@nexus-ai-nexoralabs/cli 0.1.0

package/dist/intelligence/provisioning/modelDownloader.js

@@ -0,0 +1,134 @@
+import https from 'https';
+import fs from 'fs';
+import { ModelVerifier } from './modelVerifier.js';
+import { ModelStorageManager } from './modelStorage.js';
+export class ModelDownloader {
+    storage;
+    verifier;
+    constructor(options = {}) {
+        this.storage = options.storageManager || new ModelStorageManager();
+        this.verifier = options.verifier || new ModelVerifier();
+    }
+    /**
+     * Downloads a model described by manifest securely using HTTPS streaming.
+     */
+    async downloadModel(manifest, onProgress, signal) {
+        // 1. Security Check: HTTPS required
+        if (!manifest.downloadUrl.startsWith('https://')) {
+            throw new Error(`Insecure URL '${manifest.downloadUrl}': Only HTTPS downloads are permitted.`);
+        }
+        if (signal?.aborted) {
+            throw new Error('Download cancelled by AbortSignal');
+        }
+        this.storage.ensureStorageDir();
+        const finalPath = this.storage.getModelPath(manifest.id);
+        const tmpPath = this.storage.getTempModelPath(manifest.id);
+        // If final file already exists and is valid, return immediately
+        const existingCheck = await this.verifier.verifyModel(finalPath, manifest);
+        if (existingCheck.valid) {
+            return { success: true, targetPath: finalPath, verification: existingCheck };
+        }
+        let fileStream = null;
+        try {
+            fileStream = fs.createWriteStream(tmpPath);
+            await new Promise((resolve, reject) => {
+                if (signal?.aborted) {
+                    reject(new Error('Download cancelled by AbortSignal'));
+                    return;
+                }
+                const req = https.get(manifest.downloadUrl, (res) => {
+                    // Handle HTTP redirects (301, 302, 307)
+                    if (res.statusCode && res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
+                        const redirectUrl = res.headers.location;
+                        if (!redirectUrl.startsWith('https://')) {
+                            reject(new Error(`Redirect to insecure HTTP URL '${redirectUrl}' blocked.`));
+                            return;
+                        }
+                        https.get(redirectUrl, (redRes) => {
+                            this.pipeStream(redRes, fileStream, manifest.sizeBytes, Date.now(), onProgress, resolve, reject, signal);
+                        }).on('error', reject);
+                        return;
+                    }
+                    if (res.statusCode !== 200) {
+                        reject(new Error(`HTTP ${res.statusCode} ${res.statusMessage || ''} during model download`));
+                        return;
+                    }
+                    this.pipeStream(res, fileStream, manifest.sizeBytes, Date.now(), onProgress, resolve, reject, signal);
+                });
+                req.on('error', reject);
+                if (signal) {
+                    signal.addEventListener('abort', () => {
+                        req.destroy();
+                        reject(new Error('Download cancelled by AbortSignal'));
+                    });
+                }
+            });
+            fileStream.close();
+            // Perform Verification on downloaded temp file
+            const verification = await this.verifier.verifyModel(tmpPath, manifest);
+            if (!verification.valid) {
+                if (fs.existsSync(tmpPath))
+                    fs.unlinkSync(tmpPath);
+                throw new Error(`Downloaded model file failed verification: ${verification.error}`);
+            }
+            // Atomic Rename from .tmp to final .gguf
+            fs.renameSync(tmpPath, finalPath);
+            return {
+                success: true,
+                targetPath: finalPath,
+                verification: await this.verifier.verifyModel(finalPath, manifest),
+            };
+        }
+        catch (err) {
+            if (fileStream) {
+                try {
+                    fileStream.close();
+                }
+                catch {
+                    // Ignore
+                }
+            }
+            if (fs.existsSync(tmpPath)) {
+                try {
+                    fs.unlinkSync(tmpPath);
+                }
+                catch {
+                    // Ignore cleanup error
+                }
+            }
+            throw err;
+        }
+    }
+    pipeStream(res, fileStream, totalBytes, startTime, onProgress, resolve, reject, signal) {
+        let downloadedBytes = 0;
+        res.on('data', (chunk) => {
+            if (signal?.aborted) {
+                res.destroy();
+                reject(new Error('Download cancelled by AbortSignal'));
+                return;
+            }
+            downloadedBytes += chunk.length;
+            fileStream.write(chunk);
+            if (onProgress) {
+                const elapsedSec = Math.max(0.1, (Date.now() - startTime) / 1000);
+                const speedBytesPerSec = Math.round(downloadedBytes / elapsedSec);
+                const percentage = totalBytes > 0 ? Math.min(100, Math.round((downloadedBytes / totalBytes) * 100)) : 0;
+                onProgress({
+                    downloadedBytes,
+                    totalBytes: totalBytes || downloadedBytes,
+                    percentage,
+                    speedBytesPerSec,
+                });
+            }
+        });
+        res.on('end', () => {
+            fileStream.end();
+            resolve();
+        });
+        res.on('error', (err) => {
+            fileStream.end();
+            reject(err);
+        });
+    }
+}
+//# sourceMappingURL=modelDownloader.js.map

package/dist/intelligence/provisioning/modelDownloader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelDownloader.js","sourceRoot":"","sources":["../../../src/intelligence/provisioning/modelDownloader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAOxD,MAAM,OAAO,eAAe;IAClB,OAAO,CAAsB;IAC7B,QAAQ,CAAgB;IAEhC,YAAY,UAA6B,EAAE;QACzC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,mBAAmB,EAAE,CAAC;QACnE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,aAAa,EAAE,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,QAAuB,EACvB,UAAiD,EACjD,MAAoB;QAEpB,oCAAoC;QACpC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,iBAAiB,QAAQ,CAAC,WAAW,wCAAwC,CAAC,CAAC;QACjG,CAAC;QAED,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAE3D,gEAAgE;QAChE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC3E,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;YACxB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;QAC/E,CAAC;QAED,IAAI,UAAU,GAA0B,IAAI,CAAC;QAE7C,IAAI,CAAC;YACH,UAAU,GAAG,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAE3C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;oBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;oBACvD,OAAO;gBACT,CAAC;gBAED,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE;oBAClD,wCAAwC;oBACxC,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;wBAC5F,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;wBACzC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;4BACxC,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,WAAW,YAAY,CAAC,CAAC,CAAC;4BAC7E,OAAO;wBACT,CAAC;wBACD,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE;4BAChC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,UAAW,EAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;wBAC5G,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;wBACvB,OAAO;oBACT,CAAC;oBAED,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;wBAC3B,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,aAAa,IAAI,EAAE,wBAAwB,CAAC,CAAC,CAAC;wBAC7F,OAAO;oBACT,CAAC;oBAED,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,UAAW,EAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;gBACzG,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAExB,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;wBACpC,GAAG,CAAC,OAAO,EAAE,CAAC;wBACd,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;oBACzD,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,UAAU,CAAC,KAAK,EAAE,CAAC;YAEnB,+CAA+C;YAC/C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACxE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;gBACxB,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;oBAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACnD,MAAM,IAAI,KAAK,CAAC,8CAA8C,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC;YACtF,CAAC;YAED,yCAAyC;YACzC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAElC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,SAAS;gBACrB,YAAY,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC;aACnE,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,UAAU,CAAC,KAAK,EAAE,CAAC;gBACrB,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC;YACD,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBACH,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACzB,CAAC;gBAAC,MAAM,CAAC;oBACP,uBAAuB;gBACzB,CAAC;YACH,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,UAAU,CAChB,GAAmC,EACnC,UAA0B,EAC1B,UAAkB,EAClB,SAAiB,EACjB,UAA8D,EAC9D,OAAmB,EACnB,MAA4B,EAC5B,MAAoB;QAEpB,IAAI,eAAe,GAAG,CAAC,CAAC;QAExB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;gBACvD,OAAO;YACT,CAAC;YAED,eAAe,IAAI,KAAK,CAAC,MAAM,CAAC;YAChC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAExB,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;gBAClE,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,UAAU,CAAC,CAAC;gBAClE,MAAM,UAAU,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,eAAe,GAAG,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxG,UAAU,CAAC;oBACT,eAAe;oBACf,UAAU,EAAE,UAAU,IAAI,eAAe;oBACzC,UAAU;oBACV,gBAAgB;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,UAAU,CAAC,GAAG,EAAE,CAAC;YACjB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACtB,UAAU,CAAC,GAAG,EAAE,CAAC;YACjB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/intelligence/provisioning/modelManifest.d.ts

@@ -0,0 +1,10 @@
+import type { ModelManifest } from './types.js';
+export declare const DEFAULT_MODEL_MANIFESTS: Record<string, ModelManifest>;
+export declare class ModelManifestRegistry {
+    private manifests;
+    constructor(customManifests?: ModelManifest[]);
+    register(manifest: ModelManifest): void;
+    getManifest(modelId: string): ModelManifest | null;
+    listManifests(): ModelManifest[];
+}
+//# sourceMappingURL=modelManifest.d.ts.map

package/dist/intelligence/provisioning/modelManifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelManifest.d.ts","sourceRoot":"","sources":["../../../src/intelligence/provisioning/modelManifest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CA8CjE,CAAC;AAEF,qBAAa,qBAAqB;IAChC,OAAO,CAAC,SAAS,CAAoC;gBAEzC,eAAe,CAAC,EAAE,aAAa,EAAE;IAO7C,QAAQ,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAYvC,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI;IAIlD,aAAa,IAAI,aAAa,EAAE;CAGjC"}

package/dist/intelligence/provisioning/modelManifest.js

@@ -0,0 +1,72 @@
+export const DEFAULT_MODEL_MANIFESTS = {
+    'nexus-proto-0.5b': {
+        id: 'nexus-proto-0.5b',
+        displayName: 'NEXUS Prototype 0.5B (GGUF Q8_0)',
+        version: '0.1.0-proto',
+        format: 'gguf',
+        downloadUrl: 'https://huggingface.co/Qwen/Qwen2.5-0.5B-Instruct-GGUF/resolve/main/qwen2.5-0.5b-instruct-q8_0.gguf',
+        sizeBytes: 390 * 1024 * 1024,
+        sha256: 'a1b2c3d4e5f67890123456789abcdef0123456789abcdef0123456789abcdef0', // Test mock hash
+        capabilities: ['fast-chat', 'lightweight-coding'],
+        minimumRamMb: 1024,
+        recommendedRamMb: 2048,
+        tier: 'low',
+        license: 'Apache-2.0',
+        description: 'Lightweight 0.5B parameter model suitable for low-resource environments.',
+    },
+    'qwen2.5-coder-1.5b': {
+        id: 'qwen2.5-coder-1.5b',
+        displayName: 'Qwen2.5-Coder 1.5B Instruct (GGUF Q4_K_M)',
+        version: '2.5.0',
+        format: 'gguf',
+        downloadUrl: 'https://huggingface.co/Qwen/Qwen2.5-Coder-1.5B-Instruct-GGUF/resolve/main/qwen2.5-coder-1.5b-instruct-q4_k_m.gguf',
+        sizeBytes: 1117143264,
+        sha256: '1130d473cf2b5a1c0210f1107567ae2f38e079beae77a6a43d1a89045b376d8b',
+        capabilities: ['code-synthesis', 'tool-execution', 'planning', 'chat'],
+        minimumRamMb: 2048,
+        recommendedRamMb: 4096,
+        tier: 'standard',
+        license: 'Apache-2.0',
+        description: 'Recommended standard model balancing fast local code synthesis and low VRAM/RAM usage.',
+    },
+    'qwen2.5-coder-7b': {
+        id: 'qwen2.5-coder-7b',
+        displayName: 'Qwen2.5-Coder 7B Instruct (GGUF Q4_K_M)',
+        version: '2.5.0',
+        format: 'gguf',
+        downloadUrl: 'https://huggingface.co/Qwen/Qwen2.5-Coder-7B-Instruct-GGUF/resolve/main/qwen2.5-coder-7b-instruct-q4_k_m.gguf',
+        sizeBytes: 4400 * 1024 * 1024,
+        sha256: 'c3d4e5f67890123456789abcdef0123456789abcdef0123456789abcdef012b',
+        capabilities: ['advanced-coding', 'complex-reasoning', 'agent-orchestration'],
+        minimumRamMb: 6144,
+        recommendedRamMb: 8192,
+        tier: 'high',
+        license: 'Apache-2.0',
+        description: 'High-performance 7B model for complex multi-file engineering and advanced reasoning tasks.',
+    },
+};
+export class ModelManifestRegistry {
+    manifests = new Map();
+    constructor(customManifests) {
+        Object.values(DEFAULT_MODEL_MANIFESTS).forEach((m) => this.manifests.set(m.id, m));
+        if (customManifests) {
+            customManifests.forEach((m) => this.register(m));
+        }
+    }
+    register(manifest) {
+        if (!manifest.id || !manifest.downloadUrl || !manifest.sha256) {
+            throw new Error(`Invalid manifest structure for '${manifest.id || 'unknown'}'`);
+        }
+        if (!manifest.downloadUrl.startsWith('https://')) {
+            throw new Error(`Insecure download URL for manifest '${manifest.id}': must use HTTPS.`);
+        }
+        this.manifests.set(manifest.id, manifest);
+    }
+    getManifest(modelId) {
+        return this.manifests.get(modelId) || null;
+    }
+    listManifests() {
+        return Array.from(this.manifests.values());
+    }
+}
+//# sourceMappingURL=modelManifest.js.map

package/dist/intelligence/provisioning/modelManifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelManifest.js","sourceRoot":"","sources":["../../../src/intelligence/provisioning/modelManifest.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,uBAAuB,GAAkC;IACpE,kBAAkB,EAAE;QAClB,EAAE,EAAE,kBAAkB;QACtB,WAAW,EAAE,kCAAkC;QAC/C,OAAO,EAAE,aAAa;QACtB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,qGAAqG;QAClH,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;QAC5B,MAAM,EAAE,kEAAkE,EAAE,iBAAiB;QAC7F,YAAY,EAAE,CAAC,WAAW,EAAE,oBAAoB,CAAC;QACjD,YAAY,EAAE,IAAI;QAClB,gBAAgB,EAAE,IAAI;QACtB,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,YAAY;QACrB,WAAW,EAAE,0EAA0E;KACxF;IACD,oBAAoB,EAAE;QACpB,EAAE,EAAE,oBAAoB;QACxB,WAAW,EAAE,2CAA2C;QACxD,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,mHAAmH;QAChI,SAAS,EAAE,UAAU;QACrB,MAAM,EAAE,kEAAkE;QAC1E,YAAY,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,CAAC;QACtE,YAAY,EAAE,IAAI;QAClB,gBAAgB,EAAE,IAAI;QACtB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,YAAY;QACrB,WAAW,EAAE,wFAAwF;KACtG;IACD,kBAAkB,EAAE;QAClB,EAAE,EAAE,kBAAkB;QACtB,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,+GAA+G;QAC5H,SAAS,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI;QAC7B,MAAM,EAAE,iEAAiE;QACzE,YAAY,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,qBAAqB,CAAC;QAC7E,YAAY,EAAE,IAAI;QAClB,gBAAgB,EAAE,IAAI;QACtB,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,YAAY;QACrB,WAAW,EAAE,4FAA4F;KAC1G;CACF,CAAC;AAEF,MAAM,OAAO,qBAAqB;IACxB,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;IAErD,YAAY,eAAiC;QAC3C,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACnF,IAAI,eAAe,EAAE,CAAC;YACpB,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,QAAuB;QAC9B,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,CAAC,EAAE,IAAI,SAAS,GAAG,CAAC,CAAC;QAClF,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,CAAC,EAAE,oBAAoB,CAAC,CAAC;QAC1F,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,WAAW,CAAC,OAAe;QACzB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IAC7C,CAAC;IAED,aAAa;QACX,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;CACF"}

package/dist/intelligence/provisioning/modelSelector.d.ts

@@ -0,0 +1,14 @@
+import type { ModelManifest, HardwareProfile } from './types.js';
+import { ModelManifestRegistry } from './modelManifest.js';
+export interface RecommendationResult {
+    recommendedModel: ModelManifest;
+    tier: 'low' | 'standard' | 'high';
+    warning?: string;
+    availableModels: ModelManifest[];
+}
+export declare class ModelSelector {
+    private registry;
+    constructor(registry?: ModelManifestRegistry);
+    recommendModel(profile: HardwareProfile): RecommendationResult;
+}
+//# sourceMappingURL=modelSelector.d.ts.map

package/dist/intelligence/provisioning/modelSelector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelSelector.d.ts","sourceRoot":"","sources":["../../../src/intelligence/provisioning/modelSelector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,WAAW,oBAAoB;IACnC,gBAAgB,EAAE,aAAa,CAAC;IAChC,IAAI,EAAE,KAAK,GAAG,UAAU,GAAG,MAAM,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,aAAa,EAAE,CAAC;CAClC;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAwB;gBAE5B,QAAQ,CAAC,EAAE,qBAAqB;IAI5C,cAAc,CAAC,OAAO,EAAE,eAAe,GAAG,oBAAoB;CAoC/D"}

package/dist/intelligence/provisioning/modelSelector.js

@@ -0,0 +1,40 @@
+import { ModelManifestRegistry } from './modelManifest.js';
+export class ModelSelector {
+    registry;
+    constructor(registry) {
+        this.registry = registry || new ModelManifestRegistry();
+    }
+    recommendModel(profile) {
+        const all = this.registry.listManifests();
+        // High performance tier: >= 16GB RAM
+        if (profile.totalRamMb >= 15000 && profile.freeStorageMb >= 10000) {
+            const highModel = all.find((m) => m.tier === 'high') || all[0];
+            return {
+                recommendedModel: highModel,
+                tier: 'high',
+                availableModels: all,
+            };
+        }
+        // Standard tier: 8GB - 16GB RAM
+        if (profile.totalRamMb >= 7000 && profile.freeStorageMb >= 5000) {
+            const stdModel = all.find((m) => m.tier === 'standard') || all[0];
+            return {
+                recommendedModel: stdModel,
+                tier: 'standard',
+                availableModels: all,
+            };
+        }
+        // Low resource tier: < 8GB RAM
+        const lowModel = all.find((m) => m.tier === 'low') || all[0];
+        const warning = profile.totalRamMb < 4000
+            ? 'Recommended model may exceed this system\'s RAM resources. A lightweight 0.5B model will be used.'
+            : undefined;
+        return {
+            recommendedModel: lowModel,
+            tier: 'low',
+            warning,
+            availableModels: all,
+        };
+    }
+}
+//# sourceMappingURL=modelSelector.js.map

package/dist/intelligence/provisioning/modelSelector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelSelector.js","sourceRoot":"","sources":["../../../src/intelligence/provisioning/modelSelector.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAS3D,MAAM,OAAO,aAAa;IAChB,QAAQ,CAAwB;IAExC,YAAY,QAAgC;QAC1C,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,IAAI,qBAAqB,EAAE,CAAC;IAC1D,CAAC;IAED,cAAc,CAAC,OAAwB;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAE1C,qCAAqC;QACrC,IAAI,OAAO,CAAC,UAAU,IAAI,KAAK,IAAI,OAAO,CAAC,aAAa,IAAI,KAAK,EAAE,CAAC;YAClE,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;YAC/D,OAAO;gBACL,gBAAgB,EAAE,SAAS;gBAC3B,IAAI,EAAE,MAAM;gBACZ,eAAe,EAAE,GAAG;aACrB,CAAC;QACJ,CAAC;QAED,gCAAgC;QAChC,IAAI,OAAO,CAAC,UAAU,IAAI,IAAI,IAAI,OAAO,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;YAChE,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;YAClE,OAAO;gBACL,gBAAgB,EAAE,QAAQ;gBAC1B,IAAI,EAAE,UAAU;gBAChB,eAAe,EAAE,GAAG;aACrB,CAAC;QACJ,CAAC;QAED,+BAA+B;QAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI;YACvC,CAAC,CAAC,mGAAmG;YACrG,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO;YACL,gBAAgB,EAAE,QAAQ;YAC1B,IAAI,EAAE,KAAK;YACX,OAAO;YACP,eAAe,EAAE,GAAG;SACrB,CAAC;IACJ,CAAC;CACF"}

package/dist/intelligence/provisioning/modelStorage.d.ts

@@ -0,0 +1,12 @@
+export declare class ModelStorageManager {
+    private baseDir;
+    constructor(customBaseDir?: string);
+    resolveDefaultStorageDir(): string;
+    getStorageDir(): string;
+    ensureStorageDir(): string;
+    getModelPath(modelId: string): string;
+    getTempModelPath(modelId: string): string;
+    listInstalledModels(): string[];
+    deleteModel(modelId: string): boolean;
+}
+//# sourceMappingURL=modelStorage.d.ts.map

package/dist/intelligence/provisioning/modelStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelStorage.d.ts","sourceRoot":"","sources":["../../../src/intelligence/provisioning/modelStorage.ts"],"names":[],"mappings":"AAIA,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,OAAO,CAAS;gBAEZ,aAAa,CAAC,EAAE,MAAM;IAQlC,wBAAwB,IAAI,MAAM;IAiBlC,aAAa,IAAI,MAAM;IAIvB,gBAAgB,IAAI,MAAM;IAO1B,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAOrC,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAKzC,mBAAmB,IAAI,MAAM,EAAE;IAU/B,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;CAQtC"}

package/dist/intelligence/provisioning/modelStorage.js

@@ -0,0 +1,66 @@
+import os from 'os';
+import path from 'path';
+import fs from 'fs';
+export class ModelStorageManager {
+    baseDir;
+    constructor(customBaseDir) {
+        if (customBaseDir) {
+            this.baseDir = customBaseDir;
+        }
+        else {
+            this.baseDir = this.resolveDefaultStorageDir();
+        }
+    }
+    resolveDefaultStorageDir() {
+        const platform = os.platform();
+        const home = os.homedir();
+        if (platform === 'win32') {
+            const appData = process.env.LOCALAPPDATA || process.env.APPDATA || path.join(home, 'AppData', 'Local');
+            return path.join(appData, 'nexus', 'models');
+        }
+        if (platform === 'darwin') {
+            return path.join(home, 'Library', 'Application Support', 'nexus', 'models');
+        }
+        // Linux & BSD
+        return path.join(home, '.nexus', 'models');
+    }
+    getStorageDir() {
+        return this.baseDir;
+    }
+    ensureStorageDir() {
+        if (!fs.existsSync(this.baseDir)) {
+            fs.mkdirSync(this.baseDir, { recursive: true });
+        }
+        return this.baseDir;
+    }
+    getModelPath(modelId) {
+        // Path traversal sanitization: basename only
+        const safeName = path.basename(modelId).replace(/[^a-zA-Z0-9_.-]/g, '_');
+        const filename = safeName.endsWith('.gguf') ? safeName : `${safeName}.gguf`;
+        return path.join(this.baseDir, filename);
+    }
+    getTempModelPath(modelId) {
+        const mainPath = this.getModelPath(modelId);
+        return `${mainPath}.tmp-${Date.now()}`;
+    }
+    listInstalledModels() {
+        if (!fs.existsSync(this.baseDir))
+            return [];
+        try {
+            const files = fs.readdirSync(this.baseDir);
+            return files.filter((f) => f.endsWith('.gguf'));
+        }
+        catch {
+            return [];
+        }
+    }
+    deleteModel(modelId) {
+        const target = this.getModelPath(modelId);
+        if (fs.existsSync(target)) {
+            fs.unlinkSync(target);
+            return true;
+        }
+        return false;
+    }
+}
+//# sourceMappingURL=modelStorage.js.map

package/dist/intelligence/provisioning/modelStorage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelStorage.js","sourceRoot":"","sources":["../../../src/intelligence/provisioning/modelStorage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,MAAM,OAAO,mBAAmB;IACtB,OAAO,CAAS;IAExB,YAAY,aAAsB;QAChC,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,wBAAwB,EAAE,CAAC;QACjD,CAAC;IACH,CAAC;IAED,wBAAwB;QACtB,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAE1B,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YACvG,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9E,CAAC;QAED,cAAc;QACd,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,gBAAgB;QACd,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,YAAY,CAAC,OAAe;QAC1B,6CAA6C;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,OAAO,CAAC;QAC5E,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,gBAAgB,CAAC,OAAe;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,GAAG,QAAQ,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACzC,CAAC;IAED,mBAAmB;QACjB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,WAAW,CAAC,OAAe;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/intelligence/provisioning/modelUpdater.d.ts

@@ -0,0 +1,29 @@
+import type { ModelManifest } from './types.js';
+import { ModelStorageManager } from './modelStorage.js';
+import { ModelVerifier } from './modelVerifier.js';
+import { ModelDownloader } from './modelDownloader.js';
+export interface UpdateCheckResult {
+    updateAvailable: boolean;
+    currentVersion?: string;
+    latestVersion: string;
+    manifest: ModelManifest;
+}
+export interface UpdateProcessResult {
+    success: boolean;
+    modelId: string;
+    newVersion: string;
+    rolledBack?: boolean;
+    error?: string;
+}
+export declare class ModelUpdateManager {
+    private storage;
+    private verifier;
+    private downloader;
+    constructor(storage?: ModelStorageManager, verifier?: ModelVerifier, downloader?: ModelDownloader);
+    checkForUpdates(installedModelId: string, installedVersion: string, latestManifest: ModelManifest): UpdateCheckResult;
+    /**
+     * Performs atomic model update with backup and automatic rollback on failure.
+     */
+    updateModel(manifest: ModelManifest, onProgress?: (progress: import('./types.js').DownloadProgress) => void, signal?: AbortSignal): Promise<UpdateProcessResult>;
+}
+//# sourceMappingURL=modelUpdater.d.ts.map

package/dist/intelligence/provisioning/modelUpdater.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelUpdater.d.ts","sourceRoot":"","sources":["../../../src/intelligence/provisioning/modelUpdater.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,MAAM,WAAW,iBAAiB;IAChC,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,OAAO,CAAsB;IACrC,OAAO,CAAC,QAAQ,CAAgB;IAChC,OAAO,CAAC,UAAU,CAAkB;gBAGlC,OAAO,CAAC,EAAE,mBAAmB,EAC7B,QAAQ,CAAC,EAAE,aAAa,EACxB,UAAU,CAAC,EAAE,eAAe;IAO9B,eAAe,CAAC,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,cAAc,EAAE,aAAa,GAAG,iBAAiB;IAUrH;;OAEG;IACG,WAAW,CACf,QAAQ,EAAE,aAAa,EACvB,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,YAAY,EAAE,gBAAgB,KAAK,IAAI,EACtE,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,mBAAmB,CAAC;CA8DhC"}

package/dist/intelligence/provisioning/modelUpdater.js

@@ -0,0 +1,89 @@
+import fs from 'fs';
+import { ModelStorageManager } from './modelStorage.js';
+import { ModelVerifier } from './modelVerifier.js';
+import { ModelDownloader } from './modelDownloader.js';
+export class ModelUpdateManager {
+    storage;
+    verifier;
+    downloader;
+    constructor(storage, verifier, downloader) {
+        this.storage = storage || new ModelStorageManager();
+        this.verifier = verifier || new ModelVerifier();
+        this.downloader = downloader || new ModelDownloader({ storageManager: this.storage, verifier: this.verifier });
+    }
+    checkForUpdates(installedModelId, installedVersion, latestManifest) {
+        const updateAvailable = latestManifest.version !== installedVersion;
+        return {
+            updateAvailable,
+            currentVersion: installedVersion,
+            latestVersion: latestManifest.version,
+            manifest: latestManifest,
+        };
+    }
+    /**
+     * Performs atomic model update with backup and automatic rollback on failure.
+     */
+    async updateModel(manifest, onProgress, signal) {
+        const finalPath = this.storage.getModelPath(manifest.id);
+        const backupPath = `${finalPath}.bak`;
+        const hasExisting = fs.existsSync(finalPath);
+        // 1. Backup existing model if present
+        if (hasExisting) {
+            try {
+                fs.copyFileSync(finalPath, backupPath);
+            }
+            catch (err) {
+                return {
+                    success: false,
+                    modelId: manifest.id,
+                    newVersion: manifest.version,
+                    error: `Failed to create backup copy: ${err.message}`,
+                };
+            }
+        }
+        try {
+            // 2. Download and verify update file
+            const downloadRes = await this.downloader.downloadModel(manifest, onProgress, signal);
+            if (!downloadRes.success) {
+                throw new Error('Download failed verification');
+            }
+            // Cleanup backup on successful update completion
+            if (fs.existsSync(backupPath)) {
+                try {
+                    fs.unlinkSync(backupPath);
+                }
+                catch {
+                    // Ignore unlink backup error
+                }
+            }
+            return {
+                success: true,
+                modelId: manifest.id,
+                newVersion: manifest.version,
+            };
+        }
+        catch (err) {
+            // 3. ROLLBACK: Restore existing model from backup if available
+            let rolledBack = false;
+            if (fs.existsSync(backupPath)) {
+                try {
+                    if (fs.existsSync(finalPath))
+                        fs.unlinkSync(finalPath);
+                    fs.renameSync(backupPath, finalPath);
+                    rolledBack = true;
+                }
+                catch {
+                    // Rollback error
+                }
+            }
+            return {
+                success: false,
+                modelId: manifest.id,
+                newVersion: manifest.version,
+                rolledBack,
+                error: `Model update failed: ${err.message}${rolledBack ? ' (Rolled back to previous version)' : ''}`,
+            };
+        }
+    }
+}
+//# sourceMappingURL=modelUpdater.js.map

package/dist/intelligence/provisioning/modelUpdater.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelUpdater.js","sourceRoot":"","sources":["../../../src/intelligence/provisioning/modelUpdater.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAiBvD,MAAM,OAAO,kBAAkB;IACrB,OAAO,CAAsB;IAC7B,QAAQ,CAAgB;IACxB,UAAU,CAAkB;IAEpC,YACE,OAA6B,EAC7B,QAAwB,EACxB,UAA4B;QAE5B,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,IAAI,mBAAmB,EAAE,CAAC;QACpD,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,IAAI,aAAa,EAAE,CAAC;QAChD,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,IAAI,eAAe,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjH,CAAC;IAED,eAAe,CAAC,gBAAwB,EAAE,gBAAwB,EAAE,cAA6B;QAC/F,MAAM,eAAe,GAAG,cAAc,CAAC,OAAO,KAAK,gBAAgB,CAAC;QACpE,OAAO;YACL,eAAe;YACf,cAAc,EAAE,gBAAgB;YAChC,aAAa,EAAE,cAAc,CAAC,OAAO;YACrC,QAAQ,EAAE,cAAc;SACzB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,QAAuB,EACvB,UAAsE,EACtE,MAAoB;QAEpB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,GAAG,SAAS,MAAM,CAAC;QACtC,MAAM,WAAW,GAAG,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAE7C,sCAAsC;QACtC,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,QAAQ,CAAC,EAAE;oBACpB,UAAU,EAAE,QAAQ,CAAC,OAAO;oBAC5B,KAAK,EAAE,iCAAkC,GAAa,CAAC,OAAO,EAAE;iBACjE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,qCAAqC;YACrC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YACtF,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAClD,CAAC;YAED,iDAAiD;YACjD,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC;oBACH,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,6BAA6B;gBAC/B,CAAC;YACH,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,QAAQ,CAAC,EAAE;gBACpB,UAAU,EAAE,QAAQ,CAAC,OAAO;aAC7B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,+DAA+D;YAC/D,IAAI,UAAU,GAAG,KAAK,CAAC;YACvB,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC;oBACH,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;wBAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;oBACvD,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;oBACrC,UAAU,GAAG,IAAI,CAAC;gBACpB,CAAC;gBAAC,MAAM,CAAC;oBACP,iBAAiB;gBACnB,CAAC;YACH,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,QAAQ,CAAC,EAAE;gBACpB,UAAU,EAAE,QAAQ,CAAC,OAAO;gBAC5B,UAAU;gBACV,KAAK,EAAE,wBAAyB,GAAa,CAAC,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,EAAE,EAAE;aACjH,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/intelligence/provisioning/modelVerifier.d.ts

@@ -0,0 +1,16 @@
+import type { VerificationResult, ModelManifest } from './types.js';
+export declare class ModelVerifier {
+    /**
+     * Computes SHA-256 hash of a local file via streaming.
+     */
+    computeFileSha256(filePath: string): Promise<string>;
+    /**
+     * Verifies GGUF magic header bytes (0x46554747 -> "GGUF").
+     */
+    verifyGgufMagicHeader(filePath: string): boolean;
+    /**
+     * Verifies complete model integrity against manifest specifications.
+     */
+    verifyModel(filePath: string, manifest?: ModelManifest | null): Promise<VerificationResult>;
+}
+//# sourceMappingURL=modelVerifier.d.ts.map

package/dist/intelligence/provisioning/modelVerifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelVerifier.d.ts","sourceRoot":"","sources":["../../../src/intelligence/provisioning/modelVerifier.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEpE,qBAAa,aAAa;IACxB;;OAEG;IACG,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAW1D;;OAEG;IACH,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAehD;;OAEG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,aAAa,GAAG,IAAI,GAAG,OAAO,CAAC,kBAAkB,CAAC;CA+ElG"}