@iicp/web-node 0.2.5 → 0.2.6

package/README.md

@@ -36,6 +36,14 @@ does not support them, and can enforce strict region and signed-policy-manifest
 before a prompt is sent. Declared prohibited or high-risk public-mesh intents are refused
 locally. Successful routing receipts exclude prompt, response, token, and endpoint content.
 
+Restricted trust-domain, federated-private, local-only and custom operating
+modes are not supported by the browser package yet. Passing an explicit
+non-public `operating_mode` to `IicpBrowserClient`, or `operatingMode` to
+`BrowserNodeProvider`, throws `restricted_profile_unsupported` during
+construction, before discovery, registration or relay traffic. The package
+does not persist membership credentials in browser storage and never downgrades
+an explicit private mode to the public directory.
+
 When the chosen node advertises an encryption key (`nodeCxKey(node)`), the payload is
 **sealed end-to-end** — the directory, relays, and network see only ciphertext. There is
 no opt-out. A node that does not advertise `cx_public_key`/`public_key` is refused before

package/dist/browserNodeProvider.d.ts

@@ -1,5 +1,6 @@
 import type { ChatMessage } from "./iicpConsumer.js";
 import type { EffectiveCapability } from "./effectiveCapability.js";
+import { type BrowserOperatingMode } from "./operatingMode.js";
 export interface BrowserProviderRuntime {
     chat(messages: ChatMessage[], opts?: {
         temperature?: number;
@@ -7,6 +8,8 @@ export interface BrowserProviderRuntime {
     }): Promise<string>;
 }
 export interface BrowserProviderConfig {
+    /** Explicit operating mode. Browser CUG/local modes currently fail closed. */
+    operatingMode?: BrowserOperatingMode;
     /** Relay node base URL, e.g. "http://127.0.0.1:9484". Required. */
     relayUrl: string;
     /** Auto-discovered relay node id. Used to audience-scope relay bind tickets. */

package/dist/browserNodeProvider.js

@@ -18,6 +18,7 @@
 // consumers route to a browser worker with zero client changes.
 import { maskTunnelUrl } from "./iicpConsumer.js";
 import { createCxKeyPair, decryptPayload } from "./cxConfidentiality.js";
+import { requireSupportedBrowserMode } from "./operatingMode.js";
 import { BROWSER_NODE_SDK_COMPATIBILITY_VERSION, BROWSER_NODE_SDK_VERSION, BROWSER_NODE_VERSION, } from "./version.js";
 const CHAT_INTENT = "urn:iicp:intent:llm:chat:v1";
 export { BROWSER_NODE_SDK_VERSION } from "./version.js";
@@ -172,6 +173,7 @@ export class BrowserNodeProvider {
     constructor(runtime, cfg) {
         this.runtime = runtime;
         this.cfg = cfg;
+        requireSupportedBrowserMode(cfg.operatingMode);
         this.nodeId = `browser-${crypto.randomUUID().slice(0, 8)}`;
     }
     get state() {

package/dist/build-manifest.json

@@ -1,8 +1,8 @@
 {
   "schema": "iicp.browser_build_provenance.v1",
   "package": "@iicp/web-node",
-  "implementation_version": "0.2.5",
+  "implementation_version": "0.2.6",
   "sdk_compatibility_version": "0.7.102",
-  "source_commit": "6f28256d0d67cf08beddadbc762dbd339786fcd8",
-  "lockfile_sha256": "1a398bdcc85e5a650a394aac26851a04c44bd3e6ec9c8c1c359d4d3015338a7e"
+  "source_commit": "2d839c075c649ca8320af1734845862c8265588f",
+  "lockfile_sha256": "3a86e8b68bd9cee5ab5f99b1975b75db0ed924fe582873b9590f0047bb87eea1"
 }

package/dist/iicpConsumer.d.ts

@@ -1,7 +1,10 @@
 import { type CxPublicKey } from "./cxConfidentiality.js";
 import { type RuntimeIdentityOptions } from "./runtimeIdentity.js";
+import { type BrowserOperatingMode } from "./operatingMode.js";
 export declare const DEFAULT_DIRECTORY_URL = "https://iicp.network";
 export interface ClientConfig {
+    /** Explicit operating mode. Browser CUG/local modes currently fail closed. */
+    operating_mode?: BrowserOperatingMode;
     /** Directory base URL. Default: https://iicp.network (CORS-enabled). */
     directory_url?: string;
     /** Per-request timeout (ms). Default 10000. */

package/dist/iicpConsumer.js

@@ -19,6 +19,7 @@ import { encryptPayload } from "./cxConfidentiality.js";
 import { verifyDispatchTicket } from "./dispatchTicket.js";
 import { composeRuntimeIdentity, withRuntimeFacts } from "./runtimeIdentity.js";
 import { BROWSER_NODE_VERSION } from "./version.js";
+import { requireSupportedBrowserMode } from "./operatingMode.js";
 const REFUSED_INTENT_RULES = [
     { category: "prohibited", rule_id: "eu-ai-act-social-scoring", label: "social scoring", fragments: ["social-scoring", "social_scoring", "social:scoring"] },
     { category: "prohibited", rule_id: "eu-ai-act-criminal-risk", label: "individual criminal risk prediction", fragments: ["criminal-risk", "criminal_risk", "criminal:risk", "predict-crime"] },
@@ -317,6 +318,7 @@ export class IicpBrowserClient {
     routeDiscoveryMode;
     dispatchTicketKey;
     constructor(cfg = {}) {
+        requireSupportedBrowserMode(cfg.operating_mode);
         this.directory = (cfg.directory_url ?? DEFAULT_DIRECTORY_URL).replace(/\/+$/, "");
         this.timeout = cfg.timeout_ms ?? 10_000;
         this.allowedRegions = normalizeAllowedRegions(cfg.allowed_regions);

package/dist/index.d.ts

@@ -3,6 +3,7 @@ export * from "./dispatchTicket.js";
 export * from "./cxConfidentiality.js";
 export * from "./effectiveCapability.js";
 export * from "./runtimeIdentity.js";
+export * from "./operatingMode.js";
 export * from "./browserNodeProvider.js";
 export * from "./webllmRuntime.js";
 export * from "./version.js";

package/dist/index.js

@@ -10,6 +10,7 @@ export * from "./dispatchTicket.js";
 export * from "./cxConfidentiality.js";
 export * from "./effectiveCapability.js";
 export * from "./runtimeIdentity.js";
+export * from "./operatingMode.js";
 export * from "./browserNodeProvider.js";
 export * from "./webllmRuntime.js";
 export * from "./version.js";

package/dist/operatingMode.d.ts

@@ -0,0 +1,4 @@
+export type BrowserOperatingMode = "public" | "private" | "federated_private" | "local_only" | "custom";
+export declare const RESTRICTED_BROWSER_UNSUPPORTED = "restricted_profile_unsupported";
+/** Refuse unsupported modes before discovery, registration or relay work. */
+export declare function requireSupportedBrowserMode(mode?: BrowserOperatingMode): void;

package/dist/operatingMode.js

@@ -0,0 +1,8 @@
+// SPDX-License-Identifier: Apache-2.0
+export const RESTRICTED_BROWSER_UNSUPPORTED = "restricted_profile_unsupported";
+/** Refuse unsupported modes before discovery, registration or relay work. */
+export function requireSupportedBrowserMode(mode = "public") {
+    if (mode !== "public") {
+        throw new Error(RESTRICTED_BROWSER_UNSUPPORTED);
+    }
+}

package/dist/runtimeIdentity.d.ts

@@ -3,6 +3,9 @@ export declare const RUNTIME_IDENTITY_PROFILE_ID = "urn:iicp:profile:runtime-ide
 export declare const RUNTIME_IDENTITY_MARKER = "IICP-RUNTIME-CONTEXT/1";
 export declare const RUNTIME_IDENTITY_CHAT_INTENT = "urn:iicp:intent:llm:chat:v1";
 export declare const RUNTIME_IDENTITY_MAX_BYTES = 2048;
+export declare const CANONICAL_IICP_EXPLANATION = "IICP is the Intent-based Inter-agent Communication Protocol: a provider-neutral control plane that discovers eligible intelligence services, evaluates them under explicit constraints, selects a provider, and leaves execution to a supported provider mechanism.";
+export declare function isDirectIicpExplainer(prompt: string): boolean;
+export declare function validIicpExplanation(answer: string): boolean;
 export type RuntimeIdentityMode = "auto" | "disabled" | "explicit" | "required";
 export type RuntimeIdentityInstructionChannel = "system" | "unsupported";
 export type RuntimeIdentityConnectionMode = "routed" | "local_browser";

package/dist/runtimeIdentity.js

@@ -4,7 +4,18 @@ export const RUNTIME_IDENTITY_CHAT_INTENT = "urn:iicp:intent:llm:chat:v1";
 export const RUNTIME_IDENTITY_MAX_BYTES = 2048;
 const MAX_FACT_BYTES = 160;
 const MAX_CAPABILITIES = 32;
-const BASE_CAPSULE = "This request reached you through IICP, the Intent-based Inter-agent Communication Protocol. IICP discovers eligible services and routes requests. You are the selected model or service, not IICP. When asked about this connection, use only supplied runtime facts; do not guess missing facts.";
+export const CANONICAL_IICP_EXPLANATION = "IICP is the Intent-based Inter-agent Communication Protocol: a provider-neutral control plane that discovers eligible intelligence services, evaluates them under explicit constraints, selects a provider, and leaves execution to a supported provider mechanism.";
+export function isDirectIicpExplainer(prompt) {
+    const value = prompt.trim().toLowerCase().replace(/[.?!]+$/u, "");
+    return ["what is iicp", "what does iicp stand for", "explain iicp", "describe iicp", "what is this"].includes(value);
+}
+export function validIicpExplanation(answer) {
+    const value = answer.toLowerCase();
+    return value.includes("intent-based inter-agent communication protocol")
+        && (value.includes("control plane") || value.includes("discover"))
+        && !value.includes("industrial internet of things computing");
+}
+const BASE_CAPSULE = "This request reached you through IICP, the Intent-based Inter-agent Communication Protocol. IICP is a provider-neutral control plane that turns a requested intent and constraints into discovery, eligibility evaluation and provider selection; execution then uses a supported provider mechanism. You are the selected model or service, not IICP. If asked what IICP is or stands for, use this definition. IICP does not mean Industrial Internet of Things Computing. Use only supplied runtime facts and do not guess missing facts.";
 export class RuntimeIdentityContextUnsupported extends Error {
     constructor() {
         super("required_identity_context_unsupported");

package/dist/version.d.ts

@@ -1,4 +1,4 @@
-export declare const BROWSER_NODE_VERSION = "0.2.5";
+export declare const BROWSER_NODE_VERSION = "0.2.6";
 export declare const BROWSER_NODE_SDK_COMPATIBILITY_VERSION = "0.7.102";
 /** Backward-compatible registration value for directories that know only sdk_version. */
 export declare const BROWSER_NODE_SDK_VERSION = "0.7.102";

package/dist/version.js

@@ -1,7 +1,7 @@
 // Browser implementation and IICP SDK-compatibility versions are separate axes.
 // Keep package.json synchronized with BROWSER_NODE_VERSION; the quality gate
 // rejects drift. SDK compatibility describes the registration contract only.
-export const BROWSER_NODE_VERSION = "0.2.5";
+export const BROWSER_NODE_VERSION = "0.2.6";
 export const BROWSER_NODE_SDK_COMPATIBILITY_VERSION = "0.7.102";
 /** Backward-compatible registration value for directories that know only sdk_version. */
 export const BROWSER_NODE_SDK_VERSION = BROWSER_NODE_SDK_COMPATIBILITY_VERSION;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@iicp/web-node",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "Browser-native IICP node (consume + serve): discovery-mesh client with mandatory E2E encryption (IICP-CX) + WebLLM provider. Zero-config, ESM.",
   "type": "module",
   "main": "dist/index.js",