@fastagent-sh/voicenote 0.18.2 → 0.18.4

package/README.md

@@ -6,7 +6,7 @@ CLI command: `vn`
 
 [中文文档 / Chinese documentation](README.zh-CN.md)
 
-Currently tuned for the PHILIPS VTR6500 voice recorder, but the workflow is generic: scan recordings under a mount point → transcribe with speaker diarization → GPT performs the necessary cleanup and process reconstruction inside the notes-generation stage → produce smart notes.
+Currently tuned for the PHILIPS VTR6500 voice recorder, but the workflow is generic: scan recordings under a mount point → transcribe with speaker diarization → the selected summary model performs cleanup and process reconstruction → produce smart notes.
 
 **Two ways to use it:**
 
@@ -130,6 +130,24 @@ provider that actually failed. If that empties the chain, `vn run --mode notes`
 skips instead of paying for a transcript whose summary cannot happen.
 `vn doctor` prints the effective chain and the status of anything not ready.
 
+### DeepSeek notes
+
+In the desktop app, open **Settings → Notes generation**, select **DeepSeek API**, enter your API key, and save. The model defaults to `deepseek-v4-flash`; enter `deepseek-v4-pro` to use Pro. ChatGPT sign-in is only shown for configurations that use ChatGPT. Audio transcription continues to use Volcano.
+
+For the CLI, merge these values into `~/.config/voicenote/config.json`:
+
+```json
+{
+  "VOICENOTE_PI_PROVIDER": "deepseek",
+  "VOICENOTE_PI_MODEL_SUMMARY": "deepseek-v4-flash",
+  "DEEPSEEK_API_KEY": "..."
+}
+```
+
+The notes-specific model setting takes precedence over `VOICENOTE_PI_MODEL`. When switching providers in the GUI, the model resets to that provider's default. API keys can also come from pi's authentication file or the environment; pi's authentication file takes priority over API-key environment variables.
+
+Save changes, then check `vn doctor` or the app's Status panel. Credential checks confirm configuration, not API connectivity or account balance. Each provider in a fallback chain receives the same model ID, so configure DeepSeek on its own rather than mixing it with OpenAI.
+
 ## Usage
 
 ```bash
@@ -150,7 +168,7 @@ vn open <slug>                  # open a note by filename fragment
 vn forget <id|filename>         # let a recording be processed again
 vn log                          # print today's log tail (--lines N / -f follow / --err include launchd.err / --date YYYY-MM-DD)
 vn errors                       # print recent ERROR logs
-vn login                        # sign in to ChatGPT (Codex device-code flow, for the notes backend; no pi TUI needed)
+vn login                        # sign in to ChatGPT for the notes backend (browser callback; `--device-code` for headless machines). No pi TUI needed
 vn upgrade                      # reinstall latest npm package
 vn install-launch-agent
 vn status
@@ -259,7 +277,7 @@ A self-contained macOS `.app` (Tauri v2) for **non-terminal users**: the target
 
 **Positioning**: the GUI is only a "status dashboard + quick access to output" — it does **not** drive processing. The full pipeline runs autonomously every 60s via the background LaunchAgent using the bundled engine (it keeps running with the GUI closed).
 
-- First run: setup wizard (identity / Volcano keys / proxy) → ChatGPT sign-in (no terminal on the device; uses `vn login`'s browser-callback flow)
+- First run: settings (identity / Volcano keys / notes provider / proxy). Choose DeepSeek with an API key, or ChatGPT with browser sign-in (`vn login`'s browser-callback flow).
 - After that: the main view shows agent activity + recent notes (open note / open folder)
 
 ### What's bundled
@@ -271,7 +289,7 @@ A self-contained macOS `.app` (Tauri v2) for **non-terminal users**: the target
 | `vn` (compiled) | externalBin | pipeline + ChatGPT sign-in |
 | `bun` | externalBin | runs pi |
 | `ffprobe` (native arm64 static) | externalBin | audio duration (pi only needs ffprobe, not all of ffmpeg) |
-| `pi` + node_modules | resource | notes backend (ChatGPT Codex agent) |
+| `pi` + node_modules | resource | notes backend (ChatGPT, OpenAI API, or DeepSeek) |
 
 At runtime, Rust generates a wrapper (`exec <bundled bun> <bundled pi/cli.js> "$@"`) and injects `VOICENOTE_PI_BIN` / `VOICENOTE_FFPROBE_BIN` into `vn`. Release builds are **universal** (x86_64 + arm64; vn/bun/ffprobe each merged with `lipo`; pi is JS and needs none).
 
@@ -317,12 +335,14 @@ irm https://raw.githubusercontent.com/fastagent-sh/voicenote/main/scripts/instal
 
 `install-app.sh` downloads the packaged `.app` from GitHub Releases → installs to `/Applications` → **removes the quarantine flag for the user** (Gatekeeper bypass for un-notarized builds) → opens it. The target machine needs no bun/pi/ffprobe/global vn (all bundled).
 
-**First launch**: the app lands on Settings → fill in identity + your own Volcano ASR/TOS keys + proxy (BYOK) → save → click "Sign in to ChatGPT" in the Status panel (one-time browser authorization). The GUI then installs and loads the background LaunchAgent (pointing at the bundled engine); plug in the recorder and transcription + notes happen automatically.
+**First launch**: the app lands on Settings. Fill in identity, your Volcano ASR/TOS keys, notes provider/model, and proxy as needed. For DeepSeek or OpenAI API, enter the corresponding API key; for ChatGPT, save and click "Sign in to ChatGPT" in the Status panel. Saving installs and loads the background LaunchAgent using the bundled engine. Once credentials are configured, plug in the recorder for automatic transcription and notes.
 
 > The background agent label is `sh.fastagent.voicenote` (same as the CLI version; only one exists per machine). If the `.app` is moved, open it once to recalibrate the plist.
 
 **Upgrades**: since 0.1.9 the app has a built-in updater — open the app → "Settings → Software update" → "Check for updates"; when a new version appears, click "Download & install"; the app restarts automatically with config/notes preserved. For first installs, or upgrades from 0.1.8 and earlier (which had no updater), re-run the one-line install script above.
 
+> **Windows, from 0.1.11 or earlier**: those builds point their updater at the pre-rebrand repo, which still exists and stops at 0.1.11 — "Check for updates" therefore always reports "up to date". The bundle identifier changed in the same rebrand, so re-running the installer does *not* replace them; both copies stay installed under the same name. Uninstall the old VoiceNote (Settings → Apps) first, then run the one-line install. Config and notes are untouched by the uninstall.
+
 ### Maintainers: packaging + release
 
 **Automatic (recommended)**: push an `app-v*` tag to trigger `.github/workflows/release-app.yml`:

package/README.zh-CN.md

@@ -148,7 +148,7 @@ vn open <slug>                  # 按文件名片段打开纪要
 vn forget <id|filename>         # 让某条录音重新被处理
 vn log                          # 打印今天日志末尾(--lines N / -f 跟随 / --err 含 launchd.err / --date YYYY-MM-DD)
 vn errors                       # 打印最近 ERROR 日志
-vn login                        # 登录 ChatGPT(Codex 设备码流,纪要后端用;无需开 pi TUI)
+vn login                        # 登录 ChatGPT, 纪要后端用(默认浏览器回调; 无头机器用 `--device-code`)。无需开 pi TUI
 vn upgrade                      # reinstall latest npm package
 vn install-launch-agent
 vn status
@@ -321,6 +321,8 @@ irm https://raw.githubusercontent.com/fastagent-sh/voicenote/main/scripts/instal
 
 **升级**:0.1.9 起内置自动更新 —— 打开 app →「设置 → 软件更新」→「检查更新」，有新版点「下载并安装」，装好自动重启，配置/纪要均保留。首次安装、或从 0.1.8 及更早版本升级（它们还没有更新器），重跑上面的一键安装脚本即可。
 
+> **Windows 从 0.1.11 及更早版本升级**：这些构建的更新地址指向改名前的旧仓库，而旧仓库至今存在、最新版停在 0.1.11，所以「检查更新」永远显示已是最新。同一次改名还换了 bundle identifier，重跑安装脚本**不会**覆盖旧版，两份会同名共存。先在「设置 → 应用」里卸载旧的 VoiceNote，再跑一键安装。卸载不影响配置和纪要。
+
 ### 维护者:打包 + 发布
 
 **自动(推荐)**:打 `app-v*` tag 触发 `.github/workflows/release-app.yml`:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fastagent-sh/voicenote",
-  "version": "0.18.2",
+  "version": "0.18.4",
   "description": "Voice recordings → diarized transcripts → integrated semantic Markdown notes. Currently optimized for the PHILIPS VTR6500 recorder, but the workflow is generic.",
   "type": "module",
   "license": "MIT",

package/src/cli.ts

@@ -2,7 +2,7 @@
 import { cac } from 'cac'
 import { deriveNoProxy, envKeysToEmbed, hydrateFromFileEnv, parseFileEnv } from './envConfig'
 import { parseLockOwner } from './runLock'
-import { parsePiAuthStatus, parseProviderChain, usableChain, type PiAuthStatus } from './piProvider'
+import { defaultPiModel, parsePiAuthStatus, parseProviderChain, usableChain, type PiAuthStatus } from './piProvider'
 import { applyOutcome, buildJobsView, classify, emptyState, localIso, MAX_ATTEMPTS, migrateLegacyState, ownsOutput, parseJobsLimit, parseStateFile, parseStrictJson, patchJob, pruneUnseen, reconcileInterrupted, startAttempt, SUMMARY_FAILED_STATUS, type CurrentJob, type JobRecord, type StateFile } from './jobs'
 import { createHash, createHmac, randomUUID } from 'node:crypto'
 import { appendFile, chmod, mkdir, readFile, writeFile, copyFile, rename, unlink, stat, readdir, rm } from 'node:fs/promises'
@@ -13,7 +13,7 @@ import { fileURLToPath, pathToFileURL } from 'node:url'
 import { spawn, spawnSync } from 'node:child_process'
 import os from 'node:os'
 
-const VERSION = '0.18.2'
+const VERSION = '0.18.4'
 const LAUNCH_AGENT_LABEL = 'sh.fastagent.voicenote'
 const LAUNCH_AGENT_LABEL_LEGACY = 'com.kid7st.voicenote' // pre-fastagent installs; cleaned up on install
 const TASK_NAME = 'VoiceNote'   // Windows Task Scheduler name (mac uses LAUNCH_AGENT_LABEL)
@@ -137,6 +137,7 @@ const ENV_KEYS = [
   'HTTP_PROXY', 'HTTPS_PROXY', 'ALL_PROXY', 'NO_PROXY',
   'LOCAL_PROXY_HOST', 'LOCAL_PROXY_PORT', 'LOCAL_NO_PROXY',
   'OPENAI_API_KEY',
+  'DEEPSEEK_API_KEY',
 ]
 
 // Volcano endpoints (TOS object storage + openspeech ASR) should NEVER go through
@@ -1493,7 +1494,8 @@ function piProviderAuthStatus(provider: string): PiAuthStatus {
   const cached = piAuthStatusCache.get(provider)
   if (cached && Date.now() - cached.at < PI_AUTH_TTL_MS) return cached.status
   const inv = piInvocation(['auth', 'check', '--provider', provider, '--json'])
-  const out = spawnSync(inv.bin, inv.args, { encoding: 'utf8', timeout: PI_AUTH_PROBE_MS, windowsHide: true })
+  // Bun's spawnSync needs an explicit env to inherit keys loaded from config.json.
+  const out = spawnSync(inv.bin, inv.args, { encoding: 'utf8', timeout: PI_AUTH_PROBE_MS, windowsHide: true, env: process.env })
   // No pi binary is deterministic evidence in its own right — next run gets the
   // same answer — so it belongs with 'unusable', not with a probe that timed out.
   const status = (out.error as NodeJS.ErrnoException | undefined)?.code === 'ENOENT'
@@ -1524,7 +1526,7 @@ function piProviderFor(): string {
 }
 
 function piCodexModelFor(): string {
-  return process.env.VOICENOTE_PI_MODEL_SUMMARY || process.env.VOICENOTE_PI_MODEL || 'gpt-5.5'
+  return process.env.VOICENOTE_PI_MODEL_SUMMARY || process.env.VOICENOTE_PI_MODEL || defaultPiModel(piConfiguredProviders()[0]!)
 }
 
 function stripJsonFences(text: string): string {
@@ -1661,7 +1663,7 @@ function piSummaryToolsHint(contextDir: string): string {
   return `Before writing the notes you have two read-only tools: read and grep. Your current working directory (cwd) is \`${contextDir}\` (the configured notes/reference directory); use relative paths for grep/read.\n\nGoal: use existing context to align names, speakers, client/project names, product names, and domain terms in this note; do not maintain or assume a separate glossary.\n\nSuggested flow:\n- First extract the most likely client/project/product keywords from the title, filename, and transcript.\n- If a clear topic matches, prefer grep/read on related index pages, project docs, status records, or the 3-5 most recent related notes in the same directory; use them to identify Speaker B/C/F etc., common aliases, product names, and term spellings.\n- If no clear topic matches, grep the current directory with keywords and read only the few most relevant files.\n- Before output, do one names/terms lint pass: eliminate leftover Speaker A/B/C, obviously misheard names, product-name variants, and outdated names; when context is insufficient, keep the uncertainty — never guess.\n\nConstraints:\n- At most 10 tool calls total; if the transcript alone is sufficient, make none.\n- Read only within \`${contextDir}\`; skip directories that clearly involve personal privacy/credentials/finance (e.g. identity / credentials / finance).\n- Found information is only for consistency and background calibration; never write content absent from this transcript into the notes as new meeting facts.\n- Do not attempt to write files or call bash (those tools are not enabled).`
 }
 
-// Summary runs on the pi-codex backend. The agent's working dir IS the knowledge
+// Summary runs through pi with the configured provider. The agent's working dir IS the knowledge
 // base, so read/grep/find operate there directly. If a configured context dir is
 // missing, say so loudly and run without tools rather than searching the wrong
 // tree (tools, the cwd hint, and the spawn cwd move together).
@@ -2753,8 +2755,8 @@ async function collectDoctor() {
   const ff = await runCommand(ffprobeBin(), ['-version'], 5000)
   const v = config.volcano
   const tools = piSummaryTools()
-  // Configured vs effective, plus per-provider status: "why did my chain shrink"
-  // and "why is my misspelled provider still listed" are the same question.
+  // An explicit status refresh must see newly saved keys and OAuth logins.
+  piAuthStatusCache.clear()
   const configuredProviders = piConfiguredProviders()
   const effectiveProviders = piProviderCandidates()
   const providerStatus = Object.fromEntries(configuredProviders.map(p => [p, piProviderAuthStatus(p)]))
@@ -2989,7 +2991,7 @@ async function serve(): Promise<void> {
 
 const cli = cac('vn')
 
-cli.command('run', 'Scan recorder and process recordings (Volcano ASR + pi-codex notes)')
+cli.command('run', 'Scan recorder and process recordings (Volcano ASR + pi notes)')
   .option('--mode <mode>', 'Output mode: notes (default) | transcript', { default: 'notes' })
   .option('--latest', 'Only process newest eligible recording')
   .option('--force', 'Reprocess already processed recordings')

package/src/piProvider.ts

@@ -3,6 +3,10 @@
 
 export const DEFAULT_PI_PROVIDERS = ['openai-codex', 'openai']
 
+export function defaultPiModel(provider: string): string {
+  return provider === 'deepseek' ? 'deepseek-v4-flash' : 'gpt-5.5'
+}
+
 export function parseProviderChain(raw: string | undefined): string[] {
   const parsed = Array.from(new Set((raw ?? '').split(',').map(s => s.trim()).filter(Boolean)))
   return parsed.length ? parsed : [...DEFAULT_PI_PROVIDERS]