@qvac/harness 0.6.0 → 0.7.1

package/CHANGELOG.md

@@ -8,6 +8,135 @@ While the major version is `0`, a breaking change bumps the minor version.
 
 ## [Unreleased]
 
+## [0.7.1] - 2026-09-30
+
+### Added
+
+- `list()` rows carry `isLoading`: true from the moment a load of that model
+  starts, whoever asked for it, until it is ready or the load fails. It is read
+  off the pool, so a host shows a model as loading without counting loads
+  itself. A model loading again under other settings while a copy of it is
+  resident reads `isLoaded` and `isLoading` both true. Chat models read it
+  today: image, music and translation models load for each generation, and
+  speech, transcription and embedding pools key by source, so those rows read
+  `false` for now. An optional field on the wire; a row from an older harness
+  reads `false`. (#143)
+
+  ```js
+  const loading = (await harness.list({ cachedOnly: true })).filter((row) => row.isLoading)
+  ```
+
+### Changed
+
+- The `model` event carries `catalogChanged` at every edge a `list()` re-read
+  would show: the `loading` that starts a load and the `ready` or `error` that
+  ends it, beside `unloaded`. Progress ticks still do not. A host that re-reads
+  the list on `catalogChanged` sees a model turn loading, then loaded, with no
+  bookkeeping of its own. The served event stream never drops a frame that
+  carries it, so two `ready` frames of one model under two keys both cross. (#143)
+- `ModelInfo` requires `isLoading`, and `listModels`, `customModelRows` and
+  `mergeCustomRows` return `CatalogRow`, the row before the pools are asked. A
+  typed fake `list()` adds the field. (#143)
+- A custom model's row reads `isLoaded` only once its load has landed; it used
+  to read `true` from the first attempt. (#143)
+
+### Fixed
+
+- A load that ends without the model in memory emits `model` with `error` and
+  the reason: it failed, or a suspend or close cancelled it. It used to end in
+  silence, so a host could not tell a failed load from one still running. The
+  `error` also refreshes the cached `isCached`, since a load may have downloaded
+  the weights before it failed. (#143)
+
+## [0.7.0] - 2026-09-29
+
+### Added
+
+- `list()` rows carry `taskType`, what the model is for: `llm`, `embeddings`,
+  `speech-to-text`, `text-to-speech`, `image-generation`, `audio-generation`,
+  `translation`, `text-recognition` or `other`. It is decided from the addon in
+  one place, `lib/models/model-task.ts`, on each side of the wire rather than
+  sent over it. `ModelTaskType` is exported, and grows the four new values a
+  preview never returns. (#140)
+
+- `modelsForAgent(agent, host)` lists every model an agent runs on a device,
+  each with its `use`: the chat model, clamped by `runnableModelName`, then the
+  image and music models its skills need. A host deciding what to download, or
+  which agents a model delete affects, asks this instead of working it out.
+  `runnableModelName(requested, host)` and `isMobilePlatform(platform)` move here
+  from `@qvac/core`: on a phone a pick above the device's profile runs as its
+  recommended model. Whether the host is a phone is the required `mobile` on
+  `HostCapability`, which `capability()` now reports, so its answer passes
+  straight in; a host built by hand has to say. Both functions are on the
+  browser-safe `@qvac/harness/model-catalog` entry too. (#141)
+
+  ```js
+  const chat = modelsForAgent(agent, await harness.capability()).find((m) => m.use === 'chat')
+  ```
+
+- `capability()` answers `mobile`, whether the harness runs on a phone, read off
+  the platform it probes. It rides `capability-response` as an optional field;
+  a response from an older harness reads as `false`. (#141)
+
+- `musicModelChoiceFrom(settings)` reads the music model pick out of an agent's
+  `generate_music` tool settings, so a host no longer knows what `modelChoice`
+  means there. `isMusicModelChoice` is exported beside it. (#141)
+
+### Changed
+
+- **Breaking:** the package no longer publishes a prebuilt sidecar:
+  `dist/harness.bundle`, `dist/harness.cjs`, `dist/prebuilds-manifest.json` and
+  the `./dist/harness.cjs` export are gone. A host stows
+  `worker/harness-sidecar.mjs` itself, as desktop and mobile already do, or
+  spawns `worker/stow-entry.mjs` straight from its install. (#127)
+- **Breaking:** a stowed harness runs python in a worker rather than in-process.
+  A host that stows the harness stops deferring `pyodide`, keeps
+  `QVAC_PYODIDE_CACHE_DIR` writable, no longer stages a separate worker bundle,
+  and ships what stow offloads beside the bundle, which now includes pyodide's
+  wasm, stdlib and lock file and the vendored wheels. A target that embeds
+  assets instead of offloading them cannot run python, since `fs` cannot read
+  inside a bundle. (#127)
+- A bundle of the package root carries neither pyodide nor the vendored wheels.
+  Only an entry that runs python, the exec tool or `@qvac/harness/docx` and
+  `/office`, pulls them in. (#127)
+- `SandboxHook` no longer checks `packages`. The exec tool refuses an install
+  the vendored wheels do not hold in full in sandbox mode, whether declared in
+  `packages` or on a pip line, with the same message as before. (#127)
+- The vendored wheels are the `#pyodide-wheels` directory asset on Bare;
+  `QVAC_PYTHON_WHEELS_DIR` still overrides it. (#127)
+- The python worker and the in-process deadline are spawned through
+  `worker_threads`, which the package maps to `bare-worker`;
+  `#pyodide-worker-spawn` is gone. (#127)
+- **Breaking:** `engines.bare` is `>=1.34.0`, so Bare refuses to load the
+  package on older runtimes. `bare-runtime` is pinned to 1.34.0 and
+  `bare-sidecar` to 0.5.7 (Bare 1.34.0) across the tree, `bare-supervisor`'s copy
+  included, with `bare-thread` at least 1.2.7 and `bare-module` 7.1.0 for
+  `bare-worker`'s copy. (#127)
+- `bare-module` is no longer a dependency or an override, and
+  `bare-module-traverse` is overridden to 2.5.8: earlier versions drop the
+  `asset` condition on `bare-sidecar`'s binary, and a stowed harness then fails
+  to boot on Bare 1.33 and later. (#127)
+- `skillModelsForAgent` rows carry `use`, `image` or `music`, so a caller can
+  tell which skill a model is for without looking the name up in the catalogs. (#141)
+- `CapabilityInfo` has a required `mobile`, so a `HarnessContract` whose
+  `capability()` builds its own answer, a test stub included, returns it too. (#141)
+
+### Removed
+
+- **Breaking:** `bareRuntime` is no longer exported from `./lib/tools/exec.ts`.
+  It is at `./lib/tools/exec/bare-runtime.ts`, so the package root no longer
+  loads the exec tool to reach it. (#127)
+- **Breaking:** `QVAC_PYODIDE_TEST_LOADER`: tests point
+  `QVAC_PYODIDE_WORKER_ENTRY` at an entry that serves their fake interpreter. (#127)
+
+### Fixed
+
+- Python runs start on Bare 1.34, whose threads cannot read a module off disk,
+  including in a stowed harness. The worker is spawned through `worker_threads`,
+  which the package maps to `bare-worker` on Bare, pyodide is handed its asm
+  module as `createPyodideModule`, and the files pyodide reads are named as
+  assets, so a bundler carries them beside the bundle. (#127)
+
 ## [0.6.0] - 2026-09-28
 
 ### Added
@@ -890,7 +1019,9 @@ Tagged but never published to npm; these changes first shipped in 0.2.12.
 - GPU stats are read through `bare-gpu-info`, so every dependency installs from
   the public npm registry. (#12)
 
-[Unreleased]: https://github.com/tetherto/qvac-harness/compare/v0.6.0...HEAD
+[Unreleased]: https://github.com/tetherto/qvac-harness/compare/v0.7.1...HEAD
+[0.7.1]: https://github.com/tetherto/qvac-harness/compare/v0.7.0...v0.7.1
+[0.7.0]: https://github.com/tetherto/qvac-harness/compare/v0.6.0...v0.7.0
 [0.6.0]: https://github.com/tetherto/qvac-harness/compare/v0.5.0...v0.6.0
 [0.5.0]: https://github.com/tetherto/qvac-harness/compare/v0.4.0...v0.5.0
 [0.4.0]: https://github.com/tetherto/qvac-harness/compare/v0.3.3...v0.4.0

package/README.md

@@ -12,41 +12,40 @@ the supervision contract.
 
 ## The published package
 
-The published package ships the prebuilt engine and its runtime content, not
-the library source:
-
-- `dist/harness.bundle` — the stowed sidecar (all platforms in one bundle)
-- `dist/prebuilds-manifest.json` — every native prebuild dir the bundle defers,
-  keyed by bundle-relative path; the host assembles those beside the bundle
-  from its own `node_modules`
+The published package ships the library and its runtime content, not a prebuilt
+engine:
+
+- `dist-lib/` — the compiled library and its declarations. The package exports
+  resolve to it; the TypeScript source stays in the repository.
+- `worker/harness-sidecar.mjs` — the sidecar entry a host stows into its own
+  bundle, and `worker/stow-entry.mjs`, the same entry as a plain file for a
+  host that spawns it straight from its install
 - the hash-pinned Python `wheels/` the tool runtime consumes (skills come from
   [`@qvac/skills`](https://github.com/tetherto/qvac-skills), a content-addressed
   bundle this package materializes at runtime)
 
-The `@qvac` inference addons and `pyodide` resolve from the host's real
-`node_modules` at runtime (dlopen'd backends need real paths), so the host
-installs those alongside.
-
-The host-side library surface — `spawnHarness`/`harnessChild`, the transport,
-model catalogs, skill helpers and DOCX extractor — ships as compiled JavaScript
-and declarations in `dist-lib/`. The package exports resolve to that surface;
-the TypeScript source stays in the repository.
+A host that stows the harness defers the `@qvac` inference addons
+(`scripts/addon-externals.cjs` lists them), so they resolve from real files
+beside the bundle, and ships everything stow offloads there: prebuilds, and
+pyodide's data and the wheels, which the harness names as assets. A target that
+embeds assets instead cannot run python.
 
 ## Spawning
 
-The generated `dist/harness.cjs` is the host entry: it spawns the bundle as a
-bare-sidecar process and hands back the stow ipc plus the exit promise.
+`spawnHarness` spawns an entry as a bare-sidecar process and hands back a
+client over hrpc:
 
 ```js
-const harness = require('@qvac/harness/dist/harness.cjs')
+import { spawnHarness } from '@qvac/harness'
 
-const { ipc, sidecar, exit } = await harness.start(args)
+const harness = spawnHarness({ entry, sdkStorage })
 ```
 
-The argv slots the bundle reads (skills dir, sdk storage, model config, wheels
-dir, ...) are the ones `worker/harness-sidecar.mjs` documents in this repo. The
-in-house hosts don't call this directly — they use the repo's library surface
-(`harnessChild` under bare-supervisor), which owns that argv contract.
+`entry` is the host's own stowed bundle, or `@qvac/harness/worker/stow-entry.mjs`
+resolved from its install. The argv slots the entry reads (skills dir, sdk
+storage, model config, wheels dir, ...) are the ones
+`worker/harness-sidecar.mjs` documents; `harnessChild` does the same under
+bare-supervisor.
 
 ## Custom models
 
@@ -166,9 +165,11 @@ const custom = models.filter((model) => model.registrySource === 'custom')
 //   registrySource: 'custom',
 //   isCached: false,
 //   isLoaded: false,
+//   isLoading: false,
 //   supportsImages: false,
 //   expectedSize: 1868506272,
-//   label: 'Nanbeige 4.2 3B'
+//   label: 'Nanbeige 4.2 3B',
+//   taskType: 'llm'
 // }
 ```
 
@@ -181,6 +182,11 @@ sidecar knows from `sdkStorage.models`; an in-process `Harness` needs
 `new Harness({ modelsDir })` for it. A sharded download is looked for in the
 folder the SDK keeps its shards in, and is cached once every shard is there.
 
+Every row, catalog or custom, carries `taskType`: what the model is for, in the
+vocabulary a preview uses, so a Models screen groups by task rather than by
+addon. `whisper` and `parakeet` are both `speech-to-text`, and an addon with no
+task of its own is `other`.
+
 ### Delete a download
 
 ```js
@@ -229,8 +235,20 @@ if (big.reason === 'memory') showNotice('Unload a model first')
 `unloadModel` waits for any request holding the model to finish, then unloads
 every copy of it. `unloaded` is false when a request still held it after the
 wait, so a caller that wants the model gone at once stops those requests first.
-Both change `isLoaded` in the next `list()`, and emit a `model` event with
-`catalogChanged` set. A load or an unload counts as a call in flight for
+Both change `isLoaded` in the next `list()`. `isLoading` is true on a row from
+the moment a load of its model starts, whoever asked for it (a request,
+`warmModel` or `loadModel`), until the model is ready or the load fails; it is
+read off the pool, so a host keeps no count of its own. A model loading again
+under other settings while a copy of it is resident reads `isLoaded: true` and
+`isLoading: true` at once. The `model` event carries `catalogChanged` at each
+edge a `list()` re-read would show: the `loading` that starts a load, the
+`ready` or `error` that ends it, and `unloaded`. Progress ticks between them do
+not. A load that ends without the model in memory reports
+`error` with the reason in `message`: it failed, or a suspend or close cancelled it.
+An image, music or translation model loads for each generation and never reads
+`isLoading: true`; a speech, transcription or embedding model loads under its
+source rather than its row name, so its row reads `false` for now. A load or an
+unload counts as a call in flight for
 [`setModelIdleTimeout`](#freeing-memory-when-idle), and one that lands during an
 idle unload waits for it, so a load never loads a second copy and an unload
 answers once the memory is free.
@@ -273,8 +291,8 @@ are not extracted. Legacy XLS/PPT formats are unsupported. File extensions selec
 format, with `mimeType` as a fallback when the name has no recognized Office extension.
 
 The extractor accepts up to 20 MiB and requires the shipped Python wheels. With the
-cache configured, extraction uses those wheels offline. Bundled hosts also set `QVAC_PYODIDE_WORKER_ENTRY` and
-`QVAC_PYTHON_WHEELS_DIR` to their staged worker and wheels paths.
+cache configured, extraction uses those wheels offline. A host that stows the harness ships them
+with what stow offloads beside the bundle; `QVAC_PYTHON_WHEELS_DIR` names another directory.
 Source checkouts prepare wheels with `bun run vendor:wheels`.
 
 The existing `extractDocxText` and `closeDocxWorker` exports from `@qvac/harness/docx`
@@ -287,7 +305,7 @@ bun install
 bun run lint          # prettier + lunte + tsc
 bun run test          # brittle, node and bare lanes
 bun run build:schema  # regenerates spec/ (wire-compat rewind once v* tags exist)
-bun run build:bundle  # stows dist/harness.bundle (--minify for the shipped form)
+bun run build:bundle  # stows the sidecar entry into dist/, to prove it still stows
 ```
 
 The schema baseline rewinds `spec/` against this repo's `v*` release tags and

package/dist-lib/index.d.ts

@@ -38,6 +38,7 @@ export type { EmbedDevice } from './lib/models/embed-config.ts';
 export type { MemoryBudget } from './lib/hardware/memory-budget.ts';
 export * from './lib/models/model-catalog.ts';
 export * from './lib/models/model-list.ts';
+export type { ModelTaskType } from './lib/models/model-task.ts';
 export type { DeleteModelResult, DeleteModelSummary } from './lib/models/model-delete.ts';
 export { harnessChild, spawnHarness, type HarnessChildOptions, type SpawnHarnessOptions } from './lib/spawn.ts';
 export { settingsDimension, settingsSteps } from './lib/tools/generate-image.ts';
@@ -217,6 +218,9 @@ export declare class Harness extends ReadyResource {
     describe(): Promise<HarnessInfo>;
     diagnostics(): HarnessDiagnostics;
     private _loadedModels;
+    private _loadingModels;
+    private _settledModels;
+    private _pools;
     private _loadPluginSdk;
     private _loadDiffusionSdk;
     private _slmTranslate;

package/dist-lib/index.js

@@ -4,7 +4,7 @@ import process from 'process';
 import ReadyResource from 'ready-resource';
 import { probeGpuStats } from './lib/hardware/gpu-probe.js';
 import { probeCapabilityProfile } from './lib/hardware/capability-probe.js';
-import { closePythonWorker } from './lib/tools/exec/adapters/python/worker/client.js';
+import { closePythonWorker } from './lib/tools/exec/adapters/python/worker/active.js';
 import { completion, imageSettingsFrom } from './lib/capabilities/completion.js';
 import { detectLanguage } from './lib/capabilities/detect-language.js';
 import { invoke } from './lib/capabilities/invoke.js';
@@ -24,7 +24,7 @@ import { AbortedError, raceAbort } from './lib/helpers/race-abort.js';
 import { audioGenDownloadMetadata, customProjectionMap, defaultProjectionMap, defaultTtsFor, defaultVoiceModel, diffusionDownloadMetadata, curatedModelAsset, infraModelsFor, modelAddonOf, modelNameToCapabilityProfile, musicModelSet, residentSrc, setCustomModels } from './lib/models/model-catalog.js';
 import { createModelStatusCache, customModelRows, invalidateModelStatusCache, mergeCustomRows, listModels } from './lib/models/model-list.js';
 import { deleteModelFiles, summarizeDelete } from './lib/models/model-delete.js';
-import { createEmbedPool, createLoadTracker, createModelPool, createVoicePool, awaitModelCapacity, evictIdle, evictIdleWhere, evictModel, evictModelWithin, isResident, leaseResidentModel, leaseCount, loadedModels, modelKey, modelOf, releaseModel, resolveLoadOptions, progressState } from './lib/models/model-pool.js';
+import { createEmbedPool, createLoadTracker, createModelPool, createVoicePool, awaitModelCapacity, evictIdle, evictIdleWhere, evictModel, evictModelWithin, isResident, leaseResidentModel, leaseCount, loadedModels, loadingModels, settledModels, modelKey, modelOf, releaseModel, resolveLoadOptions, progressState } from './lib/models/model-pool.js';
 import { defaultContextSize } from './lib/models/context.js';
 import { resolveMainGpu } from './lib/models/gpu-selection.js';
 import { createIdleReaper } from './lib/models/idle-unload.js';
@@ -46,7 +46,7 @@ import { hlog } from './lib/log.js';
 import { harness } from './spec/index.js';
 import { installResolutionDetector, resolutionDetail } from './lib/resolution-detector.js';
 import { probeBinVersions } from './lib/tools/skills/bin-check.js';
-import { bareRuntime } from './lib/tools/exec.js';
+import { bareRuntime } from './lib/tools/exec/bare-runtime.js';
 import { runCommand } from './lib/tools/exec/runner.js';
 import { createLocalRoots } from './lib/tools/fs/local.js';
 import { createRemoteRoots } from './lib/tools/fs/remote.js';
@@ -558,13 +558,22 @@ export class Harness extends ReadyResource {
         };
     }
     _loadedModels() {
-        const pools = [
+        return this._pools().flatMap((pool) => loadedModels(pool));
+    }
+    _loadingModels() {
+        return new Set(this._pools().flatMap((pool) => loadingModels(pool)));
+    }
+    _settledModels() {
+        return new Set(this._pools().flatMap((pool) => settledModels(pool)));
+    }
+    _pools() {
+        return [
+            this._models,
             this._embedModels,
             ...this._retiredEmbedModels,
             this._ttsModels,
             this._transcriptionModels
         ];
-        return [...loadedModels(this._models), ...pools.flatMap((pool) => loadedModels(pool))];
     }
     _loadPluginSdk(current, store, importPlugin) {
         let pending = current();
@@ -667,8 +676,7 @@ export class Harness extends ReadyResource {
         });
     }
     _notifyModel(state) {
-        const catalogChanged = state.status === 'ready' || state.status === 'unloaded';
-        if (catalogChanged) {
+        if (state.status === 'ready' || state.status === 'unloaded' || state.status === 'error') {
             invalidateModelStatusCache(this._modelStatus);
         }
         if (state.status === 'unloaded') {
@@ -678,7 +686,11 @@ export class Harness extends ReadyResource {
                 }
             }
         }
-        this.emit('model', { ...state, catalogChanged, loaded: this._loadedModels() });
+        this.emit('model', {
+            ...state,
+            catalogChanged: state.catalogChanged === true,
+            loaded: this._loadedModels()
+        });
     }
     async _collectRetiredEmbedPool(pool) {
         if (!this._retiredEmbedModels.has(pool) || pool.idle !== pool.size)
@@ -1055,17 +1067,17 @@ export class Harness extends ReadyResource {
         if (!this.opened)
             await this.ready();
         const sdk = await this._sdk.load();
-        const [rows, custom] = await Promise.all([
-            listModels(sdk, options, {
-                cache: this._modelStatus,
-                projectionFor: (name) => this._projectionFor(name)
-            }),
-            customModelRows(options, {
-                modelsDir: this._modelsDir,
-                loaded: new Set(this._loadedModels().map((entry) => entry.model))
-            })
-        ]);
-        return mergeCustomRows(rows, custom);
+        const rows = await listModels(sdk, options, {
+            cache: this._modelStatus,
+            projectionFor: (name) => this._projectionFor(name)
+        });
+        const loaded = this._settledModels();
+        const loading = this._loadingModels();
+        const custom = await customModelRows(options, { modelsDir: this._modelsDir, loaded });
+        return mergeCustomRows(rows, custom).map((row) => ({
+            ...row,
+            isLoading: loading.has(row.name)
+        }));
     }
     async deleteModel(name) {
         if (!this.opened)

package/dist-lib/lib/capabilities/preview-model-source.d.ts

@@ -1,7 +1,6 @@
 import type { HarnessPreviewModelSourceResponse } from '../../spec/hyperschema/types.d.ts';
 export type ModelFitVerdict = 'likely-fits' | 'likely-too-large' | 'unknown';
 export type ModelSourceRefusal = 'invalid-source' | 'not-found' | 'private' | 'gated' | 'web-page' | 'unreachable' | 'not-gguf' | 'not-a-model' | 'no-model-files' | 'invalid-projection';
-export type ModelTaskType = 'llm' | 'embeddings' | 'speech-to-text' | 'text-to-speech' | 'image-generation';
 export interface ModelSourceFile {
     src: string;
     label: string;

package/dist-lib/lib/connect.js

@@ -8,6 +8,7 @@ import { unsupportedKvCacheDeletion } from './capabilities/kv-cache.js';
 import { readModelSourcePreview } from './capabilities/preview-model-source.js';
 import { hlog } from './log.js';
 import { assertEmbedDevice } from './models/embed-config.js';
+import { addonTaskType } from './models/model-task.js';
 import { errorCode, errorMessage, isRecord } from './guards.js';
 import { pushQueue } from './queue.js';
 import { stageFile, sweepStaging } from './staging.js';
@@ -568,7 +569,8 @@ export class RemoteHarness extends EventEmitter {
         return (response.models ?? []).map(({ actualSize, label, ...row }) => ({
             ...row,
             actualSize: actualSize || undefined,
-            label: label || undefined
+            label: label || undefined,
+            taskType: addonTaskType(row.type)
         }));
     }
     async deleteModel(name) {
@@ -624,7 +626,8 @@ export class RemoteHarness extends EventEmitter {
                     source: memoryBudget.source,
                     gpuClass: memoryBudget.gpuClass || undefined
                 }
-                : undefined
+                : undefined,
+            mobile: response.mobile === true
         };
     }
     close() {

package/dist-lib/lib/contract-types.d.ts

@@ -175,6 +175,7 @@ export interface CapabilityInfo {
     capabilityProfile: HarnessCapabilityProfile;
     recommendedModelName: string;
     memoryBudget?: MemoryBudget;
+    mobile: boolean;
 }
 export interface CredentialEntry {
     key: string;

package/dist-lib/lib/docx/index.d.ts

@@ -1,5 +1,5 @@
 import type { AbortSignal } from 'bare-abort-controller';
-export { closePythonWorker as closeDocxWorker } from '../tools/exec/adapters/python/worker/client.ts';
+export { closePythonWorker as closeDocxWorker } from '../tools/exec/adapters/python/worker/active.ts';
 export interface DocxExtractOptions {
     readonly signal?: AbortSignal;
 }

package/dist-lib/lib/docx/index.js

@@ -1,5 +1,5 @@
 import { extractWithPython } from '../office/python.js';
-export { closePythonWorker as closeDocxWorker } from '../tools/exec/adapters/python/worker/client.js';
+export { closePythonWorker as closeDocxWorker } from '../tools/exec/adapters/python/worker/active.js';
 const PACKAGES = ['python-docx==1.2.0'];
 const EXTRACT = `from docx import Document
 from docx.text.paragraph import Paragraph

package/dist-lib/lib/hardware/capability-probe.js

@@ -1,5 +1,5 @@
 import process from 'process';
-import { capabilityProfileToModelName } from '../models/model-catalog.js';
+import { capabilityProfileToModelName, isMobilePlatform } from '../models/model-catalog.js';
 import { probeWithAddon } from './gpu-probe-addon.js';
 import { mobileBudget, parseNvidiaSmiOutput, parseRocmSmiOutput, parseWindowsRegistryOutput, sharedRamBudget } from './parsers.js';
 const GIB = 1024 * 1024 * 1024;
@@ -85,7 +85,7 @@ async function isPixel(reads) {
 }
 async function probeMemoryBudget(reads) {
     const os = reads.platform();
-    if (os === 'android' || os === 'ios') {
+    if (isMobilePlatform(os)) {
         return mobileBudget(reads.totalmem(), await isPixel(reads));
     }
     if (os === 'darwin') {
@@ -101,9 +101,14 @@ function forcedProfile() {
     return undefined;
 }
 export async function probeCapabilityProfile(reads) {
+    const mobile = isMobilePlatform(reads.platform());
     const forced = forcedProfile();
     if (forced) {
-        return { capabilityProfile: forced, recommendedModelName: capabilityProfileToModelName(forced) };
+        return {
+            capabilityProfile: forced,
+            recommendedModelName: capabilityProfileToModelName(forced),
+            mobile
+        };
     }
-    return recommend(await probeMemoryBudget(reads));
+    return { ...recommend(await probeMemoryBudget(reads)), mobile };
 }

package/dist-lib/lib/hooks/built-in/sandbox.js

@@ -1,4 +1,3 @@
-import { planVendoredInstall } from '../../tools/exec/adapters/python/wheels.js';
 import { bareBin, firstCommandToken } from '../../tools/exec/scope.js';
 const NETWORK_BINS = new Set([
     'curl',
@@ -33,10 +32,6 @@ export class SandboxHook {
             return;
         if (!ctx.sandboxMode || ctx.toolName !== 'exec')
             return;
-        const packages = ctx.args.packages;
-        if (Array.isArray(packages) && packages.length && !planVendoredInstall(packages.map(String))) {
-            return { error: 'sandbox mode: installing packages reaches the network', guidance: true };
-        }
         const bin = bareBin(firstCommandToken(String(ctx.args.command ?? '')).replace(/^.*[/\\]/, ''));
         if (bin && NETWORK_BINS.has(bin)) {
             return { error: `sandbox mode: ${bin} reaches the network`, guidance: true };

package/dist-lib/lib/models/model-catalog-constants.d.ts

@@ -11,6 +11,13 @@ export declare const MEDPSY_4B = "medpsy-4b-q4_k_m-imat";
 export declare function isCapabilityProfile(value: string): value is CapabilityProfile;
 export declare function meetsMinCapabilityProfile(active: CapabilityProfile, required: CapabilityProfile): boolean;
 export declare function modelNameToCapabilityProfile(modelName: string): CapabilityProfile | undefined;
+export interface HostCapability {
+    readonly capabilityProfile: string;
+    readonly recommendedModelName: string;
+    readonly mobile: boolean;
+}
+export declare function isMobilePlatform(platform: string): boolean;
+export declare function runnableModelName(requested: string, host: HostCapability | null): string;
 export declare function capabilityProfileToModelName(profile: CapabilityProfile): string;
 export declare const AGENT_MODEL_NAMES: readonly ["Qwen3.5-2B-Q4_K_M", "Qwen3.5-4B-Q4_K_M", "Qwen3.5-9B-Q4_K_M", "Qwen3.6-27B-UD-Q4_K_XL", "Qwen3.6-35B-A3B-UD-Q4_K_M", "Qwen3.8-27B-UD-Q4_K_XL", "medpsy-1.7b-q4_k_m-imat", "medpsy-4b-q4_k_m-imat"];
 export declare function modelDisplayName(modelName: string): string;

package/dist-lib/lib/models/model-catalog-constants.js

@@ -32,6 +32,23 @@ const MODEL_NAME_TO_PROFILE = new Map([
 export function modelNameToCapabilityProfile(modelName) {
     return MODEL_NAME_TO_PROFILE.get(modelName);
 }
+export function isMobilePlatform(platform) {
+    return platform === 'android' || platform === 'ios';
+}
+export function runnableModelName(requested, host) {
+    if (!host?.mobile || !isCapabilityProfile(host.capabilityProfile)) {
+        return requested;
+    }
+    const required = modelNameToCapabilityProfile(requested);
+    if (!required || meetsMinCapabilityProfile(host.capabilityProfile, required)) {
+        return requested;
+    }
+    const fallback = modelNameToCapabilityProfile(host.recommendedModelName);
+    if (!fallback || !meetsMinCapabilityProfile(required, fallback)) {
+        return requested;
+    }
+    return host.recommendedModelName;
+}
 const PROFILE_TO_MODEL_NAME = new Map([
     ['tiny', QWEN_35_2B],
     ['low', QWEN_35_2B],

package/dist-lib/lib/models/model-catalog.d.ts

@@ -5,9 +5,9 @@ import type { ModelAddon } from './model-source.ts';
 export interface SdkModelAsset extends ModelRegistryEntry {
     readonly src: string;
 }
-import { CAPABILITY_PROFILE_ORDER, QWEN_35_2B, QWEN_35_4B, QWEN_35_9B, QWEN_36_27B, QWEN_36_35B_A3B, QWEN_38_27B, MEDPSY_1_7B, MEDPSY_4B, isCapabilityProfile, meetsMinCapabilityProfile, modelNameToCapabilityProfile, capabilityProfileToModelName, isMultimodalLlm, AGENT_MODEL_NAMES, modelDisplayName, capabilityProfileModelLabel, DEFAULT_IMAGE_MODEL_CHOICE, IMAGE_CHOICE_CATALOG, type CapabilityProfile, type ImageModelChoice, type ImageChoiceEntry } from './model-catalog-constants.ts';
-export { CAPABILITY_PROFILE_ORDER, QWEN_35_2B, QWEN_35_4B, QWEN_35_9B, QWEN_36_27B, QWEN_36_35B_A3B, QWEN_38_27B, MEDPSY_1_7B, MEDPSY_4B, isCapabilityProfile, meetsMinCapabilityProfile, modelNameToCapabilityProfile, capabilityProfileToModelName, isMultimodalLlm, AGENT_MODEL_NAMES, modelDisplayName, capabilityProfileModelLabel, DEFAULT_IMAGE_MODEL_CHOICE, IMAGE_CHOICE_CATALOG };
-export type { CapabilityProfile, ImageModelChoice, ImageChoiceEntry };
+import { CAPABILITY_PROFILE_ORDER, QWEN_35_2B, QWEN_35_4B, QWEN_35_9B, QWEN_36_27B, QWEN_36_35B_A3B, QWEN_38_27B, MEDPSY_1_7B, MEDPSY_4B, isCapabilityProfile, meetsMinCapabilityProfile, modelNameToCapabilityProfile, capabilityProfileToModelName, isMultimodalLlm, AGENT_MODEL_NAMES, modelDisplayName, capabilityProfileModelLabel, DEFAULT_IMAGE_MODEL_CHOICE, IMAGE_CHOICE_CATALOG, isMobilePlatform, runnableModelName, type CapabilityProfile, type HostCapability, type ImageModelChoice, type ImageChoiceEntry } from './model-catalog-constants.ts';
+export { CAPABILITY_PROFILE_ORDER, QWEN_35_2B, QWEN_35_4B, QWEN_35_9B, QWEN_36_27B, QWEN_36_35B_A3B, QWEN_38_27B, MEDPSY_1_7B, MEDPSY_4B, isCapabilityProfile, meetsMinCapabilityProfile, modelNameToCapabilityProfile, capabilityProfileToModelName, isMultimodalLlm, AGENT_MODEL_NAMES, modelDisplayName, capabilityProfileModelLabel, DEFAULT_IMAGE_MODEL_CHOICE, IMAGE_CHOICE_CATALOG, isMobilePlatform, runnableModelName };
+export type { CapabilityProfile, HostCapability, ImageModelChoice, ImageChoiceEntry };
 export interface LlmCatalogEntry {
     readonly name: string;
     readonly weight: SdkModelAsset;
@@ -49,8 +49,8 @@ export interface DiffusionDownloadMetadata {
 }
 export declare function diffusionDownloadName(model: string): string | null;
 export declare function diffusionDownloadMetadata(model: string, addon: ModelAddon | undefined): DiffusionDownloadMetadata | undefined;
-import { DEFAULT_MUSIC_MODEL_CHOICE, type MusicModelChoice } from './music-catalog.ts';
-export { DEFAULT_MUSIC_MODEL_CHOICE, type MusicModelChoice };
+import { DEFAULT_MUSIC_MODEL_CHOICE, isMusicModelChoice, musicModelChoiceFrom, type MusicModelChoice } from './music-catalog.ts';
+export { DEFAULT_MUSIC_MODEL_CHOICE, isMusicModelChoice, musicModelChoiceFrom, type MusicModelChoice };
 export interface AudioGenCatalogEntry {
     readonly choice: MusicModelChoice;
     readonly name: string;
@@ -78,7 +78,15 @@ export interface AgentSkillModelInput {
     readonly imageModelChoice?: ImageModelChoice | null;
     readonly musicModelChoice?: MusicModelChoice | null;
 }
-export declare function skillModelsForAgent(agent: AgentSkillModelInput): ReadonlyArray<CatalogModel>;
+export type AgentModelUse = 'chat' | 'image' | 'music';
+export interface AgentModel extends CatalogModel {
+    readonly use: AgentModelUse;
+}
+export interface AgentModelInput extends AgentSkillModelInput {
+    readonly modelName?: string | null;
+}
+export declare function skillModelsForAgent(agent: AgentSkillModelInput): ReadonlyArray<AgentModel>;
+export declare function modelsForAgent(agent: AgentModelInput, host: HostCapability | null): ReadonlyArray<AgentModel>;
 export declare function diffusionSizeBytes(entry: DiffusionCatalogEntry): number;
 export declare function imageModelFor(choice: string | undefined): ImageModelSet | null;
 export interface ImageClamps {