@agentdeck/bridge 1.0.12 → 1.0.13

package/dist/whisper-server-manager.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Whisper-server singleton manager.
+ *
+ * Fixed port 9100 — one server shared across all agentdeck sessions.
+ * Info file at ~/.agentdeck/whisper-server.json for discovery.
+ * Last session to exit kills the server.
+ */
+export declare const WHISPER_SERVER_PORT = 9100;
+/**
+ * Ensure a whisper-server is running on the singleton port.
+ * Returns port on success, null if unavailable (binary missing, model missing, etc).
+ */
+export declare function ensureWhisperServer(serverBin: string, modelPath: string): Promise<number | null>;
+/**
+ * Release the whisper-server if no other sessions remain.
+ * Call AFTER deregisterSession() so the count is already decremented.
+ */
+export declare function releaseWhisperServer(): void;
+//# sourceMappingURL=whisper-server-manager.d.ts.map

package/dist/whisper-server-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whisper-server-manager.d.ts","sourceRoot":"","sources":["../src/whisper-server-manager.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAaH,eAAO,MAAM,mBAAmB,OAAO,CAAC;AA2DxC;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA6ExB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,IAAI,CAiB3C"}

package/dist/whisper-server-manager.js

@@ -0,0 +1,171 @@
+/**
+ * Whisper-server singleton manager.
+ *
+ * Fixed port 9100 — one server shared across all agentdeck sessions.
+ * Info file at ~/.agentdeck/whisper-server.json for discovery.
+ * Last session to exit kills the server.
+ */
+import { spawn } from 'child_process';
+import { readFileSync, writeFileSync, renameSync, unlinkSync, mkdirSync, existsSync, } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+import { randomUUID } from 'crypto';
+import { listActive } from './session-registry.js';
+import { debug } from './logger.js';
+export const WHISPER_SERVER_PORT = 9100;
+const INFO_DIR = join(homedir(), '.agentdeck');
+const INFO_FILE = join(INFO_DIR, 'whisper-server.json');
+function ensureDir() {
+    if (!existsSync(INFO_DIR)) {
+        mkdirSync(INFO_DIR, { recursive: true });
+    }
+}
+function readInfo() {
+    try {
+        return JSON.parse(readFileSync(INFO_FILE, 'utf-8'));
+    }
+    catch {
+        return null;
+    }
+}
+function writeInfo(info) {
+    ensureDir();
+    const tmp = join(INFO_DIR, `.whisper-server.${randomUUID()}.tmp`);
+    writeFileSync(tmp, JSON.stringify(info, null, 2), 'utf-8');
+    renameSync(tmp, INFO_FILE);
+}
+function removeInfo() {
+    try {
+        unlinkSync(INFO_FILE);
+    }
+    catch { /* already gone */ }
+}
+function isProcessAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function isServerResponding(port) {
+    try {
+        await fetch(`http://127.0.0.1:${port}`, { signal: AbortSignal.timeout(1000) });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function pollUntilReady(port, maxMs) {
+    const start = Date.now();
+    while (Date.now() - start < maxMs) {
+        if (await isServerResponding(port))
+            return true;
+        await new Promise((r) => setTimeout(r, 500));
+    }
+    return false;
+}
+/**
+ * Ensure a whisper-server is running on the singleton port.
+ * Returns port on success, null if unavailable (binary missing, model missing, etc).
+ */
+export async function ensureWhisperServer(serverBin, modelPath) {
+    if (!existsSync(serverBin)) {
+        debug('WhisperMgr', `whisper-server not found at ${serverBin}, skipping`);
+        return null;
+    }
+    // 1. Check existing info file
+    const info = readInfo();
+    if (info) {
+        if (isProcessAlive(info.pid)) {
+            // PID alive — check if server is responding
+            if (await isServerResponding(info.port)) {
+                debug('WhisperMgr', `Reusing existing server (pid=${info.pid}, port=${info.port})`);
+                return info.port;
+            }
+            // PID alive but not responding — model may still be loading, poll 30s
+            debug('WhisperMgr', `Server pid=${info.pid} alive but not responding, waiting for model load...`);
+            if (await pollUntilReady(info.port, 30_000)) {
+                debug('WhisperMgr', `Server became ready (pid=${info.pid}, port=${info.port})`);
+                return info.port;
+            }
+            // Still not responding after 30s — stale
+            debug('WhisperMgr', `Server pid=${info.pid} never responded, treating as stale`);
+        }
+        // PID dead or stale — clean up
+        removeInfo();
+    }
+    // 2. Spawn new server (detached so it survives parent exit)
+    debug('WhisperMgr', `Starting whisper-server on port ${WHISPER_SERVER_PORT}...`);
+    const args = [
+        '--model', modelPath,
+        '--port', String(WHISPER_SERVER_PORT),
+        '--host', '127.0.0.1',
+        '-l', 'auto',
+        '--no-timestamps',
+        '--convert',
+        '--prompt', 'coding, programming, Claude, terminal, git, function, component, API',
+    ];
+    const proc = spawn(serverBin, args, {
+        stdio: 'ignore',
+        detached: true,
+    });
+    proc.unref();
+    const pid = proc.pid;
+    if (!pid) {
+        debug('WhisperMgr', 'Failed to spawn whisper-server (no pid)');
+        return null;
+    }
+    // 3. Brief wait to detect immediate crash (e.g. port conflict)
+    await new Promise((r) => setTimeout(r, 200));
+    if (!isProcessAlive(pid)) {
+        debug('WhisperMgr', `whisper-server died immediately (pid=${pid}), checking for existing server...`);
+        // Another process may have won the port race — re-check info file
+        const otherInfo = readInfo();
+        if (otherInfo && isProcessAlive(otherInfo.pid) && await isServerResponding(otherInfo.port)) {
+            debug('WhisperMgr', `Found winner server (pid=${otherInfo.pid}, port=${otherInfo.port})`);
+            return otherInfo.port;
+        }
+        removeInfo();
+        return null;
+    }
+    // 4. Write info file
+    writeInfo({ pid, port: WHISPER_SERVER_PORT, modelPath, startedAt: new Date().toISOString() });
+    // 5. Poll until ready (up to 30s for model loading)
+    if (await pollUntilReady(WHISPER_SERVER_PORT, 30_000)) {
+        debug('WhisperMgr', `whisper-server ready on port ${WHISPER_SERVER_PORT} (pid=${pid})`);
+        return WHISPER_SERVER_PORT;
+    }
+    debug('WhisperMgr', 'whisper-server failed to become ready within 30s');
+    return null;
+}
+/**
+ * Release the whisper-server if no other sessions remain.
+ * Call AFTER deregisterSession() so the count is already decremented.
+ */
+export function releaseWhisperServer() {
+    const activeSessions = listActive();
+    if (activeSessions.length > 0) {
+        debug('WhisperMgr', `Keeping whisper-server alive (${activeSessions.length} session(s) remain)`);
+        return;
+    }
+    const info = readInfo();
+    if (!info)
+        return;
+    debug('WhisperMgr', `Killing whisper-server (pid=${info.pid})`);
+    try {
+        process.kill(info.pid, 'SIGTERM');
+    }
+    catch { /* already dead */ }
+    // Force kill after 3s
+    setTimeout(() => {
+        try {
+            process.kill(info.pid, 'SIGKILL');
+        }
+        catch { /* already dead */ }
+    }, 3000);
+    removeInfo();
+}
+//# sourceMappingURL=whisper-server-manager.js.map

package/dist/whisper-server-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whisper-server-manager.js","sourceRoot":"","sources":["../src/whisper-server-manager.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EACL,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EACnD,SAAS,EAAE,UAAU,GACtB,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpC,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAExC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;AASxD,SAAS,SAAS;IAChB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,QAAQ;IACf,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAe,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAgB;IACjC,SAAS,EAAE,CAAC;IACZ,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,mBAAmB,UAAU,EAAE,MAAM,CAAC,CAAC;IAClE,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3D,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,UAAU;IACjB,IAAI,CAAC;QAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAY;IAC5C,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,oBAAoB,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,KAAa;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,KAAK,EAAE,CAAC;QAClC,IAAI,MAAM,kBAAkB,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAChD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAiB,EACjB,SAAiB;IAEjB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,YAAY,EAAE,+BAA+B,SAAS,YAAY,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8BAA8B;IAC9B,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IACxB,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,4CAA4C;YAC5C,IAAI,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxC,KAAK,CAAC,YAAY,EAAE,gCAAgC,IAAI,CAAC,GAAG,UAAU,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;gBACpF,OAAO,IAAI,CAAC,IAAI,CAAC;YACnB,CAAC;YACD,sEAAsE;YACtE,KAAK,CAAC,YAAY,EAAE,cAAc,IAAI,CAAC,GAAG,sDAAsD,CAAC,CAAC;YAClG,IAAI,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC5C,KAAK,CAAC,YAAY,EAAE,4BAA4B,IAAI,CAAC,GAAG,UAAU,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;gBAChF,OAAO,IAAI,CAAC,IAAI,CAAC;YACnB,CAAC;YACD,yCAAyC;YACzC,KAAK,CAAC,YAAY,EAAE,cAAc,IAAI,CAAC,GAAG,qCAAqC,CAAC,CAAC;QACnF,CAAC;QACD,+BAA+B;QAC/B,UAAU,EAAE,CAAC;IACf,CAAC;IAED,4DAA4D;IAC5D,KAAK,CAAC,YAAY,EAAE,mCAAmC,mBAAmB,KAAK,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG;QACX,SAAS,EAAE,SAAS;QACpB,QAAQ,EAAE,MAAM,CAAC,mBAAmB,CAAC;QACrC,QAAQ,EAAE,WAAW;QACrB,IAAI,EAAE,MAAM;QACZ,iBAAiB;QACjB,WAAW;QACX,UAAU,EAAE,sEAAsE;KACnF,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE;QAClC,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,EAAE,CAAC;IAEb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,KAAK,CAAC,YAAY,EAAE,yCAAyC,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+DAA+D;IAC/D,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,YAAY,EAAE,wCAAwC,GAAG,oCAAoC,CAAC,CAAC;QACrG,kEAAkE;QAClE,MAAM,SAAS,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,SAAS,IAAI,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,MAAM,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3F,KAAK,CAAC,YAAY,EAAE,4BAA4B,SAAS,CAAC,GAAG,UAAU,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC;YAC1F,OAAO,SAAS,CAAC,IAAI,CAAC;QACxB,CAAC;QACD,UAAU,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qBAAqB;IACrB,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAE9F,oDAAoD;IACpD,IAAI,MAAM,cAAc,CAAC,mBAAmB,EAAE,MAAM,CAAC,EAAE,CAAC;QACtD,KAAK,CAAC,YAAY,EAAE,gCAAgC,mBAAmB,SAAS,GAAG,GAAG,CAAC,CAAC;QACxF,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,YAAY,EAAE,kDAAkD,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,cAAc,GAAG,UAAU,EAAE,CAAC;IACpC,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,YAAY,EAAE,iCAAiC,cAAc,CAAC,MAAM,qBAAqB,CAAC,CAAC;QACjG,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IACxB,IAAI,CAAC,IAAI;QAAE,OAAO;IAElB,KAAK,CAAC,YAAY,EAAE,+BAA+B,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;IAChE,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IACvE,sBAAsB;IACtB,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IACzE,CAAC,EAAE,IAAI,CAAC,CAAC;IACT,UAAU,EAAE,CAAC;AACf,CAAC"}

package/fm-helper/AgentDeckFMHelper.swift

@@ -48,17 +48,17 @@ struct AgentDeckFMHelper {
         }
 
         if request.type == "transcribe" {
-            await handleTranscribe(request)
+            dispatchLongWork { await handleTranscribe(request) }
             return
         }
 
         if request.type == "speak" {
-            await handleSpeak(request)
+            dispatchLongWork { await handleSpeak(request) }
             return
         }
 
         if request.type == "synthesize" {
-            await handleSynthesize(request)
+            dispatchLongWork { await handleSynthesize(request) }
             return
         }
 
@@ -76,6 +76,26 @@ struct AgentDeckFMHelper {
             return
         }
 
+        dispatchLongWork { await handleGenerate(request) }
+    }
+
+    /// Long work must never run on the stdin read loop.
+    ///
+    /// Measured 2026-08-08 on a D200H: one in-flight `generate` kept the loop
+    /// busy for 25 s, so the `record_stop` queued behind it was not even READ
+    /// until it finished. The push-to-talk capture ran to its 30 s cap and
+    /// transcribed 30 s of mostly silence, which reached the user as "voice
+    /// does nothing". `record` was already detached for exactly this reason;
+    /// every other slow request needed the same treatment.
+    ///
+    /// The work stays serialized, in read order, exactly as it was when the
+    /// loop ran it — only the READING of the next line is freed, which is all a
+    /// control line like `record_stop` needs.
+    private static func dispatchLongWork(_ body: @escaping @Sendable () async -> Void) {
+        workChain.enqueue(body)
+    }
+
+    private static func handleGenerate(_ request: HelperRequest) async {
         guard let prompt = request.prompt, !prompt.isEmpty else {
             write(["id": request.id, "error": "bad_request", "reason": "missing prompt"])
             return
@@ -198,8 +218,15 @@ struct AgentDeckFMHelper {
             write(["id": request.id, "error": "bad_request", "reason": "missing wav output path"])
             return
         }
+        // Reserve before the slow setup below, so a stop arriving mid-setup has
+        // somewhere to land (see RecordingBox.pendingStop).
+        guard activeRecording.reserve(requestId: request.id) else {
+            write(["id": request.id, "error": "busy", "reason": "a recording is already in progress"])
+            return
+        }
         let granted = await ensureMicAuthorization()
         guard granted else {
+            activeRecording.release()
             write([
                 "id": request.id,
                 "error": "unauthorized",
@@ -212,6 +239,7 @@ struct AgentDeckFMHelper {
                                             sampleRate: sampleRate,
                                             channels: 1,
                                             interleaved: true) else {
+            activeRecording.release()
             write(["id": request.id, "error": "record_failed", "reason": "output format unavailable"])
             return
         }
@@ -220,12 +248,19 @@ struct AgentDeckFMHelper {
         let input = engine.inputNode
         let inFormat = input.outputFormat(forBus: 0)
         guard inFormat.sampleRate > 0, inFormat.channelCount > 0 else {
+            activeRecording.release()
             write(["id": request.id, "error": "record_failed", "reason": "no audio input device"])
             return
         }
         let sink = PCMSink()
-        guard activeRecording.begin(requestId: request.id, engine: engine, sink: sink) else {
-            write(["id": request.id, "error": "busy", "reason": "a recording is already in progress"])
+        if let stopped = activeRecording.begin(engine: engine, sink: sink) {
+            // The stop beat the setup. Answer it as the capture it was meant
+            // for instead of starting an engine nobody is waiting on.
+            if stopped.cancelled {
+                write(["id": request.id, "cancelled": true])
+            } else {
+                write(["id": request.id, "error": "record_failed", "reason": "stopped before capture started"])
+            }
             return
         }
         input.installTap(onBus: 0, bufferSize: 4096, format: inFormat) { buffer, _ in
@@ -437,6 +472,9 @@ struct AgentDeckFMHelper {
     /// task; the lock keeps two replies from interleaving inside one line.
     private static let writeLock = NSLock()
 
+    /// See `dispatchLongWork`.
+    private static let workChain = WorkChain()
+
     private static func write(_ object: [String: Any]) {
         guard JSONSerialization.isValidJSONObject(object),
               let data = try? JSONSerialization.data(withJSONObject: object),
@@ -449,6 +487,27 @@ struct AgentDeckFMHelper {
     }
 }
 
+/// Serializes the helper's slow requests (LLM generation, speech recognition,
+/// TTS) off the stdin read loop, while the loop stays free to read control
+/// lines such as `record_stop`.
+///
+/// A chain rather than an actor: actor executors guarantee mutual exclusion but
+/// NOT FIFO, and `Task.detached` does not even preserve the order in which the
+/// tasks were created — so two queued `speak` requests could have been voiced
+/// out of order. Linking each unit of work to its predecessor's completion
+/// keeps the read order the loop used to provide. The enqueue itself is O(1)
+/// and happens on the read loop, which is the only mutator.
+private final class WorkChain: @unchecked Sendable {
+    private let lock = NSLock()
+    private var tail: Task<Void, Never> = Task {}
+
+    func enqueue(_ body: @escaping @Sendable () async -> Void) {
+        lock.lock(); defer { lock.unlock() }
+        let previous = tail
+        tail = Task { await previous.value; await body() }
+    }
+}
+
 /// State for the single in-flight microphone capture. One at a time by design:
 /// the daemon models push-to-talk, and two overlapping engine taps on the same
 /// input device produce garbage anyway.
@@ -463,17 +522,43 @@ private final class RecordingBox: @unchecked Sendable {
     /// Bumped per recording so a stale max-duration timer from a finished
     /// capture cannot terminate the one that started after it.
     private var generation = 0
-
-    func begin(requestId: Int, engine: AVAudioEngine, sink: PCMSink) -> Bool {
+    /// A stop that arrived while the capture was still being set up.
+    ///
+    /// `handleRecord` reserves the slot, then spends real time on mic
+    /// authorization, format negotiation and engine construction before the
+    /// tap is live. Hold-to-talk routinely beats that: a short hold puts
+    /// `record_stop` on stdin while `requestId` was set but no continuation
+    /// exists yet. Without this latch the stop was dropped, the capture ran to
+    /// its 30s cap, and 30s of room noise was transcribed and injected into
+    /// the user's session — worst of all for the sub-250ms tap, whose whole
+    /// meaning is "never mind".
+    private var pendingStop: Outcome?
+
+    /// Claim the slot before the slow setup. Returns false when a capture is
+    /// already in flight.
+    func reserve(requestId: Int) -> Bool {
         lock.lock(); defer { lock.unlock() }
         guard self.requestId == nil else { return false }
         self.requestId = requestId
-        self.engine = engine
-        self.sink = sink
+        self.pendingStop = nil
         generation += 1
         return true
     }
 
+    /// Arm the reserved slot with the live engine. Returns the stop that
+    /// arrived during setup, if any — the caller must then not start at all.
+    func begin(engine: AVAudioEngine, sink: PCMSink) -> Outcome? {
+        lock.lock(); defer { lock.unlock() }
+        if let stop = pendingStop {
+            pendingStop = nil
+            requestId = nil
+            return stop
+        }
+        self.engine = engine
+        self.sink = sink
+        return nil
+    }
+
     func wait(maxMs: Int) async -> Outcome {
         let gen = currentGeneration()
         let outcome: Outcome = await withCheckedContinuation { cont in
@@ -507,16 +592,32 @@ private final class RecordingBox: @unchecked Sendable {
         lock.lock()
         let cont = continuation
         let active = requestId != nil
+        let outcome = Outcome(cancelled: cancelled, reason: cancelled ? "cancelled" : reason)
+        if active && cont == nil {
+            // Reserved but not yet armed: latch the stop for `begin` rather
+            // than dropping it on the floor. Keep the reservation so the
+            // in-flight setup still owns the slot.
+            pendingStop = outcome
+            lock.unlock()
+            return true
+        }
         continuation = nil
         requestId = nil
         engine = nil
         sink = nil
         lock.unlock()
         guard active, let cont else { return false }
-        cont.resume(Outcome(cancelled: cancelled, reason: cancelled ? "cancelled" : reason))
+        cont.resume(outcome)
         return true
     }
 
+    /// Drop a reservation whose setup failed before the engine existed.
+    func release() {
+        lock.lock(); defer { lock.unlock() }
+        requestId = nil
+        pendingStop = nil
+    }
+
     func clear() {
         _ = finish(cancelled: true, reason: "cleared")
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentdeck/bridge",
-  "version": "1.0.12",
+  "version": "1.0.13",
   "type": "module",
   "license": "MIT",
   "repository": {
@@ -33,8 +33,8 @@
     "sharp": "^0.34.5",
     "strip-ansi": "^7.2.0",
     "ws": "^8.20.0",
-    "@agentdeck/shared": "1.0.12",
-    "@agentdeck/hooks": "1.0.12"
+    "@agentdeck/hooks": "1.0.13",
+    "@agentdeck/shared": "1.0.13"
   },
   "optionalDependencies": {
     "@picovoice/porcupine-node": "^4.0.2",