car-runtime 0.49.0 → 0.50.0

package/index.d.ts

@@ -23,7 +23,6 @@
  * - `openSession`, `closeSession`, `registerPolicy(sessionId)` — use
  *   `session.open` / `session.close` JSON-RPC methods
  * - `stateSnapshot`, `stateKeys` — daemon-side endpoints pending
- * - `removeModel` — daemon owns models_dir / models.json
  *
  * (`registerModel` was re-exposed in #39 — it now proxies to the
  *  daemon's `models.register` JSON-RPC. See its docstring for
@@ -445,6 +444,12 @@ export class CarRuntime {
   syncStatus(requestJson: string): Promise<string>;
   /** `sync.append` — record an op on any surface: `{ surface, payload, scope? }` (B6). */
   syncAppend(requestJson: string): Promise<string>;
+  /** Store/load exact supervised-assistant checkpoints in the durable oplog. */
+  syncAssistantCheckpointPut(requestJson: string): Promise<string>;
+  syncAssistantCheckpointGet(requestJson: string): Promise<string>;
+  /** Append/load monotone supervised-action lifecycle records. */
+  syncAssistantActionPut(requestJson: string): Promise<string>;
+  syncAssistantActionGet(requestJson: string): Promise<string>;
   /** `sync.record_turn` — route a conversation turn through the oplog so `syncResume` is real (B6). */
   syncRecordTurn(requestJson: string): Promise<string>;
   /** `sync.record_intent` — write the leased-execution intent ledger; feeds the fence oracle (B6). */
@@ -943,14 +948,28 @@ export class CarRuntime {
   /** Download a model. Returns its local path. */
   pullModel(name: string): Promise<string>;
 
-  /** Remove a downloaded model. */
-  removeModel(name: string): void;
+  /** Remove only a receipt-backed CAR-managed artifact. Returns result JSON. */
+  removeModel(modelId: string): Promise<string>;
+
+  /** Adopt an already-usable local artifact into CAR ownership. */
+  adoptModel(modelId: string): Promise<string>;
+
+  /** Read the saved local-model resource policy and evaluated budget. */
+  modelResourcePolicyGet(): Promise<string>;
+
+  /** Persist an exact resource-policy JSON object. */
+  modelResourcePolicySet(policyJson: string): Promise<string>;
+
+  /** Evaluate one local model without downloading or loading it. */
+  modelPreflight(modelId: string, contextTokens?: number): Promise<string>;
 
   /**
    * Unified registry (local + remote). Returns JSON array of
    * `{ id, name, provider, capabilities, param_count, size_mb,
-   *   context_length, available, is_local, weights_ready, downloads_weights,
-   *   max_output_tokens, public_benchmarks, cost }`. `available` means CAR
+   *   context_length, available, is_local, operator_managed_external_runtime,
+   *   weights_ready, downloads_weights,
+   *   max_output_tokens, public_benchmarks, cost, car_enabled, can_remove,
+   *   in_use, management_evidence }`. `available` means CAR
    * can use the model
    * here — for a local MLX entry with a declared `hf_repo` it is `true`
    * before a byte is fetched, because it lazy-downloads on first use —
@@ -958,13 +977,17 @@ export class CarRuntime {
    * models, having none to install, report `true`). Older daemons omit
    * `weights_ready`; it defaults to `false` rather than failing.
    * `downloads_weights` is `true` only for entries whose weights CAR fetches
-   * before use (GGUF, MLX, whisper.cpp); when it is `false` — OS-provided
-   * models such as `windows/speech-synthesis:os` and
-   * `apple/foundation:default`, server-backed local models such as
-   * `vllm-mlx/*` and Ollama, and every remote entry — there is nothing to
+   * before use (GGUF, MLX, whisper.cpp, and CAR-owned managed vLLM-MLX).
+   * When it is `false` — OS-provided models such as
+   * `windows/speech-synthesis:os` and `apple/foundation:default`,
+   * operator-managed servers such as raw vLLM-MLX and Ollama, and every
+   * remote entry — there is nothing to
    * install, so `weights_ready` is meaningless and the CLI renders
-   * `INSTALLED` as `-`. Do not substitute `is_local`: those first four are
-   * all local and all download nothing. Older daemons omit
+   * `INSTALLED` as `-`. Do not substitute `is_local`: OS-provided models are
+   * local but download nothing. A raw external vLLM-MLX row instead
+   * sets `operator_managed_external_runtime=true` and is not local, even for
+   * a loopback endpoint; only CAR-owned managed vLLM-MLX is charged and
+   * supervised as local. Older daemons omit
    * `downloads_weights`; it defaults to `false` rather than failing.
    * `max_output_tokens` is the registry-declared
    *   per-model output ceiling (`null` when the entry omits it; callers

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "car-runtime",
-  "version": "0.49.0",
+  "version": "0.50.0",
   "description": "Common Agent Runtime — a deterministic execution layer for AI agents",
   "main": "index.js",
   "types": "index.d.ts",