anypick 1.0.0

package/dist/clients/resolve.d.ts

@@ -0,0 +1,27 @@
+import type { ApiStyle, ApplyContext, ModelMap, RuntimeProfile } from '../types.js';
+import { type CatalogRegistry } from '../catalog/providers.js';
+export interface ResolvedRuntime {
+    apiKey: string;
+    endpoint: string;
+    apiStyle: ApiStyle;
+    defaultModel?: string;
+    models: ModelMap;
+    headers: Record<string, string>;
+    /** Models from the profile (optionally expanded via models map). */
+    roles: {
+        default?: string;
+        sonnet?: string;
+        opus?: string;
+        haiku?: string;
+    };
+    overlay: Record<string, unknown>;
+}
+/**
+ * Resolve profile → concrete runtime values for a client.
+ *
+ * Models live on the profile (set at create/edit). Switching a profile
+ * just reuses those fields — no per-client ceremony.
+ */
+export declare function resolveRuntime(profile: RuntimeProfile, clientId: string, catalog?: CatalogRegistry, proxyEndpoint?: string): ResolvedRuntime;
+export declare function resolveFromContext(ctx: ApplyContext, catalog?: CatalogRegistry): ResolvedRuntime;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/clients/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/clients/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAmB,QAAQ,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAClG,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE7E,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,QAAQ,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,oEAAoE;IACpE,KAAK,EAAE;QACL,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AASD;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,eAAiC,EAC1C,aAAa,CAAC,EAAE,MAAM,GACrB,eAAe,CA2DjB;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,eAAe,CAEhG"}

package/dist/clients/resolve.js

@@ -0,0 +1,49 @@
+import { catalogRegistry } from "../catalog/providers.js";
+//#region src/clients/resolve.ts
+function expandModel(value, models) {
+	if (!value) return;
+	return models[value] ?? value;
+}
+/**
+* Resolve profile → concrete runtime values for a client.
+*
+* Models live on the profile (set at create/edit). Switching a profile
+* just reuses those fields — no per-client ceremony.
+*/
+function resolveRuntime(profile, clientId, catalog = catalogRegistry, proxyEndpoint) {
+	let provider;
+	if (catalog.has(profile.meta.provider)) provider = catalog.get(profile.meta.provider);
+	const overlay = profile.meta.clientOverrides?.[clientId] ?? {};
+	const models = { ...profile.meta.models };
+	const headers = { ...profile.secrets.headers };
+	const apiKey = (typeof overlay.apiKey === "string" ? overlay.apiKey : void 0) ?? (typeof profile.secrets.apiKey === "string" ? profile.secrets.apiKey : "") ?? "";
+	const endpoint = proxyEndpoint ?? (typeof overlay.endpoint === "string" ? overlay.endpoint : void 0) ?? profile.meta.endpoint ?? provider?.defaultEndpoint ?? "";
+	const apiStyle = overlay.apiStyle ?? provider?.apiStyle ?? "openai";
+	const defaultAlias = (typeof overlay.defaultModel === "string" ? overlay.defaultModel : void 0) ?? profile.meta.defaultModel;
+	const sonnetAlias = (typeof overlay.sonnetModel === "string" ? overlay.sonnetModel : void 0) ?? profile.meta.sonnetModel;
+	const opusAlias = (typeof overlay.opusModel === "string" ? overlay.opusModel : void 0) ?? profile.meta.opusModel;
+	const haikuAlias = (typeof overlay.haikuModel === "string" ? overlay.haikuModel : void 0) ?? profile.meta.haikuModel;
+	const roles = {
+		default: expandModel(defaultAlias, models),
+		sonnet: expandModel(sonnetAlias, models),
+		opus: expandModel(opusAlias, models),
+		haiku: expandModel(haikuAlias, models)
+	};
+	return {
+		apiKey,
+		endpoint,
+		apiStyle,
+		defaultModel: roles.default,
+		models,
+		headers,
+		roles,
+		overlay
+	};
+}
+function resolveFromContext(ctx, catalog) {
+	return resolveRuntime(ctx.profile, ctx.clientId, catalog, ctx.proxyEndpoint);
+}
+//#endregion
+export { resolveFromContext, resolveRuntime };
+
+//# sourceMappingURL=resolve.js.map

package/dist/clients/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","names":[],"sources":["../../src/clients/resolve.ts"],"sourcesContent":["import type { ApiStyle, ApplyContext, CatalogProvider, ModelMap, RuntimeProfile } from '../types';\nimport { catalogRegistry, type CatalogRegistry } from '../catalog/providers';\n\nexport interface ResolvedRuntime {\n  apiKey: string;\n  endpoint: string;\n  apiStyle: ApiStyle;\n  defaultModel?: string;\n  models: ModelMap;\n  headers: Record<string, string>;\n  /** Models from the profile (optionally expanded via models map). */\n  roles: {\n    default?: string;\n    sonnet?: string;\n    opus?: string;\n    haiku?: string;\n  };\n  overlay: Record<string, unknown>;\n}\n\nfunction expandModel(value: string | undefined, models: ModelMap): string | undefined {\n  if (!value) {\n    return undefined;\n  }\n  return models[value] ?? value;\n}\n\n/**\n * Resolve profile → concrete runtime values for a client.\n *\n * Models live on the profile (set at create/edit). Switching a profile\n * just reuses those fields — no per-client ceremony.\n */\nexport function resolveRuntime(\n  profile: RuntimeProfile,\n  clientId: string,\n  catalog: CatalogRegistry = catalogRegistry,\n  proxyEndpoint?: string,\n): ResolvedRuntime {\n  let provider: CatalogProvider | undefined;\n  if (catalog.has(profile.meta.provider)) {\n    provider = catalog.get(profile.meta.provider);\n  }\n\n  const overlay = profile.meta.clientOverrides?.[clientId] ?? {};\n  const models = { ...profile.meta.models };\n  const headers = { ...profile.secrets.headers };\n\n  const apiKey =\n    (typeof overlay.apiKey === 'string' ? overlay.apiKey : undefined) ??\n    (typeof profile.secrets.apiKey === 'string' ? profile.secrets.apiKey : '') ??\n    '';\n\n  const endpoint =\n    proxyEndpoint ??\n    (typeof overlay.endpoint === 'string' ? overlay.endpoint : undefined) ??\n    profile.meta.endpoint ??\n    provider?.defaultEndpoint ??\n    '';\n\n  const apiStyle: ApiStyle =\n    (overlay.apiStyle as ApiStyle | undefined) ?? provider?.apiStyle ?? 'openai';\n\n  // Profile fields first; advanced clientOverrides can still override.\n  const defaultAlias =\n    (typeof overlay.defaultModel === 'string' ? overlay.defaultModel : undefined) ??\n    profile.meta.defaultModel;\n\n  const sonnetAlias =\n    (typeof overlay.sonnetModel === 'string' ? overlay.sonnetModel : undefined) ??\n    profile.meta.sonnetModel;\n\n  const opusAlias =\n    (typeof overlay.opusModel === 'string' ? overlay.opusModel : undefined) ??\n    profile.meta.opusModel;\n\n  const haikuAlias =\n    (typeof overlay.haikuModel === 'string' ? overlay.haikuModel : undefined) ??\n    profile.meta.haikuModel;\n\n  const roles = {\n    default: expandModel(defaultAlias, models),\n    sonnet: expandModel(sonnetAlias, models),\n    opus: expandModel(opusAlias, models),\n    haiku: expandModel(haikuAlias, models),\n  };\n\n  return {\n    apiKey,\n    endpoint,\n    apiStyle,\n    defaultModel: roles.default,\n    models,\n    headers,\n    roles,\n    overlay,\n  };\n}\n\nexport function resolveFromContext(ctx: ApplyContext, catalog?: CatalogRegistry): ResolvedRuntime {\n  return resolveRuntime(ctx.profile, ctx.clientId, catalog, ctx.proxyEndpoint);\n}\n"],"mappings":";;AAoBA,SAAS,YAAY,OAA2B,QAAsC;CACpF,IAAI,CAAC,OACH;CAEF,OAAO,OAAO,UAAU;AAC1B;;;;;;;AAQA,SAAgB,eACd,SACA,UACA,UAA2B,iBAC3B,eACiB;CACjB,IAAI;CACJ,IAAI,QAAQ,IAAI,QAAQ,KAAK,QAAQ,GACnC,WAAW,QAAQ,IAAI,QAAQ,KAAK,QAAQ;CAG9C,MAAM,UAAU,QAAQ,KAAK,kBAAkB,aAAa,CAAC;CAC7D,MAAM,SAAS,EAAE,GAAG,QAAQ,KAAK,OAAO;CACxC,MAAM,UAAU,EAAE,GAAG,QAAQ,QAAQ,QAAQ;CAE7C,MAAM,UACH,OAAO,QAAQ,WAAW,WAAW,QAAQ,SAAS,KAAA,OACtD,OAAO,QAAQ,QAAQ,WAAW,WAAW,QAAQ,QAAQ,SAAS,OACvE;CAEF,MAAM,WACJ,kBACC,OAAO,QAAQ,aAAa,WAAW,QAAQ,WAAW,KAAA,MAC3D,QAAQ,KAAK,YACb,UAAU,mBACV;CAEF,MAAM,WACH,QAAQ,YAAqC,UAAU,YAAY;CAGtE,MAAM,gBACH,OAAO,QAAQ,iBAAiB,WAAW,QAAQ,eAAe,KAAA,MACnE,QAAQ,KAAK;CAEf,MAAM,eACH,OAAO,QAAQ,gBAAgB,WAAW,QAAQ,cAAc,KAAA,MACjE,QAAQ,KAAK;CAEf,MAAM,aACH,OAAO,QAAQ,cAAc,WAAW,QAAQ,YAAY,KAAA,MAC7D,QAAQ,KAAK;CAEf,MAAM,cACH,OAAO,QAAQ,eAAe,WAAW,QAAQ,aAAa,KAAA,MAC/D,QAAQ,KAAK;CAEf,MAAM,QAAQ;EACZ,SAAS,YAAY,cAAc,MAAM;EACzC,QAAQ,YAAY,aAAa,MAAM;EACvC,MAAM,YAAY,WAAW,MAAM;EACnC,OAAO,YAAY,YAAY,MAAM;CACvC;CAEA,OAAO;EACL;EACA;EACA;EACA,cAAc,MAAM;EACpB;EACA;EACA;EACA;CACF;AACF;AAEA,SAAgB,mBAAmB,KAAmB,SAA4C;CAChG,OAAO,eAAe,IAAI,SAAS,IAAI,UAAU,SAAS,IAAI,aAAa;AAC7E"}

package/dist/core/account-codec.d.ts

@@ -0,0 +1,32 @@
+import type { AccountMeta, AccountProxyConfig } from '../types.js';
+export declare const ACCOUNT_ENVELOPE_VERSION: 1;
+export declare const ACCOUNT_ENVELOPE_KIND: 'anypick-account';
+/** Reject obviously abusive envelopes without streaming unbounded memory. */
+export declare const MAX_IMPORT_FILES = 4096;
+export declare const MAX_IMPORT_FILE_BYTES: number;
+export declare const MAX_IMPORT_TOTAL_BYTES: number;
+/** The encoded envelope is larger than the decoded file budget. */
+export declare const MAX_IMPORT_ENVELOPE_BYTES: number;
+export declare const MAX_ACCOUNT_NAME_LEN = 128;
+export declare const MAX_FIELD_LEN = 4096;
+export interface DecodedAccountEnvelope {
+    version: 1;
+    kind: 'anypick-account';
+    meta: AccountMeta;
+    proxy: AccountProxyConfig | null;
+    /** Relative key → base64 content. Keys are validated, never trusted raw. */
+    files: Record<string, string>;
+}
+/** Decode + validate the raw import payload under the untrusted-boundary rule. */
+export declare function decodeAccountEnvelope(raw: unknown, expectedProviderId: string): DecodedAccountEnvelope;
+/**
+ * Validate a single import file key purely (no staging root needed). Rejects
+ * empty keys, NUL bytes, absolute POSIX/Windows paths, mixed separators, and
+ * any normalized escape ('..' segments / leading-traversal). Throws a
+ * `AnyPickError` on violation. Called from the codec (before any mutation) and
+ * from `stagedFilePath` (defense-in-depth at write time).
+ */
+export declare function validateImportFileKey(key: string): void;
+/** Resolve a validated relative file key to an absolute staging path. Never throws on traversal. */
+export declare function stagedFilePath(stagingRoot: string, relKey: string): string;
+//# sourceMappingURL=account-codec.d.ts.map

package/dist/core/account-codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-codec.d.ts","sourceRoot":"","sources":["../../src/core/account-codec.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAEhE,eAAO,MAAM,wBAAwB,EAAG,CAAU,CAAC;AACnD,eAAO,MAAM,qBAAqB,EAAG,iBAA0B,CAAC;AAEhE,6EAA6E;AAC7E,eAAO,MAAM,gBAAgB,OAAO,CAAC;AACrC,eAAO,MAAM,qBAAqB,QAAmB,CAAC;AACtD,eAAO,MAAM,sBAAsB,QAAoB,CAAC;AACxD,mEAAmE;AACnE,eAAO,MAAM,yBAAyB,QAAoB,CAAC;AAC3D,eAAO,MAAM,oBAAoB,MAAM,CAAC;AACxC,eAAO,MAAM,aAAa,OAAO,CAAC;AAElC,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,CAAC,CAAC;IACX,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACjC,4EAA4E;IAC5E,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,kFAAkF;AAClF,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,OAAO,EACZ,kBAAkB,EAAE,MAAM,GACzB,sBAAsB,CAiCxB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CA2BvD;AAED,oGAAoG;AACpG,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAU1E"}

package/dist/core/account-codec.js

@@ -0,0 +1,134 @@
+import { anypickError } from "../utils/errors.js";
+import { isAbsolute, normalize, relative, resolve, sep } from "node:path";
+var ACCOUNT_ENVELOPE_KIND = "anypick-account";
+/** Reject obviously abusive envelopes without streaming unbounded memory. */
+var MAX_IMPORT_FILES = 4096;
+var MAX_IMPORT_FILE_BYTES = 16 * 1024 * 1024;
+var MAX_IMPORT_TOTAL_BYTES = 128 * 1024 * 1024;
+/** The encoded envelope is larger than the decoded file budget. */
+var MAX_IMPORT_ENVELOPE_BYTES = 192 * 1024 * 1024;
+var MAX_FIELD_LEN = 4096;
+/** Decode + validate the raw import payload under the untrusted-boundary rule. */
+function decodeAccountEnvelope(raw, expectedProviderId) {
+	if (typeof raw !== "object" || raw === null || Array.isArray(raw)) throw error("Import payload is not a JSON object.", "IMPORT_FORMAT");
+	const obj = raw;
+	if (obj.kind !== "anypick-account") throw error("Unrecognized export format (kind mismatch).", "IMPORT_FORMAT");
+	if (obj.version !== 1) throw error(`Unsupported export version: ${JSON.stringify(obj.version)}.`, "IMPORT_FORMAT");
+	if (typeof obj.meta !== "object" || obj.meta === null || Array.isArray(obj.meta)) throw error("Import envelope is missing a meta object.", "IMPORT_FORMAT");
+	const meta = decodeMeta(obj.meta);
+	if (meta.provider !== expectedProviderId) throw error(`Import envelope provider "${meta.provider}" does not match the requested provider "${expectedProviderId}".`, "IMPORT_FORMAT", { exitCode: void 0 });
+	const proxy = obj.proxy === void 0 ? null : decodeProxy(obj.proxy);
+	if (typeof obj.files !== "object" || obj.files === null || Array.isArray(obj.files)) throw error("Import envelope is missing a files map.", "IMPORT_FORMAT");
+	return {
+		version: 1,
+		kind: ACCOUNT_ENVELOPE_KIND,
+		meta,
+		proxy,
+		files: decodeFiles(obj.files)
+	};
+}
+/**
+* Validate a single import file key purely (no staging root needed). Rejects
+* empty keys, NUL bytes, absolute POSIX/Windows paths, mixed separators, and
+* any normalized escape ('..' segments / leading-traversal). Throws a
+* `AnyPickError` on violation. Called from the codec (before any mutation) and
+* from `stagedFilePath` (defense-in-depth at write time).
+*/
+function validateImportFileKey(key) {
+	if (!key || key.includes("\0")) throw error(`Invalid import file path: ${JSON.stringify(key)}.`, "IMPORT_FORMAT");
+	if (isAbsolute(key)) throw error(`Import file path must be relative: ${key}.`, "IMPORT_FORMAT");
+	if (/^[A-Za-z]:[\\/]/.test(key) || key.startsWith("\\\\")) throw error(`Import file path must be relative: ${key}.`, "IMPORT_FORMAT");
+	if (key.includes("\\") && key.includes("/")) throw error(`Import file path mixes path separators: ${key}.`, "IMPORT_FORMAT");
+	const normalized = normalize(key.split("\\").join("/"));
+	if (normalized === "." || normalized === ".." || normalized.startsWith(`..${sep}`) || normalized.includes(`${sep}..${sep}`) || normalized.endsWith(`${sep}..`)) throw error(`Import file path escapes the staging root: ${key}.`, "IMPORT_FORMAT");
+}
+/** Resolve a validated relative file key to an absolute staging path. Never throws on traversal. */
+function stagedFilePath(stagingRoot, relKey) {
+	validateImportFileKey(relKey);
+	const abs = resolve(stagingRoot, normalize(relKey.split("\\").join("/")));
+	const back = relative(resolve(stagingRoot), abs);
+	if (back.startsWith("..") || isAbsolute(back)) throw error(`Import file path escapes the staging root: ${relKey}.`, "IMPORT_FORMAT");
+	return abs;
+}
+function decodeMeta(value) {
+	if (typeof value !== "object" || value === null) throw error("Account meta is not an object.", "IMPORT_FORMAT");
+	const m = value;
+	const name = safeText(m.name, 128, "name") ?? "";
+	if (!name || name.length > 128) throw error("Account meta name is missing or too long.", "IMPORT_FORMAT");
+	const provider = safeText(m.provider, 4096, "provider") ?? "";
+	if (!provider) throw error("Account meta provider is missing.", "IMPORT_FORMAT");
+	const stringOrUndefined = (v, field) => safeText(v, MAX_FIELD_LEN, field);
+	const createdAt = safeText(m.createdAt, MAX_FIELD_LEN, "createdAt");
+	const updatedAt = safeText(m.updatedAt, MAX_FIELD_LEN, "updatedAt");
+	return {
+		name,
+		provider,
+		createdAt: createdAt ?? (/* @__PURE__ */ new Date()).toISOString(),
+		updatedAt: updatedAt ?? (/* @__PURE__ */ new Date()).toISOString(),
+		label: stringOrUndefined(m.label, "label"),
+		identity: stringOrUndefined(m.identity, "identity"),
+		notes: stringOrUndefined(m.notes, "notes"),
+		credentialKind: m.credentialKind === "proxy-only" ? "proxy-only" : void 0
+	};
+}
+/** Reject terminal control/bidi characters in imported display metadata. */
+function safeText(value, maxLength, field) {
+	if (typeof value !== "string") return;
+	if (value.length > maxLength) return;
+	if (/[\p{Cc}\p{Cf}]/u.test(value)) throw error(`Import meta field "${field}" contains terminal control characters.`, "IMPORT_FORMAT");
+	return value;
+}
+function decodeProxy(value) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) throw error("Account proxy config is not an object.", "IMPORT_FORMAT");
+	const p = value;
+	const port = typeof p.port === "number" && Number.isInteger(p.port) && p.port >= 0 && p.port <= 65535 ? p.port : void 0;
+	const host = safeText(p.host, MAX_FIELD_LEN, "proxy.host");
+	return {
+		enabled: false,
+		...port !== void 0 ? { port } : {},
+		...host !== void 0 ? { host } : {}
+	};
+}
+function decodeFiles(value) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) throw error("Import envelope is missing a files map.", "IMPORT_FORMAT");
+	const entries = Object.entries(value);
+	if (entries.length === 0) throw error("Import envelope contains no files.", "IMPORT_FORMAT");
+	if (entries.length > 4096) throw limit(`Import contains ${entries.length} files (max ${MAX_IMPORT_FILES}).`);
+	const out = {};
+	const seen = /* @__PURE__ */ new Set();
+	let total = 0;
+	for (const [key, content] of entries) {
+		if (typeof key !== "string" || !key) throw error("Import file map contains an invalid key.", "IMPORT_FORMAT");
+		validateImportFileKey(key);
+		if (typeof content !== "string") throw error(`Import file "${key}" content is not a base64 string.`, "IMPORT_FORMAT");
+		if (!/^[A-Za-z0-9+/=]+$/.test(content)) throw error(`Import file "${key}" is not valid base64.`, "IMPORT_FORMAT");
+		let decoded;
+		try {
+			decoded = Buffer.from(content, "base64");
+		} catch {
+			throw error(`Import file "${key}" failed to decode as base64.`, "IMPORT_FORMAT");
+		}
+		if (decoded.byteLength > 16777216) throw limit(`Import file "${key}" exceeds ${MAX_IMPORT_FILE_BYTES} bytes.`);
+		total += decoded.byteLength;
+		if (total > 134217728) throw limit(`Import total payload exceeds ${MAX_IMPORT_TOTAL_BYTES} bytes.`);
+		const normalized = normalize(key.split("\\").join("/"));
+		if (seen.has(normalized)) throw error(`Import contains a duplicate file path: ${key}.`, "IMPORT_FORMAT");
+		if ([...seen].some((existing) => normalized.startsWith(`${existing}/`) || existing.startsWith(`${normalized}/`))) throw error(`Import file path collides with another entry: ${key}.`, "IMPORT_FORMAT");
+		seen.add(normalized);
+		out[key] = content;
+	}
+	return out;
+}
+function error(message, code, opts = {}) {
+	return anypickError(message, code, {
+		exitCode: opts.exitCode ?? (code === "IMPORT_LIMIT" ? 9 : 8),
+		mutated: false
+	});
+}
+function limit(message) {
+	return error(message, "IMPORT_LIMIT");
+}
+//#endregion
+export { ACCOUNT_ENVELOPE_KIND, MAX_FIELD_LEN, MAX_IMPORT_ENVELOPE_BYTES, MAX_IMPORT_FILES, MAX_IMPORT_FILE_BYTES, MAX_IMPORT_TOTAL_BYTES, decodeAccountEnvelope, stagedFilePath, validateImportFileKey };
+
+//# sourceMappingURL=account-codec.js.map

package/dist/core/account-codec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-codec.js","names":[],"sources":["../../src/core/account-codec.ts"],"sourcesContent":["/**\n * Versioned decoder for the account import/export envelope (SEC-01).\n *\n * Imports arrive as untrusted bytes. Per fixed decision #1 (\"external data is\n * untrusted\"), the envelope is decoded from `unknown` by a versioned codec\n * that validates the *entire* payload — shape, provider ownership, every\n * file-map key (path traversal / absolute / separators / NULs / duplicates /\n * file-vs-dir collisions / symlink), base64, file-count, per-file size, and\n * total decoded size — before any caller mutates state.\n *\n * Decoding is pure and never performs I/O. The caller stages the decoded\n * files into an owner-only temp dir using `stagedFilePath` so that a single\n * bad key cannot write outside the staging root.\n */\nimport { isAbsolute, normalize, relative, resolve, sep } from 'node:path';\nimport { anypickError, type ExitCodeValue, type AnyPickError } from '../utils/errors';\nimport type { AccountMeta, AccountProxyConfig } from '../types';\n\nexport const ACCOUNT_ENVELOPE_VERSION = 1 as const;\nexport const ACCOUNT_ENVELOPE_KIND = 'anypick-account' as const;\n\n/** Reject obviously abusive envelopes without streaming unbounded memory. */\nexport const MAX_IMPORT_FILES = 4096;\nexport const MAX_IMPORT_FILE_BYTES = 16 * 1024 * 1024; // 16 MiB per file\nexport const MAX_IMPORT_TOTAL_BYTES = 128 * 1024 * 1024; // 128 MiB total\n/** The encoded envelope is larger than the decoded file budget. */\nexport const MAX_IMPORT_ENVELOPE_BYTES = 192 * 1024 * 1024;\nexport const MAX_ACCOUNT_NAME_LEN = 128;\nexport const MAX_FIELD_LEN = 4096;\n\nexport interface DecodedAccountEnvelope {\n  version: 1;\n  kind: 'anypick-account';\n  meta: AccountMeta;\n  proxy: AccountProxyConfig | null;\n  /** Relative key → base64 content. Keys are validated, never trusted raw. */\n  files: Record<string, string>;\n}\n\n/** Decode + validate the raw import payload under the untrusted-boundary rule. */\nexport function decodeAccountEnvelope(\n  raw: unknown,\n  expectedProviderId: string,\n): DecodedAccountEnvelope {\n  if (typeof raw !== 'object' || raw === null || Array.isArray(raw)) {\n    throw error('Import payload is not a JSON object.', 'IMPORT_FORMAT');\n  }\n  const obj = raw as Record<string, unknown>;\n\n  if (obj.kind !== ACCOUNT_ENVELOPE_KIND) {\n    throw error('Unrecognized export format (kind mismatch).', 'IMPORT_FORMAT');\n  }\n  if (obj.version !== ACCOUNT_ENVELOPE_VERSION) {\n    throw error(`Unsupported export version: ${JSON.stringify(obj.version)}.`, 'IMPORT_FORMAT');\n  }\n  if (typeof obj.meta !== 'object' || obj.meta === null || Array.isArray(obj.meta)) {\n    throw error('Import envelope is missing a meta object.', 'IMPORT_FORMAT');\n  }\n\n  const meta = decodeMeta(obj.meta);\n  if (meta.provider !== expectedProviderId) {\n    throw error(\n      `Import envelope provider \"${meta.provider}\" does not match the requested provider \"${expectedProviderId}\".`,\n      'IMPORT_FORMAT',\n      { exitCode: undefined },\n    );\n  }\n\n  const proxy = obj.proxy === undefined ? null : decodeProxy(obj.proxy);\n\n  if (typeof obj.files !== 'object' || obj.files === null || Array.isArray(obj.files)) {\n    throw error('Import envelope is missing a files map.', 'IMPORT_FORMAT');\n  }\n  const files = decodeFiles(obj.files);\n\n  return { version: 1, kind: ACCOUNT_ENVELOPE_KIND, meta, proxy, files };\n}\n\n/**\n * Validate a single import file key purely (no staging root needed). Rejects\n * empty keys, NUL bytes, absolute POSIX/Windows paths, mixed separators, and\n * any normalized escape ('..' segments / leading-traversal). Throws a\n * `AnyPickError` on violation. Called from the codec (before any mutation) and\n * from `stagedFilePath` (defense-in-depth at write time).\n */\nexport function validateImportFileKey(key: string): void {\n  if (!key || key.includes('\\0')) {\n    throw error(`Invalid import file path: ${JSON.stringify(key)}.`, 'IMPORT_FORMAT');\n  }\n  if (isAbsolute(key)) {\n    throw error(`Import file path must be relative: ${key}.`, 'IMPORT_FORMAT');\n  }\n  // Reject Windows-style absolute paths (drive letters / UNC) on every host,\n  // since `path.isAbsolute` only recognizes the *current* platform's form.\n  if (/^[A-Za-z]:[\\\\/]/.test(key) || key.startsWith('\\\\\\\\')) {\n    throw error(`Import file path must be relative: ${key}.`, 'IMPORT_FORMAT');\n  }\n  // Mixed separators (e.g. \"a/b\\\\c\") after normalization can mask escapes.\n  if (key.includes('\\\\') && key.includes('/')) {\n    throw error(`Import file path mixes path separators: ${key}.`, 'IMPORT_FORMAT');\n  }\n  // Normalize across POSIX and Windows separators before the traversal check.\n  const normalized = normalize(key.split('\\\\').join('/'));\n  if (\n    normalized === '.' ||\n    normalized === '..' ||\n    normalized.startsWith(`..${sep}`) ||\n    normalized.includes(`${sep}..${sep}`) ||\n    normalized.endsWith(`${sep}..`)\n  ) {\n    throw error(`Import file path escapes the staging root: ${key}.`, 'IMPORT_FORMAT');\n  }\n}\n\n/** Resolve a validated relative file key to an absolute staging path. Never throws on traversal. */\nexport function stagedFilePath(stagingRoot: string, relKey: string): string {\n  // Re-run the pure key check so a bad key can never write outside staging.\n  validateImportFileKey(relKey);\n  const normalized = normalize(relKey.split('\\\\').join('/'));\n  const abs = resolve(stagingRoot, normalized);\n  const back = relative(resolve(stagingRoot), abs);\n  if (back.startsWith('..') || isAbsolute(back)) {\n    throw error(`Import file path escapes the staging root: ${relKey}.`, 'IMPORT_FORMAT');\n  }\n  return abs;\n}\n\nfunction decodeMeta(value: unknown): AccountMeta {\n  if (typeof value !== 'object' || value === null) {\n    throw error('Account meta is not an object.', 'IMPORT_FORMAT');\n  }\n  const m = value as Record<string, unknown>;\n  const name = safeText(m.name, MAX_ACCOUNT_NAME_LEN, 'name') ?? '';\n  if (!name || name.length > MAX_ACCOUNT_NAME_LEN) {\n    throw error('Account meta name is missing or too long.', 'IMPORT_FORMAT');\n  }\n  const provider = safeText(m.provider, MAX_FIELD_LEN, 'provider') ?? '';\n  if (!provider) {\n    throw error('Account meta provider is missing.', 'IMPORT_FORMAT');\n  }\n  const stringOrUndefined = (v: unknown, field: string): string | undefined =>\n    safeText(v, MAX_FIELD_LEN, field);\n  const createdAt = safeText(m.createdAt, MAX_FIELD_LEN, 'createdAt');\n  const updatedAt = safeText(m.updatedAt, MAX_FIELD_LEN, 'updatedAt');\n  return {\n    name,\n    provider,\n    createdAt: createdAt ?? new Date().toISOString(),\n    updatedAt: updatedAt ?? new Date().toISOString(),\n    label: stringOrUndefined(m.label, 'label'),\n    identity: stringOrUndefined(m.identity, 'identity'),\n    notes: stringOrUndefined(m.notes, 'notes'),\n    // Losing this on import would turn a user-supplied credential back into a\n    // native one, and activating it would then prune the machine's real login.\n    credentialKind: m.credentialKind === 'proxy-only' ? 'proxy-only' : undefined,\n  };\n}\n\n/** Reject terminal control/bidi characters in imported display metadata. */\nfunction safeText(value: unknown, maxLength: number, field: string): string | undefined {\n  if (typeof value !== 'string') {\n    return undefined;\n  }\n  if (value.length > maxLength) {\n    return undefined;\n  }\n  // C0/DEL includes newline, tabs, and ESC/OSC introducers. Bidi overrides\n  // can make a harmless-looking identity render as a different command/name.\n  if (/[\\p{Cc}\\p{Cf}]/u.test(value)) {\n    throw error(\n      `Import meta field \"${field}\" contains terminal control characters.`,\n      'IMPORT_FORMAT',\n    );\n  }\n  return value;\n}\n\nfunction decodeProxy(value: unknown): AccountProxyConfig {\n  if (typeof value !== 'object' || value === null || Array.isArray(value)) {\n    throw error('Account proxy config is not an object.', 'IMPORT_FORMAT');\n  }\n  const p = value as Record<string, unknown>;\n  // An imported envelope is untrusted. Do not carry activation state or\n  // provider-specific options across this boundary: options can contain\n  // upstream URLs, auth paths, or other values later passed to a spawned\n  // proxy. The user must explicitly enable/configure a proxy locally.\n  const port =\n    typeof p.port === 'number' && Number.isInteger(p.port) && p.port >= 0 && p.port <= 65535\n      ? p.port\n      : undefined;\n  const host = safeText(p.host, MAX_FIELD_LEN, 'proxy.host');\n  return {\n    enabled: false,\n    ...(port !== undefined ? { port } : {}),\n    ...(host !== undefined ? { host } : {}),\n  };\n}\n\nfunction decodeFiles(value: unknown): Record<string, string> {\n  if (typeof value !== 'object' || value === null || Array.isArray(value)) {\n    throw error('Import envelope is missing a files map.', 'IMPORT_FORMAT');\n  }\n  const entries = Object.entries(value as Record<string, unknown>);\n  if (entries.length === 0) {\n    throw error('Import envelope contains no files.', 'IMPORT_FORMAT');\n  }\n  if (entries.length > MAX_IMPORT_FILES) {\n    throw limit(`Import contains ${entries.length} files (max ${MAX_IMPORT_FILES}).`);\n  }\n\n  const out: Record<string, string> = {};\n  const seen = new Set<string>();\n  let total = 0;\n\n  for (const [key, content] of entries) {\n    if (typeof key !== 'string' || !key) {\n      throw error('Import file map contains an invalid key.', 'IMPORT_FORMAT');\n    }\n    // Pure path check (no staging root yet): reject empty / NUL / absolute /\n    // mixed-separator / traversal keys before any state is touched.\n    validateImportFileKey(key);\n    if (typeof content !== 'string') {\n      throw error(`Import file \"${key}\" content is not a base64 string.`, 'IMPORT_FORMAT');\n    }\n    // Reject non-base64 early (the decode below would otherwise accept garbage).\n    if (!/^[A-Za-z0-9+/=]+$/.test(content)) {\n      throw error(`Import file \"${key}\" is not valid base64.`, 'IMPORT_FORMAT');\n    }\n    let decoded: Buffer;\n    try {\n      decoded = Buffer.from(content, 'base64');\n    } catch {\n      throw error(`Import file \"${key}\" failed to decode as base64.`, 'IMPORT_FORMAT');\n    }\n    if (decoded.byteLength > MAX_IMPORT_FILE_BYTES) {\n      throw limit(`Import file \"${key}\" exceeds ${MAX_IMPORT_FILE_BYTES} bytes.`);\n    }\n    total += decoded.byteLength;\n    if (total > MAX_IMPORT_TOTAL_BYTES) {\n      throw limit(`Import total payload exceeds ${MAX_IMPORT_TOTAL_BYTES} bytes.`);\n    }\n\n    // Validate the key as a staging path now (cheap, before any write).\n    const normalized = normalize(key.split('\\\\').join('/'));\n    if (seen.has(normalized)) {\n      throw error(`Import contains a duplicate file path: ${key}.`, 'IMPORT_FORMAT');\n    }\n    // A file whose key is a path prefix of another file is a file/directory\n    // collision. Check both directions so validation is independent of JSON\n    // property order (`a` then `a/b`, or `a/b` then `a`).\n    if (\n      [...seen].some(\n        (existing) =>\n          normalized.startsWith(`${existing}/`) || existing.startsWith(`${normalized}/`),\n      )\n    ) {\n      throw error(`Import file path collides with another entry: ${key}.`, 'IMPORT_FORMAT');\n    }\n    seen.add(normalized);\n\n    out[key] = content;\n  }\n\n  return out;\n}\n\nfunction error(\n  message: string,\n  code: 'IMPORT_FORMAT' | 'IMPORT_LIMIT',\n  opts: { exitCode?: ExitCodeValue } = {},\n): AnyPickError {\n  return anypickError(message, code, {\n    exitCode: opts.exitCode ?? (code === 'IMPORT_LIMIT' ? 9 : 8),\n    mutated: false,\n  });\n}\n\nfunction limit(message: string): AnyPickError {\n  return error(message, 'IMPORT_LIMIT');\n}\n"],"mappings":";;AAmBA,IAAa,wBAAwB;;AAGrC,IAAa,mBAAmB;AAChC,IAAa,wBAAwB,KAAK,OAAO;AACjD,IAAa,yBAAyB,MAAM,OAAO;;AAEnD,IAAa,4BAA4B,MAAM,OAAO;AAEtD,IAAa,gBAAgB;;AAY7B,SAAgB,sBACd,KACA,oBACwB;CACxB,IAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,MAAM,QAAQ,GAAG,GAC9D,MAAM,MAAM,wCAAwC,eAAe;CAErE,MAAM,MAAM;CAEZ,IAAI,IAAI,SAAA,mBACN,MAAM,MAAM,+CAA+C,eAAe;CAE5E,IAAI,IAAI,YAAA,GACN,MAAM,MAAM,+BAA+B,KAAK,UAAU,IAAI,OAAO,EAAE,IAAI,eAAe;CAE5F,IAAI,OAAO,IAAI,SAAS,YAAY,IAAI,SAAS,QAAQ,MAAM,QAAQ,IAAI,IAAI,GAC7E,MAAM,MAAM,6CAA6C,eAAe;CAG1E,MAAM,OAAO,WAAW,IAAI,IAAI;CAChC,IAAI,KAAK,aAAa,oBACpB,MAAM,MACJ,6BAA6B,KAAK,SAAS,2CAA2C,mBAAmB,KACzG,iBACA,EAAE,UAAU,KAAA,EAAU,CACxB;CAGF,MAAM,QAAQ,IAAI,UAAU,KAAA,IAAY,OAAO,YAAY,IAAI,KAAK;CAEpE,IAAI,OAAO,IAAI,UAAU,YAAY,IAAI,UAAU,QAAQ,MAAM,QAAQ,IAAI,KAAK,GAChF,MAAM,MAAM,2CAA2C,eAAe;CAIxE,OAAO;EAAE,SAAS;EAAG,MAAM;EAAuB;EAAM;EAAO,OAFjD,YAAY,IAAI,KAEiC;CAAM;AACvE;;;;;;;;AASA,SAAgB,sBAAsB,KAAmB;CACvD,IAAI,CAAC,OAAO,IAAI,SAAS,IAAI,GAC3B,MAAM,MAAM,6BAA6B,KAAK,UAAU,GAAG,EAAE,IAAI,eAAe;CAElF,IAAI,WAAW,GAAG,GAChB,MAAM,MAAM,sCAAsC,IAAI,IAAI,eAAe;CAI3E,IAAI,kBAAkB,KAAK,GAAG,KAAK,IAAI,WAAW,MAAM,GACtD,MAAM,MAAM,sCAAsC,IAAI,IAAI,eAAe;CAG3E,IAAI,IAAI,SAAS,IAAI,KAAK,IAAI,SAAS,GAAG,GACxC,MAAM,MAAM,2CAA2C,IAAI,IAAI,eAAe;CAGhF,MAAM,aAAa,UAAU,IAAI,MAAM,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC;CACtD,IACE,eAAe,OACf,eAAe,QACf,WAAW,WAAW,KAAK,KAAK,KAChC,WAAW,SAAS,GAAG,IAAI,IAAI,KAAK,KACpC,WAAW,SAAS,GAAG,IAAI,GAAG,GAE9B,MAAM,MAAM,8CAA8C,IAAI,IAAI,eAAe;AAErF;;AAGA,SAAgB,eAAe,aAAqB,QAAwB;CAE1E,sBAAsB,MAAM;CAE5B,MAAM,MAAM,QAAQ,aADD,UAAU,OAAO,MAAM,IAAI,CAAC,CAAC,KAAK,GAAG,CACvB,CAAU;CAC3C,MAAM,OAAO,SAAS,QAAQ,WAAW,GAAG,GAAG;CAC/C,IAAI,KAAK,WAAW,IAAI,KAAK,WAAW,IAAI,GAC1C,MAAM,MAAM,8CAA8C,OAAO,IAAI,eAAe;CAEtF,OAAO;AACT;AAEA,SAAS,WAAW,OAA6B;CAC/C,IAAI,OAAO,UAAU,YAAY,UAAU,MACzC,MAAM,MAAM,kCAAkC,eAAe;CAE/D,MAAM,IAAI;CACV,MAAM,OAAO,SAAS,EAAE,MAAA,KAA4B,MAAM,KAAK;CAC/D,IAAI,CAAC,QAAQ,KAAK,SAAA,KAChB,MAAM,MAAM,6CAA6C,eAAe;CAE1E,MAAM,WAAW,SAAS,EAAE,UAAA,MAAyB,UAAU,KAAK;CACpE,IAAI,CAAC,UACH,MAAM,MAAM,qCAAqC,eAAe;CAElE,MAAM,qBAAqB,GAAY,UACrC,SAAS,GAAG,eAAe,KAAK;CAClC,MAAM,YAAY,SAAS,EAAE,WAAW,eAAe,WAAW;CAClE,MAAM,YAAY,SAAS,EAAE,WAAW,eAAe,WAAW;CAClE,OAAO;EACL;EACA;EACA,WAAW,8BAAa,IAAI,KAAK,EAAA,CAAE,YAAY;EAC/C,WAAW,8BAAa,IAAI,KAAK,EAAA,CAAE,YAAY;EAC/C,OAAO,kBAAkB,EAAE,OAAO,OAAO;EACzC,UAAU,kBAAkB,EAAE,UAAU,UAAU;EAClD,OAAO,kBAAkB,EAAE,OAAO,OAAO;EAGzC,gBAAgB,EAAE,mBAAmB,eAAe,eAAe,KAAA;CACrE;AACF;;AAGA,SAAS,SAAS,OAAgB,WAAmB,OAAmC;CACtF,IAAI,OAAO,UAAU,UACnB;CAEF,IAAI,MAAM,SAAS,WACjB;CAIF,IAAI,kBAAkB,KAAK,KAAK,GAC9B,MAAM,MACJ,sBAAsB,MAAM,0CAC5B,eACF;CAEF,OAAO;AACT;AAEA,SAAS,YAAY,OAAoC;CACvD,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GACpE,MAAM,MAAM,0CAA0C,eAAe;CAEvE,MAAM,IAAI;CAKV,MAAM,OACJ,OAAO,EAAE,SAAS,YAAY,OAAO,UAAU,EAAE,IAAI,KAAK,EAAE,QAAQ,KAAK,EAAE,QAAQ,QAC/E,EAAE,OACF,KAAA;CACN,MAAM,OAAO,SAAS,EAAE,MAAM,eAAe,YAAY;CACzD,OAAO;EACL,SAAS;EACT,GAAI,SAAS,KAAA,IAAY,EAAE,KAAK,IAAI,CAAC;EACrC,GAAI,SAAS,KAAA,IAAY,EAAE,KAAK,IAAI,CAAC;CACvC;AACF;AAEA,SAAS,YAAY,OAAwC;CAC3D,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GACpE,MAAM,MAAM,2CAA2C,eAAe;CAExE,MAAM,UAAU,OAAO,QAAQ,KAAgC;CAC/D,IAAI,QAAQ,WAAW,GACrB,MAAM,MAAM,sCAAsC,eAAe;CAEnE,IAAI,QAAQ,SAAA,MACV,MAAM,MAAM,mBAAmB,QAAQ,OAAO,cAAc,iBAAiB,GAAG;CAGlF,MAAM,MAA8B,CAAC;CACrC,MAAM,uBAAO,IAAI,IAAY;CAC7B,IAAI,QAAQ;CAEZ,KAAK,MAAM,CAAC,KAAK,YAAY,SAAS;EACpC,IAAI,OAAO,QAAQ,YAAY,CAAC,KAC9B,MAAM,MAAM,4CAA4C,eAAe;EAIzE,sBAAsB,GAAG;EACzB,IAAI,OAAO,YAAY,UACrB,MAAM,MAAM,gBAAgB,IAAI,oCAAoC,eAAe;EAGrF,IAAI,CAAC,oBAAoB,KAAK,OAAO,GACnC,MAAM,MAAM,gBAAgB,IAAI,yBAAyB,eAAe;EAE1E,IAAI;EACJ,IAAI;GACF,UAAU,OAAO,KAAK,SAAS,QAAQ;EACzC,QAAQ;GACN,MAAM,MAAM,gBAAgB,IAAI,gCAAgC,eAAe;EACjF;EACA,IAAI,QAAQ,aAAA,UACV,MAAM,MAAM,gBAAgB,IAAI,YAAY,sBAAsB,QAAQ;EAE5E,SAAS,QAAQ;EACjB,IAAI,QAAA,WACF,MAAM,MAAM,gCAAgC,uBAAuB,QAAQ;EAI7E,MAAM,aAAa,UAAU,IAAI,MAAM,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC;EACtD,IAAI,KAAK,IAAI,UAAU,GACrB,MAAM,MAAM,0CAA0C,IAAI,IAAI,eAAe;EAK/E,IACE,CAAC,GAAG,IAAI,CAAC,CAAC,MACP,aACC,WAAW,WAAW,GAAG,SAAS,EAAE,KAAK,SAAS,WAAW,GAAG,WAAW,EAAE,CACjF,GAEA,MAAM,MAAM,iDAAiD,IAAI,IAAI,eAAe;EAEtF,KAAK,IAAI,UAAU;EAEnB,IAAI,OAAO;CACb;CAEA,OAAO;AACT;AAEA,SAAS,MACP,SACA,MACA,OAAqC,CAAC,GACxB;CACd,OAAO,aAAa,SAAS,MAAM;EACjC,UAAU,KAAK,aAAa,SAAS,iBAAiB,IAAI;EAC1D,SAAS;CACX,CAAC;AACH;AAEA,SAAS,MAAM,SAA+B;CAC5C,OAAO,MAAM,SAAS,cAAc;AACtC"}

package/dist/core/account-transfer.d.ts

@@ -0,0 +1,20 @@
+import type { AccountMeta, Provider } from '../types.js';
+import type { AccountStore } from './store.js';
+export declare function collectSnapshotFiles(root: string): Promise<Record<string, string>>;
+export declare function writeSnapshotFiles(root: string, files: Record<string, string>): Promise<void>;
+/** Serialize a saved account to a portable, owner-only JSON envelope. */
+export declare function exportAccountEnvelope(store: AccountStore, providerId: string, name: string, outPath: string): Promise<void>;
+export interface ImportAccountDeps {
+    store: AccountStore;
+    provider: Provider;
+    /**
+     * Resolve the final account name after identity collision checks. Owned by
+     * AccountService because it also runs on save paths.
+     */
+    resolveIdentityTarget: (providerId: string, identity: string | undefined, accountName: string, force: boolean) => Promise<string>;
+}
+/** Decode, validate, and stage an account envelope under the provider. */
+export declare function importAccountEnvelope(deps: ImportAccountDeps, providerId: string, name: string, inPath: string, opts?: {
+    force?: boolean;
+}): Promise<AccountMeta>;
+//# sourceMappingURL=account-transfer.d.ts.map

package/dist/core/account-transfer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-transfer.d.ts","sourceRoot":"","sources":["../../src/core/account-transfer.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAMtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5C,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAmBxF;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC5B,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,yEAAyE;AACzE,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,YAAY,EACnB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,YAAY,CAAC;IACpB,QAAQ,EAAE,QAAQ,CAAC;IACnB;;;OAGG;IACH,qBAAqB,EAAE,CACrB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,OAAO,KACX,OAAO,CAAC,MAAM,CAAC,CAAC;CACtB;AAED,0EAA0E;AAC1E,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,iBAAiB,EACvB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7B,OAAO,CAAC,WAAW,CAAC,CAoGtB"}

package/dist/core/account-transfer.js

@@ -0,0 +1,136 @@
+import { DEFAULT_PROXY_CONFIG } from "../types/account.js";
+import { AnyPickError } from "../utils/errors.js";
+import { pathExists } from "../utils/fs.js";
+import { normalizeAccountName } from "../utils/slug.js";
+import { MAX_IMPORT_ENVELOPE_BYTES, decodeAccountEnvelope, stagedFilePath } from "./account-codec.js";
+import { dirname, join, relative } from "node:path";
+import { chmod, mkdir, mkdtemp, readFile, readdir, rename, rm, stat, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+//#region src/core/account-transfer.ts
+/**
+* Account export/import envelope I/O.
+*
+* Kept out of AccountService so the service stays focused on live-auth and
+* snapshot lifecycle; transfer is a separate boundary with its own SEC-01
+* validation (ADR 0002).
+*/
+async function collectSnapshotFiles(root) {
+	const out = {};
+	async function walk(dir) {
+		const entries = await readdir(dir, { withFileTypes: true });
+		for (const entry of entries) {
+			const full = join(dir, entry.name);
+			const rel = relative(root, full).split("\\").join("/");
+			if (entry.isDirectory()) await walk(full);
+			else if (entry.isFile()) {
+				const buf = await readFile(full);
+				out[rel] = buf.toString("base64");
+			}
+		}
+	}
+	if (await pathExists(root)) await walk(root);
+	return out;
+}
+async function writeSnapshotFiles(root, files) {
+	for (const [rel, b64] of Object.entries(files)) {
+		const dest = stagedFilePath(root, rel);
+		await mkdir(dirname(dest), { recursive: true });
+		await writeFile(dest, Buffer.from(b64, "base64"), { mode: 384 });
+	}
+}
+/** Serialize a saved account to a portable, owner-only JSON envelope. */
+async function exportAccountEnvelope(store, providerId, name, outPath) {
+	const account = await store.requireAccount(providerId, normalizeAccountName(name));
+	const files = await collectSnapshotFiles(account.snapshotDir);
+	const payload = {
+		version: 1,
+		kind: "anypick-account",
+		meta: account.meta,
+		proxy: account.proxy,
+		files
+	};
+	const stage = await mkdtemp(join(tmpdir(), "anypick-export-"));
+	const tmpPath = join(stage, "account.json");
+	await writeFile(tmpPath, `${JSON.stringify(payload, null, 2)}\n`, { mode: 384 });
+	try {
+		await rename(tmpPath, outPath);
+		await chmod(outPath, 384).catch(() => {});
+	} finally {
+		await rm(stage, {
+			recursive: true,
+			force: true
+		}).catch(() => {});
+	}
+	process.stderr.write(`Warning: exported account "${account.meta.name}" contains credentials. Store ${outPath} safely.\n`);
+}
+/** Decode, validate, and stage an account envelope under the provider. */
+async function importAccountEnvelope(deps, providerId, name, inPath, opts = {}) {
+	let accountName = normalizeAccountName(name);
+	if (!await pathExists(inPath)) throw new AnyPickError(`Import file not found: ${inPath}`, "IMPORT_MISSING");
+	let existing = await deps.store.getAccount(providerId, accountName);
+	if (existing && !opts.force) throw new AnyPickError(`Account "${accountName}" already exists. Use --force to overwrite.`, "ACCOUNT_EXISTS");
+	try {
+		if ((await stat(inPath)).size > 201326592) throw new AnyPickError(`Import file exceeds ${MAX_IMPORT_ENVELOPE_BYTES} bytes.`, {
+			code: "IMPORT_LIMIT",
+			mutated: false,
+			exitCode: 9
+		});
+	} catch (err) {
+		if (err instanceof AnyPickError) throw err;
+		throw new AnyPickError(`Unable to inspect import file: ${inPath}`, {
+			code: "IMPORT_MISSING",
+			mutated: false
+		});
+	}
+	const raw = await readFile(inPath, "utf8");
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch {
+		throw new AnyPickError("Import file is not valid JSON.", "IMPORT_FORMAT");
+	}
+	const envelope = decodeAccountEnvelope(parsed, providerId);
+	let identity = envelope.meta.identity;
+	let label = envelope.meta.label;
+	if (deps.provider.describeSnapshot) {
+		const inspectDir = await mkdtemp(join(tmpdir(), "anypick-import-inspect-"));
+		try {
+			await writeSnapshotFiles(inspectDir, envelope.files);
+			const described = await deps.provider.describeSnapshot(inspectDir);
+			identity = described.identity ?? identity;
+			label = described.label ?? label;
+		} finally {
+			await rm(inspectDir, {
+				recursive: true,
+				force: true
+			}).catch(() => {});
+		}
+	}
+	accountName = await deps.resolveIdentityTarget(providerId, identity, accountName, opts.force === true);
+	existing = await deps.store.getAccount(providerId, accountName);
+	const { snapshotDir } = await deps.store.prepareSnapshot(providerId, accountName);
+	await writeSnapshotFiles(snapshotDir, envelope.files);
+	const now = (/* @__PURE__ */ new Date()).toISOString();
+	const meta = {
+		name: accountName,
+		provider: providerId,
+		createdAt: existing?.meta.createdAt ?? envelope.meta.createdAt ?? now,
+		updatedAt: now,
+		label,
+		identity,
+		notes: envelope.meta.notes,
+		credentialKind: envelope.meta.credentialKind
+	};
+	await deps.store.writeMeta(meta);
+	if (envelope.proxy) await deps.store.setProxyConfig(providerId, accountName, {
+		...DEFAULT_PROXY_CONFIG,
+		...envelope.proxy,
+		enabled: false,
+		options: void 0
+	});
+	return meta;
+}
+//#endregion
+export { collectSnapshotFiles, exportAccountEnvelope, importAccountEnvelope, writeSnapshotFiles };
+
+//# sourceMappingURL=account-transfer.js.map

package/dist/core/account-transfer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-transfer.js","names":[],"sources":["../../src/core/account-transfer.ts"],"sourcesContent":["/**\n * Account export/import envelope I/O.\n *\n * Kept out of AccountService so the service stays focused on live-auth and\n * snapshot lifecycle; transfer is a separate boundary with its own SEC-01\n * validation (ADR 0002).\n */\nimport {\n  chmod,\n  mkdir,\n  mkdtemp,\n  readdir,\n  readFile,\n  rename,\n  rm,\n  stat,\n  writeFile,\n} from 'node:fs/promises';\nimport { dirname, join, relative } from 'node:path';\nimport { tmpdir } from 'node:os';\nimport type { AccountMeta, Provider } from '../types';\nimport { DEFAULT_PROXY_CONFIG } from '../types';\nimport { AnyPickError } from '../utils/errors';\nimport { pathExists } from '../utils/fs';\nimport { normalizeAccountName } from '../utils/slug';\nimport { decodeAccountEnvelope, MAX_IMPORT_ENVELOPE_BYTES, stagedFilePath } from './account-codec';\nimport type { AccountStore } from './store';\n\nexport async function collectSnapshotFiles(root: string): Promise<Record<string, string>> {\n  const out: Record<string, string> = {};\n  async function walk(dir: string): Promise<void> {\n    const entries = await readdir(dir, { withFileTypes: true });\n    for (const entry of entries) {\n      const full = join(dir, entry.name);\n      const rel = relative(root, full).split('\\\\').join('/');\n      if (entry.isDirectory()) {\n        await walk(full);\n      } else if (entry.isFile()) {\n        const buf = await readFile(full);\n        out[rel] = buf.toString('base64');\n      }\n    }\n  }\n  if (await pathExists(root)) {\n    await walk(root);\n  }\n  return out;\n}\n\nexport async function writeSnapshotFiles(\n  root: string,\n  files: Record<string, string>,\n): Promise<void> {\n  for (const [rel, b64] of Object.entries(files)) {\n    // Defense-in-depth: re-resolve each key against the staging root so a\n    // malformed key can never write outside `root` (SEC-01).\n    const dest = stagedFilePath(root, rel);\n    await mkdir(dirname(dest), { recursive: true });\n    await writeFile(dest, Buffer.from(b64, 'base64'), { mode: 0o600 });\n  }\n}\n\n/** Serialize a saved account to a portable, owner-only JSON envelope. */\nexport async function exportAccountEnvelope(\n  store: AccountStore,\n  providerId: string,\n  name: string,\n  outPath: string,\n): Promise<void> {\n  const account = await store.requireAccount(providerId, normalizeAccountName(name));\n  const files = await collectSnapshotFiles(account.snapshotDir);\n  const payload = {\n    version: 1 as const,\n    kind: 'anypick-account' as const,\n    meta: account.meta,\n    proxy: account.proxy,\n    files,\n  };\n\n  // SEC-01: write to an owner-only temp file, then atomically rename.\n  // Tighten the final mode even when overwriting an existing (permissive) file.\n  const stage = await mkdtemp(join(tmpdir(), 'anypick-export-'));\n  const tmpPath = join(stage, 'account.json');\n  await writeFile(tmpPath, `${JSON.stringify(payload, null, 2)}\\n`, { mode: 0o600 });\n  try {\n    await rename(tmpPath, outPath);\n    await chmod(outPath, 0o600).catch(() => {});\n  } finally {\n    await rm(stage, { recursive: true, force: true }).catch(() => {});\n  }\n  // Warn: the artifact carries live credentials.\n  process.stderr.write(\n    `Warning: exported account \"${account.meta.name}\" contains credentials. Store ${outPath} safely.\\n`,\n  );\n}\n\nexport interface ImportAccountDeps {\n  store: AccountStore;\n  provider: Provider;\n  /**\n   * Resolve the final account name after identity collision checks. Owned by\n   * AccountService because it also runs on save paths.\n   */\n  resolveIdentityTarget: (\n    providerId: string,\n    identity: string | undefined,\n    accountName: string,\n    force: boolean,\n  ) => Promise<string>;\n}\n\n/** Decode, validate, and stage an account envelope under the provider. */\nexport async function importAccountEnvelope(\n  deps: ImportAccountDeps,\n  providerId: string,\n  name: string,\n  inPath: string,\n  opts: { force?: boolean } = {},\n): Promise<AccountMeta> {\n  let accountName = normalizeAccountName(name);\n  if (!(await pathExists(inPath))) {\n    throw new AnyPickError(`Import file not found: ${inPath}`, 'IMPORT_MISSING');\n  }\n\n  let existing = await deps.store.getAccount(providerId, accountName);\n  if (existing && !opts.force) {\n    throw new AnyPickError(\n      `Account \"${accountName}\" already exists. Use --force to overwrite.`,\n      'ACCOUNT_EXISTS',\n    );\n  }\n\n  // SEC-01: reject an oversized file before read/JSON.parse, then decode +\n  // validate the *entire* envelope (provider ownership,\n  // every file path, base64, size/count limits) BEFORE any mutation. A\n  // rejection below leaves the DB, current snapshot, active account, and\n  // live auth completely unchanged.\n  try {\n    const size = (await stat(inPath)).size;\n    if (size > MAX_IMPORT_ENVELOPE_BYTES) {\n      throw new AnyPickError(`Import file exceeds ${MAX_IMPORT_ENVELOPE_BYTES} bytes.`, {\n        code: 'IMPORT_LIMIT',\n        mutated: false,\n        exitCode: 9,\n      });\n    }\n  } catch (err) {\n    if (err instanceof AnyPickError) {\n      throw err;\n    }\n    throw new AnyPickError(`Unable to inspect import file: ${inPath}`, {\n      code: 'IMPORT_MISSING',\n      mutated: false,\n    });\n  }\n  const raw = await readFile(inPath, 'utf8');\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    throw new AnyPickError('Import file is not valid JSON.', 'IMPORT_FORMAT');\n  }\n  const envelope = decodeAccountEnvelope(parsed, providerId);\n\n  let identity = envelope.meta.identity;\n  let label = envelope.meta.label;\n  if (deps.provider.describeSnapshot) {\n    // Inspect a disposable copy first. prepareSnapshot() can replace an\n    // existing snapshot, so identity conflicts must be found before it.\n    const inspectDir = await mkdtemp(join(tmpdir(), 'anypick-import-inspect-'));\n    try {\n      await writeSnapshotFiles(inspectDir, envelope.files);\n      const described = await deps.provider.describeSnapshot(inspectDir);\n      identity = described.identity ?? identity;\n      label = described.label ?? label;\n    } finally {\n      await rm(inspectDir, { recursive: true, force: true }).catch(() => {});\n    }\n  }\n  accountName = await deps.resolveIdentityTarget(\n    providerId,\n    identity,\n    accountName,\n    opts.force === true,\n  );\n  existing = await deps.store.getAccount(providerId, accountName);\n\n  // Stage into the live snapshot dir only after full validation and identity\n  // conflict checks.\n  const { snapshotDir } = await deps.store.prepareSnapshot(providerId, accountName);\n  await writeSnapshotFiles(snapshotDir, envelope.files);\n\n  const now = new Date().toISOString();\n  const meta: AccountMeta = {\n    name: accountName,\n    provider: providerId,\n    createdAt: existing?.meta.createdAt ?? envelope.meta.createdAt ?? now,\n    updatedAt: now,\n    label,\n    identity,\n    notes: envelope.meta.notes,\n    credentialKind: envelope.meta.credentialKind,\n  };\n  await deps.store.writeMeta(meta);\n\n  // Imported proxies are always disabled and provider-specific options are\n  // intentionally dropped by the codec. Starting a proxy is an explicit\n  // local action, never something an imported file can trigger.\n  if (envelope.proxy) {\n    await deps.store.setProxyConfig(providerId, accountName, {\n      ...DEFAULT_PROXY_CONFIG,\n      ...envelope.proxy,\n      enabled: false,\n      options: undefined,\n    });\n  }\n\n  return meta;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA4BA,eAAsB,qBAAqB,MAA+C;CACxF,MAAM,MAA8B,CAAC;CACrC,eAAe,KAAK,KAA4B;EAC9C,MAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;EAC1D,KAAK,MAAM,SAAS,SAAS;GAC3B,MAAM,OAAO,KAAK,KAAK,MAAM,IAAI;GACjC,MAAM,MAAM,SAAS,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,GAAG;GACrD,IAAI,MAAM,YAAY,GACpB,MAAM,KAAK,IAAI;QACV,IAAI,MAAM,OAAO,GAAG;IACzB,MAAM,MAAM,MAAM,SAAS,IAAI;IAC/B,IAAI,OAAO,IAAI,SAAS,QAAQ;GAClC;EACF;CACF;CACA,IAAI,MAAM,WAAW,IAAI,GACvB,MAAM,KAAK,IAAI;CAEjB,OAAO;AACT;AAEA,eAAsB,mBACpB,MACA,OACe;CACf,KAAK,MAAM,CAAC,KAAK,QAAQ,OAAO,QAAQ,KAAK,GAAG;EAG9C,MAAM,OAAO,eAAe,MAAM,GAAG;EACrC,MAAM,MAAM,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;EAC9C,MAAM,UAAU,MAAM,OAAO,KAAK,KAAK,QAAQ,GAAG,EAAE,MAAM,IAAM,CAAC;CACnE;AACF;;AAGA,eAAsB,sBACpB,OACA,YACA,MACA,SACe;CACf,MAAM,UAAU,MAAM,MAAM,eAAe,YAAY,qBAAqB,IAAI,CAAC;CACjF,MAAM,QAAQ,MAAM,qBAAqB,QAAQ,WAAW;CAC5D,MAAM,UAAU;EACd,SAAS;EACT,MAAM;EACN,MAAM,QAAQ;EACd,OAAO,QAAQ;EACf;CACF;CAIA,MAAM,QAAQ,MAAM,QAAQ,KAAK,OAAO,GAAG,iBAAiB,CAAC;CAC7D,MAAM,UAAU,KAAK,OAAO,cAAc;CAC1C,MAAM,UAAU,SAAS,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC;CACjF,IAAI;EACF,MAAM,OAAO,SAAS,OAAO;EAC7B,MAAM,MAAM,SAAS,GAAK,CAAC,CAAC,YAAY,CAAC,CAAC;CAC5C,UAAU;EACR,MAAM,GAAG,OAAO;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;CAClE;CAEA,QAAQ,OAAO,MACb,8BAA8B,QAAQ,KAAK,KAAK,gCAAgC,QAAQ,WAC1F;AACF;;AAkBA,eAAsB,sBACpB,MACA,YACA,MACA,QACA,OAA4B,CAAC,GACP;CACtB,IAAI,cAAc,qBAAqB,IAAI;CAC3C,IAAI,CAAE,MAAM,WAAW,MAAM,GAC3B,MAAM,IAAI,aAAa,0BAA0B,UAAU,gBAAgB;CAG7E,IAAI,WAAW,MAAM,KAAK,MAAM,WAAW,YAAY,WAAW;CAClE,IAAI,YAAY,CAAC,KAAK,OACpB,MAAM,IAAI,aACR,YAAY,YAAY,8CACxB,gBACF;CAQF,IAAI;EAEF,KADc,MAAM,KAAK,MAAM,EAAA,CAAG,OAAA,WAEhC,MAAM,IAAI,aAAa,uBAAuB,0BAA0B,UAAU;GAChF,MAAM;GACN,SAAS;GACT,UAAU;EACZ,CAAC;CAEL,SAAS,KAAK;EACZ,IAAI,eAAe,cACjB,MAAM;EAER,MAAM,IAAI,aAAa,kCAAkC,UAAU;GACjE,MAAM;GACN,SAAS;EACX,CAAC;CACH;CACA,MAAM,MAAM,MAAM,SAAS,QAAQ,MAAM;CACzC,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,GAAG;CACzB,QAAQ;EACN,MAAM,IAAI,aAAa,kCAAkC,eAAe;CAC1E;CACA,MAAM,WAAW,sBAAsB,QAAQ,UAAU;CAEzD,IAAI,WAAW,SAAS,KAAK;CAC7B,IAAI,QAAQ,SAAS,KAAK;CAC1B,IAAI,KAAK,SAAS,kBAAkB;EAGlC,MAAM,aAAa,MAAM,QAAQ,KAAK,OAAO,GAAG,yBAAyB,CAAC;EAC1E,IAAI;GACF,MAAM,mBAAmB,YAAY,SAAS,KAAK;GACnD,MAAM,YAAY,MAAM,KAAK,SAAS,iBAAiB,UAAU;GACjE,WAAW,UAAU,YAAY;GACjC,QAAQ,UAAU,SAAS;EAC7B,UAAU;GACR,MAAM,GAAG,YAAY;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;EACvE;CACF;CACA,cAAc,MAAM,KAAK,sBACvB,YACA,UACA,aACA,KAAK,UAAU,IACjB;CACA,WAAW,MAAM,KAAK,MAAM,WAAW,YAAY,WAAW;CAI9D,MAAM,EAAE,gBAAgB,MAAM,KAAK,MAAM,gBAAgB,YAAY,WAAW;CAChF,MAAM,mBAAmB,aAAa,SAAS,KAAK;CAEpD,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;CACnC,MAAM,OAAoB;EACxB,MAAM;EACN,UAAU;EACV,WAAW,UAAU,KAAK,aAAa,SAAS,KAAK,aAAa;EAClE,WAAW;EACX;EACA;EACA,OAAO,SAAS,KAAK;EACrB,gBAAgB,SAAS,KAAK;CAChC;CACA,MAAM,KAAK,MAAM,UAAU,IAAI;CAK/B,IAAI,SAAS,OACX,MAAM,KAAK,MAAM,eAAe,YAAY,aAAa;EACvD,GAAG;EACH,GAAG,SAAS;EACZ,SAAS;EACT,SAAS,KAAA;CACX,CAAC;CAGH,OAAO;AACT"}

package/dist/core/activation-executor.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Execute activation plans transactionally (spec §P7, §23).
+ * Journals only serializable ResourceRef values — never adapter instances.
+ */
+import type { ActivationPlan, GlobalBinding, ProjectBinding } from '../types.js';
+import type { OperationJournal } from './journal.js';
+import type { LeaseStore } from './lease-store.js';
+import type { AccountService } from './service.js';
+import type { RuntimeService } from './runtime-service.js';
+import { type ResolveSourceDeps } from './resolve-source.js';
+import type { ProxyService } from './proxy-service.js';
+import { type AnyPickEventSink } from './events.js';
+export interface ExecuteResult {
+    plan: ActivationPlan;
+    dryRun: boolean;
+    alreadyActive: boolean;
+    binding?: GlobalBinding | ProjectBinding;
+    proxyEndpoint?: string;
+    journalId?: string;
+    childExitCode?: number;
+    /** Ephemeral isolated runtime (spec §9.7.1) — must be cleaned up by caller. */
+    isolated?: {
+        directory: string;
+        environment: Record<string, string>;
+        args?: string[];
+        cleanup: () => Promise<void>;
+    };
+    /** Scoped rollback for a successful ephemeral run. Idempotent. */
+    cleanup?: () => Promise<void>;
+}
+export interface ExecutorDeps extends ResolveSourceDeps {
+    journal: OperationJournal;
+    leases: LeaseStore;
+    runtime: RuntimeService;
+    accounts: AccountService;
+    proxy: ProxyService;
+    /**
+     * Structured sink for degraded-state conditions (OBS-01). Optional.
+     * Named `eventSink` rather than `events` so an entire `AnyPickApp` (whose
+     * `events` is a `{ sink, emit, list }` facade) can still be passed where
+     * `ExecutorDeps` is expected without a structural type collision.
+     */
+    eventSink?: AnyPickEventSink;
+}
+export interface ExecuteOptions {
+    dryRun?: boolean;
+    verbose?: boolean;
+    projectRoot?: string;
+    /** Report an equal persistent binding as already active after it is safely re-applied. */
+    skipIfActive?: boolean;
+    /** Budget for the WaitForHealth step. Lowered by tests; defaults to 5s. */
+    healthTimeoutMs?: number;
+}
+export declare function executeActivation(plan: ActivationPlan, deps: ExecutorDeps, opts?: ExecuteOptions): Promise<ExecuteResult>;
+export interface RecoveryDeps extends Pick<ExecutorDeps, 'journal'> {
+    /** When present, recovery re-resolves source adapters from journal ResourceRefs. */
+    resolve?: ResolveSourceDeps;
+    /** Structured event sink for refusing recovery that cannot be made exact (OBS-01). */
+    events?: AnyPickEventSink;
+}
+export interface RecoveryResult {
+    recovered: number;
+    failed: string[];
+    /** Entries where source/adapter could not be re-resolved exactly (no forward exec). */
+    refused: string[];
+}
+/**
+ * Startup recovery: re-resolve adapters from stored ResourceRef values;
+ * complete exact rollbacks when possible; never substitute another source (spec §23.4).
+ */
+export declare function recoverIncompleteOperations(deps: RecoveryDeps): Promise<RecoveryResult>;
+//# sourceMappingURL=activation-executor.d.ts.map

package/dist/core/activation-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activation-executor.d.ts","sourceRoot":"","sources":["../../src/core/activation-executor.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EAEb,cAAc,EAGf,MAAM,UAAU,CAAC;AAElB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,KAAK,EAAwB,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAMpD,OAAO,EAAe,KAAK,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE9D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,CAAC,EAAE,aAAa,GAAG,cAAc,CAAC;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE;QACT,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;KAC9B,CAAC;IACF,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,YAAa,SAAQ,iBAAiB;IACrD,OAAO,EAAE,gBAAgB,CAAC;IAC1B,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,cAAc,CAAC;IACxB,QAAQ,EAAE,cAAc,CAAC;IACzB,KAAK,EAAE,YAAY,CAAC;IACpB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0FAA0F;IAC1F,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,2EAA2E;IAC3E,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AA2CD,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,YAAY,EAClB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,aAAa,CAAC,CA2BxB;AAu2BD,MAAM,WAAW,YAAa,SAAQ,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC;IACjE,oFAAoF;IACpF,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,sFAAsF;IACtF,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,uFAAuF;IACvF,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AA4BD;;;GAGG;AACH,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CA6I7F"}