@bendyline/gezel-inference 1.0.5 → 1.0.7

package/dist/engines/native-manifest.d.ts

@@ -40,12 +40,12 @@
  * but logs that it could not anchor to a baked-in digest.
  */
 /** Native release version this build pins. Placeholder until first public release. */
-export declare const NATIVE_ENGINE_RELEASE = "0.1.54";
+export declare const NATIVE_ENGINE_RELEASE = "0.1.57";
 /** sha256 of the pinned release's `SHA256SUMS` asset. All-zeros = unpinned. */
-export declare const SHA256SUMS_DIGEST = "087215a12096127a779b20e0dcb7d2ed9ce5dda1c81f33fdeb6b6eb730485b20";
-/** Exact SHA256 values for every engine archive published by native-v0.1.54. */
+export declare const SHA256SUMS_DIGEST = "977b0ad4cdb8983ed44d7a3223267038b1f35b2806d8a1807d7d15c5c7e94f47";
+/** Exact SHA256 values for every engine archive published by native-v0.1.57. */
 export declare const NATIVE_ENGINE_ARCHIVE_SHA256: Readonly<Record<string, string>>;
-/** Download size in bytes of every engine archive published by native-v0.1.54. */
+/** Download size in bytes of every engine archive published by native-v0.1.57. */
 export declare const NATIVE_ENGINE_ARCHIVE_BYTES: Readonly<Record<string, number>>;
 /**
  * True only when the pinned release's standalone macOS archives were

package/dist/engines/native-manifest.js

@@ -40,47 +40,47 @@
  * but logs that it could not anchor to a baked-in digest.
  */
 /** Native release version this build pins. Placeholder until first public release. */
-export const NATIVE_ENGINE_RELEASE = '0.1.54';
+export const NATIVE_ENGINE_RELEASE = '0.1.57';
 /** sha256 of the pinned release's `SHA256SUMS` asset. All-zeros = unpinned. */
-export const SHA256SUMS_DIGEST = '087215a12096127a779b20e0dcb7d2ed9ce5dda1c81f33fdeb6b6eb730485b20';
+export const SHA256SUMS_DIGEST = '977b0ad4cdb8983ed44d7a3223267038b1f35b2806d8a1807d7d15c5c7e94f47';
 // BEGIN PINNED NATIVE ARCHIVE HASHES
-/** Exact SHA256 values for every engine archive published by native-v0.1.54. */
+/** Exact SHA256 values for every engine archive published by native-v0.1.57. */
 export const NATIVE_ENGINE_ARCHIVE_SHA256 = Object.freeze({
-    'gezel-native-0.1.54-darwin-arm64-metal.tar.gz': 'f2990970303b954af2fd2e2bd31efef7d1c231bea16e026e0cdc0a7f9cc17842',
-    'gezel-native-0.1.54-darwin-arm64.tar.gz': '850f28338c52f945996c55edd77cf14d451c9bc4a09f719f6608885ddab99687',
-    'gezel-native-0.1.54-linux-arm64-cpu.tar.gz': '7dac7fed45c46b591cd6d597d639c385f54a3a367ac15d6097d3ad04d9c3c6e6',
-    'gezel-native-0.1.54-linux-arm64-cuda.tar.gz': 'f73c4569c356c4584199513c6c1f1f0bd3f0151fb1845696e2fa43f2b3626803',
-    'gezel-native-0.1.54-linux-arm64.tar.gz': 'f034ad2d3d12165c979d2fff2d34752c8d4f8ff836d3c416c9c64535f3bb652b',
-    'gezel-native-0.1.54-linux-x64-cpu.tar.gz': '57de7d52b0e95e3886bf4ffad7e015b98ba8bbea96b95d8cb3e26bc1ff309e99',
-    'gezel-native-0.1.54-linux-x64-cuda.tar.gz': 'c2d8616410f72b8bb217194f7c71d5175ed1c94ac6d9d94f660e0f535a3cff22',
-    'gezel-native-0.1.54-linux-x64-vulkan.tar.gz': '89f3233f41861404db082219962eb25d1b2c3f6e42bbc2696fda122ce845371d',
-    'gezel-native-0.1.54-linux-x64.tar.gz': 'f42e42d71187c6ef5af9685ebb65511bb7ac638815105f09f3df22cfdb9e6bce',
-    'gezel-native-0.1.54-win32-arm64-cpu.zip': 'e482e2af92f28135aea2e21ae97290e231b0dc77eadc8cc532d2506304d27575',
-    'gezel-native-0.1.54-win32-arm64-cuda.zip': 'ff6eaf7f070e9aba7fc087a155896f73b12664d867e0374af5546e941c153b82',
-    'gezel-native-0.1.54-win32-arm64.zip': '9b854d824117fe56d7d532ab83c01693a97cf6b45752e69cb895aa183c8cff35',
-    'gezel-native-0.1.54-win32-x64-cpu.zip': '93c8f22b47831ba8e0808033e87ce91cdb0d481890602857b6b8b5295cc7d50b',
-    'gezel-native-0.1.54-win32-x64-cuda.zip': '84da0b362e502d0bb6e3509528e7a4ccff50c2b9fcaa2fa1a62b3d9b0ad9f5d2',
-    'gezel-native-0.1.54-win32-x64-vulkan.zip': '1a3c99ce8343552fb17af80c36ba8ebb7c13ac8d6b4966f3aa3054018d41fa11',
-    'gezel-native-0.1.54-win32-x64.zip': 'f224fcdea6945ce574d32bee6ace345f82847f317c40cfa9059feba9b87ac0ca',
+    'gezel-native-0.1.57-darwin-arm64-metal.tar.gz': '6b97be648b032980cf73663db4424140f4cc04577972dc283b956af677ce884a',
+    'gezel-native-0.1.57-darwin-arm64.tar.gz': 'e8ca070c4d3961e95946ed32fe7376ddbc97e407dd3f5b78e26cab20c8fb286a',
+    'gezel-native-0.1.57-linux-arm64-cpu.tar.gz': 'cc87822123602a0024c63a0d65789232a665140cb2fe37b106d5bd680d12f795',
+    'gezel-native-0.1.57-linux-arm64-cuda.tar.gz': '315a441e5698800945f7030e9da961e20f3cf379a4b75c98e1d6ba88c8fee1c5',
+    'gezel-native-0.1.57-linux-arm64.tar.gz': '0684b77d23f008f8a2aa0d9d8931437bacd8569fb6c10d3ddab61a5fb25b6a06',
+    'gezel-native-0.1.57-linux-x64-cpu.tar.gz': 'b2100842f51c393b92667535798e49932173d52626f5ae72c40005b3408f1201',
+    'gezel-native-0.1.57-linux-x64-cuda.tar.gz': '2fca7720614687e8491be17366060c604551257199d395f795b27a87216bcde9',
+    'gezel-native-0.1.57-linux-x64-vulkan.tar.gz': 'c1014a1fe1d241ad1ee9abfa5badafcce208cbff8d38b4b4deb4779f31a95bef',
+    'gezel-native-0.1.57-linux-x64.tar.gz': 'a7f3dbe1941c3d03ed121c32be1bdd199aea47080b03d89989590a0f5d13c5ff',
+    'gezel-native-0.1.57-win32-arm64-cpu.zip': '12d66681cec1872f23b015c7d0bd45a25ed262342da6b0ecea8bea303adf2105',
+    'gezel-native-0.1.57-win32-arm64-cuda.zip': 'b437a9f0894673179f91a1af75d5d7d058dafa1b4f48a57eab123596f1c21ca4',
+    'gezel-native-0.1.57-win32-arm64.zip': '21cddb8b733f9a2669d64b1ada18002f60bb2779f2d5e2aacfb88214db00da7e',
+    'gezel-native-0.1.57-win32-x64-cpu.zip': 'a81f7c6754f1954a0ed5de1efc47d6194dc60d912138a9d2b8e4f992168b12c6',
+    'gezel-native-0.1.57-win32-x64-cuda.zip': '9e3f21713fe77c23536dd4124244ac3834f90c82d6e470cb6836a73bb4f7c592',
+    'gezel-native-0.1.57-win32-x64-vulkan.zip': '0d473300317b4f6cb072bdd7875ce1536a85fe50e781c435e1aef1c4cbdb08e5',
+    'gezel-native-0.1.57-win32-x64.zip': '89a073abcfc97e50b9a0c39f56862b51ac21139b7ca4a3e7a75105dca56292a2',
 });
-/** Download size in bytes of every engine archive published by native-v0.1.54. */
+/** Download size in bytes of every engine archive published by native-v0.1.57. */
 export const NATIVE_ENGINE_ARCHIVE_BYTES = Object.freeze({
-    'gezel-native-0.1.54-darwin-arm64-metal.tar.gz': 7056387,
-    'gezel-native-0.1.54-darwin-arm64.tar.gz': 42224129,
-    'gezel-native-0.1.54-linux-arm64-cpu.tar.gz': 8838944,
-    'gezel-native-0.1.54-linux-arm64-cuda.tar.gz': 620429935,
-    'gezel-native-0.1.54-linux-arm64.tar.gz': 42037092,
-    'gezel-native-0.1.54-linux-x64-cpu.tar.gz': 12914025,
-    'gezel-native-0.1.54-linux-x64-cuda.tar.gz': 993587032,
-    'gezel-native-0.1.54-linux-x64-vulkan.tar.gz': 25672135,
-    'gezel-native-0.1.54-linux-x64.tar.gz': 57185943,
-    'gezel-native-0.1.54-win32-arm64-cpu.zip': 5623741,
-    'gezel-native-0.1.54-win32-arm64-cuda.zip': 242341587,
-    'gezel-native-0.1.54-win32-arm64.zip': 42236457,
-    'gezel-native-0.1.54-win32-x64-cpu.zip': 8719660,
-    'gezel-native-0.1.54-win32-x64-cuda.zip': 749849595,
-    'gezel-native-0.1.54-win32-x64-vulkan.zip': 21128362,
-    'gezel-native-0.1.54-win32-x64.zip': 55668353,
+    'gezel-native-0.1.57-darwin-arm64-metal.tar.gz': 7387963,
+    'gezel-native-0.1.57-darwin-arm64.tar.gz': 42223786,
+    'gezel-native-0.1.57-linux-arm64-cpu.tar.gz': 9223249,
+    'gezel-native-0.1.57-linux-arm64-cuda.tar.gz': 621626283,
+    'gezel-native-0.1.57-linux-arm64.tar.gz': 42040003,
+    'gezel-native-0.1.57-linux-x64-cpu.tar.gz': 13398337,
+    'gezel-native-0.1.57-linux-x64-cuda.tar.gz': 1000325316,
+    'gezel-native-0.1.57-linux-x64-vulkan.tar.gz': 26290440,
+    'gezel-native-0.1.57-linux-x64.tar.gz': 57190295,
+    'gezel-native-0.1.57-win32-arm64-cpu.zip': 6049234,
+    'gezel-native-0.1.57-win32-arm64-cuda.zip': 243595554,
+    'gezel-native-0.1.57-win32-arm64.zip': 42236484,
+    'gezel-native-0.1.57-win32-x64-cpu.zip': 9131460,
+    'gezel-native-0.1.57-win32-x64-cuda.zip': 756439338,
+    'gezel-native-0.1.57-win32-x64-vulkan.zip': 21673895,
+    'gezel-native-0.1.57-win32-x64.zip': 55668381,
 });
 // END PINNED NATIVE ARCHIVE HASHES
 /**

package/dist/engines/resolver.d.ts

@@ -32,7 +32,7 @@ export interface ResolveEngineOptions {
     signaturePolicy?: SignaturePolicy;
     fetchImpl?: typeof fetch;
     signal?: AbortSignal;
-    /** Pre-resolved token: `undefined` = auto-resolve; `null` = explicitly none. */
+    /** Pre-resolved token: `undefined` = from the environment; `null` = explicitly none. */
     token?: string | null;
     /** Override the source-pinned SHA256SUMS digest (tests). */
     expectedSha256sumsDigest?: string;

package/dist/engines/resolver.js

@@ -3,7 +3,7 @@ import { createReadStream, existsSync, readdirSync } from 'node:fs';
 import { chmod, mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises';
 import { dirname, join } from 'node:path';
 import { HttpStatusError, createLogger, nowIso, resolveDistributionProfile, retryTransient, } from '@bendyline/gezel';
-import { DUCKDB_APPLE_TEAM_ID, DUCKDB_ARCHIVE_SHA256, DUCKDB_ASSET, DUCKDB_BINARY_SHA256, DUCKDB_VERSION, DUCKDB_WINDOWS_PUBLISHER, MXC_EXECUTOR_NAME, MXC_EXECUTOR_SHA256, MXC_LICENSE_SHA256, MXC_TARBALL_INTEGRITY, MXC_TARBALL_LICENSE_ENTRY, MXC_TARBALL_SHA256, MXC_TARBALL_URL, MXC_VERIFIED_SENTINEL, MXC_VERSION, MXC_WINDOWS_PUBLISHER, duckdbAssetUrl, duckdbBinaryName, duckdbInstallDir, duckdbPlatformKey, mxcArch, mxcInstallDir, mxcTarballEntry, resolvePlatformKey, windowsHeadlessSpawnOptions, } from '@bendyline/gezel/native';
+import { DUCKDB_APPLE_TEAM_ID, DUCKDB_ARCHIVE_SHA256, DUCKDB_ASSET, DUCKDB_BINARY_SHA256, DUCKDB_VERSION, DUCKDB_WINDOWS_PUBLISHER, MXC_EXECUTOR_NAME, MXC_EXECUTOR_SHA256, MXC_LICENSE_SHA256, MXC_TARBALL_INTEGRITY, MXC_TARBALL_LICENSE_ENTRY, MXC_TARBALL_SHA256, MXC_TARBALL_URL, MXC_VERIFIED_SENTINEL, MXC_VERSION, MXC_WINDOWS_PUBLISHER, duckdbAssetUrl, duckdbBinaryName, duckdbInstallDir, duckdbPlatformKey, mxcArch, mxcInstallDir, mxcTarballEntry, resolvePlatformKey, } from '@bendyline/gezel/native';
 import * as tar from 'tar';
 import { downloadWithRetry, friendlyErrors, } from '../utils/download-with-retry.js';
 import { extractZip } from '../utils/extract-zip.js';
@@ -33,6 +33,7 @@ const ENGINE_ENV_VAR = {
     uv: 'GEZEL_UV_BIN',
     duckdb: 'GEZEL_DUCKDB_BIN',
     'apple-fm': 'GEZEL_APPLE_FM_BIN',
+    sandbox: 'GEZEL_SANDBOX_BIN',
 };
 /**
  * Thrown for the "can't resolve, and that's expected/actionable" cases:
@@ -541,14 +542,16 @@ export async function* resolveEngine(opts) {
     // `bendyline/gezel` is public, so release metadata and assets are readable
     // anonymously. A token stays OPTIONAL and is used when present purely to
     // lift GitHub's 60-request/hour unauthenticated API rate limit. Do not
-    // reinstate a hard gate here: users who install from npm have no `gh`
-    // login, and requiring one would make on-device engines unreachable for
-    // every consumer outside this repo.
-    const token = opts.token !== undefined ? opts.token : await resolveGitHubToken();
+    // reinstate a hard gate here: users who install from npm have no token,
+    // and requiring one would make on-device engines unreachable for every
+    // consumer outside this repo.
+    const auth = {
+        token: opts.token !== undefined ? opts.token : resolveGitHubToken(),
+    };
     const baseFetch = opts.fetchImpl ?? globalThis.fetch;
     const tag = `native-v${version}`;
     // ── 1. Resolve release + assets ──
-    const release = await ghJson(`${apiBase}/repos/${REPO}/releases/tags/${tag}`, baseFetch, token);
+    const release = await ghJson(`${apiBase}/repos/${REPO}/releases/tags/${tag}`, baseFetch, auth);
     const archiveAsset = release.assets?.find((a) => a.name === archiveName);
     const sumsAsset = release.assets?.find((a) => a.name === 'SHA256SUMS');
     if (!archiveAsset) {
@@ -558,7 +561,7 @@ export async function* resolveEngine(opts) {
         yield* fail(`release ${tag} is missing its SHA256SUMS manifest — refusing to install unverified`);
     }
     // ── 2. SHA256SUMS: verify own digest against the source pin, then parse ──
-    const sumsBytes = await ghBytes(sumsAsset.url, baseFetch, token);
+    const sumsBytes = await ghBytes(sumsAsset.url, baseFetch, auth);
     const sumsDigest = createHash('sha256').update(sumsBytes).digest('hex');
     if (!unpinned && sumsDigest !== expectedDigest) {
         yield* fail(`SHA256SUMS digest mismatch for ${tag}: this build pins ${expectedDigest.slice(0, 16)}… but the release served ${sumsDigest.slice(0, 16)}…. Refusing — the release may have been tampered with or re-cut.`);
@@ -584,7 +587,7 @@ export async function* resolveEngine(opts) {
         url: archiveAsset.url,
         destPath: archivePath,
         approxSizeBytes: archiveAsset.size ?? 0,
-        fetchImpl: makeAuthedFetch(baseFetch, token),
+        fetchImpl: gitHubFetch(baseFetch, auth, 'application/octet-stream'),
         ...(opts.signal ? { signal: opts.signal } : {}),
     });
     let outcome;
@@ -765,35 +768,37 @@ function stampEnv(engine, binPath, variant, versionDir) {
         process.env.GEZEL_SQLITE_VEC_PATH = sqliteVec;
     }
 }
-async function resolveGitHubToken() {
-    if (process.env.GEZEL_GITHUB_TOKEN)
-        return process.env.GEZEL_GITHUB_TOKEN;
-    if (process.env.GITHUB_TOKEN)
-        return process.env.GITHUB_TOKEN;
-    try {
-        const { execFileSync } = await import('node:child_process');
-        // Named host: a bare `gh auth token` answers for gh's default host, which
-        // can be a GitHub Enterprise server whose token must not go to github.com.
-        const out = execFileSync('gh', ['auth', 'token', '--hostname', 'github.com'], {
-            encoding: 'utf8',
-            stdio: ['ignore', 'pipe', 'ignore'],
-            ...windowsHeadlessSpawnOptions(),
-        });
-        return out.trim() || null;
-    }
-    catch {
-        return null;
-    }
+/**
+ * An optional token, from the environment only. This module runs inside apps
+ * that embed Gezel, so it never borrows the user's GitHub CLI login: `gh` is
+ * not its credential to use, and a stale one used to fail public downloads.
+ */
+function resolveGitHubToken() {
+    return process.env.GEZEL_GITHUB_TOKEN || process.env.GITHUB_TOKEN || null;
 }
-function makeAuthedFetch(base, token) {
-    return ((input, init) => base(input, {
-        ...init,
-        headers: {
-            ...init?.headers,
-            Accept: 'application/octet-stream',
-            ...(token ? { Authorization: `Bearer ${token}` } : {}),
-        },
-    }));
+/**
+ * Fetch from GitHub with the optional token. The release is public, so a token
+ * GitHub rejects (expired, revoked) is dropped for the rest of the resolve and
+ * the request repeats anonymously instead of failing the install.
+ */
+function gitHubFetch(base, auth, accept) {
+    return (async (input, init) => {
+        const send = () => base(input, {
+            ...init,
+            headers: {
+                ...init?.headers,
+                Accept: accept,
+                ...(auth.token ? { Authorization: `Bearer ${auth.token}` } : {}),
+            },
+        });
+        const res = await send();
+        if (res.status !== 401 || !auth.token)
+            return res;
+        await res.body?.cancel().catch(() => { });
+        log.warn('[engine-resolver] GitHub rejected the token from GEZEL_GITHUB_TOKEN / GITHUB_TOKEN (401); continuing anonymously');
+        auth.token = null;
+        return send();
+    });
 }
 /**
  * The archive itself goes through `downloadWithRetry`, but the two small
@@ -808,31 +813,23 @@ function ghRetryLog(what) {
         log.warn(`[engine-resolver] ${what} failed (${info.reason}); retrying in ${info.delayMs}ms (attempt ${info.attempt}/${info.maxAttempts})`);
     };
 }
-async function ghJson(url, fetchImpl, token) {
+async function ghJson(url, fetchImpl, auth) {
+    const get = gitHubFetch(fetchImpl, auth, 'application/vnd.github+json');
     return retryTransient(async () => {
-        const res = await fetchImpl(url, {
-            headers: {
-                Accept: 'application/vnd.github+json',
-                ...(token ? { Authorization: `Bearer ${token}` } : {}),
-            },
-        });
+        const res = await get(url);
         if (!res.ok) {
             await res.body?.cancel().catch(() => { });
             // A transient status is thrown as HttpStatusError so retryTransient
             // takes another pass; 4xx becomes the terminal EngineUnavailableError.
-            throw new HttpStatusError(res.status, `GitHub API returned ${res.status} for ${url}${res.status === 404 ? ' (release not found — or no access while private)' : ''}`);
+            throw new HttpStatusError(res.status, `GitHub API returned ${res.status} for ${url}${res.status === 404 ? ' (release not found)' : ''}`);
         }
         return (await res.json());
     }, { attempts: GH_METADATA_ATTEMPTS, onRetry: ghRetryLog('GitHub release lookup') }).catch(rethrowAsEngineUnavailable);
 }
-async function ghBytes(assetApiUrl, fetchImpl, token) {
+async function ghBytes(assetApiUrl, fetchImpl, auth) {
+    const get = gitHubFetch(fetchImpl, auth, 'application/octet-stream');
     return retryTransient(async () => {
-        const res = await fetchImpl(assetApiUrl, {
-            headers: {
-                Accept: 'application/octet-stream',
-                ...(token ? { Authorization: `Bearer ${token}` } : {}),
-            },
-        });
+        const res = await get(assetApiUrl);
         if (!res.ok) {
             await res.body?.cancel().catch(() => { });
             throw new HttpStatusError(res.status, `asset download returned ${res.status} for ${assetApiUrl}`);

package/dist/http/auth-context.d.ts

@@ -18,6 +18,18 @@ declare module 'hono' {
             projectId?: string;
             gezelId?: string;
             team?: boolean;
+            /**
+             * The signed-in account behind an account session (ADR 0029, the
+             * principal from ADR 0004). Absent for app, device and owner
+             * credentials.
+             */
+            account?: {
+                id: string;
+                source: 'password' | 'device' | 'os';
+                label: string;
+            };
+            /** The account session this request came in on, for "sign out this browser". */
+            accountSessionId?: string;
         };
     }
 }

package/dist/http/routes/image-ensure-routes.d.ts

@@ -0,0 +1,4 @@
+import type { Hono } from 'hono';
+import type { ImageModelPullRegistry } from '../../providers/image/pull-registry.js';
+/** One resumable download protocol, with separate registries for models and styles. */
+export declare function registerImageEnsureRoutes(app: Hono, prefix: string, pulls: ImageModelPullRegistry, qualified: (id: string) => string): void;

package/dist/http/routes/image-ensure-routes.js

@@ -0,0 +1,102 @@
+import { streamSSE } from 'hono/streaming';
+function apiError(code, message) {
+    return { error: { message, type: 'invalid_request_error', code } };
+}
+function ensureEvent(jobId, event, totalBytes, qualified) {
+    const job = { jobId, modelId: qualified(jobId) };
+    switch (event.type) {
+        case 'progress':
+            return {
+                ...job,
+                type: 'progress',
+                bytesWritten: event.bytesWritten,
+                totalBytes: event.totalBytes ?? totalBytes,
+            };
+        case 'retrying':
+            return {
+                ...job,
+                type: 'retrying',
+                attempt: event.attempt,
+                maxAttempts: event.maxAttempts,
+                delayMs: event.delayMs,
+                reason: event.reason,
+            };
+        case 'error':
+            return { ...job, type: 'error', error: event.error };
+        case 'done':
+            return { ...job, type: 'done' };
+    }
+}
+function pullStatus(pull) {
+    if (!pull.finished)
+        return 'running';
+    return pull.error ? 'error' : 'done';
+}
+/** One resumable download protocol, with separate registries for models and styles. */
+export function registerImageEnsureRoutes(app, prefix, pulls, qualified) {
+    app.get(`${prefix}/:jobId`, (c) => {
+        const pull = pulls.get(c.req.param('jobId'));
+        if (!pull)
+            return c.json(apiError('job_not_found', 'job not found'), 404);
+        return c.json({
+            job_id: pull.id,
+            model_id: qualified(pull.id),
+            status: pullStatus(pull),
+            started_at: Date.parse(pull.startedAt),
+            bytes_written: pull.bytesWritten,
+            total_bytes: pull.totalBytes,
+            ...(pull.error ? { error: pull.error } : {}),
+        });
+    });
+    app.get(`${prefix}/:jobId/events`, (c) => {
+        const jobId = c.req.param('jobId');
+        const snapshot = pulls.get(jobId);
+        if (!snapshot)
+            return c.json(apiError('job_not_found', 'job not found'), 404);
+        return streamSSE(c, async (stream) => {
+            let closed = false;
+            let sawError = false;
+            const unsubscribe = pulls.subscribe(jobId, (event) => {
+                // A failed pull ends with an error and then its done; the error is terminal.
+                if (sawError)
+                    return;
+                if (event.type === 'error')
+                    sawError = true;
+                const terminal = event.type === 'done' || event.type === 'error';
+                void stream
+                    .writeSSE({
+                    data: JSON.stringify(ensureEvent(jobId, event, snapshot.totalBytes, qualified)),
+                })
+                    .then(() => {
+                    if (terminal)
+                        closed = true;
+                })
+                    .catch(() => {
+                    closed = true;
+                });
+            });
+            if (!unsubscribe)
+                return;
+            stream.onAbort(() => {
+                closed = true;
+                unsubscribe();
+            });
+            while (!closed) {
+                await stream.sleep(1000);
+                try {
+                    await stream.writeSSE({ event: 'ping', data: '' });
+                }
+                catch {
+                    closed = true;
+                }
+            }
+            unsubscribe();
+        });
+    });
+    app.delete(`${prefix}/:jobId`, (c) => {
+        if (!pulls.cancel(c.req.param('jobId'))) {
+            return c.json(apiError('job_not_found', 'No download in progress for that job'), 404);
+        }
+        return c.json({ cancelled: true });
+    });
+}

package/dist/http/routes/v1-image-styles.d.ts

@@ -0,0 +1,5 @@
+import { Hono } from 'hono';
+import type { ImageModelPullRegistry } from '../../providers/image/pull-registry.js';
+import type { ImagesRouteContext } from './v1-images.js';
+/** App-scoped access to catalog LoRAs; no paths, URLs or engine arguments from callers. */
+export declare function v1ImageStylesRoutes(ctx: ImagesRouteContext, pulls: ImageModelPullRegistry): Hono;

package/dist/http/routes/v1-image-styles.js

@@ -0,0 +1,91 @@
+import { Hono } from 'hono';
+import { z } from 'zod';
+import { isSafeModelId } from '../../models/model-id.js';
+import { registerImageEnsureRoutes } from './image-ensure-routes.js';
+const styleId = z.string().min(1).max(512).refine(isSafeModelId);
+const ensureRequest = z.object({ style: styleId }).strict();
+const apiError = (code, message) => ({
+    error: { code, message, type: 'invalid_request_error' },
+});
+/** App-scoped access to catalog LoRAs; no paths, URLs or engine arguments from callers. */
+export function v1ImageStylesRoutes(ctx, pulls) {
+    const app = new Hono();
+    app.get('/', async (c) => {
+        const provider = await ctx.images.current();
+        if (!provider.listLoras || !provider.pullLora || !provider.deleteLora) {
+            return c.json(apiError('styles_unsupported', 'Update Gezel to add image styles.'), 409);
+        }
+        const [installed, catalog] = await Promise.all([
+            provider.listLoras(),
+            ctx.catalog.list('image-lora'),
+        ]);
+        const data = [];
+        for (const item of catalog) {
+            const m = item.manifest;
+            if (m.kind !== 'image-lora' || m.purpose !== 'style')
+                continue;
+            data.push({
+                id: m.id,
+                object: 'image_style',
+                name: m.name,
+                description: m.description,
+                availability: installed.some((l) => l.id === m.id)
+                    ? 'available'
+                    : pulls.get(m.id)?.finished === false
+                        ? 'downloading'
+                        : 'download-required',
+                base_models: m.baseModels.map((id) => `sd-cpp:${id}`),
+                download_bytes: m.approxSizeBytes,
+                ...((m.licenseShortName ?? m.license) ? { license: m.licenseShortName ?? m.license } : {}),
+                commercial_use: m.commercialUse,
+                ...(m.licenseUrl ? { license_url: m.licenseUrl } : {}),
+            });
+        }
+        for (const l of installed) {
+            if (l.purpose !== 'style' || data.some((s) => s.id === l.id))
+                continue;
+            data.push({
+                id: l.id,
+                object: 'image_style',
+                name: l.name,
+                availability: 'available',
+                download_bytes: l.approxSizeBytes,
+                base_models: l.baseModels.map((id) => `sd-cpp:${id}`),
+            });
+        }
+        return c.json({ object: 'list', data });
+    });
+    app.post('/ensure', async (c) => {
+        const { style } = ensureRequest.parse(await c.req.json());
+        const provider = await ctx.images.current();
+        if (!provider.listLoras || !provider.pullLora)
+            return c.json(apiError('styles_unsupported', 'Update Gezel to add image styles.'), 409);
+        const installed = await provider.listLoras();
+        if (installed.some((l) => l.id === style && l.purpose === 'style'))
+            return c.json({ status: 'ready', model_id: style });
+        const item = await ctx.catalog.get('image-lora', style);
+        if (item?.manifest.kind !== 'image-lora' || item.manifest.purpose !== 'style')
+            return c.json(apiError('unknown_style', 'That style is not in the catalog.'), 404);
+        const models = await provider.listInstalledModels();
+        if (!models.some((model) => item.manifest.kind === 'image-lora' && item.manifest.baseModels.includes(model.id))) {
+            return c.json(apiError('style_model_required', 'Download a compatible image model before adding this style.'), 409);
+        }
+        await pulls.start(style);
+        return c.json({ status: 'downloading', model_id: style, job_id: style }, 202);
+    });
+    registerImageEnsureRoutes(app, '/ensure', pulls, (id) => id);
+    app.delete('/:id', async (c) => {
+        const id = styleId.parse(c.req.param('id'));
+        if (pulls.get(id)?.finished === false)
+            return c.json(apiError('style_downloading', 'Cancel the style download before removing it.'), 409);
+        await ctx.images.reset();
+        const provider = await ctx.images.current();
+        if (!provider.deleteLora || !provider.listLoras)
+            return c.json(apiError('styles_unsupported', 'Update Gezel to manage image styles.'), 409);
+        if (!(await provider.listLoras()).some((l) => l.id === id && l.purpose === 'style'))
+            return c.json(apiError('unknown_style', 'That style is not installed.'), 404);
+        await provider.deleteLora(id);
+        return c.body(null, 204);
+    });
+    return app;
+}

package/dist/http/routes/v1-images.d.ts

@@ -16,6 +16,7 @@ export interface ImagesRouteContext {
         /** Stop the engine, draining renders, before its model files change. */
         reset(): Promise<void>;
         pulls: ImageModelPullRegistry;
+        loraPulls?: ImageModelPullRegistry;
     };
 }
 /**