@leiboss/dsh-tts 0.0.0-stage → 0.3.0

package/dist/audio/mp3-duration.js

@@ -0,0 +1,140 @@
+/**
+ * Pure-JS MP3 timing, so duration and subtitle alignment never depend on
+ * ffmpeg or an external probe. Edge-TTS writes `audio-24khz-*` MPEG-2 Layer III
+ * (576 samples per frame), but the parser covers MPEG-1/2/2.5 Layer III.
+ *
+ * Cache metadata and the manifest both promise a `timingQuality`, so a parse
+ * failure must be reported as "unknown", never guessed here.
+ */
+/** MPEG-1 Layer III bitrates in kbit/s, indexed by the 4-bit field. */
+const BITRATE_V1_L3 = [0, 32, 40, 48, 56, 64, 80, 96, 112, 128, 160, 192, 224, 256, 320, 0];
+/** MPEG-2 and MPEG-2.5 Layer III bitrates in kbit/s. */
+const BITRATE_V2_L3 = [0, 8, 16, 24, 32, 40, 48, 56, 64, 80, 96, 112, 128, 144, 160, 0];
+/** Sample rates by MPEG version bits: 3 = MPEG-1, 2 = MPEG-2, 0 = MPEG-2.5. */
+const SAMPLE_RATES = {
+    3: [44100, 48000, 32000],
+    2: [22050, 24000, 16000],
+    0: [11025, 12000, 8000],
+};
+/** Samples per frame for Layer III, by MPEG version. */
+const SAMPLES_PER_FRAME = { 3: 1152, 2: 576, 0: 576 };
+/** Read a 28-bit ID3v2 syncsafe integer. */
+function syncsafe(b, offset) {
+    return (((b[offset] ?? 0) & 0x7f) * 0x200000 +
+        ((b[offset + 1] ?? 0) & 0x7f) * 0x4000 +
+        ((b[offset + 2] ?? 0) & 0x7f) * 0x80 +
+        ((b[offset + 3] ?? 0) & 0x7f));
+}
+/** Byte offset of the first audio frame, skipping ID3v2 tags and their footer. */
+function firstFrameOffset(b) {
+    if (b.length < 10)
+        return 0;
+    if (b[0] !== 0x49 || b[1] !== 0x44 || b[2] !== 0x33)
+        return 0;
+    const flags = b[5] ?? 0;
+    const size = syncsafe(b, 6);
+    const footer = (flags & 0x10) !== 0 ? 10 : 0;
+    return Math.min(b.length, 10 + size + footer);
+}
+/** Decode a Layer III frame header, or return undefined when it is not one. */
+function readHeader(b, offset) {
+    if (offset + 4 > b.length)
+        return undefined;
+    if (b[offset] !== 0xff)
+        return undefined;
+    const b1 = b[offset + 1] ?? 0;
+    if ((b1 & 0xe0) !== 0xe0)
+        return undefined;
+    const version = (b1 >> 3) & 0x03;
+    const layer = (b1 >> 1) & 0x03;
+    // Layer III only: layer bits 01.
+    if (layer !== 0x01)
+        return undefined;
+    if (version === 1)
+        return undefined;
+    const b2 = b[offset + 2] ?? 0;
+    const bitrateIndex = (b2 >> 4) & 0x0f;
+    const sampleRateIndex = (b2 >> 2) & 0x03;
+    const padding = (b2 >> 1) & 0x01;
+    const bitrateTable = version === 3 ? BITRATE_V1_L3 : BITRATE_V2_L3;
+    const bitrate = (bitrateTable[bitrateIndex] ?? 0) * 1000;
+    const rates = SAMPLE_RATES[version];
+    const sampleRate = rates?.[sampleRateIndex] ?? 0;
+    const samplesPerFrame = SAMPLES_PER_FRAME[version] ?? 0;
+    if (bitrate <= 0 || sampleRate <= 0 || samplesPerFrame <= 0)
+        return undefined;
+    // Layer III uses 144 (MPEG-1) or 72 (MPEG-2/2.5) as the frame-length factor.
+    const factor = version === 3 ? 144 : 72;
+    const frameLength = Math.floor((factor * bitrate) / sampleRate) + padding;
+    if (frameLength < 24)
+        return undefined;
+    return { frameLength, sampleRate, samplesPerFrame, bitrate, version };
+}
+/** Find `Xing`/`Info` in the first frame and read its declared frame count. */
+function readXingFrames(b, start, header) {
+    const limit = Math.min(b.length - 12, start + header.frameLength);
+    for (let i = start + 4; i <= limit; i += 1) {
+        const isXing = b[i] === 0x58 && b[i + 1] === 0x69 && b[i + 2] === 0x6e && b[i + 3] === 0x67;
+        const isInfo = b[i] === 0x49 && b[i + 1] === 0x6e && b[i + 2] === 0x66 && b[i + 3] === 0x6f;
+        if (!isXing && !isInfo)
+            continue;
+        const flags = b.readUInt32BE(i + 4);
+        // Frame count is the first optional field, present when bit 0 is set.
+        if ((flags & 0x01) === 0)
+            return undefined;
+        const frames = b.readUInt32BE(i + 8);
+        return frames > 0 ? frames : undefined;
+    }
+    return undefined;
+}
+/**
+ * Measure an MP3 buffer by walking its frames. Returns undefined for anything
+ * that is not a Layer III stream this parser understands, so callers can fall
+ * back to an explicit "estimated" timing quality instead of silently lying.
+ */
+export function measureMp3(buffer) {
+    if (buffer.length < 4)
+        return undefined;
+    const start = firstFrameOffset(buffer);
+    const header = readHeader(buffer, start);
+    if (header === undefined)
+        return undefined;
+    const declared = readXingFrames(buffer, start, header);
+    if (declared !== undefined) {
+        return {
+            frames: declared,
+            sampleRate: header.sampleRate,
+            durationMs: Math.round((declared * header.samplesPerFrame * 1000) / header.sampleRate),
+        };
+    }
+    let offset = start;
+    let frames = 0;
+    while (offset + 4 <= buffer.length) {
+        const current = readHeader(buffer, offset);
+        if (current === undefined) {
+            // Resync: ID3 padding or a damaged frame. Scan a bounded window so a
+            // corrupt tail cannot turn into an O(n^2) walk.
+            let resynced = false;
+            for (let scan = offset + 1; scan < Math.min(buffer.length - 4, offset + 4096); scan += 1) {
+                if (readHeader(buffer, scan) !== undefined) {
+                    offset = scan;
+                    resynced = true;
+                    break;
+                }
+            }
+            if (!resynced)
+                break;
+            continue;
+        }
+        frames += 1;
+        offset += current.frameLength;
+    }
+    if (frames === 0)
+        return undefined;
+    return {
+        frames,
+        sampleRate: header.sampleRate,
+        durationMs: Math.round((frames * header.samplesPerFrame * 1000) / header.sampleRate),
+    };
+}
+//# sourceMappingURL=mp3-duration.js.map

package/dist/audio/mp3-duration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mp3-duration.js","sourceRoot":"","sources":["../../src/audio/mp3-duration.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAWH,uEAAuE;AACvE,MAAM,aAAa,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAU,CAAA;AAEpG,wDAAwD;AACxD,MAAM,aAAa,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAU,CAAA;AAEhG,+EAA+E;AAC/E,MAAM,YAAY,GAAsD;IACtE,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;IACxB,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;IACxB,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC;CACxB,CAAA;AAED,wDAAwD;AACxD,MAAM,iBAAiB,GAA2B,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAA;AAE7E,4CAA4C;AAC5C,SAAS,QAAQ,CAAC,CAAS,EAAE,MAAc;IACzC,OAAO,CACL,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,QAAQ;QACpC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,MAAM;QACtC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI;QACpC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAC9B,CAAA;AACH,CAAC;AAED,kFAAkF;AAClF,SAAS,gBAAgB,CAAC,CAAS;IACjC,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,CAAC,CAAA;IAC3B,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,CAAC,CAAA;IAC7D,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IACvB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3B,MAAM,MAAM,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,GAAG,MAAM,CAAC,CAAA;AAC/C,CAAC;AAWD,+EAA+E;AAC/E,SAAS,UAAU,CAAC,CAAS,EAAE,MAAc;IAC3C,IAAI,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC3C,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACxC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAA;IAC7B,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IAE1C,MAAM,OAAO,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAA;IAChC,MAAM,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAA;IAC9B,iCAAiC;IACjC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACpC,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAEnC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAA;IAC7B,MAAM,YAAY,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAA;IACrC,MAAM,eAAe,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAA;IACxC,MAAM,OAAO,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAA;IAEhC,MAAM,YAAY,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAA;IAClE,MAAM,OAAO,GAAG,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAA;IACxD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IACnC,MAAM,UAAU,GAAG,KAAK,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;IAChD,MAAM,eAAe,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACvD,IAAI,OAAO,IAAI,CAAC,IAAI,UAAU,IAAI,CAAC,IAAI,eAAe,IAAI,CAAC;QAAE,OAAO,SAAS,CAAA;IAE7E,6EAA6E;IAC7E,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IACvC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,UAAU,CAAC,GAAG,OAAO,CAAA;IACzE,IAAI,WAAW,GAAG,EAAE;QAAE,OAAO,SAAS,CAAA;IAEtC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;AACvE,CAAC;AAED,+EAA+E;AAC/E,SAAS,cAAc,CAAC,CAAS,EAAE,KAAa,EAAE,MAAmB;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAA;IACjE,KAAK,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAA;QAC3F,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAA;QAC3F,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;YAAE,SAAQ;QAChC,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QACnC,sEAAsE;QACtE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QAC1C,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QACpC,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IACxC,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IACvC,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IACtC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACxC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAE1C,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;IACtD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,GAAG,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;SACvF,CAAA;IACH,CAAC;IAED,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,OAAO,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC1C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,qEAAqE;YACrE,gDAAgD;YAChD,IAAI,QAAQ,GAAG,KAAK,CAAA;YACpB,KAAK,IAAI,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;gBACzF,IAAI,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;oBAC3C,MAAM,GAAG,IAAI,CAAA;oBACb,QAAQ,GAAG,IAAI,CAAA;oBACf,MAAK;gBACP,CAAC;YACH,CAAC;YACD,IAAI,CAAC,QAAQ;gBAAE,MAAK;YACpB,SAAQ;QACV,CAAC;QACD,MAAM,IAAI,CAAC,CAAA;QACX,MAAM,IAAI,OAAO,CAAC,WAAW,CAAA;IAC/B,CAAC;IAED,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAClC,OAAO;QACL,MAAM;QACN,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;KACrF,CAAA;AACH,CAAC"}

package/dist/audio-route.d.ts

@@ -0,0 +1,122 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+/** Path prefix owned by this plugin. The signed token is the next segment. */
+export declare const AUDIO_ROUTE_PREFIX = "/dsh-tts/audio";
+/** Signed URLs stay valid for six hours by default. */
+export declare const DEFAULT_URL_TTL_MS: number;
+/** Structural view of a DSH web route registration. */
+export interface RegisterableRoute {
+    kind: 'exact' | 'prefix';
+    path: string;
+    handler: (req: IncomingMessage, res: ServerResponse) => void | Promise<void>;
+}
+/** Structural view of the host `webServer` service; only `register` is used. */
+export interface HttpRouteRegistrar {
+    register(route: RegisterableRoute): () => void;
+    /** Advertised bind host, when the host exposes it. */
+    host?: string;
+    /** Actual listening port, when the host exposes it. */
+    port?: number;
+    /** Scheme advertised by the host, when available. */
+    protocol?: string;
+    /** Origin advertised by the host, when available. */
+    getOrigin?(): string | undefined;
+}
+/**
+ * Host-provided trust fence. DSH 0.2.2 exposes this as `ctx.connection`;
+ * `admit` is intentionally not used so links remain shareable to a browser
+ * that has no DSH session cookie.
+ */
+export interface ConnectionFence {
+    requestRejection?(input: {
+        headers: Record<string, string | string[] | undefined>;
+    }): 401 | 403 | undefined;
+    allowsRemoteAuthorities?: boolean;
+}
+/** Name of the persisted HMAC secret inside the output directory. */
+export declare const SECRET_FILE_NAME = ".audio-route-secret";
+/** Resolves a local audio path to a browser-openable URL, when routable. */
+export interface AudioUrlProvider {
+    urlFor(filePath: string): string | undefined;
+    /** Absolute URL for human-readable output; absent host origin yields `undefined`. */
+    absoluteUrlFor?(filePath: string): string | undefined;
+}
+export interface AudioRouteOptions {
+    /** Ledger root; tokens may only name files beneath it. */
+    outputDir: string;
+    /** Token lifetime in milliseconds. */
+    ttlMs?: number;
+    /** Override the per-instance HMAC secret (tests only). */
+    secret?: Buffer;
+    /** Path of the persisted secret; defaults to `<outputDir>/.audio-route-secret`. */
+    secretPath?: string;
+    /** Injectable clock in epoch milliseconds. */
+    now?: () => number;
+    /** Hostnames allowed in `Host`; unset means any hostname (port still checked). */
+    allowedHosts?: readonly string[];
+    /** Expected listen port; mismatched `Host` ports are rejected. */
+    expectedPort?: number;
+    /** Debug sink for origin rejections; receives no token or path. */
+    debug?: (message: string) => void;
+    /** Extra trusted Host names (reverse proxies); disables port pinning. */
+    trustedHosts?: readonly string[];
+    /** Host trust fence, when DSH exposes `ctx.connection`. */
+    connection?: ConnectionFence;
+    /**
+     * URL and route prefix. Defaults to the engine's own prefix; a consumer such as
+     * the voiceover plugin passes its own so two plugins never contend for one path.
+     */
+    prefix?: string;
+}
+/**
+ * Owns the signed-token format and the HTTP handler. One instance per plugin
+ * load; `register` binds it to the host router and returns a disposer.
+ */
+export declare class AudioRoute implements AudioUrlProvider {
+    private readonly root;
+    private readonly prefix;
+    private readonly ttlMs;
+    private readonly secret;
+    private readonly now;
+    private readonly debug?;
+    private readonly trustedHosts;
+    private readonly connection?;
+    private allowedHosts?;
+    private expectedPort?;
+    private skipPortCheck;
+    private active;
+    private origin?;
+    constructor(options: AudioRouteOptions);
+    /** True once the host router accepted the route. */
+    get registered(): boolean;
+    /** Register on the DSH host router; the disposer unregisters and disables URLs. */
+    register(server: HttpRouteRegistrar): () => void;
+    /**
+     * Browser-openable same-origin URL, or `undefined` when the route is not
+     * registered or the file is outside the output directory / not an MP3.
+     */
+    urlFor(filePath: string): string | undefined;
+    /** Remember the host-advertised origin, trimmed of any trailing slash. */
+    setOrigin(origin: string): void;
+    /**
+     * Absolute playback URL for humans, or `undefined` when the host did not
+     * advertise an origin. Never guesses a host: callers fall back to the
+     * relative {@link urlFor} result instead.
+     */
+    absoluteUrlFor(filePath: string): string | undefined;
+    /** Serve one request. Exported behaviour is exercised directly by tests. */
+    handle(req: IncomingMessage, res: ServerResponse): Promise<void>;
+    /** HMAC-SHA-256 over the payload, base64url-encoded. */
+    private sign;
+    /**
+     * Same-origin fence in front of the token check. Returns a reason when the
+     * request must be rejected. Missing headers are tolerated only when neither
+     * a port nor an Origin pins the request to a browser origin, which keeps
+     * non-browser callers working while DSH provides no trust-fence API.
+     */
+    private checkOrigin;
+    /** Path relative to the ledger root, using `/` on every platform. */
+    private relativePath;
+    /** Verify signature + expiry, then confine the decoded path to the root. */
+    private verify;
+}
+//# sourceMappingURL=audio-route.d.ts.map

package/dist/audio-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audio-route.d.ts","sourceRoot":"","sources":["../src/audio-route.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAGhE,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,mBAAmB,CAAA;AAElD,uDAAuD;AACvD,eAAO,MAAM,kBAAkB,QAAqB,CAAA;AAEpD,uDAAuD;AACvD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAA;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7E;AAED,gFAAgF;AAChF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,IAAI,CAAA;IAC9C,sDAAsD;IACtD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,qDAAqD;IACrD,SAAS,CAAC,IAAI,MAAM,GAAG,SAAS,CAAA;CACjC;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,gBAAgB,CAAC,CAAC,KAAK,EAAE;QACvB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;KACvD,GAAG,GAAG,GAAG,GAAG,GAAG,SAAS,CAAA;IACzB,uBAAuB,CAAC,EAAE,OAAO,CAAA;CAClC;AAED,qEAAqE;AACrE,eAAO,MAAM,gBAAgB,wBAAwB,CAAA;AAErD,4EAA4E;AAC5E,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IAC5C,qFAAqF;IACrF,cAAc,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;CACtD;AAED,MAAM,WAAW,iBAAiB;IAChC,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAA;IACjB,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,8CAA8C;IAC9C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,kFAAkF;IAClF,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,mEAAmE;IACnE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IACjC,yEAAyE;IACzE,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,2DAA2D;IAC3D,UAAU,CAAC,EAAE,eAAe,CAAA;IAC5B;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAqHD;;;GAGG;AACH,qBAAa,UAAW,YAAW,gBAAgB;IACjD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAQ;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;IAClC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAA2B;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAU;IACvC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAiB;IAC7C,OAAO,CAAC,YAAY,CAAC,CAAmB;IACxC,OAAO,CAAC,YAAY,CAAC,CAAQ;IAC7B,OAAO,CAAC,aAAa,CAAQ;IAC7B,OAAO,CAAC,MAAM,CAAQ;IACtB,OAAO,CAAC,MAAM,CAAC,CAAQ;gBAEX,OAAO,EAAE,iBAAiB;IAoBtC,oDAAoD;IACpD,IAAI,UAAU,IAAI,OAAO,CAExB;IAED,mFAAmF;IACnF,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,IAAI;IAiChD;;;OAGG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAY5C,0EAA0E;IAC1E,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAK/B;;;;OAIG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAMpD,4EAA4E;IACtE,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAoGtE,wDAAwD;IACxD,OAAO,CAAC,IAAI;IAIZ;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAyDnB,qEAAqE;IACrE,OAAO,CAAC,YAAY;IAQpB,4EAA4E;IAC5E,OAAO,CAAC,MAAM;CA2Bf"}