QVAC-14392 chore: drop @qvac/dl-hyperdrive peer-dep chain in infer-base + decoder-audio

[simon-iribarren]

Summary

Two manifest-only changes that together unblock the SDK-side removal of @qvac/dl-* packages tracked in QVAC-14392. This PR is the addon-side prerequisite for #1754 — once both packages here are republished (@qvac/infer-base@0.4.1, @qvac/decoder-audio@0.3.8), the overrides block in packages/sdk/package.json can be dropped and @qvac/dl-hyperdrive + @qvac/dl-base fall out of the SDK install entirely.

What changed

@qvac/infer-base

• Drop the vestigial peerDependencies."@qvac/dl-hyperdrive": "^0.1.0" declaration. The runtime moved off DataLoaders in QVAC-17434 chore[bc]: migrate SDK plugins to new addon constructor shape #1688 (Loader interface lives in infer-base, ready()/close() are optional), so this peer-dep is no longer required by anything in the package — grep -rE "require\(['\"]@qvac/dl-hyperdrive returns nothing across packages/qvac-lib-infer-base/.
• Optional/regular dependencies are unchanged.

@qvac/decoder-audio

• Bump "@qvac/infer-base" from "^0.1.0" to "^0.4.0". This stops pulling the published infer-base@0.1.1 (which still carries the old dl-hyperdrive peer-dep on its 0.1.x line) into consumers' install trees. The deep-subpath import require('@qvac/infer-base/WeightsProvider/BaseInference') in index.js and the class FFmpegDecoder extends BaseInference shape both continue to work against 0.4.x (verified locally — see test plan).

NOTICE files

Regenerated via node .cursor/skills/notice-generate/scripts/generate-notice.js qvac-lib-infer-base / qvac-lib-decoder-audio on top of the manifest changes.

Why this is needed

Today, even with the SDK's overrides: { "@qvac/dl-hyperdrive": "^0.2.0" } in place, the @qvac/dl-* packages still get pulled into the SDK's dep tree because:

1. @qvac/infer-base@0.4.0 declares peerDependencies: { "@qvac/dl-hyperdrive": "^0.1.0" } — bun materializes a dl-hyperdrive to satisfy it (the override forces 0.2.1; without the override it falls to 0.1.1 and breaks SDK typing — see QVAC-14392 chore: scope down DataLoader cleanup to packages/rag #1754 for the regression).
2. @qvac/decoder-audio@0.3.7 directly depends on @qvac/infer-base: ^0.1.0, dragging the old 0.1.1 line (with its own dl-hyperdrive peer-dep) into the install in parallel.

This PR clears both. After this lands and both packages are republished:

Step	Effect
infer-base@0.4.1 published	New consumers no longer carry the dl-hyperdrive peer-dep declaration
decoder-audio@0.3.8 published	transcription-whispercpp@0.6.2's ^0.3.3 constraint accepts the new version, so the bump propagates without re-releasing whispercpp
SDK drops overrides (#1754 follow-up)	@qvac/dl-hyperdrive and @qvac/dl-base fall out of packages/sdk/bun.lock

Test plan

@qvac/infer-base

• npm install clean
• npm run lint (standard) — clean
• npm run test:unit (brittle-bare) — 118/118 passing, 258/258 asserts
• CI: lint + dts + unit (this PR)

@qvac/decoder-audio

• npm install resolves @qvac/infer-base@0.4.0 ✓
• npm run lint (standard) — clean
• npm run test:unit (brittle-bare) — 9/9 passing, 34/34 asserts
• CI: lint + unit + integration (this PR)

Downstream verification

• After merge + republish: confirm packages/sdk install no longer needs the overrides block (handled in QVAC-14392 chore: scope down DataLoader cleanup to packages/rag #1754).

[simon-iribarren]

/review

[github-actions]

Tier-based Approval Status

**PR Tier:** TIER1

**Current Status:** ✅ APPROVED

**Requirements:**
- 1 Team Member approval ✅ (3/1)
- 1 Team Lead OR Management approval ✅ (1/1)



---
*This comment is automatically updated when reviews change.*