@atomic-chat/core 0.13.2 → 0.17.0

package/dist/backend/catalog/upstream-releases-baseline.json

@@ -0,0 +1,101 @@
+{
+    "schema_version": 1,
+    "updated_at": "2026-10-13T13:52:11Z",
+    "upstream_repo": "ggml-org/llama.cpp",
+    "download_base": "https://github.com/AtomicBot-ai/atomic-chat-conf/releases/download",
+    "releases": [
+        {
+            "tag": "b11463",
+            "commit": "d2a79e60464903f9832fbecdba48bd4cc6c47e75",
+            "published_at": "2026-10-07T10:40:25Z",
+            "min_core_version": "0.0.0",
+            "notes_url": "https://github.com/ggml-org/llama.cpp/releases/tag/b11463",
+            "assets": [
+                {
+                    "name": "llama-b11463-bin-macos-arm64.tar.gz",
+                    "sha256": "5fcb0237a9a6d247acfb91792249dde498e3f2231ed62a62851c5ca83eb230df",
+                    "size": 12087702,
+                    "validation": "approved"
+                },
+                {
+                    "name": "llama-b11463-bin-ubuntu-arm64.tar.gz",
+                    "sha256": "95e17be13037fafbed43c7afd75230ce04defb941d066062d0aff4bb3d52caf4",
+                    "size": 13724995,
+                    "validation": "approved"
+                },
+                {
+                    "name": "llama-b11463-bin-ubuntu-cuda-13.4-arm64.tar.gz",
+                    "sha256": "6a7580834b0679e02ad17da07905bba9fbb50c5dd04dbe1e3b95e518c536aa66",
+                    "size": 147667327,
+                    "validation": "approved"
+                },
+                {
+                    "name": "llama-b11463-bin-ubuntu-vulkan-arm64.tar.gz",
+                    "sha256": "b3a97c347ef9284f8a82f433679f2daaa10310816affaaa99c94fb449f086698",
+                    "size": 24887749,
+                    "validation": "approved"
+                },
+                {
+                    "name": "llama-b11463-bin-ubuntu-vulkan-x64.tar.gz",
+                    "sha256": "5d428312d97e4c25eb28277416de935a76ca80bf7ede6b418d43a2b10c0336cd",
+                    "size": 31678494,
+                    "validation": "approved"
+                },
+                {
+                    "name": "llama-b11463-bin-ubuntu-x64.tar.gz",
+                    "sha256": "c7d63a3dfd1fe93a679b4bcd981dacb9153e2509a21bb912b9a01fc28a8447f5",
+                    "size": 17732486,
+                    "validation": "approved"
+                },
+                {
+                    "name": "llama-b11463-bin-win-cpu-arm64.zip",
+                    "sha256": "3c0d239d4573b2dfda51d6832327114a78bf9913300efdec44a535f79cd6d2b2",
+                    "size": 10424801,
+                    "validation": "approved"
+                },
+                {
+                    "name": "llama-b11463-bin-win-cpu-x64.zip",
+                    "sha256": "61fa0338763addfe9e7e71fca1f0fdd2ee8b636abf016bae167aab7973a13728",
+                    "size": 17636283,
+                    "validation": "approved"
+                },
+                {
+                    "name": "llama-b11463-bin-win-cuda-12.4-x64.zip",
+                    "sha256": "648a85ead292c019483371055c7d727f37da6f8db6948db50c62870b2da31900",
+                    "size": 262157599,
+                    "validation": "approved"
+                },
+                {
+                    "name": "llama-b11463-bin-win-cuda-13.4-arm64.zip",
+                    "sha256": "cc2bbfef79a2d7966cdaa18f5d3a95ea4dd0a27baa003ca0c1b4b4f7dba89c5b",
+                    "size": 143195817,
+                    "validation": "approved"
+                },
+                {
+                    "name": "llama-b11463-bin-win-cuda-13.4-x64.zip",
+                    "sha256": "e935758fab193361452f001f1e487d216e709b8550e92b7e9228be5e23bd3d34",
+                    "size": 150767155,
+                    "validation": "approved"
+                },
+                {
+                    "name": "llama-b11463-bin-win-opencl-adreno-arm64.zip",
+                    "sha256": "5065296d71ac9508aa19189c29198b0a9bc368de8f17496063cf0191fe9c3bc3",
+                    "size": 10983603,
+                    "validation": "approved"
+                },
+                {
+                    "name": "llama-b11463-bin-win-rocm-10.0-x64.zip",
+                    "sha256": "981dcee4c9902523a627217d3a57875e805d43b2faddd6b01dc08a034d3ebbbe",
+                    "size": 254658682,
+                    "validation": "approved"
+                },
+                {
+                    "name": "llama-b11463-bin-win-vulkan-x64.zip",
+                    "sha256": "c951fef0f0158bf4b6d8aa75c99a6209658bcbe75fd349d6d2b1b08672933a35",
+                    "size": 31007237,
+                    "validation": "approved"
+                }
+            ]
+        }
+    ]
+}

package/dist/backend/catalog/upstream-releases-catalog.d.ts

@@ -0,0 +1,54 @@
+/**
+ * The `llamacpp-upstream` release list, I/O half: fetches conf's release list, keeps it in memory
+ * for `UPSTREAM_RELEASES_TTL_MS`, writes the last good copy to
+ * `<data>/llamacpp-upstream/releases.cache.json`, and falls back, in order, to:
+ *
+ *   1. the legacy `backends/manifest.json`, only when the list answered but is not one this core
+ *      reads (a 404 before conf publishes it, a newer `schema_version`, a body that is not JSON) —
+ *      after a transport failure the legacy fetch would fail the same way, so it is skipped;
+ *   2. the disk copy;
+ *   3. the bundled baseline.
+ *
+ * Concurrent callers share one in-flight fetch. Never throws.
+ */
+import type { DataLayout } from '../../config/index.js';
+import type { BackendCatalogSource, ProxyConfig } from '../../contracts/index.js';
+import type { UpstreamReleaseCatalog } from './upstream-releases.js';
+export declare const UPSTREAM_RELEASES_TTL_MS: number;
+export declare const UPSTREAM_RELEASES_CACHE_FILE = "releases.cache.json";
+type ResolvedSource = Extract<BackendCatalogSource, 'live' | 'legacy-manifest' | 'disk-cache' | 'bundled-baseline'>;
+export interface UpstreamReleasesCatalog {
+    catalog: UpstreamReleaseCatalog;
+    source: ResolvedSource | Extract<BackendCatalogSource, 'session-cache'>;
+}
+export interface UpstreamReleasesCatalogServiceDeps {
+    layout: DataLayout;
+    fetchFor: (proxy?: ProxyConfig | null) => typeof fetch;
+    now?: () => number;
+    timeoutMs?: number;
+    /** The release list; `file://` is read from disk (the `ATOMIC_LLAMACPP_UPSTREAM_RELEASES_URL` hook). */
+    url?: string;
+    legacyUrl?: string;
+    baseline?: UpstreamReleaseCatalog;
+    log?: (level: 'info' | 'warn', message: string) => void;
+}
+export declare function upstreamReleasesCachePath(layout: DataLayout): string;
+export declare class UpstreamReleasesCatalogService {
+    private readonly deps;
+    private memory;
+    private inFlight;
+    constructor(deps: UpstreamReleasesCatalogServiceDeps);
+    invalidate(): void;
+    catalog(options?: {
+        force?: boolean;
+        proxy?: ProxyConfig | null;
+    }): Promise<UpstreamReleasesCatalog>;
+    private resolve;
+    private readList;
+    private readLegacy;
+    private fetch;
+    private readDiskCache;
+    private writeDiskCache;
+    private log;
+}
+export {};

package/dist/backend/catalog/upstream-releases-catalog.js

@@ -0,0 +1,148 @@
+/**
+ * The `llamacpp-upstream` release list, I/O half: fetches conf's release list, keeps it in memory
+ * for `UPSTREAM_RELEASES_TTL_MS`, writes the last good copy to
+ * `<data>/llamacpp-upstream/releases.cache.json`, and falls back, in order, to:
+ *
+ *   1. the legacy `backends/manifest.json`, only when the list answered but is not one this core
+ *      reads (a 404 before conf publishes it, a newer `schema_version`, a body that is not JSON) —
+ *      after a transport failure the legacy fetch would fail the same way, so it is skipped;
+ *   2. the disk copy;
+ *   3. the bundled baseline.
+ *
+ * Concurrent callers share one in-flight fetch. Never throws.
+ */
+import { mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { fetchManifestWithFallbacks, LLAMACPP_BACKEND_MANIFEST_URL, MANIFEST_FETCH_TIMEOUT_MS, manifestTransportFromFetch, } from './manifest.js';
+import { UPSTREAM_RELEASES_BASELINE } from './upstream-releases-baseline.js';
+import { LLAMACPP_UPSTREAM_RELEASES_URL, parseUpstreamReleases, upstreamCatalogFromLegacyManifest, } from './upstream-releases.js';
+export const UPSTREAM_RELEASES_TTL_MS = 60 * 60 * 1000;
+export const UPSTREAM_RELEASES_CACHE_FILE = 'releases.cache.json';
+export function upstreamReleasesCachePath(layout) {
+    return join(layout.provider('llamacpp-upstream').root, UPSTREAM_RELEASES_CACHE_FILE);
+}
+const message = (err) => (err instanceof Error ? err.message : String(err));
+export class UpstreamReleasesCatalogService {
+    deps;
+    memory = null;
+    inFlight = null;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    invalidate() {
+        this.memory = null;
+    }
+    async catalog(options = {}) {
+        const now = this.deps.now ?? Date.now;
+        if (!options.force && this.memory && now() - this.memory.fetchedAt < UPSTREAM_RELEASES_TTL_MS) {
+            return { catalog: this.memory.catalog, source: 'session-cache' };
+        }
+        if (this.inFlight)
+            return this.inFlight;
+        this.inFlight = this.resolve(options.proxy ?? null).finally(() => {
+            this.inFlight = null;
+        });
+        return this.inFlight;
+    }
+    async resolve(proxy) {
+        const now = this.deps.now ?? Date.now;
+        const remember = (catalog, source) => {
+            this.memory = { fetchedAt: now(), catalog };
+            return { catalog, source };
+        };
+        const list = await this.readList(proxy);
+        if ('catalog' in list) {
+            await this.writeDiskCache(list.catalog, now());
+            return remember(list.catalog, 'live');
+        }
+        this.log('warn', `[upstream-releases] release list unavailable: ${list.reason}`);
+        if (list.answered) {
+            const legacy = await this.readLegacy(proxy);
+            if (legacy)
+                return remember(legacy, 'legacy-manifest');
+        }
+        const cached = await this.readDiskCache();
+        if (cached)
+            return remember(cached, 'disk-cache');
+        return { catalog: this.deps.baseline ?? UPSTREAM_RELEASES_BASELINE, source: 'bundled-baseline' };
+    }
+    async readList(proxy) {
+        const url = this.deps.url ?? LLAMACPP_UPSTREAM_RELEASES_URL;
+        let text;
+        try {
+            if (url.startsWith('file:')) {
+                text = await readFile(fileURLToPath(url), 'utf8');
+            }
+            else {
+                const response = await this.fetch(url, proxy);
+                if (!response.ok)
+                    return { answered: true, reason: `${url} returned ${response.status}` };
+                text = await response.text();
+            }
+        }
+        catch (err) {
+            return { answered: false, reason: message(err) };
+        }
+        let body;
+        try {
+            body = JSON.parse(text);
+        }
+        catch {
+            return { answered: true, reason: `${url} is not JSON` };
+        }
+        const catalog = parseUpstreamReleases(body);
+        return catalog ? { catalog } : { answered: true, reason: `${url} is not a release list this core reads` };
+    }
+    async readLegacy(proxy) {
+        const url = this.deps.legacyUrl ?? LLAMACPP_BACKEND_MANIFEST_URL;
+        try {
+            const response = await this.fetch(url, proxy);
+            if (!response.ok)
+                throw new Error(`${url} returned ${response.status}`);
+            const catalog = upstreamCatalogFromLegacyManifest(await response.json());
+            if (!catalog)
+                throw new Error(`${url} has no tag_name`);
+            return catalog;
+        }
+        catch (err) {
+            this.log('warn', `[upstream-releases] legacy manifest unavailable: ${message(err)}`);
+            return null;
+        }
+    }
+    async fetch(url, proxy) {
+        const { response } = await fetchManifestWithFallbacks([manifestTransportFromFetch('core fetch', this.deps.fetchFor(proxy))], url, this.deps.timeoutMs ?? MANIFEST_FETCH_TIMEOUT_MS);
+        return response;
+    }
+    async readDiskCache() {
+        try {
+            const raw = JSON.parse(await readFile(upstreamReleasesCachePath(this.deps.layout), 'utf8'));
+            return raw && typeof raw === 'object'
+                ? parseUpstreamReleases(raw['manifest'])
+                : null;
+        }
+        catch (err) {
+            if (err.code !== 'ENOENT') {
+                this.log('warn', `[upstream-releases] failed to read disk cache: ${String(err)}`);
+            }
+            return null;
+        }
+    }
+    async writeDiskCache(catalog, fetchedAt) {
+        const path = upstreamReleasesCachePath(this.deps.layout);
+        const temporary = `${path}.tmp-${process.pid}-${fetchedAt}`;
+        try {
+            await mkdir(this.deps.layout.provider('llamacpp-upstream').root, { recursive: true });
+            await writeFile(temporary, JSON.stringify({ fetched_at: fetchedAt, manifest: catalog }), 'utf8');
+            await rename(temporary, path);
+        }
+        catch (err) {
+            await rm(temporary, { force: true }).catch(() => { });
+            this.log('warn', `[upstream-releases] failed to write disk cache: ${String(err)}`);
+        }
+    }
+    log(level, text) {
+        this.deps.log?.(level, text);
+    }
+}
+//# sourceMappingURL=upstream-releases-catalog.js.map

package/dist/backend/catalog/upstream-releases-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upstream-releases-catalog.js","sourceRoot":"","sources":["../../../src/backend/catalog/upstream-releases-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAGxC,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,EAC7B,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAA;AAC5E,OAAO,EACL,8BAA8B,EAC9B,qBAAqB,EACrB,iCAAiC,GAClC,MAAM,wBAAwB,CAAA;AAG/B,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AACtD,MAAM,CAAC,MAAM,4BAA4B,GAAG,qBAAqB,CAAA;AAwBjE,MAAM,UAAU,yBAAyB,CAAC,MAAkB;IAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAA;AACtF,CAAC;AAID,MAAM,OAAO,GAAG,CAAC,GAAY,EAAU,EAAE,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;AAE5F,MAAM,OAAO,8BAA8B;IAIZ;IAHrB,MAAM,GAAkE,IAAI,CAAA;IAC5E,QAAQ,GAA4C,IAAI,CAAA;IAEhE,YAA6B,IAAwC;QAAxC,SAAI,GAAJ,IAAI,CAAoC;IAAG,CAAC;IAEzE,UAAU;QACR,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;IACpB,CAAC;IAED,KAAK,CAAC,OAAO,CACX,UAA2D,EAAE;QAE7D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;QACrC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,wBAAwB,EAAE,CAAC;YAC9F,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;QAClE,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAA;QACvC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YAC/D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QACtB,CAAC,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,KAAyB;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;QACrC,MAAM,QAAQ,GAAG,CAAC,OAA+B,EAAE,MAAsB,EAA2B,EAAE;YACpG,IAAI,CAAC,MAAM,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,CAAA;YAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;QAC5B,CAAC,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACvC,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;YAC9C,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACvC,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,iDAAiD,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;QAChF,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;YAC3C,IAAI,MAAM;gBAAE,OAAO,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;QACxD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAA;QACzC,IAAI,MAAM;YAAE,OAAO,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;QACjD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,0BAA0B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAA;IAClG,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,KAAyB;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,8BAA8B,CAAA;QAC3D,IAAI,IAAY,CAAA;QAChB,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,IAAI,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAA;YACnD,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;gBAC7C,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAG,aAAa,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAA;gBACzF,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YAC9B,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAA;QAClD,CAAC;QACD,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAG,cAAc,EAAE,CAAA;QACzD,CAAC;QACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAA;QAC3C,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAG,wCAAwC,EAAE,CAAA;IAC3G,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,KAAyB;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,6BAA6B,CAAA;QAChE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YAC7C,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,aAAa,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;YACvE,MAAM,OAAO,GAAG,iCAAiC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;YACxE,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,kBAAkB,CAAC,CAAA;YACvD,OAAO,OAAO,CAAA;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,oDAAoD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACpF,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,KAAyB;QACxD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,0BAA0B,CACnD,CAAC,0BAA0B,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EACrE,GAAG,EACH,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,yBAAyB,CACjD,CAAA;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAY,CAAA;YACtG,OAAO,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;gBACnC,CAAC,CAAC,qBAAqB,CAAE,GAA+B,CAAC,UAAU,CAAC,CAAC;gBACrE,CAAC,CAAC,IAAI,CAAA;QACV,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,kDAAkD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACnF,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,OAA+B,EAAE,SAAiB;QAC7E,MAAM,IAAI,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACxD,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,SAAS,EAAE,CAAA;QAC3D,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACrF,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,CAAA;YAChG,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACpD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,mDAAmD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACpF,CAAC;IACH,CAAC;IAEO,GAAG,CAAC,KAAsB,EAAE,IAAY;QAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IAC9B,CAAC;CACF"}

package/dist/backend/catalog/upstream-releases.d.ts

@@ -0,0 +1,75 @@
+/**
+ * The release list of the `llamacpp-upstream` provider (ggml-org/llama.cpp builds mirrored and
+ * signed in atomic-chat-conf), pure half.
+ *
+ * Source of truth: `atomic-chat-conf/backends/llamacpp-upstream-releases.json` (schema
+ * `llamacpp-upstream-releases-schema.json` next to it). Each release names the oldest core it runs
+ * on (`min_core_version`) and each archive its `validation`; this core takes, per backend, the
+ * newest release it meets whose archive is `approved` (or `candidate`, on opt-in). That is how an
+ * engine update that needs a core change reaches only the cores that have it. A `withdrawn` release
+ * is never offered — a pack already installed from it is left alone.
+ *
+ * The legacy single-tag `backends/manifest.json` reads as a one-release list every core runs: it is
+ * what cores before the list follow, so conf only ever points it at such a release.
+ *
+ * Parsing is lenient per entry and strict per field, as for the PrismML manifest: a malformed
+ * release or archive is dropped, the rest survives; a newer `schema_version` is refused whole.
+ */
+import type { ArchSuffix, BackendVersion, UpstreamManifest } from '../types.js';
+export declare const LLAMACPP_UPSTREAM_RELEASES_URL = "https://raw.githubusercontent.com/AtomicBot-ai/atomic-chat-conf/main/backends/llamacpp-upstream-releases.json";
+export declare const UPSTREAM_RELEASES_SCHEMA_VERSION = 1;
+/** `min_core_version` of a release every core runs, and of the legacy manifest read as a list. */
+export declare const ANY_CORE_VERSION = "0.0.0";
+export type UpstreamValidation = 'candidate' | 'approved';
+export interface UpstreamReleaseAsset {
+    /** `llama-<tag>-bin-<backend>.<ext>`; the backend id is read from it. */
+    name: string;
+    /** Always present in the list; absent only on a legacy-manifest asset that is not mirrored. */
+    sha256?: string;
+    size?: number;
+    validation: UpstreamValidation;
+}
+export interface UpstreamRelease {
+    tag: string;
+    min_core_version: string;
+    withdrawn?: {
+        reason: string;
+    };
+    assets: UpstreamReleaseAsset[];
+}
+export interface UpstreamReleaseCatalog {
+    schema_version: 1;
+    /** Absent only for a legacy manifest naming an unmirrored tag: downloads use the ggml-org CDN. */
+    download_base?: string;
+    releases: UpstreamRelease[];
+}
+/** What decides whether a release is offered on this host. */
+export interface UpstreamOfferOptions {
+    coreVersion: string;
+    /** The user's `allow_candidate_builds`: offer `candidate` archives too. */
+    allowCandidates: boolean;
+}
+/** Build number of an upstream tag, `null` for any other shape. */
+export declare function upstreamTagBuild(tag: string): number | null;
+/** A parsed release list, or `null` for anything that is not one this core reads. */
+export declare function parseUpstreamReleases(value: unknown): UpstreamReleaseCatalog | null;
+/**
+ * The legacy `backends/manifest.json` as a one-release list every core runs, or `null` when it has
+ * no `tag_name`. Its archives count as approved: conf moves that file only to such a release.
+ */
+export declare function upstreamCatalogFromLegacyManifest(value: unknown): UpstreamReleaseCatalog | null;
+/** Not withdrawn and runnable by this core. */
+export declare function upstreamReleaseOffered(release: UpstreamRelease, options: Pick<UpstreamOfferOptions, 'coreVersion'>): boolean;
+/** `approved`, or `candidate` on opt-in. */
+export declare function upstreamAssetOffered(asset: UpstreamReleaseAsset, options: Pick<UpstreamOfferOptions, 'allowCandidates'>): boolean;
+/**
+ * Backends this host is offered: for each backend id, the newest offered release with an offered
+ * archive for it, newest build first. The hardware gate is applied later.
+ */
+export declare function upstreamRemoteBackends(catalog: UpstreamReleaseCatalog, options: UpstreamOfferOptions, osType: string, archSuffix: ArchSuffix): BackendVersion[];
+/**
+ * One listed release in the legacy manifest's shape, for `resolveBackendArchiveSource`: any listed
+ * tag downloads from the mirror against its hash, whether or not it is offered right now (a pack
+ * reinstalled from an older release, a candidate the user opted into). `null` for an unlisted tag.
+ */
+export declare function upstreamManifestForTag(catalog: UpstreamReleaseCatalog, tag: string): UpstreamManifest | null;

package/dist/backend/catalog/upstream-releases.js

@@ -0,0 +1,155 @@
+/**
+ * The release list of the `llamacpp-upstream` provider (ggml-org/llama.cpp builds mirrored and
+ * signed in atomic-chat-conf), pure half.
+ *
+ * Source of truth: `atomic-chat-conf/backends/llamacpp-upstream-releases.json` (schema
+ * `llamacpp-upstream-releases-schema.json` next to it). Each release names the oldest core it runs
+ * on (`min_core_version`) and each archive its `validation`; this core takes, per backend, the
+ * newest release it meets whose archive is `approved` (or `candidate`, on opt-in). That is how an
+ * engine update that needs a core change reaches only the cores that have it. A `withdrawn` release
+ * is never offered — a pack already installed from it is left alone.
+ *
+ * The legacy single-tag `backends/manifest.json` reads as a one-release list every core runs: it is
+ * what cores before the list follow, so conf only ever points it at such a release.
+ *
+ * Parsing is lenient per entry and strict per field, as for the PrismML manifest: a malformed
+ * release or archive is dropped, the rest survives; a newer `schema_version` is refused whole.
+ */
+import { compareVersions } from '../version.js';
+import { parseManifestForPlatform } from './manifest.js';
+export const LLAMACPP_UPSTREAM_RELEASES_URL = 'https://raw.githubusercontent.com/AtomicBot-ai/atomic-chat-conf/main/backends/llamacpp-upstream-releases.json';
+export const UPSTREAM_RELEASES_SCHEMA_VERSION = 1;
+/** `min_core_version` of a release every core runs, and of the legacy manifest read as a list. */
+export const ANY_CORE_VERSION = '0.0.0';
+const UPSTREAM_TAG_RE = /^b(\d+)$/;
+/** Build number of an upstream tag, `null` for any other shape. */
+export function upstreamTagBuild(tag) {
+    const match = UPSTREAM_TAG_RE.exec(tag);
+    return match ? Number(match[1]) : null;
+}
+const isString = (v) => typeof v === 'string' && v.length > 0;
+const isRecord = (v) => !!v && typeof v === 'object' && !Array.isArray(v);
+function parseAsset(raw) {
+    if (!isRecord(raw))
+        return null;
+    const { name, size, sha256, validation } = raw;
+    if (!isString(name))
+        return null;
+    if (typeof size !== 'number' || !Number.isInteger(size) || size <= 0)
+        return null;
+    if (typeof sha256 !== 'string' || !/^[0-9a-f]{64}$/.test(sha256))
+        return null;
+    if (validation !== 'candidate' && validation !== 'approved')
+        return null;
+    return { name, sha256, size, validation };
+}
+function parseRelease(raw) {
+    if (!isRecord(raw))
+        return null;
+    const { tag, min_core_version } = raw;
+    if (!isString(tag) || upstreamTagBuild(tag) === null || !isString(min_core_version))
+        return null;
+    const assets = Array.isArray(raw['assets']) ? raw['assets'].map(parseAsset) : [];
+    const release = {
+        tag,
+        min_core_version,
+        assets: assets.filter((a) => a !== null),
+    };
+    const withdrawn = raw['withdrawn'];
+    if (isRecord(withdrawn) && isString(withdrawn['reason']))
+        release.withdrawn = { reason: withdrawn['reason'] };
+    return release;
+}
+/** A parsed release list, or `null` for anything that is not one this core reads. */
+export function parseUpstreamReleases(value) {
+    if (!isRecord(value))
+        return null;
+    if (value['schema_version'] !== UPSTREAM_RELEASES_SCHEMA_VERSION)
+        return null;
+    if (!Array.isArray(value['releases']))
+        return null;
+    const catalog = {
+        schema_version: 1,
+        releases: value['releases'].map(parseRelease).filter((r) => r !== null),
+    };
+    if (isString(value['download_base']))
+        catalog.download_base = value['download_base'];
+    return catalog;
+}
+/**
+ * The legacy `backends/manifest.json` as a one-release list every core runs, or `null` when it has
+ * no `tag_name`. Its archives count as approved: conf moves that file only to such a release.
+ */
+export function upstreamCatalogFromLegacyManifest(value) {
+    if (!isRecord(value) || !isString(value['tag_name']))
+        return null;
+    const assets = [];
+    for (const raw of Array.isArray(value['assets']) ? value['assets'] : []) {
+        if (!isRecord(raw) || !isString(raw['name']))
+            continue;
+        const asset = { name: raw['name'], validation: 'approved' };
+        if (typeof raw['sha256'] === 'string')
+            asset.sha256 = raw['sha256'];
+        if (typeof raw['size'] === 'number')
+            asset.size = raw['size'];
+        assets.push(asset);
+    }
+    const catalog = {
+        schema_version: 1,
+        releases: [{ tag: value['tag_name'], min_core_version: ANY_CORE_VERSION, assets }],
+    };
+    if (isString(value['download_base']))
+        catalog.download_base = value['download_base'];
+    return catalog;
+}
+/** Not withdrawn and runnable by this core. */
+export function upstreamReleaseOffered(release, options) {
+    return !release.withdrawn && compareVersions(options.coreVersion, release.min_core_version) >= 0;
+}
+/** `approved`, or `candidate` on opt-in. */
+export function upstreamAssetOffered(asset, options) {
+    return asset.validation === 'approved' || options.allowCandidates;
+}
+const newestFirst = (releases) => [...releases].sort((a, b) => (upstreamTagBuild(b.tag) ?? 0) - (upstreamTagBuild(a.tag) ?? 0));
+/**
+ * Backends this host is offered: for each backend id, the newest offered release with an offered
+ * archive for it, newest build first. The hardware gate is applied later.
+ */
+export function upstreamRemoteBackends(catalog, options, osType, archSuffix) {
+    const seen = new Set();
+    const out = [];
+    for (const release of newestFirst(catalog.releases)) {
+        if (!upstreamReleaseOffered(release, options))
+            continue;
+        const assets = release.assets.filter((a) => upstreamAssetOffered(a, options));
+        for (const entry of parseManifestForPlatform({ tag_name: release.tag, assets }, osType, archSuffix)) {
+            if (seen.has(entry.backend))
+                continue;
+            seen.add(entry.backend);
+            out.push(entry);
+        }
+    }
+    return out;
+}
+/**
+ * One listed release in the legacy manifest's shape, for `resolveBackendArchiveSource`: any listed
+ * tag downloads from the mirror against its hash, whether or not it is offered right now (a pack
+ * reinstalled from an older release, a candidate the user opted into). `null` for an unlisted tag.
+ */
+export function upstreamManifestForTag(catalog, tag) {
+    const release = catalog.releases.find((r) => r.tag === tag);
+    if (!release)
+        return null;
+    const manifest = {
+        tag_name: release.tag,
+        assets: release.assets.map(({ name, sha256, size }) => ({
+            name,
+            ...(sha256 !== undefined ? { sha256 } : {}),
+            ...(size !== undefined ? { size } : {}),
+        })),
+    };
+    if (catalog.download_base)
+        manifest.download_base = catalog.download_base;
+    return manifest;
+}
+//# sourceMappingURL=upstream-releases.js.map

package/dist/backend/catalog/upstream-releases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upstream-releases.js","sourceRoot":"","sources":["../../../src/backend/catalog/upstream-releases.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAA;AAExD,MAAM,CAAC,MAAM,8BAA8B,GACzC,+GAA+G,CAAA;AACjH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAA;AACjD,kGAAkG;AAClG,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAA;AACvC,MAAM,eAAe,GAAG,UAAU,CAAA;AAkClC,mEAAmE;AACnE,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACvC,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACxC,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;AACnF,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAgC,EAAE,CAC5D,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;AAEnD,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/B,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,CAAA;IAC9C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAChC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACjF,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IAC7E,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,UAAU;QAAE,OAAO,IAAI,CAAA;IACxE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;AAC3C,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/B,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,GAAG,CAAA;IACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAA;IAChG,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAChF,MAAM,OAAO,GAAoB;QAC/B,GAAG;QACH,gBAAgB;QAChB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAA6B,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;KACpE,CAAA;IACD,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,CAAA;IAClC,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtD,OAAO,CAAC,SAAS,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAA;IACrD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACjC,IAAI,KAAK,CAAC,gBAAgB,CAAC,KAAK,gCAAgC;QAAE,OAAO,IAAI,CAAA;IAC7E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAClD,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,CAAC;QACjB,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAwB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;KAC9F,CAAA;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAAE,OAAO,CAAC,aAAa,GAAG,KAAK,CAAC,eAAe,CAAC,CAAA;IACpF,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iCAAiC,CAAC,KAAc;IAC9D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACjE,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACxE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAAE,SAAQ;QACtD,MAAM,KAAK,GAAyB,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAA;QACjF,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ;YAAE,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAA;QACnE,IAAI,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ;YAAE,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAA;QAC7D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpB,CAAC;IACD,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,CAAC;QACjB,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;KACnF,CAAA;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAAE,OAAO,CAAC,aAAa,GAAG,KAAK,CAAC,eAAe,CAAC,CAAA;IACpF,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,sBAAsB,CACpC,OAAwB,EACxB,OAAkD;IAElD,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;AAClG,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,oBAAoB,CAClC,KAA2B,EAC3B,OAAsD;IAEtD,OAAO,KAAK,CAAC,UAAU,KAAK,UAAU,IAAI,OAAO,CAAC,eAAe,CAAA;AACnE,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,QAAoC,EAAqB,EAAE,CAC9E,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAE/F;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAA+B,EAC/B,OAA6B,EAC7B,MAAc,EACd,UAAsB;IAEtB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,GAAG,GAAqB,EAAE,CAAA;IAChC,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC;YAAE,SAAQ;QACvD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;QAC7E,KAAK,MAAM,KAAK,IAAI,wBAAwB,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;YACpG,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;gBAAE,SAAQ;YACrC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACvB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACjB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAA+B,EAC/B,GAAW;IAEX,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAA;IAC3D,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IACzB,MAAM,QAAQ,GAAqB;QACjC,QAAQ,EAAE,OAAO,CAAC,GAAG;QACrB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACtD,IAAI;YACJ,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,CAAC,CAAC;KACJ,CAAA;IACD,IAAI,OAAO,CAAC,aAAa;QAAE,QAAQ,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAA;IACzE,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/dist/backend/install/service.d.ts

@@ -62,8 +62,11 @@ export interface BackendServiceDeps {
     layout: DataLayout;
     provider: LocalProviderId;
     downloader: Downloader;
-    /** The live manifest for this platform, or `null` when it could not be fetched. */
-    readManifest: (proxy?: ProxyConfig | null) => Promise<UpstreamManifest | null>;
+    /**
+     * Upstream: the release list's entry for this tag, in the legacy manifest's shape, or `null` when
+     * the tag is not listed (the archive then comes from the ggml-org CDN, unhashed).
+     */
+    readManifest: (tag: string, proxy?: ProxyConfig | null) => Promise<UpstreamManifest | null>;
     optimalStore?: OptimalBackendStore;
     /** Decides the executable name inside a pack (`llama-server` vs `llama-server.exe`). */
     platform?: NodeJS.Platform;
@@ -174,8 +177,8 @@ export declare class BackendService {
      */
     install(version: string, backend: string, options: InstallBackendOptions): Promise<InstallBackendResult>;
     /**
-     * An upstream pack: from the signed mirror when the manifest lists this exact asset, otherwise the
-     * ggml-org CDN without a checksum — the app's behaviour, and the reason a build the mirror has not
+     * An upstream pack: from the signed mirror when the release list lists this exact asset, otherwise
+     * the ggml-org CDN without a checksum — the app's behaviour, and the reason a build the mirror has not
      * caught up with still installs; a wrong tag then fails as a 404 during the download. Some Windows
      * CUDA backends ship without the CUDA runtime, which is fetched beside them under the same task,
      * because to the user this is one install with one progress bar.

package/dist/backend/install/service.js

@@ -31,7 +31,7 @@ import { deletableBackendPack, getBackendDir, listInstalledBackendPacks, readBun
 import { scanInstalledBackends } from '../installed/index.js';
 import { llamaServerExeName } from '../../config/index.js';
 import { ensureTurboquantCudart, readTurboquantIndexedAsset, turboquantArchiveUrl } from '../turboquant.js';
-import { parseBackendVersion, parseBinaryVersion } from '../version.js';
+import { parseBackendVersion, parseBinaryVersion, stripBom } from '../version.js';
 const execFileAsync = promisify(execFile);
 /**
  * How long a pack's `llama-server --version` may take. The first launch of a pack is from a path
@@ -312,14 +312,14 @@ export class BackendService {
         return { version, backend, installed: true, path: target };
     }
     /**
-     * An upstream pack: from the signed mirror when the manifest lists this exact asset, otherwise the
-     * ggml-org CDN without a checksum — the app's behaviour, and the reason a build the mirror has not
+     * An upstream pack: from the signed mirror when the release list lists this exact asset, otherwise
+     * the ggml-org CDN without a checksum — the app's behaviour, and the reason a build the mirror has not
      * caught up with still installs; a wrong tag then fails as a 404 during the download. Some Windows
      * CUDA backends ship without the CUDA runtime, which is fetched beside them under the same task,
      * because to the user this is one install with one progress bar.
      */
     async upstreamDownloads(version, backend, staging, options) {
-        const manifest = await this.deps.readManifest(options.proxy);
+        const manifest = await this.deps.readManifest(stripBom(version), options.proxy);
         const source = resolveBackendArchiveSource(version, backend, manifest ?? undefined);
         const archivePath = join(staging, getBackendArchiveName(version, backend));
         const cudartName = getCudartArchiveName(backend, version);