anypick 1.0.0

package/dist/types/clients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clients.js","names":[],"sources":["../../src/types/clients.ts"],"sourcesContent":["import type { ApiStyle, RuntimeProfile } from './catalog';\nimport type {\n  ClientCapabilities,\n  IsolatedClientRuntime,\n  IsolatablePath,\n  ResolvedClientPlan,\n} from './bindings';\n\nexport type ClientConfigMode = 'none' | 'profile' | 'account';\n\n/**\n * One model slot an app exposes in its settings (client-shaped, not provider-shaped).\n * Claude Code: default + sonnet/opus/haiku. Codex Desktop/Hub: default + list2–5.\n * Kiro (and other single-model apps): default only.\n */\nexport interface ClientModelRole {\n  /** Stable id stored in BindingSpec.clientOptions.modelRoles */\n  id: string;\n  /** Short UI label (sentence case), e.g. \"Sonnet\" */\n  label: string;\n}\n\nexport interface ClientState {\n  clientId: string;\n  mode: ClientConfigMode;\n  profileName?: string;\n  accountRef?: { provider: string; name: string };\n  updatedAt: string;\n  /** Paths we last wrote / managed (for precise reset). */\n  managedPaths: string[];\n  /** Env keys we set in client env files / settings. */\n  managedEnvKeys: string[];\n}\n\nexport interface ApplyContext {\n  profile: RuntimeProfile;\n  clientId: string;\n  dryRun: boolean;\n  verbose: boolean;\n  /** Active proxy endpoint if started for this apply. */\n  proxyEndpoint?: string;\n  /** AnyPick data root (for client-local backups under clients/). */\n  anypickRoot: string;\n  /**\n   * When set, client adapters write into this home instead of the live user home.\n   * Used by isolated ephemeral runtimes (spec §9.7.1).\n   */\n  isolatedHome?: string;\n}\n\n/** Minimal live-state handle for isolation path listing. */\nexport interface ClientLiveState {\n  home: string;\n}\n\nexport interface ClientInspectResult {\n  present: boolean;\n  configPaths: string[];\n  summary?: string;\n  issues?: string[];\n}\n\nexport interface NativeClientInstallation {\n  /** Provider-owned native source id, e.g. `gemini-cli` or `antigravity`. */\n  sourceId: string;\n  /** Any matching executable or macOS application makes this source installed. */\n  executables?: readonly string[];\n  macApplications?: readonly string[];\n}\n\n/**\n * Applies / resets runtime configuration for one AI application.\n * Core must never contain client-specific write logic.\n */\nexport interface ClientAdapter {\n  readonly id: string;\n  readonly name: string;\n  readonly description: string;\n  readonly supportedApiStyles: ApiStyle[];\n  /**\n   * Short UI label for compact lists (Run column, tray). Defaults to `name`\n   * truncated by the presentation layer when omitted — never hardcode client\n   * ids in CLI/TUI switches.\n   */\n  readonly shortName?: string;\n  /**\n   * Executable name (or env-overridable default) used by `anypick run`.\n   * When omitted, the client id is used. Env overrides still win when set\n   * (`CLAUDE_BINARY`, `CODEX_BINARY`, …) via `binaryEnvVar`.\n   */\n  readonly binaryName?: string;\n  /**\n   * Environment variable that overrides `binaryName` for this client\n   * (e.g. `CLAUDE_BINARY`). Optional.\n   */\n  readonly binaryEnvVar?: string;\n  /**\n   * Sources worth exposing in compact app-routing surfaces such as Apps and\n   * the macOS tray. Native-only is the safe default: clients opt into gateway\n   * routing only when that is a first-class workflow.\n   */\n  readonly routingSurfacePolicy?: 'native-only' | 'all-compatible';\n  /** Installation probes for native-only account switches in compact surfaces. */\n  readonly nativeInstallations?: readonly NativeClientInstallation[];\n  /**\n   * Capability flags for activation planner (spec §20.2).\n   * supportsIsolatedHome may be true only when isolation methods exist.\n   */\n  readonly capabilities?: ClientCapabilities;\n  /**\n   * Model slots this app writes into settings when a proxy/profile is applied.\n   * Defaults to a single \"default\" role when omitted.\n   */\n  modelRoles?(): readonly ClientModelRole[];\n\n  validate(ctx: ApplyContext): Promise<void>;\n\n  /**\n   * Apply runtime configuration. Must be idempotent enough to re-apply.\n   * Returns managed paths and env keys for client state tracking.\n   * When ctx.isolatedHome is set, writes only under that home (no live mutation).\n   */\n  apply(ctx: ApplyContext): Promise<{\n    managedPaths: string[];\n    managedEnvKeys: string[];\n  }>;\n\n  /**\n   * Remove anypick-managed configuration; restore backups when present.\n   * Preserve unrelated user configuration.\n   */\n  reset(state: ClientState): Promise<void>;\n\n  inspect(): Promise<ClientInspectResult>;\n\n  /**\n   * Explicit allowlist of live paths that may be copied into an isolated runtime.\n   * Required when capabilities.supportsIsolatedHome is true (spec §9.7.1).\n   */\n  listIsolatablePaths?(liveState: ClientLiveState): Promise<readonly IsolatablePath[]>;\n\n  /**\n   * Create an owner-only temporary client runtime for ephemeral `run`.\n   * Required when capabilities.supportsIsolatedHome is true.\n   */\n  createIsolatedRuntime?(\n    plan: ResolvedClientPlan,\n    paths: readonly IsolatablePath[],\n  ): Promise<IsolatedClientRuntime>;\n\n  /**\n   * Create an ephemeral environment overlay when a client cannot safely use\n   * an isolated home. Required when `supportsEnvironmentOverlay` is true and\n   * `supportsIsolatedHome` is false. It must not mutate live client state.\n   */\n  createEnvironmentOverlay?(plan: ResolvedClientPlan): Promise<IsolatedClientRuntime>;\n\n  /**\n   * Persistent apply via resolved plan (optional convenience over apply()).\n   */\n  applyPersistent?(\n    plan: ResolvedClientPlan,\n  ): Promise<{ managedPaths: string[]; managedEnvKeys: string[] }>;\n}\n\n// ── Global config ────────────────────────────────────────────────\n\nexport interface GlobalConfig {\n  schemaVersion: number;\n  /** Client applied by `profile use` when --client is omitted. */\n  defaultClient?: string;\n  /** Last activated runtime profile (name slug). */\n  activeProfile?: string;\n  defaults?: {\n    proxyHost?: string;\n  };\n  ui?: {\n    color?: boolean;\n    /** Surface opened by bare `anypick` in an interactive terminal. */\n    defaultSurface?: 'tui' | 'tray';\n    /** Opt-in automatic failover for multi-account compatibility proxies only. */\n    quotaGuard?: {\n      enabled?: boolean;\n      cooldownMinutes?: number;\n    };\n    tray?: {\n      startEnabledProxies?: boolean;\n      showQuota?: boolean;\n      /** Legacy one-time guide marker, kept for config compatibility. */\n      guideSeen?: boolean;\n    };\n  };\n}\n\nexport const CURRENT_SCHEMA_VERSION = 2;\n\nexport const DEFAULT_GLOBAL_CONFIG: GlobalConfig = {\n  schemaVersion: CURRENT_SCHEMA_VERSION,\n  defaultClient: 'claude',\n};\n\n// ── DX redesign: resource refs, bindings, sources, isolation ──────\n\n/** Stable client identifier (e.g. \"claude\", \"codex\", \"kiro\"). */\n"],"mappings":";AAkMA,IAAa,yBAAyB;AAEtC,IAAa,wBAAsC;CACjD,eAAA;CACA,eAAe;AACjB"}

package/dist/types/plugins.d.ts

@@ -0,0 +1,89 @@
+import type { Provider } from './account.js';
+import type { ClientAdapter } from './clients.js';
+import type { CatalogProvider } from './catalog.js';
+/**
+ * The plugin API generation this build understands.
+ *
+ * A plugin declares the generation it was written against. Refusing a mismatch
+ * is cheaper than debugging a plugin that registers an adapter shaped for an
+ * older `Provider` interface, because a half-implemented adapter is discovered
+ * only when it rewrites a real credential file.
+ */
+export declare const PLUGIN_API_VERSION = 1;
+/** Manifest read from `anypick.plugin.json` at the plugin root. */
+export interface PluginManifest {
+    /** Unique id. Also the directory-independent key used by config and the CLI. */
+    name: string;
+    version: string;
+    description?: string;
+    /** Must equal `PLUGIN_API_VERSION`. */
+    apiVersion: number;
+    /** Entry module, resolved relative to the plugin root. */
+    main: string;
+}
+/**
+ * What a plugin is allowed to do.
+ *
+ * Deliberately three register functions and nothing else — no database, no
+ * stores, no data root. A plugin extends the *composition graph*; it does not
+ * get an ambient capability to read the credential snapshots that graph
+ * manages. Widening this is a security decision, not an ergonomics one.
+ */
+export interface PluginContext {
+    readonly apiVersion: number;
+    /** Plugin's own root directory, for reading files it ships. */
+    readonly pluginRoot: string;
+    registerProvider: (provider: Provider) => void;
+    registerClient: (client: ClientAdapter) => void;
+    registerCatalogProvider: (provider: CatalogProvider) => void;
+}
+/**
+ * The shape a plugin entry module must export.
+ *
+ * `activate` is synchronous on purpose: it runs inside `createApp`, between
+ * builtin registration and sealing the registries. Any async setup a plugin
+ * needs belongs in the adapter methods, which are already async.
+ */
+export interface AnyPickPlugin {
+    activate: (ctx: PluginContext) => void;
+    /** Called once, in reverse activation order, when the owning app closes. */
+    dispose?: () => void;
+}
+/** A plugin recorded in the data directory. */
+export interface PluginRecord {
+    name: string;
+    /** Absolute path to the plugin root (the directory holding the manifest). */
+    path: string;
+    version: string;
+    enabled: boolean;
+    /**
+     * SHA-256 of the whole plugin package (manifest + shipped files) as it looked
+     * when the user trusted it.
+     *
+     * Re-verified on every load: an enabled plugin whose code changed underneath
+     * the user is refused until they run `anypick plugin trust` again (ADR 0012).
+     * Hashing only the entry module would let helper files change silently.
+     */
+    digest: string;
+    addedAt: string;
+    updatedAt: string;
+}
+/** A plugin whose entry module imported and type-checked, ready to activate. */
+export interface LoadedPlugin {
+    record: PluginRecord;
+    manifest: PluginManifest;
+    plugin: AnyPickPlugin;
+}
+/** A plugin that was enabled but could not be loaded. */
+export interface PluginLoadFailure {
+    name: string;
+    path: string;
+    reason: string;
+    /** True when the package digest no longer matches what was trusted. */
+    untrusted: boolean;
+}
+export interface PluginLoadResult {
+    loaded: LoadedPlugin[];
+    failures: PluginLoadFailure[];
+}
+//# sourceMappingURL=plugins.d.ts.map

package/dist/types/plugins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins.d.ts","sourceRoot":"","sources":["../../src/types/plugins.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEjD;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC,mEAAmE;AACnE,MAAM,WAAW,cAAc;IAC7B,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC/C,cAAc,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;IAChD,uBAAuB,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,IAAI,CAAC;CAC9D;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,IAAI,CAAC;IACvC,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CACtB;AAED,+CAA+C;AAC/C,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;;;OAOG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,gFAAgF;AAChF,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,yDAAyD;AACzD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,QAAQ,EAAE,iBAAiB,EAAE,CAAC;CAC/B"}

package/dist/types/plugins.js

@@ -0,0 +1,14 @@
+//#region src/types/plugins.ts
+/**
+* The plugin API generation this build understands.
+*
+* A plugin declares the generation it was written against. Refusing a mismatch
+* is cheaper than debugging a plugin that registers an adapter shaped for an
+* older `Provider` interface, because a half-implemented adapter is discovered
+* only when it rewrites a real credential file.
+*/
+var PLUGIN_API_VERSION = 1;
+//#endregion
+export { PLUGIN_API_VERSION };
+
+//# sourceMappingURL=plugins.js.map

package/dist/types/plugins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins.js","names":[],"sources":["../../src/types/plugins.ts"],"sourcesContent":["import type { Provider } from './account';\nimport type { ClientAdapter } from './clients';\nimport type { CatalogProvider } from './catalog';\n\n/**\n * The plugin API generation this build understands.\n *\n * A plugin declares the generation it was written against. Refusing a mismatch\n * is cheaper than debugging a plugin that registers an adapter shaped for an\n * older `Provider` interface, because a half-implemented adapter is discovered\n * only when it rewrites a real credential file.\n */\nexport const PLUGIN_API_VERSION = 1;\n\n/** Manifest read from `anypick.plugin.json` at the plugin root. */\nexport interface PluginManifest {\n  /** Unique id. Also the directory-independent key used by config and the CLI. */\n  name: string;\n  version: string;\n  description?: string;\n  /** Must equal `PLUGIN_API_VERSION`. */\n  apiVersion: number;\n  /** Entry module, resolved relative to the plugin root. */\n  main: string;\n}\n\n/**\n * What a plugin is allowed to do.\n *\n * Deliberately three register functions and nothing else — no database, no\n * stores, no data root. A plugin extends the *composition graph*; it does not\n * get an ambient capability to read the credential snapshots that graph\n * manages. Widening this is a security decision, not an ergonomics one.\n */\nexport interface PluginContext {\n  readonly apiVersion: number;\n  /** Plugin's own root directory, for reading files it ships. */\n  readonly pluginRoot: string;\n  registerProvider: (provider: Provider) => void;\n  registerClient: (client: ClientAdapter) => void;\n  registerCatalogProvider: (provider: CatalogProvider) => void;\n}\n\n/**\n * The shape a plugin entry module must export.\n *\n * `activate` is synchronous on purpose: it runs inside `createApp`, between\n * builtin registration and sealing the registries. Any async setup a plugin\n * needs belongs in the adapter methods, which are already async.\n */\nexport interface AnyPickPlugin {\n  activate: (ctx: PluginContext) => void;\n  /** Called once, in reverse activation order, when the owning app closes. */\n  dispose?: () => void;\n}\n\n/** A plugin recorded in the data directory. */\nexport interface PluginRecord {\n  name: string;\n  /** Absolute path to the plugin root (the directory holding the manifest). */\n  path: string;\n  version: string;\n  enabled: boolean;\n  /**\n   * SHA-256 of the whole plugin package (manifest + shipped files) as it looked\n   * when the user trusted it.\n   *\n   * Re-verified on every load: an enabled plugin whose code changed underneath\n   * the user is refused until they run `anypick plugin trust` again (ADR 0012).\n   * Hashing only the entry module would let helper files change silently.\n   */\n  digest: string;\n  addedAt: string;\n  updatedAt: string;\n}\n\n/** A plugin whose entry module imported and type-checked, ready to activate. */\nexport interface LoadedPlugin {\n  record: PluginRecord;\n  manifest: PluginManifest;\n  plugin: AnyPickPlugin;\n}\n\n/** A plugin that was enabled but could not be loaded. */\nexport interface PluginLoadFailure {\n  name: string;\n  path: string;\n  reason: string;\n  /** True when the package digest no longer matches what was trusted. */\n  untrusted: boolean;\n}\n\nexport interface PluginLoadResult {\n  loaded: LoadedPlugin[];\n  failures: PluginLoadFailure[];\n}\n"],"mappings":";;;;;;;;;AAYA,IAAa,qBAAqB"}

package/dist/types/proxy-hub.d.ts

@@ -0,0 +1,109 @@
+import type { AccountPoolResourceRef, AccountResourceRef, ClientId, Protocol } from './bindings.js';
+import type { AccountProxyConfig } from './account.js';
+/** A Hub can only delegate to a concrete saved account or a provider pool. */
+export type ProxyHubSourceRef = AccountResourceRef | AccountPoolResourceRef;
+/** One source opted into a Hub profile. Credentials stay in the source snapshot. */
+export interface ProxyHubSource {
+    ref: ProxyHubSourceRef;
+    enabled: boolean;
+}
+/**
+ * A deliberate source choice for an ambiguous raw model id. The ambiguity may
+ * be between provider catalogs or between credentials in one catalog. Clients
+ * still send the original provider model id.
+ */
+export interface ProxyHubModelOwner {
+    model: string;
+    source: ProxyHubSourceRef;
+}
+/** Persisted Hub configuration. `default` is the only profile exposed in v1. */
+export interface ProxyHubConfig {
+    name: string;
+    enabled: boolean;
+    host: string;
+    port: number;
+    sources: ProxyHubSource[];
+    modelOwners: ProxyHubModelOwner[];
+    revision: number;
+    createdAt: string;
+    updatedAt: string;
+}
+/** One compiled, exact public model route. */
+export interface ProxyHubRouteTarget {
+    model: string;
+    source: ProxyHubSourceRef;
+    /** Lets a backend normalize an exposed id later without changing the client API. */
+    upstreamModel: string;
+}
+/** A raw model collision across distinct catalog identities that needs an owner. */
+export interface ProxyHubModelConflict {
+    kind: 'model-overlap';
+    model: string;
+    catalogIds: string[];
+    candidates: ProxyHubSourceRef[];
+}
+/**
+ * One aggregated credential choice inside an adapter-owned catalog. Core must
+ * not guess an account; users choose one source or opt into an explicit pool.
+ */
+export interface ProxyHubSourceChoiceConflict {
+    kind: 'source-choice';
+    catalogId: string;
+    models: string[];
+    candidates: ProxyHubSourceRef[];
+}
+/**
+ * Token-scoped route snapshot. Its token is stored separately and is never
+ * returned from status, doctor, JSON, or Tray snapshots.
+ */
+export interface ProxyHubRouteManifest {
+    version: 1;
+    hub: string;
+    revision: number;
+    client: ClientId;
+    protocol: Protocol;
+    routes: ProxyHubRouteTarget[];
+}
+/** Public state of the singleton Hub process; intentionally secret-free. */
+export interface ProxyHubRuntimeState {
+    name: string;
+    endpoint?: string;
+    pid?: number;
+    instanceId?: string;
+    logPath?: string;
+    startedAt?: string;
+}
+/** A public status row safe for CLI JSON, TUI, Tray, logs, and doctor. */
+export interface ProxyHubStatus {
+    name: string;
+    enabled: boolean;
+    running: boolean;
+    endpoint?: string;
+    pid?: number;
+    sourceCount: number;
+    modelCount: number;
+    conflictCount: number;
+    revision: number;
+    detail?: string;
+}
+/** Account material handed to a provider-owned in-process Hub backend. */
+export interface ProxyHubBackendAccount {
+    name: string;
+    snapshotDir: string;
+    proxy: AccountProxyConfig;
+}
+/**
+ * Context and lifecycle for a provider backend hosted behind the single public
+ * Hub listener. `token` is an internal loopback secret, never a client token.
+ */
+export interface ProxyHubBackendContext {
+    source: ProxyHubSourceRef;
+    accounts: readonly ProxyHubBackendAccount[];
+    token: string;
+    log: (line: string) => void;
+}
+export interface ProxyHubBackendHandle {
+    endpoint: string;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=proxy-hub.d.ts.map

package/dist/types/proxy-hub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-hub.d.ts","sourceRoot":"","sources":["../../src/types/proxy-hub.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACjG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAEpD,8EAA8E;AAC9E,MAAM,MAAM,iBAAiB,GAAG,kBAAkB,GAAG,sBAAsB,CAAC;AAE5E,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,iBAAiB,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,iBAAiB,CAAC;CAC3B;AAED,gFAAgF;AAChF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,8CAA8C;AAC9C,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,iBAAiB,CAAC;IAC1B,oFAAoF;IACpF,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,oFAAoF;AACpF,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,iBAAiB,EAAE,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,eAAe,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,iBAAiB,EAAE,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,CAAC,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,QAAQ,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,mBAAmB,EAAE,CAAC;CAC/B;AAED,4EAA4E;AAC5E,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,0EAA0E;AAC1E,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,0EAA0E;AAC1E,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,kBAAkB,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,QAAQ,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB"}

package/dist/types.d.ts

@@ -0,0 +1,7 @@
+export * from './types/account.js';
+export * from './types/catalog.js';
+export * from './types/clients.js';
+export * from './types/bindings.js';
+export * from './types/proxy-hub.js';
+export * from './types/plugins.js';
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC"}

package/dist/types.js

@@ -0,0 +1 @@
+export {};

package/dist/utils/errors.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Exit codes per anypick-cli-dx-redesign-spec §25.2
+ *
+ * Reserved ranges (do NOT reuse for new program errors):
+ *   0                — success
+ *   1–127            — program/operational errors (anypick's own)
+ *   128 + N (128–255) — process terminated by signal N (e.g. 130 = SIGINT)
+ *   Known program codes below:
+ *     0 SUCCESS, 1 OPERATIONAL, 2 INVALID_USAGE, 3 NOT_FOUND,
+ *     4 AUTH_REQUIRED, 5 CAPABILITY_CONFLICT, 6 HEALTH_FAILURE,
+ *     7 MISSING_DEPENDENCY, 130 CANCELLED (SIGINT)
+ */
+export declare const ExitCode: {
+    readonly SUCCESS: 0;
+    readonly OPERATIONAL: 1;
+    readonly INVALID_USAGE: 2;
+    readonly NOT_FOUND: 3;
+    readonly AUTH_REQUIRED: 4;
+    readonly CAPABILITY_CONFLICT: 5;
+    readonly HEALTH_FAILURE: 6;
+    readonly MISSING_DEPENDENCY: 7;
+    /** Malformed / untrusted import envelope (SEC-01). */
+    readonly IMPORT_FORMAT: 8;
+    /** Import exceeds file-count / size / total-size limits (SEC-01). */
+    readonly IMPORT_LIMIT: 9;
+    /** 128 + SIGINT: process was interrupted (Ctrl-C). */
+    readonly CANCELLED: 130;
+};
+export type ExitCodeValue = (typeof ExitCode)[keyof typeof ExitCode];
+export interface AnyPickErrorOptions {
+    code?: string;
+    exitCode?: ExitCodeValue;
+    suggestions?: string[];
+    mutated?: boolean;
+    /** Extra fields for JSON error payloads. */
+    details?: Record<string, unknown>;
+}
+export declare class AnyPickError extends Error {
+    readonly code?: string;
+    readonly exitCode: ExitCodeValue;
+    readonly suggestions: string[];
+    mutated: boolean;
+    readonly details?: Record<string, unknown>;
+    constructor(message: string, codeOrOpts?: string | AnyPickErrorOptions);
+    toJson(): {
+        error: {
+            code: string;
+            message: string;
+            suggestions: string[];
+            mutated: boolean;
+            [key: string]: unknown;
+        };
+    };
+    /** Human multi-line error with suggestions and "No configuration was changed." when applicable. */
+    toHuman(): string;
+}
+export declare function isAnyPickError(err: unknown): err is AnyPickError;
+/** Map a common error code string to a default exit code. */
+export declare function exitCodeForErrorCode(code: string | undefined): ExitCodeValue;
+export declare function anypickError(message: string, code: string, opts?: Omit<AnyPickErrorOptions, 'code'>): AnyPickError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/utils/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,QAAQ;aACnB,OAAO,EAAE,CAAC;aACV,WAAW,EAAE,CAAC;aACd,aAAa,EAAE,CAAC;aAChB,SAAS,EAAE,CAAC;aACZ,aAAa,EAAE,CAAC;aAChB,mBAAmB,EAAE,CAAC;aACtB,cAAc,EAAE,CAAC;aACjB,kBAAkB,EAAE,CAAC;IACrB,sDAAsD;aACtD,aAAa,EAAE,CAAC;IAChB,qEAAqE;aACrE,YAAY,EAAE,CAAC;IACf,sDAAsD;aACtD,SAAS,EAAE,GAAG;CACN,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,OAAO,QAAQ,CAAC,CAAC;AAErE,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE3C,YAAY,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,mBAAmB,EAerE;IAED,MAAM,IAAI;QACR,KAAK,EAAE;YACL,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,MAAM,CAAC;YAChB,WAAW,EAAE,MAAM,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,CAAC;YACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;SACxB,CAAC;KACH,CAUA;IAED,mGAAmG;IACnG,OAAO,IAAI,MAAM,CAYhB;CACF;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,YAAY,CAEhE;AAED,6DAA6D;AAC7D,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,CAyC5E;AAED,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,IAAI,CAAC,mBAAmB,EAAE,MAAM,CAAM,GAC3C,YAAY,CAQd"}

package/dist/utils/errors.js

@@ -0,0 +1,119 @@
+//#region src/utils/errors.ts
+/**
+* Exit codes per anypick-cli-dx-redesign-spec §25.2
+*
+* Reserved ranges (do NOT reuse for new program errors):
+*   0                — success
+*   1–127            — program/operational errors (anypick's own)
+*   128 + N (128–255) — process terminated by signal N (e.g. 130 = SIGINT)
+*   Known program codes below:
+*     0 SUCCESS, 1 OPERATIONAL, 2 INVALID_USAGE, 3 NOT_FOUND,
+*     4 AUTH_REQUIRED, 5 CAPABILITY_CONFLICT, 6 HEALTH_FAILURE,
+*     7 MISSING_DEPENDENCY, 130 CANCELLED (SIGINT)
+*/
+var ExitCode = {
+	SUCCESS: 0,
+	OPERATIONAL: 1,
+	INVALID_USAGE: 2,
+	NOT_FOUND: 3,
+	AUTH_REQUIRED: 4,
+	CAPABILITY_CONFLICT: 5,
+	HEALTH_FAILURE: 6,
+	MISSING_DEPENDENCY: 7,
+	/** Malformed / untrusted import envelope (SEC-01). */
+	IMPORT_FORMAT: 8,
+	/** Import exceeds file-count / size / total-size limits (SEC-01). */
+	IMPORT_LIMIT: 9,
+	/** 128 + SIGINT: process was interrupted (Ctrl-C). */
+	CANCELLED: 130
+};
+var AnyPickError = class extends Error {
+	code;
+	exitCode;
+	suggestions;
+	mutated;
+	details;
+	constructor(message, codeOrOpts) {
+		super(message);
+		this.name = "AnyPickError";
+		if (typeof codeOrOpts === "string" || codeOrOpts === void 0) {
+			this.code = codeOrOpts;
+			this.exitCode = ExitCode.OPERATIONAL;
+			this.suggestions = [];
+			this.mutated = false;
+		} else {
+			this.code = codeOrOpts.code;
+			this.exitCode = codeOrOpts.exitCode ?? ExitCode.OPERATIONAL;
+			this.suggestions = codeOrOpts.suggestions ?? [];
+			this.mutated = codeOrOpts.mutated ?? false;
+			this.details = codeOrOpts.details;
+		}
+	}
+	toJson() {
+		return { error: {
+			code: this.code ?? "ERROR",
+			message: this.message,
+			suggestions: this.suggestions,
+			mutated: this.mutated,
+			...this.details
+		} };
+	}
+	/** Human multi-line error with suggestions and "No configuration was changed." when applicable. */
+	toHuman() {
+		const lines = [this.message, ""];
+		if (this.suggestions.length > 0) {
+			for (const s of this.suggestions) lines.push(s);
+			lines.push("");
+		}
+		if (!this.mutated) lines.push("No configuration was changed.");
+		return lines.join("\n").trimEnd();
+	}
+};
+function isAnyPickError(err) {
+	return err instanceof AnyPickError;
+}
+/** Map a common error code string to a default exit code. */
+function exitCodeForErrorCode(code) {
+	switch (code) {
+		case "INVALID_USAGE":
+		case "MISSING_CLIENT":
+		case "MISSING_SOURCE":
+		case "PRESET_CLIENT_MISMATCH":
+		case "INVALID_REFERENCE": return ExitCode.INVALID_USAGE;
+		case "RESOURCE_NOT_FOUND":
+		case "ACCOUNT_NOT_FOUND":
+		case "GATEWAY_NOT_FOUND":
+		case "PRESET_NOT_FOUND":
+		case "CLIENT_NOT_FOUND": return ExitCode.NOT_FOUND;
+		case "AUTH_REQUIRED":
+		case "LOGIN_REQUIRED": return ExitCode.AUTH_REQUIRED;
+		case "CAPABILITY_CONFLICT":
+		case "UNSUPPORTED_TRANSPORT":
+		case "STATE_CONFLICT":
+		case "NO_ACTIVE_BINDING":
+		case "MODEL_UNKNOWN": return ExitCode.CAPABILITY_CONFLICT;
+		case "HEALTH_FAILURE":
+		case "VERIFY_FAILED": return ExitCode.HEALTH_FAILURE;
+		case "MISSING_DEPENDENCY":
+		case "EXTERNAL_PROXY_MISSING": return ExitCode.MISSING_DEPENDENCY;
+		case "IMPORT_FORMAT":
+		case "IMPORT_MISSING": return ExitCode.IMPORT_FORMAT;
+		case "IMPORT_LIMIT": return ExitCode.IMPORT_LIMIT;
+		case "ACCOUNT_EXISTS": return ExitCode.INVALID_USAGE;
+		case "CANCELLED": return ExitCode.CANCELLED;
+		default: return ExitCode.OPERATIONAL;
+	}
+}
+function anypickError(message, code, opts = {}) {
+	return new AnyPickError(message, {
+		code,
+		exitCode: opts.exitCode ?? exitCodeForErrorCode(code),
+		suggestions: opts.suggestions,
+		mutated: opts.mutated,
+		details: opts.details
+	});
+}
+//#endregion
+export { AnyPickError, ExitCode, anypickError, exitCodeForErrorCode, isAnyPickError };
+
+//# sourceMappingURL=errors.js.map

package/dist/utils/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","names":[],"sources":["../../src/utils/errors.ts"],"sourcesContent":["/**\n * Exit codes per anypick-cli-dx-redesign-spec §25.2\n *\n * Reserved ranges (do NOT reuse for new program errors):\n *   0                — success\n *   1–127            — program/operational errors (anypick's own)\n *   128 + N (128–255) — process terminated by signal N (e.g. 130 = SIGINT)\n *   Known program codes below:\n *     0 SUCCESS, 1 OPERATIONAL, 2 INVALID_USAGE, 3 NOT_FOUND,\n *     4 AUTH_REQUIRED, 5 CAPABILITY_CONFLICT, 6 HEALTH_FAILURE,\n *     7 MISSING_DEPENDENCY, 130 CANCELLED (SIGINT)\n */\nexport const ExitCode = {\n  SUCCESS: 0,\n  OPERATIONAL: 1,\n  INVALID_USAGE: 2,\n  NOT_FOUND: 3,\n  AUTH_REQUIRED: 4,\n  CAPABILITY_CONFLICT: 5,\n  HEALTH_FAILURE: 6,\n  MISSING_DEPENDENCY: 7,\n  /** Malformed / untrusted import envelope (SEC-01). */\n  IMPORT_FORMAT: 8,\n  /** Import exceeds file-count / size / total-size limits (SEC-01). */\n  IMPORT_LIMIT: 9,\n  /** 128 + SIGINT: process was interrupted (Ctrl-C). */\n  CANCELLED: 130,\n} as const;\n\nexport type ExitCodeValue = (typeof ExitCode)[keyof typeof ExitCode];\n\nexport interface AnyPickErrorOptions {\n  code?: string;\n  exitCode?: ExitCodeValue;\n  suggestions?: string[];\n  mutated?: boolean;\n  /** Extra fields for JSON error payloads. */\n  details?: Record<string, unknown>;\n}\n\nexport class AnyPickError extends Error {\n  readonly code?: string;\n  readonly exitCode: ExitCodeValue;\n  readonly suggestions: string[];\n  mutated: boolean;\n  readonly details?: Record<string, unknown>;\n\n  constructor(message: string, codeOrOpts?: string | AnyPickErrorOptions) {\n    super(message);\n    this.name = 'AnyPickError';\n    if (typeof codeOrOpts === 'string' || codeOrOpts === undefined) {\n      this.code = codeOrOpts;\n      this.exitCode = ExitCode.OPERATIONAL;\n      this.suggestions = [];\n      this.mutated = false;\n    } else {\n      this.code = codeOrOpts.code;\n      this.exitCode = codeOrOpts.exitCode ?? ExitCode.OPERATIONAL;\n      this.suggestions = codeOrOpts.suggestions ?? [];\n      this.mutated = codeOrOpts.mutated ?? false;\n      this.details = codeOrOpts.details;\n    }\n  }\n\n  toJson(): {\n    error: {\n      code: string;\n      message: string;\n      suggestions: string[];\n      mutated: boolean;\n      [key: string]: unknown;\n    };\n  } {\n    return {\n      error: {\n        code: this.code ?? 'ERROR',\n        message: this.message,\n        suggestions: this.suggestions,\n        mutated: this.mutated,\n        ...this.details,\n      },\n    };\n  }\n\n  /** Human multi-line error with suggestions and \"No configuration was changed.\" when applicable. */\n  toHuman(): string {\n    const lines = [this.message, ''];\n    if (this.suggestions.length > 0) {\n      for (const s of this.suggestions) {\n        lines.push(s);\n      }\n      lines.push('');\n    }\n    if (!this.mutated) {\n      lines.push('No configuration was changed.');\n    }\n    return lines.join('\\n').trimEnd();\n  }\n}\n\nexport function isAnyPickError(err: unknown): err is AnyPickError {\n  return err instanceof AnyPickError;\n}\n\n/** Map a common error code string to a default exit code. */\nexport function exitCodeForErrorCode(code: string | undefined): ExitCodeValue {\n  switch (code) {\n    case 'INVALID_USAGE':\n    case 'MISSING_CLIENT':\n    case 'MISSING_SOURCE':\n    case 'PRESET_CLIENT_MISMATCH':\n    case 'INVALID_REFERENCE':\n      return ExitCode.INVALID_USAGE;\n    case 'RESOURCE_NOT_FOUND':\n    case 'ACCOUNT_NOT_FOUND':\n    case 'GATEWAY_NOT_FOUND':\n    case 'PRESET_NOT_FOUND':\n    case 'CLIENT_NOT_FOUND':\n      return ExitCode.NOT_FOUND;\n    case 'AUTH_REQUIRED':\n    case 'LOGIN_REQUIRED':\n      return ExitCode.AUTH_REQUIRED;\n    case 'CAPABILITY_CONFLICT':\n    case 'UNSUPPORTED_TRANSPORT':\n    case 'STATE_CONFLICT':\n    case 'NO_ACTIVE_BINDING':\n    case 'MODEL_UNKNOWN':\n      return ExitCode.CAPABILITY_CONFLICT;\n    case 'HEALTH_FAILURE':\n    case 'VERIFY_FAILED':\n      return ExitCode.HEALTH_FAILURE;\n    case 'MISSING_DEPENDENCY':\n    case 'EXTERNAL_PROXY_MISSING':\n      return ExitCode.MISSING_DEPENDENCY;\n    case 'IMPORT_FORMAT':\n    case 'IMPORT_MISSING':\n      return ExitCode.IMPORT_FORMAT;\n    case 'IMPORT_LIMIT':\n      return ExitCode.IMPORT_LIMIT;\n    case 'ACCOUNT_EXISTS':\n      return ExitCode.INVALID_USAGE;\n    case 'CANCELLED':\n      return ExitCode.CANCELLED;\n    default:\n      return ExitCode.OPERATIONAL;\n  }\n}\n\nexport function anypickError(\n  message: string,\n  code: string,\n  opts: Omit<AnyPickErrorOptions, 'code'> = {},\n): AnyPickError {\n  return new AnyPickError(message, {\n    code,\n    exitCode: opts.exitCode ?? exitCodeForErrorCode(code),\n    suggestions: opts.suggestions,\n    mutated: opts.mutated,\n    details: opts.details,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;AAYA,IAAa,WAAW;CACtB,SAAS;CACT,aAAa;CACb,eAAe;CACf,WAAW;CACX,eAAe;CACf,qBAAqB;CACrB,gBAAgB;CAChB,oBAAoB;;CAEpB,eAAe;;CAEf,cAAc;;CAEd,WAAW;AACb;AAaA,IAAa,eAAb,cAAkC,MAAM;CACtC;CACA;CACA;CACA;CACA;CAEA,YAAY,SAAiB,YAA2C;EACtE,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,IAAI,OAAO,eAAe,YAAY,eAAe,KAAA,GAAW;GAC9D,KAAK,OAAO;GACZ,KAAK,WAAW,SAAS;GACzB,KAAK,cAAc,CAAC;GACpB,KAAK,UAAU;EACjB,OAAO;GACL,KAAK,OAAO,WAAW;GACvB,KAAK,WAAW,WAAW,YAAY,SAAS;GAChD,KAAK,cAAc,WAAW,eAAe,CAAC;GAC9C,KAAK,UAAU,WAAW,WAAW;GACrC,KAAK,UAAU,WAAW;EAC5B;CACF;CAEA,SAQE;EACA,OAAO,EACL,OAAO;GACL,MAAM,KAAK,QAAQ;GACnB,SAAS,KAAK;GACd,aAAa,KAAK;GAClB,SAAS,KAAK;GACd,GAAG,KAAK;EACV,EACF;CACF;;CAGA,UAAkB;EAChB,MAAM,QAAQ,CAAC,KAAK,SAAS,EAAE;EAC/B,IAAI,KAAK,YAAY,SAAS,GAAG;GAC/B,KAAK,MAAM,KAAK,KAAK,aACnB,MAAM,KAAK,CAAC;GAEd,MAAM,KAAK,EAAE;EACf;EACA,IAAI,CAAC,KAAK,SACR,MAAM,KAAK,+BAA+B;EAE5C,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,QAAQ;CAClC;AACF;AAEA,SAAgB,eAAe,KAAmC;CAChE,OAAO,eAAe;AACxB;;AAGA,SAAgB,qBAAqB,MAAyC;CAC5E,QAAQ,MAAR;EACE,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,qBACH,OAAO,SAAS;EAClB,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,oBACH,OAAO,SAAS;EAClB,KAAK;EACL,KAAK,kBACH,OAAO,SAAS;EAClB,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,iBACH,OAAO,SAAS;EAClB,KAAK;EACL,KAAK,iBACH,OAAO,SAAS;EAClB,KAAK;EACL,KAAK,0BACH,OAAO,SAAS;EAClB,KAAK;EACL,KAAK,kBACH,OAAO,SAAS;EAClB,KAAK,gBACH,OAAO,SAAS;EAClB,KAAK,kBACH,OAAO,SAAS;EAClB,KAAK,aACH,OAAO,SAAS;EAClB,SACE,OAAO,SAAS;CACpB;AACF;AAEA,SAAgB,aACd,SACA,MACA,OAA0C,CAAC,GAC7B;CACd,OAAO,IAAI,aAAa,SAAS;EAC/B;EACA,UAAU,KAAK,YAAY,qBAAqB,IAAI;EACpD,aAAa,KAAK;EAClB,SAAS,KAAK;EACd,SAAS,KAAK;CAChB,CAAC;AACH"}

package/dist/utils/fs.d.ts

@@ -0,0 +1,39 @@
+/** Expand ~ and normalize a path. */
+export declare function expandHome(path: string): string;
+export declare function pathExists(path: string): Promise<boolean>;
+export declare function ensureDir(path: string): Promise<void>;
+export declare function readJsonFile<T>(path: string): Promise<T>;
+/**
+ * Read a JSON file and decode through a versioned record decoder (DATA-02).
+ * The decoder validates the shape and rejects corrupt/future-version data
+ * with a structured error carrying the file path (no secret values).
+ */
+export declare function readAndDecodeJsonFile<T>(path: string, decoder: (v: unknown, key: string) => {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    error: string;
+}): Promise<T>;
+export declare function writeJsonFile(path: string, data: unknown, mode?: number): Promise<void>;
+/**
+ * Copy a single file, creating parent dirs. Preserves mode when possible.
+ * Returns false if source is missing.
+ */
+export declare function copyFileSafe(src: string, dest: string, mode?: number): Promise<boolean>;
+/**
+ * Write text atomically with restrictive permissions.
+ */
+export declare function writeTextFile(path: string, content: string, mode?: number): Promise<void>;
+/**
+ * Copy live file into snapshot, or throw a clear error if missing.
+ */
+export declare function backupRequiredFile(livePath: string, destPath: string, label: string): Promise<void>;
+/**
+ * Restore a snapshot file to a live path (required).
+ */
+export declare function restoreRequiredFile(srcPath: string, livePath: string, label: string): Promise<void>;
+export declare function listSubdirs(dir: string): Promise<string[]>;
+export declare function removePath(path: string): Promise<void>;
+export declare function emptyDir(path: string): Promise<void>;
+//# sourceMappingURL=fs.d.ts.map

package/dist/utils/fs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../../src/utils/fs.ts"],"names":[],"mappings":"AAOA,qCAAqC;AACrC,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQ/C;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO/D;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI3D;AAED,wBAAsB,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAG9D;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,EAC3C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC1F,OAAO,CAAC,CAAC,CAAC,CAaZ;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,SAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5F;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,SAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAsB5F;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,SAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB9F;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAShE;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI5D;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG1D"}

package/dist/utils/fs.js

@@ -0,0 +1,126 @@
+import { AnyPickError } from "./errors.js";
+import { existsSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { copyFile, mkdir, open, readFile, readdir, rename, rm, stat } from "node:fs/promises";
+import { homedir } from "node:os";
+import { randomUUID } from "node:crypto";
+//#region src/utils/fs.ts
+/** Expand ~ and normalize a path. */
+function expandHome(path) {
+	if (path === "~") return homedir();
+	if (path.startsWith("~/") || path.startsWith("~\\")) return join(homedir(), path.slice(2));
+	return path;
+}
+async function pathExists(path) {
+	try {
+		await stat(path);
+		return true;
+	} catch {
+		return false;
+	}
+}
+async function ensureDir(path) {
+	await mkdir(path, {
+		recursive: true,
+		mode: 448
+	});
+}
+async function readJsonFile(path) {
+	const raw = await readFile(path, "utf8");
+	return JSON.parse(raw);
+}
+/**
+* Read a JSON file and decode through a versioned record decoder (DATA-02).
+* The decoder validates the shape and rejects corrupt/future-version data
+* with a structured error carrying the file path (no secret values).
+*/
+async function readAndDecodeJsonFile(path, decoder) {
+	const raw = await readFile(path, "utf8");
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch {
+		throw new Error(`Corrupt JSON in ${path}`);
+	}
+	const result = decoder(parsed, path);
+	if (result.ok) return result.value;
+	throw new Error(`Corrupt record in ${path}: ${result.error}`);
+}
+async function writeJsonFile(path, data, mode = 384) {
+	await writeTextFile(path, `${JSON.stringify(data, null, 2)}\n`, mode);
+}
+/**
+* Copy a single file, creating parent dirs. Preserves mode when possible.
+* Returns false if source is missing.
+*/
+async function copyFileSafe(src, dest, mode = 384) {
+	if (!await pathExists(src)) return false;
+	await ensureDir(dirname(dest));
+	const tmp = `${dest}.${randomUUID()}.tmp`;
+	try {
+		await copyFile(src, tmp);
+		const { chmod } = await import("node:fs/promises");
+		await chmod(tmp, mode);
+		const handle = await open(tmp, "r");
+		try {
+			await handle.sync();
+		} finally {
+			await handle.close();
+		}
+		await rename(tmp, dest);
+	} catch (err) {
+		await rm(tmp, { force: true }).catch(() => {});
+		throw err;
+	}
+	return true;
+}
+/**
+* Write text atomically with restrictive permissions.
+*/
+async function writeTextFile(path, content, mode = 384) {
+	await ensureDir(dirname(path));
+	const tmp = `${path}.${randomUUID()}.tmp`;
+	let handle;
+	try {
+		handle = await open(tmp, "wx", mode);
+		await handle.writeFile(content, { encoding: "utf8" });
+		await handle.sync();
+		await handle.close();
+		handle = void 0;
+		await rename(tmp, path);
+	} catch (err) {
+		await handle?.close().catch(() => {});
+		await rm(tmp, { force: true }).catch(() => {});
+		throw err;
+	}
+}
+/**
+* Copy live file into snapshot, or throw a clear error if missing.
+*/
+async function backupRequiredFile(livePath, destPath, label) {
+	if (!await copyFileSafe(livePath, destPath)) throw new AnyPickError(`No live ${label} found at ${livePath}. Log in first, then save.`, {
+		code: "NO_LIVE_AUTH",
+		suggestions: [`Sign in with the official tool, then try again.`]
+	});
+}
+/**
+* Restore a snapshot file to a live path (required).
+*/
+async function restoreRequiredFile(srcPath, livePath, label) {
+	if (!await pathExists(srcPath)) throw new Error(`Snapshot is missing ${label}: ${srcPath}`);
+	await copyFileSafe(srcPath, livePath, 384);
+}
+async function listSubdirs(dir) {
+	if (!await pathExists(dir)) return [];
+	return (await readdir(dir, { withFileTypes: true })).filter((e) => e.isDirectory()).map((e) => e.name).toSorted();
+}
+async function removePath(path) {
+	if (existsSync(path)) await rm(path, {
+		recursive: true,
+		force: true
+	});
+}
+//#endregion
+export { backupRequiredFile, copyFileSafe, ensureDir, expandHome, listSubdirs, pathExists, readAndDecodeJsonFile, readJsonFile, removePath, restoreRequiredFile, writeJsonFile, writeTextFile };
+
+//# sourceMappingURL=fs.js.map