@fayz-ai/plugin-scribe 0.10.0

package/dist/types.d.ts

@@ -0,0 +1,266 @@
+/**
+ * SERVER-side session state. Advances only on durable facts: a segment that
+ * reached Storage, a transcript that came back. Client state, which can die at
+ * any moment, lives separately in `CaptureState`.
+ */
+export type SessionStatus = 'recording' | 'paused' | 'interrupted' | 'uploading' | 'transcribing' | 'ready' | 'generating' | 'completed' | 'abandoned' | 'failed';
+/** States where the session is still someone's — used by the partial index and recovery. */
+export declare const OPEN_SESSION_STATUSES: SessionStatus[];
+/**
+ * CLIENT-side capture state. `interrupted` is the honest state between "the mic
+ * is gone" and "the user decided what to do" — collapsing it into `paused` would
+ * lose the distinction between intent and accident, which the transcript needs
+ * in order to record the hole.
+ */
+export type CaptureState = 'idle' | 'consent' | 'requesting' | 'recording' | 'paused' | 'interrupted' | 'stopping' | 'error';
+/** What the encounter is attached to. `standalone` records first, attaches later. */
+export type SessionContextKind = 'person' | 'appointment' | 'standalone';
+/**
+ * Legal basis recorded at capture time. Consent is what separates the recording
+ * from a problem, and "when" and "how" is what gets proven later.
+ * `implied_contract` covers recording as part of a contracted service.
+ */
+export type ConsentMode = 'verbal' | 'written' | 'implied_contract';
+export type UploadState = 'pending' | 'uploading' | 'uploaded' | 'failed' | 'missing';
+export type SttState = 'pending' | 'running' | 'done' | 'failed' | 'skipped';
+export type GenerationStatus = 'pending' | 'running' | 'ready' | 'failed' | 'committed' | 'discarded';
+export interface ScribeSession {
+    id: string;
+    tenantId: string;
+    subjectId?: string;
+    subjectName?: string;
+    contextKind: SessionContextKind;
+    appointmentId?: string;
+    ownerUserId: string;
+    status: SessionStatus;
+    locale: string;
+    mimeType?: string;
+    startedAt: string;
+    endedAt?: string;
+    /** Wall clock reported by the client. Moves the pill; not a record. */
+    wallDurationMs: number;
+    /** SUM(segments.duration_ms) — the only duration that counts for records, limits and billing. */
+    audioDurationMs: number;
+    segmentCount: number;
+    uploadedSegmentCount: number;
+    transcribedSegmentCount: number;
+    transcriptChars: number;
+    consentAt?: string;
+    consentMode?: ConsentMode;
+    retentionUntil?: string;
+    audioDeletedAt?: string;
+    error?: string;
+    metadata: Record<string, unknown>;
+}
+/** A word, offset RELATIVE to the start of its segment. */
+export interface TranscriptWord {
+    /** word */
+    w: string;
+    /** start ms, relative to the segment */
+    s: number;
+    /** end ms, relative to the segment */
+    e: number;
+    /** confidence 0..1 */
+    c?: number;
+    /** speaker index, when diarized */
+    sp?: number;
+}
+export interface ScribeSegment {
+    sessionId: string;
+    segIndex: number;
+    tenantId: string;
+    storagePath?: string;
+    bytes?: number;
+    /** Offset of this segment from the start of the session. */
+    startOffsetMs: number;
+    /** From the STT response, not a JS clock. */
+    durationMs?: number;
+    /** Assembled from pieces of a segment interrupted mid-way. */
+    partial: boolean;
+    /**
+     * SYNTHETIC row marking a hole (sleep, mic lost, permission revoked). Carries
+     * no audio. It exists so the transcript admits the hole instead of silently
+     * splicing two moments together — a medico-legal requirement, not polish.
+     */
+    gap: boolean;
+    uploadState: UploadState;
+    uploadedAt?: string;
+    sttState: SttState;
+    sttProvider?: string;
+    sttAttempts: number;
+    sttError?: string;
+    text?: string;
+    words?: TranscriptWord[];
+    confidence?: number;
+}
+export interface ScribeGeneration {
+    id: string;
+    tenantId: string;
+    sessionId: string;
+    /** Tenant template row. NULL when the generation came from a code preset. */
+    templateId?: string;
+    /** Preset key (`beauty.anamnesis.v1`) when there is no row. */
+    templateKey?: string;
+    tabOrder: number;
+    title?: string;
+    status: GenerationStatus;
+    /** Model output. Written once, NEVER mutated. */
+    markdown?: string;
+    /** The human's working copy. The difference between the two is what proves review. */
+    markdownEdited?: string;
+    /** Stage-1 extraction (two-stage). Reserved; the column exists from v0 on purpose. */
+    facts?: Record<string, unknown>;
+    model?: string;
+    promptVersion?: string;
+    inputTokens?: number;
+    outputTokens?: number;
+    error?: string;
+    documentId?: string;
+    createdBy?: string;
+    createdAt: string;
+}
+export type SectionShape = 'prose' | 'bullets' | 'keyvalue';
+export interface NarrativeSectionDef {
+    /** Stable machine key. NEVER translated — it outlives heading renames. */
+    id: string;
+    /** Becomes `## <heading>` in the markdown. Translatable. */
+    heading: string;
+    /**
+     * The one per-section prompt the model sees. Write it as an instruction to a
+     * junior: what belongs here, what does not, in which voice.
+     */
+    guidance: string;
+    /**
+     * Controls the SHAPE of the markdown. `keyvalue` exists so structured data
+     * comes out as `- **Label:** value` rather than a pipe table — the SDK
+     * renderer has no table, and a broken A4 prints garbage.
+     */
+    shape?: SectionShape;
+    required?: boolean;
+    /** Drops the whole section, heading included, when the transcript said nothing. */
+    omitWhenEmpty?: boolean;
+    maxWords?: number;
+    /** Fact keys this section consumes in two-stage mode. Reserved. */
+    facts?: string[];
+}
+/** Where each header field is pulled from. Resolved from DATA, never asked of the model. */
+export type NarrativeHeaderSource = 'subject.name' | 'subject.documentNumber' | 'subject.birthDate' | 'session.startedAt' | 'session.durationMinutes' | 'operator.name' | (string & {});
+export interface NarrativeSchema {
+    kind: 'narrative';
+    sections: NarrativeSectionDef[];
+    /** Tone, person, tense, jargon level. Injected ahead of the sections. */
+    style?: string;
+    /** OUTPUT language, independent of the transcript's. */
+    outputLocale?: string;
+    /** Block above the first section, resolved from data. */
+    header?: {
+        fields: Array<{
+            label: string;
+            source: NarrativeHeaderSource;
+        }>;
+    };
+    /** Footer, e.g. 'AI-generated from a recording, reviewed by the professional.' */
+    disclaimer?: string;
+    /**
+     * Things the model must report as "not stated" instead of inferring, e.g.
+     * ['diagnosis', 'dosage', 'ICD']. The line between summarising and inventing.
+     */
+    neverInfer?: string[];
+}
+export declare function isNarrativeSchema(schema: unknown): schema is NarrativeSchema;
+/**
+ * A system template, defined in CODE rather than in a SQL seed. Fixing a prompt
+ * becomes a release instead of a migration editing a row the user may have
+ * changed, and the default does not eat the tenant's template quota. Customising
+ * forks it, and the fork is the row.
+ */
+export interface NarrativeTemplatePreset {
+    /** Versioned in the key itself: `beauty.anamnesis.v1`. */
+    key: string;
+    name: string;
+    description?: string;
+    /** plugin-forms category: anamnesis | evolution | report | contract | general. */
+    category: string;
+    specialty?: string;
+    schema: NarrativeSchema;
+}
+export interface ScribeLabels {
+    /** "Appointment" / "Visit" / "Meeting" */
+    sessionSingular: string;
+    sessionPlural: string;
+    /** "Start appointment" */
+    start: string;
+    pause: string;
+    resume: string;
+    finish: string;
+    discard: string;
+    /** "Generate document" / "Generate draft" */
+    generate: string;
+    /** "Client" / "Patient" */
+    subject: string;
+    transcript: string;
+    settingsTitle: string;
+}
+/**
+ * Where the model credential lives. See `lib/transport.ts` for why there are
+ * exactly these two values and no third.
+ */
+export type ScribeTransportKind = 'fayz' | 'edge';
+export interface ScribeSttConfig {
+    /**
+     * Defaults to `'fayz'`: the platform API, the same broker the app assistant
+     * already uses — no secret and no deploy on the app side. `'edge'` keeps the
+     * own-edge-function path, for anyone running off-platform or needing a
+     * provider the broker does not offer.
+     */
+    transport?: ScribeTransportKind;
+    /**
+     * Provider behind a one-method seam — swapping must not be a refactor. The
+     * platform broker speaks OpenAI; Deepgram requires `transport: 'edge'`.
+     */
+    provider: 'deepgram' | 'openai';
+    /**
+     * Explicit, with no hidden default, because the choice shows: `whisper-1`
+     * returns duration and per-word offsets, while the `gpt-4o-*-transcribe`
+     * models are usually better at pt-BR but return text only — and then the
+     * authoritative duration has to come from somewhere else.
+     */
+    model?: string;
+    locale: string;
+    /** Only Deepgram diarizes today; ignored on the `fayz` transport. */
+    diarize?: boolean;
+    /**
+     * Transcription edge function name. REQUIRED when `transport: 'edge'`: with no
+     * transport configured the plugin refuses to boot, because the only remaining
+     * fallback would be the browser's native recognizer, which ships the session
+     * audio to an undeclared third party. See the invariant in `createScribePlugin`.
+     */
+    endpoint?: string;
+}
+export interface ScribeRetentionConfig {
+    /** Days until the audio may be deleted. Transcript and document survive. */
+    audioDays: number;
+    /** When true, no byte is recorded before the consent gate. */
+    requireConsent: boolean;
+    defaultConsentMode: ConsentMode;
+}
+export interface ScribeLimitsConfig {
+    minutesMonth?: string;
+    documentsMonth?: string;
+}
+export interface ScribePluginOptions {
+    /** `kind` of the `people` row allowed as subject ('customer', 'client', …). */
+    subjectKind?: string;
+    contextEntities?: string[];
+    labels?: Partial<ScribeLabels>;
+    /** The vertical's default templates — the ONLY new code a vertical writes. */
+    templatePresets?: NarrativeTemplatePreset[];
+    stt: ScribeSttConfig;
+    retention?: Partial<ScribeRetentionConfig>;
+    limits?: ScribeLimitsConfig;
+    /** Generation edge function name. */
+    generateEndpoint?: string;
+    scope?: 'universal' | 'vertical';
+    verticalId?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AASA;;;;GAIG;AACH,MAAM,MAAM,aAAa,GACrB,WAAW,GACX,QAAQ,GACR,aAAa,GACb,WAAW,GACX,cAAc,GACd,OAAO,GACP,YAAY,GACZ,WAAW,GACX,WAAW,GACX,QAAQ,CAAA;AAEZ,4FAA4F;AAC5F,eAAO,MAAM,qBAAqB,EAAE,aAAa,EAEhD,CAAA;AAED;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GACpB,MAAM,GACN,SAAS,GACT,YAAY,GACZ,WAAW,GACX,QAAQ,GACR,aAAa,GACb,UAAU,GACV,OAAO,CAAA;AAEX,qFAAqF;AACrF,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,aAAa,GAAG,YAAY,CAAA;AAExE;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,kBAAkB,CAAA;AAEnE,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAA;AACrF,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAA;AAC5E,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAA;AAMrG,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,kBAAkB,CAAA;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,aAAa,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,uEAAuE;IACvE,cAAc,EAAE,MAAM,CAAA;IACtB,iGAAiG;IACjG,eAAe,EAAE,MAAM,CAAA;IACvB,YAAY,EAAE,MAAM,CAAA;IACpB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,uBAAuB,EAAE,MAAM,CAAA;IAC/B,eAAe,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AAED,2DAA2D;AAC3D,MAAM,WAAW,cAAc;IAC7B,WAAW;IACX,CAAC,EAAE,MAAM,CAAA;IACT,wCAAwC;IACxC,CAAC,EAAE,MAAM,CAAA;IACT,sCAAsC;IACtC,CAAC,EAAE,MAAM,CAAA;IACT,sBAAsB;IACtB,CAAC,CAAC,EAAE,MAAM,CAAA;IACV,mCAAmC;IACnC,EAAE,CAAC,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,4DAA4D;IAC5D,aAAa,EAAE,MAAM,CAAA;IACrB,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,8DAA8D;IAC9D,OAAO,EAAE,OAAO,CAAA;IAChB;;;;OAIG;IACH,GAAG,EAAE,OAAO,CAAA;IACZ,WAAW,EAAE,WAAW,CAAA;IACxB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,QAAQ,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,cAAc,EAAE,CAAA;IACxB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,gBAAgB,CAAA;IACxB,iDAAiD;IACjD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,sFAAsF;IACtF,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,sFAAsF;IACtF,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;CAClB;AAWD,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,SAAS,GAAG,UAAU,CAAA;AAE3D,MAAM,WAAW,mBAAmB;IAClC,0EAA0E;IAC1E,EAAE,EAAE,MAAM,CAAA;IACV,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAA;IACf;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,KAAK,CAAC,EAAE,YAAY,CAAA;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,mFAAmF;IACnF,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,4FAA4F;AAC5F,MAAM,MAAM,qBAAqB,GAC7B,cAAc,GACd,wBAAwB,GACxB,mBAAmB,GACnB,mBAAmB,GACnB,yBAAyB,GACzB,eAAe,GACf,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;AAEjB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,CAAA;IACjB,QAAQ,EAAE,mBAAmB,EAAE,CAAA;IAC/B,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,wDAAwD;IACxD,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,yDAAyD;IACzD,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,qBAAqB,CAAA;SAAE,CAAC,CAAA;KAAE,CAAA;IAC5E,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;CACtB;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,IAAI,eAAe,CAE5E;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,0DAA0D;IAC1D,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,kFAAkF;IAClF,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,eAAe,CAAA;CACxB;AAMD,MAAM,WAAW,YAAY;IAC3B,0CAA0C;IAC1C,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,0BAA0B;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,CAAA;IAChB,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,MAAM,CAAA;AAEjD,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,mBAAmB,CAAA;IAC/B;;;OAGG;IACH,QAAQ,EAAE,UAAU,GAAG,QAAQ,CAAA;IAC/B;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,qEAAqE;IACrE,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAA;IACjB,8DAA8D;IAC9D,cAAc,EAAE,OAAO,CAAA;IACvB,kBAAkB,EAAE,WAAW,CAAA;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,MAAM,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IAC9B,8EAA8E;IAC9E,eAAe,CAAC,EAAE,uBAAuB,EAAE,CAAA;IAC3C,GAAG,EAAE,eAAe,CAAA;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAA;IAC1C,MAAM,CAAC,EAAE,kBAAkB,CAAA;IAC3B,qCAAqC;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,KAAK,CAAC,EAAE,WAAW,GAAG,UAAU,CAAA;IAChC,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB"}

package/functions/scribe-generate/index.ts

@@ -0,0 +1,255 @@
+// scribe-generate — transcrição + template narrativo → documento em Markdown.
+//
+// Env: OPENAI_API_KEY (ou ANTHROPIC_API_KEY), SUPABASE_URL, SUPABASE_SERVICE_ROLE_KEY.
+//
+// ---------------------------------------------------------------------------
+// Por que isto NÃO é uma tool do assistente de chat
+// ---------------------------------------------------------------------------
+// O turn loop do chat tem teto de 4 rodadas, vive num hook React que morre na
+// navegação, executa no plano do cliente, e persiste tudo que passa por ele no
+// histórico de conversa do broker. Gerar um documento clínico precisa do
+// oposto em todos os quatro pontos: sem teto de rodada, sem depender de aba,
+// no servidor, e sem despejar 9k tokens de transcrição de saúde num store de
+// conversa que ninguém revisou.
+//
+// Além disso a geração precisa ser AUDITÁVEL (modelo, versão de prompt, tokens)
+// e REPETÍVEL. Um turno de chat não é nem um nem outro.
+//
+// O assistente entra depois, na tela do rascunho, para reescrever UMA seção —
+// isso sim cabe folgado em 4 rodadas.
+//
+// ---------------------------------------------------------------------------
+// callModel: um ponto, um dia trocável
+// ---------------------------------------------------------------------------
+// Toda chamada de modelo passa por `callModel`. Quando o broker Fayz expuser um
+// endpoint headless (`POST /agents/complete`, sem conversa persistida), a troca
+// é o corpo desta função e nenhum app volta a segurar chave de modelo.
+import { createClient } from 'https://esm.sh/@supabase/supabase-js@2.45.0'
+import {
+  PROMPT_VERSION,
+  buildSystemPrompt,
+  buildUserPrompt,
+  deriveTitle,
+  renderTranscript,
+  type TranscriptLine,
+} from '../../src/lib/prompt.ts'
+import type { NarrativeSchema } from '../../src/types.ts'
+
+const corsHeaders = {
+  'Access-Control-Allow-Origin': '*',
+  'Access-Control-Allow-Headers': 'authorization, x-client-info, apikey, content-type',
+}
+
+const DEFAULT_MODEL = 'gpt-4o'
+
+interface ModelResult {
+  text: string
+  model: string
+  inputTokens?: number
+  outputTokens?: number
+}
+
+async function callModel(args: { system: string; user: string; model?: string }): Promise<ModelResult> {
+  const key = Deno.env.get('OPENAI_API_KEY')
+  if (!key) throw new Error('OPENAI_API_KEY não configurada')
+  const model = args.model ?? Deno.env.get('SCRIBE_MODEL') ?? DEFAULT_MODEL
+
+  const res = await fetch('https://api.openai.com/v1/chat/completions', {
+    method: 'POST',
+    headers: { Authorization: `Bearer ${key}`, 'Content-Type': 'application/json' },
+    body: JSON.stringify({
+      model,
+      messages: [
+        { role: 'system', content: args.system },
+        { role: 'user', content: args.user },
+      ],
+      // Baixa mas não zero: documento clínico quer consistência, e temperatura
+      // zero deixa o modelo repetitivo em texto longo.
+      temperature: 0.2,
+      max_tokens: 4000,
+    }),
+  })
+  if (!res.ok) throw new Error(`modelo ${res.status}: ${await res.text()}`)
+
+  const json = await res.json()
+  return {
+    text: json?.choices?.[0]?.message?.content ?? '',
+    model,
+    inputTokens: json?.usage?.prompt_tokens,
+    outputTokens: json?.usage?.completion_tokens,
+  }
+}
+
+/**
+ * Monta a transcrição na ordem dos segmentos. Buraco entra como linha, não é
+ * pulado — a costura invisível é o modo de falha que este design recusa.
+ */
+async function loadTranscript(supabase: any, sessionId: string): Promise<TranscriptLine[]> {
+  const { data } = await supabase
+    .from('plg_scribe_segments')
+    .select('seg_index, start_offset_ms, text, gap, words')
+    .eq('session_id', sessionId)
+    .order('seg_index', { ascending: true })
+  if (!data) return []
+
+  return data.map((s: any) => ({
+    startOffsetMs: s.start_offset_ms ?? 0,
+    text: s.text ?? '',
+    gap: !!s.gap,
+    speaker: Array.isArray(s.words) && s.words.length > 0 ? s.words[0]?.sp : undefined,
+  }))
+}
+
+/**
+ * Resolve o schema: linha do tenant (forkada) ou preset vindo do cliente. Preset
+ * de sistema de propósito NÃO tem linha — ele não deve consumir a cota de
+ * templates do plano, e corrigir seu prompt deve ser release, não migration.
+ */
+async function resolveSchema(
+  supabase: any,
+  templateId: string | undefined,
+  inlineSchema: NarrativeSchema | undefined,
+): Promise<{ schema: NarrativeSchema; name: string }> {
+  if (templateId) {
+    const { data } = await supabase
+      .from('plg_forms_templates')
+      .select('name, schema')
+      .eq('id', templateId)
+      .single()
+    if (data?.schema?.kind === 'narrative') return { schema: data.schema, name: data.name }
+    throw new Error('template não é narrativo')
+  }
+  if (inlineSchema?.kind === 'narrative') return { schema: inlineSchema, name: 'Documento' }
+  throw new Error('nenhum template informado')
+}
+
+Deno.serve(async (req: Request) => {
+  if (req.method === 'OPTIONS') return new Response('ok', { headers: corsHeaders })
+
+  const supabase = createClient(
+    Deno.env.get('SUPABASE_URL') ?? '',
+    Deno.env.get('SUPABASE_SERVICE_ROLE_KEY') ?? '',
+    { auth: { persistSession: false } },
+  )
+
+  let generationId: string | null = null
+
+  try {
+    const body = await req.json()
+    const sessionId = body.sessionId as string
+    if (!sessionId) throw new Error('sessionId é obrigatório')
+
+    // Mesma checagem do scribe-transcribe: a service key contorna a RLS, então
+    // a autorização é explícita aqui.
+    const jwt = (req.headers.get('Authorization') ?? '').replace(/^Bearer\s+/i, '')
+    if (!jwt) return json({ error: 'não autenticado' }, 401)
+    const { data: caller } = await supabase.auth.getUser(jwt)
+    if (!caller?.user) return json({ error: 'não autenticado' }, 401)
+
+    const { data: session } = await supabase
+      .from('plg_scribe_sessions')
+      .select('id, tenant_id, subject_id, started_at, audio_duration_ms, locale')
+      .eq('id', sessionId)
+      .single()
+    if (!session) return json({ error: 'sessão não encontrada' }, 404)
+
+    const { data: membership } = await supabase
+      .schema('saas_core')
+      .from('tenant_members')
+      .select('user_id')
+      .eq('tenant_id', session.tenant_id)
+      .eq('user_id', caller.user.id)
+      .maybeSingle()
+    if (!membership) return json({ error: 'acesso negado' }, 403)
+
+    const { schema, name } = await resolveSchema(supabase, body.templateId, body.schema)
+
+    const lines = await loadTranscript(supabase, sessionId)
+    const hasAudio = lines.some((l) => !l.gap && l.text.trim())
+    if (!hasAudio) return json({ error: 'não há transcrição para gerar o documento' }, 422)
+
+    // A linha nasce em `running` ANTES da chamada ao modelo: uma geração que
+    // trava sem deixar rastro é indistinguível de uma que nunca foi pedida.
+    const { data: created, error: insErr } = await supabase
+      .from('plg_scribe_generations')
+      .insert({
+        tenant_id: session.tenant_id,
+        session_id: sessionId,
+        template_id: body.templateId ?? null,
+        template_key: body.templateKey ?? null,
+        tab_order: body.tabOrder ?? 0,
+        status: 'running',
+        prompt_version: PROMPT_VERSION,
+        created_by: caller.user.id,
+      })
+      .select('id')
+      .single()
+    if (insErr || !created) throw new Error(`falha ao criar a geração: ${insErr?.message}`)
+    generationId = created.id
+
+    let subjectName: string | undefined
+    if (session.subject_id) {
+      const { data: person } = await supabase
+        .from('people')
+        .select('name')
+        .eq('id', session.subject_id)
+        .maybeSingle()
+      subjectName = person?.name
+    }
+
+    const result = await callModel({
+      system: buildSystemPrompt(schema),
+      user: buildUserPrompt({
+        schema,
+        transcript: renderTranscript(lines),
+        context: {
+          Titular: subjectName,
+          Data: new Date(session.started_at).toLocaleDateString(session.locale ?? 'pt-BR'),
+          'Duração (min)': String(Math.round((session.audio_duration_ms ?? 0) / 60000)),
+        },
+      }),
+      model: body.model,
+    })
+
+    const markdown = result.text.trim()
+
+    await supabase
+      .from('plg_scribe_generations')
+      .update({
+        status: 'ready',
+        // `markdown` é escrito uma vez e nunca mais. A edição do humano vai
+        // para `markdown_edited`, e a diferença entre os dois é a prova de que
+        // alguém revisou.
+        markdown,
+        title: deriveTitle(markdown, name),
+        model: result.model,
+        input_tokens: result.inputTokens,
+        output_tokens: result.outputTokens,
+        updated_at: new Date().toISOString(),
+      })
+      .eq('id', generationId)
+
+    await supabase
+      .from('plg_scribe_sessions')
+      .update({ status: 'generating', updated_at: new Date().toISOString() })
+      .eq('id', sessionId)
+
+    return json({ ok: true, generationId, markdown, model: result.model })
+  } catch (err) {
+    const message = String((err as Error)?.message ?? err)
+    if (generationId) {
+      await supabase
+        .from('plg_scribe_generations')
+        .update({ status: 'failed', error: message.slice(0, 500), updated_at: new Date().toISOString() })
+        .eq('id', generationId)
+    }
+    return json({ error: message }, 500)
+  }
+})
+
+function json(payload: unknown, status = 200): Response {
+  return new Response(JSON.stringify(payload), {
+    status,
+    headers: { ...corsHeaders, 'Content-Type': 'application/json' },
+  })
+}