@flaxia/node 0.3.7 → 0.5.1

package/dist/assets/webgpuProbe.js

@@ -0,0 +1,357 @@
+//#region ../sdk/dist/index.js
+var e = "flaxia-node-v1", t = "bearer.";
+function n(n) {
+	return [e, `${t}${n}`];
+}
+function r(e, t, n = {}) {
+	let r = e.replace(/\/+$/, "").replace(/^http/, "ws"), i = new URL(`${r}${t.startsWith("/") ? t : `/${t}`}`);
+	for (let [e, t] of Object.entries(n)) t !== void 0 && i.searchParams.set(e, String(t));
+	return i.toString();
+}
+var i = 6e4;
+function a(e, t) {
+	if (t.length === 0) return [];
+	if (!Number.isInteger(e) || e < 1) throw Error(`layers must be a positive integer, got ${e}`);
+	let n = Math.min(t.length, e), r = t.slice(0, n).map((e) => Number.isFinite(e) && e > 0 ? e : 0), i = r.reduce((e, t) => e + t, 0) || 1, a = r.map((t) => Math.max(1, Math.floor(e * t / i))), o = a.reduce((e, t) => e + t, 0);
+	for (; o > e;) {
+		let e = 0;
+		for (let t = 1; t < n; t++) a[t] > a[e] && (e = t);
+		if (a[e] <= 1) break;
+		a[e]--, o--;
+	}
+	let s = r.map((t, n) => ({
+		i: n,
+		f: e * t / i - Math.floor(e * t / i)
+	})).sort((e, t) => t.f - e.f), c = 0;
+	for (; o < e;) a[s[c % n].i]++, o++, c++;
+	return a;
+}
+function o(e) {
+	let t = a(e.layers, e.nodes.map((e) => e.capacity)), n = [], r = 0;
+	for (let i = 0; i < t.length; i++) {
+		let a = r + t[i], o = i === 0 ? "host" : "worker", s = {
+			start: r,
+			end: a,
+			hasEmbed: i === 0,
+			hasHead: i === 0
+		};
+		n.push({
+			nodeId: e.nodes[i].nodeId,
+			role: o,
+			slice: s
+		}), r = a;
+	}
+	return {
+		sessionId: e.sessionId,
+		taskId: e.taskId,
+		model: e.model,
+		layers: e.layers,
+		chain: n
+	};
+}
+var s = 21335, c = 0, l = 1, u = 8 * 1024 * 1024;
+function d(e, t, n) {
+	let r = new TextEncoder().encode(e);
+	if (!r.length || r.length > 256) throw Error("swarm session id length is invalid");
+	let i = n ?? new Uint8Array();
+	if (i.byteLength !== 0 && i.byteLength !== 16) throw Error("swarm envelope MAC length is invalid");
+	let a = 4 + r.length + 1 + i.byteLength;
+	if (a + t.byteLength > 8388608) throw Error(`swarm envelope exceeds ${u} bytes`);
+	let o = new ArrayBuffer(a + t.byteLength), s = new DataView(o);
+	return s.setUint32(0, r.length, !0), new Uint8Array(o, 4, r.length).set(r), s.setUint8(4 + r.length, i.byteLength), i.byteLength && new Uint8Array(o, 4 + r.length + 1, i.byteLength).set(i), new Uint8Array(o, a).set(new Uint8Array(t)), o;
+}
+function f(e) {
+	if (e.byteLength < 5 || e.byteLength > 8388608) return null;
+	let t = new DataView(e), n = t.getUint32(0, !0);
+	if (!n || n > 256) return null;
+	let r = 4 + n;
+	if (e.byteLength < r + 1) return null;
+	let i = t.getUint8(r);
+	if (i !== 0 && i !== 16) return null;
+	let a = r + 1 + i;
+	return e.byteLength < a + 16 ? null : {
+		sessionId: new TextDecoder().decode(new Uint8Array(e, 4, n)),
+		mac: i ? new Uint8Array(e, r + 1, i) : null,
+		frame: e.slice(a)
+	};
+}
+async function p(e, t, n) {
+	let r = await crypto.subtle.importKey("raw", new TextEncoder().encode(e), {
+		name: "HMAC",
+		hash: "SHA-256"
+	}, !1, ["sign"]), i = await crypto.subtle.sign("HMAC", r, d(t, n));
+	return new Uint8Array(i).slice(0, 16);
+}
+async function m(e, t, n) {
+	return d(t, n, await p(e, t, n));
+}
+async function ee(e, t, n, r) {
+	if (r.byteLength !== 16) return !1;
+	let i = await p(e, t, n), a = 0;
+	for (let e = 0; e < i.byteLength; e++) a |= i[e] ^ r[e];
+	return a === 0;
+}
+function h(e, t) {
+	let n = new ArrayBuffer(16 + t.byteLength), r = new DataView(n);
+	return r.setUint16(0, s, !0), r.setUint8(2, c), r.setUint8(3, 0), r.setUint32(4, e.requestId >>> 0, !0), r.setUint32(8, e.pos >>> 0, !0), r.setUint16(12, e.tokens, !0), r.setUint16(14, 0, !0), new Uint8Array(n, 16).set(t), n;
+}
+function g(e = 0) {
+	let t = /* @__PURE__ */ new ArrayBuffer(16), n = new DataView(t);
+	return n.setUint16(0, s, !0), n.setUint8(2, l), n.setUint8(3, 0), n.setUint32(4, e >>> 0, !0), t;
+}
+function te(e) {
+	if (e.byteLength !== 16) return !1;
+	let t = new DataView(e);
+	return t.getUint16(0, !0) === 21335 && t.getUint8(2) === l && t.getUint8(3) === 0 && t.getUint32(8, !0) === 0 && t.getUint16(12, !0) === 0 && t.getUint16(14, !0) === 0;
+}
+function ne(e) {
+	if (e.byteLength < 16) return null;
+	let t = new DataView(e);
+	return t.getUint16(0, !0) !== 21335 || t.getUint8(2) !== c ? null : {
+		header: {
+			requestId: t.getUint32(4, !0),
+			pos: t.getUint32(8, !0),
+			tokens: t.getUint16(12, !0)
+		},
+		payload: new Uint8Array(e, 16)
+	};
+}
+function _(e) {
+	if (!y(e)) return !1;
+	if (e.kind === "description") {
+		let t = e.description;
+		return y(t) && (t.type === "offer" || t.type === "answer") && typeof t.sdp == "string" && t.sdp.length > 0 && t.sdp.length <= 24576;
+	}
+	if (e.kind === "candidate") {
+		let t = e.candidate;
+		return t === null ? !0 : y(t) && typeof t.candidate == "string" && t.candidate.length > 0 && t.candidate.length <= 4096 && (t.sdpMid === void 0 || t.sdpMid === null || typeof t.sdpMid == "string" && t.sdpMid.length <= 128) && (t.sdpMLineIndex === void 0 || t.sdpMLineIndex === null || typeof t.sdpMLineIndex == "number" && Number.isInteger(t.sdpMLineIndex) && t.sdpMLineIndex >= 0 && t.sdpMLineIndex <= 255) && (t.usernameFragment === void 0 || t.usernameFragment === null || typeof t.usernameFragment == "string" && t.usernameFragment.length <= 256);
+	}
+	return !1;
+}
+function v(e) {
+	if (!y(e) || e.type !== "swarm-peer-signal" || !_(e.signal)) return !1;
+	try {
+		if (new TextEncoder().encode(JSON.stringify(e.signal)).byteLength > 32768) return !1;
+	} catch {
+		return !1;
+	}
+	return typeof e.taskId == "string" && e.taskId.length > 0 && e.taskId.length <= 128 && typeof e.sessionId == "string" && e.sessionId.length > 0 && e.sessionId.length <= 128 && typeof e.attemptId == "string" && e.attemptId.length > 0 && e.attemptId.length <= 128 && typeof e.toNodeId == "string" && e.toNodeId.length > 0 && e.toNodeId.length <= 128 && (e.fromNodeId === void 0 || typeof e.fromNodeId == "string" && e.fromNodeId.length > 0 && e.fromNodeId.length <= 128);
+}
+function y(e) {
+	return typeof e == "object" && !!e;
+}
+function b(e) {
+	return typeof e == "number" && Number.isInteger(e) && e >= 0;
+}
+function x(e, t = {}) {
+	let n = t.maxLayers ?? 1024, r = t.maxSliceLayers ?? 256;
+	return !(!S(e) || !b(e.start) || !b(e.end) || e.end <= e.start || e.end - e.start > r || e.end > n);
+}
+function S(e) {
+	return y(e) ? typeof e.start == "number" && typeof e.end == "number" && typeof e.hasEmbed == "boolean" && typeof e.hasHead == "boolean" : !1;
+}
+function C(e) {
+	return y(e) ? typeof e.nodeId == "string" && e.nodeId.length > 0 && typeof e.capacity == "number" : !1;
+}
+function w(e) {
+	return e === void 0 || typeof e == "string" && e.length > 0 && e.length <= 128;
+}
+function re(e) {
+	return !y(e) || e.type !== "swarm-init" || typeof e.sessionId != "string" || !e.sessionId || typeof e.taskId != "string" || !e.taskId || typeof e.model != "string" || typeof e.timeoutMs != "number" || !Array.isArray(e.members) || e.members.length === 0 || e.members.length > 16 || typeof e.prompt != "string" && !Array.isArray(e.prompt) ? !1 : e.members.every(C);
+}
+function ie(e) {
+	return !(!y(e) || e.type !== "swarm-slice" || typeof e.sessionId != "string" || !e.sessionId || typeof e.taskId != "string" || !e.taskId || typeof e.model != "string" || !e.model || typeof e.timeoutMs != "number" || !b(e.index) || !b(e.chainLength) || e.chainLength < 1 || e.chainLength > 16 || e.index >= e.chainLength || e.role !== (e.index === 0 ? "host" : "worker") || !x(e.slice) || e.slice.hasEmbed !== (e.index === 0) || e.slice.hasHead !== (e.index === 0) || !w(e.inboundKey) || !w(e.outboundKey) || e.attemptId !== void 0 && (typeof e.attemptId != "string" || !e.attemptId || e.attemptId.length > 128) || e.previousNodeId !== void 0 && (typeof e.previousNodeId != "string" || !e.previousNodeId || e.previousNodeId.length > 128) || e.nextNodeId !== void 0 && (typeof e.nextNodeId != "string" || !e.nextNodeId || e.nextNodeId.length > 128));
+}
+function ae(e) {
+	return !y(e) || e.type !== "swarm-start" ? !1 : typeof e.sessionId == "string" && !!e.sessionId && typeof e.taskId == "string" && !!e.taskId;
+}
+function oe(e) {
+	return !y(e) || e.type !== "swarm-transport" ? !1 : typeof e.sessionId == "string" && !!e.sessionId && typeof e.taskId == "string" && !!e.taskId && (e.mode === "peer" || e.mode === "relay");
+}
+function T(e) {
+	return !y(e) || e.type !== "swarm-flow" ? !1 : typeof e.sessionId == "string" && !!e.sessionId && typeof e.taskId == "string" && !!e.taskId && typeof e.paused == "boolean" && (e.attemptId === void 0 || typeof e.attemptId == "string" && !!e.attemptId && e.attemptId.length <= 128);
+}
+function E(e) {
+	return !y(e) || e.type !== "swarm-error" ? !1 : typeof e.sessionId == "string" && !!e.sessionId && typeof e.taskId == "string" && !!e.taskId && typeof e.error == "string";
+}
+new Set([
+	"qwen3.5-2b",
+	"qwen3.8-27b",
+	"qwen3.6-35b-moe"
+]);
+var D = new Set([
+	"ai-inference",
+	"image-process",
+	"container",
+	"vector-embed",
+	"vector-query",
+	"nudenet",
+	"swarm-inference"
+]), O = 9e4, k = 600 * 1e3, A = 1440 * 60 * 1e3, j = 6e4;
+function M(e) {
+	return typeof e == "object" && !!e && !Array.isArray(e);
+}
+function N(e) {
+	if (!M(e) || typeof e.modelId != "string" || !e.modelId || e.modelId.length > 128 || typeof e.revision != "string" || !e.revision || e.revision.length > 128 || typeof e.dtype != "string" || !e.dtype || e.dtype.length > 32 || e.backend !== "wasm" && e.backend !== "cpu" && e.backend !== "webgpu" || e.state !== "loading" && e.state !== "ready" && e.state !== "evicting" && e.state !== "failed" || !Number.isInteger(e.referenceCount) || e.referenceCount < 0 || e.referenceCount > 64) return !1;
+	if (e.layerRange === void 0) return !0;
+	let t = e.layerRange;
+	return Array.isArray(t) && t.length === 2 && Number.isInteger(t[0]) && Number.isInteger(t[1]) && t[0] >= 0 && t[1] > t[0] && t[1] <= 1024;
+}
+function P(e, t = Date.now()) {
+	if (!M(e) || e.version !== 1 || !Number.isSafeInteger(e.sampledAt) || !Number.isSafeInteger(e.expiresAt) || !Array.isArray(e.entries) || e.entries.length > 8 || !e.entries.every(N)) return !1;
+	let n = e.sampledAt, r = e.expiresAt;
+	return n <= t + 5e3 && n >= t - 6e4 && r > t && r > n && r - n <= 6e4;
+}
+//#endregion
+//#region src/executor/memoryProbe.ts
+var F = 2 * 1024 ** 3, I = 65536, L = 16 * 1024 * 1024, R = 4096, z = null, B = 0;
+function V(e, t) {
+	let n = Math.ceil(t / I);
+	try {
+		e.grow(n);
+	} catch {
+		return !1;
+	}
+	let r = new Uint8Array(e.buffer);
+	for (let e = 0; e < n; e++) r[e * I] = 0;
+	return !0;
+}
+function H(e = F, t = L) {
+	if (z) return z.bytes;
+	B++;
+	let n = Date.now(), r;
+	try {
+		r = new WebAssembly.Memory({ initial: 0 });
+	} catch {
+		return z = {
+			bytes: 0,
+			sampledAt: n,
+			measured: !1
+		}, 0;
+	}
+	let i = Math.max(0, Math.floor(e)), a = Math.max(I, Math.floor(t)), o = 0, s = 0;
+	for (; o < i && s < R;) {
+		let e = Math.min(a, i - o);
+		if (!V(r, e)) break;
+		o += e, s++;
+	}
+	return r = void 0, z = {
+		bytes: o,
+		sampledAt: n,
+		measured: !0
+	}, o;
+}
+function U() {
+	return z ? z.bytes : H();
+}
+function W() {
+	return z || H(), {
+		bytes: z?.measured ? z.bytes : null,
+		sampledAt: z?.sampledAt ?? null
+	};
+}
+function G() {
+	return U() >= F;
+}
+//#endregion
+//#region src/executor/webgpuProbe.ts
+var K = 3, q = 750, J = 1500, Y = 600 * 1e3;
+async function X(e, t) {
+	let n, r = new Promise((e) => {
+		n = setTimeout(() => e({
+			value: null,
+			timedOut: !0
+		}), t);
+	});
+	try {
+		return await Promise.race([e.then((e) => ({
+			value: e,
+			timedOut: !1
+		})), r]);
+	} finally {
+		n !== void 0 && clearTimeout(n);
+	}
+}
+function Z(e, t = Date.now()) {
+	return {
+		capabilities: { webgpu: !1 },
+		status: e,
+		sampledAt: t,
+		expiresAt: t + Y,
+		architecture: null,
+		maxStorageBufferBindingSize: null,
+		computeCompletionMs: null,
+		sampleCount: 0
+	};
+}
+function Q() {
+	return typeof performance < "u" && typeof performance.now == "function" ? performance.now() : Date.now();
+}
+async function se(e) {
+	let t, n = new Promise((e) => {
+		t = setTimeout(() => e("timeout"), q);
+	}), r = e.queue.onSubmittedWorkDone().then(() => "complete"), i = e.lost.then(() => "lost", () => "lost");
+	try {
+		return await Promise.race([
+			r,
+			i,
+			n
+		]);
+	} finally {
+		t !== void 0 && clearTimeout(t);
+	}
+}
+async function $() {
+	let e = Date.now(), t = navigator.gpu;
+	if (!t || typeof t.requestAdapter != "function") return Z("unsupported", e);
+	let n = null;
+	try {
+		let r = await X(t.requestAdapter({ powerPreference: "high-performance" }), J);
+		if (r.timedOut) return Z("unavailable", Date.now());
+		let i = r.value;
+		if (!i) return Z("unsupported", e);
+		let a = i.limits?.maxStorageBufferBindingSize, o = [i.info?.vendor, i.info?.architecture].filter((e) => typeof e == "string" && e.trim().length > 0).join(" ").trim().slice(0, 64), s = typeof a == "number" && Number.isFinite(a) && a > 0 ? Math.min(Math.floor(a), 16 * 1024 ** 3) : null, c = i.requestDevice(), l = await X(c, J);
+		if (l.timedOut) return c.then((e) => e.destroy()).catch(() => {}), Z("unavailable", Date.now());
+		n = l.value;
+		let u = n, d = u.createComputePipeline({
+			layout: "auto",
+			compute: {
+				module: u.createShaderModule({ code: "@compute @workgroup_size(1) fn main() {}" }),
+				entryPoint: "main"
+			}
+		}), f = [];
+		for (let e = 0; e < K; e++) {
+			let e = u.createCommandEncoder(), t = e.beginComputePass();
+			t.setPipeline(d), t.dispatchWorkgroups(1), t.end();
+			let n = e.finish(), r = Q();
+			u.queue.submit([n]);
+			let i = await se(u);
+			if (i === "lost") return Z("device-lost", Date.now());
+			if (i === "timeout") return Z("unavailable", Date.now());
+			f.push(Math.max(0, Q() - r));
+		}
+		f.sort((e, t) => e - t);
+		let p = f[Math.floor(f.length / 2)], m = { webgpu: !0 };
+		return o && (m.gpuArchitecture = o), s !== null && (m.maxStorageBufferBindingSize = s), {
+			capabilities: m,
+			status: "available",
+			sampledAt: Date.now(),
+			expiresAt: Date.now() + Y,
+			architecture: o || null,
+			maxStorageBufferBindingSize: s,
+			computeCompletionMs: p,
+			sampleCount: f.length
+		};
+	} catch {
+		return Z("unavailable", Date.now());
+	} finally {
+		try {
+			n?.destroy();
+		} catch {}
+	}
+}
+async function ce() {
+	return (await $()).capabilities;
+}
+//#endregion
+export { f as A, i as C, O as D, m as E, g as M, te as N, E as O, r as S, ee as T, A as _, G as a, n as b, T as c, d, re as f, u as g, ae as h, W as i, j, oe as k, D as l, x as m, $ as n, H as o, k as p, F as r, v as s, ce as t, ie as u, h as v, P as w, o as x, ne as y };

package/dist/client/SignalingClient.d.ts

@@ -5,6 +5,12 @@ export interface TaskMessage {
     workload: WorkloadType;
     payload: unknown;
     timeoutMs?: number;
+    /**
+     * Coordinator-generated id for this delivery. Must be echoed on `result`,
+     * `progress` and `error`: the coordinator only accepts messages that arrive
+     * on the socket that received the delivery and carry its attempt id.
+     */
+    attemptId?: string;
 }
 export declare const initFlaxiaNode: (config: NodeConfig) => FlaxiaNodeController;
 //# sourceMappingURL=SignalingClient.d.ts.map

package/dist/client/SignalingClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignalingClient.d.ts","sourceRoot":"","sources":["../../src/client/SignalingClient.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAgB,oBAAoB,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAKhG,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA2VD,eAAO,MAAM,cAAc,GAAI,QAAQ,UAAU,KAAG,oBAwDnD,CAAC"}
+{"version":3,"file":"SignalingClient.d.ts","sourceRoot":"","sources":["../../src/client/SignalingClient.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAgB,oBAAoB,EAAE,UAAU,EAAyB,YAAY,EAAE,MAAM,aAAa,CAAC;AAmBvH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA81BD,eAAO,MAAM,cAAc,GAAI,QAAQ,UAAU,KAAG,oBAwDnD,CAAC"}

package/dist/client/__tests__/mobile-lifecycle.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=mobile-lifecycle.test.d.ts.map

package/dist/client/__tests__/mobile-lifecycle.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mobile-lifecycle.test.d.ts","sourceRoot":"","sources":["../../../src/client/__tests__/mobile-lifecycle.test.ts"],"names":[],"mappings":""}

package/dist/client/mobile-lifecycle.d.ts

@@ -0,0 +1,20 @@
+export interface MobileLifecycleSignals {
+    hidden: boolean;
+    pageHidden: boolean;
+    online: boolean;
+    batteryLevel?: number;
+    batteryCharging?: boolean;
+    effectiveType?: string;
+    saveData?: boolean;
+}
+export interface MobileLifecycleDecision {
+    suspend: boolean;
+    constrained: boolean;
+    maxCpuLoad?: number;
+}
+/**
+ * Convert optional browser lifecycle, network, and battery signals into a
+ * bounded execution policy. Missing Battery/Network Information APIs are safe.
+ */
+export declare function evaluateMobileLifecycle(signals: MobileLifecycleSignals, configuredMaxCpuLoad?: number): MobileLifecycleDecision;
+//# sourceMappingURL=mobile-lifecycle.d.ts.map

package/dist/client/mobile-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mobile-lifecycle.d.ts","sourceRoot":"","sources":["../../src/client/mobile-lifecycle.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,sBAAsB,EAC/B,oBAAoB,CAAC,EAAE,MAAM,GAC5B,uBAAuB,CAgBzB"}

package/dist/consent/ConsentUI.d.ts

@@ -1,12 +1,51 @@
-interface ConsentConfig {
+export type ConsentPosition = 'bottom-right' | 'bottom-left' | 'top-right' | 'top-left';
+export interface ConsentConfig {
     brandName: string;
-    position: 'bottom-right' | 'bottom-left' | 'top-right' | 'top-left';
+    position: ConsentPosition;
     accentColor?: string;
+    /** Optional copy overrides; sanitized like every other config string. */
+    acceptLabel?: string;
+    rejectLabel?: string;
+    /** Optional link to the host's privacy policy (http/https only). */
+    privacyPolicyUrl?: string;
+    /**
+     * Host-facing minimum-visible duration. Hosts may only *raise* it: values
+     * below {@link MIN_VISIBLE_MS_FLOOR} are clamped so the notice cannot be
+     * clicked through by configuration. Tests use `ConsentUIOptions` instead.
+     */
+    minVisibleMs?: number;
 }
+export interface ConsentUIOptions {
+    /**
+     * Minimum time (ms) the banner must stay visible before the accept button
+     * becomes actionable. Guards against click-through flicker; defaults to
+     * {@link DEFAULT_MIN_VISIBLE_MS}. Tests may inject a smaller value together
+     * with `now`/`schedule`, but production defaults never disable the gate.
+     */
+    minVisibleMs?: number;
+    /** Clock used by the minimum-visible gate. Defaults to `Date.now`. */
+    now?: () => number;
+    /** Scheduler used to re-enable the accept button. Defaults to `setTimeout`. */
+    schedule?: (callback: () => void, delayMs: number) => void;
+}
+/**
+ * Never interpolate host input into markup or CSS text. `accentColor` is
+ * parsed against a strict allowlist and re-emitted in a canonical form, so the
+ * string that reaches the stylesheet cannot contain `;`, `{`, `}` or quotes.
+ */
+export declare function sanitizeAccentColor(input: unknown): string;
 export declare class ConsentUI {
-    private shadow;
-    constructor(container: HTMLElement, config: ConsentConfig, onConsent: () => void, onReject?: () => void);
+    private readonly root;
+    /** Sanitized copy of the host configuration, kept for the banner's lifetime. */
+    private readonly config;
+    private readonly options;
+    constructor(container: HTMLElement, config: ConsentConfig, onConsent: () => void, onReject?: () => void, options?: ConsentUIOptions);
+    /**
+     * @internal The closed shadow root, exposed for tests and diagnostics. The
+     * banner is never registered globally, so host scripts cannot reach this
+     * instance through the DOM.
+     */
+    shadowRootForTesting(): ShadowRoot;
     private render;
 }
-export {};
 //# sourceMappingURL=ConsentUI.d.ts.map

package/dist/consent/ConsentUI.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ConsentUI.d.ts","sourceRoot":"","sources":["../../src/consent/ConsentUI.ts"],"names":[],"mappings":"AAAA,UAAU,aAAa;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,cAAc,GAAG,aAAa,GAAG,WAAW,GAAG,UAAU,CAAC;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAa;gBAGzB,SAAS,EAAE,WAAW,EACtB,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,MAAM,IAAI,EACrB,QAAQ,CAAC,EAAE,MAAM,IAAI;IAMvB,OAAO,CAAC,MAAM;CAyFf"}
+{"version":3,"file":"ConsentUI.d.ts","sourceRoot":"","sources":["../../src/consent/ConsentUI.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,eAAe,GAAG,cAAc,GAAG,aAAa,GAAG,WAAW,GAAG,UAAU,CAAC;AAExF,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,eAAe,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5D;AAuED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CA0B1D;AAoKD,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAa;IAClC,gFAAgF;IAChF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmB;gBAGzC,SAAS,EAAE,WAAW,EACtB,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,MAAM,IAAI,EACrB,QAAQ,CAAC,EAAE,MAAM,IAAI,EACrB,OAAO,CAAC,EAAE,gBAAgB;IAU5B;;;;OAIG;IACH,oBAAoB,IAAI,UAAU;IAIlC,OAAO,CAAC,MAAM;CAwGf"}

package/dist/consent/notice.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Version of the consent disclosure text below.
+ *
+ * Consent records are bound to this value: a record only counts as granted
+ * while it carries the *current* version, so bumping the version invalidates
+ * every existing grant and forces the visitor to see (and accept) the new
+ * wording. Increment it whenever `CONSENT_DISCLOSURE` changes in any way that
+ * a visitor would care about.
+ *
+ * - v1: legacy copy ("サイトのパフォーマンス向上にご協力ください。"), which never
+ *   disclosed what actually runs on the device.
+ * - v2: the informed-consent copy below (third-party workloads, orchestrator
+ *   registration, persistent connection, resource usage).
+ */
+export declare const CONSENT_NOTICE_VERSION = 2;
+/**
+ * The disclosure shown in the built-in banner. Deliberately static: hosts may
+ * style the banner but must not be able to weaken the wording, otherwise the
+ * recorded notice version would no longer describe what the visitor saw.
+ */
+export declare const CONSENT_DISCLOSURE: {
+    readonly summary: "同意すると、このブラウザは第三者から依頼された処理をバックグラウンドで実行します。";
+    readonly items: readonly ["実行する処理: 顧客（第三者）が依頼したワークロード。任意の WebAssembly コンテナの実行や、画像の NSFW（成人向け）判定などを含みます。", "接続と登録: オーケストレーターへ WebSocket で常時接続し、端末の性能や対応ワークロードを登録します。", "資源の使用: 待機中も接続を維持し、処理の実行中は CPU・GPU・通信・バッテリーを消費します。", "タスクの出所: 処理はこのサイトの運営者ではなく、第三者（顧客）から割り当てられます。"];
+    /** Shown while the accept button is inside its minimum-visible window. */
+    readonly acceptGateHint: "開示内容を確認できるよう、「同意して開始」はしばらくの間押せません。";
+    readonly acceptLabel: "同意して開始";
+    readonly rejectLabel: "拒否";
+};
+//# sourceMappingURL=notice.d.ts.map

package/dist/consent/notice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notice.d.ts","sourceRoot":"","sources":["../../src/consent/notice.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC;;;;GAIG;AACH,eAAO,MAAM,kBAAkB;;;IAS7B,0EAA0E;;;;CAKlE,CAAC"}

package/dist/consent/storage.d.ts

@@ -1,20 +1,89 @@
 import type { ConsentState } from '@flaxia/sdk';
+/**
+ * Maximum lifetime of a stored consent grant: 180 days.
+ *
+ * The lifetime is bounded on purpose — consent is not permanent, and the
+ * disclosure shown to the visitor describes what the node does *today*, so a
+ * grant must be renewed periodically. Records that claim a longer lifetime are
+ * rejected (see `isRecordFresh`).
+ */
+export declare const CONSENT_MAX_TTL_MS: number;
 declare function safeGet(key: string): string | null;
 declare function safeSet(key: string, value: string): void;
 declare function safeRemove(key: string): void;
+/**
+ * Persistent store for the non-extractable HMAC key. The key is a `CryptoKey`,
+ * so it cannot be exported as raw bytes; persisting it in IndexedDB (which
+ * structured-clones `CryptoKey` objects) keeps forgery out of reach of scripts
+ * that can only write strings into `localStorage`.
+ */
+export interface ConsentKeyStore {
+    load(): Promise<CryptoKey | null>;
+    save(key: CryptoKey): Promise<void>;
+    clear(): Promise<void>;
+}
 export declare const hasConsent: () => boolean;
-/** Persist consent. Clears any previous denial so the two never co-exist. */
-export declare const saveConsent: () => void;
 export declare const hasDenial: () => boolean;
+/**
+ * Resolve the persisted consent state.
+ *
+ * Synchronous and fail-closed: until {@link initConsentIntegrity} has verified
+ * the stored record (or a grant is made in this document) the answer is not
+ * `'granted'`. A stored grant still wins over a stored denial, but the two are
+ * kept mutually exclusive by the save helpers.
+ */
+export declare const getConsentState: () => ConsentState;
+/**
+ * Load (or create) the non-extractable HMAC key and verify the stored consent
+ * record. Idempotent and never rejects. Hosts should await this before relying
+ * on {@link getConsentState}; callers that cannot wait still fail closed.
+ */
+export declare const initConsentIntegrity: () => Promise<ConsentState>;
+/**
+ * Persist consent (clears any previous denial). Synchronous, as required by the
+ * controller and by host consent callbacks.
+ *
+ * The grant is only accepted when it is authorized:
+ * - `ConsentUI` minted a one-shot gesture token from a click on the accept
+ *   button (the visitor saw the banner and acted), or
+ * - the host explicitly opted in via {@link setHostManagedConsentAllowed}.
+ *
+ * Otherwise the call is refused with a warning and the state stays not-granted,
+ * so a host that calls `accept()` without rendering a banner cannot silently
+ * consent. When WebCrypto is unavailable the grant is limited to the current
+ * document (nothing unverifiable is written to storage).
+ */
+export declare const saveConsent: () => void;
+/**
+ * Async variant of {@link saveConsent} that resolves once the record is sealed
+ * and readable again. Same authorization requirements.
+ */
+export declare const grantConsent: (options?: {
+    ttlMs?: number;
+}) => Promise<ConsentState>;
+/**
+ * Mint the one-shot authorization consumed by the next {@link saveConsent} /
+ * {@link grantConsent} call. Only the built-in `ConsentUI` accept button calls
+ * this, from a click handler that runs after the minimum-visible duration.
+ */
+export declare const markUserGestureConsent: (noticeVersion?: number) => void;
+/**
+ * Opt in to host-managed consent (default: disabled).
+ *
+ * Disabled by default so a host-supplied `onConsentRequired` callback cannot
+ * grant consent headlessly. Hosts that render their own disclosure UI must call
+ * this before granting, and remain responsible for showing the current
+ * disclosure text to the visitor.
+ */
+export declare const setHostManagedConsentAllowed: (allowed: boolean) => void;
+export declare const isHostManagedConsentAllowed: () => boolean;
 /** Persist denial. Clears any previous consent/expiry so the two never co-exist. */
 export declare const saveDenial: () => void;
-/** Forget the consent decision entirely (granted + expiry + denial). */
-export declare const clearConsent: () => void;
 /**
- * Resolve the persisted consent state. A stored grant wins over a stored
- * denial, but the two are kept mutually exclusive by the save helpers.
+ * Revoke consent: forget the decision entirely (granted + expiry + denial) and
+ * drop the HMAC key so copies of the old record can no longer verify.
  */
-export declare const getConsentState: () => ConsentState;
+export declare const clearConsent: () => void;
 export declare const safeLocalStorageGet: typeof safeGet;
 export declare const safeLocalStorageSet: typeof safeSet;
 export declare const safeLocalStorageRemove: typeof safeRemove;
@@ -24,5 +93,20 @@ export declare const safeLocalStorageRemove: typeof safeRemove;
  * is undefined on mobile Chrome). Never throws.
  */
 export declare const safeRandomUUID: () => string;
+/** @internal Drop every in-memory grant/key so the next read re-verifies. */
+declare function resetIntegrityCache(): void;
+/**
+ * @internal Test-only seams. Production code never calls these; they exist so
+ * unit tests can simulate a reload (key store), a foreign origin, or an
+ * integrity-cache reset without weakening any production default.
+ */
+export declare const __consentTestHooks: {
+    setKeyStore(store: ConsentKeyStore | null): void;
+    setOrigin(origin: string | null): void;
+    resetIntegrityCache: typeof resetIntegrityCache;
+    reset(): void;
+    /** Seed a valid grant as if the visitor had accepted the banner. */
+    seedGrantedConsent(noticeVersion?: number): void;
+};
 export {};
 //# sourceMappingURL=storage.d.ts.map

package/dist/consent/storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/consent/storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAahD,iBAAS,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM3C;AAED,iBAAS,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAMjD;AAED,iBAAS,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAMrC;AAED,eAAO,MAAM,UAAU,QAAO,OAgB7B,CAAC;AAEF,6EAA6E;AAC7E,eAAO,MAAM,WAAW,QAAO,IAI9B,CAAC;AAEF,eAAO,MAAM,SAAS,QAAO,OAE5B,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,UAAU,QAAO,IAI7B,CAAC;AAEF,wEAAwE;AACxE,eAAO,MAAM,YAAY,QAAO,IAI/B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,eAAe,QAAO,YAIlC,CAAC;AAEF,eAAO,MAAM,mBAAmB,gBAAU,CAAC;AAC3C,eAAO,MAAM,mBAAmB,gBAAU,CAAC;AAC3C,eAAO,MAAM,sBAAsB,mBAAa,CAAC;AAEjD;;;;GAIG;AACH,eAAO,MAAM,cAAc,QAAO,MAajC,CAAC"}
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/consent/storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,QAA4B,CAAC;AAoC5D,iBAAS,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM3C;AAED,iBAAS,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAMjD;AAED,iBAAS,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAMrC;AA2BD;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAwTD,eAAO,MAAM,UAAU,QAAO,OAI7B,CAAC;AAEF,eAAO,MAAM,SAAS,QAAO,OAE5B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,QAAO,YAIlC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,QAAO,OAAO,CAAC,YAAY,CAG3D,CAAC;AAoHF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,WAAW,QAAO,IAU9B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,YAAY,GAAU,UAAU;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,KAAG,OAAO,CAAC,YAAY,CAWrF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,GACjC,gBAAe,MAA+B,KAC7C,IAEF,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,GAAI,SAAS,OAAO,KAAG,IAE/D,CAAC;AAEF,eAAO,MAAM,2BAA2B,QAAO,OAAoC,CAAC;AAEpF,oFAAoF;AACpF,eAAO,MAAM,UAAU,QAAO,IAQ7B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,YAAY,QAAO,IAa/B,CAAC;AAEF,eAAO,MAAM,mBAAmB,gBAAU,CAAC;AAC3C,eAAO,MAAM,mBAAmB,gBAAU,CAAC;AAC3C,eAAO,MAAM,sBAAsB,mBAAa,CAAC;AA6CjD;;;;GAIG;AACH,eAAO,MAAM,cAAc,QAAO,MAajC,CAAC;AAEF,6EAA6E;AAC7E,iBAAS,mBAAmB,IAAI,IAAI,CASnC;AAED;;;;GAIG;AACH,eAAO,MAAM,kBAAkB;uBACV,eAAe,GAAG,IAAI,GAAG,IAAI;sBAG9B,MAAM,GAAG,IAAI,GAAG,IAAI;;aAI7B,IAAI;IAMb,oEAAoE;uCAClC,MAAM,GAA4B,IAAI;CAIzE,CAAC"}