@atomic-chat/core 0.5.1 → 0.13.2

package/dist/contracts/environment.js

@@ -0,0 +1,116 @@
+/**
+ * Managed text runtimes on the wire: the container environment the core owns, the per-engine
+ * runtime installations inside it, the durable operations that install, update and remove them,
+ * the metadata that says what one engine release runs and supports, and the verdict the core
+ * returns when asked whether a given checkpoint can run on this machine.
+ *
+ * Ported selectively from `origin/feat/tenzor-rt` @ `632b934` (openspec change
+ * `add-tensorrt-llm-linux`, design D1; see `docs/decisions/` for the ADR). The descriptor shapes
+ * below follow `atomic-chat-conf/runtimes/schema.json`, the source of truth for what a published
+ * descriptor contains (design D7/D9/D12); `ModelCompatibility` is new, the verdict of the future
+ * `POST /atomic/v1/models/tensorrt-llm/check` (spec `tensorrt-llm-models`). The environment routes,
+ * the durable operation and the Linux setup (task 2.6) produce the environment shapes.
+ *
+ * Browser-safe: types and string constants only, no `node:*`.
+ *
+ * Field names are snake_case: this surface is emitted from a descriptor published as JSON and has
+ * no older camelCase mirror to preserve.
+ */
+/**
+ * Which container engine an environment drives. One per host recipe: Docker on the Linux host
+ * itself, or the Docker inside the WSL distribution the core owns on Windows.
+ */
+export const EXECUTOR_KINDS = ['linux-docker', 'wsl-docker'];
+/** What a durable operation is for. Removal is its own kind, never an update to an empty target. */
+export const MANAGED_OPERATION_KINDS = ['setup', 'update', 'remove'];
+/**
+ * Where a durable operation stands. `ready` means the target is verified — for a runtime target
+ * that is the installation, never the model, which has readiness of its own.
+ *
+ * `relogin-required` is Linux-only: adding the user to the `docker` group takes effect at their
+ * next sign-in, so the operation waits there and re-probes when the app opens again.
+ * `reboot-required` is the Windows equivalent after enabling the WSL features.
+ */
+export const MANAGED_PHASES = [
+    'checking',
+    'awaiting-consent',
+    'preparing-host',
+    'relogin-required',
+    'reboot-required',
+    'preparing-environment',
+    'pulling-image',
+    'verifying',
+    'activating',
+    'removing',
+    'ready',
+    'removed',
+    'cancelling',
+    'cancelled',
+    'failed',
+];
+/**
+ * Whether this host can run the target at all. `prerequisite-blocked` is a fact about the machine
+ * (no NVIDIA driver, an unqualified distribution); `setup-required` means it can, but has not.
+ */
+export const MANAGED_AVAILABILITY = [
+    'supported',
+    'setup-required',
+    'prerequisite-blocked',
+    'unsupported',
+];
+/** Lifecycle of one engine's installation inside an environment. */
+export const RUNTIME_INSTALLATION_STATUSES = [
+    'absent',
+    'installing',
+    'ready',
+    'updating',
+    'removing',
+    'failed',
+];
+/**
+ * The one privileged thing the core asks the app to do, per host recipe. The webview never chooses
+ * a command: it forwards this step, and the trusted helper owns the arguments.
+ */
+export const MANAGED_HOST_ACTIONS = ['linux.install-container-runtime', 'windows.enable-wsl'];
+/**
+ * The Windows causes of a blocker (`ManagedBlocker.reason`) or of a failure (`ErrorBody.details`) a
+ * client switches on (change `add-tensorrt-llm-windows`, spec `wsl-runtime-environment`):
+ * - `wsl-localhost-forwarding` — the engine answers inside the distribution but not on Windows'
+ *   `127.0.0.1`: WSL's localhost forwarding is off or broken (`.wslconfig`);
+ * - `wsl-stopped` — the distribution or the WSL VM stopped under a running session;
+ * - `wsl-version` — the installed WSL is older than the manifest's `minimum_wsl_version`;
+ * - `wsl1-distribution` — Atomic Chat's own distribution is registered as WSL 1;
+ * - `virtualization-disabled` — virtualization is off in the firmware;
+ * - `foreign-distribution` — a distribution with Atomic Chat's name exists that it did not import.
+ */
+export const WSL_REASONS = [
+    'wsl-localhost-forwarding',
+    'wsl-stopped',
+    'wsl-version',
+    'wsl1-distribution',
+    'virtualization-disabled',
+    'foreign-distribution',
+];
+/**
+ * Package-manager family a Linux distribution uses, read from `/etc/os-release` `ID`/`ID_LIKE`
+ * (task 2.4). Arch and its derivatives (`pacman`) never check the install recipe's distribution
+ * list — they only ever adopt a working host or get exact manual instructions (design D2).
+ */
+export const LINUX_PACKAGE_FAMILIES = ['apt', 'dnf', 'pacman', 'other'];
+/**
+ * How Docker Engine reached this machine, as far as a read-only probe can tell (task 2.4, design
+ * D2). `docker-ce`/`docker.io`/`moby-engine` are alternative distro packages this integration can
+ * adopt or complete; `snap`, `rootless`, `docker-desktop` and `podman-docker` describe an
+ * installation it will never install over or adopt, because there is no safe way to layer
+ * `docker-ce` on top of, or automatically replace, someone else's existing setup.
+ */
+export const LINUX_DOCKER_INSTALL_METHODS = [
+    'docker-ce',
+    'docker.io',
+    'moby-engine',
+    'snap',
+    'rootless',
+    'docker-desktop',
+    'podman-docker',
+];
+//# sourceMappingURL=environment.js.map

package/dist/contracts/environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.js","sourceRoot":"","sources":["../../src/contracts/environment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAOH;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,cAAc,EAAE,YAAY,CAAU,CAAA;AAGrE,oGAAoG;AACpG,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAA;AAU7E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,UAAU;IACV,kBAAkB;IAClB,gBAAgB;IAChB,kBAAkB;IAClB,iBAAiB;IACjB,uBAAuB;IACvB,eAAe;IACf,WAAW;IACX,YAAY;IACZ,UAAU;IACV,OAAO;IACP,SAAS;IACT,YAAY;IACZ,WAAW;IACX,QAAQ;CACA,CAAA;AAGV;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,WAAW;IACX,gBAAgB;IAChB,sBAAsB;IACtB,aAAa;CACL,CAAA;AAGV,oEAAoE;AACpE,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ;IACR,YAAY;IACZ,OAAO;IACP,UAAU;IACV,UAAU;IACV,QAAQ;CACA,CAAA;AA4LV;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,iCAAiC,EAAE,oBAAoB,CAAU,CAAA;AAmLtG;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,0BAA0B;IAC1B,aAAa;IACb,aAAa;IACb,mBAAmB;IACnB,yBAAyB;IACzB,sBAAsB;CACd,CAAA;AA2IV;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAA;AAGhF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,WAAW;IACX,WAAW;IACX,aAAa;IACb,MAAM;IACN,UAAU;IACV,gBAAgB;IAChB,eAAe;CACP,CAAA"}

package/dist/contracts/errors.d.ts

@@ -31,7 +31,36 @@ export type CoreErrorCode = 'CORE_ALREADY_RUNNING' | 'CORE_NOT_RUNNING' | 'CORE_
 /** The tunnel is being stopped; ask again once it is down. */
  | 'REMOTE_ACCESS_OPERATION_IN_PROGRESS'
 /** A previous tunnel could not be confirmed dead; only Stop is offered until it is. */
- | 'REMOTE_ACCESS_STOP_FAILED';
+ | 'REMOTE_ACCESS_STOP_FAILED'
+/** The decision model is turned off, or no model file is configured for it. */
+ | 'DECISION_NOT_CONFIGURED'
+/** No installed engine build serves `llama-server --decision` (API version 1). */
+ | 'DECISION_ENGINE_UNSUPPORTED'
+/** The decision model is not running right now (starting, failed or stopped). */
+ | 'DECISION_UNAVAILABLE'
+/** `decision.model_path` is a folder that lacks files of a laya checkpoint; `details` lists them. */
+ | 'DECISION_CHECKPOINT_INCOMPLETE'
+/** A decision model was asked to load as a chat or embedding session; it runs only in the decision module. */
+ | 'DECISION_MODEL_NOT_CHAT'
+/** The embedding model is turned off, or no model file is configured for it. */
+ | 'EMBEDDING_NOT_CONFIGURED'
+/** No installed llama.cpp build is new enough for the embedding model; the message names the build. */
+ | 'EMBEDDING_ENGINE_UNSUPPORTED'
+/** The embedding model is not running right now (starting, failed or stopped). */
+ | 'EMBEDDING_UNAVAILABLE'
+/** `embedding.model_path` is not an embedding GGUF (a chat, decision or reranker model). */
+ | 'EMBEDDING_MODEL_NOT_EMBEDDING'
+/**
+ * The file cannot run on the requested engine (a PrismML-only Bonsai file on stock llama.cpp, or a
+ * build too old for it); `details` is the JSON compatibility verdict. Never retried elsewhere.
+ */
+ | 'MODEL_ENGINE_INCOMPATIBLE'
+/** A legacy layout no current engine runs (Bonsai Q2_0 group-128); `details` names the replacement. */
+ | 'MODEL_FORMAT_LEGACY'
+/** A model setup was started from a plan whose inputs changed since it was computed; plan again. */
+ | 'MODEL_SETUP_PLAN_STALE' | 'MODEL_SETUP_NOT_FOUND'
+/** Another install of the same engine build (sd.cpp, MLX) is running; wait for it. */
+ | 'ENGINE_INSTALL_IN_PROGRESS';
 /**
  * Image generation (`tauri-plugin-atomic-diffusion/src/error.rs`, `NativeDiffusionErrorCode` in the
  * web app). `lib/diffusion/errors.ts` matches on them. Three are spelled like codes above and are
@@ -39,7 +68,19 @@ export type CoreErrorCode = 'CORE_ALREADY_RUNNING' | 'CORE_NOT_RUNNING' | 'CORE_
  */
 export declare const DIFFUSION_ERROR_CODES: readonly ["ENGINE_MISSING", "ENGINE_UPDATE_REQUIRED", "ENGINE_INSTALL_FAILED", "ENGINE_CRASHED", "MODEL_MISSING", "SIDE_FILE_MISSING", "MODEL_LOAD_FAILED", "MODEL_INCOMPATIBLE", "MODEL_NOT_LOADED", "OUT_OF_MEMORY", "UNSUPPORTED_BACKEND", "UNSUPPORTED_WORKFLOW", "INVALID_DIMENSIONS", "INVALID_REQUEST", "INVALID_OUTPUT", "JOB_BUSY", "JOB_NOT_FOUND", "QUEUE_FULL", "CANCELLED", "DISK_FULL", "BACKEND_IN_USE", "NOT_CONFIGURED", "INTERNAL"];
 export type DiffusionErrorCode = (typeof DIFFUSION_ERROR_CODES)[number];
-export type ErrorCode = RuntimeErrorCode | ExtensionErrorCode | CoreErrorCode | DiffusionErrorCode;
+/**
+ * Managed text runtimes: the container environment, its durable setup operations and the GPU
+ * residency rule (`src/contracts/environment.ts`). Proposed; nothing raises these yet. Ported
+ * selectively from `origin/feat/tenzor-rt` @ `632b934` (design D1; see `docs/decisions/`).
+ *
+ * `MODEL_INCOMPATIBLE` is spelled like the image-generation code above and shared with it — the
+ * meaning is the same, a checkpoint this engine cannot load. `OUT_OF_MEMORY`, `INVALID_ARGUMENT`,
+ * `IO_ERROR`, `UNAUTHORIZED`, `UPSTREAM_ERROR` and `MODEL_LOAD_CANCELLED` are reused from the lists
+ * above rather than restated here.
+ */
+export declare const MANAGED_ERROR_CODES: readonly ["MANAGED_OPERATION_CONFLICT", "MANAGED_OPERATION_NOT_FOUND", "MANAGED_REVISION_CONFLICT", "MANAGED_CONSENT_REQUIRED", "MANAGED_PLAN_CHANGED", "MANAGED_HOST_STEP_INVALID", "MANAGED_PREREQUISITE_BLOCKED", "MANAGED_ADAPTER_UNAVAILABLE", "MANAGED_IDENTITY_MISMATCH", "MANAGED_STOP_UNCONFIRMED", "MANAGED_RESOURCE_IN_USE", "MANAGED_METADATA_INVALID", "MANAGED_RECEIPT_CONFLICT", "MANAGED_ELEVATION_DECLINED", "MANAGED_RELOGIN_REQUIRED", "MANAGED_REBOOT_REQUIRED", "MODEL_INCOMPATIBLE", "GPU_BUSY", "SESSION_GENERATION_STALE"];
+export type ManagedErrorCode = (typeof MANAGED_ERROR_CODES)[number];
+export type ErrorCode = RuntimeErrorCode | ExtensionErrorCode | CoreErrorCode | DiffusionErrorCode | ManagedErrorCode;
 /**
  * Disk-failure tags. Rendered into the error message as `Error: [<tag>] <detail>`; the app's
  * telemetry parses the tag out of the string. Byte-identical with `disk.rs`.

package/dist/contracts/errors.js

@@ -37,6 +37,47 @@ export const DIFFUSION_ERROR_CODES = [
     'NOT_CONFIGURED',
     'INTERNAL',
 ];
+/**
+ * Managed text runtimes: the container environment, its durable setup operations and the GPU
+ * residency rule (`src/contracts/environment.ts`). Proposed; nothing raises these yet. Ported
+ * selectively from `origin/feat/tenzor-rt` @ `632b934` (design D1; see `docs/decisions/`).
+ *
+ * `MODEL_INCOMPATIBLE` is spelled like the image-generation code above and shared with it — the
+ * meaning is the same, a checkpoint this engine cannot load. `OUT_OF_MEMORY`, `INVALID_ARGUMENT`,
+ * `IO_ERROR`, `UNAUTHORIZED`, `UPSTREAM_ERROR` and `MODEL_LOAD_CANCELLED` are reused from the lists
+ * above rather than restated here.
+ */
+export const MANAGED_ERROR_CODES = [
+    /** Another mutation owns this environment, or the request conflicts with the running operation. */
+    'MANAGED_OPERATION_CONFLICT',
+    'MANAGED_OPERATION_NOT_FOUND',
+    /** The caller's `expected_revision` is not the operation's current one. */
+    'MANAGED_REVISION_CONFLICT',
+    'MANAGED_CONSENT_REQUIRED',
+    /** The host changed under an operation awaiting consent; the old approval no longer applies. */
+    'MANAGED_PLAN_CHANGED',
+    'MANAGED_HOST_STEP_INVALID',
+    'MANAGED_PREREQUISITE_BLOCKED',
+    'MANAGED_ADAPTER_UNAVAILABLE',
+    /** A recorded container, distribution or process is not the one this core owns. */
+    'MANAGED_IDENTITY_MISMATCH',
+    /** A stop could not be confirmed, so the GPU reservation is deliberately still held. */
+    'MANAGED_STOP_UNCONFIRMED',
+    'MANAGED_RESOURCE_IN_USE',
+    'MANAGED_METADATA_INVALID',
+    /** A different receipt arrived for a nonce that was already consumed. */
+    'MANAGED_RECEIPT_CONFLICT',
+    'MANAGED_ELEVATION_DECLINED',
+    /** Linux: the `docker` group membership takes effect at the user's next sign-in. */
+    'MANAGED_RELOGIN_REQUIRED',
+    'MANAGED_REBOOT_REQUIRED',
+    /** Shared with image generation: this engine cannot load that checkpoint. */
+    'MODEL_INCOMPATIBLE',
+    /** Another local model holds the GPU and could not be evicted. Never an eviction by force. */
+    'GPU_BUSY',
+    /** The caller addressed a session generation that has since been replaced. */
+    'SESSION_GENERATION_STALE',
+];
 /**
  * Disk-failure tags. Rendered into the error message as `Error: [<tag>] <detail>`; the app's
  * telemetry parses the tag out of the string. Byte-identical with `disk.rs`.

package/dist/contracts/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/contracts/errors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAmEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,gBAAgB;IAChB,wGAAwG;IACxG,wBAAwB;IACxB,uBAAuB;IACvB,gBAAgB;IAChB,eAAe;IACf,mBAAmB;IACnB,mBAAmB;IACnB,oBAAoB;IACpB,kBAAkB;IAClB,eAAe;IACf,qBAAqB;IACrB,sBAAsB;IACtB,oBAAoB;IACpB,iBAAiB;IACjB,kGAAkG;IAClG,gBAAgB;IAChB,UAAU;IACV,eAAe;IACf,YAAY;IACZ,WAAW;IACX,WAAW;IACX,gBAAgB;IAChB,gBAAgB;IAChB,UAAU;CACF,CAAA;AAKV;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,WAAW;IACX,iBAAiB;IACjB,kBAAkB;IAClB,oBAAoB;IACpB,kBAAkB;IAClB,SAAS;CACD,CAAA;AAUV,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAC/B,IAAI,CAAW;IACf,OAAO,CAAoB;IAEpC,YAAY,IAAe,EAAE,OAAe,EAAE,OAAgB;QAC5D,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAA;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS;YAC/B,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YAC5C,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAA;IACvE,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,IAAe;QAC7B,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IACnE,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/contracts/errors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAiGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,gBAAgB;IAChB,wGAAwG;IACxG,wBAAwB;IACxB,uBAAuB;IACvB,gBAAgB;IAChB,eAAe;IACf,mBAAmB;IACnB,mBAAmB;IACnB,oBAAoB;IACpB,kBAAkB;IAClB,eAAe;IACf,qBAAqB;IACrB,sBAAsB;IACtB,oBAAoB;IACpB,iBAAiB;IACjB,kGAAkG;IAClG,gBAAgB;IAChB,UAAU;IACV,eAAe;IACf,YAAY;IACZ,WAAW;IACX,WAAW;IACX,gBAAgB;IAChB,gBAAgB;IAChB,UAAU;CACF,CAAA;AAGV;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,mGAAmG;IACnG,4BAA4B;IAC5B,6BAA6B;IAC7B,2EAA2E;IAC3E,2BAA2B;IAC3B,0BAA0B;IAC1B,gGAAgG;IAChG,sBAAsB;IACtB,2BAA2B;IAC3B,8BAA8B;IAC9B,6BAA6B;IAC7B,mFAAmF;IACnF,2BAA2B;IAC3B,wFAAwF;IACxF,0BAA0B;IAC1B,yBAAyB;IACzB,0BAA0B;IAC1B,yEAAyE;IACzE,0BAA0B;IAC1B,4BAA4B;IAC5B,oFAAoF;IACpF,0BAA0B;IAC1B,yBAAyB;IACzB,6EAA6E;IAC7E,oBAAoB;IACpB,8FAA8F;IAC9F,UAAU;IACV,8EAA8E;IAC9E,0BAA0B;CAClB,CAAA;AAMV;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,WAAW;IACX,iBAAiB;IACjB,kBAAkB;IAClB,oBAAoB;IACpB,kBAAkB;IAClB,SAAS;CACD,CAAA;AAUV,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAC/B,IAAI,CAAW;IACf,OAAO,CAAoB;IAEpC,YAAY,IAAe,EAAE,OAAe,EAAE,OAAgB;QAC5D,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAA;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS;YAC/B,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YAC5C,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAA;IACvE,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,IAAe;QAC7B,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IACnE,CAAC;CACF"}

package/dist/contracts/events.d.ts

@@ -4,8 +4,14 @@
  * Adding an event = add it here + add the relay mapping in the app, in the same PR pair.
  */
 import type { DiffusionErrorEvent, DiffusionJobEvent, DiffusionVideoJobEvent, DiffusionVideoProgressEvent, DiffusionProgressEvent, DiffusionStateEvent } from './diffusion.js';
+import type { EngineBuildChangedEvent } from './engine-builds.js';
+import type { EngineChangedEvent } from './engines.js';
+import type { EnvironmentOperation, EnvironmentSnapshot } from './environment.js';
+import type { DecisionErrorEvent, DecisionStateEvent } from './decision.js';
+import type { EmbeddingErrorEvent, EmbeddingStateEvent } from './embedding.js';
+import type { ModelSetup } from './model-setup.js';
 import type { RemoteAccessStatus } from './remote-access.js';
-import type { LocalProviderId, RuntimeDeviceInfo, SessionInfo } from './session.js';
+import type { LocalProviderId, RuntimeDeviceInfo, SessionInfo, SessionLoadStage } from './session.js';
 export type DownloadKind = 'model' | 'backend' | 'draft' | 'cudart';
 /**
  * What a download is doing while it has no bytes to report: reaching the server for the first time,
@@ -109,7 +115,7 @@ export interface CoreEvents {
         optimal: unknown | null;
     };
     'settings:changed': {
-        provider: LocalProviderId | 'server' | 'cloud';
+        provider: LocalProviderId | 'server' | 'cloud' | 'decision' | 'embedding';
         key: string;
         value: unknown;
     };
@@ -118,11 +124,18 @@ export interface CoreEvents {
     };
     'session:died': {
         provider: LocalProviderId;
-        pid: number;
+        /** null when the session was a container: it never had a host process to report. */
+        pid: number | null;
         model_id: string;
         exit_code: number | null;
         signal: string | null;
         message: string;
+        /**
+         * Why the session ended when it was not the engine's own exit (change `add-tensorrt-llm-windows`):
+         * `wsl-stopped` — the WSL distribution or VM stopped under it (`wsl --shutdown`). Absent otherwise;
+         * additive, a client that predates it ignores the key.
+         */
+        reason?: 'wsl-stopped';
     };
     'session:ctx-increased': {
         provider: LocalProviderId;
@@ -131,10 +144,33 @@ export interface CoreEvents {
         newCtx: number;
         reason: string;
     };
+    /** `pid` is null when the session was a container: it never had a host process to report. */
     'session:unloaded': {
         provider: LocalProviderId;
         model_id: string;
-        pid: number;
+        pid: number | null;
+    };
+    /**
+     * Managed-runtime load stages (design D8, spec `tensorrt-llm-runtime`): `generation` ties the
+     * progress to the exact load a caller started, since a second load of the same model replaces it
+     * with a new one. Only a container-backed provider emits this; a native load has no stages to
+     * report and goes straight from `session:started` to ready.
+     */
+    'session:load-progress': {
+        provider: LocalProviderId;
+        model_id: string;
+        generation: string;
+        stage: SessionLoadStage;
+        elapsed_ms: number;
+        /**
+         * Present on every progress event of a load whose saved card was not found by the probe, so it
+         * runs on the card with the most free memory instead (spec `tensorrt-llm-runtime`, "Выбранная карта
+         * исчезла"). Absent when the load runs where it was asked to.
+         */
+        gpu_substituted?: {
+            requested_gpu_id: string;
+            gpu_id: string;
+        };
     };
     'server:started': {
         host: string;
@@ -162,6 +198,48 @@ export interface CoreEvents {
     /** Video generation shares `state` and `error`; its jobs have their own two, so image consumers see no new shape. */
     'diffusion:video-progress': DiffusionVideoProgressEvent;
     'diffusion:video-job': DiffusionVideoJobEvent;
+    /**
+     * Managed text runtimes (`src/contracts/environment.ts`; openspec change `add-tensorrt-llm-linux`).
+     * Both carry full state rather than a delta, so a client that reconnects rebuilds from the
+     * snapshot and then applies whatever arrives. Both are proposed: no producer exists yet.
+     *
+     * `changed` is one environment and the engines installed into it. `operation` is one durable
+     * setup, update or removal. Each carries `instance_id` and `revision`: apply only a strictly
+     * newer revision of the current instance, and treat an equal revision as a no-op.
+     */
+    'environment:changed': EnvironmentSnapshot;
+    'environment:operation': EnvironmentOperation;
+    /**
+     * An sd.cpp or MLX build was installed, removed, or cleaned up at start (spec `engine-builds`):
+     * re-read `POST /engine-builds/:engine/catalog` instead of polling it.
+     */
+    'engine-build:changed': EngineBuildChangedEvent;
+    /**
+     * The set or the active build of any engine changed (change `unify-engine-lifecycle`, design D8):
+     * published by every route that installs, activates or removes a build, `/backends` and
+     * `/engine-builds` included. Re-read `POST /engines/versions`. `engine-build:changed` stays for
+     * the desktop releases that listen to it.
+     */
+    'engine:changed': EngineChangedEvent;
+    /**
+     * The decision model (ADR 2026-09-30-the-decision-model-is-its-own-core-module). `state` on every
+     * status change (the payload is the whole `DecisionStatus`, like `GET /decision/status`); `error`
+     * for a failure nobody is awaiting: a crash, a failed restart, restarts given up.
+     */
+    'decision:state': DecisionStateEvent;
+    'decision:error': DecisionErrorEvent;
+    /**
+     * The embedding model (ADR 2026-10-07-embedding-models-are-their-own-core-module), the same pair:
+     * `state` on every status change (the whole `EmbeddingStatus`, like `GET /embedding/status`),
+     * `error` for a failure nobody is awaiting.
+     */
+    'embedding:state': EmbeddingStateEvent;
+    'embedding:error': EmbeddingErrorEvent;
+    /**
+     * Every write of a model setup (`src/contracts/model-setup.ts`), the whole record: keep the one
+     * with the highest `revision` per `setup_id`.
+     */
+    'model-setup:changed': ModelSetup;
     /**
      * One request to the Local API Server, for the app's analytics window and its API screen
      * (PLAN.md §2 decision 15). `started` and `progress` are sent only while the app's inspector is

package/dist/contracts/hardware.d.ts

@@ -1,10 +1,14 @@
 /**
- * Hardware facts a host injects into the core (`PUT /hardware/override`, PLAN.md §2 decision 10).
+ * Hardware facts the core knows about the machine it runs on (PLAN.md §2 decision 10, revised by the
+ * 2026-09-27 ADR "the core probes hardware with shell tools").
  *
- * The core probes hardware with shell tools, which is not enough for an NVIDIA driver's exact
- * version or a GPU's compute capability — the numbers the CUDA tier is chosen from. The desktop app
- * measures them with NVML/Vulkan; a headless host measures them with `nvidia-smi` and friends. Both
- * hand the core the same shape, and the core prefers it over its own probe.
+ * The core measures the machine itself, with the tools every host already has: `nvidia-smi` for NVIDIA
+ * driver version and compute capability, sysfs / PowerShell CIM + registry for the other PCI GPUs and
+ * their VRAM, `/proc/cpuinfo` / `sysctl` / `IsProcessorFeaturePresent` for the CPU flags, the Vulkan
+ * loader's ICD registrations (and `vulkaninfo` when installed) for Vulkan. No NVML, no native addon.
+ *
+ * `PUT /hardware/override` remains as a seam: an injected description replaces the probe wholesale for
+ * as long as it stands (tests, headless hosts with better numbers). The desktop app no longer injects.
  *
  * Browser-safe: types only, shared with every host and client.
  */
@@ -14,8 +18,9 @@
  * `driver_version`; everything else is `#[serde(default)]`.
  */
 export interface GpuProbeInfo {
+    name?: string;
     driver_version?: string;
-    /** `"NVIDIA" | "AMD" | "Intel" | "Unknown (vendor_id: N)"` as `tauri-plugin-hardware` spells it. */
+    /** `"NVIDIA" | "AMD" | "Intel" | "Qualcomm" | "Unknown (vendor_id: N)"`; the plugin has no `Qualcomm`. */
     vendor?: string | null;
     /** MiB. */
     total_memory?: number;
@@ -51,3 +56,71 @@ export interface HardwareOverrideInput {
     os_type?: unknown;
     source?: unknown;
 }
+/** `os_type` as the probe reports it; `unknown` for a platform the core has no probe for. */
+export type OsType = 'windows' | 'linux' | 'macos' | 'unknown';
+export interface CpuInfo {
+    name: string;
+    /** Physical cores; falls back to the logical count when the OS does not say. */
+    core_count: number;
+    /** Rust spelling: `x86_64`, `aarch64` / `arm64`, `x86`. */
+    arch: string;
+    /**
+     * Instruction-set flags in the plugin's spelling (`avx`, `avx2`, `avx512_f`, `sse4_1`, …), lowercase.
+     * Empty on non-x86 hosts.
+     */
+    extensions: string[];
+    /**
+     * `false` when the probe could not read the flags (no PowerShell, an unreadable `/proc/cpuinfo`);
+     * `extensions` is then `[]` and the no-AVX preflight stays silent rather than blocking on ignorance.
+     */
+    extensions_known: boolean;
+}
+export interface NvidiaGpuInfo {
+    index: number;
+    /** NVML / `nvidia-smi` `"major.minor"`; `''` when the tool could not report it (treated as unknown). */
+    compute_capability: string;
+}
+export interface VulkanGpuInfo {
+    index: number;
+    /**
+     * `"DiscreteGpu" | "IntegratedGpu" | "VirtualGpu" | "Other"` when a Vulkan enumeration said so;
+     * `"Unknown"` when only the loader/ICD registration is known and the vendor gives no hint.
+     */
+    device_type: string;
+    /** `"x.y.z"`; `''` when not enumerated. */
+    api_version: string;
+    /** PCI device id — the only gfx signal on Windows. */
+    device_id: number;
+}
+export interface GpuInfo {
+    name: string;
+    /** MiB. */
+    total_memory: number;
+    /** `"NVIDIA" | "AMD" | "Intel" | "Unknown (vendor_id: N)"`. */
+    vendor: string;
+    /** NVIDIA: the NVML uuid without `GPU-`; others: an opaque stable id (PCI bus id / PNP instance). */
+    uuid: string;
+    /** NVIDIA: the system driver (`"581.42"`); others: the OS driver string or `''`. */
+    driver_version: string;
+    nvidia_info: NvidiaGpuInfo | null;
+    vulkan_info: VulkanGpuInfo | null;
+}
+export interface SystemInfo {
+    cpu: CpuInfo;
+    os_type: OsType;
+    os_name: string;
+    /** MiB. */
+    total_memory: number;
+    gpus: GpuInfo[];
+}
+/** Where the facts came from: the core's own probe, or an injected override that replaces it. */
+export type HardwareSource = 'probe' | 'override';
+/** Body of `GET /hardware/info` and `POST /hardware/refresh`. */
+export interface HardwareInfoResponse {
+    info: SystemInfo;
+    source: HardwareSource;
+    /** Milliseconds since the epoch, from the core's clock, of the probe `info` is based on. */
+    probed_at: number;
+    /** What the probe could not read, one line each; empty when everything answered. */
+    warnings: string[];
+}

package/dist/contracts/hardware.js

@@ -1,10 +1,14 @@
 /**
- * Hardware facts a host injects into the core (`PUT /hardware/override`, PLAN.md §2 decision 10).
+ * Hardware facts the core knows about the machine it runs on (PLAN.md §2 decision 10, revised by the
+ * 2026-09-27 ADR "the core probes hardware with shell tools").
  *
- * The core probes hardware with shell tools, which is not enough for an NVIDIA driver's exact
- * version or a GPU's compute capability — the numbers the CUDA tier is chosen from. The desktop app
- * measures them with NVML/Vulkan; a headless host measures them with `nvidia-smi` and friends. Both
- * hand the core the same shape, and the core prefers it over its own probe.
+ * The core measures the machine itself, with the tools every host already has: `nvidia-smi` for NVIDIA
+ * driver version and compute capability, sysfs / PowerShell CIM + registry for the other PCI GPUs and
+ * their VRAM, `/proc/cpuinfo` / `sysctl` / `IsProcessorFeaturePresent` for the CPU flags, the Vulkan
+ * loader's ICD registrations (and `vulkaninfo` when installed) for Vulkan. No NVML, no native addon.
+ *
+ * `PUT /hardware/override` remains as a seam: an injected description replaces the probe wholesale for
+ * as long as it stands (tests, headless hosts with better numbers). The desktop app no longer injects.
  *
  * Browser-safe: types only, shared with every host and client.
  */

package/dist/contracts/hardware.js.map

@@ -1 +1 @@
-{"version":3,"file":"hardware.js","sourceRoot":"","sources":["../../src/contracts/hardware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}
+{"version":3,"file":"hardware.js","sourceRoot":"","sources":["../../src/contracts/hardware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}

package/dist/contracts/index.d.ts

@@ -9,4 +9,12 @@ export * from './events.js';
 export * from './control-api.js';
 export * from './remote-access.js';
 export * from './diffusion.js';
+export * from './decision.js';
+export * from './embedding.js';
 export * from './hardware.js';
+export * from './backend-advisor.js';
+export * from './environment.js';
+export * from './model-compatibility.js';
+export * from './model-setup.js';
+export * from './engine-builds.js';
+export * from './engines.js';

package/dist/contracts/index.js

@@ -9,5 +9,13 @@ export * from './events.js';
 export * from './control-api.js';
 export * from './remote-access.js';
 export * from './diffusion.js';
+export * from './decision.js';
+export * from './embedding.js';
 export * from './hardware.js';
+export * from './backend-advisor.js';
+export * from './environment.js';
+export * from './model-compatibility.js';
+export * from './model-setup.js';
+export * from './engine-builds.js';
+export * from './engines.js';
 //# sourceMappingURL=index.js.map

package/dist/contracts/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA;AAC7B,cAAc,sBAAsB,CAAA;AACpC,cAAc,kBAAkB,CAAA;AAChC,cAAc,0BAA0B,CAAA;AACxC,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,cAAc,CAAA"}

package/dist/contracts/model-compatibility.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Which engine a GGUF file needs: the wire shapes of `POST /atomic/v1/models/compatibility` and of
+ * the verdict the load gate applies (PrismML Bonsai, 2026-10-05 ADRs). Browser-safe: types only.
+ */
+import type { LocalProviderId } from './session.js';
+/** What a file needs from an engine. `q1_0` and `q2_0_g64` stock llama.cpp runs too. */
+export type EngineCapability = 'q1_0' | 'q2_0_g64' | 'pq2_0' | 'ptq1_0' | 'hadamard' | 'vision';
+/**
+ * `compatible`: runs on `provider` (or on whatever the caller picked when `provider` is `null`).
+ * `engine_required`: needs `atomic-prism`, which is not installed. `engine_update_required`: needs a
+ * newer `atomic-prism` build than the installed one. `legacy_artifact`: an old layout no current
+ * engine runs (see `replacement`). `inspection_required`: nothing is known yet; read the header.
+ * `unsupported`: recognised and refused (an F16 master, an unknown tensor type).
+ */
+export type CompatibilityOutcome = 'compatible' | 'engine_required' | 'engine_update_required' | 'legacy_artifact' | 'inspection_required' | 'unsupported';
+export interface CompatibilityVerdict {
+    outcome: CompatibilityOutcome;
+    /** The provider the file must run on; `null` = any llama.cpp provider, keep the caller's choice. */
+    provider: LocalProviderId | null;
+    /** Capabilities beyond what stock llama.cpp runs. */
+    requires: EngineCapability[];
+    /** What decided: a conf rule for this exact file, the GGUF header, or nothing yet. */
+    evidence: 'rules' | 'header' | 'none';
+    rules_version: number;
+    /** Oldest PrismML build known to run the file. */
+    min_prism_build?: number;
+    /** The PrismML build installed now, `null` when none is. */
+    installed_prism_build?: number | null;
+    /** `legacy_artifact`: the file to get instead (same repository). */
+    replacement?: string;
+    /** The conf family the file belongs to, when a rule matched. */
+    family?: string;
+    /** One line for logs and error details. */
+    reason: string;
+}
+export interface ModelCompatibilityRequest {
+    /** A model already on disk (its `model.yml` id under the shared GGUF tree). */
+    model_id?: string;
+    /** A file before download: `owner/repo` + file name (+ revision). */
+    repo?: string;
+    file?: string;
+    revision?: string;
+    sha256?: string;
+    /** Read the remote header over HTTP ranges when no rule matches (≈ 6–12 MB for Bonsai). */
+    inspect_remote?: boolean;
+    /** The provider the caller intends to use; a verdict for another provider is still returned. */
+    provider?: LocalProviderId;
+}
+export interface ModelCompatibilityResponse extends CompatibilityVerdict {
+    /** Family defaults from conf (sampling, context) when a rule matched. */
+    defaults?: {
+        sampling?: {
+            temperature?: number;
+            top_p?: number;
+            top_k?: number;
+            min_p?: number;
+        };
+        ctx_len?: number;
+    };
+}
+/** A file of a Bonsai family the Hub may offer: the conf rules neither exclude it nor call it legacy. */
+export interface PrismFamilyFile {
+    file: string;
+    size: number;
+    sha256: string;
+    packing?: string;
+    /** `prism_required`: only PrismML runs it; `any`: every llama.cpp engine does. */
+    treatment: 'prism_required' | 'any';
+    /** The file the family recommends. */
+    default?: boolean;
+    summary?: string;
+}
+export interface PrismFamilyProjector {
+    file: string;
+    size: number;
+    sha256: string;
+    default?: boolean;
+}
+/** One Bonsai model as the conf model rules name it, pinned to a revision. */
+export interface PrismFamily {
+    id: string;
+    title: string;
+    repo: string;
+    revision: string;
+    featured?: boolean;
+    files: PrismFamilyFile[];
+    projectors: PrismFamilyProjector[];
+}
+/**
+ * `GET /atomic/v1/models/atomic-prism/families`: the Bonsai families of the newest model rules the
+ * core has (live, cached or bundled), for the Hub's PrismML list. A family with no file to offer
+ * is left out.
+ */
+export interface PrismFamiliesResponse {
+    rules_version: number;
+    families: PrismFamily[];
+}

package/dist/contracts/model-compatibility.js

@@ -0,0 +1,6 @@
+/**
+ * Which engine a GGUF file needs: the wire shapes of `POST /atomic/v1/models/compatibility` and of
+ * the verdict the load gate applies (PrismML Bonsai, 2026-10-05 ADRs). Browser-safe: types only.
+ */
+export {};
+//# sourceMappingURL=model-compatibility.js.map

package/dist/contracts/model-compatibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-compatibility.js","sourceRoot":"","sources":["../../src/contracts/model-compatibility.ts"],"names":[],"mappings":"AAAA;;;GAGG"}