@degreesign/chat 0.1.1 → 0.1.3

package/README.md

@@ -8,7 +8,7 @@ loads one model, streams one reply and reports status.
 [![license](https://img.shields.io/badge/license-MIT-blue.svg)](#licensing)
 [![node](https://img.shields.io/badge/node-%3E%3D24-brightgreen.svg)](#faq)
 [![types](https://img.shields.io/badge/types-included-brightgreen.svg)](#faq)
-[![architecture](https://img.shields.io/badge/architecture-view-blue.svg)](https://degreesign.github.io/ds_chat/)
+[![architecture](https://img.shields.io/badge/architecture-view-blue.svg)](https://degreesign.github.io/ds_chat/architecture.html)
 
 ## Table of contents
 
@@ -230,6 +230,26 @@ The CPU engine derives a raw thread count from the device, then caps it at
 `limits.maxThreads`, default 2. The cap is applied after the raw maximum, so the
 engine never exceeds the device or the caller budget.
 
+Threads only take effect when the host page is cross-origin isolated. Serve it
+with both headers:
+
+```
+Cross-Origin-Opener-Policy: same-origin
+Cross-Origin-Embedder-Policy: require-corp
+```
+
+Then assert `crossOriginIsolated === true` in the page. Without isolation the
+engine falls back to one thread and image encoding becomes much slower, since
+the projector runs on the CPU.
+
+Under `require-corp` every cross-origin subresource must be CORS enabled or
+carry `Cross-Origin-Resource-Policy`. Hugging Face downloads already qualify;
+third party images, fonts and embeds need `crossorigin="anonymous"` or must be
+self hosted. Chromium also accepts
+`Cross-Origin-Embedder-Policy: credentialless` when those assets cannot be
+changed. A page inside an iframe is isolated only when every ancestor sets the
+same headers.
+
 Only one model stays on device. Loading a new model unloads the previous runtime
 and deletes other model caches. A quota failure purges every model cache before
 retrying, so a half written download never blocks the next attempt.
@@ -318,7 +338,7 @@ The public enums are `ChatModelId`, `LlmRole`, `ChatStatus`, `LlmStatus`,
 ## Architecture
 
 An interactive map of the package lives at
-[degreesign.github.io/ds_chat](https://degreesign.github.io/ds_chat/). It covers
+[degreesign.github.io/ds_chat/architecture.html](https://degreesign.github.io/ds_chat/architecture.html). It covers
 the two entries, every source module with line numbers, the helper edges and the
 send flow.
 

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@degreesign/chat",
-    "version": "0.1.1",
+    "version": "0.1.3",
     "description": "Headless on-device AI chat for browsers, workers and Node with a wllama CPU engine",
     "main": "dist/node/chat.node.min.js",
     "module": "dist/browser/chat.min.mjs",