@elizaos/shared 2.0.0-beta.1 → 2.0.11-beta.7

package/local-inference/gpu-profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gpu-profiles.d.ts","sourceRoot":"","sources":["../../src/local-inference/gpu-profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,MAAM,CAAC;AAEzE;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GACnB,KAAK,GACL,MAAM,GACN,MAAM,GACN,UAAU,GACV,UAAU,GACV,UAAU,GACV,UAAU,CAAC;AAEf,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,YAAY,CAAC;IACjB,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kEAAkE;IAClE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,+DAA+D;IAC/D,GAAG,EAAE,OAAO,CAAC;IAEb;;;;;OAKG;IACH,kBAAkB,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;IAEhD,uBAAuB;IACvB,SAAS,EAAE,OAAO,CAAC;IACnB,8BAA8B;IAC9B,YAAY,EAAE,WAAW,CAAC;IAC1B,8BAA8B;IAC9B,YAAY,EAAE,WAAW,CAAC;IAC1B;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;IAEnB,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IAEpB,0CAA0C;IAC1C,KAAK,EAAE,OAAO,CAAC;IACf,0CAA0C;IAC1C,MAAM,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,YAAY,EAAE,OAAO,CAAC;CACvB;AA+ID,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,CAKnE,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,aAAa,CAAC,YAAY,CAKvD,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAOpE;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAW9D"}

package/local-inference/gpu-profiles.js

@@ -0,0 +1,214 @@
+/**
+ * Per-GPU deployment profiles for single-GPU Eliza-1 servers.
+ *
+ * Scope: ONE GPU per host. We do not target NVLink, tensor-parallel splits,
+ * or multi-tenant datacenter workloads. The product target is "one
+ * conversation at a time on a single GPU box" — `--parallel N` can still go
+ * higher than on a phone, but the model is not split across cards.
+ *
+ * These profiles are *recommendations* — the runtime selects a bundle by id
+ * and then maps the host's GPU to a `GpuProfile` to fill in llama-server
+ * flags (KV cache types, n-gpu-layers, batch sizing, MTP draft range,
+ * mlock). A non-NVIDIA host returns `null` and the runtime falls back to
+ * the catalog defaults.
+ *
+ * The KV cache type names match `LocalRuntimeKernel` / the llama.cpp fork
+ * kernel handles (`qjl1_256`, `q4_polar`, `turbo3_0`, `turbo4_0`, `q8_0`,
+ * `f16`) so that `appendOptimizationFlags` + `applyGpuProfile` can pass
+ * them straight through to `--cache-type-k` / `--cache-type-v`.
+ *
+ * The active mobile/local release exposes Eliza-1 0_8b, 2b, 4b, 9b, and 27b
+ * tiers, with larger cards recommended toward the biggest installed bundle
+ * that leaves memory headroom.
+ */
+/**
+ * RTX 3090 — Ampere, 24 GiB, no FP8.
+ *
+ * Best current release fit: Eliza-1 9B with 4B/2B/0.8B fallbacks.
+ * Flash-attn helps Ampere meaningfully.
+ */
+const RTX_3090 = {
+    id: "rtx-3090",
+    displayName: "NVIDIA GeForce RTX 3090",
+    vramGb: 24,
+    computeCapability: "sm_86",
+    memoryBandwidthGBs: 936,
+    fp8: false,
+    recommendedBundles: [
+        "eliza-1-9b",
+        "eliza-1-4b",
+        "eliza-1-2b",
+        "eliza-1-0_8b",
+    ],
+    flashAttn: true,
+    // Ampere doesn't have the q4_polar kernel on the Polar fork; fall back to
+    // the Q8/Q4 KV quants which work on every sm_70+ GPU.
+    kvCacheTypeK: "q8_0",
+    kvCacheTypeV: "q4_polar",
+    nGpuLayers: -1,
+    contextSize: 65536,
+    parallel: 4,
+    batchSize: 2048,
+    ubatchSize: 512,
+    mtpDraftMin: 4,
+    mtpDraftMax: 16,
+    mlock: true,
+    noMmap: false,
+    kvSpillToCpu: false,
+};
+/**
+ * RTX 4090 — Ada Lovelace, 24 GiB, FP8 (no flash-attn-FP8 yet).
+ *
+ * Best current release fit: Eliza-1 27B with 9B/4B/2B/0.8B fallbacks.
+ */
+const RTX_4090 = {
+    id: "rtx-4090",
+    displayName: "NVIDIA GeForce RTX 4090",
+    vramGb: 24,
+    computeCapability: "sm_89",
+    memoryBandwidthGBs: 1008,
+    fp8: true,
+    recommendedBundles: [
+        "eliza-1-27b",
+        "eliza-1-9b",
+        "eliza-1-4b",
+        "eliza-1-2b",
+        "eliza-1-0_8b",
+    ],
+    flashAttn: true,
+    kvCacheTypeK: "qjl1_256",
+    kvCacheTypeV: "q4_polar",
+    nGpuLayers: -1,
+    contextSize: 131072,
+    parallel: 4,
+    batchSize: 2048,
+    ubatchSize: 512,
+    mtpDraftMin: 4,
+    mtpDraftMax: 24,
+    mlock: true,
+    noMmap: false,
+    kvSpillToCpu: false,
+};
+/**
+ * RTX 5090 — Blackwell, 32 GiB, FP8/FP4 first-class.
+ *
+ * Best current release fit: Eliza-1 27B. Blackwell sm_120 is new enough that
+ * the Polar/QJL kernels may not be pre-built — the runtime should probe
+ * `CAPABILITIES.json` and surface a structured error rather than silently
+ * falling back.
+ */
+const RTX_5090 = {
+    id: "rtx-5090",
+    displayName: "NVIDIA GeForce RTX 5090",
+    vramGb: 32,
+    computeCapability: "sm_120",
+    memoryBandwidthGBs: 1792,
+    fp8: true,
+    recommendedBundles: [
+        "eliza-1-27b",
+        "eliza-1-9b",
+        "eliza-1-4b",
+        "eliza-1-2b",
+        "eliza-1-0_8b",
+    ],
+    flashAttn: true,
+    kvCacheTypeK: "qjl1_256",
+    kvCacheTypeV: "q4_polar",
+    nGpuLayers: -1,
+    contextSize: 131072,
+    parallel: 8,
+    batchSize: 4096,
+    ubatchSize: 1024,
+    mtpDraftMin: 4,
+    mtpDraftMax: 24,
+    mlock: true,
+    noMmap: false,
+    kvSpillToCpu: false,
+};
+/**
+ * H200 — Hopper, 141 GiB HBM3e, 4.8 TB/s.
+ *
+ * Best current release fit: Eliza-1 27B.
+ */
+const H200 = {
+    id: "h200",
+    displayName: "NVIDIA H200 (SXM 141 GiB)",
+    vramGb: 141,
+    computeCapability: "sm_90",
+    memoryBandwidthGBs: 4800,
+    fp8: true,
+    recommendedBundles: [
+        "eliza-1-27b",
+        "eliza-1-9b",
+        "eliza-1-4b",
+        "eliza-1-2b",
+        "eliza-1-0_8b",
+    ],
+    flashAttn: true,
+    kvCacheTypeK: "qjl1_256",
+    kvCacheTypeV: "q4_polar",
+    nGpuLayers: -1,
+    contextSize: 131072,
+    parallel: 16,
+    batchSize: 4096,
+    ubatchSize: 2048,
+    mtpDraftMin: 8,
+    mtpDraftMax: 32,
+    mlock: true,
+    noMmap: false,
+    kvSpillToCpu: false,
+};
+export const GPU_PROFILES = {
+    "rtx-3090": RTX_3090,
+    "rtx-4090": RTX_4090,
+    "rtx-5090": RTX_5090,
+    h200: H200,
+};
+export const GPU_PROFILE_IDS = [
+    "rtx-3090",
+    "rtx-4090",
+    "rtx-5090",
+    "h200",
+];
+/**
+ * Match an `nvidia-smi --query-gpu=name` output line to a profile. Returns
+ * `null` when the card is not in the supported set; callers should fall
+ * back to the catalog defaults in that case rather than guess.
+ *
+ * The patterns are intentionally strict to avoid mis-classifying a 3080
+ * as a 3090, or an A100 as a 4090.
+ */
+export function matchGpuProfile(gpuName) {
+    const n = gpuName.toLowerCase();
+    if (n.includes("h200"))
+        return "h200";
+    if (n.includes("rtx 5090") || n.includes("rtx5090"))
+        return "rtx-5090";
+    if (n.includes("rtx 4090") || n.includes("rtx4090"))
+        return "rtx-4090";
+    if (n.includes("rtx 3090") || n.includes("rtx3090"))
+        return "rtx-3090";
+    return null;
+}
+/**
+ * Returns the headroom (in GiB) a profile reserves for the OS / driver /
+ * activations / drafter / N parallel-slot KV. Used for sizing checks
+ * before promoting a bundle to "fits" on a card.
+ *
+ * The figures are deliberate per-tier reserves, not a formula — different
+ * cards have different driver overheads (Windows display drivers steal
+ * ~1 GiB before workloads even start; H200 SXM has none).
+ */
+export function reservedHeadroomGb(profile) {
+    switch (profile.id) {
+        case "rtx-3090":
+            return 3;
+        case "rtx-4090":
+            return 3;
+        case "rtx-5090":
+            return 4;
+        case "h200":
+            return 6;
+    }
+}
+//# sourceMappingURL=gpu-profiles.js.map

package/local-inference/gpu-profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gpu-profiles.js","sourceRoot":"","sources":["../../src/local-inference/gpu-profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAkFH;;;;;GAKG;AACH,MAAM,QAAQ,GAAe;IAC3B,EAAE,EAAE,UAAU;IACd,WAAW,EAAE,yBAAyB;IACtC,MAAM,EAAE,EAAE;IACV,iBAAiB,EAAE,OAAO;IAC1B,kBAAkB,EAAE,GAAG;IACvB,GAAG,EAAE,KAAK;IACV,kBAAkB,EAAE;QAClB,YAAY;QACZ,YAAY;QACZ,YAAY;QACZ,cAAc;KACf;IACD,SAAS,EAAE,IAAI;IACf,0EAA0E;IAC1E,sDAAsD;IACtD,YAAY,EAAE,MAAM;IACpB,YAAY,EAAE,UAAU;IACxB,UAAU,EAAE,CAAC,CAAC;IACd,WAAW,EAAE,KAAK;IAClB,QAAQ,EAAE,CAAC;IACX,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,GAAG;IACf,WAAW,EAAE,CAAC;IACd,WAAW,EAAE,EAAE;IACf,KAAK,EAAE,IAAI;IACX,MAAM,EAAE,KAAK;IACb,YAAY,EAAE,KAAK;CACpB,CAAC;AAEF;;;;GAIG;AACH,MAAM,QAAQ,GAAe;IAC3B,EAAE,EAAE,UAAU;IACd,WAAW,EAAE,yBAAyB;IACtC,MAAM,EAAE,EAAE;IACV,iBAAiB,EAAE,OAAO;IAC1B,kBAAkB,EAAE,IAAI;IACxB,GAAG,EAAE,IAAI;IACT,kBAAkB,EAAE;QAClB,aAAa;QACb,YAAY;QACZ,YAAY;QACZ,YAAY;QACZ,cAAc;KACf;IACD,SAAS,EAAE,IAAI;IACf,YAAY,EAAE,UAAU;IACxB,YAAY,EAAE,UAAU;IACxB,UAAU,EAAE,CAAC,CAAC;IACd,WAAW,EAAE,MAAM;IACnB,QAAQ,EAAE,CAAC;IACX,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,GAAG;IACf,WAAW,EAAE,CAAC;IACd,WAAW,EAAE,EAAE;IACf,KAAK,EAAE,IAAI;IACX,MAAM,EAAE,KAAK;IACb,YAAY,EAAE,KAAK;CACpB,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,QAAQ,GAAe;IAC3B,EAAE,EAAE,UAAU;IACd,WAAW,EAAE,yBAAyB;IACtC,MAAM,EAAE,EAAE;IACV,iBAAiB,EAAE,QAAQ;IAC3B,kBAAkB,EAAE,IAAI;IACxB,GAAG,EAAE,IAAI;IACT,kBAAkB,EAAE;QAClB,aAAa;QACb,YAAY;QACZ,YAAY;QACZ,YAAY;QACZ,cAAc;KACf;IACD,SAAS,EAAE,IAAI;IACf,YAAY,EAAE,UAAU;IACxB,YAAY,EAAE,UAAU;IACxB,UAAU,EAAE,CAAC,CAAC;IACd,WAAW,EAAE,MAAM;IACnB,QAAQ,EAAE,CAAC;IACX,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,IAAI;IAChB,WAAW,EAAE,CAAC;IACd,WAAW,EAAE,EAAE;IACf,KAAK,EAAE,IAAI;IACX,MAAM,EAAE,KAAK;IACb,YAAY,EAAE,KAAK;CACpB,CAAC;AAEF;;;;GAIG;AACH,MAAM,IAAI,GAAe;IACvB,EAAE,EAAE,MAAM;IACV,WAAW,EAAE,2BAA2B;IACxC,MAAM,EAAE,GAAG;IACX,iBAAiB,EAAE,OAAO;IAC1B,kBAAkB,EAAE,IAAI;IACxB,GAAG,EAAE,IAAI;IACT,kBAAkB,EAAE;QAClB,aAAa;QACb,YAAY;QACZ,YAAY;QACZ,YAAY;QACZ,cAAc;KACf;IACD,SAAS,EAAE,IAAI;IACf,YAAY,EAAE,UAAU;IACxB,YAAY,EAAE,UAAU;IACxB,UAAU,EAAE,CAAC,CAAC;IACd,WAAW,EAAE,MAAM;IACnB,QAAQ,EAAE,EAAE;IACZ,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,IAAI;IAChB,WAAW,EAAE,CAAC;IACd,WAAW,EAAE,EAAE;IACf,KAAK,EAAE,IAAI;IACX,MAAM,EAAE,KAAK;IACb,YAAY,EAAE,KAAK;CACpB,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAA+C;IACtE,UAAU,EAAE,QAAQ;IACpB,UAAU,EAAE,QAAQ;IACpB,UAAU,EAAE,QAAQ;IACpB,IAAI,EAAE,IAAI;CACX,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAgC;IAC1D,UAAU;IACV,UAAU;IACV,UAAU;IACV,MAAM;CACP,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAChC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACtC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,UAAU,CAAC;IACvE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,UAAU,CAAC;IACvE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,UAAU,CAAC;IACvE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAmB;IACpD,QAAQ,OAAO,CAAC,EAAE,EAAE,CAAC;QACnB,KAAK,UAAU;YACb,OAAO,CAAC,CAAC;QACX,KAAK,UAAU;YACb,OAAO,CAAC,CAAC;QACX,KAAK,UAAU;YACb,OAAO,CAAC,CAAC;QACX,KAAK,MAAM;YACT,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC"}

package/local-inference/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * @elizaos/shared/local-inference
+ *
+ * Shared local-inference contract used by both the server-side service
+ * (`@elizaos/app-core/src/services/local-inference`) and the UI client
+ * (`@elizaos/ui/src/services/local-inference`). Type definitions live
+ * here; runtime logic stays in `app-core` (server-side KV cache
+ * management, llama-server lifecycle, conversation registry, metrics)
+ * and `ui` (client wiring against the agent API).
+ */
+export { buildHuggingFaceResolveUrl, buildHuggingFaceResolveUrlForPath, DEFAULT_ELIGIBLE_MODEL_IDS, defaultVoiceQuantForTier, ELIZA_1_HF_REPO, ELIZA_1_MTP_TIER_IDS, ELIZA_1_PLACEHOLDER_IDS, ELIZA_1_RELEASE_TIER_IDS, ELIZA_1_TIER_IDS, ELIZA_1_TIER_PUBLISH_STATUS, ELIZA_1_VISION_TIER_IDS, type Eliza1TierId, eliza1TierPublishStatus, FIRST_RUN_DEFAULT_MODEL_ID, findCatalogModel, isDefaultEligibleId, MODEL_CATALOG, type OmniVoiceQuantLevel, voiceQuantLadderForTier, } from "./catalog.js";
+export { GPU_PROFILE_IDS, GPU_PROFILES, type GpuProfile, type GpuProfileId, type KvCacheType, matchGpuProfile, reservedHeadroomGb, } from "./gpu-profiles.js";
+export { type Ed25519PublicKey, ManifestSignatureError, type SignatureVerifyInput, verifyManifestSignature, verifyManifestSignatureText, } from "./manifest-signature.js";
+export { applyNetworkPolicy, classifyNetwork, DEFAULT_NETWORK_POLICY_PREFERENCES, evaluateNetworkPolicy, inQuietHours, type NetworkClass, type NetworkPolicyDecision, type NetworkPolicyPreferences, type NetworkPolicyReason, type RawNetworkState, } from "./network-policy.js";
+export type { ProviderEnableState, ProviderId, ProviderMeta, ProviderStatus, } from "./providers-types.js";
+export type { RoutingPolicy, RoutingPreferences, } from "./routing-preferences.js";
+export { computeGenerationThroughput, type GenerationCounters, type GenerationThroughput, isGenerationCounters, } from "./throughput.js";
+export { type ActiveModelState, AGENT_MODEL_SLOTS, type AgentModelSlot, type CatalogModel, type CatalogQuantizationId, type CatalogQuantizationMatrix, type CatalogQuantizationVariant, type CpuFeatureProbe, type DownloadEvent, type DownloadJob, type DownloadState, type HardwareFitLevel, type HardwareProbe, type InstalledModel, type LocalInferenceDownloadStatus, type LocalInferenceReadiness, type LocalInferenceSlotReadiness, type LocalRuntimeAcceleration, type LocalRuntimeBackend, type LocalRuntimeKernel, type LocalRuntimeOptimizations, type MobileHardwareProbe, type ModelAssignments, type ModelBucket, type ModelCategory, type ModelHubSnapshot, type OpenVinoDeviceKind, type OpenVinoHardwareProbe, TEXT_GENERATION_SLOTS, type TextGenerationSlot, type TokenizerFamily, } from "./types.js";
+export type { VerifyResult, VerifyState } from "./verify.js";
+export { compareVoiceModelSemver, findVoiceModelVersion, latestVoiceModelVersion, VOICE_MODEL_VERSIONS, type VoiceModelEvalDeltas, type VoiceModelGgufAsset, type VoiceModelId, type VoiceModelQuant, type VoiceModelVersion, versionsFor, } from "./voice-models.js";
+//# sourceMappingURL=index.d.ts.map

package/local-inference/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/local-inference/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,EACjC,0BAA0B,EAC1B,wBAAwB,EACxB,eAAe,EACf,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACxB,gBAAgB,EAChB,2BAA2B,EAC3B,uBAAuB,EACvB,KAAK,YAAY,EACjB,uBAAuB,EACvB,0BAA0B,EAC1B,gBAAgB,EAChB,mBAAmB,EACnB,aAAa,EACb,KAAK,mBAAmB,EACxB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,eAAe,EACf,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,eAAe,EACf,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,gBAAgB,EACrB,sBAAsB,EACtB,KAAK,oBAAoB,EACzB,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,kCAAkC,EAClC,qBAAqB,EACrB,YAAY,EACZ,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,eAAe,GACrB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,mBAAmB,EACnB,UAAU,EACV,YAAY,EACZ,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,aAAa,EACb,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,2BAA2B,EAC3B,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,KAAK,gBAAgB,EACrB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,4BAA4B,EACjC,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,qBAAqB,EACrB,KAAK,kBAAkB,EACvB,KAAK,eAAe,GACrB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,WAAW,GACZ,MAAM,mBAAmB,CAAC"}

package/local-inference/index.js

@@ -0,0 +1,18 @@
+/**
+ * @elizaos/shared/local-inference
+ *
+ * Shared local-inference contract used by both the server-side service
+ * (`@elizaos/app-core/src/services/local-inference`) and the UI client
+ * (`@elizaos/ui/src/services/local-inference`). Type definitions live
+ * here; runtime logic stays in `app-core` (server-side KV cache
+ * management, llama-server lifecycle, conversation registry, metrics)
+ * and `ui` (client wiring against the agent API).
+ */
+export { buildHuggingFaceResolveUrl, buildHuggingFaceResolveUrlForPath, DEFAULT_ELIGIBLE_MODEL_IDS, defaultVoiceQuantForTier, ELIZA_1_HF_REPO, ELIZA_1_MTP_TIER_IDS, ELIZA_1_PLACEHOLDER_IDS, ELIZA_1_RELEASE_TIER_IDS, ELIZA_1_TIER_IDS, ELIZA_1_TIER_PUBLISH_STATUS, ELIZA_1_VISION_TIER_IDS, eliza1TierPublishStatus, FIRST_RUN_DEFAULT_MODEL_ID, findCatalogModel, isDefaultEligibleId, MODEL_CATALOG, voiceQuantLadderForTier, } from "./catalog.js";
+export { GPU_PROFILE_IDS, GPU_PROFILES, matchGpuProfile, reservedHeadroomGb, } from "./gpu-profiles.js";
+export { ManifestSignatureError, verifyManifestSignature, verifyManifestSignatureText, } from "./manifest-signature.js";
+export { applyNetworkPolicy, classifyNetwork, DEFAULT_NETWORK_POLICY_PREFERENCES, evaluateNetworkPolicy, inQuietHours, } from "./network-policy.js";
+export { computeGenerationThroughput, isGenerationCounters, } from "./throughput.js";
+export { AGENT_MODEL_SLOTS, TEXT_GENERATION_SLOTS, } from "./types.js";
+export { compareVoiceModelSemver, findVoiceModelVersion, latestVoiceModelVersion, VOICE_MODEL_VERSIONS, versionsFor, } from "./voice-models.js";
+//# sourceMappingURL=index.js.map

package/local-inference/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/local-inference/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,EACjC,0BAA0B,EAC1B,wBAAwB,EACxB,eAAe,EACf,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACxB,gBAAgB,EAChB,2BAA2B,EAC3B,uBAAuB,EAEvB,uBAAuB,EACvB,0BAA0B,EAC1B,gBAAgB,EAChB,mBAAmB,EACnB,aAAa,EAEb,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,eAAe,EACf,YAAY,EAIZ,eAAe,EACf,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAEL,sBAAsB,EAEtB,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,kCAAkC,EAClC,qBAAqB,EACrB,YAAY,GAMb,MAAM,qBAAqB,CAAC;AAW7B,OAAO,EACL,2BAA2B,EAG3B,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,iBAAiB,EA2BjB,qBAAqB,GAGtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EAMpB,WAAW,GACZ,MAAM,mBAAmB,CAAC"}

package/local-inference/manifest-signature.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Ed25519 signature verification for the Eliza Cloud voice-model catalog.
+ *
+ * Per R5-versioning §6.4: the catalog API JSON returned by Eliza Cloud is
+ * signed with the elizaOS publishing key. The runtime auto-updater MUST
+ * reject any catalog response whose signature does not verify before it
+ * recommends any download. The public verification key is compiled into
+ * the runtime binary; rotation is a two-release cycle (publish-with-both →
+ * rotate-to-new → retire-old).
+ *
+ * Implementation uses Web Crypto's Ed25519 primitive (Node ≥ 24, browsers
+ * since 2023). No vendor crypto dep — the runtime already targets Node 24+
+ * (`packages/shared/package.json:"engines.node": ">=24.0.0"`).
+ *
+ * Spec: `.swarm/research/R5-versioning.md` §3.1 + §6.4.
+ */
+/**
+ * Raw 32-byte Ed25519 public key, or a PEM/SPKI/JWK representation parsed
+ * to a `CryptoKey` already. Most callers pass the raw 32-byte form because
+ * that is how compile-time-embedded keys look.
+ */
+export type Ed25519PublicKey = Uint8Array | CryptoKey;
+export interface SignatureVerifyInput {
+    /** Raw response body bytes (UTF-8 encoded JSON or arbitrary bytes). */
+    readonly body: Uint8Array;
+    /**
+     * Base64-encoded 64-byte Ed25519 signature, as it would arrive in an
+     * HTTP header such as `X-Eliza-Signature`.
+     */
+    readonly signatureBase64: string;
+    /**
+     * One or more candidate public keys; the verify succeeds if ANY key
+     * accepts. This is the rotation-window contract (current + next).
+     */
+    readonly publicKeys: ReadonlyArray<Ed25519PublicKey>;
+}
+export declare class ManifestSignatureError extends Error {
+    readonly code: string;
+    constructor(message: string, code: string);
+}
+/**
+ * Verify `body` against `signatureBase64` using one or more Ed25519 public
+ * keys. Returns the index of the first key that accepted the signature.
+ * Throws `ManifestSignatureError` when no key accepts.
+ *
+ * The "accept any of N keys" contract is what makes signing-key rotation
+ * safe — during rotation we ship both the current and next key, the
+ * publisher signs with whichever it has access to, and the runtime accepts
+ * either.
+ */
+export declare function verifyManifestSignature(input: SignatureVerifyInput): Promise<number>;
+/**
+ * Convenience wrapper: encode a string body to UTF-8 bytes and verify. The
+ * caller MUST pass the EXACT body bytes the server signed — JSON `.parse`
+ * round-trips lose whitespace and would change the hash. The Cloud
+ * endpoint at `packages/cloud-api/v1/voice-models/catalog/route.ts` signs the
+ * serialized response body before sending; mirror that on the client by
+ * verifying the raw response text before parsing.
+ */
+export declare function verifyManifestSignatureText(body: string, signatureBase64: string, publicKeys: ReadonlyArray<Ed25519PublicKey>): Promise<number>;
+//# sourceMappingURL=manifest-signature.d.ts.map

package/local-inference/manifest-signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-signature.d.ts","sourceRoot":"","sources":["../../src/local-inference/manifest-signature.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,SAAS,CAAC;AAEtD,MAAM,WAAW,oBAAoB;IACnC,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAC;CACtD;AAED,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBACV,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;CAK1C;AAqDD;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,MAAM,CAAC,CAoDjB;AAED;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,EACvB,UAAU,EAAE,aAAa,CAAC,gBAAgB,CAAC,GAC1C,OAAO,CAAC,MAAM,CAAC,CAMjB"}

package/local-inference/manifest-signature.js

@@ -0,0 +1,129 @@
+/**
+ * Ed25519 signature verification for the Eliza Cloud voice-model catalog.
+ *
+ * Per R5-versioning §6.4: the catalog API JSON returned by Eliza Cloud is
+ * signed with the elizaOS publishing key. The runtime auto-updater MUST
+ * reject any catalog response whose signature does not verify before it
+ * recommends any download. The public verification key is compiled into
+ * the runtime binary; rotation is a two-release cycle (publish-with-both →
+ * rotate-to-new → retire-old).
+ *
+ * Implementation uses Web Crypto's Ed25519 primitive (Node ≥ 24, browsers
+ * since 2023). No vendor crypto dep — the runtime already targets Node 24+
+ * (`packages/shared/package.json:"engines.node": ">=24.0.0"`).
+ *
+ * Spec: `.swarm/research/R5-versioning.md` §3.1 + §6.4.
+ */
+export class ManifestSignatureError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.name = "ManifestSignatureError";
+        this.code = code;
+    }
+}
+const ED25519_ALGORITHM = { name: "Ed25519" };
+const ED25519_PUBLIC_KEY_BYTES = 32;
+const ED25519_SIGNATURE_BYTES = 64;
+/**
+ * Web Crypto's `BufferSource` signature in lib.dom.d.ts is now
+ * `ArrayBufferView<ArrayBuffer>`, which **excludes** the generic
+ * `Uint8Array<ArrayBufferLike>` we get from `atob` / `Buffer.from`
+ * because those may be backed by `SharedArrayBuffer`. Materialise into
+ * a fresh `ArrayBuffer`-backed `Uint8Array` at the API boundary.
+ */
+function toArrayBufferView(bytes) {
+    const copy = new Uint8Array(new ArrayBuffer(bytes.byteLength));
+    copy.set(bytes);
+    return copy;
+}
+function decodeBase64(input) {
+    // Node 24+ ships Buffer; the browser ships `atob`. Prefer `Buffer.from`
+    // when present because it is strict about padding; fall back to `atob`.
+    if (typeof Buffer !== "undefined") {
+        const buf = Buffer.from(input, "base64");
+        return new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength);
+    }
+    const bin = atob(input);
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++)
+        out[i] = bin.charCodeAt(i);
+    return out;
+}
+async function importRawEd25519PublicKey(raw) {
+    if (raw.byteLength !== ED25519_PUBLIC_KEY_BYTES) {
+        throw new ManifestSignatureError(`Ed25519 public key must be ${ED25519_PUBLIC_KEY_BYTES} bytes, got ${raw.byteLength}`, "ELIZA_VOICE_PUBKEY_BAD_LENGTH");
+    }
+    return crypto.subtle.importKey("raw", toArrayBufferView(raw), ED25519_ALGORITHM, false, ["verify"]);
+}
+async function coerceKey(key) {
+    if (key instanceof Uint8Array)
+        return importRawEd25519PublicKey(key);
+    return key;
+}
+/**
+ * Verify `body` against `signatureBase64` using one or more Ed25519 public
+ * keys. Returns the index of the first key that accepted the signature.
+ * Throws `ManifestSignatureError` when no key accepts.
+ *
+ * The "accept any of N keys" contract is what makes signing-key rotation
+ * safe — during rotation we ship both the current and next key, the
+ * publisher signs with whichever it has access to, and the runtime accepts
+ * either.
+ */
+export async function verifyManifestSignature(input) {
+    if (input.publicKeys.length === 0) {
+        throw new ManifestSignatureError("no public keys provided", "ELIZA_VOICE_PUBKEYS_EMPTY");
+    }
+    let signature;
+    try {
+        signature = decodeBase64(input.signatureBase64);
+    }
+    catch (err) {
+        throw new ManifestSignatureError(`signature is not valid base64: ${String(err)}`, "ELIZA_VOICE_SIG_BASE64");
+    }
+    if (signature.byteLength !== ED25519_SIGNATURE_BYTES) {
+        throw new ManifestSignatureError(`Ed25519 signature must be ${ED25519_SIGNATURE_BYTES} bytes, got ${signature.byteLength}`, "ELIZA_VOICE_SIG_BAD_LENGTH");
+    }
+    for (let i = 0; i < input.publicKeys.length; i++) {
+        const candidate = input.publicKeys[i];
+        if (candidate === undefined)
+            continue;
+        let cryptoKey;
+        try {
+            cryptoKey = await coerceKey(candidate);
+        }
+        catch (err) {
+            // A malformed key is a deployment bug, not an auth failure: surface
+            // it so the operator notices. Skip to the next key — rotation still
+            // works as long as ONE key is valid.
+            if (err instanceof ManifestSignatureError) {
+                // re-throw on the LAST key so the operator sees the misconfiguration
+                if (i === input.publicKeys.length - 1)
+                    throw err;
+                continue;
+            }
+            throw err;
+        }
+        const ok = await crypto.subtle.verify(ED25519_ALGORITHM, cryptoKey, toArrayBufferView(signature), toArrayBufferView(input.body));
+        if (ok)
+            return i;
+    }
+    throw new ManifestSignatureError("no candidate public key accepted the signature", "ELIZA_VOICE_SIG_REJECTED");
+}
+/**
+ * Convenience wrapper: encode a string body to UTF-8 bytes and verify. The
+ * caller MUST pass the EXACT body bytes the server signed — JSON `.parse`
+ * round-trips lose whitespace and would change the hash. The Cloud
+ * endpoint at `packages/cloud-api/v1/voice-models/catalog/route.ts` signs the
+ * serialized response body before sending; mirror that on the client by
+ * verifying the raw response text before parsing.
+ */
+export async function verifyManifestSignatureText(body, signatureBase64, publicKeys) {
+    return verifyManifestSignature({
+        body: new TextEncoder().encode(body),
+        signatureBase64,
+        publicKeys,
+    });
+}
+//# sourceMappingURL=manifest-signature.js.map

package/local-inference/manifest-signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-signature.js","sourceRoot":"","sources":["../../src/local-inference/manifest-signature.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAwBH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,IAAI,CAAS;IACtB,YAAY,OAAe,EAAE,IAAY;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,iBAAiB,GAAwB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACnE,MAAM,wBAAwB,GAAG,EAAW,CAAC;AAC7C,MAAM,uBAAuB,GAAG,EAAW,CAAC;AAE5C;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,KAAiB;IAC1C,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,wEAAwE;IACxE,wEAAwE;IACxE,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACzC,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACxB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,GAAe;IACtD,IAAI,GAAG,CAAC,UAAU,KAAK,wBAAwB,EAAE,CAAC;QAChD,MAAM,IAAI,sBAAsB,CAC9B,8BAA8B,wBAAwB,eAAe,GAAG,CAAC,UAAU,EAAE,EACrF,+BAA+B,CAChC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5B,KAAK,EACL,iBAAiB,CAAC,GAAG,CAAC,EACtB,iBAAiB,EACjB,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAqB;IAC5C,IAAI,GAAG,YAAY,UAAU;QAAE,OAAO,yBAAyB,CAAC,GAAG,CAAC,CAAC;IACrE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAA2B;IAE3B,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,sBAAsB,CAC9B,yBAAyB,EACzB,2BAA2B,CAC5B,CAAC;IACJ,CAAC;IACD,IAAI,SAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,sBAAsB,CAC9B,kCAAkC,MAAM,CAAC,GAAG,CAAC,EAAE,EAC/C,wBAAwB,CACzB,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,KAAK,uBAAuB,EAAE,CAAC;QACrD,MAAM,IAAI,sBAAsB,CAC9B,6BAA6B,uBAAuB,eAAe,SAAS,CAAC,UAAU,EAAE,EACzF,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,SAAS,KAAK,SAAS;YAAE,SAAS;QACtC,IAAI,SAAoB,CAAC;QACzB,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,oEAAoE;YACpE,qCAAqC;YACrC,IAAI,GAAG,YAAY,sBAAsB,EAAE,CAAC;gBAC1C,qEAAqE;gBACrE,IAAI,CAAC,KAAK,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAC;gBACjD,SAAS;YACX,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACnC,iBAAiB,EACjB,SAAS,EACT,iBAAiB,CAAC,SAAS,CAAC,EAC5B,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAC9B,CAAC;QACF,IAAI,EAAE;YAAE,OAAO,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,sBAAsB,CAC9B,gDAAgD,EAChD,0BAA0B,CAC3B,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAY,EACZ,eAAuB,EACvB,UAA2C;IAE3C,OAAO,uBAAuB,CAAC;QAC7B,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;QACpC,eAAe;QACf,UAAU;KACX,CAAC,CAAC;AACL,CAAC"}

package/local-inference/network-policy.d.ts

@@ -0,0 +1,115 @@
+/**
+ * Network-policy bridge — used by the voice-model auto-updater and the
+ * model downloader to decide whether a multi-GB pull is allowed to proceed
+ * without prompting the user.
+ *
+ * Per R5-versioning §4 (per-platform download policy):
+ *
+ * - Android: `NetworkCapabilities.hasCapability(NET_CAPABILITY_NOT_METERED)`.
+ *   Android explicitly warns against equating cellular = metered (a user
+ *   can have unmetered cellular, or a metered Wi-Fi hotspot), so the
+ *   metered flag is mandatory, not derived from connection type.
+ * - iOS: `NWPathMonitor.path.isExpensive` — Apple's "treat as metered" flag.
+ * - Desktop (Electron/Electrobun): WinRT `NetworkCostType`, NetworkManager
+ *   dbus `ActiveConnection.Metered`, or macOS `NWPathMonitor` via the
+ *   native bridge.
+ * - Headless server / CLI: skip auto-update entirely; explicit
+ *   `eliza models update` only.
+ *
+ * The actual platform shims are wired in `plugin-local-inference`'s
+ * `services/network-policy.ts`. This module defines the platform-agnostic
+ * decision contract and ships a pure `evaluateNetworkPolicy` that lets
+ * higher-level code unit-test the decision rule without a runtime.
+ */
+/**
+ * Five canonical network classes. Platform-specific connection types
+ * collapse into one of these. `unknown` is reserved for platforms where
+ * the OS does not expose enough information to disambiguate; the policy
+ * decision for `unknown` is intentionally platform-specific (see
+ * `applyNetworkPolicy`).
+ */
+export type NetworkClass = "wifi-unmetered" | "wifi-metered" | "ethernet-unmetered" | "ethernet-metered" | "cellular" | "unknown";
+/**
+ * Reason the policy reached its `allow` decision. Distinguishes the three
+ * dialogs the UI may need to show.
+ */
+export type NetworkPolicyReason = "auto" | "metered-ask" | "cellular-ask" | "headless-explicit-only";
+export interface NetworkPolicyDecision {
+    readonly class: NetworkClass;
+    /** Whether the download may proceed without prompting the user. */
+    readonly allow: boolean;
+    /** When `allow === false`, the UI must show a confirm dialog. */
+    readonly reason: NetworkPolicyReason;
+    /** Estimated bytes to transfer — used in the confirm dialog. */
+    readonly estimatedBytes: number;
+}
+/**
+ * User-facing toggles that override the default policy. Persisted in
+ * `eliza.json` via `voiceUpdatePolicy`. The cellular toggle is OWNER-only
+ * (D6 / R5-versioning §5.4).
+ */
+export interface NetworkPolicyPreferences {
+    /** Auto-update on Wi-Fi when unmetered. Default: true. */
+    readonly autoUpdateOnWifi: boolean;
+    /** Auto-update on cellular. OWNER-only toggle. Default: false. */
+    readonly autoUpdateOnCellular: boolean;
+    /** Auto-update on any metered link. Default: false. */
+    readonly autoUpdateOnMetered: boolean;
+    /**
+     * Quiet hours when auto-update is suppressed. Local clock. Empty array
+     * = no quiet hours. Each entry is `{ start: "HH:MM", end: "HH:MM" }`,
+     * inclusive of `start`, exclusive of `end`. Crossing midnight is
+     * permitted (`{ start: "22:00", end: "08:00" }`).
+     */
+    readonly quietHours: ReadonlyArray<{
+        start: string;
+        end: string;
+    }>;
+}
+export declare const DEFAULT_NETWORK_POLICY_PREFERENCES: NetworkPolicyPreferences;
+/**
+ * Raw network state as reported by the platform shim. Producers fill in
+ * what they know; the decision rule treats absent fields as "unknown".
+ */
+export interface RawNetworkState {
+    readonly connectionType: "wifi" | "ethernet" | "cellular" | "none" | "unknown";
+    /**
+     * True when the OS reports the link as metered. On Android this maps to
+     * `!NET_CAPABILITY_NOT_METERED`; on iOS to `path.isExpensive`; on
+     * Windows to `NetworkCostType.{Fixed,Variable}`; on Linux to
+     * NetworkManager's `Metered: yes`.
+     */
+    readonly metered: boolean | null;
+}
+/** Classify the raw state into one of the five canonical classes. */
+export declare function classifyNetwork(state: RawNetworkState): NetworkClass;
+/**
+ * Apply the user prefs + estimated transfer size to a classified network
+ * state. The decision rule:
+ *
+ * - cellular: ask unless `autoUpdateOnCellular === true`.
+ * - any `*-metered`: ask unless `autoUpdateOnMetered === true`.
+ * - `wifi-unmetered`: auto if `autoUpdateOnWifi === true`, else ask.
+ * - `ethernet-unmetered`: always auto (desktop wired link).
+ * - `unknown`: ask (mobile default; desktop callers can override).
+ *
+ * Quiet hours (if active) downgrade all `auto` decisions to `ask`.
+ */
+export declare function applyNetworkPolicy(klass: NetworkClass, prefs: NetworkPolicyPreferences, estimatedBytes: number, options?: {
+    now?: Date;
+    isHeadless?: boolean;
+}): NetworkPolicyDecision;
+/** True if `now` falls inside any quiet-hours window. */
+export declare function inQuietHours(windows: ReadonlyArray<{
+    start: string;
+    end: string;
+}>, now: Date): boolean;
+/**
+ * Convenience composition for callers that have a raw state + prefs +
+ * estimated size in hand and want a single decision.
+ */
+export declare function evaluateNetworkPolicy(state: RawNetworkState, prefs: NetworkPolicyPreferences, estimatedBytes: number, options?: {
+    now?: Date;
+    isHeadless?: boolean;
+}): NetworkPolicyDecision;
+//# sourceMappingURL=network-policy.d.ts.map

package/local-inference/network-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-policy.d.ts","sourceRoot":"","sources":["../../src/local-inference/network-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GACpB,gBAAgB,GAChB,cAAc,GACd,oBAAoB,GACpB,kBAAkB,GAClB,UAAU,GACV,SAAS,CAAC;AAEd;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAC3B,MAAM,GACN,aAAa,GACb,cAAc,GACd,wBAAwB,CAAC;AAE7B,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,mEAAmE;IACnE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,gEAAgE;IAChE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,0DAA0D;IAC1D,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,kEAAkE;IAClE,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,uDAAuD;IACvD,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpE;AAED,eAAO,MAAM,kCAAkC,EAAE,wBAKhD,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,cAAc,EACnB,MAAM,GACN,UAAU,GACV,UAAU,GACV,MAAM,GACN,SAAS,CAAC;IACd;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;CAClC;AAED,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,YAAY,CAcpE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,wBAAwB,EAC/B,cAAc,EAAE,MAAM,EACtB,OAAO,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAC7C,qBAAqB,CAkDvB;AAYD,yDAAyD;AACzD,wBAAgB,YAAY,CAC1B,OAAO,EAAE,aAAa,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,EACtD,GAAG,EAAE,IAAI,GACR,OAAO,CAgBT;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,wBAAwB,EAC/B,cAAc,EAAE,MAAM,EACtB,OAAO,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAC7C,qBAAqB,CAOvB"}