anypick 1.0.0

package/dist/core/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","names":[],"sources":["../../src/core/service.ts"],"sourcesContent":["import type {\n  Account,\n  AccountMeta,\n  CredentialInput,\n  LiveAuthStatus,\n  LiveUsage,\n  Provider,\n} from '../types';\nimport { AnyPickError, isAnyPickError } from '../utils/errors';\nimport { displayLabelFromName, normalizeAccountName } from '../utils/slug';\nimport type { ProviderRegistry } from './registry';\nimport type { AccountStore } from './store';\nimport { ProxyService } from './proxy-service';\nimport { providerCanProxy } from './capabilities';\nimport { withMutationLocks } from './mutation-lock';\nimport { providerScope } from './refs';\nimport { mkdir, mkdtemp, rm } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport { tmpdir } from 'node:os';\nimport { exportAccountEnvelope, importAccountEnvelope } from './account-transfer';\n\n/**\n * Account name used when a login must be saved but cannot be named from its own\n * identity — either the provider reports no identity, or the identity contains\n * no slug-safe characters.\n */\nconst FALLBACK_ACCOUNT_NAME = 'stash';\n\nexport interface ListedAccount {\n  name: string;\n  provider: string;\n  identity?: string;\n  label?: string;\n  active: boolean;\n  updatedAt: string;\n  createdAt: string;\n  proxyEnabled: boolean;\n  proxyRunning: boolean;\n  /** True when this snapshot's material matches the current live login. */\n  isLiveMatch: boolean;\n  /** False when comparing this provider's live credential would require a secret prompt. */\n  liveMatchKnown: boolean;\n}\n\nexport interface SwitchResult {\n  provider: string;\n  providerName: string;\n  from: string | null;\n  to: string;\n  /** Whether the previous live auth was re-saved into the prior active account. */\n  refreshedPrevious: boolean;\n  /** Saved account whose snapshot received the latest live auth before switching. */\n  refreshedAccount?: string;\n  /** Proxy outcome for the newly active account (if any). */\n  proxy?: {\n    enabled: boolean;\n    running: boolean;\n    endpoint?: string;\n    compatibility?: string;\n    error?: string;\n  };\n}\n\n/** Exact local-auth checkpoint used to compensate a failed/scoped switch. */\nexport interface LiveAuthCheckpoint {\n  providerId: string;\n  activeAccount: string | null;\n  hadLiveAuth: boolean;\n  directory: string;\n}\n\n/**\n * High-level account operations: save, switch, stash, refresh, delete,\n * and account metadata listing. Proxy lifecycle, pools, and port allocation\n * live in the injected `ProxyService` (exposed as `app.proxy`); this service\n * delegates to it for the proxy side effects of switch/stash/delete.\n *\n * CLI commands call this for account CRUD, and `app.proxy` for proxy control.\n */\nexport class AccountService {\n  /** Proxy lifecycle collaborator (start/stop/pool/port). */\n  readonly proxy: ProxyService;\n\n  /**\n   * Optional post-delete side effects (Proxy Hub source prune, pool member\n   * sync). Wired from app.ts after Hub exists — AccountService is constructed\n   * before Hub to avoid a cycle.\n   */\n  private afterDelete?: (providerId: string, accountName: string) => Promise<void>;\n\n  /**\n   * `proxy` stays optional for callers that only need account CRUD (several\n   * tests, and any embedder that never starts a proxy). When omitted a private\n   * one is built here — deliberately without a lease store, because a service\n   * that was never handed the app's lease table must not record leases into a\n   * table nobody reaps.\n   */\n  constructor(\n    private readonly store: AccountStore,\n    private readonly registry: ProviderRegistry,\n    proxy?: ProxyService,\n  ) {\n    this.proxy = proxy ?? new ProxyService(store, registry);\n  }\n\n  setAfterDelete(fn: (providerId: string, accountName: string) => Promise<void>): void {\n    this.afterDelete = fn;\n  }\n\n  provider(id: string): Provider {\n    return this.registry.get(id);\n  }\n\n  listProviders(): Provider[] {\n    return this.registry.list();\n  }\n\n  /** Currently active (live) account name for a provider, if any. */\n  async getActive(providerId: string): Promise<string | null> {\n    return this.store.getActive(providerId);\n  }\n\n  /** Load a saved account or return null if missing. */\n  async get(providerId: string, name: string): Promise<Account | null> {\n    return this.store.getAccount(providerId, normalizeAccountName(name));\n  }\n\n  /** Saved local name for an upstream identity, if one is already known. */\n  async findNameByIdentity(providerId: string, identity: string): Promise<string | null> {\n    return this.findAccountNameByIdentity(providerId, identity);\n  }\n\n  /**\n   * Capture the real local login before a switch. The checkpoint is private to\n   * the current operation and must be cleaned by `discardLiveAuthCheckpoint`.\n   */\n  async checkpointLiveAuth(\n    providerId: string,\n    opts: { durable?: boolean } = {},\n  ): Promise<LiveAuthCheckpoint> {\n    const provider = this.registry.get(providerId);\n    const checkpointRoot = opts.durable ? join(this.store.root, 'recovery', 'live-auth') : tmpdir();\n    await mkdir(checkpointRoot, { recursive: true, mode: 0o700 });\n    const directory = await mkdtemp(join(checkpointRoot, 'anypick-live-checkpoint-'));\n    try {\n      const activeAccount = await this.store.getActive(providerId);\n      const live = await provider.detectLive();\n      if (live.present) {\n        await provider.backup(directory);\n      }\n      return { providerId, activeAccount, hadLiveAuth: live.present, directory };\n    } catch (err) {\n      await rm(directory, { recursive: true, force: true });\n      throw err;\n    }\n  }\n\n  /** Restore a checkpoint, including the provider active pointer. */\n  async restoreLiveAuthCheckpoint(checkpoint: LiveAuthCheckpoint): Promise<void> {\n    const provider = this.registry.get(checkpoint.providerId);\n    if (checkpoint.hadLiveAuth) {\n      await provider.restore(checkpoint.directory);\n    } else if (provider.clearLive) {\n      await provider.clearLive();\n    } else {\n      throw new AnyPickError(\n        `Cannot restore an empty ${provider.name} login state safely.`,\n        'SWITCH_ROLLBACK_UNAVAILABLE',\n      );\n    }\n    if (checkpoint.activeAccount) {\n      await this.store.setActive(checkpoint.providerId, checkpoint.activeAccount);\n    } else {\n      await this.store.clearActive(checkpoint.providerId);\n    }\n  }\n\n  async discardLiveAuthCheckpoint(checkpoint: LiveAuthCheckpoint): Promise<void> {\n    await rm(checkpoint.directory, { recursive: true, force: true });\n  }\n\n  async list(providerId?: string): Promise<ListedAccount[]> {\n    const providers = providerId ? [this.registry.get(providerId)] : this.registry.list();\n\n    const out: ListedAccount[] = [];\n    for (const p of providers) {\n      const active = await this.store.getActive(p.id);\n      const accounts = await this.store.listAccounts(p.id);\n      const live = await p.detectLive();\n      const materialMatches = await Promise.all(\n        accounts.map((account) => computeLiveMatch(p, account, live)),\n      );\n      const matchedNames = accounts\n        .filter((_, index) => materialMatches[index] === true)\n        .map((account) => account.meta.name);\n      let liveAccountName =\n        (active && matchedNames.includes(active) ? active : matchedNames[0]) ?? null;\n\n      // A refreshed token can change the session fingerprint while keeping the\n      // same upstream identity. Fall back once, choosing the active record when\n      // possible, so duplicate snapshots never all render as live.\n      const liveIdentity = live.identity;\n      if (!liveAccountName && liveIdentity) {\n        const identityMatches = accounts\n          .filter(\n            (account) =>\n              account.meta.credentialKind !== 'proxy-only' &&\n              account.meta.identity &&\n              identitiesMatch(account.meta.identity, liveIdentity),\n          )\n          .map((account) => account.meta.name);\n        liveAccountName =\n          (active && identityMatches.includes(active) ? active : identityMatches[0]) ?? null;\n      }\n      // Some credential stores cannot be read during a background refresh without\n      // prompting. The active pointer is authoritative immediately after AnyPick\n      // restored that login, so present it as live until a provider can prove drift.\n      if (!liveAccountName && active && live.present) {\n        const activeIndex = accounts.findIndex((account) => account.meta.name === active);\n        if (activeIndex >= 0 && materialMatches[activeIndex] === null) {\n          liveAccountName = active;\n        }\n      }\n\n      for (const [index, a] of accounts.entries()) {\n        const proxyStatus =\n          providerCanProxy(p) && a.proxy.enabled\n            ? await this.proxy.proxyStatus(p.id, a.meta.name)\n            : null;\n        out.push({\n          name: a.meta.name,\n          provider: p.id,\n          identity: a.meta.identity,\n          label: a.meta.label,\n          active: active === a.meta.name,\n          updatedAt: a.meta.updatedAt,\n          createdAt: a.meta.createdAt,\n          proxyEnabled: a.proxy.enabled,\n          proxyRunning: proxyStatus?.running ?? false,\n          isLiveMatch: liveAccountName === a.meta.name,\n          liveMatchKnown: materialMatches[index] !== null,\n        });\n      }\n    }\n    return out;\n  }\n\n  async current(providerId: string): Promise<{\n    active: string | null;\n    live: LiveAuthStatus;\n    account: Account | null;\n    proxy: import('../types').ProxyStatus | null;\n    isLiveMatch: boolean;\n    liveMatchKnown: boolean;\n  }> {\n    const provider = this.registry.get(providerId);\n    const active = await this.store.getActive(providerId);\n    const live = await provider.detectLive();\n    const account = active ? await this.store.getAccount(providerId, active) : null;\n    const proxy =\n      providerCanProxy(provider) && account\n        ? await this.proxy.proxyStatus(providerId, account.meta.name)\n        : null;\n    const liveMatch = account ? await computeLiveMatch(provider, account, live) : null;\n    let isLiveMatch = liveMatch === true || (liveMatch === null && active !== null && live.present);\n    if (\n      !isLiveMatch &&\n      account?.meta.credentialKind !== 'proxy-only' &&\n      account?.meta.identity &&\n      live.identity &&\n      identitiesMatch(account.meta.identity, live.identity)\n    ) {\n      isLiveMatch = true;\n    }\n    return { active, live, account, proxy, isLiveMatch, liveMatchKnown: liveMatch !== null };\n  }\n\n  /** Best-effort usage for the provider's currently live local login only. */\n  async liveUsage(providerId: string): Promise<LiveUsage | null> {\n    const provider = this.registry.get(providerId);\n    return provider.liveUsage ? provider.liveUsage() : null;\n  }\n\n  /**\n   * Save current live auth as a named account.\n   * If the name already exists, overwrite the snapshot (refresh).\n   * Proxy config is preserved.\n   */\n  async save(\n    providerId: string,\n    name: string,\n    opts: {\n      label?: string;\n      notes?: string;\n      force?: boolean;\n      source?: string;\n      /** Credential typed by the user; replaces reading a live login. */\n      input?: CredentialInput;\n    } = {},\n  ): Promise<AccountMeta> {\n    // ADR 0009: the service owns its lock. Identity resolution is part of the\n    // mutation, not a preamble to it — a concurrent save that renames the\n    // target account in between would send this one to a stale snapshot.\n    return withMutationLocks(this.store.root, [providerScope(providerId)], () =>\n      this.saveLocked(providerId, name, opts),\n    );\n  }\n\n  private async saveLocked(\n    providerId: string,\n    name: string,\n    opts: {\n      label?: string;\n      notes?: string;\n      force?: boolean;\n      source?: string;\n      /** Credential typed by the user; replaces reading a live login. */\n      input?: CredentialInput;\n    },\n  ): Promise<AccountMeta> {\n    const provider = this.registry.get(providerId);\n    const requestedAccountName = normalizeAccountName(name);\n    let accountName = requestedAccountName;\n\n    if (opts.input && !provider.backupInput) {\n      throw new AnyPickError(\n        `${provider.name} does not accept a ${opts.input.kind} credential.`,\n        'UNSUPPORTED_CREDENTIAL_INPUT',\n      );\n    }\n\n    // A typed-in credential has no live counterpart to read, so the live-auth\n    // gate below would reject every one of them.\n    const live: LiveAuthStatus = opts.input\n      ? { present: true }\n      : opts.source && provider.detectLiveSource\n        ? await provider.detectLiveSource(opts.source)\n        : await provider.detectLive();\n    if (!live.present) {\n      throw new AnyPickError(`No live ${provider.name} login to save.`, {\n        code: 'NO_LIVE_AUTH',\n        suggestions: [\n          `Sign in with the official tool first, then re-run this command.`,\n          `Or clear the live auth without saving it: anypick add account ${providerId} --new --no-backup`,\n        ],\n      });\n    }\n\n    // An identity (normally an email address) identifies the upstream login,\n    // regardless of its local AnyPick name. A confirmed/automated overwrite\n    // updates the existing snapshot instead of creating a duplicate.\n    accountName = await this.resolveIdentityTarget(\n      providerId,\n      live.identity,\n      accountName,\n      opts.force === true,\n    );\n\n    const existing = await this.store.getAccount(providerId, accountName);\n    if (!opts.input && existing?.meta.credentialKind === 'proxy-only') {\n      throw new AnyPickError(\n        `${providerId}/${accountName} holds a credential you supplied, not a login on this machine.`,\n        {\n          code: 'CREDENTIAL_KIND_MISMATCH',\n          suggestions: [\n            `Save the live login under a different name.`,\n            `To replace the stored credential, re-run the command that created it.`,\n          ],\n        },\n      );\n    }\n\n    const now = new Date().toISOString();\n    const prepared = await this.store.prepareSnapshot(providerId, accountName);\n    let meta: AccountMeta;\n    try {\n      const fromProvider =\n        opts.input && provider.backupInput\n          ? await provider.backupInput(opts.input, prepared.snapshotDir)\n          : opts.source && provider.backupSource\n            ? await provider.backupSource(opts.source, prepared.snapshotDir)\n            : await provider.backup(prepared.snapshotDir);\n      meta = {\n        name: accountName,\n        provider: providerId,\n        createdAt: existing?.meta.createdAt ?? now,\n        updatedAt: now,\n        label:\n          opts.label ??\n          existing?.meta.label ??\n          fromProvider.label ??\n          (accountName === requestedAccountName\n            ? displayLabelFromName(name, accountName)\n            : undefined),\n        identity: fromProvider.identity ?? live.identity ?? existing?.meta.identity,\n        notes: opts.notes ?? existing?.meta.notes ?? fromProvider.notes,\n        credentialKind: fromProvider.credentialKind,\n      };\n      await this.store.writeMeta(meta);\n    } catch (err) {\n      if (existing) {\n        // Re-materialize the last committed DB snapshot after prepareSnapshot\n        // cleared its on-disk cache.\n        await this.store.getAccount(providerId, accountName).catch(() => null);\n      } else {\n        // A failed first save must not leave an empty account directory that\n        // can later be mistaken for a real login.\n        await rm(prepared.accountDir, { recursive: true, force: true }).catch(() => {});\n      }\n      throw err;\n    }\n\n    if (!(await this.store.getActive(providerId))) {\n      await this.store.setActive(providerId, accountName);\n    }\n\n    return meta;\n  }\n\n  /**\n   * Resolve the saved name for the auth material currently on disk.\n   *\n   * Existing identities always win so a refreshed token overwrites its saved\n   * snapshot instead of creating an alias such as \"default\". A new login gets\n   * a stable identity-derived name unless the caller supplied one.\n   */\n  async resolveCurrentSaveName(providerId: string, requestedName?: string): Promise<string> {\n    const provider = this.registry.get(providerId);\n    const live = await provider.detectLive();\n    if (!live.present) {\n      throw new AnyPickError(`No live ${provider.name} login to save.`, {\n        code: 'NO_LIVE_AUTH',\n        suggestions: ['Sign in with the official tool first, then try again.'],\n      });\n    }\n\n    if (live.identity) {\n      const existingName = await this.findAccountNameByIdentity(providerId, live.identity);\n      if (existingName) {\n        return existingName;\n      }\n    }\n\n    if (requestedName?.trim()) {\n      return normalizeAccountName(requestedName);\n    }\n\n    const active = await this.store.getActive(providerId);\n    if (active) {\n      const activeAccount = await this.store.getAccount(providerId, active);\n      if (\n        activeAccount &&\n        (!live.identity ||\n          (activeAccount.meta.identity &&\n            identitiesMatch(activeAccount.meta.identity, live.identity)))\n      ) {\n        return active;\n      }\n    }\n\n    if (live.identity) {\n      return accountNameFromIdentity(live.identity);\n    }\n\n    throw new AnyPickError(`Name the ${provider.name} login before saving it.`, {\n      code: 'MISSING_ACCOUNT_NAME',\n      suggestions: [`anypick add account ${providerId} --current --name <name>`],\n    });\n  }\n\n  /** Save current auth, reusing its existing account whenever possible. */\n  async saveCurrent(providerId: string, requestedName?: string): Promise<AccountMeta> {\n    const accountName = await this.resolveCurrentSaveName(providerId, requestedName);\n    return this.save(providerId, accountName, { force: true });\n  }\n\n  /**\n   * Switch live auth to a saved account.\n   * Stops the previous account's proxy, restores auth, starts the new proxy if enabled.\n   */\n  async use(\n    providerId: string,\n    name: string,\n    opts: { noRefresh?: boolean; noProxy?: boolean } = {},\n  ): Promise<SwitchResult> {\n    return withMutationLocks(this.store.root, [providerScope(providerId)], () =>\n      this.useLocked(providerId, name, opts),\n    );\n  }\n\n  private async useLocked(\n    providerId: string,\n    name: string,\n    opts: { noRefresh?: boolean; noProxy?: boolean },\n  ): Promise<SwitchResult> {\n    const provider = this.registry.get(providerId);\n    const accountName = normalizeAccountName(name);\n    const target = await this.store.requireAccount(providerId, accountName);\n\n    const previous = await this.store.getActive(providerId);\n    let refreshedPrevious = false;\n    let refreshedAccount: string | undefined;\n    if (target.meta.credentialKind !== 'proxy-only') {\n      await provider.preflightRestore?.(target.snapshotDir);\n    }\n    const checkpoint = await this.checkpointLiveAuth(providerId);\n    let previousProxyWasRunning = false;\n\n    try {\n      // Stop previous proxy before swapping auth / starting a new one.\n      if (previous && previous !== accountName && providerCanProxy(provider)) {\n        const previousStatus = await this.proxy.proxyStatus(providerId, previous);\n        previousProxyWasRunning = previousStatus.running;\n        await this.proxy.stopProxyForAccount(provider, previous);\n      }\n\n      if (!opts.noRefresh && previous && previous !== accountName) {\n        const live = await provider.detectLive();\n        // Activating a proxy-only account never displaced the native login, so\n        // there is nothing of its to preserve — and writing the live login into\n        // its snapshot would overwrite the credential the user typed in.\n        const previousMeta = await this.store.getAccount(providerId, previous);\n        if (live.present && previousMeta?.meta.credentialKind !== 'proxy-only') {\n          // Persist refreshed tokens into the account that actually owns the\n          // live identity. The active pointer may be stale after an external\n          // login change, so it must never choose the snapshot by itself.\n          refreshedAccount = await this.saveLiveIntoExistingAccount(providerId, previous);\n          refreshedPrevious = refreshedAccount === previous;\n        }\n      }\n\n      // A proxy-only snapshot holds no native login, so restoring it would at\n      // best write nothing and at worst let a provider that prunes stale\n      // credential files delete the real login. Only the proxy reads it.\n      if (target.meta.credentialKind !== 'proxy-only') {\n        await provider.restore(target.snapshotDir);\n      }\n      await this.store.setActive(providerId, accountName);\n\n      let proxy: SwitchResult['proxy'];\n      if (!opts.noProxy && providerCanProxy(provider)) {\n        const result = await this.proxy.startProxyForAccount(provider, accountName, target.proxy);\n        if (result.error) {\n          throw new AnyPickError(`Could not start the ${provider.name} proxy: ${result.error}`, {\n            code: 'PROXY_START_FAILED',\n          });\n        }\n        proxy = {\n          enabled: target.proxy.enabled,\n          running: result.running,\n          endpoint: result.endpoint,\n          compatibility: provider.proxyCompatibility,\n        };\n      } else {\n        proxy = { enabled: false, running: false };\n      }\n\n      return {\n        provider: providerId,\n        providerName: provider.name,\n        from: previous,\n        to: accountName,\n        refreshedPrevious,\n        refreshedAccount,\n        proxy,\n      };\n    } catch (err) {\n      try {\n        await this.restoreLiveAuthCheckpoint(checkpoint);\n        if (previousProxyWasRunning && previous && providerCanProxy(provider)) {\n          const prior = await this.store.requireAccount(providerId, previous);\n          await this.proxy.startProxyForAccount(provider, previous, prior.proxy);\n        }\n      } catch (rollbackErr) {\n        throw new AnyPickError(\n          `Account switch failed and rollback could not complete: ${rollbackErr instanceof Error ? rollbackErr.message : String(rollbackErr)}`,\n          'SWITCH_ROLLBACK_FAILED',\n        );\n      }\n      throw err;\n    } finally {\n      await this.discardLiveAuthCheckpoint(checkpoint);\n    }\n  }\n\n  /**\n   * Stash live auth: auto-backup (prefer matching email), then remove local\n   * live files so the tool allows a new login — WITHOUT server-side logout/revoke.\n   */\n  async stash(\n    providerId: string,\n    opts: {\n      /** Skip auto-backup before removing live files. */\n      noBackup?: boolean;\n      /** Force backup into this account name. */\n      as?: string;\n      /** Sign-in source to stash for providers that have more than one. */\n      source?: 'gemini-cli' | 'antigravity';\n    } = {},\n  ): Promise<{\n    provider: string;\n    cleared: boolean;\n    backedUpTo: string | null;\n    previousIdentity?: string;\n    /** True when backup reused an existing account with the same email. */\n    matchedByIdentity: boolean;\n    /** True when there was no live auth to back up (nothing to save). */\n    skippedBackup: boolean;\n  }> {\n    return withMutationLocks(this.store.root, [providerScope(providerId)], () =>\n      this.stashLocked(providerId, opts),\n    );\n  }\n\n  private async stashLocked(\n    providerId: string,\n    opts: {\n      noBackup?: boolean;\n      as?: string;\n      source?: 'gemini-cli' | 'antigravity';\n    },\n  ): Promise<{\n    provider: string;\n    cleared: boolean;\n    backedUpTo: string | null;\n    previousIdentity?: string;\n    matchedByIdentity: boolean;\n    skippedBackup: boolean;\n  }> {\n    const provider = this.registry.get(providerId);\n    const clear =\n      opts.source && provider.clearLiveSource\n        ? () => provider.clearLiveSource!(opts.source!)\n        : provider.clearLive\n          ? () => provider.clearLive!()\n          : null;\n    if (!clear) {\n      throw new AnyPickError(\n        `Provider \"${providerId}\" does not support stash (clear live auth).`,\n        'STASH_UNSUPPORTED',\n      );\n    }\n\n    const live =\n      opts.source && provider.detectLiveSource\n        ? await provider.detectLiveSource(opts.source)\n        : await provider.detectLive();\n    let backedUpTo: string | null = null;\n    let matchedByIdentity = false;\n    const previousIdentity = live.identity;\n    let skippedBackup = !live.present;\n\n    if (live.present && !opts.noBackup) {\n      const resolved = await this.resolveStashBackupTarget(providerId, live.identity, opts.as);\n      matchedByIdentity = resolved.matchedByIdentity;\n      try {\n        const meta = await this.save(providerId, resolved.name, {\n          force: true,\n          source: opts.source,\n        });\n        backedUpTo = meta.name;\n      } catch (err) {\n        // detectLive() may report a login from a Desktop/electron session while\n        // the actual auth.json file (the thing we back up) is absent. Treat that\n        // as \"nothing to back up\" rather than a hard failure.\n        if (isAnyPickError(err) && err.code === 'NO_LIVE_AUTH') {\n          skippedBackup = true;\n        } else if (isAnyPickError(err) && err.code === 'ACCOUNT_IDENTITY_EXISTS') {\n          // This is a user-resolvable naming conflict, not a failed backup.\n          throw err;\n        } else {\n          throw new AnyPickError(\n            `Could not back up the live ${provider.name} login before clearing it.`,\n            {\n              code: 'STASH_BACKUP_FAILED',\n              suggestions: [\n                `Fix whatever is blocking the live login, then try again.`,\n                `Or clear it without a backup (unsaved tokens will be lost): anypick add account ${providerId} --new --no-backup`,\n              ],\n            },\n          );\n        }\n      }\n    }\n\n    if (providerCanProxy(provider)) {\n      const active = await this.store.getActive(providerId);\n      if (active) {\n        try {\n          await this.proxy.stopProxyForAccount(provider, active);\n        } catch {\n          // continue\n        }\n      }\n    }\n\n    if (live.present) {\n      await clear();\n    }\n\n    return {\n      provider: providerId,\n      cleared: live.present,\n      backedUpTo,\n      previousIdentity,\n      matchedByIdentity,\n      skippedBackup,\n    };\n  }\n\n  /**\n   * Pick account name for stash auto-backup, preferring same-email reuse.\n   */\n  private async resolveStashBackupTarget(\n    providerId: string,\n    liveIdentity: string | undefined,\n    explicitAs?: string,\n  ): Promise<{ name: string; matchedByIdentity: boolean }> {\n    if (explicitAs) {\n      return {\n        name: normalizeAccountName(explicitAs),\n        matchedByIdentity: false,\n      };\n    }\n\n    if (liveIdentity) {\n      const byIdentity = await this.findAccountNameByIdentity(providerId, liveIdentity);\n      if (byIdentity) {\n        return { name: byIdentity, matchedByIdentity: true };\n      }\n    }\n\n    const active = await this.store.getActive(providerId);\n    if (active) {\n      const activeAccount = await this.store.getAccount(providerId, active);\n      // Reuse active only when identity matches or active has no identity yet\n      if (\n        !liveIdentity ||\n        !activeAccount?.meta.identity ||\n        identitiesMatch(activeAccount.meta.identity, liveIdentity)\n      ) {\n        return { name: active, matchedByIdentity: false };\n      }\n    }\n\n    if (liveIdentity) {\n      return {\n        name: accountNameFromIdentity(liveIdentity),\n        matchedByIdentity: false,\n      };\n    }\n\n    return { name: FALLBACK_ACCOUNT_NAME, matchedByIdentity: false };\n  }\n\n  private async findAccountNameByIdentity(\n    providerId: string,\n    identity: string,\n  ): Promise<string | null> {\n    const accounts = await this.store.listAccounts(providerId);\n    for (const a of accounts) {\n      if (a.meta.identity && identitiesMatch(a.meta.identity, identity)) {\n        return a.meta.name;\n      }\n    }\n    return null;\n  }\n\n  /**\n   * Save live auth only into an already-saved account.\n   *\n   * Switching must never invent a new account or overwrite a stale active\n   * pointer with another identity. An unsaved login is blocked so the caller\n   * can explicitly name/save it before replacing the live auth file.\n   */\n  private async saveLiveIntoExistingAccount(\n    providerId: string,\n    fallbackActiveName: string,\n  ): Promise<string> {\n    const provider = this.registry.get(providerId);\n    const live = await provider.detectLive();\n    if (!live.present) {\n      throw new AnyPickError(`No live ${provider.name} login to preserve.`, 'NO_LIVE_AUTH');\n    }\n\n    let targetName = live.identity\n      ? await this.findAccountNameByIdentity(providerId, live.identity)\n      : null;\n\n    if (!targetName && !live.identity) {\n      const accounts = await this.store.listAccounts(providerId);\n      // Prefer the active snapshot only after credential material proves it\n      // owns the live login. The active DB pointer is state, not identity.\n      const ordered = accounts.toSorted((a, b) => {\n        if (a.meta.name === fallbackActiveName) {\n          return -1;\n        }\n        if (b.meta.name === fallbackActiveName) {\n          return 1;\n        }\n        return a.meta.name.localeCompare(b.meta.name);\n      });\n      for (const account of ordered) {\n        if ((await computeLiveMatch(provider, account, live)) === true) {\n          targetName = account.meta.name;\n          break;\n        }\n      }\n    }\n\n    if (!targetName) {\n      throw new AnyPickError(\n        `The live ${provider.name} login${live.identity ? ` (${live.identity})` : ''} is not saved yet.`,\n        {\n          code: 'UNSAVED_LIVE_AUTH',\n          suggestions: [\n            `Save it first: anypick add account ${providerId} --current${\n              live.identity ? '' : ' --name <name>'\n            }`,\n          ],\n        },\n      );\n    }\n\n    const meta = await this.save(providerId, targetName, { force: true });\n    return meta.name;\n  }\n\n  /** Resolve a duplicate identity to its existing local account after confirmation. */\n  private async resolveIdentityTarget(\n    providerId: string,\n    identity: string | undefined,\n    accountName: string,\n    allowOverwrite: boolean,\n  ): Promise<string> {\n    if (!identity?.trim()) {\n      return accountName;\n    }\n    const existingName = await this.findAccountNameByIdentity(providerId, identity);\n    if (existingName && existingName !== accountName) {\n      if (allowOverwrite) {\n        return existingName;\n      }\n      throw new AnyPickError(\n        `Login ${identity} is already saved as ${providerId}/${existingName}.`,\n        {\n          code: 'ACCOUNT_IDENTITY_EXISTS',\n          suggestions: [`Use ${providerId}/${existingName} instead of saving a duplicate.`],\n          details: { provider: providerId, identity, existingName },\n        },\n      );\n    }\n    return accountName;\n  }\n\n  /**\n   * Refresh OAuth/OIDC tokens.\n   *\n   * - `refresh codex` → live auth (+ sync into active saved account if any)\n   * - `refresh codex lucy` → saved snapshot `lucy` (+ restore to live if active)\n   * - `refresh codex --all` → every saved account for a provider\n   */\n  async refresh(\n    providerId: string,\n    name?: string,\n    opts: { all?: boolean } = {},\n  ): Promise<\n    Array<{\n      target: string;\n      identity?: string;\n      ok: boolean;\n      error?: string;\n    }>\n  > {\n    return withMutationLocks(this.store.root, [providerScope(providerId)], () =>\n      this.refreshLocked(providerId, name, opts),\n    );\n  }\n\n  private async refreshLocked(\n    providerId: string,\n    name: string | undefined,\n    opts: { all?: boolean },\n  ): Promise<\n    Array<{\n      target: string;\n      identity?: string;\n      ok: boolean;\n      error?: string;\n    }>\n  > {\n    const provider = this.registry.get(providerId);\n    if (!provider.refreshAuth) {\n      throw new AnyPickError(\n        `Provider \"${providerId}\" does not support token refresh.`,\n        'REFRESH_UNSUPPORTED',\n      );\n    }\n\n    const results: Array<{\n      target: string;\n      identity?: string;\n      ok: boolean;\n      error?: string;\n    }> = [];\n\n    if (opts.all) {\n      const accounts = await this.store.listAccounts(providerId);\n      for (const a of accounts) {\n        results.push(await this.refreshSavedAccount(provider, a.meta.name));\n      }\n      if (results.length === 0) {\n        throw new AnyPickError(`No saved accounts for ${providerId}.`, 'REFRESH_EMPTY');\n      }\n      return results;\n    }\n\n    if (name) {\n      results.push(await this.refreshSavedAccount(provider, normalizeAccountName(name)));\n      return results;\n    }\n\n    // Default: refresh live auth\n    results.push(await this.refreshLiveAuth(provider));\n    return results;\n  }\n\n  private async refreshSavedAccount(\n    provider: Provider,\n    accountName: string,\n  ): Promise<{\n    target: string;\n    identity?: string;\n    ok: boolean;\n    error?: string;\n  }> {\n    const target = `${provider.id}/${accountName}`;\n    try {\n      const account = await this.store.requireAccount(provider.id, accountName);\n      const from = await provider.refreshAuth!(account.snapshotDir);\n      const meta = {\n        ...account.meta,\n        updatedAt: new Date().toISOString(),\n        identity: from.identity ?? account.meta.identity,\n      };\n      await this.store.writeMeta(meta);\n\n      const active = await this.store.getActive(provider.id);\n      if (active === accountName) {\n        await provider.restore(account.snapshotDir);\n      }\n\n      return { target, identity: meta.identity, ok: true };\n    } catch (err) {\n      return {\n        target,\n        ok: false,\n        error: err instanceof Error ? err.message : String(err),\n      };\n    }\n  }\n\n  private async refreshLiveAuth(provider: Provider): Promise<{\n    target: string;\n    identity?: string;\n    ok: boolean;\n    error?: string;\n  }> {\n    const target = `${provider.id}/live`;\n    try {\n      const live = await provider.detectLive();\n      if (!live.present) {\n        // Fall back to active saved account\n        const active = await this.store.getActive(provider.id);\n        if (active) {\n          return this.refreshSavedAccount(provider, active);\n        }\n        return {\n          target,\n          ok: false,\n          error: 'No live auth and no active account.',\n        };\n      }\n\n      const dir = await mkdtemp(join(tmpdir(), 'anypick-refresh-'));\n      try {\n        await provider.backup(dir);\n        const from = await provider.refreshAuth!(dir);\n        await provider.restore(dir);\n\n        // Sync the refreshed live login into the account that owns it — not\n        // blindly into whichever account is active. A provider whose live auth\n        // is a single global slot (Gemini reads one Antigravity keychain item\n        // for every account) would otherwise let an out-of-band sign-in\n        // overwrite an unrelated account's snapshot with someone else's token.\n        const active = await this.store.getActive(provider.id);\n        let syncError: string | undefined;\n        if (active) {\n          try {\n            await this.saveLiveIntoExistingAccount(provider.id, active);\n          } catch (err) {\n            syncError = err instanceof Error ? err.message : String(err);\n          }\n        }\n\n        return {\n          target,\n          identity: from.identity ?? live.identity,\n          ok: !syncError,\n          ...(syncError\n            ? { error: `Live auth refreshed, but saved account sync failed: ${syncError}` }\n            : {}),\n        };\n      } finally {\n        await rm(dir, { recursive: true, force: true });\n      }\n    } catch (err) {\n      return {\n        target,\n        ok: false,\n        error: err instanceof Error ? err.message : String(err),\n      };\n    }\n  }\n\n  /** Update display metadata without touching the credential snapshot bytes. */\n  async edit(\n    providerId: string,\n    name: string,\n    opts: { label?: string | null },\n  ): Promise<AccountMeta> {\n    const accountName = normalizeAccountName(name);\n    return withMutationLocks(this.store.root, [providerScope(providerId)], async () => {\n      const account = await this.store.requireAccount(providerId, accountName);\n      const label = opts.label === null ? undefined : opts.label?.trim() || account.meta.label;\n      const meta: AccountMeta = {\n        ...account.meta,\n        label,\n        updatedAt: new Date().toISOString(),\n      };\n      // writeMeta remains the atomic commit point (ADR 0004). requireAccount\n      // materialized the complete snapshot before this metadata-only rewrite.\n      await this.store.writeMeta(meta);\n      return meta;\n    });\n  }\n\n  async delete(providerId: string, name: string): Promise<void> {\n    const provider = this.registry.get(providerId);\n    const accountName = normalizeAccountName(name);\n    await withMutationLocks(this.store.root, [providerScope(providerId)], async () => {\n      if (providerCanProxy(provider)) {\n        await this.proxy.stopProxyForAccount(provider, accountName);\n      }\n      await this.store.deleteAccount(providerId, accountName);\n    });\n    // Outside the provider lock: Hub/pool scopes are different and re-entry\n    // across services is fine. Best-effort so a hub write failure cannot\n    // resurrect the account row.\n    try {\n      await this.afterDelete?.(providerId, accountName);\n    } catch {\n      // Caller already got a successful delete; residual hub rows are\n      // recoverable via doctor / next hub edit.\n    }\n  }\n\n  // ── Export / import ─────────────────────────────────────────────\n\n  async exportAccount(providerId: string, name: string, outPath: string): Promise<void> {\n    await exportAccountEnvelope(this.store, providerId, name, outPath);\n  }\n\n  async importAccount(\n    providerId: string,\n    name: string,\n    inPath: string,\n    opts: { force?: boolean } = {},\n  ): Promise<AccountMeta> {\n    return withMutationLocks(this.store.root, [providerScope(providerId)], async () => {\n      const provider = this.registry.get(providerId);\n      return importAccountEnvelope(\n        {\n          store: this.store,\n          provider,\n          resolveIdentityTarget: (pid, identity, accountName, force) =>\n            this.resolveIdentityTarget(pid, identity, accountName, force),\n        },\n        providerId,\n        name,\n        inPath,\n        opts,\n      );\n    });\n  }\n}\n\nfunction identitiesMatch(a: string, b: string): boolean {\n  return a.trim().toLowerCase() === b.trim().toLowerCase();\n}\n\n/**\n * Whether a saved snapshot's auth material matches the current live login.\n * Capsule: delegates to the provider (which owns the fingerprint logic) and\n * falls back to identity equality when the provider does not implement it.\n */\nasync function computeLiveMatch(\n  provider: Provider,\n  account: Account,\n  knownLive?: LiveAuthStatus,\n): Promise<boolean | null> {\n  // A proxy-only credential never occupies the provider's live login file, so\n  // it cannot be what is on disk no matter what the fingerprint says.\n  if (account.meta.credentialKind === 'proxy-only') {\n    return false;\n  }\n  const { snapshotDir } = account;\n  if (typeof provider.snapshotMatchesLive === 'function') {\n    try {\n      return await provider.snapshotMatchesLive(snapshotDir);\n    } catch (err) {\n      if (isAnyPickError(err) && err.code === 'NOT_DETERMINABLE') {\n        return null;\n      }\n      // fall through to identity-based fallback\n    }\n  }\n  const live = knownLive ?? (await provider.detectLive());\n  if (!live.identity) {\n    return false;\n  }\n  const described = provider.describeSnapshot ? await provider.describeSnapshot(snapshotDir) : {};\n  return described.identity != null && identitiesMatch(described.identity, live.identity);\n}\n\n/**\n * Derive a stable account slug from an email / identity string.\n *\n * Falls back to the same generic name the caller uses when there is no identity\n * at all: an identity that slugifies to nothing (all punctuation, non-Latin\n * script) is not a failure the user can act on, and refusing here would block\n * saving a real login over a cosmetic naming problem. `--name` overrides it.\n */\nfunction accountNameFromIdentity(identity: string): string {\n  const trimmed = identity.trim();\n  const local = trimmed.includes('@') ? trimmed.split('@')[0] : trimmed;\n  try {\n    return normalizeAccountName(local);\n  } catch {\n    return FALLBACK_ACCOUNT_NAME;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA0BA,IAAM,wBAAwB;;;;;;;;;AAqD9B,IAAa,iBAAb,MAA4B;CAmBP;CACA;;CAlBnB;;;;;;CAOA;;;;;;;;CASA,YACE,OACA,UACA,OACA;EAHiB,KAAA,QAAA;EACA,KAAA,WAAA;EAGjB,KAAK,QAAQ,SAAS,IAAI,aAAa,OAAO,QAAQ;CACxD;CAEA,eAAe,IAAsE;EACnF,KAAK,cAAc;CACrB;CAEA,SAAS,IAAsB;EAC7B,OAAO,KAAK,SAAS,IAAI,EAAE;CAC7B;CAEA,gBAA4B;EAC1B,OAAO,KAAK,SAAS,KAAK;CAC5B;;CAGA,MAAM,UAAU,YAA4C;EAC1D,OAAO,KAAK,MAAM,UAAU,UAAU;CACxC;;CAGA,MAAM,IAAI,YAAoB,MAAuC;EACnE,OAAO,KAAK,MAAM,WAAW,YAAY,qBAAqB,IAAI,CAAC;CACrE;;CAGA,MAAM,mBAAmB,YAAoB,UAA0C;EACrF,OAAO,KAAK,0BAA0B,YAAY,QAAQ;CAC5D;;;;;CAMA,MAAM,mBACJ,YACA,OAA8B,CAAC,GACF;EAC7B,MAAM,WAAW,KAAK,SAAS,IAAI,UAAU;EAC7C,MAAM,iBAAiB,KAAK,UAAU,KAAK,KAAK,MAAM,MAAM,YAAY,WAAW,IAAI,OAAO;EAC9F,MAAM,MAAM,gBAAgB;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EAC5D,MAAM,YAAY,MAAM,QAAQ,KAAK,gBAAgB,0BAA0B,CAAC;EAChF,IAAI;GACF,MAAM,gBAAgB,MAAM,KAAK,MAAM,UAAU,UAAU;GAC3D,MAAM,OAAO,MAAM,SAAS,WAAW;GACvC,IAAI,KAAK,SACP,MAAM,SAAS,OAAO,SAAS;GAEjC,OAAO;IAAE;IAAY;IAAe,aAAa,KAAK;IAAS;GAAU;EAC3E,SAAS,KAAK;GACZ,MAAM,GAAG,WAAW;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC;GACpD,MAAM;EACR;CACF;;CAGA,MAAM,0BAA0B,YAA+C;EAC7E,MAAM,WAAW,KAAK,SAAS,IAAI,WAAW,UAAU;EACxD,IAAI,WAAW,aACb,MAAM,SAAS,QAAQ,WAAW,SAAS;OACtC,IAAI,SAAS,WAClB,MAAM,SAAS,UAAU;OAEzB,MAAM,IAAI,aACR,2BAA2B,SAAS,KAAK,uBACzC,6BACF;EAEF,IAAI,WAAW,eACb,MAAM,KAAK,MAAM,UAAU,WAAW,YAAY,WAAW,aAAa;OAE1E,MAAM,KAAK,MAAM,YAAY,WAAW,UAAU;CAEtD;CAEA,MAAM,0BAA0B,YAA+C;EAC7E,MAAM,GAAG,WAAW,WAAW;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;CACjE;CAEA,MAAM,KAAK,YAA+C;EACxD,MAAM,YAAY,aAAa,CAAC,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,KAAK;EAEpF,MAAM,MAAuB,CAAC;EAC9B,KAAK,MAAM,KAAK,WAAW;GACzB,MAAM,SAAS,MAAM,KAAK,MAAM,UAAU,EAAE,EAAE;GAC9C,MAAM,WAAW,MAAM,KAAK,MAAM,aAAa,EAAE,EAAE;GACnD,MAAM,OAAO,MAAM,EAAE,WAAW;GAChC,MAAM,kBAAkB,MAAM,QAAQ,IACpC,SAAS,KAAK,YAAY,iBAAiB,GAAG,SAAS,IAAI,CAAC,CAC9D;GACA,MAAM,eAAe,SAClB,QAAQ,GAAG,UAAU,gBAAgB,WAAW,IAAI,CAAC,CACrD,KAAK,YAAY,QAAQ,KAAK,IAAI;GACrC,IAAI,mBACD,UAAU,aAAa,SAAS,MAAM,IAAI,SAAS,aAAa,OAAO;GAK1E,MAAM,eAAe,KAAK;GAC1B,IAAI,CAAC,mBAAmB,cAAc;IACpC,MAAM,kBAAkB,SACrB,QACE,YACC,QAAQ,KAAK,mBAAmB,gBAChC,QAAQ,KAAK,YACb,gBAAgB,QAAQ,KAAK,UAAU,YAAY,CACvD,CAAC,CACA,KAAK,YAAY,QAAQ,KAAK,IAAI;IACrC,mBACG,UAAU,gBAAgB,SAAS,MAAM,IAAI,SAAS,gBAAgB,OAAO;GAClF;GAIA,IAAI,CAAC,mBAAmB,UAAU,KAAK,SAAS;IAC9C,MAAM,cAAc,SAAS,WAAW,YAAY,QAAQ,KAAK,SAAS,MAAM;IAChF,IAAI,eAAe,KAAK,gBAAgB,iBAAiB,MACvD,kBAAkB;GAEtB;GAEA,KAAK,MAAM,CAAC,OAAO,MAAM,SAAS,QAAQ,GAAG;IAC3C,MAAM,cACJ,iBAAiB,CAAC,KAAK,EAAE,MAAM,UAC3B,MAAM,KAAK,MAAM,YAAY,EAAE,IAAI,EAAE,KAAK,IAAI,IAC9C;IACN,IAAI,KAAK;KACP,MAAM,EAAE,KAAK;KACb,UAAU,EAAE;KACZ,UAAU,EAAE,KAAK;KACjB,OAAO,EAAE,KAAK;KACd,QAAQ,WAAW,EAAE,KAAK;KAC1B,WAAW,EAAE,KAAK;KAClB,WAAW,EAAE,KAAK;KAClB,cAAc,EAAE,MAAM;KACtB,cAAc,aAAa,WAAW;KACtC,aAAa,oBAAoB,EAAE,KAAK;KACxC,gBAAgB,gBAAgB,WAAW;IAC7C,CAAC;GACH;EACF;EACA,OAAO;CACT;CAEA,MAAM,QAAQ,YAOX;EACD,MAAM,WAAW,KAAK,SAAS,IAAI,UAAU;EAC7C,MAAM,SAAS,MAAM,KAAK,MAAM,UAAU,UAAU;EACpD,MAAM,OAAO,MAAM,SAAS,WAAW;EACvC,MAAM,UAAU,SAAS,MAAM,KAAK,MAAM,WAAW,YAAY,MAAM,IAAI;EAC3E,MAAM,QACJ,iBAAiB,QAAQ,KAAK,UAC1B,MAAM,KAAK,MAAM,YAAY,YAAY,QAAQ,KAAK,IAAI,IAC1D;EACN,MAAM,YAAY,UAAU,MAAM,iBAAiB,UAAU,SAAS,IAAI,IAAI;EAC9E,IAAI,cAAc,cAAc,QAAS,cAAc,QAAQ,WAAW,QAAQ,KAAK;EACvF,IACE,CAAC,eACD,SAAS,KAAK,mBAAmB,gBACjC,SAAS,KAAK,YACd,KAAK,YACL,gBAAgB,QAAQ,KAAK,UAAU,KAAK,QAAQ,GAEpD,cAAc;EAEhB,OAAO;GAAE;GAAQ;GAAM;GAAS;GAAO;GAAa,gBAAgB,cAAc;EAAK;CACzF;;CAGA,MAAM,UAAU,YAA+C;EAC7D,MAAM,WAAW,KAAK,SAAS,IAAI,UAAU;EAC7C,OAAO,SAAS,YAAY,SAAS,UAAU,IAAI;CACrD;;;;;;CAOA,MAAM,KACJ,YACA,MACA,OAOI,CAAC,GACiB;EAItB,OAAO,kBAAkB,KAAK,MAAM,MAAM,CAAC,cAAc,UAAU,CAAC,SAClE,KAAK,WAAW,YAAY,MAAM,IAAI,CACxC;CACF;CAEA,MAAc,WACZ,YACA,MACA,MAQsB;EACtB,MAAM,WAAW,KAAK,SAAS,IAAI,UAAU;EAC7C,MAAM,uBAAuB,qBAAqB,IAAI;EACtD,IAAI,cAAc;EAElB,IAAI,KAAK,SAAS,CAAC,SAAS,aAC1B,MAAM,IAAI,aACR,GAAG,SAAS,KAAK,qBAAqB,KAAK,MAAM,KAAK,eACtD,8BACF;EAKF,MAAM,OAAuB,KAAK,QAC9B,EAAE,SAAS,KAAK,IAChB,KAAK,UAAU,SAAS,mBACtB,MAAM,SAAS,iBAAiB,KAAK,MAAM,IAC3C,MAAM,SAAS,WAAW;EAChC,IAAI,CAAC,KAAK,SACR,MAAM,IAAI,aAAa,WAAW,SAAS,KAAK,kBAAkB;GAChE,MAAM;GACN,aAAa,CACX,mEACA,iEAAiE,WAAW,mBAC9E;EACF,CAAC;EAMH,cAAc,MAAM,KAAK,sBACvB,YACA,KAAK,UACL,aACA,KAAK,UAAU,IACjB;EAEA,MAAM,WAAW,MAAM,KAAK,MAAM,WAAW,YAAY,WAAW;EACpE,IAAI,CAAC,KAAK,SAAS,UAAU,KAAK,mBAAmB,cACnD,MAAM,IAAI,aACR,GAAG,WAAW,GAAG,YAAY,iEAC7B;GACE,MAAM;GACN,aAAa,CACX,+CACA,uEACF;EACF,CACF;EAGF,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,WAAW,MAAM,KAAK,MAAM,gBAAgB,YAAY,WAAW;EACzE,IAAI;EACJ,IAAI;GACF,MAAM,eACJ,KAAK,SAAS,SAAS,cACnB,MAAM,SAAS,YAAY,KAAK,OAAO,SAAS,WAAW,IAC3D,KAAK,UAAU,SAAS,eACtB,MAAM,SAAS,aAAa,KAAK,QAAQ,SAAS,WAAW,IAC7D,MAAM,SAAS,OAAO,SAAS,WAAW;GAClD,OAAO;IACL,MAAM;IACN,UAAU;IACV,WAAW,UAAU,KAAK,aAAa;IACvC,WAAW;IACX,OACE,KAAK,SACL,UAAU,KAAK,SACf,aAAa,UACZ,gBAAgB,uBACb,qBAAqB,MAAM,WAAW,IACtC,KAAA;IACN,UAAU,aAAa,YAAY,KAAK,YAAY,UAAU,KAAK;IACnE,OAAO,KAAK,SAAS,UAAU,KAAK,SAAS,aAAa;IAC1D,gBAAgB,aAAa;GAC/B;GACA,MAAM,KAAK,MAAM,UAAU,IAAI;EACjC,SAAS,KAAK;GACZ,IAAI,UAGF,MAAM,KAAK,MAAM,WAAW,YAAY,WAAW,CAAC,CAAC,YAAY,IAAI;QAIrE,MAAM,GAAG,SAAS,YAAY;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;GAEhF,MAAM;EACR;EAEA,IAAI,CAAE,MAAM,KAAK,MAAM,UAAU,UAAU,GACzC,MAAM,KAAK,MAAM,UAAU,YAAY,WAAW;EAGpD,OAAO;CACT;;;;;;;;CASA,MAAM,uBAAuB,YAAoB,eAAyC;EACxF,MAAM,WAAW,KAAK,SAAS,IAAI,UAAU;EAC7C,MAAM,OAAO,MAAM,SAAS,WAAW;EACvC,IAAI,CAAC,KAAK,SACR,MAAM,IAAI,aAAa,WAAW,SAAS,KAAK,kBAAkB;GAChE,MAAM;GACN,aAAa,CAAC,uDAAuD;EACvE,CAAC;EAGH,IAAI,KAAK,UAAU;GACjB,MAAM,eAAe,MAAM,KAAK,0BAA0B,YAAY,KAAK,QAAQ;GACnF,IAAI,cACF,OAAO;EAEX;EAEA,IAAI,eAAe,KAAK,GACtB,OAAO,qBAAqB,aAAa;EAG3C,MAAM,SAAS,MAAM,KAAK,MAAM,UAAU,UAAU;EACpD,IAAI,QAAQ;GACV,MAAM,gBAAgB,MAAM,KAAK,MAAM,WAAW,YAAY,MAAM;GACpE,IACE,kBACC,CAAC,KAAK,YACJ,cAAc,KAAK,YAClB,gBAAgB,cAAc,KAAK,UAAU,KAAK,QAAQ,IAE9D,OAAO;EAEX;EAEA,IAAI,KAAK,UACP,OAAO,wBAAwB,KAAK,QAAQ;EAG9C,MAAM,IAAI,aAAa,YAAY,SAAS,KAAK,2BAA2B;GAC1E,MAAM;GACN,aAAa,CAAC,uBAAuB,WAAW,yBAAyB;EAC3E,CAAC;CACH;;CAGA,MAAM,YAAY,YAAoB,eAA8C;EAClF,MAAM,cAAc,MAAM,KAAK,uBAAuB,YAAY,aAAa;EAC/E,OAAO,KAAK,KAAK,YAAY,aAAa,EAAE,OAAO,KAAK,CAAC;CAC3D;;;;;CAMA,MAAM,IACJ,YACA,MACA,OAAmD,CAAC,GAC7B;EACvB,OAAO,kBAAkB,KAAK,MAAM,MAAM,CAAC,cAAc,UAAU,CAAC,SAClE,KAAK,UAAU,YAAY,MAAM,IAAI,CACvC;CACF;CAEA,MAAc,UACZ,YACA,MACA,MACuB;EACvB,MAAM,WAAW,KAAK,SAAS,IAAI,UAAU;EAC7C,MAAM,cAAc,qBAAqB,IAAI;EAC7C,MAAM,SAAS,MAAM,KAAK,MAAM,eAAe,YAAY,WAAW;EAEtE,MAAM,WAAW,MAAM,KAAK,MAAM,UAAU,UAAU;EACtD,IAAI,oBAAoB;EACxB,IAAI;EACJ,IAAI,OAAO,KAAK,mBAAmB,cACjC,MAAM,SAAS,mBAAmB,OAAO,WAAW;EAEtD,MAAM,aAAa,MAAM,KAAK,mBAAmB,UAAU;EAC3D,IAAI,0BAA0B;EAE9B,IAAI;GAEF,IAAI,YAAY,aAAa,eAAe,iBAAiB,QAAQ,GAAG;IAEtE,2BAA0B,MADG,KAAK,MAAM,YAAY,YAAY,QAAQ,EAAA,CAC/B;IACzC,MAAM,KAAK,MAAM,oBAAoB,UAAU,QAAQ;GACzD;GAEA,IAAI,CAAC,KAAK,aAAa,YAAY,aAAa,aAAa;IAC3D,MAAM,OAAO,MAAM,SAAS,WAAW;IAIvC,MAAM,eAAe,MAAM,KAAK,MAAM,WAAW,YAAY,QAAQ;IACrE,IAAI,KAAK,WAAW,cAAc,KAAK,mBAAmB,cAAc;KAItE,mBAAmB,MAAM,KAAK,4BAA4B,YAAY,QAAQ;KAC9E,oBAAoB,qBAAqB;IAC3C;GACF;GAKA,IAAI,OAAO,KAAK,mBAAmB,cACjC,MAAM,SAAS,QAAQ,OAAO,WAAW;GAE3C,MAAM,KAAK,MAAM,UAAU,YAAY,WAAW;GAElD,IAAI;GACJ,IAAI,CAAC,KAAK,WAAW,iBAAiB,QAAQ,GAAG;IAC/C,MAAM,SAAS,MAAM,KAAK,MAAM,qBAAqB,UAAU,aAAa,OAAO,KAAK;IACxF,IAAI,OAAO,OACT,MAAM,IAAI,aAAa,uBAAuB,SAAS,KAAK,UAAU,OAAO,SAAS,EACpF,MAAM,qBACR,CAAC;IAEH,QAAQ;KACN,SAAS,OAAO,MAAM;KACtB,SAAS,OAAO;KAChB,UAAU,OAAO;KACjB,eAAe,SAAS;IAC1B;GACF,OACE,QAAQ;IAAE,SAAS;IAAO,SAAS;GAAM;GAG3C,OAAO;IACL,UAAU;IACV,cAAc,SAAS;IACvB,MAAM;IACN,IAAI;IACJ;IACA;IACA;GACF;EACF,SAAS,KAAK;GACZ,IAAI;IACF,MAAM,KAAK,0BAA0B,UAAU;IAC/C,IAAI,2BAA2B,YAAY,iBAAiB,QAAQ,GAAG;KACrE,MAAM,QAAQ,MAAM,KAAK,MAAM,eAAe,YAAY,QAAQ;KAClE,MAAM,KAAK,MAAM,qBAAqB,UAAU,UAAU,MAAM,KAAK;IACvE;GACF,SAAS,aAAa;IACpB,MAAM,IAAI,aACR,0DAA0D,uBAAuB,QAAQ,YAAY,UAAU,OAAO,WAAW,KACjI,wBACF;GACF;GACA,MAAM;EACR,UAAU;GACR,MAAM,KAAK,0BAA0B,UAAU;EACjD;CACF;;;;;CAMA,MAAM,MACJ,YACA,OAOI,CAAC,GAUJ;EACD,OAAO,kBAAkB,KAAK,MAAM,MAAM,CAAC,cAAc,UAAU,CAAC,SAClE,KAAK,YAAY,YAAY,IAAI,CACnC;CACF;CAEA,MAAc,YACZ,YACA,MAYC;EACD,MAAM,WAAW,KAAK,SAAS,IAAI,UAAU;EAC7C,MAAM,QACJ,KAAK,UAAU,SAAS,wBACd,SAAS,gBAAiB,KAAK,MAAO,IAC5C,SAAS,kBACD,SAAS,UAAW,IAC1B;EACR,IAAI,CAAC,OACH,MAAM,IAAI,aACR,aAAa,WAAW,8CACxB,mBACF;EAGF,MAAM,OACJ,KAAK,UAAU,SAAS,mBACpB,MAAM,SAAS,iBAAiB,KAAK,MAAM,IAC3C,MAAM,SAAS,WAAW;EAChC,IAAI,aAA4B;EAChC,IAAI,oBAAoB;EACxB,MAAM,mBAAmB,KAAK;EAC9B,IAAI,gBAAgB,CAAC,KAAK;EAE1B,IAAI,KAAK,WAAW,CAAC,KAAK,UAAU;GAClC,MAAM,WAAW,MAAM,KAAK,yBAAyB,YAAY,KAAK,UAAU,KAAK,EAAE;GACvF,oBAAoB,SAAS;GAC7B,IAAI;IAKF,cAAa,MAJM,KAAK,KAAK,YAAY,SAAS,MAAM;KACtD,OAAO;KACP,QAAQ,KAAK;IACf,CAAC,EAAA,CACiB;GACpB,SAAS,KAAK;IAIZ,IAAI,eAAe,GAAG,KAAK,IAAI,SAAS,gBACtC,gBAAgB;SACX,IAAI,eAAe,GAAG,KAAK,IAAI,SAAS,2BAE7C,MAAM;SAEN,MAAM,IAAI,aACR,8BAA8B,SAAS,KAAK,6BAC5C;KACE,MAAM;KACN,aAAa,CACX,4DACA,mFAAmF,WAAW,mBAChG;IACF,CACF;GAEJ;EACF;EAEA,IAAI,iBAAiB,QAAQ,GAAG;GAC9B,MAAM,SAAS,MAAM,KAAK,MAAM,UAAU,UAAU;GACpD,IAAI,QACF,IAAI;IACF,MAAM,KAAK,MAAM,oBAAoB,UAAU,MAAM;GACvD,QAAQ,CAER;EAEJ;EAEA,IAAI,KAAK,SACP,MAAM,MAAM;EAGd,OAAO;GACL,UAAU;GACV,SAAS,KAAK;GACd;GACA;GACA;GACA;EACF;CACF;;;;CAKA,MAAc,yBACZ,YACA,cACA,YACuD;EACvD,IAAI,YACF,OAAO;GACL,MAAM,qBAAqB,UAAU;GACrC,mBAAmB;EACrB;EAGF,IAAI,cAAc;GAChB,MAAM,aAAa,MAAM,KAAK,0BAA0B,YAAY,YAAY;GAChF,IAAI,YACF,OAAO;IAAE,MAAM;IAAY,mBAAmB;GAAK;EAEvD;EAEA,MAAM,SAAS,MAAM,KAAK,MAAM,UAAU,UAAU;EACpD,IAAI,QAAQ;GACV,MAAM,gBAAgB,MAAM,KAAK,MAAM,WAAW,YAAY,MAAM;GAEpE,IACE,CAAC,gBACD,CAAC,eAAe,KAAK,YACrB,gBAAgB,cAAc,KAAK,UAAU,YAAY,GAEzD,OAAO;IAAE,MAAM;IAAQ,mBAAmB;GAAM;EAEpD;EAEA,IAAI,cACF,OAAO;GACL,MAAM,wBAAwB,YAAY;GAC1C,mBAAmB;EACrB;EAGF,OAAO;GAAE,MAAM;GAAuB,mBAAmB;EAAM;CACjE;CAEA,MAAc,0BACZ,YACA,UACwB;EACxB,MAAM,WAAW,MAAM,KAAK,MAAM,aAAa,UAAU;EACzD,KAAK,MAAM,KAAK,UACd,IAAI,EAAE,KAAK,YAAY,gBAAgB,EAAE,KAAK,UAAU,QAAQ,GAC9D,OAAO,EAAE,KAAK;EAGlB,OAAO;CACT;;;;;;;;CASA,MAAc,4BACZ,YACA,oBACiB;EACjB,MAAM,WAAW,KAAK,SAAS,IAAI,UAAU;EAC7C,MAAM,OAAO,MAAM,SAAS,WAAW;EACvC,IAAI,CAAC,KAAK,SACR,MAAM,IAAI,aAAa,WAAW,SAAS,KAAK,sBAAsB,cAAc;EAGtF,IAAI,aAAa,KAAK,WAClB,MAAM,KAAK,0BAA0B,YAAY,KAAK,QAAQ,IAC9D;EAEJ,IAAI,CAAC,cAAc,CAAC,KAAK,UAAU;GAIjC,MAAM,WAAU,MAHO,KAAK,MAAM,aAAa,UAAU,EAAA,CAGhC,UAAU,GAAG,MAAM;IAC1C,IAAI,EAAE,KAAK,SAAS,oBAClB,OAAO;IAET,IAAI,EAAE,KAAK,SAAS,oBAClB,OAAO;IAET,OAAO,EAAE,KAAK,KAAK,cAAc,EAAE,KAAK,IAAI;GAC9C,CAAC;GACD,KAAK,MAAM,WAAW,SACpB,IAAK,MAAM,iBAAiB,UAAU,SAAS,IAAI,MAAO,MAAM;IAC9D,aAAa,QAAQ,KAAK;IAC1B;GACF;EAEJ;EAEA,IAAI,CAAC,YACH,MAAM,IAAI,aACR,YAAY,SAAS,KAAK,QAAQ,KAAK,WAAW,KAAK,KAAK,SAAS,KAAK,GAAG,qBAC7E;GACE,MAAM;GACN,aAAa,CACX,sCAAsC,WAAW,YAC/C,KAAK,WAAW,KAAK,kBAEzB;EACF,CACF;EAIF,QAAO,MADY,KAAK,KAAK,YAAY,YAAY,EAAE,OAAO,KAAK,CAAC,EAAA,CACxD;CACd;;CAGA,MAAc,sBACZ,YACA,UACA,aACA,gBACiB;EACjB,IAAI,CAAC,UAAU,KAAK,GAClB,OAAO;EAET,MAAM,eAAe,MAAM,KAAK,0BAA0B,YAAY,QAAQ;EAC9E,IAAI,gBAAgB,iBAAiB,aAAa;GAChD,IAAI,gBACF,OAAO;GAET,MAAM,IAAI,aACR,SAAS,SAAS,uBAAuB,WAAW,GAAG,aAAa,IACpE;IACE,MAAM;IACN,aAAa,CAAC,OAAO,WAAW,GAAG,aAAa,gCAAgC;IAChF,SAAS;KAAE,UAAU;KAAY;KAAU;IAAa;GAC1D,CACF;EACF;EACA,OAAO;CACT;;;;;;;;CASA,MAAM,QACJ,YACA,MACA,OAA0B,CAAC,GAQ3B;EACA,OAAO,kBAAkB,KAAK,MAAM,MAAM,CAAC,cAAc,UAAU,CAAC,SAClE,KAAK,cAAc,YAAY,MAAM,IAAI,CAC3C;CACF;CAEA,MAAc,cACZ,YACA,MACA,MAQA;EACA,MAAM,WAAW,KAAK,SAAS,IAAI,UAAU;EAC7C,IAAI,CAAC,SAAS,aACZ,MAAM,IAAI,aACR,aAAa,WAAW,oCACxB,qBACF;EAGF,MAAM,UAKD,CAAC;EAEN,IAAI,KAAK,KAAK;GACZ,MAAM,WAAW,MAAM,KAAK,MAAM,aAAa,UAAU;GACzD,KAAK,MAAM,KAAK,UACd,QAAQ,KAAK,MAAM,KAAK,oBAAoB,UAAU,EAAE,KAAK,IAAI,CAAC;GAEpE,IAAI,QAAQ,WAAW,GACrB,MAAM,IAAI,aAAa,yBAAyB,WAAW,IAAI,eAAe;GAEhF,OAAO;EACT;EAEA,IAAI,MAAM;GACR,QAAQ,KAAK,MAAM,KAAK,oBAAoB,UAAU,qBAAqB,IAAI,CAAC,CAAC;GACjF,OAAO;EACT;EAGA,QAAQ,KAAK,MAAM,KAAK,gBAAgB,QAAQ,CAAC;EACjD,OAAO;CACT;CAEA,MAAc,oBACZ,UACA,aAMC;EACD,MAAM,SAAS,GAAG,SAAS,GAAG,GAAG;EACjC,IAAI;GACF,MAAM,UAAU,MAAM,KAAK,MAAM,eAAe,SAAS,IAAI,WAAW;GACxE,MAAM,OAAO,MAAM,SAAS,YAAa,QAAQ,WAAW;GAC5D,MAAM,OAAO;IACX,GAAG,QAAQ;IACX,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;IAClC,UAAU,KAAK,YAAY,QAAQ,KAAK;GAC1C;GACA,MAAM,KAAK,MAAM,UAAU,IAAI;GAG/B,IAAI,MADiB,KAAK,MAAM,UAAU,SAAS,EAAE,MACtC,aACb,MAAM,SAAS,QAAQ,QAAQ,WAAW;GAG5C,OAAO;IAAE;IAAQ,UAAU,KAAK;IAAU,IAAI;GAAK;EACrD,SAAS,KAAK;GACZ,OAAO;IACL;IACA,IAAI;IACJ,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GACxD;EACF;CACF;CAEA,MAAc,gBAAgB,UAK3B;EACD,MAAM,SAAS,GAAG,SAAS,GAAG;EAC9B,IAAI;GACF,MAAM,OAAO,MAAM,SAAS,WAAW;GACvC,IAAI,CAAC,KAAK,SAAS;IAEjB,MAAM,SAAS,MAAM,KAAK,MAAM,UAAU,SAAS,EAAE;IACrD,IAAI,QACF,OAAO,KAAK,oBAAoB,UAAU,MAAM;IAElD,OAAO;KACL;KACA,IAAI;KACJ,OAAO;IACT;GACF;GAEA,MAAM,MAAM,MAAM,QAAQ,KAAK,OAAO,GAAG,kBAAkB,CAAC;GAC5D,IAAI;IACF,MAAM,SAAS,OAAO,GAAG;IACzB,MAAM,OAAO,MAAM,SAAS,YAAa,GAAG;IAC5C,MAAM,SAAS,QAAQ,GAAG;IAO1B,MAAM,SAAS,MAAM,KAAK,MAAM,UAAU,SAAS,EAAE;IACrD,IAAI;IACJ,IAAI,QACF,IAAI;KACF,MAAM,KAAK,4BAA4B,SAAS,IAAI,MAAM;IAC5D,SAAS,KAAK;KACZ,YAAY,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;IAC7D;IAGF,OAAO;KACL;KACA,UAAU,KAAK,YAAY,KAAK;KAChC,IAAI,CAAC;KACL,GAAI,YACA,EAAE,OAAO,uDAAuD,YAAY,IAC5E,CAAC;IACP;GACF,UAAU;IACR,MAAM,GAAG,KAAK;KAAE,WAAW;KAAM,OAAO;IAAK,CAAC;GAChD;EACF,SAAS,KAAK;GACZ,OAAO;IACL;IACA,IAAI;IACJ,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GACxD;EACF;CACF;;CAGA,MAAM,KACJ,YACA,MACA,MACsB;EACtB,MAAM,cAAc,qBAAqB,IAAI;EAC7C,OAAO,kBAAkB,KAAK,MAAM,MAAM,CAAC,cAAc,UAAU,CAAC,GAAG,YAAY;GACjF,MAAM,UAAU,MAAM,KAAK,MAAM,eAAe,YAAY,WAAW;GACvE,MAAM,QAAQ,KAAK,UAAU,OAAO,KAAA,IAAY,KAAK,OAAO,KAAK,KAAK,QAAQ,KAAK;GACnF,MAAM,OAAoB;IACxB,GAAG,QAAQ;IACX;IACA,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;GACpC;GAGA,MAAM,KAAK,MAAM,UAAU,IAAI;GAC/B,OAAO;EACT,CAAC;CACH;CAEA,MAAM,OAAO,YAAoB,MAA6B;EAC5D,MAAM,WAAW,KAAK,SAAS,IAAI,UAAU;EAC7C,MAAM,cAAc,qBAAqB,IAAI;EAC7C,MAAM,kBAAkB,KAAK,MAAM,MAAM,CAAC,cAAc,UAAU,CAAC,GAAG,YAAY;GAChF,IAAI,iBAAiB,QAAQ,GAC3B,MAAM,KAAK,MAAM,oBAAoB,UAAU,WAAW;GAE5D,MAAM,KAAK,MAAM,cAAc,YAAY,WAAW;EACxD,CAAC;EAID,IAAI;GACF,MAAM,KAAK,cAAc,YAAY,WAAW;EAClD,QAAQ,CAGR;CACF;CAIA,MAAM,cAAc,YAAoB,MAAc,SAAgC;EACpF,MAAM,sBAAsB,KAAK,OAAO,YAAY,MAAM,OAAO;CACnE;CAEA,MAAM,cACJ,YACA,MACA,QACA,OAA4B,CAAC,GACP;EACtB,OAAO,kBAAkB,KAAK,MAAM,MAAM,CAAC,cAAc,UAAU,CAAC,GAAG,YAAY;GACjF,MAAM,WAAW,KAAK,SAAS,IAAI,UAAU;GAC7C,OAAO,sBACL;IACE,OAAO,KAAK;IACZ;IACA,wBAAwB,KAAK,UAAU,aAAa,UAClD,KAAK,sBAAsB,KAAK,UAAU,aAAa,KAAK;GAChE,GACA,YACA,MACA,QACA,IACF;EACF,CAAC;CACH;AACF;AAEA,SAAS,gBAAgB,GAAW,GAAoB;CACtD,OAAO,EAAE,KAAK,CAAC,CAAC,YAAY,MAAM,EAAE,KAAK,CAAC,CAAC,YAAY;AACzD;;;;;;AAOA,eAAe,iBACb,UACA,SACA,WACyB;CAGzB,IAAI,QAAQ,KAAK,mBAAmB,cAClC,OAAO;CAET,MAAM,EAAE,gBAAgB;CACxB,IAAI,OAAO,SAAS,wBAAwB,YAC1C,IAAI;EACF,OAAO,MAAM,SAAS,oBAAoB,WAAW;CACvD,SAAS,KAAK;EACZ,IAAI,eAAe,GAAG,KAAK,IAAI,SAAS,oBACtC,OAAO;CAGX;CAEF,MAAM,OAAO,aAAc,MAAM,SAAS,WAAW;CACrD,IAAI,CAAC,KAAK,UACR,OAAO;CAET,MAAM,YAAY,SAAS,mBAAmB,MAAM,SAAS,iBAAiB,WAAW,IAAI,CAAC;CAC9F,OAAO,UAAU,YAAY,QAAQ,gBAAgB,UAAU,UAAU,KAAK,QAAQ;AACxF;;;;;;;;;AAUA,SAAS,wBAAwB,UAA0B;CACzD,MAAM,UAAU,SAAS,KAAK;CAC9B,MAAM,QAAQ,QAAQ,SAAS,GAAG,IAAI,QAAQ,MAAM,GAAG,CAAC,CAAC,KAAK;CAC9D,IAAI;EACF,OAAO,qBAAqB,KAAK;CACnC,QAAQ;EACN,OAAO;CACT;AACF"}

package/dist/core/store-snapshot.d.ts

@@ -0,0 +1,10 @@
+import type { Account } from '../types.js';
+import type { AnyPickDatabase } from './db.js';
+export declare function rowToAccount(root: string, providerId: string, row: {
+    name: string;
+    meta_json: string;
+    proxy_json: string;
+}): Account;
+export declare function ingestSnapshotDir(db: AnyPickDatabase, providerId: string, name: string, snapDir: string): void;
+export declare function materializeSnapshot(root: string, db: AnyPickDatabase, providerId: string, name: string): void;
+//# sourceMappingURL=store-snapshot.d.ts.map

package/dist/core/store-snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-snapshot.d.ts","sourceRoot":"","sources":["../../src/core/store-snapshot.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAe,MAAM,UAAU,CAAC;AAMrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAG5C,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC3D,OAAO,CAyBT;AAED,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,eAAe,EACnB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,IAAI,CA2BN;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,eAAe,EACnB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,IAAI,CAiDN"}

package/dist/core/store-snapshot.js

@@ -0,0 +1,79 @@
+import { DEFAULT_PROXY_CONFIG } from "../types/account.js";
+import { AnyPickError } from "../utils/errors.js";
+import { decode, decodeWithFallback, decoders } from "./codec.js";
+import { accountDir, accountSnapshotDir } from "./paths.js";
+import { normalizeAccountName } from "../utils/slug.js";
+import { stagedFilePath } from "./account-codec.js";
+import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+//#region src/core/store-snapshot.ts
+function rowToAccount(root, providerId, row) {
+	const storedName = normalizeAccountName(row.name);
+	const meta = {
+		...decode(row.meta_json, decoders.accountMeta, `${providerId}/${storedName}`),
+		name: storedName,
+		provider: providerId
+	};
+	const proxy = decodeWithFallback(row.proxy_json, decoders.accountProxyConfig, { ...DEFAULT_PROXY_CONFIG }, `${providerId}/${storedName}`);
+	return {
+		meta,
+		snapshotDir: accountSnapshotDir(root, providerId, storedName),
+		accountDir: accountDir(root, providerId, storedName),
+		proxy
+	};
+}
+function ingestSnapshotDir(db, providerId, name, snapDir) {
+	db.prepare(`DELETE FROM account_snapshot_files WHERE provider = ? AND account = ?`).run(providerId, name);
+	if (!existsSync(snapDir)) return;
+	const ins = db.prepare(`INSERT INTO account_snapshot_files (provider, account, path, content)
+     VALUES (?, ?, ?, ?)`);
+	const walk = (dir, prefix) => {
+		for (const entry of readdirSync(dir, { withFileTypes: true })) {
+			const full = join(dir, entry.name);
+			const rel = prefix ? `${prefix}/${entry.name}` : entry.name;
+			if (entry.isDirectory()) walk(full, rel);
+			else if (entry.isFile()) ins.run(providerId, name, rel.split("\\").join("/"), readFileSync(full));
+		}
+	};
+	walk(snapDir, "");
+}
+function materializeSnapshot(root, db, providerId, name) {
+	const snap = accountSnapshotDir(root, providerId, name);
+	mkdirSync(snap, {
+		recursive: true,
+		mode: 448
+	});
+	const destinations = db.prepare(`SELECT path, content FROM account_snapshot_files
+       WHERE provider = ? AND account = ?`).all(providerId, name).map((row) => {
+		if (typeof row.path !== "string") throw new AnyPickError("Snapshot contains an invalid file path.", "SNAPSHOT_INVALID");
+		try {
+			return {
+				row,
+				dest: stagedFilePath(snap, row.path)
+			};
+		} catch {
+			throw new AnyPickError(`Snapshot contains an unsafe file path: ${JSON.stringify(row.path)}.`, "SNAPSHOT_INVALID");
+		}
+	});
+	const seen = /* @__PURE__ */ new Set();
+	for (const { row } of destinations) {
+		const rel = row.path.split("\\").join("/").replace(/^\.\//, "");
+		if ([...seen].some((existing) => rel === existing || rel.startsWith(`${existing}/`) || existing.startsWith(`${rel}/`))) throw new AnyPickError("Snapshot contains colliding file paths.", "SNAPSHOT_INVALID");
+		seen.add(rel);
+	}
+	for (const entry of readdirSync(snap, { withFileTypes: true })) rmSync(join(snap, entry.name), {
+		recursive: true,
+		force: true
+	});
+	for (const { row, dest } of destinations) {
+		mkdirSync(dirname(dest), {
+			recursive: true,
+			mode: 448
+		});
+		writeFileSync(dest, Buffer.isBuffer(row.content) ? row.content : Buffer.from(row.content), { mode: 384 });
+	}
+}
+//#endregion
+export { ingestSnapshotDir, materializeSnapshot, rowToAccount };
+
+//# sourceMappingURL=store-snapshot.js.map

package/dist/core/store-snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-snapshot.js","names":[],"sources":["../../src/core/store-snapshot.ts"],"sourcesContent":["import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport type { Account, AccountMeta } from '../types';\nimport { DEFAULT_PROXY_CONFIG } from '../types';\nimport { AnyPickError } from '../utils/errors';\nimport { normalizeAccountName } from '../utils/slug';\nimport { stagedFilePath } from './account-codec';\nimport { decode, decodeWithFallback, decoders } from './codec';\nimport type { AnyPickDatabase } from './db';\nimport { accountDir, accountSnapshotDir } from './paths';\n\nexport function rowToAccount(\n  root: string,\n  providerId: string,\n  row: { name: string; meta_json: string; proxy_json: string },\n): Account {\n  const storedName = normalizeAccountName(row.name);\n  const rawMeta = decode(row.meta_json, decoders.accountMeta, `${providerId}/${storedName}`);\n  // The SQL primary key is the authority for identity and filesystem paths.\n  // Never let legacy/corrupt metadata redirect a snapshot outside its own\n  // provider/account directory.\n  const meta: AccountMeta = {\n    ...rawMeta,\n    name: storedName,\n    provider: providerId,\n  };\n  const proxy = decodeWithFallback(\n    row.proxy_json,\n    decoders.accountProxyConfig,\n    {\n      ...DEFAULT_PROXY_CONFIG,\n    },\n    `${providerId}/${storedName}`,\n  );\n  return {\n    meta,\n    snapshotDir: accountSnapshotDir(root, providerId, storedName),\n    accountDir: accountDir(root, providerId, storedName),\n    proxy,\n  };\n}\n\nexport function ingestSnapshotDir(\n  db: AnyPickDatabase,\n  providerId: string,\n  name: string,\n  snapDir: string,\n): void {\n  db.prepare(`DELETE FROM account_snapshot_files WHERE provider = ? AND account = ?`).run(\n    providerId,\n    name,\n  );\n\n  if (!existsSync(snapDir)) {\n    return;\n  }\n\n  const ins = db.prepare(\n    `INSERT INTO account_snapshot_files (provider, account, path, content)\n     VALUES (?, ?, ?, ?)`,\n  );\n\n  const walk = (dir: string, prefix: string): void => {\n    for (const entry of readdirSync(dir, { withFileTypes: true })) {\n      const full = join(dir, entry.name);\n      const rel = prefix ? `${prefix}/${entry.name}` : entry.name;\n      if (entry.isDirectory()) {\n        walk(full, rel);\n      } else if (entry.isFile()) {\n        ins.run(providerId, name, rel.split('\\\\').join('/'), readFileSync(full));\n      }\n    }\n  };\n  walk(snapDir, '');\n}\n\nexport function materializeSnapshot(\n  root: string,\n  db: AnyPickDatabase,\n  providerId: string,\n  name: string,\n): void {\n  const snap = accountSnapshotDir(root, providerId, name);\n  mkdirSync(snap, { recursive: true, mode: 0o700 });\n\n  const rows = db\n    .prepare(\n      `SELECT path, content FROM account_snapshot_files\n       WHERE provider = ? AND account = ?`,\n    )\n    .all(providerId, name) as Array<{ path: string; content: Buffer }>;\n\n  const destinations = rows.map((row) => {\n    if (typeof row.path !== 'string') {\n      throw new AnyPickError('Snapshot contains an invalid file path.', 'SNAPSHOT_INVALID');\n    }\n    try {\n      return { row, dest: stagedFilePath(snap, row.path) };\n    } catch {\n      throw new AnyPickError(\n        `Snapshot contains an unsafe file path: ${JSON.stringify(row.path)}.`,\n        'SNAPSHOT_INVALID',\n      );\n    }\n  });\n  const seen = new Set<string>();\n  for (const { row } of destinations) {\n    const rel = row.path.split('\\\\').join('/').replace(/^\\.\\//, '');\n    if (\n      [...seen].some(\n        (existing) =>\n          rel === existing || rel.startsWith(`${existing}/`) || existing.startsWith(`${rel}/`),\n      )\n    ) {\n      throw new AnyPickError('Snapshot contains colliding file paths.', 'SNAPSHOT_INVALID');\n    }\n    seen.add(rel);\n  }\n\n  for (const entry of readdirSync(snap, { withFileTypes: true })) {\n    rmSync(join(snap, entry.name), { recursive: true, force: true });\n  }\n\n  for (const { row, dest } of destinations) {\n    mkdirSync(dirname(dest), { recursive: true, mode: 0o700 });\n    const buf = Buffer.isBuffer(row.content)\n      ? row.content\n      : Buffer.from(row.content as unknown as ArrayBuffer);\n    writeFileSync(dest, buf, { mode: 0o600 });\n  }\n}\n"],"mappings":";;;;;;;;;AAWA,SAAgB,aACd,MACA,YACA,KACS;CACT,MAAM,aAAa,qBAAqB,IAAI,IAAI;CAKhD,MAAM,OAAoB;EACxB,GALc,OAAO,IAAI,WAAW,SAAS,aAAa,GAAG,WAAW,GAAG,YAKxE;EACH,MAAM;EACN,UAAU;CACZ;CACA,MAAM,QAAQ,mBACZ,IAAI,YACJ,SAAS,oBACT,EACE,GAAG,qBACL,GACA,GAAG,WAAW,GAAG,YACnB;CACA,OAAO;EACL;EACA,aAAa,mBAAmB,MAAM,YAAY,UAAU;EAC5D,YAAY,WAAW,MAAM,YAAY,UAAU;EACnD;CACF;AACF;AAEA,SAAgB,kBACd,IACA,YACA,MACA,SACM;CACN,GAAG,QAAQ,uEAAuE,CAAC,CAAC,IAClF,YACA,IACF;CAEA,IAAI,CAAC,WAAW,OAAO,GACrB;CAGF,MAAM,MAAM,GAAG,QACb;yBAEF;CAEA,MAAM,QAAQ,KAAa,WAAyB;EAClD,KAAK,MAAM,SAAS,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC,GAAG;GAC7D,MAAM,OAAO,KAAK,KAAK,MAAM,IAAI;GACjC,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,MAAM,SAAS,MAAM;GACvD,IAAI,MAAM,YAAY,GACpB,KAAK,MAAM,GAAG;QACT,IAAI,MAAM,OAAO,GACtB,IAAI,IAAI,YAAY,MAAM,IAAI,MAAM,IAAI,CAAC,CAAC,KAAK,GAAG,GAAG,aAAa,IAAI,CAAC;EAE3E;CACF;CACA,KAAK,SAAS,EAAE;AAClB;AAEA,SAAgB,oBACd,MACA,IACA,YACA,MACM;CACN,MAAM,OAAO,mBAAmB,MAAM,YAAY,IAAI;CACtD,UAAU,MAAM;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CAShD,MAAM,eAPO,GACV,QACC;0CAEF,CAAC,CACA,IAAI,YAAY,IAEE,CAAA,CAAK,KAAK,QAAQ;EACrC,IAAI,OAAO,IAAI,SAAS,UACtB,MAAM,IAAI,aAAa,2CAA2C,kBAAkB;EAEtF,IAAI;GACF,OAAO;IAAE;IAAK,MAAM,eAAe,MAAM,IAAI,IAAI;GAAE;EACrD,QAAQ;GACN,MAAM,IAAI,aACR,0CAA0C,KAAK,UAAU,IAAI,IAAI,EAAE,IACnE,kBACF;EACF;CACF,CAAC;CACD,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,EAAE,SAAS,cAAc;EAClC,MAAM,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,QAAQ,SAAS,EAAE;EAC9D,IACE,CAAC,GAAG,IAAI,CAAC,CAAC,MACP,aACC,QAAQ,YAAY,IAAI,WAAW,GAAG,SAAS,EAAE,KAAK,SAAS,WAAW,GAAG,IAAI,EAAE,CACvF,GAEA,MAAM,IAAI,aAAa,2CAA2C,kBAAkB;EAEtF,KAAK,IAAI,GAAG;CACd;CAEA,KAAK,MAAM,SAAS,YAAY,MAAM,EAAE,eAAe,KAAK,CAAC,GAC3D,OAAO,KAAK,MAAM,MAAM,IAAI,GAAG;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CAGjE,KAAK,MAAM,EAAE,KAAK,UAAU,cAAc;EACxC,UAAU,QAAQ,IAAI,GAAG;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EAIzD,cAAc,MAHF,OAAO,SAAS,IAAI,OAAO,IACnC,IAAI,UACJ,OAAO,KAAK,IAAI,OAAiC,GAC5B,EAAE,MAAM,IAAM,CAAC;CAC1C;AACF"}

package/dist/core/store.d.ts

@@ -0,0 +1,68 @@
+import type { Account, AccountMeta, AccountProxyConfig } from '../types.js';
+import type { AnyPickDatabase } from './db.js';
+export interface ProxyRuntimeState {
+    accountName: string;
+    endpoint: string;
+    compatibility?: string;
+    pid?: number;
+    logPath?: string;
+    startedAt: string;
+    /**
+     * Per-instance high-entropy secret (PROXY-01) required on every credentialed
+     * route. Persisted owner-only in proxy_state; never surfaced in status/doctor.
+     */
+    token?: string;
+}
+/**
+ * SQLite-backed account store.
+ *
+ * Structured data lives in ~/.anypick/anypick.db.
+ * Snapshot bytes are BLOBs; they are materialized to a cache dir when
+ * providers need a real filesystem path for backup/restore.
+ * Proxy pid/log runtime stays on disk (process-local).
+ */
+export declare class AccountStore {
+    readonly root: string;
+    readonly db: AnyPickDatabase;
+    constructor(root: string, db: AnyPickDatabase);
+    ensureProvider(_providerId: string): Promise<void>;
+    listAccounts(providerId: string): Promise<Account[]>;
+    getAccount(providerId: string, name: string): Promise<Account | null>;
+    requireAccount(providerId: string, name: string): Promise<Account>;
+    /**
+     * Prepare an empty snapshot directory for writing a new/updated account.
+     * Caller fills the snapshot (provider.backup / import), THEN calls
+     * `writeMeta`, which atomically replaces the
+     * snapshot's DB rows + metadata.
+     *
+     * NOTE: prepareSnapshot must NOT delete the existing snapshot's DB rows —
+     * doing so before backup succeeds would destroy the previous snapshot on a
+     * fault (DATA-01). The previous rows are replaced only inside
+     * `writeMeta` transaction.
+     */
+    prepareSnapshot(providerId: string, name: string): Promise<{
+        snapshotDir: string;
+        accountDir: string;
+    }>;
+    /**
+     * Atomically replace an account's metadata + snapshot files in one
+     * transaction. Callers MUST fill `snapshotDir` (via provider.backup or import)
+     * before calling. Any throw leaves the previous rows + metadata exactly as
+     * they were (DATA-01): the old snapshot files are deleted and re-ingested
+     * together, never partially.
+     */
+    writeMeta(meta: AccountMeta): Promise<void>;
+    getProxyConfig(providerId: string, name: string): Promise<AccountProxyConfig>;
+    setProxyConfig(providerId: string, name: string, config: AccountProxyConfig): Promise<void>;
+    runtimeDir(providerId: string, name: string): string;
+    pidPath(providerId: string, name: string): string;
+    logPath(providerId: string, name: string): string;
+    writeProxyState(providerId: string, name: string, state: ProxyRuntimeState): Promise<void>;
+    readProxyState(providerId: string, name: string): Promise<ProxyRuntimeState | null>;
+    clearProxyState(providerId: string, name: string): Promise<void>;
+    deleteAccount(providerId: string, name: string): Promise<void>;
+    getActive(providerId: string): Promise<string | null>;
+    setActive(providerId: string, name: string): Promise<void>;
+    clearActive(providerId: string): Promise<void>;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/core/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/core/store.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAKzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAW5C,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,qBAAa,YAAY;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAC;IAE7B,YAAY,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,eAAe,EAG5C;IAEK,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEvD;IAEK,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAezD;IAEK,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAmB1E;IAEK,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CASvE;IAED;;;;;;;;;;OAUG;IACG,eAAe,CACnB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CActD;IAED;;;;;;OAMG;IACG,SAAS,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAoChD;IAEK,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAelF;IAEK,cAAc,CAClB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,IAAI,CAAC,CAKf;IAED,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD;IAED,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;IAED,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;IAEK,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ/F;IAEK,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAaxF;IAEK,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIrE;IAEK,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA6BnE;IAEK,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAK1D;IAEK,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ/D;IAEK,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnD;CACF"}

package/dist/core/store.js

@@ -0,0 +1,159 @@
+import { DEFAULT_PROXY_CONFIG } from "../types/account.js";
+import { AnyPickError } from "../utils/errors.js";
+import { ensureDir, removePath } from "../utils/fs.js";
+import { decodeWithFallback, decoders } from "./codec.js";
+import { accountDir, accountProxyRuntimeDir, accountSnapshotDir, getAnyPickRoot, proxyLogPath, proxyPidPath } from "./paths.js";
+import { ingestSnapshotDir, materializeSnapshot, rowToAccount } from "./store-snapshot.js";
+import { readdirSync, rmSync } from "node:fs";
+import { join } from "node:path";
+//#region src/core/store.ts
+/**
+* SQLite-backed account store.
+*
+* Structured data lives in ~/.anypick/anypick.db.
+* Snapshot bytes are BLOBs; they are materialized to a cache dir when
+* providers need a real filesystem path for backup/restore.
+* Proxy pid/log runtime stays on disk (process-local).
+*/
+var AccountStore = class {
+	root;
+	db;
+	constructor(root, db) {
+		this.root = getAnyPickRoot(root);
+		this.db = db;
+	}
+	async ensureProvider(_providerId) {}
+	async listAccounts(providerId) {
+		return this.db.prepare(`SELECT name, meta_json, proxy_json FROM accounts
+         WHERE provider = ?
+           AND EXISTS (
+             SELECT 1 FROM account_snapshot_files
+             WHERE account_snapshot_files.provider = accounts.provider
+               AND account_snapshot_files.account = accounts.name
+           )
+         ORDER BY name`).all(providerId).map((row) => rowToAccount(this.root, providerId, row));
+	}
+	async getAccount(providerId, name) {
+		const row = this.db.prepare(`SELECT name, meta_json, proxy_json FROM accounts
+         WHERE provider = ? AND name = ?
+           AND EXISTS (
+             SELECT 1 FROM account_snapshot_files
+             WHERE account_snapshot_files.provider = accounts.provider
+               AND account_snapshot_files.account = accounts.name
+           )`).get(providerId, name);
+		if (!row) return null;
+		const account = rowToAccount(this.root, providerId, row);
+		materializeSnapshot(this.root, this.db, providerId, name);
+		return account;
+	}
+	async requireAccount(providerId, name) {
+		const account = await this.getAccount(providerId, name);
+		if (!account) throw new AnyPickError(`No account "${name}" for provider "${providerId}".`, "ACCOUNT_NOT_FOUND");
+		return account;
+	}
+	/**
+	* Prepare an empty snapshot directory for writing a new/updated account.
+	* Caller fills the snapshot (provider.backup / import), THEN calls
+	* `writeMeta`, which atomically replaces the
+	* snapshot's DB rows + metadata.
+	*
+	* NOTE: prepareSnapshot must NOT delete the existing snapshot's DB rows —
+	* doing so before backup succeeds would destroy the previous snapshot on a
+	* fault (DATA-01). The previous rows are replaced only inside
+	* `writeMeta` transaction.
+	*/
+	async prepareSnapshot(providerId, name) {
+		const snap = accountSnapshotDir(this.root, providerId, name);
+		await ensureDir(snap);
+		for (const entry of readdirSync(snap, { withFileTypes: true })) rmSync(join(snap, entry.name), {
+			recursive: true,
+			force: true
+		});
+		return {
+			snapshotDir: snap,
+			accountDir: accountDir(this.root, providerId, name)
+		};
+	}
+	/**
+	* Atomically replace an account's metadata + snapshot files in one
+	* transaction. Callers MUST fill `snapshotDir` (via provider.backup or import)
+	* before calling. Any throw leaves the previous rows + metadata exactly as
+	* they were (DATA-01): the old snapshot files are deleted and re-ingested
+	* together, never partially.
+	*/
+	async writeMeta(meta) {
+		const now = meta.updatedAt || (/* @__PURE__ */ new Date()).toISOString();
+		const snap = accountSnapshotDir(this.root, meta.provider, meta.name);
+		this.db.transaction(() => {
+			const existing = this.db.prepare(`SELECT proxy_json, created_at FROM accounts WHERE provider = ? AND name = ?`).get(meta.provider, meta.name);
+			const proxyJson = existing?.proxy_json ?? JSON.stringify(DEFAULT_PROXY_CONFIG);
+			const createdAt = existing?.created_at ?? meta.createdAt ?? now;
+			this.db.prepare(`INSERT INTO accounts (provider, name, meta_json, proxy_json, created_at, updated_at)
+           VALUES (?, ?, ?, ?, ?, ?)
+           ON CONFLICT(provider, name) DO UPDATE SET
+             meta_json = excluded.meta_json,
+             updated_at = excluded.updated_at`).run(meta.provider, meta.name, JSON.stringify({
+				...meta,
+				updatedAt: now
+			}), proxyJson, createdAt, now);
+			this.db.prepare(`DELETE FROM account_snapshot_files WHERE provider = ? AND account = ?`).run(meta.provider, meta.name);
+			ingestSnapshotDir(this.db, meta.provider, meta.name, snap);
+		});
+	}
+	async getProxyConfig(providerId, name) {
+		const row = this.db.prepare(`SELECT proxy_json FROM accounts WHERE provider = ? AND name = ?`).get(providerId, name);
+		if (!row) return { ...DEFAULT_PROXY_CONFIG };
+		return decodeWithFallback(row.proxy_json, decoders.accountProxyConfig, { ...DEFAULT_PROXY_CONFIG }, `${providerId}/${name}`);
+	}
+	async setProxyConfig(providerId, name, config) {
+		await this.requireAccount(providerId, name);
+		this.db.prepare(`UPDATE accounts SET proxy_json = ?, updated_at = ? WHERE provider = ? AND name = ?`).run(JSON.stringify(config), (/* @__PURE__ */ new Date()).toISOString(), providerId, name);
+	}
+	runtimeDir(providerId, name) {
+		return accountProxyRuntimeDir(this.root, providerId, name);
+	}
+	pidPath(providerId, name) {
+		return proxyPidPath(this.root, providerId, name);
+	}
+	logPath(providerId, name) {
+		return proxyLogPath(this.root, providerId, name);
+	}
+	async writeProxyState(providerId, name, state) {
+		this.db.prepare(`INSERT INTO proxy_state (provider, account, state_json)
+         VALUES (?, ?, ?)
+         ON CONFLICT(provider, account) DO UPDATE SET state_json = excluded.state_json`).run(providerId, name, JSON.stringify(state));
+	}
+	async readProxyState(providerId, name) {
+		const row = this.db.prepare(`SELECT state_json FROM proxy_state WHERE provider = ? AND account = ?`).get(providerId, name);
+		if (!row) return null;
+		return decodeWithFallback(row.state_json, decoders.proxyRuntimeState, null, `${providerId}/${name}`);
+	}
+	async clearProxyState(providerId, name) {
+		this.db.prepare(`DELETE FROM proxy_state WHERE provider = ? AND account = ?`).run(providerId, name);
+	}
+	async deleteAccount(providerId, name) {
+		if (!this.db.transaction(() => {
+			if (this.db.prepare(`DELETE FROM accounts WHERE provider = ? AND name = ?`).run(providerId, name).changes === 0) return false;
+			this.db.prepare(`DELETE FROM proxy_state WHERE provider = ? AND account = ?`).run(providerId, name);
+			return true;
+		})) throw new AnyPickError(`No account "${name}" for provider "${providerId}".`, "ACCOUNT_NOT_FOUND");
+		await removePath(accountSnapshotDir(this.root, providerId, name));
+		await removePath(accountDir(this.root, providerId, name));
+		if (await this.getActive(providerId) === name) await this.clearActive(providerId);
+	}
+	async getActive(providerId) {
+		return this.db.prepare(`SELECT account_name FROM provider_active WHERE provider = ?`).get(providerId)?.account_name ?? null;
+	}
+	async setActive(providerId, name) {
+		this.db.prepare(`INSERT INTO provider_active (provider, account_name)
+         VALUES (?, ?)
+         ON CONFLICT(provider) DO UPDATE SET account_name = excluded.account_name`).run(providerId, name);
+	}
+	async clearActive(providerId) {
+		this.db.prepare(`DELETE FROM provider_active WHERE provider = ?`).run(providerId);
+	}
+};
+//#endregion
+export { AccountStore };
+
+//# sourceMappingURL=store.js.map

package/dist/core/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","names":[],"sources":["../../src/core/store.ts"],"sourcesContent":["import { readdirSync, rmSync } from 'node:fs';\nimport { join } from 'node:path';\nimport type { Account, AccountMeta, AccountProxyConfig } from '../types';\nimport { DEFAULT_PROXY_CONFIG } from '../types';\nimport { AnyPickError } from '../utils/errors';\nimport { ensureDir, removePath } from '../utils/fs';\nimport { decodeWithFallback, decoders } from './codec';\nimport type { AnyPickDatabase } from './db';\nimport {\n  accountDir,\n  accountProxyRuntimeDir,\n  accountSnapshotDir,\n  getAnyPickRoot,\n  proxyLogPath,\n  proxyPidPath,\n} from './paths';\nimport { ingestSnapshotDir, materializeSnapshot, rowToAccount } from './store-snapshot';\n\nexport interface ProxyRuntimeState {\n  accountName: string;\n  endpoint: string;\n  compatibility?: string;\n  pid?: number;\n  logPath?: string;\n  startedAt: string;\n  /**\n   * Per-instance high-entropy secret (PROXY-01) required on every credentialed\n   * route. Persisted owner-only in proxy_state; never surfaced in status/doctor.\n   */\n  token?: string;\n}\n\n/**\n * SQLite-backed account store.\n *\n * Structured data lives in ~/.anypick/anypick.db.\n * Snapshot bytes are BLOBs; they are materialized to a cache dir when\n * providers need a real filesystem path for backup/restore.\n * Proxy pid/log runtime stays on disk (process-local).\n */\nexport class AccountStore {\n  readonly root: string;\n  readonly db: AnyPickDatabase;\n\n  constructor(root: string, db: AnyPickDatabase) {\n    this.root = getAnyPickRoot(root);\n    this.db = db;\n  }\n\n  async ensureProvider(_providerId: string): Promise<void> {\n    // No-op: SQLite has no per-provider directories to create.\n  }\n\n  async listAccounts(providerId: string): Promise<Account[]> {\n    const rows = this.db\n      .prepare(\n        `SELECT name, meta_json, proxy_json FROM accounts\n         WHERE provider = ?\n           AND EXISTS (\n             SELECT 1 FROM account_snapshot_files\n             WHERE account_snapshot_files.provider = accounts.provider\n               AND account_snapshot_files.account = accounts.name\n           )\n         ORDER BY name`,\n      )\n      .all(providerId) as Array<{ name: string; meta_json: string; proxy_json: string }>;\n\n    return rows.map((row) => rowToAccount(this.root, providerId, row));\n  }\n\n  async getAccount(providerId: string, name: string): Promise<Account | null> {\n    const row = this.db\n      .prepare(\n        `SELECT name, meta_json, proxy_json FROM accounts\n         WHERE provider = ? AND name = ?\n           AND EXISTS (\n             SELECT 1 FROM account_snapshot_files\n             WHERE account_snapshot_files.provider = accounts.provider\n               AND account_snapshot_files.account = accounts.name\n           )`,\n      )\n      .get(providerId, name) as { name: string; meta_json: string; proxy_json: string } | undefined;\n    if (!row) {\n      return null;\n    }\n    const account = rowToAccount(this.root, providerId, row);\n    // Ensure snapshot files are on disk for provider.restore / export\n    materializeSnapshot(this.root, this.db, providerId, name);\n    return account;\n  }\n\n  async requireAccount(providerId: string, name: string): Promise<Account> {\n    const account = await this.getAccount(providerId, name);\n    if (!account) {\n      throw new AnyPickError(\n        `No account \"${name}\" for provider \"${providerId}\".`,\n        'ACCOUNT_NOT_FOUND',\n      );\n    }\n    return account;\n  }\n\n  /**\n   * Prepare an empty snapshot directory for writing a new/updated account.\n   * Caller fills the snapshot (provider.backup / import), THEN calls\n   * `writeMeta`, which atomically replaces the\n   * snapshot's DB rows + metadata.\n   *\n   * NOTE: prepareSnapshot must NOT delete the existing snapshot's DB rows —\n   * doing so before backup succeeds would destroy the previous snapshot on a\n   * fault (DATA-01). The previous rows are replaced only inside\n   * `writeMeta` transaction.\n   */\n  async prepareSnapshot(\n    providerId: string,\n    name: string,\n  ): Promise<{ snapshotDir: string; accountDir: string }> {\n    const snap = accountSnapshotDir(this.root, providerId, name);\n    await ensureDir(snap);\n    // Empty the on-disk materialize cache so the next backup starts fresh.\n    // The DB rows (source of truth) are intentionally left intact here — they\n    // are replaced only inside writeMeta's transaction, so a fault during\n    // backup/describe cannot destroy the previous snapshot (DATA-01).\n    for (const entry of readdirSync(snap, { withFileTypes: true })) {\n      rmSync(join(snap, entry.name), { recursive: true, force: true });\n    }\n    return {\n      snapshotDir: snap,\n      accountDir: accountDir(this.root, providerId, name),\n    };\n  }\n\n  /**\n   * Atomically replace an account's metadata + snapshot files in one\n   * transaction. Callers MUST fill `snapshotDir` (via provider.backup or import)\n   * before calling. Any throw leaves the previous rows + metadata exactly as\n   * they were (DATA-01): the old snapshot files are deleted and re-ingested\n   * together, never partially.\n   */\n  async writeMeta(meta: AccountMeta): Promise<void> {\n    const now = meta.updatedAt || new Date().toISOString();\n    const snap = accountSnapshotDir(this.root, meta.provider, meta.name);\n\n    this.db.transaction(() => {\n      const existing = this.db\n        .prepare(`SELECT proxy_json, created_at FROM accounts WHERE provider = ? AND name = ?`)\n        .get(meta.provider, meta.name) as { proxy_json: string; created_at: string } | undefined;\n\n      const proxyJson = existing?.proxy_json ?? JSON.stringify(DEFAULT_PROXY_CONFIG);\n      const createdAt = existing?.created_at ?? meta.createdAt ?? now;\n\n      this.db\n        .prepare(\n          `INSERT INTO accounts (provider, name, meta_json, proxy_json, created_at, updated_at)\n           VALUES (?, ?, ?, ?, ?, ?)\n           ON CONFLICT(provider, name) DO UPDATE SET\n             meta_json = excluded.meta_json,\n             updated_at = excluded.updated_at`,\n        )\n        .run(\n          meta.provider,\n          meta.name,\n          JSON.stringify({ ...meta, updatedAt: now }),\n          proxyJson,\n          createdAt,\n          now,\n        );\n\n      // Delete + re-ingest snapshot files atomically so a partial write cannot\n      // strand old rows.\n      this.db\n        .prepare(`DELETE FROM account_snapshot_files WHERE provider = ? AND account = ?`)\n        .run(meta.provider, meta.name);\n      ingestSnapshotDir(this.db, meta.provider, meta.name, snap);\n    });\n  }\n\n  async getProxyConfig(providerId: string, name: string): Promise<AccountProxyConfig> {\n    const row = this.db\n      .prepare(`SELECT proxy_json FROM accounts WHERE provider = ? AND name = ?`)\n      .get(providerId, name) as { proxy_json: string } | undefined;\n    if (!row) {\n      return { ...DEFAULT_PROXY_CONFIG };\n    }\n    return decodeWithFallback(\n      row.proxy_json,\n      decoders.accountProxyConfig,\n      {\n        ...DEFAULT_PROXY_CONFIG,\n      },\n      `${providerId}/${name}`,\n    );\n  }\n\n  async setProxyConfig(\n    providerId: string,\n    name: string,\n    config: AccountProxyConfig,\n  ): Promise<void> {\n    await this.requireAccount(providerId, name);\n    this.db\n      .prepare(`UPDATE accounts SET proxy_json = ?, updated_at = ? WHERE provider = ? AND name = ?`)\n      .run(JSON.stringify(config), new Date().toISOString(), providerId, name);\n  }\n\n  runtimeDir(providerId: string, name: string): string {\n    return accountProxyRuntimeDir(this.root, providerId, name);\n  }\n\n  pidPath(providerId: string, name: string): string {\n    return proxyPidPath(this.root, providerId, name);\n  }\n\n  logPath(providerId: string, name: string): string {\n    return proxyLogPath(this.root, providerId, name);\n  }\n\n  async writeProxyState(providerId: string, name: string, state: ProxyRuntimeState): Promise<void> {\n    this.db\n      .prepare(\n        `INSERT INTO proxy_state (provider, account, state_json)\n         VALUES (?, ?, ?)\n         ON CONFLICT(provider, account) DO UPDATE SET state_json = excluded.state_json`,\n      )\n      .run(providerId, name, JSON.stringify(state));\n  }\n\n  async readProxyState(providerId: string, name: string): Promise<ProxyRuntimeState | null> {\n    const row = this.db\n      .prepare(`SELECT state_json FROM proxy_state WHERE provider = ? AND account = ?`)\n      .get(providerId, name) as { state_json: string } | undefined;\n    if (!row) {\n      return null;\n    }\n    return decodeWithFallback(\n      row.state_json,\n      decoders.proxyRuntimeState,\n      null as ProxyRuntimeState | null,\n      `${providerId}/${name}`,\n    );\n  }\n\n  async clearProxyState(providerId: string, name: string): Promise<void> {\n    this.db\n      .prepare(`DELETE FROM proxy_state WHERE provider = ? AND account = ?`)\n      .run(providerId, name);\n  }\n\n  async deleteAccount(providerId: string, name: string): Promise<void> {\n    const deleted = this.db.transaction(() => {\n      const result = this.db\n        .prepare(`DELETE FROM accounts WHERE provider = ? AND name = ?`)\n        .run(providerId, name);\n      if (result.changes === 0) {\n        return false;\n      }\n      this.db\n        .prepare(`DELETE FROM proxy_state WHERE provider = ? AND account = ?`)\n        .run(providerId, name);\n      return true;\n    });\n    if (!deleted) {\n      throw new AnyPickError(\n        `No account \"${name}\" for provider \"${providerId}\".`,\n        'ACCOUNT_NOT_FOUND',\n      );\n    }\n\n    // Clear materialize cache (best-effort; DB state already consistent)\n    const snap = accountSnapshotDir(this.root, providerId, name);\n    await removePath(snap);\n    await removePath(accountDir(this.root, providerId, name));\n\n    const active = await this.getActive(providerId);\n    if (active === name) {\n      await this.clearActive(providerId);\n    }\n  }\n\n  async getActive(providerId: string): Promise<string | null> {\n    const row = this.db\n      .prepare(`SELECT account_name FROM provider_active WHERE provider = ?`)\n      .get(providerId) as { account_name: string } | undefined;\n    return row?.account_name ?? null;\n  }\n\n  async setActive(providerId: string, name: string): Promise<void> {\n    this.db\n      .prepare(\n        `INSERT INTO provider_active (provider, account_name)\n         VALUES (?, ?)\n         ON CONFLICT(provider) DO UPDATE SET account_name = excluded.account_name`,\n      )\n      .run(providerId, name);\n  }\n\n  async clearActive(providerId: string): Promise<void> {\n    this.db.prepare(`DELETE FROM provider_active WHERE provider = ?`).run(providerId);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAwCA,IAAa,eAAb,MAA0B;CACxB;CACA;CAEA,YAAY,MAAc,IAAqB;EAC7C,KAAK,OAAO,eAAe,IAAI;EAC/B,KAAK,KAAK;CACZ;CAEA,MAAM,eAAe,aAAoC,CAEzD;CAEA,MAAM,aAAa,YAAwC;EAczD,OAba,KAAK,GACf,QACC;;;;;;;uBAQF,CAAC,CACA,IAAI,UAEA,CAAA,CAAK,KAAK,QAAQ,aAAa,KAAK,MAAM,YAAY,GAAG,CAAC;CACnE;CAEA,MAAM,WAAW,YAAoB,MAAuC;EAC1E,MAAM,MAAM,KAAK,GACd,QACC;;;;;;aAOF,CAAC,CACA,IAAI,YAAY,IAAI;EACvB,IAAI,CAAC,KACH,OAAO;EAET,MAAM,UAAU,aAAa,KAAK,MAAM,YAAY,GAAG;EAEvD,oBAAoB,KAAK,MAAM,KAAK,IAAI,YAAY,IAAI;EACxD,OAAO;CACT;CAEA,MAAM,eAAe,YAAoB,MAAgC;EACvE,MAAM,UAAU,MAAM,KAAK,WAAW,YAAY,IAAI;EACtD,IAAI,CAAC,SACH,MAAM,IAAI,aACR,eAAe,KAAK,kBAAkB,WAAW,KACjD,mBACF;EAEF,OAAO;CACT;;;;;;;;;;;;CAaA,MAAM,gBACJ,YACA,MACsD;EACtD,MAAM,OAAO,mBAAmB,KAAK,MAAM,YAAY,IAAI;EAC3D,MAAM,UAAU,IAAI;EAKpB,KAAK,MAAM,SAAS,YAAY,MAAM,EAAE,eAAe,KAAK,CAAC,GAC3D,OAAO,KAAK,MAAM,MAAM,IAAI,GAAG;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;EAEjE,OAAO;GACL,aAAa;GACb,YAAY,WAAW,KAAK,MAAM,YAAY,IAAI;EACpD;CACF;;;;;;;;CASA,MAAM,UAAU,MAAkC;EAChD,MAAM,MAAM,KAAK,8BAAa,IAAI,KAAK,EAAA,CAAE,YAAY;EACrD,MAAM,OAAO,mBAAmB,KAAK,MAAM,KAAK,UAAU,KAAK,IAAI;EAEnE,KAAK,GAAG,kBAAkB;GACxB,MAAM,WAAW,KAAK,GACnB,QAAQ,6EAA6E,CAAC,CACtF,IAAI,KAAK,UAAU,KAAK,IAAI;GAE/B,MAAM,YAAY,UAAU,cAAc,KAAK,UAAU,oBAAoB;GAC7E,MAAM,YAAY,UAAU,cAAc,KAAK,aAAa;GAE5D,KAAK,GACF,QACC;;;;8CAKF,CAAC,CACA,IACC,KAAK,UACL,KAAK,MACL,KAAK,UAAU;IAAE,GAAG;IAAM,WAAW;GAAI,CAAC,GAC1C,WACA,WACA,GACF;GAIF,KAAK,GACF,QAAQ,uEAAuE,CAAC,CAChF,IAAI,KAAK,UAAU,KAAK,IAAI;GAC/B,kBAAkB,KAAK,IAAI,KAAK,UAAU,KAAK,MAAM,IAAI;EAC3D,CAAC;CACH;CAEA,MAAM,eAAe,YAAoB,MAA2C;EAClF,MAAM,MAAM,KAAK,GACd,QAAQ,iEAAiE,CAAC,CAC1E,IAAI,YAAY,IAAI;EACvB,IAAI,CAAC,KACH,OAAO,EAAE,GAAG,qBAAqB;EAEnC,OAAO,mBACL,IAAI,YACJ,SAAS,oBACT,EACE,GAAG,qBACL,GACA,GAAG,WAAW,GAAG,MACnB;CACF;CAEA,MAAM,eACJ,YACA,MACA,QACe;EACf,MAAM,KAAK,eAAe,YAAY,IAAI;EAC1C,KAAK,GACF,QAAQ,oFAAoF,CAAC,CAC7F,IAAI,KAAK,UAAU,MAAM,oBAAG,IAAI,KAAK,EAAA,CAAE,YAAY,GAAG,YAAY,IAAI;CAC3E;CAEA,WAAW,YAAoB,MAAsB;EACnD,OAAO,uBAAuB,KAAK,MAAM,YAAY,IAAI;CAC3D;CAEA,QAAQ,YAAoB,MAAsB;EAChD,OAAO,aAAa,KAAK,MAAM,YAAY,IAAI;CACjD;CAEA,QAAQ,YAAoB,MAAsB;EAChD,OAAO,aAAa,KAAK,MAAM,YAAY,IAAI;CACjD;CAEA,MAAM,gBAAgB,YAAoB,MAAc,OAAyC;EAC/F,KAAK,GACF,QACC;;uFAGF,CAAC,CACA,IAAI,YAAY,MAAM,KAAK,UAAU,KAAK,CAAC;CAChD;CAEA,MAAM,eAAe,YAAoB,MAAiD;EACxF,MAAM,MAAM,KAAK,GACd,QAAQ,uEAAuE,CAAC,CAChF,IAAI,YAAY,IAAI;EACvB,IAAI,CAAC,KACH,OAAO;EAET,OAAO,mBACL,IAAI,YACJ,SAAS,mBACT,MACA,GAAG,WAAW,GAAG,MACnB;CACF;CAEA,MAAM,gBAAgB,YAAoB,MAA6B;EACrE,KAAK,GACF,QAAQ,4DAA4D,CAAC,CACrE,IAAI,YAAY,IAAI;CACzB;CAEA,MAAM,cAAc,YAAoB,MAA6B;EAanE,IAAI,CAZY,KAAK,GAAG,kBAAkB;GAIxC,IAHe,KAAK,GACjB,QAAQ,sDAAsD,CAAC,CAC/D,IAAI,YAAY,IACf,CAAA,CAAO,YAAY,GACrB,OAAO;GAET,KAAK,GACF,QAAQ,4DAA4D,CAAC,CACrE,IAAI,YAAY,IAAI;GACvB,OAAO;EACT,CACK,GACH,MAAM,IAAI,aACR,eAAe,KAAK,kBAAkB,WAAW,KACjD,mBACF;EAKF,MAAM,WADO,mBAAmB,KAAK,MAAM,YAAY,IACtC,CAAI;EACrB,MAAM,WAAW,WAAW,KAAK,MAAM,YAAY,IAAI,CAAC;EAGxD,IAAI,MADiB,KAAK,UAAU,UAAU,MAC/B,MACb,MAAM,KAAK,YAAY,UAAU;CAErC;CAEA,MAAM,UAAU,YAA4C;EAI1D,OAHY,KAAK,GACd,QAAQ,6DAA6D,CAAC,CACtE,IAAI,UACA,CAAA,EAAK,gBAAgB;CAC9B;CAEA,MAAM,UAAU,YAAoB,MAA6B;EAC/D,KAAK,GACF,QACC;;kFAGF,CAAC,CACA,IAAI,YAAY,IAAI;CACzB;CAEA,MAAM,YAAY,YAAmC;EACnD,KAAK,GAAG,QAAQ,gDAAgD,CAAC,CAAC,IAAI,UAAU;CAClF;AACF"}

package/dist/core/tray-runtime.d.ts

@@ -0,0 +1,15 @@
+export interface TrayRuntimeState {
+    pid: number;
+    ready: boolean;
+    proxyCount: number;
+    startedAt: string;
+    /** SwiftUI on macOS, Tauri on Linux/Windows, or background-only fallback. */
+    mode?: 'native' | 'tauri' | 'headless';
+}
+export declare function trayRuntimeDir(root: string): string;
+export declare function trayPidPath(root: string): string;
+export declare function trayLogPath(root: string): string;
+export declare function trayStatePath(root: string): string;
+export declare function runningTrayPid(root: string): Promise<number | null>;
+export declare function readTrayState(root: string): Promise<TrayRuntimeState | null>;
+//# sourceMappingURL=tray-runtime.d.ts.map

package/dist/core/tray-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tray-runtime.d.ts","sourceRoot":"","sources":["../../src/core/tray-runtime.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAC;CACxC;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAGzE;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAUlF"}

package/dist/core/tray-runtime.js

@@ -0,0 +1,33 @@
+import { pathExists, readJsonFile } from "../utils/fs.js";
+import { isProcessRunning, readPidFile } from "../utils/process/pid.js";
+import { join } from "node:path";
+//#region src/core/tray-runtime.ts
+function trayRuntimeDir(root) {
+	return join(root, "runtime", "tray");
+}
+function trayPidPath(root) {
+	return join(trayRuntimeDir(root), "tray.pid");
+}
+function trayLogPath(root) {
+	return join(trayRuntimeDir(root), "tray.log");
+}
+function trayStatePath(root) {
+	return join(trayRuntimeDir(root), "state.json");
+}
+async function runningTrayPid(root) {
+	const pid = await readPidFile(trayPidPath(root));
+	return pid != null && isProcessRunning(pid) ? pid : null;
+}
+async function readTrayState(root) {
+	const path = trayStatePath(root);
+	if (!await pathExists(path)) return null;
+	try {
+		return await readJsonFile(path);
+	} catch {
+		return null;
+	}
+}
+//#endregion
+export { readTrayState, runningTrayPid, trayLogPath, trayPidPath, trayRuntimeDir, trayStatePath };
+
+//# sourceMappingURL=tray-runtime.js.map

package/dist/core/tray-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tray-runtime.js","names":[],"sources":["../../src/core/tray-runtime.ts"],"sourcesContent":["import { join } from 'node:path';\nimport { readJsonFile, pathExists } from '../utils/fs';\nimport { isProcessRunning, readPidFile } from '../utils/process';\n\nexport interface TrayRuntimeState {\n  pid: number;\n  ready: boolean;\n  proxyCount: number;\n  startedAt: string;\n  /** SwiftUI on macOS, Tauri on Linux/Windows, or background-only fallback. */\n  mode?: 'native' | 'tauri' | 'headless';\n}\n\nexport function trayRuntimeDir(root: string): string {\n  return join(root, 'runtime', 'tray');\n}\n\nexport function trayPidPath(root: string): string {\n  return join(trayRuntimeDir(root), 'tray.pid');\n}\n\nexport function trayLogPath(root: string): string {\n  return join(trayRuntimeDir(root), 'tray.log');\n}\n\nexport function trayStatePath(root: string): string {\n  return join(trayRuntimeDir(root), 'state.json');\n}\n\nexport async function runningTrayPid(root: string): Promise<number | null> {\n  const pid = await readPidFile(trayPidPath(root));\n  return pid != null && isProcessRunning(pid) ? pid : null;\n}\n\nexport async function readTrayState(root: string): Promise<TrayRuntimeState | null> {\n  const path = trayStatePath(root);\n  if (!(await pathExists(path))) {\n    return null;\n  }\n  try {\n    return await readJsonFile<TrayRuntimeState>(path);\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;;;AAaA,SAAgB,eAAe,MAAsB;CACnD,OAAO,KAAK,MAAM,WAAW,MAAM;AACrC;AAEA,SAAgB,YAAY,MAAsB;CAChD,OAAO,KAAK,eAAe,IAAI,GAAG,UAAU;AAC9C;AAEA,SAAgB,YAAY,MAAsB;CAChD,OAAO,KAAK,eAAe,IAAI,GAAG,UAAU;AAC9C;AAEA,SAAgB,cAAc,MAAsB;CAClD,OAAO,KAAK,eAAe,IAAI,GAAG,YAAY;AAChD;AAEA,eAAsB,eAAe,MAAsC;CACzE,MAAM,MAAM,MAAM,YAAY,YAAY,IAAI,CAAC;CAC/C,OAAO,OAAO,QAAQ,iBAAiB,GAAG,IAAI,MAAM;AACtD;AAEA,eAAsB,cAAc,MAAgD;CAClF,MAAM,OAAO,cAAc,IAAI;CAC/B,IAAI,CAAE,MAAM,WAAW,IAAI,GACzB,OAAO;CAET,IAAI;EACF,OAAO,MAAM,aAA+B,IAAI;CAClD,QAAQ;EACN,OAAO;CACT;AACF"}

package/dist/core/tray-settings-service.d.ts

@@ -0,0 +1,7 @@
+export declare class TraySettingsService {
+    private readonly root;
+    constructor(root: string);
+    launchAtLoginEnabled(): Promise<boolean>;
+    setLaunchAtLogin(cliEntry: string, enabled: boolean): Promise<void>;
+}
+//# sourceMappingURL=tray-settings-service.d.ts.map

package/dist/core/tray-settings-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tray-settings-service.d.ts","sourceRoot":"","sources":["../../src/core/tray-settings-service.ts"],"names":[],"mappings":"AASA,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,MAAM,EAAI;IAEvC,oBAAoB,IAAI,OAAO,CAAC,OAAO,CAAC,CAE7C;IAEK,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAIxE;CACF"}

package/dist/core/tray-settings-service.js

@@ -0,0 +1,24 @@
+import { withMutationLock } from "./mutation-lock.js";
+import { setTrayLaunchAtLogin, trayLaunchAtLoginEnabled } from "../tray/settings.js";
+//#region src/core/tray-settings-service.ts
+/**
+* Tray-local settings that are not part of the SQLite global config document.
+* Owns the `tray/login-item` mutation scope (ADR 0009).
+*/
+var LOGIN_ITEM_SCOPE = "tray/login-item";
+var TraySettingsService = class {
+	root;
+	constructor(root) {
+		this.root = root;
+	}
+	async launchAtLoginEnabled() {
+		return trayLaunchAtLoginEnabled();
+	}
+	async setLaunchAtLogin(cliEntry, enabled) {
+		await withMutationLock(this.root, LOGIN_ITEM_SCOPE, () => setTrayLaunchAtLogin(this.root, cliEntry, enabled));
+	}
+};
+//#endregion
+export { TraySettingsService };
+
+//# sourceMappingURL=tray-settings-service.js.map

package/dist/core/tray-settings-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tray-settings-service.js","names":[],"sources":["../../src/core/tray-settings-service.ts"],"sourcesContent":["/**\n * Tray-local settings that are not part of the SQLite global config document.\n * Owns the `tray/login-item` mutation scope (ADR 0009).\n */\nimport { setTrayLaunchAtLogin, trayLaunchAtLoginEnabled } from '../tray/settings';\nimport { withMutationLock } from './mutation-lock';\n\nconst LOGIN_ITEM_SCOPE = 'tray/login-item';\n\nexport class TraySettingsService {\n  constructor(private readonly root: string) {}\n\n  async launchAtLoginEnabled(): Promise<boolean> {\n    return trayLaunchAtLoginEnabled();\n  }\n\n  async setLaunchAtLogin(cliEntry: string, enabled: boolean): Promise<void> {\n    await withMutationLock(this.root, LOGIN_ITEM_SCOPE, () =>\n      setTrayLaunchAtLogin(this.root, cliEntry, enabled),\n    );\n  }\n}\n"],"mappings":";;;;;;;AAOA,IAAM,mBAAmB;AAEzB,IAAa,sBAAb,MAAiC;CACF;CAA7B,YAAY,MAA+B;EAAd,KAAA,OAAA;CAAe;CAE5C,MAAM,uBAAyC;EAC7C,OAAO,yBAAyB;CAClC;CAEA,MAAM,iBAAiB,UAAkB,SAAiC;EACxE,MAAM,iBAAiB,KAAK,MAAM,wBAChC,qBAAqB,KAAK,MAAM,UAAU,OAAO,CACnD;CACF;AACF"}