@independo/inderun-web 0.1.0

package/dist/web-sdk.js

@@ -0,0 +1,38 @@
+import { createBrowserHostServices } from "./browser-host.js";
+import { IndeRun } from "./engine.js";
+import { DEFAULT_OPENAI_RESPONSES_ENDPOINT, OpenAIResponsesProvider } from "./openai-provider.js";
+import { ProviderRegistry } from "./registry.js";
+/**
+ * Creates a Web SDK instance with the OpenAI Responses provider registered.
+ *
+ * Use `openAI.auth = "none"` with a proxy endpoint for production browser apps so the OpenAI API key never ships
+ * to the client. Direct OpenAI calls require `allowDirectOpenAIEndpoint` and should resolve credentials through
+ * `authContextRef` and `SecureStorageService`.
+ *
+ * @param options - OpenAI provider configuration and optional host service overrides.
+ */
+export function createIndeRunWeb(options) {
+    assertSafeOpenAIEndpoint(options);
+    const registry = new ProviderRegistry();
+    registry.register(new OpenAIResponsesProvider(options.openAI));
+    return new IndeRun(registry, createBrowserHostServices(options.hostServices));
+}
+function assertSafeOpenAIEndpoint(options) {
+    const endpointUrl = options.openAI.endpointUrl ?? DEFAULT_OPENAI_RESPONSES_ENDPOINT;
+    const auth = options.openAI.auth ?? "authContextRef";
+    const isDirectOpenAIEndpoint = isOpenAIResponsesEndpoint(endpointUrl);
+    if (isDirectOpenAIEndpoint && auth !== "none" && !options.allowDirectOpenAIEndpoint) {
+        throw new Error('createIndeRunWeb is proxy-first for browser safety. Configure openAI.endpointUrl to a server-side proxy with auth: "none", or set allowDirectOpenAIEndpoint: true for controlled direct OpenAI calls.');
+    }
+}
+function isOpenAIResponsesEndpoint(endpointUrl) {
+    let parsed;
+    try {
+        parsed = new URL(endpointUrl);
+    }
+    catch {
+        return false;
+    }
+    const pathname = parsed.pathname.replace(/\/+$/u, "");
+    return parsed.hostname.toLowerCase() === "api.openai.com" && pathname === "/v1/responses";
+}

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@independo/inderun-web",
+  "version": "0.1.0",
+  "description": "TypeScript/Web SDK for IndeRun.",
+  "license": "MIT",
+  "engines": {
+    "node": ">=24"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./openai": {
+      "types": "./dist/openai.d.ts",
+      "default": "./dist/openai.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "dependencies": {
+    "@independo/inderun-route-core-wasm": "^0.1.0",
+    "@independo/inderun-contracts": "^0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^24.13.2",
+    "typescript": "^6.0.3",
+    "vitest": "^3.2.6"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "vitest run"
+  }
+}