@desktalk/core 0.1.0-alpha.1

package/dist/server/auth-routes.js

@@ -0,0 +1,155 @@
+/**
+ * Fastify plugin that registers authentication and setup routes.
+ *
+ * Public routes (no session required):
+ *   POST /api/auth/login
+ *   GET  /api/auth/me
+ *   GET  /api/setup/status
+ *   POST /api/setup
+ *
+ * Authenticated routes:
+ *   POST /api/auth/logout
+ *   PUT  /api/auth/me/password
+ */
+import '@fastify/cookie';
+import { verifyPassword, createUser, createSession, deleteSession, updateUserPassword, hasAdmin, findUser, validateSession, } from '../services/user-db.js';
+import { ensureUserHome } from '../services/workspace.js';
+import { saveOnboardingConfig } from '../services/onboarding-config.js';
+const COOKIE_NAME = 'desktalk_session';
+/** Cookie options shared across set/clear. */
+function cookieOptions(secure) {
+    return {
+        path: '/',
+        httpOnly: true,
+        sameSite: 'strict',
+        secure,
+    };
+}
+export async function authRoutes(app) {
+    const isSecure = false; // TODO: derive from app config once HTTPS is supported
+    // ─── POST /api/auth/login (public) ──────────────────────────────────
+    app.post('/api/auth/login', async (req, reply) => {
+        const { username, password } = req.body ?? {};
+        if (!username || !password) {
+            reply.code(400);
+            return { error: 'Username and password are required.' };
+        }
+        const user = verifyPassword(username, password);
+        if (!user) {
+            reply.code(401);
+            return { error: 'Invalid username or password.' };
+        }
+        ensureUserHome(user.username);
+        const token = createSession(username);
+        reply.setCookie(COOKIE_NAME, token, cookieOptions(isSecure));
+        return {
+            username: user.username,
+            displayName: user.displayName,
+            role: user.role,
+        };
+    });
+    // ─── POST /api/auth/logout ──────────────────────────────────────────
+    app.post('/api/auth/logout', async (req, reply) => {
+        const token = req.cookies[COOKIE_NAME];
+        if (token) {
+            deleteSession(token);
+        }
+        reply.clearCookie(COOKIE_NAME, cookieOptions(isSecure));
+        return { ok: true };
+    });
+    // ─── GET /api/auth/me (public) ───────────────────────────────────────
+    // When authenticated: returns the current user info.
+    // When unauthenticated: returns { authenticated: false, needsSetup }
+    // so the frontend can decide between login vs onboard page.
+    app.get('/api/auth/me', async (req) => {
+        const requestUser = req.user;
+        const token = req.cookies[COOKIE_NAME];
+        const user = requestUser ?? (token ? validateSession(token) : undefined);
+        if (!user) {
+            return {
+                authenticated: false,
+                needsSetup: !hasAdmin(),
+            };
+        }
+        ensureUserHome(user.username);
+        return {
+            authenticated: true,
+            username: user.username,
+            displayName: user.displayName,
+            role: user.role,
+        };
+    });
+    // ─── PUT /api/auth/me/password ──────────────────────────────────────
+    app.put('/api/auth/me/password', async (req, reply) => {
+        const user = req.user;
+        if (!user) {
+            reply.code(401);
+            return { error: 'Not authenticated.' };
+        }
+        const { oldPassword, newPassword } = req.body ?? {};
+        if (!oldPassword || !newPassword) {
+            reply.code(400);
+            return { error: 'Both oldPassword and newPassword are required.' };
+        }
+        if (newPassword.length < 8) {
+            reply.code(400);
+            return { error: 'Password must be at least 8 characters.' };
+        }
+        // Verify old password
+        const verified = verifyPassword(user.username, oldPassword);
+        if (!verified) {
+            reply.code(403);
+            return { error: 'Current password is incorrect.' };
+        }
+        updateUserPassword(user.username, newPassword);
+        return { ok: true };
+    });
+    // ─── GET /api/setup/status (public) ─────────────────────────────────
+    // Returns whether the system needs initial setup (no admin account).
+    app.get('/api/setup/status', async () => {
+        return { needsSetup: !hasAdmin() };
+    });
+    // ─── POST /api/setup (public) ───────────────────────────────────────
+    // Creates the initial admin account during onboarding.
+    // Only succeeds when no admin account exists yet.
+    app.post('/api/setup', async (req, reply) => {
+        // Guard: only allow setup when no admin exists
+        if (hasAdmin()) {
+            reply.code(403);
+            return { error: 'System is already set up. An admin account exists.' };
+        }
+        const { username, displayName, password, aiConfig, voiceConfig } = req.body ?? {};
+        if (!username || !displayName || !password) {
+            reply.code(400);
+            return { error: 'Username, displayName, and password are required.' };
+        }
+        if (!/^[a-zA-Z0-9_-]{1,32}$/.test(username)) {
+            reply.code(400);
+            return { error: 'Username must be 1-32 alphanumeric characters, hyphens, or underscores.' };
+        }
+        if (password.length < 8) {
+            reply.code(400);
+            return { error: 'Password must be at least 8 characters.' };
+        }
+        if (findUser(username)) {
+            reply.code(409);
+            return { error: `User "${username}" already exists.` };
+        }
+        // Create the admin account and their home directory
+        const user = createUser(username, password, 'admin', displayName);
+        ensureUserHome(username);
+        // Persist optional provider configuration from onboarding
+        saveOnboardingConfig(username, aiConfig, voiceConfig);
+        // Automatically log the admin in
+        const token = createSession(username);
+        reply.setCookie(COOKIE_NAME, token, cookieOptions(isSecure));
+        return {
+            ok: true,
+            username: user.username,
+            displayName: user.displayName,
+            role: user.role,
+        };
+    });
+}
+export { COOKIE_NAME };
+//# sourceMappingURL=auth-routes.js.map

package/dist/server/auth-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-routes.js","sourceRoot":"","sources":["../../src/server/auth-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,iBAAiB,CAAC;AACzB,OAAO,EACL,cAAc,EACd,UAAU,EACV,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,QAAQ,EACR,QAAQ,EACR,eAAe,GAEhB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAEvC,8CAA8C;AAC9C,SAAS,aAAa,CAAC,MAAe;IACpC,OAAO;QACL,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,QAAiB;QAC3B,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAoB;IACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,uDAAuD;IAE/E,uEAAuE;IACvE,GAAG,CAAC,IAAI,CAEL,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACzC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;QAC1D,CAAC;QAED,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;QACpD,CAAC;QAED,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE9B,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACtC,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7D,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAChD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACvC,IAAI,KAAK,EAAE,CAAC;YACV,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,qDAAqD;IACrD,qEAAqE;IACrE,4DAA4D;IAC5D,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACpC,MAAM,WAAW,GAAI,GAA8C,CAAC,IAAI,CAAC;QACzE,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,WAAW,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAEzE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;gBACL,aAAa,EAAE,KAAK;gBACpB,UAAU,EAAE,CAAC,QAAQ,EAAE;aACxB,CAAC;QACJ,CAAC;QAED,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE9B,OAAO;YACL,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,GAAG,CAAC,GAAG,CAEJ,uBAAuB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC/C,MAAM,IAAI,GAAI,GAA8C,CAAC,IAAI,CAAC;QAClE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAC;QACrE,CAAC;QAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC;QAC9D,CAAC;QAED,sBAAsB;QACtB,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;QACrD,CAAC;QAED,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC/C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,qEAAqE;IACrE,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;QACtC,OAAO,EAAE,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,uDAAuD;IACvD,kDAAkD;IAClD,GAAG,CAAC,IAAI,CA0BL,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACpC,+CAA+C;QAC/C,IAAI,QAAQ,EAAE,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,oDAAoD,EAAE,CAAC;QACzE,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAElF,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,mDAAmD,EAAE,CAAC;QACxE,CAAC;QAED,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,yEAAyE,EAAE,CAAC;QAC9F,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC;QAC9D,CAAC;QAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,SAAS,QAAQ,mBAAmB,EAAE,CAAC;QACzD,CAAC;QAED,oDAAoD;QACpD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAClE,cAAc,CAAC,QAAQ,CAAC,CAAC;QAEzB,0DAA0D;QAC1D,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAEtD,iCAAiC;QACjC,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACtC,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE7D,OAAO;YACL,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/dist/server/dtfs-routes.d.ts

@@ -0,0 +1,3 @@
+import type { FastifyInstance } from 'fastify';
+export declare function dtfsRoutes(app: FastifyInstance): Promise<void>;
+//# sourceMappingURL=dtfs-routes.d.ts.map

package/dist/server/dtfs-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dtfs-routes.d.ts","sourceRoot":"","sources":["../../src/server/dtfs-routes.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AA4I/C,wBAAsB,UAAU,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CA4EpE"}

package/dist/server/dtfs-routes.js

@@ -0,0 +1,183 @@
+import { createReadStream } from 'node:fs';
+import { lstat, readFile, realpath } from 'node:fs/promises';
+import { extname, resolve, sep } from 'node:path';
+import { createHtmlBridgeScript } from '@desktalk/sdk';
+import { getUserHomeDir } from '../services/workspace.js';
+const MIME_TYPES = {
+    '.css': 'text/css; charset=utf-8',
+    '.gif': 'image/gif',
+    '.htm': 'text/html; charset=utf-8',
+    '.html': 'text/html; charset=utf-8',
+    '.jpeg': 'image/jpeg',
+    '.jpg': 'image/jpeg',
+    '.js': 'application/javascript; charset=utf-8',
+    '.json': 'application/json; charset=utf-8',
+    '.mjs': 'application/javascript; charset=utf-8',
+    '.mp3': 'audio/mpeg',
+    '.mp4': 'video/mp4',
+    '.ogg': 'audio/ogg',
+    '.png': 'image/png',
+    '.svg': 'image/svg+xml',
+    '.txt': 'text/plain; charset=utf-8',
+    '.wav': 'audio/wav',
+    '.webm': 'video/webm',
+    '.webp': 'image/webp',
+};
+function createThemeLinkTag(accentColor, mode) {
+    const params = new URLSearchParams({ accent: accentColor, theme: mode });
+    return `<link rel="stylesheet" href="/api/ui/desktalk-theme.css?${params.toString()}" data-dt-theme>`;
+}
+function createThemeSyncScript(accentColor, mode) {
+    return `<script data-dt-theme-sync>
+(() => {
+  const THEME_MESSAGE = 'desktalk:theme-update';
+  const THEME_SELECTOR = 'link[data-dt-theme]';
+  const updateTheme = (nextAccent, nextMode) => {
+    const params = new URLSearchParams({ accent: nextAccent, theme: nextMode });
+    const href = '/api/ui/desktalk-theme.css?' + params.toString();
+    let link = document.querySelector(THEME_SELECTOR);
+    if (!link) {
+      link = document.createElement('link');
+      link.rel = 'stylesheet';
+      link.setAttribute('data-dt-theme', '');
+      document.head.prepend(link);
+    }
+    link.href = href;
+    document.documentElement.dataset.theme = nextMode;
+    document.documentElement.style.colorScheme = nextMode;
+    document.documentElement.style.backgroundColor = nextMode === 'dark' ? '#101114' : '#f7f7fa';
+    document.body?.style.setProperty('background-color', nextMode === 'dark' ? '#101114' : '#f7f7fa');
+  };
+  updateTheme(${JSON.stringify(accentColor)}, ${JSON.stringify(mode)});
+  window.addEventListener('message', (event) => {
+    const data = event.data;
+    if (!data || data.type !== THEME_MESSAGE) return;
+    updateTheme(data.accentColor, data.mode === 'light' ? 'light' : 'dark');
+  });
+})();
+</script>`;
+}
+function stripDtInjections(html) {
+    return html
+        .replace(/<link[^>]*data-dt-theme[^>]*>\s*/gi, '')
+        .replace(/<script[^>]*data-dt-theme-sync[^>]*>[\s\S]*?<\/script>\s*/gi, '')
+        .replace(/<script[^>]*data-dt-ui[^>]*><\/script>\s*/gi, '')
+        .replace(/<script[^>]*data-dt-bridge[^>]*>[\s\S]*?<\/script>\s*/gi, '');
+}
+function injectIntoHtmlHead(html, snippet) {
+    const headMatch = html.match(/<head(\s[^>]*)?>|<head>/i);
+    if (headMatch && headMatch.index !== undefined) {
+        const insertPos = headMatch.index + headMatch[0].length;
+        return html.slice(0, insertPos) + '\n' + snippet + '\n' + html.slice(insertPos);
+    }
+    return snippet + '\n' + html;
+}
+function injectDtRuntime(html, options) {
+    const cleanHtml = stripDtInjections(html);
+    const snippet = [
+        createThemeLinkTag(options.accentColor, options.theme),
+        createThemeSyncScript(options.accentColor, options.theme),
+        '<script src="/api/ui/desktalk-ui.js" data-dt-ui></script>',
+        createHtmlBridgeScript(options.streamId, options.bridgeToken),
+    ].join('\n');
+    return injectIntoHtmlHead(cleanHtml, snippet);
+}
+function normalizeRelativePath(rawPath) {
+    return rawPath.replace(/\\/g, '/');
+}
+function isAllowedHiddenPath(relativePath) {
+    return relativePath === '.data/liveapps' || relativePath.startsWith('.data/liveapps/');
+}
+function hasDisallowedHiddenSegment(relativePath) {
+    const segments = normalizeRelativePath(relativePath).split('/').filter(Boolean);
+    const allowLiveAppsRoot = isAllowedHiddenPath(relativePath);
+    return segments.some((segment, index) => {
+        if (!segment.startsWith('.')) {
+            return false;
+        }
+        if (allowLiveAppsRoot && index === 0 && segment === '.data') {
+            return false;
+        }
+        if (allowLiveAppsRoot && index === 1 && segment === 'liveapps') {
+            return false;
+        }
+        return true;
+    });
+}
+function resolveUserFile(userHomeDir, relativePath) {
+    const normalized = normalizeRelativePath(relativePath).replace(/^\/+/, '');
+    const resolvedPath = resolve(userHomeDir, normalized);
+    const homePrefix = `${resolve(userHomeDir)}${sep}`;
+    if (resolvedPath !== resolve(userHomeDir) && !resolvedPath.startsWith(homePrefix)) {
+        throw new Error('Path escapes the user home directory.');
+    }
+    return resolvedPath;
+}
+function getMimeType(filePath) {
+    return MIME_TYPES[extname(filePath).toLowerCase()] ?? 'application/octet-stream';
+}
+export async function dtfsRoutes(app) {
+    app.get('/@dtfs/*', async (req, reply) => {
+        const rawPath = req.params['*'];
+        if (!rawPath) {
+            reply.code(404);
+            return { error: 'Not found' };
+        }
+        const relativePath = normalizeRelativePath(decodeURIComponent(rawPath));
+        if (!relativePath || relativePath.split('/').some((segment) => segment === '..')) {
+            reply.code(400);
+            return { error: 'Invalid file path' };
+        }
+        if (hasDisallowedHiddenSegment(relativePath)) {
+            reply.code(403);
+            return { error: 'Access denied' };
+        }
+        const userHomeDir = getUserHomeDir(req.user.username);
+        const absolutePath = resolveUserFile(userHomeDir, relativePath);
+        let stat;
+        try {
+            stat = await lstat(absolutePath);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                reply.code(404);
+                return { error: 'Not found' };
+            }
+            throw error;
+        }
+        if (!stat.isFile() || stat.isSymbolicLink()) {
+            reply.code(403);
+            return { error: 'Access denied' };
+        }
+        const realFilePath = await realpath(absolutePath);
+        const realHomeDir = await realpath(userHomeDir);
+        const realHomePrefix = `${realHomeDir}${sep}`;
+        if (realFilePath !== realHomeDir && !realFilePath.startsWith(realHomePrefix)) {
+            reply.code(403);
+            return { error: 'Access denied' };
+        }
+        const mimeType = getMimeType(relativePath);
+        const isHtml = mimeType.startsWith('text/html');
+        const isLiveAppHtml = isHtml && isAllowedHiddenPath(relativePath);
+        reply.header('X-Content-Type-Options', 'nosniff');
+        reply.header('Cache-Control', isHtml ? 'no-store' : 'no-cache');
+        if (!isHtml) {
+            reply.type(mimeType);
+            return reply.send(createReadStream(realFilePath));
+        }
+        let html = await readFile(realFilePath, 'utf-8');
+        const streamId = req.query.streamId;
+        const token = req.query.token;
+        if (isLiveAppHtml && streamId && token) {
+            html = injectDtRuntime(html, {
+                accentColor: req.query.accent ?? '#7c6ff7',
+                theme: req.query.theme === 'light' ? 'light' : 'dark',
+                streamId,
+                bridgeToken: token,
+            });
+        }
+        reply.type('text/html; charset=utf-8');
+        return reply.send(html);
+    });
+}
+//# sourceMappingURL=dtfs-routes.js.map

package/dist/server/dtfs-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dtfs-routes.js","sourceRoot":"","sources":["../../src/server/dtfs-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEvD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,UAAU,GAA2B;IACzC,MAAM,EAAE,yBAAyB;IACjC,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,0BAA0B;IAClC,OAAO,EAAE,0BAA0B;IACnC,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,uCAAuC;IAC9C,OAAO,EAAE,iCAAiC;IAC1C,MAAM,EAAE,uCAAuC;IAC/C,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,2BAA2B;IACnC,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;CACtB,CAAC;AAEF,SAAS,kBAAkB,CAAC,WAAmB,EAAE,IAAsB;IACrE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,2DAA2D,MAAM,CAAC,QAAQ,EAAE,kBAAkB,CAAC;AACxG,CAAC;AAED,SAAS,qBAAqB,CAAC,WAAmB,EAAE,IAAsB;IACxE,OAAO;;;;;;;;;;;;;;;;;;;;gBAoBO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;;;;;;;UAO1D,CAAC;AACX,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,IAAI;SACR,OAAO,CAAC,oCAAoC,EAAE,EAAE,CAAC;SACjD,OAAO,CAAC,6DAA6D,EAAE,EAAE,CAAC;SAC1E,OAAO,CAAC,6CAA6C,EAAE,EAAE,CAAC;SAC1D,OAAO,CAAC,yDAAyD,EAAE,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,OAAe;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACzD,IAAI,SAAS,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACxD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,IAAI,GAAG,OAAO,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClF,CAAC;IAED,OAAO,OAAO,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/B,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,OAKC;IAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG;QACd,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC;QACtD,qBAAqB,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC;QACzD,2DAA2D;QAC3D,sBAAsB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC;KAC9D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe;IAC5C,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,mBAAmB,CAAC,YAAoB;IAC/C,OAAO,YAAY,KAAK,gBAAgB,IAAI,YAAY,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,0BAA0B,CAAC,YAAoB;IACtD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChF,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAE5D,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QACtC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,iBAAiB,IAAI,KAAK,KAAK,CAAC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YAC5D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,iBAAiB,IAAI,KAAK,KAAK,CAAC,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAC/D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,WAAmB,EAAE,YAAoB;IAChE,MAAM,UAAU,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,GAAG,EAAE,CAAC;IACnD,IAAI,YAAY,KAAK,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAC;AACnF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAoB;IACnD,GAAG,CAAC,GAAG,CAGJ,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAClC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,YAAY,GAAG,qBAAqB,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;YACjF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;QACxC,CAAC;QAED,IAAI,0BAA0B,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;QACpC,CAAC;QAED,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,IAAK,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,eAAe,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAEhE,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;YAChC,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC5C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;QACpC,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,cAAc,GAAG,GAAG,WAAW,GAAG,GAAG,EAAE,CAAC;QAC9C,IAAI,YAAY,KAAK,WAAW,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC7E,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;QACpC,CAAC;QAED,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,aAAa,GAAG,MAAM,IAAI,mBAAmB,CAAC,YAAY,CAAC,CAAC;QAElE,KAAK,CAAC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QAClD,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAEhE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrB,OAAO,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;QACpC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9B,IAAI,aAAa,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;YACvC,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE;gBAC3B,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,SAAS;gBAC1C,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;gBACrD,QAAQ;gBACR,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACvC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/index.d.ts

@@ -0,0 +1,15 @@
+import type pino from 'pino';
+import { type PublicUser } from '../services/user-db.js';
+export interface ServerOptions {
+    dev: boolean;
+    host: string;
+    port: number;
+    logger: pino.Logger;
+}
+declare module 'fastify' {
+    interface FastifyRequest {
+        user?: PublicUser;
+    }
+}
+export declare function createServer(options: ServerOptions): Promise<import("fastify").FastifyInstance<import("http").Server<typeof import("http").IncomingMessage, typeof import("http").ServerResponse>, import("http").IncomingMessage, import("http").ServerResponse<import("http").IncomingMessage>, pino.Logger<never, boolean>, import("fastify").FastifyTypeProviderDefault>>;
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAO7B,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAavE,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,OAAO,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;CACrB;AAGD,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,cAAc;QACtB,IAAI,CAAC,EAAE,UAAU,CAAC;KACnB;CACF;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,aAAa,4TAiMxD"}

package/dist/server/index.js

@@ -0,0 +1,158 @@
+import Fastify from 'fastify';
+import fastifyCookie from '@fastify/cookie';
+import fastifyWebsocket from '@fastify/websocket';
+import fastifyStatic from '@fastify/static';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { broadcastRaw } from '../services/messaging.js';
+import { registry } from '../services/miniapp-registry.js';
+import { PiSessionService } from '../services/ai/pi-session-service.js';
+import { getStoredPreference } from '../services/preferences.js';
+import { getWorkspacePaths, getUserHomeDir } from '../services/workspace.js';
+import { WindowManagerService } from '../services/window-manager.js';
+import { validateSession } from '../services/user-db.js';
+import { COOKIE_NAME, authRoutes } from './auth-routes.js';
+import { adminRoutes } from './admin-routes.js';
+import { wsRoutes } from './ws-routes.js';
+import { voiceRoutes } from './voice-routes.js';
+import { apiRoutes } from './api-routes.js';
+import { dtfsRoutes } from './dtfs-routes.js';
+import { monacoRoutes } from './monaco-routes.js';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+const corePackageRoot = join(__dirname, '..', '..');
+export async function createServer(options) {
+    const app = Fastify({ loggerInstance: options.logger.child({ scope: 'http' }) });
+    const log = options.logger;
+    const workspacePaths = getWorkspacePaths();
+    const windowManager = new WindowManagerService(join(getUserHomeDir('admin'), '.storage', 'window-state.json'));
+    // ─── Track the "current user" for the AI service ───────────────────────
+    // The AI service is currently a singleton (not per-user). We track the
+    // most recently authenticated WebSocket user so the AI can activate
+    // MiniApps on their behalf.
+    let currentWsUsername = null;
+    windowManager.activatePersistedMiniApps(async (miniAppId, launchArgs) => {
+        // During startup restore, use the admin user as the default owner.
+        // In practice, persisted windows will be re-associated when the user logs in.
+        await registry.activate(miniAppId, 'admin', { launchArgs });
+    });
+    // ─── Pending requests for action invocations brokered to the frontend ───
+    const pendingWindowActionRequests = new Map();
+    async function invokeWindowAction(windowId, actionName, actionParams) {
+        const requestId = `window-action-${Date.now()}-${Math.random().toString(36).slice(2)}`;
+        return new Promise((resolve, reject) => {
+            const timeout = setTimeout(() => {
+                pendingWindowActionRequests.delete(requestId);
+                reject(new Error(`Timed out waiting for action result: ${actionName}`));
+            }, 10000);
+            pendingWindowActionRequests.set(requestId, { resolve, reject, timeout });
+            broadcastRaw({
+                type: 'window:invoke_action',
+                requestId,
+                windowId,
+                actionName,
+                params: actionParams ?? null,
+            });
+        });
+    }
+    // ─── Pending requests for AI window commands sent to the frontend ───
+    const pendingAiCommandRequests = new Map();
+    async function sendAiCommand(command) {
+        const requestId = `ai-cmd-${Date.now()}-${Math.random().toString(36).slice(2)}`;
+        return new Promise((resolve, reject) => {
+            const timeout = setTimeout(() => {
+                pendingAiCommandRequests.delete(requestId);
+                reject(new Error(`Timed out waiting for AI command result: ${command.action}`));
+            }, 10000);
+            pendingAiCommandRequests.set(requestId, { resolve, reject, timeout });
+            broadcastRaw({
+                type: 'window:ai_command',
+                requestId,
+                ...command,
+            });
+        });
+    }
+    const piSessionService = await PiSessionService.create(workspacePaths, async (key) => getStoredPreference(key), windowManager, invokeWindowAction, sendAiCommand, () => currentWsUsername ?? 'admin', log.child({ scope: 'ai-session' }));
+    // ─── Plugins ──────────────────────────────────────────────────────────────
+    await app.register(fastifyCookie);
+    await app.register(fastifyWebsocket);
+    if (!options.dev) {
+        const frontendDir = join(__dirname, '..', 'frontend');
+        await app.register(fastifyStatic, {
+            root: frontendDir,
+            prefix: '/',
+            wildcard: false,
+        });
+    }
+    // ─── Auth middleware ──────────────────────────────────────────────────────
+    // Validate session cookie on every request except public routes.
+    const PUBLIC_ROUTES = new Set([
+        '/api/auth/login',
+        '/api/auth/me',
+        '/api/setup/status',
+        '/api/setup',
+        '/api/preferences/public',
+        '/api/ui/desktalk-theme.css',
+    ]);
+    app.addHook('onRequest', async (req, reply) => {
+        // Skip auth for public routes
+        if (PUBLIC_ROUTES.has(req.url))
+            return;
+        if (req.url.startsWith('/api/ui/') && req.url.endsWith('.js'))
+            return;
+        if (req.url.startsWith('/api/ui/fonts/'))
+            return;
+        if (req.url.startsWith('/api/miniapps/text-edit/monaco/'))
+            return;
+        // Skip auth for static file requests (non-API, non-WS, non-dtfs)
+        if (!req.url.startsWith('/api/') && !req.url.startsWith('/ws') && !req.url.startsWith('/@dtfs'))
+            return;
+        const token = req.cookies[COOKIE_NAME];
+        if (!token) {
+            reply.code(401);
+            reply.send({ error: 'Authentication required.' });
+            return;
+        }
+        const user = validateSession(token);
+        if (!user) {
+            reply.code(401);
+            reply.send({ error: 'Session expired or invalid.' });
+            return;
+        }
+        req.user = user;
+    });
+    // ─── Auth & Admin Routes ──────────────────────────────────────────────────
+    await app.register(authRoutes);
+    await app.register(adminRoutes, { prefix: '/api/admin' });
+    await app.register(wsRoutes, {
+        logger: log,
+        piSessionService,
+        windowManager,
+        pendingWindowActionRequests,
+        pendingAiCommandRequests,
+        setCurrentWsUsername: (username) => {
+            currentWsUsername = username;
+        },
+    });
+    await app.register(voiceRoutes, { logger: log });
+    await app.register(apiRoutes, {
+        corePackageRoot,
+        piSessionService,
+    });
+    await app.register(monacoRoutes);
+    await app.register(dtfsRoutes);
+    app.setNotFoundHandler(async (req, reply) => {
+        if (req.url.startsWith('/api/') || req.url.startsWith('/ws')) {
+            reply.code(404);
+            return { error: 'Not found' };
+        }
+        if (options.dev) {
+            reply.code(404);
+            return { error: 'Frontend is served by the Vite dev server in development mode.' };
+        }
+        return reply.sendFile('index.html');
+    });
+    await app.listen({ host: options.host, port: options.port });
+    return app;
+}
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAC5C,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAmB,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACtC,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAgBpD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAsB;IACvD,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACjF,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;IAC3B,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;IAC3C,MAAM,aAAa,GAAG,IAAI,oBAAoB,CAC5C,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAC/D,CAAC;IAEF,0EAA0E;IAC1E,uEAAuE;IACvE,oEAAoE;IACpE,4BAA4B;IAC5B,IAAI,iBAAiB,GAAkB,IAAI,CAAC;IAE5C,aAAa,CAAC,yBAAyB,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE;QACtE,mEAAmE;QACnE,8EAA8E;QAC9E,MAAM,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,MAAM,2BAA2B,GAAG,IAAI,GAAG,EAOxC,CAAC;IAEJ,KAAK,UAAU,kBAAkB,CAC/B,QAAgB,EAChB,UAAkB,EAClB,YAAsC;QAEtC,MAAM,SAAS,GAAG,iBAAiB,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAEvF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,2BAA2B,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC9C,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,UAAU,EAAE,CAAC,CAAC,CAAC;YAC1E,CAAC,EAAE,KAAK,CAAC,CAAC;YAEV,2BAA2B,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACzE,YAAY,CAAC;gBACX,IAAI,EAAE,sBAAsB;gBAC5B,SAAS;gBACT,QAAQ;gBACR,UAAU;gBACV,MAAM,EAAE,YAAY,IAAI,IAAI;aAC7B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,uEAAuE;IACvE,MAAM,wBAAwB,GAAG,IAAI,GAAG,EAOrC,CAAC;IAEJ,KAAK,UAAU,aAAa,CAAC,OAM5B;QACC,MAAM,SAAS,GAAG,UAAU,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAEhF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC3C,MAAM,CAAC,IAAI,KAAK,CAAC,4CAA4C,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAClF,CAAC,EAAE,KAAK,CAAC,CAAC;YAEV,wBAAwB,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACtE,YAAY,CAAC;gBACX,IAAI,EAAE,mBAAmB;gBACzB,SAAS;gBACT,GAAG,OAAO;aACX,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,MAAM,CACpD,cAAc,EACd,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,EACvC,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,GAAG,EAAE,CAAC,iBAAiB,IAAI,OAAO,EAClC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CACnC,CAAC;IAEF,6EAA6E;IAE7E,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAClC,MAAM,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAErC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjB,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QACtD,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE;YAChC,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,GAAG;YACX,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,iEAAiE;IAEjE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;QAC5B,iBAAiB;QACjB,cAAc;QACd,mBAAmB;QACnB,YAAY;QACZ,yBAAyB;QACzB,4BAA4B;KAC7B,CAAC,CAAC;IAEH,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC5C,8BAA8B;QAC9B,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAEvC,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO;QAEtE,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAAE,OAAO;QAEjD,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,iCAAiC,CAAC;YAAE,OAAO;QAElE,iEAAiE;QACjE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;YAC7F,OAAO;QAET,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAE7E,MAAM,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC/B,MAAM,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IAC1D,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE;QAC3B,MAAM,EAAE,GAAG;QACX,gBAAgB;QAChB,aAAa;QACb,2BAA2B;QAC3B,wBAAwB;QACxB,oBAAoB,EAAE,CAAC,QAAQ,EAAE,EAAE;YACjC,iBAAiB,GAAG,QAAQ,CAAC;QAC/B,CAAC;KACF,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACjD,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE;QAC5B,eAAe;QACf,gBAAgB;KACjB,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACjC,MAAM,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAE/B,GAAG,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC1C,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAChC,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,gEAAgE,EAAE,CAAC;QACrF,CAAC;QAED,OAAO,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/server/monaco-routes.d.ts

@@ -0,0 +1,3 @@
+import type { FastifyInstance } from 'fastify';
+export declare function monacoRoutes(app: FastifyInstance): Promise<void>;
+//# sourceMappingURL=monaco-routes.d.ts.map

package/dist/server/monaco-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"monaco-routes.d.ts","sourceRoot":"","sources":["../../src/server/monaco-routes.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAkB/C,wBAAsB,YAAY,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BtE"}

package/dist/server/monaco-routes.js

@@ -0,0 +1,45 @@
+import fastifyStatic from '@fastify/static';
+import { createRequire } from 'node:module';
+import { dirname, join } from 'node:path';
+const MONACO_WORKER_PATHS = {
+    editorWorkerService: 'vs/editor/editor.worker.js',
+    json: 'vs/language/json/json.worker.js',
+    css: 'vs/language/css/css.worker.js',
+    scss: 'vs/language/css/css.worker.js',
+    less: 'vs/language/css/css.worker.js',
+    html: 'vs/language/html/html.worker.js',
+    handlebars: 'vs/language/html/html.worker.js',
+    razor: 'vs/language/html/html.worker.js',
+    typescript: 'vs/language/typescript/ts.worker.js',
+    javascript: 'vs/language/typescript/ts.worker.js',
+};
+const MONACO_ASSET_PREFIX = '/api/miniapps/text-edit/monaco/assets/';
+const MONACO_WORKER_PREFIX = '/api/miniapps/text-edit/monaco/worker/';
+export async function monacoRoutes(app) {
+    const require = createRequire(import.meta.url);
+    const editorWorkerEntry = require.resolve('monaco-editor/esm/vs/editor/editor.worker.js');
+    const monacoEsmDir = join(dirname(editorWorkerEntry), '..', '..');
+    await app.register(fastifyStatic, {
+        root: monacoEsmDir,
+        prefix: MONACO_ASSET_PREFIX,
+        decorateReply: false,
+        cacheControl: true,
+        immutable: true,
+        maxAge: '1d',
+    });
+    app.get(`${MONACO_WORKER_PREFIX}:label`, async (req, reply) => {
+        const workerPath = MONACO_WORKER_PATHS[req.params.label];
+        if (!workerPath) {
+            reply.code(404);
+            return { error: 'Unknown Monaco worker' };
+        }
+        const bootstrap = [
+            `globalThis._VSCODE_FILE_ROOT = new URL(${JSON.stringify(MONACO_ASSET_PREFIX)}, globalThis.location.origin).toString();`,
+            `await import(new URL(${JSON.stringify(`${MONACO_ASSET_PREFIX}${workerPath}`)}, globalThis.location.origin).toString());`,
+        ].join('\n');
+        reply.header('Content-Type', 'application/javascript; charset=utf-8');
+        reply.header('Cache-Control', 'public, max-age=86400, immutable');
+        return reply.send(bootstrap);
+    });
+}
+//# sourceMappingURL=monaco-routes.js.map

package/dist/server/monaco-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"monaco-routes.js","sourceRoot":"","sources":["../../src/server/monaco-routes.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG1C,MAAM,mBAAmB,GAA2B;IAClD,mBAAmB,EAAE,4BAA4B;IACjD,IAAI,EAAE,iCAAiC;IACvC,GAAG,EAAE,+BAA+B;IACpC,IAAI,EAAE,+BAA+B;IACrC,IAAI,EAAE,+BAA+B;IACrC,IAAI,EAAE,iCAAiC;IACvC,UAAU,EAAE,iCAAiC;IAC7C,KAAK,EAAE,iCAAiC;IACxC,UAAU,EAAE,qCAAqC;IACjD,UAAU,EAAE,qCAAqC;CAClD,CAAC;AAEF,MAAM,mBAAmB,GAAG,wCAAwC,CAAC;AACrE,MAAM,oBAAoB,GAAG,wCAAwC,CAAC;AAEtE,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAoB;IACrD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC;IAC1F,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAElE,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE;QAChC,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,mBAAmB;QAC3B,aAAa,EAAE,KAAK;QACpB,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAgC,GAAG,oBAAoB,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC3F,MAAM,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QAC5C,CAAC;QAED,MAAM,SAAS,GAAG;YAChB,0CAA0C,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,2CAA2C;YACxH,wBAAwB,IAAI,CAAC,SAAS,CAAC,GAAG,mBAAmB,GAAG,UAAU,EAAE,CAAC,4CAA4C;SAC1H,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,uCAAuC,CAAC,CAAC;QACtE,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC;QAClE,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/voice-routes.d.ts

@@ -0,0 +1,7 @@
+import type { FastifyInstance } from 'fastify';
+import type pino from 'pino';
+export interface VoiceRoutesOptions {
+    logger: pino.Logger;
+}
+export declare function voiceRoutes(app: FastifyInstance, options: VoiceRoutesOptions): Promise<void>;
+//# sourceMappingURL=voice-routes.d.ts.map

package/dist/server/voice-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"voice-routes.d.ts","sourceRoot":"","sources":["../../src/server/voice-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAO7B,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;CACrB;AAqED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,IAAI,CAAC,CA+Gf"}