anypick 1.0.0

package/dist/core/db-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-schema.d.ts","sourceRoot":"","sources":["../../src/core/db-schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AA+K5C;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC,MAAM,WAAW,eAAe;IAC9B,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,EAAE,CAAC,EAAE,EAAE,eAAe,GAAG,IAAI,CAAC;CAC/B;AAcD,iFAAiF;AACjF,eAAO,MAAM,UAAU,EAAE,eAAe,EAkFvC,CAAC;AAEF;;;GAGG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,eAAe,GAAG,IAAI,CAgCvD"}

package/dist/core/db-schema.js

@@ -0,0 +1,278 @@
+//#region src/core/db-schema.ts
+var SCHEMA = `
+PRAGMA journal_mode = WAL;
+PRAGMA foreign_keys = ON;
+
+CREATE TABLE IF NOT EXISTS config (
+  key TEXT PRIMARY KEY NOT NULL,
+  value TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS accounts (
+  provider TEXT NOT NULL,
+  name TEXT NOT NULL,
+  meta_json TEXT NOT NULL,
+  proxy_json TEXT NOT NULL DEFAULT '{}',
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  PRIMARY KEY (provider, name)
+);
+
+CREATE TABLE IF NOT EXISTS account_snapshot_files (
+  provider TEXT NOT NULL,
+  account TEXT NOT NULL,
+  path TEXT NOT NULL,
+  content BLOB NOT NULL,
+  PRIMARY KEY (provider, account, path),
+  FOREIGN KEY (provider, account)
+    REFERENCES accounts(provider, name)
+    ON DELETE CASCADE
+);
+
+CREATE TABLE IF NOT EXISTS provider_active (
+  provider TEXT PRIMARY KEY NOT NULL,
+  account_name TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS proxy_state (
+  provider TEXT NOT NULL,
+  account TEXT NOT NULL,
+  state_json TEXT NOT NULL,
+  PRIMARY KEY (provider, account)
+);
+
+CREATE TABLE IF NOT EXISTS profiles (
+  name TEXT PRIMARY KEY NOT NULL,
+  meta_json TEXT NOT NULL,
+  secrets_json TEXT NOT NULL DEFAULT '{}',
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS client_state (
+  client_id TEXT PRIMARY KEY NOT NULL,
+  state_json TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS meta (
+  key TEXT PRIMARY KEY NOT NULL,
+  value TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS global_bindings (
+  client_id TEXT PRIMARY KEY NOT NULL,
+  spec_json TEXT NOT NULL,
+  provenance_json TEXT NOT NULL,
+  managed_config_revision TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS project_bindings (
+  project_root TEXT NOT NULL,
+  client_id TEXT NOT NULL,
+  spec_json TEXT NOT NULL,
+  provenance_json TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  PRIMARY KEY (project_root, client_id)
+);
+
+CREATE TABLE IF NOT EXISTS source_resumes (
+  source_ref TEXT NOT NULL,
+  client_id TEXT NOT NULL,
+  spec_json TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  PRIMARY KEY (source_ref, client_id)
+);
+
+CREATE TABLE IF NOT EXISTS presets (
+  id TEXT PRIMARY KEY NOT NULL,
+  name TEXT NOT NULL UNIQUE,
+  revision INTEGER NOT NULL DEFAULT 1,
+  spec_json TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  last_used_at TEXT,
+  use_count INTEGER NOT NULL DEFAULT 0
+);
+
+CREATE TABLE IF NOT EXISTS operation_journal (
+  id TEXT PRIMARY KEY NOT NULL,
+  type TEXT NOT NULL,
+  state TEXT NOT NULL,
+  affected_resources_json TEXT NOT NULL DEFAULT '[]',
+  backup_paths_json TEXT NOT NULL DEFAULT '[]',
+  params_json TEXT,
+  started_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS proxy_leases (
+  lease_id TEXT PRIMARY KEY NOT NULL,
+  provider TEXT NOT NULL,
+  account TEXT,
+  port INTEGER NOT NULL,
+  host TEXT NOT NULL DEFAULT '127.0.0.1',
+  endpoint TEXT,
+  owner_pid INTEGER NOT NULL,
+  instance_id TEXT,
+  binding_refs_json TEXT NOT NULL DEFAULT '[]',
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS pools (
+  provider TEXT PRIMARY KEY NOT NULL,
+  mode TEXT NOT NULL DEFAULT 'single',
+  enabled INTEGER NOT NULL DEFAULT 0,
+  strategy TEXT NOT NULL DEFAULT 'failover',
+  host TEXT,
+  port INTEGER,
+  members_json TEXT NOT NULL DEFAULT '[]',
+  updated_at TEXT NOT NULL
+);
+
+-- Cached vendor model lists. Advisory data: a miss or a stale row costs a
+-- refetch, never correctness, so it is safe to delete this table at any time.
+CREATE TABLE IF NOT EXISTS model_catalog_cache (
+  provider TEXT NOT NULL,
+  endpoint TEXT NOT NULL,
+  models_json TEXT NOT NULL DEFAULT '[]',
+  fetched_at TEXT NOT NULL,
+  PRIMARY KEY (provider, endpoint)
+);
+
+-- The unified local Proxy Hub. Config and public runtime state intentionally
+-- live apart from per-account proxy_state: one hub can serve many providers.
+CREATE TABLE IF NOT EXISTS proxy_hubs (
+  name TEXT PRIMARY KEY NOT NULL,
+  config_json TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS proxy_hub_runtime (
+  name TEXT PRIMARY KEY NOT NULL,
+  state_json TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  FOREIGN KEY (name) REFERENCES proxy_hubs(name) ON DELETE CASCADE
+);
+
+-- token_secret is owner-only material. It is never decoded into public status
+-- types or included in the Tray/CLI snapshot surface.
+CREATE TABLE IF NOT EXISTS proxy_hub_routes (
+  route_id TEXT PRIMARY KEY NOT NULL,
+  hub_name TEXT NOT NULL,
+  manifest_json TEXT NOT NULL,
+  token_secret TEXT NOT NULL UNIQUE,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  FOREIGN KEY (hub_name) REFERENCES proxy_hubs(name) ON DELETE CASCADE
+);
+`;
+function hasColumn(db, table, column) {
+	return db.prepare(`PRAGMA table_info(${table})`).all().some((entry) => {
+		if (typeof entry !== "object" || entry === null) return false;
+		return entry.name === column;
+	});
+}
+/** Migrations are applied in array order; index i corresponds to version i+2. */
+var MIGRATIONS = [
+	{
+		name: "add source resume history",
+		up: (db) => db.exec(`
+        CREATE TABLE IF NOT EXISTS source_resumes (
+          source_ref TEXT NOT NULL,
+          client_id TEXT NOT NULL,
+          spec_json TEXT NOT NULL,
+          updated_at TEXT NOT NULL,
+          PRIMARY KEY (source_ref, client_id)
+        );
+      `)
+	},
+	{
+		name: "add plugin registry",
+		up: (db) => db.exec(`
+        CREATE TABLE IF NOT EXISTS plugins (
+          name TEXT PRIMARY KEY NOT NULL,
+          path TEXT NOT NULL,
+          version TEXT NOT NULL,
+          enabled INTEGER NOT NULL DEFAULT 0,
+          digest TEXT NOT NULL,
+          added_at TEXT NOT NULL,
+          updated_at TEXT NOT NULL
+        );
+      `)
+	},
+	{
+		name: "add proxy lease instance identity",
+		up: (db) => {
+			if (!hasColumn(db, "proxy_leases", "instance_id")) db.exec("ALTER TABLE proxy_leases ADD COLUMN instance_id TEXT");
+		}
+	},
+	{
+		name: "add model catalog cache",
+		up: (db) => db.exec(`
+        CREATE TABLE IF NOT EXISTS model_catalog_cache (
+          provider TEXT NOT NULL,
+          endpoint TEXT NOT NULL,
+          models_json TEXT NOT NULL DEFAULT '[]',
+          fetched_at TEXT NOT NULL,
+          PRIMARY KEY (provider, endpoint)
+        );
+      `)
+	},
+	{
+		name: "add proxy hub state and token-scoped routes",
+		up: (db) => db.exec(`
+        CREATE TABLE IF NOT EXISTS proxy_hubs (
+          name TEXT PRIMARY KEY NOT NULL,
+          config_json TEXT NOT NULL,
+          created_at TEXT NOT NULL,
+          updated_at TEXT NOT NULL
+        );
+        CREATE TABLE IF NOT EXISTS proxy_hub_runtime (
+          name TEXT PRIMARY KEY NOT NULL,
+          state_json TEXT NOT NULL,
+          updated_at TEXT NOT NULL,
+          FOREIGN KEY (name) REFERENCES proxy_hubs(name) ON DELETE CASCADE
+        );
+        CREATE TABLE IF NOT EXISTS proxy_hub_routes (
+          route_id TEXT PRIMARY KEY NOT NULL,
+          hub_name TEXT NOT NULL,
+          manifest_json TEXT NOT NULL,
+          token_secret TEXT NOT NULL UNIQUE,
+          created_at TEXT NOT NULL,
+          updated_at TEXT NOT NULL,
+          FOREIGN KEY (hub_name) REFERENCES proxy_hubs(name) ON DELETE CASCADE
+        );
+      `)
+	}
+];
+/**
+* Apply `SCHEMA` (baseline) then any pending versioned migrations. Idempotent:
+* safe to call on every open. Reads/writes `PRAGMA user_version`.
+*/
+function migrateSchema(db) {
+	const versionRow = db.prepare("PRAGMA user_version").get();
+	let current = Number(versionRow?.user_version ?? 0);
+	const target = 1 + MIGRATIONS.length;
+	if (current > target) throw new Error(`anypick.db schema version ${current} is newer than this AnyPick build supports (${target}). Upgrade AnyPick before using this data directory.`);
+	db.exec(SCHEMA);
+	if (current < 1) {
+		db.exec(`PRAGMA user_version = 1`);
+		current = 1;
+	}
+	for (let v = current; v < target; v++) {
+		const migration = MIGRATIONS[v - 1];
+		db.transaction(() => {
+			migration.up(db);
+			db.exec(`PRAGMA user_version = ${v + 1}`);
+		});
+	}
+}
+//#endregion
+export { MIGRATIONS, migrateSchema };
+
+//# sourceMappingURL=db-schema.js.map

package/dist/core/db-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-schema.js","names":[],"sources":["../../src/core/db-schema.ts"],"sourcesContent":["import type { AnyPickDatabase } from './db';\n\nconst SCHEMA = `\nPRAGMA journal_mode = WAL;\nPRAGMA foreign_keys = ON;\n\nCREATE TABLE IF NOT EXISTS config (\n  key TEXT PRIMARY KEY NOT NULL,\n  value TEXT NOT NULL\n);\n\nCREATE TABLE IF NOT EXISTS accounts (\n  provider TEXT NOT NULL,\n  name TEXT NOT NULL,\n  meta_json TEXT NOT NULL,\n  proxy_json TEXT NOT NULL DEFAULT '{}',\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL,\n  PRIMARY KEY (provider, name)\n);\n\nCREATE TABLE IF NOT EXISTS account_snapshot_files (\n  provider TEXT NOT NULL,\n  account TEXT NOT NULL,\n  path TEXT NOT NULL,\n  content BLOB NOT NULL,\n  PRIMARY KEY (provider, account, path),\n  FOREIGN KEY (provider, account)\n    REFERENCES accounts(provider, name)\n    ON DELETE CASCADE\n);\n\nCREATE TABLE IF NOT EXISTS provider_active (\n  provider TEXT PRIMARY KEY NOT NULL,\n  account_name TEXT NOT NULL\n);\n\nCREATE TABLE IF NOT EXISTS proxy_state (\n  provider TEXT NOT NULL,\n  account TEXT NOT NULL,\n  state_json TEXT NOT NULL,\n  PRIMARY KEY (provider, account)\n);\n\nCREATE TABLE IF NOT EXISTS profiles (\n  name TEXT PRIMARY KEY NOT NULL,\n  meta_json TEXT NOT NULL,\n  secrets_json TEXT NOT NULL DEFAULT '{}',\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL\n);\n\nCREATE TABLE IF NOT EXISTS client_state (\n  client_id TEXT PRIMARY KEY NOT NULL,\n  state_json TEXT NOT NULL\n);\n\nCREATE TABLE IF NOT EXISTS meta (\n  key TEXT PRIMARY KEY NOT NULL,\n  value TEXT NOT NULL\n);\n\nCREATE TABLE IF NOT EXISTS global_bindings (\n  client_id TEXT PRIMARY KEY NOT NULL,\n  spec_json TEXT NOT NULL,\n  provenance_json TEXT NOT NULL,\n  managed_config_revision TEXT,\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL\n);\n\nCREATE TABLE IF NOT EXISTS project_bindings (\n  project_root TEXT NOT NULL,\n  client_id TEXT NOT NULL,\n  spec_json TEXT NOT NULL,\n  provenance_json TEXT NOT NULL,\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL,\n  PRIMARY KEY (project_root, client_id)\n);\n\nCREATE TABLE IF NOT EXISTS source_resumes (\n  source_ref TEXT NOT NULL,\n  client_id TEXT NOT NULL,\n  spec_json TEXT NOT NULL,\n  updated_at TEXT NOT NULL,\n  PRIMARY KEY (source_ref, client_id)\n);\n\nCREATE TABLE IF NOT EXISTS presets (\n  id TEXT PRIMARY KEY NOT NULL,\n  name TEXT NOT NULL UNIQUE,\n  revision INTEGER NOT NULL DEFAULT 1,\n  spec_json TEXT NOT NULL,\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL,\n  last_used_at TEXT,\n  use_count INTEGER NOT NULL DEFAULT 0\n);\n\nCREATE TABLE IF NOT EXISTS operation_journal (\n  id TEXT PRIMARY KEY NOT NULL,\n  type TEXT NOT NULL,\n  state TEXT NOT NULL,\n  affected_resources_json TEXT NOT NULL DEFAULT '[]',\n  backup_paths_json TEXT NOT NULL DEFAULT '[]',\n  params_json TEXT,\n  started_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL\n);\n\nCREATE TABLE IF NOT EXISTS proxy_leases (\n  lease_id TEXT PRIMARY KEY NOT NULL,\n  provider TEXT NOT NULL,\n  account TEXT,\n  port INTEGER NOT NULL,\n  host TEXT NOT NULL DEFAULT '127.0.0.1',\n  endpoint TEXT,\n  owner_pid INTEGER NOT NULL,\n  instance_id TEXT,\n  binding_refs_json TEXT NOT NULL DEFAULT '[]',\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL\n);\n\nCREATE TABLE IF NOT EXISTS pools (\n  provider TEXT PRIMARY KEY NOT NULL,\n  mode TEXT NOT NULL DEFAULT 'single',\n  enabled INTEGER NOT NULL DEFAULT 0,\n  strategy TEXT NOT NULL DEFAULT 'failover',\n  host TEXT,\n  port INTEGER,\n  members_json TEXT NOT NULL DEFAULT '[]',\n  updated_at TEXT NOT NULL\n);\n\n-- Cached vendor model lists. Advisory data: a miss or a stale row costs a\n-- refetch, never correctness, so it is safe to delete this table at any time.\nCREATE TABLE IF NOT EXISTS model_catalog_cache (\n  provider TEXT NOT NULL,\n  endpoint TEXT NOT NULL,\n  models_json TEXT NOT NULL DEFAULT '[]',\n  fetched_at TEXT NOT NULL,\n  PRIMARY KEY (provider, endpoint)\n);\n\n-- The unified local Proxy Hub. Config and public runtime state intentionally\n-- live apart from per-account proxy_state: one hub can serve many providers.\nCREATE TABLE IF NOT EXISTS proxy_hubs (\n  name TEXT PRIMARY KEY NOT NULL,\n  config_json TEXT NOT NULL,\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL\n);\n\nCREATE TABLE IF NOT EXISTS proxy_hub_runtime (\n  name TEXT PRIMARY KEY NOT NULL,\n  state_json TEXT NOT NULL,\n  updated_at TEXT NOT NULL,\n  FOREIGN KEY (name) REFERENCES proxy_hubs(name) ON DELETE CASCADE\n);\n\n-- token_secret is owner-only material. It is never decoded into public status\n-- types or included in the Tray/CLI snapshot surface.\nCREATE TABLE IF NOT EXISTS proxy_hub_routes (\n  route_id TEXT PRIMARY KEY NOT NULL,\n  hub_name TEXT NOT NULL,\n  manifest_json TEXT NOT NULL,\n  token_secret TEXT NOT NULL UNIQUE,\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL,\n  FOREIGN KEY (hub_name) REFERENCES proxy_hubs(name) ON DELETE CASCADE\n);\n`;\n\n/**\n * Schema versioning.\n *\n * `SCHEMA` above is the *baseline* (version 1). It is applied idempotently with\n * `CREATE TABLE IF NOT EXISTS` so a fresh database is fully formed. `MIGRATIONS`\n * holds *ordered* DDL/backfill steps for every schema change *after* the\n * baseline. Each entry bumps `user_version` by one and is applied exactly once\n * per installed database, keyed off `PRAGMA user_version`.\n *\n * This exists because `IF NOT EXISTS` silently skips altered column types and\n * new constraints — without a versioned runner, the installed base would drift\n * from `SCHEMA` the first time a column changes. Add new steps here rather than\n * editing `SCHEMA` for anything that is not purely additive.\n */\nexport const BASELINE_VERSION = 1;\n\nexport interface SchemaMigration {\n  /** Human label, used in logs. */\n  name: string;\n  /** Apply against an already-open database. Run inside a transaction by caller. */\n  up(db: AnyPickDatabase): void;\n}\n\nfunction hasColumn(db: AnyPickDatabase, table: string, column: string): boolean {\n  return db\n    .prepare(`PRAGMA table_info(${table})`)\n    .all()\n    .some((entry: unknown) => {\n      if (typeof entry !== 'object' || entry === null) {\n        return false;\n      }\n      return (entry as Record<string, unknown>).name === column;\n    });\n}\n\n/** Migrations are applied in array order; index i corresponds to version i+2. */\nexport const MIGRATIONS: SchemaMigration[] = [\n  {\n    name: 'add source resume history',\n    up: (db) =>\n      db.exec(`\n        CREATE TABLE IF NOT EXISTS source_resumes (\n          source_ref TEXT NOT NULL,\n          client_id TEXT NOT NULL,\n          spec_json TEXT NOT NULL,\n          updated_at TEXT NOT NULL,\n          PRIMARY KEY (source_ref, client_id)\n        );\n      `),\n  },\n  {\n    name: 'add plugin registry',\n    up: (db) =>\n      db.exec(`\n        CREATE TABLE IF NOT EXISTS plugins (\n          name TEXT PRIMARY KEY NOT NULL,\n          path TEXT NOT NULL,\n          version TEXT NOT NULL,\n          enabled INTEGER NOT NULL DEFAULT 0,\n          digest TEXT NOT NULL,\n          added_at TEXT NOT NULL,\n          updated_at TEXT NOT NULL\n        );\n      `),\n  },\n  {\n    // `instance_id` was originally added to the fresh-install schema without\n    // a corresponding ALTER migration. Existing version-3 databases therefore\n    // failed whenever lease code selected the column (doctor/startup reaping).\n    name: 'add proxy lease instance identity',\n    up: (db) => {\n      if (!hasColumn(db, 'proxy_leases', 'instance_id')) {\n        db.exec('ALTER TABLE proxy_leases ADD COLUMN instance_id TEXT');\n      }\n    },\n  },\n  {\n    // Also present in the baseline SCHEMA so a fresh install is fully formed;\n    // this step is what gives an already-installed database the table.\n    name: 'add model catalog cache',\n    up: (db) =>\n      db.exec(`\n        CREATE TABLE IF NOT EXISTS model_catalog_cache (\n          provider TEXT NOT NULL,\n          endpoint TEXT NOT NULL,\n          models_json TEXT NOT NULL DEFAULT '[]',\n          fetched_at TEXT NOT NULL,\n          PRIMARY KEY (provider, endpoint)\n        );\n      `),\n  },\n  {\n    name: 'add proxy hub state and token-scoped routes',\n    up: (db) =>\n      db.exec(`\n        CREATE TABLE IF NOT EXISTS proxy_hubs (\n          name TEXT PRIMARY KEY NOT NULL,\n          config_json TEXT NOT NULL,\n          created_at TEXT NOT NULL,\n          updated_at TEXT NOT NULL\n        );\n        CREATE TABLE IF NOT EXISTS proxy_hub_runtime (\n          name TEXT PRIMARY KEY NOT NULL,\n          state_json TEXT NOT NULL,\n          updated_at TEXT NOT NULL,\n          FOREIGN KEY (name) REFERENCES proxy_hubs(name) ON DELETE CASCADE\n        );\n        CREATE TABLE IF NOT EXISTS proxy_hub_routes (\n          route_id TEXT PRIMARY KEY NOT NULL,\n          hub_name TEXT NOT NULL,\n          manifest_json TEXT NOT NULL,\n          token_secret TEXT NOT NULL UNIQUE,\n          created_at TEXT NOT NULL,\n          updated_at TEXT NOT NULL,\n          FOREIGN KEY (hub_name) REFERENCES proxy_hubs(name) ON DELETE CASCADE\n        );\n      `),\n  },\n];\n\n/**\n * Apply `SCHEMA` (baseline) then any pending versioned migrations. Idempotent:\n * safe to call on every open. Reads/writes `PRAGMA user_version`.\n */\nexport function migrateSchema(db: AnyPickDatabase): void {\n  const versionRow = db.prepare('PRAGMA user_version').get() as\n    | { user_version?: unknown }\n    | undefined;\n  let current = Number(versionRow?.user_version ?? 0);\n  const target = BASELINE_VERSION + MIGRATIONS.length;\n\n  // Opening a newer database with an older binary is unsafe: SQLite would\n  // happily let this build write against tables whose invariants it does not\n  // understand. Refuse before executing even idempotent DDL.\n  if (current > target) {\n    throw new Error(\n      `anypick.db schema version ${current} is newer than this AnyPick build supports (${target}). Upgrade AnyPick before using this data directory.`,\n    );\n  }\n\n  db.exec(SCHEMA);\n\n  // Unversioned database (fresh, or created before the versioning runner\n  // existed): the baseline SCHEMA above is exactly version BASELINE_VERSION.\n  if (current < BASELINE_VERSION) {\n    db.exec(`PRAGMA user_version = ${BASELINE_VERSION}`);\n    current = BASELINE_VERSION;\n  }\n\n  for (let v = current; v < target; v++) {\n    const migration = MIGRATIONS[v - BASELINE_VERSION];\n    db.transaction(() => {\n      migration.up(db);\n      db.exec(`PRAGMA user_version = ${v + 1}`);\n    });\n  }\n}\n"],"mappings":";AAEA,IAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoMf,SAAS,UAAU,IAAqB,OAAe,QAAyB;CAC9E,OAAO,GACJ,QAAQ,qBAAqB,MAAM,EAAE,CAAC,CACtC,IAAI,CAAC,CACL,MAAM,UAAmB;EACxB,IAAI,OAAO,UAAU,YAAY,UAAU,MACzC,OAAO;EAET,OAAQ,MAAkC,SAAS;CACrD,CAAC;AACL;;AAGA,IAAa,aAAgC;CAC3C;EACE,MAAM;EACN,KAAK,OACH,GAAG,KAAK;;;;;;;;OAQP;CACL;CACA;EACE,MAAM;EACN,KAAK,OACH,GAAG,KAAK;;;;;;;;;;OAUP;CACL;CACA;EAIE,MAAM;EACN,KAAK,OAAO;GACV,IAAI,CAAC,UAAU,IAAI,gBAAgB,aAAa,GAC9C,GAAG,KAAK,sDAAsD;EAElE;CACF;CACA;EAGE,MAAM;EACN,KAAK,OACH,GAAG,KAAK;;;;;;;;OAQP;CACL;CACA;EACE,MAAM;EACN,KAAK,OACH,GAAG,KAAK;;;;;;;;;;;;;;;;;;;;;;OAsBP;CACL;AACF;;;;;AAMA,SAAgB,cAAc,IAA2B;CACvD,MAAM,aAAa,GAAG,QAAQ,qBAAqB,CAAC,CAAC,IAAI;CAGzD,IAAI,UAAU,OAAO,YAAY,gBAAgB,CAAC;CAClD,MAAM,SAAA,IAA4B,WAAW;CAK7C,IAAI,UAAU,QACZ,MAAM,IAAI,MACR,6BAA6B,QAAQ,8CAA8C,OAAO,qDAC5F;CAGF,GAAG,KAAK,MAAM;CAId,IAAI,UAAA,GAA4B;EAC9B,GAAG,KAAK,yBAA2C;EACnD,UAAA;CACF;CAEA,KAAK,IAAI,IAAI,SAAS,IAAI,QAAQ,KAAK;EACrC,MAAM,YAAY,WAAW,IAAA;EAC7B,GAAG,kBAAkB;GACnB,UAAU,GAAG,EAAE;GACf,GAAG,KAAK,yBAAyB,IAAI,GAAG;EAC1C,CAAC;CACH;AACF"}

package/dist/core/db.d.ts

@@ -0,0 +1,72 @@
+export { BASELINE_VERSION, MIGRATIONS, migrateSchema } from './db-schema.js';
+/**
+ * Database boundary.
+ *
+ * `node:sqlite` is an experimental Node API and may change before 1.0. Every
+ * other module depends only on the `AnyPickDatabase` interface defined here; the
+ * concrete `node:sqlite` binding is confined to this file (the only module that
+ * imports `node:sqlite`). To swap the backend, implement `AnyPickDatabase` with
+ * another engine and change `openDatabase` and `openForeignDatabase` alone.
+ */
+/**
+ * Result of a mutating statement. SQLite reports these for every `run()`, so
+ * the shape is known even though row shapes are not — typing it keeps
+ * `.changes` checks honest at ~20 call sites across the stores.
+ */
+export interface SqlRunResult {
+    /** Rows inserted, updated, or deleted by this statement. */
+    changes: number | bigint;
+    lastInsertRowid: number | bigint;
+}
+export interface SqlStatement {
+    /**
+     * Row shapes are genuinely dynamic (each query selects different columns), so
+     * `get`/`all` surface `any` rather than leaking the concrete `node:sqlite`
+     * binding. Callers assert the shape they expect. `run` is different: its
+     * result shape is fixed by SQLite, so it is typed.
+     */
+    get(...params: unknown[]): any;
+    all(...params: unknown[]): any[];
+    run(...params: unknown[]): SqlRunResult;
+}
+export interface AnyPickDatabase {
+    prepare(sql: string): SqlStatement;
+    exec(sql: string): void;
+    close(): void;
+    /**
+     * Run `fn` inside a SQLite transaction. Commits on success; rolls back if
+     * `fn` throws or rejects. Nested calls are not supported (SQLite has a single
+     * implicit transaction level) — callers must not nest.
+     */
+    transaction<T>(fn: () => T): T;
+}
+/** Path to the SQLite database under the anypick root. */
+export declare function dbPath(root?: string): string;
+/**
+ * Copy the pre-rename data root into the AnyPick root exactly once.
+ *
+ * This runs only while the destination is the bootstrap database created by an
+ * interrupted first launch. The source remains intact, and the SQLite snapshot
+ * is produced with VACUUM INTO so WAL-backed changes are captured consistently.
+ */
+export declare function migrateLegacyRootIfPristine(root: string, legacyRoot: string): boolean;
+/**
+ * Open (or create) the anypick SQLite database.
+ * File permissions are tightened to 0600 when possible.
+ */
+export declare function openDatabase(root?: string): AnyPickDatabase;
+/**
+ * Open another application's SQLite file — no migrations, no permission
+ * changes, no anypick schema. Providers need this to read or rewrite the stores
+ * their upstream CLI owns (kiro-cli's `auth_kv`), and routing it through here
+ * keeps `node:sqlite` confined to this module.
+ *
+ * Throws when the file is missing or is not a database; callers decide whether
+ * that means "not logged in" or a real failure.
+ */
+export declare function openForeignDatabase(path: string, readOnly?: boolean): AnyPickDatabase;
+export declare function getMeta(db: AnyPickDatabase, key: string): string | null;
+export declare function setMeta(db: AnyPickDatabase, key: string, value: string): void;
+export declare function getConfigValue(db: AnyPickDatabase, key: string): string | null;
+export declare function setConfigValue(db: AnyPickDatabase, key: string, value: string): void;
+//# sourceMappingURL=db.d.ts.map

package/dist/core/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/core/db.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE1E;;;;;;;;GAQG;AACH;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,4DAA4D;IAC5D,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,GAAG,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IAEH,GAAG,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IAC/B,GAAG,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC;IAEjC,GAAG,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAAC;IACnC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,IAAI,IAAI,CAAC;IACd;;;;OAIG;IACH,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;CAChC;AAoCD,0DAA0D;AAC1D,wBAAgB,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAE5C;AA6CD;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAkErF;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,eAAe,CAqC3D;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,UAAQ,GAAG,eAAe,CAEnF;AAED,wBAAgB,OAAO,CAAC,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKvE;AAED,wBAAgB,OAAO,CAAC,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAK7E;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK9E;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAKpF"}

package/dist/core/db.js

@@ -0,0 +1,192 @@
+import { anypickDbPath, getAnyPickRoot } from "./paths.js";
+import { migrateSchema } from "./db-schema.js";
+import { chmodSync, cpSync, existsSync, mkdirSync, readdirSync, renameSync, writeFileSync } from "node:fs";
+import { basename, dirname, join } from "node:path";
+import { DatabaseSync } from "node:sqlite";
+//#region src/core/db.ts
+/** Adapter wrapping the experimental `node:sqlite` binding behind AnyPickDatabase. */
+var NodeSqliteDatabase = class {
+	inner;
+	constructor(inner) {
+		this.inner = inner;
+	}
+	prepare(sql) {
+		const stmt = this.inner.prepare(sql);
+		return {
+			get: (...params) => stmt.get(...params),
+			all: (...params) => stmt.all(...params),
+			run: (...params) => stmt.run(...params)
+		};
+	}
+	exec(sql) {
+		this.inner.exec(sql);
+	}
+	transaction(fn) {
+		this.inner.exec("BEGIN");
+		try {
+			const result = fn();
+			this.inner.exec("COMMIT");
+			return result;
+		} catch (err) {
+			this.inner.exec("ROLLBACK");
+			throw err;
+		}
+	}
+	close() {
+		this.inner.close();
+	}
+};
+/** Path to the SQLite database under the anypick root. */
+function dbPath(root) {
+	return anypickDbPath(getAnyPickRoot(root));
+}
+var BOOTSTRAP_FILES = /* @__PURE__ */ new Set([
+	"anypick.db",
+	"anypick.db-shm",
+	"anypick.db-wal",
+	".migrate.lock"
+]);
+var SYSTEM_TABLE_PREFIX = "sqlite_";
+var BOOTSTRAP_TABLES = /* @__PURE__ */ new Set(["config", "meta"]);
+function hasUserData(path) {
+	if (!existsSync(path)) return false;
+	let source;
+	try {
+		source = new DatabaseSync(path, { readOnly: true });
+		const database = source;
+		return database.prepare("SELECT name FROM sqlite_master WHERE type = 'table'").all().some(({ name }) => {
+			if (name.startsWith(SYSTEM_TABLE_PREFIX) || BOOTSTRAP_TABLES.has(name)) return false;
+			const row = database.prepare(`SELECT COUNT(*) AS count FROM "${name.replaceAll("\"", "\"\"")}"`).get();
+			return Number(row?.count ?? 0) > 0;
+		});
+	} catch {
+		return true;
+	} finally {
+		source?.close();
+	}
+}
+function quoteSqlString(value) {
+	return `'${value.replaceAll("'", "''")}'`;
+}
+/**
+* Copy the pre-rename data root into the AnyPick root exactly once.
+*
+* This runs only while the destination is the bootstrap database created by an
+* interrupted first launch. The source remains intact, and the SQLite snapshot
+* is produced with VACUUM INTO so WAL-backed changes are captured consistently.
+*/
+function migrateLegacyRootIfPristine(root, legacyRoot) {
+	if (!existsSync(legacyRoot)) return false;
+	if ((existsSync(root) ? readdirSync(root) : []).some((file) => !BOOTSTRAP_FILES.has(file)) || hasUserData(anypickDbPath(root))) return false;
+	const sourceDb = ["hotplug.db", "anypick.db"].map((file) => join(legacyRoot, file)).find((file) => existsSync(file));
+	if (!sourceDb || !hasUserData(sourceDb)) return false;
+	const stagingRoot = `${root}.migration-${process.pid}-${Date.now()}`;
+	const backupRoot = `${root}.bootstrap-${process.pid}-${Date.now()}`;
+	mkdirSync(dirname(root), {
+		recursive: true,
+		mode: 448
+	});
+	try {
+		cpSync(legacyRoot, stagingRoot, {
+			recursive: true,
+			preserveTimestamps: true,
+			filter: (source) => {
+				const file = basename(source);
+				return ![
+					"anypick.db",
+					"anypick.db-shm",
+					"anypick.db-wal",
+					"hotplug.db"
+				].includes(file);
+			}
+		});
+		mkdirSync(stagingRoot, {
+			recursive: true,
+			mode: 448
+		});
+		const snapshot = new DatabaseSync(sourceDb);
+		try {
+			snapshot.exec(`VACUUM INTO ${quoteSqlString(join(stagingRoot, "anypick.db"))}`);
+		} finally {
+			snapshot.close();
+		}
+		chmodSync(stagingRoot, 448);
+		chmodSync(join(stagingRoot, "anypick.db"), 384);
+		if (existsSync(join(root, ".migrate.lock"))) cpSync(join(root, ".migrate.lock"), join(stagingRoot, ".migrate.lock"));
+		else writeFileSync(join(stagingRoot, ".migrate.lock"), "", { mode: 384 });
+		if (existsSync(root)) renameSync(root, backupRoot);
+		try {
+			renameSync(stagingRoot, root);
+		} catch (error) {
+			if (existsSync(backupRoot)) renameSync(backupRoot, root);
+			throw error;
+		}
+		return true;
+	} catch (error) {
+		if (existsSync(stagingRoot)) renameSync(stagingRoot, `${stagingRoot}.failed`);
+		throw error;
+	}
+}
+/**
+* Open (or create) the anypick SQLite database.
+* File permissions are tightened to 0600 when possible.
+*/
+function openDatabase(root) {
+	const path = dbPath(root);
+	const anypickRoot = dirname(path);
+	mkdirSync(anypickRoot, {
+		recursive: true,
+		mode: 448
+	});
+	try {
+		chmodSync(anypickRoot, 448);
+	} catch {}
+	const inner = new DatabaseSync(path);
+	const db = new NodeSqliteDatabase(inner);
+	try {
+		migrateSchema(db);
+	} catch (err) {
+		inner.close();
+		throw err;
+	}
+	try {
+		chmodSync(path, 384);
+	} catch {}
+	for (const suffix of ["-wal", "-shm"]) {
+		const side = `${path}${suffix}`;
+		if (existsSync(side)) try {
+			chmodSync(side, 384);
+		} catch {}
+	}
+	return db;
+}
+/**
+* Open another application's SQLite file — no migrations, no permission
+* changes, no anypick schema. Providers need this to read or rewrite the stores
+* their upstream CLI owns (kiro-cli's `auth_kv`), and routing it through here
+* keeps `node:sqlite` confined to this module.
+*
+* Throws when the file is missing or is not a database; callers decide whether
+* that means "not logged in" or a real failure.
+*/
+function openForeignDatabase(path, readOnly = false) {
+	return new NodeSqliteDatabase(new DatabaseSync(path, { readOnly }));
+}
+function getMeta(db, key) {
+	return db.prepare("SELECT value FROM meta WHERE key = ?").get(key)?.value ?? null;
+}
+function setMeta(db, key, value) {
+	db.prepare(`INSERT INTO meta (key, value) VALUES (?, ?)
+     ON CONFLICT(key) DO UPDATE SET value = excluded.value`).run(key, value);
+}
+function getConfigValue(db, key) {
+	return db.prepare("SELECT value FROM config WHERE key = ?").get(key)?.value ?? null;
+}
+function setConfigValue(db, key, value) {
+	db.prepare(`INSERT INTO config (key, value) VALUES (?, ?)
+     ON CONFLICT(key) DO UPDATE SET value = excluded.value`).run(key, value);
+}
+//#endregion
+export { dbPath, getConfigValue, getMeta, migrateLegacyRootIfPristine, openDatabase, openForeignDatabase, setConfigValue, setMeta };
+
+//# sourceMappingURL=db.js.map

package/dist/core/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","names":[],"sources":["../../src/core/db.ts"],"sourcesContent":["import {\n  chmodSync,\n  cpSync,\n  existsSync,\n  mkdirSync,\n  readdirSync,\n  renameSync,\n  writeFileSync,\n} from 'node:fs';\nimport { basename, dirname, join } from 'node:path';\nimport { DatabaseSync } from 'node:sqlite';\nimport { anypickDbPath, getAnyPickRoot } from './paths';\nimport { migrateSchema } from './db-schema';\nexport { BASELINE_VERSION, MIGRATIONS, migrateSchema } from './db-schema';\n\n/**\n * Database boundary.\n *\n * `node:sqlite` is an experimental Node API and may change before 1.0. Every\n * other module depends only on the `AnyPickDatabase` interface defined here; the\n * concrete `node:sqlite` binding is confined to this file (the only module that\n * imports `node:sqlite`). To swap the backend, implement `AnyPickDatabase` with\n * another engine and change `openDatabase` and `openForeignDatabase` alone.\n */\n/**\n * Result of a mutating statement. SQLite reports these for every `run()`, so\n * the shape is known even though row shapes are not — typing it keeps\n * `.changes` checks honest at ~20 call sites across the stores.\n */\nexport interface SqlRunResult {\n  /** Rows inserted, updated, or deleted by this statement. */\n  changes: number | bigint;\n  lastInsertRowid: number | bigint;\n}\n\nexport interface SqlStatement {\n  /**\n   * Row shapes are genuinely dynamic (each query selects different columns), so\n   * `get`/`all` surface `any` rather than leaking the concrete `node:sqlite`\n   * binding. Callers assert the shape they expect. `run` is different: its\n   * result shape is fixed by SQLite, so it is typed.\n   */\n  /* eslint-disable @typescript-eslint/no-explicit-any */\n  get(...params: unknown[]): any;\n  all(...params: unknown[]): any[];\n  /* eslint-enable @typescript-eslint/no-explicit-any */\n  run(...params: unknown[]): SqlRunResult;\n}\n\nexport interface AnyPickDatabase {\n  prepare(sql: string): SqlStatement;\n  exec(sql: string): void;\n  close(): void;\n  /**\n   * Run `fn` inside a SQLite transaction. Commits on success; rolls back if\n   * `fn` throws or rejects. Nested calls are not supported (SQLite has a single\n   * implicit transaction level) — callers must not nest.\n   */\n  transaction<T>(fn: () => T): T;\n}\n\n/** Adapter wrapping the experimental `node:sqlite` binding behind AnyPickDatabase. */\nclass NodeSqliteDatabase implements AnyPickDatabase {\n  constructor(private readonly inner: DatabaseSync) {}\n\n  prepare(sql: string): SqlStatement {\n    const stmt = this.inner.prepare(sql);\n    return {\n      get: (...params: unknown[]) => stmt.get(...(params as Parameters<typeof stmt.get>)),\n      all: (...params: unknown[]) => stmt.all(...(params as Parameters<typeof stmt.all>)),\n      run: (...params: unknown[]) => stmt.run(...(params as Parameters<typeof stmt.run>)),\n    };\n  }\n\n  exec(sql: string): void {\n    this.inner.exec(sql);\n  }\n\n  transaction<T>(fn: () => T): T {\n    this.inner.exec('BEGIN');\n    try {\n      const result = fn();\n      this.inner.exec('COMMIT');\n      return result;\n    } catch (err) {\n      this.inner.exec('ROLLBACK');\n      throw err;\n    }\n  }\n\n  close(): void {\n    this.inner.close();\n  }\n}\n\n/** Path to the SQLite database under the anypick root. */\nexport function dbPath(root?: string): string {\n  return anypickDbPath(getAnyPickRoot(root));\n}\n\nconst BOOTSTRAP_FILES = new Set([\n  'anypick.db',\n  'anypick.db-shm',\n  'anypick.db-wal',\n  '.migrate.lock',\n]);\nconst SYSTEM_TABLE_PREFIX = 'sqlite_';\nconst BOOTSTRAP_TABLES = new Set(['config', 'meta']);\n\nfunction hasUserData(path: string): boolean {\n  if (!existsSync(path)) {\n    return false;\n  }\n  let source: DatabaseSync | undefined;\n  try {\n    source = new DatabaseSync(path, { readOnly: true });\n    const database = source;\n    const tables = database\n      .prepare(\"SELECT name FROM sqlite_master WHERE type = 'table'\")\n      .all() as {\n      name: string;\n    }[];\n    return tables.some(({ name }) => {\n      if (name.startsWith(SYSTEM_TABLE_PREFIX) || BOOTSTRAP_TABLES.has(name)) {\n        return false;\n      }\n      const row = database\n        .prepare(`SELECT COUNT(*) AS count FROM \"${name.replaceAll('\"', '\"\"')}\"`)\n        .get() as { count?: number | bigint } | undefined;\n      return Number(row?.count ?? 0) > 0;\n    });\n  } catch {\n    // A malformed or inaccessible destination is not safe to overwrite.\n    return true;\n  } finally {\n    source?.close();\n  }\n}\n\nfunction quoteSqlString(value: string): string {\n  return `'${value.replaceAll(\"'\", \"''\")}'`;\n}\n\n/**\n * Copy the pre-rename data root into the AnyPick root exactly once.\n *\n * This runs only while the destination is the bootstrap database created by an\n * interrupted first launch. The source remains intact, and the SQLite snapshot\n * is produced with VACUUM INTO so WAL-backed changes are captured consistently.\n */\nexport function migrateLegacyRootIfPristine(root: string, legacyRoot: string): boolean {\n  if (!existsSync(legacyRoot)) {\n    return false;\n  }\n  const destinationFiles = existsSync(root) ? readdirSync(root) : [];\n  if (\n    destinationFiles.some((file) => !BOOTSTRAP_FILES.has(file)) ||\n    hasUserData(anypickDbPath(root))\n  ) {\n    return false;\n  }\n\n  // The original database remains authoritative during the rename. A partial\n  // first launch can create an AnyPick-named database alongside it, but that\n  // bootstrap file must never win over the saved account store.\n  const sourceDb = ['hotplug.db', 'anypick.db']\n    .map((file) => join(legacyRoot, file))\n    .find((file) => existsSync(file));\n  if (!sourceDb || !hasUserData(sourceDb)) {\n    return false;\n  }\n\n  const stagingRoot = `${root}.migration-${process.pid}-${Date.now()}`;\n  const backupRoot = `${root}.bootstrap-${process.pid}-${Date.now()}`;\n  mkdirSync(dirname(root), { recursive: true, mode: 0o700 });\n  try {\n    cpSync(legacyRoot, stagingRoot, {\n      recursive: true,\n      preserveTimestamps: true,\n      filter: (source) => {\n        const file = basename(source);\n        return !['anypick.db', 'anypick.db-shm', 'anypick.db-wal', 'hotplug.db'].includes(file);\n      },\n    });\n    mkdirSync(stagingRoot, { recursive: true, mode: 0o700 });\n    const snapshot = new DatabaseSync(sourceDb);\n    try {\n      snapshot.exec(`VACUUM INTO ${quoteSqlString(join(stagingRoot, 'anypick.db'))}`);\n    } finally {\n      snapshot.close();\n    }\n    chmodSync(stagingRoot, 0o700);\n    chmodSync(join(stagingRoot, 'anypick.db'), 0o600);\n    if (existsSync(join(root, '.migrate.lock'))) {\n      cpSync(join(root, '.migrate.lock'), join(stagingRoot, '.migrate.lock'));\n    } else {\n      writeFileSync(join(stagingRoot, '.migrate.lock'), '', { mode: 0o600 });\n    }\n    if (existsSync(root)) {\n      renameSync(root, backupRoot);\n    }\n    try {\n      renameSync(stagingRoot, root);\n    } catch (error) {\n      if (existsSync(backupRoot)) {\n        renameSync(backupRoot, root);\n      }\n      throw error;\n    }\n    return true;\n  } catch (error) {\n    if (existsSync(stagingRoot)) {\n      renameSync(stagingRoot, `${stagingRoot}.failed`);\n    }\n    throw error;\n  }\n}\n\n/**\n * Open (or create) the anypick SQLite database.\n * File permissions are tightened to 0600 when possible.\n */\nexport function openDatabase(root?: string): AnyPickDatabase {\n  const path = dbPath(root);\n  const anypickRoot = dirname(path);\n  mkdirSync(anypickRoot, { recursive: true, mode: 0o700 });\n  try {\n    chmodSync(anypickRoot, 0o700);\n  } catch {\n    // Windows / some FS may not support chmod\n  }\n  const inner = new DatabaseSync(path);\n  const db = new NodeSqliteDatabase(inner);\n  try {\n    // Apply baseline schema + any pending versioned migrations.\n    migrateSchema(db);\n  } catch (err) {\n    // In particular, a forward-incompatible schema must not leave a live\n    // descriptor behind every time a caller retries startup.\n    inner.close();\n    throw err;\n  }\n  try {\n    chmodSync(path, 0o600);\n  } catch {\n    // Windows / some FS may not support chmod\n  }\n  // Best-effort WAL sidecar permissions\n  for (const suffix of ['-wal', '-shm']) {\n    const side = `${path}${suffix}`;\n    if (existsSync(side)) {\n      try {\n        chmodSync(side, 0o600);\n      } catch {\n        // ignore\n      }\n    }\n  }\n  return db;\n}\n\n/**\n * Open another application's SQLite file — no migrations, no permission\n * changes, no anypick schema. Providers need this to read or rewrite the stores\n * their upstream CLI owns (kiro-cli's `auth_kv`), and routing it through here\n * keeps `node:sqlite` confined to this module.\n *\n * Throws when the file is missing or is not a database; callers decide whether\n * that means \"not logged in\" or a real failure.\n */\nexport function openForeignDatabase(path: string, readOnly = false): AnyPickDatabase {\n  return new NodeSqliteDatabase(new DatabaseSync(path, { readOnly }));\n}\n\nexport function getMeta(db: AnyPickDatabase, key: string): string | null {\n  const row = db.prepare('SELECT value FROM meta WHERE key = ?').get(key) as\n    | { value: string }\n    | undefined;\n  return row?.value ?? null;\n}\n\nexport function setMeta(db: AnyPickDatabase, key: string, value: string): void {\n  db.prepare(\n    `INSERT INTO meta (key, value) VALUES (?, ?)\n     ON CONFLICT(key) DO UPDATE SET value = excluded.value`,\n  ).run(key, value);\n}\n\nexport function getConfigValue(db: AnyPickDatabase, key: string): string | null {\n  const row = db.prepare('SELECT value FROM config WHERE key = ?').get(key) as\n    | { value: string }\n    | undefined;\n  return row?.value ?? null;\n}\n\nexport function setConfigValue(db: AnyPickDatabase, key: string, value: string): void {\n  db.prepare(\n    `INSERT INTO config (key, value) VALUES (?, ?)\n     ON CONFLICT(key) DO UPDATE SET value = excluded.value`,\n  ).run(key, value);\n}\n"],"mappings":";;;;;;;AA8DA,IAAM,qBAAN,MAAoD;CACrB;CAA7B,YAAY,OAAsC;EAArB,KAAA,QAAA;CAAsB;CAEnD,QAAQ,KAA2B;EACjC,MAAM,OAAO,KAAK,MAAM,QAAQ,GAAG;EACnC,OAAO;GACL,MAAM,GAAG,WAAsB,KAAK,IAAI,GAAI,MAAsC;GAClF,MAAM,GAAG,WAAsB,KAAK,IAAI,GAAI,MAAsC;GAClF,MAAM,GAAG,WAAsB,KAAK,IAAI,GAAI,MAAsC;EACpF;CACF;CAEA,KAAK,KAAmB;EACtB,KAAK,MAAM,KAAK,GAAG;CACrB;CAEA,YAAe,IAAgB;EAC7B,KAAK,MAAM,KAAK,OAAO;EACvB,IAAI;GACF,MAAM,SAAS,GAAG;GAClB,KAAK,MAAM,KAAK,QAAQ;GACxB,OAAO;EACT,SAAS,KAAK;GACZ,KAAK,MAAM,KAAK,UAAU;GAC1B,MAAM;EACR;CACF;CAEA,QAAc;EACZ,KAAK,MAAM,MAAM;CACnB;AACF;;AAGA,SAAgB,OAAO,MAAuB;CAC5C,OAAO,cAAc,eAAe,IAAI,CAAC;AAC3C;AAEA,IAAM,kCAAkB,IAAI,IAAI;CAC9B;CACA;CACA;CACA;AACF,CAAC;AACD,IAAM,sBAAsB;AAC5B,IAAM,mCAAmB,IAAI,IAAI,CAAC,UAAU,MAAM,CAAC;AAEnD,SAAS,YAAY,MAAuB;CAC1C,IAAI,CAAC,WAAW,IAAI,GAClB,OAAO;CAET,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,aAAa,MAAM,EAAE,UAAU,KAAK,CAAC;EAClD,MAAM,WAAW;EAMjB,OALe,SACZ,QAAQ,qDAAqD,CAAC,CAC9D,IAGI,CAAA,CAAO,MAAM,EAAE,WAAW;GAC/B,IAAI,KAAK,WAAW,mBAAmB,KAAK,iBAAiB,IAAI,IAAI,GACnE,OAAO;GAET,MAAM,MAAM,SACT,QAAQ,kCAAkC,KAAK,WAAW,MAAK,MAAI,EAAE,EAAE,CAAC,CACxE,IAAI;GACP,OAAO,OAAO,KAAK,SAAS,CAAC,IAAI;EACnC,CAAC;CACH,QAAQ;EAEN,OAAO;CACT,UAAU;EACR,QAAQ,MAAM;CAChB;AACF;AAEA,SAAS,eAAe,OAAuB;CAC7C,OAAO,IAAI,MAAM,WAAW,KAAK,IAAI,EAAE;AACzC;;;;;;;;AASA,SAAgB,4BAA4B,MAAc,YAA6B;CACrF,IAAI,CAAC,WAAW,UAAU,GACxB,OAAO;CAGT,KADyB,WAAW,IAAI,IAAI,YAAY,IAAI,IAAI,CAAC,EAAA,CAE9C,MAAM,SAAS,CAAC,gBAAgB,IAAI,IAAI,CAAC,KAC1D,YAAY,cAAc,IAAI,CAAC,GAE/B,OAAO;CAMT,MAAM,WAAW,CAAC,cAAc,YAAY,CAAC,CAC1C,KAAK,SAAS,KAAK,YAAY,IAAI,CAAC,CAAC,CACrC,MAAM,SAAS,WAAW,IAAI,CAAC;CAClC,IAAI,CAAC,YAAY,CAAC,YAAY,QAAQ,GACpC,OAAO;CAGT,MAAM,cAAc,GAAG,KAAK,aAAa,QAAQ,IAAI,GAAG,KAAK,IAAI;CACjE,MAAM,aAAa,GAAG,KAAK,aAAa,QAAQ,IAAI,GAAG,KAAK,IAAI;CAChE,UAAU,QAAQ,IAAI,GAAG;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CACzD,IAAI;EACF,OAAO,YAAY,aAAa;GAC9B,WAAW;GACX,oBAAoB;GACpB,SAAS,WAAW;IAClB,MAAM,OAAO,SAAS,MAAM;IAC5B,OAAO,CAAC;KAAC;KAAc;KAAkB;KAAkB;IAAY,CAAC,CAAC,SAAS,IAAI;GACxF;EACF,CAAC;EACD,UAAU,aAAa;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EACvD,MAAM,WAAW,IAAI,aAAa,QAAQ;EAC1C,IAAI;GACF,SAAS,KAAK,eAAe,eAAe,KAAK,aAAa,YAAY,CAAC,GAAG;EAChF,UAAU;GACR,SAAS,MAAM;EACjB;EACA,UAAU,aAAa,GAAK;EAC5B,UAAU,KAAK,aAAa,YAAY,GAAG,GAAK;EAChD,IAAI,WAAW,KAAK,MAAM,eAAe,CAAC,GACxC,OAAO,KAAK,MAAM,eAAe,GAAG,KAAK,aAAa,eAAe,CAAC;OAEtE,cAAc,KAAK,aAAa,eAAe,GAAG,IAAI,EAAE,MAAM,IAAM,CAAC;EAEvE,IAAI,WAAW,IAAI,GACjB,WAAW,MAAM,UAAU;EAE7B,IAAI;GACF,WAAW,aAAa,IAAI;EAC9B,SAAS,OAAO;GACd,IAAI,WAAW,UAAU,GACvB,WAAW,YAAY,IAAI;GAE7B,MAAM;EACR;EACA,OAAO;CACT,SAAS,OAAO;EACd,IAAI,WAAW,WAAW,GACxB,WAAW,aAAa,GAAG,YAAY,QAAQ;EAEjD,MAAM;CACR;AACF;;;;;AAMA,SAAgB,aAAa,MAAgC;CAC3D,MAAM,OAAO,OAAO,IAAI;CACxB,MAAM,cAAc,QAAQ,IAAI;CAChC,UAAU,aAAa;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CACvD,IAAI;EACF,UAAU,aAAa,GAAK;CAC9B,QAAQ,CAER;CACA,MAAM,QAAQ,IAAI,aAAa,IAAI;CACnC,MAAM,KAAK,IAAI,mBAAmB,KAAK;CACvC,IAAI;EAEF,cAAc,EAAE;CAClB,SAAS,KAAK;EAGZ,MAAM,MAAM;EACZ,MAAM;CACR;CACA,IAAI;EACF,UAAU,MAAM,GAAK;CACvB,QAAQ,CAER;CAEA,KAAK,MAAM,UAAU,CAAC,QAAQ,MAAM,GAAG;EACrC,MAAM,OAAO,GAAG,OAAO;EACvB,IAAI,WAAW,IAAI,GACjB,IAAI;GACF,UAAU,MAAM,GAAK;EACvB,QAAQ,CAER;CAEJ;CACA,OAAO;AACT;;;;;;;;;;AAWA,SAAgB,oBAAoB,MAAc,WAAW,OAAwB;CACnF,OAAO,IAAI,mBAAmB,IAAI,aAAa,MAAM,EAAE,SAAS,CAAC,CAAC;AACpE;AAEA,SAAgB,QAAQ,IAAqB,KAA4B;CAIvE,OAHY,GAAG,QAAQ,sCAAsC,CAAC,CAAC,IAAI,GAG5D,CAAA,EAAK,SAAS;AACvB;AAEA,SAAgB,QAAQ,IAAqB,KAAa,OAAqB;CAC7E,GAAG,QACD;2DAEF,CAAC,CAAC,IAAI,KAAK,KAAK;AAClB;AAEA,SAAgB,eAAe,IAAqB,KAA4B;CAI9E,OAHY,GAAG,QAAQ,wCAAwC,CAAC,CAAC,IAAI,GAG9D,CAAA,EAAK,SAAS;AACvB;AAEA,SAAgB,eAAe,IAAqB,KAAa,OAAqB;CACpF,GAAG,QACD;2DAEF,CAAC,CAAC,IAAI,KAAK,KAAK;AAClB"}

package/dist/core/doctor-fixes.d.ts

@@ -0,0 +1,3 @@
+import type { DoctorFixAction, DoctorServiceDeps } from './doctor-types.js';
+export declare function executeDoctorFix(action: DoctorFixAction, root: string, deps: DoctorServiceDeps): Promise<string>;
+//# sourceMappingURL=doctor-fixes.d.ts.map

package/dist/core/doctor-fixes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-fixes.d.ts","sourceRoot":"","sources":["../../src/core/doctor-fixes.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAGzE,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,eAAe,EACvB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,MAAM,CAAC,CAqBjB"}