@nac3/forge-cli 0.2.0-alpha.1

package/dist/voice/voiceprint/liveness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"liveness.js","sourceRoot":"","sources":["../../../src/voice/voiceprint/liveness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAKH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAIzC,MAAM,UAAU,GAAG;IACjB,uBAAuB;IACvB,mBAAmB;IACnB,mBAAmB;IACnB,mBAAmB;IACnB,aAAa;IACb,uBAAuB;IACvB,cAAc;IACd,kBAAkB;CACnB,CAAC;AAEF,MAAM,UAAU,GAAG;IACjB,yBAAyB;IACzB,oBAAoB;IACpB,0BAA0B;IAC1B,gBAAgB;IAChB,iBAAiB;IACjB,mBAAmB;IACnB,WAAW;IACX,iBAAiB;CAClB,CAAC;AAEF,oEAAoE;AACpE,MAAM,oBAAoB,GAAG;IAC3B,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO;CAClF,CAAC;AACF,MAAM,qBAAqB,GAAG;IAC5B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ;IACpD,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY;CACrD,CAAC;AACF,MAAM,oBAAoB,GAAG;IAC3B,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW;IACpD,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;CAC3C,CAAC;AACF,MAAM,oBAAoB,GAAG;IAC3B,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM;CAC/E,CAAC;AACF,MAAM,qBAAqB,GAAG;IAC5B,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS;IAC5D,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU;CAC/C,CAAC;AACF,MAAM,oBAAoB,GAAG;IAC3B,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO;IAC5C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ;CACvC,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,CAAS,EAAE,IAAsB;IAC7D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,qCAAqC,GAAG,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,oBAAoB,CAAC,CAAC,CAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,qBAAqB,CAAC,CAAC,GAAG,EAAE,CAAE,CAAC;QAClD,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,GAAG,oBAAoB,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAE,CAAC;QACvD,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;QACpB,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,oBAAoB,CAAC,CAAC,CAAE,CAAC;IAC5C,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,qBAAqB,CAAC,CAAC,GAAG,EAAE,CAAE,CAAC;IAClD,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAE,CAAC;IACvD,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;IACpB,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC;AAmBD,MAAM,UAAU,iBAAiB,CAAC,OAAwB,EAAE;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;IACxD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAE,CAAC;IAC5D,gEAAgE;IAChE,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,KAAK,IAAI;QAC5B,CAAC,CAAC,MAAM,GAAG,iBAAiB,GAAG,UAAU;QACzC,CAAC,CAAC,MAAM,GAAG,kBAAkB,GAAG,UAAU,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,KAAK,IAAI;QAC1B,CAAC,CAAC,0BAA0B,GAAG,QAAQ;QACvC,CAAC,CAAC,sBAAsB,GAAG,QAAQ,CAAC;IACtC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;AACzD,CAAC;AAED;gEACgE;AAChE,MAAM,UAAU,WAAW,CAAC,CAAS,EAAE,CAAS;IAC9C,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC;IACpC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,IAAI,IAAI,GAAG,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CACf,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAU,YAAY,CACpC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAa,YAAY,CACpC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CACnB,CAAC;QACJ,CAAC;QACD,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC;AAED;;8CAE8C;AAC9C,MAAM,UAAU,eAAe,CAAC,CAAS;IACvC,OAAO,CAAC;SACL,WAAW,EAAE;SACb,SAAS,CAAC,KAAK,CAAC;SAChB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,mBAAmB;SACzC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC;SAC5B,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;2DAE2D;AAC3D,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,QAAgB;IAChE,MAAM,CAAC,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC;AAChC,CAAC;AA+BD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAA2B,EAC3B,WAAwB,EACxB,kBAAsC,EACtC,eAAgC;IAEhC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,EAAE;YACd,YAAY,EAAE,KAAK;YACnB,cAAc,EAAE,KAAK;YACrB,MAAM,EAAE,wCAAwC;SACjD,CAAC;IACJ,CAAC;IACD,aAAa;IACb,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC;YACrC,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;SAClE,CAAC,CAAC;QACH,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,EAAE;YACd,YAAY,EAAE,KAAK;YACnB,cAAc,EAAE,KAAK;YACrB,MAAM,EAAE,kCAAkC;kBACtC,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;SACvD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAEnE;oDACgD;IAChD,IAAI,UAAU,GAAG,IAAI,CAAC;IACtB,IAAI,GAAG,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,QAAQ,CAChC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAA4C,EAAE,EAC9E,kBAAkB,EAClB,eAAe,CAChB,CAAC;YACF,UAAU,GAAG,WAAW,CAAC,OAAO,KAAK,GAAG,CAAC,cAAc,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,UAAU;gBACV,YAAY,EAAE,QAAQ;gBACtB,cAAc,EAAE,KAAK;gBACrB,MAAM,EAAE,gCAAgC;sBACpC,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aACvD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7B,OAAO;YACL,MAAM,EAAE,KAAK;YACb,UAAU;YACV,YAAY,EAAE,KAAK;YACnB,cAAc,EAAE,KAAK;YACrB,MAAM,EAAE,6DAA6D;SACtE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,MAAM,EAAE,KAAK;YACb,UAAU;YACV,YAAY,EAAE,KAAK;YACnB,cAAc,EAAE,UAAU;YAC1B,MAAM,EAAE,0CAA0C,GAAG,GAAG,CAAC,SAAS,CAAC,QAAQ;SAC5E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,MAAM,EAAE,KAAK;YACb,UAAU;YACV,YAAY,EAAE,IAAI;YAClB,cAAc,EAAE,KAAK;YACrB,MAAM,EAAE,iEAAiE;SAC1E,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,UAAU;QACV,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,MAAM,EAAE,GAAG,CAAC,cAAc;YACxB,CAAC,CAAC,qDAAqD;YACvD,CAAC,CAAC,iFAAiF;KACtF,CAAC;AACJ,CAAC"}

package/dist/voice/voiceprint/match.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Voiceprint matcher.
+ *
+ * Cosine similarity between a target embedding and each
+ * enrolled identity's embedding. Returns the ranked list for
+ * transparency + the best match if it exceeds the threshold.
+ *
+ * Two cross-provider safety nets:
+ *   - The target's `source` is compared against each enrolled
+ *     embedding's `source`. Mismatches DO NOT crash -- they get
+ *     a warning + are excluded from the match. Reason:
+ *     embeddings from different providers live in different
+ *     vector spaces; the cosine is meaningless across them.
+ *   - Dimensionality mismatch between target and enrolled
+ *     embedding also excludes that pair with a warning.
+ *
+ * Pure math. No IO, no audio decoding.
+ *
+ * ASCII-only.
+ */
+import type { EnrolledIdentity, MatchResult, VoiceprintEmbedding } from './types.js';
+/** Cosine similarity in [-1, 1]. Exported for tests. */
+export declare function cosineSimilarity(a: number[], b: number[]): number;
+export interface MatchOptions {
+    /** Cosine score above which a match counts as the enrolled
+     *  speaker. Default 0.75 per G-VOICE-2 (2026-05-23). */
+    threshold?: number;
+    /** When true, the matcher includes cross-provider pairs with
+     *  the provider mismatch noted on the rank entry. Default
+     *  false -- safer to skip them. */
+    allowCrossProvider?: boolean;
+}
+export interface MatchSkipNote {
+    name: string;
+    reason: 'provider_mismatch' | 'dimensionality_mismatch';
+    target_source: string;
+    enrolled_source: string;
+    target_length: number;
+    enrolled_length: number;
+}
+export interface MatchOutput extends MatchResult {
+    /** Identities skipped during matching, with the reason.
+     *  Visible for debugging + helpful for upgrading from the
+     *  stub to a real provider (provider mismatch happens when
+     *  the user re-enrolls with a different backend). */
+    skipped: MatchSkipNote[];
+}
+/**
+ * Compare a target embedding against every enrolled identity.
+ * Returns the ranked list + the best name above the threshold,
+ * or null if no match qualifies.
+ */
+export declare function matchEmbedding(target: VoiceprintEmbedding, enrolled: EnrolledIdentity[], opts?: MatchOptions): MatchOutput;
+//# sourceMappingURL=match.d.ts.map

package/dist/voice/voiceprint/match.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"match.d.ts","sourceRoot":"","sources":["../../../src/voice/voiceprint/match.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,WAAW,EACX,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAEpB,wDAAwD;AACxD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAkBjE;AAED,MAAM,WAAW,YAAY;IAC3B;4DACwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;uCAEmC;IACnC,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,mBAAmB,GAAG,yBAAyB,CAAC;IACxD,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,WAAY,SAAQ,WAAW;IAC9C;;;yDAGqD;IACrD,OAAO,EAAE,aAAa,EAAE,CAAC;CAC1B;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,gBAAgB,EAAE,EAC5B,IAAI,GAAE,YAAiB,GACtB,WAAW,CA6Cb"}

package/dist/voice/voiceprint/match.js

@@ -0,0 +1,88 @@
+/**
+ * Voiceprint matcher.
+ *
+ * Cosine similarity between a target embedding and each
+ * enrolled identity's embedding. Returns the ranked list for
+ * transparency + the best match if it exceeds the threshold.
+ *
+ * Two cross-provider safety nets:
+ *   - The target's `source` is compared against each enrolled
+ *     embedding's `source`. Mismatches DO NOT crash -- they get
+ *     a warning + are excluded from the match. Reason:
+ *     embeddings from different providers live in different
+ *     vector spaces; the cosine is meaningless across them.
+ *   - Dimensionality mismatch between target and enrolled
+ *     embedding also excludes that pair with a warning.
+ *
+ * Pure math. No IO, no audio decoding.
+ *
+ * ASCII-only.
+ */
+/** Cosine similarity in [-1, 1]. Exported for tests. */
+export function cosineSimilarity(a, b) {
+    if (a.length !== b.length) {
+        throw new Error('cosineSimilarity: dimensionality mismatch (' + a.length + ' vs ' + b.length + ')');
+    }
+    let dot = 0;
+    let aNorm = 0;
+    let bNorm = 0;
+    for (let i = 0; i < a.length; i++) {
+        const av = a[i] ?? 0;
+        const bv = b[i] ?? 0;
+        dot += av * bv;
+        aNorm += av * av;
+        bNorm += bv * bv;
+    }
+    if (aNorm === 0 || bNorm === 0)
+        return 0;
+    return dot / (Math.sqrt(aNorm) * Math.sqrt(bNorm));
+}
+/**
+ * Compare a target embedding against every enrolled identity.
+ * Returns the ranked list + the best name above the threshold,
+ * or null if no match qualifies.
+ */
+export function matchEmbedding(target, enrolled, opts = {}) {
+    const threshold = opts.threshold ?? 0.75;
+    const allowCross = !!opts.allowCrossProvider;
+    const ranked = [];
+    const skipped = [];
+    for (const id of enrolled) {
+        const tgt = target;
+        const ref = id.embedding;
+        if (!allowCross && tgt.source !== ref.source) {
+            skipped.push({
+                name: id.name,
+                reason: 'provider_mismatch',
+                target_source: tgt.source,
+                enrolled_source: ref.source,
+                target_length: tgt.length,
+                enrolled_length: ref.length,
+            });
+            continue;
+        }
+        if (tgt.vector.length !== ref.vector.length) {
+            skipped.push({
+                name: id.name,
+                reason: 'dimensionality_mismatch',
+                target_source: tgt.source,
+                enrolled_source: ref.source,
+                target_length: tgt.length,
+                enrolled_length: ref.length,
+            });
+            continue;
+        }
+        const score = cosineSimilarity(tgt.vector, ref.vector);
+        ranked.push({ name: id.name, score });
+    }
+    ranked.sort((a, b) => b.score - a.score);
+    const best = ranked[0];
+    const matched = best && best.score >= threshold ? best.name : null;
+    return {
+        matched,
+        score: best ? best.score : 0,
+        ranked,
+        skipped,
+    };
+}
+//# sourceMappingURL=match.js.map

package/dist/voice/voiceprint/match.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"match.js","sourceRoot":"","sources":["../../../src/voice/voiceprint/match.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAQH,wDAAwD;AACxD,MAAM,UAAU,gBAAgB,CAAC,CAAW,EAAE,CAAW;IACvD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,6CAA6C,GAAG,CAAC,CAAC,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,GAAG,CACnF,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrB,GAAG,IAAI,EAAE,GAAG,EAAE,CAAC;QACf,KAAK,IAAI,EAAE,GAAG,EAAE,CAAC;QACjB,KAAK,IAAI,EAAE,GAAG,EAAE,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACzC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACrD,CAAC;AA6BD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,MAA2B,EAC3B,QAA4B,EAC5B,OAAqB,EAAE;IAEvB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;IACzC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;IAC7C,MAAM,MAAM,GAA2C,EAAE,CAAC;IAC1D,MAAM,OAAO,GAAoB,EAAE,CAAC;IAEpC,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,MAAM,CAAC;QACnB,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC;QACzB,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,MAAM,EAAE,mBAAmB;gBAC3B,aAAa,EAAE,GAAG,CAAC,MAAM;gBACzB,eAAe,EAAE,GAAG,CAAC,MAAM;gBAC3B,aAAa,EAAE,GAAG,CAAC,MAAM;gBACzB,eAAe,EAAE,GAAG,CAAC,MAAM;aAC5B,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,MAAM,EAAE,yBAAyB;gBACjC,aAAa,EAAE,GAAG,CAAC,MAAM;gBACzB,eAAe,EAAE,GAAG,CAAC,MAAM;gBAC3B,aAAa,EAAE,GAAG,CAAC,MAAM;gBACzB,eAAe,EAAE,GAAG,CAAC,MAAM;aAC5B,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,OAAO,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnE,OAAO;QACL,OAAO;QACP,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM;QACN,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/voice/voiceprint/providers/local-mfcc-stub.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Local MFCC-ish voiceprint provider -- ALPHA STUB.
+ *
+ * This provider is a PLACEHOLDER for the alpha. It extracts a
+ * fixed-size embedding from audio bytes using simple
+ * deterministic hashing + byte-level statistics. It is good
+ * enough to:
+ *
+ *   - Exercise the state machine + types of the voiceprint
+ *     subsystem.
+ *   - Discriminate between two clearly-different audio
+ *     samples in unit tests.
+ *
+ * It is NOT production quality. Specifically:
+ *   - It does not decode webm / mp4 / mp3. It hashes the raw
+ *     bytes as they arrive.
+ *   - Two recordings of the same voice with different
+ *     microphones or codecs will hash to different embeddings.
+ *   - The matcher works against bytes, not speech features.
+ *
+ * Replace with `speechbrain-py` (Python sidecar + x-vector
+ * model) or `google` (Speaker Recognition cloud) before the
+ * v1.0 release.
+ *
+ * The interface this stub implements is the same one the real
+ * providers will fulfil, so the state machine, store, and
+ * trust layer never change.
+ *
+ * Loud about its limitations -- the constructor logs once per
+ * process so the developer cannot ship it accidentally.
+ *
+ * ASCII-only.
+ */
+import type { VoiceprintEmbedding, VoiceprintExtractRequest, VoiceprintProvider } from '../types.js';
+declare const EMBEDDING_SIZE = 256;
+export declare class LocalMfccStubProvider implements VoiceprintProvider {
+    readonly id = "local-mfcc-stub";
+    readonly embeddingSize = 256;
+    readyToRun(): Promise<boolean>;
+    extract(req: VoiceprintExtractRequest): Promise<VoiceprintEmbedding>;
+}
+/** Exported for tests. */
+export { EMBEDDING_SIZE };
+//# sourceMappingURL=local-mfcc-stub.d.ts.map

package/dist/voice/voiceprint/providers/local-mfcc-stub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-mfcc-stub.d.ts","sourceRoot":"","sources":["../../../../src/voice/voiceprint/providers/local-mfcc-stub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAGH,OAAO,KAAK,EACV,mBAAmB,EACnB,wBAAwB,EACxB,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAErB,QAAA,MAAM,cAAc,MAAM,CAAC;AAE3B,qBAAa,qBAAsB,YAAW,kBAAkB;IAC9D,QAAQ,CAAC,EAAE,qBAAqB;IAChC,QAAQ,CAAC,aAAa,OAAkB;IAElC,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IAM9B,OAAO,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,mBAAmB,CAAC;CA2C3E;AAED,0BAA0B;AAC1B,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/voice/voiceprint/providers/local-mfcc-stub.js

@@ -0,0 +1,92 @@
+/**
+ * Local MFCC-ish voiceprint provider -- ALPHA STUB.
+ *
+ * This provider is a PLACEHOLDER for the alpha. It extracts a
+ * fixed-size embedding from audio bytes using simple
+ * deterministic hashing + byte-level statistics. It is good
+ * enough to:
+ *
+ *   - Exercise the state machine + types of the voiceprint
+ *     subsystem.
+ *   - Discriminate between two clearly-different audio
+ *     samples in unit tests.
+ *
+ * It is NOT production quality. Specifically:
+ *   - It does not decode webm / mp4 / mp3. It hashes the raw
+ *     bytes as they arrive.
+ *   - Two recordings of the same voice with different
+ *     microphones or codecs will hash to different embeddings.
+ *   - The matcher works against bytes, not speech features.
+ *
+ * Replace with `speechbrain-py` (Python sidecar + x-vector
+ * model) or `google` (Speaker Recognition cloud) before the
+ * v1.0 release.
+ *
+ * The interface this stub implements is the same one the real
+ * providers will fulfil, so the state machine, store, and
+ * trust layer never change.
+ *
+ * Loud about its limitations -- the constructor logs once per
+ * process so the developer cannot ship it accidentally.
+ *
+ * ASCII-only.
+ */
+import { createHash } from 'node:crypto';
+const EMBEDDING_SIZE = 256;
+export class LocalMfccStubProvider {
+    id = 'local-mfcc-stub';
+    embeddingSize = EMBEDDING_SIZE;
+    async readyToRun() {
+        /* Pure local stub -- always ready. The user does not need
+           to configure any credential to use it. */
+        return true;
+    }
+    async extract(req) {
+        if (!req.audio || req.audio.length === 0) {
+            throw new Error('local-mfcc-stub: audio buffer is empty');
+        }
+        /* Deterministic embedding: take 8 SHA-256 hashes seeded with
+           successive 32-byte windows from the audio, project each
+           byte to a float in [-1, 1], normalise the resulting vector. */
+        const vector = new Array(EMBEDDING_SIZE).fill(0);
+        const audio = req.audio;
+        const window = Math.max(1, Math.floor(audio.length / 8));
+        for (let chunk = 0; chunk < 8; chunk++) {
+            const start = chunk * window;
+            const end = Math.min(audio.length, start + window);
+            if (start >= end)
+                break;
+            const h = createHash('sha256');
+            h.update(audio.subarray(start, end));
+            const digest = h.digest();
+            /* Each SHA-256 hash is 32 bytes; spread across 32 slots
+               of our 256-dim vector. */
+            for (let i = 0; i < 32; i++) {
+                const idx = chunk * 32 + i;
+                if (idx < EMBEDDING_SIZE) {
+                    /* Map byte 0..255 to roughly -1..1. */
+                    vector[idx] = (digest[i] - 128) / 128;
+                }
+            }
+        }
+        /* L2-normalise so cosine == dot product downstream. */
+        let norm = 0;
+        for (const v of vector)
+            norm += v * v;
+        norm = Math.sqrt(norm);
+        if (norm > 0) {
+            for (let i = 0; i < vector.length; i++) {
+                vector[i] = vector[i] / norm;
+            }
+        }
+        return {
+            vector,
+            length: vector.length,
+            source: this.id,
+            enrolled_at: new Date().toISOString(),
+        };
+    }
+}
+/** Exported for tests. */
+export { EMBEDDING_SIZE };
+//# sourceMappingURL=local-mfcc-stub.js.map

package/dist/voice/voiceprint/providers/local-mfcc-stub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-mfcc-stub.js","sourceRoot":"","sources":["../../../../src/voice/voiceprint/providers/local-mfcc-stub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,MAAM,OAAO,qBAAqB;IACvB,EAAE,GAAG,iBAAiB,CAAC;IACvB,aAAa,GAAG,cAAc,CAAC;IAExC,KAAK,CAAC,UAAU;QACd;oDAC4C;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAA6B;QACzC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD;;yEAEiE;QACjE,MAAM,MAAM,GAAG,IAAI,KAAK,CAAS,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACzD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;YAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC,CAAC;YACnD,IAAI,KAAK,IAAI,GAAG;gBAAE,MAAM;YACxB,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;YAC1B;wCAC4B;YAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,MAAM,GAAG,GAAG,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC3B,IAAI,GAAG,GAAG,cAAc,EAAE,CAAC;oBACzB,uCAAuC;oBACvC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;gBACzC,CAAC;YACH,CAAC;QACH,CAAC;QACD,uDAAuD;QACvD,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACvC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC;YAChC,CAAC;QACH,CAAC;QACD,OAAO;YACL,MAAM;YACN,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC;IACJ,CAAC;CACF;AAED,0BAA0B;AAC1B,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/voice/voiceprint/store.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Voiceprint store -- persisted enrolled identities.
+ *
+ * Storage:
+ *   ~/.yujin-forge/voiceprints.json (atomic-write, mode 0o600)
+ *
+ * Why a separate file (not the vault):
+ *   - Embeddings are larger than typical credentials
+ *     (256 floats ~= a few KB serialised). Keeping them out of
+ *     vault.json keeps the vault file small + fast to load on
+ *     every credential check.
+ *   - Voiceprints have different threat semantics (auth data,
+ *     not secret tokens). Same machine-fingerprint encryption
+ *     is overkill; we keep the file readable but the embeddings
+ *     themselves are not secret -- they cannot be reversed back
+ *     into audio.
+ *
+ * The store API mirrors Vault: open / has / get / set / remove
+ * / list. Atomic write per operation. List returns metadata
+ * only (name, label, source, length, enrolled_at) -- never the
+ * raw vector.
+ *
+ * Loud failures per ROADMAP sec 12.2.
+ *
+ * ASCII-only.
+ */
+import type { EnrolledIdentity } from './types.js';
+export interface VoiceprintMetadata {
+    name: string;
+    label: string;
+    source: string;
+    embedding_length: number;
+    enrolled_at: string;
+    has_notes: boolean;
+}
+export interface VoiceprintStoreOptions {
+    /** Absolute path to the config dir (typically ~/.yujin-forge). */
+    configDir: string;
+}
+export declare class VoiceprintStore {
+    private readonly configDir;
+    private identities;
+    private constructor();
+    /** Open or create the store. Cleans up orphan .tmp from a
+     *  previous crashed write. */
+    static open(opts: VoiceprintStoreOptions): Promise<VoiceprintStore>;
+    has(name: string): boolean;
+    size(): number;
+    list(): VoiceprintMetadata[];
+    /** Server-side only: returns the raw identity including the
+     *  embedding vector. Used by the matcher. Never wired to a
+     *  route handler that returns to the browser. */
+    get(name: string): EnrolledIdentity;
+    /** All enrolled identities. Server-side only. */
+    all(): EnrolledIdentity[];
+    set(identity: EnrolledIdentity): Promise<void>;
+    remove(name: string): Promise<boolean>;
+    private persist;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/voice/voiceprint/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/voice/voiceprint/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAuB,MAAM,YAAY,CAAC;AAYxE,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,UAAU,CAAmC;IAErD,OAAO;IAKP;kCAC8B;WACjB,IAAI,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,eAAe,CAAC;IAqCzE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B,IAAI,IAAI,MAAM;IAId,IAAI,IAAI,kBAAkB,EAAE;IAa5B;;qDAEiD;IACjD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB;IAMnC,iDAAiD;IACjD,GAAG,IAAI,gBAAgB,EAAE;IAInB,GAAG,CAAC,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAwB9C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YAS9B,OAAO;CAYtB"}

package/dist/voice/voiceprint/store.js

@@ -0,0 +1,155 @@
+/**
+ * Voiceprint store -- persisted enrolled identities.
+ *
+ * Storage:
+ *   ~/.yujin-forge/voiceprints.json (atomic-write, mode 0o600)
+ *
+ * Why a separate file (not the vault):
+ *   - Embeddings are larger than typical credentials
+ *     (256 floats ~= a few KB serialised). Keeping them out of
+ *     vault.json keeps the vault file small + fast to load on
+ *     every credential check.
+ *   - Voiceprints have different threat semantics (auth data,
+ *     not secret tokens). Same machine-fingerprint encryption
+ *     is overkill; we keep the file readable but the embeddings
+ *     themselves are not secret -- they cannot be reversed back
+ *     into audio.
+ *
+ * The store API mirrors Vault: open / has / get / set / remove
+ * / list. Atomic write per operation. List returns metadata
+ * only (name, label, source, length, enrolled_at) -- never the
+ * raw vector.
+ *
+ * Loud failures per ROADMAP sec 12.2.
+ *
+ * ASCII-only.
+ */
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+const FILENAME = 'voiceprints.json';
+const TMP_SUFFIX = '.tmp';
+const FILE_VERSION = 1;
+const NAME_RE = /^[a-z][a-z0-9_-]*$/;
+export class VoiceprintStore {
+    configDir;
+    identities;
+    constructor(configDir, identities) {
+        this.configDir = configDir;
+        this.identities = identities;
+    }
+    /** Open or create the store. Cleans up orphan .tmp from a
+     *  previous crashed write. */
+    static async open(opts) {
+        if (!opts.configDir || !path.isAbsolute(opts.configDir)) {
+            throw new Error('VoiceprintStore.open: configDir must be an absolute path');
+        }
+        await fs.mkdir(opts.configDir, { recursive: true });
+        const tmpPath = path.join(opts.configDir, FILENAME + TMP_SUFFIX);
+        try {
+            await fs.unlink(tmpPath);
+        }
+        catch (err) {
+            if (err.code !== 'ENOENT')
+                throw err;
+        }
+        const filePath = path.join(opts.configDir, FILENAME);
+        let identities = {};
+        try {
+            const raw = await fs.readFile(filePath, 'utf-8');
+            const parsed = JSON.parse(raw);
+            if (!parsed || typeof parsed !== 'object') {
+                throw new Error('voiceprints.json is not an object');
+            }
+            if (parsed.version !== FILE_VERSION) {
+                throw new Error('voiceprints.json version mismatch (got ' + parsed.version
+                    + ', expected ' + FILE_VERSION + ')');
+            }
+            if (!parsed.identities || typeof parsed.identities !== 'object') {
+                throw new Error('voiceprints.json missing identities map');
+            }
+            identities = parsed.identities;
+        }
+        catch (err) {
+            if (err.code !== 'ENOENT')
+                throw err;
+            /* First use -- empty store. */
+        }
+        return new VoiceprintStore(opts.configDir, identities);
+    }
+    has(name) {
+        return Object.prototype.hasOwnProperty.call(this.identities, name);
+    }
+    size() {
+        return Object.keys(this.identities).length;
+    }
+    list() {
+        return Object.entries(this.identities)
+            .map(([name, id]) => ({
+            name,
+            label: id.label,
+            source: id.embedding.source,
+            embedding_length: id.embedding.length,
+            enrolled_at: id.embedding.enrolled_at,
+            has_notes: !!(id.notes && id.notes.trim() !== ''),
+        }))
+            .sort((a, b) => a.name.localeCompare(b.name));
+    }
+    /** Server-side only: returns the raw identity including the
+     *  embedding vector. Used by the matcher. Never wired to a
+     *  route handler that returns to the browser. */
+    get(name) {
+        const id = this.identities[name];
+        if (!id)
+            throw new Error('voiceprint identity not found: ' + name);
+        return id;
+    }
+    /** All enrolled identities. Server-side only. */
+    all() {
+        return Object.values(this.identities);
+    }
+    async set(identity) {
+        if (!NAME_RE.test(identity.name)) {
+            throw new Error('voiceprint name must match ' + NAME_RE.source
+                + ' (lowercase alphanumeric + underscore + hyphen, starting with a letter). Got: '
+                + JSON.stringify(identity.name));
+        }
+        if (!identity.label || typeof identity.label !== 'string') {
+            throw new Error('voiceprint set: label is required');
+        }
+        if (!identity.embedding || !Array.isArray(identity.embedding.vector) || identity.embedding.vector.length === 0) {
+            throw new Error('voiceprint set: embedding vector is missing or empty');
+        }
+        if (identity.embedding.length !== identity.embedding.vector.length) {
+            throw new Error('voiceprint set: embedding length mismatch (claimed '
+                + identity.embedding.length + ', actual ' + identity.embedding.vector.length + ')');
+        }
+        this.identities[identity.name] = { ...identity };
+        await this.persist();
+    }
+    async remove(name) {
+        if (!Object.prototype.hasOwnProperty.call(this.identities, name)) {
+            return false;
+        }
+        delete this.identities[name];
+        await this.persist();
+        return true;
+    }
+    async persist() {
+        const filePath = path.join(this.configDir, FILENAME);
+        const payload = {
+            version: FILE_VERSION,
+            identities: this.identities,
+        };
+        const tmpPath = filePath + TMP_SUFFIX;
+        await fs.writeFile(tmpPath, JSON.stringify(payload, null, 2), { mode: 0o600 });
+        const fh = await fs.open(tmpPath, 'r+');
+        try {
+            await fh.sync();
+        }
+        finally {
+            await fh.close();
+        }
+        await fs.rename(tmpPath, filePath);
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/voice/voiceprint/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/voice/voiceprint/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,MAAM,QAAQ,GAAG,kBAAkB,CAAC;AACpC,MAAM,UAAU,GAAG,MAAM,CAAC;AAC1B,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,OAAO,GAAG,oBAAoB,CAAC;AAqBrC,MAAM,OAAO,eAAe;IACT,SAAS,CAAS;IAC3B,UAAU,CAAmC;IAErD,YAAoB,SAAiB,EAAE,UAA4C;QACjF,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;kCAC8B;IAC9B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAA4B;QAC5C,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEpD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,GAAG,UAAU,CAAC,CAAC;QACjE,IAAI,CAAC;YAAC,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QACjC,OAAO,GAAG,EAAE,CAAC;YACX,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;QAClE,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACrD,IAAI,UAAU,GAAqC,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;YAClD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CACb,yCAAyC,GAAI,MAAM,CAAC,OAAmB;sBACrE,aAAa,GAAG,YAAY,GAAG,GAAG,CACrC,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAChE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,CAAC;YACD,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;YAChE,+BAA+B;QACjC,CAAC;QACD,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACzD,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;IAED,IAAI;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;IAC7C,CAAC;IAED,IAAI;QACF,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;aACnC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACpB,IAAI;YACJ,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM;YAC3B,gBAAgB,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM;YACrC,WAAW,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW;YACrC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;SAClD,CAAC,CAAC;aACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IAED;;qDAEiD;IACjD,GAAG,CAAC,IAAY;QACd,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,IAAI,CAAC,CAAC;QACnE,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,iDAAiD;IACjD,GAAG;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,QAA0B;QAClC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,6BAA6B,GAAG,OAAO,CAAC,MAAM;kBAC5C,gFAAgF;kBAChF,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAChC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/G,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CACb,qDAAqD;kBACnD,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CACnF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QACjD,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;YACjE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,OAAO,GAAoB;YAC/B,OAAO,EAAE,YAAY;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;QACF,MAAM,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;QACtC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC;YAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QACtD,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;CACF"}

package/dist/voice/voiceprint/trust.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Trust state machine for the voice subsystem.
+ *
+ * Five layers, concentric. Outer layers ALWAYS apply -- a user
+ * who switches off the voiceprint check (Layer 2) still has
+ * the audit log (Layer 4) and the optional institutional
+ * remote review (Layer 5) on top.
+ *
+ *   Layer 5: institutional log auditable from another device
+ *   Layer 4: rollback command + audit log
+ *   Layer 3: liveness check before irreversible ops
+ *   Layer 2: explicit voice toggle ("modo confianza on/off")
+ *   Layer 1: voiceprint match -> trust mode ON by default
+ *
+ * Operations are classified as:
+ *
+ *   - safe:        read-only. Never gated. Examples:
+ *                  forge.read_manifest, list_files,
+ *                  consult_nac_spec, reader operations.
+ *   - standard:    writes a file, runs tests, captures flow.
+ *                  Gated by Layer 1 (voiceprint match
+ *                  auto-approves; mismatch -> explicit
+ *                  confirmation unless permissive=true).
+ *   - irreversible: npm publish, git push --force, delete
+ *                  branch, delete file. Gated by Layer 3
+ *                  (liveness check regardless of trust state).
+ *
+ * The state machine is per-session: the explicit toggle
+ * applies until the chat / mic session ends. Persisting the
+ * toggle across sessions is intentionally OFF -- a fresh
+ * boot starts with Layer 1 active (voiceprint required).
+ *
+ * Loud failures: anything that would gate an op surfaces a
+ * voice-readable reason the panel renders.
+ *
+ * ASCII-only.
+ */
+import type { MatchOutput } from './match.js';
+import type { VoiceprintConfig } from './types.js';
+export type OperationClass = 'safe' | 'standard' | 'irreversible';
+export interface TrustState {
+    /** Explicit user override (Layer 2). null = no override,
+     *  trust follows the voiceprint match (Layer 1). 'on' =
+     *  force trust regardless of voiceprint. 'off' = force
+     *  explicit confirmation regardless of voiceprint. */
+    override: 'on' | 'off' | null;
+    /** The most recent identify() output. null when no voice
+     *  turn has happened yet in this session. */
+    lastMatch: MatchOutput | null;
+    /** Identity name that owns the session, once Layer 1
+     *  promotes them. null when no identity is locked in. */
+    activeIdentity: string | null;
+}
+export interface TrustDecision {
+    /** True when the op may proceed without further checks. */
+    allowed: boolean;
+    /** True when a liveness challenge must happen first
+     *  (Layer 3). When true, the caller plays a random-phrase
+     *  prompt + records + re-runs identify; only then is the
+     *  op dispatched. */
+    requires_liveness: boolean;
+    /** Voice-readable reason (Spanish first, English fallback)
+     *  for the panel + TTS. */
+    reason: string;
+    /** Which layer made the decision. Helpful in the audit log. */
+    layer: 1 | 2 | 3 | 4 | 5;
+}
+export declare function freshTrustState(): TrustState;
+/**
+ * Decide whether an operation may proceed given the current
+ * trust state + voice config.
+ *
+ * The caller is the chat tool dispatcher (server-side). On
+ * `requires_liveness: true` the dispatcher does NOT execute
+ * the tool immediately -- it kicks off a liveness challenge
+ * UI, waits for the result, then re-invokes decideTrust with
+ * the fresh identify outcome.
+ */
+export declare function decideTrust(operationClass: OperationClass, state: TrustState, config?: VoiceprintConfig): TrustDecision;
+/**
+ * Apply a fresh identify() outcome to the trust state. Mutates
+ * the state in place + returns it for chaining. When the match
+ * lands and there is no active identity yet, the matched name
+ * becomes the active identity for the session.
+ */
+export declare function ingestIdentify(state: TrustState, match: MatchOutput): TrustState;
+/** Explicit user toggle (Layer 2). null clears the override
+ *  and falls back to Layer 1. */
+export declare function setOverride(state: TrustState, override: 'on' | 'off' | null): TrustState;
+//# sourceMappingURL=trust.d.ts.map

package/dist/voice/voiceprint/trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.d.ts","sourceRoot":"","sources":["../../../src/voice/voiceprint/trust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGnD,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,UAAU,GAAG,cAAc,CAAC;AAElE,MAAM,WAAW,UAAU;IACzB;;;0DAGsD;IACtD,QAAQ,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC;IAC9B;iDAC6C;IAC7C,SAAS,EAAE,WAAW,GAAG,IAAI,CAAC;IAC9B;6DACyD;IACzD,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,aAAa;IAC5B,2DAA2D;IAC3D,OAAO,EAAE,OAAO,CAAC;IACjB;;;yBAGqB;IACrB,iBAAiB,EAAE,OAAO,CAAC;IAC3B;+BAC2B;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;CAC1B;AAED,wBAAgB,eAAe,IAAI,UAAU,CAM5C;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CACzB,cAAc,EAAE,cAAc,EAC9B,KAAK,EAAE,UAAU,EACjB,MAAM,GAAE,gBAA4C,GACnD,aAAa,CA6Ef;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,GAAG,UAAU,CAMhF;AAED;iCACiC;AACjC,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,UAAU,CAGxF"}