@desktalk/core 0.1.0-alpha.1

package/dist/services/theme-css.js

@@ -0,0 +1,213 @@
+/**
+ * Shared theme CSS generator — works in both Node.js (server) and browser (frontend).
+ *
+ * Produces the full `:root { --dt-* }` CSS token block from an accent color and
+ * theme mode. Uses `culori` for hex→OKLCH conversion; all other logic is pure math.
+ *
+ * This module has NO DOM dependency.
+ */
+import { converter, parse } from 'culori';
+const DEFAULT_ACCENT_COLOR = '#7c6ff7';
+const toOklch = converter('oklch');
+const SCALE = [
+    ['50', 0.98, 0.005],
+    ['100', 0.94, 0.01],
+    ['150', 0.88, 0.015],
+    ['200', 0.8, 0.02],
+    ['300', 0.7, 0.025],
+    ['400', 0.6, 0.03],
+    ['500', 0.5, 0.04],
+    ['600', 0.4, 0.03],
+    ['700', 0.32, 0.025],
+    ['800', 0.24, 0.03],
+    ['850', 0.2, 0.035],
+    ['900', 0.16, 0.04],
+    ['950', 0.12, 0.05],
+];
+const STATUS_HUES = {
+    danger: 25,
+    success: 155,
+    warning: 80,
+    info: 250,
+};
+export const DEFAULT_THEME_PREFERENCES = {
+    accentColor: DEFAULT_ACCENT_COLOR,
+    theme: 'dark',
+};
+function clamp(value, min, max) {
+    return Math.min(Math.max(value, min), max);
+}
+function wrapHue(value) {
+    const wrapped = value % 360;
+    return wrapped < 0 ? wrapped + 360 : wrapped;
+}
+function formatNumber(value) {
+    return value
+        .toFixed(3)
+        .replace(/\.0+$/, '')
+        .replace(/(\.\d*?)0+$/, '$1');
+}
+function oklchValue(lightness, chroma, hue, alpha) {
+    const base = `oklch(${formatNumber(clamp(lightness, 0, 1))} ${formatNumber(clamp(chroma, 0, 0.4))} ${formatNumber(wrapHue(hue))}`;
+    return alpha === undefined ? `${base})` : `${base} / ${formatNumber(clamp(alpha, 0, 1))})`;
+}
+function normalizeMode(value) {
+    return value === 'dark' ? 'dark' : 'light';
+}
+function getAccentOklch(accentColor) {
+    const parsed = parse(accentColor) ?? parse(DEFAULT_ACCENT_COLOR);
+    const converted = parsed ? toOklch(parsed) : null;
+    if (!converted) {
+        return { l: 0.623, c: 0.234, h: 286 };
+    }
+    return {
+        l: clamp(converted.l ?? 0.623, 0, 1),
+        c: clamp(converted.c ?? 0.234, 0, 0.37),
+        h: wrapHue(converted.h ?? 286),
+    };
+}
+/**
+ * Generate the full `:root { --dt-* }` CSS text for the given theme preferences.
+ *
+ * This is the single source of truth for the DeskTalk color system.
+ */
+export function generateThemeCSS(preferences) {
+    const mode = normalizeMode(preferences.theme);
+    const dark = mode === 'dark';
+    const { l, c, h } = getAccentOklch(preferences.accentColor);
+    const lines = [];
+    const put = (name, value) => {
+        lines.push(`  ${name}: ${value};`);
+    };
+    const scaleVar = (name) => `var(--dt-scale-${name})`;
+    put('--dt-accent-h', formatNumber(h));
+    put('--dt-accent-c', formatNumber(c));
+    put('--dt-accent-l', formatNumber(l));
+    put('--dt-mode-sign', dark ? '1' : '-1');
+    for (const [name, lightness, chroma] of SCALE) {
+        put(`--dt-scale-${name}`, oklchValue(lightness, chroma, h));
+    }
+    put('--dt-bg', dark ? scaleVar('950') : scaleVar('50'));
+    put('--dt-bg-subtle', dark ? scaleVar('900') : scaleVar('100'));
+    put('--dt-surface', dark ? scaleVar('850') : scaleVar('100'));
+    put('--dt-surface-hover', dark ? scaleVar('800') : scaleVar('150'));
+    put('--dt-surface-active', dark ? scaleVar('700') : scaleVar('200'));
+    put('--dt-overlay', dark ? oklchValue(0.16, 0.04, h, 0.85) : oklchValue(0.98, 0.005, h, 0.85));
+    put('--dt-text', dark ? scaleVar('50') : scaleVar('950'));
+    put('--dt-text-secondary', dark ? scaleVar('300') : scaleVar('600'));
+    put('--dt-text-muted', dark ? scaleVar('400') : scaleVar('500'));
+    put('--dt-border', dark ? scaleVar('800') : scaleVar('200'));
+    put('--dt-border-subtle', dark ? oklchValue(0.2, 0.035, h, 0.6) : oklchValue(0.88, 0.015, h, 0.6));
+    put('--dt-border-strong', dark ? scaleVar('700') : scaleVar('300'));
+    const accentHoverShift = dark ? 0.05 : -0.05;
+    const accentActiveShift = dark ? 0.1 : -0.1;
+    put('--dt-accent', oklchValue(l, c, h));
+    put('--dt-accent-hover', oklchValue(l + accentHoverShift, c, h));
+    put('--dt-accent-active', oklchValue(l + accentActiveShift, c, h));
+    put('--dt-accent-subtle', oklchValue(l, c, h, 0.15));
+    put('--dt-accent-ghost', oklchValue(l, c, h, 0.08));
+    put('--dt-text-on-accent', l > 0.6 ? scaleVar('950') : scaleVar('50'));
+    for (const [name, hue] of Object.entries(STATUS_HUES)) {
+        const lightness = dark ? 0.7 : 0.45;
+        put(`--dt-${name}`, oklchValue(lightness, 0.18, hue));
+        put(`--dt-${name}-subtle`, oklchValue(lightness, 0.18, hue, 0.15));
+    }
+    put('--dt-dock-bg', 'var(--dt-overlay)');
+    put('--dt-actions-bar-bg', 'var(--dt-bg-subtle)');
+    put('--dt-window-chrome', 'var(--dt-surface)');
+    put('--dt-window-body', 'var(--dt-bg)');
+    put('--dt-info-panel-bg', 'var(--dt-bg-subtle)');
+    put('--dt-wallpaper', dark
+        ? `linear-gradient(135deg, ${oklchValue(0.25, 0.08, h)} 0%, ${oklchValue(0.3, 0.1, h)} 50%, ${oklchValue(0.4, 0.04, h + 30)} 100%)`
+        : `linear-gradient(135deg, ${oklchValue(0.85, 0.06, h)} 0%, ${oklchValue(0.8, 0.08, h)} 50%, ${oklchValue(0.75, 0.03, h + 30)} 100%)`);
+    put('--dt-glass', dark ? oklchValue(0.2, 0.035, h, 0.7) : oklchValue(0.94, 0.01, h, 0.7));
+    put('--dt-glass-border', dark ? oklchValue(0.98, 0.005, h, 0.1) : oklchValue(0.12, 0.05, h, 0.12));
+    put('--dt-glass-highlight', dark ? oklchValue(0.98, 0.005, h, 0.05) : oklchValue(0.98, 0.005, h, 0.45));
+    put('--dt-shadow-color', dark ? oklchValue(0.12, 0.05, h, 0.4) : oklchValue(0.12, 0.05, h, 0.15));
+    return `:root {\n${lines.join('\n')}\n}`;
+}
+/**
+ * Base stylesheet for AI-generated HTML.
+ *
+ * Provides sensible defaults for body, headings, tables, cards, buttons, and
+ * code blocks — all using semantic `--dt-*` tokens. This ensures generated HTML
+ * looks native to DeskTalk without the AI needing to emit its own reset/base styles.
+ */
+export const HTML_BASE_STYLESHEET = `
+* { margin: 0; padding: 0; box-sizing: border-box; }
+body {
+  font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif;
+  background: var(--dt-bg);
+  color: var(--dt-text);
+  line-height: 1.6;
+  padding: 24px;
+}
+h1, h2, h3, h4, h5, h6 {
+  font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif !important;
+  color: var(--dt-text) !important;
+  line-height: 1.3 !important;
+  margin-top: 0 !important;
+  margin-bottom: 0.5em !important;
+  font-style: normal !important;
+  text-transform: none !important;
+  letter-spacing: -0.01em !important;
+}
+h1 { font-size: 2rem !important; font-weight: 700 !important; letter-spacing: -0.02em !important; }
+h2 { font-size: 1.5rem !important; font-weight: 600 !important; }
+h3 { font-size: 1.25rem !important; font-weight: 600 !important; }
+h4 { font-size: 1.125rem !important; font-weight: 600 !important; }
+h5 { font-size: 1rem !important; font-weight: 600 !important; }
+h6 { font-size: 0.875rem !important; font-weight: 600 !important; text-transform: uppercase !important; letter-spacing: 0.05em !important; }
+p {
+  font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif !important;
+  font-size: 1rem !important;
+  font-weight: 400 !important;
+  line-height: 1.6 !important;
+  color: var(--dt-text-secondary) !important;
+  margin-top: 0 !important;
+  margin-bottom: 1em !important;
+}
+a { color: var(--dt-accent); text-decoration: none; }
+a:hover { color: var(--dt-accent-hover); text-decoration: underline; }
+hr {
+  border: none;
+  border-top: 1px solid var(--dt-border);
+  margin: 1.5em 0;
+}
+table {
+  width: 100%;
+  border-collapse: collapse;
+  margin-bottom: 1em;
+}
+th, td {
+  padding: 8px 12px;
+  text-align: left;
+  border-bottom: 1px solid var(--dt-border);
+}
+th {
+  background: var(--dt-surface);
+  color: var(--dt-text);
+  font-weight: 600;
+}
+tr:hover td { background: var(--dt-surface-hover); }
+code {
+  font-family: 'SF Mono', 'Fira Code', 'Fira Mono', Menlo, Consolas, monospace;
+  background: var(--dt-surface);
+  padding: 2px 6px;
+  border-radius: 4px;
+  font-size: 0.875em;
+}
+pre {
+  background: var(--dt-surface);
+  border: 1px solid var(--dt-border);
+  border-radius: 8px;
+  padding: 16px;
+  overflow-x: auto;
+  margin-bottom: 1em;
+}
+pre code { background: none; padding: 0; }
+.text-muted { color: var(--dt-text-muted); }
+.text-secondary { color: var(--dt-text-secondary); }
+.accent-bg { background: var(--dt-accent-subtle); }
+`.trim();
+//# sourceMappingURL=theme-css.js.map

package/dist/services/theme-css.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"theme-css.js","sourceRoot":"","sources":["../../src/services/theme-css.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAS1C,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAEvC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;AAEnC,MAAM,KAAK,GAAoC;IAC7C,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC;IACnB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;IACnB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;IACpB,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC;IAClB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC;IACnB,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC;IAClB,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC;IAClB,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC;IAClB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;IACpB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;IACnB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC;IACnB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;IACnB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;CACpB,CAAC;AAEF,MAAM,WAAW,GAAG;IAClB,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,GAAG;IACZ,OAAO,EAAE,EAAE;IACX,IAAI,EAAE,GAAG;CACD,CAAC;AAEX,MAAM,CAAC,MAAM,yBAAyB,GAAqB;IACzD,WAAW,EAAE,oBAAoB;IACjC,KAAK,EAAE,MAAM;CACd,CAAC;AAEF,SAAS,KAAK,CAAC,KAAa,EAAE,GAAW,EAAE,GAAW;IACpD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,MAAM,OAAO,GAAG,KAAK,GAAG,GAAG,CAAC;IAC5B,OAAO,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK;SACT,OAAO,CAAC,CAAC,CAAC;SACV,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB,EAAE,MAAc,EAAE,GAAW,EAAE,KAAc;IAChF,MAAM,IAAI,GAAG,SAAS,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;IAClI,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AAC7F,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB;IAC9C,OAAO,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;AAC7C,CAAC;AAED,SAAS,cAAc,CAAC,WAAmB;IACzC,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAElD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC;IACxC,CAAC;IAED,OAAO;QACL,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC;QACvC,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,GAAG,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAA6B;IAC5D,MAAM,IAAI,GAAG,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,KAAK,MAAM,CAAC;IAC7B,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,cAAc,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,KAAsB,EAAE,EAAE;QACnD,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,kBAAkB,IAAI,GAAG,CAAC;IAE7D,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEzC,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QAC9C,GAAG,CAAC,cAAc,IAAI,EAAE,EAAE,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAChE,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACrE,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAE/F,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1D,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACrE,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAEjE,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,GAAG,CACD,oBAAoB,EACpB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CACxE,CAAC;IACF,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAEpE,MAAM,gBAAgB,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,MAAM,iBAAiB,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5C,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxC,GAAG,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC,GAAG,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjE,GAAG,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC,GAAG,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnE,GAAG,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACrD,GAAG,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACpD,GAAG,CAAC,qBAAqB,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAEvE,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACpC,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACtD,GAAG,CAAC,QAAQ,IAAI,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,GAAG,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;IACzC,GAAG,CAAC,qBAAqB,EAAE,qBAAqB,CAAC,CAAC;IAClD,GAAG,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,CAAC;IAC/C,GAAG,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;IACxC,GAAG,CAAC,oBAAoB,EAAE,qBAAqB,CAAC,CAAC;IACjD,GAAG,CACD,gBAAgB,EAChB,IAAI;QACF,CAAC,CAAC,2BAA2B,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,SAAS,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ;QACnI,CAAC,CAAC,2BAA2B,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CACxI,CAAC;IAEF,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1F,GAAG,CACD,mBAAmB,EACnB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CACzE,CAAC;IACF,GAAG,CACD,sBAAsB,EACtB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAC3E,CAAC;IACF,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAElG,OAAO,YAAY,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4EnC,CAAC,IAAI,EAAE,CAAC"}

package/dist/services/user-db.d.ts

@@ -0,0 +1,69 @@
+/**
+ * User database backed by SQLite (better-sqlite3).
+ *
+ * Manages the `users` and `sessions` tables in `<data>/users.db`.
+ * Passwords are hashed with bcrypt (bcryptjs). Sessions are opaque
+ * random tokens stored server-side.
+ */
+export type UserRole = 'admin' | 'user';
+export interface UserRecord {
+    username: string;
+    display_name: string;
+    password: string;
+    role: UserRole;
+    created_at: string;
+    updated_at: string;
+}
+export interface SessionRecord {
+    token: string;
+    username: string;
+    expires_at: string;
+    created_at: string;
+}
+/** Public user info returned to clients (no password hash). */
+export interface PublicUser {
+    username: string;
+    displayName: string;
+    role: UserRole;
+    createdAt: string;
+    updatedAt: string;
+}
+/**
+ * Open (or create) the users database at `<dataDir>/users.db`.
+ * Creates tables if they don't exist. No default accounts are seeded —
+ * the admin account is created during the onboarding flow.
+ */
+export declare function initUserDb(dataDir: string): void;
+/** Close the database (for graceful shutdown). */
+export declare function closeUserDb(): void;
+/** Find a user by username, or undefined if not found. */
+export declare function findUser(username: string): PublicUser | undefined;
+/** List all users (public info only). */
+export declare function listUsers(): PublicUser[];
+/** Create a new user. Throws if username already exists. */
+export declare function createUser(username: string, password: string, role?: UserRole, displayName?: string): PublicUser;
+/** Delete a user and all their sessions (CASCADE). */
+export declare function deleteUser(username: string): boolean;
+/** Update a user's role. */
+export declare function updateUserRole(username: string, role: UserRole): boolean;
+/** Update a user's password (caller must verify the old password first). */
+export declare function updateUserPassword(username: string, newPassword: string): boolean;
+/**
+ * Check whether any admin user exists in the database.
+ * Used to decide if the system needs the onboarding flow (first-time setup).
+ */
+export declare function hasAdmin(): boolean;
+/**
+ * Verify a plaintext password against the stored bcrypt hash.
+ * Returns the public user record on success, or undefined on failure.
+ */
+export declare function verifyPassword(username: string, password: string): PublicUser | undefined;
+/** Create a new session for the given user. Returns the token. */
+export declare function createSession(username: string): string;
+/** Validate a session token. Returns the username if valid, or undefined. */
+export declare function validateSession(token: string): PublicUser | undefined;
+/** Delete a session (logout). */
+export declare function deleteSession(token: string): void;
+/** Delete all sessions for a user. */
+export declare function deleteUserSessions(username: string): void;
+//# sourceMappingURL=user-db.d.ts.map

package/dist/services/user-db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-db.d.ts","sourceRoot":"","sources":["../../src/services/user-db.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;AAExC,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,+DAA+D;AAC/D,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAYD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CA+BhD;AAUD,kDAAkD;AAClD,wBAAgB,WAAW,IAAI,IAAI,CAKlC;AAcD,0DAA0D;AAC1D,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAKjE;AAED,yCAAyC;AACzC,wBAAgB,SAAS,IAAI,UAAU,EAAE,CAGxC;AAED,4DAA4D;AAC5D,wBAAgB,UAAU,CACxB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE,QAAiB,EACvB,WAAW,CAAC,EAAE,MAAM,GACnB,UAAU,CAUZ;AAED,sDAAsD;AACtD,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGpD;AAED,4BAA4B;AAC5B,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAMxE;AAED,4EAA4E;AAC5E,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAOjF;AAED;;;GAGG;AACH,wBAAgB,QAAQ,IAAI,OAAO,CAKlC;AAID;;;GAGG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAOzF;AAID,kEAAkE;AAClE,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAYtD;AAED,6EAA6E;AAC7E,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAarE;AAED,iCAAiC;AACjC,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAEjD;AAED,sCAAsC;AACtC,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAEzD"}

package/dist/services/user-db.js

@@ -0,0 +1,175 @@
+/**
+ * User database backed by SQLite (better-sqlite3).
+ *
+ * Manages the `users` and `sessions` tables in `<data>/users.db`.
+ * Passwords are hashed with bcrypt (bcryptjs). Sessions are opaque
+ * random tokens stored server-side.
+ */
+import Database from 'better-sqlite3';
+import bcrypt from 'bcryptjs';
+import { randomBytes } from 'node:crypto';
+import { join } from 'node:path';
+// ─── Constants ───────────────────────────────────────────────────────────────
+const BCRYPT_ROUNDS = 12;
+const SESSION_TOKEN_BYTES = 32;
+const SESSION_LIFETIME_MS = 7 * 24 * 60 * 60 * 1000; // 7 days
+// ─── Database ────────────────────────────────────────────────────────────────
+let db = null;
+/**
+ * Open (or create) the users database at `<dataDir>/users.db`.
+ * Creates tables if they don't exist. No default accounts are seeded —
+ * the admin account is created during the onboarding flow.
+ */
+export function initUserDb(dataDir) {
+    const dbPath = join(dataDir, 'users.db');
+    db = new Database(dbPath);
+    // Enable WAL mode for better concurrent read performance
+    db.pragma('journal_mode = WAL');
+    db.pragma('foreign_keys = ON');
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS users (
+      username     TEXT PRIMARY KEY,
+      display_name TEXT NOT NULL,
+      password     TEXT NOT NULL,
+      role         TEXT NOT NULL DEFAULT 'user',
+      created_at   TEXT NOT NULL,
+      updated_at   TEXT NOT NULL
+    );
+
+    CREATE TABLE IF NOT EXISTS sessions (
+      token      TEXT PRIMARY KEY,
+      username   TEXT NOT NULL REFERENCES users(username) ON DELETE CASCADE,
+      expires_at TEXT NOT NULL,
+      created_at TEXT NOT NULL
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_sessions_username ON sessions(username);
+    CREATE INDEX IF NOT EXISTS idx_sessions_expires_at ON sessions(expires_at);
+  `);
+    // No default admin account is seeded. The admin is created during
+    // the onboarding flow (POST /api/setup).
+}
+/** Get the raw database instance. Throws if not initialized. */
+function getDb() {
+    if (!db) {
+        throw new Error('User database not initialized. Call initUserDb() first.');
+    }
+    return db;
+}
+/** Close the database (for graceful shutdown). */
+export function closeUserDb() {
+    if (db) {
+        db.close();
+        db = null;
+    }
+}
+// ─── User CRUD ───────────────────────────────────────────────────────────────
+function toPublicUser(row) {
+    return {
+        username: row.username,
+        displayName: row.display_name,
+        role: row.role,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+    };
+}
+/** Find a user by username, or undefined if not found. */
+export function findUser(username) {
+    const row = getDb().prepare('SELECT * FROM users WHERE username = ?').get(username);
+    return row ? toPublicUser(row) : undefined;
+}
+/** List all users (public info only). */
+export function listUsers() {
+    const rows = getDb().prepare('SELECT * FROM users ORDER BY created_at ASC').all();
+    return rows.map(toPublicUser);
+}
+/** Create a new user. Throws if username already exists. */
+export function createUser(username, password, role = 'user', displayName) {
+    const now = new Date().toISOString();
+    const hash = bcrypt.hashSync(password, BCRYPT_ROUNDS);
+    getDb()
+        .prepare(`INSERT INTO users (username, display_name, password, role, created_at, updated_at)
+       VALUES (?, ?, ?, ?, ?, ?)`)
+        .run(username, displayName ?? username, hash, role, now, now);
+    return findUser(username);
+}
+/** Delete a user and all their sessions (CASCADE). */
+export function deleteUser(username) {
+    const result = getDb().prepare('DELETE FROM users WHERE username = ?').run(username);
+    return result.changes > 0;
+}
+/** Update a user's role. */
+export function updateUserRole(username, role) {
+    const now = new Date().toISOString();
+    const result = getDb()
+        .prepare('UPDATE users SET role = ?, updated_at = ? WHERE username = ?')
+        .run(role, now, username);
+    return result.changes > 0;
+}
+/** Update a user's password (caller must verify the old password first). */
+export function updateUserPassword(username, newPassword) {
+    const now = new Date().toISOString();
+    const hash = bcrypt.hashSync(newPassword, BCRYPT_ROUNDS);
+    const result = getDb()
+        .prepare('UPDATE users SET password = ?, updated_at = ? WHERE username = ?')
+        .run(hash, now, username);
+    return result.changes > 0;
+}
+/**
+ * Check whether any admin user exists in the database.
+ * Used to decide if the system needs the onboarding flow (first-time setup).
+ */
+export function hasAdmin() {
+    const row = getDb().prepare("SELECT COUNT(*) AS cnt FROM users WHERE role = 'admin'").get();
+    return row.cnt > 0;
+}
+// ─── Password verification ──────────────────────────────────────────────────
+/**
+ * Verify a plaintext password against the stored bcrypt hash.
+ * Returns the public user record on success, or undefined on failure.
+ */
+export function verifyPassword(username, password) {
+    const row = getDb().prepare('SELECT * FROM users WHERE username = ?').get(username);
+    if (!row)
+        return undefined;
+    const valid = bcrypt.compareSync(password, row.password);
+    return valid ? toPublicUser(row) : undefined;
+}
+// ─── Sessions ────────────────────────────────────────────────────────────────
+/** Create a new session for the given user. Returns the token. */
+export function createSession(username) {
+    const token = randomBytes(SESSION_TOKEN_BYTES).toString('hex');
+    const now = new Date();
+    const expiresAt = new Date(now.getTime() + SESSION_LIFETIME_MS);
+    getDb()
+        .prepare('INSERT INTO sessions (token, username, expires_at, created_at) VALUES (?, ?, ?, ?)')
+        .run(token, username, expiresAt.toISOString(), now.toISOString());
+    // Prune expired sessions opportunistically
+    pruneExpiredSessions();
+    return token;
+}
+/** Validate a session token. Returns the username if valid, or undefined. */
+export function validateSession(token) {
+    const row = getDb().prepare('SELECT * FROM sessions WHERE token = ?').get(token);
+    if (!row)
+        return undefined;
+    // Check expiration
+    if (new Date(row.expires_at) <= new Date()) {
+        getDb().prepare('DELETE FROM sessions WHERE token = ?').run(token);
+        return undefined;
+    }
+    return findUser(row.username);
+}
+/** Delete a session (logout). */
+export function deleteSession(token) {
+    getDb().prepare('DELETE FROM sessions WHERE token = ?').run(token);
+}
+/** Delete all sessions for a user. */
+export function deleteUserSessions(username) {
+    getDb().prepare('DELETE FROM sessions WHERE username = ?').run(username);
+}
+/** Remove expired session rows. */
+function pruneExpiredSessions() {
+    getDb().prepare('DELETE FROM sessions WHERE expires_at <= ?').run(new Date().toISOString());
+}
+//# sourceMappingURL=user-db.js.map

package/dist/services/user-db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-db.js","sourceRoot":"","sources":["../../src/services/user-db.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,MAAM,MAAM,UAAU,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA+BjC,gFAAgF;AAEhF,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAE9D,gFAAgF;AAEhF,IAAI,EAAE,GAA6B,IAAI,CAAC;AAExC;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACzC,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE1B,yDAAyD;IACzD,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAChC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAE/B,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;GAmBP,CAAC,CAAC;IAEH,kEAAkE;IAClE,yCAAyC;AAC3C,CAAC;AAED,gEAAgE;AAChE,SAAS,KAAK;IACZ,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,WAAW;IACzB,IAAI,EAAE,EAAE,CAAC;QACP,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,EAAE,GAAG,IAAI,CAAC;IACZ,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF,SAAS,YAAY,CAAC,GAAe;IACnC,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,IAAI,EAAE,GAAG,CAAC,IAAgB;QAC1B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAErE,CAAC;IACd,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,SAAS;IACvB,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,EAAkB,CAAC;IAClG,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAChC,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,UAAU,CACxB,QAAgB,EAChB,QAAgB,EAChB,OAAiB,MAAM,EACvB,WAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACtD,KAAK,EAAE;SACJ,OAAO,CACN;iCAC2B,CAC5B;SACA,GAAG,CAAC,QAAQ,EAAE,WAAW,IAAI,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAChE,OAAO,QAAQ,CAAC,QAAQ,CAAE,CAAC;AAC7B,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,MAAM,MAAM,GAAG,KAAK,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrF,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,4BAA4B;AAC5B,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,IAAc;IAC7D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,KAAK,EAAE;SACnB,OAAO,CAAC,8DAA8D,CAAC;SACvE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,WAAmB;IACtE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,KAAK,EAAE;SACnB,OAAO,CAAC,kEAAkE,CAAC;SAC3E,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ;IACtB,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC,OAAO,CAAC,wDAAwD,CAAC,CAAC,GAAG,EAExF,CAAC;IACF,OAAO,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,QAAgB;IAC/D,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAErE,CAAC;IACd,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,gFAAgF;AAEhF,kEAAkE;AAClE,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,mBAAmB,CAAC,CAAC;IAChE,KAAK,EAAE;SACJ,OAAO,CAAC,oFAAoF,CAAC;SAC7F,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IAEpE,2CAA2C;IAC3C,oBAAoB,EAAE,CAAC;IAEvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,KAAK,CAElE,CAAC;IACd,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAE3B,mBAAmB;IACnB,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;QAC3C,KAAK,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED,iCAAiC;AACjC,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,KAAK,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,KAAK,EAAE,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC3E,CAAC;AAED,mCAAmC;AACnC,SAAS,oBAAoB;IAC3B,KAAK,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AAC9F,CAAC"}

package/dist/services/voice/audio-format.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Create a minimal WAV header for PCM s16le audio.
+ */
+export declare function createWavBuffer(pcmBuffer: Buffer, sampleRate: number): Buffer;
+//# sourceMappingURL=audio-format.d.ts.map

package/dist/services/voice/audio-format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audio-format.d.ts","sourceRoot":"","sources":["../../../src/services/voice/audio-format.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAwB7E"}

package/dist/services/voice/audio-format.js

@@ -0,0 +1,27 @@
+/**
+ * Create a minimal WAV header for PCM s16le audio.
+ */
+export function createWavBuffer(pcmBuffer, sampleRate) {
+    const numChannels = 1;
+    const bitsPerSample = 16;
+    const byteRate = sampleRate * numChannels * (bitsPerSample / 8);
+    const blockAlign = numChannels * (bitsPerSample / 8);
+    const dataSize = pcmBuffer.length;
+    const headerSize = 44;
+    const header = Buffer.alloc(headerSize);
+    header.write('RIFF', 0);
+    header.writeUInt32LE(36 + dataSize, 4);
+    header.write('WAVE', 8);
+    header.write('fmt ', 12);
+    header.writeUInt32LE(16, 16);
+    header.writeUInt16LE(1, 20);
+    header.writeUInt16LE(numChannels, 22);
+    header.writeUInt32LE(sampleRate, 24);
+    header.writeUInt32LE(byteRate, 28);
+    header.writeUInt16LE(blockAlign, 32);
+    header.writeUInt16LE(bitsPerSample, 34);
+    header.write('data', 36);
+    header.writeUInt32LE(dataSize, 40);
+    return Buffer.concat([header, pcmBuffer]);
+}
+//# sourceMappingURL=audio-format.js.map

package/dist/services/voice/audio-format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audio-format.js","sourceRoot":"","sources":["../../../src/services/voice/audio-format.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,UAAkB;IACnE,MAAM,WAAW,GAAG,CAAC,CAAC;IACtB,MAAM,aAAa,GAAG,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,UAAU,GAAG,WAAW,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,WAAW,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC;IAClC,MAAM,UAAU,GAAG,EAAE,CAAC;IAEtB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxB,MAAM,CAAC,aAAa,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC;IACvC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxB,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzB,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7B,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5B,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACtC,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,CAAC,aAAa,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzB,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAEnC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAC5C,CAAC"}

package/dist/services/voice/azure-openai-whisper-adapter.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Azure OpenAI Whisper STT adapter.
+ *
+ * Uses the Azure OpenAI audio transcriptions endpoint with deployment-based
+ * routing and api-key authentication.
+ */
+import type { SttAdapter, SttTranscript } from './stt-adapter.js';
+export declare class AzureOpenAIWhisperAdapter implements SttAdapter {
+    readonly name = "azure-openai-whisper";
+    private apiKey;
+    private endpoint;
+    private deployment;
+    private apiVersion;
+    constructor(options: {
+        apiKey: string;
+        endpoint: string;
+        deployment: string;
+        apiVersion?: string;
+    });
+    transcribe(audioBuffer: Buffer, sampleRate: number, language?: string): Promise<SttTranscript>;
+    close(): void;
+}
+//# sourceMappingURL=azure-openai-whisper-adapter.d.ts.map

package/dist/services/voice/azure-openai-whisper-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"azure-openai-whisper-adapter.d.ts","sourceRoot":"","sources":["../../../src/services/voice/azure-openai-whisper-adapter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAO/D,qBAAa,yBAA0B,YAAW,UAAU;IAC1D,QAAQ,CAAC,IAAI,0BAA0B;IACvC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,UAAU,CAAS;gBAEf,OAAO,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB;IAOK,UAAU,CACd,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,aAAa,CAAC;IAsDzB,KAAK,IAAI,IAAI;CAGd"}

package/dist/services/voice/azure-openai-whisper-adapter.js

@@ -0,0 +1,60 @@
+/**
+ * Azure OpenAI Whisper STT adapter.
+ *
+ * Uses the Azure OpenAI audio transcriptions endpoint with deployment-based
+ * routing and api-key authentication.
+ */
+import { createWavBuffer } from './audio-format.js';
+function trimTrailingSlash(value) {
+    return value.replace(/\/+$/, '');
+}
+export class AzureOpenAIWhisperAdapter {
+    name = 'azure-openai-whisper';
+    apiKey;
+    endpoint;
+    deployment;
+    apiVersion;
+    constructor(options) {
+        this.apiKey = options.apiKey;
+        this.endpoint = trimTrailingSlash(options.endpoint);
+        this.deployment = options.deployment;
+        this.apiVersion = options.apiVersion ?? '2024-06-01';
+    }
+    async transcribe(audioBuffer, sampleRate, language) {
+        const wavBuffer = createWavBuffer(audioBuffer, sampleRate);
+        const durationMs = Math.round((audioBuffer.length / 2 / sampleRate) * 1000);
+        const boundary = `----DeskTalkBoundary${Date.now()}`;
+        const parts = [];
+        parts.push(Buffer.from(`--${boundary}\r\nContent-Disposition: form-data; name="response_format"\r\n\r\njson\r\n`));
+        // language field (ISO-639-1 code, e.g. 'en', 'zh')
+        if (language) {
+            parts.push(Buffer.from(`--${boundary}\r\nContent-Disposition: form-data; name="language"\r\n\r\n${language}\r\n`));
+        }
+        parts.push(Buffer.from(`--${boundary}\r\nContent-Disposition: form-data; name="file"; filename="audio.wav"\r\nContent-Type: audio/wav\r\n\r\n`));
+        parts.push(wavBuffer);
+        parts.push(Buffer.from(`\r\n--${boundary}--\r\n`));
+        const body = Buffer.concat(parts);
+        const url = `${this.endpoint}/openai/deployments/${encodeURIComponent(this.deployment)}/audio/transcriptions?api-version=${encodeURIComponent(this.apiVersion)}`;
+        const response = await fetch(url, {
+            method: 'POST',
+            headers: {
+                'api-key': this.apiKey,
+                'Content-Type': `multipart/form-data; boundary=${boundary}`,
+            },
+            body,
+        });
+        if (!response.ok) {
+            const errorText = await response.text();
+            throw new Error(`Azure OpenAI Whisper API error (${response.status}): ${errorText}`);
+        }
+        const result = (await response.json());
+        return {
+            text: result.text.trim(),
+            durationMs,
+        };
+    }
+    close() {
+        // No persistent resources to clean up
+    }
+}
+//# sourceMappingURL=azure-openai-whisper-adapter.js.map

package/dist/services/voice/azure-openai-whisper-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"azure-openai-whisper-adapter.js","sourceRoot":"","sources":["../../../src/services/voice/azure-openai-whisper-adapter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,OAAO,yBAAyB;IAC3B,IAAI,GAAG,sBAAsB,CAAC;IAC/B,MAAM,CAAS;IACf,QAAQ,CAAS;IACjB,UAAU,CAAS;IACnB,UAAU,CAAS;IAE3B,YAAY,OAKX;QACC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,YAAY,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,UAAU,CACd,WAAmB,EACnB,UAAkB,EAClB,QAAiB;QAEjB,MAAM,SAAS,GAAG,eAAe,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,uBAAuB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACrD,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,IAAI,CACT,KAAK,QAAQ,4EAA4E,CAC1F,CACF,CAAC;QAEF,mDAAmD;QACnD,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,IAAI,CACT,KAAK,QAAQ,8DAA8D,QAAQ,MAAM,CAC1F,CACF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,IAAI,CACT,KAAK,QAAQ,0GAA0G,CACxH,CACF,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,QAAQ,QAAQ,CAAC,CAAC,CAAC;QAEnD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,uBAAuB,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,qCAAqC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAEjK,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,SAAS,EAAE,IAAI,CAAC,MAAM;gBACtB,cAAc,EAAE,iCAAiC,QAAQ,EAAE;aAC5D;YACD,IAAI;SACL,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,CAAC,MAAM,MAAM,SAAS,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqB,CAAC;QAE3D,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE;YACxB,UAAU;SACX,CAAC;IACJ,CAAC;IAED,KAAK;QACH,sCAAsC;IACxC,CAAC;CACF"}

package/dist/services/voice/openai-whisper-adapter.d.ts

@@ -0,0 +1,22 @@
+/**
+ * OpenAI Whisper STT adapter.
+ *
+ * Uses the /v1/audio/transcriptions endpoint to transcribe complete
+ * audio buffers. Audio is sent as WAV (PCM s16le, 16kHz, mono) since
+ * Whisper requires a file-like format.
+ */
+import type { SttAdapter, SttTranscript } from './stt-adapter.js';
+export declare class OpenAIWhisperAdapter implements SttAdapter {
+    readonly name = "openai-whisper";
+    private apiKey;
+    private model;
+    private baseUrl;
+    constructor(options: {
+        apiKey: string;
+        model?: string;
+        baseUrl?: string;
+    });
+    transcribe(audioBuffer: Buffer, sampleRate: number, language?: string): Promise<SttTranscript>;
+    close(): void;
+}
+//# sourceMappingURL=openai-whisper-adapter.d.ts.map

package/dist/services/voice/openai-whisper-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-whisper-adapter.d.ts","sourceRoot":"","sources":["../../../src/services/voice/openai-whisper-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAG/D,qBAAa,oBAAqB,YAAW,UAAU;IACrD,QAAQ,CAAC,IAAI,oBAAoB;IACjC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE;IAMnE,UAAU,CACd,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,aAAa,CAAC;IAiEzB,KAAK,IAAI,IAAI;CAGd"}