@atomic-chat/core 0.5.1 → 0.13.6

package/dist/hardware/windows-video.js

@@ -0,0 +1,214 @@
+/**
+ * Windows GPUs, CPU and OS from one PowerShell run: `Win32_VideoController` for the adapters, the
+ * display class registry for the driver's own VRAM figure (`HardwareInformation.qwMemorySize`, which
+ * `AdapterRAM` cannot hold above 4 GiB) and its Vulkan ICD, `Win32_Processor` / `Win32_OperatingSystem`
+ * for names and cores, `vulkan-1.dll` + the Khronos driver registrations for the loader, and
+ * `IsProcessorFeaturePresent` for the CPU flags. One process, one JSON document, because PowerShell
+ * takes seconds to start and five runs would take five times as long.
+ *
+ * Pure: the script text, its arguments, and the parse of what comes back. `probe-windows.ts` runs it.
+ */
+import { icdVendorOf } from './vulkan.js';
+const DISPLAY_CLASS_KEY = 'HKLM:\\SYSTEM\\CurrentControlSet\\Control\\Class\\{4d36e968-e325-11ce-bfc1-08002be10318}';
+/**
+ * One line, `;`-separated, no double quotes (the C# attribute builds its quotes from `[char]34`): what
+ * `-Command` receives has been through Node's Windows argument quoting and PowerShell's own parser,
+ * and a script that never needs escaping cannot be mangled by either. Every list is wrapped in `@()`
+ * and the parser still accepts a bare object, because PowerShell 5.1 collapses single-element
+ * collections on the way to JSON. `Add-Type` fails in Constrained Language Mode; `pf` is then `null`.
+ */
+export const WINDOWS_PROBE_SCRIPT = [
+    "$ErrorActionPreference = 'SilentlyContinue'",
+    '$video = @(Get-CimInstance Win32_VideoController | Select-Object Name, AdapterRAM, PNPDeviceID, DriverVersion)',
+    `$classKeys = @(Get-ChildItem '${DISPLAY_CLASS_KEY}' | Where-Object { $_.PSChildName -match '^\\d{4}$' } | ForEach-Object { $p = Get-ItemProperty $_.PSPath; [pscustomobject]@{ key = $_.PSChildName; MatchingDeviceId = $p.MatchingDeviceId; DriverDesc = $p.DriverDesc; qwMemorySize = $p.'HardwareInformation.qwMemorySize'; VulkanDriverName = @($p.VulkanDriverName | Where-Object { $_ }) } })`,
+    '$cpu = @(Get-CimInstance Win32_Processor | Select-Object Name, NumberOfCores)',
+    '$os = Get-CimInstance Win32_OperatingSystem | Select-Object Caption, Version, BuildNumber',
+    "$drivers = @((Get-Item 'HKLM:\\SOFTWARE\\Khronos\\Vulkan\\Drivers').Property | Where-Object { $_ })",
+    "$vulkan = @{ dll = [bool](Test-Path (Join-Path $env:SystemRoot 'System32\\vulkan-1.dll')); drivers = $drivers }",
+    '$pf = $null',
+    "try { Add-Type -Namespace AtomicProbe -Name Native -MemberDefinition ('[DllImport(' + [char]34 + 'kernel32.dll' + [char]34 + ')] public static extern bool IsProcessorFeaturePresent(int f);'); $pf = @{}; foreach ($f in 3,6,10,13,36,37,38,39,40,41) { $pf[[string]$f] = [bool][AtomicProbe.Native]::IsProcessorFeaturePresent($f) } } catch { $pf = $null }",
+    '$build = [Environment]::OSVersion.Version.Build',
+    '[pscustomobject]@{ video = $video; classKeys = $classKeys; cpu = $cpu; os = $os; vulkan = $vulkan; pf = $pf; build = $build } | ConvertTo-Json -Depth 5 -Compress',
+].join('; ');
+export function windowsProbeArgs() {
+    return ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-Command', WINDOWS_PROBE_SCRIPT];
+}
+function asArray(value) {
+    if (value === null || value === undefined)
+        return [];
+    return Array.isArray(value) ? value : [value];
+}
+function asObject(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value) ? value : undefined;
+}
+function asString(value) {
+    if (typeof value === 'string')
+        return value;
+    if (typeof value === 'number')
+        return String(value);
+    return undefined;
+}
+function asNumber(value) {
+    if (typeof value === 'number' && Number.isFinite(value))
+        return value;
+    if (typeof value === 'string' && /^\d+$/.test(value.trim()))
+        return Number(value);
+    return undefined;
+}
+/** Parse the script's JSON. Tolerates a UTF-8 BOM and single-element collapse; throws on anything that is not the document. */
+export function parseWindowsProbe(json) {
+    const root = asObject(JSON.parse(json.replace(/^\uFEFF/, '')));
+    if (!root)
+        throw new Error('the PowerShell probe did not answer with a JSON object');
+    const video = [];
+    for (const entry of asArray(root['video'])) {
+        const o = asObject(entry);
+        if (!o)
+            continue;
+        video.push(compact({
+            Name: asString(o['Name']),
+            AdapterRAM: asNumber(o['AdapterRAM']),
+            PNPDeviceID: asString(o['PNPDeviceID']),
+            DriverVersion: asString(o['DriverVersion']),
+        }));
+    }
+    const classKeys = [];
+    for (const entry of asArray(root['classKeys'])) {
+        const o = asObject(entry);
+        const key = o ? asString(o['key']) : undefined;
+        if (!o || key === undefined)
+            continue;
+        classKeys.push({
+            key,
+            ...compact({
+                MatchingDeviceId: asString(o['MatchingDeviceId']),
+                DriverDesc: asString(o['DriverDesc']),
+                qwMemorySize: asNumber(o['qwMemorySize']),
+            }),
+            VulkanDriverName: asArray(o['VulkanDriverName']).flatMap((v) => (typeof v === 'string' ? [v] : [])),
+        });
+    }
+    const cpu = [];
+    for (const entry of asArray(root['cpu'])) {
+        const o = asObject(entry);
+        if (o)
+            cpu.push(compact({
+                Name: asString(o['Name']),
+                NumberOfCores: asNumber(o['NumberOfCores']),
+            }));
+    }
+    const osObject = asObject(root['os']);
+    const os = osObject
+        ? compact({
+            Caption: asString(osObject['Caption']),
+            Version: asString(osObject['Version']),
+            BuildNumber: asString(osObject['BuildNumber']),
+        })
+        : undefined;
+    const vulkanObject = asObject(root['vulkan']);
+    const vulkan = {
+        dll: vulkanObject?.['dll'] === true,
+        drivers: asArray(vulkanObject?.['drivers']).flatMap((v) => (typeof v === 'string' ? [v] : [])),
+    };
+    const pfObject = asObject(root['pf']);
+    const pf = pfObject ? Object.fromEntries(Object.entries(pfObject).map(([k, v]) => [k, v === true])) : null;
+    const build = asNumber(root['build']) ?? asNumber(os?.BuildNumber) ?? 0;
+    return { video, classKeys, cpu, os, vulkan, pf, build };
+}
+/** Drop the `undefined` entries, so an absent field is absent (`exactOptionalPropertyTypes`). */
+function compact(value) {
+    return Object.fromEntries(Object.entries(value).filter(([, v]) => v !== undefined));
+}
+const QUALCOMM_VENDOR_ID = 0x5143;
+/**
+ * `PCI\VEN_10DE&DEV_2684&…` → the two ids. Snapdragon's Adreno is not on PCI: its instance id is
+ * `ACPI\QCOM0C36\…` (or `ACPI\VEN_QCOM&DEV_0C36…`), read as Qualcomm's Vulkan vendor id and the
+ * ACPI device number. `undefined` for anything else.
+ */
+export function parsePnpDeviceId(id) {
+    const m = /PCI\\VEN_([0-9A-F]{4})&DEV_([0-9A-F]{4})/i.exec(id);
+    if (m)
+        return { vendorId: Number.parseInt(m[1] ?? '', 16), deviceId: Number.parseInt(m[2] ?? '', 16) };
+    const qcomDevice = /ACPI\\(?:VEN_)?QCOM(?:&DEV_)?([0-9A-F]{4})/i.exec(id)?.[1];
+    if (qcomDevice)
+        return { vendorId: QUALCOMM_VENDOR_ID, deviceId: Number.parseInt(qcomDevice, 16) };
+    return undefined;
+}
+/** The display class keys registered for an adapter: PCI keys by `ven_xxxx&dev_xxxx`, Adreno by `qcom` + device. */
+function classKeysFor(classKeys, ids) {
+    const dev = hex4(ids.deviceId);
+    if (ids.vendorId === QUALCOMM_VENDOR_ID) {
+        return classKeys.filter((key) => {
+            const id = (key.MatchingDeviceId ?? '').toLowerCase();
+            return id.includes('qcom') && id.includes(dev);
+        });
+    }
+    const needle = `ven_${hex4(ids.vendorId)}&dev_${dev}`;
+    return classKeys.filter((key) => (key.MatchingDeviceId ?? '').toLowerCase().includes(needle));
+}
+/**
+ * The PCI GPUs of the machine, plus Snapdragon's ACPI-enumerated Adreno. Software adapters (`ROOT\BasicDisplay`, the `SWD\` RDP mirror) are not
+ * GPUs and are skipped. VRAM comes from the class key matched by vendor and device id — `AdapterRAM`
+ * is a 32-bit field that reports 4 GiB for every larger card, so falling back to it is warned about.
+ */
+export function windowsGpus(probe) {
+    const adapters = [];
+    const warnings = [];
+    const icdVendors = new Set();
+    for (const driver of probe.vulkan.drivers) {
+        const vendor = icdVendorOf(driver);
+        if (vendor)
+            icdVendors.add(vendor);
+    }
+    for (const key of probe.classKeys)
+        for (const manifest of key.VulkanDriverName) {
+            const vendor = icdVendorOf(manifest);
+            if (vendor)
+                icdVendors.add(vendor);
+        }
+    for (const controller of probe.video) {
+        const pnp = controller.PNPDeviceID;
+        if (!pnp || /^(ROOT|SWD)\\/i.test(pnp))
+            continue;
+        const ids = parsePnpDeviceId(pnp);
+        if (!ids)
+            continue;
+        const name = controller.Name?.trim() || `GPU ${pnp}`;
+        const matching = classKeysFor(probe.classKeys, ids);
+        const classKey = matching.find((key) => key.qwMemorySize !== undefined) ?? matching[0];
+        let vramTotalMiB;
+        if (classKey?.qwMemorySize !== undefined && classKey.qwMemorySize > 0)
+            vramTotalMiB = Math.floor(classKey.qwMemorySize / 2 ** 20);
+        else if (controller.AdapterRAM !== undefined && controller.AdapterRAM > 0) {
+            vramTotalMiB = Math.floor(controller.AdapterRAM / 2 ** 20);
+            warnings.push(`${name}: VRAM read from Win32_VideoController.AdapterRAM, which caps at 4 GiB`);
+        }
+        adapters.push({
+            name,
+            vendorId: ids.vendorId,
+            deviceId: ids.deviceId,
+            pnpDeviceId: pnp,
+            driverVersion: controller.DriverVersion ?? '',
+            ...(vramTotalMiB !== undefined ? { vramTotalMiB } : {}),
+            vulkanDriver: matching.some((key) => key.VulkanDriverName.length > 0),
+        });
+    }
+    return { adapters, icdVendors, warnings };
+}
+function hex4(value) {
+    return value.toString(16).padStart(4, '0');
+}
+/** Physical cores across sockets; `undefined` when CIM did not answer. */
+export function coreCount(probe) {
+    let total = 0;
+    for (const cpu of probe.cpu)
+        if (cpu.NumberOfCores !== undefined && cpu.NumberOfCores > 0)
+            total += cpu.NumberOfCores;
+    return total > 0 ? total : undefined;
+}
+/** `Microsoft Windows 11 Pro`, as CIM spells it; `undefined` when it did not answer. */
+export function osName(probe) {
+    const caption = probe.os?.Caption?.trim();
+    return caption ? caption : undefined;
+}
+//# sourceMappingURL=windows-video.js.map

package/dist/hardware/windows-video.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows-video.js","sourceRoot":"","sources":["../../src/hardware/windows-video.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,MAAM,iBAAiB,GACrB,0FAA0F,CAAA;AAE5F;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAW;IAC1C,6CAA6C;IAC7C,gHAAgH;IAChH,iCAAiC,iBAAiB,mVAAmV;IACrY,+EAA+E;IAC/E,2FAA2F;IAC3F,qGAAqG;IACrG,iHAAiH;IACjH,aAAa;IACb,gWAAgW;IAChW,iDAAiD;IACjD,mKAAmK;CACpK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAEZ,MAAM,UAAU,gBAAgB;IAC9B,OAAO,CAAC,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,QAAQ,EAAE,UAAU,EAAE,oBAAoB,CAAC,CAAA;AAC1G,CAAC;AAoCD,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IACpD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;AAC/C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAc,CAAC,CAAC,CAAC,SAAS,CAAA;AAC3G,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IACnD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IACjF,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,+HAA+H;AAC/H,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAC9D,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;IACpF,MAAM,KAAK,GAA6B,EAAE,CAAA;IAC1C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QACzB,IAAI,CAAC,CAAC;YAAE,SAAQ;QAChB,KAAK,CAAC,IAAI,CACR,OAAO,CAAyB;YAC9B,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACzB,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YACrC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YACvC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;SAC5C,CAAC,CACH,CAAA;IACH,CAAC;IACD,MAAM,SAAS,GAA6B,EAAE,CAAA;IAC9C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QACzB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC9C,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,SAAS;YAAE,SAAQ;QACrC,SAAS,CAAC,IAAI,CAAC;YACb,GAAG;YACH,GAAG,OAAO,CAAmF;gBAC3F,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;gBACjD,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;gBACrC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;aAC1C,CAAC;YACF,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACpG,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,GAAG,GAAwB,EAAE,CAAA;IACnC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QACzB,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CACN,OAAO,CAA8B;gBACnC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBACzB,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;aAC5C,CAAC,CACH,CAAA;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IACrC,MAAM,EAAE,GAAG,QAAQ;QACjB,CAAC,CAAC,OAAO,CAAkC;YACvC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACtC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACtC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;SAC/C,CAAC;QACJ,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC7C,MAAM,MAAM,GAAG;QACb,GAAG,EAAE,YAAY,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI;QACnC,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;KAC/F,CAAA;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IACrC,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1G,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,QAAQ,CAAC,EAAE,EAAE,WAAW,CAAC,IAAI,CAAC,CAAA;IACvE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;AACzD,CAAC;AAED,iGAAiG;AACjG,SAAS,OAAO,CAAmB,KAA2C;IAC5E,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAM,CAAA;AAC1F,CAAC;AAED,MAAM,kBAAkB,GAAG,MAAM,CAAA;AAEjC;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAU;IACzC,MAAM,CAAC,GAAG,2CAA2C,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC9D,IAAI,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,CAAA;IACtG,MAAM,UAAU,GAAG,6CAA6C,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC9E,IAAI,UAAU;QAAE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAA;IAClG,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,oHAAoH;AACpH,SAAS,YAAY,CACnB,SAAmC,EACnC,GAA2C;IAE3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC9B,IAAI,GAAG,CAAC,QAAQ,KAAK,kBAAkB,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;YAC9B,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;YACrD,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;QAChD,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,GAAG,EAAE,CAAA;IACrD,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;AAC/F,CAAC;AAiBD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAmB;IAK7C,MAAM,QAAQ,GAAqB,EAAE,CAAA;IACrC,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;IACpC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;QAClC,IAAI,MAAM;YAAE,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,SAAS;QAC/B,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;YACpC,IAAI,MAAM;gBAAE,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACpC,CAAC;IACH,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,CAAA;QAClC,IAAI,CAAC,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAQ;QAChD,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;QACjC,IAAI,CAAC,GAAG;YAAE,SAAQ;QAClB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,OAAO,GAAG,EAAE,CAAA;QACpD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACnD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAA;QACtF,IAAI,YAAgC,CAAA;QACpC,IAAI,QAAQ,EAAE,YAAY,KAAK,SAAS,IAAI,QAAQ,CAAC,YAAY,GAAG,CAAC;YACnE,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;aACvD,IAAI,UAAU,CAAC,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YAC1E,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;YAC1D,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,wEAAwE,CAAC,CAAA;QAChG,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI;YACJ,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,UAAU,CAAC,aAAa,IAAI,EAAE;YAC7C,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;SACtE,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA;AAC3C,CAAC;AAED,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AAC5C,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,SAAS,CAAC,KAAmB;IAC3C,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,GAAG;QACzB,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,GAAG,CAAC,aAAa,GAAG,CAAC;YAAE,KAAK,IAAI,GAAG,CAAC,aAAa,CAAA;IAC1F,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AACtC,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,MAAM,CAAC,KAAmB;IACxC,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IACzC,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;AACtC,CAAC"}

package/dist/host/app-daemon.d.ts

@@ -0,0 +1,47 @@
+/**
+ * The `atomic-chat-app-core` binary behind its thin entry (`src/app-daemon.ts`): parse the app's
+ * arguments, open `<data>/atomic-core/logs/core.log`, and run the core until something stops it.
+ * Internal to the host layer — not exported from `src/host/index.ts` or the package.
+ *
+ * Every line this binary writes to stderr (the app keeps it as `core-start.log`) carries the
+ * `formatLogLine` header with target `core`: the core's logger, the error reporter's warnings, the
+ * fatal handlers and the log file's own "disabled" warning (design D3/D6 of `add-unified-logs`).
+ * The same entries go to `core.log`, together with every engine's stdout/stderr, which goes to the
+ * file only. The CLI's `daemon` command (`src/cli/commands/daemon.ts`) writes no log file and keeps
+ * its `[level] message` stderr. The stdout handshake is the same one JSON ready line as before.
+ */
+import type { CliIo } from '../cli/index.js';
+import type { AtomicCore, AtomicCoreOptions } from '../core/index.js';
+import type { CoreReporterInput, ErrorReporter, ProcessEvents } from '../telemetry/index.js';
+/** What the daemon uses of the core it starts; `AtomicCore` in the binary, a fake in tests. */
+export type AppDaemonCore = Pick<AtomicCore, 'readyLine' | 'shutdown' | 'stopped'>;
+/**
+ * Everything outside the daemon's own logic; the entry passes the real process, clock, reporter and
+ * core. `core.log` itself is written with the real `node:fs` under `<data>/atomic-core/logs`.
+ */
+export interface AppDaemonDeps {
+    /** The arguments after the executable: `process.argv.slice(2)`. */
+    argv: string[];
+    io: Pick<CliIo, 'stdout' | 'stderr' | 'env' | 'waitForShutdown'>;
+    /** Where uncaught exceptions and unhandled rejections are heard: `process`. */
+    processEvents: ProcessEvents;
+    exit: (code: number) => unknown;
+    pid: number;
+    platform: NodeJS.Platform;
+    arch: string;
+    homeDir: string;
+    /** The clock of every log header, on stderr and in `core.log`. */
+    now: () => Date;
+    createReporter: (input: CoreReporterInput) => Promise<ErrorReporter>;
+    createCore: (options: AtomicCoreOptions) => Promise<AppDaemonCore>;
+}
+/**
+ * Run `atomic-chat-app-core --version` or `atomic-chat-app-core daemon --data-folder <data> …`.
+ *
+ * No error escapes to the runtime, whose own crash output would reach stderr without a header.
+ * Every failure ends the process through `deps.exit(1)` after exactly one `ERROR` entry:
+ * - a usage error, before any data folder is known: its message, on stderr only;
+ * - a start-up failure of the core: `failFatally`'s text, reported, on stderr and in `core.log`;
+ * - anything else: `inspect(error)`, the way the fatal path renders it, on stderr and in `core.log`.
+ */
+export declare function runAppDaemon(deps: AppDaemonDeps): Promise<void>;

package/dist/host/app-daemon.js

@@ -0,0 +1,146 @@
+/**
+ * The `atomic-chat-app-core` binary behind its thin entry (`src/app-daemon.ts`): parse the app's
+ * arguments, open `<data>/atomic-core/logs/core.log`, and run the core until something stops it.
+ * Internal to the host layer — not exported from `src/host/index.ts` or the package.
+ *
+ * Every line this binary writes to stderr (the app keeps it as `core-start.log`) carries the
+ * `formatLogLine` header with target `core`: the core's logger, the error reporter's warnings, the
+ * fatal handlers and the log file's own "disabled" warning (design D3/D6 of `add-unified-logs`).
+ * The same entries go to `core.log`, together with every engine's stdout/stderr, which goes to the
+ * file only. The CLI's `daemon` command (`src/cli/commands/daemon.ts`) writes no log file and keeps
+ * its `[level] message` stderr. The stdout handshake is the same one JSON ready line as before.
+ */
+import { inspect, parseArgs } from 'node:util';
+import { dataLayout } from '../config/index.js';
+import { breadcrumbLogger, failFatally, installProcessHandlers, parseTelemetryFlag, } from '../telemetry/index.js';
+import { CORE_VERSION } from '../version.js';
+import { formatLogLine, openLogFile } from './log-file.js';
+const LEVELS = { info: 'INFO', warn: 'WARN', error: 'ERROR' };
+/**
+ * The app's arguments, or `'version'` for `--version`. Every error thrown here is a usage error
+ * whose message says all there is to say (the parser's own included).
+ */
+function parseAppDaemonArgs(argv) {
+    const args = [...argv];
+    if (args.length === 1 && args[0] === '--version')
+        return 'version';
+    const command = args.shift();
+    if (command !== 'daemon')
+        throw new Error('The app core only accepts the daemon command.');
+    const { values } = parseArgs({
+        args,
+        options: {
+            'data-folder': { type: 'string' },
+            'control-port': { type: 'string' },
+            'resources-dir': { type: 'string' },
+            'cloudflared-bin': { type: 'string' },
+            // The app's `productAnalytic` consent at launch; it updates it later over PUT /telemetry.
+            // Absent, the core decides for itself (docs/decisions/*-the-core-owns-its-error-reporting.md).
+            'telemetry': { type: 'string' },
+        },
+        strict: true,
+    });
+    const dataFolder = values['data-folder'];
+    if (!dataFolder)
+        throw new Error('The app must supply its data folder.');
+    return {
+        dataFolder,
+        controlPort: Number(values['control-port'] ?? 0),
+        resourcesDir: values['resources-dir'],
+        // The app bundles the tunnel binary next to its own executable, not under its resources.
+        cloudflaredPath: values['cloudflared-bin'],
+        telemetry: parseTelemetryFlag(values['telemetry']),
+    };
+}
+/**
+ * Run `atomic-chat-app-core --version` or `atomic-chat-app-core daemon --data-folder <data> …`.
+ *
+ * No error escapes to the runtime, whose own crash output would reach stderr without a header.
+ * Every failure ends the process through `deps.exit(1)` after exactly one `ERROR` entry:
+ * - a usage error, before any data folder is known: its message, on stderr only;
+ * - a start-up failure of the core: `failFatally`'s text, reported, on stderr and in `core.log`;
+ * - anything else: `inspect(error)`, the way the fatal path renders it, on stderr and in `core.log`.
+ */
+export async function runAppDaemon(deps) {
+    const { io } = deps;
+    let args;
+    try {
+        args = parseAppDaemonArgs(deps.argv);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : inspect(error);
+        io.stderr(formatLogLine(deps.now(), 'core', 'ERROR', message));
+        deps.exit(1);
+        return;
+    }
+    if (args === 'version') {
+        io.stdout(`${CORE_VERSION}\n`);
+        return;
+    }
+    const { dataFolder } = args;
+    const layout = dataLayout(dataFolder);
+    // Never throws: a folder it cannot write leaves one WARN line on stderr and a no-op writer.
+    const logFile = openLogFile(layout.core.logsDir, 'core', { now: deps.now, stderr: io.stderr });
+    /** One entry of the core's own: the same header on stderr and in `core.log`. */
+    const log = (level, message) => {
+        io.stderr(formatLogLine(deps.now(), 'core', level, message));
+        logFile.write('core', level, message);
+    };
+    /** Ends the process early; `core.log` is closed first so its last entry is on disk. */
+    const exit = (code) => {
+        logFile.close();
+        return deps.exit(code);
+    };
+    log('INFO', `atomic-chat-app-core ${CORE_VERSION} starting (pid ${deps.pid}, ${deps.platform}/${deps.arch})`);
+    try {
+        const reporter = await deps.createReporter({
+            host: 'atomic-chat',
+            ownerScope: 'app',
+            enabled: args.telemetry,
+            dataFolder,
+            telemetryFile: layout.core.telemetry,
+            homeDir: deps.homeDir,
+            env: io.env,
+            platform: deps.platform,
+            arch: deps.arch,
+            version: CORE_VERSION,
+            warn: (message) => log('WARN', message),
+        });
+        const fatal = {
+            reporter,
+            // `failFatally` ends its text with a newline; the entry brings its own.
+            writeStderr: (text) => log('ERROR', text.replace(/\n$/, '')),
+            exit,
+        };
+        installProcessHandlers(deps.processEvents, fatal);
+        let core;
+        try {
+            core = await deps.createCore({
+                ownerScope: 'app',
+                dataFolder,
+                controlPort: args.controlPort,
+                ...(args.resourcesDir ? { resourcesDir: args.resourcesDir } : {}),
+                ...(args.cloudflaredPath ? { cloudflaredPath: args.cloudflaredPath } : {}),
+                env: io.env,
+                errorReporter: reporter,
+                logger: breadcrumbLogger(reporter, (level, message) => log(LEVELS[level], message)),
+                backendOutput: ({ provider, model, stream, line }) => logFile.write(`engine:${provider}/${model}`, 'INFO', `[${stream}] ${line}`),
+            });
+        }
+        catch (error) {
+            // Writes the ERROR entry, reports it and exits; there is nothing left to throw.
+            await failFatally('startup', error, fatal);
+            return;
+        }
+        io.stdout(`${JSON.stringify(core.readyLine())}\n`);
+        await Promise.race([io.waitForShutdown(() => core.shutdown()), core.stopped]);
+        await reporter.flush();
+    }
+    catch (error) {
+        log('ERROR', inspect(error));
+        exit(1);
+        return;
+    }
+    logFile.close();
+}
+//# sourceMappingURL=app-daemon.js.map

package/dist/host/app-daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-daemon.js","sourceRoot":"","sources":["../../src/host/app-daemon.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAE9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAE/C,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,uBAAuB,CAAA;AAE9B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AA2B1D,MAAM,MAAM,GAAgD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;AAW1G;;;GAGG;AACH,SAAS,kBAAkB,CAAC,IAAc;IACxC,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IACtB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW;QAAE,OAAO,SAAS,CAAA;IAClE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;IAC5B,IAAI,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;IAC1F,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC3B,IAAI;QACJ,OAAO,EAAE;YACP,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAClC,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACnC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACrC,0FAA0F;YAC1F,+FAA+F;YAC/F,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAChC;QACD,MAAM,EAAE,IAAI;KACb,CAAC,CAAA;IACF,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,CAAA;IACxC,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IACxE,OAAO;QACL,UAAU;QACV,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAChD,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC;QACrC,yFAAyF;QACzF,eAAe,EAAE,MAAM,CAAC,iBAAiB,CAAC;QAC1C,SAAS,EAAE,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;KACnD,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAmB;IACpD,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAA;IACnB,IAAI,IAA+B,CAAA;IACnC,IAAI,CAAC;QACH,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACvE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;QAC9D,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACZ,OAAM;IACR,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,EAAE,CAAC,MAAM,CAAC,GAAG,YAAY,IAAI,CAAC,CAAA;QAC9B,OAAM;IACR,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAA;IAC3B,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;IAErC,4FAA4F;IAC5F,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAA;IAC9F,gFAAgF;IAChF,MAAM,GAAG,GAAG,CAAC,KAAe,EAAE,OAAe,EAAQ,EAAE;QACrD,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAA;QAC5D,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;IACvC,CAAC,CAAA;IACD,uFAAuF;IACvF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAW,EAAE;QACrC,OAAO,CAAC,KAAK,EAAE,CAAA;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxB,CAAC,CAAA;IACD,GAAG,CACD,MAAM,EACN,wBAAwB,YAAY,kBAAkB,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,GAAG,CACjG,CAAA;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC;YACzC,IAAI,EAAE,aAAa;YACnB,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,SAAS;YACvB,UAAU;YACV,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;YACpC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAG,EAAE,EAAE,CAAC,GAAG;YACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,YAAY;YACrB,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC;SACxC,CAAC,CAAA;QACF,MAAM,KAAK,GAAc;YACvB,QAAQ;YACR,wEAAwE;YACxE,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC5D,IAAI;SACL,CAAA;QACD,sBAAsB,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAA;QACjD,IAAI,IAAmB,CAAA;QACvB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;gBAC3B,UAAU,EAAE,KAAK;gBACjB,UAAU;gBACV,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,GAAG,EAAE,EAAE,CAAC,GAAG;gBACX,aAAa,EAAE,QAAQ;gBACvB,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;gBACnF,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CACnD,OAAO,CAAC,KAAK,CAAC,UAAU,QAAQ,IAAI,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;aAC9E,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gFAAgF;YAChF,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;YAC1C,OAAM;QACR,CAAC;QACD,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAA;QAClD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;QAC7E,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAA;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;QAC5B,IAAI,CAAC,CAAC,CAAC,CAAA;QACP,OAAM;IACR,CAAC;IACD,OAAO,CAAC,KAAK,EAAE,CAAA;AACjB,CAAC"}

package/dist/host/index.d.ts

@@ -5,11 +5,13 @@
  * and an external host (the `atc` server CLI) must do it the same way rather than re-implement the
  * lock semantics.
  *
- * Node-only, unlike `./client` and `./contracts`. Nothing here is new behaviour: every symbol is
- * the public API of a module that already existed; this file only makes it reachable from outside
- * the package.
+ * Node-only, unlike `./client` and `./contracts`. Every symbol is the public API of a module; this
+ * file only makes it reachable from outside the package. `./recipes` is the privileged host-step
+ * executor (`executeHostStep`) that `atc host-step exec` runs as root, so the app and the CLI
+ * execute one copy of the install recipe (design D3).
  */
 export * from '../config/index.js';
 export * from '../lock/index.js';
 export * from '../cli/index.js';
 export * from '../telemetry/index.js';
+export * from './recipes/index.js';

package/dist/host/index.js

@@ -5,12 +5,14 @@
  * and an external host (the `atc` server CLI) must do it the same way rather than re-implement the
  * lock semantics.
  *
- * Node-only, unlike `./client` and `./contracts`. Nothing here is new behaviour: every symbol is
- * the public API of a module that already existed; this file only makes it reachable from outside
- * the package.
+ * Node-only, unlike `./client` and `./contracts`. Every symbol is the public API of a module; this
+ * file only makes it reachable from outside the package. `./recipes` is the privileged host-step
+ * executor (`executeHostStep`) that `atc host-step exec` runs as root, so the app and the CLI
+ * execute one copy of the install recipe (design D3).
  */
 export * from '../config/index.js';
 export * from '../lock/index.js';
 export * from '../cli/index.js';
 export * from '../telemetry/index.js';
+export * from './recipes/index.js';
 //# sourceMappingURL=index.js.map

package/dist/host/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/host/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,cAAc,oBAAoB,CAAA;AAClC,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,uBAAuB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/host/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,cAAc,oBAAoB,CAAA;AAClC,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,uBAAuB,CAAA;AACrC,cAAc,oBAAoB,CAAA"}

package/dist/host/log-file.d.ts

@@ -0,0 +1,74 @@
+/**
+ * `<dir>/<stem>.log`: a synchronously-written, rotating log file. Internal to the core host layer —
+ * not exported from `src/host/index.ts` or the package. Used for `core.log` (task 3.1 wires the
+ * daemon's own logger and stderr into it); `<stem>` is parameterised so the same code could serve
+ * another rotating file later.
+ *
+ * `formatLogLine` is the single place that builds the `[YYYY-MM-DD][HH:MM:SS][target][LEVEL]`
+ * header (design D3): both this file's entries and every stderr line the core writes go through it,
+ * so a person reading either sees the same format.
+ */
+export type LogLevel = 'DEBUG' | 'INFO' | 'WARN' | 'ERROR';
+/** The size at which `core.log` (and `app.log`) rotate, matching tauri-plugin-log. */
+export declare const MAX_LOG_BYTES: number;
+/** How many rotated `<stem>_*.log` archives are kept; the oldest beyond this is deleted. */
+export declare const MAX_LOG_ARCHIVES = 4;
+/**
+ * Builds one log entry: UTC, to the second, regardless of the process timezone. A multi-line
+ * `message` carries the header on its first line only; the rest is written verbatim, and one `\n`
+ * is appended, so a caller passes its message without a trailing newline of its own (one that
+ * ends in `\n` leaves an empty line after the entry).
+ *
+ * Each `[`, `]` and control character in `target` becomes `_`: a target comes partly from a model
+ * id, which is a folder name with no character rules (`model [Q4]`), and any of those would break
+ * the header the app splits entries on (`\[[^\]]*\]`, design D7) or split the header line itself.
+ */
+export declare function formatLogLine(date: Date, target: string, level: LogLevel, message: string): string;
+/**
+ * The subset of `node:fs`'s synchronous API the writer needs, injected so tests can simulate a
+ * broken disk without touching real IO error conditions.
+ */
+export interface LogFileFs {
+    mkdirSync(path: string, options: {
+        recursive: true;
+    }): void;
+    existsSync(path: string): boolean;
+    statSync(path: string): {
+        size: number;
+    };
+    openSync(path: string, flags: string): number;
+    writeSync(fd: number, data: string): number;
+    closeSync(fd: number): void;
+    renameSync(from: string, to: string): void;
+    unlinkSync(path: string): void;
+    readdirSync(path: string): string[];
+}
+export interface LogFileOptions {
+    /** Clock injected for tests; defaults to the real time. */
+    now?: () => Date;
+    /** Filesystem injected for tests; defaults to real `node:fs`. */
+    fs?: LogFileFs;
+    /** Where the single "log file disabled" warning goes; defaults to `process.stderr`. */
+    stderr?: (text: string) => void;
+    /** Size at which the file rotates; defaults to {@link MAX_LOG_BYTES}. Tests may lower it. */
+    maxBytes?: number;
+    /** Archives kept after rotation; defaults to {@link MAX_LOG_ARCHIVES}. Tests may lower it. */
+    maxArchives?: number;
+}
+export interface LogFile {
+    write(target: string, level: LogLevel, message: string): void;
+    close(): void;
+}
+/**
+ * Opens `<dir>/<stem>.log` for append, creating `dir` if needed, and returns a writer that rotates
+ * the file once an incoming entry would push it past `maxBytes` (default 10 MiB), keeping
+ * `maxArchives` (default 4) archives named `<stem>_YYYY-MM-DD_HH-MM-SS.log`.
+ *
+ * Never throws. An open or write failure, a rotation failure that leaves no writable file open, or
+ * any other error while writing an entry (a close that fails mid-rotation, say) writes one `WARN`
+ * line built by {@link formatLogLine} to `stderr` and disables the writer for good: every
+ * `write`/`close` call afterwards is a silent no-op. A failed rename that still leaves the
+ * *current* file writable is not one of these: the writer keeps appending to it and retries
+ * rotation on the next write; see {@link rotate}.
+ */
+export declare function openLogFile(dir: string, stem: string, options?: LogFileOptions): LogFile;