anypick 1.0.0

package/dist/core/proxy-hub-service.js

@@ -0,0 +1,553 @@
+import { ExitCode, anypickError } from "../utils/errors.js";
+import { pathExists } from "../utils/fs.js";
+import { proxyHubLogPath, proxyHubPidPath } from "./paths.js";
+import { isListenPortFree, listenPidsOnPort, waitForHttp } from "../utils/process/health.js";
+import { isProcessRunning, readPidRecord, spawnDetached, stopPidFile, writePidRecord } from "../utils/process/pid.js";
+import { assertLoopbackHost } from "../utils/network.js";
+import { withMutationLocks } from "./mutation-lock.js";
+import { displayRef, providerScope, serializeRef } from "./refs.js";
+import { accountAdapterFor, poolAdapterFor } from "../sources/account-adapters.js";
+import { resolveAnyPickCliLaunch } from "../providers/opencode-cli-entry.js";
+import { DEFAULT_PROXY_HUB } from "./proxy-hub-store.js";
+import { assignDesktopAliases, expandHubRoutesWithDesktopAliases, loadNativeListSlots, orderHubModelsForDesktop } from "../clients/codex-desktop-catalog.js";
+import { ProxyHubBackendRegistry } from "./proxy-hub-server.js";
+import { compileProxyHubRoutes } from "./proxy-hub-routes.js";
+import { readFile } from "node:fs/promises";
+//#region src/core/proxy-hub-service.ts
+/**
+* Owns Hub configuration and route attachment. The server owns no persisted
+* mutation: it reads these versioned, token-scoped manifests at its boundary.
+*/
+var ProxyHubService = class {
+	root;
+	store;
+	deps;
+	previewCache = /* @__PURE__ */ new Map();
+	previewPending = /* @__PURE__ */ new Map();
+	constructor(root, store, deps) {
+		this.root = root;
+		this.store = store;
+		this.deps = deps;
+	}
+	/**
+	* Optional re-publisher for the live Codex config block, wired in app.ts so this
+	* service does not depend on Codex/Proxy services it was not constructed with.
+	*/
+	codexLiveConfigSync;
+	setCodexLiveConfigSync(fn) {
+		this.codexLiveConfigSync = fn;
+	}
+	async syncCodexLiveConfig() {
+		try {
+			await this.codexLiveConfigSync?.();
+		} catch {}
+	}
+	async get(name = DEFAULT_PROXY_HUB) {
+		return this.store.getOrDefault(name);
+	}
+	async save(config) {
+		assertLoopbackHost(config.host);
+		if (!Number.isInteger(config.port) || config.port < 1 || config.port > 65535) throw anypickError("Proxy Hub port must be between 1 and 65535.", "INVALID_USAGE", { exitCode: ExitCode.INVALID_USAGE });
+		const uniqueSources = dedupeSources(config.sources);
+		await this.validateSources(uniqueSources.filter((source) => source.enabled));
+		const scopes = [`proxy/hub/${config.name}`, ...uniqueSources.map((source) => providerScope(source.ref.provider))];
+		return withMutationLocks(this.root, scopes, async () => {
+			const saved = this.store.save({
+				...this.store.getOrDefault(config.name),
+				...config,
+				sources: uniqueSources,
+				modelOwners: validOwners(config.modelOwners, uniqueSources)
+			});
+			this.previewCache.delete(config.name);
+			return saved;
+		});
+	}
+	async setSources(name, sources) {
+		const config = await this.get(name);
+		return this.save({
+			...config,
+			sources
+		});
+	}
+	/**
+	* Drop a deleted saved account from Hub sources and model owners.
+	* AccountService calls this after the account row is gone so a removed
+	* login cannot keep blocking attach or linger in Hub Sources.
+	*/
+	async forgetAccount(providerId, accountName, name = DEFAULT_PROXY_HUB) {
+		const config = await this.get(name);
+		const matches = (ref) => ref.kind === "account" && ref.provider === providerId && ref.name === accountName;
+		const sources = config.sources.filter((source) => !matches(source.ref));
+		const modelOwners = config.modelOwners.filter((owner) => !matches(owner.source));
+		if (sources.length === config.sources.length && modelOwners.length === config.modelOwners.length) return;
+		await this.save({
+			...config,
+			sources,
+			modelOwners
+		});
+	}
+	async setModelOwner(name, model, source) {
+		return this.setModelOwners(name, [model], source);
+	}
+	/**
+	* Persist one explicit source choice for a set of colliding raw model ids.
+	* Discovery and the single config write share the Hub/provider lock set, so
+	* a stale Tray action can never assign a model to a source that stopped
+	* advertising it while the action was in flight.
+	*/
+	async setModelOwners(name, models, source) {
+		const normalized = [...new Set(models.map((model) => model.trim()).filter(Boolean))];
+		if (normalized.length === 0) throw anypickError("At least one model id is required.", "INVALID_USAGE", { exitCode: ExitCode.INVALID_USAGE });
+		return this.withStableConfig(name, async (config) => {
+			if (source) {
+				const sourceId = serializeRef(source);
+				if (!config.sources.some((entry) => entry.enabled && serializeRef(entry.ref) === sourceId)) throw invalidModelOwner(normalized, source, "is not an enabled Hub source");
+				const preview = await this.previewWithConfig(config);
+				for (const model of normalized) {
+					const candidates = modelCandidates(preview, model);
+					if (candidates.length < 2 || !candidates.some((candidate) => serializeRef(candidate) === sourceId)) throw invalidModelOwner([model], source, "is no longer a candidate for that model conflict");
+				}
+			}
+			const replaced = new Set(normalized);
+			const owners = config.modelOwners.filter((owner) => !replaced.has(owner.model));
+			if (source) owners.push(...normalized.map((model) => ({
+				model,
+				source
+			})));
+			return this.save({
+				...config,
+				modelOwners: owners
+			});
+		});
+	}
+	/** Refresh source catalogs through provider-owned in-process backends. */
+	async preview(name = DEFAULT_PROXY_HUB) {
+		return this.loadPreview(name, false);
+	}
+	/** Force provider-owned catalog discovery instead of accepting the 10 s preview cache. */
+	async refreshPreview(name = DEFAULT_PROXY_HUB) {
+		return this.loadPreview(name, true);
+	}
+	async loadPreview(name, force) {
+		const config = await this.get(name);
+		if (!force) {
+			const cached = this.cachedPreview(config);
+			if (cached) return cached;
+		}
+		const pending = this.previewPending.get(name);
+		if (pending) try {
+			const result = await pending;
+			if (!force) return result;
+		} catch (error) {
+			if (!force) throw error;
+		}
+		const work = this.withStableConfig(name, async (latest) => {
+			if (!force) {
+				const latestCached = this.cachedPreview(latest);
+				if (latestCached) return latestCached;
+			}
+			const preview = await this.previewWithConfig(latest);
+			this.previewCache.set(name, {
+				revision: latest.revision,
+				expiresAt: Date.now() + 1e4,
+				value: preview
+			});
+			return preview;
+		});
+		this.previewPending.set(name, work);
+		try {
+			return await work;
+		} finally {
+			if (this.previewPending.get(name) === work) this.previewPending.delete(name);
+		}
+	}
+	/** Read a bounded tail of the detached Hub process log. */
+	async logs(name = DEFAULT_PROXY_HUB, lines = 80) {
+		if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/u.test(name)) throw anypickError("Invalid Proxy Hub log source.", "INVALID_USAGE", { exitCode: ExitCode.INVALID_USAGE });
+		const boundedLines = Number.isFinite(lines) ? Math.max(1, Math.min(200, Math.trunc(lines))) : 80;
+		const logPath = proxyHubLogPath(this.root, name);
+		if (!await pathExists(logPath)) return "";
+		const all = (await readFile(logPath, "utf8")).replace(/\r?\n$/u, "").split(/\r?\n/u);
+		if (all.length === 1 && all[0] === "") return "";
+		return all.slice(Math.max(0, all.length - boundedLines)).join("\n");
+	}
+	async previewWithConfig(config) {
+		const registry = new ProxyHubBackendRegistry(this.deps, () => {});
+		const catalogs = [];
+		const unavailable = [];
+		try {
+			for (const source of config.sources) {
+				if (!source.enabled) continue;
+				try {
+					const backend = await registry.open(source.ref);
+					const response = await fetch(`${backend.handle.endpoint}/v1/models?refresh=1`, {
+						headers: { authorization: `Bearer ${backend.token}` },
+						signal: AbortSignal.timeout(12e3)
+					});
+					if (!response.ok) throw new Error(`catalog returned ${response.status}`);
+					const models = modelsFromCatalog(await response.json());
+					if (models.length === 0) throw new Error("catalog returned no models");
+					const adapter = await this.adapterForSource(source.ref);
+					catalogs.push({
+						source: source.ref,
+						catalogId: adapter.capabilities.provider,
+						models
+					});
+				} catch {
+					unavailable.push({
+						source: source.ref,
+						reason: "catalog unavailable"
+					});
+				}
+			}
+		} finally {
+			await registry.close();
+		}
+		return {
+			config,
+			catalogs,
+			unavailable,
+			...compileProxyHubRoutes(config, catalogs)
+		};
+	}
+	async attachRoute(routeId, client, protocol, name = DEFAULT_PROXY_HUB, requiredModels = []) {
+		const secret = await this.withStableConfig(name, async (config) => {
+			const preview = await this.previewWithConfig(config);
+			this.previewCache.set(name, {
+				revision: config.revision,
+				expiresAt: Date.now() + 1e4,
+				value: preview
+			});
+			if (preview.routes.length === 0) {
+				const detail = preview.unavailable.length > 0 ? preview.unavailable.map((entry) => `${displayRef(entry.source)}: ${entry.reason}`).join("; ") : "no uniquely routed models";
+				throw anypickError(preview.unavailable.length > 0 ? `Proxy Hub sources are not ready: ${detail}` : "Proxy Hub has no uniquely routed models. Add a source or resolve conflicts.", preview.unavailable.length > 0 ? "PROXY_START_FAILED" : "STATE_CONFLICT", preview.unavailable.length > 0 ? void 0 : { exitCode: ExitCode.CAPABILITY_CONFLICT });
+			}
+			const available = new Set(preview.routes.map((route) => route.model));
+			const missing = [...new Set(requiredModels.map((model) => model.trim()).filter(Boolean))].filter((model) => !available.has(model));
+			if (missing.length > 0) {
+				const unavailableHint = preview.unavailable.length > 0 ? ` Unavailable sources: ${preview.unavailable.map((entry) => displayRef(entry.source)).join(", ")}.` : "";
+				throw anypickError(`Proxy Hub cannot route selected model${missing.length === 1 ? "" : "s"}: ${missing.join(", ")}.${unavailableHint}`, "STATE_CONFLICT", { exitCode: ExitCode.CAPABILITY_CONFLICT });
+			}
+			await this.validateRoutesForClient(preview.routes, client);
+			let routes = preview.routes;
+			if (client === "codex") {
+				const nativeSlots = loadNativeListSlots();
+				const aliases = assignDesktopAliases(orderHubModelsForDesktop(preview.routes.map((route) => route.model), requiredModels), nativeSlots);
+				routes = expandHubRoutesWithDesktopAliases(preview.routes, aliases);
+			}
+			const manifest = {
+				version: 1,
+				hub: name,
+				revision: preview.config.revision,
+				client,
+				protocol,
+				routes
+			};
+			return this.store.attachRoute(routeId, manifest);
+		});
+		this.syncCodexLiveConfig();
+		return secret;
+	}
+	getAttachedRoute(routeId) {
+		return this.store.getRoute(routeId);
+	}
+	getAttachedRouteCount(name = DEFAULT_PROXY_HUB) {
+		return this.store.countRoutes(name);
+	}
+	async restoreRoute(routeId, previous) {
+		const name = previous?.manifest.hub ?? "default";
+		const current = this.store.getRoute(routeId);
+		const sources = previous?.manifest.routes ?? current?.manifest.routes ?? [];
+		await withMutationLocks(this.root, hubScopes(name, sources), async () => {
+			if (previous) this.store.attachRoute(routeId, previous.manifest, previous.token);
+			else this.store.detachRoute(routeId);
+		});
+	}
+	async detachRoute(routeId, name = DEFAULT_PROXY_HUB) {
+		const current = this.store.getRoute(routeId);
+		await withMutationLocks(this.root, hubScopes(name, current?.manifest.routes ?? []), async () => {
+			this.store.detachRoute(routeId);
+		});
+		this.syncCodexLiveConfig();
+	}
+	/** Start the singleton detached Hub process, reusing only a verified instance. */
+	async ensureRunning(name = DEFAULT_PROXY_HUB) {
+		const result = await withMutationLocks(this.root, [`proxy/hub/${name}`], async () => {
+			const config = await this.get(name);
+			return this.ensureRunningWithConfig(config);
+		});
+		this.syncCodexLiveConfig();
+		return result;
+	}
+	async ensureRunningWithConfig(config) {
+		const { name } = config;
+		if (!config.enabled) throw anypickError(`Proxy Hub hub:${name} is disabled.`, "PROXY_DISABLED");
+		if (!config.sources.some((source) => source.enabled)) throw anypickError(`Proxy Hub hub:${name} has no enabled sources. Add one before starting.`, "STATE_CONFLICT", {
+			exitCode: ExitCode.CAPABILITY_CONFLICT,
+			suggestions: ["In Tray, open Accounts → Model routing → Manage accounts, then enable a model account.", "If none are listed, add an OpenCode, Gemini, or Grok account under Manage."]
+		});
+		const endpoint = `http://${config.host}:${config.port}`;
+		const pidPath = proxyHubPidPath(this.root, name);
+		const logPath = proxyHubLogPath(this.root, name);
+		const existing = await readPidRecord(pidPath);
+		if (existing?.endpoint === endpoint && isProcessRunning(existing.pid)) {
+			if (await waitForHttp(`${endpoint}/health`, {
+				requirePid: existing.pid,
+				expectInstanceId: existing.instanceId,
+				timeoutMs: 8e3
+			})) {
+				this.store.saveRuntime({
+					name,
+					endpoint,
+					pid: existing.pid,
+					instanceId: existing.instanceId,
+					logPath,
+					startedAt: existing.createdAt
+				});
+				return {
+					endpoint,
+					startedNow: false,
+					pid: existing.pid,
+					instanceId: existing.instanceId
+				};
+			}
+		}
+		const adopted = await this.adoptLiveHub(config, endpoint, pidPath, logPath);
+		if (adopted) return adopted;
+		if (!await isListenPortFree(config.port, config.host)) throw anypickError(`Proxy Hub failed to bind ${config.host}:${config.port}: the port is already in use and is not a AnyPick Proxy Hub for hub:${name}.`, "PROXY_START_FAILED", { suggestions: [`Stop whatever is listening on ${config.host}:${config.port}, or change the hub port.`, `If an old anypick hub was left running: lsof -iTCP:${config.port} -sTCP:LISTEN then kill that pid.`] });
+		const launch = resolveAnyPickCliLaunch([
+			"proxy",
+			"serve",
+			"hub",
+			"--name",
+			name,
+			"--host",
+			config.host,
+			"--port",
+			String(config.port)
+		]);
+		if (!await pathExists(launch.entry)) throw anypickError(`AnyPick CLI entry not found at ${launch.entry}. Run: pnpm build`, "PROXY_BINARY_MISSING");
+		const spawned = await spawnDetached(launch.command, launch.args, {
+			logPath,
+			pidPath,
+			endpoint,
+			provider: "proxy-hub",
+			account: name,
+			env: {
+				...process.env,
+				ANYPICK_HOME: this.root,
+				...launch.watch ? { ANYPICK_DEV_WATCH: process.env.ANYPICK_DEV_WATCH ?? "1" } : {}
+			}
+		});
+		if (!await waitForHttp(`${endpoint}/health`, {
+			requirePid: spawned.pid,
+			expectInstanceId: spawned.instanceId,
+			timeoutMs: launch.watch ? 15e3 : 5e3
+		}) || !isProcessRunning(spawned.pid)) {
+			if (isProcessRunning(spawned.pid)) try {
+				process.kill(spawned.pid, "SIGTERM");
+			} catch {}
+			const raced = await this.adoptLiveHub(config, endpoint, pidPath, logPath);
+			if (raced) return raced;
+			const tail = (await readFile(logPath, "utf8").catch(() => "")).trim().slice(-800);
+			throw anypickError(`Proxy Hub failed to bind ${config.host}:${config.port}.${tail ? `\n${tail}` : ""}`, "PROXY_START_FAILED");
+		}
+		this.store.saveRuntime({
+			name,
+			endpoint,
+			pid: spawned.pid,
+			instanceId: spawned.instanceId,
+			logPath,
+			startedAt: (/* @__PURE__ */ new Date()).toISOString()
+		});
+		return {
+			endpoint,
+			startedNow: true,
+			pid: spawned.pid,
+			instanceId: spawned.instanceId
+		};
+	}
+	/**
+	* Reclaim a live hub whose pid record was lost or points at a dead process.
+	* Identity comes from /health (service + hub name + instanceId), not from
+	* "something is listening on the port".
+	*/
+	async adoptLiveHub(config, endpoint, pidPath, logPath) {
+		const health = await probeProxyHubHealth(endpoint, config.name);
+		if (!health) return null;
+		const pid = (await listenPidsOnPort(config.port, config.host)).find((candidate) => isProcessRunning(candidate));
+		if (pid == null) return null;
+		writePidRecord(pidPath, {
+			instanceId: health.instanceId,
+			pid,
+			endpoint,
+			provider: "proxy-hub",
+			account: config.name,
+			command: process.execPath
+		});
+		this.store.saveRuntime({
+			name: config.name,
+			endpoint,
+			pid,
+			instanceId: health.instanceId,
+			logPath,
+			startedAt: (/* @__PURE__ */ new Date()).toISOString()
+		});
+		return {
+			endpoint,
+			startedNow: false,
+			pid,
+			instanceId: health.instanceId
+		};
+	}
+	async stop(name = DEFAULT_PROXY_HUB) {
+		await withMutationLocks(this.root, [`proxy/hub/${name}`], async () => {
+			await stopPidFile(proxyHubPidPath(this.root, name), { processGroup: true });
+			this.store.clearRuntime(name);
+		});
+		this.syncCodexLiveConfig();
+	}
+	async status(name = DEFAULT_PROXY_HUB) {
+		const config = await this.get(name);
+		const runtime = this.store.getRuntime(name);
+		const cachedPreview = this.cachedPreview(config);
+		const routeModels = new Set(this.store.listRouteSecrets(name).flatMap((route) => route.manifest.routes.map((target) => target.model)));
+		const running = runtime?.pid != null && isRunning(runtime.pid);
+		return {
+			name,
+			enabled: config.enabled,
+			running,
+			endpoint: running ? runtime?.endpoint : void 0,
+			pid: running ? runtime?.pid : void 0,
+			sourceCount: config.sources.filter((source) => source.enabled).length,
+			modelCount: cachedPreview?.routes.length ?? routeModels.size,
+			conflictCount: cachedPreview == null ? 0 : proxyHubIssueCount(cachedPreview),
+			revision: config.revision,
+			detail: running ? void 0 : config.enabled ? "stopped" : "disabled"
+		};
+	}
+	async validateSources(sources) {
+		for (const source of sources) {
+			const provider = this.deps.accountRegistry.get(source.ref.provider);
+			if (!provider.createProxyHubBackend) throw anypickError(`${provider.name} cannot run behind Proxy Hub.`, "UNSUPPORTED_TRANSPORT", { exitCode: ExitCode.CAPABILITY_CONFLICT });
+			if (source.ref.kind === "account") {
+				if (!await this.deps.accounts.get(source.ref.provider, source.ref.name)) throw anypickError(`Account ${displayRef(source.ref)} was not found.`, "ACCOUNT_NOT_FOUND", { exitCode: ExitCode.NOT_FOUND });
+			} else {
+				const pool = await this.deps.pools.get(source.ref.provider);
+				if (!pool || pool.mode !== "multi") throw anypickError(`Proxy Hub source ${displayRef(source.ref)} needs an enabled multi-account pool.`, "POOL_NOT_ENABLED", { exitCode: ExitCode.CAPABILITY_CONFLICT });
+			}
+		}
+	}
+	cachedPreview(config) {
+		const cached = this.previewCache.get(config.name);
+		if (!cached || cached.revision !== config.revision || cached.expiresAt < Date.now()) return;
+		return cached.value;
+	}
+	/**
+	* Read a versioned config, acquire its complete sorted scope set, then prove
+	* it did not change before using it. A source edit that wins the small race
+	* is retried with its new provider scopes instead of running discovery while
+	* an unlisted provider account can mutate.
+	*/
+	async withStableConfig(name, operation) {
+		for (let attempt = 0; attempt < 3; attempt += 1) {
+			const config = await this.get(name);
+			const result = await withMutationLocks(this.root, hubScopes(name, config.sources), async () => {
+				const latest = await this.get(name);
+				if (latest.revision !== config.revision) return { stable: false };
+				return {
+					stable: true,
+					value: await operation(latest)
+				};
+			});
+			if (result.stable) return result.value;
+		}
+		throw anypickError("Proxy Hub sources changed repeatedly. Please retry.", "STATE_CONFLICT");
+	}
+	async validateRoutesForClient(routes, client) {
+		for (const route of routes) {
+			const capability = (await this.adapterForSource(route.source)).transportFor(client);
+			if (capability !== "managed_builtin_proxy" && capability !== "managed_external_proxy") throw anypickError(`${displayRef(route.source)} cannot serve ${client} through Proxy Hub.`, "UNSUPPORTED_TRANSPORT", { exitCode: ExitCode.CAPABILITY_CONFLICT });
+		}
+	}
+	async adapterForSource(source) {
+		const provider = this.deps.accountRegistry.get(source.provider);
+		return source.kind === "account" ? this.adapterForAccount(source.provider, source.name, provider) : provider.poolSourceAdapter?.() ?? poolAdapterFor(source.provider, provider);
+	}
+	async adapterForAccount(providerId, accountName, provider) {
+		const account = await this.deps.accounts.get(providerId, accountName);
+		if (!account) throw anypickError(`Account ${providerId}/${accountName} was not found.`, "ACCOUNT_NOT_FOUND", { exitCode: ExitCode.NOT_FOUND });
+		return accountAdapterFor(provider, account);
+	}
+};
+/** Live hub identity from /health — used to re-attach after a lost pid file. */
+async function probeProxyHubHealth(endpoint, hubName) {
+	try {
+		const res = await fetch(`${endpoint.replace(/\/$/u, "")}/health`, {
+			method: "GET",
+			signal: AbortSignal.timeout(800),
+			headers: { accept: "application/json" }
+		});
+		if (!res.ok) return null;
+		const body = await res.json();
+		if (body.ok === true && body.service === "anypick-proxy-hub" && body.hub === hubName && typeof body.instanceId === "string" && body.instanceId.length > 0) return { instanceId: body.instanceId };
+		return null;
+	} catch {
+		return null;
+	}
+}
+/** Count user decisions, not raw model rows, for compact status surfaces. */
+function proxyHubIssueCount(preview) {
+	return new Set(preview.conflicts.map((conflict) => conflict.candidates.map(serializeRef).toSorted((left, right) => left.localeCompare(right)).join("\0"))).size + preview.sourceChoices.length;
+}
+function dedupeSources(sources) {
+	const byRef = /* @__PURE__ */ new Map();
+	for (const source of sources) byRef.set(serializeRef(source.ref), {
+		ref: source.ref,
+		enabled: source.enabled
+	});
+	return [...byRef.values()].toSorted((left, right) => serializeRef(left.ref).localeCompare(serializeRef(right.ref)));
+}
+function hubScopes(name, entries) {
+	return [`proxy/hub/${name}`, ...entries.map((entry) => providerScope("ref" in entry ? entry.ref.provider : entry.source.provider))];
+}
+function validOwners(owners, sources) {
+	const enabled = new Set(sources.filter((source) => source.enabled).map((source) => serializeRef(source.ref)));
+	const byModel = /* @__PURE__ */ new Map();
+	for (const owner of owners) {
+		const model = owner.model.trim();
+		if (model && enabled.has(serializeRef(owner.source))) byModel.set(model, {
+			model,
+			source: owner.source
+		});
+	}
+	return [...byModel.values()].toSorted((left, right) => left.model.localeCompare(right.model));
+}
+function modelCandidates(preview, model) {
+	const sources = /* @__PURE__ */ new Map();
+	for (const catalog of preview.catalogs) if (catalog.models.includes(model)) sources.set(serializeRef(catalog.source), catalog.source);
+	return [...sources.values()];
+}
+function invalidModelOwner(models, source, reason) {
+	return anypickError(`Cannot assign ${models.length === 1 ? models[0] : `${models.length} selected models`} to ${displayRef(source)}: it ${reason}. Refresh conflicts and try again.`, "STATE_CONFLICT", { exitCode: ExitCode.CAPABILITY_CONFLICT });
+}
+function modelsFromCatalog(value) {
+	if (Array.isArray(value)) return value.map((entry) => typeof entry === "string" ? entry : entry && typeof entry === "object" ? entry.id : void 0).filter((id) => typeof id === "string" && id.trim().length > 0);
+	if (!value || typeof value !== "object") return [];
+	const record = value;
+	const list = Array.isArray(record.data) ? record.data : Array.isArray(record.models) ? record.models : null;
+	if (!list) return [];
+	return list.map((entry) => typeof entry === "string" ? entry : entry && typeof entry === "object" ? entry.id : void 0).filter((id) => typeof id === "string" && id.trim().length > 0);
+}
+function isRunning(pid) {
+	try {
+		process.kill(pid, 0);
+		return true;
+	} catch {
+		return false;
+	}
+}
+//#endregion
+export { ProxyHubService, proxyHubIssueCount };
+
+//# sourceMappingURL=proxy-hub-service.js.map

package/dist/core/proxy-hub-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-hub-service.js","names":[],"sources":["../../src/core/proxy-hub-service.ts"],"sourcesContent":["import { readFile } from 'node:fs/promises';\nimport type {\n  ClientId,\n  Protocol,\n  ProxyHubConfig,\n  ProxyHubModelOwner,\n  ProxyHubRouteManifest,\n  ProxyHubSource,\n  ProxyHubSourceRef,\n  ProxyHubStatus,\n} from '../types';\nimport {\n  assignDesktopAliases,\n  expandHubRoutesWithDesktopAliases,\n  loadNativeListSlots,\n  orderHubModelsForDesktop,\n} from '../clients/codex-desktop-catalog';\nimport { accountAdapterFor, poolAdapterFor } from '../sources/account-adapters';\nimport { assertLoopbackHost } from '../utils/network';\nimport { anypickError, ExitCode } from '../utils/errors';\nimport { withMutationLocks } from './mutation-lock';\nimport { displayRef, providerScope, serializeRef } from './refs';\nimport { ProxyHubBackendRegistry, type ProxyHubServerDeps } from './proxy-hub-server';\nimport { compileProxyHubRoutes, type CompiledProxyHubRoutes } from './proxy-hub-routes';\nimport { DEFAULT_PROXY_HUB, ProxyHubStore, type ProxyHubRouteSecret } from './proxy-hub-store';\nimport { proxyHubLogPath, proxyHubPidPath } from './paths';\nimport { pathExists } from '../utils/fs';\nimport {\n  isListenPortFree,\n  isProcessRunning,\n  listenPidsOnPort,\n  readPidRecord,\n  spawnDetached,\n  stopPidFile,\n  waitForHttp,\n  writePidRecord,\n} from '../utils/process';\nimport { resolveAnyPickCliLaunch } from '../providers/opencode-cli-entry';\n\nexport interface ProxyHubCatalogSnapshot {\n  source: ProxyHubSourceRef;\n  catalogId: string;\n  models: string[];\n}\n\nexport interface ProxyHubPreview extends CompiledProxyHubRoutes {\n  config: ProxyHubConfig;\n  catalogs: ProxyHubCatalogSnapshot[];\n  unavailable: Array<{ source: ProxyHubSourceRef; reason: string }>;\n}\n\n/**\n * Owns Hub configuration and route attachment. The server owns no persisted\n * mutation: it reads these versioned, token-scoped manifests at its boundary.\n */\nexport class ProxyHubService {\n  private readonly previewCache = new Map<\n    string,\n    { revision: number; expiresAt: number; value: ProxyHubPreview }\n  >();\n  private readonly previewPending = new Map<string, Promise<ProxyHubPreview>>();\n\n  constructor(\n    private readonly root: string,\n    private readonly store: ProxyHubStore,\n    private readonly deps: ProxyHubServerDeps,\n  ) {}\n\n  /**\n   * Optional re-publisher for the live Codex config block, wired in app.ts so this\n   * service does not depend on Codex/Proxy services it was not constructed with.\n   */\n  private codexLiveConfigSync?: () => Promise<void>;\n\n  setCodexLiveConfigSync(fn: () => Promise<void>): void {\n    this.codexLiveConfigSync = fn;\n  }\n\n  private async syncCodexLiveConfig(): Promise<void> {\n    try {\n      await this.codexLiveConfigSync?.();\n    } catch {\n      // Best-effort: a failed live-block refresh must never fail a Hub op.\n    }\n  }\n\n  async get(name = DEFAULT_PROXY_HUB): Promise<ProxyHubConfig> {\n    return this.store.getOrDefault(name);\n  }\n\n  async save(\n    config: Omit<ProxyHubConfig, 'revision' | 'createdAt' | 'updatedAt'> &\n      Partial<Pick<ProxyHubConfig, 'revision' | 'createdAt' | 'updatedAt'>>,\n  ): Promise<ProxyHubConfig> {\n    assertLoopbackHost(config.host);\n    if (!Number.isInteger(config.port) || config.port < 1 || config.port > 65535) {\n      throw anypickError('Proxy Hub port must be between 1 and 65535.', 'INVALID_USAGE', {\n        exitCode: ExitCode.INVALID_USAGE,\n      });\n    }\n    const uniqueSources = dedupeSources(config.sources);\n    // Enabled sources must still resolve; disabled rows are config-only.\n    // Deleted accounts are pruned on account delete via forgetAccount — they\n    // should not linger as enabled hub sources.\n    await this.validateSources(uniqueSources.filter((source) => source.enabled));\n    const scopes = [\n      `proxy/hub/${config.name}`,\n      ...uniqueSources.map((source) => providerScope(source.ref.provider)),\n    ];\n    return withMutationLocks(this.root, scopes, async () => {\n      const saved = this.store.save({\n        ...this.store.getOrDefault(config.name),\n        ...config,\n        sources: uniqueSources,\n        modelOwners: validOwners(config.modelOwners, uniqueSources),\n      });\n      this.previewCache.delete(config.name);\n      return saved;\n    });\n  }\n\n  async setSources(name: string, sources: ProxyHubSource[]): Promise<ProxyHubConfig> {\n    const config = await this.get(name);\n    return this.save({ ...config, sources });\n  }\n\n  /**\n   * Drop a deleted saved account from Hub sources and model owners.\n   * AccountService calls this after the account row is gone so a removed\n   * login cannot keep blocking attach or linger in Hub Sources.\n   */\n  async forgetAccount(\n    providerId: string,\n    accountName: string,\n    name = DEFAULT_PROXY_HUB,\n  ): Promise<void> {\n    const config = await this.get(name);\n    const matches = (ref: { kind: string; provider?: string; name?: string }) =>\n      ref.kind === 'account' && ref.provider === providerId && ref.name === accountName;\n    const sources = config.sources.filter((source) => !matches(source.ref));\n    const modelOwners = config.modelOwners.filter((owner) => !matches(owner.source));\n    if (\n      sources.length === config.sources.length &&\n      modelOwners.length === config.modelOwners.length\n    ) {\n      return;\n    }\n    await this.save({ ...config, sources, modelOwners });\n  }\n\n  async setModelOwner(\n    name: string,\n    model: string,\n    source: ProxyHubSourceRef | undefined,\n  ): Promise<ProxyHubConfig> {\n    return this.setModelOwners(name, [model], source);\n  }\n\n  /**\n   * Persist one explicit source choice for a set of colliding raw model ids.\n   * Discovery and the single config write share the Hub/provider lock set, so\n   * a stale Tray action can never assign a model to a source that stopped\n   * advertising it while the action was in flight.\n   */\n  async setModelOwners(\n    name: string,\n    models: readonly string[],\n    source: ProxyHubSourceRef | undefined,\n  ): Promise<ProxyHubConfig> {\n    const normalized = [...new Set(models.map((model) => model.trim()).filter(Boolean))];\n    if (normalized.length === 0) {\n      throw anypickError('At least one model id is required.', 'INVALID_USAGE', {\n        exitCode: ExitCode.INVALID_USAGE,\n      });\n    }\n\n    return this.withStableConfig(name, async (config) => {\n      if (source) {\n        const sourceId = serializeRef(source);\n        if (\n          !config.sources.some((entry) => entry.enabled && serializeRef(entry.ref) === sourceId)\n        ) {\n          throw invalidModelOwner(normalized, source, 'is not an enabled Hub source');\n        }\n\n        // Compile candidate identity from the fresh catalogs, not from a label\n        // or action payload supplied by the Tray helper.\n        const preview = await this.previewWithConfig(config);\n        for (const model of normalized) {\n          const candidates = modelCandidates(preview, model);\n          if (\n            candidates.length < 2 ||\n            !candidates.some((candidate) => serializeRef(candidate) === sourceId)\n          ) {\n            throw invalidModelOwner(\n              [model],\n              source,\n              'is no longer a candidate for that model conflict',\n            );\n          }\n        }\n      }\n\n      const replaced = new Set(normalized);\n      const owners = config.modelOwners.filter((owner) => !replaced.has(owner.model));\n      if (source) {\n        owners.push(...normalized.map((model) => ({ model, source })));\n      }\n      return this.save({ ...config, modelOwners: owners });\n    });\n  }\n\n  /** Refresh source catalogs through provider-owned in-process backends. */\n  async preview(name = DEFAULT_PROXY_HUB): Promise<ProxyHubPreview> {\n    return this.loadPreview(name, false);\n  }\n\n  /** Force provider-owned catalog discovery instead of accepting the 10 s preview cache. */\n  async refreshPreview(name = DEFAULT_PROXY_HUB): Promise<ProxyHubPreview> {\n    return this.loadPreview(name, true);\n  }\n\n  private async loadPreview(name: string, force: boolean): Promise<ProxyHubPreview> {\n    const config = await this.get(name);\n    if (!force) {\n      const cached = this.cachedPreview(config);\n      if (cached) {\n        return cached;\n      }\n    }\n    const pending = this.previewPending.get(name);\n    if (pending) {\n      try {\n        const result = await pending;\n        if (!force) {\n          return result;\n        }\n      } catch (error) {\n        if (!force) {\n          throw error;\n        }\n      }\n    }\n    const work = this.withStableConfig(name, async (latest) => {\n      if (!force) {\n        const latestCached = this.cachedPreview(latest);\n        if (latestCached) {\n          return latestCached;\n        }\n      }\n      const preview = await this.previewWithConfig(latest);\n      this.previewCache.set(name, {\n        revision: latest.revision,\n        expiresAt: Date.now() + 10_000,\n        value: preview,\n      });\n      return preview;\n    });\n    this.previewPending.set(name, work);\n    try {\n      return await work;\n    } finally {\n      if (this.previewPending.get(name) === work) {\n        this.previewPending.delete(name);\n      }\n    }\n  }\n\n  /** Read a bounded tail of the detached Hub process log. */\n  async logs(name = DEFAULT_PROXY_HUB, lines = 80): Promise<string> {\n    if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/u.test(name)) {\n      throw anypickError('Invalid Proxy Hub log source.', 'INVALID_USAGE', {\n        exitCode: ExitCode.INVALID_USAGE,\n      });\n    }\n    const boundedLines = Number.isFinite(lines)\n      ? Math.max(1, Math.min(200, Math.trunc(lines)))\n      : 80;\n    const logPath = proxyHubLogPath(this.root, name);\n    if (!(await pathExists(logPath))) {\n      return '';\n    }\n    const raw = await readFile(logPath, 'utf8');\n    const all = raw.replace(/\\r?\\n$/u, '').split(/\\r?\\n/u);\n    if (all.length === 1 && all[0] === '') {\n      return '';\n    }\n    return all.slice(Math.max(0, all.length - boundedLines)).join('\\n');\n  }\n\n  private async previewWithConfig(config: ProxyHubConfig): Promise<ProxyHubPreview> {\n    const registry = new ProxyHubBackendRegistry(this.deps, () => {});\n    const catalogs: ProxyHubCatalogSnapshot[] = [];\n    const unavailable: ProxyHubPreview['unavailable'] = [];\n    try {\n      for (const source of config.sources) {\n        if (!source.enabled) {\n          continue;\n        }\n        try {\n          const backend = await registry.open(source.ref);\n          // Request a fresh catalog so models the account gained upstream (a new\n          // free tier, etc.) show in the picker instead of a cached list. Non-\n          // OpenCode backends ignore the unknown query param and list as usual.\n          const response = await fetch(`${backend.handle.endpoint}/v1/models?refresh=1`, {\n            headers: { authorization: `Bearer ${backend.token}` },\n            signal: AbortSignal.timeout(12_000),\n          });\n          if (!response.ok) {\n            throw new Error(`catalog returned ${response.status}`);\n          }\n          const body: unknown = await response.json();\n          const models = modelsFromCatalog(body);\n          if (models.length === 0) {\n            throw new Error('catalog returned no models');\n          }\n          const adapter = await this.adapterForSource(source.ref);\n          catalogs.push({\n            source: source.ref,\n            catalogId: adapter.capabilities.provider,\n            models,\n          });\n        } catch {\n          unavailable.push({\n            source: source.ref,\n            // Catalog errors can originate in provider SDKs. This result crosses\n            // CLI/TUI boundaries, so keep diagnostics safe and provider-neutral.\n            reason: 'catalog unavailable',\n          });\n        }\n      }\n    } finally {\n      await registry.close();\n    }\n    const compiled = compileProxyHubRoutes(config, catalogs);\n    return { config, catalogs, unavailable, ...compiled };\n  }\n\n  async attachRoute(\n    routeId: string,\n    client: ClientId,\n    protocol: Protocol,\n    name = DEFAULT_PROXY_HUB,\n    requiredModels: readonly string[] = [],\n  ): Promise<ProxyHubRouteSecret> {\n    const secret = await this.withStableConfig(name, async (config) => {\n      // Hold the Hub scope throughout discovery and persistence: an updated\n      // source set cannot race in after catalog discovery but before the route\n      // manifest becomes visible to the public listener.\n      const preview = await this.previewWithConfig(config);\n      this.previewCache.set(name, {\n        revision: config.revision,\n        expiresAt: Date.now() + 10_000,\n        value: preview,\n      });\n      // A stale enabled source (deleted account, dead catalog) must not block\n      // attach when other sources still provide the models the client needs.\n      // Only hard-fail when nothing usable remains, or required models are gone.\n      if (preview.routes.length === 0) {\n        const detail =\n          preview.unavailable.length > 0\n            ? preview.unavailable\n                .map((entry) => `${displayRef(entry.source)}: ${entry.reason}`)\n                .join('; ')\n            : 'no uniquely routed models';\n        throw anypickError(\n          preview.unavailable.length > 0\n            ? `Proxy Hub sources are not ready: ${detail}`\n            : 'Proxy Hub has no uniquely routed models. Add a source or resolve conflicts.',\n          preview.unavailable.length > 0 ? 'PROXY_START_FAILED' : 'STATE_CONFLICT',\n          preview.unavailable.length > 0 ? undefined : { exitCode: ExitCode.CAPABILITY_CONFLICT },\n        );\n      }\n      const available = new Set(preview.routes.map((route) => route.model));\n      const missing = [\n        ...new Set(requiredModels.map((model) => model.trim()).filter(Boolean)),\n      ].filter((model) => !available.has(model));\n      if (missing.length > 0) {\n        const unavailableHint =\n          preview.unavailable.length > 0\n            ? ` Unavailable sources: ${preview.unavailable\n                .map((entry) => displayRef(entry.source))\n                .join(', ')}.`\n            : '';\n        throw anypickError(\n          `Proxy Hub cannot route selected model${missing.length === 1 ? '' : 's'}: ${missing.join(', ')}.${unavailableHint}`,\n          'STATE_CONFLICT',\n          { exitCode: ExitCode.CAPABILITY_CONFLICT },\n        );\n      }\n      await this.validateRoutesForClient(preview.routes, client);\n      // Codex Desktop only lists native GPT allowlist slugs. Expand the route\n      // table so those slugs rewrite to real Hub models (upstreamModel).\n      let routes = preview.routes;\n      if (client === 'codex') {\n        const nativeSlots = loadNativeListSlots();\n        // requiredModels is Default + List 2–5 from the binding (activation\n        // passes clientOptions.modelRoles). Order pins Desktop picker slots.\n        const ordered = orderHubModelsForDesktop(\n          preview.routes.map((route) => route.model),\n          requiredModels,\n        );\n        const aliases = assignDesktopAliases(ordered, nativeSlots);\n        routes = expandHubRoutesWithDesktopAliases(preview.routes, aliases);\n      }\n      const manifest: ProxyHubRouteManifest = {\n        version: 1,\n        hub: name,\n        revision: preview.config.revision,\n        client,\n        protocol,\n        routes,\n      };\n      return this.store.attachRoute(routeId, manifest);\n    });\n    void this.syncCodexLiveConfig();\n    return secret;\n  }\n\n  getAttachedRoute(routeId: string): ProxyHubRouteSecret | null {\n    return this.store.getRoute(routeId);\n  }\n\n  getAttachedRouteCount(name = DEFAULT_PROXY_HUB): number {\n    return this.store.countRoutes(name);\n  }\n\n  async restoreRoute(routeId: string, previous: ProxyHubRouteSecret | null): Promise<void> {\n    const name = previous?.manifest.hub ?? DEFAULT_PROXY_HUB;\n    const current = this.store.getRoute(routeId);\n    const sources = previous?.manifest.routes ?? current?.manifest.routes ?? [];\n    await withMutationLocks(this.root, hubScopes(name, sources), async () => {\n      if (previous) {\n        this.store.attachRoute(routeId, previous.manifest, previous.token);\n      } else {\n        this.store.detachRoute(routeId);\n      }\n    });\n  }\n\n  async detachRoute(routeId: string, name = DEFAULT_PROXY_HUB): Promise<void> {\n    const current = this.store.getRoute(routeId);\n    await withMutationLocks(\n      this.root,\n      hubScopes(name, current?.manifest.routes ?? []),\n      async () => {\n        this.store.detachRoute(routeId);\n      },\n    );\n    void this.syncCodexLiveConfig();\n  }\n\n  /** Start the singleton detached Hub process, reusing only a verified instance. */\n  async ensureRunning(name = DEFAULT_PROXY_HUB): Promise<{\n    endpoint: string;\n    startedNow: boolean;\n    pid: number;\n    instanceId: string;\n  }> {\n    const result = await withMutationLocks(this.root, [`proxy/hub/${name}`], async () => {\n      const config = await this.get(name);\n      return this.ensureRunningWithConfig(config);\n    });\n    void this.syncCodexLiveConfig();\n    return result;\n  }\n\n  private async ensureRunningWithConfig(config: ProxyHubConfig): Promise<{\n    endpoint: string;\n    startedNow: boolean;\n    pid: number;\n    instanceId: string;\n  }> {\n    const { name } = config;\n    if (!config.enabled) {\n      throw anypickError(`Proxy Hub hub:${name} is disabled.`, 'PROXY_DISABLED');\n    }\n    if (!config.sources.some((source) => source.enabled)) {\n      throw anypickError(\n        `Proxy Hub hub:${name} has no enabled sources. Add one before starting.`,\n        'STATE_CONFLICT',\n        {\n          exitCode: ExitCode.CAPABILITY_CONFLICT,\n          suggestions: [\n            'In Tray, open Accounts → Model routing → Manage accounts, then enable a model account.',\n            'If none are listed, add an OpenCode, Gemini, or Grok account under Manage.',\n          ],\n        },\n      );\n    }\n    const endpoint = `http://${config.host}:${config.port}`;\n    const pidPath = proxyHubPidPath(this.root, name);\n    const logPath = proxyHubLogPath(this.root, name);\n    const existing = await readPidRecord(pidPath);\n    if (existing?.endpoint === endpoint && isProcessRunning(existing.pid)) {\n      // Dev hub may run under `tsx watch`: mid-reload the pid stays up while\n      // /health is briefly down. Wait long enough to ride that gap before\n      // treating the process as dead and fighting it for the port.\n      const healthy = await waitForHttp(`${endpoint}/health`, {\n        requirePid: existing.pid,\n        expectInstanceId: existing.instanceId,\n        timeoutMs: 8_000,\n      });\n      if (healthy) {\n        this.store.saveRuntime({\n          name,\n          endpoint,\n          pid: existing.pid,\n          instanceId: existing.instanceId,\n          logPath,\n          startedAt: existing.createdAt,\n        });\n        return {\n          endpoint,\n          startedNow: false,\n          pid: existing.pid,\n          instanceId: existing.instanceId,\n        };\n      }\n    }\n\n    // Stale pid file is common after a crashed tray/dev restart: the hub child\n    // keeps the port while the record points at a dead pid. Re-attach when the\n    // live listener is still our hub (verified via /health), never by port alone.\n    const adopted = await this.adoptLiveHub(config, endpoint, pidPath, logPath);\n    if (adopted) {\n      return adopted;\n    }\n\n    if (!(await isListenPortFree(config.port, config.host))) {\n      throw anypickError(\n        `Proxy Hub failed to bind ${config.host}:${config.port}: the port is already in use and is not a AnyPick Proxy Hub for hub:${name}.`,\n        'PROXY_START_FAILED',\n        {\n          suggestions: [\n            `Stop whatever is listening on ${config.host}:${config.port}, or change the hub port.`,\n            `If an old anypick hub was left running: lsof -iTCP:${config.port} -sTCP:LISTEN then kill that pid.`,\n          ],\n        },\n      );\n    }\n\n    const launch = resolveAnyPickCliLaunch([\n      'proxy',\n      'serve',\n      'hub',\n      '--name',\n      name,\n      '--host',\n      config.host,\n      '--port',\n      String(config.port),\n    ]);\n    if (!(await pathExists(launch.entry))) {\n      throw anypickError(\n        `AnyPick CLI entry not found at ${launch.entry}. Run: pnpm build`,\n        'PROXY_BINARY_MISSING',\n      );\n    }\n    const spawned = await spawnDetached(launch.command, launch.args, {\n      logPath,\n      pidPath,\n      endpoint,\n      provider: 'proxy-hub',\n      account: name,\n      env: {\n        ...process.env,\n        ANYPICK_HOME: this.root,\n        // Child inherits watch policy for any nested re-exec.\n        ...(launch.watch ? { ANYPICK_DEV_WATCH: process.env.ANYPICK_DEV_WATCH ?? '1' } : {}),\n      },\n    });\n    // First bind under tsx watch can take longer than a cold dist start.\n    const ready = await waitForHttp(`${endpoint}/health`, {\n      requirePid: spawned.pid,\n      expectInstanceId: spawned.instanceId,\n      timeoutMs: launch.watch ? 15_000 : 5_000,\n    });\n    if (!ready || !isProcessRunning(spawned.pid)) {\n      if (isProcessRunning(spawned.pid)) {\n        try {\n          process.kill(spawned.pid, 'SIGTERM');\n        } catch {\n          // The direct child is known, unlike an arbitrary pid record.\n        }\n      }\n      // Race: another anypick process may have claimed the port first — adopt it.\n      const raced = await this.adoptLiveHub(config, endpoint, pidPath, logPath);\n      if (raced) {\n        return raced;\n      }\n      const log = await readFile(logPath, 'utf8').catch(() => '');\n      const tail = log.trim().slice(-800);\n      throw anypickError(\n        `Proxy Hub failed to bind ${config.host}:${config.port}.${tail ? `\\n${tail}` : ''}`,\n        'PROXY_START_FAILED',\n      );\n    }\n    this.store.saveRuntime({\n      name,\n      endpoint,\n      pid: spawned.pid,\n      instanceId: spawned.instanceId,\n      logPath,\n      startedAt: new Date().toISOString(),\n    });\n    return { endpoint, startedNow: true, pid: spawned.pid, instanceId: spawned.instanceId };\n  }\n\n  /**\n   * Reclaim a live hub whose pid record was lost or points at a dead process.\n   * Identity comes from /health (service + hub name + instanceId), not from\n   * \"something is listening on the port\".\n   */\n  private async adoptLiveHub(\n    config: ProxyHubConfig,\n    endpoint: string,\n    pidPath: string,\n    logPath: string,\n  ): Promise<{ endpoint: string; startedNow: boolean; pid: number; instanceId: string } | null> {\n    const health = await probeProxyHubHealth(endpoint, config.name);\n    if (!health) {\n      return null;\n    }\n    const listeners = await listenPidsOnPort(config.port, config.host);\n    const pid = listeners.find((candidate) => isProcessRunning(candidate));\n    if (pid == null) {\n      return null;\n    }\n    writePidRecord(pidPath, {\n      instanceId: health.instanceId,\n      pid,\n      endpoint,\n      provider: 'proxy-hub',\n      account: config.name,\n      command: process.execPath,\n    });\n    this.store.saveRuntime({\n      name: config.name,\n      endpoint,\n      pid,\n      instanceId: health.instanceId,\n      logPath,\n      startedAt: new Date().toISOString(),\n    });\n    return { endpoint, startedNow: false, pid, instanceId: health.instanceId };\n  }\n\n  async stop(name = DEFAULT_PROXY_HUB): Promise<void> {\n    await withMutationLocks(this.root, [`proxy/hub/${name}`], async () => {\n      await stopPidFile(proxyHubPidPath(this.root, name), {\n        processGroup: true,\n      });\n      this.store.clearRuntime(name);\n    });\n    void this.syncCodexLiveConfig();\n  }\n\n  async status(name = DEFAULT_PROXY_HUB): Promise<ProxyHubStatus> {\n    const config = await this.get(name);\n    const runtime = this.store.getRuntime(name);\n    const cachedPreview = this.cachedPreview(config);\n    const routeModels = new Set(\n      this.store\n        .listRouteSecrets(name)\n        .flatMap((route) => route.manifest.routes.map((target) => target.model)),\n    );\n    const running = runtime?.pid != null && isRunning(runtime.pid);\n    return {\n      name,\n      enabled: config.enabled,\n      running,\n      endpoint: running ? runtime?.endpoint : undefined,\n      pid: running ? runtime?.pid : undefined,\n      sourceCount: config.sources.filter((source) => source.enabled).length,\n      modelCount: cachedPreview?.routes.length ?? routeModels.size,\n      conflictCount: cachedPreview == null ? 0 : proxyHubIssueCount(cachedPreview),\n      revision: config.revision,\n      detail: running ? undefined : config.enabled ? 'stopped' : 'disabled',\n    };\n  }\n\n  private async validateSources(sources: readonly ProxyHubSource[]): Promise<void> {\n    for (const source of sources) {\n      const provider = this.deps.accountRegistry.get(source.ref.provider);\n      if (!provider.createProxyHubBackend) {\n        throw anypickError(\n          `${provider.name} cannot run behind Proxy Hub.`,\n          'UNSUPPORTED_TRANSPORT',\n          { exitCode: ExitCode.CAPABILITY_CONFLICT },\n        );\n      }\n      if (source.ref.kind === 'account') {\n        const account = await this.deps.accounts.get(source.ref.provider, source.ref.name);\n        if (!account) {\n          throw anypickError(\n            `Account ${displayRef(source.ref)} was not found.`,\n            'ACCOUNT_NOT_FOUND',\n            {\n              exitCode: ExitCode.NOT_FOUND,\n            },\n          );\n        }\n      } else {\n        const pool = await this.deps.pools.get(source.ref.provider);\n        if (!pool || pool.mode !== 'multi') {\n          throw anypickError(\n            `Proxy Hub source ${displayRef(source.ref)} needs an enabled multi-account pool.`,\n            'POOL_NOT_ENABLED',\n            { exitCode: ExitCode.CAPABILITY_CONFLICT },\n          );\n        }\n      }\n    }\n  }\n\n  private cachedPreview(config: ProxyHubConfig): ProxyHubPreview | undefined {\n    const cached = this.previewCache.get(config.name);\n    if (!cached || cached.revision !== config.revision || cached.expiresAt < Date.now()) {\n      return undefined;\n    }\n    return cached.value;\n  }\n\n  /**\n   * Read a versioned config, acquire its complete sorted scope set, then prove\n   * it did not change before using it. A source edit that wins the small race\n   * is retried with its new provider scopes instead of running discovery while\n   * an unlisted provider account can mutate.\n   */\n  private async withStableConfig<T>(\n    name: string,\n    operation: (config: ProxyHubConfig) => Promise<T>,\n  ): Promise<T> {\n    for (let attempt = 0; attempt < 3; attempt += 1) {\n      const config = await this.get(name);\n      const result = await withMutationLocks(\n        this.root,\n        hubScopes(name, config.sources),\n        async () => {\n          const latest = await this.get(name);\n          if (latest.revision !== config.revision) {\n            return { stable: false as const };\n          }\n          return { stable: true as const, value: await operation(latest) };\n        },\n      );\n      if (result.stable) {\n        return result.value;\n      }\n    }\n    throw anypickError('Proxy Hub sources changed repeatedly. Please retry.', 'STATE_CONFLICT');\n  }\n\n  private async validateRoutesForClient(\n    routes: readonly { source: ProxyHubSourceRef }[],\n    client: ClientId,\n  ): Promise<void> {\n    for (const route of routes) {\n      const adapter = await this.adapterForSource(route.source);\n      const capability = adapter.transportFor(client);\n      if (capability !== 'managed_builtin_proxy' && capability !== 'managed_external_proxy') {\n        throw anypickError(\n          `${displayRef(route.source)} cannot serve ${client} through Proxy Hub.`,\n          'UNSUPPORTED_TRANSPORT',\n          { exitCode: ExitCode.CAPABILITY_CONFLICT },\n        );\n      }\n    }\n  }\n\n  private async adapterForSource(source: ProxyHubSourceRef) {\n    const provider = this.deps.accountRegistry.get(source.provider);\n    return source.kind === 'account'\n      ? this.adapterForAccount(source.provider, source.name, provider)\n      : (provider.poolSourceAdapter?.() ?? poolAdapterFor(source.provider, provider));\n  }\n\n  private async adapterForAccount(\n    providerId: string,\n    accountName: string,\n    provider: Parameters<typeof accountAdapterFor>[0],\n  ) {\n    const account = await this.deps.accounts.get(providerId, accountName);\n    if (!account) {\n      throw anypickError(\n        `Account ${providerId}/${accountName} was not found.`,\n        'ACCOUNT_NOT_FOUND',\n        {\n          exitCode: ExitCode.NOT_FOUND,\n        },\n      );\n    }\n    return accountAdapterFor(provider, account);\n  }\n}\n\n/** Live hub identity from /health — used to re-attach after a lost pid file. */\nasync function probeProxyHubHealth(\n  endpoint: string,\n  hubName: string,\n): Promise<{ instanceId: string } | null> {\n  try {\n    const res = await fetch(`${endpoint.replace(/\\/$/u, '')}/health`, {\n      method: 'GET',\n      signal: AbortSignal.timeout(800),\n      headers: { accept: 'application/json' },\n    });\n    if (!res.ok) {\n      return null;\n    }\n    const body = (await res.json()) as {\n      ok?: unknown;\n      service?: unknown;\n      hub?: unknown;\n      instanceId?: unknown;\n    };\n    if (\n      body.ok === true &&\n      body.service === 'anypick-proxy-hub' &&\n      body.hub === hubName &&\n      typeof body.instanceId === 'string' &&\n      body.instanceId.length > 0\n    ) {\n      return { instanceId: body.instanceId };\n    }\n    return null;\n  } catch {\n    return null;\n  }\n}\n\n/** Count user decisions, not raw model rows, for compact status surfaces. */\nexport function proxyHubIssueCount(\n  preview: Pick<ProxyHubPreview, 'conflicts' | 'sourceChoices'>,\n): number {\n  const modelOverlapGroups = new Set(\n    preview.conflicts.map((conflict) =>\n      conflict.candidates\n        .map(serializeRef)\n        .toSorted((left, right) => left.localeCompare(right))\n        .join('\\u0000'),\n    ),\n  );\n  return modelOverlapGroups.size + preview.sourceChoices.length;\n}\n\nfunction dedupeSources(sources: readonly ProxyHubSource[]): ProxyHubSource[] {\n  const byRef = new Map<string, ProxyHubSource>();\n  for (const source of sources) {\n    byRef.set(serializeRef(source.ref), { ref: source.ref, enabled: source.enabled });\n  }\n  return [...byRef.values()].toSorted((left, right) =>\n    serializeRef(left.ref).localeCompare(serializeRef(right.ref)),\n  );\n}\n\nfunction hubScopes(\n  name: string,\n  entries: readonly (ProxyHubSource | { source: ProxyHubSourceRef })[],\n): string[] {\n  return [\n    `proxy/hub/${name}`,\n    ...entries.map((entry) =>\n      providerScope('ref' in entry ? entry.ref.provider : entry.source.provider),\n    ),\n  ];\n}\n\nfunction validOwners(\n  owners: readonly ProxyHubModelOwner[],\n  sources: readonly ProxyHubSource[],\n): ProxyHubModelOwner[] {\n  const enabled = new Set(\n    sources.filter((source) => source.enabled).map((source) => serializeRef(source.ref)),\n  );\n  const byModel = new Map<string, ProxyHubModelOwner>();\n  for (const owner of owners) {\n    const model = owner.model.trim();\n    if (model && enabled.has(serializeRef(owner.source))) {\n      byModel.set(model, { model, source: owner.source });\n    }\n  }\n  return [...byModel.values()].toSorted((left, right) => left.model.localeCompare(right.model));\n}\n\nfunction modelCandidates(preview: ProxyHubPreview, model: string): ProxyHubSourceRef[] {\n  const sources = new Map<string, ProxyHubSourceRef>();\n  for (const catalog of preview.catalogs) {\n    if (catalog.models.includes(model)) {\n      sources.set(serializeRef(catalog.source), catalog.source);\n    }\n  }\n  return [...sources.values()];\n}\n\nfunction invalidModelOwner(models: readonly string[], source: ProxyHubSourceRef, reason: string) {\n  const description = models.length === 1 ? models[0] : `${models.length} selected models`;\n  return anypickError(\n    `Cannot assign ${description} to ${displayRef(source)}: it ${reason}. Refresh conflicts and try again.`,\n    'STATE_CONFLICT',\n    { exitCode: ExitCode.CAPABILITY_CONFLICT },\n  );\n}\n\nfunction modelsFromCatalog(value: unknown): string[] {\n  if (Array.isArray(value)) {\n    return value\n      .map((entry) =>\n        typeof entry === 'string'\n          ? entry\n          : entry && typeof entry === 'object'\n            ? (entry as { id?: unknown }).id\n            : undefined,\n      )\n      .filter((id): id is string => typeof id === 'string' && id.trim().length > 0);\n  }\n  if (!value || typeof value !== 'object') {\n    return [];\n  }\n  const record = value as { data?: unknown; models?: unknown };\n  // OpenAI-shaped `data` first; some vendors emit `models` instead.\n  const list = Array.isArray(record.data)\n    ? record.data\n    : Array.isArray(record.models)\n      ? record.models\n      : null;\n  if (!list) {\n    return [];\n  }\n  return list\n    .map((entry) =>\n      typeof entry === 'string'\n        ? entry\n        : entry && typeof entry === 'object'\n          ? (entry as { id?: unknown }).id\n          : undefined,\n    )\n    .filter((id): id is string => typeof id === 'string' && id.trim().length > 0);\n}\n\nfunction isRunning(pid: number): boolean {\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAuDA,IAAa,kBAAb,MAA6B;CAQR;CACA;CACA;CATnB,+BAAgC,IAAI,IAGlC;CACF,iCAAkC,IAAI,IAAsC;CAE5E,YACE,MACA,OACA,MACA;EAHiB,KAAA,OAAA;EACA,KAAA,QAAA;EACA,KAAA,OAAA;CAChB;;;;;CAMH;CAEA,uBAAuB,IAA+B;EACpD,KAAK,sBAAsB;CAC7B;CAEA,MAAc,sBAAqC;EACjD,IAAI;GACF,MAAM,KAAK,sBAAsB;EACnC,QAAQ,CAER;CACF;CAEA,MAAM,IAAI,OAAO,mBAA4C;EAC3D,OAAO,KAAK,MAAM,aAAa,IAAI;CACrC;CAEA,MAAM,KACJ,QAEyB;EACzB,mBAAmB,OAAO,IAAI;EAC9B,IAAI,CAAC,OAAO,UAAU,OAAO,IAAI,KAAK,OAAO,OAAO,KAAK,OAAO,OAAO,OACrE,MAAM,aAAa,+CAA+C,iBAAiB,EACjF,UAAU,SAAS,cACrB,CAAC;EAEH,MAAM,gBAAgB,cAAc,OAAO,OAAO;EAIlD,MAAM,KAAK,gBAAgB,cAAc,QAAQ,WAAW,OAAO,OAAO,CAAC;EAC3E,MAAM,SAAS,CACb,aAAa,OAAO,QACpB,GAAG,cAAc,KAAK,WAAW,cAAc,OAAO,IAAI,QAAQ,CAAC,CACrE;EACA,OAAO,kBAAkB,KAAK,MAAM,QAAQ,YAAY;GACtD,MAAM,QAAQ,KAAK,MAAM,KAAK;IAC5B,GAAG,KAAK,MAAM,aAAa,OAAO,IAAI;IACtC,GAAG;IACH,SAAS;IACT,aAAa,YAAY,OAAO,aAAa,aAAa;GAC5D,CAAC;GACD,KAAK,aAAa,OAAO,OAAO,IAAI;GACpC,OAAO;EACT,CAAC;CACH;CAEA,MAAM,WAAW,MAAc,SAAoD;EACjF,MAAM,SAAS,MAAM,KAAK,IAAI,IAAI;EAClC,OAAO,KAAK,KAAK;GAAE,GAAG;GAAQ;EAAQ,CAAC;CACzC;;;;;;CAOA,MAAM,cACJ,YACA,aACA,OAAO,mBACQ;EACf,MAAM,SAAS,MAAM,KAAK,IAAI,IAAI;EAClC,MAAM,WAAW,QACf,IAAI,SAAS,aAAa,IAAI,aAAa,cAAc,IAAI,SAAS;EACxE,MAAM,UAAU,OAAO,QAAQ,QAAQ,WAAW,CAAC,QAAQ,OAAO,GAAG,CAAC;EACtE,MAAM,cAAc,OAAO,YAAY,QAAQ,UAAU,CAAC,QAAQ,MAAM,MAAM,CAAC;EAC/E,IACE,QAAQ,WAAW,OAAO,QAAQ,UAClC,YAAY,WAAW,OAAO,YAAY,QAE1C;EAEF,MAAM,KAAK,KAAK;GAAE,GAAG;GAAQ;GAAS;EAAY,CAAC;CACrD;CAEA,MAAM,cACJ,MACA,OACA,QACyB;EACzB,OAAO,KAAK,eAAe,MAAM,CAAC,KAAK,GAAG,MAAM;CAClD;;;;;;;CAQA,MAAM,eACJ,MACA,QACA,QACyB;EACzB,MAAM,aAAa,CAAC,GAAG,IAAI,IAAI,OAAO,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC;EACnF,IAAI,WAAW,WAAW,GACxB,MAAM,aAAa,sCAAsC,iBAAiB,EACxE,UAAU,SAAS,cACrB,CAAC;EAGH,OAAO,KAAK,iBAAiB,MAAM,OAAO,WAAW;GACnD,IAAI,QAAQ;IACV,MAAM,WAAW,aAAa,MAAM;IACpC,IACE,CAAC,OAAO,QAAQ,MAAM,UAAU,MAAM,WAAW,aAAa,MAAM,GAAG,MAAM,QAAQ,GAErF,MAAM,kBAAkB,YAAY,QAAQ,8BAA8B;IAK5E,MAAM,UAAU,MAAM,KAAK,kBAAkB,MAAM;IACnD,KAAK,MAAM,SAAS,YAAY;KAC9B,MAAM,aAAa,gBAAgB,SAAS,KAAK;KACjD,IACE,WAAW,SAAS,KACpB,CAAC,WAAW,MAAM,cAAc,aAAa,SAAS,MAAM,QAAQ,GAEpE,MAAM,kBACJ,CAAC,KAAK,GACN,QACA,kDACF;IAEJ;GACF;GAEA,MAAM,WAAW,IAAI,IAAI,UAAU;GACnC,MAAM,SAAS,OAAO,YAAY,QAAQ,UAAU,CAAC,SAAS,IAAI,MAAM,KAAK,CAAC;GAC9E,IAAI,QACF,OAAO,KAAK,GAAG,WAAW,KAAK,WAAW;IAAE;IAAO;GAAO,EAAE,CAAC;GAE/D,OAAO,KAAK,KAAK;IAAE,GAAG;IAAQ,aAAa;GAAO,CAAC;EACrD,CAAC;CACH;;CAGA,MAAM,QAAQ,OAAO,mBAA6C;EAChE,OAAO,KAAK,YAAY,MAAM,KAAK;CACrC;;CAGA,MAAM,eAAe,OAAO,mBAA6C;EACvE,OAAO,KAAK,YAAY,MAAM,IAAI;CACpC;CAEA,MAAc,YAAY,MAAc,OAA0C;EAChF,MAAM,SAAS,MAAM,KAAK,IAAI,IAAI;EAClC,IAAI,CAAC,OAAO;GACV,MAAM,SAAS,KAAK,cAAc,MAAM;GACxC,IAAI,QACF,OAAO;EAEX;EACA,MAAM,UAAU,KAAK,eAAe,IAAI,IAAI;EAC5C,IAAI,SACF,IAAI;GACF,MAAM,SAAS,MAAM;GACrB,IAAI,CAAC,OACH,OAAO;EAEX,SAAS,OAAO;GACd,IAAI,CAAC,OACH,MAAM;EAEV;EAEF,MAAM,OAAO,KAAK,iBAAiB,MAAM,OAAO,WAAW;GACzD,IAAI,CAAC,OAAO;IACV,MAAM,eAAe,KAAK,cAAc,MAAM;IAC9C,IAAI,cACF,OAAO;GAEX;GACA,MAAM,UAAU,MAAM,KAAK,kBAAkB,MAAM;GACnD,KAAK,aAAa,IAAI,MAAM;IAC1B,UAAU,OAAO;IACjB,WAAW,KAAK,IAAI,IAAI;IACxB,OAAO;GACT,CAAC;GACD,OAAO;EACT,CAAC;EACD,KAAK,eAAe,IAAI,MAAM,IAAI;EAClC,IAAI;GACF,OAAO,MAAM;EACf,UAAU;GACR,IAAI,KAAK,eAAe,IAAI,IAAI,MAAM,MACpC,KAAK,eAAe,OAAO,IAAI;EAEnC;CACF;;CAGA,MAAM,KAAK,OAAO,mBAAmB,QAAQ,IAAqB;EAChE,IAAI,CAAC,sCAAsC,KAAK,IAAI,GAClD,MAAM,aAAa,iCAAiC,iBAAiB,EACnE,UAAU,SAAS,cACrB,CAAC;EAEH,MAAM,eAAe,OAAO,SAAS,KAAK,IACtC,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,KAAK,MAAM,KAAK,CAAC,CAAC,IAC5C;EACJ,MAAM,UAAU,gBAAgB,KAAK,MAAM,IAAI;EAC/C,IAAI,CAAE,MAAM,WAAW,OAAO,GAC5B,OAAO;EAGT,MAAM,OAAM,MADM,SAAS,SAAS,MAAM,EAAA,CAC1B,QAAQ,WAAW,EAAE,CAAC,CAAC,MAAM,QAAQ;EACrD,IAAI,IAAI,WAAW,KAAK,IAAI,OAAO,IACjC,OAAO;EAET,OAAO,IAAI,MAAM,KAAK,IAAI,GAAG,IAAI,SAAS,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI;CACpE;CAEA,MAAc,kBAAkB,QAAkD;EAChF,MAAM,WAAW,IAAI,wBAAwB,KAAK,YAAY,CAAC,CAAC;EAChE,MAAM,WAAsC,CAAC;EAC7C,MAAM,cAA8C,CAAC;EACrD,IAAI;GACF,KAAK,MAAM,UAAU,OAAO,SAAS;IACnC,IAAI,CAAC,OAAO,SACV;IAEF,IAAI;KACF,MAAM,UAAU,MAAM,SAAS,KAAK,OAAO,GAAG;KAI9C,MAAM,WAAW,MAAM,MAAM,GAAG,QAAQ,OAAO,SAAS,uBAAuB;MAC7E,SAAS,EAAE,eAAe,UAAU,QAAQ,QAAQ;MACpD,QAAQ,YAAY,QAAQ,IAAM;KACpC,CAAC;KACD,IAAI,CAAC,SAAS,IACZ,MAAM,IAAI,MAAM,oBAAoB,SAAS,QAAQ;KAGvD,MAAM,SAAS,kBAAkB,MADL,SAAS,KAAK,CACL;KACrC,IAAI,OAAO,WAAW,GACpB,MAAM,IAAI,MAAM,4BAA4B;KAE9C,MAAM,UAAU,MAAM,KAAK,iBAAiB,OAAO,GAAG;KACtD,SAAS,KAAK;MACZ,QAAQ,OAAO;MACf,WAAW,QAAQ,aAAa;MAChC;KACF,CAAC;IACH,QAAQ;KACN,YAAY,KAAK;MACf,QAAQ,OAAO;MAGf,QAAQ;KACV,CAAC;IACH;GACF;EACF,UAAU;GACR,MAAM,SAAS,MAAM;EACvB;EAEA,OAAO;GAAE;GAAQ;GAAU;GAAa,GADvB,sBAAsB,QAAQ,QACJ;EAAS;CACtD;CAEA,MAAM,YACJ,SACA,QACA,UACA,OAAO,mBACP,iBAAoC,CAAC,GACP;EAC9B,MAAM,SAAS,MAAM,KAAK,iBAAiB,MAAM,OAAO,WAAW;GAIjE,MAAM,UAAU,MAAM,KAAK,kBAAkB,MAAM;GACnD,KAAK,aAAa,IAAI,MAAM;IAC1B,UAAU,OAAO;IACjB,WAAW,KAAK,IAAI,IAAI;IACxB,OAAO;GACT,CAAC;GAID,IAAI,QAAQ,OAAO,WAAW,GAAG;IAC/B,MAAM,SACJ,QAAQ,YAAY,SAAS,IACzB,QAAQ,YACL,KAAK,UAAU,GAAG,WAAW,MAAM,MAAM,EAAE,IAAI,MAAM,QAAQ,CAAC,CAC9D,KAAK,IAAI,IACZ;IACN,MAAM,aACJ,QAAQ,YAAY,SAAS,IACzB,oCAAoC,WACpC,+EACJ,QAAQ,YAAY,SAAS,IAAI,uBAAuB,kBACxD,QAAQ,YAAY,SAAS,IAAI,KAAA,IAAY,EAAE,UAAU,SAAS,oBAAoB,CACxF;GACF;GACA,MAAM,YAAY,IAAI,IAAI,QAAQ,OAAO,KAAK,UAAU,MAAM,KAAK,CAAC;GACpE,MAAM,UAAU,CACd,GAAG,IAAI,IAAI,eAAe,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,CACxE,CAAC,CAAC,QAAQ,UAAU,CAAC,UAAU,IAAI,KAAK,CAAC;GACzC,IAAI,QAAQ,SAAS,GAAG;IACtB,MAAM,kBACJ,QAAQ,YAAY,SAAS,IACzB,yBAAyB,QAAQ,YAC9B,KAAK,UAAU,WAAW,MAAM,MAAM,CAAC,CAAC,CACxC,KAAK,IAAI,EAAE,KACd;IACN,MAAM,aACJ,wCAAwC,QAAQ,WAAW,IAAI,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,EAAE,GAAG,mBAClG,kBACA,EAAE,UAAU,SAAS,oBAAoB,CAC3C;GACF;GACA,MAAM,KAAK,wBAAwB,QAAQ,QAAQ,MAAM;GAGzD,IAAI,SAAS,QAAQ;GACrB,IAAI,WAAW,SAAS;IACtB,MAAM,cAAc,oBAAoB;IAOxC,MAAM,UAAU,qBAJA,yBACd,QAAQ,OAAO,KAAK,UAAU,MAAM,KAAK,GACzC,cAEmC,GAAS,WAAW;IACzD,SAAS,kCAAkC,QAAQ,QAAQ,OAAO;GACpE;GACA,MAAM,WAAkC;IACtC,SAAS;IACT,KAAK;IACL,UAAU,QAAQ,OAAO;IACzB;IACA;IACA;GACF;GACA,OAAO,KAAK,MAAM,YAAY,SAAS,QAAQ;EACjD,CAAC;EACD,KAAU,oBAAoB;EAC9B,OAAO;CACT;CAEA,iBAAiB,SAA6C;EAC5D,OAAO,KAAK,MAAM,SAAS,OAAO;CACpC;CAEA,sBAAsB,OAAO,mBAA2B;EACtD,OAAO,KAAK,MAAM,YAAY,IAAI;CACpC;CAEA,MAAM,aAAa,SAAiB,UAAqD;EACvF,MAAM,OAAO,UAAU,SAAS,OAAA;EAChC,MAAM,UAAU,KAAK,MAAM,SAAS,OAAO;EAC3C,MAAM,UAAU,UAAU,SAAS,UAAU,SAAS,SAAS,UAAU,CAAC;EAC1E,MAAM,kBAAkB,KAAK,MAAM,UAAU,MAAM,OAAO,GAAG,YAAY;GACvE,IAAI,UACF,KAAK,MAAM,YAAY,SAAS,SAAS,UAAU,SAAS,KAAK;QAEjE,KAAK,MAAM,YAAY,OAAO;EAElC,CAAC;CACH;CAEA,MAAM,YAAY,SAAiB,OAAO,mBAAkC;EAC1E,MAAM,UAAU,KAAK,MAAM,SAAS,OAAO;EAC3C,MAAM,kBACJ,KAAK,MACL,UAAU,MAAM,SAAS,SAAS,UAAU,CAAC,CAAC,GAC9C,YAAY;GACV,KAAK,MAAM,YAAY,OAAO;EAChC,CACF;EACA,KAAU,oBAAoB;CAChC;;CAGA,MAAM,cAAc,OAAO,mBAKxB;EACD,MAAM,SAAS,MAAM,kBAAkB,KAAK,MAAM,CAAC,aAAa,MAAM,GAAG,YAAY;GACnF,MAAM,SAAS,MAAM,KAAK,IAAI,IAAI;GAClC,OAAO,KAAK,wBAAwB,MAAM;EAC5C,CAAC;EACD,KAAU,oBAAoB;EAC9B,OAAO;CACT;CAEA,MAAc,wBAAwB,QAKnC;EACD,MAAM,EAAE,SAAS;EACjB,IAAI,CAAC,OAAO,SACV,MAAM,aAAa,iBAAiB,KAAK,gBAAgB,gBAAgB;EAE3E,IAAI,CAAC,OAAO,QAAQ,MAAM,WAAW,OAAO,OAAO,GACjD,MAAM,aACJ,iBAAiB,KAAK,oDACtB,kBACA;GACE,UAAU,SAAS;GACnB,aAAa,CACX,0FACA,4EACF;EACF,CACF;EAEF,MAAM,WAAW,UAAU,OAAO,KAAK,GAAG,OAAO;EACjD,MAAM,UAAU,gBAAgB,KAAK,MAAM,IAAI;EAC/C,MAAM,UAAU,gBAAgB,KAAK,MAAM,IAAI;EAC/C,MAAM,WAAW,MAAM,cAAc,OAAO;EAC5C,IAAI,UAAU,aAAa,YAAY,iBAAiB,SAAS,GAAG;OAS9D,MALkB,YAAY,GAAG,SAAS,UAAU;IACtD,YAAY,SAAS;IACrB,kBAAkB,SAAS;IAC3B,WAAW;GACb,CAAC,GACY;IACX,KAAK,MAAM,YAAY;KACrB;KACA;KACA,KAAK,SAAS;KACd,YAAY,SAAS;KACrB;KACA,WAAW,SAAS;IACtB,CAAC;IACD,OAAO;KACL;KACA,YAAY;KACZ,KAAK,SAAS;KACd,YAAY,SAAS;IACvB;GACF;;EAMF,MAAM,UAAU,MAAM,KAAK,aAAa,QAAQ,UAAU,SAAS,OAAO;EAC1E,IAAI,SACF,OAAO;EAGT,IAAI,CAAE,MAAM,iBAAiB,OAAO,MAAM,OAAO,IAAI,GACnD,MAAM,aACJ,4BAA4B,OAAO,KAAK,GAAG,OAAO,KAAK,sEAAsE,KAAK,IAClI,sBACA,EACE,aAAa,CACX,iCAAiC,OAAO,KAAK,GAAG,OAAO,KAAK,4BAC5D,sDAAsD,OAAO,KAAK,kCACpE,EACF,CACF;EAGF,MAAM,SAAS,wBAAwB;GACrC;GACA;GACA;GACA;GACA;GACA;GACA,OAAO;GACP;GACA,OAAO,OAAO,IAAI;EACpB,CAAC;EACD,IAAI,CAAE,MAAM,WAAW,OAAO,KAAK,GACjC,MAAM,aACJ,kCAAkC,OAAO,MAAM,oBAC/C,sBACF;EAEF,MAAM,UAAU,MAAM,cAAc,OAAO,SAAS,OAAO,MAAM;GAC/D;GACA;GACA;GACA,UAAU;GACV,SAAS;GACT,KAAK;IACH,GAAG,QAAQ;IACX,cAAc,KAAK;IAEnB,GAAI,OAAO,QAAQ,EAAE,mBAAmB,QAAQ,IAAI,qBAAqB,IAAI,IAAI,CAAC;GACpF;EACF,CAAC;EAOD,IAAI,CAAC,MALe,YAAY,GAAG,SAAS,UAAU;GACpD,YAAY,QAAQ;GACpB,kBAAkB,QAAQ;GAC1B,WAAW,OAAO,QAAQ,OAAS;EACrC,CAAC,KACa,CAAC,iBAAiB,QAAQ,GAAG,GAAG;GAC5C,IAAI,iBAAiB,QAAQ,GAAG,GAC9B,IAAI;IACF,QAAQ,KAAK,QAAQ,KAAK,SAAS;GACrC,QAAQ,CAER;GAGF,MAAM,QAAQ,MAAM,KAAK,aAAa,QAAQ,UAAU,SAAS,OAAO;GACxE,IAAI,OACF,OAAO;GAGT,MAAM,QAAO,MADK,SAAS,SAAS,MAAM,CAAC,CAAC,YAAY,EAAE,EAAA,CACzC,KAAK,CAAC,CAAC,MAAM,IAAI;GAClC,MAAM,aACJ,4BAA4B,OAAO,KAAK,GAAG,OAAO,KAAK,GAAG,OAAO,KAAK,SAAS,MAC/E,oBACF;EACF;EACA,KAAK,MAAM,YAAY;GACrB;GACA;GACA,KAAK,QAAQ;GACb,YAAY,QAAQ;GACpB;GACA,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EACpC,CAAC;EACD,OAAO;GAAE;GAAU,YAAY;GAAM,KAAK,QAAQ;GAAK,YAAY,QAAQ;EAAW;CACxF;;;;;;CAOA,MAAc,aACZ,QACA,UACA,SACA,SAC4F;EAC5F,MAAM,SAAS,MAAM,oBAAoB,UAAU,OAAO,IAAI;EAC9D,IAAI,CAAC,QACH,OAAO;EAGT,MAAM,OAAM,MADY,iBAAiB,OAAO,MAAM,OAAO,IAAI,EAAA,CAC3C,MAAM,cAAc,iBAAiB,SAAS,CAAC;EACrE,IAAI,OAAO,MACT,OAAO;EAET,eAAe,SAAS;GACtB,YAAY,OAAO;GACnB;GACA;GACA,UAAU;GACV,SAAS,OAAO;GAChB,SAAS,QAAQ;EACnB,CAAC;EACD,KAAK,MAAM,YAAY;GACrB,MAAM,OAAO;GACb;GACA;GACA,YAAY,OAAO;GACnB;GACA,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EACpC,CAAC;EACD,OAAO;GAAE;GAAU,YAAY;GAAO;GAAK,YAAY,OAAO;EAAW;CAC3E;CAEA,MAAM,KAAK,OAAO,mBAAkC;EAClD,MAAM,kBAAkB,KAAK,MAAM,CAAC,aAAa,MAAM,GAAG,YAAY;GACpE,MAAM,YAAY,gBAAgB,KAAK,MAAM,IAAI,GAAG,EAClD,cAAc,KAChB,CAAC;GACD,KAAK,MAAM,aAAa,IAAI;EAC9B,CAAC;EACD,KAAU,oBAAoB;CAChC;CAEA,MAAM,OAAO,OAAO,mBAA4C;EAC9D,MAAM,SAAS,MAAM,KAAK,IAAI,IAAI;EAClC,MAAM,UAAU,KAAK,MAAM,WAAW,IAAI;EAC1C,MAAM,gBAAgB,KAAK,cAAc,MAAM;EAC/C,MAAM,cAAc,IAAI,IACtB,KAAK,MACF,iBAAiB,IAAI,CAAC,CACtB,SAAS,UAAU,MAAM,SAAS,OAAO,KAAK,WAAW,OAAO,KAAK,CAAC,CAC3E;EACA,MAAM,UAAU,SAAS,OAAO,QAAQ,UAAU,QAAQ,GAAG;EAC7D,OAAO;GACL;GACA,SAAS,OAAO;GAChB;GACA,UAAU,UAAU,SAAS,WAAW,KAAA;GACxC,KAAK,UAAU,SAAS,MAAM,KAAA;GAC9B,aAAa,OAAO,QAAQ,QAAQ,WAAW,OAAO,OAAO,CAAC,CAAC;GAC/D,YAAY,eAAe,OAAO,UAAU,YAAY;GACxD,eAAe,iBAAiB,OAAO,IAAI,mBAAmB,aAAa;GAC3E,UAAU,OAAO;GACjB,QAAQ,UAAU,KAAA,IAAY,OAAO,UAAU,YAAY;EAC7D;CACF;CAEA,MAAc,gBAAgB,SAAmD;EAC/E,KAAK,MAAM,UAAU,SAAS;GAC5B,MAAM,WAAW,KAAK,KAAK,gBAAgB,IAAI,OAAO,IAAI,QAAQ;GAClE,IAAI,CAAC,SAAS,uBACZ,MAAM,aACJ,GAAG,SAAS,KAAK,gCACjB,yBACA,EAAE,UAAU,SAAS,oBAAoB,CAC3C;GAEF,IAAI,OAAO,IAAI,SAAS;QAElB,CAAC,MADiB,KAAK,KAAK,SAAS,IAAI,OAAO,IAAI,UAAU,OAAO,IAAI,IAAI,GAE/E,MAAM,aACJ,WAAW,WAAW,OAAO,GAAG,EAAE,kBAClC,qBACA,EACE,UAAU,SAAS,UACrB,CACF;GAAA,OAEG;IACL,MAAM,OAAO,MAAM,KAAK,KAAK,MAAM,IAAI,OAAO,IAAI,QAAQ;IAC1D,IAAI,CAAC,QAAQ,KAAK,SAAS,SACzB,MAAM,aACJ,oBAAoB,WAAW,OAAO,GAAG,EAAE,wCAC3C,oBACA,EAAE,UAAU,SAAS,oBAAoB,CAC3C;GAEJ;EACF;CACF;CAEA,cAAsB,QAAqD;EACzE,MAAM,SAAS,KAAK,aAAa,IAAI,OAAO,IAAI;EAChD,IAAI,CAAC,UAAU,OAAO,aAAa,OAAO,YAAY,OAAO,YAAY,KAAK,IAAI,GAChF;EAEF,OAAO,OAAO;CAChB;;;;;;;CAQA,MAAc,iBACZ,MACA,WACY;EACZ,KAAK,IAAI,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG;GAC/C,MAAM,SAAS,MAAM,KAAK,IAAI,IAAI;GAClC,MAAM,SAAS,MAAM,kBACnB,KAAK,MACL,UAAU,MAAM,OAAO,OAAO,GAC9B,YAAY;IACV,MAAM,SAAS,MAAM,KAAK,IAAI,IAAI;IAClC,IAAI,OAAO,aAAa,OAAO,UAC7B,OAAO,EAAE,QAAQ,MAAe;IAElC,OAAO;KAAE,QAAQ;KAAe,OAAO,MAAM,UAAU,MAAM;IAAE;GACjE,CACF;GACA,IAAI,OAAO,QACT,OAAO,OAAO;EAElB;EACA,MAAM,aAAa,uDAAuD,gBAAgB;CAC5F;CAEA,MAAc,wBACZ,QACA,QACe;EACf,KAAK,MAAM,SAAS,QAAQ;GAE1B,MAAM,cAAa,MADG,KAAK,iBAAiB,MAAM,MAAM,EAAA,CAC7B,aAAa,MAAM;GAC9C,IAAI,eAAe,2BAA2B,eAAe,0BAC3D,MAAM,aACJ,GAAG,WAAW,MAAM,MAAM,EAAE,gBAAgB,OAAO,sBACnD,yBACA,EAAE,UAAU,SAAS,oBAAoB,CAC3C;EAEJ;CACF;CAEA,MAAc,iBAAiB,QAA2B;EACxD,MAAM,WAAW,KAAK,KAAK,gBAAgB,IAAI,OAAO,QAAQ;EAC9D,OAAO,OAAO,SAAS,YACnB,KAAK,kBAAkB,OAAO,UAAU,OAAO,MAAM,QAAQ,IAC5D,SAAS,oBAAoB,KAAK,eAAe,OAAO,UAAU,QAAQ;CACjF;CAEA,MAAc,kBACZ,YACA,aACA,UACA;EACA,MAAM,UAAU,MAAM,KAAK,KAAK,SAAS,IAAI,YAAY,WAAW;EACpE,IAAI,CAAC,SACH,MAAM,aACJ,WAAW,WAAW,GAAG,YAAY,kBACrC,qBACA,EACE,UAAU,SAAS,UACrB,CACF;EAEF,OAAO,kBAAkB,UAAU,OAAO;CAC5C;AACF;;AAGA,eAAe,oBACb,UACA,SACwC;CACxC,IAAI;EACF,MAAM,MAAM,MAAM,MAAM,GAAG,SAAS,QAAQ,QAAQ,EAAE,EAAE,UAAU;GAChE,QAAQ;GACR,QAAQ,YAAY,QAAQ,GAAG;GAC/B,SAAS,EAAE,QAAQ,mBAAmB;EACxC,CAAC;EACD,IAAI,CAAC,IAAI,IACP,OAAO;EAET,MAAM,OAAQ,MAAM,IAAI,KAAK;EAM7B,IACE,KAAK,OAAO,QACZ,KAAK,YAAY,uBACjB,KAAK,QAAQ,WACb,OAAO,KAAK,eAAe,YAC3B,KAAK,WAAW,SAAS,GAEzB,OAAO,EAAE,YAAY,KAAK,WAAW;EAEvC,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,mBACd,SACQ;CASR,OAAO,IARwB,IAC7B,QAAQ,UAAU,KAAK,aACrB,SAAS,WACN,IAAI,YAAY,CAAC,CACjB,UAAU,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC,CAAC,CACpD,KAAK,IAAQ,CAClB,CAEK,CAAA,CAAmB,OAAO,QAAQ,cAAc;AACzD;AAEA,SAAS,cAAc,SAAsD;CAC3E,MAAM,wBAAQ,IAAI,IAA4B;CAC9C,KAAK,MAAM,UAAU,SACnB,MAAM,IAAI,aAAa,OAAO,GAAG,GAAG;EAAE,KAAK,OAAO;EAAK,SAAS,OAAO;CAAQ,CAAC;CAElF,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,UAAU,MAAM,UACzC,aAAa,KAAK,GAAG,CAAC,CAAC,cAAc,aAAa,MAAM,GAAG,CAAC,CAC9D;AACF;AAEA,SAAS,UACP,MACA,SACU;CACV,OAAO,CACL,aAAa,QACb,GAAG,QAAQ,KAAK,UACd,cAAc,SAAS,QAAQ,MAAM,IAAI,WAAW,MAAM,OAAO,QAAQ,CAC3E,CACF;AACF;AAEA,SAAS,YACP,QACA,SACsB;CACtB,MAAM,UAAU,IAAI,IAClB,QAAQ,QAAQ,WAAW,OAAO,OAAO,CAAC,CAAC,KAAK,WAAW,aAAa,OAAO,GAAG,CAAC,CACrF;CACA,MAAM,0BAAU,IAAI,IAAgC;CACpD,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,QAAQ,MAAM,MAAM,KAAK;EAC/B,IAAI,SAAS,QAAQ,IAAI,aAAa,MAAM,MAAM,CAAC,GACjD,QAAQ,IAAI,OAAO;GAAE;GAAO,QAAQ,MAAM;EAAO,CAAC;CAEtD;CACA,OAAO,CAAC,GAAG,QAAQ,OAAO,CAAC,CAAC,CAAC,UAAU,MAAM,UAAU,KAAK,MAAM,cAAc,MAAM,KAAK,CAAC;AAC9F;AAEA,SAAS,gBAAgB,SAA0B,OAAoC;CACrF,MAAM,0BAAU,IAAI,IAA+B;CACnD,KAAK,MAAM,WAAW,QAAQ,UAC5B,IAAI,QAAQ,OAAO,SAAS,KAAK,GAC/B,QAAQ,IAAI,aAAa,QAAQ,MAAM,GAAG,QAAQ,MAAM;CAG5D,OAAO,CAAC,GAAG,QAAQ,OAAO,CAAC;AAC7B;AAEA,SAAS,kBAAkB,QAA2B,QAA2B,QAAgB;CAE/F,OAAO,aACL,iBAFkB,OAAO,WAAW,IAAI,OAAO,KAAK,GAAG,OAAO,OAAO,kBAExC,MAAM,WAAW,MAAM,EAAE,OAAO,OAAO,qCACpE,kBACA,EAAE,UAAU,SAAS,oBAAoB,CAC3C;AACF;AAEA,SAAS,kBAAkB,OAA0B;CACnD,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MACJ,KAAK,UACJ,OAAO,UAAU,WACb,QACA,SAAS,OAAO,UAAU,WACvB,MAA2B,KAC5B,KAAA,CACR,CAAC,CACA,QAAQ,OAAqB,OAAO,OAAO,YAAY,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;CAEhF,IAAI,CAAC,SAAS,OAAO,UAAU,UAC7B,OAAO,CAAC;CAEV,MAAM,SAAS;CAEf,MAAM,OAAO,MAAM,QAAQ,OAAO,IAAI,IAClC,OAAO,OACP,MAAM,QAAQ,OAAO,MAAM,IACzB,OAAO,SACP;CACN,IAAI,CAAC,MACH,OAAO,CAAC;CAEV,OAAO,KACJ,KAAK,UACJ,OAAO,UAAU,WACb,QACA,SAAS,OAAO,UAAU,WACvB,MAA2B,KAC5B,KAAA,CACR,CAAC,CACA,QAAQ,OAAqB,OAAO,OAAO,YAAY,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;AAChF;AAEA,SAAS,UAAU,KAAsB;CACvC,IAAI;EACF,QAAQ,KAAK,KAAK,CAAC;EACnB,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF"}