anypick 1.0.0

package/dist/core/codex-live-config.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Publish the active AnyPick Codex route into the user's base `~/.codex/config.toml`
+ * so plain `codex` (and the desktop app, where it honors config) routes through
+ * the proxy / gateway / Proxy Hub without a `--profile` flag.
+ *
+ * Codex routes globally: the top-level `model_provider` selects ONE provider that
+ * serves the top-level `model`, so exactly one live provider is published.
+ *
+ * **Binding is the source of truth.** A hub route left attached for Claude (or a
+ * stale `global/codex` after switching Codex off the Hub) must not takeover
+ * Codex's top-level config. Resolve follows the global Codex binding only.
+ *
+ * Takeover policy: while mode is `routed`, the live managed block owns top-level
+ * `model` / `model_provider`. The user's previous values are stashed on first
+ * takeover and restored when mode flips to `native` (native account) or when
+ * the live block is cleared (reset / nothing active).
+ */
+import type { Account, Provider, ProxyHubStatus, ResourceRef } from '../types.js';
+import type { ProxyHubRouteSecret } from './proxy-hub-store.js';
+import { type LiveCodexProvider } from '../clients/codex.js';
+export interface CodexLiveConfigDeps {
+    hub: {
+        getAttachedRoute(routeId: string): ProxyHubRouteSecret | null;
+        status(name?: string): Promise<ProxyHubStatus>;
+    };
+    proxy: {
+        listProxyRows(): Promise<Array<{
+            provider: string;
+            name: string;
+            active: boolean;
+            status: {
+                running: boolean;
+                endpoint?: string;
+            };
+        }>>;
+    };
+    accounts: {
+        getAccount(provider: string, name: string): Promise<Account | null>;
+        readProxyState(provider: string, name: string): Promise<{
+            token?: string;
+        } | null>;
+    };
+    accountRegistry: {
+        get(providerId: string): Provider | undefined;
+    };
+    /**
+     * Global Codex binding. When absent, live config clears rather than guessing
+     * from leftover hub routes or any running proxy. `modelId` seeds top-level
+     * `model` so Desktop/CLI open on a real Hub model, not a stock GPT id.
+     * `modelRoles` (Default + List 2–5) pins Desktop picker slots when set.
+     */
+    getCodexSource?: () => ResourceRef | null;
+    getCodexModelId?: () => string | undefined;
+    getCodexModelRoles?: () => Record<string, string> | undefined;
+    home?: string;
+    log?: (message: string) => void;
+}
+/**
+ * Publish an explicit route (gateway activation) and mark mode as routed.
+ * Used when resolveActiveProvider cannot see the source (gateways are not
+ * process-backed the way proxies are).
+ */
+export declare function publishCodexLiveRoute(deps: CodexLiveConfigDeps, provider: LiveCodexProvider): Promise<void>;
+/**
+ * Mark Codex as native (ChatGPT account) and restore the user's top-level
+ * model / model_provider defaults. Proxy lifecycle re-sync will no-op while
+ * mode stays native.
+ */
+export declare function restoreCodexLiveForNative(deps: CodexLiveConfigDeps): Promise<void>;
+export interface SyncCodexLiveOptions {
+    /**
+     * Activation just bound Codex to a proxy/hub: flip mode to routed even if
+     * the previous binding was a native account. Proxy lifecycle events leave
+     * this unset so they never undo a native restore.
+     */
+    forceRouted?: boolean;
+}
+/**
+ * Re-render the live managed block from the current active route. Best-effort:
+ * never throws — sync is a convenience that must not break activation.
+ *
+ * When mode is `native` (and `forceRouted` is not set), leaves config alone so
+ * a still-running proxy cannot re-takeover after the user switched to native.
+ * When mode is `routed` (or unset with a resolvable provider), takes over
+ * top-level `model_provider`.
+ */
+export declare function syncCodexLiveConfig(deps: CodexLiveConfigDeps, opts?: SyncCodexLiveOptions): Promise<void>;
+/** Remove the live managed block, restore stashed defaults, drop sidecars. */
+export declare function clearCodexLiveConfig(deps: CodexLiveConfigDeps, opts?: {
+    keepMode?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=codex-live-config.d.ts.map

package/dist/core/codex-live-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-live-config.d.ts","sourceRoot":"","sources":["../../src/core/codex-live-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC/E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAgBL,KAAK,iBAAiB,EAGvB,MAAM,kBAAkB,CAAC;AAe1B,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE;QACH,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAAC;QAC9D,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;KAChD,CAAC;IACF,KAAK,EAAE;QACL,aAAa,IAAI,OAAO,CACtB,KAAK,CAAC;YACJ,QAAQ,EAAE,MAAM,CAAC;YACjB,IAAI,EAAE,MAAM,CAAC;YACb,MAAM,EAAE,OAAO,CAAC;YAChB,MAAM,EAAE;gBAAE,OAAO,EAAE,OAAO,CAAC;gBAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;aAAE,CAAC;SACjD,CAAC,CACH,CAAC;KACH,CAAC;IACF,QAAQ,EAAE;QACR,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;QACpE,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC,CAAC;KACpF,CAAC;IACF,eAAe,EAAE;QACf,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;KAC/C,CAAC;IACF;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,WAAW,GAAG,IAAI,CAAC;IAC1C,eAAe,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IAC3C,kBAAkB,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAiND;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,mBAAmB,EACzB,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;;GAIG;AACH,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAOxF;AAED,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,mBAAmB,EACzB,IAAI,GAAE,oBAAyB,GAC9B,OAAO,CAAC,IAAI,CAAC,CA6Bf;AA2ED,8EAA8E;AAC9E,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,mBAAmB,EACzB,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAO,GAChC,OAAO,CAAC,IAAI,CAAC,CA6Bf"}

package/dist/core/codex-live-config.js

@@ -0,0 +1,263 @@
+import { pathExists, writeJsonFile, writeTextFile } from "../utils/fs.js";
+import { accountAdapterFor } from "../sources/account-adapters.js";
+import { buildLiveCatalog, codexLiveCatalogPath, codexLiveModePath, codexLiveRoutePath, codexProfileName, codexUserDefaultsStashPath, configTomlPath, extractUserTopLevelDefaults, hasTopLevelKeyOutsideLiveBlock, liveRouteCatalogModels, prepareConfigForLiveTakeover, renderLiveManagedBlock, restoreUserTopLevelDefaults, upsertLiveBlock } from "../clients/codex.js";
+import { assignDesktopAliases, desktopAwareRouteModels, desktopConfigModelId, loadNativeListSlots, orderHubModelsForDesktop, preferredHubModelsFromRoles } from "../clients/codex-desktop-catalog.js";
+import { readFile, rm } from "node:fs/promises";
+//#region src/core/codex-live-config.ts
+/**
+* Publish the active AnyPick Codex route into the user's base `~/.codex/config.toml`
+* so plain `codex` (and the desktop app, where it honors config) routes through
+* the proxy / gateway / Proxy Hub without a `--profile` flag.
+*
+* Codex routes globally: the top-level `model_provider` selects ONE provider that
+* serves the top-level `model`, so exactly one live provider is published.
+*
+* **Binding is the source of truth.** A hub route left attached for Claude (or a
+* stale `global/codex` after switching Codex off the Hub) must not takeover
+* Codex's top-level config. Resolve follows the global Codex binding only.
+*
+* Takeover policy: while mode is `routed`, the live managed block owns top-level
+* `model` / `model_provider`. The user's previous values are stashed on first
+* takeover and restored when mode flips to `native` (native account) or when
+* the live block is cleared (reset / nothing active).
+*/
+/** Persistent Proxy Hub route id for a client (see activation-planner.ts). */
+var HUB_ROUTE_ID = "global/codex";
+/**
+* Resolve the single active route Codex should point at from its binding, or
+* `null` when there is nothing worth publishing.
+*/
+async function resolveActiveProvider(deps) {
+	const source = deps.getCodexSource?.() ?? null;
+	if (!source) return null;
+	if (source.kind === "proxy-hub") return resolveHubProvider(deps, source.name);
+	if (source.kind === "account") return resolveAccountProxyProvider(deps, source.provider, source.name);
+	if (source.kind === "account-pool") return resolvePoolProxyProvider(deps, source.provider);
+	if (source.kind === "gateway") {
+		const sticky = await readStoredLiveRoute(deps.home);
+		if (sticky && sticky.source === `gateway:${source.name}`) return sticky;
+		return null;
+	}
+	return null;
+}
+async function resolveHubProvider(deps, hubName) {
+	const route = deps.hub.getAttachedRoute(HUB_ROUTE_ID);
+	if (route && route.manifest.client === "codex" && route.manifest.hub === hubName) {
+		const status = await deps.hub.status(route.manifest.hub);
+		if (status.running && status.endpoint) return {
+			source: `hub:${route.manifest.hub}`,
+			endpoint: status.endpoint,
+			token: route.token
+		};
+	}
+	const sticky = await readStoredLiveRoute(deps.home);
+	if (sticky && sticky.source === `hub:${hubName}`) return sticky;
+	return null;
+}
+async function resolveAccountProxyProvider(deps, providerId, accountName) {
+	const row = (await deps.proxy.listProxyRows()).find((candidate) => candidate.provider === providerId && candidate.name === accountName && candidate.status.running && candidate.status.endpoint);
+	if (!row?.status.endpoint) return null;
+	const account = await deps.accounts.getAccount(providerId, accountName);
+	const provider = deps.accountRegistry.get(providerId);
+	if (!account || !provider) return null;
+	const transport = accountAdapterFor(provider, account).transportFor("codex");
+	if (transport !== "managed_builtin_proxy" && transport !== "managed_external_proxy") return null;
+	const state = await deps.accounts.readProxyState(providerId, accountName);
+	if (!state?.token) return null;
+	return {
+		source: `${providerId}/${accountName}`,
+		endpoint: row.status.endpoint,
+		token: state.token
+	};
+}
+async function resolvePoolProxyProvider(deps, providerId) {
+	const row = (await deps.proxy.listProxyRows()).find((candidate) => candidate.provider === providerId && (candidate.name === "pool" || candidate.name === "*") && candidate.status.running && candidate.status.endpoint);
+	if (!row?.status.endpoint) return null;
+	const sticky = await readStoredLiveRoute(deps.home);
+	if (sticky && (sticky.source === `pool:${providerId}` || sticky.source.startsWith(`${providerId}/`))) return {
+		...sticky,
+		endpoint: row.status.endpoint,
+		source: `pool:${providerId}`
+	};
+	return null;
+}
+async function readFileSafe(path) {
+	try {
+		return await readFile(path, "utf8");
+	} catch {
+		return "";
+	}
+}
+async function readLiveMode(home) {
+	const path = codexLiveModePath(home);
+	if (!await pathExists(path)) return null;
+	try {
+		const raw = JSON.parse(await readFile(path, "utf8"));
+		return raw.mode === "routed" || raw.mode === "native" ? raw.mode : null;
+	} catch {
+		return null;
+	}
+}
+async function writeLiveMode(mode, home) {
+	await writeJsonFile(codexLiveModePath(home), {
+		version: 1,
+		mode
+	}, 384);
+}
+async function readStash(home) {
+	const path = codexUserDefaultsStashPath(home);
+	if (!await pathExists(path)) return null;
+	try {
+		const raw = JSON.parse(await readFile(path, "utf8"));
+		return raw?.version === 1 ? raw : null;
+	} catch {
+		return null;
+	}
+}
+async function ensureStash(content, home) {
+	const path = codexUserDefaultsStashPath(home);
+	if (await pathExists(path)) return;
+	await writeJsonFile(path, extractUserTopLevelDefaults(content), 384);
+}
+async function readStoredLiveRoute(home) {
+	const path = codexLiveRoutePath(home);
+	if (!await pathExists(path)) return null;
+	try {
+		const raw = JSON.parse(await readFile(path, "utf8"));
+		if (raw?.version !== 1 || !raw.source || !raw.endpoint || !raw.token) return null;
+		return {
+			source: raw.source,
+			endpoint: raw.endpoint,
+			token: raw.token,
+			defaultModel: raw.defaultModel
+		};
+	} catch {
+		return null;
+	}
+}
+async function writeStoredLiveRoute(provider, home) {
+	const payload = {
+		version: 1,
+		source: provider.source,
+		endpoint: provider.endpoint,
+		token: provider.token,
+		...provider.defaultModel ? { defaultModel: provider.defaultModel } : {}
+	};
+	await writeJsonFile(codexLiveRoutePath(home), payload, 384);
+}
+/**
+* Publish an explicit route (gateway activation) and mark mode as routed.
+* Used when resolveActiveProvider cannot see the source (gateways are not
+* process-backed the way proxies are).
+*/
+async function publishCodexLiveRoute(deps, provider) {
+	try {
+		await writeLiveMode("routed", deps.home);
+		await writeStoredLiveRoute(provider, deps.home);
+		await writeLiveTakeover(deps, provider);
+	} catch (error) {
+		deps.log?.(`Codex live config publish failed: ${errorMessage(error)}`);
+	}
+}
+/**
+* Mark Codex as native (ChatGPT account) and restore the user's top-level
+* model / model_provider defaults. Proxy lifecycle re-sync will no-op while
+* mode stays native.
+*/
+async function restoreCodexLiveForNative(deps) {
+	try {
+		await writeLiveMode("native", deps.home);
+		await clearCodexLiveConfig(deps, { keepMode: true });
+	} catch (error) {
+		deps.log?.(`Codex live config native restore failed: ${errorMessage(error)}`);
+	}
+}
+/**
+* Re-render the live managed block from the current active route. Best-effort:
+* never throws — sync is a convenience that must not break activation.
+*
+* When mode is `native` (and `forceRouted` is not set), leaves config alone so
+* a still-running proxy cannot re-takeover after the user switched to native.
+* When mode is `routed` (or unset with a resolvable provider), takes over
+* top-level `model_provider`.
+*/
+async function syncCodexLiveConfig(deps, opts = {}) {
+	try {
+		if (opts.forceRouted) await writeLiveMode("routed", deps.home);
+		const mode = await readLiveMode(deps.home);
+		if (mode === "native" && !opts.forceRouted) return;
+		const provider = await resolveActiveProvider(deps);
+		if (!provider) {
+			await clearCodexLiveConfig(deps, { keepMode: true });
+			return;
+		}
+		if (mode !== "routed") await writeLiveMode("routed", deps.home);
+		await writeStoredLiveRoute(provider, deps.home);
+		await writeLiveTakeover(deps, provider);
+	} catch (error) {
+		deps.log?.(`Codex live config sync failed: ${errorMessage(error)}`);
+	}
+}
+async function writeLiveTakeover(deps, provider) {
+	const configPath = configTomlPath(deps.home);
+	const catalogPath = codexLiveCatalogPath(deps.home);
+	const profileName = codexProfileName(provider.source);
+	const preferredFromRoles = preferredHubModelsFromRoles(deps.getCodexModelRoles?.());
+	const preferredHubModel = preferredFromRoles[0] || provider.defaultModel?.trim() || deps.getCodexModelId?.()?.trim() || void 0;
+	const preferredList = preferredFromRoles.length > 0 ? preferredFromRoles : preferredHubModel ? [preferredHubModel] : [];
+	const models = await liveRouteCatalogModels({
+		endpoint: provider.endpoint,
+		token: provider.token,
+		defaultModel: preferredHubModel
+	});
+	const isHub = provider.source.startsWith("hub:");
+	let catalogModels = models;
+	let configModel = preferredHubModel;
+	if (isHub && models.length > 0) {
+		const nativeSlots = loadNativeListSlots();
+		const aliases = assignDesktopAliases(orderHubModelsForDesktop(models.map((model) => model.slug), preferredList), nativeSlots);
+		catalogModels = desktopAwareRouteModels(models, aliases, nativeSlots);
+		configModel = desktopConfigModelId(preferredHubModel, aliases) ?? preferredHubModel;
+		deps.log?.(`Codex Desktop: aliased ${aliases.length} Hub model(s) onto native GPT picker slots` + (aliases[0] ? ` (e.g. ${aliases[0].nativeSlug} → ${aliases[0].hubModel})` : ""));
+	}
+	await writeJsonFile(catalogPath, buildLiveCatalog(catalogModels, profileName), 384);
+	const existing = await readFileSafe(configPath);
+	await ensureStash(existing, deps.home);
+	const includeCatalog = !hasTopLevelKeyOutsideLiveBlock(existing, "model_catalog_json");
+	if (!includeCatalog) deps.log?.(`Codex: keeping your own model_catalog_json in ${configPath}; routed models are not auto-listed. Use: codex --profile ${profileName}`);
+	const next = upsertLiveBlock(prepareConfigForLiveTakeover(existing), renderLiveManagedBlock({
+		...provider,
+		defaultModel: configModel
+	}, catalogPath, { includeCatalog }));
+	if (next !== existing) await writeTextFile(configPath, next, 384);
+}
+/** Remove the live managed block, restore stashed defaults, drop sidecars. */
+async function clearCodexLiveConfig(deps, opts = {}) {
+	try {
+		await rm(codexLiveCatalogPath(deps.home), { force: true });
+		await rm(codexLiveRoutePath(deps.home), { force: true });
+		if (!opts.keepMode) await rm(codexLiveModePath(deps.home), { force: true });
+		const stash = await readStash(deps.home);
+		const stashPath = codexUserDefaultsStashPath(deps.home);
+		const configPath = configTomlPath(deps.home);
+		if (!await pathExists(configPath)) {
+			await rm(stashPath, { force: true });
+			return;
+		}
+		const existing = await readFileSafe(configPath);
+		const next = restoreUserTopLevelDefaults(existing, stash);
+		await rm(stashPath, { force: true });
+		if (next === existing) return;
+		if (next.trim().length === 0) await rm(configPath, { force: true });
+		else await writeTextFile(configPath, next, 384);
+	} catch (error) {
+		deps.log?.(`Codex live config cleanup failed: ${errorMessage(error)}`);
+	}
+}
+function errorMessage(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+//#endregion
+export { clearCodexLiveConfig, publishCodexLiveRoute, restoreCodexLiveForNative, syncCodexLiveConfig };
+
+//# sourceMappingURL=codex-live-config.js.map

package/dist/core/codex-live-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-live-config.js","names":[],"sources":["../../src/core/codex-live-config.ts"],"sourcesContent":["/**\n * Publish the active AnyPick Codex route into the user's base `~/.codex/config.toml`\n * so plain `codex` (and the desktop app, where it honors config) routes through\n * the proxy / gateway / Proxy Hub without a `--profile` flag.\n *\n * Codex routes globally: the top-level `model_provider` selects ONE provider that\n * serves the top-level `model`, so exactly one live provider is published.\n *\n * **Binding is the source of truth.** A hub route left attached for Claude (or a\n * stale `global/codex` after switching Codex off the Hub) must not takeover\n * Codex's top-level config. Resolve follows the global Codex binding only.\n *\n * Takeover policy: while mode is `routed`, the live managed block owns top-level\n * `model` / `model_provider`. The user's previous values are stashed on first\n * takeover and restored when mode flips to `native` (native account) or when\n * the live block is cleared (reset / nothing active).\n */\n\nimport { readFile, rm } from 'node:fs/promises';\nimport type { Account, Provider, ProxyHubStatus, ResourceRef } from '../types';\nimport type { ProxyHubRouteSecret } from './proxy-hub-store';\nimport {\n  buildLiveCatalog,\n  codexLiveCatalogPath,\n  codexLiveModePath,\n  codexLiveRoutePath,\n  codexProfileName,\n  codexUserDefaultsStashPath,\n  configTomlPath,\n  extractUserTopLevelDefaults,\n  hasTopLevelKeyOutsideLiveBlock,\n  liveRouteCatalogModels,\n  prepareConfigForLiveTakeover,\n  renderLiveManagedBlock,\n  restoreUserTopLevelDefaults,\n  type CodexLiveMode,\n  type CodexUserDefaultsStash,\n  type LiveCodexProvider,\n  type StoredLiveRoute,\n  upsertLiveBlock,\n} from '../clients/codex';\nimport {\n  assignDesktopAliases,\n  desktopAwareRouteModels,\n  desktopConfigModelId,\n  loadNativeListSlots,\n  orderHubModelsForDesktop,\n  preferredHubModelsFromRoles,\n} from '../clients/codex-desktop-catalog';\nimport { accountAdapterFor } from '../sources/account-adapters';\nimport { pathExists, writeJsonFile, writeTextFile } from '../utils/fs';\n\n/** Persistent Proxy Hub route id for a client (see activation-planner.ts). */\nconst HUB_ROUTE_ID = 'global/codex';\n\nexport interface CodexLiveConfigDeps {\n  hub: {\n    getAttachedRoute(routeId: string): ProxyHubRouteSecret | null;\n    status(name?: string): Promise<ProxyHubStatus>;\n  };\n  proxy: {\n    listProxyRows(): Promise<\n      Array<{\n        provider: string;\n        name: string;\n        active: boolean;\n        status: { running: boolean; endpoint?: string };\n      }>\n    >;\n  };\n  accounts: {\n    getAccount(provider: string, name: string): Promise<Account | null>;\n    readProxyState(provider: string, name: string): Promise<{ token?: string } | null>;\n  };\n  accountRegistry: {\n    get(providerId: string): Provider | undefined;\n  };\n  /**\n   * Global Codex binding. When absent, live config clears rather than guessing\n   * from leftover hub routes or any running proxy. `modelId` seeds top-level\n   * `model` so Desktop/CLI open on a real Hub model, not a stock GPT id.\n   * `modelRoles` (Default + List 2–5) pins Desktop picker slots when set.\n   */\n  getCodexSource?: () => ResourceRef | null;\n  getCodexModelId?: () => string | undefined;\n  getCodexModelRoles?: () => Record<string, string> | undefined;\n  home?: string;\n  log?: (message: string) => void;\n}\n\n/**\n * Resolve the single active route Codex should point at from its binding, or\n * `null` when there is nothing worth publishing.\n */\nasync function resolveActiveProvider(deps: CodexLiveConfigDeps): Promise<LiveCodexProvider | null> {\n  const source = deps.getCodexSource?.() ?? null;\n  if (!source) {\n    return null;\n  }\n\n  if (source.kind === 'proxy-hub') {\n    return resolveHubProvider(deps, source.name);\n  }\n\n  if (source.kind === 'account') {\n    return resolveAccountProxyProvider(deps, source.provider, source.name);\n  }\n\n  if (source.kind === 'account-pool') {\n    return resolvePoolProxyProvider(deps, source.provider);\n  }\n\n  if (source.kind === 'gateway') {\n    // Gateway credentials are not re-derived here; publishCodexLiveRoute wrote\n    // a sticky route at apply time. Only reuse it when it still names this gateway.\n    const sticky = await readStoredLiveRoute(deps.home);\n    if (sticky && sticky.source === `gateway:${source.name}`) {\n      return sticky;\n    }\n    return null;\n  }\n\n  // Presets are expanded before binding; a leftover preset pointer is not live.\n  return null;\n}\n\nasync function resolveHubProvider(\n  deps: CodexLiveConfigDeps,\n  hubName: string,\n): Promise<LiveCodexProvider | null> {\n  const route = deps.hub.getAttachedRoute(HUB_ROUTE_ID);\n  if (route && route.manifest.client === 'codex' && route.manifest.hub === hubName) {\n    const status = await deps.hub.status(route.manifest.hub);\n    if (status.running && status.endpoint) {\n      return {\n        source: `hub:${route.manifest.hub}`,\n        endpoint: status.endpoint,\n        token: route.token,\n      };\n    }\n  }\n  const sticky = await readStoredLiveRoute(deps.home);\n  if (sticky && sticky.source === `hub:${hubName}`) {\n    return sticky;\n  }\n  return null;\n}\n\nasync function resolveAccountProxyProvider(\n  deps: CodexLiveConfigDeps,\n  providerId: string,\n  accountName: string,\n): Promise<LiveCodexProvider | null> {\n  const rows = await deps.proxy.listProxyRows();\n  const row = rows.find(\n    (candidate) =>\n      candidate.provider === providerId &&\n      candidate.name === accountName &&\n      candidate.status.running &&\n      candidate.status.endpoint,\n  );\n  if (!row?.status.endpoint) {\n    return null;\n  }\n  const account = await deps.accounts.getAccount(providerId, accountName);\n  const provider = deps.accountRegistry.get(providerId);\n  if (!account || !provider) {\n    return null;\n  }\n  const transport = accountAdapterFor(provider, account).transportFor('codex');\n  if (transport !== 'managed_builtin_proxy' && transport !== 'managed_external_proxy') {\n    return null;\n  }\n  const state = await deps.accounts.readProxyState(providerId, accountName);\n  if (!state?.token) {\n    return null;\n  }\n  return {\n    source: `${providerId}/${accountName}`,\n    endpoint: row.status.endpoint,\n    token: state.token,\n  };\n}\n\nasync function resolvePoolProxyProvider(\n  deps: CodexLiveConfigDeps,\n  providerId: string,\n): Promise<LiveCodexProvider | null> {\n  const rows = await deps.proxy.listProxyRows();\n  const row = rows.find(\n    (candidate) =>\n      candidate.provider === providerId &&\n      (candidate.name === 'pool' || candidate.name === '*') &&\n      candidate.status.running &&\n      candidate.status.endpoint,\n  );\n  if (!row?.status.endpoint) {\n    // Fall back to any running account proxy for this provider when the pool\n    // row is not listed separately.\n    return null;\n  }\n  // Pool tokens live on a member account; listProxyRows for pools usually\n  // exposes the pool endpoint. Prefer sticky when it matches this pool.\n  const sticky = await readStoredLiveRoute(deps.home);\n  if (\n    sticky &&\n    (sticky.source === `pool:${providerId}` || sticky.source.startsWith(`${providerId}/`))\n  ) {\n    return {\n      ...sticky,\n      endpoint: row.status.endpoint,\n      source: `pool:${providerId}`,\n    };\n  }\n  return null;\n}\n\nasync function readFileSafe(path: string): Promise<string> {\n  try {\n    return await readFile(path, 'utf8');\n  } catch {\n    return '';\n  }\n}\n\nasync function readLiveMode(home?: string): Promise<CodexLiveMode | null> {\n  const path = codexLiveModePath(home);\n  if (!(await pathExists(path))) {\n    return null;\n  }\n  try {\n    const raw = JSON.parse(await readFile(path, 'utf8')) as { mode?: string };\n    return raw.mode === 'routed' || raw.mode === 'native' ? raw.mode : null;\n  } catch {\n    return null;\n  }\n}\n\nasync function writeLiveMode(mode: CodexLiveMode, home?: string): Promise<void> {\n  await writeJsonFile(codexLiveModePath(home), { version: 1, mode }, 0o600);\n}\n\nasync function readStash(home?: string): Promise<CodexUserDefaultsStash | null> {\n  const path = codexUserDefaultsStashPath(home);\n  if (!(await pathExists(path))) {\n    return null;\n  }\n  try {\n    const raw = JSON.parse(await readFile(path, 'utf8')) as CodexUserDefaultsStash;\n    return raw?.version === 1 ? raw : null;\n  } catch {\n    return null;\n  }\n}\n\nasync function ensureStash(content: string, home?: string): Promise<void> {\n  const path = codexUserDefaultsStashPath(home);\n  if (await pathExists(path)) {\n    return;\n  }\n  // Only snapshot keys still outside the managed block (true user defaults).\n  const stash = extractUserTopLevelDefaults(content);\n  await writeJsonFile(path, stash, 0o600);\n}\n\nasync function readStoredLiveRoute(home?: string): Promise<LiveCodexProvider | null> {\n  const path = codexLiveRoutePath(home);\n  if (!(await pathExists(path))) {\n    return null;\n  }\n  try {\n    const raw = JSON.parse(await readFile(path, 'utf8')) as StoredLiveRoute;\n    if (raw?.version !== 1 || !raw.source || !raw.endpoint || !raw.token) {\n      return null;\n    }\n    return {\n      source: raw.source,\n      endpoint: raw.endpoint,\n      token: raw.token,\n      defaultModel: raw.defaultModel,\n    };\n  } catch {\n    return null;\n  }\n}\n\nasync function writeStoredLiveRoute(provider: LiveCodexProvider, home?: string): Promise<void> {\n  const payload: StoredLiveRoute = {\n    version: 1,\n    source: provider.source,\n    endpoint: provider.endpoint,\n    token: provider.token,\n    ...(provider.defaultModel ? { defaultModel: provider.defaultModel } : {}),\n  };\n  await writeJsonFile(codexLiveRoutePath(home), payload, 0o600);\n}\n\n/**\n * Publish an explicit route (gateway activation) and mark mode as routed.\n * Used when resolveActiveProvider cannot see the source (gateways are not\n * process-backed the way proxies are).\n */\nexport async function publishCodexLiveRoute(\n  deps: CodexLiveConfigDeps,\n  provider: LiveCodexProvider,\n): Promise<void> {\n  try {\n    await writeLiveMode('routed', deps.home);\n    await writeStoredLiveRoute(provider, deps.home);\n    await writeLiveTakeover(deps, provider);\n  } catch (error) {\n    deps.log?.(`Codex live config publish failed: ${errorMessage(error)}`);\n  }\n}\n\n/**\n * Mark Codex as native (ChatGPT account) and restore the user's top-level\n * model / model_provider defaults. Proxy lifecycle re-sync will no-op while\n * mode stays native.\n */\nexport async function restoreCodexLiveForNative(deps: CodexLiveConfigDeps): Promise<void> {\n  try {\n    await writeLiveMode('native', deps.home);\n    await clearCodexLiveConfig(deps, { keepMode: true });\n  } catch (error) {\n    deps.log?.(`Codex live config native restore failed: ${errorMessage(error)}`);\n  }\n}\n\nexport interface SyncCodexLiveOptions {\n  /**\n   * Activation just bound Codex to a proxy/hub: flip mode to routed even if\n   * the previous binding was a native account. Proxy lifecycle events leave\n   * this unset so they never undo a native restore.\n   */\n  forceRouted?: boolean;\n}\n\n/**\n * Re-render the live managed block from the current active route. Best-effort:\n * never throws — sync is a convenience that must not break activation.\n *\n * When mode is `native` (and `forceRouted` is not set), leaves config alone so\n * a still-running proxy cannot re-takeover after the user switched to native.\n * When mode is `routed` (or unset with a resolvable provider), takes over\n * top-level `model_provider`.\n */\nexport async function syncCodexLiveConfig(\n  deps: CodexLiveConfigDeps,\n  opts: SyncCodexLiveOptions = {},\n): Promise<void> {\n  try {\n    if (opts.forceRouted) {\n      await writeLiveMode('routed', deps.home);\n    }\n\n    const mode = await readLiveMode(deps.home);\n    if (mode === 'native' && !opts.forceRouted) {\n      // Stay out of the way after a native account switch — even if a proxy\n      // process is still running for some other client.\n      return;\n    }\n\n    const provider = await resolveActiveProvider(deps);\n    if (!provider) {\n      await clearCodexLiveConfig(deps, { keepMode: true });\n      return;\n    }\n\n    // First time we publish from a lifecycle event without an explicit mode,\n    // treat it as routed so later native switches can distinguish.\n    if (mode !== 'routed') {\n      await writeLiveMode('routed', deps.home);\n    }\n    await writeStoredLiveRoute(provider, deps.home);\n    await writeLiveTakeover(deps, provider);\n  } catch (error) {\n    deps.log?.(`Codex live config sync failed: ${errorMessage(error)}`);\n  }\n}\n\nasync function writeLiveTakeover(\n  deps: CodexLiveConfigDeps,\n  provider: LiveCodexProvider,\n): Promise<void> {\n  const configPath = configTomlPath(deps.home);\n  const catalogPath = codexLiveCatalogPath(deps.home);\n  const profileName = codexProfileName(provider.source);\n  const preferredFromRoles = preferredHubModelsFromRoles(deps.getCodexModelRoles?.());\n  const preferredHubModel =\n    preferredFromRoles[0] ||\n    provider.defaultModel?.trim() ||\n    deps.getCodexModelId?.()?.trim() ||\n    undefined;\n  const preferredList =\n    preferredFromRoles.length > 0\n      ? preferredFromRoles\n      : preferredHubModel\n        ? [preferredHubModel]\n        : [];\n\n  const models = await liveRouteCatalogModels({\n    endpoint: provider.endpoint,\n    token: provider.token,\n    defaultModel: preferredHubModel,\n  });\n\n  // Desktop allowlist only shows native GPT slugs (~5). Alias top hub models\n  // onto those slugs (codex-router technique) so the Desktop picker lists Hub\n  // routes with friendly names; real hub slugs stay for the CLI.\n  // Preferred list comes from Apps Configure Models (Default + List 2–5).\n  const isHub = provider.source.startsWith('hub:');\n  let catalogModels = models;\n  let configModel = preferredHubModel;\n  if (isHub && models.length > 0) {\n    const nativeSlots = loadNativeListSlots();\n    const ordered = orderHubModelsForDesktop(\n      models.map((model) => model.slug),\n      preferredList,\n    );\n    const aliases = assignDesktopAliases(ordered, nativeSlots);\n    catalogModels = desktopAwareRouteModels(models, aliases, nativeSlots);\n    configModel = desktopConfigModelId(preferredHubModel, aliases) ?? preferredHubModel;\n    deps.log?.(\n      `Codex Desktop: aliased ${aliases.length} Hub model(s) onto native GPT picker slots` +\n        (aliases[0] ? ` (e.g. ${aliases[0].nativeSlug} → ${aliases[0].hubModel})` : ''),\n    );\n  }\n\n  // Tag entries with the live provider id for CLI catalog association.\n  await writeJsonFile(catalogPath, buildLiveCatalog(catalogModels, profileName), 0o600);\n\n  const existing = await readFileSafe(configPath);\n  await ensureStash(existing, deps.home);\n\n  const includeCatalog = !hasTopLevelKeyOutsideLiveBlock(existing, 'model_catalog_json');\n  // After prepareConfigForLiveTakeover, user model/model_provider are removed;\n  // hasTopLevelKeyOutsideLiveBlock for those is irrelevant — we always own them.\n  if (!includeCatalog) {\n    deps.log?.(\n      `Codex: keeping your own model_catalog_json in ${configPath}; routed models are not auto-listed. Use: codex --profile ${profileName}`,\n    );\n  }\n\n  const prepared = prepareConfigForLiveTakeover(existing);\n  const block = renderLiveManagedBlock({ ...provider, defaultModel: configModel }, catalogPath, {\n    includeCatalog,\n  });\n  const next = upsertLiveBlock(prepared, block);\n  if (next !== existing) {\n    await writeTextFile(configPath, next, 0o600);\n  }\n}\n\n/** Remove the live managed block, restore stashed defaults, drop sidecars. */\nexport async function clearCodexLiveConfig(\n  deps: CodexLiveConfigDeps,\n  opts: { keepMode?: boolean } = {},\n): Promise<void> {\n  try {\n    await rm(codexLiveCatalogPath(deps.home), { force: true });\n    await rm(codexLiveRoutePath(deps.home), { force: true });\n    if (!opts.keepMode) {\n      await rm(codexLiveModePath(deps.home), { force: true });\n    }\n\n    const stash = await readStash(deps.home);\n    const stashPath = codexUserDefaultsStashPath(deps.home);\n    const configPath = configTomlPath(deps.home);\n    if (!(await pathExists(configPath))) {\n      await rm(stashPath, { force: true });\n      return;\n    }\n    const existing = await readFileSafe(configPath);\n    const next = restoreUserTopLevelDefaults(existing, stash);\n    await rm(stashPath, { force: true });\n    if (next === existing) {\n      return;\n    }\n    if (next.trim().length === 0) {\n      await rm(configPath, { force: true });\n    } else {\n      await writeTextFile(configPath, next, 0o600);\n    }\n  } catch (error) {\n    deps.log?.(`Codex live config cleanup failed: ${errorMessage(error)}`);\n  }\n}\n\nfunction errorMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAqDA,IAAM,eAAe;;;;;AAyCrB,eAAe,sBAAsB,MAA8D;CACjG,MAAM,SAAS,KAAK,iBAAiB,KAAK;CAC1C,IAAI,CAAC,QACH,OAAO;CAGT,IAAI,OAAO,SAAS,aAClB,OAAO,mBAAmB,MAAM,OAAO,IAAI;CAG7C,IAAI,OAAO,SAAS,WAClB,OAAO,4BAA4B,MAAM,OAAO,UAAU,OAAO,IAAI;CAGvE,IAAI,OAAO,SAAS,gBAClB,OAAO,yBAAyB,MAAM,OAAO,QAAQ;CAGvD,IAAI,OAAO,SAAS,WAAW;EAG7B,MAAM,SAAS,MAAM,oBAAoB,KAAK,IAAI;EAClD,IAAI,UAAU,OAAO,WAAW,WAAW,OAAO,QAChD,OAAO;EAET,OAAO;CACT;CAGA,OAAO;AACT;AAEA,eAAe,mBACb,MACA,SACmC;CACnC,MAAM,QAAQ,KAAK,IAAI,iBAAiB,YAAY;CACpD,IAAI,SAAS,MAAM,SAAS,WAAW,WAAW,MAAM,SAAS,QAAQ,SAAS;EAChF,MAAM,SAAS,MAAM,KAAK,IAAI,OAAO,MAAM,SAAS,GAAG;EACvD,IAAI,OAAO,WAAW,OAAO,UAC3B,OAAO;GACL,QAAQ,OAAO,MAAM,SAAS;GAC9B,UAAU,OAAO;GACjB,OAAO,MAAM;EACf;CAEJ;CACA,MAAM,SAAS,MAAM,oBAAoB,KAAK,IAAI;CAClD,IAAI,UAAU,OAAO,WAAW,OAAO,WACrC,OAAO;CAET,OAAO;AACT;AAEA,eAAe,4BACb,MACA,YACA,aACmC;CAEnC,MAAM,OAAM,MADO,KAAK,MAAM,cAAc,EAAA,CAC3B,MACd,cACC,UAAU,aAAa,cACvB,UAAU,SAAS,eACnB,UAAU,OAAO,WACjB,UAAU,OAAO,QACrB;CACA,IAAI,CAAC,KAAK,OAAO,UACf,OAAO;CAET,MAAM,UAAU,MAAM,KAAK,SAAS,WAAW,YAAY,WAAW;CACtE,MAAM,WAAW,KAAK,gBAAgB,IAAI,UAAU;CACpD,IAAI,CAAC,WAAW,CAAC,UACf,OAAO;CAET,MAAM,YAAY,kBAAkB,UAAU,OAAO,CAAC,CAAC,aAAa,OAAO;CAC3E,IAAI,cAAc,2BAA2B,cAAc,0BACzD,OAAO;CAET,MAAM,QAAQ,MAAM,KAAK,SAAS,eAAe,YAAY,WAAW;CACxE,IAAI,CAAC,OAAO,OACV,OAAO;CAET,OAAO;EACL,QAAQ,GAAG,WAAW,GAAG;EACzB,UAAU,IAAI,OAAO;EACrB,OAAO,MAAM;CACf;AACF;AAEA,eAAe,yBACb,MACA,YACmC;CAEnC,MAAM,OAAM,MADO,KAAK,MAAM,cAAc,EAAA,CAC3B,MACd,cACC,UAAU,aAAa,eACtB,UAAU,SAAS,UAAU,UAAU,SAAS,QACjD,UAAU,OAAO,WACjB,UAAU,OAAO,QACrB;CACA,IAAI,CAAC,KAAK,OAAO,UAGf,OAAO;CAIT,MAAM,SAAS,MAAM,oBAAoB,KAAK,IAAI;CAClD,IACE,WACC,OAAO,WAAW,QAAQ,gBAAgB,OAAO,OAAO,WAAW,GAAG,WAAW,EAAE,IAEpF,OAAO;EACL,GAAG;EACH,UAAU,IAAI,OAAO;EACrB,QAAQ,QAAQ;CAClB;CAEF,OAAO;AACT;AAEA,eAAe,aAAa,MAA+B;CACzD,IAAI;EACF,OAAO,MAAM,SAAS,MAAM,MAAM;CACpC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAe,aAAa,MAA8C;CACxE,MAAM,OAAO,kBAAkB,IAAI;CACnC,IAAI,CAAE,MAAM,WAAW,IAAI,GACzB,OAAO;CAET,IAAI;EACF,MAAM,MAAM,KAAK,MAAM,MAAM,SAAS,MAAM,MAAM,CAAC;EACnD,OAAO,IAAI,SAAS,YAAY,IAAI,SAAS,WAAW,IAAI,OAAO;CACrE,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAe,cAAc,MAAqB,MAA8B;CAC9E,MAAM,cAAc,kBAAkB,IAAI,GAAG;EAAE,SAAS;EAAG;CAAK,GAAG,GAAK;AAC1E;AAEA,eAAe,UAAU,MAAuD;CAC9E,MAAM,OAAO,2BAA2B,IAAI;CAC5C,IAAI,CAAE,MAAM,WAAW,IAAI,GACzB,OAAO;CAET,IAAI;EACF,MAAM,MAAM,KAAK,MAAM,MAAM,SAAS,MAAM,MAAM,CAAC;EACnD,OAAO,KAAK,YAAY,IAAI,MAAM;CACpC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAe,YAAY,SAAiB,MAA8B;CACxE,MAAM,OAAO,2BAA2B,IAAI;CAC5C,IAAI,MAAM,WAAW,IAAI,GACvB;CAIF,MAAM,cAAc,MADN,4BAA4B,OAChB,GAAO,GAAK;AACxC;AAEA,eAAe,oBAAoB,MAAkD;CACnF,MAAM,OAAO,mBAAmB,IAAI;CACpC,IAAI,CAAE,MAAM,WAAW,IAAI,GACzB,OAAO;CAET,IAAI;EACF,MAAM,MAAM,KAAK,MAAM,MAAM,SAAS,MAAM,MAAM,CAAC;EACnD,IAAI,KAAK,YAAY,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,YAAY,CAAC,IAAI,OAC7D,OAAO;EAET,OAAO;GACL,QAAQ,IAAI;GACZ,UAAU,IAAI;GACd,OAAO,IAAI;GACX,cAAc,IAAI;EACpB;CACF,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAe,qBAAqB,UAA6B,MAA8B;CAC7F,MAAM,UAA2B;EAC/B,SAAS;EACT,QAAQ,SAAS;EACjB,UAAU,SAAS;EACnB,OAAO,SAAS;EAChB,GAAI,SAAS,eAAe,EAAE,cAAc,SAAS,aAAa,IAAI,CAAC;CACzE;CACA,MAAM,cAAc,mBAAmB,IAAI,GAAG,SAAS,GAAK;AAC9D;;;;;;AAOA,eAAsB,sBACpB,MACA,UACe;CACf,IAAI;EACF,MAAM,cAAc,UAAU,KAAK,IAAI;EACvC,MAAM,qBAAqB,UAAU,KAAK,IAAI;EAC9C,MAAM,kBAAkB,MAAM,QAAQ;CACxC,SAAS,OAAO;EACd,KAAK,MAAM,qCAAqC,aAAa,KAAK,GAAG;CACvE;AACF;;;;;;AAOA,eAAsB,0BAA0B,MAA0C;CACxF,IAAI;EACF,MAAM,cAAc,UAAU,KAAK,IAAI;EACvC,MAAM,qBAAqB,MAAM,EAAE,UAAU,KAAK,CAAC;CACrD,SAAS,OAAO;EACd,KAAK,MAAM,4CAA4C,aAAa,KAAK,GAAG;CAC9E;AACF;;;;;;;;;;AAoBA,eAAsB,oBACpB,MACA,OAA6B,CAAC,GACf;CACf,IAAI;EACF,IAAI,KAAK,aACP,MAAM,cAAc,UAAU,KAAK,IAAI;EAGzC,MAAM,OAAO,MAAM,aAAa,KAAK,IAAI;EACzC,IAAI,SAAS,YAAY,CAAC,KAAK,aAG7B;EAGF,MAAM,WAAW,MAAM,sBAAsB,IAAI;EACjD,IAAI,CAAC,UAAU;GACb,MAAM,qBAAqB,MAAM,EAAE,UAAU,KAAK,CAAC;GACnD;EACF;EAIA,IAAI,SAAS,UACX,MAAM,cAAc,UAAU,KAAK,IAAI;EAEzC,MAAM,qBAAqB,UAAU,KAAK,IAAI;EAC9C,MAAM,kBAAkB,MAAM,QAAQ;CACxC,SAAS,OAAO;EACd,KAAK,MAAM,kCAAkC,aAAa,KAAK,GAAG;CACpE;AACF;AAEA,eAAe,kBACb,MACA,UACe;CACf,MAAM,aAAa,eAAe,KAAK,IAAI;CAC3C,MAAM,cAAc,qBAAqB,KAAK,IAAI;CAClD,MAAM,cAAc,iBAAiB,SAAS,MAAM;CACpD,MAAM,qBAAqB,4BAA4B,KAAK,qBAAqB,CAAC;CAClF,MAAM,oBACJ,mBAAmB,MACnB,SAAS,cAAc,KAAK,KAC5B,KAAK,kBAAkB,CAAC,EAAE,KAAK,KAC/B,KAAA;CACF,MAAM,gBACJ,mBAAmB,SAAS,IACxB,qBACA,oBACE,CAAC,iBAAiB,IAClB,CAAC;CAET,MAAM,SAAS,MAAM,uBAAuB;EAC1C,UAAU,SAAS;EACnB,OAAO,SAAS;EAChB,cAAc;CAChB,CAAC;CAMD,MAAM,QAAQ,SAAS,OAAO,WAAW,MAAM;CAC/C,IAAI,gBAAgB;CACpB,IAAI,cAAc;CAClB,IAAI,SAAS,OAAO,SAAS,GAAG;EAC9B,MAAM,cAAc,oBAAoB;EAKxC,MAAM,UAAU,qBAJA,yBACd,OAAO,KAAK,UAAU,MAAM,IAAI,GAChC,aAEmC,GAAS,WAAW;EACzD,gBAAgB,wBAAwB,QAAQ,SAAS,WAAW;EACpE,cAAc,qBAAqB,mBAAmB,OAAO,KAAK;EAClE,KAAK,MACH,0BAA0B,QAAQ,OAAO,+CACtC,QAAQ,KAAK,UAAU,QAAQ,EAAE,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC,SAAS,KAAK,GAChF;CACF;CAGA,MAAM,cAAc,aAAa,iBAAiB,eAAe,WAAW,GAAG,GAAK;CAEpF,MAAM,WAAW,MAAM,aAAa,UAAU;CAC9C,MAAM,YAAY,UAAU,KAAK,IAAI;CAErC,MAAM,iBAAiB,CAAC,+BAA+B,UAAU,oBAAoB;CAGrF,IAAI,CAAC,gBACH,KAAK,MACH,iDAAiD,WAAW,4DAA4D,aAC1H;CAOF,MAAM,OAAO,gBAJI,6BAA6B,QAIjB,GAHf,uBAAuB;EAAE,GAAG;EAAU,cAAc;CAAY,GAAG,aAAa,EAC5F,eACF,CACuC,CAAK;CAC5C,IAAI,SAAS,UACX,MAAM,cAAc,YAAY,MAAM,GAAK;AAE/C;;AAGA,eAAsB,qBACpB,MACA,OAA+B,CAAC,GACjB;CACf,IAAI;EACF,MAAM,GAAG,qBAAqB,KAAK,IAAI,GAAG,EAAE,OAAO,KAAK,CAAC;EACzD,MAAM,GAAG,mBAAmB,KAAK,IAAI,GAAG,EAAE,OAAO,KAAK,CAAC;EACvD,IAAI,CAAC,KAAK,UACR,MAAM,GAAG,kBAAkB,KAAK,IAAI,GAAG,EAAE,OAAO,KAAK,CAAC;EAGxD,MAAM,QAAQ,MAAM,UAAU,KAAK,IAAI;EACvC,MAAM,YAAY,2BAA2B,KAAK,IAAI;EACtD,MAAM,aAAa,eAAe,KAAK,IAAI;EAC3C,IAAI,CAAE,MAAM,WAAW,UAAU,GAAI;GACnC,MAAM,GAAG,WAAW,EAAE,OAAO,KAAK,CAAC;GACnC;EACF;EACA,MAAM,WAAW,MAAM,aAAa,UAAU;EAC9C,MAAM,OAAO,4BAA4B,UAAU,KAAK;EACxD,MAAM,GAAG,WAAW,EAAE,OAAO,KAAK,CAAC;EACnC,IAAI,SAAS,UACX;EAEF,IAAI,KAAK,KAAK,CAAC,CAAC,WAAW,GACzB,MAAM,GAAG,YAAY,EAAE,OAAO,KAAK,CAAC;OAEpC,MAAM,cAAc,YAAY,MAAM,GAAK;CAE/C,SAAS,OAAO;EACd,KAAK,MAAM,qCAAqC,aAAa,KAAK,GAAG;CACvE;AACF;AAEA,SAAS,aAAa,OAAwB;CAC5C,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC9D"}

package/dist/core/config-service.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Service-owned global config mutations (ADR 0009).
+ *
+ * Call sites must not take `config/global` locks themselves. Every persisted
+ * config write goes through this service so CLI/TUI/tray cannot forget the
+ * coordinator.
+ */
+import type { GlobalConfig } from '../types.js';
+import type { GlobalConfigStore } from './config.js';
+export type LaunchSurface = 'tui' | 'tray';
+export declare function launchSurface(config: GlobalConfig): LaunchSurface | undefined;
+export declare function updateLaunchSurface(config: GlobalConfig, surface: LaunchSurface): GlobalConfig;
+export declare function updateQuotaGuardEnabled(config: GlobalConfig, enabled: boolean): GlobalConfig;
+export declare function updateTrayPreference(config: GlobalConfig, key: 'startEnabledProxies' | 'showQuota', enabled: boolean): GlobalConfig;
+export declare class ConfigService {
+    private readonly store;
+    constructor(store: GlobalConfigStore);
+    get root(): string;
+    /** Underlying store — only for composition/migration that already holds broader locks. */
+    get rawStore(): GlobalConfigStore;
+    read(): Promise<GlobalConfig>;
+    /**
+     * Bootstrap path used under `.migrate.lock`. Does not take `config/global`
+     * because startup already serializes open/migrate.
+     */
+    ensure(): Promise<GlobalConfig>;
+    /** Replace the whole config document under the coordinator. */
+    write(config: GlobalConfig): Promise<void>;
+    /** Read-modify-write under one lock so concurrent updaters cannot clobber. */
+    update(mutator: (config: GlobalConfig) => GlobalConfig): Promise<GlobalConfig>;
+    setLaunchSurface(surface: LaunchSurface): Promise<GlobalConfig>;
+    setQuotaGuardEnabled(enabled: boolean): Promise<GlobalConfig>;
+    setTrayPreference(key: 'startEnabledProxies' | 'showQuota', enabled: boolean): Promise<GlobalConfig>;
+}
+//# sourceMappingURL=config-service.d.ts.map

package/dist/core/config-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-service.d.ts","sourceRoot":"","sources":["../../src/core/config-service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAKlD,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,MAAM,CAAC;AAE3C,wBAAgB,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,aAAa,GAAG,SAAS,CAE7E;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,GAAG,YAAY,CAQ9F;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,YAAY,CAW5F;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,qBAAqB,GAAG,WAAW,EACxC,OAAO,EAAE,OAAO,GACf,YAAY,CAWd;AAED,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAlC,YAA6B,KAAK,EAAE,iBAAiB,EAAI;IAEzD,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,0FAA0F;IAC1F,IAAI,QAAQ,IAAI,iBAAiB,CAEhC;IAEK,IAAI,IAAI,OAAO,CAAC,YAAY,CAAC,CAElC;IAED;;;OAGG;IACG,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,CAEpC;IAED,+DAA+D;IACzD,KAAK,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C;IAED,8EAA8E;IACxE,MAAM,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAMnF;IAEK,gBAAgB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAEpE;IAEK,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAElE;IAEK,iBAAiB,CACrB,GAAG,EAAE,qBAAqB,GAAG,WAAW,EACxC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,YAAY,CAAC,CAEvB;CACF"}

package/dist/core/config-service.js

@@ -0,0 +1,87 @@
+import { withMutationLock } from "./mutation-lock.js";
+//#region src/core/config-service.ts
+var CONFIG_SCOPE = "config/global";
+function launchSurface(config) {
+	return config.ui?.defaultSurface;
+}
+function updateLaunchSurface(config, surface) {
+	return {
+		...config,
+		ui: {
+			...config.ui,
+			defaultSurface: surface
+		}
+	};
+}
+function updateQuotaGuardEnabled(config, enabled) {
+	return {
+		...config,
+		ui: {
+			...config.ui,
+			quotaGuard: {
+				...config.ui?.quotaGuard,
+				enabled
+			}
+		}
+	};
+}
+function updateTrayPreference(config, key, enabled) {
+	return {
+		...config,
+		ui: {
+			...config.ui,
+			tray: {
+				...config.ui?.tray,
+				[key]: enabled
+			}
+		}
+	};
+}
+var ConfigService = class {
+	store;
+	constructor(store) {
+		this.store = store;
+	}
+	get root() {
+		return this.store.root;
+	}
+	/** Underlying store — only for composition/migration that already holds broader locks. */
+	get rawStore() {
+		return this.store;
+	}
+	async read() {
+		return this.store.read();
+	}
+	/**
+	* Bootstrap path used under `.migrate.lock`. Does not take `config/global`
+	* because startup already serializes open/migrate.
+	*/
+	async ensure() {
+		return this.store.ensure();
+	}
+	/** Replace the whole config document under the coordinator. */
+	async write(config) {
+		await withMutationLock(this.store.root, CONFIG_SCOPE, () => this.store.write(config));
+	}
+	/** Read-modify-write under one lock so concurrent updaters cannot clobber. */
+	async update(mutator) {
+		return withMutationLock(this.store.root, CONFIG_SCOPE, async () => {
+			const next = mutator(await this.store.read());
+			await this.store.write(next);
+			return next;
+		});
+	}
+	async setLaunchSurface(surface) {
+		return this.update((config) => updateLaunchSurface(config, surface));
+	}
+	async setQuotaGuardEnabled(enabled) {
+		return this.update((config) => updateQuotaGuardEnabled(config, enabled));
+	}
+	async setTrayPreference(key, enabled) {
+		return this.update((config) => updateTrayPreference(config, key, enabled));
+	}
+};
+//#endregion
+export { ConfigService, launchSurface, updateLaunchSurface, updateQuotaGuardEnabled, updateTrayPreference };
+
+//# sourceMappingURL=config-service.js.map

package/dist/core/config-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-service.js","names":[],"sources":["../../src/core/config-service.ts"],"sourcesContent":["/**\n * Service-owned global config mutations (ADR 0009).\n *\n * Call sites must not take `config/global` locks themselves. Every persisted\n * config write goes through this service so CLI/TUI/tray cannot forget the\n * coordinator.\n */\nimport type { GlobalConfig } from '../types';\nimport type { GlobalConfigStore } from './config';\nimport { withMutationLock } from './mutation-lock';\n\nconst CONFIG_SCOPE = 'config/global';\n\nexport type LaunchSurface = 'tui' | 'tray';\n\nexport function launchSurface(config: GlobalConfig): LaunchSurface | undefined {\n  return config.ui?.defaultSurface;\n}\n\nexport function updateLaunchSurface(config: GlobalConfig, surface: LaunchSurface): GlobalConfig {\n  return {\n    ...config,\n    ui: {\n      ...config.ui,\n      defaultSurface: surface,\n    },\n  };\n}\n\nexport function updateQuotaGuardEnabled(config: GlobalConfig, enabled: boolean): GlobalConfig {\n  return {\n    ...config,\n    ui: {\n      ...config.ui,\n      quotaGuard: {\n        ...config.ui?.quotaGuard,\n        enabled,\n      },\n    },\n  };\n}\n\nexport function updateTrayPreference(\n  config: GlobalConfig,\n  key: 'startEnabledProxies' | 'showQuota',\n  enabled: boolean,\n): GlobalConfig {\n  return {\n    ...config,\n    ui: {\n      ...config.ui,\n      tray: {\n        ...config.ui?.tray,\n        [key]: enabled,\n      },\n    },\n  };\n}\n\nexport class ConfigService {\n  constructor(private readonly store: GlobalConfigStore) {}\n\n  get root(): string {\n    return this.store.root;\n  }\n\n  /** Underlying store — only for composition/migration that already holds broader locks. */\n  get rawStore(): GlobalConfigStore {\n    return this.store;\n  }\n\n  async read(): Promise<GlobalConfig> {\n    return this.store.read();\n  }\n\n  /**\n   * Bootstrap path used under `.migrate.lock`. Does not take `config/global`\n   * because startup already serializes open/migrate.\n   */\n  async ensure(): Promise<GlobalConfig> {\n    return this.store.ensure();\n  }\n\n  /** Replace the whole config document under the coordinator. */\n  async write(config: GlobalConfig): Promise<void> {\n    await withMutationLock(this.store.root, CONFIG_SCOPE, () => this.store.write(config));\n  }\n\n  /** Read-modify-write under one lock so concurrent updaters cannot clobber. */\n  async update(mutator: (config: GlobalConfig) => GlobalConfig): Promise<GlobalConfig> {\n    return withMutationLock(this.store.root, CONFIG_SCOPE, async () => {\n      const next = mutator(await this.store.read());\n      await this.store.write(next);\n      return next;\n    });\n  }\n\n  async setLaunchSurface(surface: LaunchSurface): Promise<GlobalConfig> {\n    return this.update((config) => updateLaunchSurface(config, surface));\n  }\n\n  async setQuotaGuardEnabled(enabled: boolean): Promise<GlobalConfig> {\n    return this.update((config) => updateQuotaGuardEnabled(config, enabled));\n  }\n\n  async setTrayPreference(\n    key: 'startEnabledProxies' | 'showQuota',\n    enabled: boolean,\n  ): Promise<GlobalConfig> {\n    return this.update((config) => updateTrayPreference(config, key, enabled));\n  }\n}\n"],"mappings":";;AAWA,IAAM,eAAe;AAIrB,SAAgB,cAAc,QAAiD;CAC7E,OAAO,OAAO,IAAI;AACpB;AAEA,SAAgB,oBAAoB,QAAsB,SAAsC;CAC9F,OAAO;EACL,GAAG;EACH,IAAI;GACF,GAAG,OAAO;GACV,gBAAgB;EAClB;CACF;AACF;AAEA,SAAgB,wBAAwB,QAAsB,SAAgC;CAC5F,OAAO;EACL,GAAG;EACH,IAAI;GACF,GAAG,OAAO;GACV,YAAY;IACV,GAAG,OAAO,IAAI;IACd;GACF;EACF;CACF;AACF;AAEA,SAAgB,qBACd,QACA,KACA,SACc;CACd,OAAO;EACL,GAAG;EACH,IAAI;GACF,GAAG,OAAO;GACV,MAAM;IACJ,GAAG,OAAO,IAAI;KACb,MAAM;GACT;EACF;CACF;AACF;AAEA,IAAa,gBAAb,MAA2B;CACI;CAA7B,YAAY,OAA2C;EAA1B,KAAA,QAAA;CAA2B;CAExD,IAAI,OAAe;EACjB,OAAO,KAAK,MAAM;CACpB;;CAGA,IAAI,WAA8B;EAChC,OAAO,KAAK;CACd;CAEA,MAAM,OAA8B;EAClC,OAAO,KAAK,MAAM,KAAK;CACzB;;;;;CAMA,MAAM,SAAgC;EACpC,OAAO,KAAK,MAAM,OAAO;CAC3B;;CAGA,MAAM,MAAM,QAAqC;EAC/C,MAAM,iBAAiB,KAAK,MAAM,MAAM,oBAAoB,KAAK,MAAM,MAAM,MAAM,CAAC;CACtF;;CAGA,MAAM,OAAO,SAAwE;EACnF,OAAO,iBAAiB,KAAK,MAAM,MAAM,cAAc,YAAY;GACjE,MAAM,OAAO,QAAQ,MAAM,KAAK,MAAM,KAAK,CAAC;GAC5C,MAAM,KAAK,MAAM,MAAM,IAAI;GAC3B,OAAO;EACT,CAAC;CACH;CAEA,MAAM,iBAAiB,SAA+C;EACpE,OAAO,KAAK,QAAQ,WAAW,oBAAoB,QAAQ,OAAO,CAAC;CACrE;CAEA,MAAM,qBAAqB,SAAyC;EAClE,OAAO,KAAK,QAAQ,WAAW,wBAAwB,QAAQ,OAAO,CAAC;CACzE;CAEA,MAAM,kBACJ,KACA,SACuB;EACvB,OAAO,KAAK,QAAQ,WAAW,qBAAqB,QAAQ,KAAK,OAAO,CAAC;CAC3E;AACF"}

package/dist/core/config.d.ts

@@ -0,0 +1,14 @@
+import type { GlobalConfig } from '../types.js';
+import type { AnyPickDatabase } from './db.js';
+/**
+ * SQLite-backed global config store.
+ */
+export declare class GlobalConfigStore {
+    readonly root: string;
+    readonly db: AnyPickDatabase;
+    constructor(root: string, db: AnyPickDatabase);
+    read(): Promise<GlobalConfig>;
+    write(config: GlobalConfig): Promise<void>;
+    ensure(): Promise<GlobalConfig>;
+}
+//# sourceMappingURL=config.d.ts.map

package/dist/core/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAM5C;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAC;IAE7B,YAAY,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,eAAe,EAG5C;IAEK,IAAI,IAAI,OAAO,CAAC,YAAY,CAAC,CAkBlC;IAEK,KAAK,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAS/C;IAEK,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,CAQpC;CACF"}

package/dist/core/config.js

@@ -0,0 +1,45 @@
+import { DEFAULT_GLOBAL_CONFIG } from "../types/clients.js";
+import { decodeWithFallback, decoders } from "./codec.js";
+import { getAnyPickRoot } from "./paths.js";
+import { getConfigValue, setConfigValue } from "./db.js";
+//#region src/core/config.ts
+var GLOBAL_KEY = "global";
+/**
+* SQLite-backed global config store.
+*/
+var GlobalConfigStore = class {
+	root;
+	db;
+	constructor(root, db) {
+		this.root = getAnyPickRoot(root);
+		this.db = db;
+	}
+	async read() {
+		const raw = getConfigValue(this.db, GLOBAL_KEY);
+		if (!raw) return { ...DEFAULT_GLOBAL_CONFIG };
+		const data = decodeWithFallback(raw, decoders.globalConfig, { ...DEFAULT_GLOBAL_CONFIG }, "global");
+		return {
+			...DEFAULT_GLOBAL_CONFIG,
+			...data,
+			schemaVersion: data.schemaVersion ?? 2
+		};
+	}
+	async write(config) {
+		setConfigValue(this.db, GLOBAL_KEY, JSON.stringify({
+			...config,
+			schemaVersion: config.schemaVersion ?? 2
+		}));
+	}
+	async ensure() {
+		if (!getConfigValue(this.db, GLOBAL_KEY)) {
+			const config = { ...DEFAULT_GLOBAL_CONFIG };
+			await this.write(config);
+			return config;
+		}
+		return this.read();
+	}
+};
+//#endregion
+export { GlobalConfigStore };
+
+//# sourceMappingURL=config.js.map

package/dist/core/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","names":[],"sources":["../../src/core/config.ts"],"sourcesContent":["import type { GlobalConfig } from '../types';\nimport { CURRENT_SCHEMA_VERSION, DEFAULT_GLOBAL_CONFIG } from '../types';\nimport { decodeWithFallback, decoders } from './codec';\nimport type { AnyPickDatabase } from './db';\nimport { getConfigValue, setConfigValue } from './db';\nimport { getAnyPickRoot } from './paths';\n\nconst GLOBAL_KEY = 'global';\n\n/**\n * SQLite-backed global config store.\n */\nexport class GlobalConfigStore {\n  readonly root: string;\n  readonly db: AnyPickDatabase;\n\n  constructor(root: string, db: AnyPickDatabase) {\n    this.root = getAnyPickRoot(root);\n    this.db = db;\n  }\n\n  async read(): Promise<GlobalConfig> {\n    const raw = getConfigValue(this.db, GLOBAL_KEY);\n    if (!raw) {\n      return { ...DEFAULT_GLOBAL_CONFIG };\n    }\n    const data = decodeWithFallback(\n      raw,\n      decoders.globalConfig,\n      {\n        ...DEFAULT_GLOBAL_CONFIG,\n      },\n      'global',\n    );\n    return {\n      ...DEFAULT_GLOBAL_CONFIG,\n      ...data,\n      schemaVersion: data.schemaVersion ?? CURRENT_SCHEMA_VERSION,\n    };\n  }\n\n  async write(config: GlobalConfig): Promise<void> {\n    setConfigValue(\n      this.db,\n      GLOBAL_KEY,\n      JSON.stringify({\n        ...config,\n        schemaVersion: config.schemaVersion ?? CURRENT_SCHEMA_VERSION,\n      }),\n    );\n  }\n\n  async ensure(): Promise<GlobalConfig> {\n    const existing = getConfigValue(this.db, GLOBAL_KEY);\n    if (!existing) {\n      const config = { ...DEFAULT_GLOBAL_CONFIG };\n      await this.write(config);\n      return config;\n    }\n    return this.read();\n  }\n}\n"],"mappings":";;;;;AAOA,IAAM,aAAa;;;;AAKnB,IAAa,oBAAb,MAA+B;CAC7B;CACA;CAEA,YAAY,MAAc,IAAqB;EAC7C,KAAK,OAAO,eAAe,IAAI;EAC/B,KAAK,KAAK;CACZ;CAEA,MAAM,OAA8B;EAClC,MAAM,MAAM,eAAe,KAAK,IAAI,UAAU;EAC9C,IAAI,CAAC,KACH,OAAO,EAAE,GAAG,sBAAsB;EAEpC,MAAM,OAAO,mBACX,KACA,SAAS,cACT,EACE,GAAG,sBACL,GACA,QACF;EACA,OAAO;GACL,GAAG;GACH,GAAG;GACH,eAAe,KAAK,iBAAA;EACtB;CACF;CAEA,MAAM,MAAM,QAAqC;EAC/C,eACE,KAAK,IACL,YACA,KAAK,UAAU;GACb,GAAG;GACH,eAAe,OAAO,iBAAA;EACxB,CAAC,CACH;CACF;CAEA,MAAM,SAAgC;EAEpC,IAAI,CADa,eAAe,KAAK,IAAI,UACpC,GAAU;GACb,MAAM,SAAS,EAAE,GAAG,sBAAsB;GAC1C,MAAM,KAAK,MAAM,MAAM;GACvB,OAAO;EACT;EACA,OAAO,KAAK,KAAK;CACnB;AACF"}

package/dist/core/db-schema.d.ts

@@ -0,0 +1,30 @@
+import type { AnyPickDatabase } from './db.js';
+/**
+ * Schema versioning.
+ *
+ * `SCHEMA` above is the *baseline* (version 1). It is applied idempotently with
+ * `CREATE TABLE IF NOT EXISTS` so a fresh database is fully formed. `MIGRATIONS`
+ * holds *ordered* DDL/backfill steps for every schema change *after* the
+ * baseline. Each entry bumps `user_version` by one and is applied exactly once
+ * per installed database, keyed off `PRAGMA user_version`.
+ *
+ * This exists because `IF NOT EXISTS` silently skips altered column types and
+ * new constraints — without a versioned runner, the installed base would drift
+ * from `SCHEMA` the first time a column changes. Add new steps here rather than
+ * editing `SCHEMA` for anything that is not purely additive.
+ */
+export declare const BASELINE_VERSION = 1;
+export interface SchemaMigration {
+    /** Human label, used in logs. */
+    name: string;
+    /** Apply against an already-open database. Run inside a transaction by caller. */
+    up(db: AnyPickDatabase): void;
+}
+/** Migrations are applied in array order; index i corresponds to version i+2. */
+export declare const MIGRATIONS: SchemaMigration[];
+/**
+ * Apply `SCHEMA` (baseline) then any pending versioned migrations. Idempotent:
+ * safe to call on every open. Reads/writes `PRAGMA user_version`.
+ */
+export declare function migrateSchema(db: AnyPickDatabase): void;
+//# sourceMappingURL=db-schema.d.ts.map