        ? (v.options as Record<string, unknown>)\n        : undefined,\n  });\n}\n\n// ── ProxyRuntimeState (v0) ────────────────────────────────────\n\nexport interface DecodedProxyRuntimeState {\n  accountName: string;\n  endpoint: string;\n  compatibility?: string;\n  pid?: number;\n  logPath?: string;\n  startedAt: string;\n  token?: string;\n}\n\nexport function decodeProxyRuntimeState(\n  v: unknown,\n  key: string,\n): DecoderResult<DecodedProxyRuntimeState> {\n  if (!isRecord(v)) {\n    return fail(fieldPath('ProxyRuntimeState', key, '<root>'));\n  }\n  if (!isString(v.accountName)) {\n    return fail(fieldPath('ProxyRuntimeState', key, 'accountName'));\n  }\n  if (!isString(v.endpoint)) {\n    return fail(fieldPath('ProxyRuntimeState', key, 'endpoint'));\n  }\n  if (!isString(v.startedAt)) {\n    return fail(fieldPath('ProxyRuntimeState', key, 'startedAt'));\n  }\n  return ok({\n    accountName: v.accountName,\n    endpoint: v.endpoint,\n    compatibility: isOptionalString(v.compatibility) ? v.compatibility : undefined,\n    pid: isOptionalNumber(v.pid) ? v.pid : undefined,\n    logPath: isOptionalString(v.logPath) ? v.logPath : undefined,\n    startedAt: v.startedAt,\n    token: isOptionalString(v.token) ? v.token : undefined,\n  });\n}\n\n// ── GlobalConfig (v0 → v2) ───────────────────────────────────\n\nexport interface DecodedGlobalConfig {\n  schemaVersion: number;\n  defaultClient?: string;\n  activeProfile?: string;\n  defaults?: { proxyHost?: string };\n  ui?: {\n    color?: boolean;\n    defaultSurface?: 'tui' | 'tray';\n    quotaGuard?: { enabled?: boolean; cooldownMinutes?: number };\n    tray?: { startEnabledProxies?: boolean; showQuota?: boolean; guideSeen?: boolean };\n  };\n}\n\nexport function decodeGlobalConfig(v: unknown, key: string): DecoderResult<DecodedGlobalConfig> {\n  if (!isRecord(v)) {\n    return fail(fieldPath('GlobalConfig', key, '<root>'));\n  }\n  return ok({\n    schemaVersion: isNumber(v.schemaVersion) ? v.schemaVersion : 0,\n    defaultClient: isOptionalString(v.defaultClient) ? v.defaultClient : undefined,\n    activeProfile: isOptionalString(v.activeProfile) ? v.activeProfile : undefined,\n    defaults:\n      v.defaults && typeof v.defaults === 'object'\n        ? {\n            proxyHost: isOptionalString((v.defaults as Record<string, unknown>).proxyHost)\n              ? ((v.defaults as Record<string, unknown>).proxyHost as string | undefined)\n              : undefined,\n          }\n        : undefined,\n    ui:\n      v.ui && typeof v.ui === 'object'\n        ? {\n            color:\n              typeof (v.ui as Record<string, unknown>).color === 'boolean'\n                ? ((v.ui as Record<string, unknown>).color as boolean)\n                : undefined,\n            defaultSurface:\n              (v.ui as Record<string, unknown>).defaultSurface === 'tui' ||\n              (v.ui as Record<string, unknown>).defaultSurface === 'tray'\n                ? ((v.ui as Record<string, unknown>).defaultSurface as 'tui' | 'tray')\n                : undefined,\n            quotaGuard:\n              (v.ui as Record<string, unknown>).quotaGuard &&\n              typeof (v.ui as Record<string, unknown>).quotaGuard === 'object'\n                ? {\n                    enabled:\n                      typeof (\n                        (v.ui as Record<string, unknown>).quotaGuard as Record<string, unknown>\n                      ).enabled === 'boolean'\n                        ? (((v.ui as Record<string, unknown>).quotaGuard as Record<string, unknown>)\n                            .enabled as boolean)\n                        : undefined,\n                    cooldownMinutes: isOptionalNumber(\n                      ((v.ui as Record<string, unknown>).quotaGuard as Record<string, unknown>)\n                        .cooldownMinutes,\n                    )\n                      ? (((v.ui as Record<string, unknown>).quotaGuard as Record<string, unknown>)\n                          .cooldownMinutes as number)\n                      : undefined,\n                  }\n                : undefined,\n            tray:\n              (v.ui as Record<string, unknown>).tray &&\n              typeof (v.ui as Record<string, unknown>).tray === 'object'\n                ? {\n                    startEnabledProxies:\n                      typeof ((v.ui as Record<string, unknown>).tray as Record<string, unknown>)\n                        .startEnabledProxies === 'boolean'\n                        ? (((v.ui as Record<string, unknown>).tray as Record<string, unknown>)\n                            .startEnabledProxies as boolean)\n                        : undefined,\n                    showQuota:\n                      typeof ((v.ui as Record<string, unknown>).tray as Record<string, unknown>)\n                        .showQuota === 'boolean'\n                        ? (((v.ui as Record<string, unknown>).tray as Record<string, unknown>)\n                            .showQuota as boolean)\n                        : undefined,\n                    guideSeen:\n                      typeof ((v.ui as Record<string, unknown>).tray as Record<string, unknown>)\n                        .guideSeen === 'boolean'\n                        ? (((v.ui as Record<string, unknown>).tray as Record<string, unknown>)\n                            .guideSeen as boolean)\n                        : undefined,\n                  }\n                : undefined,\n          }\n        : undefined,\n  });\n}\n\n// ── RuntimeProfileMeta (v0) ───────────────────────────────────\n"],"mappings":";;AAuBA,SAAgB,kBAAkB,GAAY,KAAgD;CAC5F,IAAI,CAAC,SAAS,CAAC,GACb,OAAO,KAAK,UAAU,eAAe,KAAK,QAAQ,CAAC;CAErD,IAAI,CAAC,SAAS,EAAE,IAAI,GAClB,OAAO,KAAK,UAAU,eAAe,KAAK,MAAM,CAAC;CAEnD,IAAI,CAAC,SAAS,EAAE,QAAQ,GACtB,OAAO,KAAK,UAAU,eAAe,KAAK,UAAU,CAAC;CAEvD,IAAI,CAAC,SAAS,EAAE,SAAS,GACvB,OAAO,KAAK,UAAU,eAAe,KAAK,WAAW,CAAC;CAExD,IAAI,CAAC,SAAS,EAAE,SAAS,GACvB,OAAO,KAAK,UAAU,eAAe,KAAK,WAAW,CAAC;CAExD,OAAO,GAAG;EACR,MAAM,EAAE;EACR,UAAU,EAAE;EACZ,WAAW,EAAE;EACb,WAAW,EAAE;EACb,OAAO,iBAAiB,EAAE,KAAK,IAAI,EAAE,QAAQ,KAAA;EAC7C,UAAU,iBAAiB,EAAE,QAAQ,IAAI,EAAE,WAAW,KAAA;EACtD,OAAO,iBAAiB,EAAE,KAAK,IAAI,EAAE,QAAQ,KAAA;EAI7C,gBAAgB,EAAE,mBAAmB,eAAe,eAAe,KAAA;CACrE,CAAC;AACH;AAWA,SAAgB,yBACd,GACA,KAC0C;CAC1C,IAAI,CAAC,SAAS,CAAC,GACb,OAAO,KAAK,UAAU,sBAAsB,KAAK,QAAQ,CAAC;CAE5D,OAAO,GAAG;EACR,SAAS,QAAQ,EAAE,OAAO;EAC1B,MAAM,iBAAiB,EAAE,IAAI,IAAI,EAAE,OAAO,KAAA;EAC1C,MAAM,iBAAiB,EAAE,IAAI,IAAI,EAAE,OAAO,KAAA;EAC1C,SACE,EAAE,WAAW,OAAO,EAAE,YAAY,YAAY,CAAC,MAAM,QAAQ,EAAE,OAAO,IACjE,EAAE,UACH,KAAA;CACR,CAAC;AACH;AAcA,SAAgB,wBACd,GACA,KACyC;CACzC,IAAI,CAAC,SAAS,CAAC,GACb,OAAO,KAAK,UAAU,qBAAqB,KAAK,QAAQ,CAAC;CAE3D,IAAI,CAAC,SAAS,EAAE,WAAW,GACzB,OAAO,KAAK,UAAU,qBAAqB,KAAK,aAAa,CAAC;CAEhE,IAAI,CAAC,SAAS,EAAE,QAAQ,GACtB,OAAO,KAAK,UAAU,qBAAqB,KAAK,UAAU,CAAC;CAE7D,IAAI,CAAC,SAAS,EAAE,SAAS,GACvB,OAAO,KAAK,UAAU,qBAAqB,KAAK,WAAW,CAAC;CAE9D,OAAO,GAAG;EACR,aAAa,EAAE;EACf,UAAU,EAAE;EACZ,eAAe,iBAAiB,EAAE,aAAa,IAAI,EAAE,gBAAgB,KAAA;EACrE,KAAK,iBAAiB,EAAE,GAAG,IAAI,EAAE,MAAM,KAAA;EACvC,SAAS,iBAAiB,EAAE,OAAO,IAAI,EAAE,UAAU,KAAA;EACnD,WAAW,EAAE;EACb,OAAO,iBAAiB,EAAE,KAAK,IAAI,EAAE,QAAQ,KAAA;CAC/C,CAAC;AACH;AAiBA,SAAgB,mBAAmB,GAAY,KAAiD;CAC9F,IAAI,CAAC,SAAS,CAAC,GACb,OAAO,KAAK,UAAU,gBAAgB,KAAK,QAAQ,CAAC;CAEtD,OAAO,GAAG;EACR,eAAe,SAAS,EAAE,aAAa,IAAI,EAAE,gBAAgB;EAC7D,eAAe,iBAAiB,EAAE,aAAa,IAAI,EAAE,gBAAgB,KAAA;EACrE,eAAe,iBAAiB,EAAE,aAAa,IAAI,EAAE,gBAAgB,KAAA;EACrE,UACE,EAAE,YAAY,OAAO,EAAE,aAAa,WAChC,EACE,WAAW,iBAAkB,EAAE,SAAqC,SAAS,IACvE,EAAE,SAAqC,YACzC,KAAA,EACN,IACA,KAAA;EACN,IACE,EAAE,MAAM,OAAO,EAAE,OAAO,WACpB;GACE,OACE,OAAQ,EAAE,GAA+B,UAAU,YAC7C,EAAE,GAA+B,QACnC,KAAA;GACN,gBACG,EAAE,GAA+B,mBAAmB,SACpD,EAAE,GAA+B,mBAAmB,SAC/C,EAAE,GAA+B,iBACnC,KAAA;GACN,YACG,EAAE,GAA+B,cAClC,OAAQ,EAAE,GAA+B,eAAe,WACpD;IACE,SACE,OACG,EAAE,GAA+B,WAClC,YAAY,YACP,EAAE,GAA+B,WACjC,UACH,KAAA;IACN,iBAAiB,iBACb,EAAE,GAA+B,WAChC,eACL,IACO,EAAE,GAA+B,WACjC,kBACH,KAAA;GACN,IACA,KAAA;GACN,MACG,EAAE,GAA+B,QAClC,OAAQ,EAAE,GAA+B,SAAS,WAC9C;IACE,qBACE,OAAS,EAAE,GAA+B,KACvC,wBAAwB,YACpB,EAAE,GAA+B,KACjC,sBACH,KAAA;IACN,WACE,OAAS,EAAE,GAA+B,KACvC,cAAc,YACV,EAAE,GAA+B,KACjC,YACH,KAAA;IACN,WACE,OAAS,EAAE,GAA+B,KACvC,cAAc,YACV,EAAE,GAA+B,KACjC,YACH,KAAA;GACR,IACA,KAAA;EACR,IACA,KAAA;CACR,CAAC;AACH"}

package/dist/core/codec/bindings.d.ts

@@ -1,38 +0,0 @@
-import { type DecodedBindingProvenance, type DecodedBindingSpec, type DecodedResourceRef, type DecoderResult } from './primitives.js';
-export interface DecodedGlobalBinding {
-    client: string;
-    spec: DecodedBindingSpec;
-    provenance: DecodedBindingProvenance;
-    managedConfigRevision?: string;
-    createdAt: string;
-    updatedAt: string;
-}
-export declare function decodeGlobalBinding(v: unknown, key: string): DecoderResult<DecodedGlobalBinding>;
-export interface DecodedProjectBinding {
-    projectRoot: string;
-    client: string;
-    spec: DecodedBindingSpec;
-    provenance: DecodedBindingProvenance;
-    createdAt: string;
-    updatedAt: string;
-}
-export declare function decodeProjectBinding(v: unknown, key: string): DecoderResult<DecodedProjectBinding>;
-export interface DecodedPresetSpec {
-    client: string;
-    source: DecodedResourceRef;
-    model: {
-        mode: 'explicit';
-        id: string;
-    } | {
-        mode: 'omitted';
-    };
-    transportPolicy: 'auto' | 'direct' | 'proxy';
-    clientOptions: Record<string, unknown>;
-}
-export declare function decodePresetSpec(v: unknown, key: string): DecoderResult<DecodedPresetSpec>;
-export interface DecodedPoolMember {
-    account: string;
-    enabled: boolean;
-}
-export declare function decodePoolMembers(v: unknown, key: string): DecoderResult<DecodedPoolMember[]>;
-//# sourceMappingURL=bindings.d.ts.map

package/dist/core/codec/bindings.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"bindings.d.ts","sourceRoot":"","sources":["../../../src/core/codec/bindings.ts"],"names":[],"mappings":"AAAA,OAAO,EASL,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,kBAAkB,CAAC;IACzB,UAAU,EAAE,wBAAwB,CAAC;IACrC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,aAAa,CAAC,oBAAoB,CAAC,CA+BhG;AAID,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,kBAAkB,CAAC;IACzB,UAAU,EAAE,wBAAwB,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,oBAAoB,CAClC,CAAC,EAAE,OAAO,EACV,GAAG,EAAE,MAAM,GACV,aAAa,CAAC,qBAAqB,CAAC,CAmCtC;AAID,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,kBAAkB,CAAC;IAC3B,KAAK,EAAE;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IAC9D,eAAe,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC7C,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,aAAa,CAAC,iBAAiB,CAAC,CAyB1F;AAID,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,aAAa,CAAC,iBAAiB,EAAE,CAAC,CAgB7F"}

package/dist/core/codec/bindings.js

@@ -1,79 +0,0 @@
-import { decodeBindingProvenance, decodeBindingSpec, fail, fieldPath, isOptionalString, isRecord, isString, ok } from "./primitives.js";
-//#region src/core/codec/bindings.ts
-function decodeGlobalBinding(v, key) {
-	if (!isRecord(v)) return fail(fieldPath("GlobalBinding", key, "<root>"));
-	if (!isString(v.client)) return fail(fieldPath("GlobalBinding", key, "client"));
-	const spec = decodeBindingSpec(v.spec, fieldPath("GlobalBinding", key, "spec"));
-	if (!spec.ok) return fail(spec.error);
-	const prov = decodeBindingProvenance(v.provenance, fieldPath("GlobalBinding", key, "provenance"));
-	if (!prov.ok) return fail(prov.error);
-	if (!isString(v.createdAt)) return fail(fieldPath("GlobalBinding", key, "createdAt"));
-	if (!isString(v.updatedAt)) return fail(fieldPath("GlobalBinding", key, "updatedAt"));
-	return ok({
-		client: v.client,
-		spec: spec.value,
-		provenance: prov.value,
-		managedConfigRevision: isOptionalString(v.managedConfigRevision) ? v.managedConfigRevision : void 0,
-		createdAt: v.createdAt,
-		updatedAt: v.updatedAt
-	});
-}
-function decodeProjectBinding(v, key) {
-	if (!isRecord(v)) return fail(fieldPath("ProjectBinding", key, "<root>"));
-	if (!isString(v.projectRoot)) return fail(fieldPath("ProjectBinding", key, "projectRoot"));
-	if (!isString(v.client)) return fail(fieldPath("ProjectBinding", key, "client"));
-	const spec = decodeBindingSpec(v.spec, fieldPath("ProjectBinding", key, "spec"));
-	if (!spec.ok) return fail(spec.error);
-	const prov = decodeBindingProvenance(v.provenance, fieldPath("ProjectBinding", key, "provenance"));
-	if (!prov.ok) return fail(prov.error);
-	if (!isString(v.createdAt)) return fail(fieldPath("ProjectBinding", key, "createdAt"));
-	if (!isString(v.updatedAt)) return fail(fieldPath("ProjectBinding", key, "updatedAt"));
-	return ok({
-		projectRoot: v.projectRoot,
-		client: v.client,
-		spec: spec.value,
-		provenance: prov.value,
-		createdAt: v.createdAt,
-		updatedAt: v.updatedAt
-	});
-}
-function decodePresetSpec(v, key) {
-	if (!isRecord(v)) return fail(fieldPath("PresetSpec", key, "<root>"));
-	const base = decodeBindingSpec(v, `${key}[base]`);
-	if (!base.ok) return fail(base.error);
-	const ms = v.model;
-	if (!isRecord(ms)) return fail(fieldPath("PresetSpec", key, "model"));
-	if (ms.mode === "explicit") {
-		if (!isString(ms.id)) return fail(fieldPath("PresetSpec", key, "model.id"));
-		return ok({
-			...base.value,
-			model: {
-				mode: "explicit",
-				id: ms.id
-			}
-		});
-	}
-	if (ms.mode === "omitted") return ok({
-		...base.value,
-		model: { mode: "omitted" }
-	});
-	return fail(fieldPath("PresetSpec", key, "model.mode"));
-}
-function decodePoolMembers(v, key) {
-	if (!Array.isArray(v)) return fail(fieldPath("PoolMembers", key, "<root>"));
-	const out = [];
-	for (let i = 0; i < v.length; i++) {
-		const m = v[i];
-		if (!isRecord(m)) return fail(fieldPath("PoolMember", key, `[${i}]`));
-		if (!isString(m.account)) return fail(fieldPath("PoolMember", key, `[${i}].account`));
-		out.push({
-			account: m.account,
-			enabled: m.enabled !== false
-		});
-	}
-	return ok(out);
-}
-//#endregion
-export { decodeGlobalBinding, decodePoolMembers, decodePresetSpec, decodeProjectBinding };
-
-//# sourceMappingURL=bindings.js.map

package/dist/core/codec/bindings.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"bindings.js","names":[],"sources":["../../../src/core/codec/bindings.ts"],"sourcesContent":["import {\n  decodeBindingProvenance,\n  decodeBindingSpec,\n  fail,\n  fieldPath,\n  isOptionalString,\n  isRecord,\n  isString,\n  ok,\n  type DecodedBindingProvenance,\n  type DecodedBindingSpec,\n  type DecodedResourceRef,\n  type DecoderResult,\n} from './primitives';\n\nexport interface DecodedGlobalBinding {\n  client: string;\n  spec: DecodedBindingSpec;\n  provenance: DecodedBindingProvenance;\n  managedConfigRevision?: string;\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport function decodeGlobalBinding(v: unknown, key: string): DecoderResult<DecodedGlobalBinding> {\n  if (!isRecord(v)) {\n    return fail(fieldPath('GlobalBinding', key, '<root>'));\n  }\n  if (!isString(v.client)) {\n    return fail(fieldPath('GlobalBinding', key, 'client'));\n  }\n  const spec = decodeBindingSpec(v.spec, fieldPath('GlobalBinding', key, 'spec'));\n  if (!spec.ok) {\n    return fail(spec.error);\n  }\n  const prov = decodeBindingProvenance(v.provenance, fieldPath('GlobalBinding', key, 'provenance'));\n  if (!prov.ok) {\n    return fail(prov.error);\n  }\n  if (!isString(v.createdAt)) {\n    return fail(fieldPath('GlobalBinding', key, 'createdAt'));\n  }\n  if (!isString(v.updatedAt)) {\n    return fail(fieldPath('GlobalBinding', key, 'updatedAt'));\n  }\n  return ok({\n    client: v.client,\n    spec: spec.value,\n    provenance: prov.value,\n    managedConfigRevision: isOptionalString(v.managedConfigRevision)\n      ? v.managedConfigRevision\n      : undefined,\n    createdAt: v.createdAt,\n    updatedAt: v.updatedAt,\n  });\n}\n\n// ── ProjectBinding (v0) ───────────────────────────────────────\n\nexport interface DecodedProjectBinding {\n  projectRoot: string;\n  client: string;\n  spec: DecodedBindingSpec;\n  provenance: DecodedBindingProvenance;\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport function decodeProjectBinding(\n  v: unknown,\n  key: string,\n): DecoderResult<DecodedProjectBinding> {\n  if (!isRecord(v)) {\n    return fail(fieldPath('ProjectBinding', key, '<root>'));\n  }\n  if (!isString(v.projectRoot)) {\n    return fail(fieldPath('ProjectBinding', key, 'projectRoot'));\n  }\n  if (!isString(v.client)) {\n    return fail(fieldPath('ProjectBinding', key, 'client'));\n  }\n  const spec = decodeBindingSpec(v.spec, fieldPath('ProjectBinding', key, 'spec'));\n  if (!spec.ok) {\n    return fail(spec.error);\n  }\n  const prov = decodeBindingProvenance(\n    v.provenance,\n    fieldPath('ProjectBinding', key, 'provenance'),\n  );\n  if (!prov.ok) {\n    return fail(prov.error);\n  }\n  if (!isString(v.createdAt)) {\n    return fail(fieldPath('ProjectBinding', key, 'createdAt'));\n  }\n  if (!isString(v.updatedAt)) {\n    return fail(fieldPath('ProjectBinding', key, 'updatedAt'));\n  }\n  return ok({\n    projectRoot: v.projectRoot,\n    client: v.client,\n    spec: spec.value,\n    provenance: prov.value,\n    createdAt: v.createdAt,\n    updatedAt: v.updatedAt,\n  });\n}\n\n// ── SavedPreset.spec (v0) ─────────────────────────────────────\n\nexport interface DecodedPresetSpec {\n  client: string;\n  source: DecodedResourceRef;\n  model: { mode: 'explicit'; id: string } | { mode: 'omitted' };\n  transportPolicy: 'auto' | 'direct' | 'proxy';\n  clientOptions: Record<string, unknown>;\n}\n\nexport function decodePresetSpec(v: unknown, key: string): DecoderResult<DecodedPresetSpec> {\n  if (!isRecord(v)) {\n    return fail(fieldPath('PresetSpec', key, '<root>'));\n  }\n  const base = decodeBindingSpec(v, `${key}[base]`);\n  if (!base.ok) {\n    return fail(base.error);\n  }\n  const ms = v.model as Record<string, unknown>;\n  if (!isRecord(ms)) {\n    return fail(fieldPath('PresetSpec', key, 'model'));\n  }\n  if (ms.mode === 'explicit') {\n    if (!isString(ms.id)) {\n      return fail(fieldPath('PresetSpec', key, 'model.id'));\n    }\n    return ok({\n      ...base.value,\n      model: { mode: 'explicit' as const, id: ms.id },\n    });\n  }\n  if (ms.mode === 'omitted') {\n    return ok({ ...base.value, model: { mode: 'omitted' as const } });\n  }\n  return fail(fieldPath('PresetSpec', key, 'model.mode'));\n}\n\n// ── PoolMember (v0) ───────────────────────────────────────────\n\nexport interface DecodedPoolMember {\n  account: string;\n  enabled: boolean;\n}\n\nexport function decodePoolMembers(v: unknown, key: string): DecoderResult<DecodedPoolMember[]> {\n  if (!Array.isArray(v)) {\n    return fail(fieldPath('PoolMembers', key, '<root>'));\n  }\n  const out: DecodedPoolMember[] = [];\n  for (let i = 0; i < v.length; i++) {\n    const m: unknown = v[i];\n    if (!isRecord(m)) {\n      return fail(fieldPath('PoolMember', key, `[${i}]`));\n    }\n    if (!isString(m.account)) {\n      return fail(fieldPath('PoolMember', key, `[${i}].account`));\n    }\n    out.push({ account: m.account, enabled: m.enabled !== false });\n  }\n  return ok(out);\n}\n\n// ── ProxyLease (v0) ───────────────────────────────────────────\n"],"mappings":";;AAwBA,SAAgB,oBAAoB,GAAY,KAAkD;CAChG,IAAI,CAAC,SAAS,CAAC,GACb,OAAO,KAAK,UAAU,iBAAiB,KAAK,QAAQ,CAAC;CAEvD,IAAI,CAAC,SAAS,EAAE,MAAM,GACpB,OAAO,KAAK,UAAU,iBAAiB,KAAK,QAAQ,CAAC;CAEvD,MAAM,OAAO,kBAAkB,EAAE,MAAM,UAAU,iBAAiB,KAAK,MAAM,CAAC;CAC9E,IAAI,CAAC,KAAK,IACR,OAAO,KAAK,KAAK,KAAK;CAExB,MAAM,OAAO,wBAAwB,EAAE,YAAY,UAAU,iBAAiB,KAAK,YAAY,CAAC;CAChG,IAAI,CAAC,KAAK,IACR,OAAO,KAAK,KAAK,KAAK;CAExB,IAAI,CAAC,SAAS,EAAE,SAAS,GACvB,OAAO,KAAK,UAAU,iBAAiB,KAAK,WAAW,CAAC;CAE1D,IAAI,CAAC,SAAS,EAAE,SAAS,GACvB,OAAO,KAAK,UAAU,iBAAiB,KAAK,WAAW,CAAC;CAE1D,OAAO,GAAG;EACR,QAAQ,EAAE;EACV,MAAM,KAAK;EACX,YAAY,KAAK;EACjB,uBAAuB,iBAAiB,EAAE,qBAAqB,IAC3D,EAAE,wBACF,KAAA;EACJ,WAAW,EAAE;EACb,WAAW,EAAE;CACf,CAAC;AACH;AAaA,SAAgB,qBACd,GACA,KACsC;CACtC,IAAI,CAAC,SAAS,CAAC,GACb,OAAO,KAAK,UAAU,kBAAkB,KAAK,QAAQ,CAAC;CAExD,IAAI,CAAC,SAAS,EAAE,WAAW,GACzB,OAAO,KAAK,UAAU,kBAAkB,KAAK,aAAa,CAAC;CAE7D,IAAI,CAAC,SAAS,EAAE,MAAM,GACpB,OAAO,KAAK,UAAU,kBAAkB,KAAK,QAAQ,CAAC;CAExD,MAAM,OAAO,kBAAkB,EAAE,MAAM,UAAU,kBAAkB,KAAK,MAAM,CAAC;CAC/E,IAAI,CAAC,KAAK,IACR,OAAO,KAAK,KAAK,KAAK;CAExB,MAAM,OAAO,wBACX,EAAE,YACF,UAAU,kBAAkB,KAAK,YAAY,CAC/C;CACA,IAAI,CAAC,KAAK,IACR,OAAO,KAAK,KAAK,KAAK;CAExB,IAAI,CAAC,SAAS,EAAE,SAAS,GACvB,OAAO,KAAK,UAAU,kBAAkB,KAAK,WAAW,CAAC;CAE3D,IAAI,CAAC,SAAS,EAAE,SAAS,GACvB,OAAO,KAAK,UAAU,kBAAkB,KAAK,WAAW,CAAC;CAE3D,OAAO,GAAG;EACR,aAAa,EAAE;EACf,QAAQ,EAAE;EACV,MAAM,KAAK;EACX,YAAY,KAAK;EACjB,WAAW,EAAE;EACb,WAAW,EAAE;CACf,CAAC;AACH;AAYA,SAAgB,iBAAiB,GAAY,KAA+C;CAC1F,IAAI,CAAC,SAAS,CAAC,GACb,OAAO,KAAK,UAAU,cAAc,KAAK,QAAQ,CAAC;CAEpD,MAAM,OAAO,kBAAkB,GAAG,GAAG,IAAI,OAAO;CAChD,IAAI,CAAC,KAAK,IACR,OAAO,KAAK,KAAK,KAAK;CAExB,MAAM,KAAK,EAAE;CACb,IAAI,CAAC,SAAS,EAAE,GACd,OAAO,KAAK,UAAU,cAAc,KAAK,OAAO,CAAC;CAEnD,IAAI,GAAG,SAAS,YAAY;EAC1B,IAAI,CAAC,SAAS,GAAG,EAAE,GACjB,OAAO,KAAK,UAAU,cAAc,KAAK,UAAU,CAAC;EAEtD,OAAO,GAAG;GACR,GAAG,KAAK;GACR,OAAO;IAAE,MAAM;IAAqB,IAAI,GAAG;GAAG;EAChD,CAAC;CACH;CACA,IAAI,GAAG,SAAS,WACd,OAAO,GAAG;EAAE,GAAG,KAAK;EAAO,OAAO,EAAE,MAAM,UAAmB;CAAE,CAAC;CAElE,OAAO,KAAK,UAAU,cAAc,KAAK,YAAY,CAAC;AACxD;AASA,SAAgB,kBAAkB,GAAY,KAAiD;CAC7F,IAAI,CAAC,MAAM,QAAQ,CAAC,GAClB,OAAO,KAAK,UAAU,eAAe,KAAK,QAAQ,CAAC;CAErD,MAAM,MAA2B,CAAC;CAClC,KAAK,IAAI,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK;EACjC,MAAM,IAAa,EAAE;EACrB,IAAI,CAAC,SAAS,CAAC,GACb,OAAO,KAAK,UAAU,cAAc,KAAK,IAAI,EAAE,EAAE,CAAC;EAEpD,IAAI,CAAC,SAAS,EAAE,OAAO,GACrB,OAAO,KAAK,UAAU,cAAc,KAAK,IAAI,EAAE,UAAU,CAAC;EAE5D,IAAI,KAAK;GAAE,SAAS,EAAE;GAAS,SAAS,EAAE,YAAY;EAAM,CAAC;CAC/D;CACA,OAAO,GAAG,GAAG;AACf"}

package/dist/core/codec/operations.d.ts

@@ -1,36 +0,0 @@
-import { type DecodedBindingProvenance, type DecodedBindingSpec, type DecoderResult } from './primitives.js';
-export interface DecodedProxyLease {
-    leaseId: string;
-    provider: string;
-    account?: string;
-    port: number;
-    host: string;
-    endpoint?: string;
-    ownerPid: number;
-    instanceId?: string;
-    bindingRefs: string[];
-    createdAt: string;
-    updatedAt: string;
-}
-export declare function decodeProxyLease(v: unknown, key: string): DecoderResult<DecodedProxyLease>;
-declare const JOURNAL_STATES: readonly ['planned', 'executing', 'verifying', 'rolling_back', 'rolled_back', 'failed', 'committed'];
-type DecodedJournalState = (typeof JOURNAL_STATES)[number];
-export interface DecodedJournalEntry {
-    id: string;
-    type: string;
-    state: DecodedJournalState;
-    affectedResources: string[];
-    backupPaths: string[];
-    params?: Record<string, unknown>;
-    startedAt: string;
-    updatedAt: string;
-}
-export declare function decodeJournalEntry(v: unknown, key: string): DecoderResult<DecodedJournalEntry>;
-export declare function decodeBindingSpecFromJson(json: string, key: string): DecoderResult<DecodedBindingSpec>;
-export declare function decodeBindingProvenanceFromJson(json: string, key: string): DecoderResult<DecodedBindingProvenance>;
-export {};
-/**
- * Parse JSON and decode into the expected type. On failure, returns a structured
- * error with record kind + field path. No secret values are placed into the error.
- */
-//# sourceMappingURL=operations.d.ts.map

package/dist/core/codec/operations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../../src/core/codec/operations.ts"],"names":[],"mappings":"AAAA,OAAO,EAWL,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,EACvB,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,aAAa,CAAC,iBAAiB,CAAC,CAsC1F;AAID,QAAA,MAAM,cAAc,YAClB,SAAS,EACT,WAAW,EACX,WAAW,EACX,cAAc,EACd,aAAa,EACb,QAAQ,EACR,WAAW,CACH,CAAC;AAEX,KAAK,mBAAmB,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,mBAAmB,CAAC;IAC3B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,aAAa,CAAC,mBAAmB,CAAC,CA0C9F;AAID,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,GACV,aAAa,CAAC,kBAAkB,CAAC,CAQnC;AAID,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,GACV,aAAa,CAAC,wBAAwB,CAAC,CAQzC;;AAID;;;GAGG"}

package/dist/core/codec/operations.js

@@ -1,82 +0,0 @@
-import { decodeBindingProvenance, decodeBindingSpec, fail, fieldPath, isNumber, isOptionalString, isRecord, isString, isStringArray, ok } from "./primitives.js";
-//#region src/core/codec/operations.ts
-function decodeProxyLease(v, key) {
-	if (!isRecord(v)) return fail(fieldPath("ProxyLease", key, "<root>"));
-	if (!isString(v.leaseId)) return fail(fieldPath("ProxyLease", key, "leaseId"));
-	if (!isString(v.provider)) return fail(fieldPath("ProxyLease", key, "provider"));
-	if (!isNumber(v.port)) return fail(fieldPath("ProxyLease", key, "port"));
-	if (!isString(v.host)) return fail(fieldPath("ProxyLease", key, "host"));
-	if (!isNumber(v.ownerPid)) return fail(fieldPath("ProxyLease", key, "ownerPid"));
-	if (!isString(v.createdAt)) return fail(fieldPath("ProxyLease", key, "createdAt"));
-	if (!isString(v.updatedAt)) return fail(fieldPath("ProxyLease", key, "updatedAt"));
-	return ok({
-		leaseId: v.leaseId,
-		provider: v.provider,
-		account: isOptionalString(v.account) ? v.account : void 0,
-		port: v.port,
-		host: v.host,
-		endpoint: isOptionalString(v.endpoint) ? v.endpoint : void 0,
-		ownerPid: v.ownerPid,
-		instanceId: isOptionalString(v.instanceId) ? v.instanceId : void 0,
-		bindingRefs: isStringArray(v.bindingRefs) ? v.bindingRefs : [],
-		createdAt: v.createdAt,
-		updatedAt: v.updatedAt
-	});
-}
-var JOURNAL_STATES = [
-	"planned",
-	"executing",
-	"verifying",
-	"rolling_back",
-	"rolled_back",
-	"failed",
-	"committed"
-];
-function decodeJournalEntry(v, key) {
-	if (!isRecord(v)) return fail(fieldPath("JournalEntry", key, "<root>"));
-	if (!isString(v.id)) return fail(fieldPath("JournalEntry", key, "id"));
-	if (!isString(v.type)) return fail(fieldPath("JournalEntry", key, "type"));
-	if (!isString(v.state)) return fail(fieldPath("JournalEntry", key, "state"));
-	const state = JOURNAL_STATES.find((candidate) => candidate === v.state);
-	if (!state) return fail(fieldPath("JournalEntry", key, `state: unknown "${v.state}"`));
-	if (!isStringArray(v.affectedResources)) return fail(fieldPath("JournalEntry", key, "affectedResources"));
-	if (!isStringArray(v.backupPaths)) return fail(fieldPath("JournalEntry", key, "backupPaths"));
-	if (!isString(v.startedAt)) return fail(fieldPath("JournalEntry", key, "startedAt"));
-	if (!isString(v.updatedAt)) return fail(fieldPath("JournalEntry", key, "updatedAt"));
-	return ok({
-		id: v.id,
-		type: v.type,
-		state,
-		affectedResources: v.affectedResources,
-		backupPaths: v.backupPaths,
-		params: v.params && typeof v.params === "object" && !Array.isArray(v.params) ? v.params : void 0,
-		startedAt: v.startedAt,
-		updatedAt: v.updatedAt
-	});
-}
-function decodeBindingSpecFromJson(json, key) {
-	let parsed;
-	try {
-		parsed = JSON.parse(json);
-	} catch {
-		return fail(fieldPath("BindingSpec", key, "<json parse>"));
-	}
-	return decodeBindingSpec(parsed, key);
-}
-function decodeBindingProvenanceFromJson(json, key) {
-	let parsed;
-	try {
-		parsed = JSON.parse(json);
-	} catch {
-		return fail(fieldPath("BindingProvenance", key, "<json parse>"));
-	}
-	return decodeBindingProvenance(parsed, key);
-}
-/**
-* Parse JSON and decode into the expected type. On failure, returns a structured
-* error with record kind + field path. No secret values are placed into the error.
-*/
-//#endregion
-export { decodeBindingProvenanceFromJson, decodeBindingSpecFromJson, decodeJournalEntry, decodeProxyLease };
-
-//# sourceMappingURL=operations.js.map

package/dist/core/codec/operations.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"operations.js","names":[],"sources":["../../../src/core/codec/operations.ts"],"sourcesContent":["import {\n  decodeBindingProvenance,\n  decodeBindingSpec,\n  fail,\n  fieldPath,\n  isNumber,\n  isOptionalString,\n  isRecord,\n  isString,\n  isStringArray,\n  ok,\n  type DecodedBindingProvenance,\n  type DecodedBindingSpec,\n  type DecoderResult,\n} from './primitives';\n\nexport interface DecodedProxyLease {\n  leaseId: string;\n  provider: string;\n  account?: string;\n  port: number;\n  host: string;\n  endpoint?: string;\n  ownerPid: number;\n  instanceId?: string;\n  bindingRefs: string[];\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport function decodeProxyLease(v: unknown, key: string): DecoderResult<DecodedProxyLease> {\n  if (!isRecord(v)) {\n    return fail(fieldPath('ProxyLease', key, '<root>'));\n  }\n  if (!isString(v.leaseId)) {\n    return fail(fieldPath('ProxyLease', key, 'leaseId'));\n  }\n  if (!isString(v.provider)) {\n    return fail(fieldPath('ProxyLease', key, 'provider'));\n  }\n  if (!isNumber(v.port)) {\n    return fail(fieldPath('ProxyLease', key, 'port'));\n  }\n  if (!isString(v.host)) {\n    return fail(fieldPath('ProxyLease', key, 'host'));\n  }\n  if (!isNumber(v.ownerPid)) {\n    return fail(fieldPath('ProxyLease', key, 'ownerPid'));\n  }\n  if (!isString(v.createdAt)) {\n    return fail(fieldPath('ProxyLease', key, 'createdAt'));\n  }\n  if (!isString(v.updatedAt)) {\n    return fail(fieldPath('ProxyLease', key, 'updatedAt'));\n  }\n  return ok({\n    leaseId: v.leaseId,\n    provider: v.provider,\n    account: isOptionalString(v.account) ? v.account : undefined,\n    port: v.port,\n    host: v.host,\n    endpoint: isOptionalString(v.endpoint) ? v.endpoint : undefined,\n    ownerPid: v.ownerPid,\n    instanceId: isOptionalString(v.instanceId) ? v.instanceId : undefined,\n    bindingRefs: isStringArray(v.bindingRefs) ? v.bindingRefs : [],\n    createdAt: v.createdAt,\n    updatedAt: v.updatedAt,\n  });\n}\n\n// ── OperationJournalEntry (v0) ────────────────────────────────\n\nconst JOURNAL_STATES = [\n  'planned',\n  'executing',\n  'verifying',\n  'rolling_back',\n  'rolled_back',\n  'failed',\n  'committed',\n] as const;\n\ntype DecodedJournalState = (typeof JOURNAL_STATES)[number];\n\nexport interface DecodedJournalEntry {\n  id: string;\n  type: string;\n  state: DecodedJournalState;\n  affectedResources: string[];\n  backupPaths: string[];\n  params?: Record<string, unknown>;\n  startedAt: string;\n  updatedAt: string;\n}\n\nexport function decodeJournalEntry(v: unknown, key: string): DecoderResult<DecodedJournalEntry> {\n  if (!isRecord(v)) {\n    return fail(fieldPath('JournalEntry', key, '<root>'));\n  }\n  if (!isString(v.id)) {\n    return fail(fieldPath('JournalEntry', key, 'id'));\n  }\n  if (!isString(v.type)) {\n    return fail(fieldPath('JournalEntry', key, 'type'));\n  }\n  if (!isString(v.state)) {\n    return fail(fieldPath('JournalEntry', key, 'state'));\n  }\n  const state = JOURNAL_STATES.find((candidate) => candidate === v.state);\n  if (!state) {\n    return fail(fieldPath('JournalEntry', key, `state: unknown \"${v.state}\"`));\n  }\n  if (!isStringArray(v.affectedResources)) {\n    return fail(fieldPath('JournalEntry', key, 'affectedResources'));\n  }\n  if (!isStringArray(v.backupPaths)) {\n    return fail(fieldPath('JournalEntry', key, 'backupPaths'));\n  }\n  if (!isString(v.startedAt)) {\n    return fail(fieldPath('JournalEntry', key, 'startedAt'));\n  }\n  if (!isString(v.updatedAt)) {\n    return fail(fieldPath('JournalEntry', key, 'updatedAt'));\n  }\n  return ok({\n    id: v.id,\n    type: v.type,\n    state,\n    affectedResources: v.affectedResources,\n    backupPaths: v.backupPaths,\n    params:\n      v.params && typeof v.params === 'object' && !Array.isArray(v.params)\n        ? (v.params as Record<string, unknown>)\n        : undefined,\n    startedAt: v.startedAt,\n    updatedAt: v.updatedAt,\n  });\n}\n\n// ── BindingSpec from DB row ────────────────────────────────────\n\nexport function decodeBindingSpecFromJson(\n  json: string,\n  key: string,\n): DecoderResult<DecodedBindingSpec> {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(json);\n  } catch {\n    return fail(fieldPath('BindingSpec', key, '<json parse>'));\n  }\n  return decodeBindingSpec(parsed, key);\n}\n\n// ── BindingProvenance from DB row ──────────────────────────────\n\nexport function decodeBindingProvenanceFromJson(\n  json: string,\n  key: string,\n): DecoderResult<DecodedBindingProvenance> {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(json);\n  } catch {\n    return fail(fieldPath('BindingProvenance', key, '<json parse>'));\n  }\n  return decodeBindingProvenance(parsed, key);\n}\n\n// ── Public API ─────────────────────────────────────────────────\n\n/**\n * Parse JSON and decode into the expected type. On failure, returns a structured\n * error with record kind + field path. No secret values are placed into the error.\n */\n"],"mappings":";;AA8BA,SAAgB,iBAAiB,GAAY,KAA+C;CAC1F,IAAI,CAAC,SAAS,CAAC,GACb,OAAO,KAAK,UAAU,cAAc,KAAK,QAAQ,CAAC;CAEpD,IAAI,CAAC,SAAS,EAAE,OAAO,GACrB,OAAO,KAAK,UAAU,cAAc,KAAK,SAAS,CAAC;CAErD,IAAI,CAAC,SAAS,EAAE,QAAQ,GACtB,OAAO,KAAK,UAAU,cAAc,KAAK,UAAU,CAAC;CAEtD,IAAI,CAAC,SAAS,EAAE,IAAI,GAClB,OAAO,KAAK,UAAU,cAAc,KAAK,MAAM,CAAC;CAElD,IAAI,CAAC,SAAS,EAAE,IAAI,GAClB,OAAO,KAAK,UAAU,cAAc,KAAK,MAAM,CAAC;CAElD,IAAI,CAAC,SAAS,EAAE,QAAQ,GACtB,OAAO,KAAK,UAAU,cAAc,KAAK,UAAU,CAAC;CAEtD,IAAI,CAAC,SAAS,EAAE,SAAS,GACvB,OAAO,KAAK,UAAU,cAAc,KAAK,WAAW,CAAC;CAEvD,IAAI,CAAC,SAAS,EAAE,SAAS,GACvB,OAAO,KAAK,UAAU,cAAc,KAAK,WAAW,CAAC;CAEvD,OAAO,GAAG;EACR,SAAS,EAAE;EACX,UAAU,EAAE;EACZ,SAAS,iBAAiB,EAAE,OAAO,IAAI,EAAE,UAAU,KAAA;EACnD,MAAM,EAAE;EACR,MAAM,EAAE;EACR,UAAU,iBAAiB,EAAE,QAAQ,IAAI,EAAE,WAAW,KAAA;EACtD,UAAU,EAAE;EACZ,YAAY,iBAAiB,EAAE,UAAU,IAAI,EAAE,aAAa,KAAA;EAC5D,aAAa,cAAc,EAAE,WAAW,IAAI,EAAE,cAAc,CAAC;EAC7D,WAAW,EAAE;EACb,WAAW,EAAE;CACf,CAAC;AACH;AAIA,IAAM,iBAAiB;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAeA,SAAgB,mBAAmB,GAAY,KAAiD;CAC9F,IAAI,CAAC,SAAS,CAAC,GACb,OAAO,KAAK,UAAU,gBAAgB,KAAK,QAAQ,CAAC;CAEtD,IAAI,CAAC,SAAS,EAAE,EAAE,GAChB,OAAO,KAAK,UAAU,gBAAgB,KAAK,IAAI,CAAC;CAElD,IAAI,CAAC,SAAS,EAAE,IAAI,GAClB,OAAO,KAAK,UAAU,gBAAgB,KAAK,MAAM,CAAC;CAEpD,IAAI,CAAC,SAAS,EAAE,KAAK,GACnB,OAAO,KAAK,UAAU,gBAAgB,KAAK,OAAO,CAAC;CAErD,MAAM,QAAQ,eAAe,MAAM,cAAc,cAAc,EAAE,KAAK;CACtE,IAAI,CAAC,OACH,OAAO,KAAK,UAAU,gBAAgB,KAAK,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAE3E,IAAI,CAAC,cAAc,EAAE,iBAAiB,GACpC,OAAO,KAAK,UAAU,gBAAgB,KAAK,mBAAmB,CAAC;CAEjE,IAAI,CAAC,cAAc,EAAE,WAAW,GAC9B,OAAO,KAAK,UAAU,gBAAgB,KAAK,aAAa,CAAC;CAE3D,IAAI,CAAC,SAAS,EAAE,SAAS,GACvB,OAAO,KAAK,UAAU,gBAAgB,KAAK,WAAW,CAAC;CAEzD,IAAI,CAAC,SAAS,EAAE,SAAS,GACvB,OAAO,KAAK,UAAU,gBAAgB,KAAK,WAAW,CAAC;CAEzD,OAAO,GAAG;EACR,IAAI,EAAE;EACN,MAAM,EAAE;EACR;EACA,mBAAmB,EAAE;EACrB,aAAa,EAAE;EACf,QACE,EAAE,UAAU,OAAO,EAAE,WAAW,YAAY,CAAC,MAAM,QAAQ,EAAE,MAAM,IAC9D,EAAE,SACH,KAAA;EACN,WAAW,EAAE;EACb,WAAW,EAAE;CACf,CAAC;AACH;AAIA,SAAgB,0BACd,MACA,KACmC;CACnC,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,IAAI;CAC1B,QAAQ;EACN,OAAO,KAAK,UAAU,eAAe,KAAK,cAAc,CAAC;CAC3D;CACA,OAAO,kBAAkB,QAAQ,GAAG;AACtC;AAIA,SAAgB,gCACd,MACA,KACyC;CACzC,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,IAAI;CAC1B,QAAQ;EACN,OAAO,KAAK,UAAU,qBAAqB,KAAK,cAAc,CAAC;CACjE;CACA,OAAO,wBAAwB,QAAQ,GAAG;AAC5C"}