arcane-os 0.2.3 → 0.3.1

package/CHANGELOG.md

@@ -1,5 +1,35 @@
 # Changelog
 
+## 0.3.1
+
+- Restored ordinary warn-first Browser Speech operation with explicit
+  `secure:false` defaults, one concise load warning, and truthful
+  `unchecked`/`pending`/`verified`/`failed` integrity telemetry while keeping
+  strict authenticated-graph admission behind explicit `secure:true`.
+- Added atomic hydration for exact saved-but-unregistered STT/TTS selections
+  without a transient provider fallback, including independent mixed
+  browser/Cloud/Core role ownership and mismatch-safe rollback.
+- Continued to resolve speech runtimes, models, voices, and providers from
+  their upstream npm/fetch distribution paths; the SDK package redistributes
+  none of those third-party payloads or their legal corpora.
+
+## 0.3.0
+
+- Added the branded, versioned, per-realm `globalThis.arcaneEvents` authority
+  and moved SDK semantic publishers onto one event-pubsub-backed source while
+  retaining bounded legacy EventTarget and DOM projections.
+- Added independent Browser Speech STT/TTS provider ownership with initial or
+  later role-scoped replacement, mixed Cloud/Core/browser routes, explicit
+  lifecycle, and no omitted-role unload, mute, disposal, or state clobbering.
+- Made Browser Speech warn-first by default: applications select version-pinned
+  upstream runtime/model/voice downloads and browser cache behavior, while
+  `secure:true` remains the explicit strict authenticated-graph option.
+- Added the portable `arcane-os/mail` API, durable DBOPFS-compatible outbox,
+  secure local Resend gateway and CLI, event-owned reconnect drain, bounded
+  retries, cancellation, cleanup, and provider-acceptance evidence.
+- Kept speech runtimes, model and voice bytes, third-party legal/notice files,
+  and corresponding-source archives out of the SDK package and release assets.
+
 ## 0.2.3
 
 - Made shared voice transcription consume authoritative sticky STT state,

package/README.md

@@ -19,7 +19,7 @@ version-locked SDK runtime, while an integrated Arcane checkout uses its live
 `arcane/` runtime. Both profiles preserve the same app URLs, theme, packaging,
 event, cancellation, and browser run contracts.
 
-This checkout defines the `0.2.3` SDK contract. Applications pin one exact npm
+This checkout defines the `0.3.1` SDK contract. Applications pin one exact npm
 version and lockfile; registry state is deliberately not baked into immutable
 application artifacts.
 
@@ -132,7 +132,7 @@ uses the same controller for automatic memory extraction.
 Create a new repository-shaped Arcane application with the exact stable SDK:
 
 ```bash
-npx arcane-os@0.2.3 new my-app --path ./my-app --target portable --git
+npx arcane-os@0.3.1 new my-app --path ./my-app --target portable --git
 cd my-app
 npm install
 npm run check
@@ -143,7 +143,7 @@ To enroll an existing repository, install the exact SDK and initialize only
 missing Arcane files:
 
 ```bash
-npm install --save-dev --save-exact arcane-os@0.2.3
+npm install --save-dev --save-exact arcane-os@0.3.1
 npm exec -- arcane init my-app --target portable
 ```
 
@@ -159,7 +159,7 @@ npm exec -- arcane-os targets
 No global SDK install or standalone Arcane CLI is required. The application
 repository's exact npm dependency and lockfile own the CLI and toolchain version.
 
-Use `npx arcane-os@0.2.3` for the initial bootstrap because it names this npm
+Use `npx arcane-os@0.3.1` for the initial bootstrap because it names this npm
 package explicitly; bare `npx arcane` outside an installed project could resolve
 a different package. Both installed commands invoke the same headless toolchain.
 Project-local npm scripts use the SDK pinned by that app's `package-lock.json`,
@@ -180,7 +180,7 @@ node ./bin/arcane.mjs new local-app --path ../local-app --target portable --git
 
 # From the generated app repository
 cd ../local-app
-npm install --save-dev --save-exact ../arcane-os-sdk/arcane-os-0.2.3.tgz
+npm install --save-dev --save-exact ../arcane-os-sdk/arcane-os-0.3.1.tgz
 npm run check
 npm ci
 ```
@@ -191,7 +191,7 @@ still verifies the installed package name and exact version, the locked runtime
 identity, and the runtime bytes. Local directory `file:` dependencies are not
 accepted because npm may install them as links; use a packed `.tgz`. A GitHub
 runner also needs that tarball at the locked path. After publication, replace
-the local declaration with the exact `arcane-os@0.2.3` registry package and
+the local declaration with the exact `arcane-os@0.3.1` registry package and
 commit the regenerated lock.
 
 Generated repositories use `npm ci --ignore-scripts` in CI. Run dependency
@@ -304,7 +304,7 @@ recorded length through a final identity check; an appended byte, concurrent
 growth, path replacement, or hard link fails closed. NFC paths use defined
 UTF-8 byte ordering, covered by one pinned golden bundle digest on every
 supported Node/runner combination. This SDK accepts only the explicitly listed
-`0.2.3` bundle generation; structural validity does not imply cross-SDK
+`0.3.1` bundle generation; structural validity does not imply cross-SDK
 compatibility, and a release with zero payload bytes cannot be created. Portable
 path validation rejects file/directory prefix conflicts, case-colliding prefix
 spellings, and Windows device aliases including superscript COM/LPT digits.
@@ -350,7 +350,7 @@ package installation, or assertions.
 
 ## Current target support
 
-Version `0.2.3` exposes one browser target and five explicitly paired
+Version `0.3.1` exposes one browser target and five explicitly paired
 native development targets: a verified non-runnable portable directory, a
 Windows x64 unsigned-local-test EXE bundle, Linux x64 and Linux ARM64
 unsigned-local-test DEBs, and an Android development-signed APK. The

package/browser-runtime/ARCANE_SDK_BROWSER_RELEASE.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "builder": "arcane-sdk-browser-runtime-v1",
-  "sdkVersion": "0.2.3",
+  "sdkVersion": "0.3.1",
   "source": {
     "authority": "arcane-os-sdk",
     "repository": "https://github.com/TheWizardNexus/arcane-os-sdk.git",
@@ -28,10 +28,17 @@
       }
     ]
   },
-  "fileCount": 25,
-  "totalBytes": 9280047,
-  "contentSha256": "3c82ed11b24c7b7b91b62f6dc52e0b1dcd444112a29cd48413eedc008380eb61",
+  "fileCount": 26,
+  "totalBytes": 9554968,
+  "contentSha256": "1493497265c330507abed847e52e65dc2ce22c15efaf5646ed7ae544b107ad6f",
   "files": [
+    {
+      "path": "ai/ARCANE_AI_BROWSER_SPEECH_COMPONENTS.json",
+      "sourcePath": "browser-runtime/ai/ARCANE_AI_BROWSER_SPEECH_COMPONENTS.json",
+      "provenance": "sdk-source-identity",
+      "bytes": 9233,
+      "sha256": "5ff2e20d2a15b4a867ec66810f196cf6225b79aa734ab3b018e8b006abfa5d39"
+    },
     {
       "path": "ai/ARCANE_AI_BROWSER_WASM_COMPONENTS.json",
       "sourcePath": "browser-runtime/ai/ARCANE_AI_BROWSER_WASM_COMPONENTS.json",
@@ -43,29 +50,29 @@
       "path": "ai/browser-kokoro-worker.mjs",
       "sourcePath": "browser-runtime/ai/browser-kokoro-worker.mjs",
       "provenance": "sdk-source-identity",
-      "bytes": 110,
-      "sha256": "5c08370aeefa6a99f4018ddaf7c0d7ac8e7189811957947ce2eba4131e19a76f"
+      "bytes": 345,
+      "sha256": "9a910b3a6818814bfd7548251e3989ac6fe5c105d541bc16fc8124ea1ba39737"
     },
     {
       "path": "ai/browser-speech-artifacts.mjs",
       "sourcePath": "browser-runtime/ai/browser-speech-artifacts.mjs",
       "provenance": "sdk-source-identity",
-      "bytes": 36576,
-      "sha256": "6504c01f6548a37291619cc6b69ae85da2cc1463ef12e83101eefdc92ad2ea74"
+      "bytes": 135988,
+      "sha256": "2587922a708f014ae8b4e819a607b1a5b322fc4eb969e470cd6c068b33b3adcd"
     },
     {
       "path": "ai/browser-speech-providers.mjs",
       "sourcePath": "browser-runtime/ai/browser-speech-providers.mjs",
       "provenance": "sdk-source-identity",
-      "bytes": 26055,
-      "sha256": "6a2c0caa227d78028f42434b86231236055f0cfe0e3d6b71a4f651f7005a2614"
+      "bytes": 59278,
+      "sha256": "84802cba366c3a54013214240ebaf3ae2896322efc965aab4054a61ca9d06aab"
     },
     {
       "path": "ai/browser-speech.mjs",
       "sourcePath": "browser-runtime/ai/browser-speech.mjs",
       "provenance": "sdk-source-identity",
-      "bytes": 266,
-      "sha256": "fceadaafc0755ebb39071550bb2f497df14e23bef169779f970195d678e73ffc"
+      "bytes": 344,
+      "sha256": "4e060177a1aa5ed990b54c6455085973f3edbcd8810ad50367a9618ffdadb35a"
     },
     {
       "path": "ai/browser-wasm-llm-provider.mjs",
@@ -85,8 +92,8 @@
       "path": "ai/browser-whisper-worker.mjs",
       "sourcePath": "browser-runtime/ai/browser-whisper-worker.mjs",
       "provenance": "sdk-source-identity",
-      "bytes": 110,
-      "sha256": "949a4dddfae712855fb83c2aed2608657fea62d09b03e131bf8faa95be7e3aed"
+      "bytes": 345,
+      "sha256": "51f332a86c8b4809ce6a25d34d7cf2de9f0664bd9fbc35bc7ef273c5c550291d"
     },
     {
       "path": "ai/browser-wllama-runtime.mjs",
@@ -106,22 +113,22 @@
       "path": "ai/model-controller.mjs",
       "sourcePath": "browser-runtime/ai/model-controller.mjs",
       "provenance": "sdk-source-identity",
-      "bytes": 23672,
-      "sha256": "a36aea3e62835cf568bd03ebc4be0fa8e0112a15dc9fec3c213b1c8cefa33b56"
+      "bytes": 31466,
+      "sha256": "5a67cd4e6e08c5e754a7ccf667e472ba8ba5269c071279f135889ad91dd235fe"
     },
     {
       "path": "ai/speech-worker-client.mjs",
       "sourcePath": "browser-runtime/ai/speech-worker-client.mjs",
       "provenance": "sdk-source-identity",
-      "bytes": 6501,
-      "sha256": "ebfa4272725482a89ad6f89a1ff732c1e5b9803075f0d559c046800350abf75d"
+      "bytes": 14247,
+      "sha256": "2e5580a86d5adc4f44a0d680e1820437b8d22b5555bf73a36b361ee50d24b3f5"
     },
     {
       "path": "ai/speech-worker-runtime.mjs",
       "sourcePath": "browser-runtime/ai/speech-worker-runtime.mjs",
       "provenance": "sdk-source-identity",
-      "bytes": 17308,
-      "sha256": "feff8873f7d1c7b82f9cd797afe5beb47fa34113e491b2916ada0fcc3e62b101"
+      "bytes": 91125,
+      "sha256": "c865ad9a84df30ea1d14c81e7bb5c38666afdb65d5237472cdabfb11e7c66de4"
     },
     {
       "path": "ai/wllama/LICENCE",
@@ -204,8 +211,8 @@
       "path": "event-manager.mjs",
       "sourcePath": "src/event-manager.mjs",
       "provenance": "sdk-source-identity",
-      "bytes": 52508,
-      "sha256": "96eb36e87fe212e6926f1069cb5305af9fa067774234bb53b11dac7525d2b7f6"
+      "bytes": 95656,
+      "sha256": "a9367654a9d17fb04e14e1135447d00ce6f975f596633281d76eba7155754dba"
     }
   ]
 }

package/browser-runtime/ai/ARCANE_AI_BROWSER_SPEECH_COMPONENTS.json

@@ -0,0 +1,203 @@
+{
+  "schemaVersion": 1,
+  "kind": "arcane-ai-browser-speech-components",
+  "protocol": "arcane-ai-browser-speech-artifact-graph/1",
+  "packageExport": "arcane-os/ai/browser-speech",
+  "browserEntry": "ai/browser-speech.mjs",
+  "closureStatus": "browser-speech-runtime-resolved-from-upstream-packages-and-provider-downloads",
+  "publicationStatus": "browser-speech-public-runtime-ready-warn-first-secure-opt-in",
+  "runtimeBytesPacked": false,
+  "modelWeightsPacked": false,
+  "voiceBytesPacked": false,
+  "materializedLegalCorpus": false,
+  "evidenceBoundary": "The SDK redistributes no browser speech runtime, model, voice, license corpus, or corresponding-source payload. Applications select upstream npm/provider download authorities. Warn-first is the default; secure:true enables exact byte and capability enforcement.",
+  "components": [
+    {
+      "name": "kokoro-js",
+      "version": "1.2.1",
+      "publisher": "xenova",
+      "declaredLicenseSpdx": "Apache-2.0",
+      "effectiveArtifactLicenseExpression": null,
+      "sourceRepository": "https://github.com/hexgrad/kokoro.git",
+      "sourceRevision": "664c76a704021239ba59c84dcbaa4d3dece01fe9",
+      "npm": {
+        "resolved": "https://registry.npmjs.org/kokoro-js/-/kokoro-js-1.2.1.tgz",
+        "integrity": "sha512-oq0HZJWis3t8lERkMJh84WLU86dpYD0EuBPtqYnLlQzyFP1OkyBRDcweAqCfhNOpltyN9j/azp1H6uuC47gShw==",
+        "shasum": "a6a9b0ffc1ab354fa3f9cb71ee95b6e9f0a13527",
+        "tarballBytes": 26887218,
+        "tarballSha256": "1f0d0383ef0349af0bd9440d81dc12abbea3a5392eb645283eda876f537f5860"
+      },
+      "selectedArtifacts": [
+        {
+          "role": "tts-runtime-entrypoint",
+          "path": "dist/kokoro.web.js",
+          "mediaType": "application/javascript",
+          "bytes": 2135146,
+          "sha256": "6067712fe4c43cdb36c762f860a5ab8d96ea1d9c8882466438eb9f3d0d20be8f"
+        }
+      ],
+      "candidateObligations": [
+        "Apache-2.0",
+        "MIT",
+        "GPL-3.0-or-later"
+      ],
+      "noticeClosureStatus": "upstream-publisher-owned-not-sdk-runtime-or-publication-gate",
+      "correspondingSourceStatus": "upstream-publisher-owned-not-sdk-runtime-or-publication-gate"
+    },
+    {
+      "name": "@huggingface/transformers",
+      "version": "3.5.1",
+      "publisher": "xenova",
+      "declaredLicenseSpdx": "Apache-2.0",
+      "effectiveArtifactLicenseExpression": null,
+      "sourceRepository": "https://github.com/huggingface/transformers.js.git",
+      "sourceRevision": "746c8c25bf27c5e0684a20f76889b4bb8d23e295",
+      "npm": {
+        "resolved": "https://registry.npmjs.org/@huggingface/transformers/-/transformers-3.5.1.tgz",
+        "integrity": "sha512-qWsPoJMBPYcrGuzRMVL//3dwcLXED9r+j+Hzw+hZpBfrMPdyq57ehNs7lew0D34Paj0DO0E0kZQjOZcIVN17hQ==",
+        "shasum": "8022b616ed8f1ec88d8e56def06d5b0ef5c7a1ee",
+        "tarballBytes": 10249112,
+        "tarballSha256": "b8e9d201f92c7e2001de3601ef47d5a257985921f8f6ffc76734a5ec021bb53e"
+      },
+      "selectedArtifacts": [
+        {
+          "role": "stt-runtime-entrypoint-with-bundled-onnx-runtime-javascript",
+          "path": "dist/transformers.js",
+          "mediaType": "application/javascript",
+          "bytes": 2141070,
+          "sha256": "730d42f06974f547e1f6a5f5b7313fc731ff21a3d3ac4c8e47d1f69b0a375547"
+        },
+        {
+          "role": "onnx-runtime-jsep-module",
+          "path": "dist/ort-wasm-simd-threaded.jsep.mjs",
+          "mediaType": "application/javascript",
+          "bytes": 44484,
+          "sha256": "08fb86ec433c78bfb032c5d84a68b8e8e5a8d81268fa39e24314179a5767a5b9"
+        },
+        {
+          "role": "onnx-runtime-jsep-wasm",
+          "path": "dist/ort-wasm-simd-threaded.jsep.wasm",
+          "mediaType": "application/wasm",
+          "bytes": 21596019,
+          "sha256": "c46655e8a94afc45338d4cb2b840475f88e5012d524509916e505079c00bfa39"
+        }
+      ],
+      "candidateObligations": [
+        "Apache-2.0",
+        "MIT",
+        "BSD-3-Clause",
+        "ISC"
+      ],
+      "noticeClosureStatus": "upstream-publisher-owned-not-sdk-runtime-or-publication-gate",
+      "correspondingSourceStatus": "upstream-publisher-owned-not-sdk-runtime-or-publication-gate"
+    },
+    {
+      "name": "phonemizer",
+      "version": "1.2.1",
+      "publisher": "xenova",
+      "declaredLicenseSpdx": "Apache-2.0",
+      "embeddedBy": "kokoro-js@1.2.1",
+      "sourceRepository": "https://github.com/xenova/phonemizer.js.git",
+      "sourceRevision": "6835144b7ee9043129222549c1ed2f6a27216278",
+      "npm": {
+        "resolved": "https://registry.npmjs.org/phonemizer/-/phonemizer-1.2.1.tgz",
+        "integrity": "sha512-v0KJ4mi2T4Q7eJQ0W15Xd4G9k4kICSXE8bpDeJ8jisL4RyJhNWsweKTOi88QXFc4r4LZlz5jVL5lCHhkpdT71A==",
+        "shasum": "175aed7034b49b9169fc6adf13c16134374d238d",
+        "tarballBytes": 1369002,
+        "tarballSha256": "12f9f3582f8b5d557a0577180d83ff0458a4a5c15b2efb625ee71c3ebbee22e9"
+      },
+      "embeddedEspeak": {
+        "declaredUpstreamLicenseSpdx": "GPL-3.0-or-later",
+        "exactUpstreamRevision": null,
+        "generatedWorkerPath": "src/espeakng.worker.js",
+        "generatedWorkerBytes": 1449799,
+        "generatedWorkerSha256": "6bab8f2f2cf25d65b596b87471cb17567a496012ee6ce649cfa88b284c1fb9f8",
+        "dataPath": "data/espeakng.worker.data",
+        "dataBytes": 890802,
+        "dataSha256": "6262621f3f8267fb61ef41fe7af75b8fe7e2315d6c9092afd29d7629bb21a60b",
+        "buildToolchainReceipt": null,
+        "generatedOutputToCorrespondingSourceBinding": null,
+        "noticeClosureStatus": "upstream-publisher-owned-not-sdk-runtime-or-publication-gate",
+        "correspondingSourceStatus": "upstream-publisher-owned-not-sdk-runtime-or-publication-gate"
+      }
+    },
+    {
+      "name": "onnxruntime-web",
+      "version": "1.22.0-dev.20250409-89f8206ba4",
+      "publisher": "onnxruntime",
+      "declaredLicenseSpdx": "MIT",
+      "embeddedBy": "@huggingface/transformers@3.5.1",
+      "sourceRepository": "https://github.com/microsoft/onnxruntime.git",
+      "sourceRevision": "89f8206ba4f1c22c39e0297fb55272e8ce8cd7d0",
+      "npm": {
+        "resolved": "https://registry.npmjs.org/onnxruntime-web/-/onnxruntime-web-1.22.0-dev.20250409-89f8206ba4.tgz",
+        "integrity": "sha512-0uS76OPgH0hWCPrFKlL8kYVV7ckM7t/36HfbgoFw6Nd0CZVVbQC4PkrR8mBX8LtNUFZO25IQBqV2Hx2ho3FlbQ==",
+        "shasum": "d1e3a04e03dfee392b41d420ef547b6a0351b06b",
+        "tarballBytes": 20239097,
+        "tarballSha256": "9758fa28ba1acc1b5c9ffef8d60c97b56fd2105a9476a690ed4db16a5588ae10",
+        "licenseMemberPresent": false,
+        "thirdPartyNoticesMemberPresent": false
+      },
+      "selectedArtifacts": [
+        {
+          "role": "onnx-runtime-jsep-module",
+          "path": "dist/ort-wasm-simd-threaded.jsep.mjs",
+          "mediaType": "application/javascript",
+          "bytes": 44484,
+          "sha256": "08fb86ec433c78bfb032c5d84a68b8e8e5a8d81268fa39e24314179a5767a5b9",
+          "packagedBy": "@huggingface/transformers@3.5.1"
+        },
+        {
+          "role": "onnx-runtime-jsep-wasm",
+          "path": "dist/ort-wasm-simd-threaded.jsep.wasm",
+          "mediaType": "application/wasm",
+          "bytes": 21596019,
+          "sha256": "c46655e8a94afc45338d4cb2b840475f88e5012d524509916e505079c00bfa39",
+          "packagedBy": "@huggingface/transformers@3.5.1"
+        }
+      ],
+      "noticeClosureStatus": "upstream-publisher-owned-not-sdk-runtime-or-publication-gate"
+    }
+  ],
+  "legalEvidence": [
+    {
+      "role": "package-license",
+      "appliesTo": ["kokoro-js@1.2.1", "phonemizer@1.2.1"],
+      "sourceKind": "registry-integrity-verified-tarball-member",
+      "sourcePath": "package/LICENSE",
+      "mediaType": "text/plain",
+      "bytes": 11357,
+      "sha256": "c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4"
+    },
+    {
+      "role": "package-license",
+      "appliesTo": ["@huggingface/transformers@3.5.1"],
+      "sourceKind": "registry-integrity-verified-tarball-member",
+      "sourcePath": "package/LICENSE",
+      "mediaType": "text/plain",
+      "bytes": 11358,
+      "sha256": "cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30"
+    },
+    {
+      "role": "upstream-license",
+      "appliesTo": ["onnxruntime-web@1.22.0-dev.20250409-89f8206ba4"],
+      "sourceKind": "immutable-upstream-source-revision",
+      "sourceUrl": "https://raw.githubusercontent.com/microsoft/onnxruntime/89f8206ba4f1c22c39e0297fb55272e8ce8cd7d0/LICENSE",
+      "sourceRevision": "89f8206ba4f1c22c39e0297fb55272e8ce8cd7d0",
+      "mediaType": "text/plain",
+      "bytes": 1073,
+      "sha256": "2f07c72751aed99790b8a4869cf2311df85a860b22ded05fa22803587a48922c"
+    },
+    {
+      "role": "upstream-third-party-notices",
+      "appliesTo": ["onnxruntime-web@1.22.0-dev.20250409-89f8206ba4"],
+      "sourceKind": "immutable-upstream-source-revision",
+      "sourceUrl": "https://raw.githubusercontent.com/microsoft/onnxruntime/89f8206ba4f1c22c39e0297fb55272e8ce8cd7d0/ThirdPartyNotices.txt",
+      "sourceRevision": "89f8206ba4f1c22c39e0297fb55272e8ce8cd7d0",
+      "mediaType": "text/plain",
+      "bytes": 326866,
+      "sha256": "e9e90971a8e75a9a8ac0c6412e29c1202d079998389915aa485f46c816c3b4cc"
+    }
+  ],
+  "publicationBlocks": []
+}

package/browser-runtime/ai/browser-kokoro-worker.mjs

@@ -1,3 +1,12 @@
-import { installBrowserSpeechWorker } from "./speech-worker-runtime.mjs";
+import {
+  installBrowserSpeechArtifactModuleWorker,
+  installBrowserSpeechWorker,
+} from "./speech-worker-runtime.mjs";
 
-installBrowserSpeechWorker("tts");
+const mode = new URL(import.meta.url).searchParams.get("arcaneSpeechWorkerMode");
+
+if (mode === "artifact-module-worker") {
+  installBrowserSpeechArtifactModuleWorker("tts");
+} else {
+  installBrowserSpeechWorker("tts");
+}