anypick 1.0.0

package/dist/cli/launcher.js

@@ -0,0 +1,93 @@
+import { ExitCode } from "../utils/errors.js";
+import { buildLauncherModel } from "./launcher-model.js";
+import { cursorForActionId, orderedActions, renderLauncherFrame } from "./launcher-render.js";
+import { SelectPrompt, isCancel, updateSettings } from "@clack/core";
+//#region src/cli/launcher.ts
+/**
+* Root command-center launcher using @clack/core SelectPrompt + custom render.
+* Does NOT use @clack/prompts intro/note/select/outro chrome.
+*/
+function onLauncherSigint() {
+	process.exitCode = ExitCode.CANCELLED;
+}
+/**
+* Show the root launcher once. Resolves with the chosen action, or quit.
+* Esc / q → exitCode 0; Ctrl-C → exitCode 130; 1-9 select that row.
+*/
+async function openRootLauncher(app, opts = {}) {
+	updateSettings({ aliases: {
+		escape: "cancel",
+		q: "cancel"
+	} });
+	const model = await buildLauncherModel(app, { cwd: opts.cwd });
+	const actions = orderedActions(model);
+	if (actions.length === 0) return {
+		kind: "quit",
+		exitCode: 0
+	};
+	const options = actions.map((a) => ({
+		value: a.id,
+		label: a.label
+	}));
+	const first = actions[0];
+	if (!first) return {
+		kind: "quit",
+		exitCode: 0
+	};
+	const defaultId = first.id;
+	const initialValue = opts.previousActionId && actions.some((a) => a.id === opts.previousActionId) ? opts.previousActionId : defaultId;
+	let lastKey;
+	let settled;
+	const prompt = new SelectPrompt({
+		options,
+		initialValue,
+		render() {
+			const cursor = this.cursor;
+			return renderLauncherFrame(model, {
+				cursor,
+				columns: process.stdout.columns ?? 80,
+				settled: this.state === "submit" || this.state === "cancel" ? this.state : settled
+			});
+		}
+	});
+	prompt.on("key", (key) => {
+		lastKey = key;
+		if (!key || key.length !== 1) return;
+		if (key >= "1" && key <= "9") {
+			const idx = Number(key) - 1;
+			if (idx >= 0 && idx < actions.length) {
+				prompt.cursor = idx;
+				const opt = options[idx];
+				if (opt) prompt.value = opt.value;
+				settled = "submit";
+				prompt.state = "submit";
+			}
+		}
+	});
+	const value = await prompt.prompt();
+	if (isCancel(value) || value === void 0) return {
+		kind: "quit",
+		exitCode: lastKey === "" ? ExitCode.CANCELLED : ExitCode.SUCCESS
+	};
+	const id = String(value);
+	const action = actions.find((a) => a.id === id);
+	if (!action) return {
+		kind: "action",
+		action: actions[cursorForActionId(model, id)] ?? first,
+		model
+	};
+	return {
+		kind: "action",
+		action,
+		model
+	};
+}
+/** Listen for SIGINT during launcher so Ctrl-C maps to 130 if process gets it. */
+function installLauncherSigint() {
+	process.once("SIGINT", onLauncherSigint);
+	return () => process.off("SIGINT", onLauncherSigint);
+}
+//#endregion
+export { installLauncherSigint, openRootLauncher };
+
+//# sourceMappingURL=launcher.js.map

package/dist/cli/launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher.js","names":[],"sources":["../../src/cli/launcher.ts"],"sourcesContent":["/**\n * Root command-center launcher using @clack/core SelectPrompt + custom render.\n * Does NOT use @clack/prompts intro/note/select/outro chrome.\n */\n\nimport { SelectPrompt, isCancel, updateSettings } from '@clack/core';\nimport { buildLauncherModel, type LauncherAction, type LauncherModel } from './launcher-model';\nimport { cursorForActionId, orderedActions, renderLauncherFrame } from './launcher-render';\nimport type { AnyPickApp } from '../core/app';\nimport { ExitCode } from '../utils/errors';\n\nexport type LauncherResult =\n  | { kind: 'action'; action: LauncherAction; model: LauncherModel }\n  | { kind: 'quit'; exitCode: number };\n\nexport interface OpenLauncherOpts {\n  /** Restore selection by semantic action id. */\n  previousActionId?: string;\n  cwd?: string;\n}\n\nfunction onLauncherSigint(): void {\n  process.exitCode = ExitCode.CANCELLED;\n}\n\n/**\n * Show the root launcher once. Resolves with the chosen action, or quit.\n * Esc / q → exitCode 0; Ctrl-C → exitCode 130; 1-9 select that row.\n */\nexport async function openRootLauncher(\n  app: AnyPickApp,\n  opts: OpenLauncherOpts = {},\n): Promise<LauncherResult> {\n  updateSettings({\n    aliases: {\n      escape: 'cancel',\n      q: 'cancel',\n    },\n  });\n\n  const model = await buildLauncherModel(app, { cwd: opts.cwd });\n  const actions = orderedActions(model);\n  if (actions.length === 0) {\n    return { kind: 'quit', exitCode: 0 };\n  }\n\n  const options = actions.map((a) => ({ value: a.id, label: a.label }));\n  const first = actions[0];\n  if (!first) {\n    return { kind: 'quit', exitCode: 0 };\n  }\n\n  // Prefer restoring previous; else first actionable row (Attention wins over Run)\n  const defaultId = first.id;\n\n  const initialValue =\n    opts.previousActionId && actions.some((a) => a.id === opts.previousActionId)\n      ? opts.previousActionId\n      : defaultId;\n\n  let lastKey: string | undefined;\n  let settled: 'submit' | 'cancel' | undefined;\n\n  const prompt = new SelectPrompt({\n    options,\n    initialValue,\n    render() {\n      const cursor = this.cursor;\n      return renderLauncherFrame(model, {\n        cursor,\n        columns: process.stdout.columns ?? 80,\n        settled: this.state === 'submit' || this.state === 'cancel' ? this.state : settled,\n      });\n    },\n  });\n\n  // Hotkeys: 1-9 jump cursor (enter still confirms) — also accept as immediate select\n  prompt.on('key', (key) => {\n    lastKey = key;\n    if (!key || key.length !== 1) {\n      return;\n    }\n    if (key >= '1' && key <= '9') {\n      const idx = Number(key) - 1;\n      if (idx >= 0 && idx < actions.length) {\n        // Move highlight; user can also just press enter.\n        // Immediate select: treat digit as enter on that row.\n        prompt.cursor = idx;\n        const opt = options[idx];\n        if (opt) {\n          prompt.value = opt.value;\n        }\n        settled = 'submit';\n        prompt.state = 'submit';\n      }\n    }\n  });\n\n  const value = await prompt.prompt();\n\n  if (isCancel(value) || value === undefined) {\n    const exitCode = lastKey === '\\x03' ? ExitCode.CANCELLED : ExitCode.SUCCESS;\n    return { kind: 'quit', exitCode };\n  }\n\n  const id = String(value);\n  // If digit-select set value, prefer that\n  const action = actions.find((a) => a.id === id);\n  if (!action) {\n    const idx = cursorForActionId(model, id);\n    const fallback = actions[idx] ?? first;\n    return { kind: 'action', action: fallback, model };\n  }\n  return { kind: 'action', action, model };\n}\n\n/** Listen for SIGINT during launcher so Ctrl-C maps to 130 if process gets it. */\nexport function installLauncherSigint(): () => void {\n  process.once('SIGINT', onLauncherSigint);\n  return () => process.off('SIGINT', onLauncherSigint);\n}\n"],"mappings":";;;;;;;;;AAqBA,SAAS,mBAAyB;CAChC,QAAQ,WAAW,SAAS;AAC9B;;;;;AAMA,eAAsB,iBACpB,KACA,OAAyB,CAAC,GACD;CACzB,eAAe,EACb,SAAS;EACP,QAAQ;EACR,GAAG;CACL,EACF,CAAC;CAED,MAAM,QAAQ,MAAM,mBAAmB,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAC7D,MAAM,UAAU,eAAe,KAAK;CACpC,IAAI,QAAQ,WAAW,GACrB,OAAO;EAAE,MAAM;EAAQ,UAAU;CAAE;CAGrC,MAAM,UAAU,QAAQ,KAAK,OAAO;EAAE,OAAO,EAAE;EAAI,OAAO,EAAE;CAAM,EAAE;CACpE,MAAM,QAAQ,QAAQ;CACtB,IAAI,CAAC,OACH,OAAO;EAAE,MAAM;EAAQ,UAAU;CAAE;CAIrC,MAAM,YAAY,MAAM;CAExB,MAAM,eACJ,KAAK,oBAAoB,QAAQ,MAAM,MAAM,EAAE,OAAO,KAAK,gBAAgB,IACvE,KAAK,mBACL;CAEN,IAAI;CACJ,IAAI;CAEJ,MAAM,SAAS,IAAI,aAAa;EAC9B;EACA;EACA,SAAS;GACP,MAAM,SAAS,KAAK;GACpB,OAAO,oBAAoB,OAAO;IAChC;IACA,SAAS,QAAQ,OAAO,WAAW;IACnC,SAAS,KAAK,UAAU,YAAY,KAAK,UAAU,WAAW,KAAK,QAAQ;GAC7E,CAAC;EACH;CACF,CAAC;CAGD,OAAO,GAAG,QAAQ,QAAQ;EACxB,UAAU;EACV,IAAI,CAAC,OAAO,IAAI,WAAW,GACzB;EAEF,IAAI,OAAO,OAAO,OAAO,KAAK;GAC5B,MAAM,MAAM,OAAO,GAAG,IAAI;GAC1B,IAAI,OAAO,KAAK,MAAM,QAAQ,QAAQ;IAGpC,OAAO,SAAS;IAChB,MAAM,MAAM,QAAQ;IACpB,IAAI,KACF,OAAO,QAAQ,IAAI;IAErB,UAAU;IACV,OAAO,QAAQ;GACjB;EACF;CACF,CAAC;CAED,MAAM,QAAQ,MAAM,OAAO,OAAO;CAElC,IAAI,SAAS,KAAK,KAAK,UAAU,KAAA,GAE/B,OAAO;EAAE,MAAM;EAAQ,UADN,YAAY,MAAS,SAAS,YAAY,SAAS;CACpC;CAGlC,MAAM,KAAK,OAAO,KAAK;CAEvB,MAAM,SAAS,QAAQ,MAAM,MAAM,EAAE,OAAO,EAAE;CAC9C,IAAI,CAAC,QAGH,OAAO;EAAE,MAAM;EAAU,QADR,QADL,kBAAkB,OAAO,EACZ,MAAQ;EACU;CAAM;CAEnD,OAAO;EAAE,MAAM;EAAU;EAAQ;CAAM;AACzC;;AAGA,SAAgB,wBAAoC;CAClD,QAAQ,KAAK,UAAU,gBAAgB;CACvC,aAAa,QAAQ,IAAI,UAAU,gBAAgB;AACrD"}

package/dist/cli/local-health.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Local-only health hints (no network). Shared by launcher model and TUI.
+ */
+import type { AnyPickApp } from '../core/app.js';
+/**
+ * Detect degraded binding state without network I/O.
+ * Returns a short reason string, or undefined when healthy.
+ *
+ * Transport-dependent probes (e.g. external proxy missing) come from the
+ * provider's SourceAdapter via transportFor — never from provider-id switches.
+ */
+export declare function localAttentionFor(app: AnyPickApp, clientId: string, source: {
+    kind: string;
+    provider?: string;
+    name?: string;
+}): Promise<string | undefined>;
+//# sourceMappingURL=local-health.d.ts.map

package/dist/cli/local-health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-health.d.ts","sourceRoot":"","sources":["../../src/cli/local-health.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG9C;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,UAAU,EACf,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACzD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA8B7B"}

package/dist/cli/local-health.js

@@ -0,0 +1,31 @@
+import { pathExists } from "../utils/fs.js";
+//#region src/cli/local-health.ts
+/**
+* Detect degraded binding state without network I/O.
+* Returns a short reason string, or undefined when healthy.
+*
+* Transport-dependent probes (e.g. external proxy missing) come from the
+* provider's SourceAdapter via transportFor — never from provider-id switches.
+*/
+async function localAttentionFor(app, clientId, source) {
+	if (source.kind === "account" && source.provider && source.name) {
+		const acc = await app.accounts.get(source.provider, source.name);
+		if (!acc) return "account missing";
+		if (acc.snapshotDir && !await pathExists(acc.snapshotDir)) return "snapshot missing";
+		try {
+			const adapter = app.accounts.provider(source.provider).sourceAdapter?.(acc);
+			if (adapter) {
+				if (adapter.transportFor(clientId) === "external_manual_proxy") return "proxy not installed";
+			}
+		} catch {}
+	}
+	if (source.kind === "gateway" && source.name) try {
+		await app.profiles.get(source.name);
+	} catch {
+		return "gateway missing";
+	}
+}
+//#endregion
+export { localAttentionFor };
+
+//# sourceMappingURL=local-health.js.map

package/dist/cli/local-health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-health.js","names":[],"sources":["../../src/cli/local-health.ts"],"sourcesContent":["/**\n * Local-only health hints (no network). Shared by launcher model and TUI.\n */\n\nimport type { AnyPickApp } from '../core/app';\nimport { pathExists } from '../utils/fs';\n\n/**\n * Detect degraded binding state without network I/O.\n * Returns a short reason string, or undefined when healthy.\n *\n * Transport-dependent probes (e.g. external proxy missing) come from the\n * provider's SourceAdapter via transportFor — never from provider-id switches.\n */\nexport async function localAttentionFor(\n  app: AnyPickApp,\n  clientId: string,\n  source: { kind: string; provider?: string; name?: string },\n): Promise<string | undefined> {\n  if (source.kind === 'account' && source.provider && source.name) {\n    const acc = await app.accounts.get(source.provider, source.name);\n    if (!acc) {\n      return 'account missing';\n    }\n    if (acc.snapshotDir && !(await pathExists(acc.snapshotDir))) {\n      return 'snapshot missing';\n    }\n    try {\n      const provider = app.accounts.provider(source.provider);\n      const adapter = provider.sourceAdapter?.(acc);\n      if (adapter) {\n        const transport = adapter.transportFor(clientId);\n        if (transport === 'external_manual_proxy') {\n          return 'proxy not installed';\n        }\n      }\n    } catch {\n      // Unknown provider is not a health signal here.\n    }\n  }\n  if (source.kind === 'gateway' && source.name) {\n    try {\n      await app.profiles.get(source.name);\n    } catch {\n      return 'gateway missing';\n    }\n  }\n  return undefined;\n}\n"],"mappings":";;;;;;;;;AAcA,eAAsB,kBACpB,KACA,UACA,QAC6B;CAC7B,IAAI,OAAO,SAAS,aAAa,OAAO,YAAY,OAAO,MAAM;EAC/D,MAAM,MAAM,MAAM,IAAI,SAAS,IAAI,OAAO,UAAU,OAAO,IAAI;EAC/D,IAAI,CAAC,KACH,OAAO;EAET,IAAI,IAAI,eAAe,CAAE,MAAM,WAAW,IAAI,WAAW,GACvD,OAAO;EAET,IAAI;GAEF,MAAM,UADW,IAAI,SAAS,SAAS,OAAO,QAC9B,CAAA,CAAS,gBAAgB,GAAG;GAC5C,IAAI;QACgB,QAAQ,aAAa,QACnC,MAAc,yBAChB,OAAO;GAAA;EAGb,QAAQ,CAER;CACF;CACA,IAAI,OAAO,SAAS,aAAa,OAAO,MACtC,IAAI;EACF,MAAM,IAAI,SAAS,IAAI,OAAO,IAAI;CACpC,QAAQ;EACN,OAAO;CACT;AAGJ"}

package/dist/cli/plugin-commands.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from 'commander';
+import type { AnyPickApp } from '../core/app.js';
+export declare function registerPluginGroup(program: Command, app: AnyPickApp): void;
+//# sourceMappingURL=plugin-commands.d.ts.map

package/dist/cli/plugin-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-commands.d.ts","sourceRoot":"","sources":["../../src/cli/plugin-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAqD9C,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI,CAiL3E"}

package/dist/cli/plugin-commands.js

@@ -0,0 +1,160 @@
+import { ExitCode, anypickError } from "../utils/errors.js";
+import { info, next, success, warn } from "./ux.js";
+import pc from "picocolors";
+//#region src/cli/plugin-commands.ts
+function shortDigest(digest) {
+	return digest.slice(0, 12);
+}
+/**
+* Confirm a decision that grants a plugin the ability to run in-process.
+*
+* Deliberately not `confirmDelete`: the dangerous direction here is *enabling*,
+* so the prompt is required for the constructive verb rather than the
+* destructive one (ADR 0012).
+*/
+async function confirmTrust(gerund, question, yes) {
+	if (yes) return true;
+	if (!process.stdin.isTTY || !process.stdout.isTTY) throw anypickError(`${gerund} requires --yes in non-interactive mode.`, "CONFIRMATION_REQUIRED", {
+		exitCode: ExitCode.INVALID_USAGE,
+		mutated: false
+	});
+	const rl = (await import("node:readline/promises")).createInterface({
+		input: process.stdin,
+		output: process.stdout
+	});
+	const answer = await rl.question(`${question} [y/N] `);
+	rl.close();
+	if (!/^y(es)?$/i.test(answer.trim())) {
+		info("Cancelled.");
+		return false;
+	}
+	return true;
+}
+function printRecord(record, state) {
+	console.log(`  ${state} ${pc.bold(record.name.padEnd(20))} ${pc.dim(record.version.padEnd(10))} ${pc.dim(shortDigest(record.digest))}`);
+	console.log(`    ${pc.dim(record.path)}`);
+}
+function registerPluginGroup(program, app) {
+	const { plugins } = app;
+	const group = program.command("plugin").description("Manage plugins that extend AnyPick");
+	const opts = () => program.optsWithGlobals();
+	const jsonOut = () => Boolean(opts().json);
+	const yesFlag = () => opts().yes;
+	group.command("list").alias("ls").description("List installed plugins and their load status").action(() => {
+		const records = plugins.list();
+		const { loaded, failures } = app.pluginRuntime;
+		const loadedNames = new Set(loaded.map((l) => l.record.name));
+		const failureByName = new Map(failures.map((f) => [f.name, f]));
+		if (jsonOut()) {
+			console.log(JSON.stringify(records.map((r) => {
+				const failure = failureByName.get(r.name);
+				return {
+					name: r.name,
+					version: r.version,
+					path: r.path,
+					enabled: r.enabled,
+					digest: r.digest,
+					loaded: loadedNames.has(r.name),
+					failure: failure ? {
+						reason: failure.reason,
+						untrusted: failure.untrusted
+					} : null,
+					addedAt: r.addedAt,
+					updatedAt: r.updatedAt
+				};
+			}), null, 2));
+			return;
+		}
+		if (records.length === 0) {
+			console.log(pc.dim("No plugins installed."));
+			next("anypick plugin add <dir>", "install a plugin directory");
+			return;
+		}
+		for (const r of records) {
+			const failure = failureByName.get(r.name);
+			printRecord(r, !r.enabled ? pc.dim("off ") : failure ? pc.red("fail") : loadedNames.has(r.name) ? pc.green("on  ") : pc.yellow("?   "));
+			if (failure) {
+				console.log(`    ${pc.red(failure.reason)}`);
+				if (failure.untrusted) console.log(`    ${pc.dim(`→ anypick plugin trust ${r.name}`)}`);
+			}
+		}
+	});
+	group.command("add").description("Install a plugin directory (disabled until you enable it)").argument("<dir>", `directory containing anypick.plugin.json`).action(async (dir) => {
+		const record = await plugins.add(dir);
+		if (jsonOut()) {
+			console.log(JSON.stringify(record, null, 2));
+			return;
+		}
+		success(`Added ${record.name} ${record.version} (${shortDigest(record.digest)})`);
+		if (!record.enabled) next(`anypick plugin enable ${record.name}`, "plugins do not run until enabled");
+	});
+	group.command("remove").alias("rm").description("Uninstall a plugin").argument("<name>").action(async (name) => {
+		await plugins.remove(name);
+		if (jsonOut()) {
+			console.log(JSON.stringify({
+				name,
+				removed: true
+			}, null, 2));
+			return;
+		}
+		success(`Removed ${name}`);
+	});
+	group.command("enable").description("Allow a plugin to load into the AnyPick process").argument("<name>").action(async (name) => {
+		const existing = plugins.get(name);
+		if (existing?.enabled) {
+			if (jsonOut()) {
+				console.log(JSON.stringify(existing, null, 2));
+				return;
+			}
+			info(`${name} is already enabled.`);
+			return;
+		}
+		if (!jsonOut() && existing) {
+			warn(`${name} runs in-process with full access to every credential AnyPick manages.`);
+			console.log(`  ${pc.dim(existing.path)}`);
+			console.log(`  ${pc.dim("Treat enable like installing a shell plugin — not a config toggle.")}`);
+			console.log(`  ${pc.dim("Package digest is re-checked before every import; changes require trust.")}`);
+		}
+		if (!await confirmTrust(`Enabling ${name}`, `Enable ${name} and grant it access to your credentials?`, yesFlag())) {
+			process.exitCode = 130;
+			return;
+		}
+		const record = await plugins.setEnabled(name, true);
+		if (jsonOut()) {
+			console.log(JSON.stringify(record, null, 2));
+			return;
+		}
+		success(`Enabled ${name}`);
+		next("anypick plugin list", "confirm it loads on the next run");
+	});
+	group.command("disable").description("Stop loading a plugin without uninstalling it").argument("<name>").action(async (name) => {
+		const record = await plugins.setEnabled(name, false);
+		if (jsonOut()) {
+			console.log(JSON.stringify(record, null, 2));
+			return;
+		}
+		success(`Disabled ${name}`);
+	});
+	group.command("trust").description("Re-pin a plugin digest after reviewing changed code").argument("<name>").action(async (name) => {
+		const existing = plugins.get(name);
+		if (!jsonOut() && existing) warn(`This approves the code currently at ${existing.path}.`);
+		if (!await confirmTrust(`Trusting ${name}`, `Trust the current code of ${name}?`, yesFlag())) {
+			process.exitCode = 130;
+			return;
+		}
+		const { record, previousDigest } = await plugins.trust(name);
+		if (jsonOut()) {
+			console.log(JSON.stringify({
+				...record,
+				previousDigest
+			}, null, 2));
+			return;
+		}
+		success(`Trusted ${name} ${record.version}`);
+		console.log(`  ${pc.dim(shortDigest(previousDigest))} → ${pc.bold(shortDigest(record.digest))}`);
+	});
+}
+//#endregion
+export { registerPluginGroup };
+
+//# sourceMappingURL=plugin-commands.js.map

package/dist/cli/plugin-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-commands.js","names":[],"sources":["../../src/cli/plugin-commands.ts"],"sourcesContent":["import type { Command } from 'commander';\nimport pc from 'picocolors';\nimport type { AnyPickApp } from '../core/app';\nimport type { PluginRecord } from '../types';\nimport { ExitCode, anypickError } from '../utils/errors';\nimport { info, next, success, warn } from './ux';\n\ninterface PluginGlobals {\n  json?: boolean;\n  yes?: boolean;\n}\n\nfunction shortDigest(digest: string): string {\n  return digest.slice(0, 12);\n}\n\n/**\n * Confirm a decision that grants a plugin the ability to run in-process.\n *\n * Deliberately not `confirmDelete`: the dangerous direction here is *enabling*,\n * so the prompt is required for the constructive verb rather than the\n * destructive one (ADR 0012).\n */\nasync function confirmTrust(gerund: string, question: string, yes?: boolean): Promise<boolean> {\n  if (yes) {\n    return true;\n  }\n  if (!process.stdin.isTTY || !process.stdout.isTTY) {\n    throw anypickError(\n      `${gerund} requires --yes in non-interactive mode.`,\n      'CONFIRMATION_REQUIRED',\n      {\n        exitCode: ExitCode.INVALID_USAGE,\n        mutated: false,\n      },\n    );\n  }\n  const readline = await import('node:readline/promises');\n  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });\n  const answer = await rl.question(`${question} [y/N] `);\n  rl.close();\n  if (!/^y(es)?$/i.test(answer.trim())) {\n    info('Cancelled.');\n    return false;\n  }\n  return true;\n}\n\nfunction printRecord(record: PluginRecord, state: string): void {\n  console.log(\n    `  ${state} ${pc.bold(record.name.padEnd(20))} ${pc.dim(record.version.padEnd(10))} ${pc.dim(shortDigest(record.digest))}`,\n  );\n  console.log(`    ${pc.dim(record.path)}`);\n}\n\nexport function registerPluginGroup(program: Command, app: AnyPickApp): void {\n  const { plugins } = app;\n  const group = program.command('plugin').description('Manage plugins that extend AnyPick');\n\n  const opts = (): PluginGlobals => program.optsWithGlobals();\n  const jsonOut = (): boolean => Boolean(opts().json);\n  const yesFlag = (): boolean | undefined => opts().yes;\n\n  group\n    .command('list')\n    .alias('ls')\n    .description('List installed plugins and their load status')\n    .action(() => {\n      const records = plugins.list();\n      const { loaded, failures } = app.pluginRuntime;\n      const loadedNames = new Set(loaded.map((l) => l.record.name));\n      const failureByName = new Map(failures.map((f) => [f.name, f]));\n\n      if (jsonOut()) {\n        console.log(\n          JSON.stringify(\n            records.map((r) => {\n              const failure = failureByName.get(r.name);\n              return {\n                name: r.name,\n                version: r.version,\n                path: r.path,\n                enabled: r.enabled,\n                digest: r.digest,\n                loaded: loadedNames.has(r.name),\n                failure: failure ? { reason: failure.reason, untrusted: failure.untrusted } : null,\n                addedAt: r.addedAt,\n                updatedAt: r.updatedAt,\n              };\n            }),\n            null,\n            2,\n          ),\n        );\n        return;\n      }\n\n      if (records.length === 0) {\n        console.log(pc.dim('No plugins installed.'));\n        next('anypick plugin add <dir>', 'install a plugin directory');\n        return;\n      }\n      for (const r of records) {\n        const failure = failureByName.get(r.name);\n        const state = !r.enabled\n          ? pc.dim('off ')\n          : failure\n            ? pc.red('fail')\n            : loadedNames.has(r.name)\n              ? pc.green('on  ')\n              : pc.yellow('?   ');\n        printRecord(r, state);\n        if (failure) {\n          console.log(`    ${pc.red(failure.reason)}`);\n          if (failure.untrusted) {\n            console.log(`    ${pc.dim(`→ anypick plugin trust ${r.name}`)}`);\n          }\n        }\n      }\n    });\n\n  group\n    .command('add')\n    .description('Install a plugin directory (disabled until you enable it)')\n    .argument('<dir>', `directory containing anypick.plugin.json`)\n    .action(async (dir: string) => {\n      const record = await plugins.add(dir);\n      if (jsonOut()) {\n        console.log(JSON.stringify(record, null, 2));\n        return;\n      }\n      success(`Added ${record.name} ${record.version} (${shortDigest(record.digest)})`);\n      if (!record.enabled) {\n        next(`anypick plugin enable ${record.name}`, 'plugins do not run until enabled');\n      }\n    });\n\n  group\n    .command('remove')\n    .alias('rm')\n    .description('Uninstall a plugin')\n    .argument('<name>')\n    .action(async (name: string) => {\n      await plugins.remove(name);\n      if (jsonOut()) {\n        console.log(JSON.stringify({ name, removed: true }, null, 2));\n        return;\n      }\n      success(`Removed ${name}`);\n    });\n\n  group\n    .command('enable')\n    .description('Allow a plugin to load into the AnyPick process')\n    .argument('<name>')\n    .action(async (name: string) => {\n      const existing = plugins.get(name);\n      if (existing?.enabled) {\n        if (jsonOut()) {\n          console.log(JSON.stringify(existing, null, 2));\n          return;\n        }\n        info(`${name} is already enabled.`);\n        return;\n      }\n      if (!jsonOut() && existing) {\n        warn(`${name} runs in-process with full access to every credential AnyPick manages.`);\n        console.log(`  ${pc.dim(existing.path)}`);\n        console.log(\n          `  ${pc.dim('Treat enable like installing a shell plugin — not a config toggle.')}`,\n        );\n        console.log(\n          `  ${pc.dim('Package digest is re-checked before every import; changes require trust.')}`,\n        );\n      }\n      if (\n        !(await confirmTrust(\n          `Enabling ${name}`,\n          `Enable ${name} and grant it access to your credentials?`,\n          yesFlag(),\n        ))\n      ) {\n        process.exitCode = 130;\n        return;\n      }\n      const record = await plugins.setEnabled(name, true);\n      if (jsonOut()) {\n        console.log(JSON.stringify(record, null, 2));\n        return;\n      }\n      success(`Enabled ${name}`);\n      next('anypick plugin list', 'confirm it loads on the next run');\n    });\n\n  group\n    .command('disable')\n    .description('Stop loading a plugin without uninstalling it')\n    .argument('<name>')\n    .action(async (name: string) => {\n      const record = await plugins.setEnabled(name, false);\n      if (jsonOut()) {\n        console.log(JSON.stringify(record, null, 2));\n        return;\n      }\n      success(`Disabled ${name}`);\n    });\n\n  group\n    .command('trust')\n    .description('Re-pin a plugin digest after reviewing changed code')\n    .argument('<name>')\n    .action(async (name: string) => {\n      const existing = plugins.get(name);\n      if (!jsonOut() && existing) {\n        warn(`This approves the code currently at ${existing.path}.`);\n      }\n      if (\n        !(await confirmTrust(`Trusting ${name}`, `Trust the current code of ${name}?`, yesFlag()))\n      ) {\n        process.exitCode = 130;\n        return;\n      }\n      const { record, previousDigest } = await plugins.trust(name);\n      if (jsonOut()) {\n        console.log(JSON.stringify({ ...record, previousDigest }, null, 2));\n        return;\n      }\n      success(`Trusted ${name} ${record.version}`);\n      console.log(\n        `  ${pc.dim(shortDigest(previousDigest))} → ${pc.bold(shortDigest(record.digest))}`,\n      );\n    });\n}\n"],"mappings":";;;;AAYA,SAAS,YAAY,QAAwB;CAC3C,OAAO,OAAO,MAAM,GAAG,EAAE;AAC3B;;;;;;;;AASA,eAAe,aAAa,QAAgB,UAAkB,KAAiC;CAC7F,IAAI,KACF,OAAO;CAET,IAAI,CAAC,QAAQ,MAAM,SAAS,CAAC,QAAQ,OAAO,OAC1C,MAAM,aACJ,GAAG,OAAO,2CACV,yBACA;EACE,UAAU,SAAS;EACnB,SAAS;CACX,CACF;CAGF,MAAM,MAAK,MADY,OAAO,0BAAA,CACV,gBAAgB;EAAE,OAAO,QAAQ;EAAO,QAAQ,QAAQ;CAAO,CAAC;CACpF,MAAM,SAAS,MAAM,GAAG,SAAS,GAAG,SAAS,QAAQ;CACrD,GAAG,MAAM;CACT,IAAI,CAAC,YAAY,KAAK,OAAO,KAAK,CAAC,GAAG;EACpC,KAAK,YAAY;EACjB,OAAO;CACT;CACA,OAAO;AACT;AAEA,SAAS,YAAY,QAAsB,OAAqB;CAC9D,QAAQ,IACN,KAAK,MAAM,GAAG,GAAG,KAAK,OAAO,KAAK,OAAO,EAAE,CAAC,EAAE,GAAG,GAAG,IAAI,OAAO,QAAQ,OAAO,EAAE,CAAC,EAAE,GAAG,GAAG,IAAI,YAAY,OAAO,MAAM,CAAC,GACzH;CACA,QAAQ,IAAI,OAAO,GAAG,IAAI,OAAO,IAAI,GAAG;AAC1C;AAEA,SAAgB,oBAAoB,SAAkB,KAAuB;CAC3E,MAAM,EAAE,YAAY;CACpB,MAAM,QAAQ,QAAQ,QAAQ,QAAQ,CAAC,CAAC,YAAY,oCAAoC;CAExF,MAAM,aAA4B,QAAQ,gBAAgB;CAC1D,MAAM,gBAAyB,QAAQ,KAAK,CAAC,CAAC,IAAI;CAClD,MAAM,gBAAqC,KAAK,CAAC,CAAC;CAElD,MACG,QAAQ,MAAM,CAAC,CACf,MAAM,IAAI,CAAC,CACX,YAAY,8CAA8C,CAAC,CAC3D,aAAa;EACZ,MAAM,UAAU,QAAQ,KAAK;EAC7B,MAAM,EAAE,QAAQ,aAAa,IAAI;EACjC,MAAM,cAAc,IAAI,IAAI,OAAO,KAAK,MAAM,EAAE,OAAO,IAAI,CAAC;EAC5D,MAAM,gBAAgB,IAAI,IAAI,SAAS,KAAK,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;EAE9D,IAAI,QAAQ,GAAG;GACb,QAAQ,IACN,KAAK,UACH,QAAQ,KAAK,MAAM;IACjB,MAAM,UAAU,cAAc,IAAI,EAAE,IAAI;IACxC,OAAO;KACL,MAAM,EAAE;KACR,SAAS,EAAE;KACX,MAAM,EAAE;KACR,SAAS,EAAE;KACX,QAAQ,EAAE;KACV,QAAQ,YAAY,IAAI,EAAE,IAAI;KAC9B,SAAS,UAAU;MAAE,QAAQ,QAAQ;MAAQ,WAAW,QAAQ;KAAU,IAAI;KAC9E,SAAS,EAAE;KACX,WAAW,EAAE;IACf;GACF,CAAC,GACD,MACA,CACF,CACF;GACA;EACF;EAEA,IAAI,QAAQ,WAAW,GAAG;GACxB,QAAQ,IAAI,GAAG,IAAI,uBAAuB,CAAC;GAC3C,KAAK,4BAA4B,4BAA4B;GAC7D;EACF;EACA,KAAK,MAAM,KAAK,SAAS;GACvB,MAAM,UAAU,cAAc,IAAI,EAAE,IAAI;GAQxC,YAAY,GAPE,CAAC,EAAE,UACb,GAAG,IAAI,MAAM,IACb,UACE,GAAG,IAAI,MAAM,IACb,YAAY,IAAI,EAAE,IAAI,IACpB,GAAG,MAAM,MAAM,IACf,GAAG,OAAO,MAAM,CACJ;GACpB,IAAI,SAAS;IACX,QAAQ,IAAI,OAAO,GAAG,IAAI,QAAQ,MAAM,GAAG;IAC3C,IAAI,QAAQ,WACV,QAAQ,IAAI,OAAO,GAAG,IAAI,0BAA0B,EAAE,MAAM,GAAG;GAEnE;EACF;CACF,CAAC;CAEH,MACG,QAAQ,KAAK,CAAC,CACd,YAAY,2DAA2D,CAAC,CACxE,SAAS,SAAS,0CAA0C,CAAC,CAC7D,OAAO,OAAO,QAAgB;EAC7B,MAAM,SAAS,MAAM,QAAQ,IAAI,GAAG;EACpC,IAAI,QAAQ,GAAG;GACb,QAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;GAC3C;EACF;EACA,QAAQ,SAAS,OAAO,KAAK,GAAG,OAAO,QAAQ,IAAI,YAAY,OAAO,MAAM,EAAE,EAAE;EAChF,IAAI,CAAC,OAAO,SACV,KAAK,yBAAyB,OAAO,QAAQ,kCAAkC;CAEnF,CAAC;CAEH,MACG,QAAQ,QAAQ,CAAC,CACjB,MAAM,IAAI,CAAC,CACX,YAAY,oBAAoB,CAAC,CACjC,SAAS,QAAQ,CAAC,CAClB,OAAO,OAAO,SAAiB;EAC9B,MAAM,QAAQ,OAAO,IAAI;EACzB,IAAI,QAAQ,GAAG;GACb,QAAQ,IAAI,KAAK,UAAU;IAAE;IAAM,SAAS;GAAK,GAAG,MAAM,CAAC,CAAC;GAC5D;EACF;EACA,QAAQ,WAAW,MAAM;CAC3B,CAAC;CAEH,MACG,QAAQ,QAAQ,CAAC,CACjB,YAAY,iDAAiD,CAAC,CAC9D,SAAS,QAAQ,CAAC,CAClB,OAAO,OAAO,SAAiB;EAC9B,MAAM,WAAW,QAAQ,IAAI,IAAI;EACjC,IAAI,UAAU,SAAS;GACrB,IAAI,QAAQ,GAAG;IACb,QAAQ,IAAI,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;IAC7C;GACF;GACA,KAAK,GAAG,KAAK,qBAAqB;GAClC;EACF;EACA,IAAI,CAAC,QAAQ,KAAK,UAAU;GAC1B,KAAK,GAAG,KAAK,uEAAuE;GACpF,QAAQ,IAAI,KAAK,GAAG,IAAI,SAAS,IAAI,GAAG;GACxC,QAAQ,IACN,KAAK,GAAG,IAAI,oEAAoE,GAClF;GACA,QAAQ,IACN,KAAK,GAAG,IAAI,0EAA0E,GACxF;EACF;EACA,IACE,CAAE,MAAM,aACN,YAAY,QACZ,UAAU,KAAK,4CACf,QAAQ,CACV,GACA;GACA,QAAQ,WAAW;GACnB;EACF;EACA,MAAM,SAAS,MAAM,QAAQ,WAAW,MAAM,IAAI;EAClD,IAAI,QAAQ,GAAG;GACb,QAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;GAC3C;EACF;EACA,QAAQ,WAAW,MAAM;EACzB,KAAK,uBAAuB,kCAAkC;CAChE,CAAC;CAEH,MACG,QAAQ,SAAS,CAAC,CAClB,YAAY,+CAA+C,CAAC,CAC5D,SAAS,QAAQ,CAAC,CAClB,OAAO,OAAO,SAAiB;EAC9B,MAAM,SAAS,MAAM,QAAQ,WAAW,MAAM,KAAK;EACnD,IAAI,QAAQ,GAAG;GACb,QAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;GAC3C;EACF;EACA,QAAQ,YAAY,MAAM;CAC5B,CAAC;CAEH,MACG,QAAQ,OAAO,CAAC,CAChB,YAAY,qDAAqD,CAAC,CAClE,SAAS,QAAQ,CAAC,CAClB,OAAO,OAAO,SAAiB;EAC9B,MAAM,WAAW,QAAQ,IAAI,IAAI;EACjC,IAAI,CAAC,QAAQ,KAAK,UAChB,KAAK,uCAAuC,SAAS,KAAK,EAAE;EAE9D,IACE,CAAE,MAAM,aAAa,YAAY,QAAQ,6BAA6B,KAAK,IAAI,QAAQ,CAAC,GACxF;GACA,QAAQ,WAAW;GACnB;EACF;EACA,MAAM,EAAE,QAAQ,mBAAmB,MAAM,QAAQ,MAAM,IAAI;EAC3D,IAAI,QAAQ,GAAG;GACb,QAAQ,IAAI,KAAK,UAAU;IAAE,GAAG;IAAQ;GAAe,GAAG,MAAM,CAAC,CAAC;GAClE;EACF;EACA,QAAQ,WAAW,KAAK,GAAG,OAAO,SAAS;EAC3C,QAAQ,IACN,KAAK,GAAG,IAAI,YAAY,cAAc,CAAC,EAAE,KAAK,GAAG,KAAK,YAAY,OAAO,MAAM,CAAC,GAClF;CACF,CAAC;AACL"}

package/dist/cli/primary.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Primary DX command surface (spec §5): use, run, current, list, add, link, unlink, reset.
+ */
+import { Command } from 'commander';
+import type { AnyPickApp } from '../core/app.js';
+export interface GlobalOpts {
+    json?: boolean;
+    verbose?: boolean;
+    dryRun?: boolean;
+    reveal?: boolean;
+    quiet?: boolean;
+    /** Commander exposes a negated --no-input option as `input: false`. */
+    input?: boolean;
+    yes?: boolean;
+    trace?: boolean;
+}
+export declare function registerPrimaryCommands(program: Command, app: AnyPickApp, globals: () => GlobalOpts): void;
+//# sourceMappingURL=primary.d.ts.map

package/dist/cli/primary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"primary.d.ts","sourceRoot":"","sources":["../../src/cli/primary.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAS9C,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,uEAAuE;IACvE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAkJD,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,UAAU,EACf,OAAO,EAAE,MAAM,UAAU,GACxB,IAAI,CA60BN"}