@independo/inderun-web 0.3.0-dev.12 → 0.3.0-dev.13

package/src/system-model.ts

@@ -0,0 +1,49 @@
+/**
+ * Provider-specific entry point for the Web member of the system-model provider family.
+ *
+ * Kept out of the unified SDK index (`@independo/inderun-web`) so the top-level
+ * surface stays provider-agnostic. Import from `@independo/inderun-web/system-model`
+ * when registering the adapter manually or when implementing a custom
+ * `SystemModelRuntime`; most browser apps should pass `systemModel` to
+ * `createIndeRunWeb` from the main entry point instead.
+ *
+ * "System model" means a model the browser itself manages, so availability is a
+ * richer answer than a boolean: it may be present, downloadable, mid-download, or
+ * blocked for a browser, device, or policy reason. The provider flattens every
+ * non-available state into one route rejection and carries the detail as text.
+ */
+
+/** The adapter itself, plus the default id the router plans against. */
+export {
+  DEFAULT_SYSTEM_MODEL_WEB_PROVIDER_ID,
+  SystemModelWebProvider,
+  type SystemModelProviderOptions
+} from "./providers/system-model/provider.js";
+
+/**
+ * The runtime seam. The provider delegates generation to a `SystemModelRuntime`,
+ * so an app can target a different browser API, or use
+ * `createFixtureSystemModelRuntime()` in demos and tests where no system model
+ * exists.
+ */
+export {
+  SystemModelRuntimeError,
+  createFixtureSystemModelRuntime,
+  type FixtureSystemModelRuntimeOptions,
+  type SystemModelAvailability,
+  type SystemModelAvailabilityKind,
+  type SystemModelGenerationInput,
+  type SystemModelGenerationOutput,
+  type SystemModelPromptMessage,
+  type SystemModelRuntime,
+  type SystemModelRuntimeErrorKind
+} from "./providers/system-model/runtime.js";
+
+/** The default runtime, backed by Chrome's built-in Prompt API. */
+export {
+  createChromePromptApiRuntime,
+  type ChromePromptApiGenerationOptions,
+  type ChromePromptApiRuntimeOptions,
+  type PromptApiLanguageModel,
+  type PromptApiSession
+} from "./providers/system-model/chrome-runtime.js";

package/src/web-sdk.ts

@@ -0,0 +1,114 @@
+import {
+  createBrowserHostServices,
+  type CreateBrowserHostServicesOptions
+} from "./core/browser-host.js";
+import { IndeRun } from "./core/engine.js";
+import { OnnxRuntimeWebProvider, type OnnxProviderOptions } from "./providers/onnx/provider.js";
+import {
+  DEFAULT_OPENAI_RESPONSES_ENDPOINT,
+  OpenAIResponsesProvider,
+  type OpenAIProviderOptions
+} from "./providers/openai/provider.js";
+import { ProviderRegistry } from "./core/registry.js";
+import {
+  SystemModelWebProvider,
+  type SystemModelProviderOptions
+} from "./providers/system-model/provider.js";
+
+/**
+ * Configuration for the default Web SDK factory.
+ */
+export interface CreateIndeRunWebOptions {
+  /**
+   * OpenAI Responses provider configuration registered by the factory.
+   */
+  openAI?: OpenAIProviderOptions;
+  /**
+   * Web ONNX Runtime provider configuration registered by the factory, for developer-supplied
+   * local models. Registering it is what makes `constraints.privacy = "local_required"` routable.
+   */
+  onnx?: OnnxProviderOptions;
+  /**
+   * Web system-model provider configuration registered by the factory, for browser-managed
+   * on-device models (for example Chrome's Prompt API). Unlike `onnx`, this provider takes no
+   * developer-supplied model: the browser owns model availability, download, and execution.
+   */
+  systemModel?: SystemModelProviderOptions;
+  /**
+   * Optional browser host service overrides.
+   */
+  hostServices?: CreateBrowserHostServicesOptions;
+  /**
+   * Explicit opt-in for calling the public OpenAI endpoint directly from this Web SDK factory.
+   *
+   * Browser apps should leave this unset and use a proxy endpoint with `openAI.auth = "none"` instead.
+   * Direct calls can expose credentials to client-side code and are appropriate only for controlled
+   * non-production environments.
+   */
+  allowDirectOpenAIEndpoint?: boolean;
+}
+
+/**
+ * Creates a Web SDK instance with the configured providers registered.
+ *
+ * Pass `openAI` for cloud execution, `onnx` for developer-supplied local models, `systemModel` for
+ * browser-managed on-device models, or any combination to let routing choose between them; at
+ * least one is required.
+ *
+ * Use `openAI.auth = "none"` with a proxy endpoint for production browser apps so the OpenAI API key never ships
+ * to the client. Direct OpenAI calls require `allowDirectOpenAIEndpoint` and should resolve credentials through
+ * `authContextRef` and `SecureStorageService`.
+ *
+ * @param options - Provider configuration and optional host service overrides.
+ */
+export function createIndeRunWeb(options: CreateIndeRunWebOptions): IndeRun {
+  if (!options.openAI && !options.onnx && !options.systemModel) {
+    throw new Error(
+      "createIndeRunWeb requires at least one provider configuration (openAI, onnx, and/or systemModel)."
+    );
+  }
+
+  const registry = new ProviderRegistry();
+
+  if (options.openAI) {
+    assertSafeOpenAIEndpoint(options.openAI, options.allowDirectOpenAIEndpoint);
+    registry.register(new OpenAIResponsesProvider(options.openAI));
+  }
+
+  if (options.onnx) {
+    registry.register(new OnnxRuntimeWebProvider(options.onnx));
+  }
+
+  if (options.systemModel) {
+    registry.register(new SystemModelWebProvider(options.systemModel));
+  }
+
+  return new IndeRun(registry, createBrowserHostServices(options.hostServices));
+}
+
+function assertSafeOpenAIEndpoint(
+  openAI: OpenAIProviderOptions,
+  allowDirectOpenAIEndpoint?: boolean
+): void {
+  const endpointUrl = openAI.endpointUrl ?? DEFAULT_OPENAI_RESPONSES_ENDPOINT;
+  const auth = openAI.auth ?? "authContextRef";
+  const isDirectOpenAIEndpoint = isOpenAIResponsesEndpoint(endpointUrl);
+
+  if (isDirectOpenAIEndpoint && auth !== "none" && !allowDirectOpenAIEndpoint) {
+    throw new Error(
+      'createIndeRunWeb is proxy-first for browser safety. Configure openAI.endpointUrl to a server-side proxy with auth: "none", or set allowDirectOpenAIEndpoint: true for controlled direct OpenAI calls.'
+    );
+  }
+}
+
+function isOpenAIResponsesEndpoint(endpointUrl: string): boolean {
+  let parsed: URL;
+  try {
+    parsed = new URL(endpointUrl);
+  } catch {
+    return false;
+  }
+
+  const pathname = parsed.pathname.replace(/\/+$/u, "");
+  return parsed.hostname.toLowerCase() === "api.openai.com" && pathname === "/v1/responses";
+}