….1 is on npm (QVAC-14392)

@qvac/infer-base@0.4.1 (released via tetherto#1777) drops the vestigial
peerDependencies."@qvac/dl-hyperdrive": "^0.1.0" declaration that was
forcing the override. With it on npm, the SDK no longer needs the
override block in package.json — `bun install` resolves cleanly and
the type-narrowing regression we saw before tetherto#1761 is gone.

Verified locally with override dropped:
- bun install: clean, 1315 packages
- bunx eslint . --max-warnings=0: clean (was 39 errors pre-tetherto#1761)
- bun run typecheck: clean
- bun run build: clean
- bun run test:unit: 10/10 pass

NOTICE regenerated. @qvac/dl-base and @qvac/dl-hyperdrive still appear
in the install tree (now at 0.1.1 instead of 0.2.1) because
@qvac/decoder-audio@0.3.7 still pins @qvac/infer-base: ^0.1.0 — once
@qvac/decoder-audio@0.3.8 (tetherto#1778) clears its integration tests and
publishes to npm, those will fall out entirely and a final NOTICE
regen will close out QVAC-14392 end-to-end.

Refs: tetherto#1761, tetherto#1777, tetherto#1778

…o@0.3.8 is on npm (QVAC-14392)

@qvac/decoder-audio@0.3.8 (released via tetherto#1778) flips its @qvac/infer-base
direct dep from ^0.1.0 to ^0.4.0. Combined with @qvac/infer-base@0.4.1
(no peer-dep on @qvac/dl-hyperdrive), nothing in the SDK install tree
peer-deps or directly-deps @qvac/dl-* anymore — they fall out entirely.

NOTICE now shows:
- @qvac/decoder-audio@0.3.8 (was 0.3.7)
- @qvac/infer-base@0.4.1     (was 0.1.1 + 0.4.0 dual)
- @qvac/dl-base              REMOVED
- @qvac/dl-hyperdrive        REMOVED

QVAC-14392 closeable end-to-end.

Refs: tetherto#1761, tetherto#1777, tetherto#1778

PATCH bump (backmerge of release-qvac-lib-decoder-audio-0.3.8 onto main).

Reapplies the version bump (0.3.7 -> 0.3.8) and changelog entry from
the release branch onto main's renamed package path
(packages/qvac-lib-decoder-audio/ -> packages/decoder-audio/, which
landed on main after the release branch was cut).

@qvac/decoder-audio@0.3.8 is already published to npm via the GPR PR
(tetherto#1778). This backmerge brings main's metadata in sync.

Refs: tetherto#1761, tetherto#1778

PATCH bump (backmerge of release-qvac-lib-decoder-audio-0.3.8 onto main).

Reapplies the version bump (0.3.7 -> 0.3.8) and changelog entry from
the release branch onto main's renamed package path
(packages/qvac-lib-decoder-audio/ -> packages/decoder-audio/, which
landed on main after the release branch was cut).

@qvac/decoder-audio@0.3.8 is already published to npm via the GPR PR
(#1778). This backmerge brings main's metadata in sync.

Refs: #1761, #1778

* chore(sdk,rag): remove DataLoader package usage from SDK pod (QVAC-14392)

- Drop the `overrides: { @qvac/dl-hyperdrive: ^0.2.0 }` pin in
  packages/sdk/package.json. Without the artificial pin, dl-hyperdrive
  resolves to the version the addons' peer deps actually request
  (0.1.1), and dl-filesystem and stale infer-base versions fall out
  of the SDK install entirely.
- Migrate packages/rag examples and integration tests off
  @qvac/dl-hyperdrive: replace HyperDriveDL-based loader plumbing
  with the new files-based addon constructor shape
  ({ files, config, logger, opts }). Models are downloaded over
  HTTPS via a small downloadModel helper, mirroring the addon
  package examples.
- Bump rag's devDependencies on @qvac/embed-llamacpp (^0.7.6 ->
  ^0.14.0) and @qvac/llm-llamacpp (^0.5.7 -> ^0.16.0) to versions
  that ship the files-based API. Add bare-https for the model
  download helper.
- Regenerate packages/sdk/NOTICE and packages/rag/NOTICE to reflect
  the updated dependency trees.

Addon-side cleanup (deleting dl-* packages, dropping the
@qvac/dl-hyperdrive peer dep from @qvac/infer-base, and migrating
remaining addon test/example deps) is tracked separately and will
land in the addon pod.

* chore(rag): use @qvac/registry-client for example model downloads (QVAC-14392)

Replace the hand-rolled HTTPS downloader and bare-https devDependency in
@qvac/rag examples and integration tests with @qvac/registry-client. This
matches the pattern already used by @qvac/ocr-onnx (examples/utils.js +
scripts/download-ocr-models.js) and means the rag examples now fetch models
through the same QVAC registry the SDK consumes at runtime.

- examples/utils.js: rewrite as a thin wrapper around QVACRegistryClient.
  Single client instance, opens once, downloads all missing models, closes.
  Exposes RAG_MODELS catalog (gte-large_fp16.gguf and Llama-3.2-1B-Instruct-Q4_0.gguf)
  with their canonical { path, source } registry tuples lifted from
  packages/sdk/models/registry/models.ts.
- examples/quickstart.js, examples/chunking.js: switch to ensureModels()
  helper; drop bare-path / explicit URL constants.
- test/integration/rag.test.js: same migration; modelName now sourced from
  RAG_MODELS to avoid duplication.
- package.json: add @qvac/registry-client@^0.4.1, remove bare-https.

No runtime / public API surface change.

* chore(sdk): restore @qvac/dl-hyperdrive override for SDK type narrowing (QVAC-14392)

The override pinning @qvac/dl-hyperdrive ^0.2.0 was load-bearing for
typing in the SDK: it transitively bumps @qvac/infer-base to 0.4.x,
which exposes the narrower Loader/file types the SDK relies on.

Without the override, @qvac/dl-hyperdrive resolves to 0.1.1 (the peer
dep declared by infer-base@0.1.x), which broadens the receiver types
of several SDK utilities and causes 39 @typescript-eslint/no-unnecessary-type-assertion
errors in lint (CI's "check (sdk)" job fails as a result).

Restore the override and regenerate bun.lock + NOTICE. The dl-* package
deletion will follow once the addons drop their @qvac/dl-hyperdrive
peer-dep entirely.

* chore(sdk): drop @qvac/dl-hyperdrive override now that infer-base@0.4.1 is on npm (QVAC-14392)

@qvac/infer-base@0.4.1 (released via #1777) drops the vestigial
peerDependencies."@qvac/dl-hyperdrive": "^0.1.0" declaration that was
forcing the override. With it on npm, the SDK no longer needs the
override block in package.json — `bun install` resolves cleanly and
the type-narrowing regression we saw before #1761 is gone.

Verified locally with override dropped:
- bun install: clean, 1315 packages
- bunx eslint . --max-warnings=0: clean (was 39 errors pre-#1761)
- bun run typecheck: clean
- bun run build: clean
- bun run test:unit: 10/10 pass

NOTICE regenerated. @qvac/dl-base and @qvac/dl-hyperdrive still appear
in the install tree (now at 0.1.1 instead of 0.2.1) because
@qvac/decoder-audio@0.3.7 still pins @qvac/infer-base: ^0.1.0 — once
@qvac/decoder-audio@0.3.8 (#1778) clears its integration tests and
publishes to npm, those will fall out entirely and a final NOTICE
regen will close out QVAC-14392 end-to-end.

Refs: #1761, #1777, #1778

* chore(sdk): regenerate NOTICE — drop @qvac/dl-* now that decoder-audio@0.3.8 is on npm (QVAC-14392)

@qvac/decoder-audio@0.3.8 (released via #1778) flips its @qvac/infer-base
direct dep from ^0.1.0 to ^0.4.0. Combined with @qvac/infer-base@0.4.1
(no peer-dep on @qvac/dl-hyperdrive), nothing in the SDK install tree
peer-deps or directly-deps @qvac/dl-* anymore — they fall out entirely.

NOTICE now shows:
- @qvac/decoder-audio@0.3.8 (was 0.3.7)
- @qvac/infer-base@0.4.1     (was 0.1.1 + 0.4.0 dual)
- @qvac/dl-base              REMOVED
- @qvac/dl-hyperdrive        REMOVED

QVAC-14392 closeable end-to-end.

Refs: #1761, #1777, #1778

PATCH bump.

Bumps @qvac/infer-base direct dep from ^0.1.0 to ^0.4.0. Combined with
@qvac/infer-base@0.4.1 (peer-dep drop), this severs the last path that
pulls @qvac/dl-* into consumers' install trees through this addon.

BaseInference public surface unchanged across 0.1.1 -> 0.4.x; lint
clean + 9/9 brittle-bare unit tests pass.

Refs: #1761

PATCH bump (backmerge of release-qvac-lib-decoder-audio-0.3.8 onto main).

Reapplies the version bump (0.3.7 -> 0.3.8) and changelog entry from
the release branch onto main's renamed package path
(packages/qvac-lib-decoder-audio/ -> packages/decoder-audio/, which
landed on main after the release branch was cut).

@qvac/decoder-audio@0.3.8 is already published to npm via the GPR PR
(#1778). This backmerge brings main's metadata in sync.

Refs: #1761, #1778

* chore(sdk,rag): remove DataLoader package usage from SDK pod (QVAC-14392)

- Drop the `overrides: { @qvac/dl-hyperdrive: ^0.2.0 }` pin in
  packages/sdk/package.json. Without the artificial pin, dl-hyperdrive
  resolves to the version the addons' peer deps actually request
  (0.1.1), and dl-filesystem and stale infer-base versions fall out
  of the SDK install entirely.
- Migrate packages/rag examples and integration tests off
  @qvac/dl-hyperdrive: replace HyperDriveDL-based loader plumbing
  with the new files-based addon constructor shape
  ({ files, config, logger, opts }). Models are downloaded over
  HTTPS via a small downloadModel helper, mirroring the addon
  package examples.
- Bump rag's devDependencies on @qvac/embed-llamacpp (^0.7.6 ->
  ^0.14.0) and @qvac/llm-llamacpp (^0.5.7 -> ^0.16.0) to versions
  that ship the files-based API. Add bare-https for the model
  download helper.
- Regenerate packages/sdk/NOTICE and packages/rag/NOTICE to reflect
  the updated dependency trees.

Addon-side cleanup (deleting dl-* packages, dropping the
@qvac/dl-hyperdrive peer dep from @qvac/infer-base, and migrating
remaining addon test/example deps) is tracked separately and will
land in the addon pod.

* chore(rag): use @qvac/registry-client for example model downloads (QVAC-14392)

Replace the hand-rolled HTTPS downloader and bare-https devDependency in
@qvac/rag examples and integration tests with @qvac/registry-client. This
matches the pattern already used by @qvac/ocr-onnx (examples/utils.js +
scripts/download-ocr-models.js) and means the rag examples now fetch models
through the same QVAC registry the SDK consumes at runtime.

- examples/utils.js: rewrite as a thin wrapper around QVACRegistryClient.
  Single client instance, opens once, downloads all missing models, closes.
  Exposes RAG_MODELS catalog (gte-large_fp16.gguf and Llama-3.2-1B-Instruct-Q4_0.gguf)
  with their canonical { path, source } registry tuples lifted from
  packages/sdk/models/registry/models.ts.
- examples/quickstart.js, examples/chunking.js: switch to ensureModels()
  helper; drop bare-path / explicit URL constants.
- test/integration/rag.test.js: same migration; modelName now sourced from
  RAG_MODELS to avoid duplication.
- package.json: add @qvac/registry-client@^0.4.1, remove bare-https.

No runtime / public API surface change.

* chore(sdk): restore @qvac/dl-hyperdrive override for SDK type narrowing (QVAC-14392)

The override pinning @qvac/dl-hyperdrive ^0.2.0 was load-bearing for
typing in the SDK: it transitively bumps @qvac/infer-base to 0.4.x,
which exposes the narrower Loader/file types the SDK relies on.

Without the override, @qvac/dl-hyperdrive resolves to 0.1.1 (the peer
dep declared by infer-base@0.1.x), which broadens the receiver types
of several SDK utilities and causes 39 @typescript-eslint/no-unnecessary-type-assertion
errors in lint (CI's "check (sdk)" job fails as a result).

Restore the override and regenerate bun.lock + NOTICE. The dl-* package
deletion will follow once the addons drop their @qvac/dl-hyperdrive
peer-dep entirely.

* chore(sdk): drop @qvac/dl-hyperdrive override now that infer-base@0.4.1 is on npm (QVAC-14392)

@qvac/infer-base@0.4.1 (released via #1777) drops the vestigial
peerDependencies."@qvac/dl-hyperdrive": "^0.1.0" declaration that was
forcing the override. With it on npm, the SDK no longer needs the
override block in package.json — `bun install` resolves cleanly and
the type-narrowing regression we saw before #1761 is gone.

Verified locally with override dropped:
- bun install: clean, 1315 packages
- bunx eslint . --max-warnings=0: clean (was 39 errors pre-#1761)
- bun run typecheck: clean
- bun run build: clean
- bun run test:unit: 10/10 pass

NOTICE regenerated. @qvac/dl-base and @qvac/dl-hyperdrive still appear
in the install tree (now at 0.1.1 instead of 0.2.1) because
@qvac/decoder-audio@0.3.7 still pins @qvac/infer-base: ^0.1.0 — once
@qvac/decoder-audio@0.3.8 (#1778) clears its integration tests and
publishes to npm, those will fall out entirely and a final NOTICE
regen will close out QVAC-14392 end-to-end.

Refs: #1761, #1777, #1778

* chore(sdk): regenerate NOTICE — drop @qvac/dl-* now that decoder-audio@0.3.8 is on npm (QVAC-14392)

@qvac/decoder-audio@0.3.8 (released via #1778) flips its @qvac/infer-base
direct dep from ^0.1.0 to ^0.4.0. Combined with @qvac/infer-base@0.4.1
(no peer-dep on @qvac/dl-hyperdrive), nothing in the SDK install tree
peer-deps or directly-deps @qvac/dl-* anymore — they fall out entirely.

NOTICE now shows:
- @qvac/decoder-audio@0.3.8 (was 0.3.7)
- @qvac/infer-base@0.4.1     (was 0.1.1 + 0.4.0 dual)
- @qvac/dl-base              REMOVED
- @qvac/dl-hyperdrive        REMOVED

QVAC-14392 closeable end-to-end.

Refs: #1761, #1777, #1778