wicked-crew 0.16.11 → 0.16.13

package/dist/voice/routes.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Voice mode's routes (program DES-VOICE §3, §6; api-types `VoiceStatus`, `VoiceTranscribeResponse`,
+ * `VoiceDashboard`):
+ *
+ *   GET    /voice/status       the engine and the model on this machine, and a download in progress
+ *   POST   /voice/model        {consent: true} → start fetching the model (202); audited
+ *   DELETE /voice/model        remove the model; audited
+ *   POST   /voice/transcribe   audio/wav body → {text, ms, model}; the audio is never stored
+ *   GET    /voice/dashboard    this person's dashboard layout and user widgets
+ *   PUT    /voice/dashboard    {layout, widgets} → the same shape
+ *
+ * Every voice route is the human operator's alone and answers only a loopback caller: a worker's bearer (a
+ * non-human actor) gets 403, and a request from another host gets 403 even on a daemon bound wider.
+ */
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+import { z } from 'zod';
+import type { AuditLog } from '../api/audit.js';
+import type { Actor } from '../core/types.js';
+import { type VoiceDashboardStore } from './dashboard.js';
+import { type VoiceService } from './service.js';
+export declare const PostVoiceModelSchema: z.ZodObject<{
+    consent: z.ZodLiteral<true>;
+}, "strict", z.ZodTypeAny, {
+    consent: true;
+}, {
+    consent: true;
+}>;
+export interface VoiceRouteDeps {
+    voice: VoiceService;
+    dashboard: VoiceDashboardStore | null;
+    audit: Pick<AuditLog, 'record'>;
+}
+/** The loopback, human-operator fence every voice route shares; null = allowed. */
+export declare function voiceRefusal(req: FastifyRequest & {
+    actor?: Actor;
+}): {
+    error: string;
+    code: string;
+} | null;
+export declare function registerVoiceRoutes(app: FastifyInstance, deps: VoiceRouteDeps): void;
+//# sourceMappingURL=routes.d.ts.map

package/dist/voice/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/voice/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAgB,cAAc,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAIhD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAA2B,KAAK,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACnF,OAAO,EAAqC,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAIpF,eAAO,MAAM,oBAAoB;;;;;;EAAkD,CAAC;AAEpF,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,YAAY,CAAC;IACpB,SAAS,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACtC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;CACjC;AAID,mFAAmF;AACnF,wBAAgB,YAAY,CAAC,GAAG,EAAE,cAAc,GAAG;IAAE,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAU5G;AAOD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,GAAG,IAAI,CAgGpF"}

package/dist/voice/routes.js

@@ -0,0 +1,116 @@
+/**
+ * Voice mode's routes (program DES-VOICE §3, §6; api-types `VoiceStatus`, `VoiceTranscribeResponse`,
+ * `VoiceDashboard`):
+ *
+ *   GET    /voice/status       the engine and the model on this machine, and a download in progress
+ *   POST   /voice/model        {consent: true} → start fetching the model (202); audited
+ *   DELETE /voice/model        remove the model; audited
+ *   POST   /voice/transcribe   audio/wav body → {text, ms, model}; the audio is never stored
+ *   GET    /voice/dashboard    this person's dashboard layout and user widgets
+ *   PUT    /voice/dashboard    {layout, widgets} → the same shape
+ *
+ * Every voice route is the human operator's alone and answers only a loopback caller: a worker's bearer (a
+ * non-human actor) gets 403, and a request from another host gets 403 even on a daemon bound wider.
+ */
+import { z } from 'zod';
+import { API_PREFIX } from '../api/api-prefix.js';
+import { LOCAL_ACTOR } from '../api/auth.js';
+import { isHumanOperator } from '../api/watch-routes.js';
+import { PutVoiceDashboardSchema } from './dashboard.js';
+import { VOICE_MAX_AUDIO_BYTES, VoiceError } from './service.js';
+const V = API_PREFIX;
+export const PostVoiceModelSchema = z.object({ consent: z.literal(true) }).strict();
+const LOOPBACK = new Set(['127.0.0.1', '::1', '::ffff:127.0.0.1']);
+/** The loopback, human-operator fence every voice route shares; null = allowed. */
+export function voiceRefusal(req) {
+    const ip = req.socket?.remoteAddress ?? req.ip;
+    if (ip !== undefined && !LOOPBACK.has(ip)) {
+        return { error: 'Voice is answered only on this machine (a loopback caller).', code: 'voice_loopback_only' };
+    }
+    const actor = req.actor ?? LOCAL_ACTOR;
+    if (!isHumanOperator(actor)) {
+        return { error: `Voice is the human operator's alone (you are ${actor.kind}/${actor.trust}).`, code: 'human_operator_only' };
+    }
+    return null;
+}
+function fail(reply, e) {
+    if (e instanceof VoiceError)
+        return reply.code(e.status).send(e.body());
+    return reply.code(500).send({ error: e instanceof Error ? e.message : String(e), code: 'voice_failed' });
+}
+export function registerVoiceRoutes(app, deps) {
+    const actorOf = (req) => req.actor ?? LOCAL_ACTOR;
+    void app.register(async (scope) => {
+        // The fence runs on request, before any body is read: a refused caller never gets to stream audio in.
+        scope.addHook('onRequest', async (req, reply) => {
+            const refused = voiceRefusal(req);
+            if (refused !== null)
+                return reply.code(403).send(refused);
+            return undefined;
+        });
+        // The recording arrives as raw bytes, buffered by a parser scoped to the transcribe route alone (and its
+        // media-type error speaks only for that route).
+        void scope.register(async (audio) => {
+            for (const type of ['audio/wav', 'audio/x-wav', 'audio/wave']) {
+                audio.addContentTypeParser(type, { parseAs: 'buffer', bodyLimit: VOICE_MAX_AUDIO_BYTES + 1024 }, (_req, body, done) => done(null, body));
+            }
+            audio.setErrorHandler((err, _req, reply) => {
+                const code = err.code;
+                if (code === 'FST_ERR_CTP_BODY_TOO_LARGE') {
+                    return reply.code(413).send({ error: `The recording is over ${Math.round(VOICE_MAX_AUDIO_BYTES / 1048576)} MiB; speak in shorter turns.`, code: 'voice_audio_too_large' });
+                }
+                if (code === 'FST_ERR_CTP_INVALID_MEDIA_TYPE') {
+                    return reply.code(415).send({ error: 'Send the recording as audio/wav.', code: 'voice_audio_invalid' });
+                }
+                return reply.send(err);
+            });
+            audio.post(`${V}/voice/transcribe`, { config: { manifest: { requestType: 'audio/wav', responseType: 'VoiceTranscribeResponse', statusCodes: [200, 400, 403, 409, 413, 415, 429, 500, 504] } } }, async (req, reply) => {
+                if (!Buffer.isBuffer(req.body))
+                    return reply.code(415).send({ error: 'Send the recording as audio/wav.', code: 'voice_audio_invalid' });
+                try {
+                    // Nothing about the audio is logged or audited: not its bytes, not its words.
+                    return await deps.voice.transcribe(req.body);
+                }
+                catch (e) {
+                    return fail(reply, e);
+                }
+            });
+        });
+        scope.get(`${V}/voice/status`, { config: { manifest: { responseType: 'VoiceStatus', statusCodes: [200, 403] } } }, async () => deps.voice.status());
+        scope.post(`${V}/voice/model`, { config: { manifest: { requestType: 'PostVoiceModelBody', responseType: 'VoiceStatus', statusCodes: [200, 202, 400, 403, 409] } } }, async (req, reply) => {
+            const parsed = PostVoiceModelSchema.safeParse(req.body);
+            if (!parsed.success) {
+                return reply.code(400).send({ error: 'Downloading the speech model needs your consent: send {"consent": true}.', code: 'voice_consent_required' });
+            }
+            try {
+                const { started } = deps.voice.startDownload();
+                if (started)
+                    deps.audit.record('voice.model.download_started', actorOf(req), { detail: { model: deps.voice.status().model.name } });
+                return reply.code(started ? 202 : 200).send(deps.voice.status());
+            }
+            catch (e) {
+                return fail(reply, e);
+            }
+        });
+        scope.delete(`${V}/voice/model`, { config: { manifest: { responseType: 'VoiceStatus', statusCodes: [200, 403] } } }, async (req) => {
+            const { removed } = deps.voice.removeModel();
+            if (removed)
+                deps.audit.record('voice.model.removed', actorOf(req), { detail: { model: deps.voice.status().model.name } });
+            return deps.voice.status();
+        });
+        scope.get(`${V}/voice/dashboard`, { config: { manifest: { responseType: 'VoiceDashboard', statusCodes: [200, 403, 503] } } }, async (req, reply) => {
+            if (deps.dashboard === null)
+                return reply.code(503).send({ error: 'This daemon keeps no dashboard store.', code: 'voice_dashboard_unavailable' });
+            return deps.dashboard.get(actorOf(req).id);
+        });
+        scope.put(`${V}/voice/dashboard`, { config: { manifest: { requestType: 'PutVoiceDashboardBody', responseType: 'VoiceDashboard', statusCodes: [200, 400, 403, 503] } } }, async (req, reply) => {
+            if (deps.dashboard === null)
+                return reply.code(503).send({ error: 'This daemon keeps no dashboard store.', code: 'voice_dashboard_unavailable' });
+            const parsed = PutVoiceDashboardSchema.safeParse(req.body);
+            if (!parsed.success)
+                return reply.code(400).send({ error: 'Invalid dashboard', details: parsed.error.issues });
+            return deps.dashboard.put(actorOf(req).id, parsed.data);
+        });
+    });
+}
+//# sourceMappingURL=routes.js.map

package/dist/voice/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/voice/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAAE,uBAAuB,EAA4B,MAAM,gBAAgB,CAAC;AACnF,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAqB,MAAM,cAAc,CAAC;AAEpF,MAAM,CAAC,GAAG,UAAU,CAAC;AAErB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAQpF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAEnE,mFAAmF;AACnF,MAAM,UAAU,YAAY,CAAC,GAAuC;IAClE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,aAAa,IAAI,GAAG,CAAC,EAAE,CAAC;IAC/C,IAAI,EAAE,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,6DAA6D,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;IAC/G,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,WAAW,CAAC;IACvC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,KAAK,EAAE,gDAAgD,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;IAC/H,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,IAAI,CAAC,KAAmB,EAAE,CAAU;IAC3C,IAAI,CAAC,YAAY,UAAU;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;AAC3G,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAoB,EAAE,IAAoB;IAC5E,MAAM,OAAO,GAAG,CAAC,GAAsB,EAAS,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,WAAW,CAAC;IAE5E,KAAK,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAChC,sGAAsG;QACtG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YAC9C,MAAM,OAAO,GAAG,YAAY,CAAC,GAAyC,CAAC,CAAC;YACxE,IAAI,OAAO,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3D,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC,CAAC;QAEH,yGAAyG;QACzG,gDAAgD;QAChD,KAAK,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAClC,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,CAAC,EAAE,CAAC;gBAC9D,KAAK,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,qBAAqB,GAAG,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAC3I,CAAC;YACD,KAAK,CAAC,eAAe,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;gBACzC,MAAM,IAAI,GAAI,GAA0B,CAAC,IAAI,CAAC;gBAC9C,IAAI,IAAI,KAAK,4BAA4B,EAAE,CAAC;oBAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,IAAI,CAAC,KAAK,CAAC,qBAAqB,GAAG,OAAO,CAAC,+BAA+B,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBAC7K,CAAC;gBACD,IAAI,IAAI,KAAK,gCAAgC,EAAE,CAAC;oBAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;gBAC1G,CAAC;gBACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,mBAAmB,EACvB,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,yBAAyB,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAC3J,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACnB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;gBACxI,IAAI,CAAC;oBACH,8EAA8E;oBAC9E,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC/C,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,GAAG,CACP,GAAG,CAAC,eAAe,EACnB,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAClF,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAChC,CAAC;QAEF,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,cAAc,EAClB,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EACpI,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACnB,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0EAA0E,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,CAAC;YACrJ,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;gBAC/C,IAAI,OAAO;oBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,8BAA8B,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACpI,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACnE,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACxB,CAAC;QACH,CAAC,CACF,CAAC;QAEF,KAAK,CAAC,MAAM,CACV,GAAG,CAAC,cAAc,EAClB,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAClF,KAAK,EAAE,GAAG,EAAE,EAAE;YACZ,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAC7C,IAAI,OAAO;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3H,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7B,CAAC,CACF,CAAC;QAEF,KAAK,CAAC,GAAG,CACP,GAAG,CAAC,kBAAkB,EACtB,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAC1F,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACnB,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uCAAuC,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAClJ,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7C,CAAC,CACF,CAAC;QAEF,KAAK,CAAC,GAAG,CACP,GAAG,CAAC,kBAAkB,EACtB,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,uBAAuB,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EACrI,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACnB,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uCAAuC,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAClJ,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/G,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1D,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/voice/service.d.ts

@@ -0,0 +1,177 @@
+/**
+ * VOICE MODE, PHASE 1 (program DES-VOICE §3): speech to text on THIS machine.
+ *
+ * Studio records the person's speech in the browser, encodes it as a 16 kHz mono WAV, and posts it to
+ * `POST /voice/transcribe`. Crew hands the bytes to whisper.cpp's CLI on stdin (`-f -`) and answers with the
+ * text. The audio is held in memory for that one call and dropped: it is never written to disk, never kept with
+ * a run, never sent off the machine.
+ *
+ * Two local pieces, each said plainly in `GET /voice/status`:
+ *  - the whisper.cpp CLI (`whisper-cli`): found on PATH, or named by `WICKED_CREW_WHISPER_BIN`. Crew does not
+ *    install it; the status names the install command for this platform.
+ *  - one model file (`ggml-base.en.bin`, 142 MiB): downloaded ONLY when the person consents
+ *    (`POST /voice/model {consent: true}`), checked against its published SHA-1, kept in the voice cache dir
+ *    (`WICKED_CREW_VOICE_DIR`, default the OS cache dir). Not under the state home: the worker fence classifies
+ *    every top-level entry there, and a model directory is not one of them.
+ *
+ * One transcription runs at a time and one may wait; a third is refused with 429 `voice_busy` (a streaming
+ * partial just skips that beat).
+ */
+import { type ChildProcess, type SpawnOptions } from 'node:child_process';
+/** The one model phase 1 ships with. Published by whisper.cpp (models/README.md: 142 MiB, this SHA-1). */
+export declare const VOICE_MODEL: Readonly<VoiceModel>;
+/** A WAV over this is refused (about 4 minutes of 16 kHz mono 16-bit speech). */
+export declare const VOICE_MAX_AUDIO_BYTES: number;
+/** One transcription that runs longer than this is killed and answered 504. */
+export declare const TRANSCRIBE_TIMEOUT_MS = 60000;
+/** Threads whisper.cpp may use (the host runs seats and checks too). */
+export declare const TRANSCRIBE_THREADS = 4;
+export type VoiceErrorCode = 'voice_engine_missing' | 'voice_engine_outdated' | 'voice_model_missing' | 'voice_audio_invalid' | 'voice_audio_too_large' | 'voice_busy' | 'voice_timeout' | 'voice_failed' | 'voice_consent_required' | 'voice_download_running' | 'voice_download_failed';
+export declare class VoiceError extends Error {
+    readonly status: number;
+    readonly code: VoiceErrorCode;
+    constructor(status: number, code: VoiceErrorCode, message: string);
+    body(): {
+        error: string;
+        code: VoiceErrorCode;
+    };
+}
+export interface VoiceDownloadState {
+    state: 'running' | 'failed';
+    receivedBytes: number;
+    totalBytes: number | null;
+    startedAt: string;
+    error: string | null;
+}
+/** `GET /voice/status` (api-types `VoiceStatus`). */
+export interface VoiceStatusBody {
+    /** Audio is transcribed on this machine; nothing is sent anywhere. Always true in phase 1. */
+    local: true;
+    /** Transcription can run now: the engine and the model are both here. */
+    ready: boolean;
+    engine: {
+        name: 'whisper.cpp';
+        found: boolean;
+        /** Where it was found (a path); null when not found. */
+        path: string | null;
+        /** How to install (or upgrade) it on this platform, when it is missing or too old. */
+        install: string | null;
+        /** The version it reports (`--version`); null when not found or when it reports none (too old). */
+        version: string | null;
+        /** It is new enough: a stdin transcription prints its text to stdout and writes no file. */
+        supported: boolean;
+    };
+    model: {
+        name: string;
+        present: boolean;
+        bytes: number | null;
+        approxBytes: number;
+        source: string;
+        download: VoiceDownloadState | null;
+    };
+}
+/** The injectable edges (tests stub every one). */
+/** How whisper.cpp is started (tests give a stand-in). */
+export type VoiceSpawn = (command: string, args: readonly string[], options: SpawnOptions) => ChildProcess;
+export interface VoiceDeps {
+    /** The voice cache dir (the model lives here). */
+    dir: string;
+    /** The whisper.cpp CLI, or null to look it up on PATH. */
+    bin?: string | null;
+    env?: NodeJS.ProcessEnv;
+    platform?: NodeJS.Platform;
+    fetch?: typeof fetch;
+    spawn?: VoiceSpawn;
+    exists?: (p: string) => boolean;
+    timeoutMs?: number;
+    /** The model to fetch and use (tests give their own checksum). */
+    model?: VoiceModel;
+    /** What `<bin> --version` prints (tests stand it in); null when it fails. */
+    versionOf?: (bin: string) => string | null;
+}
+export interface VoiceModel {
+    name: string;
+    file: string;
+    url: string;
+    sha1: string;
+    approxBytes: number;
+    source: string;
+}
+/** The OS cache dir for crew's voice files (`WICKED_CREW_VOICE_DIR` wins). */
+export declare function defaultVoiceDir(env?: NodeJS.ProcessEnv, plat?: NodeJS.Platform, home?: string): string;
+/** How to install whisper.cpp here, in one line. */
+export declare function installHint(plat: NodeJS.Platform): string;
+/** The oldest engine voice runs: it must report `--version` (whisper.cpp 1.8.0 does not), and be at least this. */
+export declare const MIN_WHISPER: readonly [1, 8, 0];
+/** `whisper.cpp version: 1.9.5` → `1.9.5`; anything else → null. */
+export declare function parseWhisperVersion(out: string | null): string | null;
+/**
+ * Is this engine safe to hand audio on stdin? From whisper.cpp 1.8.0 a stdin run (`-f -`) writes its `-otxt` output
+ * to stdout; 1.7.x writes it to a FILE named `-.txt` in the working directory, which would keep a transcript on disk.
+ * 1.8.0 itself cannot say its version, so voice asks for an engine that reports one (`--version`) at 1.8.0 or later,
+ * and refuses the rest before any audio is sent.
+ */
+export declare function whisperSupported(version: string | null): boolean;
+/** How to upgrade whisper.cpp here, in one line. */
+export declare function upgradeHint(plat: NodeJS.Platform): string;
+/** Find the whisper.cpp CLI: `WICKED_CREW_WHISPER_BIN`, else `whisper-cli` (or the older `whisper-cpp`) on PATH. */
+export declare function findWhisper(env: NodeJS.ProcessEnv, plat: NodeJS.Platform, exists: (p: string) => boolean): string | null;
+/**
+ * Is it the WAV studio sends: RIFF/WAVE with a PCM `fmt ` chunk (16 kHz, mono, 16-bit) and a non-empty `data`
+ * chunk, every chunk inside the buffer? Anything else is refused before the engine is started.
+ */
+export declare function wavProblem(buf: Buffer): string | null;
+/** Is it a WAV this route takes? */
+export declare function isWav(buf: Buffer): boolean;
+/** whisper.cpp's plain-text output as one line: no timestamps, no non-speech tags ([BLANK_AUDIO], (music)). */
+export declare function cleanTranscript(raw: string): string;
+export declare class VoiceService {
+    private readonly deps;
+    private readonly env;
+    private readonly plat;
+    private readonly exists;
+    private readonly fetchImpl;
+    private readonly spawnImpl;
+    private readonly timeoutMs;
+    private readonly model;
+    private readonly versionOf;
+    /** `--version` per engine path, read once. */
+    private readonly versions;
+    private download;
+    /** The download in flight: removal aborts it and bumps the generation, so it can never land afterwards. */
+    private inflight;
+    private gen;
+    /** One transcription holds the slot; one waits for it (the slot is handed over, never re-contested). */
+    private busy;
+    private waiting;
+    constructor(deps: VoiceDeps);
+    modelPath(): string;
+    private bin;
+    private engineVersion;
+    private tooOld;
+    private modelBytes;
+    status(): VoiceStatusBody;
+    /**
+     * Fetch the model, once, with the person's consent. Returns at once; the download runs on and
+     * `status().model.download` reports it. The file lands under a `.part` name, is checked against the published
+     * SHA-1, and only then takes its real name; a failed or mismatched download leaves nothing behind.
+     */
+    startDownload(): {
+        started: boolean;
+    };
+    private fetchModel;
+    /** Remove the model (the person's "Remove the speech model"). A download in flight is cancelled first. */
+    removeModel(): {
+        removed: boolean;
+    };
+    /** Transcribe one WAV held in memory. The bytes go to whisper.cpp on stdin and are dropped after. */
+    transcribe(audio: Buffer): Promise<{
+        text: string;
+        ms: number;
+        model: string;
+    }>;
+    /** The engine and the model, or the refusal that names the missing one. */
+    private ready;
+    private run;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/voice/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/voice/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAiC,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAUzG,0GAA0G;AAC1G,eAAO,MAAM,WAAW,EAAE,QAAQ,CAAC,UAAU,CAQ3C,CAAC;AAEH,iFAAiF;AACjF,eAAO,MAAM,qBAAqB,QAAkB,CAAC;AACrD,+EAA+E;AAC/E,eAAO,MAAM,qBAAqB,QAAS,CAAC;AAC5C,wEAAwE;AACxE,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC,MAAM,MAAM,cAAc,GACtB,sBAAsB,GACtB,uBAAuB,GACvB,qBAAqB,GACrB,qBAAqB,GACrB,uBAAuB,GACvB,YAAY,GACZ,eAAe,GACf,cAAc,GACd,wBAAwB,GACxB,wBAAwB,GACxB,uBAAuB,CAAC;AAE5B,qBAAa,UAAW,SAAQ,KAAK;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc;gBAA7C,MAAM,EAAE,MAAM,EAAW,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM;IAGnF,IAAI,IAAI;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,cAAc,CAAA;KAAE;CAGhD;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,qDAAqD;AACrD,MAAM,WAAW,eAAe;IAC9B,8FAA8F;IAC9F,KAAK,EAAE,IAAI,CAAC;IACZ,yEAAyE;IACzE,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE;QACN,IAAI,EAAE,aAAa,CAAC;QACpB,KAAK,EAAE,OAAO,CAAC;QACf,wDAAwD;QACxD,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,sFAAsF;QACtF,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,mGAAmG;QACnG,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,4FAA4F;QAC5F,SAAS,EAAE,OAAO,CAAC;KACpB,CAAC;IACF,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;KACrC,CAAC;CACH;AAED,mDAAmD;AACnD,0DAA0D;AAC1D,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,KAAK,YAAY,CAAC;AAE3G,MAAM,WAAW,SAAS;IACxB,kDAAkD;IAClD,GAAG,EAAE,MAAM,CAAC;IACZ,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CAC5C;AAED,MAAM,WAAW,UAAU;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAE1H,8EAA8E;AAC9E,wBAAgB,eAAe,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,GAAE,MAAM,CAAC,QAAuB,EAAE,IAAI,GAAE,MAAkB,GAAG,MAAM,CAM5I;AAED,oDAAoD;AACpD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAIzD;AAED,mHAAmH;AACnH,eAAO,MAAM,WAAW,oBAAqB,CAAC;AAE9C,oEAAoE;AACpE,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAGrE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAOhE;AAWD,oDAAoD;AACpD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAGzD;AAED,oHAAoH;AACpH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,GAAG,MAAM,GAAG,IAAI,CAYxH;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAwBrD;AAED,oCAAoC;AACpC,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE1C;AAED,+GAA+G;AAC/G,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMnD;AAED,qBAAa,YAAY;IAmBX,OAAO,CAAC,QAAQ,CAAC,IAAI;IAlBjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAoB;IACxC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAkB;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAa;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiC;IAC3D,8CAA8C;IAC9C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAC7D,OAAO,CAAC,QAAQ,CAAmC;IACnD,2GAA2G;IAC3G,OAAO,CAAC,QAAQ,CAAwD;IACxE,OAAO,CAAC,GAAG,CAAK;IAChB,wGAAwG;IACxG,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,OAAO,CAAyB;gBAEX,IAAI,EAAE,SAAS;IAW5C,SAAS,IAAI,MAAM;IAInB,OAAO,CAAC,GAAG;IAKX,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,UAAU;IAMlB,MAAM,IAAI,eAAe;IAmBzB;;;;OAIG;IACH,aAAa,IAAI;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE;YAoBvB,UAAU;IA6BxB,0GAA0G;IAC1G,WAAW,IAAI;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE;IAYnC,qGAAqG;IAC/F,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAuBrF,2EAA2E;IAC3E,OAAO,CAAC,KAAK;IAQb,OAAO,CAAC,GAAG;CA4BZ"}