anypick 1.0.0

package/dist/core/plugin-loader.d.ts

@@ -0,0 +1,40 @@
+import { type PluginLoadResult, type PluginManifest, type PluginRecord } from '../types.js';
+export declare const PLUGIN_MANIFEST_FILE = "anypick.plugin.json";
+/**
+ * Resolve the entry module inside `root`, refusing anything that escapes it.
+ *
+ * `main` comes from a file the user may have obtained from a third party, so a
+ * `../../` entry must not be able to make AnyPick import an arbitrary module
+ * from elsewhere on disk under the plugin's name.
+ */
+export declare function resolveEntry(root: string, main: string): string;
+export declare function parseManifest(raw: string, source: string): PluginManifest;
+export declare function readManifest(root: string): Promise<PluginManifest>;
+/**
+ * SHA-256 of one file. Kept for tests and migration diagnostics; trust pins use
+ * `digestPluginPackage` so helper modules cannot change under a trusted entry.
+ */
+export declare function digestEntry(entry: string): Promise<string>;
+/**
+ * SHA-256 over the whole plugin package, not just the entry module.
+ *
+ * Format (stable, path-order sorted):
+ *   for each relative POSIX path under the plugin root:
+ *     path\\0 + byteLength\\0 + fileBytes
+ *
+ * Hashing only `main` would let a compromised helper module change while the
+ * trusted entry stayed identical (ADR 0012). Manifest + every shipped file are
+ * included so an install is a fixed artifact.
+ */
+export declare function digestPluginPackage(root: string): Promise<string>;
+/**
+ * Load every enabled plugin.
+ *
+ * A broken or tampered plugin is reported as a failure and skipped rather than
+ * aborting startup: the framework's job is switching real logins, and one bad
+ * third-party extension must not make `anypick` unusable (ADR 0012).
+ */
+export declare function loadPlugins(records: PluginRecord[]): Promise<PluginLoadResult>;
+/** `ANYPICK_NO_PLUGINS=1` skips loading entirely, for bisecting a bad plugin. */
+export declare function pluginsDisabledByEnv(): boolean;
+//# sourceMappingURL=plugin-loader.d.ts.map

package/dist/core/plugin-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-loader.d.ts","sourceRoot":"","sources":["../../src/core/plugin-loader.ts"],"names":[],"mappings":"AAIA,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,YAAY,EAClB,MAAM,UAAU,CAAC;AAGlB,eAAO,MAAM,oBAAoB,wBAAwB,CAAC;AAsB1D;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAU/D;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc,CAoCzE;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAYxE;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGhE;AA4BD;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAmBvE;AAoDD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAsBpF;AAED,iFAAiF;AACjF,wBAAgB,oBAAoB,IAAI,OAAO,CAG9C"}

package/dist/core/plugin-loader.js

@@ -0,0 +1,184 @@
+import "../types/plugins.js";
+import { ExitCode, anypickError } from "../utils/errors.js";
+import { isAbsolute, join, relative, resolve, sep } from "node:path";
+import { readFile, readdir, stat } from "node:fs/promises";
+import { createHash } from "node:crypto";
+import { pathToFileURL } from "node:url";
+//#region src/core/plugin-loader.ts
+var PLUGIN_MANIFEST_FILE = "anypick.plugin.json";
+/** Plugin names are used as directory-independent keys and printed in receipts. */
+var NAME_PATTERN = /^[a-z0-9][a-z0-9-]{1,63}$/;
+/** Directory names skipped when hashing a plugin package (dev debris / VCS). */
+var DIGEST_SKIP_DIRS = /* @__PURE__ */ new Set([
+	".git",
+	".hg",
+	".svn",
+	"node_modules",
+	".DS_Store",
+	"__pycache__"
+]);
+function fail(message, suggestions = []) {
+	throw anypickError(message, "PLUGIN_INVALID", {
+		exitCode: ExitCode.OPERATIONAL,
+		suggestions
+	});
+}
+/**
+* Resolve the entry module inside `root`, refusing anything that escapes it.
+*
+* `main` comes from a file the user may have obtained from a third party, so a
+* `../../` entry must not be able to make AnyPick import an arbitrary module
+* from elsewhere on disk under the plugin's name.
+*/
+function resolveEntry(root, main) {
+	if (isAbsolute(main)) fail(`Plugin entry "${main}" must be a path relative to the plugin directory.`);
+	const entry = resolve(root, main);
+	const rel = relative(root, entry);
+	if (rel.startsWith("..") || isAbsolute(rel)) fail(`Plugin entry "${main}" resolves outside the plugin directory.`);
+	return entry;
+}
+function parseManifest(raw, source) {
+	let data;
+	try {
+		data = JSON.parse(raw);
+	} catch {
+		fail(`${source} is not valid JSON.`);
+	}
+	if (typeof data !== "object" || data === null) fail(`${source} must contain a JSON object.`);
+	const m = data;
+	const name = m.name;
+	if (typeof name !== "string" || !NAME_PATTERN.test(name)) fail(`${source} has an invalid "name". Use lowercase letters, digits, and hyphens (2-64 characters).`);
+	if (typeof m.version !== "string" || m.version.length === 0) fail(`${source} is missing a "version" string.`);
+	if (typeof m.main !== "string" || m.main.length === 0) fail(`${source} is missing a "main" entry module path.`);
+	if (m.apiVersion !== 1) fail(`Plugin ${name} targets AnyPick plugin API ${String(m.apiVersion)}; this build supports 1.`, [`Update the plugin, or use a AnyPick release that supports API ${String(m.apiVersion)}.`]);
+	return {
+		name,
+		version: m.version,
+		description: typeof m.description === "string" ? m.description : void 0,
+		apiVersion: 1,
+		main: m.main
+	};
+}
+async function readManifest(root) {
+	const path = join(root, PLUGIN_MANIFEST_FILE);
+	try {
+		return parseManifest(await readFile(path, "utf8"), path);
+	} catch (error) {
+		if (error.code !== "ENOENT") throw error;
+	}
+	return fail(`No ${PLUGIN_MANIFEST_FILE} found in ${root}.`, [`A AnyPick plugin is a directory containing ${PLUGIN_MANIFEST_FILE}.`]);
+}
+async function listPluginFiles(root) {
+	const out = [];
+	async function walk(dir) {
+		const entries = await readdir(dir, { withFileTypes: true });
+		for (const entry of entries) {
+			if (DIGEST_SKIP_DIRS.has(entry.name)) continue;
+			const full = join(dir, entry.name);
+			if (entry.isDirectory()) {
+				await walk(full);
+				continue;
+			}
+			if (entry.isFile() || entry.isSymbolicLink()) {
+				if ((await stat(full).catch(() => null))?.isFile()) out.push(full);
+			}
+		}
+	}
+	await walk(root);
+	return out;
+}
+/**
+* SHA-256 over the whole plugin package, not just the entry module.
+*
+* Format (stable, path-order sorted):
+*   for each relative POSIX path under the plugin root:
+*     path\\0 + byteLength\\0 + fileBytes
+*
+* Hashing only `main` would let a compromised helper module change while the
+* trusted entry stayed identical (ADR 0012). Manifest + every shipped file are
+* included so an install is a fixed artifact.
+*/
+async function digestPluginPackage(root) {
+	const rels = (await listPluginFiles(root)).map((full) => ({
+		full,
+		rel: relative(root, full).split(sep).join("/")
+	})).toSorted((a, b) => a.rel.localeCompare(b.rel));
+	const hash = createHash("sha256");
+	for (const { full, rel } of rels) {
+		const bytes = await readFile(full);
+		hash.update(rel);
+		hash.update("\0");
+		hash.update(String(bytes.byteLength));
+		hash.update("\0");
+		hash.update(bytes);
+	}
+	return hash.digest("hex");
+}
+function isPlugin(value) {
+	return typeof value === "object" && value !== null && typeof value.activate === "function";
+}
+/**
+* Import one plugin's entry module and hand back its `activate`.
+*
+* The digest is checked *before* the import: once `import()` runs, arbitrary
+* module top-level code has already executed in a process holding credential
+* file handles, so verification after the fact would be theatre.
+*/
+async function loadOne(record) {
+	const manifest = await readManifest(record.path);
+	if (manifest.name !== record.name) fail(`Plugin at ${record.path} now calls itself "${manifest.name}" but is installed as "${record.name}".`, ["Remove and re-add the plugin."]);
+	const entry = resolveEntry(record.path, manifest.main);
+	if (await digestPluginPackage(record.path) !== record.digest) throw anypickError(`Plugin ${record.name} has changed since you trusted it.`, "PLUGIN_UNTRUSTED", {
+		exitCode: ExitCode.OPERATIONAL,
+		suggestions: [`Review the change, then run: anypick plugin trust ${record.name}`, `Or remove it: anypick plugin remove ${record.name}`]
+	});
+	const mod = await import(pathToFileURL(entry).href);
+	const exported = mod.default ?? mod;
+	if (!isPlugin(exported)) fail(`Plugin ${record.name} does not export an object with an "activate" function.`);
+	return {
+		manifest,
+		plugin: exported
+	};
+}
+/**
+* Load every enabled plugin.
+*
+* A broken or tampered plugin is reported as a failure and skipped rather than
+* aborting startup: the framework's job is switching real logins, and one bad
+* third-party extension must not make `anypick` unusable (ADR 0012).
+*/
+async function loadPlugins(records) {
+	const loaded = [];
+	const failures = [];
+	for (const record of records) {
+		if (!record.enabled) continue;
+		try {
+			const { manifest, plugin } = await loadOne(record);
+			loaded.push({
+				record,
+				manifest,
+				plugin
+			});
+		} catch (err) {
+			failures.push({
+				name: record.name,
+				path: record.path,
+				reason: err instanceof Error ? err.message : String(err),
+				untrusted: typeof err.code === "string" && err.code === "PLUGIN_UNTRUSTED"
+			});
+		}
+	}
+	return {
+		loaded,
+		failures
+	};
+}
+/** `ANYPICK_NO_PLUGINS=1` skips loading entirely, for bisecting a bad plugin. */
+function pluginsDisabledByEnv() {
+	const v = process.env.ANYPICK_NO_PLUGINS;
+	return v === "1" || v === "true";
+}
+//#endregion
+export { PLUGIN_MANIFEST_FILE, digestPluginPackage, loadPlugins, parseManifest, pluginsDisabledByEnv, readManifest, resolveEntry };
+
+//# sourceMappingURL=plugin-loader.js.map

package/dist/core/plugin-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-loader.js","names":[],"sources":["../../src/core/plugin-loader.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport { readdir, readFile, stat } from 'node:fs/promises';\nimport { isAbsolute, join, relative, resolve, sep } from 'node:path';\nimport { pathToFileURL } from 'node:url';\nimport {\n  PLUGIN_API_VERSION,\n  type AnyPickPlugin,\n  type PluginLoadFailure,\n  type PluginLoadResult,\n  type PluginManifest,\n  type PluginRecord,\n} from '../types';\nimport { anypickError, ExitCode } from '../utils/errors';\n\nexport const PLUGIN_MANIFEST_FILE = 'anypick.plugin.json';\n\n/** Plugin names are used as directory-independent keys and printed in receipts. */\nconst NAME_PATTERN = /^[a-z0-9][a-z0-9-]{1,63}$/;\n\n/** Directory names skipped when hashing a plugin package (dev debris / VCS). */\nconst DIGEST_SKIP_DIRS = new Set([\n  '.git',\n  '.hg',\n  '.svn',\n  'node_modules',\n  '.DS_Store',\n  '__pycache__',\n]);\n\nfunction fail(message: string, suggestions: string[] = []): never {\n  throw anypickError(message, 'PLUGIN_INVALID', {\n    exitCode: ExitCode.OPERATIONAL,\n    suggestions,\n  });\n}\n\n/**\n * Resolve the entry module inside `root`, refusing anything that escapes it.\n *\n * `main` comes from a file the user may have obtained from a third party, so a\n * `../../` entry must not be able to make AnyPick import an arbitrary module\n * from elsewhere on disk under the plugin's name.\n */\nexport function resolveEntry(root: string, main: string): string {\n  if (isAbsolute(main)) {\n    fail(`Plugin entry \"${main}\" must be a path relative to the plugin directory.`);\n  }\n  const entry = resolve(root, main);\n  const rel = relative(root, entry);\n  if (rel.startsWith('..') || isAbsolute(rel)) {\n    fail(`Plugin entry \"${main}\" resolves outside the plugin directory.`);\n  }\n  return entry;\n}\n\nexport function parseManifest(raw: string, source: string): PluginManifest {\n  let data: unknown;\n  try {\n    data = JSON.parse(raw);\n  } catch {\n    fail(`${source} is not valid JSON.`);\n  }\n  if (typeof data !== 'object' || data === null) {\n    fail(`${source} must contain a JSON object.`);\n  }\n  const m = data as Record<string, unknown>;\n  const name = m.name;\n  if (typeof name !== 'string' || !NAME_PATTERN.test(name)) {\n    fail(\n      `${source} has an invalid \"name\". Use lowercase letters, digits, and hyphens (2-64 characters).`,\n    );\n  }\n  if (typeof m.version !== 'string' || m.version.length === 0) {\n    fail(`${source} is missing a \"version\" string.`);\n  }\n  if (typeof m.main !== 'string' || m.main.length === 0) {\n    fail(`${source} is missing a \"main\" entry module path.`);\n  }\n  if (m.apiVersion !== PLUGIN_API_VERSION) {\n    fail(\n      `Plugin ${name} targets AnyPick plugin API ${String(m.apiVersion)}; this build supports ${PLUGIN_API_VERSION}.`,\n      [`Update the plugin, or use a AnyPick release that supports API ${String(m.apiVersion)}.`],\n    );\n  }\n  return {\n    name,\n    version: m.version,\n    description: typeof m.description === 'string' ? m.description : undefined,\n    apiVersion: PLUGIN_API_VERSION,\n    main: m.main,\n  };\n}\n\nexport async function readManifest(root: string): Promise<PluginManifest> {\n  const path = join(root, PLUGIN_MANIFEST_FILE);\n  try {\n    return parseManifest(await readFile(path, 'utf8'), path);\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code !== 'ENOENT') {\n      throw error;\n    }\n  }\n  return fail(`No ${PLUGIN_MANIFEST_FILE} found in ${root}.`, [\n    `A AnyPick plugin is a directory containing ${PLUGIN_MANIFEST_FILE}.`,\n  ]);\n}\n\n/**\n * SHA-256 of one file. Kept for tests and migration diagnostics; trust pins use\n * `digestPluginPackage` so helper modules cannot change under a trusted entry.\n */\nexport async function digestEntry(entry: string): Promise<string> {\n  const bytes = await readFile(entry);\n  return createHash('sha256').update(bytes).digest('hex');\n}\n\nasync function listPluginFiles(root: string): Promise<string[]> {\n  const out: string[] = [];\n  async function walk(dir: string): Promise<void> {\n    const entries = await readdir(dir, { withFileTypes: true });\n    for (const entry of entries) {\n      if (DIGEST_SKIP_DIRS.has(entry.name)) {\n        continue;\n      }\n      const full = join(dir, entry.name);\n      if (entry.isDirectory()) {\n        await walk(full);\n        continue;\n      }\n      if (entry.isFile() || entry.isSymbolicLink()) {\n        // Only regular files contribute; broken symlinks fail at read time.\n        const info = await stat(full).catch(() => null);\n        if (info?.isFile()) {\n          out.push(full);\n        }\n      }\n    }\n  }\n  await walk(root);\n  return out;\n}\n\n/**\n * SHA-256 over the whole plugin package, not just the entry module.\n *\n * Format (stable, path-order sorted):\n *   for each relative POSIX path under the plugin root:\n *     path\\\\0 + byteLength\\\\0 + fileBytes\n *\n * Hashing only `main` would let a compromised helper module change while the\n * trusted entry stayed identical (ADR 0012). Manifest + every shipped file are\n * included so an install is a fixed artifact.\n */\nexport async function digestPluginPackage(root: string): Promise<string> {\n  const files = await listPluginFiles(root);\n  const rels = files\n    .map((full) => ({\n      full,\n      rel: relative(root, full).split(sep).join('/'),\n    }))\n    .toSorted((a, b) => a.rel.localeCompare(b.rel));\n\n  const hash = createHash('sha256');\n  for (const { full, rel } of rels) {\n    const bytes = await readFile(full);\n    hash.update(rel);\n    hash.update('\\0');\n    hash.update(String(bytes.byteLength));\n    hash.update('\\0');\n    hash.update(bytes);\n  }\n  return hash.digest('hex');\n}\n\nfunction isPlugin(value: unknown): value is AnyPickPlugin {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    typeof (value as { activate?: unknown }).activate === 'function'\n  );\n}\n\n/**\n * Import one plugin's entry module and hand back its `activate`.\n *\n * The digest is checked *before* the import: once `import()` runs, arbitrary\n * module top-level code has already executed in a process holding credential\n * file handles, so verification after the fact would be theatre.\n */\nasync function loadOne(\n  record: PluginRecord,\n): Promise<{ manifest: PluginManifest; plugin: AnyPickPlugin }> {\n  const manifest = await readManifest(record.path);\n  if (manifest.name !== record.name) {\n    fail(\n      `Plugin at ${record.path} now calls itself \"${manifest.name}\" but is installed as \"${record.name}\".`,\n      ['Remove and re-add the plugin.'],\n    );\n  }\n  const entry = resolveEntry(record.path, manifest.main);\n  // Package digest is checked *before* import: once import runs, top-level code\n  // has already executed in a process holding credential file handles.\n  const digest = await digestPluginPackage(record.path);\n  if (digest !== record.digest) {\n    throw anypickError(\n      `Plugin ${record.name} has changed since you trusted it.`,\n      'PLUGIN_UNTRUSTED',\n      {\n        exitCode: ExitCode.OPERATIONAL,\n        suggestions: [\n          `Review the change, then run: anypick plugin trust ${record.name}`,\n          `Or remove it: anypick plugin remove ${record.name}`,\n        ],\n      },\n    );\n  }\n  const mod: unknown = await import(pathToFileURL(entry).href);\n  const exported = (mod as { default?: unknown }).default ?? mod;\n  if (!isPlugin(exported)) {\n    fail(`Plugin ${record.name} does not export an object with an \"activate\" function.`);\n  }\n  return { manifest, plugin: exported };\n}\n\n/**\n * Load every enabled plugin.\n *\n * A broken or tampered plugin is reported as a failure and skipped rather than\n * aborting startup: the framework's job is switching real logins, and one bad\n * third-party extension must not make `anypick` unusable (ADR 0012).\n */\nexport async function loadPlugins(records: PluginRecord[]): Promise<PluginLoadResult> {\n  const loaded: PluginLoadResult['loaded'] = [];\n  const failures: PluginLoadFailure[] = [];\n  for (const record of records) {\n    if (!record.enabled) {\n      continue;\n    }\n    try {\n      const { manifest, plugin } = await loadOne(record);\n      loaded.push({ record, manifest, plugin });\n    } catch (err) {\n      failures.push({\n        name: record.name,\n        path: record.path,\n        reason: err instanceof Error ? err.message : String(err),\n        untrusted:\n          typeof (err as { code?: unknown }).code === 'string' &&\n          (err as { code: string }).code === 'PLUGIN_UNTRUSTED',\n      });\n    }\n  }\n  return { loaded, failures };\n}\n\n/** `ANYPICK_NO_PLUGINS=1` skips loading entirely, for bisecting a bad plugin. */\nexport function pluginsDisabledByEnv(): boolean {\n  const v = process.env.ANYPICK_NO_PLUGINS;\n  return v === '1' || v === 'true';\n}\n"],"mappings":";;;;;;;AAcA,IAAa,uBAAuB;;AAGpC,IAAM,eAAe;;AAGrB,IAAM,mCAAmB,IAAI,IAAI;CAC/B;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,KAAK,SAAiB,cAAwB,CAAC,GAAU;CAChE,MAAM,aAAa,SAAS,kBAAkB;EAC5C,UAAU,SAAS;EACnB;CACF,CAAC;AACH;;;;;;;;AASA,SAAgB,aAAa,MAAc,MAAsB;CAC/D,IAAI,WAAW,IAAI,GACjB,KAAK,iBAAiB,KAAK,mDAAmD;CAEhF,MAAM,QAAQ,QAAQ,MAAM,IAAI;CAChC,MAAM,MAAM,SAAS,MAAM,KAAK;CAChC,IAAI,IAAI,WAAW,IAAI,KAAK,WAAW,GAAG,GACxC,KAAK,iBAAiB,KAAK,yCAAyC;CAEtE,OAAO;AACT;AAEA,SAAgB,cAAc,KAAa,QAAgC;CACzE,IAAI;CACJ,IAAI;EACF,OAAO,KAAK,MAAM,GAAG;CACvB,QAAQ;EACN,KAAK,GAAG,OAAO,oBAAoB;CACrC;CACA,IAAI,OAAO,SAAS,YAAY,SAAS,MACvC,KAAK,GAAG,OAAO,6BAA6B;CAE9C,MAAM,IAAI;CACV,MAAM,OAAO,EAAE;CACf,IAAI,OAAO,SAAS,YAAY,CAAC,aAAa,KAAK,IAAI,GACrD,KACE,GAAG,OAAO,sFACZ;CAEF,IAAI,OAAO,EAAE,YAAY,YAAY,EAAE,QAAQ,WAAW,GACxD,KAAK,GAAG,OAAO,gCAAgC;CAEjD,IAAI,OAAO,EAAE,SAAS,YAAY,EAAE,KAAK,WAAW,GAClD,KAAK,GAAG,OAAO,wCAAwC;CAEzD,IAAI,EAAE,eAAA,GACJ,KACE,UAAU,KAAK,8BAA8B,OAAO,EAAE,UAAU,EAAE,2BAClE,CAAC,iEAAiE,OAAO,EAAE,UAAU,EAAE,EAAE,CAC3F;CAEF,OAAO;EACL;EACA,SAAS,EAAE;EACX,aAAa,OAAO,EAAE,gBAAgB,WAAW,EAAE,cAAc,KAAA;EACjE,YAAA;EACA,MAAM,EAAE;CACV;AACF;AAEA,eAAsB,aAAa,MAAuC;CACxE,MAAM,OAAO,KAAK,MAAM,oBAAoB;CAC5C,IAAI;EACF,OAAO,cAAc,MAAM,SAAS,MAAM,MAAM,GAAG,IAAI;CACzD,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAC5C,MAAM;CAEV;CACA,OAAO,KAAK,MAAM,qBAAqB,YAAY,KAAK,IAAI,CAC1D,8CAA8C,qBAAqB,EACrE,CAAC;AACH;AAWA,eAAe,gBAAgB,MAAiC;CAC9D,MAAM,MAAgB,CAAC;CACvB,eAAe,KAAK,KAA4B;EAC9C,MAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;EAC1D,KAAK,MAAM,SAAS,SAAS;GAC3B,IAAI,iBAAiB,IAAI,MAAM,IAAI,GACjC;GAEF,MAAM,OAAO,KAAK,KAAK,MAAM,IAAI;GACjC,IAAI,MAAM,YAAY,GAAG;IACvB,MAAM,KAAK,IAAI;IACf;GACF;GACA,IAAI,MAAM,OAAO,KAAK,MAAM,eAAe;SAGrC,MADe,KAAK,IAAI,CAAC,CAAC,YAAY,IAAI,EAAA,EACpC,OAAO,GACf,IAAI,KAAK,IAAI;GAAA;EAGnB;CACF;CACA,MAAM,KAAK,IAAI;CACf,OAAO;AACT;;;;;;;;;;;;AAaA,eAAsB,oBAAoB,MAA+B;CAEvE,MAAM,QAAO,MADO,gBAAgB,IAAI,EAAA,CAErC,KAAK,UAAU;EACd;EACA,KAAK,SAAS,MAAM,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG;CAC/C,EAAE,CAAC,CACF,UAAU,GAAG,MAAM,EAAE,IAAI,cAAc,EAAE,GAAG,CAAC;CAEhD,MAAM,OAAO,WAAW,QAAQ;CAChC,KAAK,MAAM,EAAE,MAAM,SAAS,MAAM;EAChC,MAAM,QAAQ,MAAM,SAAS,IAAI;EACjC,KAAK,OAAO,GAAG;EACf,KAAK,OAAO,IAAI;EAChB,KAAK,OAAO,OAAO,MAAM,UAAU,CAAC;EACpC,KAAK,OAAO,IAAI;EAChB,KAAK,OAAO,KAAK;CACnB;CACA,OAAO,KAAK,OAAO,KAAK;AAC1B;AAEA,SAAS,SAAS,OAAwC;CACxD,OACE,OAAO,UAAU,YACjB,UAAU,QACV,OAAQ,MAAiC,aAAa;AAE1D;;;;;;;;AASA,eAAe,QACb,QAC8D;CAC9D,MAAM,WAAW,MAAM,aAAa,OAAO,IAAI;CAC/C,IAAI,SAAS,SAAS,OAAO,MAC3B,KACE,aAAa,OAAO,KAAK,qBAAqB,SAAS,KAAK,yBAAyB,OAAO,KAAK,KACjG,CAAC,+BAA+B,CAClC;CAEF,MAAM,QAAQ,aAAa,OAAO,MAAM,SAAS,IAAI;CAIrD,IAAI,MADiB,oBAAoB,OAAO,IAAI,MACrC,OAAO,QACpB,MAAM,aACJ,UAAU,OAAO,KAAK,qCACtB,oBACA;EACE,UAAU,SAAS;EACnB,aAAa,CACX,qDAAqD,OAAO,QAC5D,uCAAuC,OAAO,MAChD;CACF,CACF;CAEF,MAAM,MAAe,MAAM,OAAO,cAAc,KAAK,CAAC,CAAC;CACvD,MAAM,WAAY,IAA8B,WAAW;CAC3D,IAAI,CAAC,SAAS,QAAQ,GACpB,KAAK,UAAU,OAAO,KAAK,wDAAwD;CAErF,OAAO;EAAE;EAAU,QAAQ;CAAS;AACtC;;;;;;;;AASA,eAAsB,YAAY,SAAoD;CACpF,MAAM,SAAqC,CAAC;CAC5C,MAAM,WAAgC,CAAC;CACvC,KAAK,MAAM,UAAU,SAAS;EAC5B,IAAI,CAAC,OAAO,SACV;EAEF,IAAI;GACF,MAAM,EAAE,UAAU,WAAW,MAAM,QAAQ,MAAM;GACjD,OAAO,KAAK;IAAE;IAAQ;IAAU;GAAO,CAAC;EAC1C,SAAS,KAAK;GACZ,SAAS,KAAK;IACZ,MAAM,OAAO;IACb,MAAM,OAAO;IACb,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;IACvD,WACE,OAAQ,IAA2B,SAAS,YAC3C,IAAyB,SAAS;GACvC,CAAC;EACH;CACF;CACA,OAAO;EAAE;EAAQ;CAAS;AAC5B;;AAGA,SAAgB,uBAAgC;CAC9C,MAAM,IAAI,QAAQ,IAAI;CACtB,OAAO,MAAM,OAAO,MAAM;AAC5B"}

package/dist/core/plugin-service.d.ts

@@ -0,0 +1,32 @@
+import type { PluginRecord } from '../types.js';
+import type { PluginStore } from './plugin-store.js';
+/**
+ * Install, trust, and enable plugins.
+ *
+ * Adding a plugin never enables it. A plugin runs in-process alongside code that
+ * reads and rewrites real credential files, so becoming loadable is a separate,
+ * explicit decision from being present on disk (ADR 0012).
+ */
+export declare class PluginService {
+    private readonly store;
+    private readonly root;
+    constructor(store: PluginStore, root: string);
+    list(): PluginRecord[];
+    get(name: string): PluginRecord | null;
+    /** Read the manifest at `dir`, record it disabled, and pin its package digest. */
+    add(dir: string): Promise<PluginRecord>;
+    remove(name: string): Promise<void>;
+    setEnabled(name: string, enabled: boolean): Promise<PluginRecord>;
+    /**
+     * Re-pin the package digest to the code currently on disk.
+     *
+     * This is the acknowledgement step after a plugin's code changes — an upgrade,
+     * a `git pull`, or something the user did not expect. It reports the old and
+     * new digest so the caller can show what is being approved.
+     */
+    trust(name: string): Promise<{
+        record: PluginRecord;
+        previousDigest: string;
+    }>;
+}
+//# sourceMappingURL=plugin-service.d.ts.map

package/dist/core/plugin-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-service.d.ts","sourceRoot":"","sources":["../../src/core/plugin-service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAI7C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAgBlD;;;;;;GAMG;AACH,qBAAa,aAAa;IAEtB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFvB,YACmB,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,MAAM,EAC3B;IAEJ,IAAI,IAAI,YAAY,EAAE,CAErB;IAED,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAErC;IAED,kFAAkF;IAC5E,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CA+B5C;IAEK,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMxC;IAEK,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAUtE;IAED;;;;;;OAMG;IACG,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,YAAY,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAiBnF;CACF"}

package/dist/core/plugin-service.js

@@ -0,0 +1,110 @@
+import { ExitCode, anypickError } from "../utils/errors.js";
+import { withMutationLock } from "./mutation-lock.js";
+import { digestPluginPackage, readManifest } from "./plugin-loader.js";
+import { resolve } from "node:path";
+//#region src/core/plugin-service.ts
+/** All plugin mutations serialize on one scope: the set is read as a whole at startup. */
+var PLUGIN_SCOPE = "plugins";
+function nowIso() {
+	return (/* @__PURE__ */ new Date()).toISOString();
+}
+function notFound(name) {
+	throw anypickError(`No plugin named "${name}" is installed.`, "PLUGIN_NOT_FOUND", {
+		exitCode: ExitCode.NOT_FOUND,
+		suggestions: ["List installed plugins: anypick plugin list"]
+	});
+}
+/**
+* Install, trust, and enable plugins.
+*
+* Adding a plugin never enables it. A plugin runs in-process alongside code that
+* reads and rewrites real credential files, so becoming loadable is a separate,
+* explicit decision from being present on disk (ADR 0012).
+*/
+var PluginService = class {
+	store;
+	root;
+	constructor(store, root) {
+		this.store = store;
+		this.root = root;
+	}
+	list() {
+		return this.store.list();
+	}
+	get(name) {
+		return this.store.get(name);
+	}
+	/** Read the manifest at `dir`, record it disabled, and pin its package digest. */
+	async add(dir) {
+		const path = resolve(dir);
+		const manifest = await readManifest(path);
+		const digest = await digestPluginPackage(path);
+		return withMutationLock(this.root, PLUGIN_SCOPE, async () => {
+			const existing = this.store.get(manifest.name);
+			if (existing && existing.path !== path) throw anypickError(`A different plugin directory is already installed as "${manifest.name}".`, "PLUGIN_CONFLICT", {
+				exitCode: ExitCode.OPERATIONAL,
+				details: { installedPath: existing.path },
+				suggestions: [`Remove the existing one first: anypick plugin remove ${manifest.name}`]
+			});
+			const record = {
+				name: manifest.name,
+				path,
+				version: manifest.version,
+				enabled: existing?.enabled ?? false,
+				digest,
+				addedAt: existing?.addedAt ?? nowIso(),
+				updatedAt: nowIso()
+			};
+			this.store.upsert(record);
+			return record;
+		});
+	}
+	async remove(name) {
+		await withMutationLock(this.root, PLUGIN_SCOPE, async () => {
+			if (!this.store.remove(name)) notFound(name);
+		});
+	}
+	async setEnabled(name, enabled) {
+		return withMutationLock(this.root, PLUGIN_SCOPE, async () => {
+			const existing = this.store.get(name);
+			if (!existing) notFound(name);
+			const record = {
+				...existing,
+				enabled,
+				updatedAt: nowIso()
+			};
+			this.store.upsert(record);
+			return record;
+		});
+	}
+	/**
+	* Re-pin the package digest to the code currently on disk.
+	*
+	* This is the acknowledgement step after a plugin's code changes — an upgrade,
+	* a `git pull`, or something the user did not expect. It reports the old and
+	* new digest so the caller can show what is being approved.
+	*/
+	async trust(name) {
+		const existing = this.store.get(name);
+		if (!existing) notFound(name);
+		const manifest = await readManifest(existing.path);
+		const digest = await digestPluginPackage(existing.path);
+		return withMutationLock(this.root, PLUGIN_SCOPE, async () => {
+			const record = {
+				...existing,
+				version: manifest.version,
+				digest,
+				updatedAt: nowIso()
+			};
+			this.store.upsert(record);
+			return {
+				record,
+				previousDigest: existing.digest
+			};
+		});
+	}
+};
+//#endregion
+export { PluginService };
+
+//# sourceMappingURL=plugin-service.js.map

package/dist/core/plugin-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-service.js","names":[],"sources":["../../src/core/plugin-service.ts"],"sourcesContent":["import { resolve } from 'node:path';\nimport type { PluginRecord } from '../types';\nimport { anypickError, ExitCode } from '../utils/errors';\nimport { withMutationLock } from './mutation-lock';\nimport { digestPluginPackage, readManifest } from './plugin-loader';\nimport type { PluginStore } from './plugin-store';\n\n/** All plugin mutations serialize on one scope: the set is read as a whole at startup. */\nconst PLUGIN_SCOPE = 'plugins';\n\nfunction nowIso(): string {\n  return new Date().toISOString();\n}\n\nfunction notFound(name: string): never {\n  throw anypickError(`No plugin named \"${name}\" is installed.`, 'PLUGIN_NOT_FOUND', {\n    exitCode: ExitCode.NOT_FOUND,\n    suggestions: ['List installed plugins: anypick plugin list'],\n  });\n}\n\n/**\n * Install, trust, and enable plugins.\n *\n * Adding a plugin never enables it. A plugin runs in-process alongside code that\n * reads and rewrites real credential files, so becoming loadable is a separate,\n * explicit decision from being present on disk (ADR 0012).\n */\nexport class PluginService {\n  constructor(\n    private readonly store: PluginStore,\n    private readonly root: string,\n  ) {}\n\n  list(): PluginRecord[] {\n    return this.store.list();\n  }\n\n  get(name: string): PluginRecord | null {\n    return this.store.get(name);\n  }\n\n  /** Read the manifest at `dir`, record it disabled, and pin its package digest. */\n  async add(dir: string): Promise<PluginRecord> {\n    const path = resolve(dir);\n    const manifest = await readManifest(path);\n    const digest = await digestPluginPackage(path);\n    return withMutationLock(this.root, PLUGIN_SCOPE, async () => {\n      const existing = this.store.get(manifest.name);\n      if (existing && existing.path !== path) {\n        throw anypickError(\n          `A different plugin directory is already installed as \"${manifest.name}\".`,\n          'PLUGIN_CONFLICT',\n          {\n            exitCode: ExitCode.OPERATIONAL,\n            details: { installedPath: existing.path },\n            suggestions: [`Remove the existing one first: anypick plugin remove ${manifest.name}`],\n          },\n        );\n      }\n      const record: PluginRecord = {\n        name: manifest.name,\n        path,\n        version: manifest.version,\n        // Re-adding an already-enabled plugin from the same path keeps it\n        // enabled; the freshly computed digest re-trusts the current code.\n        enabled: existing?.enabled ?? false,\n        digest,\n        addedAt: existing?.addedAt ?? nowIso(),\n        updatedAt: nowIso(),\n      };\n      this.store.upsert(record);\n      return record;\n    });\n  }\n\n  async remove(name: string): Promise<void> {\n    await withMutationLock(this.root, PLUGIN_SCOPE, async () => {\n      if (!this.store.remove(name)) {\n        notFound(name);\n      }\n    });\n  }\n\n  async setEnabled(name: string, enabled: boolean): Promise<PluginRecord> {\n    return withMutationLock(this.root, PLUGIN_SCOPE, async () => {\n      const existing = this.store.get(name);\n      if (!existing) {\n        notFound(name);\n      }\n      const record: PluginRecord = { ...existing, enabled, updatedAt: nowIso() };\n      this.store.upsert(record);\n      return record;\n    });\n  }\n\n  /**\n   * Re-pin the package digest to the code currently on disk.\n   *\n   * This is the acknowledgement step after a plugin's code changes — an upgrade,\n   * a `git pull`, or something the user did not expect. It reports the old and\n   * new digest so the caller can show what is being approved.\n   */\n  async trust(name: string): Promise<{ record: PluginRecord; previousDigest: string }> {\n    const existing = this.store.get(name);\n    if (!existing) {\n      notFound(name);\n    }\n    const manifest = await readManifest(existing.path);\n    const digest = await digestPluginPackage(existing.path);\n    return withMutationLock(this.root, PLUGIN_SCOPE, async () => {\n      const record: PluginRecord = {\n        ...existing,\n        version: manifest.version,\n        digest,\n        updatedAt: nowIso(),\n      };\n      this.store.upsert(record);\n      return { record, previousDigest: existing.digest };\n    });\n  }\n}\n"],"mappings":";;;;;;AAQA,IAAM,eAAe;AAErB,SAAS,SAAiB;CACxB,wBAAO,IAAI,KAAK,EAAA,CAAE,YAAY;AAChC;AAEA,SAAS,SAAS,MAAqB;CACrC,MAAM,aAAa,oBAAoB,KAAK,kBAAkB,oBAAoB;EAChF,UAAU,SAAS;EACnB,aAAa,CAAC,6CAA6C;CAC7D,CAAC;AACH;;;;;;;;AASA,IAAa,gBAAb,MAA2B;CAEN;CACA;CAFnB,YACE,OACA,MACA;EAFiB,KAAA,QAAA;EACA,KAAA,OAAA;CAChB;CAEH,OAAuB;EACrB,OAAO,KAAK,MAAM,KAAK;CACzB;CAEA,IAAI,MAAmC;EACrC,OAAO,KAAK,MAAM,IAAI,IAAI;CAC5B;;CAGA,MAAM,IAAI,KAAoC;EAC5C,MAAM,OAAO,QAAQ,GAAG;EACxB,MAAM,WAAW,MAAM,aAAa,IAAI;EACxC,MAAM,SAAS,MAAM,oBAAoB,IAAI;EAC7C,OAAO,iBAAiB,KAAK,MAAM,cAAc,YAAY;GAC3D,MAAM,WAAW,KAAK,MAAM,IAAI,SAAS,IAAI;GAC7C,IAAI,YAAY,SAAS,SAAS,MAChC,MAAM,aACJ,yDAAyD,SAAS,KAAK,KACvE,mBACA;IACE,UAAU,SAAS;IACnB,SAAS,EAAE,eAAe,SAAS,KAAK;IACxC,aAAa,CAAC,wDAAwD,SAAS,MAAM;GACvF,CACF;GAEF,MAAM,SAAuB;IAC3B,MAAM,SAAS;IACf;IACA,SAAS,SAAS;IAGlB,SAAS,UAAU,WAAW;IAC9B;IACA,SAAS,UAAU,WAAW,OAAO;IACrC,WAAW,OAAO;GACpB;GACA,KAAK,MAAM,OAAO,MAAM;GACxB,OAAO;EACT,CAAC;CACH;CAEA,MAAM,OAAO,MAA6B;EACxC,MAAM,iBAAiB,KAAK,MAAM,cAAc,YAAY;GAC1D,IAAI,CAAC,KAAK,MAAM,OAAO,IAAI,GACzB,SAAS,IAAI;EAEjB,CAAC;CACH;CAEA,MAAM,WAAW,MAAc,SAAyC;EACtE,OAAO,iBAAiB,KAAK,MAAM,cAAc,YAAY;GAC3D,MAAM,WAAW,KAAK,MAAM,IAAI,IAAI;GACpC,IAAI,CAAC,UACH,SAAS,IAAI;GAEf,MAAM,SAAuB;IAAE,GAAG;IAAU;IAAS,WAAW,OAAO;GAAE;GACzE,KAAK,MAAM,OAAO,MAAM;GACxB,OAAO;EACT,CAAC;CACH;;;;;;;;CASA,MAAM,MAAM,MAAyE;EACnF,MAAM,WAAW,KAAK,MAAM,IAAI,IAAI;EACpC,IAAI,CAAC,UACH,SAAS,IAAI;EAEf,MAAM,WAAW,MAAM,aAAa,SAAS,IAAI;EACjD,MAAM,SAAS,MAAM,oBAAoB,SAAS,IAAI;EACtD,OAAO,iBAAiB,KAAK,MAAM,cAAc,YAAY;GAC3D,MAAM,SAAuB;IAC3B,GAAG;IACH,SAAS,SAAS;IAClB;IACA,WAAW,OAAO;GACpB;GACA,KAAK,MAAM,OAAO,MAAM;GACxB,OAAO;IAAE;IAAQ,gBAAgB,SAAS;GAAO;EACnD,CAAC;CACH;AACF"}

package/dist/core/plugin-store.d.ts

@@ -0,0 +1,18 @@
+import type { PluginRecord } from '../types.js';
+import type { AnyPickDatabase } from './db.js';
+/**
+ * The installed plugin registry.
+ *
+ * Kept in SQLite rather than a config file so `anypick plugin` mutations are
+ * transactional with the rest of the data root, and so a plugin cannot enable
+ * itself by writing a file the loader happens to read.
+ */
+export declare class PluginStore {
+    private readonly db;
+    constructor(db: AnyPickDatabase);
+    list(): PluginRecord[];
+    get(name: string): PluginRecord | null;
+    upsert(record: PluginRecord): void;
+    remove(name: string): boolean;
+}
+//# sourceMappingURL=plugin-store.d.ts.map

package/dist/core/plugin-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-store.d.ts","sourceRoot":"","sources":["../../src/core/plugin-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AA0B5C;;;;;;GAMG;AACH,qBAAa,WAAW;IACV,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,eAAe,EAAI;IAEpD,IAAI,IAAI,YAAY,EAAE,CAKrB;IAED,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAKrC;IAED,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAoBjC;IAED,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAG5B;CACF"}

package/dist/core/plugin-store.js

@@ -0,0 +1,50 @@
+//#region src/core/plugin-store.ts
+function parse(row) {
+	return {
+		name: row.name,
+		path: row.path,
+		version: row.version,
+		enabled: row.enabled === 1,
+		digest: row.digest,
+		addedAt: row.added_at,
+		updatedAt: row.updated_at
+	};
+}
+var COLUMNS = "name, path, version, enabled, digest, added_at, updated_at";
+/**
+* The installed plugin registry.
+*
+* Kept in SQLite rather than a config file so `anypick plugin` mutations are
+* transactional with the rest of the data root, and so a plugin cannot enable
+* itself by writing a file the loader happens to read.
+*/
+var PluginStore = class {
+	db;
+	constructor(db) {
+		this.db = db;
+	}
+	list() {
+		return this.db.prepare(`SELECT ${COLUMNS} FROM plugins ORDER BY name`).all().map(parse);
+	}
+	get(name) {
+		const row = this.db.prepare(`SELECT ${COLUMNS} FROM plugins WHERE name = ?`).get(name);
+		return row ? parse(row) : null;
+	}
+	upsert(record) {
+		this.db.prepare(`INSERT INTO plugins (${COLUMNS}) VALUES (?, ?, ?, ?, ?, ?, ?)
+         ON CONFLICT(name) DO UPDATE SET
+           path = excluded.path,
+           version = excluded.version,
+           enabled = excluded.enabled,
+           digest = excluded.digest,
+           updated_at = excluded.updated_at`).run(record.name, record.path, record.version, record.enabled ? 1 : 0, record.digest, record.addedAt, record.updatedAt);
+	}
+	remove(name) {
+		const info = this.db.prepare("DELETE FROM plugins WHERE name = ?").run(name);
+		return Number(info.changes ?? 0) > 0;
+	}
+};
+//#endregion
+export { PluginStore };
+
+//# sourceMappingURL=plugin-store.js.map

package/dist/core/plugin-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-store.js","names":[],"sources":["../../src/core/plugin-store.ts"],"sourcesContent":["import type { PluginRecord } from '../types';\nimport type { AnyPickDatabase } from './db';\n\ninterface PluginRow {\n  name: string;\n  path: string;\n  version: string;\n  enabled: number;\n  digest: string;\n  added_at: string;\n  updated_at: string;\n}\n\nfunction parse(row: PluginRow): PluginRecord {\n  return {\n    name: row.name,\n    path: row.path,\n    version: row.version,\n    enabled: row.enabled === 1,\n    digest: row.digest,\n    addedAt: row.added_at,\n    updatedAt: row.updated_at,\n  };\n}\n\nconst COLUMNS = 'name, path, version, enabled, digest, added_at, updated_at';\n\n/**\n * The installed plugin registry.\n *\n * Kept in SQLite rather than a config file so `anypick plugin` mutations are\n * transactional with the rest of the data root, and so a plugin cannot enable\n * itself by writing a file the loader happens to read.\n */\nexport class PluginStore {\n  constructor(private readonly db: AnyPickDatabase) {}\n\n  list(): PluginRecord[] {\n    const rows = this.db\n      .prepare(`SELECT ${COLUMNS} FROM plugins ORDER BY name`)\n      .all() as unknown as PluginRow[];\n    return rows.map(parse);\n  }\n\n  get(name: string): PluginRecord | null {\n    const row = this.db.prepare(`SELECT ${COLUMNS} FROM plugins WHERE name = ?`).get(name) as\n      | PluginRow\n      | undefined;\n    return row ? parse(row) : null;\n  }\n\n  upsert(record: PluginRecord): void {\n    this.db\n      .prepare(\n        `INSERT INTO plugins (${COLUMNS}) VALUES (?, ?, ?, ?, ?, ?, ?)\n         ON CONFLICT(name) DO UPDATE SET\n           path = excluded.path,\n           version = excluded.version,\n           enabled = excluded.enabled,\n           digest = excluded.digest,\n           updated_at = excluded.updated_at`,\n      )\n      .run(\n        record.name,\n        record.path,\n        record.version,\n        record.enabled ? 1 : 0,\n        record.digest,\n        record.addedAt,\n        record.updatedAt,\n      );\n  }\n\n  remove(name: string): boolean {\n    const info = this.db.prepare('DELETE FROM plugins WHERE name = ?').run(name);\n    return Number(info.changes ?? 0) > 0;\n  }\n}\n"],"mappings":";AAaA,SAAS,MAAM,KAA8B;CAC3C,OAAO;EACL,MAAM,IAAI;EACV,MAAM,IAAI;EACV,SAAS,IAAI;EACb,SAAS,IAAI,YAAY;EACzB,QAAQ,IAAI;EACZ,SAAS,IAAI;EACb,WAAW,IAAI;CACjB;AACF;AAEA,IAAM,UAAU;;;;;;;;AAShB,IAAa,cAAb,MAAyB;CACM;CAA7B,YAAY,IAAsC;EAArB,KAAA,KAAA;CAAsB;CAEnD,OAAuB;EAIrB,OAHa,KAAK,GACf,QAAQ,UAAU,QAAQ,4BAA4B,CAAC,CACvD,IACI,CAAA,CAAK,IAAI,KAAK;CACvB;CAEA,IAAI,MAAmC;EACrC,MAAM,MAAM,KAAK,GAAG,QAAQ,UAAU,QAAQ,6BAA6B,CAAC,CAAC,IAAI,IAAI;EAGrF,OAAO,MAAM,MAAM,GAAG,IAAI;CAC5B;CAEA,OAAO,QAA4B;EACjC,KAAK,GACF,QACC,wBAAwB,QAAQ;;;;;;4CAOlC,CAAC,CACA,IACC,OAAO,MACP,OAAO,MACP,OAAO,SACP,OAAO,UAAU,IAAI,GACrB,OAAO,QACP,OAAO,SACP,OAAO,SACT;CACJ;CAEA,OAAO,MAAuB;EAC5B,MAAM,OAAO,KAAK,GAAG,QAAQ,oCAAoC,CAAC,CAAC,IAAI,IAAI;EAC3E,OAAO,OAAO,KAAK,WAAW,CAAC,IAAI;CACrC;AACF"}

package/dist/core/pool-store.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Optional per-provider proxy pool (multi-account behind one endpoint).
+ *
+ * Default mode is **single** (no pool row, or mode: "single"):
+ * each account keeps its own proxy process — current behavior.
+ *
+ * Opt-in **multi**: one shared process, members enable/disable independently.
+ *
+ * Pool state lives in the shared SQLite database (`pools` table) so it is
+ * transactional with the rest of the data root. A previously written
+ * `pool.json` (the pre-SQLite layout) is still read as a fallback on `get`
+ * so existing installs keep their pool without a separate migration step; any
+ * write replaces it (the JSON file is removed on `set`).
+ */
+import type { ProviderProxyPool } from '../types.js';
+import type { AnyPickDatabase } from './db.js';
+export declare function poolConfigPath(root: string, providerId: string): string;
+export declare function poolRuntimeDir(root: string, providerId: string): string;
+export declare const DEFAULT_POOL: Omit<ProviderProxyPool, 'provider' | 'updatedAt' | 'members'>;
+export declare class PoolStore {
+    private readonly root;
+    private readonly db;
+    constructor(root: string, db: AnyPickDatabase);
+    get(providerId: string): Promise<ProviderProxyPool | null>;
+    /** Effective pool — never null; default single with empty members. */
+    getOrDefault(providerId: string): Promise<ProviderProxyPool>;
+    set(pool: ProviderProxyPool): Promise<void>;
+    delete(providerId: string): Promise<void>;
+    /**
+     * Ensure members list tracks known accounts.
+     * New accounts are added enabled:true in multi mode, or ignored in single.
+     */
+    syncMembers(providerId: string, accountNames: string[]): Promise<ProviderProxyPool>;
+    /** Turn multi-account pool on (opt-in). */
+    enableMulti(providerId: string, accountNames: string[], opts?: {
+        port?: number;
+        host?: string;
+    }): Promise<ProviderProxyPool>;
+    /** Back to single-account proxies (default). */
+    disableMulti(providerId: string): Promise<ProviderProxyPool>;
+    setMemberEnabled(providerId: string, account: string, enabled: boolean): Promise<ProviderProxyPool>;
+    private readLegacy;
+}
+//# sourceMappingURL=pool-store.d.ts.map

package/dist/core/pool-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pool-store.d.ts","sourceRoot":"","sources":["../../src/core/pool-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAc,MAAM,UAAU,CAAC;AAI9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAE5C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED,eAAO,MAAM,YAAY,EAAE,IAAI,CAAC,iBAAiB,EAAE,UAAU,GAAG,WAAW,GAAG,SAAS,CAItF,CAAC;AAEF,qBAAa,SAAS;IAElB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,EAAE;IAFrB,YACmB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,eAAe,EAClC;IAEE,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAU/D;IAED,sEAAsE;IAChE,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAWjE;IAEK,GAAG,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BhD;IAEK,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK9C;IAED;;;OAGG;IACG,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAsBxF;IAED,2CAA2C;IACrC,WAAW,CACf,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EAAE,EACtB,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO,GAC1C,OAAO,CAAC,iBAAiB,CAAC,CAiB5B;IAED,gDAAgD;IAC1C,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAUjE;IAEK,gBAAgB,CACpB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,iBAAiB,CAAC,CAU5B;YAEa,UAAU;CAezB"}