@atomic-chat/core 0.5.1

package/dist/downloads/archive.js

@@ -0,0 +1,121 @@
+/**
+ * Archive extraction and backend-pack layout normalisation. Port of `decompress` and
+ * `normalize_backend_layout` in `src-tauri/src/core/filesystem/commands.rs`.
+ *
+ * Only `.tar.gz` and `.zip` are supported (same error text as the app). Zip entries are guarded
+ * against zip-slip, directory entries are created, and the unix mode bits are applied.
+ */
+import { createWriteStream } from 'node:fs';
+import { chmod, mkdir, readdir, rename, rm, stat } from 'node:fs/promises';
+import { dirname, join, normalize, relative, isAbsolute } from 'node:path';
+import { pipeline } from 'node:stream/promises';
+import { x as tarExtract } from 'tar';
+import yauzl from 'yauzl';
+export const UNSUPPORTED_ARCHIVE_MESSAGE = 'Unsupported file format. Only .tar.gz and .zip are supported.';
+export async function extractArchive(archivePath, outputDir) {
+    await mkdir(outputDir, { recursive: true });
+    if (archivePath.endsWith('.tar.gz')) {
+        await tarExtract({ file: archivePath, cwd: outputDir });
+        return;
+    }
+    if (archivePath.endsWith('.zip')) {
+        await extractZip(archivePath, outputDir);
+        return;
+    }
+    throw new Error(UNSUPPORTED_ARCHIVE_MESSAGE);
+}
+function enclosedName(entryName) {
+    const normalized = normalize(entryName.replaceAll('\\', '/'));
+    if (isAbsolute(normalized) || normalized.split(/[\\/]/).includes('..'))
+        return undefined;
+    return normalized;
+}
+function extractZip(archivePath, outputDir) {
+    return new Promise((resolveDone, reject) => {
+        yauzl.open(archivePath, { lazyEntries: true }, (err, zip) => {
+            if (err || !zip)
+                return reject(err ?? new Error('failed to open zip'));
+            // yauzl rejects `..` segments itself; keep the app's wording for that case.
+            zip.on('error', (e) => reject(e.message.startsWith('invalid relative path') ? new Error('Invalid zip entry path') : e));
+            zip.on('end', resolveDone);
+            zip.on('entry', (entry) => {
+                const rel = enclosedName(entry.fileName);
+                if (rel === undefined)
+                    return reject(new Error('Invalid zip entry path'));
+                const outPath = join(outputDir, rel);
+                if (!isInside(outPath, outputDir))
+                    return reject(new Error('Invalid zip entry path'));
+                if (entry.fileName.endsWith('/')) {
+                    mkdir(outPath, { recursive: true }).then(() => zip.readEntry(), reject);
+                    return;
+                }
+                zip.openReadStream(entry, (streamErr, stream) => {
+                    if (streamErr || !stream)
+                        return reject(streamErr ?? new Error('failed to read zip entry'));
+                    mkdir(dirname(outPath), { recursive: true })
+                        .then(() => pipeline(stream, createWriteStream(outPath)))
+                        .then(async () => {
+                        const mode = entry.externalFileAttributes >>> 16;
+                        if (process.platform !== 'win32' && mode !== 0)
+                            await chmod(outPath, mode & 0o7777).catch(() => { });
+                        zip.readEntry();
+                    })
+                        .catch(reject);
+                });
+            });
+            zip.readEntry();
+        });
+    });
+}
+const isInside = (child, parent) => {
+    const rel = relative(parent, child);
+    return rel === '' || (!rel.startsWith('..') && !isAbsolute(rel));
+};
+const exists = (p) => stat(p).then(() => true, () => false);
+async function moveEntry(src, dstDir) {
+    const dst = join(dstDir, src.split(/[\\/]/).pop());
+    await rm(dst, { recursive: true, force: true });
+    try {
+        await rename(src, dst);
+    }
+    catch (e) {
+        throw new Error(`Failed to move backend entry ${src} -> ${dst}: ${e.message}`);
+    }
+}
+/**
+ * Ensure `<outputDir>/build/bin/<exe>` exists after extraction: a flat archive (exe at the root) is
+ * moved into `build/bin/` (except `build`, `version.txt`, `backend.txt`); a single nested `llama-*`
+ * directory holding the exe is unpacked into `build/bin/` and removed.
+ */
+export async function normalizeBackendLayout(outputDir, exeName) {
+    if (outputDir === '' || exeName === '')
+        throw new Error('normalize_backend_layout error: Invalid argument');
+    const buildBin = join(outputDir, 'build', 'bin');
+    const expected = join(buildBin, exeName);
+    if (await exists(expected))
+        return;
+    if (await exists(join(outputDir, exeName))) {
+        await mkdir(buildBin, { recursive: true });
+        for (const name of await readdir(outputDir)) {
+            if (name === 'build' || name === 'version.txt' || name === 'backend.txt')
+                continue;
+            await moveEntry(join(outputDir, name), buildBin);
+        }
+        return;
+    }
+    for (const name of await readdir(outputDir)) {
+        const p = join(outputDir, name);
+        const isDir = await stat(p).then((s) => s.isDirectory(), () => false);
+        if (!isDir || !name.startsWith('llama-') || !(await exists(join(p, exeName))))
+            continue;
+        await mkdir(buildBin, { recursive: true });
+        for (const inner of await readdir(p))
+            await moveEntry(join(p, inner), buildBin);
+        await rm(p, { recursive: true, force: true });
+        break;
+    }
+    if (!(await exists(expected))) {
+        throw new Error(`Backend extracted but ${exeName} was not found at expected path ${expected}`);
+    }
+}
+//# sourceMappingURL=archive.js.map

package/dist/downloads/archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.js","sourceRoot":"","sources":["../../src/downloads/archive.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAC3C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,CAAC,IAAI,UAAU,EAAE,MAAM,KAAK,CAAA;AACrC,OAAO,KAAK,MAAM,OAAO,CAAA;AAEzB,MAAM,CAAC,MAAM,2BAA2B,GAAG,+DAA+D,CAAA;AAE1G,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,WAAmB,EAAE,SAAiB;IACzE,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3C,IAAI,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAA;QACvD,OAAM;IACR,CAAC;IACD,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,UAAU,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;QACxC,OAAM;IACR,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;AAC9C,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB;IACrC,MAAM,UAAU,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;IAC7D,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAA;IACxF,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,WAAmB,EAAE,SAAiB;IACxD,OAAO,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE;QACzC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC1D,IAAI,GAAG,IAAI,CAAC,GAAG;gBAAE,OAAO,MAAM,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAA;YACtE,4EAA4E;YAC5E,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAQ,EAAE,EAAE,CAC3B,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAChG,CAAA;YACD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;YAC1B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACxB,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;gBACxC,IAAI,GAAG,KAAK,SAAS;oBAAE,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAA;gBACzE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;gBACpC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;oBAAE,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAA;gBACrF,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAA;oBACvE,OAAM;gBACR,CAAC;gBACD,GAAG,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE;oBAC9C,IAAI,SAAS,IAAI,CAAC,MAAM;wBAAE,OAAO,MAAM,CAAC,SAAS,IAAI,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAA;oBAC3F,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;yBACzC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;yBACxD,IAAI,CAAC,KAAK,IAAI,EAAE;wBACf,MAAM,IAAI,GAAG,KAAK,CAAC,sBAAsB,KAAK,EAAE,CAAA;wBAChD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,KAAK,CAAC;4BAC5C,MAAM,KAAK,CAAC,OAAO,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;wBACrD,GAAG,CAAC,SAAS,EAAE,CAAA;oBACjB,CAAC,CAAC;yBACD,KAAK,CAAC,MAAM,CAAC,CAAA;gBAClB,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;YACF,GAAG,CAAC,SAAS,EAAE,CAAA;QACjB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,MAAc,EAAE,EAAE;IACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACnC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;AAClE,CAAC,CAAA;AAED,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAC3B,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CACV,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAA;AAEH,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,MAAc;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAY,CAAC,CAAA;IAC5D,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACxB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,OAAO,GAAG,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;IAC3F,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,SAAiB,EAAE,OAAe;IAC7E,IAAI,SAAS,KAAK,EAAE,IAAI,OAAO,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;IAC3G,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IACxC,IAAI,MAAM,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAM;IAElC,IAAI,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;QAC3C,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1C,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5C,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,aAAa;gBAAE,SAAQ;YAClF,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAA;QAClD,CAAC;QACD,OAAM;IACR,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,EACtB,GAAG,EAAE,CAAC,KAAK,CACZ,CAAA;QACD,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YAAE,SAAQ;QACvF,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,CAAC,CAAC;YAAE,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAA;QAC/E,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7C,MAAK;IACP,CAAC;IAED,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,mCAAmC,QAAQ,EAAE,CAAC,CAAA;IAChG,CAAC;AACH,CAAC"}

package/dist/downloads/disk-space.d.ts

@@ -0,0 +1,18 @@
+/**
+ * How much room is left where a download would land. The app asks before it starts an engine or a
+ * model download, to refuse one that cannot fit instead of failing it half way.
+ *
+ * Replaces the llama.cpp plugin's `available_disk_space`, which the core migration removed. Unlike
+ * that command this one answers for the data folder only: the core has no business probing arbitrary
+ * volumes on behalf of a caller, and every current caller asks about a path under `<data>`.
+ */
+export interface DiskSpaceDeps {
+    /** Free bytes on the volume holding `path`, or `undefined` when unknown. */
+    availableSpace?: (path: string) => Promise<number | undefined>;
+}
+/**
+ * Free bytes on the volume that holds `path` (or the data folder, when no path is given); `null`
+ * when the platform cannot say. The path need not exist yet — a download target usually does not —
+ * but it has to resolve inside the data folder once symlinks in its existing part are followed.
+ */
+export declare function availableDiskSpace(dataFolder: string, path: unknown, deps?: DiskSpaceDeps): Promise<number | null>;

package/dist/downloads/disk-space.js

@@ -0,0 +1,32 @@
+/**
+ * How much room is left where a download would land. The app asks before it starts an engine or a
+ * model download, to refuse one that cannot fit instead of failing it half way.
+ *
+ * Replaces the llama.cpp plugin's `available_disk_space`, which the core migration removed. Unlike
+ * that command this one answers for the data folder only: the core has no business probing arbitrary
+ * volumes on behalf of a caller, and every current caller asks about a path under `<data>`.
+ */
+import { isAbsolute, relative } from 'node:path';
+import { AtomicCoreError } from '../contracts/index.js';
+import { canonicalizeExistingPrefix, defaultAvailableSpace } from './downloader.js';
+/**
+ * Free bytes on the volume that holds `path` (or the data folder, when no path is given); `null`
+ * when the platform cannot say. The path need not exist yet — a download target usually does not —
+ * but it has to resolve inside the data folder once symlinks in its existing part are followed.
+ */
+export async function availableDiskSpace(dataFolder, path, deps = {}) {
+    const probe = deps.availableSpace ?? defaultAvailableSpace;
+    const root = await canonicalizeExistingPrefix(dataFolder);
+    let target = root;
+    if (path !== undefined && path !== null) {
+        if (typeof path !== 'string' || path === '' || path.includes('\0') || !isAbsolute(path))
+            throw new AtomicCoreError('INVALID_ARGUMENT', 'Disk space needs an absolute path.');
+        target = await canonicalizeExistingPrefix(path);
+        const rel = relative(root, target);
+        if (rel.startsWith('..') || isAbsolute(rel))
+            throw new AtomicCoreError('INVALID_ARGUMENT', 'Disk space is only reported inside the data folder.', `${path} is outside ${dataFolder}`);
+    }
+    const bytes = await probe(target);
+    return bytes === undefined ? null : bytes;
+}
+//# sourceMappingURL=disk-space.js.map

package/dist/downloads/disk-space.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disk-space.js","sourceRoot":"","sources":["../../src/downloads/disk-space.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAOnF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAkB,EAClB,IAAa,EACb,OAAsB,EAAE;IAExB,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,IAAI,qBAAqB,CAAA;IAC1D,MAAM,IAAI,GAAG,MAAM,0BAA0B,CAAC,UAAU,CAAC,CAAA;IACzD,IAAI,MAAM,GAAG,IAAI,CAAA;IACjB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACxC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACrF,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,oCAAoC,CAAC,CAAA;QACrF,MAAM,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,CAAA;QAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAClC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;YACzC,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,qDAAqD,EACrD,GAAG,IAAI,eAAe,UAAU,EAAE,CACnC,CAAA;IACL,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;IACjC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAA;AAC3C,CAAC"}

package/dist/downloads/disk.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Disk-failure tagging and preflight checks. Port of `src-tauri/src/core/downloads/disk.rs`.
+ *
+ * Every filesystem error on the download path is rendered as `Error: [<tag>] <detail>`; the app's
+ * telemetry (`classifyDownloadFailure` in `web-app/src/lib/telemetry.ts`) reads the tag out of the
+ * string. Tags are the contract (`contracts/errors.ts`), the detail text is not.
+ *
+ * Node reports OS errors as libuv codes (`ENOSPC`, `EACCES`, …) on every platform — on Windows libuv
+ * already maps Win32 codes (ERROR_DISK_FULL → ENOSPC, ERROR_SHARING_VIOLATION → EBUSY, …), so one
+ * table covers both sides of the Rust `cfg(unix)` / `cfg(windows)` split.
+ */
+import type { DiskErrorTag } from '../contracts/index.js';
+/** Classify a Node fs error into its subcause tag; unknown → `disk_io`. */
+export declare function classifyIoError(error: unknown): DiskErrorTag;
+/** `Error: [<tag>] <message>` — the shape the frontend parses. */
+export declare function diskErrToString(error: unknown): string;
+/** Same shape for a preflight refusal that has no fs error behind it. */
+export declare function diskFaultMessage(tag: DiskErrorTag, detail: string): string;
+/** Bytes never consumed on top of the download itself (a volume at zero free bytes kills the app). */
+export declare const FREE_SPACE_HEADROOM: number;
+/** Bytes still to be written given the partial files already on disk (sizes of existing `.tmp`). */
+export declare function remainingBytes(totalSize: number, partialSizes: number[]): number;
+/** Human-readable size for the refusal message. */
+export declare function formatBytes(bytes: number): string;
+/**
+ * Refuse before the first byte when the volume cannot hold the download. `availableBytes` is
+ * `undefined` when the volume cannot be identified — then the check passes (an unidentifiable
+ * volume is not a reason to block). Returns the tagged message, or `undefined` when there is room.
+ */
+export declare function checkFreeSpace(availableBytes: number | undefined, needed: number): string | undefined;
+/** Legacy Windows MAX_PATH; long-path support is not something a large share of installs has. */
+export declare const WINDOWS_MAX_PATH = 260;
+/**
+ * Reject a save path that will not survive the Windows path limit. The `.tmp` partial is the
+ * longest name written, so that is the length checked. Verbatim paths (`\\?\`) are exempt.
+ * No-op off Windows.
+ */
+export declare function checkPathWithinLimit(savePath: string, platform: NodeJS.Platform): string | undefined;

package/dist/downloads/disk.js

@@ -0,0 +1,88 @@
+/**
+ * Disk-failure tagging and preflight checks. Port of `src-tauri/src/core/downloads/disk.rs`.
+ *
+ * Every filesystem error on the download path is rendered as `Error: [<tag>] <detail>`; the app's
+ * telemetry (`classifyDownloadFailure` in `web-app/src/lib/telemetry.ts`) reads the tag out of the
+ * string. Tags are the contract (`contracts/errors.ts`), the detail text is not.
+ *
+ * Node reports OS errors as libuv codes (`ENOSPC`, `EACCES`, …) on every platform — on Windows libuv
+ * already maps Win32 codes (ERROR_DISK_FULL → ENOSPC, ERROR_SHARING_VIOLATION → EBUSY, …), so one
+ * table covers both sides of the Rust `cfg(unix)` / `cfg(windows)` split.
+ */
+const CODE_TO_TAG = {
+    ENOSPC: 'disk_full',
+    EDQUOT: 'disk_full',
+    EFBIG: 'disk_full',
+    EACCES: 'disk_permission',
+    EPERM: 'disk_permission',
+    EROFS: 'disk_permission',
+    ETXTBSY: 'disk_file_locked',
+    EBUSY: 'disk_file_locked',
+    ENAMETOOLONG: 'disk_path_too_long',
+    ENODEV: 'disk_device_lost',
+    ENXIO: 'disk_device_lost',
+    ESTALE: 'disk_device_lost',
+    EIO: 'disk_device_lost',
+    // Rust: ErrorKind::NotFound → DeviceLost (a share or volume that vanished mid-transfer).
+    ENOENT: 'disk_device_lost',
+};
+/** Classify a Node fs error into its subcause tag; unknown → `disk_io`. */
+export function classifyIoError(error) {
+    const code = error?.code;
+    return (code !== undefined && CODE_TO_TAG[code]) || 'disk_io';
+}
+/** `Error: [<tag>] <message>` — the shape the frontend parses. */
+export function diskErrToString(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return `Error: [${classifyIoError(error)}] ${message}`;
+}
+/** Same shape for a preflight refusal that has no fs error behind it. */
+export function diskFaultMessage(tag, detail) {
+    return `Error: [${tag}] ${detail}`;
+}
+/** Bytes never consumed on top of the download itself (a volume at zero free bytes kills the app). */
+export const FREE_SPACE_HEADROOM = 512 * 1024 * 1024;
+/** Bytes still to be written given the partial files already on disk (sizes of existing `.tmp`). */
+export function remainingBytes(totalSize, partialSizes) {
+    const already = partialSizes.reduce((n, s) => n + s, 0);
+    return totalSize > already ? totalSize - already : 0;
+}
+/** Human-readable size for the refusal message. */
+export function formatBytes(bytes) {
+    const GB = 1024 * 1024 * 1024;
+    const MB = 1024 * 1024;
+    if (bytes >= GB)
+        return `${(bytes / GB).toFixed(1)} GB`;
+    return `${Math.max(bytes / MB, 1).toFixed(0)} MB`;
+}
+/**
+ * Refuse before the first byte when the volume cannot hold the download. `availableBytes` is
+ * `undefined` when the volume cannot be identified — then the check passes (an unidentifiable
+ * volume is not a reason to block). Returns the tagged message, or `undefined` when there is room.
+ */
+export function checkFreeSpace(availableBytes, needed) {
+    if (needed === 0 || availableBytes === undefined)
+        return undefined;
+    const required = needed + FREE_SPACE_HEADROOM;
+    if (availableBytes >= required)
+        return undefined;
+    return diskFaultMessage('disk_full', `Not enough free disk space: ${formatBytes(required)} needed, ${formatBytes(availableBytes)} available`);
+}
+/** Legacy Windows MAX_PATH; long-path support is not something a large share of installs has. */
+export const WINDOWS_MAX_PATH = 260;
+/**
+ * Reject a save path that will not survive the Windows path limit. The `.tmp` partial is the
+ * longest name written, so that is the length checked. Verbatim paths (`\\?\`) are exempt.
+ * No-op off Windows.
+ */
+export function checkPathWithinLimit(savePath, platform) {
+    if (platform !== 'win32')
+        return undefined;
+    if (savePath.startsWith('\\\\?\\'))
+        return undefined;
+    const effective = Array.from(savePath).length + '.tmp'.length;
+    if (effective < WINDOWS_MAX_PATH)
+        return undefined;
+    return diskFaultMessage('disk_path_too_long', `File path is ${effective} characters, over the ${WINDOWS_MAX_PATH}-character Windows limit. Move the Jan data folder closer to the drive root and retry.`);
+}
+//# sourceMappingURL=disk.js.map

package/dist/downloads/disk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disk.js","sourceRoot":"","sources":["../../src/downloads/disk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,MAAM,WAAW,GAAiC;IAChD,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,KAAK,EAAE,WAAW;IAClB,MAAM,EAAE,iBAAiB;IACzB,KAAK,EAAE,iBAAiB;IACxB,KAAK,EAAE,iBAAiB;IACxB,OAAO,EAAE,kBAAkB;IAC3B,KAAK,EAAE,kBAAkB;IACzB,YAAY,EAAE,oBAAoB;IAClC,MAAM,EAAE,kBAAkB;IAC1B,KAAK,EAAE,kBAAkB;IACzB,MAAM,EAAE,kBAAkB;IAC1B,GAAG,EAAE,kBAAkB;IACvB,yFAAyF;IACzF,MAAM,EAAE,kBAAkB;CAC3B,CAAA;AAED,2EAA2E;AAC3E,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,MAAM,IAAI,GAAI,KAA2C,EAAE,IAAI,CAAA;IAC/D,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,SAAS,CAAA;AAC/D,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtE,OAAO,WAAW,eAAe,CAAC,KAAK,CAAC,KAAK,OAAO,EAAE,CAAA;AACxD,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,GAAiB,EAAE,MAAc;IAChE,OAAO,WAAW,GAAG,KAAK,MAAM,EAAE,CAAA;AACpC,CAAC;AAED,sGAAsG;AACtG,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAA;AAEpD,oGAAoG;AACpG,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,YAAsB;IACtE,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;IACvD,OAAO,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;AACtD,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAA;IAC7B,MAAM,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;IACtB,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAA;IACvD,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAA;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,cAAkC,EAAE,MAAc;IAC/E,IAAI,MAAM,KAAK,CAAC,IAAI,cAAc,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAClE,MAAM,QAAQ,GAAG,MAAM,GAAG,mBAAmB,CAAA;IAC7C,IAAI,cAAc,IAAI,QAAQ;QAAE,OAAO,SAAS,CAAA;IAChD,OAAO,gBAAgB,CACrB,WAAW,EACX,+BAA+B,WAAW,CAAC,QAAQ,CAAC,YAAY,WAAW,CAAC,cAAc,CAAC,YAAY,CACxG,CAAA;AACH,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAA;AAEnC;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,QAAyB;IAC9E,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAA;IAC1C,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAA;IACpD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC7D,IAAI,SAAS,GAAG,gBAAgB;QAAE,OAAO,SAAS,CAAA;IAClD,OAAO,gBAAgB,CACrB,oBAAoB,EACpB,gBAAgB,SAAS,yBAAyB,gBAAgB,wFAAwF,CAC3J,CAAA;AACH,CAAC"}

package/dist/downloads/downloader.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Resumable multi-file downloader. Port of `_download_files_internal` / `download_single_file` in
+ * `src-tauri/src/core/downloads/helpers.rs` and the task registry in `commands.rs`.
+ *
+ * Behaviour that is a contract with the app (PLAN.md §8.2 "Downloads"):
+ * - `save_path` is relative to `<data>` and must stay inside it (symlinked prefixes compared resolved)
+ * - `.tmp` + `.url` sidecars; resume only when `resume` is set, the `.tmp` exists and `.url` matches
+ * - `Range: bytes=N-` → 206 + validated `Content-Range`; 200/416 → restart from 0; 408/429/5xx retry
+ * - 5 retries per stall, counter reset after every 1 MiB of fresh progress
+ * - combined progress `{transferred,total}` after resume, every 10 MiB per file, per file end, task end
+ * - verification (size, sha256) after all files; on failure the file and its directory (non-recursive)
+ *   are removed and the task fails; cancel keeps every partial and finished file
+ * - preflight: Windows path limit, free space with 512 MiB headroom (skipped when unknown)
+ * - every fs error is rendered `Error: [disk_*] …`
+ *
+ * I/O is injected (`fetch`, fs, free-space probe, sleep) so the whole flow is testable against a
+ * scripted HTTP server without touching the network or the real data folder.
+ */
+import type { CoreEvents } from '../contracts/index.js';
+import type { ProxyConfig } from './protocol.js';
+import type { VerifyDeps } from './verify.js';
+export interface DownloadItem {
+    url: string;
+    /** Relative to `<data>`. */
+    save_path: string;
+    sha256?: string | null;
+    size?: number | null;
+    model_id?: string | null;
+    proxy?: ProxyConfig | null;
+}
+export interface DownloadOptions {
+    headers?: Record<string, string>;
+    resume?: boolean;
+}
+export declare const DOWNLOAD_CANCELLED = "Download cancelled";
+export interface DownloaderDeps {
+    dataFolder: string;
+    platform: NodeJS.Platform;
+    fetch: typeof fetch;
+    /** Build the fetch used for one item; the seam for a per-item proxy (PLAN.md risk 13). */
+    fetchFor?: (item: DownloadItem, base: typeof fetch) => typeof fetch;
+    /** Free bytes on the volume holding `path`, or `undefined` when unknown. */
+    availableSpace?: (path: string) => Promise<number | undefined>;
+    sleep?: (ms: number, signal: AbortSignal) => Promise<void>;
+    retryBaseMs?: number;
+    verify?: VerifyDeps;
+    emit: DownloaderEmit;
+    log?: (level: 'info' | 'warn', msg: string) => void;
+}
+/** The events a download raises; narrow on purpose, so a caller cannot be handed anything else. */
+export type DownloaderEventName = 'download:progress' | 'download:stage' | 'model:validation-started';
+export type DownloaderEmit = <K extends DownloaderEventName>(name: K, payload: CoreEvents[K]) => void;
+export declare function defaultAvailableSpace(path: string): Promise<number | undefined>;
+export declare function defaultSleep(ms: number, signal: AbortSignal): Promise<void>;
+/** Resolve the longest existing prefix through symlinks, then re-append the rest (Rust `canonicalize_existing_prefix`). */
+export declare function canonicalizeExistingPrefix(path: string): Promise<string>;
+export declare class Downloader {
+    private readonly tasks;
+    private readonly deps;
+    constructor(deps: DownloaderDeps);
+    /** Task ids currently running. */
+    active(): string[];
+    /** Cancel a running task. Keeps partials and finished files. */
+    cancel(taskId: string): boolean;
+    /**
+     * Download every item of `taskId`. A second call with the same id supersedes the first (which
+     * observes a cancellation but leaves the files to the newcomer).
+     */
+    download(taskId: string, items: DownloadItem[], options?: DownloadOptions): Promise<void>;
+    private run;
+    private preflightSize;
+    private request;
+    private requestWithRetry;
+    private downloadOne;
+}