@flaxia/node 0.3.7 → 0.5.0

package/dist/workloads/__tests__/nudenet.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=nudenet.test.d.ts.map

package/dist/workloads/__tests__/nudenet.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nudenet.test.d.ts","sourceRoot":"","sources":["../../../src/workloads/__tests__/nudenet.test.ts"],"names":[],"mappings":""}

package/dist/workloads/ai-inference.d.ts

@@ -1,9 +1,10 @@
 import type { AiInferencePayload, AiInferenceResult } from '@flaxia/sdk';
+export { DEFAULT_AI_MODEL_MAX_BYTES, MAX_AI_MODEL_MAX_BYTES, MAX_AI_INPUT_CHARS, MAX_AI_INPUT_ITEMS, ALLOWED_AI_DEVICES, ALLOWED_AI_DTYPES, listAiModels, registerAiModels, unregisterAiModel, type AiModelDefinition, } from './ai-model-registry';
 /**
  * Drops all cached model pipelines so the (potentially hundreds of MB of)
  * transformers/onnxruntime memory can be garbage-collected. Called by the
  * worker after an idle period so a node does not pin every model it ever saw.
  */
 export declare const releaseCache: () => void;
-export declare const handleAiInference: (payload: AiInferencePayload, onToken?: (token: string) => void) => Promise<AiInferenceResult>;
+export declare const handleAiInference: (payload: AiInferencePayload, onToken?: (token: string) => void | Promise<void>) => Promise<AiInferenceResult>;
 //# sourceMappingURL=ai-inference.d.ts.map

package/dist/workloads/ai-inference.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ai-inference.d.ts","sourceRoot":"","sources":["../../src/workloads/ai-inference.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAsB,MAAM,aAAa,CAAC;AAe7F;;;;GAIG;AACH,eAAO,MAAM,YAAY,QAAO,IAE/B,CAAC;AAuCF,eAAO,MAAM,iBAAiB,GAC5B,SAAS,kBAAkB,EAC3B,UAAU,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,KAChC,OAAO,CAAC,iBAAiB,CAoE3B,CAAC"}
+{"version":3,"file":"ai-inference.d.ts","sourceRoot":"","sources":["../../src/workloads/ai-inference.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAsB,MAAM,aAAa,CAAC;AAa7F,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,iBAAiB,GACvB,MAAM,qBAAqB,CAAC;AAe7B;;;;GAIG;AACH,eAAO,MAAM,YAAY,QAAO,IAE/B,CAAC;AA0FF,eAAO,MAAM,iBAAiB,GAC5B,SAAS,kBAAkB,EAC3B,UAAU,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAChD,OAAO,CAAC,iBAAiB,CAqF3B,CAAC"}

package/dist/workloads/ai-model-registry.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Node-side model registry for the `ai-inference` workload.
+ *
+ * A task payload's `model` field is unvalidated API input, and in
+ * transformers.js it is both the repository id *and* the download source. Left
+ * unchecked, any API key holder could make the whole volunteer fleet download
+ * an arbitrary Hugging Face repository (bandwidth, storage, memory) or pin the
+ * node to a revision of their choosing. Only models registered here are ever
+ * loaded; an unknown id is rejected before any network request happens.
+ *
+ * Hosts extend the registry explicitly (and only at start-up) via
+ * `registerAiModels`. The registry is process-wide: it is the node operator's
+ * decision which repositories run on volunteers.
+ */
+export interface AiModelDefinition {
+    /** Hugging Face repository id, e.g. `Xenova/bert-base-multilingual-uncased-sentiment`. */
+    repo: string;
+    /** Immutable revision (commit sha or tag) to pin the download to. */
+    revision: string;
+    /** Optional sha256 of the main weight file, for out-of-band integrity checks. */
+    sha256?: string;
+    /** Upper bound for a single model file download, in bytes. */
+    maxBytes: number;
+}
+/** Default per-file download cap: 512 MiB. */
+export declare const DEFAULT_AI_MODEL_MAX_BYTES: number;
+/** Hard ceiling for any registry entry: 4 GiB. */
+export declare const MAX_AI_MODEL_MAX_BYTES: number;
+/** Execution devices a node is willing to run. `webgpu` is opt-in. */
+export declare const ALLOWED_AI_DEVICES: readonly ["wasm", "cpu", "webgpu"];
+export type AllowedAiDevice = (typeof ALLOWED_AI_DEVICES)[number];
+/**
+ * Quantization formats that keep a task inside the memory the node promised.
+ * `fp32` and `fp16` are deliberately absent: a task could otherwise select the
+ * largest possible weights for a model the node already accepted.
+ */
+export declare const ALLOWED_AI_DTYPES: readonly ["q4", "q4f16", "q8", "int8", "uint8"];
+export type AllowedAiDtype = (typeof ALLOWED_AI_DTYPES)[number];
+/** Maximum characters accepted for a single text input (and array length). */
+export declare const MAX_AI_INPUT_CHARS = 100000;
+export declare const MAX_AI_INPUT_ITEMS = 64;
+/**
+ * Register (or replace) allowed models. Called by a host at start-up; entries
+ * are validated here so a bad entry cannot widen the download limits.
+ */
+export declare function registerAiModels(definitions: Record<string, AiModelDefinition>): void;
+/** Remove a previously registered model (mostly useful for tests/hosts). */
+export declare function unregisterAiModel(id: string): void;
+/** All registered model ids, for diagnostics and operator tooling. */
+export declare function listAiModels(): string[];
+/**
+ * Resolve a payload's `model` to its registry entry, or throw a clear error.
+ * This is the fail-closed gate: the returned `repo` is what gets passed to
+ * transformers.js, never the raw payload value.
+ */
+export declare function resolveAiModel(model: unknown): AiModelDefinition;
+/** Validate `options.device` against the node's allowlist. */
+export declare function resolveAiDevice(device: unknown): AllowedAiDevice | undefined;
+/** Validate `options.dtype` against the node's allowlist. */
+export declare function resolveAiDtype(dtype: unknown): AllowedAiDtype | undefined;
+/**
+ * Validate the task input: a bounded string or a bounded array of strings.
+ * Anything else (objects, numbers, huge arrays) is rejected before the model
+ * is loaded so a malformed payload cannot waste a download.
+ */
+export declare function assertAiInput(input: unknown): string | string[];
+/**
+ * Copy the numeric generation options into `target`, rejecting out-of-range or
+ * non-numeric values instead of handing them to onnxruntime.
+ */
+export declare function applyGenerationOptions(target: Record<string, unknown>, options: Record<string, unknown>): void;
+//# sourceMappingURL=ai-model-registry.d.ts.map

package/dist/workloads/ai-model-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-model-registry.d.ts","sourceRoot":"","sources":["../../src/workloads/ai-model-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,iBAAiB;IAChC,0FAA0F;IAC1F,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,8CAA8C;AAC9C,eAAO,MAAM,0BAA0B,QAAoB,CAAC;AAC5D,kDAAkD;AAClD,eAAO,MAAM,sBAAsB,QAAgB,CAAC;AAwBpD,sEAAsE;AACtE,eAAO,MAAM,kBAAkB,oCAAqC,CAAC;AACrE,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,iDAAkD,CAAC;AACjF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAWhE,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,SAAU,CAAC;AAC1C,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG,IAAI,CAkBrF;AAED,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAElD;AAED,sEAAsE;AACtE,wBAAgB,YAAY,IAAI,MAAM,EAAE,CAEvC;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB,CAWhE;AAED,8DAA8D;AAC9D,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,GAAG,eAAe,GAAG,SAAS,CAQ5E;AAED,6DAA6D;AAC7D,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,GAAG,SAAS,CAQzE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,EAAE,CAsB/D;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,IAAI,CAyBN"}

package/dist/workloads/container.d.ts

@@ -1,3 +1,3 @@
 import type { ContainerPayload, ContainerResult } from '@flaxia/sdk';
-export declare const handleContainer: (payload: ContainerPayload) => Promise<ContainerResult>;
+export declare const handleContainer: (payload: ContainerPayload, fileSourceOrigins?: readonly string[], containerImageOrigins?: readonly string[]) => Promise<ContainerResult>;
 //# sourceMappingURL=container.d.ts.map

package/dist/workloads/container.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../src/workloads/container.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAErE,eAAO,MAAM,eAAe,GAAU,SAAS,gBAAgB,KAAG,OAAO,CAAC,eAAe,CAYxF,CAAC"}
+{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../src/workloads/container.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAErE,eAAO,MAAM,eAAe,GAC1B,SAAS,gBAAgB,EACzB,oBAAmB,SAAS,MAAM,EAAO,EACzC,wBAAwB,SAAS,MAAM,EAAE,KACxC,OAAO,CAAC,eAAe,CAYzB,CAAC"}

package/dist/workloads/image-process.d.ts

@@ -1,3 +1,30 @@
 import type { ImageProcessPayload, ImageProcessResult } from '@flaxia/sdk';
+/**
+ * Hard canvas limits for customer-supplied resize requests.
+ *
+ * `options.width`/`options.height` come straight from the task payload, so
+ * without caps `{ width: 100000, height: 100000 }` asks the volunteer's renderer
+ * for a terabyte-scale allocation. Each side is capped at 8192px and the total
+ * at 32M pixels (a 8192x4096 canvas, ~128MB of RGBA backing store).
+ */
+export declare const MAX_CANVAS_SIDE = 8192;
+export declare const MAX_CANVAS_PIXELS: number;
+/** Maximum encoded input before data-URL decoding or image bitmap allocation. */
+export declare const MAX_IMAGE_PROCESS_INPUT_BYTES: number;
+/**
+ * Resolve the output canvas size: validate the requested size against the hard
+ * caps, then clamp it to the source bitmap so a payload can never upscale (and
+ * therefore never allocate more than the decoded source needs).
+ */
+export declare function resolveCanvasSize(requested: {
+    width?: unknown;
+    height?: unknown;
+}, source: {
+    width: number;
+    height: number;
+}): {
+    width: number;
+    height: number;
+};
 export declare const handleImageProcess: (payload: ImageProcessPayload) => Promise<ImageProcessResult>;
 //# sourceMappingURL=image-process.d.ts.map

package/dist/workloads/image-process.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"image-process.d.ts","sourceRoot":"","sources":["../../src/workloads/image-process.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE3E,eAAO,MAAM,kBAAkB,GAAU,SAAS,mBAAmB,KAAG,OAAO,CAAC,kBAAkB,CAwDjG,CAAC"}
+{"version":3,"file":"image-process.d.ts","sourceRoot":"","sources":["../../src/workloads/image-process.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE3E;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,OAAO,CAAC;AACpC,eAAO,MAAM,iBAAiB,QAAmB,CAAC;AAClD,iFAAiF;AACjF,eAAO,MAAM,6BAA6B,QAAmB,CAAC;AAgH9D;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,EAChD,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAenC;AAED,eAAO,MAAM,kBAAkB,GAAU,SAAS,mBAAmB,KAAG,OAAO,CAAC,kBAAkB,CA6EjG,CAAC"}

package/dist/workloads/nudenet.d.ts

@@ -1,4 +1,12 @@
 import type { NudeNetPayload, NudeNetResult } from '@flaxia/sdk';
+/** Hard caps for the inputs this workload accepts. */
+export declare const MAX_NUDENET_IMAGE_BYTES: number;
+/** Bound decoded pixels before allocating preprocessing canvases (RGBA ~4 bytes/pixel). */
+export declare const MAX_NUDENET_IMAGE_PIXELS: number;
+export declare const MAX_NUDENET_IMAGE_SIDE = 8192;
+export declare const MAX_NUDENET_MODEL_BYTES: number;
+/** Content types accepted for a customer-supplied image URL. */
+export declare const NUDENET_IMAGE_CONTENT_TYPES: readonly ["image/*", "application/octet-stream"];
 export declare function configureOrt(): void;
 export declare const handleNudeNet: (payload: NudeNetPayload) => Promise<NudeNetResult>;
 export declare function releaseCache(): void;

package/dist/workloads/nudenet.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nudenet.d.ts","sourceRoot":"","sources":["../../src/workloads/nudenet.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAoB,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAoCnF,wBAAgB,YAAY,IAAI,IAAI,CAUnC;AAuID,eAAO,MAAM,aAAa,GAAU,SAAS,cAAc,KAAG,OAAO,CAAC,aAAa,CA6BlF,CAAC;AAEF,wBAAgB,YAAY,IAAI,IAAI,CAEnC"}
+{"version":3,"file":"nudenet.d.ts","sourceRoot":"","sources":["../../src/workloads/nudenet.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAoB,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAUnF,sDAAsD;AACtD,eAAO,MAAM,uBAAuB,QAAmB,CAAC;AACxD,2FAA2F;AAC3F,eAAO,MAAM,wBAAwB,QAAmB,CAAC;AACzD,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAC3C,eAAO,MAAM,uBAAuB,QAAoB,CAAC;AACzD,gEAAgE;AAChE,eAAO,MAAM,2BAA2B,kDAAmD,CAAC;AA+B5F,wBAAgB,YAAY,IAAI,IAAI,CAUnC;AAoLD,eAAO,MAAM,aAAa,GAAU,SAAS,cAAc,KAAG,OAAO,CAAC,aAAa,CA6BlF,CAAC;AAEF,wBAAgB,YAAY,IAAI,IAAI,CAEnC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flaxia/node",
-  "version": "0.3.7",
+  "version": "0.5.0",
   "private": false,
   "main": "dist/index.js",
   "types": "./dist/index.d.ts",
@@ -17,11 +17,12 @@
   "scripts": {
     "build": "rm -f tsconfig.tsbuildinfo && vite build && tsc -b",
     "dev": "vite",
+    "typecheck": "tsc --noEmit",
     "test": "vitest"
   },
   "dependencies": {
     "@bjorn3/browser_wasi_shim": "^0.4.2",
-    "@flaxia/sdk": "^0.4.0",
+    "@flaxia/sdk": "^0.5.0",
     "@huggingface/transformers": "^4.2.0",
     "onnxruntime-web": "1.26.0",
     "rollup": "^4.61.0"

package/dist/assets/memoryProbe.js

@@ -1,28 +0,0 @@
-//#region src/executor/memoryProbe.ts
-var e = 2 * 1024 ** 3, t = 65536, n = 16 * 1024 * 1024;
-function r(r = e, i = n) {
-	let a;
-	try {
-		a = new WebAssembly.Memory({ initial: 0 });
-	} catch {
-		return 0;
-	}
-	let o = 0;
-	for (; o < r;) {
-		let e = r - o, n = Math.ceil(Math.min(i, e) / t);
-		try {
-			a.grow(n);
-		} catch {
-			break;
-		}
-		let s = new Uint8Array(a.buffer);
-		for (let e = 0; e < n; e++) s[o + e * t] = 0;
-		o += n * t;
-	}
-	return o;
-}
-function i() {
-	return r() >= e;
-}
-//#endregion
-export { i as n, r, e as t };

package/dist/client/WebRTCPeer.d.ts

@@ -1,8 +0,0 @@
-export declare class WebRTCPeer {
-    private peerConnection;
-    private onTaskResult;
-    constructor(onTaskResult: (result: any) => void);
-    handleOffer(offer: RTCSessionDescriptionInit, sendAnswer: (answer: RTCSessionDescriptionInit) => void): Promise<void>;
-    addIceCandidate(candidate: RTCIceCandidateInit): Promise<void>;
-}
-//# sourceMappingURL=WebRTCPeer.d.ts.map

package/dist/client/WebRTCPeer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"WebRTCPeer.d.ts","sourceRoot":"","sources":["../../src/client/WebRTCPeer.ts"],"names":[],"mappings":"AAAA,qBAAa,UAAU;IACrB,OAAO,CAAC,cAAc,CAAoB;IAC1C,OAAO,CAAC,YAAY,CAAwB;gBAEhC,YAAY,EAAE,CAAC,MAAM,EAAE,GAAG,KAAK,IAAI;IAOzC,WAAW,CAAC,KAAK,EAAE,yBAAyB,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,yBAAyB,KAAK,IAAI;IAOrG,eAAe,CAAC,SAAS,EAAE,mBAAmB;CAGrD"}