@atomic-chat/core 0.5.1 → 0.13.2

package/dist/runtime/environment/diagnostics.d.ts

@@ -0,0 +1,50 @@
+/**
+ * What a person who is stuck can see and send (2026-10-06): a Windows on Arm test machine kept two
+ * commit-pinned conf URLs in its user environment, so its core read a superseded descriptor and
+ * blocked the setup on a driver floor conf had already lowered — and nothing on screen or in the log
+ * said where the descriptor came from. Diagnosing it took photos of PowerShell output.
+ *
+ * Two pieces live here, both read-only. `sourceOverrides` names the environment variables that move a
+ * managed-runtime source, for the snapshot (`EnvironmentSnapshot.source_overrides`), so the app can
+ * say so on the provider page. `buildEnvironmentDiagnostics` assembles the report behind
+ * `GET /environments/:environmentId/diagnostics`: the snapshot, every conf document's source and
+ * cache, every operation on disk, and the managed-runtime code's recent warnings.
+ */
+import type { EnvironmentDiagnostics, EnvironmentDocumentSource, EnvironmentOperationSummary, EnvironmentSnapshot, EnvironmentSourceOverride, ManagedStoreMigration } from '../../contracts/index.js';
+import type { PersistedOperation } from './store.js';
+/** The variables that move where managed runtimes read conf or keep their state. */
+export declare const SOURCE_OVERRIDE_VARIABLES: readonly string[];
+/**
+ * The ones set to something other than blank in `env`: the fixed ones in their order, then every
+ * per-engine descriptor override (`ATOMIC_RUNTIME_DESCRIPTOR_URL_<ENGINE>`, change `add-vllm-runtime`)
+ * in name order.
+ */
+export declare function sourceOverrides(env: Record<string, string | undefined>): EnvironmentSourceOverride[];
+/** An operation on disk, reduced to what explains it. */
+export declare function summarizeOperation(record: PersistedOperation): EnvironmentOperationSummary;
+export interface DocumentSourceInput {
+    document: EnvironmentDocumentSource['document'];
+    /** A runtime descriptor's engine: its pointer is `latest-<engine_id>.json`. */
+    engineId?: string;
+    defaultUrl: string;
+    /** The variables that override the source, the first one set winning. */
+    variables: readonly string[];
+    cacheDir: string;
+    idField: string;
+}
+/** Where one conf document comes from in `env`, and what its cache holds. */
+export declare function documentSource(input: DocumentSourceInput, env: Record<string, string | undefined>): Promise<EnvironmentDocumentSource>;
+export interface DiagnosticsInput {
+    now: () => Date;
+    coreVersion: string;
+    platform: string;
+    arch: string;
+    environment: EnvironmentSnapshot | null;
+    env: Record<string, string | undefined>;
+    documents: readonly DocumentSourceInput[];
+    operations: () => Promise<PersistedOperation[]>;
+    recentWarnings: () => string[];
+    /** The move of TensorRT-LLM's models into the managed model store (change `add-vllm-runtime`, D5). */
+    storeMigration?: (() => ManagedStoreMigration | null) | undefined;
+}
+export declare function buildEnvironmentDiagnostics(input: DiagnosticsInput): Promise<EnvironmentDiagnostics>;

package/dist/runtime/environment/diagnostics.js

@@ -0,0 +1,114 @@
+/**
+ * What a person who is stuck can see and send (2026-10-06): a Windows on Arm test machine kept two
+ * commit-pinned conf URLs in its user environment, so its core read a superseded descriptor and
+ * blocked the setup on a driver floor conf had already lowered — and nothing on screen or in the log
+ * said where the descriptor came from. Diagnosing it took photos of PowerShell output.
+ *
+ * Two pieces live here, both read-only. `sourceOverrides` names the environment variables that move a
+ * managed-runtime source, for the snapshot (`EnvironmentSnapshot.source_overrides`), so the app can
+ * say so on the provider page. `buildEnvironmentDiagnostics` assembles the report behind
+ * `GET /environments/:environmentId/diagnostics`: the snapshot, every conf document's source and
+ * cache, every operation on disk, and the managed-runtime code's recent warnings.
+ */
+import { readdir, readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { MANAGED_ROOT_ENV } from '../../config/index.js';
+import { RUNTIME_DESCRIPTOR_URL_ENV } from './descriptor-provider.js';
+import { ENVIRONMENT_MANIFEST_URL_ENV } from './environment-manifest-provider.js';
+/** The variables that move where managed runtimes read conf or keep their state. */
+export const SOURCE_OVERRIDE_VARIABLES = [
+    RUNTIME_DESCRIPTOR_URL_ENV,
+    ENVIRONMENT_MANIFEST_URL_ENV,
+    MANAGED_ROOT_ENV,
+];
+/**
+ * The ones set to something other than blank in `env`: the fixed ones in their order, then every
+ * per-engine descriptor override (`ATOMIC_RUNTIME_DESCRIPTOR_URL_<ENGINE>`, change `add-vllm-runtime`)
+ * in name order.
+ */
+export function sourceOverrides(env) {
+    const perEngine = Object.keys(env)
+        .filter((variable) => variable.startsWith(`${RUNTIME_DESCRIPTOR_URL_ENV}_`))
+        .sort();
+    return [...SOURCE_OVERRIDE_VARIABLES, ...perEngine].flatMap((variable) => {
+        const value = env[variable]?.trim();
+        return value === undefined || value === '' ? [] : [{ variable, value }];
+    });
+}
+/** An operation on disk, reduced to what explains it. */
+export function summarizeOperation(record) {
+    const operation = record.machine.operation;
+    return {
+        operation_id: operation.operation_id,
+        kind: operation.kind,
+        target: operation.target,
+        phase: operation.phase,
+        checkpoint: record.machine.checkpoint ?? null,
+        revision: operation.revision,
+        consented_descriptor_id: record.machine.consented?.descriptor_id ?? null,
+        plan_descriptor_id: record.requirement_plan?.descriptor_id ?? null,
+        error: operation.error,
+    };
+}
+/**
+ * What one conf document's cache folder holds: the pointer (the first of `pointers` that names an
+ * id) and every cached id. A descriptor's pointer is per engine, `latest-<engine_id>.json`.
+ */
+async function cacheOf(dir, idField, pointers) {
+    let latest = null;
+    for (const name of pointers) {
+        try {
+            const pointer = JSON.parse(await readFile(join(dir, name), 'utf8'));
+            if (typeof pointer[idField] === 'string') {
+                latest = pointer[idField];
+                break;
+            }
+        }
+        catch {
+            continue;
+        }
+    }
+    const ids = (await readdir(dir).catch(() => []))
+        .filter((name) => name.endsWith('.json') && name !== 'latest.json' && !name.startsWith('latest-'))
+        .map((name) => decodeURIComponent(name.slice(0, -'.json'.length)))
+        .sort();
+    return { latest, ids };
+}
+/** Where one conf document comes from in `env`, and what its cache holds. */
+export async function documentSource(input, env) {
+    const variable = input.variables.find((name) => (env[name]?.trim() ?? '') !== '');
+    const override = variable === undefined ? undefined : env[variable]?.trim();
+    // TensorRT-LLM's pointer was `latest.json` before change `add-vllm-runtime`; it still counts.
+    const pointers = input.engineId === undefined
+        ? ['latest.json']
+        : input.engineId === 'tensorrt-llm'
+            ? [`latest-${input.engineId}.json`, 'latest.json']
+            : [`latest-${input.engineId}.json`];
+    const cache = await cacheOf(input.cacheDir, input.idField, pointers);
+    return {
+        document: input.document,
+        ...(input.engineId === undefined ? {} : { engine_id: input.engineId }),
+        url: override ?? input.defaultUrl,
+        default_url: input.defaultUrl,
+        overridden_by: variable ?? null,
+        latest_cached_id: cache.latest,
+        cached_ids: cache.ids,
+    };
+}
+export async function buildEnvironmentDiagnostics(input) {
+    const sources = await Promise.all(input.documents.map((document) => documentSource(document, input.env)));
+    // A corrupt record must not take the whole report down: the report is what explains it.
+    const records = await input.operations().catch(() => []);
+    return {
+        generated_at: input.now().toISOString(),
+        core_version: input.coreVersion,
+        platform: input.platform,
+        arch: input.arch,
+        environment: input.environment,
+        sources,
+        operations: records.map(summarizeOperation),
+        recent_warnings: input.recentWarnings(),
+        store_migration: input.storeMigration?.() ?? null,
+    };
+}
+//# sourceMappingURL=diagnostics.js.map

package/dist/runtime/environment/diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../../../src/runtime/environment/diagnostics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AASxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AACrE,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAA;AAGjF,oFAAoF;AACpF,MAAM,CAAC,MAAM,yBAAyB,GAAsB;IAC1D,0BAA0B;IAC1B,4BAA4B;IAC5B,gBAAgB;CACjB,CAAA;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAuC;IACrE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SAC/B,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,0BAA0B,GAAG,CAAC,CAAC;SAC3E,IAAI,EAAE,CAAA;IACT,OAAO,CAAC,GAAG,yBAAyB,EAAE,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;QACvE,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAA;QACnC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,kBAAkB,CAAC,MAA0B;IAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAA;IAC1C,OAAO;QACL,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI;QAC7C,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,uBAAuB,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,IAAI,IAAI;QACxE,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,EAAE,aAAa,IAAI,IAAI;QAClE,KAAK,EAAE,SAAS,CAAC,KAAK;KACvB,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,OAAO,CACpB,GAAW,EACX,OAAe,EACf,QAA2B;IAE3B,IAAI,MAAM,GAAkB,IAAI,CAAA;IAChC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAA4B,CAAA;YAC9F,IAAI,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACzC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAW,CAAA;gBACnC,MAAK;YACP,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAQ;QACV,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,CAAC;SACzD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,aAAa,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;SACjG,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;SACjE,IAAI,EAAE,CAAA;IACT,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;AACxB,CAAC;AAaD,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAA0B,EAC1B,GAAuC;IAEvC,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,CAAA;IACjF,MAAM,QAAQ,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAA;IAC3E,8FAA8F;IAC9F,MAAM,QAAQ,GACZ,KAAK,CAAC,QAAQ,KAAK,SAAS;QAC1B,CAAC,CAAC,CAAC,aAAa,CAAC;QACjB,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,cAAc;YACjC,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,QAAQ,OAAO,EAAE,aAAa,CAAC;YAClD,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,QAAQ,OAAO,CAAC,CAAA;IACzC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IACpE,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;QACtE,GAAG,EAAE,QAAQ,IAAI,KAAK,CAAC,UAAU;QACjC,WAAW,EAAE,KAAK,CAAC,UAAU;QAC7B,aAAa,EAAE,QAAQ,IAAI,IAAI;QAC/B,gBAAgB,EAAE,KAAK,CAAC,MAAM;QAC9B,UAAU,EAAE,KAAK,CAAC,GAAG;KACtB,CAAA;AACH,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAAuB;IACvE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACzG,wFAAwF;IACxF,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAA0B,CAAC,CAAA;IAChF,OAAO;QACL,YAAY,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACvC,YAAY,EAAE,KAAK,CAAC,WAAW;QAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO;QACP,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC3C,eAAe,EAAE,KAAK,CAAC,cAAc,EAAE;QACvC,eAAe,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,IAAI,IAAI;KAClD,CAAA;AACH,CAAC"}

package/dist/runtime/environment/document-fields.d.ts

@@ -0,0 +1,39 @@
+/**
+ * The strict field readers both conf documents core trusts are parsed with: a runtime descriptor
+ * (`descriptor.ts`) and an environment manifest (`environment-manifest.ts`). Each reader either
+ * returns the value in its checked type or throws `AtomicCoreError('MANAGED_METADATA_INVALID', …)`
+ * naming the field — a document arrives over HTTPS and is never trusted blind, and an unknown field
+ * refuses the whole document rather than being dropped (a newer shape announces itself with
+ * `schema_version`, never with a field this build would silently ignore).
+ *
+ * `subject` only names the document in the message ("Invalid runtime descriptor: …"), so one shared
+ * set of readers keeps both parsers equally strict without either copying the other.
+ */
+import type { InstallRecipe } from '../../contracts/index.js';
+export interface DocumentFields {
+    fail(why: string, details?: string): never;
+    object(value: unknown, at: string): Record<string, unknown>;
+    /** Refuses any key outside `keys`, naming every extra one. */
+    known(source: Record<string, unknown>, at: string, keys: readonly string[]): void;
+    text(value: unknown, at: string): string;
+    boolean(value: unknown, at: string): boolean;
+    pattern(re: RegExp, label: string): (value: unknown, at: string) => string;
+    list(value: unknown, at: string): unknown[];
+    strings(value: unknown, at: string): string[];
+    unique(values: string[], at: string, what: string): void;
+    /** A whole number of bytes no lower than `min`. */
+    bytes(value: unknown, at: string, min?: number): number;
+}
+export declare function documentFields(subject: string): DocumentFields;
+/** `#/definitions/id`: `descriptor_id`, `engine_id`, `adapter_id`, `recipes[].recipe_id`. */
+export declare const DOCUMENT_ID: RegExp;
+export declare const DOCUMENT_ID_LABEL = "a valid id (lowercase, starting with a letter or digit)";
+/** `#/definitions/semver`: `minimum_core_version`, `minimum_app_version`. */
+export declare const DOCUMENT_SEMVER: RegExp;
+/**
+ * `#/definitions/recipe`: an id naming argv compiled into core and a non-empty list of the
+ * distributions it is qualified for — nothing else, so a command or a script has nowhere to go.
+ * Distributions are unique by `(id, version_id, arch)` within the recipe: conf CI's integrity check,
+ * enforced here as well.
+ */
+export declare function installRecipe(fields: DocumentFields, value: unknown, at: string): InstallRecipe;

package/dist/runtime/environment/document-fields.js

@@ -0,0 +1,96 @@
+/**
+ * The strict field readers both conf documents core trusts are parsed with: a runtime descriptor
+ * (`descriptor.ts`) and an environment manifest (`environment-manifest.ts`). Each reader either
+ * returns the value in its checked type or throws `AtomicCoreError('MANAGED_METADATA_INVALID', …)`
+ * naming the field — a document arrives over HTTPS and is never trusted blind, and an unknown field
+ * refuses the whole document rather than being dropped (a newer shape announces itself with
+ * `schema_version`, never with a field this build would silently ignore).
+ *
+ * `subject` only names the document in the message ("Invalid runtime descriptor: …"), so one shared
+ * set of readers keeps both parsers equally strict without either copying the other.
+ */
+import { AtomicCoreError } from '../../contracts/index.js';
+export function documentFields(subject) {
+    const fail = (why, details) => {
+        throw new AtomicCoreError('MANAGED_METADATA_INVALID', `Invalid ${subject}: ${why}`, details);
+    };
+    const object = (value, at) => typeof value === 'object' && value !== null && !Array.isArray(value)
+        ? value
+        : fail(`${at} is not an object`);
+    const known = (source, at, keys) => {
+        const extra = Object.keys(source).filter((key) => !keys.includes(key));
+        if (extra.length > 0)
+            fail(`${at} has unknown fields`, extra.sort().join(', '));
+    };
+    const text = (value, at) => typeof value === 'string' && value.trim() !== '' ? value : fail(`${at} is not a non-empty string`);
+    const boolean = (value, at) => typeof value === 'boolean' ? value : fail(`${at} is not a boolean`);
+    const pattern = (re, label) => (value, at) => typeof value === 'string' && re.test(value)
+        ? value
+        : fail(`${at} is not ${label}`, typeof value === 'string' ? value : undefined);
+    const list = (value, at) => Array.isArray(value) ? value : fail(`${at} is not an array`);
+    const strings = (value, at) => list(value, at).map((item, i) => text(item, `${at}[${i}]`));
+    const unique = (values, at, what) => {
+        const seen = new Set();
+        for (const value of values) {
+            if (seen.has(value))
+                fail(`${at} lists ${what} twice`, value);
+            seen.add(value);
+        }
+    };
+    const bytes = (value, at, min = 0) => {
+        if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < min) {
+            fail(`${at} is not a whole number of bytes >= ${min}`, typeof value === 'number' ? String(value) : undefined);
+        }
+        return value;
+    };
+    return { fail, object, known, text, boolean, pattern, list, strings, unique, bytes };
+}
+// The patterns below are copied character-for-character from the conf schemas' `definitions`
+// (`runtimes/schema.json`, `runtimes/environments/linux.schema.json`), so this trust boundary is at
+// least as strict as what conf CI already enforced on the published document. Do not relax one
+// without updating the schema first.
+/** `#/definitions/id`: `descriptor_id`, `engine_id`, `adapter_id`, `recipes[].recipe_id`. */
+export const DOCUMENT_ID = /^[a-z0-9][a-z0-9.-]*$/;
+export const DOCUMENT_ID_LABEL = 'a valid id (lowercase, starting with a letter or digit)';
+/** `#/definitions/semver`: `minimum_core_version`, `minimum_app_version`. */
+export const DOCUMENT_SEMVER = /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$/;
+/** `distribution.id`: `os-release` `ID`, e.g. `ubuntu`, `fedora`. */
+const DISTRIBUTION_ID = /^[a-z0-9._-]+$/;
+/** `distribution.version_id`: `os-release` `VERSION_ID`, e.g. `22.04`. */
+const VERSION_ID = /^[0-9][0-9.]*$/;
+const ARCHES = ['x86_64', 'aarch64'];
+const DISTRIBUTION_KEYS = ['id', 'version_id', 'arch'];
+const RECIPE_KEYS = ['recipe_id', 'distributions'];
+/**
+ * `#/definitions/recipe`: an id naming argv compiled into core and a non-empty list of the
+ * distributions it is qualified for — nothing else, so a command or a script has nowhere to go.
+ * Distributions are unique by `(id, version_id, arch)` within the recipe: conf CI's integrity check,
+ * enforced here as well.
+ */
+export function installRecipe(fields, value, at) {
+    const entry = fields.object(value, at);
+    fields.known(entry, at, RECIPE_KEYS);
+    const distributions = fields
+        .list(entry['distributions'], `${at}.distributions`)
+        .map((item, i) => distribution(fields, item, `${at}.distributions[${i}]`));
+    if (distributions.length === 0)
+        fields.fail(`${at}.distributions is empty`);
+    fields.unique(distributions.map((d) => `${d.id} ${d.version_id} ${d.arch}`), `${at}.distributions`, 'a distribution');
+    return {
+        recipe_id: fields.pattern(DOCUMENT_ID, DOCUMENT_ID_LABEL)(entry['recipe_id'], `${at}.recipe_id`),
+        distributions,
+    };
+}
+function distribution(fields, value, at) {
+    const entry = fields.object(value, at);
+    fields.known(entry, at, DISTRIBUTION_KEYS);
+    const arch = fields.text(entry['arch'], `${at}.arch`);
+    if (!ARCHES.includes(arch))
+        fields.fail(`${at}.arch is not x86_64 or aarch64`, arch);
+    return {
+        id: fields.pattern(DISTRIBUTION_ID, 'an os-release id')(entry['id'], `${at}.id`),
+        version_id: fields.pattern(VERSION_ID, 'an os-release version id')(entry['version_id'], `${at}.version_id`),
+        arch: arch,
+    };
+}
+//# sourceMappingURL=document-fields.js.map

package/dist/runtime/environment/document-fields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-fields.js","sourceRoot":"","sources":["../../../src/runtime/environment/document-fields.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAkB1D,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,OAAgB,EAAS,EAAE;QACpD,MAAM,IAAI,eAAe,CAAC,0BAA0B,EAAE,WAAW,OAAO,KAAK,GAAG,EAAE,EAAE,OAAO,CAAC,CAAA;IAC9F,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAU,EAA2B,EAAE,CACrE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAClE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAA;IAEpC,MAAM,KAAK,GAAG,CAAC,MAA+B,EAAE,EAAU,EAAE,IAAuB,EAAQ,EAAE;QAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;QACtE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,GAAG,EAAE,qBAAqB,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IACjF,CAAC,CAAA;IAED,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAU,EAAU,EAAE,CAClD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAA;IAEpG,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,EAAU,EAAW,EAAE,CACtD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAA;IAErE,MAAM,OAAO,GACX,CAAC,EAAU,EAAE,KAAa,EAAE,EAAE,CAC9B,CAAC,KAAc,EAAE,EAAU,EAAU,EAAE,CACrC,OAAO,KAAK,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;QACzC,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,KAAK,EAAE,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAEpF,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAU,EAAa,EAAE,CACrD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;IAE9D,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,EAAU,EAAY,EAAE,CACvD,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IAE7D,MAAM,MAAM,GAAG,CAAC,MAAgB,EAAE,EAAU,EAAE,IAAY,EAAQ,EAAE;QAClE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;QAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,IAAI,CAAC,GAAG,EAAE,UAAU,IAAI,QAAQ,EAAE,KAAK,CAAC,CAAA;YAC7D,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACjB,CAAC;IACH,CAAC,CAAA;IAED,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,EAAU,EAAE,GAAG,GAAG,CAAC,EAAU,EAAE;QAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;YAC7E,IAAI,CACF,GAAG,EAAE,sCAAsC,GAAG,EAAE,EAChD,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CACtD,CAAA;QACH,CAAC;QACD,OAAO,KAAe,CAAA;IACxB,CAAC,CAAA;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AACtF,CAAC;AAED,6FAA6F;AAC7F,oGAAoG;AACpG,+FAA+F;AAC/F,qCAAqC;AAErC,6FAA6F;AAC7F,MAAM,CAAC,MAAM,WAAW,GAAG,uBAAuB,CAAA;AAClD,MAAM,CAAC,MAAM,iBAAiB,GAAG,yDAAyD,CAAA;AAC1F,6EAA6E;AAC7E,MAAM,CAAC,MAAM,eAAe,GAAG,qDAAqD,CAAA;AACpF,qEAAqE;AACrE,MAAM,eAAe,GAAG,gBAAgB,CAAA;AACxC,0EAA0E;AAC1E,MAAM,UAAU,GAAG,gBAAgB,CAAA;AACnC,MAAM,MAAM,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAU,CAAA;AAE7C,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAU,CAAA;AAC/D,MAAM,WAAW,GAAG,CAAC,WAAW,EAAE,eAAe,CAAU,CAAA;AAE3D;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,MAAsB,EAAE,KAAc,EAAE,EAAU;IAC9E,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACtC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC,CAAA;IACpC,MAAM,aAAa,GAAG,MAAM;SACzB,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,gBAAgB,CAAC;SACnD,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAA;IAC5E,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAA;IAC3E,MAAM,CAAC,MAAM,CACX,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAC7D,GAAG,EAAE,gBAAgB,EACrB,gBAAgB,CACjB,CAAA;IACD,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC;QAChG,aAAa;KACd,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAsB,EAAE,KAAc,EAAE,EAAU;IACtE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACtC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,iBAAiB,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;IACrD,IAAI,CAAE,MAA4B,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,gCAAgC,EAAE,IAAI,CAAC,CAAA;IAC3G,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC;QAChF,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAChE,KAAK,CAAC,YAAY,CAAC,EACnB,GAAG,EAAE,aAAa,CACnB;QACD,IAAI,EAAE,IAAkC;KACzC,CAAA;AACH,CAAC"}

package/dist/runtime/environment/environment-manifest-provider.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Getting this platform's environment manifest onto disk and keeping the right one in play (openspec
+ * change `extract-environment-manifest`, task 2.2; spec `runtime-environment-manifest`, "Core
+ * получает, проверяет и кэширует манифест окружения", "Операция закрепляет манифест окружения").
+ *
+ * The same mechanism as the runtime descriptor's (`cached-document.ts`, design D3): accepted only
+ * when it parses and its `minimum_core_version` is no higher than this build's; cached forever by
+ * `manifest_id` in the shared per-user root, so an app core and a CLI core read the same cache; the
+ * latest accepted one stands in when the network is down, the document is invalid, or it needs a
+ * newer core. `ATOMIC_ENVIRONMENT_MANIFEST_URL` (`file://`, `https://`) overrides the source.
+ *
+ * Only this core's own platform's manifest is ever read (change `add-tensorrt-llm-windows`, task
+ * 2.1): `platform` picks both the default source (`runtimes/environments/<platform>.json`) and the
+ * parser, which accepts nothing but that `platform` — so a manifest conf adds or changes for another
+ * platform never reaches this core (design D1). One override variable serves both: a machine runs one
+ * platform.
+ *
+ * Two ways in, one per moment of an operation (design D4): `latest()` before the consent — the
+ * newest manifest, so a plan built now is judged against what conf says now; `pinned(id)` after it —
+ * exactly the consented manifest, from the cache alone, so neither a sign-in wait nor a core
+ * restart can swap the distribution list a user agreed to.
+ */
+import { AtomicCoreError } from '../../contracts/index.js';
+import type { EnvironmentPlatform } from '../../contracts/index.js';
+import { type CachedDocumentOptions, type DocumentFetch } from './cached-document.js';
+import { type EnvironmentManifestByPlatform } from './environment-manifest.js';
+/** Overrides the manifest source: `file://…` is read from disk, `https://…` is fetched. */
+export declare const ENVIRONMENT_MANIFEST_URL_ENV = "ATOMIC_ENVIRONMENT_MANIFEST_URL";
+/** conf main, the published Linux environment manifest. */
+export declare const DEFAULT_LINUX_ENVIRONMENT_MANIFEST_URL = "https://raw.githubusercontent.com/AtomicBot-ai/atomic-chat-conf/main/runtimes/environments/linux.json";
+/** conf main, the published Windows environment manifest (absent until the live acceptance, design D14). */
+export declare const DEFAULT_WINDOWS_ENVIRONMENT_MANIFEST_URL = "https://raw.githubusercontent.com/AtomicBot-ai/atomic-chat-conf/main/runtimes/environments/windows.json";
+/** conf main, the Windows on Arm manifest: its own file, which released (x64-only) cores never read. */
+export declare const DEFAULT_WINDOWS_ARM64_ENVIRONMENT_MANIFEST_URL = "https://raw.githubusercontent.com/AtomicBot-ai/atomic-chat-conf/main/runtimes/environments/windows-arm64.json";
+/** A transport over a `fetch`-compatible function with an abort-on-timeout. */
+export declare function environmentManifestFetchFromFetch(fetchImpl: typeof fetch): DocumentFetch;
+export type EnvironmentManifestProviderOptions<P extends EnvironmentPlatform = 'linux'> = Omit<CachedDocumentOptions, 'url'> & {
+    /** Whose manifest this core reads: its own platform's. Linux when omitted. */
+    platform?: P;
+    /** The machine's architecture: on Windows, `aarch64` reads the Windows on Arm manifest. */
+    arch?: string | null;
+    /** The shared per-user managed root (`managedSharedRoot`); both scopes share one cache. */
+    root: string;
+    /** Default source when no override is set; defaults to the platform's published manifest. */
+    url?: string;
+};
+export type EnvironmentManifestResult<P extends EnvironmentPlatform = 'linux'> = {
+    kind: 'available';
+    manifest: EnvironmentManifestByPlatform[P];
+} | {
+    kind: 'unavailable';
+    error: AtomicCoreError;
+};
+export interface EnvironmentManifestProvider<P extends EnvironmentPlatform = 'linux'> {
+    /**
+     * The manifest a plan built before the consent uses: fetched from the configured source, or —
+     * without ever surfacing that as an error — the latest one accepted before. `unavailable` only
+     * when nothing acceptable was fetched and nothing was ever cached. The only call that reaches
+     * the network.
+     */
+    latest(): Promise<EnvironmentManifestResult<P>>;
+    /** The manifest with this exact id, from the cache alone: never `fetch`, never `readFile`. */
+    pinned(manifestId: string): Promise<EnvironmentManifestResult<P>>;
+}
+export declare function createEnvironmentManifestProvider<P extends EnvironmentPlatform = 'linux'>(options: EnvironmentManifestProviderOptions<P>): EnvironmentManifestProvider<P>;

package/dist/runtime/environment/environment-manifest-provider.js

@@ -0,0 +1,89 @@
+/**
+ * Getting this platform's environment manifest onto disk and keeping the right one in play (openspec
+ * change `extract-environment-manifest`, task 2.2; spec `runtime-environment-manifest`, "Core
+ * получает, проверяет и кэширует манифест окружения", "Операция закрепляет манифест окружения").
+ *
+ * The same mechanism as the runtime descriptor's (`cached-document.ts`, design D3): accepted only
+ * when it parses and its `minimum_core_version` is no higher than this build's; cached forever by
+ * `manifest_id` in the shared per-user root, so an app core and a CLI core read the same cache; the
+ * latest accepted one stands in when the network is down, the document is invalid, or it needs a
+ * newer core. `ATOMIC_ENVIRONMENT_MANIFEST_URL` (`file://`, `https://`) overrides the source.
+ *
+ * Only this core's own platform's manifest is ever read (change `add-tensorrt-llm-windows`, task
+ * 2.1): `platform` picks both the default source (`runtimes/environments/<platform>.json`) and the
+ * parser, which accepts nothing but that `platform` — so a manifest conf adds or changes for another
+ * platform never reaches this core (design D1). One override variable serves both: a machine runs one
+ * platform.
+ *
+ * Two ways in, one per moment of an operation (design D4): `latest()` before the consent — the
+ * newest manifest, so a plan built now is judged against what conf says now; `pinned(id)` after it —
+ * exactly the consented manifest, from the cache alone, so neither a sign-in wait nor a core
+ * restart can swap the distribution list a user agreed to.
+ */
+import { AtomicCoreError } from '../../contracts/index.js';
+import { managedSharedPaths } from '../../config/index.js';
+import { createCachedDocuments, documentFetchFromFetch, } from './cached-document.js';
+import { environmentManifestParser } from './environment-manifest.js';
+/** Overrides the manifest source: `file://…` is read from disk, `https://…` is fetched. */
+export const ENVIRONMENT_MANIFEST_URL_ENV = 'ATOMIC_ENVIRONMENT_MANIFEST_URL';
+/** conf main, the published Linux environment manifest. */
+export const DEFAULT_LINUX_ENVIRONMENT_MANIFEST_URL = 'https://raw.githubusercontent.com/AtomicBot-ai/atomic-chat-conf/main/runtimes/environments/linux.json';
+/** conf main, the published Windows environment manifest (absent until the live acceptance, design D14). */
+export const DEFAULT_WINDOWS_ENVIRONMENT_MANIFEST_URL = 'https://raw.githubusercontent.com/AtomicBot-ai/atomic-chat-conf/main/runtimes/environments/windows.json';
+/** conf main, the Windows on Arm manifest: its own file, which released (x64-only) cores never read. */
+export const DEFAULT_WINDOWS_ARM64_ENVIRONMENT_MANIFEST_URL = 'https://raw.githubusercontent.com/AtomicBot-ai/atomic-chat-conf/main/runtimes/environments/windows-arm64.json';
+const DEFAULT_URLS = {
+    linux: DEFAULT_LINUX_ENVIRONMENT_MANIFEST_URL,
+    windows: DEFAULT_WINDOWS_ENVIRONMENT_MANIFEST_URL,
+};
+/** A transport over a `fetch`-compatible function with an abort-on-timeout. */
+export function environmentManifestFetchFromFetch(fetchImpl) {
+    return documentFetchFromFetch(fetchImpl, 'Environment manifest');
+}
+const unavailable = (message, details) => ({
+    kind: 'unavailable',
+    error: new AtomicCoreError('MANAGED_METADATA_INVALID', message, details),
+});
+export function createEnvironmentManifestProvider(options) {
+    const { root, url, platform: chosen, arch, ...rest } = options;
+    const platform = (chosen ?? 'linux');
+    const paths = managedSharedPaths(root);
+    const documents = createCachedDocuments({
+        label: 'Environment manifest',
+        urlEnv: ENVIRONMENT_MANIFEST_URL_ENV,
+        parse: environmentManifestParser(platform),
+        idField: 'manifest_id',
+        id: (manifest) => manifest.manifest_id,
+        minimumCoreVersion: (manifest) => manifest.minimum_core_version,
+        cacheDir: paths.environmentManifestsDir,
+        cacheFile: paths.environmentManifestFile,
+        latestFile: paths.environmentManifestLatestFile,
+    }, {
+        ...rest,
+        url: url ??
+            (platform === 'windows' && arch === 'aarch64'
+                ? DEFAULT_WINDOWS_ARM64_ENVIRONMENT_MANIFEST_URL
+                : DEFAULT_URLS[platform]),
+    });
+    return {
+        async latest() {
+            const latest = await documents.latest();
+            switch (latest.kind) {
+                case 'fresh':
+                case 'cached':
+                    return { kind: 'available', manifest: latest.document };
+                case 'too-new':
+                    return unavailable('The published environment manifest requires a newer version of Atomic Chat, and no earlier one is cached.', latest.id);
+                case 'none':
+                    return unavailable('No environment manifest is available: it could not be fetched and nothing has been cached yet.');
+            }
+        },
+        async pinned(manifestId) {
+            const cached = await documents.cached(manifestId);
+            if (cached !== null)
+                return { kind: 'available', manifest: cached };
+            return unavailable('The environment manifest this operation was approved with is no longer cached.', manifestId);
+        },
+    };
+}
+//# sourceMappingURL=environment-manifest-provider.js.map

package/dist/runtime/environment/environment-manifest-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-manifest-provider.js","sourceRoot":"","sources":["../../../src/runtime/environment/environment-manifest-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAE1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GAGvB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,yBAAyB,EAAsC,MAAM,2BAA2B,CAAA;AAEzG,2FAA2F;AAC3F,MAAM,CAAC,MAAM,4BAA4B,GAAG,iCAAiC,CAAA;AAE7E,2DAA2D;AAC3D,MAAM,CAAC,MAAM,sCAAsC,GACjD,uGAAuG,CAAA;AAEzG,4GAA4G;AAC5G,MAAM,CAAC,MAAM,wCAAwC,GACnD,yGAAyG,CAAA;AAE3G,wGAAwG;AACxG,MAAM,CAAC,MAAM,8CAA8C,GACzD,+GAA+G,CAAA;AAEjH,MAAM,YAAY,GAAwC;IACxD,KAAK,EAAE,sCAAsC;IAC7C,OAAO,EAAE,wCAAwC;CAClD,CAAA;AAED,+EAA+E;AAC/E,MAAM,UAAU,iCAAiC,CAAC,SAAuB;IACvE,OAAO,sBAAsB,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAA;AAClE,CAAC;AAgCD,MAAM,WAAW,GAAG,CAClB,OAAe,EACf,OAAgB,EACc,EAAE,CAAC,CAAC;IAClC,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,IAAI,eAAe,CAAC,0BAA0B,EAAE,OAAO,EAAE,OAAO,CAAC;CACzE,CAAC,CAAA;AAEF,MAAM,UAAU,iCAAiC,CAC/C,OAA8C;IAE9C,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAA;IAC9D,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,OAAO,CAAM,CAAA;IACzC,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;IACtC,MAAM,SAAS,GAAG,qBAAqB,CACrC;QACE,KAAK,EAAE,sBAAsB;QAC7B,MAAM,EAAE,4BAA4B;QACpC,KAAK,EAAE,yBAAyB,CAAC,QAAQ,CAAC;QAC1C,OAAO,EAAE,aAAa;QACtB,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW;QACtC,kBAAkB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,oBAAoB;QAC/D,QAAQ,EAAE,KAAK,CAAC,uBAAuB;QACvC,SAAS,EAAE,KAAK,CAAC,uBAAuB;QACxC,UAAU,EAAE,KAAK,CAAC,6BAA6B;KAChD,EACD;QACE,GAAG,IAAI;QACP,GAAG,EACD,GAAG;YACH,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;gBAC3C,CAAC,CAAC,8CAA8C;gBAChD,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;KAC9B,CACF,CAAA;IAED,OAAO;QACL,KAAK,CAAC,MAAM;YACV,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,CAAA;YACvC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,OAAO,CAAC;gBACb,KAAK,QAAQ;oBACX,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAA;gBACzD,KAAK,SAAS;oBACZ,OAAO,WAAW,CAChB,2GAA2G,EAC3G,MAAM,CAAC,EAAE,CACV,CAAA;gBACH,KAAK,MAAM;oBACT,OAAO,WAAW,CAChB,gGAAgG,CACjG,CAAA;YACL,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,UAAkB;YAC7B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;YACjD,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;YACnE,OAAO,WAAW,CAChB,gFAAgF,EAChF,UAAU,CACX,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/runtime/environment/environment-manifest.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Reading an environment manifest (openspec change `extract-environment-manifest`, task 2.1; spec
+ * `runtime-environment-manifest`): the data about the foundation every managed engine runs on,
+ * published in conf apart from any engine descriptor, one file per platform. One parser per platform
+ * (change `add-tensorrt-llm-windows`, task 2.1): Linux's lists which install recipes exist and on
+ * which distributions each is qualified; Windows' pins the rootfs core imports as its own WSL
+ * distribution and names the recipe that prepares the guest. A core picks the parser of its own
+ * platform (`environmentManifestParser`), and each parser accepts nothing but its own `platform`, so
+ * another platform's manifest never reaches it.
+ *
+ * Each shape follows its conf schema (`atomic-chat-conf/runtimes/environments/<platform>.schema.json`)
+ * exactly, with the same strictness as the descriptor parser (`document-fields.ts`): every level
+ * refuses an unknown field, so a command or a script added anywhere refuses the whole document. Conf
+ * CI's integrity checks — `recipe_id` unique, a distribution unique by `(id, version_id, arch)` within
+ * its recipe, `manifest_id` prefixed by its platform — hold here too. An empty `recipes` list is a
+ * valid Linux manifest (conf ruling 1.1): it qualifies no distribution for automatic setup.
+ */
+import type { EnvironmentPlatform, LinuxEnvironmentManifest, WindowsEnvironmentManifest } from '../../contracts/index.js';
+/**
+ * `windows-r<N>` for x64 (`windows.json`), `windows-arm64-r<N>` for Windows on Arm
+ * (`windows-arm64.json`, its own file: every released core parses `windows.json` strictly and would
+ * refuse an arm64 rootfs there). The id names the architecture its rootfs is for.
+ */
+export declare const WINDOWS_MANIFEST_ID: RegExp;
+/** Validate one Linux environment manifest; throws `MANAGED_METADATA_INVALID` naming the first misfit. */
+export declare function parseLinuxEnvironmentManifest(input: unknown): LinuxEnvironmentManifest;
+/** Validate one Windows environment manifest; throws `MANAGED_METADATA_INVALID` naming the first misfit. */
+export declare function parseWindowsEnvironmentManifest(input: unknown): WindowsEnvironmentManifest;
+/** Which manifest each platform reads. */
+export interface EnvironmentManifestByPlatform {
+    linux: LinuxEnvironmentManifest;
+    windows: WindowsEnvironmentManifest;
+}
+/** The parser of one platform's manifest: it refuses every other platform's document. */
+export declare function environmentManifestParser<P extends EnvironmentPlatform>(platform: P): (input: unknown) => EnvironmentManifestByPlatform[P];