agentic-flow 3.0.0-alpha.2 → 3.1.0

package/dist/utils/load-env.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=load-env.d.ts.map

package/dist/utils/load-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-env.d.ts","sourceRoot":"","sources":["../../src/utils/load-env.ts"],"names":[],"mappings":""}

package/dist/utils/load-env.js

@@ -0,0 +1,5 @@
+// Side-effect import: load cwd/.env (or --env-file <path>) before any other
+// module reads process.env. Import it first. See env-loader.ts for the rules.
+import { loadCliEnv } from './env-loader.js';
+loadCliEnv();
+//# sourceMappingURL=load-env.js.map

package/dist/utils/load-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-env.js","sourceRoot":"","sources":["../../src/utils/load-env.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,8EAA8E;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,UAAU,EAAE,CAAC","sourcesContent":["// Side-effect import: load cwd/.env (or --env-file <path>) before any other\n// module reads process.env. Import it first. See env-loader.ts for the rules.\nimport { loadCliEnv } from './env-loader.js';\n\nloadCliEnv();\n"]}

package/dist/utils/model-cache.js

@@ -162,7 +162,7 @@ export async function getCachedOnnxEmbedder() {
 }
 export async function getCachedTransformersPipeline(task = 'feature-extraction', model = 'Xenova/all-MiniLM-L6-v2') {
     return modelCache.getOrLoad(`transformers:${task}:${model}`, async () => {
-        const { pipeline } = await import('@xenova/transformers');
+        const { pipeline } = await import('@huggingface/transformers');
         return pipeline(task, model);
     }, 200 * 1024 * 1024 // 200MB estimate for transformers model
     );

package/dist/utils/model-cache.js.map

@@ -1 +1 @@
-{"version":3,"file":"model-cache.js","sourceRoot":"","sources":["../../src/utils/model-cache.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAqBH,MAAM,UAAU;IACN,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IACvC,OAAO,CAAS,CAAC,0BAA0B;IAC3C,SAAS,GAAG,CAAC,CAAC;IACd,WAAW,GAAG,CAAC,CAAC;IAExB,YAAY,YAAoB,GAAG;QACjC,IAAI,CAAC,OAAO,GAAG,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,GAAW,EACX,MAAwB,EACxB,eAAuB,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,wBAAwB;;QAEhE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClB,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC,KAAU,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;QAEnB,kBAAkB;QAClB,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAEjC,aAAa;QACb,MAAM,KAAK,GAAG,MAAM,MAAM,EAAE,CAAC;QAE7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAClB,KAAK;YACL,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,QAAQ,EAAE,CAAC;YACX,YAAY;SACb,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,GAAG,CAAI,GAAW;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,MAAM,CAAC,KAAU,CAAC;QAC3B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,GAAW,EAAE,KAAU,EAAE,eAAuB,EAAE,GAAG,IAAI,GAAG,IAAI;QAClE,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAClB,KAAK;YACL,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,QAAQ,EAAE,CAAC;YACX,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,GAAW;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,SAAS,IAAI,MAAM,CAAC,YAAY,CAAC;QACnC,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,GAAG,MAAM,CAAC;QAC5B,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACvB,SAAS;YACT,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,MAAM;YACnB,IAAI;YACJ,MAAM;YACN,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;SACtC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,OAAe;QACnC,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,WAAW,IAAI,MAAM,CAAC,YAAY,CAAC;QACrC,CAAC;QAED,IAAI,WAAW,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,+BAA+B;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;aAC7C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAEjD,4BAA4B;QAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACpC,IAAI,WAAW,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC1C,MAAM;YACR,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,WAAW,IAAI,MAAM,CAAC,YAAY,CAAC;QACrC,CAAC;IACH,CAAC;CACF;AAED,mBAAmB;AACnB,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;AAE3C,wBAAwB;AACxB,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,OAAO,UAAU,CAAC,SAAS,CACzB,iBAAiB,EACjB,KAAK,IAAI,EAAE;QACT,yCAAyC;QACzC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;QAClC,aAAa;QACb,OAAO,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI;YAC1C,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAC7C,IAAY,CAAC,IAAI,KAAK,qBAAqB;gBAC3C,IAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,OAAO,KAAK,CAAC;YACf,CAAC;YACD,aAAa;YACb,OAAO,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAQ,CAAC;YACxE,MAAM,aAAa,GAAG,UAAU,CAAC,cAAc,IAAI,UAAU,CAAC,OAAO,CAAC;YACtE,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;gBACrC,MAAM,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC;gBAC9B,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC;QAC9B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,EACD,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,gCAAgC;KACnD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAe,oBAAoB,EACnC,QAAgB,yBAAyB;IAEzC,OAAO,UAAU,CAAC,SAAS,CACzB,gBAAgB,IAAI,IAAI,KAAK,EAAE,EAC/B,KAAK,IAAI,EAAE;QACT,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAC1D,OAAO,QAAQ,CAAC,IAAW,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC,EACD,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,wCAAwC;KAC3D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,OAAO,UAAU,CAAC,SAAS,CACzB,eAAe,EACf,KAAK,IAAI,EAAE;QACT,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1C,OAAO,QAAQ,CAAC;IAClB,CAAC,EACD,EAAE,GAAG,IAAI,GAAG,IAAI,CACjB,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Global Model Cache\n *\n * Caches loaded models in memory to avoid repeated initialization overhead.\n * Supports ONNX embeddings, transformers.js pipelines, and other heavy models.\n */\n\ninterface CachedModel {\n  model: any;\n  loadedAt: number;\n  lastUsed: number;\n  useCount: number;\n  sizeEstimate: number; // bytes\n}\n\ninterface CacheStats {\n  models: number;\n  totalSize: number;\n  size?: number;\n  totalHits: number;\n  totalMisses: number;\n  hits: number;\n  misses: number;\n  hitRate: number;\n}\n\nclass ModelCache {\n  private cache = new Map<string, CachedModel>();\n  private maxSize: number; // Max cache size in bytes\n  private totalHits = 0;\n  private totalMisses = 0;\n\n  constructor(maxSizeMB: number = 512) {\n    this.maxSize = maxSizeMB * 1024 * 1024;\n  }\n\n  /**\n   * Get a cached model or load it\n   */\n  async getOrLoad<T>(\n    key: string,\n    loader: () => Promise<T>,\n    sizeEstimate: number = 50 * 1024 * 1024 // Default 50MB estimate\n  ): Promise<T> {\n    const cached = this.cache.get(key);\n    if (cached) {\n      cached.lastUsed = Date.now();\n      cached.useCount++;\n      this.totalHits++;\n      return cached.model as T;\n    }\n\n    this.totalMisses++;\n\n    // Evict if needed\n    this.evictIfNeeded(sizeEstimate);\n\n    // Load model\n    const model = await loader();\n\n    this.cache.set(key, {\n      model,\n      loadedAt: Date.now(),\n      lastUsed: Date.now(),\n      useCount: 1,\n      sizeEstimate\n    });\n\n    return model;\n  }\n\n  /**\n   * Check if model is cached\n   */\n  has(key: string): boolean {\n    return this.cache.has(key);\n  }\n\n  /**\n   * Get cached model without loading\n   */\n  get<T>(key: string): T | undefined {\n    const cached = this.cache.get(key);\n    if (cached) {\n      cached.lastUsed = Date.now();\n      cached.useCount++;\n      return cached.model as T;\n    }\n    return undefined;\n  }\n\n  /**\n   * Manually cache a model\n   */\n  set(key: string, model: any, sizeEstimate: number = 50 * 1024 * 1024): void {\n    this.evictIfNeeded(sizeEstimate);\n    this.cache.set(key, {\n      model,\n      loadedAt: Date.now(),\n      lastUsed: Date.now(),\n      useCount: 1,\n      sizeEstimate\n    });\n  }\n\n  /**\n   * Remove a model from cache\n   */\n  delete(key: string): boolean {\n    return this.cache.delete(key);\n  }\n\n  /**\n   * Clear all cached models\n   */\n  clear(): void {\n    this.cache.clear();\n  }\n\n  /**\n   * Get cache statistics\n   */\n  getStats(): CacheStats {\n    let totalSize = 0;\n    for (const cached of this.cache.values()) {\n      totalSize += cached.sizeEstimate;\n    }\n    const hits = this.totalHits;\n    const misses = this.totalMisses;\n    const total = hits + misses;\n    return {\n      models: this.cache.size,\n      totalSize,\n      size: this.cache.size,\n      totalHits: hits,\n      totalMisses: misses,\n      hits,\n      misses,\n      hitRate: total > 0 ? hits / total : 0\n    };\n  }\n\n  /**\n   * Evict least recently used models if cache is full\n   */\n  private evictIfNeeded(newSize: number): void {\n    let currentSize = 0;\n    for (const cached of this.cache.values()) {\n      currentSize += cached.sizeEstimate;\n    }\n\n    if (currentSize + newSize <= this.maxSize) {\n      return;\n    }\n\n    // Sort by last used time (LRU)\n    const entries = Array.from(this.cache.entries())\n      .sort((a, b) => a[1].lastUsed - b[1].lastUsed);\n\n    // Evict until we have space\n    for (const [key, cached] of entries) {\n      if (currentSize + newSize <= this.maxSize) {\n        break;\n      }\n      this.cache.delete(key);\n      currentSize -= cached.sizeEstimate;\n    }\n  }\n}\n\n// Global singleton\nexport const modelCache = new ModelCache();\n\n// Convenience functions\nexport async function getCachedOnnxEmbedder(): Promise<any> {\n  return modelCache.getOrLoad(\n    'onnx-embeddings',\n    async () => {\n      // Suppress experimental warning for WASM\n      const originalEmit = process.emit;\n      // @ts-ignore\n      process.emit = function (name, data, ...args) {\n        if (name === 'warning' && typeof data === 'object' &&\n            (data as any).name === 'ExperimentalWarning' &&\n            (data as any).message?.includes('Import')) {\n          return false;\n        }\n        // @ts-ignore\n        return originalEmit.apply(process, [name, data, ...args]);\n      };\n\n      try {\n        const onnxModule = await import('ruvector-onnx-embeddings-wasm') as any;\n        const EmbedderClass = onnxModule.OnnxEmbeddings || onnxModule.default;\n        if (EmbedderClass) {\n          const embedder = new EmbedderClass();\n          await embedder.initialize?.();\n          return embedder;\n        }\n      } finally {\n        process.emit = originalEmit;\n      }\n      return null;\n    },\n    100 * 1024 * 1024 // 100MB estimate for ONNX model\n  );\n}\n\nexport async function getCachedTransformersPipeline(\n  task: string = 'feature-extraction',\n  model: string = 'Xenova/all-MiniLM-L6-v2'\n): Promise<any> {\n  return modelCache.getOrLoad(\n    `transformers:${task}:${model}`,\n    async () => {\n      const { pipeline } = await import('@xenova/transformers');\n      return pipeline(task as any, model);\n    },\n    200 * 1024 * 1024 // 200MB estimate for transformers model\n  );\n}\n\nexport async function getCachedRuvectorCore(): Promise<any> {\n  return modelCache.getOrLoad(\n    'ruvector-core',\n    async () => {\n      const ruvector = await import('ruvector');\n      return ruvector;\n    },\n    50 * 1024 * 1024\n  );\n}\n"]}
+{"version":3,"file":"model-cache.js","sourceRoot":"","sources":["../../src/utils/model-cache.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAqBH,MAAM,UAAU;IACN,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IACvC,OAAO,CAAS,CAAC,0BAA0B;IAC3C,SAAS,GAAG,CAAC,CAAC;IACd,WAAW,GAAG,CAAC,CAAC;IAExB,YAAY,YAAoB,GAAG;QACjC,IAAI,CAAC,OAAO,GAAG,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,GAAW,EACX,MAAwB,EACxB,eAAuB,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,wBAAwB;;QAEhE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClB,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC,KAAU,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;QAEnB,kBAAkB;QAClB,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAEjC,aAAa;QACb,MAAM,KAAK,GAAG,MAAM,MAAM,EAAE,CAAC;QAE7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAClB,KAAK;YACL,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,QAAQ,EAAE,CAAC;YACX,YAAY;SACb,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,GAAG,CAAI,GAAW;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,MAAM,CAAC,KAAU,CAAC;QAC3B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,GAAW,EAAE,KAAU,EAAE,eAAuB,EAAE,GAAG,IAAI,GAAG,IAAI;QAClE,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAClB,KAAK;YACL,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,QAAQ,EAAE,CAAC;YACX,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,GAAW;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,SAAS,IAAI,MAAM,CAAC,YAAY,CAAC;QACnC,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,GAAG,MAAM,CAAC;QAC5B,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACvB,SAAS;YACT,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,MAAM;YACnB,IAAI;YACJ,MAAM;YACN,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;SACtC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,OAAe;QACnC,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,WAAW,IAAI,MAAM,CAAC,YAAY,CAAC;QACrC,CAAC;QAED,IAAI,WAAW,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,+BAA+B;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;aAC7C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAEjD,4BAA4B;QAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACpC,IAAI,WAAW,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC1C,MAAM;YACR,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,WAAW,IAAI,MAAM,CAAC,YAAY,CAAC;QACrC,CAAC;IACH,CAAC;CACF;AAED,mBAAmB;AACnB,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;AAE3C,wBAAwB;AACxB,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,OAAO,UAAU,CAAC,SAAS,CACzB,iBAAiB,EACjB,KAAK,IAAI,EAAE;QACT,yCAAyC;QACzC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;QAClC,aAAa;QACb,OAAO,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI;YAC1C,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAC7C,IAAY,CAAC,IAAI,KAAK,qBAAqB;gBAC3C,IAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,OAAO,KAAK,CAAC;YACf,CAAC;YACD,aAAa;YACb,OAAO,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAQ,CAAC;YACxE,MAAM,aAAa,GAAG,UAAU,CAAC,cAAc,IAAI,UAAU,CAAC,OAAO,CAAC;YACtE,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;gBACrC,MAAM,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC;gBAC9B,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC;QAC9B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,EACD,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,gCAAgC;KACnD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAe,oBAAoB,EACnC,QAAgB,yBAAyB;IAEzC,OAAO,UAAU,CAAC,SAAS,CACzB,gBAAgB,IAAI,IAAI,KAAK,EAAE,EAC/B,KAAK,IAAI,EAAE;QACT,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;QAC/D,OAAO,QAAQ,CAAC,IAAW,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC,EACD,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,wCAAwC;KAC3D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,OAAO,UAAU,CAAC,SAAS,CACzB,eAAe,EACf,KAAK,IAAI,EAAE;QACT,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1C,OAAO,QAAQ,CAAC;IAClB,CAAC,EACD,EAAE,GAAG,IAAI,GAAG,IAAI,CACjB,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Global Model Cache\n *\n * Caches loaded models in memory to avoid repeated initialization overhead.\n * Supports ONNX embeddings, transformers.js pipelines, and other heavy models.\n */\n\ninterface CachedModel {\n  model: any;\n  loadedAt: number;\n  lastUsed: number;\n  useCount: number;\n  sizeEstimate: number; // bytes\n}\n\ninterface CacheStats {\n  models: number;\n  totalSize: number;\n  size?: number;\n  totalHits: number;\n  totalMisses: number;\n  hits: number;\n  misses: number;\n  hitRate: number;\n}\n\nclass ModelCache {\n  private cache = new Map<string, CachedModel>();\n  private maxSize: number; // Max cache size in bytes\n  private totalHits = 0;\n  private totalMisses = 0;\n\n  constructor(maxSizeMB: number = 512) {\n    this.maxSize = maxSizeMB * 1024 * 1024;\n  }\n\n  /**\n   * Get a cached model or load it\n   */\n  async getOrLoad<T>(\n    key: string,\n    loader: () => Promise<T>,\n    sizeEstimate: number = 50 * 1024 * 1024 // Default 50MB estimate\n  ): Promise<T> {\n    const cached = this.cache.get(key);\n    if (cached) {\n      cached.lastUsed = Date.now();\n      cached.useCount++;\n      this.totalHits++;\n      return cached.model as T;\n    }\n\n    this.totalMisses++;\n\n    // Evict if needed\n    this.evictIfNeeded(sizeEstimate);\n\n    // Load model\n    const model = await loader();\n\n    this.cache.set(key, {\n      model,\n      loadedAt: Date.now(),\n      lastUsed: Date.now(),\n      useCount: 1,\n      sizeEstimate\n    });\n\n    return model;\n  }\n\n  /**\n   * Check if model is cached\n   */\n  has(key: string): boolean {\n    return this.cache.has(key);\n  }\n\n  /**\n   * Get cached model without loading\n   */\n  get<T>(key: string): T | undefined {\n    const cached = this.cache.get(key);\n    if (cached) {\n      cached.lastUsed = Date.now();\n      cached.useCount++;\n      return cached.model as T;\n    }\n    return undefined;\n  }\n\n  /**\n   * Manually cache a model\n   */\n  set(key: string, model: any, sizeEstimate: number = 50 * 1024 * 1024): void {\n    this.evictIfNeeded(sizeEstimate);\n    this.cache.set(key, {\n      model,\n      loadedAt: Date.now(),\n      lastUsed: Date.now(),\n      useCount: 1,\n      sizeEstimate\n    });\n  }\n\n  /**\n   * Remove a model from cache\n   */\n  delete(key: string): boolean {\n    return this.cache.delete(key);\n  }\n\n  /**\n   * Clear all cached models\n   */\n  clear(): void {\n    this.cache.clear();\n  }\n\n  /**\n   * Get cache statistics\n   */\n  getStats(): CacheStats {\n    let totalSize = 0;\n    for (const cached of this.cache.values()) {\n      totalSize += cached.sizeEstimate;\n    }\n    const hits = this.totalHits;\n    const misses = this.totalMisses;\n    const total = hits + misses;\n    return {\n      models: this.cache.size,\n      totalSize,\n      size: this.cache.size,\n      totalHits: hits,\n      totalMisses: misses,\n      hits,\n      misses,\n      hitRate: total > 0 ? hits / total : 0\n    };\n  }\n\n  /**\n   * Evict least recently used models if cache is full\n   */\n  private evictIfNeeded(newSize: number): void {\n    let currentSize = 0;\n    for (const cached of this.cache.values()) {\n      currentSize += cached.sizeEstimate;\n    }\n\n    if (currentSize + newSize <= this.maxSize) {\n      return;\n    }\n\n    // Sort by last used time (LRU)\n    const entries = Array.from(this.cache.entries())\n      .sort((a, b) => a[1].lastUsed - b[1].lastUsed);\n\n    // Evict until we have space\n    for (const [key, cached] of entries) {\n      if (currentSize + newSize <= this.maxSize) {\n        break;\n      }\n      this.cache.delete(key);\n      currentSize -= cached.sizeEstimate;\n    }\n  }\n}\n\n// Global singleton\nexport const modelCache = new ModelCache();\n\n// Convenience functions\nexport async function getCachedOnnxEmbedder(): Promise<any> {\n  return modelCache.getOrLoad(\n    'onnx-embeddings',\n    async () => {\n      // Suppress experimental warning for WASM\n      const originalEmit = process.emit;\n      // @ts-ignore\n      process.emit = function (name, data, ...args) {\n        if (name === 'warning' && typeof data === 'object' &&\n            (data as any).name === 'ExperimentalWarning' &&\n            (data as any).message?.includes('Import')) {\n          return false;\n        }\n        // @ts-ignore\n        return originalEmit.apply(process, [name, data, ...args]);\n      };\n\n      try {\n        const onnxModule = await import('ruvector-onnx-embeddings-wasm') as any;\n        const EmbedderClass = onnxModule.OnnxEmbeddings || onnxModule.default;\n        if (EmbedderClass) {\n          const embedder = new EmbedderClass();\n          await embedder.initialize?.();\n          return embedder;\n        }\n      } finally {\n        process.emit = originalEmit;\n      }\n      return null;\n    },\n    100 * 1024 * 1024 // 100MB estimate for ONNX model\n  );\n}\n\nexport async function getCachedTransformersPipeline(\n  task: string = 'feature-extraction',\n  model: string = 'Xenova/all-MiniLM-L6-v2'\n): Promise<any> {\n  return modelCache.getOrLoad(\n    `transformers:${task}:${model}`,\n    async () => {\n      const { pipeline } = await import('@huggingface/transformers');\n      return pipeline(task as any, model);\n    },\n    200 * 1024 * 1024 // 200MB estimate for transformers model\n  );\n}\n\nexport async function getCachedRuvectorCore(): Promise<any> {\n  return modelCache.getOrLoad(\n    'ruvector-core',\n    async () => {\n      const ruvector = await import('ruvector');\n      return ruvector;\n    },\n    50 * 1024 * 1024\n  );\n}\n"]}

package/dist/utils/model-downloader.d.ts

@@ -3,6 +3,20 @@
  *
  * Downloads Phi-4 ONNX model from HuggingFace on first use
  */
+/**
+ * Where ONNX models live on disk.
+ *
+ * These paths were previously relative ('./models/...'), so they resolved
+ * against process.cwd() and a ~4.6GB download landed in whatever directory the
+ * command happened to run from — re-downloaded once per working directory, and
+ * left untracked inside any repository it was invoked in.
+ *
+ * Exported so the reader (router/providers/onnx-local.ts) can resolve the same
+ * path the writer uses; the two previously disagreed (phi-4 vs phi-4-mini).
+ */
+export declare const MODEL_ROOT: string;
+export declare const PHI4_MODEL_PATH: string;
+export declare const PHI4_MODEL_DATA_PATH: string;
 export interface DownloadProgress {
     downloaded: number;
     total: number;

package/dist/utils/model-downloader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model-downloader.d.ts","sourceRoot":"","sources":["../../src/utils/model-downloader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAQH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,OAAO,CAA4B;IAE3C;;;;OAIG;IACH,OAAO,CAAC,SAAS,CAIf;IAEF,OAAO,CAAC,aAAa,CAInB;IAEF;;OAEG;IACH,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO;IAK9C;;OAEG;IACH,OAAO,CAAC,cAAc;IAItB;;OAEG;IACG,aAAa,CACjB,SAAS,CAAC,EAAE,SAAS,EACrB,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,IAAI,GAChD,OAAO,CAAC,MAAM,CAAC;IAkFlB;;OAEG;IACG,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IA+BzF;;OAEG;IACG,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAyB/E;;OAEG;IACH,YAAY,IAAI,SAAS;IAIzB;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM;CAI1D;AAED;;GAEG;AACH,eAAO,MAAM,eAAe,iBAAwB,CAAC;AAErD;;GAEG;AACH,wBAAsB,eAAe,CACnC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,IAAI,GAChD,OAAO,CAAC,MAAM,CAAC,CAEjB"}
+{"version":3,"file":"model-downloader.d.ts","sourceRoot":"","sources":["../../src/utils/model-downloader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,UAAU,QACwB,CAAC;AAEhD,eAAO,MAAM,eAAe,QAE3B,CAAC;AAEF,eAAO,MAAM,oBAAoB,QAA4B,CAAC;AAE9D,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,OAAO,CAA4B;IAE3C;;;;OAIG;IACH,OAAO,CAAC,SAAS,CAIf;IAEF,OAAO,CAAC,aAAa,CAInB;IAEF;;OAEG;IACH,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO;IAK9C;;OAEG;IACH,OAAO,CAAC,cAAc;IAItB;;OAEG;IACG,aAAa,CACjB,SAAS,CAAC,EAAE,SAAS,EACrB,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,IAAI,GAChD,OAAO,CAAC,MAAM,CAAC;IAkFlB;;OAEG;IACG,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IA+BzF;;OAEG;IACG,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAyB/E;;OAEG;IACH,YAAY,IAAI,SAAS;IAIzB;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM;CAI1D;AAED;;GAEG;AACH,eAAO,MAAM,eAAe,iBAAwB,CAAC;AAErD;;GAEG;AACH,wBAAsB,eAAe,CACnC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,IAAI,GAChD,OAAO,CAAC,MAAM,CAAC,CAEjB"}

package/dist/utils/model-downloader.js

@@ -4,9 +4,25 @@
  * Downloads Phi-4 ONNX model from HuggingFace on first use
  */
 import { createWriteStream, existsSync, mkdirSync } from 'fs';
-import { dirname } from 'path';
+import { dirname, join } from 'path';
 import { createHash } from 'crypto';
 import { readFileSync } from 'fs';
+import { homedir } from 'os';
+/**
+ * Where ONNX models live on disk.
+ *
+ * These paths were previously relative ('./models/...'), so they resolved
+ * against process.cwd() and a ~4.6GB download landed in whatever directory the
+ * command happened to run from — re-downloaded once per working directory, and
+ * left untracked inside any repository it was invoked in.
+ *
+ * Exported so the reader (router/providers/onnx-local.ts) can resolve the same
+ * path the writer uses; the two previously disagreed (phi-4 vs phi-4-mini).
+ */
+export const MODEL_ROOT = process.env.AGENTIC_FLOW_MODEL_DIR
+    || join(homedir(), '.agentic-flow', 'models');
+export const PHI4_MODEL_PATH = join(MODEL_ROOT, 'phi-4-mini', 'cpu_and_mobile', 'cpu-int4-rtn-block-32-acc-level-4', 'model.onnx');
+export const PHI4_MODEL_DATA_PATH = `${PHI4_MODEL_PATH}.data`;
 export class ModelDownloader {
     baseUrl = 'https://huggingface.co';
     /**
@@ -17,12 +33,12 @@ export class ModelDownloader {
     phi4Model = {
         repo: 'microsoft/Phi-4-mini-instruct-onnx',
         filename: 'cpu_and_mobile/cpu-int4-rtn-block-32-acc-level-4/model.onnx',
-        localPath: './models/phi-4-mini/cpu_and_mobile/cpu-int4-rtn-block-32-acc-level-4/model.onnx'
+        localPath: PHI4_MODEL_PATH
     };
     phi4ModelData = {
         repo: 'microsoft/Phi-4-mini-instruct-onnx',
         filename: 'cpu_and_mobile/cpu-int4-rtn-block-32-acc-level-4/model.onnx.data',
-        localPath: './models/phi-4-mini/cpu_and_mobile/cpu-int4-rtn-block-32-acc-level-4/model.onnx.data'
+        localPath: PHI4_MODEL_DATA_PATH
     };
     /**
      * Check if model exists locally

package/dist/utils/model-downloader.js.map

@@ -1 +1 @@
-{"version":3,"file":"model-downloader.js","sourceRoot":"","sources":["../../src/utils/model-downloader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAQ,MAAM,MAAM,CAAC;AAErC,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAelC,MAAM,OAAO,eAAe;IAClB,OAAO,GAAG,wBAAwB,CAAC;IAE3C;;;;OAIG;IACK,SAAS,GAAc;QAC7B,IAAI,EAAE,oCAAoC;QAC1C,QAAQ,EAAE,6DAA6D;QACvE,SAAS,EAAE,iFAAiF;KAC7F,CAAC;IAEM,aAAa,GAAc;QACjC,IAAI,EAAE,oCAAoC;QAC1C,QAAQ,EAAE,kEAAkE;QAC5E,SAAS,EAAE,sFAAsF;KAClG,CAAC;IAEF;;OAEG;IACH,iBAAiB,CAAC,SAAkB;QAClC,MAAM,IAAI,GAAG,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;QACnD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,KAAgB;QACrC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,iBAAiB,KAAK,CAAC,QAAQ,EAAE,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,SAAqB,EACrB,UAAiD;QAEjD,MAAM,KAAK,GAAG,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC;QAE1C,8BAA8B;QAC9B,IAAI,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YAC5D,OAAO,KAAK,CAAC,SAAS,CAAC;QACzB,CAAC;QAED,mBAAmB;QACnB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAElD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YAElC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;YAC9E,IAAI,cAAc,GAAG,CAAC,CAAC;YAEvB,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAEtD,iBAAiB;YACjB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;YAEhC,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAE5C,IAAI,IAAI;oBAAE,MAAM;gBAEhB,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACnB,cAAc,IAAI,KAAK,CAAC,MAAM,CAAC;oBAE/B,IAAI,UAAU,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;wBAChC,UAAU,CAAC;4BACT,UAAU,EAAE,cAAc;4BAC1B,KAAK,EAAE,SAAS;4BAChB,UAAU,EAAE,CAAC,cAAc,GAAG,SAAS,CAAC,GAAG,GAAG;yBAC/C,CAAC,CAAC;oBACL,CAAC;oBAED,cAAc;oBACd,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;YAED,UAAU,CAAC,GAAG,EAAE,CAAC;YAEjB,iCAAiC;YACjC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;YAEH,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,cAAc,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC1E,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YAE3C,OAAO,KAAK,CAAC,SAAS,CAAC;QAEzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,UAAiD;QACrE,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACxE,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAE5E,IAAI,cAAc,IAAI,cAAc,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;QAClC,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,sCAAsC;QACtC,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;YAC5C,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAED,gCAAgC;QAChC,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;YACjF,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,cAAuB;QAC1D,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,CAAC,wCAAwC;QACvD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEnE,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;gBAC5B,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBAC7C,OAAO,CAAC,KAAK,CAAC,gBAAgB,cAAc,EAAE,CAAC,CAAC;gBAChD,OAAO,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;gBACtC,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC;QAEd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;YACpD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,QAA0B;QAC9C,MAAM,EAAE,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACjE,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IACpG,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;AAErD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAAiD;IAEjD,OAAO,eAAe,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;AACrD,CAAC","sourcesContent":["/**\n * Automatic Model Downloader for ONNX Phi-4\n *\n * Downloads Phi-4 ONNX model from HuggingFace on first use\n */\n\nimport { createWriteStream, existsSync, mkdirSync } from 'fs';\nimport { dirname, join } from 'path';\nimport { pipeline } from 'stream/promises';\nimport { createHash } from 'crypto';\nimport { readFileSync } from 'fs';\n\nexport interface DownloadProgress {\n  downloaded: number;\n  total: number;\n  percentage: number;\n}\n\nexport interface ModelInfo {\n  repo: string;\n  filename: string;\n  localPath: string;\n  sha256?: string;\n}\n\nexport class ModelDownloader {\n  private baseUrl = 'https://huggingface.co';\n\n  /**\n   * Phi-4 Mini ONNX INT4 quantized model (CPU optimized)\n   * Size: ~52MB model + ~4.86GB data = ~4.9GB total\n   * Note: Requires TWO files - model.onnx and model.onnx.data\n   */\n  private phi4Model: ModelInfo = {\n    repo: 'microsoft/Phi-4-mini-instruct-onnx',\n    filename: 'cpu_and_mobile/cpu-int4-rtn-block-32-acc-level-4/model.onnx',\n    localPath: './models/phi-4-mini/cpu_and_mobile/cpu-int4-rtn-block-32-acc-level-4/model.onnx'\n  };\n\n  private phi4ModelData: ModelInfo = {\n    repo: 'microsoft/Phi-4-mini-instruct-onnx',\n    filename: 'cpu_and_mobile/cpu-int4-rtn-block-32-acc-level-4/model.onnx.data',\n    localPath: './models/phi-4-mini/cpu_and_mobile/cpu-int4-rtn-block-32-acc-level-4/model.onnx.data'\n  };\n\n  /**\n   * Check if model exists locally\n   */\n  isModelDownloaded(modelPath?: string): boolean {\n    const path = modelPath || this.phi4Model.localPath;\n    return existsSync(path);\n  }\n\n  /**\n   * Get model download URL\n   */\n  private getDownloadUrl(model: ModelInfo): string {\n    return `${this.baseUrl}/${model.repo}/resolve/main/${model.filename}`;\n  }\n\n  /**\n   * Download model with progress tracking\n   */\n  async downloadModel(\n    modelInfo?: ModelInfo,\n    onProgress?: (progress: DownloadProgress) => void\n  ): Promise<string> {\n    const model = modelInfo || this.phi4Model;\n\n    // Check if already downloaded\n    if (this.isModelDownloaded(model.localPath)) {\n      console.log(`✅ Model already exists at ${model.localPath}`);\n      return model.localPath;\n    }\n\n    // Create directory\n    const dir = dirname(model.localPath);\n    if (!existsSync(dir)) {\n      mkdirSync(dir, { recursive: true });\n    }\n\n    const url = this.getDownloadUrl(model);\n    console.log(`📦 Downloading Phi-4 ONNX model from HuggingFace...`);\n    console.log(`   URL: ${url}`);\n    console.log(`   Destination: ${model.localPath}`);\n\n    try {\n      const response = await fetch(url);\n\n      if (!response.ok) {\n        throw new Error(`Download failed: ${response.statusText}`);\n      }\n\n      const totalSize = parseInt(response.headers.get('content-length') || '0', 10);\n      let downloadedSize = 0;\n\n      if (!response.body) {\n        throw new Error('Response body is null');\n      }\n\n      const fileStream = createWriteStream(model.localPath);\n\n      // Track progress\n      const reader = response.body.getReader();\n      const chunks: Uint8Array[] = [];\n\n      while (true) {\n        const { done, value } = await reader.read();\n\n        if (done) break;\n\n        if (value) {\n          chunks.push(value);\n          downloadedSize += value.length;\n\n          if (onProgress && totalSize > 0) {\n            onProgress({\n              downloaded: downloadedSize,\n              total: totalSize,\n              percentage: (downloadedSize / totalSize) * 100\n            });\n          }\n\n          // Write chunk\n          fileStream.write(value);\n        }\n      }\n\n      fileStream.end();\n\n      // Wait for file stream to finish\n      await new Promise<void>((resolve, reject) => {\n        fileStream.on('finish', () => resolve());\n        fileStream.on('error', reject);\n      });\n\n      console.log(`✅ Model downloaded successfully`);\n      console.log(`   Size: ${(downloadedSize / (1024 * 1024)).toFixed(2)} MB`);\n      console.log(`   Path: ${model.localPath}`);\n\n      return model.localPath;\n\n    } catch (error) {\n      console.error(`❌ Model download failed:`, error);\n      throw new Error(`Failed to download model: ${error}`);\n    }\n  }\n\n  /**\n   * Download Phi-4 ONNX model if needed (downloads BOTH .onnx and .onnx.data files)\n   */\n  async ensurePhi4Model(onProgress?: (progress: DownloadProgress) => void): Promise<string> {\n    const mainFileExists = this.isModelDownloaded(this.phi4Model.localPath);\n    const dataFileExists = this.isModelDownloaded(this.phi4ModelData.localPath);\n\n    if (mainFileExists && dataFileExists) {\n      return this.phi4Model.localPath;\n    }\n\n    console.log(`🔍 Phi-4-mini ONNX model not found locally`);\n    console.log(`📥 Starting automatic download...`);\n    console.log(`   This is a one-time download (~4.9GB total)`);\n    console.log(`   Model: microsoft/Phi-4-mini-instruct-onnx (INT4 quantized)`);\n    console.log(`   Files: model.onnx (~52MB) + model.onnx.data (~4.86GB)`);\n    console.log(``);\n\n    // Download main model file if missing\n    if (!mainFileExists) {\n      console.log(`📦 Downloading model.onnx...`);\n      await this.downloadModel(this.phi4Model, onProgress);\n      console.log(``);\n    }\n\n    // Download data file if missing\n    if (!dataFileExists) {\n      console.log(`📦 Downloading model.onnx.data (this is the large 4.86GB file)...`);\n      await this.downloadModel(this.phi4ModelData, onProgress);\n    }\n\n    return this.phi4Model.localPath;\n  }\n\n  /**\n   * Verify model file integrity (optional)\n   */\n  async verifyModel(modelPath: string, expectedSha256?: string): Promise<boolean> {\n    if (!expectedSha256) {\n      return true; // Skip verification if no hash provided\n    }\n\n    try {\n      const fileBuffer = readFileSync(modelPath);\n      const hash = createHash('sha256').update(fileBuffer).digest('hex');\n\n      if (hash !== expectedSha256) {\n        console.error(`❌ Model verification failed`);\n        console.error(`   Expected: ${expectedSha256}`);\n        console.error(`   Got:      ${hash}`);\n        return false;\n      }\n\n      console.log(`✅ Model verification passed`);\n      return true;\n\n    } catch (error) {\n      console.error(`❌ Model verification error:`, error);\n      return false;\n    }\n  }\n\n  /**\n   * Get model info\n   */\n  getModelInfo(): ModelInfo {\n    return this.phi4Model;\n  }\n\n  /**\n   * Format download progress for display\n   */\n  static formatProgress(progress: DownloadProgress): string {\n    const mb = (bytes: number) => (bytes / (1024 * 1024)).toFixed(2);\n    return `${progress.percentage.toFixed(1)}% (${mb(progress.downloaded)}/${mb(progress.total)} MB)`;\n  }\n}\n\n/**\n * Global singleton instance\n */\nexport const modelDownloader = new ModelDownloader();\n\n/**\n * Convenience function for downloading Phi-4 model\n */\nexport async function ensurePhi4Model(\n  onProgress?: (progress: DownloadProgress) => void\n): Promise<string> {\n  return modelDownloader.ensurePhi4Model(onProgress);\n}\n"]}
+{"version":3,"file":"model-downloader.js","sourceRoot":"","sources":["../../src/utils/model-downloader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAErC,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAE7B;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB;OACvD,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;AAEhD,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CACjC,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAE,mCAAmC,EAAE,YAAY,CAC9F,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,eAAe,OAAO,CAAC;AAe9D,MAAM,OAAO,eAAe;IAClB,OAAO,GAAG,wBAAwB,CAAC;IAE3C;;;;OAIG;IACK,SAAS,GAAc;QAC7B,IAAI,EAAE,oCAAoC;QAC1C,QAAQ,EAAE,6DAA6D;QACvE,SAAS,EAAE,eAAe;KAC3B,CAAC;IAEM,aAAa,GAAc;QACjC,IAAI,EAAE,oCAAoC;QAC1C,QAAQ,EAAE,kEAAkE;QAC5E,SAAS,EAAE,oBAAoB;KAChC,CAAC;IAEF;;OAEG;IACH,iBAAiB,CAAC,SAAkB;QAClC,MAAM,IAAI,GAAG,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;QACnD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,KAAgB;QACrC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,iBAAiB,KAAK,CAAC,QAAQ,EAAE,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,SAAqB,EACrB,UAAiD;QAEjD,MAAM,KAAK,GAAG,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC;QAE1C,8BAA8B;QAC9B,IAAI,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YAC5D,OAAO,KAAK,CAAC,SAAS,CAAC;QACzB,CAAC;QAED,mBAAmB;QACnB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAElD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YAElC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;YAC9E,IAAI,cAAc,GAAG,CAAC,CAAC;YAEvB,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAEtD,iBAAiB;YACjB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;YAEhC,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAE5C,IAAI,IAAI;oBAAE,MAAM;gBAEhB,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACnB,cAAc,IAAI,KAAK,CAAC,MAAM,CAAC;oBAE/B,IAAI,UAAU,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;wBAChC,UAAU,CAAC;4BACT,UAAU,EAAE,cAAc;4BAC1B,KAAK,EAAE,SAAS;4BAChB,UAAU,EAAE,CAAC,cAAc,GAAG,SAAS,CAAC,GAAG,GAAG;yBAC/C,CAAC,CAAC;oBACL,CAAC;oBAED,cAAc;oBACd,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;YAED,UAAU,CAAC,GAAG,EAAE,CAAC;YAEjB,iCAAiC;YACjC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;YAEH,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,cAAc,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC1E,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YAE3C,OAAO,KAAK,CAAC,SAAS,CAAC;QAEzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,UAAiD;QACrE,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACxE,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAE5E,IAAI,cAAc,IAAI,cAAc,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;QAClC,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,sCAAsC;QACtC,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;YAC5C,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAED,gCAAgC;QAChC,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;YACjF,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,cAAuB;QAC1D,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,CAAC,wCAAwC;QACvD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEnE,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;gBAC5B,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBAC7C,OAAO,CAAC,KAAK,CAAC,gBAAgB,cAAc,EAAE,CAAC,CAAC;gBAChD,OAAO,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;gBACtC,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC;QAEd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;YACpD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,QAA0B;QAC9C,MAAM,EAAE,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACjE,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IACpG,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;AAErD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAAiD;IAEjD,OAAO,eAAe,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;AACrD,CAAC","sourcesContent":["/**\n * Automatic Model Downloader for ONNX Phi-4\n *\n * Downloads Phi-4 ONNX model from HuggingFace on first use\n */\n\nimport { createWriteStream, existsSync, mkdirSync } from 'fs';\nimport { dirname, join } from 'path';\nimport { pipeline } from 'stream/promises';\nimport { createHash } from 'crypto';\nimport { readFileSync } from 'fs';\nimport { homedir } from 'os';\n\n/**\n * Where ONNX models live on disk.\n *\n * These paths were previously relative ('./models/...'), so they resolved\n * against process.cwd() and a ~4.6GB download landed in whatever directory the\n * command happened to run from — re-downloaded once per working directory, and\n * left untracked inside any repository it was invoked in.\n *\n * Exported so the reader (router/providers/onnx-local.ts) can resolve the same\n * path the writer uses; the two previously disagreed (phi-4 vs phi-4-mini).\n */\nexport const MODEL_ROOT = process.env.AGENTIC_FLOW_MODEL_DIR\n  || join(homedir(), '.agentic-flow', 'models');\n\nexport const PHI4_MODEL_PATH = join(\n  MODEL_ROOT, 'phi-4-mini', 'cpu_and_mobile', 'cpu-int4-rtn-block-32-acc-level-4', 'model.onnx'\n);\n\nexport const PHI4_MODEL_DATA_PATH = `${PHI4_MODEL_PATH}.data`;\n\nexport interface DownloadProgress {\n  downloaded: number;\n  total: number;\n  percentage: number;\n}\n\nexport interface ModelInfo {\n  repo: string;\n  filename: string;\n  localPath: string;\n  sha256?: string;\n}\n\nexport class ModelDownloader {\n  private baseUrl = 'https://huggingface.co';\n\n  /**\n   * Phi-4 Mini ONNX INT4 quantized model (CPU optimized)\n   * Size: ~52MB model + ~4.86GB data = ~4.9GB total\n   * Note: Requires TWO files - model.onnx and model.onnx.data\n   */\n  private phi4Model: ModelInfo = {\n    repo: 'microsoft/Phi-4-mini-instruct-onnx',\n    filename: 'cpu_and_mobile/cpu-int4-rtn-block-32-acc-level-4/model.onnx',\n    localPath: PHI4_MODEL_PATH\n  };\n\n  private phi4ModelData: ModelInfo = {\n    repo: 'microsoft/Phi-4-mini-instruct-onnx',\n    filename: 'cpu_and_mobile/cpu-int4-rtn-block-32-acc-level-4/model.onnx.data',\n    localPath: PHI4_MODEL_DATA_PATH\n  };\n\n  /**\n   * Check if model exists locally\n   */\n  isModelDownloaded(modelPath?: string): boolean {\n    const path = modelPath || this.phi4Model.localPath;\n    return existsSync(path);\n  }\n\n  /**\n   * Get model download URL\n   */\n  private getDownloadUrl(model: ModelInfo): string {\n    return `${this.baseUrl}/${model.repo}/resolve/main/${model.filename}`;\n  }\n\n  /**\n   * Download model with progress tracking\n   */\n  async downloadModel(\n    modelInfo?: ModelInfo,\n    onProgress?: (progress: DownloadProgress) => void\n  ): Promise<string> {\n    const model = modelInfo || this.phi4Model;\n\n    // Check if already downloaded\n    if (this.isModelDownloaded(model.localPath)) {\n      console.log(`✅ Model already exists at ${model.localPath}`);\n      return model.localPath;\n    }\n\n    // Create directory\n    const dir = dirname(model.localPath);\n    if (!existsSync(dir)) {\n      mkdirSync(dir, { recursive: true });\n    }\n\n    const url = this.getDownloadUrl(model);\n    console.log(`📦 Downloading Phi-4 ONNX model from HuggingFace...`);\n    console.log(`   URL: ${url}`);\n    console.log(`   Destination: ${model.localPath}`);\n\n    try {\n      const response = await fetch(url);\n\n      if (!response.ok) {\n        throw new Error(`Download failed: ${response.statusText}`);\n      }\n\n      const totalSize = parseInt(response.headers.get('content-length') || '0', 10);\n      let downloadedSize = 0;\n\n      if (!response.body) {\n        throw new Error('Response body is null');\n      }\n\n      const fileStream = createWriteStream(model.localPath);\n\n      // Track progress\n      const reader = response.body.getReader();\n      const chunks: Uint8Array[] = [];\n\n      while (true) {\n        const { done, value } = await reader.read();\n\n        if (done) break;\n\n        if (value) {\n          chunks.push(value);\n          downloadedSize += value.length;\n\n          if (onProgress && totalSize > 0) {\n            onProgress({\n              downloaded: downloadedSize,\n              total: totalSize,\n              percentage: (downloadedSize / totalSize) * 100\n            });\n          }\n\n          // Write chunk\n          fileStream.write(value);\n        }\n      }\n\n      fileStream.end();\n\n      // Wait for file stream to finish\n      await new Promise<void>((resolve, reject) => {\n        fileStream.on('finish', () => resolve());\n        fileStream.on('error', reject);\n      });\n\n      console.log(`✅ Model downloaded successfully`);\n      console.log(`   Size: ${(downloadedSize / (1024 * 1024)).toFixed(2)} MB`);\n      console.log(`   Path: ${model.localPath}`);\n\n      return model.localPath;\n\n    } catch (error) {\n      console.error(`❌ Model download failed:`, error);\n      throw new Error(`Failed to download model: ${error}`);\n    }\n  }\n\n  /**\n   * Download Phi-4 ONNX model if needed (downloads BOTH .onnx and .onnx.data files)\n   */\n  async ensurePhi4Model(onProgress?: (progress: DownloadProgress) => void): Promise<string> {\n    const mainFileExists = this.isModelDownloaded(this.phi4Model.localPath);\n    const dataFileExists = this.isModelDownloaded(this.phi4ModelData.localPath);\n\n    if (mainFileExists && dataFileExists) {\n      return this.phi4Model.localPath;\n    }\n\n    console.log(`🔍 Phi-4-mini ONNX model not found locally`);\n    console.log(`📥 Starting automatic download...`);\n    console.log(`   This is a one-time download (~4.9GB total)`);\n    console.log(`   Model: microsoft/Phi-4-mini-instruct-onnx (INT4 quantized)`);\n    console.log(`   Files: model.onnx (~52MB) + model.onnx.data (~4.86GB)`);\n    console.log(``);\n\n    // Download main model file if missing\n    if (!mainFileExists) {\n      console.log(`📦 Downloading model.onnx...`);\n      await this.downloadModel(this.phi4Model, onProgress);\n      console.log(``);\n    }\n\n    // Download data file if missing\n    if (!dataFileExists) {\n      console.log(`📦 Downloading model.onnx.data (this is the large 4.86GB file)...`);\n      await this.downloadModel(this.phi4ModelData, onProgress);\n    }\n\n    return this.phi4Model.localPath;\n  }\n\n  /**\n   * Verify model file integrity (optional)\n   */\n  async verifyModel(modelPath: string, expectedSha256?: string): Promise<boolean> {\n    if (!expectedSha256) {\n      return true; // Skip verification if no hash provided\n    }\n\n    try {\n      const fileBuffer = readFileSync(modelPath);\n      const hash = createHash('sha256').update(fileBuffer).digest('hex');\n\n      if (hash !== expectedSha256) {\n        console.error(`❌ Model verification failed`);\n        console.error(`   Expected: ${expectedSha256}`);\n        console.error(`   Got:      ${hash}`);\n        return false;\n      }\n\n      console.log(`✅ Model verification passed`);\n      return true;\n\n    } catch (error) {\n      console.error(`❌ Model verification error:`, error);\n      return false;\n    }\n  }\n\n  /**\n   * Get model info\n   */\n  getModelInfo(): ModelInfo {\n    return this.phi4Model;\n  }\n\n  /**\n   * Format download progress for display\n   */\n  static formatProgress(progress: DownloadProgress): string {\n    const mb = (bytes: number) => (bytes / (1024 * 1024)).toFixed(2);\n    return `${progress.percentage.toFixed(1)}% (${mb(progress.downloaded)}/${mb(progress.total)} MB)`;\n  }\n}\n\n/**\n * Global singleton instance\n */\nexport const modelDownloader = new ModelDownloader();\n\n/**\n * Convenience function for downloading Phi-4 model\n */\nexport async function ensurePhi4Model(\n  onProgress?: (progress: DownloadProgress) => void\n): Promise<string> {\n  return modelDownloader.ensurePhi4Model(onProgress);\n}\n"]}

package/dist/utils/package-version.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Version from this package's package.json, found by walking up from this
+ * file (src/utils under tsx, dist/utils when built). Throws if it is missing,
+ * which only happens in a broken install, rather than falling back to a tag.
+ */
+export declare function readPackageVersion(): string;
+/** `agentic-flow@<installed version>`, for npx commands. */
+export declare function packageSpec(): string;
+//# sourceMappingURL=package-version.d.ts.map

package/dist/utils/package-version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-version.d.ts","sourceRoot":"","sources":["../../src/utils/package-version.ts"],"names":[],"mappings":"AAYA;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAgB3C;AAED,4DAA4D;AAC5D,wBAAgB,WAAW,IAAI,MAAM,CAEpC"}

package/dist/utils/package-version.js

@@ -0,0 +1,39 @@
+// The installed agentic-flow version, for commands we write or print.
+//
+// Generated hooks, statuslines and help text run `npx agentic-flow@<this>`,
+// never a dist-tag: @alpha still resolves to the deprecated March 3.0.0-alpha
+// line, and @latest changes under an installed project without notice.
+import * as fs from 'fs';
+import * as path from 'path';
+import { fileURLToPath } from 'url';
+const VERSION_RE = /^\d+\.\d+\.\d+[\w.+-]*$/;
+let cached;
+/**
+ * Version from this package's package.json, found by walking up from this
+ * file (src/utils under tsx, dist/utils when built). Throws if it is missing,
+ * which only happens in a broken install, rather than falling back to a tag.
+ */
+export function readPackageVersion() {
+    if (cached)
+        return cached;
+    let dir = path.dirname(fileURLToPath(import.meta.url));
+    for (;;) {
+        const file = path.join(dir, 'package.json');
+        if (fs.existsSync(file)) {
+            const pkg = JSON.parse(fs.readFileSync(file, 'utf-8'));
+            if (pkg.name === 'agentic-flow' && typeof pkg.version === 'string' && VERSION_RE.test(pkg.version)) {
+                cached = pkg.version;
+                return cached;
+            }
+        }
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            throw new Error('agentic-flow: cannot find its own package.json to pin the version');
+        dir = parent;
+    }
+}
+/** `agentic-flow@<installed version>`, for npx commands. */
+export function packageSpec() {
+    return `agentic-flow@${readPackageVersion()}`;
+}
+//# sourceMappingURL=package-version.js.map

package/dist/utils/package-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-version.js","sourceRoot":"","sources":["../../src/utils/package-version.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,uEAAuE;AACvE,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAC7C,IAAI,MAA0B,CAAC;AAE/B;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC5C,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YACvD,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnG,MAAM,GAAG,GAAG,CAAC,OAAiB,CAAC;gBAC/B,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACzG,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,WAAW;IACzB,OAAO,gBAAgB,kBAAkB,EAAE,EAAE,CAAC;AAChD,CAAC","sourcesContent":["// The installed agentic-flow version, for commands we write or print.\n//\n// Generated hooks, statuslines and help text run `npx agentic-flow@<this>`,\n// never a dist-tag: @alpha still resolves to the deprecated March 3.0.0-alpha\n// line, and @latest changes under an installed project without notice.\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { fileURLToPath } from 'url';\n\nconst VERSION_RE = /^\\d+\\.\\d+\\.\\d+[\\w.+-]*$/;\nlet cached: string | undefined;\n\n/**\n * Version from this package's package.json, found by walking up from this\n * file (src/utils under tsx, dist/utils when built). Throws if it is missing,\n * which only happens in a broken install, rather than falling back to a tag.\n */\nexport function readPackageVersion(): string {\n  if (cached) return cached;\n  let dir = path.dirname(fileURLToPath(import.meta.url));\n  for (;;) {\n    const file = path.join(dir, 'package.json');\n    if (fs.existsSync(file)) {\n      const pkg = JSON.parse(fs.readFileSync(file, 'utf-8'));\n      if (pkg.name === 'agentic-flow' && typeof pkg.version === 'string' && VERSION_RE.test(pkg.version)) {\n        cached = pkg.version as string;\n        return cached;\n      }\n    }\n    const parent = path.dirname(dir);\n    if (parent === dir) throw new Error('agentic-flow: cannot find its own package.json to pin the version');\n    dir = parent;\n  }\n}\n\n/** `agentic-flow@<installed version>`, for npx commands. */\nexport function packageSpec(): string {\n  return `agentic-flow@${readPackageVersion()}`;\n}\n"]}

package/dist/utils/path-safety.d.ts

@@ -0,0 +1,16 @@
+/** A single name segment: lowercase letters, digits and hyphens. */
+export declare function assertSlug(value: string, label?: string): string;
+/** Normalise a free-form agent name (lowercase, spaces to hyphens), then validate it. */
+export declare function toAgentSlug(name: string): string;
+/** A category: slug segments joined by '/', e.g. `custom` or `team/backend`. */
+export declare function assertCategoryPath(category: string): string[];
+/** Join segments under `base` and throw if the result escapes it. */
+export declare function resolveWithin(base: string, ...segments: string[]): string;
+/** `<cwd>/.claude/agents/<category...>`, with the category validated. */
+export declare function resolveAgentDir(category: string, cwd?: string): string;
+/**
+ * Resolve a caller-supplied file path and require it to stay inside `cwd`,
+ * after following symlinks. Throws on anything that escapes.
+ */
+export declare function resolveInsideCwd(filePath: string, cwd?: string): string;
+//# sourceMappingURL=path-safety.d.ts.map

package/dist/utils/path-safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-safety.d.ts","sourceRoot":"","sources":["../../src/utils/path-safety.ts"],"names":[],"mappings":"AAWA,oEAAoE;AACpE,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAS,GAAG,MAAM,CAKhE;AAED,yFAAyF;AACzF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAK7D;AAMD,qEAAqE;AACrE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAOzE;AAED,yEAAyE;AACzE,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAsB,GAAG,MAAM,CAErF;AAeD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAsB,GAAG,MAAM,CAgBtF"}

package/dist/utils/path-safety.js

@@ -0,0 +1,78 @@
+// Path validation for tool and CLI inputs that become filesystem paths.
+//
+// Agent/command names and categories arrive from MCP callers and are joined
+// under .claude/; file paths for the booster edit tools arrive the same way.
+// Every such value is validated here, and the final path must stay inside its
+// base directory.
+import { existsSync, realpathSync } from 'fs';
+import { dirname, join, resolve, sep } from 'path';
+const SEGMENT = /^[a-z0-9-]+$/;
+/** A single name segment: lowercase letters, digits and hyphens. */
+export function assertSlug(value, label = 'name') {
+    if (typeof value !== 'string' || !SEGMENT.test(value)) {
+        throw new Error(`Invalid ${label} '${value}': use lowercase letters, digits and hyphens only`);
+    }
+    return value;
+}
+/** Normalise a free-form agent name (lowercase, spaces to hyphens), then validate it. */
+export function toAgentSlug(name) {
+    return assertSlug(String(name ?? '').trim().toLowerCase().replace(/\s+/g, '-'), 'agent name');
+}
+/** A category: slug segments joined by '/', e.g. `custom` or `team/backend`. */
+export function assertCategoryPath(category) {
+    if (typeof category !== 'string' || category.length === 0) {
+        throw new Error('Category is required');
+    }
+    return category.split('/').map((segment) => assertSlug(segment, `category segment in '${category}'`));
+}
+function isWithin(base, target) {
+    return target === base || target.startsWith(base.endsWith(sep) ? base : base + sep);
+}
+/** Join segments under `base` and throw if the result escapes it. */
+export function resolveWithin(base, ...segments) {
+    const root = resolve(base);
+    const target = resolve(root, ...segments);
+    if (!isWithin(root, target)) {
+        throw new Error(`Path escapes ${root}: ${target}`);
+    }
+    return target;
+}
+/** `<cwd>/.claude/agents/<category...>`, with the category validated. */
+export function resolveAgentDir(category, cwd = process.cwd()) {
+    return resolveWithin(join(cwd, '.claude', 'agents'), ...assertCategoryPath(category));
+}
+/** Resolve symlinks on the longest existing prefix of `target`. */
+function realpathOfExistingPrefix(target) {
+    let existing = target;
+    const rest = [];
+    while (!existsSync(existing)) {
+        const parent = dirname(existing);
+        if (parent === existing)
+            break;
+        rest.unshift(existing.slice(parent.length + (parent.endsWith(sep) ? 0 : 1)));
+        existing = parent;
+    }
+    return join(realpathSync(existing), ...rest);
+}
+/**
+ * Resolve a caller-supplied file path and require it to stay inside `cwd`,
+ * after following symlinks. Throws on anything that escapes.
+ */
+export function resolveInsideCwd(filePath, cwd = process.cwd()) {
+    if (!filePath || typeof filePath !== 'string') {
+        throw new Error('File path is required and must be a string');
+    }
+    if (filePath.length > 4096) {
+        throw new Error('File path too long (max 4096 characters)');
+    }
+    if (filePath.includes('\0')) {
+        throw new Error('File path contains a NUL byte');
+    }
+    const root = realpathSync(resolve(cwd));
+    const target = resolve(root, filePath);
+    if (!isWithin(root, target) || !isWithin(root, realpathOfExistingPrefix(target))) {
+        throw new Error(`Path is outside the working directory (${root}): ${filePath}`);
+    }
+    return target;
+}
+//# sourceMappingURL=path-safety.js.map

package/dist/utils/path-safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-safety.js","sourceRoot":"","sources":["../../src/utils/path-safety.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,8EAA8E;AAC9E,kBAAkB;AAClB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAEnD,MAAM,OAAO,GAAG,cAAc,CAAC;AAE/B,oEAAoE;AACpE,MAAM,UAAU,UAAU,CAAC,KAAa,EAAE,KAAK,GAAG,MAAM;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,KAAK,mDAAmD,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;AAChG,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,wBAAwB,QAAQ,GAAG,CAAC,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc;IAC5C,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;AACtF,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,GAAG,QAAkB;IAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,MAAc,OAAO,CAAC,GAAG,EAAE;IAC3E,OAAO,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,mEAAmE;AACnE,SAAS,wBAAwB,CAAC,MAAc;IAC9C,IAAI,QAAQ,GAAG,MAAM,CAAC;IACtB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,QAAQ;YAAE,MAAM;QAC/B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,QAAQ,GAAG,MAAM,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,MAAc,OAAO,CAAC,GAAG,EAAE;IAC5E,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,MAAM,QAAQ,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["// Path validation for tool and CLI inputs that become filesystem paths.\n//\n// Agent/command names and categories arrive from MCP callers and are joined\n// under .claude/; file paths for the booster edit tools arrive the same way.\n// Every such value is validated here, and the final path must stay inside its\n// base directory.\nimport { existsSync, realpathSync } from 'fs';\nimport { dirname, join, resolve, sep } from 'path';\n\nconst SEGMENT = /^[a-z0-9-]+$/;\n\n/** A single name segment: lowercase letters, digits and hyphens. */\nexport function assertSlug(value: string, label = 'name'): string {\n  if (typeof value !== 'string' || !SEGMENT.test(value)) {\n    throw new Error(`Invalid ${label} '${value}': use lowercase letters, digits and hyphens only`);\n  }\n  return value;\n}\n\n/** Normalise a free-form agent name (lowercase, spaces to hyphens), then validate it. */\nexport function toAgentSlug(name: string): string {\n  return assertSlug(String(name ?? '').trim().toLowerCase().replace(/\\s+/g, '-'), 'agent name');\n}\n\n/** A category: slug segments joined by '/', e.g. `custom` or `team/backend`. */\nexport function assertCategoryPath(category: string): string[] {\n  if (typeof category !== 'string' || category.length === 0) {\n    throw new Error('Category is required');\n  }\n  return category.split('/').map((segment) => assertSlug(segment, `category segment in '${category}'`));\n}\n\nfunction isWithin(base: string, target: string): boolean {\n  return target === base || target.startsWith(base.endsWith(sep) ? base : base + sep);\n}\n\n/** Join segments under `base` and throw if the result escapes it. */\nexport function resolveWithin(base: string, ...segments: string[]): string {\n  const root = resolve(base);\n  const target = resolve(root, ...segments);\n  if (!isWithin(root, target)) {\n    throw new Error(`Path escapes ${root}: ${target}`);\n  }\n  return target;\n}\n\n/** `<cwd>/.claude/agents/<category...>`, with the category validated. */\nexport function resolveAgentDir(category: string, cwd: string = process.cwd()): string {\n  return resolveWithin(join(cwd, '.claude', 'agents'), ...assertCategoryPath(category));\n}\n\n/** Resolve symlinks on the longest existing prefix of `target`. */\nfunction realpathOfExistingPrefix(target: string): string {\n  let existing = target;\n  const rest: string[] = [];\n  while (!existsSync(existing)) {\n    const parent = dirname(existing);\n    if (parent === existing) break;\n    rest.unshift(existing.slice(parent.length + (parent.endsWith(sep) ? 0 : 1)));\n    existing = parent;\n  }\n  return join(realpathSync(existing), ...rest);\n}\n\n/**\n * Resolve a caller-supplied file path and require it to stay inside `cwd`,\n * after following symlinks. Throws on anything that escapes.\n */\nexport function resolveInsideCwd(filePath: string, cwd: string = process.cwd()): string {\n  if (!filePath || typeof filePath !== 'string') {\n    throw new Error('File path is required and must be a string');\n  }\n  if (filePath.length > 4096) {\n    throw new Error('File path too long (max 4096 characters)');\n  }\n  if (filePath.includes('\\0')) {\n    throw new Error('File path contains a NUL byte');\n  }\n  const root = realpathSync(resolve(cwd));\n  const target = resolve(root, filePath);\n  if (!isWithin(root, target) || !isWithin(root, realpathOfExistingPrefix(target))) {\n    throw new Error(`Path is outside the working directory (${root}): ${filePath}`);\n  }\n  return target;\n}\n"]}

package/docs/IMPROVEMENT_ROADMAP.md

@@ -0,0 +1,184 @@
+# E2B Swarm & P2P Coordination - Improvement Roadmap
+
+## Current State Analysis
+
+### ✅ What's Working
+- E2B Firecracker sandboxes (live cloud execution)
+- Basic swarm orchestration
+- Simulated IPFS/GunDB/WebRTC coordination
+- AES-256-GCM encryption
+- ruv-swarm-transport WASM integration
+
+### ⚠️ Current Limitations
+1. **Simulated P2P** - Not using real GunDB/IPFS connections
+2. **Output capture** - E2B Python output sometimes missing
+3. **No persistence** - Learning patterns lost between sessions
+4. **Single region** - No geographic distribution
+5. **No real QUIC** - Using HTTP fallback
+
+---
+
+## Priority Improvements
+
+### 🔴 Critical (Immediate)
+
+#### 1. Real GunDB Integration
+```bash
+npm install gun
+```
+- Connect to actual GunDB relays
+- Real-time swarm state sync
+- Offline-first with auto-reconnect
+
+#### 2. Real IPFS Pinning
+```bash
+npm install @web3-storage/w3up-client
+```
+- Pin learning patterns to IPFS
+- Content-addressed retrieval
+- Free 5GB via web3.storage
+
+#### 3. Fix E2B Output Capture
+- Use `runCode` with proper stdout handling
+- Add retry logic for output retrieval
+- Stream output in real-time
+
+### 🟡 High Priority (This Week)
+
+#### 4. Persistent Learning Storage
+- Save SONA patterns to AgentDB
+- Export/import swarm state
+- Cross-session memory retention
+
+#### 5. Real WebRTC Mesh
+```bash
+npm install peerjs
+```
+- Direct agent-to-agent connections
+- Bypass relay servers
+- Lower latency coordination
+
+#### 6. OrbitDB Integration
+```bash
+npm install @orbitdb/core
+```
+- CRDT-based P2P database
+- Automatic conflict resolution
+- libp2p pubsub
+
+### 🟢 Medium Priority (This Month)
+
+#### 7. Geographic Distribution
+- Multi-region E2B sandboxes
+- Nearest-shard memory recall
+- Regional consensus groups
+
+#### 8. Real QUIC Transport
+- Use `@aspect-build/rules_js` for QUIC
+- 0-RTT connection resumption
+- Stream multiplexing
+
+#### 9. Advanced Compression
+- Real PQ quantization
+- Binary gradient compression
+- Adaptive bandwidth detection
+
+#### 10. Circuit Breaker (TinyDancer)
+- Integrate @ruvector/tiny-dancer
+- Auto-failover between providers
+- 99.9% uptime target
+
+---
+
+## Implementation Plan
+
+### Phase 1: Real P2P (2-3 days)
+```
+1. npm install gun @web3-storage/w3up-client peerjs
+2. Replace simulated clients with real ones
+3. Add connection health monitoring
+4. Test with multiple E2B sandboxes
+```
+
+### Phase 2: Persistence (1-2 days)
+```
+1. Integrate AgentDB for pattern storage
+2. Add swarm state export/import
+3. Implement cross-session memory
+4. Add HNSW index for pattern search
+```
+
+### Phase 3: Production Ready (1 week)
+```
+1. Add circuit breakers
+2. Multi-region support
+3. Real QUIC transport
+4. Comprehensive error handling
+5. Monitoring & metrics
+```
+
+---
+
+## Quick Wins (Can Do Now)
+
+### 1. Add Real GunDB Relay
+```javascript
+import Gun from 'gun';
+const gun = Gun(['https://gun-manhattan.herokuapp.com/gun']);
+const swarm = gun.get('agentic-flow-swarm');
+```
+
+### 2. Add web3.storage
+```javascript
+import { create } from '@web3-storage/w3up-client';
+const client = await create();
+// Free 5GB storage
+```
+
+### 3. Fix Output Capture
+```javascript
+// In e2b-sandbox.ts
+const result = await this.sandbox.runCode(code);
+// Check result.logs, result.text, result.results
+```
+
+### 4. Add PeerJS
+```javascript
+import { Peer } from 'peerjs';
+const peer = new Peer('swarm-' + swarmId);
+```
+
+---
+
+## Metrics to Track
+
+| Metric | Current | Target |
+|--------|---------|--------|
+| P2P Connection Rate | Simulated | 99%+ real |
+| Learning Persistence | 0% | 100% |
+| Output Capture | ~70% | 99%+ |
+| Multi-region | 1 | 3+ |
+| QUIC Usage | 0% | 80%+ |
+
+---
+
+## Cost Analysis
+
+| Provider | Current | After Improvement |
+|----------|---------|-------------------|
+| E2B | ~$0.10/sandbox | Same |
+| GunDB | $0 | $0 |
+| IPFS (web3.storage) | $0 | $0 (5GB free) |
+| WebRTC (PeerJS) | $0 | $0 |
+| **Total** | **~$0** | **~$0** |
+
+---
+
+## Next Steps
+
+1. [ ] Install real P2P packages (gun, @web3-storage, peerjs)
+2. [ ] Update swarm coordinator to use real connections
+3. [ ] Fix E2B output capture
+4. [ ] Add persistent storage for learning patterns
+5. [ ] Test multi-sandbox coordination
+6. [ ] Add monitoring dashboard

package/docs/docker-tests/TEST-V1.7.8.Dockerfile

@@ -6,8 +6,8 @@ RUN apk add --no-cache python3 make g++ sqlite sqlite-dev
 WORKDIR /test
 
 RUN echo "========================================" && \
-    echo "Testing npx agentic-flow@latest" && \
+    echo "Testing npx agentic-flow@1.7.8" && \
     echo "========================================" && \
-    npx agentic-flow@latest --version 2>&1 | head -20
+    npx agentic-flow@1.7.8 --version 2>&1 | head -20
 
 CMD ["echo", "✅ Test complete"]

package/docs/docker-tests/TEST-V1.7.9-NODE20.Dockerfile

@@ -6,8 +6,8 @@ RUN apk add --no-cache python3 make g++ sqlite sqlite-dev
 WORKDIR /test
 
 RUN echo "========================================" && \
-    echo "Testing npx agentic-flow@latest with Node 20" && \
+    echo "Testing npx agentic-flow@1.7.9 with Node 20" && \
     echo "========================================" && \
-    npx agentic-flow@latest --version 2>&1
+    npx agentic-flow@1.7.9 --version 2>&1
 
 CMD ["echo", "✅ Test complete"]

package/docs/docker-tests/TEST-V1.7.9.Dockerfile

@@ -6,9 +6,9 @@ RUN apk add --no-cache python3 make g++ sqlite sqlite-dev
 WORKDIR /test
 
 RUN echo "========================================" && \
-    echo "Testing npx agentic-flow@latest" && \
+    echo "Testing npx agentic-flow@1.7.9" && \
     echo "Expecting v1.7.9 with better-sqlite3 v11.x" && \
     echo "========================================" && \
-    npx agentic-flow@latest --version 2>&1 | head -20
+    npx agentic-flow@1.7.9 --version 2>&1 | head -20
 
 CMD ["echo", "✅ Test complete"]