@atomic-chat/core 0.5.1

package/dist/downloads/verify.js

@@ -0,0 +1,74 @@
+/**
+ * Post-download verification (size, then sha256). Port of `validate_downloaded_file` in
+ * `src-tauri/src/core/downloads/helpers.rs`. Messages are the app's user-facing strings.
+ */
+import { createHash } from 'node:crypto';
+import { createReadStream } from 'node:fs';
+import { stat } from 'node:fs/promises';
+export const HASH_MISMATCH_MESSAGE = 'Hash verification failed. The downloaded file is corrupted or has been tampered with.';
+export const VALIDATION_CANCELLED_MESSAGE = 'Validation cancelled';
+/** Streaming SHA-256 (lowercase hex), abortable between chunks. */
+export function sha256File(path, signal) {
+    return new Promise((resolve, reject) => {
+        const hash = createHash('sha256');
+        const stream = createReadStream(path);
+        const onAbort = () => {
+            stream.destroy();
+            reject(new Error(VALIDATION_CANCELLED_MESSAGE));
+        };
+        if (signal?.aborted)
+            return onAbort();
+        signal?.addEventListener('abort', onAbort, { once: true });
+        stream.on('data', (chunk) => hash.update(chunk));
+        stream.on('error', (e) => {
+            signal?.removeEventListener('abort', onAbort);
+            reject(e);
+        });
+        stream.on('end', () => {
+            signal?.removeEventListener('abort', onAbort);
+            resolve(hash.digest('hex'));
+        });
+    });
+}
+export const defaultVerifyDeps = {
+    fileSize: async (p) => (await stat(p)).size,
+    sha256: sha256File,
+};
+/**
+ * Throws with the app's message on mismatch. Skips entirely when neither sha256 nor size is
+ * given; checks the size first (cheap), then the hash.
+ */
+export async function verifyDownloadedFile(item, savePath, deps = defaultVerifyDeps, signal) {
+    const hasSha = item.sha256 !== undefined && item.sha256 !== null;
+    const hasSize = item.size !== undefined && item.size !== null;
+    if (!hasSha && !hasSize)
+        return;
+    if (hasSize) {
+        let actual;
+        try {
+            actual = await deps.fileSize(savePath);
+        }
+        catch (e) {
+            throw new Error(`Failed to verify file size: ${e.message}`);
+        }
+        if (actual !== item.size) {
+            throw new Error(`Size verification failed. Expected ${item.size} bytes but got ${actual} bytes.`);
+        }
+    }
+    if (signal?.aborted)
+        throw new Error(VALIDATION_CANCELLED_MESSAGE);
+    if (hasSha) {
+        let computed;
+        try {
+            computed = await deps.sha256(savePath, signal);
+        }
+        catch (e) {
+            if (e.message === VALIDATION_CANCELLED_MESSAGE)
+                throw e;
+            throw new Error(`Failed to verify file integrity: ${e.message}`);
+        }
+        if (computed !== item.sha256)
+            throw new Error(HASH_MISMATCH_MESSAGE);
+    }
+}
+//# sourceMappingURL=verify.js.map

package/dist/downloads/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/downloads/verify.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAEvC,MAAM,CAAC,MAAM,qBAAqB,GAChC,uFAAuF,CAAA;AACzF,MAAM,CAAC,MAAM,4BAA4B,GAAG,sBAAsB,CAAA;AAYlE,mEAAmE;AACnE,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,MAAoB;IAC3D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;QACjC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,MAAM,CAAC,OAAO,EAAE,CAAA;YAChB,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAA;QACjD,CAAC,CAAA;QACD,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,OAAO,EAAE,CAAA;QACrC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1D,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QAChD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACvB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC7C,MAAM,CAAC,CAAC,CAAC,CAAA;QACX,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC7C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QAC7B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAe;IAC3C,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;IAC3C,MAAM,EAAE,UAAU;CACnB,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAgB,EAChB,QAAgB,EAChB,OAAmB,iBAAiB,EACpC,MAAoB;IAEpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAA;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAA;IAC7D,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO;QAAE,OAAM;IAC/B,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,MAAc,CAAA;QAClB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACxC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,+BAAgC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;QACxE,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,IAAI,kBAAkB,MAAM,SAAS,CAAC,CAAA;QACnG,CAAC;IACH,CAAC;IACD,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAClE,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,QAAgB,CAAA;QACpB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAChD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAAW,CAAC,OAAO,KAAK,4BAA4B;gBAAE,MAAM,CAAC,CAAA;YAClE,MAAM,IAAI,KAAK,CAAC,oCAAqC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;QAC7E,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;IACtE,CAAC;AACH,CAAC"}

package/dist/events/emitter.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Typed event emitter over the `CoreEvents` catalog with a replay ring, so the SSE bridge can
+ * resume a client from a cursor (`id: <instance_id>:<seq>`, PLAN.md §3.5). Listeners that throw
+ * never break the emitter.
+ */
+import type { CoreEventName, CoreEventRecord, CoreEvents } from '../contracts/index.js';
+export declare const REPLAY_RING_SIZE = 1000;
+export type AnyListener = (record: CoreEventRecord) => void;
+export interface CoreEmitterOptions {
+    instanceId: string;
+    now?: () => number;
+    ringSize?: number;
+    /** A listener threw: delivery goes on, but the throw is a defect worth reporting. */
+    onListenerError?: (event: CoreEventName, error: unknown) => void;
+}
+export declare class CoreEmitter {
+    readonly instanceId: string;
+    private readonly inner;
+    private readonly anyListeners;
+    private readonly ring;
+    private readonly ringSize;
+    private readonly now;
+    private readonly onListenerError;
+    private seq;
+    constructor(options: CoreEmitterOptions);
+    /** Sequence number of the last emitted event (0 before any). */
+    get lastSeq(): number;
+    on<K extends CoreEventName>(name: K, listener: (payload: CoreEvents[K]) => void): () => void;
+    once<K extends CoreEventName>(name: K, listener: (payload: CoreEvents[K]) => void): () => void;
+    /** Receive every event as a serialisable record — used by the SSE and log bridges. */
+    onAny(listener: AnyListener): () => void;
+    emit<K extends CoreEventName>(name: K, payload: CoreEvents[K]): CoreEventRecord<K>;
+    /**
+     * Records after `afterSeq`, or `undefined` when they have fallen out of the ring (the client must
+     * resync from a fresh snapshot). `afterSeq = 0` replays everything still buffered only when the
+     * ring has never overflowed.
+     */
+    replayAfter(afterSeq: number): CoreEventRecord[] | undefined;
+    private listenerFailed;
+    /** Cursor string a client hands back on reconnect. */
+    cursor(seq?: number): string;
+    /** Parse a cursor; `undefined` when it belongs to another instance or is malformed. */
+    parseCursor(cursor: string): number | undefined;
+}

package/dist/events/emitter.js

@@ -0,0 +1,104 @@
+/**
+ * Typed event emitter over the `CoreEvents` catalog with a replay ring, so the SSE bridge can
+ * resume a client from a cursor (`id: <instance_id>:<seq>`, PLAN.md §3.5). Listeners that throw
+ * never break the emitter.
+ */
+import { EventEmitter } from 'node:events';
+export const REPLAY_RING_SIZE = 1000;
+export class CoreEmitter {
+    instanceId;
+    inner = new EventEmitter({ captureRejections: false });
+    anyListeners = new Set();
+    ring = [];
+    ringSize;
+    now;
+    onListenerError;
+    seq = 0;
+    constructor(options) {
+        this.instanceId = options.instanceId;
+        this.now = options.now ?? Date.now;
+        this.ringSize = options.ringSize ?? REPLAY_RING_SIZE;
+        this.onListenerError = options.onListenerError;
+        this.inner.setMaxListeners(0);
+    }
+    /** Sequence number of the last emitted event (0 before any). */
+    get lastSeq() {
+        return this.seq;
+    }
+    on(name, listener) {
+        const wrapped = (payload) => listener(payload);
+        this.inner.on(name, wrapped);
+        return () => this.inner.off(name, wrapped);
+    }
+    once(name, listener) {
+        const wrapped = (payload) => listener(payload);
+        this.inner.once(name, wrapped);
+        return () => this.inner.off(name, wrapped);
+    }
+    /** Receive every event as a serialisable record — used by the SSE and log bridges. */
+    onAny(listener) {
+        this.anyListeners.add(listener);
+        return () => {
+            this.anyListeners.delete(listener);
+        };
+    }
+    emit(name, payload) {
+        const record = { seq: ++this.seq, ts: this.now(), name, payload };
+        this.ring.push(record);
+        if (this.ring.length > this.ringSize)
+            this.ring.splice(0, this.ring.length - this.ringSize);
+        try {
+            this.inner.emit(name, payload);
+        }
+        catch (error) {
+            // A listener threw; the event is still recorded and delivered to the others.
+            this.listenerFailed(name, error);
+        }
+        for (const l of this.anyListeners) {
+            try {
+                l(record);
+            }
+            catch (error) {
+                // same: never let a bridge failure poison the emitter
+                this.listenerFailed(name, error);
+            }
+        }
+        return record;
+    }
+    /**
+     * Records after `afterSeq`, or `undefined` when they have fallen out of the ring (the client must
+     * resync from a fresh snapshot). `afterSeq = 0` replays everything still buffered only when the
+     * ring has never overflowed.
+     */
+    replayAfter(afterSeq) {
+        const oldest = this.ring[0];
+        if (afterSeq >= this.seq)
+            return [];
+        if (oldest === undefined)
+            return afterSeq === 0 ? [] : undefined;
+        if (afterSeq < oldest.seq - 1)
+            return undefined;
+        return this.ring.filter((r) => r.seq > afterSeq);
+    }
+    listenerFailed(name, error) {
+        try {
+            this.onListenerError?.(name, error);
+        }
+        catch {
+            // reporting a listener failure must not become one
+        }
+    }
+    /** Cursor string a client hands back on reconnect. */
+    cursor(seq = this.seq) {
+        return `${this.instanceId}:${seq}`;
+    }
+    /** Parse a cursor; `undefined` when it belongs to another instance or is malformed. */
+    parseCursor(cursor) {
+        const colon = cursor.lastIndexOf(':');
+        if (colon < 0 || cursor.slice(0, colon) !== this.instanceId)
+            return undefined;
+        const seq = Number(cursor.slice(colon + 1));
+        return Number.isInteger(seq) && seq >= 0 ? seq : undefined;
+    }
+}
+//# sourceMappingURL=emitter.js.map

package/dist/events/emitter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emitter.js","sourceRoot":"","sources":["../../src/events/emitter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAG1C,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAA;AAYpC,MAAM,OAAO,WAAW;IACb,UAAU,CAAQ;IACV,KAAK,GAAG,IAAI,YAAY,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAA;IACtD,YAAY,GAAG,IAAI,GAAG,EAAe,CAAA;IACrC,IAAI,GAAsB,EAAE,CAAA;IAC5B,QAAQ,CAAQ;IAChB,GAAG,CAAc;IACjB,eAAe,CAA8D;IACtF,GAAG,GAAG,CAAC,CAAA;IAEf,YAAY,OAA2B;QACrC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;QACpC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;QAClC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,gBAAgB,CAAA;QACpD,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAA;QAC9C,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;IAC/B,CAAC;IAED,gEAAgE;IAChE,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,GAAG,CAAA;IACjB,CAAC;IAED,EAAE,CAA0B,IAAO,EAAE,QAA0C;QAC7E,MAAM,OAAO,GAAG,CAAC,OAAsB,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC7D,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC5B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC5C,CAAC;IAED,IAAI,CAA0B,IAAO,EAAE,QAA0C;QAC/E,MAAM,OAAO,GAAG,CAAC,OAAsB,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC7D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC9B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC5C,CAAC;IAED,sFAAsF;IACtF,KAAK,CAAC,QAAqB;QACzB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC/B,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QACpC,CAAC,CAAA;IACH,CAAC;IAED,IAAI,CAA0B,IAAO,EAAE,OAAsB;QAC3D,MAAM,MAAM,GAAuB,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QACrF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACtB,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC3F,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6EAA6E;YAC7E,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAClC,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,CAAC,CAAC,MAAM,CAAC,CAAA;YACX,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,sDAAsD;gBACtD,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YAClC,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;;OAIG;IACH,WAAW,CAAC,QAAgB;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC3B,IAAI,QAAQ,IAAI,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAA;QACnC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QAChE,IAAI,QAAQ,GAAG,MAAM,CAAC,GAAG,GAAG,CAAC;YAAE,OAAO,SAAS,CAAA;QAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,QAAQ,CAAC,CAAA;IAClD,CAAC;IAEO,cAAc,CAAC,IAAmB,EAAE,KAAc;QACxD,IAAI,CAAC;YACH,IAAI,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG;QACnB,OAAO,GAAG,IAAI,CAAC,UAAU,IAAI,GAAG,EAAE,CAAA;IACpC,CAAC;IAED,uFAAuF;IACvF,WAAW,CAAC,MAAc;QACxB,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QACrC,IAAI,KAAK,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAA;QAC7E,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;QAC3C,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;IAC5D,CAAC;CACF"}

package/dist/events/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Typed EventEmitter over the contracts/events catalog with a replay ring; onAny() feeds the SSE and
+ * log bridges. See PLAN.md §3.5.
+ */
+export * from './emitter.js';

package/dist/events/index.js

@@ -0,0 +1,6 @@
+/**
+ * Typed EventEmitter over the contracts/events catalog with a replay ring; onAny() feeds the SSE and
+ * log bridges. See PLAN.md §3.5.
+ */
+export * from './emitter.js';
+//# sourceMappingURL=index.js.map

package/dist/events/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/events/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,cAAc,cAAc,CAAA"}

package/dist/hardware/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * SystemInfo / SystemUsage via system tools, supported-feature tiers, app-injected override.
+ *
+ * Ported from: src-tauri/plugins/tauri-plugin-hardware, backend.rs get_supported_features
+ * See PLAN.md §3.2. Public API of this module is exported from this file only.
+ */
+export * from './override.js';

package/dist/hardware/index.js

@@ -0,0 +1,8 @@
+/**
+ * SystemInfo / SystemUsage via system tools, supported-feature tiers, app-injected override.
+ *
+ * Ported from: src-tauri/plugins/tauri-plugin-hardware, backend.rs get_supported_features
+ * See PLAN.md §3.2. Public API of this module is exported from this file only.
+ */
+export * from './override.js';
+//# sourceMappingURL=index.js.map

package/dist/hardware/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/hardware/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,cAAc,eAAe,CAAA"}

package/dist/hardware/override.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Hardware facts the desktop app injects (PLAN.md §2 decision 10, risk 10).
+ *
+ * The core probes hardware with shell tools, which is enough to see that a GPU exists and roughly
+ * what it is. It is not enough to see an NVIDIA driver's exact version or a GPU's compute
+ * capability — those come from NVML and from a Vulkan enumeration, both of which need native
+ * libraries the core deliberately does not link. Getting them wrong is not cosmetic: the CUDA tier
+ * a backend is chosen from is decided by exactly those numbers, and on Windows the only signal for
+ * an AMD gfx target is a PCI device id from Vulkan.
+ *
+ * So the app, which already has `tauri-plugin-hardware`, hands the core what it measured, and the
+ * core prefers it over its own probe. The rule is one-directional: an override replaces the probe
+ * for as long as it stands, and the core never merges the two — a half-probed, half-injected GPU
+ * list would be a third description of the machine that matches neither side.
+ *
+ * Not persisted, on purpose. Hardware changes between runs (an eGPU, a driver update, a different
+ * machine reading the same data folder over a network share), and a stale file claiming a GPU that
+ * is no longer there would pick a backend that cannot start. The app re-injects on every attach.
+ */
+import type { GpuProbeInfo, HardwareOverride, HardwareOverrideInput } from '../contracts/index.js';
+/** Wire types live in `contracts/hardware.ts`; re-exported so existing imports keep working. */
+export type { HardwareOverride, HardwareOverrideInput } from '../contracts/index.js';
+/**
+ * The override currently in force, if any.
+ *
+ * One per core process, held in memory. Reading it is how the backend selection path asks "do I
+ * have better numbers than my own probe?".
+ */
+export declare class HardwareOverrideStore {
+    private readonly now;
+    private current;
+    constructor(now?: () => number);
+    get(): HardwareOverride | undefined;
+    /** GPUs to use for backend selection: the override's when there is one, otherwise the probe's. */
+    gpus(probed: readonly GpuProbeInfo[]): GpuProbeInfo[];
+    cpuExtensions(probed: readonly string[]): string[];
+    /**
+     * Accept an injection.
+     *
+     * A malformed payload is rejected rather than partly applied: this replaces the core's own view
+     * of the machine, and a half-read GPU list is worse than no override at all.
+     */
+    set(input: HardwareOverrideInput): HardwareOverride;
+    /** Drop the override and go back to the core's own probe. */
+    clear(): boolean;
+}

package/dist/hardware/override.js

@@ -0,0 +1,81 @@
+/**
+ * Hardware facts the desktop app injects (PLAN.md §2 decision 10, risk 10).
+ *
+ * The core probes hardware with shell tools, which is enough to see that a GPU exists and roughly
+ * what it is. It is not enough to see an NVIDIA driver's exact version or a GPU's compute
+ * capability — those come from NVML and from a Vulkan enumeration, both of which need native
+ * libraries the core deliberately does not link. Getting them wrong is not cosmetic: the CUDA tier
+ * a backend is chosen from is decided by exactly those numbers, and on Windows the only signal for
+ * an AMD gfx target is a PCI device id from Vulkan.
+ *
+ * So the app, which already has `tauri-plugin-hardware`, hands the core what it measured, and the
+ * core prefers it over its own probe. The rule is one-directional: an override replaces the probe
+ * for as long as it stands, and the core never merges the two — a half-probed, half-injected GPU
+ * list would be a third description of the machine that matches neither side.
+ *
+ * Not persisted, on purpose. Hardware changes between runs (an eGPU, a driver update, a different
+ * machine reading the same data folder over a network share), and a stale file claiming a GPU that
+ * is no longer there would pick a backend that cannot start. The app re-injects on every attach.
+ */
+import { AtomicCoreError } from '../contracts/index.js';
+/**
+ * The override currently in force, if any.
+ *
+ * One per core process, held in memory. Reading it is how the backend selection path asks "do I
+ * have better numbers than my own probe?".
+ */
+export class HardwareOverrideStore {
+    now;
+    current;
+    constructor(now = Date.now) {
+        this.now = now;
+    }
+    get() {
+        return this.current ? structuredClone(this.current) : undefined;
+    }
+    /** GPUs to use for backend selection: the override's when there is one, otherwise the probe's. */
+    gpus(probed) {
+        return this.current ? structuredClone(this.current.gpus) : [...probed];
+    }
+    cpuExtensions(probed) {
+        return this.current?.cpu_extensions ? [...this.current.cpu_extensions] : [...probed];
+    }
+    /**
+     * Accept an injection.
+     *
+     * A malformed payload is rejected rather than partly applied: this replaces the core's own view
+     * of the machine, and a half-read GPU list is worse than no override at all.
+     */
+    set(input) {
+        if (!Array.isArray(input.gpus))
+            throw new AtomicCoreError('INVALID_ARGUMENT', 'A hardware override needs a `gpus` array.', 'send the list from tauri-plugin-hardware, empty when the machine has no GPU');
+        const gpus = input.gpus.map((gpu, index) => {
+            if (!gpu || typeof gpu !== 'object' || Array.isArray(gpu))
+                throw new AtomicCoreError('INVALID_ARGUMENT', `gpus[${index}] is not an object`);
+            return gpu;
+        });
+        const extensions = input.cpu_extensions === undefined
+            ? undefined
+            : toStringArray(input.cpu_extensions, 'cpu_extensions').map((value) => value.toLowerCase());
+        this.current = {
+            gpus,
+            ...(extensions ? { cpu_extensions: extensions } : {}),
+            ...(typeof input.os_type === 'string' ? { os_type: input.os_type } : {}),
+            ...(typeof input.source === 'string' ? { source: input.source } : {}),
+            received_at: this.now(),
+        };
+        return structuredClone(this.current);
+    }
+    /** Drop the override and go back to the core's own probe. */
+    clear() {
+        const had = this.current !== undefined;
+        this.current = undefined;
+        return had;
+    }
+}
+function toStringArray(value, field) {
+    if (!Array.isArray(value) || value.some((entry) => typeof entry !== 'string'))
+        throw new AtomicCoreError('INVALID_ARGUMENT', `${field} must be an array of strings`);
+    return value;
+}
+//# sourceMappingURL=override.js.map

package/dist/hardware/override.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"override.js","sourceRoot":"","sources":["../../src/hardware/override.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAMvD;;;;;GAKG;AACH,MAAM,OAAO,qBAAqB;IAGH;IAFrB,OAAO,CAA8B;IAE7C,YAA6B,MAAoB,IAAI,CAAC,GAAG;QAA5B,QAAG,GAAH,GAAG,CAAyB;IAAG,CAAC;IAE7D,GAAG;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACjE,CAAC;IAED,kGAAkG;IAClG,IAAI,CAAC,MAA+B;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAA;IACxE,CAAC;IAED,aAAa,CAAC,MAAyB;QACrC,OAAO,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAA;IACtF,CAAC;IAED;;;;;OAKG;IACH,GAAG,CAAC,KAA4B;QAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;YAC5B,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,2CAA2C,EAC3C,6EAA6E,CAC9E,CAAA;QACH,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YACzC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;gBACvD,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,QAAQ,KAAK,oBAAoB,CAAC,CAAA;YAClF,OAAO,GAAmB,CAAA;QAC5B,CAAC,CAAC,CAAA;QACF,MAAM,UAAU,GACd,KAAK,CAAC,cAAc,KAAK,SAAS;YAChC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;QAE/F,IAAI,CAAC,OAAO,GAAG;YACb,IAAI;YACJ,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAA;QACD,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACtC,CAAC;IAED,6DAA6D;IAC7D,KAAK;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAA;QACtC,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA;QACxB,OAAO,GAAG,CAAA;IACZ,CAAC;CACF;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAC3E,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,GAAG,KAAK,8BAA8B,CAAC,CAAA;IACvF,OAAO,KAAiB,CAAA;AAC1B,CAAC"}

package/dist/host/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Host entry (`atomic-chat-core/host`): what a program that *runs* the core needs beyond the
+ * `AtomicCore` facade. A host owns a data folder, finds or starts the daemon that owns it, reads the
+ * lock and the control token, and reports its own crashes — the CLI in `src/cli/` does exactly this,
+ * and an external host (the `atc` server CLI) must do it the same way rather than re-implement the
+ * lock semantics.
+ *
+ * Node-only, unlike `./client` and `./contracts`. Nothing here is new behaviour: every symbol is
+ * the public API of a module that already existed; this file only makes it reachable from outside
+ * the package.
+ */
+export * from '../config/index.js';
+export * from '../lock/index.js';
+export * from '../cli/index.js';
+export * from '../telemetry/index.js';

package/dist/host/index.js

@@ -0,0 +1,16 @@
+/**
+ * Host entry (`atomic-chat-core/host`): what a program that *runs* the core needs beyond the
+ * `AtomicCore` facade. A host owns a data folder, finds or starts the daemon that owns it, reads the
+ * lock and the control token, and reports its own crashes — the CLI in `src/cli/` does exactly this,
+ * and an external host (the `atc` server CLI) must do it the same way rather than re-implement the
+ * lock semantics.
+ *
+ * Node-only, unlike `./client` and `./contracts`. Nothing here is new behaviour: every symbol is
+ * the public API of a module that already existed; this file only makes it reachable from outside
+ * the package.
+ */
+export * from '../config/index.js';
+export * from '../lock/index.js';
+export * from '../cli/index.js';
+export * from '../telemetry/index.js';
+//# sourceMappingURL=index.js.map

package/dist/host/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/host/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,cAAc,oBAAoB,CAAA;AAClC,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,uBAAuB,CAAA"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Library entry (Node). Re-exports the contracts and the `AtomicCore` facade.
+ */
+export * from './contracts/index.js';
+export { AtomicCore, CORE_VERSION } from './core/index.js';

package/dist/index.js

@@ -0,0 +1,6 @@
+/**
+ * Library entry (Node). Re-exports the contracts and the `AtomicCore` facade.
+ */
+export * from './contracts/index.js';
+export { AtomicCore, CORE_VERSION } from './core/index.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,cAAc,sBAAsB,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA"}

package/dist/integrations/catalog.d.ts

@@ -0,0 +1,67 @@
+/**
+ * The coding agents `launch` can wire to a local model — a port of
+ * `src-tauri/src/core/cli/integrations.rs`, which itself mirrors
+ * `web-app/src/constants/integrations.ts` so the CLI and the desktop Launch page configure the same
+ * set in the same order. The three GUI editors in the web list (`vscode`, `jetbrains`, `xcode`) are
+ * absent on purpose: they keep their provider in IDE storage with no writable config file.
+ *
+ * Order is contract: the app's drift test compares this list against the TypeScript source
+ * position by position, and `tests/cli-launch-catalog.test.mjs` compares it against the CLI.
+ */
+export type RunMode = 
+/** A terminal program: run it in the foreground and keep the model up exactly as long as it runs. */
+'terminal'
+/** A GUI app: the launcher returns at once, so the model stays up until Ctrl+C. */
+ | 'gui';
+export interface Agent {
+    /** Stable id, identical to the one in `integrations.ts`. */
+    id: string;
+    /** Display name (product names are not localised). */
+    name: string;
+    /** Binary probed on PATH, and the program we execute. */
+    detectBin: string;
+    /** Extra names accepted on the command line. */
+    aliases: readonly string[];
+    /** Whether a model id must be resolved before the agent can be configured. */
+    requiresModel: boolean;
+    /** Pass the endpoint WITH the API prefix (`/v1`). Claude Code and Goose append their own path. */
+    endpointWithPrefix: boolean;
+    docsUrl: string;
+    /** Argv appended after `detectBin` so the user lands in a session, not a help screen. */
+    runArgs: readonly string[];
+    runMode: RunMode;
+}
+/** Hermes Agent refuses to start below a 64K context window. Matches the Launch page. */
+export declare const HERMES_CONTEXT_LENGTH = 65536;
+export declare const AGENTS: readonly Agent[];
+/** Look an agent up by id, binary name, or alias. Case-insensitive. */
+export declare function findAgent(name: string): Agent | undefined;
+/** The endpoint an agent is pointed at: the base URL, plus the prefix only when it expects one. */
+export declare function apiUrlFor(agent: Agent, baseUrl: string, prefix: string): string;
+/**
+ * Provider credentials in the ambient environment that would override the config we just wrote.
+ * Cleared on the child before launching, or the agent quietly talks to a cloud provider instead.
+ */
+export declare const CONFLICTING_PROVIDER_ENV: readonly string[];
+/**
+ * Environment the spawned agent needs on top of its config file. Five agents are configured purely
+ * through environment variables that `configure_*` persists to the user's shell rc — that file is
+ * not live in a process we are about to spawn, so the same variables are set on the child.
+ */
+export declare function childEnv(agent: Agent, apiUrl: string, model: string, apiKey: string): Record<string, string>;
+/** Poolside wants the root without `/v1`; it appends its own paths. */
+export declare function poolsideStandaloneBaseUrl(apiUrl: string): string;
+/**
+ * Launchers that installers drop outside PATH. OpenClaw's installer writes into `~/.openclaw/bin`
+ * or `~/.local/bin` (or `$OPENCLAW_PREFIX`), which a login shell may not have on PATH yet. ZCode is a
+ * desktop app that puts nothing on PATH outside Linux, so its candidates are the executables its
+ * installers write. Every other agent installs onto PATH, and guessing would only produce false
+ * positives.
+ */
+export declare function offPathCandidates(bin: string, home: string | undefined, env?: NodeJS.ProcessEnv, platform?: NodeJS.Platform): string[];
+/**
+ * `launch` runs a bare llama-server, and Muse Code fetches `/muse-code/models` before its first
+ * turn — a catalogue only the desktop app's Local API Server serves. Refusing up front beats
+ * loading a model and handing the user Muse's own opaque failure.
+ */
+export declare const MUSE_CLI_REFUSAL: string[];