@elizaos/shared 2.0.0-beta.1 → 2.0.3-beta.3

package/local-inference/index.d.ts

@@ -0,0 +1,26 @@
+/**
+ * @elizaos/shared/local-inference
+ *
+ * Shared local-inference contract used by both the server-side service
+ * (`@elizaos/app-core/src/services/local-inference`) and the UI client
+ * (`@elizaos/ui/src/services/local-inference`). Type definitions live
+ * here; runtime logic stays in `app-core` (server-side KV cache
+ * management, llama-server lifecycle, conversation registry, metrics)
+ * and `ui` (client wiring against the agent API).
+ */
+export { buildHuggingFaceResolveUrl, buildHuggingFaceResolveUrlForPath, DEFAULT_ELIGIBLE_MODEL_IDS, defaultVoiceQuantForTier, ELIZA_1_HF_REPO, ELIZA_1_HOSTED_MTP_TIER_IDS, ELIZA_1_MTP_TIER_IDS, ELIZA_1_ON_DEVICE_TIER_IDS, ELIZA_1_PLACEHOLDER_IDS, ELIZA_1_RELEASE_TIER_IDS, ELIZA_1_TIER_IDS, ELIZA_1_TIER_PUBLISH_STATUS, ELIZA_1_VISION_TIER_IDS, type Eliza1TierId, eliza1TierPublishStatus, FIRST_RUN_DEFAULT_MODEL_ID, findCatalogModel, isDefaultEligibleId, isOnDeviceTier, MODEL_CATALOG, type OmniVoiceQuantLevel, voiceQuantLadderForTier, } from "./catalog.js";
+export { ELIZA_1_CONTEXT_TARGET, ELIZA_1_KV_QUANT, ELIZA_1_MIN_LOCAL_CONTEXT, type Eliza1Fit, selectBestEliza1Fit, } from "./device-fit.js";
+export { GPU_PROFILE_IDS, GPU_PROFILES, type GpuProfile, type GpuProfileId, type KvCacheType, matchGpuProfile, reservedHeadroomGb, } from "./gpu-profiles.js";
+export { type HfDownloadBase, resolveHfDownloadBase, } from "./hf-proxy.js";
+export { hasHuggingFaceToken, isHuggingFaceHost, resolveHubAuthHeaders, resolveHuggingFaceToken, } from "./hub-auth.js";
+export { type Ed25519PublicKey, ManifestSignatureError, type SignatureVerifyInput, verifyManifestSignature, verifyManifestSignatureText, } from "./manifest-signature.js";
+export { applyNetworkPolicy, classifyNetwork, DEFAULT_NETWORK_POLICY_PREFERENCES, evaluateNetworkPolicy, inQuietHours, type NetworkClass, type NetworkPolicyDecision, type NetworkPolicyPreferences, type NetworkPolicyReason, type RawNetworkState, } from "./network-policy.js";
+export type { ProviderEnableState, ProviderId, ProviderMeta, ProviderStatus, } from "./providers-types.js";
+export type { RoutingPolicy, RoutingPreferences, } from "./routing-preferences.js";
+export { DEFAULT_ROUTING_POLICY, isRoutingPolicy, ROUTING_POLICIES, } from "./routing-preferences.js";
+export { classifyCatalogModelRuntimeClass, classifyInstalledModelRuntimeClass, type RuntimeClass, withRuntimeClass, } from "./runtime-class.js";
+export { computeGenerationThroughput, type GenerationCounters, type GenerationThroughput, isGenerationCounters, } from "./throughput.js";
+export { type ActiveModelState, AGENT_MODEL_SLOTS, type AgentModelSlot, type CatalogModel, type CatalogQuantizationId, type CatalogQuantizationMatrix, type CatalogQuantizationVariant, type CpuFeatureProbe, type DownloadEvent, type DownloadJob, type DownloadState, type HardwareFitLevel, type HardwareProbe, type InstalledModel, type LocalInferenceDownloadStatus, type LocalInferenceReadiness, type LocalInferenceSlotReadiness, type LocalRuntimeAcceleration, type LocalRuntimeBackend, type LocalRuntimeKernel, type LocalRuntimeOptimizations, type MobileHardwareProbe, type ModelAssignments, type ModelBucket, type ModelCategory, type ModelHubSnapshot, type OpenVinoDeviceKind, type OpenVinoHardwareProbe, TEXT_GENERATION_SLOTS, type TextGenerationSlot, type TokenizerFamily, } from "./types.js";
+export type { VerifyResult, VerifyState } from "./verify.js";
+export { compareVoiceModelSemver, findVoiceModelVersion, latestVoiceModelVersion, VOICE_MODEL_VERSIONS, type VoiceModelEvalDeltas, type VoiceModelGgufAsset, type VoiceModelId, type VoiceModelQuant, type VoiceModelVersion, versionsFor, } from "./voice-models.js";
+//# sourceMappingURL=index.d.ts.map

package/local-inference/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/local-inference/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,EACjC,0BAA0B,EAC1B,wBAAwB,EACxB,eAAe,EACf,2BAA2B,EAC3B,oBAAoB,EACpB,0BAA0B,EAC1B,uBAAuB,EACvB,wBAAwB,EACxB,gBAAgB,EAChB,2BAA2B,EAC3B,uBAAuB,EACvB,KAAK,YAAY,EACjB,uBAAuB,EACvB,0BAA0B,EAC1B,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,aAAa,EACb,KAAK,mBAAmB,EACxB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,yBAAyB,EACzB,KAAK,SAAS,EACd,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,eAAe,EACf,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,eAAe,EACf,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,cAAc,EACnB,qBAAqB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,KAAK,gBAAgB,EACrB,sBAAsB,EACtB,KAAK,oBAAoB,EACzB,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,kCAAkC,EAClC,qBAAqB,EACrB,YAAY,EACZ,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,eAAe,GACrB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,mBAAmB,EACnB,UAAU,EACV,YAAY,EACZ,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,aAAa,EACb,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAClC,KAAK,YAAY,EACjB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,EAC3B,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,KAAK,gBAAgB,EACrB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,4BAA4B,EACjC,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,qBAAqB,EACrB,KAAK,kBAAkB,EACvB,KAAK,eAAe,GACrB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,WAAW,GACZ,MAAM,mBAAmB,CAAC"}

package/local-inference/index.js

@@ -0,0 +1,23 @@
+/**
+ * @elizaos/shared/local-inference
+ *
+ * Shared local-inference contract used by both the server-side service
+ * (`@elizaos/app-core/src/services/local-inference`) and the UI client
+ * (`@elizaos/ui/src/services/local-inference`). Type definitions live
+ * here; runtime logic stays in `app-core` (server-side KV cache
+ * management, llama-server lifecycle, conversation registry, metrics)
+ * and `ui` (client wiring against the agent API).
+ */
+export { buildHuggingFaceResolveUrl, buildHuggingFaceResolveUrlForPath, DEFAULT_ELIGIBLE_MODEL_IDS, defaultVoiceQuantForTier, ELIZA_1_HF_REPO, ELIZA_1_HOSTED_MTP_TIER_IDS, ELIZA_1_MTP_TIER_IDS, ELIZA_1_ON_DEVICE_TIER_IDS, ELIZA_1_PLACEHOLDER_IDS, ELIZA_1_RELEASE_TIER_IDS, ELIZA_1_TIER_IDS, ELIZA_1_TIER_PUBLISH_STATUS, ELIZA_1_VISION_TIER_IDS, eliza1TierPublishStatus, FIRST_RUN_DEFAULT_MODEL_ID, findCatalogModel, isDefaultEligibleId, isOnDeviceTier, MODEL_CATALOG, voiceQuantLadderForTier, } from "./catalog.js";
+export { ELIZA_1_CONTEXT_TARGET, ELIZA_1_KV_QUANT, ELIZA_1_MIN_LOCAL_CONTEXT, selectBestEliza1Fit, } from "./device-fit.js";
+export { GPU_PROFILE_IDS, GPU_PROFILES, matchGpuProfile, reservedHeadroomGb, } from "./gpu-profiles.js";
+export { resolveHfDownloadBase, } from "./hf-proxy.js";
+export { hasHuggingFaceToken, isHuggingFaceHost, resolveHubAuthHeaders, resolveHuggingFaceToken, } from "./hub-auth.js";
+export { ManifestSignatureError, verifyManifestSignature, verifyManifestSignatureText, } from "./manifest-signature.js";
+export { applyNetworkPolicy, classifyNetwork, DEFAULT_NETWORK_POLICY_PREFERENCES, evaluateNetworkPolicy, inQuietHours, } from "./network-policy.js";
+export { DEFAULT_ROUTING_POLICY, isRoutingPolicy, ROUTING_POLICIES, } from "./routing-preferences.js";
+export { classifyCatalogModelRuntimeClass, classifyInstalledModelRuntimeClass, withRuntimeClass, } from "./runtime-class.js";
+export { computeGenerationThroughput, isGenerationCounters, } from "./throughput.js";
+export { AGENT_MODEL_SLOTS, TEXT_GENERATION_SLOTS, } from "./types.js";
+export { compareVoiceModelSemver, findVoiceModelVersion, latestVoiceModelVersion, VOICE_MODEL_VERSIONS, versionsFor, } from "./voice-models.js";
+//# sourceMappingURL=index.js.map

package/local-inference/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/local-inference/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,EACjC,0BAA0B,EAC1B,wBAAwB,EACxB,eAAe,EACf,2BAA2B,EAC3B,oBAAoB,EACpB,0BAA0B,EAC1B,uBAAuB,EACvB,wBAAwB,EACxB,gBAAgB,EAChB,2BAA2B,EAC3B,uBAAuB,EAEvB,uBAAuB,EACvB,0BAA0B,EAC1B,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,aAAa,EAEb,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,yBAAyB,EAEzB,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,eAAe,EACf,YAAY,EAIZ,eAAe,EACf,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAEL,qBAAqB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EAEL,sBAAsB,EAEtB,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,kCAAkC,EAClC,qBAAqB,EACrB,YAAY,GAMb,MAAM,qBAAqB,CAAC;AAW7B,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAElC,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,EAG3B,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,iBAAiB,EA2BjB,qBAAqB,GAGtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EAMpB,WAAW,GACZ,MAAM,mBAAmB,CAAC"}

package/local-inference/manifest-signature.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Ed25519 signature verification for the Eliza Cloud voice-model catalog.
+ *
+ * Per R5-versioning §6.4: the catalog API JSON returned by Eliza Cloud is
+ * signed with the elizaOS publishing key. The runtime auto-updater MUST
+ * reject any catalog response whose signature does not verify before it
+ * recommends any download. The public verification key is compiled into
+ * the runtime binary; rotation is a two-release cycle (publish-with-both →
+ * rotate-to-new → retire-old).
+ *
+ * Implementation uses Web Crypto's Ed25519 primitive (Node ≥ 24, browsers
+ * since 2023). No vendor crypto dep — the runtime already targets Node 24+
+ * (`packages/shared/package.json:"engines.node": ">=24.0.0"`).
+ *
+ * Spec: `.swarm/research/R5-versioning.md` §3.1 + §6.4.
+ */
+/**
+ * Raw 32-byte Ed25519 public key, or a PEM/SPKI/JWK representation parsed
+ * to a `CryptoKey` already. Most callers pass the raw 32-byte form because
+ * that is how compile-time-embedded keys look.
+ */
+export type Ed25519PublicKey = Uint8Array | CryptoKey;
+export interface SignatureVerifyInput {
+    /** Raw response body bytes (UTF-8 encoded JSON or arbitrary bytes). */
+    readonly body: Uint8Array;
+    /**
+     * Base64-encoded 64-byte Ed25519 signature, as it would arrive in an
+     * HTTP header such as `X-Eliza-Signature`.
+     */
+    readonly signatureBase64: string;
+    /**
+     * One or more candidate public keys; the verify succeeds if ANY key
+     * accepts. This is the rotation-window contract (current + next).
+     */
+    readonly publicKeys: ReadonlyArray<Ed25519PublicKey>;
+}
+export declare class ManifestSignatureError extends Error {
+    readonly code: string;
+    constructor(message: string, code: string);
+}
+/**
+ * Verify `body` against `signatureBase64` using one or more Ed25519 public
+ * keys. Returns the index of the first key that accepted the signature.
+ * Throws `ManifestSignatureError` when no key accepts.
+ *
+ * The "accept any of N keys" contract is what makes signing-key rotation
+ * safe — during rotation we ship both the current and next key, the
+ * publisher signs with whichever it has access to, and the runtime accepts
+ * either.
+ */
+export declare function verifyManifestSignature(input: SignatureVerifyInput): Promise<number>;
+/**
+ * Convenience wrapper: encode a string body to UTF-8 bytes and verify. The
+ * caller MUST pass the EXACT body bytes the server signed — JSON `.parse`
+ * round-trips lose whitespace and would change the hash. The Cloud
+ * endpoint at `packages/cloud-api/v1/voice-models/catalog/route.ts` signs the
+ * serialized response body before sending; mirror that on the client by
+ * verifying the raw response text before parsing.
+ */
+export declare function verifyManifestSignatureText(body: string, signatureBase64: string, publicKeys: ReadonlyArray<Ed25519PublicKey>): Promise<number>;
+//# sourceMappingURL=manifest-signature.d.ts.map

package/local-inference/manifest-signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-signature.d.ts","sourceRoot":"","sources":["../../src/local-inference/manifest-signature.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,SAAS,CAAC;AAEtD,MAAM,WAAW,oBAAoB;IACnC,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAC;CACtD;AAED,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBACV,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;CAK1C;AAqDD;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,MAAM,CAAC,CAoDjB;AAED;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,EACvB,UAAU,EAAE,aAAa,CAAC,gBAAgB,CAAC,GAC1C,OAAO,CAAC,MAAM,CAAC,CAMjB"}

package/local-inference/manifest-signature.js

@@ -0,0 +1,129 @@
+/**
+ * Ed25519 signature verification for the Eliza Cloud voice-model catalog.
+ *
+ * Per R5-versioning §6.4: the catalog API JSON returned by Eliza Cloud is
+ * signed with the elizaOS publishing key. The runtime auto-updater MUST
+ * reject any catalog response whose signature does not verify before it
+ * recommends any download. The public verification key is compiled into
+ * the runtime binary; rotation is a two-release cycle (publish-with-both →
+ * rotate-to-new → retire-old).
+ *
+ * Implementation uses Web Crypto's Ed25519 primitive (Node ≥ 24, browsers
+ * since 2023). No vendor crypto dep — the runtime already targets Node 24+
+ * (`packages/shared/package.json:"engines.node": ">=24.0.0"`).
+ *
+ * Spec: `.swarm/research/R5-versioning.md` §3.1 + §6.4.
+ */
+export class ManifestSignatureError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.name = "ManifestSignatureError";
+        this.code = code;
+    }
+}
+const ED25519_ALGORITHM = { name: "Ed25519" };
+const ED25519_PUBLIC_KEY_BYTES = 32;
+const ED25519_SIGNATURE_BYTES = 64;
+/**
+ * Web Crypto's `BufferSource` signature in lib.dom.d.ts is now
+ * `ArrayBufferView<ArrayBuffer>`, which **excludes** the generic
+ * `Uint8Array<ArrayBufferLike>` we get from `atob` / `Buffer.from`
+ * because those may be backed by `SharedArrayBuffer`. Materialise into
+ * a fresh `ArrayBuffer`-backed `Uint8Array` at the API boundary.
+ */
+function toArrayBufferView(bytes) {
+    const copy = new Uint8Array(new ArrayBuffer(bytes.byteLength));
+    copy.set(bytes);
+    return copy;
+}
+function decodeBase64(input) {
+    // Node 24+ ships Buffer; the browser ships `atob`. Prefer `Buffer.from`
+    // when present because it is strict about padding; fall back to `atob`.
+    if (typeof Buffer !== "undefined") {
+        const buf = Buffer.from(input, "base64");
+        return new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength);
+    }
+    const bin = atob(input);
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++)
+        out[i] = bin.charCodeAt(i);
+    return out;
+}
+async function importRawEd25519PublicKey(raw) {
+    if (raw.byteLength !== ED25519_PUBLIC_KEY_BYTES) {
+        throw new ManifestSignatureError(`Ed25519 public key must be ${ED25519_PUBLIC_KEY_BYTES} bytes, got ${raw.byteLength}`, "ELIZA_VOICE_PUBKEY_BAD_LENGTH");
+    }
+    return crypto.subtle.importKey("raw", toArrayBufferView(raw), ED25519_ALGORITHM, false, ["verify"]);
+}
+async function coerceKey(key) {
+    if (key instanceof Uint8Array)
+        return importRawEd25519PublicKey(key);
+    return key;
+}
+/**
+ * Verify `body` against `signatureBase64` using one or more Ed25519 public
+ * keys. Returns the index of the first key that accepted the signature.
+ * Throws `ManifestSignatureError` when no key accepts.
+ *
+ * The "accept any of N keys" contract is what makes signing-key rotation
+ * safe — during rotation we ship both the current and next key, the
+ * publisher signs with whichever it has access to, and the runtime accepts
+ * either.
+ */
+export async function verifyManifestSignature(input) {
+    if (input.publicKeys.length === 0) {
+        throw new ManifestSignatureError("no public keys provided", "ELIZA_VOICE_PUBKEYS_EMPTY");
+    }
+    let signature;
+    try {
+        signature = decodeBase64(input.signatureBase64);
+    }
+    catch (err) {
+        throw new ManifestSignatureError(`signature is not valid base64: ${String(err)}`, "ELIZA_VOICE_SIG_BASE64");
+    }
+    if (signature.byteLength !== ED25519_SIGNATURE_BYTES) {
+        throw new ManifestSignatureError(`Ed25519 signature must be ${ED25519_SIGNATURE_BYTES} bytes, got ${signature.byteLength}`, "ELIZA_VOICE_SIG_BAD_LENGTH");
+    }
+    for (let i = 0; i < input.publicKeys.length; i++) {
+        const candidate = input.publicKeys[i];
+        if (candidate === undefined)
+            continue;
+        let cryptoKey;
+        try {
+            cryptoKey = await coerceKey(candidate);
+        }
+        catch (err) {
+            // A malformed key is a deployment bug, not an auth failure: surface
+            // it so the operator notices. Skip to the next key — rotation still
+            // works as long as ONE key is valid.
+            if (err instanceof ManifestSignatureError) {
+                // re-throw on the LAST key so the operator sees the misconfiguration
+                if (i === input.publicKeys.length - 1)
+                    throw err;
+                continue;
+            }
+            throw err;
+        }
+        const ok = await crypto.subtle.verify(ED25519_ALGORITHM, cryptoKey, toArrayBufferView(signature), toArrayBufferView(input.body));
+        if (ok)
+            return i;
+    }
+    throw new ManifestSignatureError("no candidate public key accepted the signature", "ELIZA_VOICE_SIG_REJECTED");
+}
+/**
+ * Convenience wrapper: encode a string body to UTF-8 bytes and verify. The
+ * caller MUST pass the EXACT body bytes the server signed — JSON `.parse`
+ * round-trips lose whitespace and would change the hash. The Cloud
+ * endpoint at `packages/cloud-api/v1/voice-models/catalog/route.ts` signs the
+ * serialized response body before sending; mirror that on the client by
+ * verifying the raw response text before parsing.
+ */
+export async function verifyManifestSignatureText(body, signatureBase64, publicKeys) {
+    return verifyManifestSignature({
+        body: new TextEncoder().encode(body),
+        signatureBase64,
+        publicKeys,
+    });
+}
+//# sourceMappingURL=manifest-signature.js.map

package/local-inference/manifest-signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-signature.js","sourceRoot":"","sources":["../../src/local-inference/manifest-signature.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAwBH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,IAAI,CAAS;IACtB,YAAY,OAAe,EAAE,IAAY;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,iBAAiB,GAAwB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACnE,MAAM,wBAAwB,GAAG,EAAW,CAAC;AAC7C,MAAM,uBAAuB,GAAG,EAAW,CAAC;AAE5C;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,KAAiB;IAC1C,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,wEAAwE;IACxE,wEAAwE;IACxE,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACzC,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACxB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,GAAe;IACtD,IAAI,GAAG,CAAC,UAAU,KAAK,wBAAwB,EAAE,CAAC;QAChD,MAAM,IAAI,sBAAsB,CAC9B,8BAA8B,wBAAwB,eAAe,GAAG,CAAC,UAAU,EAAE,EACrF,+BAA+B,CAChC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5B,KAAK,EACL,iBAAiB,CAAC,GAAG,CAAC,EACtB,iBAAiB,EACjB,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAqB;IAC5C,IAAI,GAAG,YAAY,UAAU;QAAE,OAAO,yBAAyB,CAAC,GAAG,CAAC,CAAC;IACrE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAA2B;IAE3B,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,sBAAsB,CAC9B,yBAAyB,EACzB,2BAA2B,CAC5B,CAAC;IACJ,CAAC;IACD,IAAI,SAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,sBAAsB,CAC9B,kCAAkC,MAAM,CAAC,GAAG,CAAC,EAAE,EAC/C,wBAAwB,CACzB,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,KAAK,uBAAuB,EAAE,CAAC;QACrD,MAAM,IAAI,sBAAsB,CAC9B,6BAA6B,uBAAuB,eAAe,SAAS,CAAC,UAAU,EAAE,EACzF,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,SAAS,KAAK,SAAS;YAAE,SAAS;QACtC,IAAI,SAAoB,CAAC;QACzB,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,oEAAoE;YACpE,qCAAqC;YACrC,IAAI,GAAG,YAAY,sBAAsB,EAAE,CAAC;gBAC1C,qEAAqE;gBACrE,IAAI,CAAC,KAAK,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAC;gBACjD,SAAS;YACX,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACnC,iBAAiB,EACjB,SAAS,EACT,iBAAiB,CAAC,SAAS,CAAC,EAC5B,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAC9B,CAAC;QACF,IAAI,EAAE;YAAE,OAAO,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,sBAAsB,CAC9B,gDAAgD,EAChD,0BAA0B,CAC3B,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAY,EACZ,eAAuB,EACvB,UAA2C;IAE3C,OAAO,uBAAuB,CAAC;QAC7B,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;QACpC,eAAe;QACf,UAAU;KACX,CAAC,CAAC;AACL,CAAC"}

package/local-inference/network-policy.d.ts

@@ -0,0 +1,115 @@
+/**
+ * Network-policy bridge — used by the voice-model auto-updater and the
+ * model downloader to decide whether a multi-GB pull is allowed to proceed
+ * without prompting the user.
+ *
+ * Per R5-versioning §4 (per-platform download policy):
+ *
+ * - Android: `NetworkCapabilities.hasCapability(NET_CAPABILITY_NOT_METERED)`.
+ *   Android explicitly warns against equating cellular = metered (a user
+ *   can have unmetered cellular, or a metered Wi-Fi hotspot), so the
+ *   metered flag is mandatory, not derived from connection type.
+ * - iOS: `NWPathMonitor.path.isExpensive` — Apple's "treat as metered" flag.
+ * - Desktop (Electron/Electrobun): WinRT `NetworkCostType`, NetworkManager
+ *   dbus `ActiveConnection.Metered`, or macOS `NWPathMonitor` via the
+ *   native bridge.
+ * - Headless server / CLI: skip auto-update entirely; explicit
+ *   `eliza models update` only.
+ *
+ * The actual platform shims are wired in `plugin-local-inference`'s
+ * `services/network-policy.ts`. This module defines the platform-agnostic
+ * decision contract and ships a pure `evaluateNetworkPolicy` that lets
+ * higher-level code unit-test the decision rule without a runtime.
+ */
+/**
+ * Five canonical network classes. Platform-specific connection types
+ * collapse into one of these. `unknown` is reserved for platforms where
+ * the OS does not expose enough information to disambiguate; the policy
+ * decision for `unknown` is intentionally platform-specific (see
+ * `applyNetworkPolicy`).
+ */
+export type NetworkClass = "wifi-unmetered" | "wifi-metered" | "ethernet-unmetered" | "ethernet-metered" | "cellular" | "unknown";
+/**
+ * Reason the policy reached its `allow` decision. Distinguishes the three
+ * dialogs the UI may need to show.
+ */
+export type NetworkPolicyReason = "auto" | "metered-ask" | "cellular-ask" | "headless-explicit-only";
+export interface NetworkPolicyDecision {
+    readonly class: NetworkClass;
+    /** Whether the download may proceed without prompting the user. */
+    readonly allow: boolean;
+    /** When `allow === false`, the UI must show a confirm dialog. */
+    readonly reason: NetworkPolicyReason;
+    /** Estimated bytes to transfer — used in the confirm dialog. */
+    readonly estimatedBytes: number;
+}
+/**
+ * User-facing toggles that override the default policy. Persisted in
+ * `eliza.json` via `voiceUpdatePolicy`. The cellular toggle is OWNER-only
+ * (D6 / R5-versioning §5.4).
+ */
+export interface NetworkPolicyPreferences {
+    /** Auto-update on Wi-Fi when unmetered. Default: true. */
+    readonly autoUpdateOnWifi: boolean;
+    /** Auto-update on cellular. OWNER-only toggle. Default: false. */
+    readonly autoUpdateOnCellular: boolean;
+    /** Auto-update on any metered link. Default: false. */
+    readonly autoUpdateOnMetered: boolean;
+    /**
+     * Quiet hours when auto-update is suppressed. Local clock. Empty array
+     * = no quiet hours. Each entry is `{ start: "HH:MM", end: "HH:MM" }`,
+     * inclusive of `start`, exclusive of `end`. Crossing midnight is
+     * permitted (`{ start: "22:00", end: "08:00" }`).
+     */
+    readonly quietHours: ReadonlyArray<{
+        start: string;
+        end: string;
+    }>;
+}
+export declare const DEFAULT_NETWORK_POLICY_PREFERENCES: NetworkPolicyPreferences;
+/**
+ * Raw network state as reported by the platform shim. Producers fill in
+ * what they know; the decision rule treats absent fields as "unknown".
+ */
+export interface RawNetworkState {
+    readonly connectionType: "wifi" | "ethernet" | "cellular" | "none" | "unknown";
+    /**
+     * True when the OS reports the link as metered. On Android this maps to
+     * `!NET_CAPABILITY_NOT_METERED`; on iOS to `path.isExpensive`; on
+     * Windows to `NetworkCostType.{Fixed,Variable}`; on Linux to
+     * NetworkManager's `Metered: yes`.
+     */
+    readonly metered: boolean | null;
+}
+/** Classify the raw state into one of the five canonical classes. */
+export declare function classifyNetwork(state: RawNetworkState): NetworkClass;
+/**
+ * Apply the user prefs + estimated transfer size to a classified network
+ * state. The decision rule:
+ *
+ * - cellular: ask unless `autoUpdateOnCellular === true`.
+ * - any `*-metered`: ask unless `autoUpdateOnMetered === true`.
+ * - `wifi-unmetered`: auto if `autoUpdateOnWifi === true`, else ask.
+ * - `ethernet-unmetered`: always auto (desktop wired link).
+ * - `unknown`: ask (mobile default; desktop callers can override).
+ *
+ * Quiet hours (if active) downgrade all `auto` decisions to `ask`.
+ */
+export declare function applyNetworkPolicy(klass: NetworkClass, prefs: NetworkPolicyPreferences, estimatedBytes: number, options?: {
+    now?: Date;
+    isHeadless?: boolean;
+}): NetworkPolicyDecision;
+/** True if `now` falls inside any quiet-hours window. */
+export declare function inQuietHours(windows: ReadonlyArray<{
+    start: string;
+    end: string;
+}>, now: Date): boolean;
+/**
+ * Convenience composition for callers that have a raw state + prefs +
+ * estimated size in hand and want a single decision.
+ */
+export declare function evaluateNetworkPolicy(state: RawNetworkState, prefs: NetworkPolicyPreferences, estimatedBytes: number, options?: {
+    now?: Date;
+    isHeadless?: boolean;
+}): NetworkPolicyDecision;
+//# sourceMappingURL=network-policy.d.ts.map

package/local-inference/network-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-policy.d.ts","sourceRoot":"","sources":["../../src/local-inference/network-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GACpB,gBAAgB,GAChB,cAAc,GACd,oBAAoB,GACpB,kBAAkB,GAClB,UAAU,GACV,SAAS,CAAC;AAEd;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAC3B,MAAM,GACN,aAAa,GACb,cAAc,GACd,wBAAwB,CAAC;AAE7B,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,mEAAmE;IACnE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,gEAAgE;IAChE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,0DAA0D;IAC1D,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,kEAAkE;IAClE,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,uDAAuD;IACvD,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpE;AAED,eAAO,MAAM,kCAAkC,EAAE,wBAKhD,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,cAAc,EACnB,MAAM,GACN,UAAU,GACV,UAAU,GACV,MAAM,GACN,SAAS,CAAC;IACd;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;CAClC;AAED,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,YAAY,CAcpE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,wBAAwB,EAC/B,cAAc,EAAE,MAAM,EACtB,OAAO,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAC7C,qBAAqB,CAkDvB;AAYD,yDAAyD;AACzD,wBAAgB,YAAY,CAC1B,OAAO,EAAE,aAAa,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,EACtD,GAAG,EAAE,IAAI,GACR,OAAO,CAgBT;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,wBAAwB,EAC/B,cAAc,EAAE,MAAM,EACtB,OAAO,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAC7C,qBAAqB,CAOvB"}

package/local-inference/network-policy.js

@@ -0,0 +1,154 @@
+/**
+ * Network-policy bridge — used by the voice-model auto-updater and the
+ * model downloader to decide whether a multi-GB pull is allowed to proceed
+ * without prompting the user.
+ *
+ * Per R5-versioning §4 (per-platform download policy):
+ *
+ * - Android: `NetworkCapabilities.hasCapability(NET_CAPABILITY_NOT_METERED)`.
+ *   Android explicitly warns against equating cellular = metered (a user
+ *   can have unmetered cellular, or a metered Wi-Fi hotspot), so the
+ *   metered flag is mandatory, not derived from connection type.
+ * - iOS: `NWPathMonitor.path.isExpensive` — Apple's "treat as metered" flag.
+ * - Desktop (Electron/Electrobun): WinRT `NetworkCostType`, NetworkManager
+ *   dbus `ActiveConnection.Metered`, or macOS `NWPathMonitor` via the
+ *   native bridge.
+ * - Headless server / CLI: skip auto-update entirely; explicit
+ *   `eliza models update` only.
+ *
+ * The actual platform shims are wired in `plugin-local-inference`'s
+ * `services/network-policy.ts`. This module defines the platform-agnostic
+ * decision contract and ships a pure `evaluateNetworkPolicy` that lets
+ * higher-level code unit-test the decision rule without a runtime.
+ */
+export const DEFAULT_NETWORK_POLICY_PREFERENCES = {
+    autoUpdateOnWifi: true,
+    autoUpdateOnCellular: false,
+    autoUpdateOnMetered: false,
+    quietHours: [{ start: "22:00", end: "08:00" }],
+};
+/** Classify the raw state into one of the five canonical classes. */
+export function classifyNetwork(state) {
+    if (state.connectionType === "none")
+        return "unknown";
+    if (state.connectionType === "cellular")
+        return "cellular";
+    if (state.connectionType === "wifi") {
+        if (state.metered === true)
+            return "wifi-metered";
+        if (state.metered === false)
+            return "wifi-unmetered";
+        return "unknown";
+    }
+    if (state.connectionType === "ethernet") {
+        if (state.metered === true)
+            return "ethernet-metered";
+        if (state.metered === false)
+            return "ethernet-unmetered";
+        return "unknown";
+    }
+    return "unknown";
+}
+/**
+ * Apply the user prefs + estimated transfer size to a classified network
+ * state. The decision rule:
+ *
+ * - cellular: ask unless `autoUpdateOnCellular === true`.
+ * - any `*-metered`: ask unless `autoUpdateOnMetered === true`.
+ * - `wifi-unmetered`: auto if `autoUpdateOnWifi === true`, else ask.
+ * - `ethernet-unmetered`: always auto (desktop wired link).
+ * - `unknown`: ask (mobile default; desktop callers can override).
+ *
+ * Quiet hours (if active) downgrade all `auto` decisions to `ask`.
+ */
+export function applyNetworkPolicy(klass, prefs, estimatedBytes, options) {
+    if (options?.isHeadless === true) {
+        return {
+            class: klass,
+            allow: false,
+            reason: "headless-explicit-only",
+            estimatedBytes,
+        };
+    }
+    const reasonForAsk = () => {
+        if (klass === "cellular")
+            return "cellular-ask";
+        if (klass === "wifi-metered" || klass === "ethernet-metered") {
+            return "metered-ask";
+        }
+        return "metered-ask";
+    };
+    let autoAllowed;
+    switch (klass) {
+        case "ethernet-unmetered":
+            autoAllowed = true;
+            break;
+        case "wifi-unmetered":
+            autoAllowed = prefs.autoUpdateOnWifi;
+            break;
+        case "wifi-metered":
+        case "ethernet-metered":
+            autoAllowed = prefs.autoUpdateOnMetered;
+            break;
+        case "cellular":
+            autoAllowed = prefs.autoUpdateOnCellular;
+            break;
+        case "unknown":
+            autoAllowed = false;
+            break;
+    }
+    if (autoAllowed &&
+        inQuietHours(prefs.quietHours, options?.now ?? new Date())) {
+        autoAllowed = false;
+    }
+    return {
+        class: klass,
+        allow: autoAllowed,
+        reason: autoAllowed ? "auto" : reasonForAsk(),
+        estimatedBytes,
+    };
+}
+function parseClock(hhmm) {
+    const m = /^(\d{1,2}):(\d{2})$/.exec(hhmm);
+    if (!m)
+        return null;
+    const h = Number(m[1]);
+    const min = Number(m[2]);
+    if (!Number.isFinite(h) || !Number.isFinite(min))
+        return null;
+    if (h < 0 || h > 23 || min < 0 || min > 59)
+        return null;
+    return h * 60 + min;
+}
+/** True if `now` falls inside any quiet-hours window. */
+export function inQuietHours(windows, now) {
+    if (windows.length === 0)
+        return false;
+    const minutes = now.getHours() * 60 + now.getMinutes();
+    for (const w of windows) {
+        const start = parseClock(w.start);
+        const end = parseClock(w.end);
+        if (start === null || end === null)
+            continue;
+        if (start === end)
+            continue;
+        if (start < end) {
+            if (minutes >= start && minutes < end)
+                return true;
+        }
+        else {
+            // Window crosses midnight: e.g. 22:00 -> 08:00.
+            if (minutes >= start || minutes < end)
+                return true;
+        }
+    }
+    return false;
+}
+/**
+ * Convenience composition for callers that have a raw state + prefs +
+ * estimated size in hand and want a single decision.
+ */
+export function evaluateNetworkPolicy(state, prefs, estimatedBytes, options) {
+    return applyNetworkPolicy(classifyNetwork(state), prefs, estimatedBytes, options);
+}
+//# sourceMappingURL=network-policy.js.map

package/local-inference/network-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-policy.js","sourceRoot":"","sources":["../../src/local-inference/network-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AA0DH,MAAM,CAAC,MAAM,kCAAkC,GAA6B;IAC1E,gBAAgB,EAAE,IAAI;IACtB,oBAAoB,EAAE,KAAK;IAC3B,mBAAmB,EAAE,KAAK;IAC1B,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;CAC/C,CAAC;AAsBF,qEAAqE;AACrE,MAAM,UAAU,eAAe,CAAC,KAAsB;IACpD,IAAI,KAAK,CAAC,cAAc,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,KAAK,CAAC,cAAc,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAC3D,IAAI,KAAK,CAAC,cAAc,KAAK,MAAM,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO,cAAc,CAAC;QAClD,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK;YAAE,OAAO,gBAAgB,CAAC;QACrD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;QACxC,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO,kBAAkB,CAAC;QACtD,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK;YAAE,OAAO,oBAAoB,CAAC;QACzD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAmB,EACnB,KAA+B,EAC/B,cAAsB,EACtB,OAA8C;IAE9C,IAAI,OAAO,EAAE,UAAU,KAAK,IAAI,EAAE,CAAC;QACjC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,wBAAwB;YAChC,cAAc;SACf,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,GAAwB,EAAE;QAC7C,IAAI,KAAK,KAAK,UAAU;YAAE,OAAO,cAAc,CAAC;QAChD,IAAI,KAAK,KAAK,cAAc,IAAI,KAAK,KAAK,kBAAkB,EAAE,CAAC;YAC7D,OAAO,aAAa,CAAC;QACvB,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC,CAAC;IAEF,IAAI,WAAoB,CAAC;IACzB,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,oBAAoB;YACvB,WAAW,GAAG,IAAI,CAAC;YACnB,MAAM;QACR,KAAK,gBAAgB;YACnB,WAAW,GAAG,KAAK,CAAC,gBAAgB,CAAC;YACrC,MAAM;QACR,KAAK,cAAc,CAAC;QACpB,KAAK,kBAAkB;YACrB,WAAW,GAAG,KAAK,CAAC,mBAAmB,CAAC;YACxC,MAAM;QACR,KAAK,UAAU;YACb,WAAW,GAAG,KAAK,CAAC,oBAAoB,CAAC;YACzC,MAAM;QACR,KAAK,SAAS;YACZ,WAAW,GAAG,KAAK,CAAC;YACpB,MAAM;IACV,CAAC;IAED,IACE,WAAW;QACX,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,EAC1D,CAAC;QACD,WAAW,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,OAAO;QACL,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,EAAE;QAC7C,cAAc;KACf,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,CAAC,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC;AACtB,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,YAAY,CAC1B,OAAsD,EACtD,GAAS;IAET,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI;YAAE,SAAS;QAC7C,IAAI,KAAK,KAAK,GAAG;YAAE,SAAS;QAC5B,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;YAChB,IAAI,OAAO,IAAI,KAAK,IAAI,OAAO,GAAG,GAAG;gBAAE,OAAO,IAAI,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,gDAAgD;YAChD,IAAI,OAAO,IAAI,KAAK,IAAI,OAAO,GAAG,GAAG;gBAAE,OAAO,IAAI,CAAC;QACrD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAsB,EACtB,KAA+B,EAC/B,cAAsB,EACtB,OAA8C;IAE9C,OAAO,kBAAkB,CACvB,eAAe,CAAC,KAAK,CAAC,EACtB,KAAK,EACL,cAAc,EACd,OAAO,CACR,CAAC;AACJ,CAAC"}

package/local-inference/paths.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Path resolution for the local-inference service.
+ *
+ * All Eliza-owned files live under `<state-dir>/local-inference/` to match
+ * the convention established by `plugin-installer.ts` and the rest of
+ * app-core. We never write to paths outside of this root.
+ *
+ * `<state-dir>` follows the canonical `ELIZA_STATE_DIR` > XDG state
+ * precedence;
+ * on AOSP, `ELIZA_STATE_DIR` is set by `ElizaAgentService.java` to
+ * `/data/data/<pkg>/files/.eliza` so models land at
+ * `<that>/local-inference/models/` and not under a stray homedir-derived
+ * path.
+ */
+export declare function localInferenceRoot(): string;
+/** Directory for models Eliza downloaded itself. Safe to delete. */
+export declare function elizaModelsDir(): string;
+/** JSON file tracking installed-model metadata (downloaded + discovered). */
+export declare function registryPath(): string;
+/** Partial-download staging directory; files here are resume candidates. */
+export declare function downloadsStagingDir(): string;
+/** True when `target` is inside Eliza's local-inference root. */
+export declare function isWithinElizaRoot(target: string): boolean;
+//# sourceMappingURL=paths.d.ts.map

package/local-inference/paths.js

@@ -0,0 +1,40 @@
+/**
+ * Path resolution for the local-inference service.
+ *
+ * All Eliza-owned files live under `<state-dir>/local-inference/` to match
+ * the convention established by `plugin-installer.ts` and the rest of
+ * app-core. We never write to paths outside of this root.
+ *
+ * `<state-dir>` follows the canonical `ELIZA_STATE_DIR` > XDG state
+ * precedence;
+ * on AOSP, `ELIZA_STATE_DIR` is set by `ElizaAgentService.java` to
+ * `/data/data/<pkg>/files/.eliza` so models land at
+ * `<that>/local-inference/models/` and not under a stray homedir-derived
+ * path.
+ */
+import path from "node:path";
+import { resolveStateDir } from "@elizaos/core";
+export function localInferenceRoot() {
+    return path.join(resolveStateDir(), "local-inference");
+}
+/** Directory for models Eliza downloaded itself. Safe to delete. */
+export function elizaModelsDir() {
+    return path.join(localInferenceRoot(), "models");
+}
+/** JSON file tracking installed-model metadata (downloaded + discovered). */
+export function registryPath() {
+    return path.join(localInferenceRoot(), "registry.json");
+}
+/** Partial-download staging directory; files here are resume candidates. */
+export function downloadsStagingDir() {
+    return path.join(localInferenceRoot(), "downloads");
+}
+/** True when `target` is inside Eliza's local-inference root. */
+export function isWithinElizaRoot(target) {
+    const root = path.resolve(localInferenceRoot());
+    const resolved = path.resolve(target);
+    if (resolved === root)
+        return false;
+    return resolved.startsWith(`${root}${path.sep}`);
+}
+//# sourceMappingURL=paths.js.map