anypick 1.0.0

package/dist/core/lease-store.d.ts

@@ -0,0 +1,22 @@
+import type { ProxyLease } from '../types.js';
+import type { AnyPickDatabase } from './db.js';
+export declare class LeaseStore {
+    private readonly db;
+    constructor(db: AnyPickDatabase);
+    create(opts: {
+        provider: string;
+        account?: string;
+        port: number;
+        host?: string;
+        endpoint?: string;
+        ownerPid?: number;
+        instanceId?: string;
+        bindingRefs?: string[];
+    }): ProxyLease;
+    get(leaseId: string): ProxyLease | null;
+    list(): ProxyLease[];
+    findByProviderAccount(provider: string, account?: string): ProxyLease | null;
+    release(leaseId: string): boolean;
+    releaseByProviderAccount(provider: string, account?: string): number;
+}
+//# sourceMappingURL=lease-store.d.ts.map

package/dist/core/lease-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease-store.d.ts","sourceRoot":"","sources":["../../src/core/lease-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAG3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAwC5C,qBAAa,UAAU;IACT,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,eAAe,EAAI;IAEpD,MAAM,CAAC,IAAI,EAAE;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;KACxB,GAAG,UAAU,CAoCb;IAED,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAStC;IAED,IAAI,IAAI,UAAU,EAAE,CASnB;IAED,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAmB3E;IAED,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAGhC;IAED,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CASnE;CACF"}

package/dist/core/lease-store.js

@@ -0,0 +1,81 @@
+import { decode, decoders } from "./codec.js";
+import { randomUUID } from "node:crypto";
+//#region src/core/lease-store.ts
+function nowIso() {
+	return (/* @__PURE__ */ new Date()).toISOString();
+}
+function parse(row) {
+	return decode(JSON.stringify({
+		leaseId: row.lease_id,
+		provider: row.provider,
+		account: row.account ?? void 0,
+		port: row.port,
+		host: row.host,
+		endpoint: row.endpoint ?? void 0,
+		ownerPid: row.owner_pid,
+		instanceId: row.instance_id ?? void 0,
+		bindingRefs: JSON.parse(row.binding_refs_json),
+		createdAt: row.created_at,
+		updatedAt: row.updated_at
+	}), decoders.proxyLease, `lease/${row.lease_id}`);
+}
+var LeaseStore = class {
+	db;
+	constructor(db) {
+		this.db = db;
+	}
+	create(opts) {
+		const ts = nowIso();
+		const lease = {
+			leaseId: randomUUID(),
+			provider: opts.provider,
+			account: opts.account,
+			port: opts.port,
+			host: opts.host ?? "127.0.0.1",
+			endpoint: opts.endpoint,
+			ownerPid: opts.ownerPid ?? process.pid,
+			instanceId: opts.instanceId,
+			bindingRefs: opts.bindingRefs ?? [],
+			createdAt: ts,
+			updatedAt: ts
+		};
+		this.db.prepare(`INSERT INTO proxy_leases
+           (lease_id, provider, account, port, host, endpoint, owner_pid,
+            instance_id, binding_refs_json, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(lease.leaseId, lease.provider, lease.account ?? null, lease.port, lease.host, lease.endpoint ?? null, lease.ownerPid, lease.instanceId ?? null, JSON.stringify(lease.bindingRefs), lease.createdAt, lease.updatedAt);
+		return lease;
+	}
+	get(leaseId) {
+		const row = this.db.prepare(`SELECT lease_id, provider, account, port, host, endpoint, owner_pid, instance_id,
+                binding_refs_json, created_at, updated_at
+         FROM proxy_leases WHERE lease_id = ?`).get(leaseId);
+		return row ? parse(row) : null;
+	}
+	list() {
+		return this.db.prepare(`SELECT lease_id, provider, account, port, host, endpoint, owner_pid, instance_id,
+                binding_refs_json, created_at, updated_at
+         FROM proxy_leases ORDER BY created_at`).all().map(parse);
+	}
+	findByProviderAccount(provider, account) {
+		const row = account ? this.db.prepare(`SELECT lease_id, provider, account, port, host, endpoint, owner_pid, instance_id,
+                    binding_refs_json, created_at, updated_at
+             FROM proxy_leases WHERE provider = ? AND account = ?
+             ORDER BY created_at DESC LIMIT 1`).get(provider, account) : this.db.prepare(`SELECT lease_id, provider, account, port, host, endpoint, owner_pid, instance_id,
+                    binding_refs_json, created_at, updated_at
+             FROM proxy_leases WHERE provider = ? AND account IS NULL
+             ORDER BY created_at DESC LIMIT 1`).get(provider);
+		return row ? parse(row) : null;
+	}
+	release(leaseId) {
+		const r = this.db.prepare(`DELETE FROM proxy_leases WHERE lease_id = ?`).run(leaseId);
+		return Number(r.changes) > 0;
+	}
+	releaseByProviderAccount(provider, account) {
+		const r = account ? this.db.prepare(`DELETE FROM proxy_leases WHERE provider = ? AND account = ?`).run(provider, account) : this.db.prepare(`DELETE FROM proxy_leases WHERE provider = ? AND account IS NULL`).run(provider);
+		return Number(r.changes);
+	}
+};
+//#endregion
+export { LeaseStore };
+
+//# sourceMappingURL=lease-store.js.map

package/dist/core/lease-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease-store.js","names":[],"sources":["../../src/core/lease-store.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\nimport type { ProxyLease } from '../types';\nimport { decode } from './codec';\nimport { decoders } from './codec';\nimport type { AnyPickDatabase } from './db';\n\ninterface LeaseRow {\n  lease_id: string;\n  provider: string;\n  account: string | null;\n  port: number;\n  host: string;\n  endpoint: string | null;\n  owner_pid: number;\n  instance_id: string | null;\n  binding_refs_json: string;\n  created_at: string;\n  updated_at: string;\n}\n\nfunction nowIso(): string {\n  return new Date().toISOString();\n}\n\nfunction parse(row: LeaseRow): ProxyLease {\n  return decode(\n    JSON.stringify({\n      leaseId: row.lease_id,\n      provider: row.provider,\n      account: row.account ?? undefined,\n      port: row.port,\n      host: row.host,\n      endpoint: row.endpoint ?? undefined,\n      ownerPid: row.owner_pid,\n      instanceId: row.instance_id ?? undefined,\n      bindingRefs: JSON.parse(row.binding_refs_json) as string[],\n      createdAt: row.created_at,\n      updatedAt: row.updated_at,\n    }),\n    decoders.proxyLease,\n    `lease/${row.lease_id}`,\n  );\n}\n\nexport class LeaseStore {\n  constructor(private readonly db: AnyPickDatabase) {}\n\n  create(opts: {\n    provider: string;\n    account?: string;\n    port: number;\n    host?: string;\n    endpoint?: string;\n    ownerPid?: number;\n    instanceId?: string;\n    bindingRefs?: string[];\n  }): ProxyLease {\n    const ts = nowIso();\n    const lease: ProxyLease = {\n      leaseId: randomUUID(),\n      provider: opts.provider,\n      account: opts.account,\n      port: opts.port,\n      host: opts.host ?? '127.0.0.1',\n      endpoint: opts.endpoint,\n      ownerPid: opts.ownerPid ?? process.pid,\n      instanceId: opts.instanceId,\n      bindingRefs: opts.bindingRefs ?? [],\n      createdAt: ts,\n      updatedAt: ts,\n    };\n    this.db\n      .prepare(\n        `INSERT INTO proxy_leases\n           (lease_id, provider, account, port, host, endpoint, owner_pid,\n            instance_id, binding_refs_json, created_at, updated_at)\n         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n      )\n      .run(\n        lease.leaseId,\n        lease.provider,\n        lease.account ?? null,\n        lease.port,\n        lease.host,\n        lease.endpoint ?? null,\n        lease.ownerPid,\n        lease.instanceId ?? null,\n        JSON.stringify(lease.bindingRefs),\n        lease.createdAt,\n        lease.updatedAt,\n      );\n    return lease;\n  }\n\n  get(leaseId: string): ProxyLease | null {\n    const row = this.db\n      .prepare(\n        `SELECT lease_id, provider, account, port, host, endpoint, owner_pid, instance_id,\n                binding_refs_json, created_at, updated_at\n         FROM proxy_leases WHERE lease_id = ?`,\n      )\n      .get(leaseId) as LeaseRow | undefined;\n    return row ? parse(row) : null;\n  }\n\n  list(): ProxyLease[] {\n    const rows = this.db\n      .prepare(\n        `SELECT lease_id, provider, account, port, host, endpoint, owner_pid, instance_id,\n                binding_refs_json, created_at, updated_at\n         FROM proxy_leases ORDER BY created_at`,\n      )\n      .all() as unknown as LeaseRow[];\n    return rows.map(parse);\n  }\n\n  findByProviderAccount(provider: string, account?: string): ProxyLease | null {\n    const row = account\n      ? (this.db\n          .prepare(\n            `SELECT lease_id, provider, account, port, host, endpoint, owner_pid, instance_id,\n                    binding_refs_json, created_at, updated_at\n             FROM proxy_leases WHERE provider = ? AND account = ?\n             ORDER BY created_at DESC LIMIT 1`,\n          )\n          .get(provider, account) as LeaseRow | undefined)\n      : (this.db\n          .prepare(\n            `SELECT lease_id, provider, account, port, host, endpoint, owner_pid, instance_id,\n                    binding_refs_json, created_at, updated_at\n             FROM proxy_leases WHERE provider = ? AND account IS NULL\n             ORDER BY created_at DESC LIMIT 1`,\n          )\n          .get(provider) as LeaseRow | undefined);\n    return row ? parse(row) : null;\n  }\n\n  release(leaseId: string): boolean {\n    const r = this.db.prepare(`DELETE FROM proxy_leases WHERE lease_id = ?`).run(leaseId);\n    return Number(r.changes) > 0;\n  }\n\n  releaseByProviderAccount(provider: string, account?: string): number {\n    const r = account\n      ? this.db\n          .prepare(`DELETE FROM proxy_leases WHERE provider = ? AND account = ?`)\n          .run(provider, account)\n      : this.db\n          .prepare(`DELETE FROM proxy_leases WHERE provider = ? AND account IS NULL`)\n          .run(provider);\n    return Number(r.changes);\n  }\n}\n"],"mappings":";;;AAoBA,SAAS,SAAiB;CACxB,wBAAO,IAAI,KAAK,EAAA,CAAE,YAAY;AAChC;AAEA,SAAS,MAAM,KAA2B;CACxC,OAAO,OACL,KAAK,UAAU;EACb,SAAS,IAAI;EACb,UAAU,IAAI;EACd,SAAS,IAAI,WAAW,KAAA;EACxB,MAAM,IAAI;EACV,MAAM,IAAI;EACV,UAAU,IAAI,YAAY,KAAA;EAC1B,UAAU,IAAI;EACd,YAAY,IAAI,eAAe,KAAA;EAC/B,aAAa,KAAK,MAAM,IAAI,iBAAiB;EAC7C,WAAW,IAAI;EACf,WAAW,IAAI;CACjB,CAAC,GACD,SAAS,YACT,SAAS,IAAI,UACf;AACF;AAEA,IAAa,aAAb,MAAwB;CACO;CAA7B,YAAY,IAAsC;EAArB,KAAA,KAAA;CAAsB;CAEnD,OAAO,MASQ;EACb,MAAM,KAAK,OAAO;EAClB,MAAM,QAAoB;GACxB,SAAS,WAAW;GACpB,UAAU,KAAK;GACf,SAAS,KAAK;GACd,MAAM,KAAK;GACX,MAAM,KAAK,QAAQ;GACnB,UAAU,KAAK;GACf,UAAU,KAAK,YAAY,QAAQ;GACnC,YAAY,KAAK;GACjB,aAAa,KAAK,eAAe,CAAC;GAClC,WAAW;GACX,WAAW;EACb;EACA,KAAK,GACF,QACC;;;kDAIF,CAAC,CACA,IACC,MAAM,SACN,MAAM,UACN,MAAM,WAAW,MACjB,MAAM,MACN,MAAM,MACN,MAAM,YAAY,MAClB,MAAM,UACN,MAAM,cAAc,MACpB,KAAK,UAAU,MAAM,WAAW,GAChC,MAAM,WACN,MAAM,SACR;EACF,OAAO;CACT;CAEA,IAAI,SAAoC;EACtC,MAAM,MAAM,KAAK,GACd,QACC;;8CAGF,CAAC,CACA,IAAI,OAAO;EACd,OAAO,MAAM,MAAM,GAAG,IAAI;CAC5B;CAEA,OAAqB;EAQnB,OAPa,KAAK,GACf,QACC;;+CAGF,CAAC,CACA,IACI,CAAA,CAAK,IAAI,KAAK;CACvB;CAEA,sBAAsB,UAAkB,SAAqC;EAC3E,MAAM,MAAM,UACP,KAAK,GACH,QACC;;;8CAIF,CAAC,CACA,IAAI,UAAU,OAAO,IACvB,KAAK,GACH,QACC;;;8CAIF,CAAC,CACA,IAAI,QAAQ;EACnB,OAAO,MAAM,MAAM,GAAG,IAAI;CAC5B;CAEA,QAAQ,SAA0B;EAChC,MAAM,IAAI,KAAK,GAAG,QAAQ,6CAA6C,CAAC,CAAC,IAAI,OAAO;EACpF,OAAO,OAAO,EAAE,OAAO,IAAI;CAC7B;CAEA,yBAAyB,UAAkB,SAA0B;EACnE,MAAM,IAAI,UACN,KAAK,GACF,QAAQ,6DAA6D,CAAC,CACtE,IAAI,UAAU,OAAO,IACxB,KAAK,GACF,QAAQ,iEAAiE,CAAC,CAC1E,IAAI,QAAQ;EACnB,OAAO,OAAO,EAAE,OAAO;CACzB;AACF"}

package/dist/core/migrate-bindings.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Legacy ClientState / RuntimeProfile → GlobalBinding migration (spec §26.4).
+ * Exact-evidence only. Never invent bindings from activeProfile alone.
+ */
+import type { AnyPickApp } from './app.js';
+export declare function migrateBindingsIfNeeded(app: AnyPickApp): Promise<{
+    migrated: boolean;
+    bindingsCreated: number;
+}>;
+//# sourceMappingURL=migrate-bindings.d.ts.map

package/dist/core/migrate-bindings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-bindings.d.ts","sourceRoot":"","sources":["../../src/core/migrate-bindings.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAQxC,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC;IACtE,QAAQ,EAAE,OAAO,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAqGD"}

package/dist/core/migrate-bindings.js

@@ -0,0 +1,98 @@
+import { accountRef, gatewayRef } from "./refs.js";
+import { ClientStateStore } from "./client-state-store.js";
+import { getMeta, setMeta } from "./db.js";
+//#region src/core/migrate-bindings.ts
+var MIGRATION_KEY = "bindings_migrated_v1";
+async function migrateBindingsIfNeeded(app) {
+	if (getMeta(app.db, MIGRATION_KEY) === "1") return {
+		migrated: false,
+		bindingsCreated: 0
+	};
+	if (app.bindings.listGlobal().length > 0) {
+		setMeta(app.db, MIGRATION_KEY, "1");
+		return {
+			migrated: false,
+			bindingsCreated: 0
+		};
+	}
+	const states = await new ClientStateStore(app.root, app.db).list();
+	let created = 0;
+	const importedAt = (/* @__PURE__ */ new Date()).toISOString();
+	for (const state of states) {
+		if (state.profileName && state.mode === "profile") {
+			const profile = await app.profileStore.get(state.profileName);
+			if (!profile) continue;
+			const source = gatewayRef(state.profileName);
+			const model = reconstructModel(state, profile.meta.defaultModel);
+			const spec = {
+				client: state.clientId,
+				source,
+				model,
+				transportPolicy: "auto",
+				clientOptions: {}
+			};
+			const binding = {
+				client: state.clientId,
+				spec,
+				provenance: {
+					kind: "legacy_migration",
+					sourceConfidence: "exact",
+					modelConfidence: model.mode === "explicit" ? "exact" : model.mode === "omitted" ? "omitted" : "unknown",
+					importedAt
+				},
+				createdAt: importedAt,
+				updatedAt: importedAt
+			};
+			if (!app.bindings.getGlobal(state.clientId)) {
+				app.bindings.putGlobal(binding);
+				created++;
+			}
+			continue;
+		}
+		if (state.accountRef && state.mode === "account") {
+			const { provider, name } = state.accountRef;
+			if (!await app.accounts.get(provider, name)) continue;
+			const source = accountRef(provider, name);
+			const spec = {
+				client: state.clientId,
+				source,
+				model: {
+					mode: "unknown",
+					reason: "legacy_migration"
+				},
+				transportPolicy: "auto",
+				clientOptions: {}
+			};
+			if (!app.bindings.getGlobal(state.clientId)) {
+				app.bindings.putGlobal({
+					client: state.clientId,
+					spec,
+					provenance: {
+						kind: "legacy_migration",
+						sourceConfidence: "exact",
+						modelConfidence: "unknown",
+						importedAt
+					},
+					createdAt: importedAt,
+					updatedAt: importedAt
+				});
+				created++;
+			}
+		}
+	}
+	setMeta(app.db, MIGRATION_KEY, "1");
+	return {
+		migrated: true,
+		bindingsCreated: created
+	};
+}
+function reconstructModel(state, profileDefault) {
+	return {
+		mode: "unknown",
+		reason: "legacy_migration"
+	};
+}
+//#endregion
+export { migrateBindingsIfNeeded };
+
+//# sourceMappingURL=migrate-bindings.js.map

package/dist/core/migrate-bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-bindings.js","names":[],"sources":["../../src/core/migrate-bindings.ts"],"sourcesContent":["/**\n * Legacy ClientState / RuntimeProfile → GlobalBinding migration (spec §26.4).\n * Exact-evidence only. Never invent bindings from activeProfile alone.\n */\n\nimport type { AnyPickApp } from './app';\nimport type { BindingSpec, GlobalBinding, ModelSelection } from '../types';\nimport { gatewayRef, accountRef } from './refs';\nimport { getMeta, setMeta } from './db';\nimport { ClientStateStore } from './client-state-store';\n\nconst MIGRATION_KEY = 'bindings_migrated_v1';\n\nexport async function migrateBindingsIfNeeded(app: AnyPickApp): Promise<{\n  migrated: boolean;\n  bindingsCreated: number;\n}> {\n  if (getMeta(app.db, MIGRATION_KEY) === '1') {\n    return { migrated: false, bindingsCreated: 0 };\n  }\n\n  // If global bindings already exist, mark done without overwriting\n  if (app.bindings.listGlobal().length > 0) {\n    setMeta(app.db, MIGRATION_KEY, '1');\n    return { migrated: false, bindingsCreated: 0 };\n  }\n\n  const clientState = new ClientStateStore(app.root, app.db);\n  const states = await clientState.list();\n  let created = 0;\n  const importedAt = new Date().toISOString();\n\n  for (const state of states) {\n    // Gateway evidence: exact profileName match\n    if (state.profileName && state.mode === 'profile') {\n      const profile = await app.profileStore.get(state.profileName);\n      if (!profile) {\n        continue;\n      }\n\n      // Do not reinterpret profile.provider as account source\n      const source = gatewayRef(state.profileName);\n      const model = reconstructModel(state, profile.meta.defaultModel);\n\n      const spec: BindingSpec = {\n        client: state.clientId,\n        source,\n        model,\n        transportPolicy: 'auto',\n        clientOptions: {},\n      };\n\n      const binding: GlobalBinding = {\n        client: state.clientId,\n        spec,\n        provenance: {\n          kind: 'legacy_migration',\n          sourceConfidence: 'exact',\n          modelConfidence:\n            model.mode === 'explicit' ? 'exact' : model.mode === 'omitted' ? 'omitted' : 'unknown',\n          importedAt,\n        },\n        createdAt: importedAt,\n        updatedAt: importedAt,\n      };\n\n      // Only create if no binding yet for this client\n      if (!app.bindings.getGlobal(state.clientId)) {\n        app.bindings.putGlobal(binding);\n        created++;\n      }\n      continue;\n    }\n\n    // Account evidence: exact accountRef on client state\n    if (state.accountRef && state.mode === 'account') {\n      const { provider, name } = state.accountRef;\n      const account = await app.accounts.get(provider, name);\n      if (!account) {\n        continue;\n      }\n\n      const source = accountRef(provider, name);\n      const model: ModelSelection = {\n        mode: 'unknown',\n        reason: 'legacy_migration',\n      };\n\n      const spec: BindingSpec = {\n        client: state.clientId,\n        source,\n        model,\n        transportPolicy: 'auto',\n        clientOptions: {},\n      };\n\n      if (!app.bindings.getGlobal(state.clientId)) {\n        app.bindings.putGlobal({\n          client: state.clientId,\n          spec,\n          provenance: {\n            kind: 'legacy_migration',\n            sourceConfidence: 'exact',\n            modelConfidence: 'unknown',\n            importedAt,\n          },\n          createdAt: importedAt,\n          updatedAt: importedAt,\n        });\n        created++;\n      }\n    }\n  }\n\n  // Never create binding solely from GlobalConfig.activeProfile\n  setMeta(app.db, MIGRATION_KEY, '1');\n  return { migrated: true, bindingsCreated: created };\n}\n\nfunction reconstructModel(\n  state: { managedPaths?: string[] },\n  profileDefault?: string,\n): ModelSelection {\n  // Without exact per-client apply metadata for model, do not substitute\n  // the gateway's current default — it may have changed.\n  void state;\n  void profileDefault;\n  return { mode: 'unknown', reason: 'legacy_migration' };\n}\n"],"mappings":";;;;AAWA,IAAM,gBAAgB;AAEtB,eAAsB,wBAAwB,KAG3C;CACD,IAAI,QAAQ,IAAI,IAAI,aAAa,MAAM,KACrC,OAAO;EAAE,UAAU;EAAO,iBAAiB;CAAE;CAI/C,IAAI,IAAI,SAAS,WAAW,CAAC,CAAC,SAAS,GAAG;EACxC,QAAQ,IAAI,IAAI,eAAe,GAAG;EAClC,OAAO;GAAE,UAAU;GAAO,iBAAiB;EAAE;CAC/C;CAGA,MAAM,SAAS,MAAM,IADG,iBAAiB,IAAI,MAAM,IAAI,EAClC,CAAA,CAAY,KAAK;CACtC,IAAI,UAAU;CACd,MAAM,8BAAa,IAAI,KAAK,EAAA,CAAE,YAAY;CAE1C,KAAK,MAAM,SAAS,QAAQ;EAE1B,IAAI,MAAM,eAAe,MAAM,SAAS,WAAW;GACjD,MAAM,UAAU,MAAM,IAAI,aAAa,IAAI,MAAM,WAAW;GAC5D,IAAI,CAAC,SACH;GAIF,MAAM,SAAS,WAAW,MAAM,WAAW;GAC3C,MAAM,QAAQ,iBAAiB,OAAO,QAAQ,KAAK,YAAY;GAE/D,MAAM,OAAoB;IACxB,QAAQ,MAAM;IACd;IACA;IACA,iBAAiB;IACjB,eAAe,CAAC;GAClB;GAEA,MAAM,UAAyB;IAC7B,QAAQ,MAAM;IACd;IACA,YAAY;KACV,MAAM;KACN,kBAAkB;KAClB,iBACE,MAAM,SAAS,aAAa,UAAU,MAAM,SAAS,YAAY,YAAY;KAC/E;IACF;IACA,WAAW;IACX,WAAW;GACb;GAGA,IAAI,CAAC,IAAI,SAAS,UAAU,MAAM,QAAQ,GAAG;IAC3C,IAAI,SAAS,UAAU,OAAO;IAC9B;GACF;GACA;EACF;EAGA,IAAI,MAAM,cAAc,MAAM,SAAS,WAAW;GAChD,MAAM,EAAE,UAAU,SAAS,MAAM;GAEjC,IAAI,CAAC,MADiB,IAAI,SAAS,IAAI,UAAU,IAAI,GAEnD;GAGF,MAAM,SAAS,WAAW,UAAU,IAAI;GAMxC,MAAM,OAAoB;IACxB,QAAQ,MAAM;IACd;IACA,OAAA;KAPA,MAAM;KACN,QAAQ;IAMR;IACA,iBAAiB;IACjB,eAAe,CAAC;GAClB;GAEA,IAAI,CAAC,IAAI,SAAS,UAAU,MAAM,QAAQ,GAAG;IAC3C,IAAI,SAAS,UAAU;KACrB,QAAQ,MAAM;KACd;KACA,YAAY;MACV,MAAM;MACN,kBAAkB;MAClB,iBAAiB;MACjB;KACF;KACA,WAAW;KACX,WAAW;IACb,CAAC;IACD;GACF;EACF;CACF;CAGA,QAAQ,IAAI,IAAI,eAAe,GAAG;CAClC,OAAO;EAAE,UAAU;EAAM,iBAAiB;CAAQ;AACpD;AAEA,SAAS,iBACP,OACA,gBACgB;CAKhB,OAAO;EAAE,MAAM;EAAW,QAAQ;CAAmB;AACvD"}

package/dist/core/migrate-fs.d.ts

@@ -0,0 +1,11 @@
+import type { AnyPickDatabase } from './db.js';
+/**
+ * One-time import of legacy filesystem layout into SQLite.
+ * Safe to call every open: no-ops if already migrated or nothing to import.
+ */
+export declare function migrateFilesystemIfNeeded(db: AnyPickDatabase, root: string): Promise<{
+    migrated: boolean;
+    accounts: number;
+    profiles: number;
+}>;
+//# sourceMappingURL=migrate-fs.d.ts.map

package/dist/core/migrate-fs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-fs.d.ts","sourceRoot":"","sources":["../../src/core/migrate-fs.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AA2B5C;;;GAGG;AACH,wBAAsB,yBAAyB,CAC7C,EAAE,EAAE,eAAe,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CA8NpE"}

package/dist/core/migrate-fs.js

@@ -0,0 +1,184 @@
+import { DEFAULT_PROXY_CONFIG } from "../types/account.js";
+import { listSubdirs, pathExists, readAndDecodeJsonFile, readJsonFile } from "../utils/fs.js";
+import { decoders } from "./codec.js";
+import { accountMetaPath, accountProxyConfigPath, accountSnapshotDir, accountsDir, activePointerPath, clientStatePath, clientsDir, configPath, profileMetaPath, profileSecretsPath, profilesDir } from "./paths.js";
+import { normalizeAccountName } from "../utils/slug.js";
+import { getMeta, setMeta } from "./db.js";
+import { join } from "node:path";
+import { readFile, readdir, stat } from "node:fs/promises";
+//#region src/core/migrate-fs.ts
+/**
+* One-time import of legacy filesystem layout into SQLite.
+* Safe to call every open: no-ops if already migrated or nothing to import.
+*/
+async function migrateFilesystemIfNeeded(db, root) {
+	if (getMeta(db, "fs_migrated") === "1") return {
+		migrated: false,
+		accounts: 0,
+		profiles: 0
+	};
+	const accountCount = db.prepare("SELECT COUNT(*) AS n FROM accounts").get().n;
+	const profileCount = db.prepare("SELECT COUNT(*) AS n FROM profiles").get().n;
+	if (accountCount > 0 || profileCount > 0) {
+		setMeta(db, "fs_migrated", "1");
+		return {
+			migrated: false,
+			accounts: 0,
+			profiles: 0
+		};
+	}
+	const hasProviders = await pathExists(join(root, "providers"));
+	const hasProfiles = await pathExists(profilesDir(root));
+	const hasConfig = await pathExists(configPath(root));
+	const hasClients = await pathExists(clientsDir(root));
+	if (!hasProviders && !hasProfiles && !hasConfig && !hasClients) {
+		setMeta(db, "fs_migrated", "1");
+		return {
+			migrated: false,
+			accounts: 0,
+			profiles: 0
+		};
+	}
+	let accounts = 0;
+	let profiles = 0;
+	const tx = db.prepare("BEGIN IMMEDIATE");
+	const commit = db.prepare("COMMIT");
+	const rollback = db.prepare("ROLLBACK");
+	try {
+		tx.run();
+		if (hasConfig) try {
+			const cfg = await readAndDecodeJsonFile(configPath(root), decoders.globalConfig);
+			db.prepare(`INSERT INTO config (key, value) VALUES ('global', ?)
+           ON CONFLICT(key) DO UPDATE SET value = excluded.value`).run(JSON.stringify(cfg));
+		} catch {}
+		if (hasProviders) {
+			const providers = await listSubdirs(join(root, "providers"));
+			for (const provider of providers) {
+				const activePath = activePointerPath(root, provider);
+				if (await pathExists(activePath)) {
+					const active = (await readFile(activePath, "utf8")).trim();
+					if (active) try {
+						db.prepare(`INSERT INTO provider_active (provider, account_name)
+                 VALUES (?, ?)
+                 ON CONFLICT(provider) DO UPDATE SET account_name = excluded.account_name`).run(provider, normalizeAccountName(active));
+					} catch {}
+				}
+				const names = await listSubdirs(accountsDir(root, provider));
+				for (const name of names) {
+					const metaPath = accountMetaPath(root, provider, name);
+					if (!await pathExists(metaPath)) continue;
+					let rawMeta;
+					try {
+						rawMeta = await readAndDecodeJsonFile(metaPath, decoders.accountMeta);
+					} catch {
+						continue;
+					}
+					const accountName = normalizeAccountName(name);
+					const meta = {
+						...rawMeta,
+						name: accountName,
+						provider,
+						createdAt: rawMeta.createdAt ?? (/* @__PURE__ */ new Date()).toISOString(),
+						updatedAt: rawMeta.updatedAt ?? (/* @__PURE__ */ new Date()).toISOString()
+					};
+					let proxy = { ...DEFAULT_PROXY_CONFIG };
+					const proxyPath = accountProxyConfigPath(root, provider, name);
+					if (await pathExists(proxyPath)) try {
+						const rawProxy = await readJsonFile(proxyPath);
+						const port = rawProxy.port;
+						const host = rawProxy.host;
+						proxy = {
+							enabled: false,
+							...typeof port === "number" && Number.isInteger(port) && port >= 0 && port <= 65535 ? { port } : {},
+							...typeof host === "string" && host.length <= 4096 && !/[\p{Cc}\p{Cf}]/u.test(host) ? { host } : {}
+						};
+					} catch {}
+					db.prepare(`INSERT INTO accounts (provider, name, meta_json, proxy_json, created_at, updated_at)
+             VALUES (?, ?, ?, ?, ?, ?)
+             ON CONFLICT(provider, name) DO UPDATE SET
+               meta_json = excluded.meta_json,
+               proxy_json = excluded.proxy_json,
+               updated_at = excluded.updated_at`).run(provider, accountName, JSON.stringify(meta), JSON.stringify(proxy), meta.createdAt ?? (/* @__PURE__ */ new Date()).toISOString(), meta.updatedAt ?? (/* @__PURE__ */ new Date()).toISOString());
+					const snap = accountSnapshotDir(root, provider, name);
+					if (await pathExists(snap)) {
+						const files = await collectDirFiles(snap);
+						db.prepare(`DELETE FROM account_snapshot_files WHERE provider = ? AND account = ?`).run(provider, accountName);
+						const ins = db.prepare(`INSERT INTO account_snapshot_files (provider, account, path, content)
+               VALUES (?, ?, ?, ?)`);
+						for (const [rel, buf] of files) ins.run(provider, accountName, rel, buf);
+					}
+					accounts++;
+				}
+			}
+		}
+		if (hasProfiles) {
+			const names = await listSubdirs(profilesDir(root));
+			for (const name of names) {
+				const metaPath = profileMetaPath(root, name);
+				if (!await pathExists(metaPath)) continue;
+				const meta = await readAndDecodeJsonFile(metaPath, decoders.runtimeProfileMeta);
+				let secrets = {};
+				const secretsPath = profileSecretsPath(root, name);
+				if (await pathExists(secretsPath)) try {
+					secrets = await readAndDecodeJsonFile(secretsPath, decoders.runtimeProfileSecrets);
+				} catch {}
+				db.prepare(`INSERT INTO profiles (name, meta_json, secrets_json, created_at, updated_at)
+           VALUES (?, ?, ?, ?, ?)
+           ON CONFLICT(name) DO UPDATE SET
+             meta_json = excluded.meta_json,
+             secrets_json = excluded.secrets_json,
+             updated_at = excluded.updated_at`).run(name, JSON.stringify(meta), JSON.stringify(secrets), meta.createdAt ?? (/* @__PURE__ */ new Date()).toISOString(), meta.updatedAt ?? (/* @__PURE__ */ new Date()).toISOString());
+				profiles++;
+			}
+		}
+		if (hasClients) {
+			const ids = await listSubdirs(clientsDir(root));
+			for (const clientId of ids) {
+				const path = clientStatePath(root, clientId);
+				if (!await pathExists(path)) continue;
+				try {
+					const state = await readAndDecodeJsonFile(path, decoders.clientState);
+					db.prepare(`INSERT INTO client_state (client_id, state_json)
+             VALUES (?, ?)
+             ON CONFLICT(client_id) DO UPDATE SET state_json = excluded.state_json`).run(clientId, JSON.stringify(state));
+				} catch {}
+			}
+		}
+		setMeta(db, "fs_migrated", "1");
+		setMeta(db, "fs_migrated_at", (/* @__PURE__ */ new Date()).toISOString());
+		commit.run();
+	} catch (err) {
+		try {
+			rollback.run();
+		} catch {}
+		throw err;
+	}
+	return {
+		migrated: true,
+		accounts,
+		profiles
+	};
+}
+async function collectDirFiles(root) {
+	const out = [];
+	async function walk(dir, prefix) {
+		let entries;
+		try {
+			entries = await readdir(dir, { withFileTypes: true });
+		} catch {
+			return;
+		}
+		for (const entry of entries) {
+			const full = join(dir, entry.name);
+			const rel = prefix ? `${prefix}/${entry.name}` : entry.name;
+			if (entry.isDirectory()) await walk(full, rel);
+			else if (entry.isFile()) out.push([rel.split("\\").join("/"), await readFile(full)]);
+		}
+	}
+	if ((await stat(root).catch(() => null))?.isDirectory()) await walk(root, "");
+	return out;
+}
+//#endregion
+export { migrateFilesystemIfNeeded };
+
+//# sourceMappingURL=migrate-fs.js.map

package/dist/core/migrate-fs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-fs.js","names":[],"sources":["../../src/core/migrate-fs.ts"],"sourcesContent":["import { readdir, readFile, stat } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport type { AnyPickDatabase } from './db';\nimport { getMeta, setMeta } from './db';\nimport { decoders } from './codec';\nimport {\n  accountMetaPath,\n  accountProxyConfigPath,\n  accountSnapshotDir,\n  accountsDir,\n  activePointerPath,\n  clientStatePath,\n  clientsDir,\n  configPath,\n  profileMetaPath,\n  profileSecretsPath,\n  profilesDir,\n} from './paths';\nimport { listSubdirs, pathExists, readJsonFile, readAndDecodeJsonFile } from '../utils/fs';\nimport type {\n  AccountMeta,\n  AccountProxyConfig,\n  ClientState,\n  RuntimeProfileMeta,\n  RuntimeProfileSecrets,\n} from '../types';\nimport { DEFAULT_PROXY_CONFIG } from '../types';\nimport { normalizeAccountName } from '../utils/slug';\n\n/**\n * One-time import of legacy filesystem layout into SQLite.\n * Safe to call every open: no-ops if already migrated or nothing to import.\n */\nexport async function migrateFilesystemIfNeeded(\n  db: AnyPickDatabase,\n  root: string,\n): Promise<{ migrated: boolean; accounts: number; profiles: number }> {\n  if (getMeta(db, 'fs_migrated') === '1') {\n    return { migrated: false, accounts: 0, profiles: 0 };\n  }\n\n  // Already has SQL data → just mark migrated\n  const accountCount = (db.prepare('SELECT COUNT(*) AS n FROM accounts').get() as { n: number }).n;\n  const profileCount = (db.prepare('SELECT COUNT(*) AS n FROM profiles').get() as { n: number }).n;\n  if (accountCount > 0 || profileCount > 0) {\n    setMeta(db, 'fs_migrated', '1');\n    return { migrated: false, accounts: 0, profiles: 0 };\n  }\n\n  const hasProviders = await pathExists(join(root, 'providers'));\n  const hasProfiles = await pathExists(profilesDir(root));\n  const hasConfig = await pathExists(configPath(root));\n  const hasClients = await pathExists(clientsDir(root));\n\n  if (!hasProviders && !hasProfiles && !hasConfig && !hasClients) {\n    setMeta(db, 'fs_migrated', '1');\n    return { migrated: false, accounts: 0, profiles: 0 };\n  }\n\n  let accounts = 0;\n  let profiles = 0;\n\n  const tx = db.prepare('BEGIN IMMEDIATE');\n  const commit = db.prepare('COMMIT');\n  const rollback = db.prepare('ROLLBACK');\n\n  try {\n    tx.run();\n\n    // config.json\n    if (hasConfig) {\n      try {\n        const cfg = await readAndDecodeJsonFile(configPath(root), decoders.globalConfig);\n        db.prepare(\n          `INSERT INTO config (key, value) VALUES ('global', ?)\n           ON CONFLICT(key) DO UPDATE SET value = excluded.value`,\n        ).run(JSON.stringify(cfg));\n      } catch {\n        // ignore corrupt config\n      }\n    }\n\n    // accounts\n    if (hasProviders) {\n      const providers = await listSubdirs(join(root, 'providers'));\n      for (const provider of providers) {\n        const activePath = activePointerPath(root, provider);\n        if (await pathExists(activePath)) {\n          const active = (await readFile(activePath, 'utf8')).trim();\n          if (active) {\n            try {\n              db.prepare(\n                `INSERT INTO provider_active (provider, account_name)\n                 VALUES (?, ?)\n                 ON CONFLICT(provider) DO UPDATE SET account_name = excluded.account_name`,\n              ).run(provider, normalizeAccountName(active));\n            } catch {\n              // Ignore malformed legacy active pointers.\n            }\n          }\n        }\n\n        const names = await listSubdirs(accountsDir(root, provider));\n        for (const name of names) {\n          const metaPath = accountMetaPath(root, provider, name);\n          if (!(await pathExists(metaPath))) {\n            continue;\n          }\n          let rawMeta: AccountMeta;\n          try {\n            rawMeta = await readAndDecodeJsonFile(metaPath, decoders.accountMeta);\n          } catch {\n            continue;\n          }\n          const accountName = normalizeAccountName(name);\n          // Directory/provider identity is canonical; never trust the legacy\n          // metadata to choose a different account path or provider.\n          const meta: AccountMeta = {\n            ...rawMeta,\n            name: accountName,\n            provider,\n            createdAt: rawMeta.createdAt ?? new Date().toISOString(),\n            updatedAt: rawMeta.updatedAt ?? new Date().toISOString(),\n          };\n          let proxy: AccountProxyConfig = { ...DEFAULT_PROXY_CONFIG };\n          const proxyPath = accountProxyConfigPath(root, provider, name);\n          if (await pathExists(proxyPath)) {\n            try {\n              const rawProxy = await readJsonFile<Partial<AccountProxyConfig>>(proxyPath);\n              // Legacy files can include old provider-specific `options`\n              // (upstreams, auth paths). They are configuration, not portable\n              // account state: import only a benign local port/host and require\n              // an explicit enable after migration.\n              const port = rawProxy.port;\n              const host = rawProxy.host;\n              proxy = {\n                enabled: false,\n                ...(typeof port === 'number' && Number.isInteger(port) && port >= 0 && port <= 65535\n                  ? { port }\n                  : {}),\n                ...(typeof host === 'string' && host.length <= 4096 && !/[\\p{Cc}\\p{Cf}]/u.test(host)\n                  ? { host }\n                  : {}),\n              };\n            } catch {\n              // keep default\n            }\n          }\n\n          db.prepare(\n            `INSERT INTO accounts (provider, name, meta_json, proxy_json, created_at, updated_at)\n             VALUES (?, ?, ?, ?, ?, ?)\n             ON CONFLICT(provider, name) DO UPDATE SET\n               meta_json = excluded.meta_json,\n               proxy_json = excluded.proxy_json,\n               updated_at = excluded.updated_at`,\n          ).run(\n            provider,\n            accountName,\n            JSON.stringify(meta),\n            JSON.stringify(proxy),\n            meta.createdAt ?? new Date().toISOString(),\n            meta.updatedAt ?? new Date().toISOString(),\n          );\n\n          const snap = accountSnapshotDir(root, provider, name);\n          if (await pathExists(snap)) {\n            const files = await collectDirFiles(snap);\n            const del = db.prepare(\n              `DELETE FROM account_snapshot_files WHERE provider = ? AND account = ?`,\n            );\n            del.run(provider, accountName);\n            const ins = db.prepare(\n              `INSERT INTO account_snapshot_files (provider, account, path, content)\n               VALUES (?, ?, ?, ?)`,\n            );\n            for (const [rel, buf] of files) {\n              ins.run(provider, accountName, rel, buf);\n            }\n          }\n          accounts++;\n        }\n      }\n    }\n\n    // profiles\n    if (hasProfiles) {\n      const names = await listSubdirs(profilesDir(root));\n      for (const name of names) {\n        const metaPath = profileMetaPath(root, name);\n        if (!(await pathExists(metaPath))) {\n          continue;\n        }\n        const meta = (await readAndDecodeJsonFile(\n          metaPath,\n          decoders.runtimeProfileMeta,\n        )) as RuntimeProfileMeta;\n        let secrets: RuntimeProfileSecrets = {};\n        const secretsPath = profileSecretsPath(root, name);\n        if (await pathExists(secretsPath)) {\n          try {\n            secrets = await readAndDecodeJsonFile(secretsPath, decoders.runtimeProfileSecrets);\n          } catch {\n            // ignore\n          }\n        }\n        db.prepare(\n          `INSERT INTO profiles (name, meta_json, secrets_json, created_at, updated_at)\n           VALUES (?, ?, ?, ?, ?)\n           ON CONFLICT(name) DO UPDATE SET\n             meta_json = excluded.meta_json,\n             secrets_json = excluded.secrets_json,\n             updated_at = excluded.updated_at`,\n        ).run(\n          name,\n          JSON.stringify(meta),\n          JSON.stringify(secrets),\n          meta.createdAt ?? new Date().toISOString(),\n          meta.updatedAt ?? new Date().toISOString(),\n        );\n        profiles++;\n      }\n    }\n\n    // client state\n    if (hasClients) {\n      const ids = await listSubdirs(clientsDir(root));\n      for (const clientId of ids) {\n        const path = clientStatePath(root, clientId);\n        if (!(await pathExists(path))) {\n          continue;\n        }\n        try {\n          const state = (await readAndDecodeJsonFile(path, decoders.clientState)) as ClientState;\n          db.prepare(\n            `INSERT INTO client_state (client_id, state_json)\n             VALUES (?, ?)\n             ON CONFLICT(client_id) DO UPDATE SET state_json = excluded.state_json`,\n          ).run(clientId, JSON.stringify(state));\n        } catch {\n          // ignore\n        }\n      }\n    }\n\n    setMeta(db, 'fs_migrated', '1');\n    setMeta(db, 'fs_migrated_at', new Date().toISOString());\n    commit.run();\n  } catch (err) {\n    try {\n      rollback.run();\n    } catch {\n      // ignore\n    }\n    throw err;\n  }\n\n  return { migrated: true, accounts, profiles };\n}\n\nasync function collectDirFiles(root: string): Promise<Array<[string, Buffer]>> {\n  const out: Array<[string, Buffer]> = [];\n  async function walk(dir: string, prefix: string): Promise<void> {\n    let entries;\n    try {\n      entries = await readdir(dir, { withFileTypes: true });\n    } catch {\n      return;\n    }\n    for (const entry of entries) {\n      const full = join(dir, entry.name);\n      const rel = prefix ? `${prefix}/${entry.name}` : entry.name;\n      if (entry.isDirectory()) {\n        await walk(full, rel);\n      } else if (entry.isFile()) {\n        out.push([rel.split('\\\\').join('/'), await readFile(full)]);\n      }\n    }\n  }\n  const st = await stat(root).catch(() => null);\n  if (st?.isDirectory()) {\n    await walk(root, '');\n  }\n  return out;\n}\n"],"mappings":";;;;;;;;;;;;;AAiCA,eAAsB,0BACpB,IACA,MACoE;CACpE,IAAI,QAAQ,IAAI,aAAa,MAAM,KACjC,OAAO;EAAE,UAAU;EAAO,UAAU;EAAG,UAAU;CAAE;CAIrD,MAAM,eAAgB,GAAG,QAAQ,oCAAoC,CAAC,CAAC,IAAI,CAAC,CAAmB;CAC/F,MAAM,eAAgB,GAAG,QAAQ,oCAAoC,CAAC,CAAC,IAAI,CAAC,CAAmB;CAC/F,IAAI,eAAe,KAAK,eAAe,GAAG;EACxC,QAAQ,IAAI,eAAe,GAAG;EAC9B,OAAO;GAAE,UAAU;GAAO,UAAU;GAAG,UAAU;EAAE;CACrD;CAEA,MAAM,eAAe,MAAM,WAAW,KAAK,MAAM,WAAW,CAAC;CAC7D,MAAM,cAAc,MAAM,WAAW,YAAY,IAAI,CAAC;CACtD,MAAM,YAAY,MAAM,WAAW,WAAW,IAAI,CAAC;CACnD,MAAM,aAAa,MAAM,WAAW,WAAW,IAAI,CAAC;CAEpD,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,aAAa,CAAC,YAAY;EAC9D,QAAQ,IAAI,eAAe,GAAG;EAC9B,OAAO;GAAE,UAAU;GAAO,UAAU;GAAG,UAAU;EAAE;CACrD;CAEA,IAAI,WAAW;CACf,IAAI,WAAW;CAEf,MAAM,KAAK,GAAG,QAAQ,iBAAiB;CACvC,MAAM,SAAS,GAAG,QAAQ,QAAQ;CAClC,MAAM,WAAW,GAAG,QAAQ,UAAU;CAEtC,IAAI;EACF,GAAG,IAAI;EAGP,IAAI,WACF,IAAI;GACF,MAAM,MAAM,MAAM,sBAAsB,WAAW,IAAI,GAAG,SAAS,YAAY;GAC/E,GAAG,QACD;iEAEF,CAAC,CAAC,IAAI,KAAK,UAAU,GAAG,CAAC;EAC3B,QAAQ,CAER;EAIF,IAAI,cAAc;GAChB,MAAM,YAAY,MAAM,YAAY,KAAK,MAAM,WAAW,CAAC;GAC3D,KAAK,MAAM,YAAY,WAAW;IAChC,MAAM,aAAa,kBAAkB,MAAM,QAAQ;IACnD,IAAI,MAAM,WAAW,UAAU,GAAG;KAChC,MAAM,UAAU,MAAM,SAAS,YAAY,MAAM,EAAA,CAAG,KAAK;KACzD,IAAI,QACF,IAAI;MACF,GAAG,QACD;;0FAGF,CAAC,CAAC,IAAI,UAAU,qBAAqB,MAAM,CAAC;KAC9C,QAAQ,CAER;IAEJ;IAEA,MAAM,QAAQ,MAAM,YAAY,YAAY,MAAM,QAAQ,CAAC;IAC3D,KAAK,MAAM,QAAQ,OAAO;KACxB,MAAM,WAAW,gBAAgB,MAAM,UAAU,IAAI;KACrD,IAAI,CAAE,MAAM,WAAW,QAAQ,GAC7B;KAEF,IAAI;KACJ,IAAI;MACF,UAAU,MAAM,sBAAsB,UAAU,SAAS,WAAW;KACtE,QAAQ;MACN;KACF;KACA,MAAM,cAAc,qBAAqB,IAAI;KAG7C,MAAM,OAAoB;MACxB,GAAG;MACH,MAAM;MACN;MACA,WAAW,QAAQ,8BAAa,IAAI,KAAK,EAAA,CAAE,YAAY;MACvD,WAAW,QAAQ,8BAAa,IAAI,KAAK,EAAA,CAAE,YAAY;KACzD;KACA,IAAI,QAA4B,EAAE,GAAG,qBAAqB;KAC1D,MAAM,YAAY,uBAAuB,MAAM,UAAU,IAAI;KAC7D,IAAI,MAAM,WAAW,SAAS,GAC5B,IAAI;MACF,MAAM,WAAW,MAAM,aAA0C,SAAS;MAK1E,MAAM,OAAO,SAAS;MACtB,MAAM,OAAO,SAAS;MACtB,QAAQ;OACN,SAAS;OACT,GAAI,OAAO,SAAS,YAAY,OAAO,UAAU,IAAI,KAAK,QAAQ,KAAK,QAAQ,QAC3E,EAAE,KAAK,IACP,CAAC;OACL,GAAI,OAAO,SAAS,YAAY,KAAK,UAAU,QAAQ,CAAC,kBAAkB,KAAK,IAAI,IAC/E,EAAE,KAAK,IACP,CAAC;MACP;KACF,QAAQ,CAER;KAGF,GAAG,QACD;;;;;gDAMF,CAAC,CAAC,IACA,UACA,aACA,KAAK,UAAU,IAAI,GACnB,KAAK,UAAU,KAAK,GACpB,KAAK,8BAAa,IAAI,KAAK,EAAA,CAAE,YAAY,GACzC,KAAK,8BAAa,IAAI,KAAK,EAAA,CAAE,YAAY,CAC3C;KAEA,MAAM,OAAO,mBAAmB,MAAM,UAAU,IAAI;KACpD,IAAI,MAAM,WAAW,IAAI,GAAG;MAC1B,MAAM,QAAQ,MAAM,gBAAgB,IAAI;MAIxC,GAHe,QACb,uEAEF,CAAA,CAAI,IAAI,UAAU,WAAW;MAC7B,MAAM,MAAM,GAAG,QACb;mCAEF;MACA,KAAK,MAAM,CAAC,KAAK,QAAQ,OACvB,IAAI,IAAI,UAAU,aAAa,KAAK,GAAG;KAE3C;KACA;IACF;GACF;EACF;EAGA,IAAI,aAAa;GACf,MAAM,QAAQ,MAAM,YAAY,YAAY,IAAI,CAAC;GACjD,KAAK,MAAM,QAAQ,OAAO;IACxB,MAAM,WAAW,gBAAgB,MAAM,IAAI;IAC3C,IAAI,CAAE,MAAM,WAAW,QAAQ,GAC7B;IAEF,MAAM,OAAQ,MAAM,sBAClB,UACA,SAAS,kBACX;IACA,IAAI,UAAiC,CAAC;IACtC,MAAM,cAAc,mBAAmB,MAAM,IAAI;IACjD,IAAI,MAAM,WAAW,WAAW,GAC9B,IAAI;KACF,UAAU,MAAM,sBAAsB,aAAa,SAAS,qBAAqB;IACnF,QAAQ,CAER;IAEF,GAAG,QACD;;;;;8CAMF,CAAC,CAAC,IACA,MACA,KAAK,UAAU,IAAI,GACnB,KAAK,UAAU,OAAO,GACtB,KAAK,8BAAa,IAAI,KAAK,EAAA,CAAE,YAAY,GACzC,KAAK,8BAAa,IAAI,KAAK,EAAA,CAAE,YAAY,CAC3C;IACA;GACF;EACF;EAGA,IAAI,YAAY;GACd,MAAM,MAAM,MAAM,YAAY,WAAW,IAAI,CAAC;GAC9C,KAAK,MAAM,YAAY,KAAK;IAC1B,MAAM,OAAO,gBAAgB,MAAM,QAAQ;IAC3C,IAAI,CAAE,MAAM,WAAW,IAAI,GACzB;IAEF,IAAI;KACF,MAAM,QAAS,MAAM,sBAAsB,MAAM,SAAS,WAAW;KACrE,GAAG,QACD;;mFAGF,CAAC,CAAC,IAAI,UAAU,KAAK,UAAU,KAAK,CAAC;IACvC,QAAQ,CAER;GACF;EACF;EAEA,QAAQ,IAAI,eAAe,GAAG;EAC9B,QAAQ,IAAI,mCAAkB,IAAI,KAAK,EAAA,CAAE,YAAY,CAAC;EACtD,OAAO,IAAI;CACb,SAAS,KAAK;EACZ,IAAI;GACF,SAAS,IAAI;EACf,QAAQ,CAER;EACA,MAAM;CACR;CAEA,OAAO;EAAE,UAAU;EAAM;EAAU;CAAS;AAC9C;AAEA,eAAe,gBAAgB,MAAgD;CAC7E,MAAM,MAA+B,CAAC;CACtC,eAAe,KAAK,KAAa,QAA+B;EAC9D,IAAI;EACJ,IAAI;GACF,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;EACtD,QAAQ;GACN;EACF;EACA,KAAK,MAAM,SAAS,SAAS;GAC3B,MAAM,OAAO,KAAK,KAAK,MAAM,IAAI;GACjC,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,MAAM,SAAS,MAAM;GACvD,IAAI,MAAM,YAAY,GACpB,MAAM,KAAK,MAAM,GAAG;QACf,IAAI,MAAM,OAAO,GACtB,IAAI,KAAK,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,KAAK,GAAG,GAAG,MAAM,SAAS,IAAI,CAAC,CAAC;EAE9D;CACF;CAEA,KAAI,MADa,KAAK,IAAI,CAAC,CAAC,YAAY,IAAI,EAAA,EACpC,YAAY,GAClB,MAAM,KAAK,MAAM,EAAE;CAErB,OAAO;AACT"}

package/dist/core/model-cache-store.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Cached vendor model lists.
+ *
+ * Advisory data only: a miss costs one HTTP request, never correctness, so a
+ * corrupt or absent row is read as "no cache" rather than raised. The store owns
+ * its SQL and takes no locks — the service above it does that (ADR 0009).
+ *
+ * Keyed by provider *and* endpoint because the same provider id can point at
+ * different hosts (a `custom` gateway, a self-hosted LiteLLM), and those serve
+ * different model lists.
+ */
+import type { AnyPickDatabase } from './db.js';
+export interface CachedModelList {
+    provider: string;
+    endpoint: string;
+    models: string[];
+    fetchedAt: string;
+}
+export declare class ModelCacheStore {
+    readonly root: string;
+    readonly db: AnyPickDatabase;
+    constructor(root: string, db: AnyPickDatabase);
+    get(provider: string, endpoint: string): Promise<CachedModelList | null>;
+    write(entry: CachedModelList): Promise<void>;
+    clear(provider?: string): Promise<void>;
+}
+//# sourceMappingURL=model-cache-store.d.ts.map

package/dist/core/model-cache-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-cache-store.d.ts","sourceRoot":"","sources":["../../src/core/model-cache-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAG5C,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,eAAe;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAC;IAE7B,YAAY,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,eAAe,EAG5C;IAEK,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAe7E;IAEK,KAAK,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAUjD;IAEK,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAM5C;CACF"}

package/dist/core/model-cache-store.js

@@ -0,0 +1,50 @@
+import { getAnyPickRoot } from "./paths.js";
+//#region src/core/model-cache-store.ts
+var ModelCacheStore = class {
+	root;
+	db;
+	constructor(root, db) {
+		this.root = getAnyPickRoot(root);
+		this.db = db;
+	}
+	async get(provider, endpoint) {
+		const row = this.db.prepare(`SELECT models_json, fetched_at FROM model_catalog_cache
+         WHERE provider = ? AND endpoint = ?`).get(provider, endpoint);
+		if (!row) return null;
+		const models = parseModelsJson(row.models_json);
+		if (!models) return null;
+		return {
+			provider,
+			endpoint,
+			models,
+			fetchedAt: row.fetched_at
+		};
+	}
+	async write(entry) {
+		this.db.prepare(`INSERT INTO model_catalog_cache (provider, endpoint, models_json, fetched_at)
+         VALUES (?, ?, ?, ?)
+         ON CONFLICT(provider, endpoint) DO UPDATE SET
+           models_json = excluded.models_json,
+           fetched_at = excluded.fetched_at`).run(entry.provider, entry.endpoint, JSON.stringify(entry.models), entry.fetchedAt);
+	}
+	async clear(provider) {
+		if (provider) {
+			this.db.prepare(`DELETE FROM model_catalog_cache WHERE provider = ?`).run(provider);
+			return;
+		}
+		this.db.prepare(`DELETE FROM model_catalog_cache`).run();
+	}
+};
+function parseModelsJson(raw) {
+	try {
+		const parsed = JSON.parse(raw);
+		if (!Array.isArray(parsed)) return null;
+		return parsed.filter((v) => typeof v === "string" && v.length > 0);
+	} catch {
+		return null;
+	}
+}
+//#endregion
+export { ModelCacheStore };
+
+//# sourceMappingURL=model-cache-store.js.map

package/dist/core/model-cache-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-cache-store.js","names":[],"sources":["../../src/core/model-cache-store.ts"],"sourcesContent":["/**\n * Cached vendor model lists.\n *\n * Advisory data only: a miss costs one HTTP request, never correctness, so a\n * corrupt or absent row is read as \"no cache\" rather than raised. The store owns\n * its SQL and takes no locks — the service above it does that (ADR 0009).\n *\n * Keyed by provider *and* endpoint because the same provider id can point at\n * different hosts (a `custom` gateway, a self-hosted LiteLLM), and those serve\n * different model lists.\n */\n\nimport type { AnyPickDatabase } from './db';\nimport { getAnyPickRoot } from './paths';\n\nexport interface CachedModelList {\n  provider: string;\n  endpoint: string;\n  models: string[];\n  fetchedAt: string;\n}\n\nexport class ModelCacheStore {\n  readonly root: string;\n  readonly db: AnyPickDatabase;\n\n  constructor(root: string, db: AnyPickDatabase) {\n    this.root = getAnyPickRoot(root);\n    this.db = db;\n  }\n\n  async get(provider: string, endpoint: string): Promise<CachedModelList | null> {\n    const row = this.db\n      .prepare(\n        `SELECT models_json, fetched_at FROM model_catalog_cache\n         WHERE provider = ? AND endpoint = ?`,\n      )\n      .get(provider, endpoint) as { models_json: string; fetched_at: string } | undefined;\n    if (!row) {\n      return null;\n    }\n    const models = parseModelsJson(row.models_json);\n    if (!models) {\n      return null;\n    }\n    return { provider, endpoint, models, fetchedAt: row.fetched_at };\n  }\n\n  async write(entry: CachedModelList): Promise<void> {\n    this.db\n      .prepare(\n        `INSERT INTO model_catalog_cache (provider, endpoint, models_json, fetched_at)\n         VALUES (?, ?, ?, ?)\n         ON CONFLICT(provider, endpoint) DO UPDATE SET\n           models_json = excluded.models_json,\n           fetched_at = excluded.fetched_at`,\n      )\n      .run(entry.provider, entry.endpoint, JSON.stringify(entry.models), entry.fetchedAt);\n  }\n\n  async clear(provider?: string): Promise<void> {\n    if (provider) {\n      this.db.prepare(`DELETE FROM model_catalog_cache WHERE provider = ?`).run(provider);\n      return;\n    }\n    this.db.prepare(`DELETE FROM model_catalog_cache`).run();\n  }\n}\n\nfunction parseModelsJson(raw: string): string[] | null {\n  try {\n    const parsed = JSON.parse(raw) as unknown;\n    if (!Array.isArray(parsed)) {\n      return null;\n    }\n    return parsed.filter((v): v is string => typeof v === 'string' && v.length > 0);\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;AAsBA,IAAa,kBAAb,MAA6B;CAC3B;CACA;CAEA,YAAY,MAAc,IAAqB;EAC7C,KAAK,OAAO,eAAe,IAAI;EAC/B,KAAK,KAAK;CACZ;CAEA,MAAM,IAAI,UAAkB,UAAmD;EAC7E,MAAM,MAAM,KAAK,GACd,QACC;6CAEF,CAAC,CACA,IAAI,UAAU,QAAQ;EACzB,IAAI,CAAC,KACH,OAAO;EAET,MAAM,SAAS,gBAAgB,IAAI,WAAW;EAC9C,IAAI,CAAC,QACH,OAAO;EAET,OAAO;GAAE;GAAU;GAAU;GAAQ,WAAW,IAAI;EAAW;CACjE;CAEA,MAAM,MAAM,OAAuC;EACjD,KAAK,GACF,QACC;;;;4CAKF,CAAC,CACA,IAAI,MAAM,UAAU,MAAM,UAAU,KAAK,UAAU,MAAM,MAAM,GAAG,MAAM,SAAS;CACtF;CAEA,MAAM,MAAM,UAAkC;EAC5C,IAAI,UAAU;GACZ,KAAK,GAAG,QAAQ,oDAAoD,CAAC,CAAC,IAAI,QAAQ;GAClF;EACF;EACA,KAAK,GAAG,QAAQ,iCAAiC,CAAC,CAAC,IAAI;CACzD;AACF;AAEA,SAAS,gBAAgB,KAA8B;CACrD,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,GAAG;EAC7B,IAAI,CAAC,MAAM,QAAQ,MAAM,GACvB,OAAO;EAET,OAAO,OAAO,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC;CAChF,QAAQ;EACN,OAAO;CACT;AACF"}

package/dist/core/model-discovery.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Live model discovery with a cached fallback chain.
+ *
+ * The static catalog in `src/catalog/providers.ts` goes stale the moment a
+ * vendor ships a model, and a user should not need a AnyPick release to select
+ * one. So the answer is resolved in order:
+ *
+ *   1. a cache row younger than `TTL_MS`,
+ *   2. a live `fetchLiveModels()` on the provider,
+ *   3. a stale cache row, if the fetch failed,
+ *   4. the provider's static catalog — always non-empty for known vendors.
+ *
+ * Nothing here can fail a caller: a model list is advisory, and a screen that
+ * cannot render because a vendor is down would be worse than an outdated list.
+ * `refresh` is therefore the only way to force step 2.
+ *
+ * Egress is allowlisted per call (ADR 0006 keeps proxy traffic on loopback; this
+ * is the opposite direction — outbound, with the user's key attached). The
+ * allowlist is the vendor origins AnyPick ships plus the origin already stored
+ * in the user's own profile, so a rewritten endpoint cannot quietly receive a
+ * credential that was issued for somewhere else.
+ */
+import type { ModelDiscoveryContext, ModelPolicy } from '../types.js';
+import type { ModelCacheStore } from './model-cache-store.js';
+/** How long a fetched list is trusted without asking the vendor again. */
+export declare const MODEL_CACHE_TTL_MS: number;
+export type ModelListSource = 'live' | 'cache' | 'stale' | 'catalog';
+export interface ModelListResult {
+    models: string[];
+    source: ModelListSource;
+    /** When the list was fetched, for `cache` and `stale`. */
+    fetchedAt?: string;
+    /** Why a live fetch did not happen or did not succeed. */
+    note?: string;
+}
+export interface ModelDiscoveryRequest {
+    /** Catalog or account provider id. */
+    providerId: string;
+    /** Endpoint to query. Falls back to the provider's own default. */
+    endpoint?: string;
+    apiKey?: string;
+    /** Ignore a fresh cache row and ask the vendor. */
+    refresh?: boolean;
+}
+export interface ModelDiscoveryDeps {
+    root: string;
+    cache: ModelCacheStore;
+    policyFor: (providerId: string) => ModelPolicy | undefined;
+    /** Overridden in tests; defaults to an allowlisted direct transport. */
+    fetchImpl?: (origin: string) => ModelDiscoveryContext['fetch'];
+    now?: () => number;
+}
+export declare class ModelDiscoveryService {
+    private readonly deps;
+    constructor(deps: ModelDiscoveryDeps);
+    /**
+     * Best available model list for a provider/endpoint pair.
+     *
+     * Never throws for a network or vendor error — inspect `source` to see which
+     * step answered.
+     */
+    list(req: ModelDiscoveryRequest): Promise<ModelListResult>;
+    /** Drop cached lists so the next `list` asks the vendor. */
+    clearCache(providerId?: string): Promise<void>;
+}
+//# sourceMappingURL=model-discovery.d.ts.map

package/dist/core/model-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-discovery.d.ts","sourceRoot":"","sources":["../../src/core/model-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAGnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,0EAA0E;AAC1E,eAAO,MAAM,kBAAkB,QAAiB,CAAC;AAIjD,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;AAErE,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,eAAe,CAAC;IACxB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,eAAe,CAAC;IACvB,SAAS,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,WAAW,GAAG,SAAS,CAAC;IAC3D,wEAAwE;IACxE,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,qBAAa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,kBAAkB,EAAI;IAEzD;;;;;OAKG;IACG,IAAI,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC,CA4C/D;IAED,4DAA4D;IACtD,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnD;CACF"}