anypick 1.0.0

package/dist/core/profile-store.js

@@ -0,0 +1,92 @@
+import { AnyPickError } from "../utils/errors.js";
+import { decode, decodeWithFallback, decoders } from "./codec.js";
+import { getAnyPickRoot, profileDir } from "./paths.js";
+//#region src/core/profile-store.ts
+/**
+* SQLite-backed runtime profile store.
+* Secrets live in the same DB (file mode 0600).
+*/
+var ProfileStore = class {
+	root;
+	db;
+	constructor(root, db) {
+		this.root = getAnyPickRoot(root);
+		this.db = db;
+	}
+	async listNames() {
+		return this.db.prepare(`SELECT name FROM profiles ORDER BY name`).all().map((r) => r.name);
+	}
+	async list() {
+		const names = await this.listNames();
+		const out = [];
+		for (const name of names) {
+			const profile = await this.get(name);
+			if (profile) out.push(profile);
+		}
+		return out;
+	}
+	async get(name) {
+		const row = this.db.prepare(`SELECT meta_json, secrets_json FROM profiles WHERE name = ?`).get(name);
+		if (!row) return null;
+		return {
+			meta: decode(row.meta_json, decoders.runtimeProfileMeta, `profile/${name}`),
+			secrets: decodeWithFallback(row.secrets_json, decoders.runtimeProfileSecrets, {}, `profile/${name}/secrets`),
+			profileDir: profileDir(this.root, name)
+		};
+	}
+	async require(name) {
+		const profile = await this.get(name);
+		if (!profile) throw new AnyPickError(`No runtime profile "${name}".`, "PROFILE_NOT_FOUND");
+		return profile;
+	}
+	async writeMeta(meta) {
+		const now = meta.updatedAt || (/* @__PURE__ */ new Date()).toISOString();
+		const existing = this.db.prepare(`SELECT secrets_json, created_at FROM profiles WHERE name = ?`).get(meta.name);
+		const secretsJson = existing?.secrets_json ?? "{}";
+		const createdAt = existing?.created_at ?? meta.createdAt ?? now;
+		this.db.prepare(`INSERT INTO profiles (name, meta_json, secrets_json, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?)
+         ON CONFLICT(name) DO UPDATE SET
+           meta_json = excluded.meta_json,
+           updated_at = excluded.updated_at`).run(meta.name, JSON.stringify({
+			...meta,
+			updatedAt: now
+		}), secretsJson, createdAt, now);
+	}
+	async writeSecrets(name, secrets) {
+		if (!this.db.prepare(`SELECT name FROM profiles WHERE name = ?`).get(name)) {
+			const now = (/* @__PURE__ */ new Date()).toISOString();
+			const meta = {
+				name,
+				provider: "custom",
+				createdAt: now,
+				updatedAt: now,
+				models: {}
+			};
+			this.db.prepare(`INSERT INTO profiles (name, meta_json, secrets_json, created_at, updated_at)
+           VALUES (?, ?, ?, ?, ?)`).run(name, JSON.stringify(meta), JSON.stringify(secrets), now, now);
+			return;
+		}
+		this.db.prepare(`UPDATE profiles SET secrets_json = ?, updated_at = ? WHERE name = ?`).run(JSON.stringify(secrets), (/* @__PURE__ */ new Date()).toISOString(), name);
+	}
+	async delete(name) {
+		if (this.db.prepare(`DELETE FROM profiles WHERE name = ?`).run(name).changes === 0) throw new AnyPickError(`No runtime profile "${name}".`, "PROFILE_NOT_FOUND");
+	}
+	async rename(oldName, newName) {
+		const src = await this.require(oldName);
+		if (await this.get(newName)) throw new AnyPickError(`Profile "${newName}" already exists.`, "PROFILE_EXISTS");
+		const now = (/* @__PURE__ */ new Date()).toISOString();
+		const meta = {
+			...src.meta,
+			name: newName,
+			updatedAt: now
+		};
+		this.db.prepare(`INSERT INTO profiles (name, meta_json, secrets_json, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?)`).run(newName, JSON.stringify(meta), JSON.stringify(src.secrets), src.meta.createdAt ?? now, now);
+		this.db.prepare(`DELETE FROM profiles WHERE name = ?`).run(oldName);
+	}
+};
+//#endregion
+export { ProfileStore };
+
+//# sourceMappingURL=profile-store.js.map

package/dist/core/profile-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-store.js","names":[],"sources":["../../src/core/profile-store.ts"],"sourcesContent":["import type { RuntimeProfile, RuntimeProfileMeta, RuntimeProfileSecrets } from '../types';\nimport { AnyPickError } from '../utils/errors';\nimport { decode, decodeWithFallback, decoders } from './codec';\nimport type { AnyPickDatabase } from './db';\nimport { getAnyPickRoot, profileDir } from './paths';\n\n/**\n * SQLite-backed runtime profile store.\n * Secrets live in the same DB (file mode 0600).\n */\nexport class ProfileStore {\n  readonly root: string;\n  readonly db: AnyPickDatabase;\n\n  constructor(root: string, db: AnyPickDatabase) {\n    this.root = getAnyPickRoot(root);\n    this.db = db;\n  }\n\n  async listNames(): Promise<string[]> {\n    const rows = this.db.prepare(`SELECT name FROM profiles ORDER BY name`).all() as Array<{\n      name: string;\n    }>;\n    return rows.map((r) => r.name);\n  }\n\n  async list(): Promise<RuntimeProfile[]> {\n    const names = await this.listNames();\n    const out: RuntimeProfile[] = [];\n    for (const name of names) {\n      const profile = await this.get(name);\n      if (profile) {\n        out.push(profile);\n      }\n    }\n    return out;\n  }\n\n  async get(name: string): Promise<RuntimeProfile | null> {\n    const row = this.db\n      .prepare(`SELECT meta_json, secrets_json FROM profiles WHERE name = ?`)\n      .get(name) as { meta_json: string; secrets_json: string } | undefined;\n    if (!row) {\n      return null;\n    }\n    const meta = decode(\n      row.meta_json,\n      decoders.runtimeProfileMeta,\n      `profile/${name}`,\n    ) as RuntimeProfileMeta;\n    const secrets = decodeWithFallback(\n      row.secrets_json,\n      decoders.runtimeProfileSecrets,\n      {},\n      `profile/${name}/secrets`,\n    );\n    return {\n      meta,\n      secrets,\n      profileDir: profileDir(this.root, name),\n    };\n  }\n\n  async require(name: string): Promise<RuntimeProfile> {\n    const profile = await this.get(name);\n    if (!profile) {\n      throw new AnyPickError(`No runtime profile \"${name}\".`, 'PROFILE_NOT_FOUND');\n    }\n    return profile;\n  }\n\n  async writeMeta(meta: RuntimeProfileMeta): Promise<void> {\n    const now = meta.updatedAt || new Date().toISOString();\n    const existing = this.db\n      .prepare(`SELECT secrets_json, created_at FROM profiles WHERE name = ?`)\n      .get(meta.name) as { secrets_json: string; created_at: string } | undefined;\n\n    const secretsJson = existing?.secrets_json ?? '{}';\n    const createdAt = existing?.created_at ?? meta.createdAt ?? now;\n\n    this.db\n      .prepare(\n        `INSERT INTO profiles (name, meta_json, secrets_json, created_at, updated_at)\n         VALUES (?, ?, ?, ?, ?)\n         ON CONFLICT(name) DO UPDATE SET\n           meta_json = excluded.meta_json,\n           updated_at = excluded.updated_at`,\n      )\n      .run(meta.name, JSON.stringify({ ...meta, updatedAt: now }), secretsJson, createdAt, now);\n  }\n\n  async writeSecrets(name: string, secrets: RuntimeProfileSecrets): Promise<void> {\n    const existing = this.db.prepare(`SELECT name FROM profiles WHERE name = ?`).get(name) as\n      | { name: string }\n      | undefined;\n\n    if (!existing) {\n      // Create shell row if secrets written first\n      const now = new Date().toISOString();\n      const meta: RuntimeProfileMeta = {\n        name,\n        provider: 'custom',\n        createdAt: now,\n        updatedAt: now,\n        models: {},\n      };\n      this.db\n        .prepare(\n          `INSERT INTO profiles (name, meta_json, secrets_json, created_at, updated_at)\n           VALUES (?, ?, ?, ?, ?)`,\n        )\n        .run(name, JSON.stringify(meta), JSON.stringify(secrets), now, now);\n      return;\n    }\n\n    this.db\n      .prepare(`UPDATE profiles SET secrets_json = ?, updated_at = ? WHERE name = ?`)\n      .run(JSON.stringify(secrets), new Date().toISOString(), name);\n  }\n\n  async delete(name: string): Promise<void> {\n    const result = this.db.prepare(`DELETE FROM profiles WHERE name = ?`).run(name);\n    if (result.changes === 0) {\n      throw new AnyPickError(`No runtime profile \"${name}\".`, 'PROFILE_NOT_FOUND');\n    }\n  }\n\n  async rename(oldName: string, newName: string): Promise<void> {\n    const src = await this.require(oldName);\n    if (await this.get(newName)) {\n      throw new AnyPickError(`Profile \"${newName}\" already exists.`, 'PROFILE_EXISTS');\n    }\n\n    const now = new Date().toISOString();\n    const meta: RuntimeProfileMeta = {\n      ...src.meta,\n      name: newName,\n      updatedAt: now,\n    };\n\n    this.db\n      .prepare(\n        `INSERT INTO profiles (name, meta_json, secrets_json, created_at, updated_at)\n         VALUES (?, ?, ?, ?, ?)`,\n      )\n      .run(\n        newName,\n        JSON.stringify(meta),\n        JSON.stringify(src.secrets),\n        src.meta.createdAt ?? now,\n        now,\n      );\n\n    this.db.prepare(`DELETE FROM profiles WHERE name = ?`).run(oldName);\n  }\n}\n"],"mappings":";;;;;;;;AAUA,IAAa,eAAb,MAA0B;CACxB;CACA;CAEA,YAAY,MAAc,IAAqB;EAC7C,KAAK,OAAO,eAAe,IAAI;EAC/B,KAAK,KAAK;CACZ;CAEA,MAAM,YAA+B;EAInC,OAHa,KAAK,GAAG,QAAQ,yCAAyC,CAAC,CAAC,IAGjE,CAAA,CAAK,KAAK,MAAM,EAAE,IAAI;CAC/B;CAEA,MAAM,OAAkC;EACtC,MAAM,QAAQ,MAAM,KAAK,UAAU;EACnC,MAAM,MAAwB,CAAC;EAC/B,KAAK,MAAM,QAAQ,OAAO;GACxB,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI;GACnC,IAAI,SACF,IAAI,KAAK,OAAO;EAEpB;EACA,OAAO;CACT;CAEA,MAAM,IAAI,MAA8C;EACtD,MAAM,MAAM,KAAK,GACd,QAAQ,6DAA6D,CAAC,CACtE,IAAI,IAAI;EACX,IAAI,CAAC,KACH,OAAO;EAaT,OAAO;GACL,MAZW,OACX,IAAI,WACJ,SAAS,oBACT,WAAW,MASX;GACA,SARc,mBACd,IAAI,cACJ,SAAS,uBACT,CAAC,GACD,WAAW,KAAK,SAIhB;GACA,YAAY,WAAW,KAAK,MAAM,IAAI;EACxC;CACF;CAEA,MAAM,QAAQ,MAAuC;EACnD,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI;EACnC,IAAI,CAAC,SACH,MAAM,IAAI,aAAa,uBAAuB,KAAK,KAAK,mBAAmB;EAE7E,OAAO;CACT;CAEA,MAAM,UAAU,MAAyC;EACvD,MAAM,MAAM,KAAK,8BAAa,IAAI,KAAK,EAAA,CAAE,YAAY;EACrD,MAAM,WAAW,KAAK,GACnB,QAAQ,8DAA8D,CAAC,CACvE,IAAI,KAAK,IAAI;EAEhB,MAAM,cAAc,UAAU,gBAAgB;EAC9C,MAAM,YAAY,UAAU,cAAc,KAAK,aAAa;EAE5D,KAAK,GACF,QACC;;;;4CAKF,CAAC,CACA,IAAI,KAAK,MAAM,KAAK,UAAU;GAAE,GAAG;GAAM,WAAW;EAAI,CAAC,GAAG,aAAa,WAAW,GAAG;CAC5F;CAEA,MAAM,aAAa,MAAc,SAA+C;EAK9E,IAAI,CAJa,KAAK,GAAG,QAAQ,0CAA0C,CAAC,CAAC,IAAI,IAI5E,GAAU;GAEb,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;GACnC,MAAM,OAA2B;IAC/B;IACA,UAAU;IACV,WAAW;IACX,WAAW;IACX,QAAQ,CAAC;GACX;GACA,KAAK,GACF,QACC;kCAEF,CAAC,CACA,IAAI,MAAM,KAAK,UAAU,IAAI,GAAG,KAAK,UAAU,OAAO,GAAG,KAAK,GAAG;GACpE;EACF;EAEA,KAAK,GACF,QAAQ,qEAAqE,CAAC,CAC9E,IAAI,KAAK,UAAU,OAAO,oBAAG,IAAI,KAAK,EAAA,CAAE,YAAY,GAAG,IAAI;CAChE;CAEA,MAAM,OAAO,MAA6B;EAExC,IADe,KAAK,GAAG,QAAQ,qCAAqC,CAAC,CAAC,IAAI,IACtE,CAAA,CAAO,YAAY,GACrB,MAAM,IAAI,aAAa,uBAAuB,KAAK,KAAK,mBAAmB;CAE/E;CAEA,MAAM,OAAO,SAAiB,SAAgC;EAC5D,MAAM,MAAM,MAAM,KAAK,QAAQ,OAAO;EACtC,IAAI,MAAM,KAAK,IAAI,OAAO,GACxB,MAAM,IAAI,aAAa,YAAY,QAAQ,oBAAoB,gBAAgB;EAGjF,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,OAA2B;GAC/B,GAAG,IAAI;GACP,MAAM;GACN,WAAW;EACb;EAEA,KAAK,GACF,QACC;gCAEF,CAAC,CACA,IACC,SACA,KAAK,UAAU,IAAI,GACnB,KAAK,UAAU,IAAI,OAAO,GAC1B,IAAI,KAAK,aAAa,KACtB,GACF;EAEF,KAAK,GAAG,QAAQ,qCAAqC,CAAC,CAAC,IAAI,OAAO;CACpE;AACF"}

package/dist/core/profile-synth.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Shared synthetic RuntimeProfile builder for account-proxy endpoint injection.
+ *
+ * Lives in core (not clients/) because `RuntimeService` needs it and core must
+ * not take value imports from the clients package. Pure data builder — no fs,
+ * no spawn, no env reads beyond the timestamp.
+ */
+import type { RuntimeProfile } from '../types.js';
+export interface SyntheticProxyProfileOpts {
+    name: string;
+    endpoint: string;
+    apiKey?: string;
+    defaultModel?: string;
+    /** Claude Code role models (and similar multi-slot clients). */
+    sonnetModel?: string;
+    opusModel?: string;
+    haikuModel?: string;
+    /** Full role map; keys default/sonnet/opus/haiku also fill meta fields. */
+    modelRoles?: Record<string, string>;
+    provider?: string;
+}
+/** Build a synthetic RuntimeProfile for account-proxy endpoint injection. */
+export declare function syntheticProxyProfile(opts: SyntheticProxyProfileOpts): RuntimeProfile;
+//# sourceMappingURL=profile-synth.d.ts.map

package/dist/core/profile-synth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-synth.d.ts","sourceRoot":"","sources":["../../src/core/profile-synth.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE/C,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,yBAAyB,GAAG,cAAc,CAyBrF"}

package/dist/core/profile-synth.js

@@ -0,0 +1,30 @@
+//#region src/core/profile-synth.ts
+/** Build a synthetic RuntimeProfile for account-proxy endpoint injection. */
+function syntheticProxyProfile(opts) {
+	const now = (/* @__PURE__ */ new Date()).toISOString();
+	const roles = opts.modelRoles ?? {};
+	const defaultModel = opts.defaultModel ?? roles.default;
+	const sonnetModel = opts.sonnetModel ?? roles.sonnet;
+	const opusModel = opts.opusModel ?? roles.opus;
+	const haikuModel = opts.haikuModel ?? roles.haiku;
+	return {
+		meta: {
+			name: opts.name,
+			provider: opts.provider ?? "custom",
+			createdAt: now,
+			updatedAt: now,
+			models: {},
+			endpoint: opts.endpoint,
+			defaultModel,
+			sonnetModel,
+			opusModel,
+			haikuModel
+		},
+		secrets: { apiKey: opts.apiKey ?? "anypick-proxy" },
+		profileDir: ""
+	};
+}
+//#endregion
+export { syntheticProxyProfile };
+
+//# sourceMappingURL=profile-synth.js.map

package/dist/core/profile-synth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-synth.js","names":[],"sources":["../../src/core/profile-synth.ts"],"sourcesContent":["/**\n * Shared synthetic RuntimeProfile builder for account-proxy endpoint injection.\n *\n * Lives in core (not clients/) because `RuntimeService` needs it and core must\n * not take value imports from the clients package. Pure data builder — no fs,\n * no spawn, no env reads beyond the timestamp.\n */\n\nimport type { RuntimeProfile } from '../types';\n\nexport interface SyntheticProxyProfileOpts {\n  name: string;\n  endpoint: string;\n  apiKey?: string;\n  defaultModel?: string;\n  /** Claude Code role models (and similar multi-slot clients). */\n  sonnetModel?: string;\n  opusModel?: string;\n  haikuModel?: string;\n  /** Full role map; keys default/sonnet/opus/haiku also fill meta fields. */\n  modelRoles?: Record<string, string>;\n  provider?: string;\n}\n\n/** Build a synthetic RuntimeProfile for account-proxy endpoint injection. */\nexport function syntheticProxyProfile(opts: SyntheticProxyProfileOpts): RuntimeProfile {\n  const now = new Date().toISOString();\n  const roles = opts.modelRoles ?? {};\n  const defaultModel = opts.defaultModel ?? roles.default;\n  const sonnetModel = opts.sonnetModel ?? roles.sonnet;\n  const opusModel = opts.opusModel ?? roles.opus;\n  const haikuModel = opts.haikuModel ?? roles.haiku;\n  return {\n    meta: {\n      name: opts.name,\n      provider: opts.provider ?? 'custom',\n      createdAt: now,\n      updatedAt: now,\n      models: {},\n      endpoint: opts.endpoint,\n      defaultModel,\n      sonnetModel,\n      opusModel,\n      haikuModel,\n    },\n    secrets: {\n      apiKey: opts.apiKey ?? 'anypick-proxy',\n    },\n    profileDir: '',\n  };\n}\n"],"mappings":";;AAyBA,SAAgB,sBAAsB,MAAiD;CACrF,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;CACnC,MAAM,QAAQ,KAAK,cAAc,CAAC;CAClC,MAAM,eAAe,KAAK,gBAAgB,MAAM;CAChD,MAAM,cAAc,KAAK,eAAe,MAAM;CAC9C,MAAM,YAAY,KAAK,aAAa,MAAM;CAC1C,MAAM,aAAa,KAAK,cAAc,MAAM;CAC5C,OAAO;EACL,MAAM;GACJ,MAAM,KAAK;GACX,UAAU,KAAK,YAAY;GAC3B,WAAW;GACX,WAAW;GACX,QAAQ,CAAC;GACT,UAAU,KAAK;GACf;GACA;GACA;GACA;EACF;EACA,SAAS,EACP,QAAQ,KAAK,UAAU,gBACzB;EACA,YAAY;CACd;AACF"}

package/dist/core/project-root.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Resolve project root for project bindings (spec §16.2):
+ * 1. nearest Git root
+ * 2. otherwise current working directory
+ */
+export declare function resolveProjectRoot(cwd?: string): string;
+//# sourceMappingURL=project-root.d.ts.map

package/dist/core/project-root.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-root.d.ts","sourceRoot":"","sources":["../../src/core/project-root.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,CActE"}

package/dist/core/project-root.js

@@ -0,0 +1,23 @@
+import { existsSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+//#region src/core/project-root.ts
+/**
+* Resolve project root for project bindings (spec §16.2):
+* 1. nearest Git root
+* 2. otherwise current working directory
+*/
+function resolveProjectRoot(cwd = process.cwd()) {
+	let dir = resolve(cwd);
+	const root = resolve("/");
+	while (true) {
+		if (existsSync(resolve(dir, ".git"))) return dir;
+		const parent = dirname(dir);
+		if (parent === dir || dir === root) break;
+		dir = parent;
+	}
+	return resolve(cwd);
+}
+//#endregion
+export { resolveProjectRoot };
+
+//# sourceMappingURL=project-root.js.map

package/dist/core/project-root.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-root.js","names":[],"sources":["../../src/core/project-root.ts"],"sourcesContent":["import { existsSync } from 'node:fs';\nimport { dirname, resolve } from 'node:path';\n\n/**\n * Resolve project root for project bindings (spec §16.2):\n * 1. nearest Git root\n * 2. otherwise current working directory\n */\nexport function resolveProjectRoot(cwd: string = process.cwd()): string {\n  let dir = resolve(cwd);\n  const root = resolve('/');\n  while (true) {\n    if (existsSync(resolve(dir, '.git'))) {\n      return dir;\n    }\n    const parent = dirname(dir);\n    if (parent === dir || dir === root) {\n      break;\n    }\n    dir = parent;\n  }\n  return resolve(cwd);\n}\n"],"mappings":";;;;;;;;AAQA,SAAgB,mBAAmB,MAAc,QAAQ,IAAI,GAAW;CACtE,IAAI,MAAM,QAAQ,GAAG;CACrB,MAAM,OAAO,QAAQ,GAAG;CACxB,OAAO,MAAM;EACX,IAAI,WAAW,QAAQ,KAAK,MAAM,CAAC,GACjC,OAAO;EAET,MAAM,SAAS,QAAQ,GAAG;EAC1B,IAAI,WAAW,OAAO,QAAQ,MAC5B;EAEF,MAAM;CACR;CACA,OAAO,QAAQ,GAAG;AACpB"}

package/dist/core/proxy-hub-cli.d.ts

@@ -0,0 +1,3 @@
+/** Internal detached-process entry. Never exposes Hub route tokens. */
+export declare function runProxyHubCli(args: string[]): Promise<void>;
+//# sourceMappingURL=proxy-hub-cli.d.ts.map

package/dist/core/proxy-hub-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-hub-cli.d.ts","sourceRoot":"","sources":["../../src/core/proxy-hub-cli.ts"],"names":[],"mappings":"AAKA,uEAAuE;AACvE,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA0ElE"}

package/dist/core/proxy-hub-cli.js

@@ -0,0 +1,80 @@
+import { proxyHubLogPath } from "./paths.js";
+import { ProxyHubServer } from "./proxy-hub-server.js";
+import { createAppReady } from "./app.js";
+import { parseArgs } from "node:util";
+//#region src/core/proxy-hub-cli.ts
+/** Internal detached-process entry. Never exposes Hub route tokens. */
+async function runProxyHubCli(args) {
+	const { values } = parseArgs({
+		args,
+		options: {
+			name: {
+				type: "string",
+				default: "default"
+			},
+			host: {
+				type: "string",
+				default: ""
+			},
+			port: {
+				type: "string",
+				default: ""
+			}
+		}
+	});
+	const name = values.name?.trim() || "default";
+	const app = await createAppReady();
+	const config = await app.hub.get(name);
+	const host = values.host?.trim() || config.host;
+	const port = values.port ? Number(values.port) : config.port;
+	if (!config.enabled || host !== config.host || port !== config.port) {
+		app.close();
+		throw new Error("Proxy Hub process configuration does not match the saved Hub profile.");
+	}
+	const server = new ProxyHubServer({
+		hubs: app.hubStore,
+		accounts: app.accounts,
+		pools: app.pools,
+		accountRegistry: app.accountRegistry
+	}, {
+		name,
+		host,
+		port,
+		instanceId: process.env.ANYPICK_INSTANCE_ID,
+		log: (line) => process.stderr.write(`${line}\n`)
+	});
+	const listening = await server.listen();
+	app.hubStore.saveRuntime({
+		name,
+		endpoint: listening.endpoint,
+		pid: process.pid,
+		instanceId: server.instanceId,
+		logPath: proxyHubLogPath(app.root, name),
+		startedAt: (/* @__PURE__ */ new Date()).toISOString()
+	});
+	const watchNote = process.env.ANYPICK_DEV_WATCH === "1" ? " (dev hot-reload: tsx watch on src/)" : "";
+	process.stdout.write(`anypick-proxy-hub listening on ${listening.endpoint}${watchNote}\n`);
+	let closing;
+	const close = () => {
+		closing ??= server.close().catch(() => {}).finally(() => {
+			try {
+				app.close();
+			} catch {}
+		});
+		return closing;
+	};
+	const shutdown = (signal) => {
+		const hard = setTimeout(() => process.exit(0), 2e3);
+		hard.unref?.();
+		close().finally(() => {
+			clearTimeout(hard);
+			process.exit(0);
+		});
+	};
+	process.once("SIGTERM", () => shutdown("SIGTERM"));
+	process.once("SIGINT", () => shutdown("SIGINT"));
+}
+//#endregion
+export { runProxyHubCli };
+
+//# sourceMappingURL=proxy-hub-cli.js.map

package/dist/core/proxy-hub-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-hub-cli.js","names":[],"sources":["../../src/core/proxy-hub-cli.ts"],"sourcesContent":["import { parseArgs } from 'node:util';\nimport { createAppReady } from './app';\nimport { ProxyHubServer } from './proxy-hub-server';\nimport { proxyHubLogPath } from './paths';\n\n/** Internal detached-process entry. Never exposes Hub route tokens. */\nexport async function runProxyHubCli(args: string[]): Promise<void> {\n  const { values } = parseArgs({\n    args,\n    options: {\n      name: { type: 'string', default: 'default' },\n      host: { type: 'string', default: '' },\n      port: { type: 'string', default: '' },\n    },\n  });\n  const name = values.name?.trim() || 'default';\n  const app = await createAppReady();\n  const config = await app.hub.get(name);\n  const host = values.host?.trim() || config.host;\n  const port = values.port ? Number(values.port) : config.port;\n  if (!config.enabled || host !== config.host || port !== config.port) {\n    app.close();\n    throw new Error('Proxy Hub process configuration does not match the saved Hub profile.');\n  }\n  const server = new ProxyHubServer(\n    {\n      hubs: app.hubStore,\n      accounts: app.accounts,\n      pools: app.pools,\n      accountRegistry: app.accountRegistry,\n    },\n    {\n      name,\n      host,\n      port,\n      instanceId: process.env.ANYPICK_INSTANCE_ID,\n      log: (line) => process.stderr.write(`${line}\\n`),\n    },\n  );\n  const listening = await server.listen();\n  app.hubStore.saveRuntime({\n    name,\n    endpoint: listening.endpoint,\n    pid: process.pid,\n    instanceId: server.instanceId,\n    logPath: proxyHubLogPath(app.root, name),\n    startedAt: new Date().toISOString(),\n  });\n  // Parent sets ANYPICK_DEV_WATCH=1 when spawning under `tsx watch` so hub.log\n  // shows why an edit to src/ restarts this process without a manual restart.\n  const watchNote =\n    process.env.ANYPICK_DEV_WATCH === '1' ? ' (dev hot-reload: tsx watch on src/)' : '';\n  process.stdout.write(`anypick-proxy-hub listening on ${listening.endpoint}${watchNote}\\n`);\n\n  let closing: Promise<void> | undefined;\n  const close = () => {\n    closing ??= server\n      .close()\n      .catch(() => {})\n      .finally(() => {\n        try {\n          app.close();\n        } catch {\n          // shutdown path — ignore\n        }\n      });\n    return closing;\n  };\n  // Hard deadline so `tsx watch` reloads never wait on the default 5s force-kill.\n  const shutdown = (signal: string) => {\n    const hard = setTimeout(() => process.exit(0), 2_000);\n    hard.unref?.();\n    void close().finally(() => {\n      clearTimeout(hard);\n      process.exit(0);\n    });\n    void signal;\n  };\n  process.once('SIGTERM', () => shutdown('SIGTERM'));\n  process.once('SIGINT', () => shutdown('SIGINT'));\n}\n"],"mappings":";;;;;;AAMA,eAAsB,eAAe,MAA+B;CAClE,MAAM,EAAE,WAAW,UAAU;EAC3B;EACA,SAAS;GACP,MAAM;IAAE,MAAM;IAAU,SAAS;GAAU;GAC3C,MAAM;IAAE,MAAM;IAAU,SAAS;GAAG;GACpC,MAAM;IAAE,MAAM;IAAU,SAAS;GAAG;EACtC;CACF,CAAC;CACD,MAAM,OAAO,OAAO,MAAM,KAAK,KAAK;CACpC,MAAM,MAAM,MAAM,eAAe;CACjC,MAAM,SAAS,MAAM,IAAI,IAAI,IAAI,IAAI;CACrC,MAAM,OAAO,OAAO,MAAM,KAAK,KAAK,OAAO;CAC3C,MAAM,OAAO,OAAO,OAAO,OAAO,OAAO,IAAI,IAAI,OAAO;CACxD,IAAI,CAAC,OAAO,WAAW,SAAS,OAAO,QAAQ,SAAS,OAAO,MAAM;EACnE,IAAI,MAAM;EACV,MAAM,IAAI,MAAM,uEAAuE;CACzF;CACA,MAAM,SAAS,IAAI,eACjB;EACE,MAAM,IAAI;EACV,UAAU,IAAI;EACd,OAAO,IAAI;EACX,iBAAiB,IAAI;CACvB,GACA;EACE;EACA;EACA;EACA,YAAY,QAAQ,IAAI;EACxB,MAAM,SAAS,QAAQ,OAAO,MAAM,GAAG,KAAK,GAAG;CACjD,CACF;CACA,MAAM,YAAY,MAAM,OAAO,OAAO;CACtC,IAAI,SAAS,YAAY;EACvB;EACA,UAAU,UAAU;EACpB,KAAK,QAAQ;EACb,YAAY,OAAO;EACnB,SAAS,gBAAgB,IAAI,MAAM,IAAI;EACvC,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;CACpC,CAAC;CAGD,MAAM,YACJ,QAAQ,IAAI,sBAAsB,MAAM,yCAAyC;CACnF,QAAQ,OAAO,MAAM,kCAAkC,UAAU,WAAW,UAAU,GAAG;CAEzF,IAAI;CACJ,MAAM,cAAc;EAClB,YAAY,OACT,MAAM,CAAC,CACP,YAAY,CAAC,CAAC,CAAC,CACf,cAAc;GACb,IAAI;IACF,IAAI,MAAM;GACZ,QAAQ,CAER;EACF,CAAC;EACH,OAAO;CACT;CAEA,MAAM,YAAY,WAAmB;EACnC,MAAM,OAAO,iBAAiB,QAAQ,KAAK,CAAC,GAAG,GAAK;EACpD,KAAK,QAAQ;EACb,MAAW,CAAC,CAAC,cAAc;GACzB,aAAa,IAAI;GACjB,QAAQ,KAAK,CAAC;EAChB,CAAC;CAEH;CACA,QAAQ,KAAK,iBAAiB,SAAS,SAAS,CAAC;CACjD,QAAQ,KAAK,gBAAgB,SAAS,QAAQ,CAAC;AACjD"}

package/dist/core/proxy-hub-routes.d.ts

@@ -0,0 +1,22 @@
+import type { ProxyHubConfig, ProxyHubModelConflict, ProxyHubRouteTarget, ProxyHubSourceChoiceConflict, ProxyHubSourceRef } from '../types.js';
+export interface ProxyHubSourceCatalog {
+    source: ProxyHubSourceRef;
+    /** Adapter-owned model namespace. Accounts sharing this identity are credentials, not rivals. */
+    catalogId: string;
+    models: readonly string[];
+}
+export interface CompiledProxyHubRoutes {
+    routes: ProxyHubRouteTarget[];
+    conflicts: ProxyHubModelConflict[];
+    sourceChoices: ProxyHubSourceChoiceConflict[];
+}
+export declare function proxyHubCatalogIdentity(catalog: ProxyHubSourceCatalog): string;
+/**
+ * Compile the no-prefix routing table. Accounts whose adapters declare the
+ * same catalog identity are credential alternatives for one model namespace,
+ * but only an explicit account-pool can safely combine their credentials.
+ * Unresolved credential choices are aggregated separately from true model
+ * overlaps, so core never falls back to source ordering (ADR-0013).
+ */
+export declare function compileProxyHubRoutes(config: Pick<ProxyHubConfig, 'sources' | 'modelOwners'>, catalogs: readonly ProxyHubSourceCatalog[]): CompiledProxyHubRoutes;
+//# sourceMappingURL=proxy-hub-routes.d.ts.map

package/dist/core/proxy-hub-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-hub-routes.d.ts","sourceRoot":"","sources":["../../src/core/proxy-hub-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACrB,mBAAmB,EACnB,4BAA4B,EAC5B,iBAAiB,EAClB,MAAM,UAAU,CAAC;AAGlB,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,iGAAiG;IACjG,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,SAAS,EAAE,qBAAqB,EAAE,CAAC;IACnC,aAAa,EAAE,4BAA4B,EAAE,CAAC;CAC/C;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAE9E;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,aAAa,CAAC,EACvD,QAAQ,EAAE,SAAS,qBAAqB,EAAE,GACzC,sBAAsB,CA0FxB"}

package/dist/core/proxy-hub-routes.js

@@ -0,0 +1,92 @@
+import { serializeRef } from "./refs.js";
+//#region src/core/proxy-hub-routes.ts
+function proxyHubCatalogIdentity(catalog) {
+	return catalog.catalogId.trim() || catalog.source.provider;
+}
+/**
+* Compile the no-prefix routing table. Accounts whose adapters declare the
+* same catalog identity are credential alternatives for one model namespace,
+* but only an explicit account-pool can safely combine their credentials.
+* Unresolved credential choices are aggregated separately from true model
+* overlaps, so core never falls back to source ordering (ADR-0013).
+*/
+function compileProxyHubRoutes(config, catalogs) {
+	const enabled = new Set(config.sources.filter((source) => source.enabled).map((source) => serializeRef(source.ref)));
+	const byModel = /* @__PURE__ */ new Map();
+	for (const catalog of catalogs) {
+		const sourceId = serializeRef(catalog.source);
+		if (!enabled.has(sourceId)) continue;
+		const catalogId = proxyHubCatalogIdentity(catalog);
+		const seen = /* @__PURE__ */ new Set();
+		for (const raw of catalog.models) {
+			const model = raw.trim();
+			if (!model || seen.has(model)) continue;
+			seen.add(model);
+			const catalogsForModel = byModel.get(model) ?? /* @__PURE__ */ new Map();
+			const sources = catalogsForModel.get(catalogId) ?? [];
+			if (!sources.some((candidate) => serializeRef(candidate) === sourceId)) sources.push(catalog.source);
+			catalogsForModel.set(catalogId, sources);
+			byModel.set(model, catalogsForModel);
+		}
+	}
+	const owners = new Map(config.modelOwners.map((owner) => [owner.model, owner.source]));
+	const routes = [];
+	const conflicts = [];
+	const sourceChoices = /* @__PURE__ */ new Map();
+	for (const [model, catalogGroups] of [...byModel.entries()].toSorted(([left], [right]) => left.localeCompare(right))) {
+		const sourceGroups = [...catalogGroups.entries()].toSorted(([left], [right]) => left.localeCompare(right)).map(([catalogId, sources]) => ({
+			catalogId,
+			sources: sources.toSorted((left, right) => serializeRef(left).localeCompare(serializeRef(right)))
+		}));
+		const allSources = sourceGroups.flatMap((group) => group.sources);
+		const owner = owners.get(model);
+		if (owner && allSources.some((candidate) => serializeRef(candidate) === serializeRef(owner))) {
+			routes.push({
+				model,
+				source: owner,
+				upstreamModel: model
+			});
+			continue;
+		}
+		if (sourceGroups.length === 1) {
+			const [group] = sourceGroups;
+			if (group.sources.length === 1) {
+				routes.push({
+					model,
+					source: group.sources[0],
+					upstreamModel: model
+				});
+				continue;
+			}
+			const key = `${group.catalogId}\u0000${group.sources.map(serializeRef).join("\0")}`;
+			const choice = sourceChoices.get(key) ?? {
+				catalogId: group.catalogId,
+				models: [],
+				candidates: group.sources
+			};
+			choice.models.push(model);
+			sourceChoices.set(key, choice);
+			continue;
+		}
+		conflicts.push({
+			kind: "model-overlap",
+			model,
+			catalogIds: sourceGroups.map((group) => group.catalogId),
+			candidates: allSources
+		});
+	}
+	return {
+		routes,
+		conflicts,
+		sourceChoices: [...sourceChoices.entries()].toSorted(([left], [right]) => left.localeCompare(right)).map(([, choice]) => ({
+			kind: "source-choice",
+			catalogId: choice.catalogId,
+			models: choice.models.toSorted((left, right) => left.localeCompare(right)),
+			candidates: choice.candidates
+		}))
+	};
+}
+//#endregion
+export { compileProxyHubRoutes, proxyHubCatalogIdentity };
+
+//# sourceMappingURL=proxy-hub-routes.js.map

package/dist/core/proxy-hub-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-hub-routes.js","names":[],"sources":["../../src/core/proxy-hub-routes.ts"],"sourcesContent":["import type {\n  ProxyHubConfig,\n  ProxyHubModelConflict,\n  ProxyHubRouteTarget,\n  ProxyHubSourceChoiceConflict,\n  ProxyHubSourceRef,\n} from '../types';\nimport { serializeRef } from './refs';\n\nexport interface ProxyHubSourceCatalog {\n  source: ProxyHubSourceRef;\n  /** Adapter-owned model namespace. Accounts sharing this identity are credentials, not rivals. */\n  catalogId: string;\n  models: readonly string[];\n}\n\nexport interface CompiledProxyHubRoutes {\n  routes: ProxyHubRouteTarget[];\n  conflicts: ProxyHubModelConflict[];\n  sourceChoices: ProxyHubSourceChoiceConflict[];\n}\n\nexport function proxyHubCatalogIdentity(catalog: ProxyHubSourceCatalog): string {\n  return catalog.catalogId.trim() || catalog.source.provider;\n}\n\n/**\n * Compile the no-prefix routing table. Accounts whose adapters declare the\n * same catalog identity are credential alternatives for one model namespace,\n * but only an explicit account-pool can safely combine their credentials.\n * Unresolved credential choices are aggregated separately from true model\n * overlaps, so core never falls back to source ordering (ADR-0013).\n */\nexport function compileProxyHubRoutes(\n  config: Pick<ProxyHubConfig, 'sources' | 'modelOwners'>,\n  catalogs: readonly ProxyHubSourceCatalog[],\n): CompiledProxyHubRoutes {\n  const enabled = new Set(\n    config.sources.filter((source) => source.enabled).map((source) => serializeRef(source.ref)),\n  );\n  const byModel = new Map<string, Map<string, ProxyHubSourceRef[]>>();\n\n  for (const catalog of catalogs) {\n    const sourceId = serializeRef(catalog.source);\n    if (!enabled.has(sourceId)) {\n      continue;\n    }\n    const catalogId = proxyHubCatalogIdentity(catalog);\n    const seen = new Set<string>();\n    for (const raw of catalog.models) {\n      const model = raw.trim();\n      if (!model || seen.has(model)) {\n        continue;\n      }\n      seen.add(model);\n      const catalogsForModel = byModel.get(model) ?? new Map<string, ProxyHubSourceRef[]>();\n      const sources = catalogsForModel.get(catalogId) ?? [];\n      if (!sources.some((candidate) => serializeRef(candidate) === sourceId)) {\n        sources.push(catalog.source);\n      }\n      catalogsForModel.set(catalogId, sources);\n      byModel.set(model, catalogsForModel);\n    }\n  }\n\n  const owners = new Map(config.modelOwners.map((owner) => [owner.model, owner.source]));\n  const routes: ProxyHubRouteTarget[] = [];\n  const conflicts: ProxyHubModelConflict[] = [];\n  const sourceChoices = new Map<\n    string,\n    { catalogId: string; models: string[]; candidates: ProxyHubSourceRef[] }\n  >();\n\n  for (const [model, catalogGroups] of [...byModel.entries()].toSorted(([left], [right]) =>\n    left.localeCompare(right),\n  )) {\n    const sourceGroups = [...catalogGroups.entries()]\n      .toSorted(([left], [right]) => left.localeCompare(right))\n      .map(([catalogId, sources]) => ({\n        catalogId,\n        sources: sources.toSorted((left, right) =>\n          serializeRef(left).localeCompare(serializeRef(right)),\n        ),\n      }));\n    const allSources = sourceGroups.flatMap((group) => group.sources);\n    const owner = owners.get(model);\n    if (owner && allSources.some((candidate) => serializeRef(candidate) === serializeRef(owner))) {\n      routes.push({ model, source: owner, upstreamModel: model });\n      continue;\n    }\n    if (sourceGroups.length === 1) {\n      const [group] = sourceGroups;\n      if (group.sources.length === 1) {\n        routes.push({ model, source: group.sources[0], upstreamModel: model });\n        continue;\n      }\n      const key = `${group.catalogId}\\u0000${group.sources.map(serializeRef).join('\\u0000')}`;\n      const choice = sourceChoices.get(key) ?? {\n        catalogId: group.catalogId,\n        models: [],\n        candidates: group.sources,\n      };\n      choice.models.push(model);\n      sourceChoices.set(key, choice);\n      continue;\n    }\n    conflicts.push({\n      kind: 'model-overlap',\n      model,\n      catalogIds: sourceGroups.map((group) => group.catalogId),\n      candidates: allSources,\n    });\n  }\n\n  return {\n    routes,\n    conflicts,\n    sourceChoices: [...sourceChoices.entries()]\n      .toSorted(([left], [right]) => left.localeCompare(right))\n      .map(([, choice]) => ({\n        kind: 'source-choice' as const,\n        catalogId: choice.catalogId,\n        models: choice.models.toSorted((left, right) => left.localeCompare(right)),\n        candidates: choice.candidates,\n      })),\n  };\n}\n"],"mappings":";;AAsBA,SAAgB,wBAAwB,SAAwC;CAC9E,OAAO,QAAQ,UAAU,KAAK,KAAK,QAAQ,OAAO;AACpD;;;;;;;;AASA,SAAgB,sBACd,QACA,UACwB;CACxB,MAAM,UAAU,IAAI,IAClB,OAAO,QAAQ,QAAQ,WAAW,OAAO,OAAO,CAAC,CAAC,KAAK,WAAW,aAAa,OAAO,GAAG,CAAC,CAC5F;CACA,MAAM,0BAAU,IAAI,IAA8C;CAElE,KAAK,MAAM,WAAW,UAAU;EAC9B,MAAM,WAAW,aAAa,QAAQ,MAAM;EAC5C,IAAI,CAAC,QAAQ,IAAI,QAAQ,GACvB;EAEF,MAAM,YAAY,wBAAwB,OAAO;EACjD,MAAM,uBAAO,IAAI,IAAY;EAC7B,KAAK,MAAM,OAAO,QAAQ,QAAQ;GAChC,MAAM,QAAQ,IAAI,KAAK;GACvB,IAAI,CAAC,SAAS,KAAK,IAAI,KAAK,GAC1B;GAEF,KAAK,IAAI,KAAK;GACd,MAAM,mBAAmB,QAAQ,IAAI,KAAK,qBAAK,IAAI,IAAiC;GACpF,MAAM,UAAU,iBAAiB,IAAI,SAAS,KAAK,CAAC;GACpD,IAAI,CAAC,QAAQ,MAAM,cAAc,aAAa,SAAS,MAAM,QAAQ,GACnE,QAAQ,KAAK,QAAQ,MAAM;GAE7B,iBAAiB,IAAI,WAAW,OAAO;GACvC,QAAQ,IAAI,OAAO,gBAAgB;EACrC;CACF;CAEA,MAAM,SAAS,IAAI,IAAI,OAAO,YAAY,KAAK,UAAU,CAAC,MAAM,OAAO,MAAM,MAAM,CAAC,CAAC;CACrF,MAAM,SAAgC,CAAC;CACvC,MAAM,YAAqC,CAAC;CAC5C,MAAM,gCAAgB,IAAI,IAGxB;CAEF,KAAK,MAAM,CAAC,OAAO,kBAAkB,CAAC,GAAG,QAAQ,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,WAC7E,KAAK,cAAc,KAAK,CAC1B,GAAG;EACD,MAAM,eAAe,CAAC,GAAG,cAAc,QAAQ,CAAC,CAAC,CAC9C,UAAU,CAAC,OAAO,CAAC,WAAW,KAAK,cAAc,KAAK,CAAC,CAAC,CACxD,KAAK,CAAC,WAAW,cAAc;GAC9B;GACA,SAAS,QAAQ,UAAU,MAAM,UAC/B,aAAa,IAAI,CAAC,CAAC,cAAc,aAAa,KAAK,CAAC,CACtD;EACF,EAAE;EACJ,MAAM,aAAa,aAAa,SAAS,UAAU,MAAM,OAAO;EAChE,MAAM,QAAQ,OAAO,IAAI,KAAK;EAC9B,IAAI,SAAS,WAAW,MAAM,cAAc,aAAa,SAAS,MAAM,aAAa,KAAK,CAAC,GAAG;GAC5F,OAAO,KAAK;IAAE;IAAO,QAAQ;IAAO,eAAe;GAAM,CAAC;GAC1D;EACF;EACA,IAAI,aAAa,WAAW,GAAG;GAC7B,MAAM,CAAC,SAAS;GAChB,IAAI,MAAM,QAAQ,WAAW,GAAG;IAC9B,OAAO,KAAK;KAAE;KAAO,QAAQ,MAAM,QAAQ;KAAI,eAAe;IAAM,CAAC;IACrE;GACF;GACA,MAAM,MAAM,GAAG,MAAM,UAAU,QAAQ,MAAM,QAAQ,IAAI,YAAY,CAAC,CAAC,KAAK,IAAQ;GACpF,MAAM,SAAS,cAAc,IAAI,GAAG,KAAK;IACvC,WAAW,MAAM;IACjB,QAAQ,CAAC;IACT,YAAY,MAAM;GACpB;GACA,OAAO,OAAO,KAAK,KAAK;GACxB,cAAc,IAAI,KAAK,MAAM;GAC7B;EACF;EACA,UAAU,KAAK;GACb,MAAM;GACN;GACA,YAAY,aAAa,KAAK,UAAU,MAAM,SAAS;GACvD,YAAY;EACd,CAAC;CACH;CAEA,OAAO;EACL;EACA;EACA,eAAe,CAAC,GAAG,cAAc,QAAQ,CAAC,CAAC,CACxC,UAAU,CAAC,OAAO,CAAC,WAAW,KAAK,cAAc,KAAK,CAAC,CAAC,CACxD,KAAK,GAAG,aAAa;GACpB,MAAM;GACN,WAAW,OAAO;GAClB,QAAQ,OAAO,OAAO,UAAU,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;GACzE,YAAY,OAAO;EACrB,EAAE;CACN;AACF"}

package/dist/core/proxy-hub-server.d.ts

@@ -0,0 +1,59 @@
+import type { ProxyHubBackendHandle, ProxyHubSourceRef } from '../types.js';
+import type { AccountService } from './service.js';
+import type { PoolStore } from './pool-store.js';
+import type { ProviderRegistry } from './registry.js';
+import type { ProxyHubStore } from './proxy-hub-store.js';
+export interface ProxyHubServerDeps {
+    hubs: ProxyHubStore;
+    accounts: AccountService;
+    pools: PoolStore;
+    accountRegistry: ProviderRegistry;
+}
+export interface ProxyHubServerOptions {
+    name: string;
+    host: string;
+    port: number;
+    instanceId?: string;
+    log?: (line: string) => void;
+}
+export interface ProxyHubBackendSession {
+    token: string;
+    handle: ProxyHubBackendHandle;
+}
+/** Shared provider-owned backend cache for the Hub runtime and catalog refresh. */
+export declare class ProxyHubBackendRegistry {
+    private readonly deps;
+    private readonly log;
+    private readonly backends;
+    constructor(deps: ProxyHubServerDeps, log: (line: string) => void);
+    open(source: ProxyHubSourceRef): Promise<ProxyHubBackendSession>;
+    close(): Promise<void>;
+    private accountsFor;
+}
+/**
+ * The single public listener. Provider servers run as private loopback
+ * backends in this same process; their per-backend token is never exposed to a
+ * client. This keeps provider protocol code provider-owned while eliminating
+ * the user-visible endpoint/process fan-out.
+ */
+export declare class ProxyHubServer {
+    private readonly deps;
+    private readonly opts;
+    readonly instanceId: string;
+    private readonly backends;
+    private closed;
+    private readonly log;
+    private readonly server;
+    constructor(deps: ProxyHubServerDeps, opts: ProxyHubServerOptions);
+    listen(): Promise<{
+        endpoint: string;
+        port: number;
+    }>;
+    close(): Promise<void>;
+    private handle;
+    private authenticate;
+    private forward;
+    private json;
+    private fail;
+}
+//# sourceMappingURL=proxy-hub-server.d.ts.map

package/dist/core/proxy-hub-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-hub-server.d.ts","sourceRoot":"","sources":["../../src/core/proxy-hub-server.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAMzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAuB,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAkB5E,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,aAAa,CAAC;IACpB,QAAQ,EAAE,cAAc,CAAC;IACzB,KAAK,EAAE,SAAS,CAAC;IACjB,eAAe,EAAE,gBAAgB,CAAC;CACnC;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,qBAAqB,CAAC;CAC/B;AAED,mFAAmF;AACnF,qBAAa,uBAAuB;IAIhC,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAJtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6C;IAEtE,YACmB,IAAI,EAAE,kBAAkB,EACxB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,EAC1C;IAEE,IAAI,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAqBrE;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAG3B;YAEa,WAAW;CA+B1B;AAED;;;;;GAKG;AACH,qBAAa,cAAc;IAQvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI;IARvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA0B;IACnD,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAyB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,YACmB,IAAI,EAAE,kBAAkB,EACxB,IAAI,EAAE,qBAAqB,EAS7C;IAEK,MAAM,IAAI,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAU1D;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAwB3B;YAEa,MAAM;YAgHN,YAAY;YAeZ,OAAO;IA6ErB,OAAO,CAAC,IAAI;IASZ,OAAO,CAAC,IAAI;CAiBb"}