@atomic-chat/core 0.5.1

package/dist/models/model-yml.js

@@ -0,0 +1,63 @@
+/**
+ * `model.yml` codec. The app writes it with serde_yaml (`write_yaml`) and reads it back with
+ * `read_yaml`; the shape is `ModelYml` in `contracts/model-yml.ts`. Unknown keys are preserved on
+ * round-trip (PLAN.md §5.1); known keys are written in the app's order, `undefined` ones omitted.
+ */
+import { parse, stringify } from 'yaml';
+import { MODEL_YML_KEY_ORDER } from '../contracts/index.js';
+export class ModelYmlError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ModelYmlError';
+    }
+}
+const KNOWN = new Set(MODEL_YML_KEY_ORDER);
+export function parseModelYml(text) {
+    let raw;
+    try {
+        raw = parse(text);
+    }
+    catch (e) {
+        throw new ModelYmlError(`invalid YAML: ${e.message}`);
+    }
+    if (raw === null || typeof raw !== 'object' || Array.isArray(raw))
+        throw new ModelYmlError('model.yml is not a mapping');
+    const doc = raw;
+    if (typeof doc['model_path'] !== 'string')
+        throw new ModelYmlError('model.yml: missing model_path');
+    const name = typeof doc['name'] === 'string' ? doc['name'] : undefined;
+    return {
+        ...doc,
+        model_path: doc['model_path'],
+        name: name ?? '',
+        size_bytes: numberOr(doc['size_bytes'], 0),
+    };
+}
+function numberOr(v, fallback) {
+    return typeof v === 'number' && Number.isFinite(v) ? v : fallback;
+}
+/** Known keys first in the app's order, then unknown keys in their original order. */
+export function serializeModelYml(doc) {
+    const ordered = {};
+    for (const key of MODEL_YML_KEY_ORDER) {
+        const v = doc[key];
+        if (v !== undefined)
+            ordered[key] = v;
+    }
+    for (const [key, v] of Object.entries(doc)) {
+        if (!KNOWN.has(key) && v !== undefined)
+            ordered[key] = v;
+    }
+    return stringify(ordered, { lineWidth: 0 });
+}
+/** Rename the model id inside the path fields, as `update()` does when a model is renamed. */
+export function renameModelPaths(doc, modelsRootPrefix, oldId, newId) {
+    const from = `${modelsRootPrefix}/${oldId}`;
+    const to = `${modelsRootPrefix}/${newId}`;
+    const swap = (p) => (p === undefined ? undefined : p.replace(from, to));
+    const out = { ...doc, model_path: swap(doc.model_path) };
+    if (doc.mmproj_path !== undefined)
+        out.mmproj_path = swap(doc.mmproj_path);
+    return out;
+}
+//# sourceMappingURL=model-yml.js.map

package/dist/models/model-yml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-yml.js","sourceRoot":"","sources":["../../src/models/model-yml.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAG3D,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;IAC7B,CAAC;CACF;AAKD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,mBAAmB,CAAC,CAAA;AAElD,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,GAAY,CAAA;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;IACnB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,aAAa,CAAC,iBAAkB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;IAClE,CAAC;IACD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAC/D,MAAM,IAAI,aAAa,CAAC,4BAA4B,CAAC,CAAA;IACvD,MAAM,GAAG,GAAG,GAA8B,CAAA;IAC1C,IAAI,OAAO,GAAG,CAAC,YAAY,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,aAAa,CAAC,+BAA+B,CAAC,CAAA;IACnG,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACtE,OAAO;QACL,GAAG,GAAG;QACN,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC;QAC7B,IAAI,EAAE,IAAI,IAAI,EAAE;QAChB,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;KACvB,CAAA;AACvB,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU,EAAE,QAAgB;IAC5C,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;AACnE,CAAC;AAKD,sFAAsF;AACtF,MAAM,UAAU,iBAAiB,CAAC,GAAkB;IAClD,MAAM,OAAO,GAA4B,EAAE,CAAA;IAC3C,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACtC,MAAM,CAAC,GAAI,GAA+B,CAAC,GAAG,CAAC,CAAA;QAC/C,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACvC,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC1D,CAAC;IACD,OAAO,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAA;AAC7C,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,gBAAgB,CAC9B,GAAqB,EACrB,gBAAwB,EACxB,KAAa,EACb,KAAa;IAEb,MAAM,IAAI,GAAG,GAAG,gBAAgB,IAAI,KAAK,EAAE,CAAA;IAC3C,MAAM,EAAE,GAAG,GAAG,gBAAgB,IAAI,KAAK,EAAE,CAAA;IACzC,MAAM,IAAI,GAAG,CAAC,CAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAA;IAC3F,MAAM,GAAG,GAAqB,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAW,EAAE,CAAA;IACpF,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAW,CAAA;IACpF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/models/registry.d.ts

@@ -0,0 +1,51 @@
+/**
+ * The installed-model registry: the depth-first scan of `<data>/llamacpp/models` that both the app's
+ * extension (`list()`, index.ts:3438) and the Rust CLI (`list_chat_models_in`, cli/mod.rs:72) do, so
+ * all three see the same ids for the same folder.
+ *
+ * Rules that are contract, not implementation detail: a directory holding `model.yml` *is* a model
+ * and is never descended into; the id is its path relative to the models root with `\` rewritten to
+ * `/`; ids sort ascending; an unreadable or invalid `model.yml` is skipped, not fatal — one broken
+ * model must not hide the rest of the list.
+ */
+import type { LocalProviderId } from '../contracts/index.js';
+import type { DataLayout } from '../config/index.js';
+import type { ModelYmlDocument, ModelYmlInput } from './model-yml.js';
+export interface ModelEntry {
+    id: string;
+    /** Directory holding `model.yml`. */
+    dir: string;
+    yml: ModelYmlDocument;
+}
+export interface ResolvedModelPaths {
+    modelPath: string;
+    mmprojPath: string | undefined;
+}
+/** Scan errors are collected rather than thrown: `models list` must still print the good entries. */
+export interface ScanResult {
+    entries: ModelEntry[];
+    skipped: Array<{
+        dir: string;
+        error: string;
+    }>;
+}
+export declare class ModelRegistry {
+    private readonly layout;
+    private readonly provider;
+    constructor(layout: DataLayout, provider?: LocalProviderId);
+    get modelsDir(): string;
+    scan(): Promise<ScanResult>;
+    list(): Promise<ModelEntry[]>;
+    /** What `models list` prints: embedding models cannot serve `/v1/chat/completions`. */
+    listChatModels(): Promise<ModelEntry[]>;
+    find(id: string): Promise<ModelEntry | undefined>;
+    /** The CLI's wording, so a missing model reads the same from the core and from `jan-cli`. */
+    get(id: string): Promise<ModelEntry>;
+    read(id: string): Promise<ModelYmlDocument>;
+    /** Write `model.yml`, preserving unknown keys the caller carried over. */
+    write(id: string, doc: ModelYmlInput): Promise<void>;
+    /** Remove the model directory. Refuses an id that escapes the models root. */
+    remove(id: string): Promise<void>;
+    /** Absolute GGUF and mmproj paths (`resolve_model_by_id_in`: absolute stays, relative joins `<data>`). */
+    resolvePaths(yml: ModelYmlDocument): ResolvedModelPaths;
+}

package/dist/models/registry.js

@@ -0,0 +1,102 @@
+/**
+ * The installed-model registry: the depth-first scan of `<data>/llamacpp/models` that both the app's
+ * extension (`list()`, index.ts:3438) and the Rust CLI (`list_chat_models_in`, cli/mod.rs:72) do, so
+ * all three see the same ids for the same folder.
+ *
+ * Rules that are contract, not implementation detail: a directory holding `model.yml` *is* a model
+ * and is never descended into; the id is its path relative to the models root with `\` rewritten to
+ * `/`; ids sort ascending; an unreadable or invalid `model.yml` is skipped, not fatal — one broken
+ * model must not hide the rest of the list.
+ */
+import { mkdir, readdir, readFile, rm, writeFile } from 'node:fs/promises';
+import { isAbsolute, join, relative, sep } from 'node:path';
+import { AtomicCoreError } from '../contracts/index.js';
+import { MODEL_YML, modelDirFromId, modelIdFromDir, resolveDataRelative } from '../config/index.js';
+import { parseModelYml, serializeModelYml } from './model-yml.js';
+export class ModelRegistry {
+    layout;
+    provider;
+    constructor(layout, provider = 'llamacpp-upstream') {
+        this.layout = layout;
+        this.provider = provider;
+    }
+    get modelsDir() {
+        return this.layout.provider(this.provider).modelsDir;
+    }
+    async scan() {
+        const root = this.modelsDir;
+        const result = { entries: [], skipped: [] };
+        const stack = [root];
+        while (stack.length) {
+            const dir = stack.pop();
+            const ymlPath = join(dir, MODEL_YML);
+            const text = await readFile(ymlPath, 'utf8').catch(() => undefined);
+            if (text !== undefined) {
+                try {
+                    result.entries.push({ id: modelIdFromDir(root, dir), dir, yml: parseModelYml(text) });
+                }
+                catch (e) {
+                    result.skipped.push({ dir, error: e.message });
+                }
+                continue; // a model directory is a leaf, whether or not it parsed
+            }
+            const children = await readdir(dir, { withFileTypes: true }).catch(() => []);
+            for (const child of children)
+                if (child.isDirectory())
+                    stack.push(join(dir, child.name));
+        }
+        result.entries.sort((a, b) => (a.id < b.id ? -1 : a.id > b.id ? 1 : 0));
+        return result;
+    }
+    async list() {
+        return (await this.scan()).entries;
+    }
+    /** What `models list` prints: embedding models cannot serve `/v1/chat/completions`. */
+    async listChatModels() {
+        return (await this.list()).filter((e) => e.yml.embedding !== true);
+    }
+    async find(id) {
+        const dir = modelDirFromId(this.modelsDir, id);
+        const text = await readFile(join(dir, MODEL_YML), 'utf8').catch(() => undefined);
+        if (text === undefined)
+            return undefined;
+        return { id, dir, yml: parseModelYml(text) };
+    }
+    /** The CLI's wording, so a missing model reads the same from the core and from `jan-cli`. */
+    async get(id) {
+        const entry = await this.find(id);
+        if (!entry)
+            throw new AtomicCoreError('MODEL_NOT_FOUND', `Model '${id}' is not installed. Run \`atomic-chat-cli models list\` to see available models.`, join(modelDirFromId(this.modelsDir, id), MODEL_YML));
+        return entry;
+    }
+    async read(id) {
+        return (await this.get(id)).yml;
+    }
+    /** Write `model.yml`, preserving unknown keys the caller carried over. */
+    async write(id, doc) {
+        const dir = modelDirFromId(this.modelsDir, id);
+        await mkdir(dir, { recursive: true });
+        await writeFile(join(dir, MODEL_YML), serializeModelYml(doc), 'utf8');
+    }
+    /** Remove the model directory. Refuses an id that escapes the models root. */
+    async remove(id) {
+        const dir = modelDirFromId(this.modelsDir, id);
+        if (!isInside(this.modelsDir, dir))
+            throw new AtomicCoreError('INVALID_ARGUMENT', `Refusing to delete outside the models folder`, dir);
+        await rm(dir, { recursive: true, force: true });
+    }
+    /** Absolute GGUF and mmproj paths (`resolve_model_by_id_in`: absolute stays, relative joins `<data>`). */
+    resolvePaths(yml) {
+        const resolve = (p) => resolveDataRelative(this.layout.root, p, isAbsolute);
+        return {
+            modelPath: resolve(yml.model_path),
+            mmprojPath: yml.mmproj_path ? resolve(yml.mmproj_path) : undefined,
+        };
+    }
+}
+/** `<root>/<something>`, never `<root>` itself and never an id that climbs out with `..`. */
+function isInside(root, candidate) {
+    const rest = relative(root, candidate);
+    return rest.length > 0 && !rest.startsWith('..') && !rest.split(sep).includes('..');
+}
+//# sourceMappingURL=registry.js.map

package/dist/models/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/models/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC1E,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAEnG,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAqBjE,MAAM,OAAO,aAAa;IAEL;IACA;IAFnB,YACmB,MAAkB,EAClB,WAA4B,mBAAmB;QAD/C,WAAM,GAAN,MAAM,CAAY;QAClB,aAAQ,GAAR,QAAQ,CAAuC;IAC/D,CAAC;IAEJ,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAA;IACtD,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAA;QAC3B,MAAM,MAAM,GAAe,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;QACvD,MAAM,KAAK,GAAa,CAAC,IAAI,CAAC,CAAA;QAC9B,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAY,CAAA;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;YACpC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACnE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBACvF,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;gBAC3D,CAAC;gBACD,SAAQ,CAAC,wDAAwD;YACnE,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YAC5E,KAAK,MAAM,KAAK,IAAI,QAAQ;gBAAE,IAAI,KAAK,CAAC,WAAW,EAAE;oBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;QAC1F,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACvE,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,CAAC,IAAI;QACR,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAA;IACpC,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,cAAc;QAClB,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAA;IACpE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAU;QACnB,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QAC9C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAChF,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QACxC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAA;IAC9C,CAAC;IAED,6FAA6F;IAC7F,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACjC,IAAI,CAAC,KAAK;YACR,MAAM,IAAI,eAAe,CACvB,iBAAiB,EACjB,UAAU,EAAE,kFAAkF,EAC9F,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,SAAS,CAAC,CACpD,CAAA;QACH,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAU;QACnB,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA;IACjC,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,KAAK,CAAC,EAAU,EAAE,GAAkB;QACxC,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QAC9C,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACrC,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAA;IACvE,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QAC9C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC;YAChC,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,8CAA8C,EAAE,GAAG,CAAC,CAAA;QACpG,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACjD,CAAC;IAED,0GAA0G;IAC1G,YAAY,CAAC,GAAqB;QAChC,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,UAAU,CAAC,CAAA;QACnF,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;YAClC,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;SACnE,CAAA;IACH,CAAC;CACF;AAED,6FAA6F;AAC7F,SAAS,QAAQ,CAAC,IAAY,EAAE,SAAiB;IAC/C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IACtC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AACrF,CAAC"}

package/dist/models/shards.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Sharded GGUF sets (`-00001-of-000NN`). llama.cpp accepts only the first shard on `-m`.
+ * Verbatim port of the shard helpers in `extensions/llamacpp-upstream-extension/src/util.ts`.
+ *
+ * The marker appears either in the file name (`Model-00002-of-00003.gguf`) or in the directory
+ * name this app stores a downloaded shard under (`.../Model-00002-of-00003/model.gguf`).
+ */
+export interface GgufShardRef {
+    /** 1-based position in the set. */
+    index: number;
+    total: number;
+}
+/** Shard position of `path`, or `null` for a standalone model. */
+export declare function parseGgufShard(path: string): GgufShardRef | null;
+/** The same path with its marker pointed at `index`; unchanged without a marker. */
+export declare function ggufShardPath(path: string, index: number): string;
+/** Every path of the set, first shard first; a standalone model yields itself. */
+export declare function ggufShardSetPaths(path: string): string[];
+/** What llama.cpp must be handed: the first shard, or the path itself. */
+export declare function firstGgufShardPath(path: string): string;

package/dist/models/shards.js

@@ -0,0 +1,46 @@
+/**
+ * Sharded GGUF sets (`-00001-of-000NN`). llama.cpp accepts only the first shard on `-m`.
+ * Verbatim port of the shard helpers in `extensions/llamacpp-upstream-extension/src/util.ts`.
+ *
+ * The marker appears either in the file name (`Model-00002-of-00003.gguf`) or in the directory
+ * name this app stores a downloaded shard under (`.../Model-00002-of-00003/model.gguf`).
+ */
+const GGUF_SHARD_RE = /-(\d{5})-of-(\d{5})(?=\.gguf$|\/|$)/gi;
+function matchGgufShard(path) {
+    GGUF_SHARD_RE.lastIndex = 0;
+    let last = null;
+    for (let m = GGUF_SHARD_RE.exec(path); m; m = GGUF_SHARD_RE.exec(path))
+        last = m;
+    if (!last)
+        return null;
+    const index = Number(last[1]);
+    const total = Number(last[2]);
+    if (!index || !total || index > total)
+        return null;
+    return { index, total, start: last.index, end: last.index + last[0].length };
+}
+/** Shard position of `path`, or `null` for a standalone model. */
+export function parseGgufShard(path) {
+    const m = matchGgufShard(path);
+    return m ? { index: m.index, total: m.total } : null;
+}
+/** The same path with its marker pointed at `index`; unchanged without a marker. */
+export function ggufShardPath(path, index) {
+    const m = matchGgufShard(path);
+    if (!m)
+        return path;
+    const marker = `-${String(index).padStart(5, '0')}-of-${String(m.total).padStart(5, '0')}`;
+    return path.slice(0, m.start) + marker + path.slice(m.end);
+}
+/** Every path of the set, first shard first; a standalone model yields itself. */
+export function ggufShardSetPaths(path) {
+    const m = matchGgufShard(path);
+    if (!m)
+        return [path];
+    return Array.from({ length: m.total }, (_, i) => ggufShardPath(path, i + 1));
+}
+/** What llama.cpp must be handed: the first shard, or the path itself. */
+export function firstGgufShardPath(path) {
+    return ggufShardPath(path, 1);
+}
+//# sourceMappingURL=shards.js.map

package/dist/models/shards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shards.js","sourceRoot":"","sources":["../../src/models/shards.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,aAAa,GAAG,uCAAuC,CAAA;AAQ7D,SAAS,cAAc,CAAC,IAAY;IAClC,aAAa,CAAC,SAAS,GAAG,CAAC,CAAA;IAC3B,IAAI,IAAI,GAA2B,IAAI,CAAA;IACvC,KAAK,IAAI,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,GAAG,CAAC,CAAA;IAChF,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,KAAK,GAAG,KAAK;QAAE,OAAO,IAAI,CAAA;IAClD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;AAC9E,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;IAC9B,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AACtD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,KAAa;IACvD,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACnB,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;IAC1F,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;AAC5D,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IACrB,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAC9E,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;AAC/B,CAAC"}

package/dist/remote-access/cloudflared-args.d.ts

@@ -0,0 +1,41 @@
+/**
+ * How `cloudflared` is launched: which binary, which arguments, which environment. Pure.
+ *
+ * `cloudflared tunnel --url <origin>` opens a "quick tunnel": no Cloudflare account, no domain, and
+ * a fresh `https://<words>.trycloudflare.com` name on every start.
+ *
+ * Ported from: src-tauri/src/core/server/remote_access/process.rs (image-generation line, `767ff6350`).
+ */
+/** The core does not download the tunnel binary; this variable names one for dev and CLI use. */
+export declare const CLOUDFLARED_BIN_ENV = "ATOMIC_CLOUDFLARED_BIN";
+export declare function cloudflaredFileName(platform: NodeJS.Platform): string;
+/**
+ * The command line of one quick tunnel.
+ *
+ * `emptyConfig` switches off the lookup of `~/.cloudflared/config.yml`: a user who also runs a
+ * *named* tunnel has ingress rules there, none of which match a quick tunnel's hostname, so
+ * cloudflared itself would answer every request through ours with 404. `--no-autoupdate` because the
+ * binary ships signed inside the app bundle, and left to itself cloudflared replaces its own file.
+ */
+export declare function cloudflaredArgs(origin: string, protocol?: string, emptyConfig?: string): string[];
+/**
+ * The child's environment: the caller's, minus every `TUNNEL_*` variable. cloudflared reads those as
+ * flags (`TUNNEL_TOKEN`, `TUNNEL_TRANSPORT_PROTOCOL`, `TUNNEL_URL`…); a user who also runs their own
+ * tunnels may have them exported, and they must not steer ours.
+ */
+export declare function scrubTunnelEnv(env: NodeJS.ProcessEnv): Record<string, string>;
+export interface CloudflaredLocation {
+    /** `--cloudflared-bin`: the app names the sidecar it bundles next to its own executable. */
+    explicit?: string | undefined;
+    env?: NodeJS.ProcessEnv | undefined;
+    /** The app's `resources/bin`, where the other bundled servers live. */
+    resourcesDir?: string | undefined;
+    platform: NodeJS.Platform;
+    exists: (path: string) => boolean;
+}
+/**
+ * The tunnel binary, or `undefined` when this installation does not carry one — which the status
+ * reports as `cloudflared_unavailable`. An explicit path that does not exist is not silently
+ * replaced by another candidate: the caller said where it is.
+ */
+export declare function resolveCloudflaredBinary(location: CloudflaredLocation): string | undefined;

package/dist/remote-access/cloudflared-args.js

@@ -0,0 +1,59 @@
+/**
+ * How `cloudflared` is launched: which binary, which arguments, which environment. Pure.
+ *
+ * `cloudflared tunnel --url <origin>` opens a "quick tunnel": no Cloudflare account, no domain, and
+ * a fresh `https://<words>.trycloudflare.com` name on every start.
+ *
+ * Ported from: src-tauri/src/core/server/remote_access/process.rs (image-generation line, `767ff6350`).
+ */
+import { join } from 'node:path';
+/** The core does not download the tunnel binary; this variable names one for dev and CLI use. */
+export const CLOUDFLARED_BIN_ENV = 'ATOMIC_CLOUDFLARED_BIN';
+export function cloudflaredFileName(platform) {
+    return platform === 'win32' ? 'cloudflared.exe' : 'cloudflared';
+}
+/**
+ * The command line of one quick tunnel.
+ *
+ * `emptyConfig` switches off the lookup of `~/.cloudflared/config.yml`: a user who also runs a
+ * *named* tunnel has ingress rules there, none of which match a quick tunnel's hostname, so
+ * cloudflared itself would answer every request through ours with 404. `--no-autoupdate` because the
+ * binary ships signed inside the app bundle, and left to itself cloudflared replaces its own file.
+ */
+export function cloudflaredArgs(origin, protocol, emptyConfig) {
+    const args = ['tunnel'];
+    if (emptyConfig !== undefined)
+        args.push('--config', emptyConfig);
+    args.push('--url', origin, '--no-autoupdate');
+    if (protocol !== undefined)
+        args.push('--protocol', protocol);
+    return args;
+}
+/**
+ * The child's environment: the caller's, minus every `TUNNEL_*` variable. cloudflared reads those as
+ * flags (`TUNNEL_TOKEN`, `TUNNEL_TRANSPORT_PROTOCOL`, `TUNNEL_URL`…); a user who also runs their own
+ * tunnels may have them exported, and they must not steer ours.
+ */
+export function scrubTunnelEnv(env) {
+    const scrubbed = {};
+    for (const [key, value] of Object.entries(env))
+        if (value !== undefined && !key.toUpperCase().startsWith('TUNNEL_'))
+            scrubbed[key] = value;
+    return scrubbed;
+}
+/**
+ * The tunnel binary, or `undefined` when this installation does not carry one — which the status
+ * reports as `cloudflared_unavailable`. An explicit path that does not exist is not silently
+ * replaced by another candidate: the caller said where it is.
+ */
+export function resolveCloudflaredBinary(location) {
+    const fromEnv = location.env?.[CLOUDFLARED_BIN_ENV]?.trim();
+    const named = location.explicit?.trim() || fromEnv;
+    if (named)
+        return location.exists(named) ? named : undefined;
+    if (!location.resourcesDir)
+        return undefined;
+    const bundled = join(location.resourcesDir, cloudflaredFileName(location.platform));
+    return location.exists(bundled) ? bundled : undefined;
+}
+//# sourceMappingURL=cloudflared-args.js.map

package/dist/remote-access/cloudflared-args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflared-args.js","sourceRoot":"","sources":["../../src/remote-access/cloudflared-args.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,iGAAiG;AACjG,MAAM,CAAC,MAAM,mBAAmB,GAAG,wBAAwB,CAAA;AAE3D,MAAM,UAAU,mBAAmB,CAAC,QAAyB;IAC3D,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAA;AACjE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,QAAiB,EAAE,WAAoB;IACrF,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;IACvB,IAAI,WAAW,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAA;IACjE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAA;IAC7C,IAAI,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;IAC7D,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,GAAsB;IACnD,MAAM,QAAQ,GAA2B,EAAE,CAAA;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;QAC5C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IAC5F,OAAO,QAAQ,CAAA;AACjB,CAAC;AAYD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAA6B;IACpE,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,CAAA;IAC3D,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,OAAO,CAAA;IAClD,IAAI,KAAK;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IAC5D,IAAI,CAAC,QAAQ,CAAC,YAAY;QAAE,OAAO,SAAS,CAAA;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;IACnF,OAAO,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;AACvD,CAAC"}

package/dist/remote-access/cloudflared-output.d.ts

@@ -0,0 +1,26 @@
+/**
+ * What is read out of `cloudflared`'s output. Pure.
+ *
+ * It prints the tunnel's name, and later a "Registered tunnel connection" line once an edge
+ * connection is actually up. Until that second line the name answers with Cloudflare's error 1033,
+ * so a URL alone is never treated as ready.
+ *
+ * Ported from: src-tauri/src/core/server/remote_access/process.rs (`OutputParser`), `767ff6350`.
+ */
+export interface ParsedOutput {
+    url: string | undefined;
+    registered: boolean;
+}
+/** A URL that can actually serve: minted *and* registered. */
+export declare function readyUrl(parsed: ParsedOutput): string | undefined;
+/**
+ * Accumulates what the output has established. First URL wins: cloudflared prints it once, and a
+ * later line must not swap the advertised address.
+ */
+export declare class OutputParser {
+    private url;
+    private registered;
+    /** Returns `true` when this line changed what is known. */
+    feedLine(line: string): boolean;
+    snapshot(): ParsedOutput;
+}

package/dist/remote-access/cloudflared-output.js

@@ -0,0 +1,51 @@
+/**
+ * What is read out of `cloudflared`'s output. Pure.
+ *
+ * It prints the tunnel's name, and later a "Registered tunnel connection" line once an edge
+ * connection is actually up. Until that second line the name answers with Cloudflare's error 1033,
+ * so a URL alone is never treated as ready.
+ *
+ * Ported from: src-tauri/src/core/server/remote_access/process.rs (`OutputParser`), `767ff6350`.
+ */
+/** Printed once an edge connection is registered and the URL can serve. */
+const REGISTERED_MARKER = 'Registered tunnel connection';
+/**
+ * cloudflared mentions its own control host in failure lines (`https://api.trycloudflare.com/tunnel`);
+ * that is never a tunnel.
+ */
+const API_HOST = 'api.trycloudflare.com';
+const TUNNEL_URL = /https:\/\/([A-Za-z0-9-]+\.trycloudflare\.com)/g;
+/** A URL that can actually serve: minted *and* registered. */
+export function readyUrl(parsed) {
+    return parsed.registered ? parsed.url : undefined;
+}
+/**
+ * Accumulates what the output has established. First URL wins: cloudflared prints it once, and a
+ * later line must not swap the advertised address.
+ */
+export class OutputParser {
+    url;
+    registered = false;
+    /** Returns `true` when this line changed what is known. */
+    feedLine(line) {
+        let changed = false;
+        if (this.url === undefined) {
+            for (const match of line.matchAll(TUNNEL_URL)) {
+                if (match[1].toLowerCase() === API_HOST)
+                    continue;
+                this.url = match[0];
+                changed = true;
+                break;
+            }
+        }
+        if (!this.registered && line.includes(REGISTERED_MARKER)) {
+            this.registered = true;
+            changed = true;
+        }
+        return changed;
+    }
+    snapshot() {
+        return { url: this.url, registered: this.registered };
+    }
+}
+//# sourceMappingURL=cloudflared-output.js.map

package/dist/remote-access/cloudflared-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflared-output.js","sourceRoot":"","sources":["../../src/remote-access/cloudflared-output.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,2EAA2E;AAC3E,MAAM,iBAAiB,GAAG,8BAA8B,CAAA;AAExD;;;GAGG;AACH,MAAM,QAAQ,GAAG,uBAAuB,CAAA;AAExC,MAAM,UAAU,GAAG,gDAAgD,CAAA;AAOnE,8DAA8D;AAC9D,MAAM,UAAU,QAAQ,CAAC,MAAoB;IAC3C,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,YAAY;IACf,GAAG,CAAoB;IACvB,UAAU,GAAG,KAAK,CAAA;IAE1B,2DAA2D;IAC3D,QAAQ,CAAC,IAAY;QACnB,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9C,IAAK,KAAK,CAAC,CAAC,CAAY,CAAC,WAAW,EAAE,KAAK,QAAQ;oBAAE,SAAQ;gBAC7D,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;gBACnB,OAAO,GAAG,IAAI,CAAA;gBACd,MAAK;YACP,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;YACtB,OAAO,GAAG,IAAI,CAAA;QAChB,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,QAAQ;QACN,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAA;IACvD,CAAC;CACF"}

package/dist/remote-access/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Reaching the Local API Server from outside this machine: the addresses a LAN device can dial, and
+ * (stage 7d) the Cloudflare quick tunnel. The Host gate that lets those callers in lives with the
+ * listener, in `server/public/dynamic-hosts.ts`.
+ */
+export * from './lan.js';
+export * from './lan-probe.js';
+export * from './status.js';
+export * from './cloudflared-args.js';
+export * from './cloudflared-output.js';
+export * from './process.js';
+export * from './probe.js';
+export * from './journal.js';
+export * from './spawner.js';
+export * from './manager.js';
+export * from './wiring.js';

package/dist/remote-access/index.js

@@ -0,0 +1,17 @@
+/**
+ * Reaching the Local API Server from outside this machine: the addresses a LAN device can dial, and
+ * (stage 7d) the Cloudflare quick tunnel. The Host gate that lets those callers in lives with the
+ * listener, in `server/public/dynamic-hosts.ts`.
+ */
+export * from './lan.js';
+export * from './lan-probe.js';
+export * from './status.js';
+export * from './cloudflared-args.js';
+export * from './cloudflared-output.js';
+export * from './process.js';
+export * from './probe.js';
+export * from './journal.js';
+export * from './spawner.js';
+export * from './manager.js';
+export * from './wiring.js';
+//# sourceMappingURL=index.js.map

package/dist/remote-access/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/remote-access/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,cAAc,UAAU,CAAA;AACxB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,aAAa,CAAA;AAC3B,cAAc,uBAAuB,CAAA;AACrC,cAAc,yBAAyB,CAAA;AACvC,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA;AAC1B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA"}

package/dist/remote-access/journal.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Crash recovery for the tunnel process.
+ *
+ * A normal shutdown ends cloudflared, but a crash, an OOM kill or a force quit runs none of that. An
+ * orphaned tunnel is worse than an orphaned model backend: it keeps a *public* URL pointed at a local
+ * port that is now dead — or that the next process to bind it inherits.
+ *
+ * The process journal of the model backends does not fit: a tunnel has no provider, model or port,
+ * and people who want this feature often run a `cloudflared` of their own that must never be
+ * touched. So the tunnel gets its own record, and is ended only when two independent checks agree:
+ * the recorded start identity (the PID-reuse guard) and the process name.
+ *
+ * Ported from: src-tauri/src/core/server/remote_access/journal.rs (image-generation line, `767ff6350`).
+ */
+export declare const TUNNEL_JOURNAL_FILE = "remote-access-tunnel.json";
+export interface TunnelJournalEntry {
+    pid: number;
+    /** `processStartId` of the child, once the probe has answered; `null` until then. */
+    process_start_id: string | null;
+    /** Wall clock at spawn, in seconds: the fallback identity while the probe has not answered. */
+    started_at_secs: number;
+    instance_id: string;
+    exe: string;
+}
+export interface TunnelJournalDeps {
+    startId?: (pid: number) => Promise<string | undefined>;
+    now?: () => number;
+    log?: (message: string) => void;
+}
+export interface ReapDeps {
+    selfPid?: number;
+    alive?: (pid: number) => boolean;
+    name?: (pid: number) => Promise<string | undefined>;
+    verifyIdentity?: (pid: number, expected: string) => Promise<'match' | 'mismatch' | 'dead' | 'unknown'>;
+    startEpoch?: (pid: number) => Promise<string | undefined>;
+    kill?: (pid: number) => void;
+    log?: (message: string) => void;
+}
+/** What startup did about the tunnel a previous owner may have left behind. */
+export type ReapOutcome = 'none' | 'gone' | 'spared' | 'killed';
+export declare function isTunnelName(name: string | undefined): boolean;
+/** Records the live tunnel. Best effort: a journal that cannot be written costs crash recovery, never the tunnel. */
+export declare class TunnelJournal {
+    private readonly path;
+    private readonly instanceId;
+    private readonly deps;
+    private writes;
+    constructor(path: string, instanceId: string, deps?: TunnelJournalDeps);
+    /**
+     * Written at once with what is known, then again with the start identity: the identity probe takes
+     * about a second on Windows, and a crash inside that second must still leave a trail.
+     */
+    record(pid: number, exe: string): Promise<void>;
+    clear(): Promise<void>;
+    private current;
+    private write;
+    private enqueue;
+}
+/**
+ * Ends the tunnel a previous, abnormally ended owner left behind. Called once at startup, before the
+ * endpoint is published and before anything could have started a new one.
+ */
+export declare function reapTunnelOrphan(path: string, deps?: ReapDeps): Promise<ReapOutcome>;