@atomic-chat/core 0.5.1 → 0.13.2

package/dist/models/gguf/tensors.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Bounded GGUF tensor-table reader: what a file is made of, for the engine-compatibility check.
+ *
+ * `reader.ts` reads the metadata block only and keeps the Rust reader's string contract; this reads
+ * past it into the tensor infos (name, dims, ggml type, data offset) without touching tensor data,
+ * and summarises them per ggml type: how many tensors, how many weights and — from the distance
+ * between consecutive data offsets — how many bytes, hence bits per weight. Bits per weight is what
+ * tells two layouts sharing one type id apart (Q2_0 group-64 at 2.25 vs the legacy group-128 at 2.125).
+ *
+ * Pure over a byte buffer like `reader.ts`; `readGgufTensorSummaryChunked` grows the prefix (a local
+ * file or HTTP ranges). Every count and length is bounded, so a hostile header cannot make it
+ * allocate or loop without limit.
+ */
+export declare const MAX_GGUF_TENSORS = 200000;
+export declare const MAX_GGUF_TENSOR_DIMS = 8;
+export declare const MAX_GGUF_METADATA_ENTRIES = 1000000;
+export interface GgufTensorTypeSummary {
+    /** ggml tensor type id (`0` F32, `1` F16, `41` Q1_0, `42` Q2_0, `142` PQ2_0, `143` PTQ1_0 …). */
+    type: number;
+    tensors: number;
+    /** Weights across those tensors. */
+    elements: number;
+    /** Bytes of the tensors whose size is known (every one but the last without `fileSize`). */
+    bytes: number;
+    /** Weights of exactly the tensors counted in `bytes`. */
+    sizedElements: number;
+    /** `bytes * 8 / sizedElements`, `null` when no tensor of the type has a known size. */
+    bitsPerWeight: number | null;
+}
+export interface GgufTensorSummary {
+    version: number;
+    tensorCount: number;
+    /** Scalar metadata stringified (`String(value)`); arrays appear as `[array]`. */
+    metadata: Record<string, string>;
+    alignment: number;
+    /** Absolute file offset where tensor data starts. */
+    dataOffset: number;
+    types: GgufTensorTypeSummary[];
+}
+/**
+ * Summarise the tensor table in `bytes` (a prefix of the file). `fileSize`, when known, sizes the
+ * last tensor too. Throws `GgufNeedMoreData` for a prefix that ends inside the table and
+ * `GgufParseError` for anything that is not a sane GGUF header.
+ */
+export declare function readGgufTensorSummary(bytes: Uint8Array, options?: {
+    fileSize?: number;
+}): GgufTensorSummary;
+/**
+ * `readGgufTensorSummary` over growing prefixes (`readPrefix(n)` returns up to `n` bytes; fewer
+ * means EOF). Bonsai headers are 6–12 MB, so the default reads 4 MB at a time up to 64 MB.
+ */
+export declare function readGgufTensorSummaryChunked(readPrefix: (byteLength: number) => Promise<Uint8Array>, options?: {
+    fileSize?: number;
+    chunkSize?: number;
+    maxBytes?: number;
+}): Promise<GgufTensorSummary>;

package/dist/models/gguf/tensors.js

@@ -0,0 +1,236 @@
+/**
+ * Bounded GGUF tensor-table reader: what a file is made of, for the engine-compatibility check.
+ *
+ * `reader.ts` reads the metadata block only and keeps the Rust reader's string contract; this reads
+ * past it into the tensor infos (name, dims, ggml type, data offset) without touching tensor data,
+ * and summarises them per ggml type: how many tensors, how many weights and — from the distance
+ * between consecutive data offsets — how many bytes, hence bits per weight. Bits per weight is what
+ * tells two layouts sharing one type id apart (Q2_0 group-64 at 2.25 vs the legacy group-128 at 2.125).
+ *
+ * Pure over a byte buffer like `reader.ts`; `readGgufTensorSummaryChunked` grows the prefix (a local
+ * file or HTTP ranges). Every count and length is bounded, so a hostile header cannot make it
+ * allocate or loop without limit.
+ */
+import { GgufNeedMoreData, GgufParseError } from './reader.js';
+export const MAX_GGUF_TENSORS = 200_000;
+export const MAX_GGUF_TENSOR_DIMS = 8;
+export const MAX_GGUF_METADATA_ENTRIES = 1_000_000;
+const MAX_STRING_BYTES = 1024 * 1024;
+const MAX_ARRAY_LEN = 50_000_000;
+const DEFAULT_ALIGNMENT = 32;
+class Cursor {
+    buf;
+    pos = 0;
+    view;
+    constructor(buf) {
+        this.buf = buf;
+        this.view = new DataView(buf.buffer, buf.byteOffset, buf.byteLength);
+    }
+    need(n) {
+        if (this.pos + n > this.buf.byteLength)
+            throw new GgufNeedMoreData();
+    }
+    u8() {
+        this.need(1);
+        return this.view.getUint8(this.pos++);
+    }
+    u32() {
+        this.need(4);
+        const v = this.view.getUint32(this.pos, true);
+        this.pos += 4;
+        return v;
+    }
+    /** A u64 that must fit a JS number below `limit`. */
+    u64(limit = Number.MAX_SAFE_INTEGER, what = 'value') {
+        this.need(8);
+        const v = this.view.getBigUint64(this.pos, true);
+        this.pos += 8;
+        if (v > BigInt(limit))
+            throw new GgufParseError(`${what} ${v} is unreasonably large`);
+        return Number(v);
+    }
+    scalar(type) {
+        switch (type) {
+            case 0:
+                return String(this.u8());
+            case 1:
+                this.need(1);
+                return String(this.view.getInt8(this.pos++));
+            case 2:
+            case 3: {
+                this.need(2);
+                const v = type === 2 ? this.view.getUint16(this.pos, true) : this.view.getInt16(this.pos, true);
+                this.pos += 2;
+                return String(v);
+            }
+            case 4:
+                return String(this.u32());
+            case 5: {
+                this.need(4);
+                const v = this.view.getInt32(this.pos, true);
+                this.pos += 4;
+                return String(v);
+            }
+            case 6: {
+                this.need(4);
+                const v = this.view.getFloat32(this.pos, true);
+                this.pos += 4;
+                return String(v);
+            }
+            case 7:
+                return this.u8() !== 0 ? 'true' : 'false';
+            case 8:
+                return this.string();
+            case 10:
+            case 11: {
+                this.need(8);
+                const v = type === 10 ? this.view.getBigUint64(this.pos, true) : this.view.getBigInt64(this.pos, true);
+                this.pos += 8;
+                return v.toString();
+            }
+            case 12: {
+                this.need(8);
+                const v = this.view.getFloat64(this.pos, true);
+                this.pos += 8;
+                return String(v);
+            }
+            default:
+                throw new GgufParseError(`Unknown GGUF value type: ${type}`);
+        }
+    }
+    string() {
+        const len = this.u64(MAX_STRING_BYTES, 'String length');
+        this.need(len);
+        const raw = this.buf.subarray(this.pos, this.pos + len);
+        this.pos += len;
+        return new TextDecoder('utf-8').decode(raw);
+    }
+    skip(n) {
+        this.need(n);
+        this.pos += n;
+    }
+    skipValue(type, depth = 0) {
+        if (type !== 9) {
+            const width = [1, 1, 2, 2, 4, 4, 4, 1, -1, -1, 8, 8, 8][type];
+            if (width === undefined)
+                throw new GgufParseError(`Unknown GGUF value type: ${type}`);
+            if (width > 0)
+                this.skip(width);
+            else
+                this.skip(this.u64(MAX_STRING_BYTES, 'String length'));
+            return;
+        }
+        if (depth > 4)
+            throw new GgufParseError('GGUF arrays nested too deeply');
+        const elem = this.u32();
+        const len = this.u64(MAX_ARRAY_LEN, 'Array length');
+        const width = [1, 1, 2, 2, 4, 4, 4, 1, -1, -1, 8, 8, 8][elem];
+        if (width === undefined)
+            throw new GgufParseError(`Unknown GGUF value type: ${elem}`);
+        if (width > 0)
+            this.skip(len * width);
+        else
+            for (let i = 0; i < len; i++)
+                this.skipValue(elem, depth + 1);
+    }
+}
+/**
+ * Summarise the tensor table in `bytes` (a prefix of the file). `fileSize`, when known, sizes the
+ * last tensor too. Throws `GgufNeedMoreData` for a prefix that ends inside the table and
+ * `GgufParseError` for anything that is not a sane GGUF header.
+ */
+export function readGgufTensorSummary(bytes, options = {}) {
+    const c = new Cursor(bytes);
+    if (c.u8() !== 0x47 || c.u8() !== 0x47 || c.u8() !== 0x55 || c.u8() !== 0x46) {
+        throw new GgufParseError('Not a GGUF file');
+    }
+    const version = c.u32();
+    if (version < 2)
+        throw new GgufParseError(`Unsupported GGUF version ${version}`);
+    const tensorCount = c.u64(MAX_GGUF_TENSORS, 'Tensor count');
+    const metadataCount = c.u64(MAX_GGUF_METADATA_ENTRIES, 'Metadata count');
+    const metadata = {};
+    for (let i = 0; i < metadataCount; i++) {
+        const key = c.string();
+        const type = c.u32();
+        if (type === 9) {
+            c.skipValue(9);
+            metadata[key] = '[array]';
+        }
+        else {
+            metadata[key] = c.scalar(type);
+        }
+    }
+    const alignmentRaw = Number(metadata['general.alignment'] ?? DEFAULT_ALIGNMENT);
+    const alignment = Number.isInteger(alignmentRaw) && alignmentRaw > 0 && alignmentRaw % 8 === 0
+        ? alignmentRaw
+        : DEFAULT_ALIGNMENT;
+    const infos = [];
+    for (let i = 0; i < tensorCount; i++) {
+        c.string();
+        const dims = c.u32();
+        if (dims < 1 || dims > MAX_GGUF_TENSOR_DIMS)
+            throw new GgufParseError(`Tensor ${i} has ${dims} dimensions`);
+        let elements = 1;
+        for (let d = 0; d < dims; d++) {
+            elements *= c.u64(Number.MAX_SAFE_INTEGER, 'Tensor dimension');
+            if (!Number.isSafeInteger(elements))
+                throw new GgufParseError(`Tensor ${i} has too many elements`);
+        }
+        const type = c.u32();
+        const offset = c.u64(Number.MAX_SAFE_INTEGER, 'Tensor offset');
+        infos.push({ type, elements, offset });
+    }
+    const dataOffset = Math.ceil(c.pos / alignment) * alignment;
+    const sorted = [...infos].sort((a, b) => a.offset - b.offset);
+    const dataSize = options.fileSize !== undefined ? options.fileSize - dataOffset : undefined;
+    const byType = new Map();
+    sorted.forEach((t, i) => {
+        const next = sorted[i + 1]?.offset ?? dataSize;
+        const size = next !== undefined && next >= t.offset ? next - t.offset : undefined;
+        const entry = byType.get(t.type) ?? {
+            type: t.type,
+            tensors: 0,
+            elements: 0,
+            bytes: 0,
+            sizedElements: 0,
+            bitsPerWeight: null,
+        };
+        entry.tensors += 1;
+        entry.elements += t.elements;
+        if (size !== undefined && t.elements > 0) {
+            entry.bytes += size;
+            entry.sizedElements += t.elements;
+        }
+        byType.set(t.type, entry);
+    });
+    const types = [...byType.values()]
+        .map((t) => ({ ...t, bitsPerWeight: t.sizedElements > 0 ? (t.bytes * 8) / t.sizedElements : null }))
+        .sort((a, b) => a.type - b.type);
+    return { version, tensorCount, metadata, alignment, dataOffset, types };
+}
+/**
+ * `readGgufTensorSummary` over growing prefixes (`readPrefix(n)` returns up to `n` bytes; fewer
+ * means EOF). Bonsai headers are 6–12 MB, so the default reads 4 MB at a time up to 64 MB.
+ */
+export async function readGgufTensorSummaryChunked(readPrefix, options = {}) {
+    const chunk = options.chunkSize ?? 4 * 1024 * 1024;
+    const max = options.maxBytes ?? 64 * 1024 * 1024;
+    let want = chunk;
+    for (;;) {
+        const limit = Math.min(want, max);
+        const bytes = await readPrefix(limit);
+        try {
+            return readGgufTensorSummary(bytes, options.fileSize !== undefined ? { fileSize: options.fileSize } : {});
+        }
+        catch (e) {
+            if (!(e instanceof GgufNeedMoreData))
+                throw e;
+            if (bytes.byteLength < limit || want >= max) {
+                throw new GgufParseError('Could not read the GGUF tensor table within the read budget');
+            }
+            want += chunk;
+        }
+    }
+}
+//# sourceMappingURL=tensors.js.map

package/dist/models/gguf/tensors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tensors.js","sourceRoot":"","sources":["../../../src/models/gguf/tensors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAE9D,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAA;AACvC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAA;AACrC,MAAM,CAAC,MAAM,yBAAyB,GAAG,SAAS,CAAA;AAClD,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAA;AACpC,MAAM,aAAa,GAAG,UAAU,CAAA;AAChC,MAAM,iBAAiB,GAAG,EAAE,CAAA;AA2B5B,MAAM,MAAM;IAGmB;IAF7B,GAAG,GAAG,CAAC,CAAA;IACU,IAAI,CAAU;IAC/B,YAA6B,GAAe;QAAf,QAAG,GAAH,GAAG,CAAY;QAC1C,IAAI,CAAC,IAAI,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAA;IACtE,CAAC;IACO,IAAI,CAAC,CAAS;QACpB,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU;YAAE,MAAM,IAAI,gBAAgB,EAAE,CAAA;IACtE,CAAC;IACD,EAAE;QACA,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IACvC,CAAC;IACD,GAAG;QACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACZ,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC7C,IAAI,CAAC,GAAG,IAAI,CAAC,CAAA;QACb,OAAO,CAAC,CAAA;IACV,CAAC;IACD,qDAAqD;IACrD,GAAG,CAAC,KAAK,GAAG,MAAM,CAAC,gBAAgB,EAAE,IAAI,GAAG,OAAO;QACjD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACZ,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAChD,IAAI,CAAC,GAAG,IAAI,CAAC,CAAA;QACb,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,GAAG,IAAI,IAAI,CAAC,wBAAwB,CAAC,CAAA;QACrF,OAAO,MAAM,CAAC,CAAC,CAAC,CAAA;IAClB,CAAC;IACD,MAAM,CAAC,IAAY;QACjB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,CAAC;gBACJ,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;YAC1B,KAAK,CAAC;gBACJ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACZ,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YAC9C,KAAK,CAAC,CAAC;YACP,KAAK,CAAC,CAAC,CAAC,CAAC;gBACP,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACZ,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;gBAC/F,IAAI,CAAC,GAAG,IAAI,CAAC,CAAA;gBACb,OAAO,MAAM,CAAC,CAAC,CAAC,CAAA;YAClB,CAAC;YACD,KAAK,CAAC;gBACJ,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;YAC3B,KAAK,CAAC,CAAC,CAAC,CAAC;gBACP,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACZ,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;gBAC5C,IAAI,CAAC,GAAG,IAAI,CAAC,CAAA;gBACb,OAAO,MAAM,CAAC,CAAC,CAAC,CAAA;YAClB,CAAC;YACD,KAAK,CAAC,CAAC,CAAC,CAAC;gBACP,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACZ,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;gBAC9C,IAAI,CAAC,GAAG,IAAI,CAAC,CAAA;gBACb,OAAO,MAAM,CAAC,CAAC,CAAC,CAAA;YAClB,CAAC;YACD,KAAK,CAAC;gBACJ,OAAO,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;YAC3C,KAAK,CAAC;gBACJ,OAAO,IAAI,CAAC,MAAM,EAAE,CAAA;YACtB,KAAK,EAAE,CAAC;YACR,KAAK,EAAE,CAAC,CAAC,CAAC;gBACR,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACZ,MAAM,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;gBACtG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAA;gBACb,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;YACrB,CAAC;YACD,KAAK,EAAE,CAAC,CAAC,CAAC;gBACR,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACZ,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;gBAC9C,IAAI,CAAC,GAAG,IAAI,CAAC,CAAA;gBACb,OAAO,MAAM,CAAC,CAAC,CAAC,CAAA;YAClB,CAAC;YACD;gBACE,MAAM,IAAI,cAAc,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAA;QAChE,CAAC;IACH,CAAC;IACD,MAAM;QACJ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAA;QACvD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,CAAA;QACvD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAA;QACf,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC7C,CAAC;IACD,IAAI,CAAC,CAAS;QACZ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACZ,IAAI,CAAC,GAAG,IAAI,CAAC,CAAA;IACf,CAAC;IACD,SAAS,CAAC,IAAY,EAAE,KAAK,GAAG,CAAC;QAC/B,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YAC7D,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,cAAc,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAA;YACrF,IAAI,KAAK,GAAG,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;;gBAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC,CAAA;YAC3D,OAAM;QACR,CAAC;QACD,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,+BAA+B,CAAC,CAAA;QACxE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,cAAc,CAAC,CAAA;QACnD,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAC7D,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,cAAc,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAA;QACrF,IAAI,KAAK,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,CAAA;;YAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE;gBAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;IACpE,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAiB,EACjB,UAAiC,EAAE;IAEnC,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3B,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC;QAC7E,MAAM,IAAI,cAAc,CAAC,iBAAiB,CAAC,CAAA;IAC7C,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;IACvB,IAAI,OAAO,GAAG,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAA;IAChF,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAA;IAC3D,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,yBAAyB,EAAE,gBAAgB,CAAC,CAAA;IAExE,MAAM,QAAQ,GAA2B,EAAE,CAAA;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAA;QACtB,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;QACpB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;YACd,QAAQ,CAAC,GAAG,CAAC,GAAG,SAAS,CAAA;QAC3B,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAChC,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,iBAAiB,CAAC,CAAA;IAC/E,MAAM,SAAS,GACb,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,IAAI,YAAY,GAAG,CAAC,KAAK,CAAC;QAC1E,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,iBAAiB,CAAA;IAEvB,MAAM,KAAK,GAA8D,EAAE,CAAA;IAC3E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,CAAC,CAAC,MAAM,EAAE,CAAA;QACV,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;QACpB,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,oBAAoB;YACzC,MAAM,IAAI,cAAc,CAAC,UAAU,CAAC,QAAQ,IAAI,aAAa,CAAC,CAAA;QAChE,IAAI,QAAQ,GAAG,CAAC,CAAA;QAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9B,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAA;YAC9D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,cAAc,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAA;QACpG,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;QACpB,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAA;QAC9D,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;IACxC,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,SAAS,CAAC,GAAG,SAAS,CAAA;IAE3D,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAA;IAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3F,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiC,CAAA;IACvD,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,IAAI,QAAQ,CAAA;QAC9C,MAAM,IAAI,GAAG,IAAI,KAAK,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;QACjF,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI;YAClC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,CAAC;YACR,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,IAAI;SACpB,CAAA;QACD,KAAK,CAAC,OAAO,IAAI,CAAC,CAAA;QAClB,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAA;QAC5B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;YACzC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAA;YACnB,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,QAAQ,CAAA;QACnC,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAA;IACF,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;SAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;SACnG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAA;IAElC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;AACzE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,UAAuD,EACvD,UAAwE,EAAE;IAE1E,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;IAChD,IAAI,IAAI,GAAG,KAAK,CAAA;IAChB,SAAS,CAAC;QACR,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACjC,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAA;QACrC,IAAI,CAAC;YACH,OAAO,qBAAqB,CAC1B,KAAK,EACL,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CACrE,CAAA;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,CAAC,CAAC,YAAY,gBAAgB,CAAC;gBAAE,MAAM,CAAC,CAAA;YAC7C,IAAI,KAAK,CAAC,UAAU,GAAG,KAAK,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;gBAC5C,MAAM,IAAI,cAAc,CAAC,6DAA6D,CAAC,CAAA;YACzF,CAAC;YACD,IAAI,IAAI,KAAK,CAAA;QACf,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/models/index.d.ts

@@ -9,6 +9,8 @@ export * from './model-yml.js';
 export * from './shards.js';
 export * from './gguf/index.js';
 export * from './capabilities.js';
+export * from './decision-checkpoint.js';
 export * from './embed.js';
 export * from './registry.js';
 export * from './hf.js';
+export * from './compatibility/index.js';

package/dist/models/index.js

@@ -9,7 +9,9 @@ export * from './model-yml.js';
 export * from './shards.js';
 export * from './gguf/index.js';
 export * from './capabilities.js';
+export * from './decision-checkpoint.js';
 export * from './embed.js';
 export * from './registry.js';
 export * from './hf.js';
+export * from './compatibility/index.js';
 //# sourceMappingURL=index.js.map

package/dist/models/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/models/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,gBAAgB,CAAA;AAC9B,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,mBAAmB,CAAA;AACjC,cAAc,YAAY,CAAA;AAC1B,cAAc,eAAe,CAAA;AAC7B,cAAc,SAAS,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/models/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,gBAAgB,CAAA;AAC9B,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,mBAAmB,CAAA;AACjC,cAAc,0BAA0B,CAAA;AACxC,cAAc,YAAY,CAAA;AAC1B,cAAc,eAAe,CAAA;AAC7B,cAAc,SAAS,CAAA;AACvB,cAAc,0BAA0B,CAAA"}

package/dist/router/resolve.d.ts

@@ -18,10 +18,16 @@ export interface RemoteProvider {
     /** Model ids the user has enabled for this provider. */
     models: string[];
 }
-export type LocalProvider = 'llamacpp' | 'llamacpp-upstream' | 'mlx';
+export type LocalProvider = 'llamacpp' | 'llamacpp-upstream' | 'mlx' | 'tensorrt-llm' | 'atomic-prism' | 'vllm';
 /**
  * The order local providers are searched in when a request names only a model. The same model id
  * loaded under two engines resolves to the first; changing the order would silently move traffic.
+ * `tensorrt-llm`, `atomic-prism` and `vllm` come last, in the order they were added, for exactly
+ * that reason: adding a provider moves nothing that already resolved (`vllm` after `atomic-prism`,
+ * which core 0.10.0 already shipped; change `add-vllm-runtime`, D11). A Prism-only file never loads
+ * under another engine (the compatibility gate), so its sessions are found here even near the end of
+ * the list; one store model is never loaded in two managed providers at once, so their order never
+ * decides between two live sessions of one id.
  */
 export declare const LOCAL_SEARCH_ORDER: readonly LocalProvider[];
 /**

package/dist/router/resolve.js

@@ -8,8 +8,21 @@
 /**
  * The order local providers are searched in when a request names only a model. The same model id
  * loaded under two engines resolves to the first; changing the order would silently move traffic.
+ * `tensorrt-llm`, `atomic-prism` and `vllm` come last, in the order they were added, for exactly
+ * that reason: adding a provider moves nothing that already resolved (`vllm` after `atomic-prism`,
+ * which core 0.10.0 already shipped; change `add-vllm-runtime`, D11). A Prism-only file never loads
+ * under another engine (the compatibility gate), so its sessions are found here even near the end of
+ * the list; one store model is never loaded in two managed providers at once, so their order never
+ * decides between two live sessions of one id.
  */
-export const LOCAL_SEARCH_ORDER = ['llamacpp', 'llamacpp-upstream', 'mlx'];
+export const LOCAL_SEARCH_ORDER = [
+    'llamacpp',
+    'llamacpp-upstream',
+    'mlx',
+    'tensorrt-llm',
+    'atomic-prism',
+    'vllm',
+];
 /**
  * The remote provider that owns `modelId`, if any. Remote wins over local — a model id the user
  * enabled for a cloud provider is never served by a local session of the same name.

package/dist/router/resolve.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/router/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAeH;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,CAAC,UAAU,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAA;AAEpG;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,SAA8C;IAE9C,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;QACxC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,MAAM,CAAA;IACpD,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAClC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;QACvD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAA;IAC/B,CAAC;IACD,OAAO,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS,EAAE,CAAS;IAChD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACd,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACd,IAAI,CAAC,KAAK,CAAC;YAAE,SAAQ;QACrB,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;YAAE,SAAQ;QAClE,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/router/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAgBH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B;IAC1D,UAAU;IACV,mBAAmB;IACnB,KAAK;IACL,cAAc;IACd,cAAc;IACd,MAAM;CACP,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,SAA8C;IAE9C,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;QACxC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,MAAM,CAAA;IACpD,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAClC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;QACvD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAA;IAC/B,CAAC;IACD,OAAO,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS,EAAE,CAAS;IAChD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACd,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACd,IAAI,CAAC,KAAK,CAAC;YAAE,SAAQ;QACrB,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;YAAE,SAAQ;QAClE,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/runtime/container/argv.d.ts

@@ -0,0 +1,88 @@
+import type { ImageRef, ModelContainerCreateSpec, OneShotRunSpec } from './types.js';
+/**
+ * The one path to the Docker daemon's system socket, in its two textual forms `argv.ts` and
+ * `pull.ts` each need. `pull.ts` derives its `node:http` `socketPath` from `DOCKER_SOCKET_PATH`
+ * rather than declaring its own literal (review round 1, item 15), so there is exactly one socket
+ * path constant in this module.
+ */
+export declare const DOCKER_SOCKET_PATH = "/var/run/docker.sock";
+/** Forced with every docker CLI call; no user Docker context (`DOCKER_HOST`/context/config) is ever used. */
+export declare const DOCKER_SYSTEM_SOCKET = "unix:///var/run/docker.sock";
+/** Container-side mount targets. Fixed by this module; callers only choose the host-side source. */
+export declare const CONTAINER_MODEL_PATH = "/atomic/model";
+export declare const CONTAINER_ENGINE_CACHE_PATH = "/atomic/engine-cache";
+export declare const CONTAINER_ENTRYPOINT_PATH = "/atomic/entrypoint.sh";
+/** What runs the watchdog script (`#!/bin/sh`) inside the container. */
+export declare const CONTAINER_ENTRYPOINT_SHELL = "/bin/sh";
+export declare const CONTAINER_HEARTBEAT_PATH = "/atomic/heartbeat";
+/**
+ * `--shm-size` for the model container. A named placeholder, not a measurement: the real value is
+ * measured against a live `trtllm-serve` load in live test 2.19. Bounded rather than left at
+ * Docker's 64 MB default, which a multi-worker CUDA server exhausts immediately, and rather than
+ * unbounded (`--shm-size` with no limit maps to host memory, defeating the point of a limit).
+ */
+export declare const MODEL_CONTAINER_SHM_SIZE = "2g";
+/** The largest `--shm-size` this module will build, regardless of what a caller passes in `shmSize`. */
+export declare const MODEL_CONTAINER_SHM_SIZE_CEILING_GB = 16;
+/**
+ * Refuses an empty value, a leading `-` (would be read as a flag), or an embedded NUL/`\n`/`\r`.
+ * Every image reference, GPU id, mount source, label value, env value and command word passes
+ * through this before becoming an argv token.
+ */
+export declare function assertSafeArgvValue(value: string, what: string): string;
+/** Shared with `pull.ts`, which needs the repository and digest validated but not joined by `@`. */
+export declare function assertDigest(value: string, what: string): string;
+/** `repository@digest`, safe only once both halves — and the joined value itself — are validated. */
+export declare function imageReference(image: ImageRef): string;
+/** Prepend the forced system-socket connection flag to any docker subcommand argv. */
+export declare function withSystemSocket(args: readonly string[]): string[];
+export declare function buildInspectImageArgv(image: ImageRef): string[];
+export declare function buildInspectContainerArgv(containerId: string): string[];
+export declare function buildStartArgv(containerId: string): string[];
+/**
+ * `docker stop --time <timeoutSeconds> <id>`. The CLI call itself blocks until the daemon confirms
+ * the container exited (or force-kills it at the timeout and waits for that kill to land) — what a
+ * *caller* of this argv must not assume is that getting an answer at all is guaranteed; `operations.ts`
+ * turns "no answer" into `StopOutcome.confirmed: false` rather than treating a silent exec failure as
+ * a stop.
+ */
+export declare function buildStopArgv(containerId: string, timeoutSeconds: number): string[];
+export declare function buildRmArgv(containerId: string): string[];
+/**
+ * `docker ps --all --filter ancestor=<repo@digest>`: every container, running or stopped, created
+ * from this image (or an image built on it) — what removing an engine asks before deleting the
+ * image, so an image someone else's container still uses is left in place (task 2.6).
+ */
+export declare function buildListContainersByImageArgv(image: ImageRef): string[];
+/**
+ * `docker image rm <repo@digest>`, never `--force`: only the digest reference this core pulled is
+ * removed, and Docker itself refuses while any container still uses the image. A tag the user added
+ * to the same image keeps the image in place (task 2.6).
+ */
+export declare function buildRemoveImageArgv(image: ImageRef): string[];
+/**
+ * `--timestamps` prefixes every line with its RFC3339Nano time so `operations.ts`'s `containerLogs`
+ * can merge stdout and stderr back into one chronological log (review round 1, item 2). `'all'` is
+ * docker's own spelling for the whole log.
+ */
+export declare function buildLogsArgv(containerId: string, tailLines: number | 'all'): string[];
+/**
+ * The model container's `docker create` argv (spec `tensorrt-llm-runtime`, requirement "the model
+ * container is isolated"; SELinux per requirement "mounts work under SELinux", design D15). Security
+ * posture is not configurable by the spec: no docker socket mount, no `--privileged`, no
+ * `--ipc=host`, `--restart=no` always, `--pull=never` always (review round 1, item 5 ruling — only
+ * `pull.ts` fetches image bytes), and the port published only on `127.0.0.1`. Every option comes
+ * before the positional image reference and command, so nothing derived from a descriptor or a probe
+ * can land where Docker would read it as the start of a new flag. `spec.selinuxDataRoot` is required
+ * whenever `spec.selinux` is true — see `assertWithinDataRoot`. `spec.user` runs the engine as the
+ * core's own uid:gid rather than the image's root (final review I-1, ADR
+ * 2026-09-29-the-engine-container-runs-as-the-invoking-user).
+ */
+export declare function buildCreateModelContainerArgv(spec: ModelContainerCreateSpec): string[];
+/** `docker port <id> <port>/tcp`: where a running container's port was published. */
+export declare function buildPortArgv(containerId: string, containerPort: number): string[];
+/**
+ * A one-shot `docker run --rm` probe (task 2.x's GPU check): no mounts, no port publication, no
+ * restart policy, `--pull=never` (same reasoning as `buildCreateModelContainerArgv`).
+ */
+export declare function buildRunOnceArgv(spec: OneShotRunSpec): string[];