@hyperdreamer/pi-webui 1.13.1 → 1.14.0

package/dist/server/speechInput/piCompatibleCredentialResolver.js

@@ -0,0 +1,348 @@
+import { spawn } from "node:child_process";
+export const SPEECH_INPUT_CREDENTIAL_COMMAND_TIMEOUT_MS = 10_000;
+export const SPEECH_INPUT_CREDENTIAL_MAX_STDOUT_BYTES = 64 * 1024;
+const credentialSourceUnresolvedMessage = "Credential source could not be resolved";
+const credentialCommandFailedMessage = "Credential command failed";
+const credentialCommandCancelledMessage = "Credential command was cancelled";
+const credentialCommandTimedOutMessage = "Credential command timed out";
+const credentialCommandOutputExceededMessage = "Credential command output exceeded limit";
+const credentialCommandEmptyOutputMessage = "Credential command produced no credential";
+const variableNamePattern = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const variableNameContinuationPattern = /^[A-Za-z0-9_]$/;
+class CredentialResolutionError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "CredentialResolutionError";
+    }
+}
+export function inspectPiCompatibleCredentialSource(source, env) {
+    if (source === undefined || source === "")
+        return { configured: false, resolution: "missing" };
+    const parsed = parseCredentialSource(source);
+    if (parsed.kind === "command")
+        return { configured: true, source: "command", resolution: "unchecked" };
+    if (parsed.kind === "literal")
+        return { configured: true, source: "literal", resolution: "resolved" };
+    const resolved = resolveTemplate(parsed.template, env);
+    return {
+        configured: true,
+        source: "environment",
+        resolution: resolved === undefined ? "unresolved" : "resolved",
+    };
+}
+export async function resolvePiCompatibleCredentialSource(source, options) {
+    if (source === undefined || source === "")
+        throw new CredentialResolutionError(credentialSourceUnresolvedMessage);
+    const parsed = parseCredentialSource(source);
+    if (parsed.kind === "command") {
+        if (options.signal.aborted)
+            throw new CredentialResolutionError(credentialCommandCancelledMessage);
+        try {
+            const value = await (options.runCommand ?? createCredentialCommandRunner())({
+                command: parsed.command,
+                signal: options.signal,
+                timeoutMs: SPEECH_INPUT_CREDENTIAL_COMMAND_TIMEOUT_MS,
+                maxStdoutBytes: SPEECH_INPUT_CREDENTIAL_MAX_STDOUT_BYTES,
+            });
+            if (value.trim() === "")
+                throw new CredentialResolutionError(credentialCommandEmptyOutputMessage);
+            return value;
+        }
+        catch (error) {
+            if (error instanceof CredentialResolutionError)
+                throw error;
+            throw new CredentialResolutionError(credentialCommandFailedMessage);
+        }
+    }
+    const value = resolveTemplate(parsed.template, options.env);
+    if (value === undefined)
+        throw new CredentialResolutionError(credentialSourceUnresolvedMessage);
+    return value;
+}
+export function createCredentialCommandRunner(host = createDefaultCredentialProcessHost()) {
+    return async (request) => {
+        if (request.signal.aborted)
+            throw new CredentialResolutionError(credentialCommandCancelledMessage);
+        return await new Promise((resolve, reject) => {
+            let process;
+            try {
+                process = host.spawn(request.command);
+            }
+            catch {
+                reject(new CredentialResolutionError(credentialCommandFailedMessage));
+                return;
+            }
+            let settled = false;
+            let stdoutBytes = 0;
+            const stdoutChunks = [];
+            let removeStdout = () => undefined;
+            let removeStderr = () => undefined;
+            let removeClose = () => undefined;
+            let cancelDeadline = () => undefined;
+            const lifecycle = { cleanupRequested: false };
+            const cleanup = () => {
+                lifecycle.cleanupRequested = true;
+                runCleanup(removeStdout);
+                runCleanup(removeStderr);
+                runCleanup(removeClose);
+                runCleanup(() => { request.signal.removeEventListener("abort", onAbort); });
+                runCleanup(cancelDeadline);
+            };
+            const terminate = () => {
+                if (process.pid === undefined)
+                    return;
+                try {
+                    host.terminateTrackedProcesses(process);
+                }
+                catch {
+                    // Resolution ownership has settled; cleanup is best effort.
+                }
+            };
+            const finish = (outcome) => {
+                if (settled)
+                    return;
+                settled = true;
+                cleanup();
+                if ("value" in outcome) {
+                    resolve(outcome.value);
+                    return;
+                }
+                if (outcome.terminate)
+                    terminate();
+                reject(outcome.error);
+            };
+            const onAbort = () => {
+                finish({ error: new CredentialResolutionError(credentialCommandCancelledMessage), terminate: true });
+            };
+            const onStdout = (chunk) => {
+                if (settled)
+                    return;
+                stdoutBytes += chunk.byteLength;
+                if (stdoutBytes > request.maxStdoutBytes) {
+                    finish({ error: new CredentialResolutionError(credentialCommandOutputExceededMessage), terminate: true });
+                    return;
+                }
+                stdoutChunks.push(chunk);
+            };
+            const onClose = (result) => {
+                if (result.error !== undefined || result.code !== 0) {
+                    finish({ error: new CredentialResolutionError(credentialCommandFailedMessage), terminate: false });
+                    return;
+                }
+                const output = Buffer.concat(stdoutChunks).toString("utf8").trim();
+                if (output === "") {
+                    finish({ error: new CredentialResolutionError(credentialCommandEmptyOutputMessage), terminate: false });
+                    return;
+                }
+                finish({ value: output });
+            };
+            // Streams and close must be observed before cancellation is exposed, so an
+            // immediately aborted caller cannot leave a spawned process unobserved.
+            try {
+                cancelDeadline = host.scheduleDeadline(() => {
+                    finish({ error: new CredentialResolutionError(credentialCommandTimedOutMessage), terminate: true });
+                }, request.timeoutMs);
+            }
+            catch {
+                finish({ error: new CredentialResolutionError(credentialCommandFailedMessage), terminate: true });
+                return;
+            }
+            if (removeAfterSynchronousSettlement(lifecycle, cancelDeadline))
+                return;
+            try {
+                removeStdout = process.onStdout(onStdout);
+                if (removeAfterSynchronousSettlement(lifecycle, removeStdout))
+                    return;
+                removeStderr = process.onStderr(() => undefined);
+                removeClose = process.onClose(onClose);
+                if (removeAfterSynchronousSettlement(lifecycle, removeClose))
+                    return;
+            }
+            catch {
+                finish({ error: new CredentialResolutionError(credentialCommandFailedMessage), terminate: true });
+                return;
+            }
+            request.signal.addEventListener("abort", onAbort, { once: true });
+            if (request.signal.aborted)
+                onAbort();
+        });
+    };
+}
+function removeAfterSynchronousSettlement(lifecycle, remove) {
+    if (!lifecycle.cleanupRequested)
+        return false;
+    runCleanup(remove);
+    return true;
+}
+function runCleanup(cleanup) {
+    try {
+        cleanup();
+    }
+    catch {
+        // Credential resolution has already chosen its terminal outcome.
+    }
+}
+function parseCredentialSource(source) {
+    if (source.startsWith("!"))
+        return { kind: "command", command: source.slice(1) };
+    const template = parseCredentialTemplate(source);
+    return template.hasVariable ? { kind: "environment", template } : { kind: "literal", template };
+}
+function parseCredentialTemplate(source) {
+    const parts = [];
+    let literal = "";
+    let hasVariable = false;
+    const appendLiteral = (value) => { literal += value; };
+    const flushLiteral = () => {
+        if (literal === "")
+            return;
+        parts.push({ type: "literal", value: literal });
+        literal = "";
+    };
+    for (let index = 0; index < source.length; index += 1) {
+        const character = source[index];
+        if (character === undefined)
+            continue;
+        if (character !== "$") {
+            appendLiteral(character);
+            continue;
+        }
+        const next = source[index + 1];
+        if (next === "$") {
+            appendLiteral("$");
+            index += 1;
+            continue;
+        }
+        if (next === "!") {
+            appendLiteral("!");
+            index += 1;
+            continue;
+        }
+        if (next === "{") {
+            const closingIndex = source.indexOf("}", index + 2);
+            if (closingIndex === -1) {
+                appendLiteral("$");
+                continue;
+            }
+            const name = source.slice(index + 2, closingIndex);
+            if (!variableNamePattern.test(name)) {
+                appendLiteral(source.slice(index, closingIndex + 1));
+                index = closingIndex;
+                continue;
+            }
+            flushLiteral();
+            parts.push({ type: "variable", name });
+            hasVariable = true;
+            index = closingIndex;
+            continue;
+        }
+        if (next !== undefined && variableNamePattern.test(next)) {
+            let endIndex = index + 2;
+            while (endIndex < source.length && variableNameContinuationPattern.test(source[endIndex] ?? ""))
+                endIndex += 1;
+            flushLiteral();
+            parts.push({ type: "variable", name: source.slice(index + 1, endIndex) });
+            hasVariable = true;
+            index = endIndex - 1;
+            continue;
+        }
+        appendLiteral("$");
+    }
+    flushLiteral();
+    return { parts, hasVariable };
+}
+function resolveTemplate(template, env) {
+    if (template === undefined)
+        return undefined;
+    let result = "";
+    for (const part of template.parts) {
+        if (part.type === "literal") {
+            result += part.value;
+            continue;
+        }
+        const suppliedValue = env?.[part.name];
+        const processValue = process.env[part.name];
+        const value = suppliedValue === undefined || suppliedValue === "" ? processValue : suppliedValue;
+        if (value === undefined || value === "")
+            return undefined;
+        result += value;
+    }
+    return result;
+}
+function createDefaultCredentialProcessHost() {
+    return {
+        spawn(command) {
+            const child = spawn(command, {
+                shell: true,
+                detached: process.platform !== "win32",
+                stdio: ["ignore", "pipe", "pipe"],
+                windowsHide: true,
+            });
+            return adaptChildProcess(child);
+        },
+        terminateTrackedProcesses(spawnedProcess) {
+            if (spawnedProcess.pid === undefined)
+                return;
+            if (process.platform !== "win32") {
+                try {
+                    processKillGroup(spawnedProcess.pid);
+                }
+                catch { /* Best effort cleanup. */ }
+                return;
+            }
+            try {
+                const taskkill = spawn("taskkill", ["/PID", String(spawnedProcess.pid), "/T", "/F"], {
+                    detached: false,
+                    stdio: "ignore",
+                    windowsHide: true,
+                });
+                taskkill.on("error", () => undefined);
+            }
+            catch {
+                // Best effort cleanup.
+            }
+        },
+        scheduleDeadline(callback, delayMs) {
+            const timer = setTimeout(callback, delayMs);
+            return () => { clearTimeout(timer); };
+        },
+    };
+}
+function processKillGroup(pid) {
+    process.kill(-pid, "SIGKILL");
+}
+function adaptChildProcess(child) {
+    const stdout = child.stdout;
+    const stderr = child.stderr;
+    if (stdout === null || stderr === null)
+        throw new Error("Credential process streams unavailable");
+    let closeResult;
+    const closeListeners = new Set();
+    const notifyClose = (result) => {
+        if (closeResult !== undefined)
+            return;
+        closeResult = result;
+        for (const listener of closeListeners)
+            listener(result);
+    };
+    child.on("error", (error) => { notifyClose({ code: null, error }); });
+    child.on("close", (code) => { notifyClose({ code }); });
+    return {
+        pid: child.pid,
+        onStdout(listener) {
+            stdout.on("data", listener);
+            return () => { stdout.off("data", listener); };
+        },
+        onStderr(listener) {
+            stderr.on("data", listener);
+            return () => { stderr.off("data", listener); };
+        },
+        onClose(listener) {
+            closeListeners.add(listener);
+            if (closeResult !== undefined)
+                listener(closeResult);
+            return () => { closeListeners.delete(listener); };
+        },
+    };
+}
+//# sourceMappingURL=piCompatibleCredentialResolver.js.map

package/dist/server/speechInput/piCompatibleCredentialResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"piCompatibleCredentialResolver.js","sourceRoot":"","sources":["../../../src/server/speechInput/piCompatibleCredentialResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAI3C,MAAM,CAAC,MAAM,0CAA0C,GAAG,MAAM,CAAC;AACjE,MAAM,CAAC,MAAM,wCAAwC,GAAG,EAAE,GAAG,IAAI,CAAC;AAmClE,MAAM,iCAAiC,GAAG,yCAAyC,CAAC;AACpF,MAAM,8BAA8B,GAAG,2BAA2B,CAAC;AACnE,MAAM,iCAAiC,GAAG,kCAAkC,CAAC;AAC7E,MAAM,gCAAgC,GAAG,8BAA8B,CAAC;AACxE,MAAM,sCAAsC,GAAG,0CAA0C,CAAC;AAC1F,MAAM,mCAAmC,GAAG,2CAA2C,CAAC;AACxF,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AACvD,MAAM,+BAA+B,GAAG,gBAAgB,CAAC;AAEzD,MAAM,yBAA0B,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAiBD,MAAM,UAAU,mCAAmC,CACjD,MAA0B,EAC1B,GAAuB;IAEvB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IAE/F,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;IACvG,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IAEtG,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACvD,OAAO;QACL,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,aAAa;QACrB,UAAU,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;KAC/D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,MAA0B,EAC1B,OAAiC;IAEjC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,yBAAyB,CAAC,iCAAiC,CAAC,CAAC;IAElH,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,yBAAyB,CAAC,iCAAiC,CAAC,CAAC;QACnG,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,6BAA6B,EAAE,CAAC,CAAC;gBAC1E,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,0CAA0C;gBACrD,cAAc,EAAE,wCAAwC;aACzD,CAAC,CAAC;YACH,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,MAAM,IAAI,yBAAyB,CAAC,mCAAmC,CAAC,CAAC;YAClG,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,KAAK,YAAY,yBAAyB;gBAAE,MAAM,KAAK,CAAC;YAC5D,MAAM,IAAI,yBAAyB,CAAC,8BAA8B,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,yBAAyB,CAAC,iCAAiC,CAAC,CAAC;IAChG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,OAA8B,kCAAkC,EAAE;IAC9G,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,yBAAyB,CAAC,iCAAiC,CAAC,CAAC;QACnG,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrD,IAAI,OAAiC,CAAC;YACtC,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,yBAAyB,CAAC,8BAA8B,CAAC,CAAC,CAAC;gBACtE,OAAO;YACT,CAAC;YAED,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,WAAW,GAAG,CAAC,CAAC;YACpB,MAAM,YAAY,GAAiB,EAAE,CAAC;YACtC,IAAI,YAAY,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;YAC/C,IAAI,YAAY,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;YAC/C,IAAI,WAAW,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;YAC9C,IAAI,cAAc,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;YACjD,MAAM,SAAS,GAA+B,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;YAE1E,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,SAAS,CAAC,gBAAgB,GAAG,IAAI,CAAC;gBAClC,UAAU,CAAC,YAAY,CAAC,CAAC;gBACzB,UAAU,CAAC,YAAY,CAAC,CAAC;gBACzB,UAAU,CAAC,WAAW,CAAC,CAAC;gBACxB,UAAU,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5E,UAAU,CAAC,cAAc,CAAC,CAAC;YAC7B,CAAC,CAAC;YAEF,MAAM,SAAS,GAAG,GAAG,EAAE;gBACrB,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS;oBAAE,OAAO;gBACtC,IAAI,CAAC;oBACH,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;gBAC1C,CAAC;gBAAC,MAAM,CAAC;oBACP,4DAA4D;gBAC9D,CAAC;YACH,CAAC,CAAC;YAEF,MAAM,MAAM,GAAG,CAAC,OAAqF,EAAE,EAAE;gBACvG,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,EAAE,CAAC;gBACV,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;oBACvB,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBACvB,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,CAAC,SAAS;oBAAE,SAAS,EAAE,CAAC;gBACnC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC,CAAC;YAEF,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,yBAAyB,CAAC,iCAAiC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvG,CAAC,CAAC;YAEF,MAAM,QAAQ,GAAG,CAAC,KAAiB,EAAE,EAAE;gBACrC,IAAI,OAAO;oBAAE,OAAO;gBACpB,WAAW,IAAI,KAAK,CAAC,UAAU,CAAC;gBAChC,IAAI,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;oBACzC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,yBAAyB,CAAC,sCAAsC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC1G,OAAO;gBACT,CAAC;gBACD,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC,CAAC;YAEF,MAAM,OAAO,GAAG,CAAC,MAA6B,EAAE,EAAE;gBAChD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;oBACpD,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,yBAAyB,CAAC,8BAA8B,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;oBACnG,OAAO;gBACT,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBACnE,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;oBAClB,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,yBAAyB,CAAC,mCAAmC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;oBACxG,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5B,CAAC,CAAC;YAEF,2EAA2E;YAC3E,wEAAwE;YACxE,IAAI,CAAC;gBACH,cAAc,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE;oBAC1C,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,yBAAyB,CAAC,gCAAgC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtG,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,yBAAyB,CAAC,8BAA8B,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClG,OAAO;YACT,CAAC;YACD,IAAI,gCAAgC,CAAC,SAAS,EAAE,cAAc,CAAC;gBAAE,OAAO;YACxE,IAAI,CAAC;gBACH,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAC1C,IAAI,gCAAgC,CAAC,SAAS,EAAE,YAAY,CAAC;oBAAE,OAAO;gBACtE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACjD,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACvC,IAAI,gCAAgC,CAAC,SAAS,EAAE,WAAW,CAAC;oBAAE,OAAO;YACvE,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,yBAAyB,CAAC,8BAA8B,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClG,OAAO;YACT,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,EAAE,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,gCAAgC,CAAC,SAAqC,EAAE,MAAkB;IACjG,IAAI,CAAC,SAAS,CAAC,gBAAgB;QAAE,OAAO,KAAK,CAAC;IAC9C,UAAU,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,OAAmB;IACrC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc;IAC3C,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,MAAM,QAAQ,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACjD,OAAO,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAClG,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAc;IAC7C,MAAM,KAAK,GAA6B,EAAE,CAAC;IAC3C,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,MAAM,aAAa,GAAG,CAAC,KAAa,EAAE,EAAE,GAAG,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,IAAI,OAAO,KAAK,EAAE;YAAE,OAAO;QAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAChD,OAAO,GAAG,EAAE,CAAC;IACf,CAAC,CAAC;IAEF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,SAAS,KAAK,SAAS;YAAE,SAAS;QACtC,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC/B,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,aAAa,CAAC,GAAG,CAAC,CAAC;YACnB,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,aAAa,CAAC,GAAG,CAAC,CAAC;YACnB,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACpD,IAAI,YAAY,KAAK,CAAC,CAAC,EAAE,CAAC;gBACxB,aAAa,CAAC,GAAG,CAAC,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;YACnD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC;gBACrD,KAAK,GAAG,YAAY,CAAC;gBACrB,SAAS;YACX,CAAC;YACD,YAAY,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,WAAW,GAAG,IAAI,CAAC;YACnB,KAAK,GAAG,YAAY,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzD,IAAI,QAAQ,GAAG,KAAK,GAAG,CAAC,CAAC;YACzB,OAAO,QAAQ,GAAG,MAAM,CAAC,MAAM,IAAI,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAAE,QAAQ,IAAI,CAAC,CAAC;YAC/G,YAAY,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC1E,WAAW,GAAG,IAAI,CAAC;YACnB,KAAK,GAAG,QAAQ,GAAG,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QACD,aAAa,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,YAAY,EAAE,CAAC;IACf,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,eAAe,CAAC,QAAwC,EAAE,GAAkC;IACnG,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC;YACrB,SAAS;QACX,CAAC;QACD,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC;QACjG,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kCAAkC;IACzC,OAAO;QACL,KAAK,CAAC,OAAO;YACX,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE;gBAC3B,KAAK,EAAE,IAAI;gBACX,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;gBACtC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBACjC,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;YACH,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QACD,yBAAyB,CAAC,cAAc;YACtC,IAAI,cAAc,CAAC,GAAG,KAAK,SAAS;gBAAE,OAAO;YAC7C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACjC,IAAI,CAAC;oBAAC,gBAAgB,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;gBAClF,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;oBACnF,QAAQ,EAAE,KAAK;oBACf,KAAK,EAAE,QAAQ;oBACf,WAAW,EAAE,IAAI;iBAClB,CAAC,CAAC;gBACH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;QACH,CAAC;QACD,gBAAgB,CAAC,QAAQ,EAAE,OAAO;YAChC,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC5C,OAAO,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAmB;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAClG,IAAI,WAA8C,CAAC;IACnD,MAAM,cAAc,GAAG,IAAI,GAAG,EAA2C,CAAC;IAC1E,MAAM,WAAW,GAAG,CAAC,MAA6B,EAAE,EAAE;QACpD,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO;QACtC,WAAW,GAAG,MAAM,CAAC;QACrB,KAAK,MAAM,QAAQ,IAAI,cAAc;YAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,CAAC;IAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE,GAAG,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAmB,EAAE,EAAE,GAAG,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvE,OAAO;QACL,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,QAAQ,CAAC,QAAQ;YACf,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC5B,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,QAAQ,CAAC,QAAQ;YACf,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC5B,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,CAAC,QAAQ;YACd,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7B,IAAI,WAAW,KAAK,SAAS;gBAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;YACrD,OAAO,GAAG,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/speechInput/speechInputSettingsRoutes.js

@@ -0,0 +1,39 @@
+import { PiWebUiConfigMutationBusyError } from "../../configMutationCoordinator.js";
+import { SpeechInputSettingsConflictError, SpeechInputSettingsValidationError, } from "./speechInputSettingsService.js";
+const CONFLICT_MESSAGE = "Speech input settings changed. Reload and try again.";
+const BUSY_MESSAGE = "PI WEBUI config is busy. Try again.";
+const UNEXPECTED_MESSAGE = "Speech input settings request failed.";
+/** Gateway-only redacted speech input settings surface; no machine alias exists. */
+export function registerSpeechInputSettingsRoutes(app, service) {
+    app.get("/api/speech-input/settings", async (_request, reply) => {
+        try {
+            return await service.read();
+        }
+        catch (error) {
+            return mapSpeechInputSettingsError(reply, error);
+        }
+    });
+    app.put("/api/speech-input/settings", async (request, reply) => {
+        try {
+            return await service.update(request.body);
+        }
+        catch (error) {
+            return mapSpeechInputSettingsError(reply, error);
+        }
+    });
+}
+function mapSpeechInputSettingsError(reply, error) {
+    if (error instanceof SpeechInputSettingsValidationError) {
+        return reply.code(400).send({ error: error.message });
+    }
+    if (error instanceof SpeechInputSettingsConflictError) {
+        // Stable safe text; never echoes the current revision or settings.
+        return reply.code(409).send({ error: CONFLICT_MESSAGE });
+    }
+    if (error instanceof PiWebUiConfigMutationBusyError) {
+        return reply.code(503).send({ error: BUSY_MESSAGE });
+    }
+    // Never forward unexpected error text: it could carry credential material.
+    return reply.code(500).send({ error: UNEXPECTED_MESSAGE });
+}
+//# sourceMappingURL=speechInputSettingsRoutes.js.map

package/dist/server/speechInput/speechInputSettingsRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"speechInputSettingsRoutes.js","sourceRoot":"","sources":["../../../src/server/speechInput/speechInputSettingsRoutes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,EACL,gCAAgC,EAChC,kCAAkC,GAEnC,MAAM,iCAAiC,CAAC;AAEzC,MAAM,gBAAgB,GAAG,sDAAsD,CAAC;AAChF,MAAM,YAAY,GAAG,qCAAqC,CAAC;AAC3D,MAAM,kBAAkB,GAAG,uCAAuC,CAAC;AAEnE,oFAAoF;AACpF,MAAM,UAAU,iCAAiC,CAAC,GAAoB,EAAE,OAAmC;IACzG,GAAG,CAAC,GAAG,CAAC,4BAA4B,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC9D,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,2BAA2B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAoB,4BAA4B,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAChF,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,2BAA2B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAmB,EAAE,KAAc;IACtE,IAAI,KAAK,YAAY,kCAAkC,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,KAAK,YAAY,gCAAgC,EAAE,CAAC;QACtD,mEAAmE;QACnE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,2EAA2E;IAC3E,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;AAC7D,CAAC"}

package/dist/server/speechInput/speechInputSettingsService.js

@@ -0,0 +1,247 @@
+import { canonicalBcp47LanguageTag, effectiveSpeechInputSettings, isCanonicalLowercaseUuid, speechInputTranscriptionEndpoint } from "../../shared/speechInput.js";
+import { inspectPiCompatibleCredentialSource } from "./piCompatibleCredentialResolver.js";
+const PRESERVED_CREDENTIAL_ENDPOINT_MESSAGE = "Re-enter the API key source when changing the cloud base URL.";
+const CONFLICT_MESSAGE = "Speech input settings changed. Reload and try again.";
+const MAX_LANGUAGE_LENGTH = 128;
+const MAX_BASE_URL_LENGTH = 2_048;
+const MAX_MODEL_LENGTH = 256;
+const MAX_CREDENTIAL_SOURCE_BYTES = 8 * 1024;
+/** Typed settings validation failure; routes map it to a safe 400. */
+export class SpeechInputSettingsValidationError extends Error {
+    constructor() {
+        super(...arguments);
+        this.code = "SPEECH_INPUT_SETTINGS_VALIDATION";
+    }
+}
+/** Typed revision mismatch; routes map it to a safe 409 and never write. */
+export class SpeechInputSettingsConflictError extends Error {
+    constructor() {
+        super(CONFLICT_MESSAGE);
+        this.code = "SPEECH_INPUT_SETTINGS_CONFLICT";
+    }
+}
+/**
+ * The canonical browser surface for speech input settings. It owns the raw
+ * speechInput config knowledge, projects redacted nonsecret settings plus a
+ * nonexecuting credential status, and mutates exclusively through the shared
+ * cross-process config mutation coordinator with revision CAS semantics.
+ */
+export function createSpeechInputSettingsService(dependencies) {
+    const { coordinator, env, onCommitted } = dependencies;
+    const responseFromSnapshot = (snapshot) => {
+        const speech = snapshot.loaded.config.speechInput;
+        return {
+            contractVersion: 1,
+            revision: snapshot.speechInputRevision,
+            settings: effectiveSpeechInputSettings(speech),
+            credential: inspectPiCompatibleCredentialSource(speech?.cloud?.apiKey, env),
+        };
+    };
+    return {
+        async read() {
+            return responseFromSnapshot(await coordinator.read());
+        },
+        async update(value) {
+            const update = parseSpeechInputSettingsUpdate(value);
+            const committed = await coordinator.mutate((current) => {
+                // The revision comparison runs inside the transaction, before any
+                // replacement is constructed, so a stale revision never rotates.
+                if (update.expectedRevision !== current.speechInputRevision) {
+                    throw new SpeechInputSettingsConflictError();
+                }
+                return applyCredentialMutation(current, update);
+            }, { rotateSpeechInputRevision: true });
+            onCommitted?.();
+            return responseFromSnapshot(committed);
+        },
+    };
+}
+function applyCredentialMutation(current, update) {
+    const currentConfig = current.loaded.config;
+    const mutation = update.credential;
+    if (mutation.action === "preserve")
+        return applyPreserve(currentConfig, update);
+    if (mutation.action === "replace")
+        return applyReplace(currentConfig, update, mutation.value);
+    return applyClear(currentConfig);
+}
+function applyPreserve(currentConfig, update) {
+    const existingSource = currentConfig.speechInput?.cloud?.apiKey;
+    if (existingSource !== undefined && existingSource !== "") {
+        const currentEndpoint = speechInputTranscriptionEndpoint(effectiveSpeechInputSettings(currentConfig.speechInput).cloud.baseUrl);
+        const submittedEndpoint = speechInputTranscriptionEndpoint(update.settings.cloud.baseUrl);
+        if (currentEndpoint !== submittedEndpoint) {
+            // A preserved credential must never be redirected to a different cloud
+            // endpoint; changing the destination requires replace or a prior clear.
+            throw new SpeechInputSettingsValidationError(PRESERVED_CREDENTIAL_ENDPOINT_MESSAGE);
+        }
+    }
+    return {
+        ...currentConfig,
+        speechInput: {
+            provider: update.settings.provider,
+            ...(update.settings.language === undefined ? {} : { language: update.settings.language }),
+            cloud: {
+                baseUrl: update.settings.cloud.baseUrl,
+                model: update.settings.cloud.model,
+                ...(existingSource === undefined || existingSource === "" ? {} : { apiKey: existingSource }),
+            },
+        },
+    };
+}
+function applyReplace(currentConfig, update, credentialValue) {
+    return {
+        ...currentConfig,
+        speechInput: {
+            provider: update.settings.provider,
+            ...(update.settings.language === undefined ? {} : { language: update.settings.language }),
+            cloud: {
+                baseUrl: update.settings.cloud.baseUrl,
+                model: update.settings.cloud.model,
+                apiKey: credentialValue,
+            },
+        },
+    };
+}
+/**
+ * Clear is credential-only: it copies the committed raw speech/cloud subtree
+ * and removes only `apiKey`. Submitted nonsecret fields are validated but not
+ * applied, and defaults are derived only for the response, never persisted.
+ */
+function applyClear(currentConfig) {
+    const speech = currentConfig.speechInput;
+    if (speech === undefined)
+        return { ...currentConfig };
+    const nextSpeech = { ...speech };
+    if (speech.cloud !== undefined) {
+        const nextCloud = { ...speech.cloud };
+        delete nextCloud.apiKey;
+        nextSpeech.cloud = nextCloud;
+    }
+    return { ...currentConfig, speechInput: nextSpeech };
+}
+const UPDATE_KEYS = new Set(["expectedRevision", "settings", "credential"]);
+const SETTINGS_KEYS = new Set(["provider", "language", "cloud"]);
+const CLOUD_KEYS = new Set(["baseUrl", "model"]);
+function parseSpeechInputSettingsUpdate(value) {
+    const record = requireRecord(value, "Speech input settings update must be an object");
+    rejectUnknownKeys(record, UPDATE_KEYS, "Speech input settings update");
+    const expectedRevision = record["expectedRevision"];
+    if (typeof expectedRevision !== "string" || !isCanonicalLowercaseUuid(expectedRevision)) {
+        throw new SpeechInputSettingsValidationError("Speech input settings expectedRevision must be a canonical lowercase UUID");
+    }
+    return {
+        expectedRevision,
+        settings: parseSettings(record["settings"]),
+        credential: parseCredentialMutation(record["credential"]),
+    };
+}
+function parseSettings(value) {
+    const record = requireRecord(value, "Speech input settings update settings must be an object");
+    rejectUnknownKeys(record, SETTINGS_KEYS, "Speech input settings update settings");
+    const provider = record["provider"];
+    if (provider !== "auto" && provider !== "browser" && provider !== "cloud") {
+        throw new SpeechInputSettingsValidationError("Speech input settings provider must be auto, browser, or cloud");
+    }
+    let language;
+    const languageValue = record["language"];
+    if (languageValue !== undefined) {
+        if (typeof languageValue !== "string") {
+            throw new SpeechInputSettingsValidationError("Speech input settings language must be a canonical BCP 47 language tag");
+        }
+        const canonical = canonicalBcp47LanguageTag(languageValue);
+        if (canonical === undefined || canonical.length > MAX_LANGUAGE_LENGTH) {
+            throw new SpeechInputSettingsValidationError("Speech input settings language must be a canonical BCP 47 language tag");
+        }
+        language = canonical;
+    }
+    return {
+        provider,
+        ...(language === undefined ? {} : { language }),
+        cloud: parseCloud(record["cloud"]),
+    };
+}
+function parseCloud(value) {
+    const record = requireRecord(value, "Speech input settings update cloud must be an object");
+    rejectUnknownKeys(record, CLOUD_KEYS, "Speech input settings update cloud");
+    const baseUrlValue = record["baseUrl"];
+    if (typeof baseUrlValue !== "string" || baseUrlValue.trim() === "") {
+        throw new SpeechInputSettingsValidationError("Speech input settings cloud base URL must be a non-empty HTTPS URL");
+    }
+    const baseUrl = baseUrlValue.trim();
+    if (baseUrl.length > MAX_BASE_URL_LENGTH) {
+        throw new SpeechInputSettingsValidationError("Speech input settings cloud base URL must be at most 2048 characters");
+    }
+    validateHttpsBaseUrl(baseUrl);
+    const modelValue = record["model"];
+    if (typeof modelValue !== "string" || modelValue.trim() === "") {
+        throw new SpeechInputSettingsValidationError("Speech input settings cloud model must be a non-empty string");
+    }
+    const model = modelValue.trim();
+    if (model.length > MAX_MODEL_LENGTH) {
+        throw new SpeechInputSettingsValidationError("Speech input settings cloud model must be at most 256 characters");
+    }
+    return { baseUrl, model };
+}
+function validateHttpsBaseUrl(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new SpeechInputSettingsValidationError("Speech input settings cloud base URL must be a valid HTTPS URL");
+    }
+    if (url.protocol !== "https:") {
+        throw new SpeechInputSettingsValidationError("Speech input settings cloud base URL must use HTTPS");
+    }
+    if (url.username !== "" || url.password !== "") {
+        throw new SpeechInputSettingsValidationError("Speech input settings cloud base URL must not contain credentials");
+    }
+    if (url.search !== "") {
+        throw new SpeechInputSettingsValidationError("Speech input settings cloud base URL must not contain a query string");
+    }
+    if (url.hash !== "") {
+        throw new SpeechInputSettingsValidationError("Speech input settings cloud base URL must not contain a fragment");
+    }
+}
+function parseCredentialMutation(value) {
+    const record = requireRecord(value, "Speech input settings update credential must be an object");
+    const action = record["action"];
+    if (action !== "preserve" && action !== "replace" && action !== "clear") {
+        throw new SpeechInputSettingsValidationError("Speech input settings credential action must be preserve, replace, or clear");
+    }
+    const keys = Object.keys(record);
+    if (action === "preserve" || action === "clear") {
+        if (keys.length !== 1) {
+            throw new SpeechInputSettingsValidationError(`Speech input settings credential ${action} must not include extra fields`);
+        }
+        return { action };
+    }
+    if (keys.length !== 2 || !Object.prototype.hasOwnProperty.call(record, "value")) {
+        throw new SpeechInputSettingsValidationError("Speech input settings credential replace must include exactly one value");
+    }
+    const credentialValue = record["value"];
+    if (typeof credentialValue !== "string" || credentialValue.trim() === "") {
+        throw new SpeechInputSettingsValidationError("Speech input settings credential replace value must be a nonblank string");
+    }
+    if (Buffer.byteLength(credentialValue, "utf8") > MAX_CREDENTIAL_SOURCE_BYTES) {
+        throw new SpeechInputSettingsValidationError("Speech input settings credential replace value must be at most 8 KiB of UTF-8 text");
+    }
+    // The exact submitted source is stored byte-for-byte; never normalized.
+    return { action: "replace", value: credentialValue };
+}
+function requireRecord(value, message) {
+    if (!isRecord(value))
+        throw new SpeechInputSettingsValidationError(message);
+    return value;
+}
+function rejectUnknownKeys(record, allowed, field) {
+    const unknownKey = Object.keys(record).find((key) => !allowed.has(key));
+    if (unknownKey !== undefined) {
+        throw new SpeechInputSettingsValidationError(`${field} contains unknown key ${JSON.stringify(unknownKey)}`);
+    }
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=speechInputSettingsService.js.map