anypick 1.0.0

package/dist/tray/snapshot-types.d.ts

@@ -0,0 +1,229 @@
+import type { ClientAdapter, ProxyHubSourceRef } from '../types.js';
+import type { TrayPreferences } from './settings.js';
+import type { TrayActivityRecord } from './activity.js';
+export interface TrayRouteSnapshot {
+    clientId: string;
+    client: string;
+    source?: string;
+    model?: string;
+    status: 'ready' | 'attention' | 'native' | 'unbound';
+}
+export type TrayActionKind = 'native' | 'gateway';
+/**
+ * Source-first switch kinds. One tray action per bindable source — models are
+ * configured in Configure Models or the client’s own picker, not Switch fan-out.
+ * Legacy `hub-model` / `gateway-model` were per-model actions and are gone.
+ */
+export type TrayRouteKind = 'direct-account' | 'account' | 'gateway' | 'pool' | 'hub';
+export interface TrayActionSnapshot {
+    id: string;
+    clientId: string;
+    sourceId: string;
+    client: string;
+    label: string;
+    detail?: string;
+    kind: TrayActionKind;
+    presentation: 'app-route' | 'native-account';
+    selected: boolean;
+    enabled: boolean;
+    disabledReason?: string;
+    routeKind?: TrayRouteKind;
+    modelId?: string;
+    upstreamProviderId?: string;
+    upstreamSourceLabel?: string;
+}
+export interface TrayActionTarget {
+    clientId: string;
+    source: string;
+    model?: string;
+    modelRoles?: Record<string, string>;
+}
+export interface TrayClientModelRoleSnapshot {
+    id: string;
+    label: string;
+}
+export interface TrayClientModelOptionSnapshot {
+    actionId: string;
+    modelId: string;
+    providerId: string;
+    sourceLabel: string;
+}
+export interface TrayClientModelConfigSnapshot {
+    clientId: string;
+    client: string;
+    sourceLabel?: string;
+    editable: boolean;
+    unavailableReason?: string;
+    roles: TrayClientModelRoleSnapshot[];
+    defaultModel?: string;
+    modelRoles: Record<string, string>;
+    options: TrayClientModelOptionSnapshot[];
+}
+export interface TrayAccountProxyActionTarget {
+    operation: 'enable' | 'disable' | 'restart';
+    providerId: string;
+    accountName: string;
+}
+/** Switch the live login for a provider that has no client routing surface (Grok, OpenCode). */
+export interface TrayAccountSwitchActionTarget {
+    operation: 'account-switch';
+    providerId: string;
+    accountName: string;
+}
+export interface TrayHubProxyActionTarget {
+    operation: 'hub-start' | 'hub-stop' | 'hub-restart';
+    name: string;
+}
+export interface TrayHubOwnerActionTarget {
+    operation: 'hub-own-models';
+    name: string;
+    models: string[];
+    source: ProxyHubSourceRef;
+}
+export interface TrayHubTestActionTarget {
+    operation: 'hub-test';
+    name: string;
+}
+export type TrayProxyActionTarget = TrayAccountProxyActionTarget | TrayAccountSwitchActionTarget | TrayHubProxyActionTarget | TrayHubOwnerActionTarget | TrayHubTestActionTarget;
+export interface TrayProxySnapshot {
+    id: string;
+    providerId: string;
+    label: string;
+    detail: string;
+    address?: string;
+    running: boolean;
+    enabled: boolean;
+    /** Whether this runtime has an allowlisted supervisor-owned log stream. */
+    logsAvailable?: boolean;
+    /** Present for the Hub's source, catalog, and routed-client summaries. */
+    sourceCount?: number;
+    modelCount?: number;
+    clientCount?: number;
+    conflictCount?: number;
+    toggleActionId: string;
+    restartActionId: string;
+    testActionId?: string;
+}
+export interface TrayManagedAccountSnapshot {
+    id: string;
+    providerId: string;
+    sourceId?: string;
+    name: string;
+    label: string;
+    detail: string;
+    active: boolean;
+    canRefresh: boolean;
+}
+/**
+ * A saved account the Hub can use as an upstream. This is deliberately only
+ * display and reference data: snapshot paths and credentials stay in the
+ * supervisor.
+ */
+export interface TrayHubSourceSnapshot {
+    id: string;
+    providerId: string;
+    name: string;
+    label: string;
+    detail: string;
+    enabled: boolean;
+    status: 'disabled' | 'ready' | 'unavailable';
+    modelCount: number;
+    warning?: string;
+}
+export interface TrayHubConflictCandidateSnapshot {
+    id: string;
+    providerId: string;
+    label: string;
+    detail: string;
+    actionId: string;
+}
+export interface TrayHubConflictSnapshot {
+    id: string;
+    kind: 'model-overlap' | 'source-choice';
+    title: string;
+    models: string[];
+    candidates: TrayHubConflictCandidateSnapshot[];
+}
+export interface TrayLogSourceSnapshot {
+    id: string;
+    label: string;
+    detail: string;
+    providerId: string;
+    name: string;
+}
+export interface TrayGatewaySnapshot {
+    id: string;
+    providerId: string;
+    name: string;
+    detail: string;
+    ready: boolean;
+    defaultModel?: string;
+}
+export interface TrayAccountProviderSnapshot {
+    id: string;
+    providerId: string;
+    /** Client that can be routed through this provider, when one exists. */
+    clientId?: string;
+    sourceId?: string;
+    label: string;
+    detail: string;
+    installed: boolean;
+    /**
+     * Provider can clear the live app login (local wipe only — not a remote
+     * logout). Used by the tray form so a second login can be signed in.
+     */
+    canClear?: boolean;
+}
+export interface TrayGatewayProviderSnapshot {
+    id: string;
+    label: string;
+    detail: string;
+    /**
+     * How a selection is saved. `gateway` (default) creates a catalog profile;
+     * `account-api-key` is a proxy-only account provider (e.g. Kiro) whose key is
+     * saved through account-save with an api-key credential, not gateway-create.
+     */
+    kind?: 'gateway' | 'account-api-key';
+    /** For `account-api-key`: region choices from the provider's credential input. */
+    regions?: string[];
+    regionDefault?: string;
+}
+export interface TrayUsageWindow {
+    label: string;
+    remainingPercent: number;
+    resetsAtMs?: number;
+}
+export interface TrayUsageSnapshot {
+    client: string;
+    account: string;
+    windows: TrayUsageWindow[];
+}
+export interface TrayActionRegistry {
+    revision: number;
+    register(target: TrayActionTarget | TrayProxyActionTarget): string;
+}
+export interface TraySnapshotOptions {
+    usage?: TrayUsageSnapshot[];
+    settings?: TrayPreferences;
+    activity?: TrayActivityRecord[];
+    isNativeSourceInstalled?: (client: ClientAdapter, sourceId: string) => Promise<boolean>;
+}
+export interface TraySnapshot {
+    proxyCount: number;
+    revision: number;
+    routes: TrayRouteSnapshot[];
+    actions: TrayActionSnapshot[];
+    clientModelConfigs: TrayClientModelConfigSnapshot[];
+    usage: TrayUsageSnapshot[];
+    proxies: TrayProxySnapshot[];
+    accounts: TrayManagedAccountSnapshot[];
+    hubSources: TrayHubSourceSnapshot[];
+    hubConflicts: TrayHubConflictSnapshot[];
+    logSources: TrayLogSourceSnapshot[];
+    gateways: TrayGatewaySnapshot[];
+    accountProviders: TrayAccountProviderSnapshot[];
+    gatewayProviders: TrayGatewayProviderSnapshot[];
+    settings: TrayPreferences;
+    activity: TrayActivityRecord[];
+}
+//# sourceMappingURL=snapshot-types.d.ts.map

package/dist/tray/snapshot-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-types.d.ts","sourceRoot":"","sources":["../../src/tray/snapshot-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;CACtD;AAED,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,SAAS,CAAC;AAClD;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,gBAAgB,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,KAAK,CAAC;AAEtF,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,cAAc,CAAC;IACrB,YAAY,EAAE,WAAW,GAAG,gBAAgB,CAAC;IAC7C,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,2BAA2B,EAAE,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,EAAE,6BAA6B,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,4BAA4B;IAC3C,SAAS,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,gGAAgG;AAChG,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,gBAAgB,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,WAAW,GAAG,UAAU,GAAG,aAAa,CAAC;IACpD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,iBAAiB,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,UAAU,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,qBAAqB,GAC7B,4BAA4B,GAC5B,6BAA6B,GAC7B,wBAAwB,GACxB,wBAAwB,GACxB,uBAAuB,CAAC;AAE5B,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,UAAU,GAAG,OAAO,GAAG,aAAa,CAAC;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gCAAgC;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,eAAe,GAAG,eAAe,CAAC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,gCAAgC,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,IAAI,CAAC,EAAE,SAAS,GAAG,iBAAiB,CAAC;IACrC,kFAAkF;IAClF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,eAAe,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,qBAAqB,GAAG,MAAM,CAAC;CACpE;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC5B,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,QAAQ,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAChC,uBAAuB,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACzF;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,kBAAkB,EAAE,6BAA6B,EAAE,CAAC;IACpD,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,QAAQ,EAAE,0BAA0B,EAAE,CAAC;IACvC,UAAU,EAAE,qBAAqB,EAAE,CAAC;IACpC,YAAY,EAAE,uBAAuB,EAAE,CAAC;IACxC,UAAU,EAAE,qBAAqB,EAAE,CAAC;IACpC,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,gBAAgB,EAAE,2BAA2B,EAAE,CAAC;IAChD,gBAAgB,EAAE,2BAA2B,EAAE,CAAC;IAChD,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE,kBAAkB,EAAE,CAAC;CAChC"}

package/dist/tray/snapshot-usage.d.ts

@@ -0,0 +1,9 @@
+import type { AnyPickApp } from '../core/app.js';
+import type { TrayUsageSnapshot } from './snapshot-types.js';
+/**
+ * Read quota only for provider credentials that are live on disk. Never
+ * restores or authenticates with a saved AnyPick account just to populate the
+ * tray, so a usage card can never belong to a hidden account.
+ */
+export declare function buildTrayUsage(app: AnyPickApp): Promise<TrayUsageSnapshot[]>;
+//# sourceMappingURL=snapshot-usage.d.ts.map

package/dist/tray/snapshot-usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-usage.d.ts","sourceRoot":"","sources":["../../src/tray/snapshot-usage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,KAAK,EAAE,iBAAiB,EAAmB,MAAM,kBAAkB,CAAC;AAE3E;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAqClF"}

package/dist/tray/snapshot-usage.js

@@ -0,0 +1,35 @@
+import { shortClientName } from "../presentation/client-name.js";
+//#region src/tray/snapshot-usage.ts
+/**
+* Read quota only for provider credentials that are live on disk. Never
+* restores or authenticates with a saved AnyPick account just to populate the
+* tray, so a usage card can never belong to a hidden account.
+*/
+async function buildTrayUsage(app) {
+	const liveAccounts = (await app.accounts.list().catch(() => [])).filter((account) => account.isLiveMatch);
+	const clients = app.clients.list();
+	const providers = [...new Set(liveAccounts.map((account) => account.provider))];
+	return (await Promise.all(providers.map(async (providerId) => {
+		const client = clients.find((candidate) => candidate.id === providerId);
+		if (!client) return null;
+		const usage = await app.accounts.liveUsage(providerId).catch(() => null);
+		if (!usage?.windows.length) return null;
+		const account = liveAccounts.find((candidate) => candidate.provider === providerId);
+		return {
+			client: shortClientName(client.id, client.name, client.shortName),
+			account: account?.label ?? account?.name ?? providerId,
+			windows: usage.windows.filter((window) => window.label.trim()).map((window) => {
+				const normalized = {
+					label: window.label.trim().slice(0, 24),
+					remainingPercent: Math.max(0, Math.min(100, Math.round(window.remainingPercent)))
+				};
+				if (window.resetsAtMs != null && Number.isFinite(window.resetsAtMs)) normalized.resetsAtMs = window.resetsAtMs;
+				return normalized;
+			})
+		};
+	}))).filter((card) => card !== null && card.windows.length > 0);
+}
+//#endregion
+export { buildTrayUsage };
+
+//# sourceMappingURL=snapshot-usage.js.map

package/dist/tray/snapshot-usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-usage.js","names":[],"sources":["../../src/tray/snapshot-usage.ts"],"sourcesContent":["import type { AnyPickApp } from '../core/app';\nimport { shortClientName } from '../presentation/client-name';\nimport type { TrayUsageSnapshot, TrayUsageWindow } from './snapshot-types';\n\n/**\n * Read quota only for provider credentials that are live on disk. Never\n * restores or authenticates with a saved AnyPick account just to populate the\n * tray, so a usage card can never belong to a hidden account.\n */\nexport async function buildTrayUsage(app: AnyPickApp): Promise<TrayUsageSnapshot[]> {\n  const listedAccounts = await app.accounts.list().catch(() => []);\n  const liveAccounts = listedAccounts.filter((account) => account.isLiveMatch);\n  const clients = app.clients.list();\n  const providers = [...new Set(liveAccounts.map((account) => account.provider))];\n  const cards = await Promise.all(\n    providers.map(async (providerId): Promise<TrayUsageSnapshot | null> => {\n      const client = clients.find((candidate) => candidate.id === providerId);\n      if (!client) {\n        return null;\n      }\n      const usage = await app.accounts.liveUsage(providerId).catch(() => null);\n      if (!usage?.windows.length) {\n        return null;\n      }\n      const account = liveAccounts.find((candidate) => candidate.provider === providerId);\n      return {\n        client: shortClientName(client.id, client.name, client.shortName),\n        account: account?.label ?? account?.name ?? providerId,\n        windows: usage.windows\n          .filter((window) => window.label.trim())\n          .map((window) => {\n            const normalized: TrayUsageWindow = {\n              label: window.label.trim().slice(0, 24),\n              remainingPercent: Math.max(0, Math.min(100, Math.round(window.remainingPercent))),\n            };\n            if (window.resetsAtMs != null && Number.isFinite(window.resetsAtMs)) {\n              normalized.resetsAtMs = window.resetsAtMs;\n            }\n            return normalized;\n          }),\n      };\n    }),\n  );\n  return cards.filter(\n    (card): card is TrayUsageSnapshot => card !== null && card.windows.length > 0,\n  );\n}\n"],"mappings":";;;;;;;AASA,eAAsB,eAAe,KAA+C;CAElF,MAAM,gBAAe,MADQ,IAAI,SAAS,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,EAAA,CAC3B,QAAQ,YAAY,QAAQ,WAAW;CAC3E,MAAM,UAAU,IAAI,QAAQ,KAAK;CACjC,MAAM,YAAY,CAAC,GAAG,IAAI,IAAI,aAAa,KAAK,YAAY,QAAQ,QAAQ,CAAC,CAAC;CA8B9E,QAAO,MA7Ba,QAAQ,IAC1B,UAAU,IAAI,OAAO,eAAkD;EACrE,MAAM,SAAS,QAAQ,MAAM,cAAc,UAAU,OAAO,UAAU;EACtE,IAAI,CAAC,QACH,OAAO;EAET,MAAM,QAAQ,MAAM,IAAI,SAAS,UAAU,UAAU,CAAC,CAAC,YAAY,IAAI;EACvE,IAAI,CAAC,OAAO,QAAQ,QAClB,OAAO;EAET,MAAM,UAAU,aAAa,MAAM,cAAc,UAAU,aAAa,UAAU;EAClF,OAAO;GACL,QAAQ,gBAAgB,OAAO,IAAI,OAAO,MAAM,OAAO,SAAS;GAChE,SAAS,SAAS,SAAS,SAAS,QAAQ;GAC5C,SAAS,MAAM,QACZ,QAAQ,WAAW,OAAO,MAAM,KAAK,CAAC,CAAC,CACvC,KAAK,WAAW;IACf,MAAM,aAA8B;KAClC,OAAO,OAAO,MAAM,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;KACtC,kBAAkB,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,KAAK,MAAM,OAAO,gBAAgB,CAAC,CAAC;IAClF;IACA,IAAI,OAAO,cAAc,QAAQ,OAAO,SAAS,OAAO,UAAU,GAChE,WAAW,aAAa,OAAO;IAEjC,OAAO;GACT,CAAC;EACL;CACF,CAAC,CACH,EAAA,CACa,QACV,SAAoC,SAAS,QAAQ,KAAK,QAAQ,SAAS,CAC9E;AACF"}

package/dist/tray/snapshot.d.ts

@@ -0,0 +1,7 @@
+import type { AnyPickApp } from '../core/app.js';
+import { accountProviderPriority } from './snapshot-helpers.js';
+import type { TrayActionRegistry, TraySnapshot, TraySnapshotOptions } from './snapshot-types.js';
+export { accountProviderPriority };
+/** Glanceable tray state. Only loopback proxy addresses cross; credentials, remote endpoints, and proxy tokens never do. */
+export declare function buildTraySnapshot(app: AnyPickApp, proxyCount: number, registry?: TrayActionRegistry, opts?: TraySnapshotOptions): Promise<TraySnapshot>;
+//# sourceMappingURL=snapshot.d.ts.map

package/dist/tray/snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../../src/tray/snapshot.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAW7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAE9F,OAAO,EAAE,uBAAuB,EAAE,CAAC;AAEnC,4HAA4H;AAC5H,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,UAAU,EACf,UAAU,EAAE,MAAM,EAClB,QAAQ,CAAC,EAAE,kBAAkB,EAC7B,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,YAAY,CAAC,CAwDvB"}

package/dist/tray/snapshot.js

@@ -0,0 +1,48 @@
+import "./snapshot-helpers.js";
+import { buildTrayClientSnapshots } from "./snapshot-client-routes.js";
+import { buildHubConflictGroups, buildTrayHubSources } from "./snapshot-hub.js";
+import { buildProviderSwitchActions, buildTrayAccountProviders, buildTrayGatewayProviders, buildTrayGateways, buildTrayLogSources, buildTrayManagedAccounts, buildTrayProxySnapshots } from "./snapshot-resources.js";
+//#region src/tray/snapshot.ts
+/** Glanceable tray state. Only loopback proxy addresses cross; credentials, remote endpoints, and proxy tokens never do. */
+async function buildTraySnapshot(app, proxyCount, registry, opts = {}) {
+	const listedAccounts = await app.accounts.list().catch(() => []);
+	const hubConfig = await app.hub.get().catch(() => null);
+	const hubPreview = hubConfig ? await app.hub.preview(hubConfig.name).catch(() => null) : null;
+	const clients = await buildTrayClientSnapshots(app, listedAccounts, hubPreview, registry, opts);
+	const routes = clients.map((client) => client.route);
+	const { proxies, hubRunning, proxyRows } = await buildTrayProxySnapshots(app, routes, registry);
+	const gateways = await buildTrayGateways(app);
+	const accountProviders = await buildTrayAccountProviders(app, opts);
+	const managedAccounts = await buildTrayManagedAccounts(app, listedAccounts);
+	const providerSwitchActions = buildProviderSwitchActions(app, listedAccounts, managedAccounts, registry);
+	const hubSources = buildTrayHubSources(app, managedAccounts, hubConfig, hubPreview);
+	const hubConflicts = buildHubConflictGroups(app, listedAccounts, hubPreview, registry);
+	const logSources = buildTrayLogSources(app, hubConfig, proxyRows);
+	return {
+		proxyCount: proxyCount + Number(hubRunning),
+		revision: registry?.revision ?? 0,
+		routes,
+		actions: [...clients.flatMap((client) => client.actions), ...providerSwitchActions].filter((action) => action.enabled),
+		clientModelConfigs: clients.flatMap((client) => client.modelConfig ? [client.modelConfig] : []),
+		usage: opts.usage ?? [],
+		proxies,
+		accounts: managedAccounts,
+		hubSources,
+		hubConflicts,
+		logSources,
+		gateways,
+		accountProviders,
+		gatewayProviders: buildTrayGatewayProviders(app),
+		settings: opts.settings ?? {
+			launchAtLogin: false,
+			startEnabledProxies: true,
+			showQuota: true,
+			quotaGuardEnabled: false
+		},
+		activity: opts.activity ?? []
+	};
+}
+//#endregion
+export { buildTraySnapshot };
+
+//# sourceMappingURL=snapshot.js.map

package/dist/tray/snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.js","names":[],"sources":["../../src/tray/snapshot.ts"],"sourcesContent":["import type { AnyPickApp } from '../core/app';\nimport { buildTrayClientSnapshots } from './snapshot-client-routes';\nimport { accountProviderPriority } from './snapshot-helpers';\nimport { buildHubConflictGroups, buildTrayHubSources } from './snapshot-hub';\nimport {\n  buildProviderSwitchActions,\n  buildTrayAccountProviders,\n  buildTrayGateways,\n  buildTrayGatewayProviders,\n  buildTrayLogSources,\n  buildTrayManagedAccounts,\n  buildTrayProxySnapshots,\n} from './snapshot-resources';\nimport type { TrayActionRegistry, TraySnapshot, TraySnapshotOptions } from './snapshot-types';\n\nexport { accountProviderPriority };\n\n/** Glanceable tray state. Only loopback proxy addresses cross; credentials, remote endpoints, and proxy tokens never do. */\nexport async function buildTraySnapshot(\n  app: AnyPickApp,\n  proxyCount: number,\n  registry?: TrayActionRegistry,\n  opts: TraySnapshotOptions = {},\n): Promise<TraySnapshot> {\n  // A native login can be live before AnyPick has a global binding. Keep the\n  // account checkmark and route label truthful in that state too; the binding\n  // is only the persistent selection, not proof of what is on disk right now.\n  const listedAccounts = await app.accounts.list().catch(() => []);\n  const hubConfig = await app.hub.get().catch(() => null);\n  // Route metadata, source health, and conflicts must describe one versioned\n  // catalog view. Executable refs remain behind opaque supervisor action ids.\n  const hubPreview = hubConfig ? await app.hub.preview(hubConfig.name).catch(() => null) : null;\n\n  const clients = await buildTrayClientSnapshots(app, listedAccounts, hubPreview, registry, opts);\n  const routes = clients.map((client) => client.route);\n  const { proxies, hubRunning, proxyRows } = await buildTrayProxySnapshots(app, routes, registry);\n  const gateways = await buildTrayGateways(app);\n  const accountProviders = await buildTrayAccountProviders(app, opts);\n  const managedAccounts = await buildTrayManagedAccounts(app, listedAccounts);\n  const providerSwitchActions = buildProviderSwitchActions(\n    app,\n    listedAccounts,\n    managedAccounts,\n    registry,\n  );\n  const hubSources = buildTrayHubSources(app, managedAccounts, hubConfig, hubPreview);\n  const hubConflicts = buildHubConflictGroups(app, listedAccounts, hubPreview, registry);\n  const logSources = buildTrayLogSources(app, hubConfig, proxyRows);\n\n  return {\n    proxyCount: proxyCount + Number(hubRunning),\n    revision: registry?.revision ?? 0,\n    routes,\n    // A tray menu is a control surface, not a capability report. Entries that\n    // still need model selection belong in the full AnyPick picker and should\n    // not arrive at macOS as greyed-out menu rows.\n    actions: [...clients.flatMap((client) => client.actions), ...providerSwitchActions].filter(\n      (action) => action.enabled,\n    ),\n    clientModelConfigs: clients.flatMap((client) =>\n      client.modelConfig ? [client.modelConfig] : [],\n    ),\n    usage: opts.usage ?? [],\n    proxies,\n    accounts: managedAccounts,\n    hubSources,\n    hubConflicts,\n    logSources,\n    gateways,\n    accountProviders,\n    gatewayProviders: buildTrayGatewayProviders(app),\n    settings: opts.settings ?? {\n      launchAtLogin: false,\n      startEnabledProxies: true,\n      showQuota: true,\n      quotaGuardEnabled: false,\n    },\n    activity: opts.activity ?? [],\n  };\n}\n"],"mappings":";;;;;;AAkBA,eAAsB,kBACpB,KACA,YACA,UACA,OAA4B,CAAC,GACN;CAIvB,MAAM,iBAAiB,MAAM,IAAI,SAAS,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;CAC/D,MAAM,YAAY,MAAM,IAAI,IAAI,IAAI,CAAC,CAAC,YAAY,IAAI;CAGtD,MAAM,aAAa,YAAY,MAAM,IAAI,IAAI,QAAQ,UAAU,IAAI,CAAC,CAAC,YAAY,IAAI,IAAI;CAEzF,MAAM,UAAU,MAAM,yBAAyB,KAAK,gBAAgB,YAAY,UAAU,IAAI;CAC9F,MAAM,SAAS,QAAQ,KAAK,WAAW,OAAO,KAAK;CACnD,MAAM,EAAE,SAAS,YAAY,cAAc,MAAM,wBAAwB,KAAK,QAAQ,QAAQ;CAC9F,MAAM,WAAW,MAAM,kBAAkB,GAAG;CAC5C,MAAM,mBAAmB,MAAM,0BAA0B,KAAK,IAAI;CAClE,MAAM,kBAAkB,MAAM,yBAAyB,KAAK,cAAc;CAC1E,MAAM,wBAAwB,2BAC5B,KACA,gBACA,iBACA,QACF;CACA,MAAM,aAAa,oBAAoB,KAAK,iBAAiB,WAAW,UAAU;CAClF,MAAM,eAAe,uBAAuB,KAAK,gBAAgB,YAAY,QAAQ;CACrF,MAAM,aAAa,oBAAoB,KAAK,WAAW,SAAS;CAEhE,OAAO;EACL,YAAY,aAAa,OAAO,UAAU;EAC1C,UAAU,UAAU,YAAY;EAChC;EAIA,SAAS,CAAC,GAAG,QAAQ,SAAS,WAAW,OAAO,OAAO,GAAG,GAAG,qBAAqB,CAAC,CAAC,QACjF,WAAW,OAAO,OACrB;EACA,oBAAoB,QAAQ,SAAS,WACnC,OAAO,cAAc,CAAC,OAAO,WAAW,IAAI,CAAC,CAC/C;EACA,OAAO,KAAK,SAAS,CAAC;EACtB;EACA,UAAU;EACV;EACA;EACA;EACA;EACA;EACA,kBAAkB,0BAA0B,GAAG;EAC/C,UAAU,KAAK,YAAY;GACzB,eAAe;GACf,qBAAqB;GACrB,WAAW;GACX,mBAAmB;EACrB;EACA,UAAU,KAAK,YAAY,CAAC;CAC9B;AACF"}

package/dist/tray/supervisor-actions.d.ts

@@ -0,0 +1,19 @@
+import type { ChildProcessWithoutNullStreams } from 'node:child_process';
+import type { AnyPickApp } from '../core/app.js';
+import type { TrayActivityService } from './activity.js';
+import type { TrayApplyModelRolesCommand, TrayInvokeCommand } from './protocol.js';
+import type { TrayActionTarget, TrayProxyActionTarget } from './snapshot-types.js';
+export interface TrayActionSet {
+    targets: Map<string, TrayActionTarget | TrayProxyActionTarget>;
+    labels: Map<string, string>;
+}
+export declare function invokeTrayModelRoles(app: AnyPickApp, native: ChildProcessWithoutNullStreams, payload: TrayApplyModelRolesCommand, actionSets: Map<number, TrayActionSet>, activity: TrayActivityService, refresh: () => Promise<void>, invalidateUsage: () => void): Promise<void>;
+/**
+ * Apply one menu action through the persistent activation service. Keeping
+ * this in the supervisor means tray clicks get the same plan/journal/rollback
+ * guarantees as `anypick use`; provider account services are never called
+ * directly from the UI process.
+ */
+export declare function invokeTrayAction(app: AnyPickApp, native: ChildProcessWithoutNullStreams, payload: TrayInvokeCommand, actionSets: Map<number, TrayActionSet>, activity: TrayActivityService, refresh: () => Promise<void>, invalidateUsage: () => void): Promise<void>;
+export declare function invokeProxyAction(app: AnyPickApp, target: TrayProxyActionTarget): Promise<string | undefined>;
+//# sourceMappingURL=supervisor-actions.d.ts.map

package/dist/tray/supervisor-actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-actions.d.ts","sourceRoot":"","sources":["../../src/tray/supervisor-actions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAI9C,OAAO,KAAK,EAAoB,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAExE,OAAO,KAAK,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAChF,OAAO,KAAK,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAMhF,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,GAAG,qBAAqB,CAAC,CAAC;IAC/D,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B;AAED,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,8BAA8B,EACtC,OAAO,EAAE,0BAA0B,EACnC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EACtC,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC5B,eAAe,EAAE,MAAM,IAAI,GAC1B,OAAO,CAAC,IAAI,CAAC,CA2Cf;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,8BAA8B,EACtC,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EACtC,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC5B,eAAe,EAAE,MAAM,IAAI,GAC1B,OAAO,CAAC,IAAI,CAAC,CAkFf;AAED,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAqF7B"}

package/dist/tray/supervisor-actions.js

@@ -0,0 +1,224 @@
+import { AnyPickError } from "../utils/errors.js";
+import { displayRef } from "../core/refs.js";
+import { proxyHubIssueCount } from "../core/proxy-hub-service.js";
+import { sendResult } from "./supervisor-native.js";
+import { resolveTrayModelRoleActions } from "./model-role-actions.js";
+import { recordTrayActivity } from "./supervisor-activity.js";
+import { trayActionError, trayModelRolesError, trayProxyActionError } from "./supervisor-errors.js";
+//#region src/tray/supervisor-actions.ts
+async function invokeTrayModelRoles(app, native, payload, actionSets, activity, refresh, invalidateUsage) {
+	const respond = (result) => {
+		sendResult(native, {
+			version: 1,
+			requestId: payload.requestId,
+			...result
+		});
+	};
+	const actionSet = resolveActionSetForRoleIds(actionSets, payload.revision, payload.roleActionIds);
+	if (!actionSet) {
+		respond({
+			status: "error",
+			message: "The model list changed. Open models and try again."
+		});
+		return;
+	}
+	try {
+		const client = app.clients.get(payload.clientId);
+		const resolved = resolveTrayModelRoleActions(client, actionSet.targets, payload.clientId, payload.roleActionIds);
+		await app.bindingService.use(payload.clientId, {
+			with: resolved.source,
+			model: resolved.defaultModel,
+			modelRoles: resolved.modelRoles,
+			verbose: false
+		});
+		invalidateUsage();
+		const overrides = Math.max(0, Object.keys(resolved.modelRoles).length - 1);
+		const message = overrides === 0 ? `${client.name} now uses ${resolved.defaultModel} for every model role.` : `Updated ${client.name}: ${overrides} custom model role${overrides === 1 ? "" : "s"}.`;
+		await recordTrayActivity(activity, message, false, "switch");
+		await refresh().catch((refreshErr) => {
+			process.stderr.write(`[tray] ${trayActionError(refreshErr)}\n`);
+		});
+		respond({
+			status: "success",
+			message
+		});
+	} catch (err) {
+		invalidateUsage();
+		const message = trayModelRolesError(err);
+		process.stderr.write(`[tray] ${message}\n`);
+		await recordTrayActivity(activity, message, true, "switch");
+		await refresh().catch(() => {});
+		respond({
+			status: "error",
+			message
+		});
+	}
+}
+/**
+* Apply one menu action through the persistent activation service. Keeping
+* this in the supervisor means tray clicks get the same plan/journal/rollback
+* guarantees as `anypick use`; provider account services are never called
+* directly from the UI process.
+*/
+async function invokeTrayAction(app, native, payload, actionSets, activity, refresh, invalidateUsage) {
+	const respond = (result) => {
+		sendResult(native, {
+			version: 1,
+			requestId: payload.requestId,
+			...result
+		});
+	};
+	const target = resolveActionTarget(actionSets, payload.revision, payload.actionId);
+	if (!target) {
+		const message = "That account is no longer available. Refresh AnyPick.";
+		await recordTrayActivity(activity, message, true, "switch");
+		respond({
+			status: "error",
+			message
+		});
+		return;
+	}
+	const actionSet = actionSetContaining(actionSets, payload.revision, payload.actionId);
+	if (!actionSet) {
+		const message = "The tray menu changed. Please try again.";
+		await recordTrayActivity(activity, message, true, "system");
+		respond({
+			status: "error",
+			message
+		});
+		return;
+	}
+	try {
+		let resultMessage;
+		if ("operation" in target) {
+			resultMessage = await invokeProxyAction(app, target) ?? (target.operation === "disable" ? `Stopped ${actionSet.labels.get(payload.actionId) ?? "proxy"}.` : target.operation === "restart" ? `Restarted ${actionSet.labels.get(payload.actionId) ?? "proxy"}.` : `Started ${actionSet.labels.get(payload.actionId) ?? "proxy"}.`);
+			if (target.operation === "account-switch") invalidateUsage();
+		} else {
+			await app.bindingService.use(target.clientId, {
+				with: target.source,
+				model: target.model,
+				modelRoles: target.modelRoles,
+				verbose: false
+			});
+			invalidateUsage();
+			resultMessage = `Switched to ${actionSet.labels.get(payload.actionId) ?? "the selected account"}.`;
+		}
+		const activityKind = "operation" in target ? target.operation === "account-switch" ? "switch" : "proxy" : "switch";
+		await recordTrayActivity(activity, resultMessage, false, activityKind);
+		await refresh().catch((refreshErr) => {
+			process.stderr.write(`[tray] ${trayActionError(refreshErr)}\n`);
+		});
+		respond({
+			status: "success",
+			message: resultMessage
+		});
+	} catch (err) {
+		const message = "operation" in target ? trayProxyActionError(err, target.operation) : trayActionError(err);
+		invalidateUsage();
+		process.stderr.write(`[tray] ${message}\n`);
+		await recordTrayActivity(activity, message, true, "operation" in target ? target.operation === "account-switch" ? "switch" : "proxy" : "switch");
+		await refresh().catch((refreshErr) => {
+			process.stderr.write(`[tray] ${trayActionError(refreshErr)}\n`);
+		});
+		respond({
+			status: "error",
+			message
+		});
+	}
+}
+async function invokeProxyAction(app, target) {
+	switch (target.operation) {
+		case "hub-own-models":
+			await app.hub.setModelOwners(target.name, target.models, target.source);
+			return `Routed ${target.models.length} overlapping model${target.models.length === 1 ? "" : "s"} through ${displayRef(target.source)}.`;
+		case "hub-test": {
+			const config = await app.hub.get(target.name);
+			if (!config.enabled || !config.sources.some((source) => source.enabled)) throw new AnyPickError("Proxy Hub test needs at least one explicitly enabled source.", "STATE_CONFLICT");
+			const preview = await app.hub.refreshPreview(target.name);
+			if (preview.unavailable.length > 0) throw new AnyPickError(`Proxy Hub test found ${preview.unavailable.length} unavailable source${preview.unavailable.length === 1 ? "" : "s"}.`, "STATE_CONFLICT");
+			if (preview.routes.length === 0) throw new AnyPickError("Proxy Hub test found no routable models. Resolve conflicts and retry.", "STATE_CONFLICT");
+			const issueCount = proxyHubIssueCount(preview);
+			if (issueCount > 0) throw new AnyPickError(`Proxy Hub test found ${issueCount} unresolved routing ${issueCount === 1 ? "choice" : "choices"}.`, "STATE_CONFLICT");
+			await app.hub.ensureRunning(target.name);
+			return `Proxy Hub check passed: ${preview.catalogs.length} source${preview.catalogs.length === 1 ? "" : "s"} and ${preview.routes.length} routable model${preview.routes.length === 1 ? "" : "s"}.`;
+		}
+		case "hub-start": {
+			const hub = await app.hub.get(target.name);
+			if (!hub.enabled) await app.hub.save({
+				...hub,
+				enabled: true
+			});
+			await app.hub.ensureRunning(target.name);
+			return "Started Proxy Hub.";
+		}
+		case "hub-stop":
+			await app.hub.stop(target.name);
+			return "Stopped Proxy Hub.";
+		case "hub-restart": {
+			const hub = await app.hub.get(target.name);
+			if (!hub.enabled) await app.hub.save({
+				...hub,
+				enabled: true
+			});
+			await app.hub.stop(target.name);
+			await app.hub.ensureRunning(target.name);
+			return "Restarted Proxy Hub.";
+		}
+		case "account-switch": {
+			const result = await app.accounts.use(target.providerId, target.accountName);
+			const provider = app.accountRegistry.get(target.providerId);
+			return `Switched ${provider.shortName ?? provider.name} to ${result.to}.`;
+		}
+		case "enable":
+			await app.proxy.enableProxy(target.providerId, target.accountName, { start: true });
+			return;
+		case "disable":
+			await app.proxy.disableProxy(target.providerId, target.accountName);
+			return;
+		case "restart": {
+			const status = await app.proxy.proxyStatus(target.providerId, target.accountName);
+			if (status.running) await app.proxy.stopProxy(target.providerId, target.accountName);
+			if (status.enabled) await app.proxy.startProxy(target.providerId, target.accountName);
+			else await app.proxy.enableProxy(target.providerId, target.accountName, { start: true });
+			return;
+		}
+		default: return target;
+	}
+}
+/**
+* Find an action set that still carries the given action id, preferring the
+* revision the UI displayed but tolerating a stale one. The supervisor only
+* keeps the two most recent snapshot generations (2.5s apart), so a click
+* racing the refresh — or coming from a panel that paused stdin — would
+* otherwise be rejected with a false "menu changed" error. Action ids are
+* stable across snapshots, so the exact target the UI rendered still exists.
+*/
+function resolveActionTarget(actionSets, revision, actionId) {
+	const preferred = actionSets.get(revision)?.targets.get(actionId);
+	if (preferred) return preferred;
+	for (const set of actionSets.values()) {
+		const target = set.targets.get(actionId);
+		if (target) return target;
+	}
+}
+function actionSetContaining(actionSets, revision, actionId) {
+	const preferred = actionSets.get(revision);
+	if (preferred?.targets.has(actionId)) return preferred;
+	for (const set of actionSets.values()) if (set.targets.has(actionId)) return set;
+}
+/**
+* Resolve an apply-model-roles command against a single action set that carries
+* every referenced role id. Falls back across retained generations the same way
+* resolveActionTarget does, so a stale revision does not reject a valid apply.
+*/
+function resolveActionSetForRoleIds(actionSets, revision, roleActionIds) {
+	const actionIds = Object.values(roleActionIds);
+	const hasAll = (set) => actionIds.every((id) => set.targets.has(id));
+	const preferred = actionSets.get(revision);
+	if (preferred && hasAll(preferred)) return preferred;
+	for (const set of actionSets.values()) if (hasAll(set)) return set;
+}
+//#endregion
+export { invokeProxyAction, invokeTrayAction, invokeTrayModelRoles };
+
+//# sourceMappingURL=supervisor-actions.js.map