Ait-Dev-lab/surf-ai-sandbox

A secure iframe sandbox used by the Surf AI browser extension to isolate the extension from backend AI models. The sandbox receives commands from the extension via postMessage, manages authentication, processes audio, detects voice activity, and forwards requests to the Gateway. Who uses it: the Surf AI browser extension and service/Gateway components; extension developers and integrators. Key features: - Auth: receives JWTs, manages session tokens - Voice: energy-based VAD, push-to-talk, real-time voice mode - Audio: in-browser WebM→WAV conversion - Models: friendly model aliases routed at the Gateway - Streaming: SSE token-by-token responses - Security: ALLOWED_ORIGINS, Origin enforcement, session tokens - Message protocol: structured JSON messages (extension_command/response) - Build-time config; no hardcoded URLs.