dsh-groq-speech 0.0.0-stage → 0.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Mike Lysikov
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,193 @@
-# Temporary Holding Version
+# dsh-groq-speech
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Groq Whisper speech recognition for DSH voice input: a cloud `groq-whisper`
+provider in the microphone picker, optional LLM polishing of the transcript,
+and a settings page that reuses the shared `GROQ_API_KEY` credential from
+**Settings → Models**.
+
+## What it does
+
+- Registers the `groq-whisper` provider with the official DSH voice input.
+- Uploads the recording (16 kHz mono PCM16 WAV) to Groq:
+  `POST https://api.groq.com/openai/v1/audio/transcriptions`.
+- Optionally polishes the transcript through any model configured in DSH
+  (**Settings → Models**) to fix punctuation and obvious recognition errors.
+- Uses the shared Groq key from **Settings → Models** and never sends it to the
+  browser.
+
+## Requirements
+
+- DSH `0.2.1-rc.2` or newer, Node.js 22.
+- The official voice-input bundle
+  `@deepseek-ai/dsh-experimental-voice-input-bundle` enabled and listed in
+  `dsh.profile.bundles` for the `web` profile. It provides `ctx.speechToText`
+  and the microphone button; without it the plugin loads but the provider is
+  not offered.
+- A Groq account and API key: <https://console.groq.com/keys>.
+
+## Installation
+
+The publishable package is generated into `release/` by `npm run build`. Install
+that directory (the repository root only contains sources and dev tooling):
+
+```sh
+npm install
+npm run build
+dsh plugin --profile web add file:/site/dsh/dsh-groq-speech/release
+```
+
+From npm:
+
+```sh
+dsh plugin --profile web add dsh-groq-speech
+```
+
+From git (build `release/` before installing, or publish from CI):
+
+```sh
+npm install && npm run build
+dsh plugin --profile web add file:/path/to/dsh-groq-speech/release
+```
+
+Reload the Web GUI after installing. If the **Settings → Groq Speech** section
+or the microphone provider is missing, restart `dsh web`.
+
+## Configuring the key
+
+1. Open **Settings → Models**.
+2. Add or select the **Groq** provider and enter its API key.
+3. Groq Speech uses the same `GROQ_API_KEY` credential automatically; there is
+   no separate key field in the plugin settings.
+4. On **Settings → Groq Speech**, the **Settings → Models** link opens that
+   section, and the key row shows whether the credential is configured.
+
+The plugin stores no copy of the key and cannot set or clear it. The key from
+Models is used both for Whisper transcription and for Groq models.
+
+## Recognition settings
+
+- **Whisper model**: `whisper-large-v3-turbo` (default, fast),
+  `whisper-large-v3` (more accurate), or `distil-whisper-large-v3-en`
+  (English only, fastest).
+- **Language hint**: `auto` (detect automatically) or one of the offered
+  languages.
+- Model, language and polish changes are saved automatically.
+
+## Polishing
+
+Polishing runs when a model is selected in **Polish model**. Choose
+**No polishing** to keep the raw transcript. The list is built from the models
+exposed by the DSH agent, so Groq appears automatically once it is configured in
+**Settings → Models**. Polishing goes through the DSH model route and does not
+use the Groq Speech key. A custom prompt can be provided; an empty field uses the
+built-in default.
+
+If the model is unavailable, the request fails, a timeout fires, or the stream
+breaks, the provider returns the **raw transcript**. The user's words are never
+lost.
+
+## Security
+
+- The Groq key lives in **DSH credentials** (reference `GROQ_API_KEY`) and is
+  configured in **Settings → Models**; the plugin settings file never contains
+  it.
+- Settings are stored at `$DSH_HOME/dsh-groq-speech/groq-speech.json` (or
+  `~/.dsh/dsh-groq-speech/groq-speech.json`). A 0.1.0 file at
+  `$DSH_HOME/groq-speech.json` is read as a one-time fallback and is never
+  modified.
+- The browser receives only `{ configured, source, writable }` plus the
+  non-secret settings. The key, its prefix and its length are never returned.
+- The plugin has no API actions to set or clear the key: the Groq Speech page
+  shows a **Configured** / **Not configured** badge and links to Models.
+- The `GROQ_API_KEY` environment variable is a read-only fallback; a stored key
+  takes priority.
+- The settings file is written atomically (temporary file + rename) with mode
+  `0600`, and every browser API request is fenced to loopback / trusted hosts,
+  same-origin and a live DSH browser session (when the `connection` service is
+  available).
+- Audio is sent to Groq (`api.groq.com`). With polishing enabled, the transcript
+  is sent to the selected DSH provider. No other network requests are made.
+- Groq errors are surfaced as fixed messages; response bodies and keys are never
+  included.
+- Removing the bundle from the profile manifest lets the host delete the plugin
+  data directory after a short confirmation window; disabling or reloading the
+  plugin never deletes settings.
+
+## The provider in the UI
+
+The voice-input microphone picker shows **Groq Whisper** marked `cloud`. There is
+no preparation (model download) step; the provider is ready immediately.
+
+## Troubleshooting
+
+| Symptom | What to do |
+|---|---|
+| `Groq API key is not configured` | Add a key for the Groq provider in Settings → Models. |
+| `Groq rejected the API key` (401/403) | The key was revoked or copied incorrectly. Create a new one at console.groq.com/keys and update it in Settings → Models. |
+| `Groq rate limit reached` (429) | The Groq quota is exhausted. Wait or check the plan and limits in the Groq console. |
+| `Groq is unavailable` (5xx) | Groq-side failure; retry later. |
+| `Could not reach Groq` | No network, DNS failure, or a proxy blocking `api.groq.com`. |
+| Provider missing from the microphone picker | Enable the official voice-input bundle, make sure the plugin is added to the `web` profile, and restart DSH. |
+| No Settings → Groq Speech section | Reload the page with the cache cleared; if that does not help, restart DSH. |
+| Polishing does not run | Select a provider and model under Polish; settings save automatically. Any failure keeps the raw text. |
+
+## Tests
+
+```sh
+npm test
+```
+
+The suite is fully offline: no real keys are needed, Groq is never contacted,
+and a local `http` server imitates the API. Tests run with Jest and ts-jest; the
+`@deepseek-ai/dsh-llm` peer is mapped to a tiny local fixture. The tests do not
+load DSH.
+
+## Build
+
+```sh
+npm run build        # theme → client bundle → release/
+npm run build:client # only client/client.js
+npm test             # Jest
+npm run lint         # ESLint over src/
+```
+
+`npm run build` writes:
+
+- `client/client.js` — the browser half loaded by the shell's ModuleLoader;
+- `release/` — the publishable package (`index.mjs`, host modules, types,
+  `cordis.patch.yml` and the client bundle).
+
+## Layout
+
+```
+dsh-groq-speech/
+├── package.json          plugin manifest and build scripts
+├── cordis.patch.yml      adds the plugin to the web profile
+├── theme.scss            settings-section styles (inlined at build time)
+├── buildEnv.ts           compiles theme.scss into .env.theme
+├── src/
+│   ├── constants.ts      shared constants
+│   ├── contracts.ts      host/UI type shapes
+│   ├── atomicFile.ts     atomic 0600 writes
+│   ├── settings.ts       settings read, validation and persistence
+│   ├── fence.ts          same-origin guard and JSON responses
+│   ├── groq.ts           Groq multipart request and error mapping
+│   ├── polish.ts         optional LLM polishing with fallback
+│   ├── provider.ts       the `groq-whisper` SpeechProvider
+│   ├── api.ts            browser JSON API
+│   ├── uninstall.ts      post-uninstall data cleanup
+│   ├── index.ts          host plugin entry
+│   ├── client.ts         ModuleLoader registration
+│   ├── components/       Settings → Groq Speech React section
+│   ├── ui/               small React controls
+│   └── utils/            API client, styling and form helpers
+├── test/                 offline Jest suites and helpers
+├── client/client.js      generated browser bundle
+├── release/              generated publishable package
+├── README.md
+└── LICENSE
+```
+
+## License
+
+MIT. See [LICENSE](LICENSE).

package/api.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Browser JSON API for the Groq Speech settings section.
+ *
+ * Every request is fenced to loopback / trusted hosts and same-origin, and no
+ * response contains key material: `status` reports only presence, source, and
+ * writability from `ctx.credentials.describe()`. Key management is owned by
+ * Settings → Models; this API has no action that can set or clear a key.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+/**
+ * A browser-facing failure with an HTTP status and stable code.
+ * Messages here are fixed strings; callers never pass secrets in.
+ */
+export declare class ApiFailure extends Error {
+    readonly status: number;
+    readonly code: string;
+    constructor(status: number, code: string, message: string);
+}
+export type ApiHandler = (req: IncomingMessage, res: ServerResponse) => Promise<void>;
+export interface ApiResult {
+    status: number;
+    body: unknown;
+}
+export interface DispatchOptions {
+    /** Environment used for the key fallback (tests). */
+    env?: NodeJS.ProcessEnv;
+}
+export interface HandlerOptions {
+    trustedHosts?: string[];
+    env?: NodeJS.ProcessEnv;
+}
+/**
+ * Execute one parsed API action.
+ *
+ * Returns an HTTP status plus the exact response envelope; throws
+ * {@link ApiFailure} for a client-visible failure.
+ *
+ * @param ctx host context.
+ * @param payload parsed request body carrying `action`.
+ * @param options environment override.
+ * @returns the response envelope.
+ */
+export declare function dispatchAction(ctx: unknown, payload: unknown, options?: DispatchOptions): Promise<ApiResult>;
+/**
+ * Handle one HTTP request against the browser API.
+ *
+ * @param ctx host context.
+ * @param req incoming request.
+ * @param res response.
+ * @param options trusted hosts and environment override.
+ */
+export declare function handleApiRequest(ctx: unknown, req: IncomingMessage, res: ServerResponse, options?: HandlerOptions): Promise<void>;
+/**
+ * Build the `webServer` prefix handler.
+ *
+ * @param ctx host context.
+ * @param options trusted hosts and environment override.
+ * @returns a prefix-route handler.
+ */
+export declare function createApiHandler(ctx: unknown, options?: HandlerOptions): ApiHandler;

package/api.mjs

@@ -0,0 +1,217 @@
+import { KEY_REF, MAX_BODY_BYTES } from "./constants.mjs";
+import { PAYLOAD_TOO_LARGE, isLoopbackRequest, isTrustedApiRequest, readJsonBody, safeErrorMessage, writeError, writeJson } from "./fence.mjs";
+import { describeGroqKey } from "./provider.mjs";
+import { mergeSettings, normalizeSettings, readSettings, writeSettings } from "./settings.mjs";
+// src/api.ts
+/**
+* A browser-facing failure with an HTTP status and stable code.
+* Messages here are fixed strings; callers never pass secrets in.
+*/
+var ApiFailure = class extends Error {
+	constructor(status, code, message) {
+		super(message);
+		this.name = "ApiFailure";
+		this.status = status;
+		this.code = code;
+	}
+};
+function isPlainObject(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+/**
+* Resolve the connection service for browser-session verification.
+*
+* @param ctx plugin context.
+* @returns the service, or undefined when this profile has none.
+*/
+function resolveConnection(ctx) {
+	if (ctx === null || typeof ctx !== "object") return void 0;
+	const candidate = ctx;
+	let direct;
+	try {
+		direct = candidate.connection;
+	} catch {}
+	if (direct && typeof direct.requestRejection === "function") return direct;
+	if (typeof candidate.get === "function") try {
+		const service = candidate.get("connection");
+		if (service && typeof service.requestRejection === "function") return service;
+	} catch {}
+}
+/**
+* Require a live DSH browser session (or API credential) for a request.
+*
+* @param ctx plugin context.
+* @param req incoming request.
+* @returns undefined when admitted, otherwise the HTTP status to return.
+*/
+function sessionRejection(ctx, req) {
+	const connection = resolveConnection(ctx);
+	if (!connection || typeof connection.requestRejection !== "function") return 403;
+	let rejection;
+	try {
+		rejection = connection.requestRejection(req);
+	} catch {
+		return 403;
+	}
+	if (rejection === void 0) return void 0;
+	return rejection === 401 ? 401 : 403;
+}
+function ok(value) {
+	return {
+		status: 200,
+		body: {
+			ok: true,
+			value
+		}
+	};
+}
+/**
+* Execute one parsed API action.
+*
+* Returns an HTTP status plus the exact response envelope; throws
+* {@link ApiFailure} for a client-visible failure.
+*
+* @param ctx host context.
+* @param payload parsed request body carrying `action`.
+* @param options environment override.
+* @returns the response envelope.
+*/
+async function dispatchAction(ctx, payload, options = {}) {
+	const env = options.env || process.env;
+	const action = isPlainObject(payload) ? payload.action : void 0;
+	if (action === "status") {
+		const key = await describeGroqKey(ctx, env);
+		return ok({
+			configured: key.configured,
+			source: key.source,
+			writable: key.writable,
+			envVar: KEY_REF,
+			settings: readSettings()
+		});
+	}
+	if (action === "get-settings") return ok({ settings: readSettings() });
+	if (action === "set-settings") {
+		if (!isPlainObject(payload) || !isPlainObject(payload.patch)) throw new ApiFailure(400, "bad-request", "patch must be a plain object");
+		const settings = mergeSettings(readSettings(), payload.patch);
+		try {
+			writeSettings(settings);
+		} catch {
+			throw new ApiFailure(500, "settings-write-failed", "Could not save settings");
+		}
+		return ok({ settings: normalizeSettings(settings) });
+	}
+	if (action === "list-models") return ok(await listModels(ctx));
+	throw new ApiFailure(404, "unknown-action", "Unknown action");
+}
+/**
+* Flatten the DSH model routes into provider/model pairs for the polish picker.
+*
+* One broken adapter must not hide every other route, so a failing provider is
+* skipped while the rest of the list is still returned.
+*
+* @param ctx host context carrying `llm`.
+* @returns the selectable routes, possibly empty.
+*/
+async function listModels(ctx) {
+	const routes = [];
+	const llm = ctx !== null && typeof ctx === "object" ? ctx.llm : void 0;
+	if (llm === null || typeof llm !== "object") return routes;
+	const service = llm;
+	if (typeof service.listProviders !== "function" || typeof service.listModels !== "function") return routes;
+	let providers = [];
+	try {
+		providers = service.listProviders();
+	} catch {
+		providers = [];
+	}
+	for (const provider of Array.isArray(providers) ? providers : []) {
+		if (!isPlainObject(provider) || typeof provider.id !== "string") continue;
+		let models = [];
+		try {
+			models = await service.listModels(provider.id);
+		} catch {
+			continue;
+		}
+		for (const model of Array.isArray(models) ? models : []) {
+			if (!isPlainObject(model) || typeof model.id !== "string") continue;
+			routes.push({
+				provider: provider.id,
+				providerName: typeof provider.name === "string" ? provider.name : provider.id,
+				model: model.id,
+				modelName: typeof model.name === "string" ? model.name : model.id
+			});
+		}
+	}
+	return routes;
+}
+function contentTypeOf(req) {
+	const value = req.headers["content-type"];
+	return typeof value === "string" ? value.toLowerCase() : "";
+}
+/**
+* Handle one HTTP request against the browser API.
+*
+* @param ctx host context.
+* @param req incoming request.
+* @param res response.
+* @param options trusted hosts and environment override.
+*/
+async function handleApiRequest(ctx, req, res, options = {}) {
+	try {
+		if (!isTrustedApiRequest(req, options.trustedHosts || [])) {
+			writeError(res, 403, "forbidden", "Forbidden");
+			return;
+		}
+		if (resolveConnection(ctx) !== void 0 || !isLoopbackRequest(req)) {
+			const rejection = sessionRejection(ctx, req);
+			if (rejection !== void 0) {
+				writeError(res, rejection, rejection === 401 ? "authentication-required" : "forbidden", rejection === 401 ? "Authentication required: open the DSH Web UI from its printed URL." : "Untrusted request");
+				return;
+			}
+		}
+		if (req.method !== "POST") {
+			writeError(res, 405, "method-error", "Method not allowed");
+			return;
+		}
+		if (!contentTypeOf(req).startsWith("application/json")) {
+			writeError(res, 415, "unsupported-media-type", "Content-Type must be application/json");
+			return;
+		}
+		const declared = Number(req.headers["content-length"]);
+		if (Number.isFinite(declared) && declared > 65536) {
+			res.setHeader("connection", "close");
+			writeError(res, 413, "payload-too-large", "Request body too large");
+			return;
+		}
+		const payload = await readJsonBody(req, MAX_BODY_BYTES);
+		if (payload === PAYLOAD_TOO_LARGE) {
+			res.setHeader("connection", "close");
+			writeError(res, 413, "payload-too-large", "Request body too large");
+			return;
+		}
+		if (!isPlainObject(payload) || typeof payload.action !== "string") {
+			writeError(res, 400, "bad-request", "Request body must carry a string action");
+			return;
+		}
+		const result = await dispatchAction(ctx, payload, options);
+		writeJson(res, result.status, result.body);
+	} catch (error) {
+		if (error instanceof ApiFailure) {
+			writeError(res, error.status, error.code, error.message);
+			return;
+		}
+		console.error("[dsh-groq-speech] API error:", safeErrorMessage(error instanceof Error ? error.message : void 0));
+		writeError(res, 500, "internal", "Internal error");
+	}
+}
+/**
+* Build the `webServer` prefix handler.
+*
+* @param ctx host context.
+* @param options trusted hosts and environment override.
+* @returns a prefix-route handler.
+*/
+function createApiHandler(ctx, options = {}) {
+	return (req, res) => handleApiRequest(ctx, req, res, options);
+}
+export { ApiFailure, createApiHandler, dispatchAction, handleApiRequest };

package/atomicFile.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Atomic private-file writes shared by settings storage.
+ *
+ * Files are written to a sibling temp file, fsynced, renamed into place and
+ * tightened to 0600, so a crash never leaves a half-written secret and an
+ * existing destination cannot keep looser permissions.
+ */
+/**
+ * Write a secret file atomically with mode 0600.
+ *
+ * @param file destination path.
+ * @param content file contents.
+ */
+export declare function writeSecretFile(file: string, content: string): void;

package/atomicFile.mjs

@@ -0,0 +1,53 @@
+import { dirname } from "node:path";
+import { chmodSync, closeSync, fsyncSync, mkdirSync, openSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { randomBytes } from "node:crypto";
+// src/atomicFile.ts
+/**
+* Atomic private-file writes shared by settings storage.
+*
+* Files are written to a sibling temp file, fsynced, renamed into place and
+* tightened to 0600, so a crash never leaves a half-written secret and an
+* existing destination cannot keep looser permissions.
+*/
+/**
+* Write a secret file atomically with mode 0600.
+*
+* @param file destination path.
+* @param content file contents.
+*/
+function writeSecretFile(file, content) {
+	const directory = dirname(file);
+	mkdirSync(directory, {
+		recursive: true,
+		mode: 448
+	});
+	const temp = `${file}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
+	let handle;
+	try {
+		handle = openSync(temp, "w", 384);
+		writeFileSync(handle, content, "utf8");
+		fsyncSync(handle);
+		closeSync(handle);
+		handle = void 0;
+	} catch (error) {
+		if (handle !== void 0) try {
+			closeSync(handle);
+		} catch {}
+		try {
+			unlinkSync(temp);
+		} catch {}
+		throw error;
+	}
+	try {
+		renameSync(temp, file);
+	} catch (error) {
+		try {
+			unlinkSync(temp);
+		} catch {}
+		throw error;
+	}
+	try {
+		chmodSync(file, 384);
+	} catch {}
+}
+export { writeSecretFile };

package/client/client.js

@@ -0,0 +1 @@
+window.__ModuleLoader__.load({id:`dsh-groq-speech`,factory(e){var t={exports:{}},n=t.exports;Object.defineProperty(n,Symbol.toStringTag,{value:`Module`});let r=e("react"),i=e("react/jsx-runtime"),a=`whisper-large-v3-turbo`,o=[{value:`whisper-large-v3-turbo`,label:`whisper-large-v3-turbo (fast, default)`},{value:`whisper-large-v3`,label:`whisper-large-v3 (most accurate)`},{value:`distil-whisper-large-v3-en`,label:`distil-whisper-large-v3-en (English only, fastest)`}],s=[`auto`,`ru`,`en`,`uk`,`de`,`fr`,`es`,`it`,`pt`,`nl`,`pl`,`tr`,`zh`,`ja`,`ko`];Object.freeze({model:a,language:`auto`,polish:Object.freeze({provider:``,model:``,prompt:``})});function c({children:e,variant:t=`primary`,compact:n,disabled:r,onClick:a}){let o=[`gqs-button`,`gqs-`+t];return n&&o.push(`gqs-compact`),/* @__PURE__ */ (0,i.jsx)(`button`,{type:`button`,className:o.join(` `),disabled:r,onClick:a,children:e})}function ee({href:e=`#`,onClick:t,children:n}){return/* @__PURE__ */ (0,i.jsx)(`a`,{children:n,href:e,className:`gqs-link`,onClick:t})}function te({kind:e,text:t}){return/* @__PURE__ */ (0,i.jsx)(`p`,{className:`gqs-notice gqs-notice-`+e,role:e===`error`?`alert`:`status`,"aria-live":`polite`,style:{marginTop:`16px`},children:t})}function l({title:e,description:t,control:n,badge:r,prompt:a,htmlFor:o}){return/* @__PURE__ */ (0,i.jsxs)(`div`,{className:a?`gqs-row gqs-row-prompt`:`gqs-row`,children:[/* @__PURE__ */ (0,i.jsxs)(`div`,{className:`gqs-text`,children:[/* @__PURE__ */ (0,i.jsxs)(`div`,{className:`gqs-titleRow`,children:[o?/* @__PURE__ */ (0,i.jsx)(`label`,{className:`gqs-title`,htmlFor:o,children:e}):/* @__PURE__ */ (0,i.jsx)(`span`,{className:`gqs-title`,children:e}),r||null]}),t?/* @__PURE__ */ (0,i.jsx)(`div`,{className:`gqs-desc`,children:t}):null]}),a?n:/* @__PURE__ */ (0,i.jsx)(`div`,{className:`gqs-control`,children:n})]})}function u(){return/* @__PURE__ */ (0,i.jsx)(`svg`,{className:`gqs-chevron`,viewBox:`0 0 16 16`,width:14,height:14,"aria-hidden":`true`,children:/* @__PURE__ */ (0,i.jsx)(`path`,{d:`M4 6l4 4 4-4`,fill:`none`,stroke:`currentColor`,strokeWidth:1.5,strokeLinecap:`round`,strokeLinejoin:`round`})})}function d({id:e,value:t,options:n,disabled:r,onChange:a}){return/* @__PURE__ */ (0,i.jsxs)(`span`,{className:`gqs-selectWrap`,children:[/* @__PURE__ */ (0,i.jsx)(`select`,{id:e,className:`gqs-select`,value:t,disabled:r,onChange:e=>a(e.target.value),children:n.map(e=>/* @__PURE__ */ (0,i.jsx)(`option`,{value:e.value,children:e.label},e.value))}),u()]})}function ne({state:e,label:t,hint:n}){return/* @__PURE__ */ (0,i.jsxs)(`span`,{className:`gqs-badge gqs-badge-${e}`,title:n,"aria-label":t,children:[/* @__PURE__ */ (0,i.jsx)(`span`,{className:`gqs-dot`,"aria-hidden":`true`}),t]})}function re({id:e,value:t,placeholder:n,rows:r=4,maxLength:a,disabled:o,onChange:s}){return/* @__PURE__ */ (0,i.jsx)(`textarea`,{id:e,className:`gqs-textarea`,value:t,placeholder:n,rows:r,maxLength:a,disabled:o,spellCheck:!0,onChange:e=>s(e.target.value)})}async function f(e,t){let n=Object.assign({action:e},t||{}),r=await fetch(`/groq-speech/api`,{method:`POST`,headers:{"content-type":`application/json`},credentials:`same-origin`,body:JSON.stringify(n)}),i=null;try{i=await r.json()}catch{i=null}let a=typeof i==`object`&&i?i:null;if(a&&a.ok===!1){let e=a.error,t=e&&typeof e.message==`string`?e.message:`Request failed`;throw Error(t)}if(!r.ok)throw Error(`Groq Speech request failed (HTTP `+r.status+`).`);if(!a)throw Error(`Groq Speech returned an unreadable response.`);return Object.prototype.hasOwnProperty.call(a,`value`)?a.value:a}function p(e){if(typeof document>`u`||!document.head||document.querySelector(`style[data-plugin="${e}"]`)!==null)return;let t=document.createElement(`style`);t.dataset.plugin=e,t.textContent=`.gqs-section{color:var(--dsw-alias-label-primary);display:flex;flex-direction:column;font-size:14px;line-height:22px;width:100%}.gqs-row{align-items:center;border-bottom:.5px solid var(--dsw-alias-border-l2);display:flex;gap:8px;padding:16px 0}.gqs-row:last-of-type{border-bottom:none}.gqs-text{flex:1;flex-direction:column;gap:4px;padding-right:48px}.gqs-text,.gqs-titleRow{display:flex;min-width:0}.gqs-titleRow{align-items:center;flex-wrap:wrap;gap:8px}.gqs-title{color:var(--dsw-alias-label-primary);font-size:14px;font-weight:400;line-height:22px}.gqs-badge{align-items:center;border:.5px solid transparent;border-radius:999px;display:inline-flex;flex:none;font-size:11px;font-weight:500;gap:5px;line-height:17px;padding:1px 8px;white-space:nowrap}.gqs-badge-on{border-color:var(--dsw-alias-state-success-primary);color:var(--dsw-alias-state-success-primary)}.gqs-badge-off,.gqs-badge-on{background:var(--dsw-alias-bg-module-platform)}.gqs-badge-off{border-color:var(--dsw-alias-state-error-primary);color:var(--dsw-alias-state-error-primary)}.gqs-dot{background:currentColor;border-radius:50%;flex:none;height:6px;width:6px}.gqs-desc{color:var(--dsw-alias-label-tertiary);font-size:12px;font-weight:400;line-height:18px;white-space:pre-line}.gqs-desc code{font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:11px}.gqs-control{align-items:center;display:flex;flex:none;gap:8px;min-width:0}.gqs-link{color:var(--dsw-alias-link);cursor:pointer;font:inherit;text-decoration:none;white-space:nowrap}.gqs-link:hover{text-decoration:underline}.gqs-selectWrap{align-items:center;display:inline-flex;min-width:0;position:relative}.gqs-select{appearance:none;-webkit-appearance:none;background:var(--dsw-alias-bg-module-platform);border:none;border-radius:var(--dsw-radius-md);box-sizing:border-box;color:var(--dsw-alias-label-primary);cursor:pointer;font:inherit;font-size:14px;height:36px;line-height:22px;max-width:320px;padding:0 36px 0 14px}.gqs-select:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}.gqs-select:disabled{cursor:default;opacity:.5}.gqs-select:focus-visible{outline:var(--dsw-focus-ring-width,2px) solid var(--dsw-focus-ring-color,var(--dsw-alias-state-business-primary));outline-offset:2px}.gqs-chevron{color:var(--dsw-alias-label-caption);flex:none;pointer-events:none;position:absolute;right:12px}.gqs-textarea{background:var(--dsw-alias-bg-module-platform);border:.5px solid var(--dsw-alias-border-l4);border-radius:var(--dsw-radius-md);box-sizing:border-box;color:var(--dsw-alias-label-primary);font:inherit;font-size:14px;line-height:22px;min-height:96px;outline:none;padding:8px 12px;resize:vertical;width:100%}.gqs-textarea::placeholder{color:var(--dsw-alias-label-caption)}.gqs-textarea:focus{border-color:var(--dsw-alias-state-business-primary);box-shadow:inset 0 0 0 .5px var(--dsw-alias-state-business-primary)}.gqs-button{align-items:center;border:none;border-radius:var(--dsw-radius-md);box-sizing:border-box;cursor:pointer;display:inline-flex;font:inherit;font-size:14px;gap:6px;height:36px;justify-content:center;line-height:22px;padding:0 14px;white-space:nowrap}.gqs-button:disabled{cursor:default;opacity:.4}.gqs-button:focus-visible{outline:var(--dsw-focus-ring-width,2px) solid var(--dsw-focus-ring-color,var(--dsw-alias-state-business-primary));outline-offset:2px}.gqs-primary{background:var(--dsw-alias-button-primary-fill);color:var(--dsw-alias-label-primary-foreground);font-weight:500}.gqs-primary:hover:not(:disabled){background:var(--dsw-alias-button-primary-hover)}.gqs-secondary{background:transparent;border:.5px solid var(--dsw-alias-border-l3);color:var(--dsw-alias-label-primary)}.gqs-secondary:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}.gqs-compact{font-size:12px;height:28px;line-height:18px;padding:0 10px}.gqs-row-prompt{align-items:stretch;flex-direction:column;gap:10px}.gqs-row-prompt .gqs-text{padding-right:0}.gqs-footer{align-items:center;display:flex;gap:16px;padding:16px 0 0}.gqs-footer .gqs-notice{flex:1;min-width:0}.gqs-footer .gqs-button{margin-left:auto}.gqs-notice{font-size:12px;line-height:18px;margin:0}.gqs-notice-success{color:var(--dsw-alias-state-success-primary)}.gqs-notice-error{color:var(--dsw-alias-state-error-primary)}.gqs-loading{border-bottom:.5px solid var(--dsw-alias-border-l2);color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:18px;padding:16px 0}@media (max-width:640px){.gqs-row{flex-wrap:wrap}.gqs-text{flex-basis:100%;padding-right:0}.gqs-control{align-items:stretch;width:100%}.gqs-select,.gqs-selectWrap{max-width:none;width:100%}}`,document.head.appendChild(t)}function m(e,t){return e instanceof Error&&e.message.trim()!==``?e.message.trim():typeof e==`string`&&e.trim()!==``?e.trim():t}function h(e){let t=[];for(let n of Array.isArray(e)?e:[]){if(typeof n!=`object`||!n)continue;let e=n,r=typeof e.provider==`string`?e.provider:``,i=typeof e.model==`string`?e.model:``;r&&i&&t.push({provider:r,providerName:typeof e.providerName==`string`&&e.providerName?e.providerName:r,model:i,modelName:typeof e.modelName==`string`&&e.modelName?e.modelName:i})}return t}function g(e,t){return!e||!t?``:e+`\0`+t}function ie(e){let t=typeof e==`string`?e:``,n=t.indexOf(`\0`);return n<0?{provider:``,model:``}:{provider:t.slice(0,n),model:t.slice(n+1)}}function _(e){return e===`auto`?`Auto-detect`:String(e).toUpperCase()}function v(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function y(e){return e===`stored`||e===`env`?e:null}function ae(e){let t=v(e)?e:{},n=v(t.settings)?b(t.settings):null;return{configured:t.configured===!0,source:y(t.source),writable:t.writable!==!1,envVar:typeof t.envVar==`string`&&t.envVar?t.envVar:`GROQ_API_KEY`,settings:n}}function b(e){let t=v(e)?e:{},n=v(t.polish)?t.polish:{};return{model:typeof t.model==`string`&&t.model?t.model:a,language:typeof t.language==`string`&&t.language?t.language:`auto`,polish:{provider:typeof n.provider==`string`?n.provider:``,model:typeof n.model==`string`?n.model:``,prompt:typeof n.prompt==`string`?n.prompt:``}}}function x(e){let t=b(e);return JSON.stringify({model:t.model,language:t.language,polish:{provider:t.polish.provider,model:t.polish.model,prompt:t.polish.prompt}})}let S={model:`groq-speech-model`,language:`groq-speech-language`,polishModel:`groq-speech-polish-model`,prompt:`groq-speech-polish-prompt`};function C({openModels:e}){let[t,n]=(0,r.useState)(`loading`),[a,u]=(0,r.useState)(``),[p,v]=(0,r.useState)(null),[y,C]=(0,r.useState)(null),[w,T]=(0,r.useState)([]),[E,D]=(0,r.useState)(``),[O,k]=(0,r.useState)(!1),[A,j]=(0,r.useState)(!1),[M,N]=(0,r.useState)(null),P=(0,r.useRef)(null),F=(0,r.useRef)(!1),I=(0,r.useRef)(``),L=(0,r.useRef)(null),R=(0,r.useRef)(null),z=(0,r.useRef)(``),B=(0,r.useRef)(0),V=(0,r.useRef)(!0);function oe(e){R.current=e,z.current=x(e),C(e)}function H(e){B.current+=1,R.current=e,C(e),se(e)}function U(e){let t=R.current;t!==null&&H({...t,...e})}function W(e){let t=R.current;t!==null&&H({...t,polish:{...t.polish,...e}})}function se(e){P.current!==null&&clearTimeout(P.current),P.current=setTimeout(()=>{P.current=null,G(e)},500)}async function G(e){if(e===null)return;let t=x(e);if(F.current){t!==I.current&&(L.current=e);return}if(t===z.current)return;F.current=!0,I.current=t;let n=B.current;V.current&&j(!0);try{let t=await f(`set-settings`,{patch:{model:e.model,language:e.language,polish:{provider:e.polish.provider,model:e.polish.model,prompt:e.polish.prompt}}}),r=b(typeof t==`object`&&t&&t.settings?t.settings:e);z.current=x(r),V.current&&n===B.current&&(R.current=r,C(r),N({kind:`saved`,text:`Saved`}))}catch(e){V.current&&N({kind:`error`,text:m(e,`Could not save settings.`)})}finally{F.current=!1,I.current=``,V.current&&j(!1);let e=L.current;L.current=null,e!==null&&G(e)}}function ce(){if(P.current===null)return;clearTimeout(P.current),P.current=null;let e=R.current;e!==null&&x(e)!==z.current&&G(e)}async function K(){n(`loading`),u(``),D(``),N(null);let[e,t,r]=await Promise.allSettled([f(`status`),f(`get-settings`),f(`list-models`)]);if(!V.current)return;if(e.status!==`fulfilled`){n(`error`),u(m(e.reason,`Could not load Groq Speech status.`));return}let i=ae(e.value),a=b((t.status===`fulfilled`&&t.value?t.value.settings:void 0)??i.settings??null);v(i),oe(a),r.status===`fulfilled`?(T(h(r.value)),D(``)):(T([]),D(m(r.reason,`Could not load the model list.`))),n(`ready`)}async function le(){k(!0),D(``);try{T(h(await f(`list-models`)))}catch(e){T([]),D(m(e,`Could not load the model list.`))}finally{k(!1)}}(0,r.useEffect)(()=>(V.current=!0,K(),()=>{V.current=!1,ce()}),[]);let q=p!==null&&p.configured,J=p===null?`GROQ_API_KEY`:p.envVar;function ue(){return q?`Configured through the shared `+J+` credential. Groq Speech uses the same key as the Groq provider; manage it only in Settings → Models.`:`No Groq API key is configured. Add it in Settings → Models; Groq Speech will use the same `+J+` credential automatically.`}function de(t){t.preventDefault(),typeof e==`function`&&e()||N({kind:`error`,text:`Open Settings → Models from the settings sidebar to manage the key.`})}if(t===`loading`)return/* @__PURE__ */ (0,i.jsx)(`div`,{className:`gqs-section`,children:/* @__PURE__ */ (0,i.jsx)(`p`,{className:`gqs-loading`,role:`status`,children:`Loading Groq Speech settings…`})});if(t===`error`)return/* @__PURE__ */ (0,i.jsxs)(`div`,{className:`gqs-section`,children:[/* @__PURE__ */ (0,i.jsx)(`p`,{className:`gqs-notice gqs-notice-error`,role:`alert`,children:a||`Could not load Groq Speech settings.`}),/* @__PURE__ */ (0,i.jsx)(`div`,{className:`gqs-footer`,children:/* @__PURE__ */ (0,i.jsx)(c,{onClick:()=>{K()},children:`Retry`})})]});if(y===null)return null;let Y=o.map(e=>({value:e.value,label:e.label}));Y.some(e=>e.value===y.model)||Y.push({value:y.model,label:y.model});let X=s.map(e=>({value:e,label:_(e)}));X.some(e=>e.value===y.language)||X.push({value:y.language,label:_(y.language)});let Z=g(y.polish.provider,y.polish.model),Q=[{value:``,label:`No polishing`}];for(let e of w)Q.push({value:g(e.provider,e.model),label:e.providerName+` — `+e.modelName});Z&&!Q.some(e=>e.value===Z)&&Q.push({value:Z,label:y.polish.provider+` — `+y.polish.model});let fe=O||w.length===0&&!Z,pe=A?`Saving…`:M===null?``:M.text,$=M!==null&&M.kind===`error`?`error`:`success`;return/* @__PURE__ */ (0,i.jsxs)(`div`,{className:`gqs-section`,children:[/* @__PURE__ */ (0,i.jsx)(l,{title:`Groq API key`,badge:/* @__PURE__ */ (0,i.jsx)(ne,{state:q?`on`:`off`,label:q?`Configured`:`Not configured`,hint:q?`A shared `+J+` credential is available to Groq Speech.`:`No shared `+J+` credential is available yet. Add it in Settings → Models.`}),description:ue(),control:/* @__PURE__ */ (0,i.jsx)(ee,{onClick:de,children:`Settings → Models`})},`key`),/* @__PURE__ */ (0,i.jsx)(l,{title:`Whisper model`,description:`Model used to transcribe speech. Turbo is the fastest default.`,htmlFor:S.model,control:/* @__PURE__ */ (0,i.jsx)(d,{id:S.model,value:y.model,options:Y,onChange:e=>U({model:e})})},`model`),/* @__PURE__ */ (0,i.jsx)(l,{title:`Language hint`,description:`Auto-detect lets Whisper guess the language; pin one to improve accuracy on short recordings.`,htmlFor:S.language,control:/* @__PURE__ */ (0,i.jsx)(d,{id:S.language,value:y.language,options:X,onChange:e=>U({language:e})})},`language`),/* @__PURE__ */ (0,i.jsx)(l,{title:`Polish model`,description:`Choose any model exposed by DSH, including Groq. No polishing keeps the raw transcript; any failure also falls back to it.`,htmlFor:S.polishModel,control:/* @__PURE__ */ (0,i.jsx)(d,{id:S.polishModel,value:Z,options:Q,disabled:fe,onChange:e=>{let t=ie(e);W({provider:t.provider,model:t.model})}})},`polish-model`),E?/* @__PURE__ */ (0,i.jsxs)(`div`,{className:`gqs-row`,children:[/* @__PURE__ */ (0,i.jsx)(`div`,{className:`gqs-text`,children:/* @__PURE__ */ (0,i.jsx)(`div`,{className:`gqs-desc`,children:E})}),/* @__PURE__ */ (0,i.jsx)(`div`,{className:`gqs-control`,children:/* @__PURE__ */ (0,i.jsx)(c,{variant:`secondary`,compact:!0,disabled:O,onClick:()=>{le()},children:O?`Loading…`:`Retry`})})]},`models-error`):null,w.length===0&&!E?/* @__PURE__ */ (0,i.jsx)(`div`,{className:`gqs-row`,children:/* @__PURE__ */ (0,i.jsx)(`div`,{className:`gqs-text`,children:/* @__PURE__ */ (0,i.jsx)(`div`,{className:`gqs-desc`,children:`No polish models were found. Configure a provider in DSH Settings → Models, then retry.`})})},`models-empty`):null,/* @__PURE__ */ (0,i.jsx)(l,{title:`Polish prompt (optional)`,description:`Used only when a Polish model is selected. Leave empty to use the built-in default prompt.`,prompt:!0,htmlFor:S.prompt,control:/* @__PURE__ */ (0,i.jsx)(re,{id:S.prompt,value:y.polish.prompt,placeholder:`You are an editor of speech-to-text transcripts. Fix punctuation, capitalization, and obvious recognition errors, remove filler words and repetitions. Do not add new information, do not change the meaning, and do not translate the text. Return only the corrected text without explanations.`,maxLength:4e3,onChange:e=>W({prompt:e})})},`polish-prompt`),A||M?/* @__PURE__ */ (0,i.jsx)(`div`,{className:`gqs-footer`,children:/* @__PURE__ */ (0,i.jsx)(`p`,{className:`gqs-notice gqs-notice-`+$,role:!A&&$===`error`?`alert`:`status`,"aria-live":`polite`,children:pe})}):null,M!==null&&M.kind===`error`&&!A?/* @__PURE__ */ (0,i.jsx)(te,{kind:`error`,text:M.text}):null]})}let w={name:`settings.section`,id:`groq-speech`,order:30,label:`Groq Speech`},T=[`slots`];function E(e){if(typeof document>`u`)return!1;let t=document.querySelector(`[data-shortcut-modal="settings"]`);if(t===null)return!1;let n=-1;try{n=e.slots.entries(`settings.section`).map(e=>({id:e&&e.options?e.options.id:``,order:e&&e.options&&typeof e.options.order==`number`?e.options.order:0})).sort((e,t)=>e.order-t.order).findIndex(e=>e.id===`models`)}catch{n=-1}let r=t.querySelectorAll(`nav > div:last-child button`);return n<0||!r[n]?!1:(r[n].click(),!0)}function D(e){p(`dsh-groq-speech`);let t=e.slots;t.inject(`settings.section`,()=>t.register({...w,inject:()=>({openModels:()=>E(e)})},C))}return n.apply=D,n.inject=T,t.exports}});

package/constants.d.ts

@@ -0,0 +1,46 @@
+/** Shared host-side constants for dsh-groq-speech. */
+import type { GroqSpeechSettings, WhisperModel } from './contracts';
+/** Provider id registered into ctx.speechToText. */
+export declare const PROVIDER_ID = "groq-whisper";
+/** Provider display name shown in the official voice-input picker. */
+export declare const PROVIDER_NAME = "Groq Whisper";
+/** Same-origin browser API prefix. */
+export declare const API_PREFIX = "/groq-speech/api";
+/** Credential reference used for the Groq key (stored value outranks env). */
+export declare const KEY_REF = "GROQ_API_KEY";
+/** Groq's OpenAI-compatible base URL; tests override via GROQ_SPEECH_API_BASE. */
+export declare const DEFAULT_API_BASE = "https://api.groq.com/openai/v1";
+/** This package's name as the profile manifest declares it. */
+export declare const PACKAGE_NAME = "dsh-groq-speech";
+/** Plugin data directory name under the DSH home. */
+export declare const PLUGIN_DIR_NAME = "dsh-groq-speech";
+/** Settings file name inside the plugin directory. */
+export declare const SETTINGS_FILENAME = "groq-speech.json";
+/**
+ * Settings file name used by 0.1.0 directly inside `$DSH_HOME`. It is read
+ * when the plugin-directory file does not exist yet and is never written back.
+ */
+export declare const LEGACY_SETTINGS_FILENAME = "groq-speech.json";
+/** Selectable transcription models. */
+export declare const MODELS: readonly WhisperModel[];
+/** Default transcription model (fast + cheap on the free tier). */
+export declare const DEFAULT_MODEL: WhisperModel;
+/** Picker labels for {@link MODELS}, shared by the settings UI. */
+export declare const MODEL_OPTIONS: ReadonlyArray<{
+    value: WhisperModel;
+    label: string;
+}>;
+/** Language hints advertised to the picker; `auto` lets Whisper detect. */
+export declare const LANGUAGES: readonly string[];
+/** Default polish prompt: fix the transcript, never rewrite its meaning. */
+export declare const DEFAULT_POLISH_PROMPT: string;
+/** Maximum length of a stored custom polish prompt. */
+export declare const MAX_PROMPT_CHARS = 4000;
+/** Maximum accepted size of one browser API request body. */
+export declare const MAX_BODY_BYTES: number;
+/** Per-request Groq timeout. */
+export declare const GROQ_TIMEOUT_MS = 60000;
+/** Per-request polish timeout. */
+export declare const POLISH_TIMEOUT_MS = 45000;
+/** Default empty settings document. */
+export declare const DEFAULT_SETTINGS: Readonly<GroqSpeechSettings>;