Some checks failed
standards workspaces build + test / jouleclaw-rs (pull_request) Successful in 3m28s
standards workspaces build + test / aac-rs (pull_request) Successful in 44s
standards workspaces build + test / joule-code-rs (pull_request) Successful in 49s
standards workspaces build + test / joulecontract-rs (pull_request) Successful in 41s
standards workspaces build + test / map-rs (pull_request) Successful in 35s
standards workspaces build + test / mesh-rs (pull_request) Successful in 30s
joule-code conformance gate / Build + round-trip C1-C4 vectors (pull_request) Successful in 1m29s
standards workspaces build + test / openpay (pull_request) Successful in 1m37s
wai cross-architecture byte-equality / linux-aarch64 (pull_request) Successful in 18s
jouleclaw public surface must stay documented / Public-surface audit (jouleclaw-rs) (pull_request) Successful in 58s
no-vanity-metrics / Scan committed Markdown for vanity metrics (pull_request) Successful in 3s
WAI conformance / cargo-class corpora · linux-arm64 (pull_request) Successful in 56s
WAI conformance / cross-arch byte-equality · linux-arm64 (pull_request) Successful in 17s
standards workspaces build + test / eoc-rs (pull_request) Successful in 1m48s
standards workspaces build + test / jcp-rs (pull_request) Successful in 1m19s
standards workspaces build + test / proof-rs (pull_request) Successful in 1m11s
standards workspaces build + test / sandbox-rs (pull_request) Successful in 2m7s
standards workspaces build + test / smart-byte-rs (pull_request) Successful in 2m33s
wai cross-architecture byte-equality / linux-x86_64 (pull_request) Successful in 14s
WAI conformance / cargo-class corpora · linux (pull_request) Successful in 34s
WAI conformance / cross-arch byte-equality · linux (pull_request) Successful in 17s
WAI conformance / C2PA manifest emission · signed, read back, validated (pull_request) Successful in 42s
WAI neural decoders end-to-end / synthetic fixtures → Rust decode → reference (±4) (pull_request) Failing after 1m5s
standards workspaces build + test / arl-rs (pull_request) Successful in 2m0s
standards workspaces build + test / joule-ui-rs (pull_request) Successful in 2m15s
standards workspaces build + test / jouledesk-rs (pull_request) Successful in 2m20s
standards workspaces build + test / joulehook-rs (pull_request) Successful in 2m14s
standards workspaces build + test / sense-rs (pull_request) Successful in 2m16s
wai cross-architecture byte-equality / macos-arm64 (reference) (pull_request) Successful in 14s
WAI conformance / cargo-class corpora · macos (pull_request) Successful in 47s
WAI conformance / cross-arch byte-equality · macos (pull_request) Successful in 14s
wai cross-architecture byte-equality / windows-x86_64 (pull_request) Has been cancelled
WAI conformance / cargo-class corpora · windows (pull_request) Has been cancelled
WAI conformance / cross-arch byte-equality · windows (pull_request) Has been cancelled
This mapping was written on 2026-08-03 and sat unmerged while `extensions/capability-constraints.md` landed, which makes dispatch a precondition check: a sink satisfies a capability when it advertises `cap` AND the object's declared parameters satisfy a registered constraint set. Rebased onto current main, the two extensions read as overlapping claims about §4 with nothing saying how they relate. They are not in tension, and the newer one makes this one sharper. `isConfigSupported()` is not a codec-string test — it takes a whole `VideoDecoderConfig`, codec string plus `codedWidth`, `codedHeight` and the rest — so it is a constraint evaluator already, and a browser satisfies the constraint extension's three requirements structurally rather than through extra machinery: the query is pre-flight, so evaluation happens before dispatch rather than during it; it answers for a configuration, so the answer is per object and not per sink; and `supported: false` is a negative answer returned before any payload is committed to, which is the required treatment of an object that satisfies no set. The call also returns the normalised config the platform would accept, which is the accepted parameter set, so a sink SHOULD use it rather than re-derive one. The limit is stated rather than glossed. WebCodecs' parameter vocabulary is the conventional-media one — codec, resolution, frame rate, bit depth, profile — which is the same shape as the ratified registers `capability-constraints.md` §3 draws on, and it has the same gap: no WebCodecs configuration describes the neural, quantum, world or haptic families. Those have no native tier to constrain at all, resolve through the WASM tier, and stay unconstrained until WAI authors their register entries. That is the state §3 already describes, not a shortfall introduced here. Framing renumbered §5 → §6. Docs only; `check-no-vanity-metrics.sh` passes. Co-Authored-By: Claude Opus 5 <[email protected]>
120 lines
6.9 KiB
Markdown
120 lines
6.9 KiB
Markdown
# WAI Extension: Browser Capability Negotiation (WebCodecs)
|
|
|
|
> Status: Draft. How a **browser** sink implements the §4 dispatch algorithm's
|
|
> "if the sink advertises `cap`" test — using the platform's own capability-
|
|
> negotiation primitive (WebCodecs `isConfigSupported()`) for the native tier, and
|
|
> a WebAssembly decoder as the always-satisfiable fallback. Informative: it maps §4
|
|
> onto the browser; it does not change the wire format or the algorithm.
|
|
> Keywords **MUST**, **MUST NOT**, **SHOULD**, **MAY** are RFC 2119/8174.
|
|
|
|
## 1. The dispatch algorithm already is the browser's pattern
|
|
|
|
§4 resolves a capability by asking whether the sink *advertises* it, else falling
|
|
back. That is the exact shape of the browser's media-capability primitive:
|
|
WebCodecs `VideoDecoder.isConfigSupported()` / `AudioDecoder.isConfigSupported()`
|
|
(and `ImageDecoder`) answer, at runtime, whether a codec configuration will decode
|
|
on this device — and the established pattern when the answer is *no* is to fall
|
|
back to a WebAssembly decoder. A WAI browser sink is that pattern with a named
|
|
capability instead of a bare codec string, and a guaranteed WASM floor.
|
|
|
|
So a browser sink resolves §4 in **two tiers**:
|
|
|
|
- **Native tier** — the platform decodes the capability's payload with a built-in
|
|
codec, gated by `isConfigSupported()`.
|
|
- **WASM tier** — WAI's own pure-integer decoders, compiled to wasm32, decode the
|
|
payload with no platform codec and no ML runtime. This tier is *always
|
|
satisfiable*: it depends on nothing the device must ship.
|
|
|
|
## 2. Native tier — `isConfigSupported()` as "advertises `cap`"
|
|
|
|
For the floor and recommended-menu capabilities (§5) that correspond to a codec
|
|
the browser may implement, a sink SHOULD treat "advertises `cap`" as "the platform
|
|
reports the codec supported." It builds the WebCodecs config for the capability's
|
|
payload and calls `isConfigSupported(config)`; a `supported: true` result means the
|
|
sink advertises that capability and decodes via the platform decoder.
|
|
|
|
| WAI capability | browser decode path (when `isConfigSupported` is true) |
|
|
|---|---|
|
|
| `wai.image.png` / `wai.image.jpeg` / `wai.image.jxl` / `wai.image.avif` | `ImageDecoder` (or `<img>`/`createImageBitmap`) with the format's MIME type |
|
|
| `wai.video.av1` / `wai.video.av1.lossless` | `VideoDecoder` with the `av01.*` codec string |
|
|
| `wai.audio.opus` / `wai.audio.flac` | `AudioDecoder` with the `opus` / `flac` codec string |
|
|
|
|
A `false` result (or a browser without WebCodecs) means the sink does **not**
|
|
advertise the capability at the native tier; resolution proceeds to the WASM tier,
|
|
then to §4's `fallback`, then to inert.
|
|
|
|
## 3. WASM tier — the always-satisfiable floor and the neural path
|
|
|
|
The neural and computed capabilities (`wai.image.jpegai`, `wai.neural.int_*`,
|
|
`wai.audio.int_codec`, `wai.splat.int_codec`, the `wai.world/film/quantum/...`
|
|
family) have **no** native browser codec by design — the decoder is *named, not
|
|
shipped*. For these the WASM tier is the decode path: WAI's pure-integer decoders
|
|
run in wasm32 exactly as they run natively. Because the integer decoders satisfy
|
|
`decode-equivalence` (see [determinism-tiers](determinism-tiers.md)), the WASM
|
|
decode is byte-identical to the native one — the reconstruction has a portable hash
|
|
in the browser too. The live `/jpegai` and `/int_hyper` sinks are this tier.
|
|
|
|
The WASM tier also backs the **classical floor** (§5): a sink MAY carry wasm
|
|
decoders for PNG / FLAC / zstd so that even a browser whose `isConfigSupported()`
|
|
declines every native codec can still open *some* file in each media class. This is
|
|
the browser realization of the floor's guarantee — always-decodable, depending on
|
|
nothing the platform must provide.
|
|
|
|
## 4. Resolution order in a browser sink
|
|
|
|
For `cap = model_requirement.capability`, a browser sink SHOULD resolve:
|
|
|
|
1. **Native**, if a WebCodecs mapping exists for `cap` and
|
|
`isConfigSupported()` reports it supported → decode with the platform decoder.
|
|
2. **WASM**, if the sink bundles a wasm decoder for `cap` → decode in wasm.
|
|
3. **Fallback** `model_requirement.fallback`, resolved by the same two tiers.
|
|
4. Otherwise **inert at this sink** (§4 step 6).
|
|
|
|
This never contradicts §4 — it is §4's "advertises `cap`" made precise for the
|
|
browser: native when the platform reports it, WASM otherwise, and the classical
|
|
floor always reachable through wasm.
|
|
|
|
## 5. The native tier is already a constraint check
|
|
|
|
[`capability-constraints.md`](capability-constraints.md) makes dispatch a
|
|
precondition check: a sink satisfies a capability when it advertises `cap` **and**
|
|
the object's declared parameters satisfy one of the capability's registered
|
|
constraint sets. That extension landed after this mapping was written, and it
|
|
sharpens it rather than competing with it.
|
|
|
|
`isConfigSupported()` is not a codec-string test. It takes a full configuration —
|
|
for video, the codec string plus `codedWidth`, `codedHeight`, the description, and
|
|
the other members of `VideoDecoderConfig` — and answers for *that configuration*.
|
|
It is therefore a constraint evaluator already, and the browser satisfies the
|
|
extension's requirements structurally rather than by additional machinery:
|
|
|
|
- **Evaluated before dispatch.** `isConfigSupported()` is a pre-flight query; it
|
|
does not construct or configure a decoder. This is the "move the failure earlier"
|
|
requirement, met by the API's own shape.
|
|
- **Answered per object, not per sink.** A sink that decodes one object of a
|
|
capability and refuses another is expressing exactly what a constraint set
|
|
expresses. The parameters come from the object.
|
|
- **Unsupported, not a decode error.** A `supported: false` result is a negative
|
|
answer to a question, returned before any payload is committed to — which is the
|
|
required treatment where an object satisfies no set.
|
|
|
|
The result also carries a `config` back: the normalised configuration the platform
|
|
would accept. A browser sink **SHOULD** treat that returned configuration as the
|
|
accepted parameter set for the object, rather than re-deriving it.
|
|
|
|
**The honest limit.** WebCodecs' parameter vocabulary is the conventional-media
|
|
one — codec, resolution, frame rate, bit depth, profile. That is the same shape as
|
|
the ratified registers `capability-constraints.md` §3 draws on, and it has the same
|
|
gap: there is no WebCodecs configuration for the neural, quantum, world or haptic
|
|
families. Those capabilities have no native tier to constrain at all. They resolve
|
|
through the WASM tier (§3) and remain unconstrained until WAI authors their
|
|
register entries, which is the state §3 of that extension describes rather than a
|
|
shortfall of this mapping.
|
|
|
|
## 6. Framing
|
|
|
|
WAI's capability dispatch is not a bespoke negotiation scheme; it is the pattern
|
|
the browser's own media stack already uses — ask whether a config is supported,
|
|
fall back to WebAssembly when it is not. WAI adds a *named* capability and a
|
|
guaranteed WASM floor, so the fallback is always defined rather than
|
|
device-dependent. Stated as a property of the standard, not a comparison.
|