@goodandready/dsh-voice 0.9.11 → 0.9.13

package/README.md

@@ -76,7 +76,7 @@ graph LR
 * 🎮 **Tactile Push-to-Talk**:
   * **Mouse**: Hold the wave button — releasing sends the message; dragging pointer away discards.
   * **Keyboard**: Hold <kbd>Ctrl</kbd> (or custom hotkey) for hands-free speaking; press <kbd>Esc</kbd> to cancel.
-* ⚡ **Zero-Latency In-Browser Captions (`browser`)**: Chrome Web Speech API recognition runs 100% locally with live floating captions as you speak.
+* ⚡ **Live In-Browser Captions (`browser`)**: Web Speech API speech-to-text with real-time floating captions as you speak (Note: standard browser recognition typically streams audio to vendor servers like Google in Chrome; for true 100% offline privacy, use local `whisper` or `sensevoice`).
 * 🛡️ **Ironclad Multi-Provider Fallbacks**: If your primary cloud provider runs out of credits or hits a 429 rate limit, requests seamlessly fail over down the chain.
 * 🧠 **Context Glossary Injection**: Automatically extracts code variables and identifiers from your composer draft to steer STT model accuracy on technical jargon.
 * 🎵 **Embedded Audio Player**: Preview, scrubber, and playback of your recorded voice message directly in chat and the composer dock.
@@ -151,7 +151,7 @@ Quality batch after the v0.8.18 review (Gitea #79–#87, PR #88):
 
 | Provider Key | Service Backend | Default Model | Credential Ref | Features & Notes |
 |---|---|---|---|---|
-| `browser` | Web Speech API | Native Browser | *None* | Zero latency, floating live captions in Chrome |
+| `browser` | Web Speech API | Native Browser | *None* | Zero latency, floating live captions in Chrome (vendor server-based; not offline) |
 | `deepgram` | Deepgram API | `nova-2` | `DEEPGRAM_API_KEY` | Ultra-fast cloud transcription |
 | `groq` | Groq Whisper | `whisper-large-v3-turbo` | `GROQ_API_KEY` | Near-instant inference speed |
 | `hf` | HuggingFace Inference | `openai/whisper-large-v3` | `HF_TOKEN` | High-accuracy open Whisper |

package/README.ru.md

@@ -76,7 +76,7 @@ graph LR
 * 🎮 **Тактильный Push-to-Talk**:
   * **Мышь**: зажмите кнопку волны — запись идёт пока кнопка зажата; отпускание отправляет, увод курсора отменяет запись.
   * **Клавиатура**: зажмите <kbd>Ctrl</kbd> для записи без мыши; нажмите <kbd>Esc</kbd> для отмены.
-* ⚡ **Субтитры браузера в реальном времени (`browser`)**: локальное распознавание Chrome Web Speech API без отправки звука на сервер с плавающими субтитрами.
+* ⚡ **Субтитры браузера в реальном времени (`browser`)**: распознавание Web Speech API с плавающими субтитрами в реальном времени (Внимание: стандартный браузерный движок в Chrome отправляет аудио на серверы Google; для полностью локальной приватной работы без внешних вызовов используйте локальный `whisper` или `sensevoice`).
 * 🛡️ **Надёжные цепочки фолбеков**: при исчерпании квоты или ошибке 429 плагин мгновенно обращается к следующему провайдеру в списке.
 * 🧠 **Контекстный словарь (Context Glossary)**: автоматическое извлечение переменных и технических терминов из черновика композера для точного распознавания редких слов и кода.
 * 🎵 **Встроенный аудиоплеер**: предпросмотр и воспроизведение записанного голосового сообщения в чате и доке перед отправкой или для переслушивания.
@@ -151,7 +151,7 @@ Quality-батч после ревью v0.8.18 (Gitea #79–#87, PR #88):
 
 | Ключ | Сервис | Модель по умолчанию | Переменная секрета | Особенности |
 |---|---|---|---|---|
-| `browser` | Web Speech API | Нативная в браузере | *Не требуется* | Нулевая задержка, живые субтитры в Chrome |
+| `browser` | Web Speech API | Нативная в браузере | *Не требуется* | Нулевая задержка, живые субтитры в Chrome (обработка на серверах вендора; не является офлайн) |
 | `deepgram` | Deepgram API | `nova-2` | `DEEPGRAM_API_KEY` | Сверхбыстрая облачная транскрипция |
 | `groq` | Groq Whisper | `whisper-large-v3-turbo` | `GROQ_API_KEY` | Мгновенная скорость генерации |
 | `hf` | HuggingFace Inference | `openai/whisper-large-v3` | `HF_TOKEN` | Высокоточный облачный Whisper |

package/README.zh.md

@@ -76,7 +76,7 @@ graph LR
 * 🎮 **沉浸式 Push-to-Talk 对讲**：
   * **鼠标操作**：按住声波按钮开始录音，松开发送，拖离按钮取消。
   * **键盘操作**：按住 <kbd>Ctrl</kbd> 无需鼠标即刻说话，按 <kbd>Esc</kbd> 放弃本次录音。
-* ⚡ **浏览器本地零延迟同声字幕 (`browser`)**：Chrome Web Speech API 本地离线解析，说话同时浮动显示实时字幕。
+* ⚡ **浏览器实时同声字幕 (`browser`)**：Web Speech API 实时语音识别与浮动同声字幕（注意：Chrome 等标准浏览器通常将音频发送至服务商云端解析；若需 100% 本地离线隐私保护，请使用本地 `whisper` 或 `sensevoice`）。
 * 🛡️ **多服务商自动容灾切换**：首选 API 额度耗尽或遭遇 429 限流时，毫秒级顺位切换备用引擎。
 * 🧠 **上下文术语注入 (Context Glossary)**：自动从输入草稿中提取代码变量名与专业术语，引导 STT 模型精准转写专业词汇。
 * 🎵 **内嵌音频播放器**：在输入框与录音浮层中随时试听和回放刚刚录制的原始音频片段。
@@ -120,7 +120,7 @@ v0.8.18 质量审查后的修复批次（Gitea #79–#87，PR #88）：
 
 | 服务商标识 | 对应引擎 | 默认模型 | 环境变量凭据 | 特性说明 |
 |---|---|---|---|---|
-| `browser` | Web Speech API | 浏览器原生引擎 | *无需密钥* | 零延迟同声字幕输出 |
+| `browser` | Web Speech API | 浏览器原生引擎 | *无需密钥* | 零延迟同声字幕输出（依赖浏览器厂商云端解析；非离线本地） |
 | `deepgram` | Deepgram API | `nova-2` | `DEEPGRAM_API_KEY` | 极速高精云端转写 |
 | `groq` | Groq Whisper | `whisper-large-v3-turbo` | `GROQ_API_KEY` | 毫秒级极速推理 |
 | `hf` | HuggingFace Inference | `openai/whisper-large-v3` | `HF_TOKEN` | 经典高精度开源模型 |

package/lib/client.js

@@ -62,7 +62,7 @@ window.__ModuleLoader__.load({
       'hide': 'Hide',
       'title': 'Voice',
       'recordSlot': 'Voice recording',
-      'browserHint': 'the browser does the recognition, no key needed',
+      'browserHint': 'Web Speech recognition (uses page/browser language when auto, Chrome sends audio to Google)',
       'openaiHint': 'whisper-1 · key OPENAI_API_KEY',
       'siliconflowHint': 'FunAudioLLM/SenseVoiceSmall · key SILICONFLOW_API_KEY',
       'deepinfraHint': 'openai/whisper-large-v3-turbo · key DEEPINFRA_API_KEY',
@@ -89,6 +89,12 @@ window.__ModuleLoader__.load({
       'hotkeyHint1': 'Hold it to record, release to send to the agent, Esc cancels. ',
       'hotkeyHint2': 'Any key will do: a letter, an F-key or a modifier.',
       'language': 'Language',
+      'langAuto': 'Auto-detect',
+      'langRu': 'Russian (ru)',
+      'langEn': 'English (en)',
+      'langZh': 'Chinese (zh)',
+      'langUk': 'Ukrainian (uk)',
+      'langDe': 'German (de)',
       'dictationHint': 'Speech is cut at pauses and the text is appended to the input.',
       'pauseMs': 'Pause that ends a phrase, ms',
       'pauseHint': 'Lower means more frequent chunks and faster text, but a higher risk of cutting a word',
@@ -204,6 +210,9 @@ window.__ModuleLoader__.load({
       'updating': 'Updating…',
       'updateSuccess': 'Updated successfully! Restart DSH to apply.',
       'updateFailed': 'Update failed. Check logs.',
+      'updateCheckFailed': 'Update check failed',
+      'checkingUpdates': 'Checking updates…',
+      'updateStatusUnknown': 'Version status unknown',
       'sensevoiceTitle': 'SenseVoice Local ASR (1-Click Setup)',
       'sensevoiceDesc': 'Ultra-fast offline speech recognition on CPU (50–100ms latency, Russian/English).',
       'installSensevoice': 'Install SenseVoice-Small (1-Click)',
@@ -226,6 +235,10 @@ window.__ModuleLoader__.load({
       'jargonFrom': 'Spoken slang',
       'jargonTo': 'Correct spelling',
       'jargonPlaceholder': 'k8s -> kubernetes\npr -> pull request',
+      'voiceInput': 'Voice input',
+      'assistantSpeakingGated': 'Assistant speaking (gated mode)',
+      'jargonFormatHint': ' (spoken -> replacement)',
+      'errorPrefix': 'Error',
     }
 
     const zh = {
@@ -256,7 +269,7 @@ window.__ModuleLoader__.load({
       'hide': '隐藏',
       'title': '语音',
       'recordSlot': '语音录制',
-      'browserHint': '浏览器直接识别，无需密钥',
+      'browserHint': 'Web Speech 语音识别 (设为 auto 时使用页面或浏览器语言，Chrome 会上传音频至 Google)',
       'openaiHint': 'whisper-1 · 密钥 OPENAI_API_KEY',
       'siliconflowHint': 'FunAudioLLM/SenseVoiceSmall · 密钥 SILICONFLOW_API_KEY',
       'deepinfraHint': 'openai/whisper-large-v3-turbo · 密钥 DEEPINFRA_API_KEY',
@@ -283,6 +296,12 @@ window.__ModuleLoader__.load({
       'hotkeyHint1': '按住录音，松开发送给智能体，按 Esc 取消。',
       'hotkeyHint2': '支持任意按键：字母键、功能键 (F1-F12) 或修饰键。',
       'language': '识别语言',
+      'langAuto': '自动检测',
+      'langRu': '俄语 (ru)',
+      'langEn': '英语 (en)',
+      'langZh': '中文 (zh)',
+      'langUk': '乌克兰语 (uk)',
+      'langDe': '德语 (de)',
       'dictationHint': '语音按停顿自动切句，文字实时追加至输入框。',
       'pauseMs': '断句静音停顿时长（毫秒）',
       'pauseHint': '数值越小切分越频繁、出字越快，但可能切断未说完的词',
@@ -398,6 +417,9 @@ window.__ModuleLoader__.load({
       'updating': '正在更新…',
       'updateSuccess': '更新成功！请重启 DSH 生效。',
       'updateFailed': '更新失败，请查看日志。',
+      'updateCheckFailed': '检查更新失败',
+      'checkingUpdates': '正在检查更新…',
+      'updateStatusUnknown': '版本状态未知',
       'sensevoiceTitle': 'SenseVoice 本地 ASR (一键部署)',
       'sensevoiceDesc': 'CPU 上超低延迟离线语音识别 (50–100ms，中英俄多语种)。',
       'installSensevoice': '一键安装 SenseVoice-Small',
@@ -420,11 +442,15 @@ window.__ModuleLoader__.load({
       'jargonFrom': '口语词汇',
       'jargonTo': '标准拼写',
       'jargonPlaceholder': 'k8s -> kubernetes\npr -> pull request',
+      'voiceInput': '语音输入',
+      'assistantSpeakingGated': '助手正在发言（门控模式）',
+      'jargonFormatHint': ' (口语 -> 替换文本)',
+      'errorPrefix': '错误',
     }
 
     // Strings are also needed outside components — in recording handlers and
     // slot labels — so the translator is module-level, not only via props.
-    let moduleT = (key) => key
+    let moduleT = (key) => en[key] || key
     const t = (key) => moduleT(key)
     // ------------------------------------------------------------------ css
     const CSS =
@@ -507,13 +533,34 @@ window.__ModuleLoader__.load({
       subscribe(l) { this.listeners.add(l); return () => this.listeners.delete(l) },
     }
 
-    if (typeof window !== 'undefined') {
-      window.addEventListener('dsh:tts:start', () => {
-        voice.set({ isTtsSpeaking: true })
-      })
-      window.addEventListener('dsh:tts:stop', () => {
-        voice.set({ isTtsSpeaking: false })
-      })
+    function registerGlobalLifecycle() {
+      if (typeof window === 'undefined') return () => {}
+      const onTtsStart = () => voice.set({ isTtsSpeaking: true })
+      const onTtsStop = () => voice.set({ isTtsSpeaking: false })
+      const onSettingsSaved = () => { voice._chainsPromise = null }
+      const onPageUnload = () => {
+        if (voice.rec && typeof voice.teardownRec === 'function') voice.teardownRec(voice.rec)
+        if (voice.browser) {
+          try { voice.browser.abort() } catch (_) {}
+        }
+      }
+
+      window.addEventListener('dsh:tts:start', onTtsStart)
+      window.addEventListener('dsh:tts:stop', onTtsStop)
+      window.addEventListener('dsh-voice:settings-saved', onSettingsSaved)
+      window.addEventListener('pagehide', onPageUnload)
+      window.addEventListener('beforeunload', onPageUnload)
+
+      return () => {
+        window.removeEventListener('dsh:tts:start', onTtsStart)
+        window.removeEventListener('dsh:tts:stop', onTtsStop)
+        window.removeEventListener('dsh-voice:settings-saved', onSettingsSaved)
+        window.removeEventListener('pagehide', onPageUnload)
+        window.removeEventListener('beforeunload', onPageUnload)
+        onPageUnload()
+        if (typeof voice.clearGlobalHotkey === 'function') voice.clearGlobalHotkey()
+        voice.set({ phase: 'idle', caption: '', interimTranscript: '', isTtsSpeaking: false })
+      }
     }
 
     function triggerBargeIn() {
@@ -823,6 +870,50 @@ window.__ModuleLoader__.load({
       return main
     }
 
+    function hotkeyMatches(event, name) {
+      if (!event || !name) return false
+      if (typeof name === 'string' && name.includes('+')) {
+        const parts = name.split('+')
+        const main = parts[parts.length - 1]
+        const needCtrl = parts.includes('Control')
+        const needAlt = parts.includes('Alt')
+        const needShift = parts.includes('Shift')
+        const needMeta = parts.includes('Meta')
+        if (needCtrl && !event.ctrlKey) return false
+        if (needAlt && !event.altKey) return false
+        if (needShift && !event.shiftKey) return false
+        if (needMeta && !event.metaKey) return false
+        return event.code === main || event.key === main
+      }
+      if (name === 'Control') return event.key === 'Control'
+      if (name === 'Alt') return event.key === 'Alt'
+      if (name === 'Shift') return event.key === 'Shift'
+      if (name === 'Meta') return event.key === 'Meta'
+      return event.code === name || event.key === name
+    }
+
+    function isAllowedInEditable(name) {
+      if (!name) return false
+      if (['Control', 'Alt', 'Shift', 'Meta'].includes(name)) return true
+      if (/^F\d{1,2}$/.test(name)) return true
+      if (typeof name === 'string' && name.includes('+')) return true
+      if (['Tab', 'Pause', 'ScrollLock', 'Insert'].includes(name)) return true
+      return false
+    }
+
+    function isHotkeyRelease(event, name) {
+      if (!event || !name) return false
+      if (typeof name === 'string' && name.includes('+')) {
+        const parts = name.split('+')
+        if (event.code === parts[parts.length - 1] || event.key === parts[parts.length - 1]) return true
+        for (let i = 0; i < parts.length - 1; i++) {
+          if (event.key === parts[i] || event.code === parts[i]) return true
+        }
+        return false
+      }
+      return event.code === name || event.key === name
+    }
+
     // Announce that the user started speaking.
     //
     // Playback should mute immediately: listening and talking at once is
@@ -871,6 +962,21 @@ window.__ModuleLoader__.load({
       return speechRecognitionCtor() !== null
     }
 
+    function resolveBrowserRecognitionLang(lang) {
+      if (lang && lang !== 'auto') {
+        if (lang.includes('-')) return lang
+        const BCP47 = { ru: 'ru-RU', en: 'en-US', zh: 'zh-CN', uk: 'uk-UA', de: 'de-DE' }
+        return BCP47[lang.toLowerCase()] || lang
+      }
+      if (typeof document !== 'undefined' && document.documentElement && document.documentElement.lang) {
+        return document.documentElement.lang
+      }
+      if (typeof navigator !== 'undefined' && navigator.language) {
+        return navigator.language
+      }
+      return 'en-US'
+    }
+
     /**
      * @param options {{lang: string, continuous: boolean, onInterim, onFinal, onError}}
      * @returns {{stop: Function, abort: Function}}
@@ -878,7 +984,7 @@ window.__ModuleLoader__.load({
     function startBrowserRecognition(options) {
       const Ctor = speechRecognitionCtor()
       const recognition = new Ctor()
-      recognition.lang = options.lang && options.lang !== 'auto' ? options.lang : 'ru-RU'
+      recognition.lang = resolveBrowserRecognitionLang(options.lang)
       recognition.continuous = options.continuous !== false
       recognition.interimResults = true
       let stopped = false
@@ -939,22 +1045,19 @@ window.__ModuleLoader__.load({
 
     // Fetch the mode chain from the host once. Only needed to decide whether
 
-    voice._core = { tidyPhrase, applyVoiceCommands, VOICE_COMMANDS, undoLastInsert, insertHistory, insertDraftText, appendDraft }
-    let chainsPromise = null
-    if (typeof window !== 'undefined') {
-      window.addEventListener('dsh-voice:settings-saved', () => { chainsPromise = null })
-    }
+    voice._core = { tidyPhrase, applyVoiceCommands, VOICE_COMMANDS, undoLastInsert, insertHistory, insertDraftText, appendDraft, resolveBrowserRecognitionLang }
+    voice._chainsPromise = null
     function modeChain(mode) {
-      if (!chainsPromise) {
-        chainsPromise = fetch('/dsh-voice/status', { cache: 'no-store' })
+      if (!voice._chainsPromise) {
+        voice._chainsPromise = fetch('/dsh-voice/status', { cache: 'no-store' })
           .then((res) => res.json())
           .then((data) => (data && data.modes) || {})
           .catch(() => {
-            chainsPromise = null
+            voice._chainsPromise = null
             return {}
           })
       }
-      return chainsPromise.then((modes) => {
+      return voice._chainsPromise.then((modes) => {
         const row = modes[mode] || {}
         return {
           chain: Array.isArray(row.chain) ? row.chain.map((e) => e && e.provider) : [],
@@ -971,16 +1074,7 @@ window.__ModuleLoader__.load({
       if (rec.analyser) { try { rec.analyser.disconnect() } catch (e) { /* already disconnected */ } }
       if (rec.audioCtx) { try { rec.audioCtx.close() } catch (e) { /* already closed */ } }
     }
-    if (typeof window !== 'undefined') {
-      const onPageUnload = () => {
-        if (voice.rec) teardown(voice.rec)
-        if (voice.browser) {
-          try { voice.browser.abort() } catch (e) { /* ignore */ }
-        }
-      }
-      window.addEventListener('pagehide', onPageUnload)
-      window.addEventListener('beforeunload', onPageUnload)
-    }
+    voice.teardownRec = teardown
     function waitStop(recorder) {
       if (!recorder || recorder.state === 'inactive') return Promise.resolve()
       return new Promise((resolve) => recorder.addEventListener('stop', resolve, { once: true }))
@@ -1174,7 +1268,7 @@ window.__ModuleLoader__.load({
         if (voice.settings.bargeIn) {
           triggerBargeIn()
         } else if (voice.settings.gatedTurnTaking !== false) {
-          voice.set({ phase: 'error', error: 'Assistant speaking (gated mode)' })
+          voice.set({ phase: 'error', error: t('assistantSpeakingGated') })
           return
         }
       }
@@ -1239,35 +1333,7 @@ window.__ModuleLoader__.load({
       if (cancelled) cancelCurrent()
       else stopCurrent()
     }
-    function hotkeyMatches(event, name) {
-      if (!event || !name) return false
-      if (typeof name === 'string' && name.includes('+')) {
-        const parts = name.split('+')
-        const main = parts[parts.length - 1]
-        const needCtrl = parts.includes('Control')
-        const needAlt = parts.includes('Alt')
-        const needShift = parts.includes('Shift')
-        const needMeta = parts.includes('Meta')
-        if (needCtrl && !event.ctrlKey) return false
-        if (needAlt && !event.altKey) return false
-        if (needShift && !event.shiftKey) return false
-        if (needMeta && !event.metaKey) return false
-        return event.code === main || event.key === main
-      }
-      if (name === 'Control') return event.key === 'Control'
-      if (name === 'Alt') return event.key === 'Alt'
-      if (name === 'Shift') return event.key === 'Shift'
-      if (name === 'Meta') return event.key === 'Meta'
-      return event.code === name || event.key === name
-    }
-    function isAllowedInEditable(name) {
-      if (!name) return false
-      if (['Control', 'Alt', 'Shift', 'Meta'].includes(name)) return true
-      if (/^F\d{1,2}$/.test(name)) return true
-      if (typeof name === 'string' && name.includes('+')) return true
-      if (['Tab', 'Pause', 'ScrollLock', 'Insert'].includes(name)) return true
-      return false
-    }
+
     let activeHotkeyCleanup = null
     function clearGlobalHotkey() {
       if (typeof activeHotkeyCleanup === 'function') {
@@ -1279,6 +1345,7 @@ window.__ModuleLoader__.load({
         window.__dsh_voice_hotkey_cleanup = null
       }
     }
+    voice.clearGlobalHotkey = clearGlobalHotkey
     function installHotkey(ctx, keyName, mode) {
       clearGlobalHotkey()
       if (typeof document === 'undefined' || !keyName) return () => {}
@@ -1293,18 +1360,7 @@ window.__ModuleLoader__.load({
           beginHold(mode)
         }
       }
-    function isHotkeyRelease(event, name) {
-      if (!event || !name) return false
-      if (typeof name === 'string' && name.includes('+')) {
-        const parts = name.split('+')
-        if (event.code === parts[parts.length - 1] || event.key === parts[parts.length - 1]) return true
-        for (let i = 0; i < parts.length - 1; i++) {
-          if (event.key === parts[i] || event.code === parts[i]) return true
-        }
-        return false
-      }
-      return event.code === name || event.key === name
-    }
+
       const up = (event) => {
         if (hold.armed && isHotkeyRelease(event, keyName)) {
           event.preventDefault()
@@ -2104,34 +2160,42 @@ window.__ModuleLoader__.load({
       if (key) return t(key)
       return MODEL_HINT_STATIC[provider] || ''
     }
-    const LANGS = ['auto', 'ru', 'en', 'uk', 'de']
+    const SUPPORTED_LANGS = [
+      { code: '', labelKey: 'langAuto', defaultLabel: 'auto' },
+      { code: 'ru', labelKey: 'langRu', defaultLabel: 'ru' },
+      { code: 'en', labelKey: 'langEn', defaultLabel: 'en' },
+      { code: 'zh', labelKey: 'langZh', defaultLabel: 'zh' },
+      { code: 'uk', labelKey: 'langUk', defaultLabel: 'uk' },
+      { code: 'de', labelKey: 'langDe', defaultLabel: 'de' },
+    ]
+    const LANGS = SUPPORTED_LANGS.map((o) => o.code)
 
     const SET_CSS =
-      '.cb-page{display:flex;flex-direction:column;gap:18px;padding:4px 0 24px;max-width:960px}' +
-      '.cb-section-card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;padding:16px 18px;display:flex;flex-direction:column;gap:12px}' +
-      '.cb-section-title{font-size:15px;font-weight:600;color:var(--dsw-alias-label-primary);display:flex;align-items:center;justify-content:space-between}' +
-      '.cb-section-desc{font-size:13px;color:var(--dsw-alias-label-secondary);margin-top:-4px;line-height:1.4}' +
-      '.cb-row{display:flex;flex-wrap:wrap;gap:10px;align-items:center}' +
-      '.cb-grid-2{display:grid;grid-template-columns:repeat(auto-fit, minmax(260px, 1fr));gap:12px}' +
-      '.cb-badge{font-size:11px;padding:2px 8px;border-radius:999px;border:1px solid var(--dsw-alias-border-l2);display:inline-flex;align-items:center;gap:4px;font-weight:500}' +
-      '.cb-badge-ok{border-color:var(--dsw-alias-state-success-primary);color:var(--dsw-alias-state-success-primary);background:color-mix(in srgb, var(--dsw-alias-state-success-primary) 8%, transparent)}' +
-      '.cb-badge-warn{border-color:var(--dsw-alias-state-warning-primary);color:var(--dsw-alias-state-warning-primary);background:color-mix(in srgb, var(--dsw-alias-state-warning-primary) 8%, transparent)}' +
-      '.cb-badge-bad{border-color:var(--dsw-alias-state-error-primary);color:var(--dsw-alias-state-error-primary);background:color-mix(in srgb, var(--dsw-alias-state-error-primary) 8%, transparent)}' +
-      '.cb-input{height:34px;border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);border-radius:8px;padding:0 10px;font-size:13px;box-sizing:border-box}' +
-      '.cb-input:focus{outline:none;border-color:var(--dsw-alias-state-brand-primary)}' +
-      '.cb-btn{appearance:none;font:inherit;cursor:pointer;border:1px solid var(--dsw-alias-border-l2);border-radius:8px;padding:6px 12px;font-size:13px;background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);font-weight:500;display:inline-flex;align-items:center;justify-content:center;gap:6px;transition:all .15s ease}' +
-      '.cb-btn:hover:not(:disabled){background:var(--dsw-alias-bg-layer-4, var(--dsw-alias-bg-layer-2));border-color:var(--dsw-alias-label-dimmed, var(--dsw-alias-border-l2))}' +
-      '.cb-btn-primary{background:var(--dsw-alias-label-primary);color:var(--dsw-alias-bg-layer-3);border-color:transparent}' +
-      '.cb-btn-primary:hover:not(:disabled){background:var(--dsw-alias-label-primary) !important;color:var(--dsw-alias-bg-layer-3) !important;opacity:0.88}' +
-      '.cb-btn-danger{color:var(--dsw-alias-state-error-primary);border-color:color-mix(in srgb, var(--dsw-alias-state-error-primary) 30%, transparent)}' +
-      '.cb-btn-mini{border:1px solid var(--dsw-alias-border-l2);background:transparent;color:var(--dsw-alias-label-primary);border-radius:6px;width:28px;height:28px;cursor:pointer;flex:none;display:inline-flex;align-items:center;justify-content:center;padding:0;font-size:13px}' +
-      '.cb-btn-mini:hover:not(:disabled){background:var(--dsw-alias-bg-layer-2)}' +
-      '.cb-field{display:flex;flex-direction:column;gap:6px;padding:6px 0;font-size:13px;color:var(--dsw-alias-label-primary)}' +
-      '.cb-field select,.cb-field input[type="text"],.cb-field input[type="number"],.cb-field textarea{height:34px;border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);border-radius:8px;padding:0 10px;font-size:13px;box-sizing:border-box}' +
-      '.cb-field textarea{height:auto;padding:8px 10px;font-family:inherit}' +
-      '.cb-check-label{display:flex;align-items:center;gap:8px;cursor:pointer;font-size:13px;color:var(--dsw-alias-label-primary);user-select:none}' +
-      '.cb-check-label input[type="checkbox"]{width:16px;height:16px;cursor:pointer}' +
-      '.cb-alert-err{padding:10px 14px;border-radius:8px;background:color-mix(in srgb, var(--dsw-alias-state-error-primary) 10%, transparent);color:var(--dsw-alias-state-error-primary);font-size:13px}' +
+      '.dvo-settings-root.cb-page,.dvo-settings-root .cb-page{display:flex;flex-direction:column;gap:18px;padding:4px 0 24px;max-width:960px}' +
+      '.dvo-settings-root .cb-section-card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;padding:16px 18px;display:flex;flex-direction:column;gap:12px}' +
+      '.dvo-settings-root .cb-section-title{font-size:15px;font-weight:600;color:var(--dsw-alias-label-primary);display:flex;align-items:center;justify-content:space-between}' +
+      '.dvo-settings-root .cb-section-desc{font-size:13px;color:var(--dsw-alias-label-secondary);margin-top:-4px;line-height:1.4}' +
+      '.dvo-settings-root .cb-row{display:flex;flex-wrap:wrap;gap:10px;align-items:center}' +
+      '.dvo-settings-root .cb-grid-2{display:grid;grid-template-columns:repeat(auto-fit, minmax(260px, 1fr));gap:12px}' +
+      '.dvo-settings-root .cb-badge{font-size:11px;padding:2px 8px;border-radius:999px;border:1px solid var(--dsw-alias-border-l2);display:inline-flex;align-items:center;gap:4px;font-weight:500}' +
+      '.dvo-settings-root .cb-badge-ok{border-color:var(--dsw-alias-state-success-primary);color:var(--dsw-alias-state-success-primary);background:color-mix(in srgb, var(--dsw-alias-state-success-primary) 8%, transparent)}' +
+      '.dvo-settings-root .cb-badge-warn{border-color:var(--dsw-alias-state-warning-primary);color:var(--dsw-alias-state-warning-primary);background:color-mix(in srgb, var(--dsw-alias-state-warning-primary) 8%, transparent)}' +
+      '.dvo-settings-root .cb-badge-bad,.dvo-settings-root .cb-badge-err{border-color:var(--dsw-alias-state-error-primary);color:var(--dsw-alias-state-error-primary);background:color-mix(in srgb, var(--dsw-alias-state-error-primary) 8%, transparent)}' +
+      '.dvo-settings-root .cb-input{height:34px;border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);border-radius:8px;padding:0 10px;font-size:13px;box-sizing:border-box}' +
+      '.dvo-settings-root .cb-input:focus{outline:none;border-color:var(--dsw-alias-state-brand-primary)}' +
+      '.dvo-settings-root .cb-btn{appearance:none;font:inherit;cursor:pointer;border:1px solid var(--dsw-alias-border-l2);border-radius:8px;padding:6px 12px;font-size:13px;background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);font-weight:500;display:inline-flex;align-items:center;justify-content:center;gap:6px;transition:all .15s ease}' +
+      '.dvo-settings-root .cb-btn:hover:not(:disabled){background:var(--dsw-alias-bg-layer-4, var(--dsw-alias-bg-layer-2));border-color:var(--dsw-alias-label-dimmed, var(--dsw-alias-border-l2))}' +
+      '.dvo-settings-root .cb-btn-primary{background:var(--dsw-alias-label-primary);color:var(--dsw-alias-bg-layer-3);border-color:transparent}' +
+      '.dvo-settings-root .cb-btn-primary:hover:not(:disabled){background:var(--dsw-alias-label-primary) !important;color:var(--dsw-alias-bg-layer-3) !important;opacity:0.88}' +
+      '.dvo-settings-root .cb-btn-danger{color:var(--dsw-alias-state-error-primary);border-color:color-mix(in srgb, var(--dsw-alias-state-error-primary) 30%, transparent)}' +
+      '.dvo-settings-root .cb-btn-mini{border:1px solid var(--dsw-alias-border-l2);background:transparent;color:var(--dsw-alias-label-primary);border-radius:6px;width:28px;height:28px;cursor:pointer;flex:none;display:inline-flex;align-items:center;justify-content:center;padding:0;font-size:13px}' +
+      '.dvo-settings-root .cb-btn-mini:hover:not(:disabled){background:var(--dsw-alias-bg-layer-2)}' +
+      '.dvo-settings-root .cb-field{display:flex;flex-direction:column;gap:6px;padding:6px 0;font-size:13px;color:var(--dsw-alias-label-primary)}' +
+      '.dvo-settings-root .cb-field select,.dvo-settings-root .cb-field input[type="text"],.dvo-settings-root .cb-field input[type="number"],.dvo-settings-root .cb-field textarea{height:34px;border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);border-radius:8px;padding:0 10px;font-size:13px;box-sizing:border-box}' +
+      '.dvo-settings-root .cb-field textarea{height:auto;padding:8px 10px;font-family:inherit}' +
+      '.dvo-settings-root .cb-check-label{display:flex;align-items:center;gap:8px;cursor:pointer;font-size:13px;color:var(--dsw-alias-label-primary);user-select:none}' +
+      '.dvo-settings-root .cb-check-label input[type="checkbox"]{width:16px;height:16px;cursor:pointer}' +
+      '.dvo-settings-root .cb-alert-err{padding:10px 14px;border-radius:8px;background:color-mix(in srgb, var(--dsw-alias-state-error-primary) 10%, transparent);color:var(--dsw-alias-state-error-primary);font-size:13px}' +
       '.dvs-wrap{display:flex;flex-direction:column;gap:18px;padding:4px 0;max-width:960px}' +
       '.dvs-block{display:flex;flex-direction:column;gap:10px}' +
       '.dvs-h{font-size:14px;font-weight:600;color:var(--dsw-alias-label-primary)}' +
@@ -2153,12 +2217,19 @@ window.__ModuleLoader__.load({
       '.dvo-pcardOpen .dvo-pchev{transform:rotate(180deg)}' +
       '.dvo-pbody{border-top:1px solid var(--dsw-alias-border-l2);margin:0 16px;padding-bottom:12px}'
     const setCssId = 'dsh-voice/settings.module.css'
-    if (typeof document !== 'undefined' && !document.querySelector('style[data-dsh-plugin="dsh-voice"][data-plugin-css="' + setCssId + '"]')) {
-      const tag = document.createElement('style')
-      tag.textContent = SET_CSS
-      tag.setAttribute('data-dsh-plugin', 'dsh-voice')
-      tag.dataset.pluginCss = setCssId
-      document.head.appendChild(tag)
+    function installSettingsCss() {
+      if (typeof document === 'undefined') return () => {}
+      let tag = document.querySelector('style[data-dsh-plugin="dsh-voice"][data-plugin-css="' + setCssId + '"]')
+      if (!tag) {
+        tag = document.createElement('style')
+        tag.textContent = SET_CSS
+        tag.setAttribute('data-dsh-plugin', 'dsh-voice')
+        tag.dataset.pluginCss = setCssId
+        document.head.appendChild(tag)
+      }
+      return () => {
+        if (tag && tag.parentNode) tag.parentNode.removeChild(tag)
+      }
     }
 
         function createErrorBoundary() {
@@ -2328,7 +2399,7 @@ window.__ModuleLoader__.load({
                     }
                   }
                   const rate = item.attempts > 0 ? Math.round((item.successes / item.attempts) * 100) : 100
-                  return React.createElement('div', { key, className: 'dvo-dash-item', title: item.lastError ? `Error: ${item.lastError}` : '' },
+                  return React.createElement('div', { key, className: 'dvo-dash-item', title: item.lastError ? `${t('errorPrefix')}: ${item.lastError}` : '' },
                     React.createElement('div', { className: 'dvo-dash-name' }, key),
                     React.createElement('div', { className: 'dvo-dash-row' },
                       React.createElement('span', { className: 'dvo-badge ' + badgeClass }, badgeText),
@@ -2671,8 +2742,12 @@ window.__ModuleLoader__.load({
           if (!res.ok) throw new Error(`HTTP ${res.status}`)
           const data = await res.json()
           setUpdaterStatus(data)
+          if (data && data.latestCheckFailed) {
+            setUpdaterMsg(t('updateCheckFailed'))
+          }
         } catch (e) {
-          /* best effort update check */
+          setUpdaterStatus(null)
+          setUpdaterMsg(t('updateCheckFailed') + ': ' + (e?.message || String(e)))
         } finally {
           setUpdaterLoading(false)
         }
@@ -2695,7 +2770,7 @@ window.__ModuleLoader__.load({
           if (!res.ok || data.ok === false) {
             throw new Error(data.error || `HTTP ${res.status}`)
           }
-          setUpdaterMsg(data.message || 'Update completed successfully.')
+          setUpdaterMsg(data.message || t('updateSuccess'))
           checkUpdater()
         } catch (err) {
           setUpdaterMsg(err && err.message ? err.message : String(err))
@@ -2729,7 +2804,7 @@ window.__ModuleLoader__.load({
           t('techJargonCorrection'),
         ),
         React.createElement('div', { className: 'cb-field' },
-          React.createElement('label', null, t('jargonAdd') + ' (spoken -> replacement)'),
+          React.createElement('label', null, t('jargonAdd') + t('jargonFormatHint')),
           React.createElement('textarea', {
             rows: 3,
             disabled: !writable,
@@ -2854,16 +2929,24 @@ window.__ModuleLoader__.load({
         ),
         React.createElement('div', { className: 'cb-section-desc' }, t('versionHint')),
         React.createElement('div', { className: 'cb-row', style: { alignItems: 'center', gap: '12px' } },
-          React.createElement('span', { className: 'cb-badge cb-badge-ok' },
-            'v' + ((updaterStatus && updaterStatus.currentVersion) || '0.9.6')
-          ),
-          updaterStatus && updaterStatus.updateAvailable
-            ? React.createElement('span', { className: 'cb-badge cb-badge-warn' },
-                t('updateAvailable') + ': v' + updaterStatus.latestVersion
-              )
-            : React.createElement('span', { className: 'cb-badge cb-badge-ok' },
-                t('upToDate')
-              ),
+          updaterStatus && updaterStatus.currentVersion
+            ? React.createElement('span', { className: 'cb-badge cb-badge-ok' }, 'v' + updaterStatus.currentVersion)
+            : null,
+          updaterLoading && (!updaterStatus || !updaterStatus.currentVersion)
+            ? React.createElement('span', { className: 'cb-badge' }, '⏳ ' + t('checkingUpdates'))
+            : !updaterStatus
+              ? React.createElement('span', { className: 'cb-badge cb-badge-warn' }, '❓ ' + t('updateStatusUnknown'))
+              : updaterStatus.updateAvailable
+                ? React.createElement('span', { className: 'cb-badge cb-badge-warn' },
+                    t('updateAvailable') + ': v' + updaterStatus.latestVersion
+                  )
+                : updaterStatus.latestCheckFailed
+                  ? React.createElement('span', { className: 'cb-badge cb-badge-warn' },
+                      '⚠️ ' + t('updateCheckFailed')
+                    )
+                  : React.createElement('span', { className: 'cb-badge cb-badge-ok' },
+                      t('upToDate')
+                    ),
           updaterStatus && updaterStatus.updateAvailable
             ? React.createElement('button', {
                 type: 'button', className: 'cb-btn cb-btn-primary', style: { fontSize: '12px', padding: '4px 10px' },
@@ -2903,6 +2986,7 @@ window.__ModuleLoader__.load({
       const [err, setErr] = React.useState('')
       const [serverConfig, setServerConfig] = React.useState(null)
       const [configLoading, setConfigLoading] = React.useState(true)
+      const [revision, setRevision] = React.useState(null)
 
       React.useEffect(() => {
         let alive = true
@@ -2911,6 +2995,7 @@ window.__ModuleLoader__.load({
           .then((data) => {
             if (alive && data && data.ok && data.config) {
               setServerConfig(data.config)
+              if (typeof data.revision === 'number') setRevision(data.revision)
               setDraft((curr) => curr || deepClone(data.config))
             }
           })
@@ -3079,14 +3164,15 @@ window.__ModuleLoader__.load({
           const res = await fetch('/dsh-voice/config', {
             method: 'PUT',
             headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({ config: draft }),
+            body: JSON.stringify({ config: draft, expectedRevision: (typeof revision === 'number' ? revision : undefined) }),
           })
           const data = await res.json()
           if (res.ok && data && data.ok) {
             httpOk = true
-            if (data.config) {
-              setServerConfig(data.config)
-            }
+            if (data.config) setServerConfig(data.config)
+            if (typeof data.revision === 'number') setRevision(data.revision)
+          } else if (res.status === 409) {
+            httpError = data?.error?.message || 'Settings conflict: parallel changes detected'
           } else {
             httpError = data?.error?.message || data?.error || res.statusText || 'Save failed'
           }
@@ -3094,7 +3180,7 @@ window.__ModuleLoader__.load({
           httpError = e?.message || String(e)
         }
 
-        if (scope && typeof scope.set === 'function') {
+        if (httpOk && scope && typeof scope.set === 'function') {
           for (const k of Object.keys(draft)) {
             try {
               await scope.set(k, draft[k])
@@ -3157,13 +3243,22 @@ window.__ModuleLoader__.load({
           .filter((k) => k && BUILTIN.indexOf(k) < 0),
       )
 
-      const langField = (mode) => React.createElement('div', { className: 'cb-field' },
-        React.createElement('label', null, t('language')),
-        React.createElement('select', {
-          value: modeVal(mode, 'language', 'ru'), disabled: !writable,
-          onChange: (e) => setIn(mode, 'language', e.target.value),
-        }, LANGS.map((o) => React.createElement('option', { key: o, value: o }, o))),
-      )
+      const langField = (mode) => {
+        const val = modeVal(mode, 'language', '')
+        const opts = SUPPORTED_LANGS.slice()
+        if (val && !opts.some((o) => o.code === val)) {
+          opts.push({ code: val, labelKey: val, defaultLabel: val })
+        }
+        return React.createElement('div', { className: 'cb-field' },
+          React.createElement('label', null, t('language')),
+          React.createElement('select', {
+            value: val, disabled: !writable,
+            onChange: (e) => setIn(mode, 'language', e.target.value),
+          }, opts.map((o) => React.createElement('option', { key: o.code || 'auto', value: o.code },
+            t(o.labelKey) !== o.labelKey ? t(o.labelKey) : o.defaultLabel
+          ))),
+        )
+      }
 
       const numField = (mode, key, label, hint) => React.createElement('div', { className: 'cb-field' },
         React.createElement('label', null, label),
@@ -3180,7 +3275,7 @@ window.__ModuleLoader__.load({
       const whisperRunning = !!(statusData && statusData.whisperRunning)
       const providerCount = (statusData && Array.isArray(statusData.providers)) ? statusData.providers.length : chainOptions.length
 
-      return React.createElement('div', { className: 'cb-page' },
+      return React.createElement('div', { className: 'cb-page dvo-settings-root' },
         // 1. Connection & Engine Status Card
         React.createElement(ConnectionStatusCard, {
           t: t,
@@ -3456,19 +3551,20 @@ window.__ModuleLoader__.load({
             ),
             React.createElement('span', { className: 'dvo-pchev' }, chevronIcon()),
           ),
-          (page || open) ? React.createElement('div', { className: 'dvo-pbody' }, React.createElement(VoiceSection, props)) : null,
+          (page || open) ? React.createElement('div', { className: 'dvo-pbody dvo-settings-root' }, React.createElement(VoiceSection, props)) : null,
         ),
       )
     }
 
     function registerSettings(ctx) {
       ctx.effect(() => {
+        const offCss = installSettingsCss()
         const offItem = ctx.slots.inject('plugins.item', () => ctx.slots.register(
           {
             name: 'plugins.item',
             id: ROW_ID,
             order: 60,
-            label: () => 'Voice input',
+            label: () => t('voiceInput'),
             locale: NS,
             inject: () => ({ ctx: ctx }),
           },
@@ -3493,6 +3589,7 @@ window.__ModuleLoader__.load({
           PluginCard,
         ))
         return () => {
+          if (typeof offCss === 'function') offCss()
           if (typeof offItem === 'function') offItem()
           if (typeof offRow === 'function') offRow()
           if (typeof offLegacy === 'function') offLegacy()
@@ -3516,10 +3613,23 @@ window.__ModuleLoader__.load({
         const undo = [addLocale('en', en), addLocale('zh', zh)]
         return () => { for (const off of undo) off() }
       }, 'dsh-voice: locale dictionaries')
+      ctx.effect(() => {
+        return registerGlobalLifecycle()
+      }, 'dsh-voice: global lifecycle')
       moduleT = ctx.locale.bind(NS)
       registerComposer(ctx)
       registerSettings(ctx)
     }
+    exports._test = {
+      voice,
+      keyLabel,
+      keyFromEvent,
+      hotkeyMatches,
+      isAllowedInEditable,
+      isHotkeyRelease,
+      extractContextKeywords,
+      resolveBrowserRecognitionLang,
+    }
     return module.exports
   },
 })

package/lib/config-routes.js

@@ -27,9 +27,14 @@ export function registerConfigRoutes(ctx, {
         return
       }
 
-      // 3. GET: return live configuration snapshot
+      // 3. GET: return live configuration snapshot with revision
       if (req.method === 'GET') {
-        writeJson(res, 200, { ok: true, config: live() })
+        let rev
+        try {
+          const settingsService = getSettingsService?.()
+          rev = settingsService?.describe?.()?.find?.((r) => r.ns === NS)?.revision
+        } catch { /* ignore revision lookup errors */ }
+        writeJson(res, 200, { ok: true, config: live(), revision: rev })
         return
       }
 
@@ -46,6 +51,10 @@ export function registerConfigRoutes(ctx, {
       try {
         raw = await readBody(req, 1024 * 1024)
       } catch (e) {
+        if (e && (e.statusCode === 413 || e.message === 'body too large')) {
+          writeJson(res, 413, { ok: false, error: { code: 'too-large', message: 'payload too large' } })
+          return
+        }
         writeJson(res, 400, { ok: false, error: { code: 'body', message: e.message } })
         return
       }
@@ -62,6 +71,9 @@ export function registerConfigRoutes(ctx, {
       const rawConfig = payload && typeof payload.config === 'object' && payload.config !== null
         ? payload.config
         : payload
+      const expectedRevision = (typeof payload?.expectedRevision === 'number')
+        ? payload.expectedRevision
+        : ((typeof payload?.revision === 'number') ? payload.revision : undefined)
 
       if (!rawConfig || typeof rawConfig !== 'object' || Array.isArray(rawConfig)) {
         writeJson(res, 400, { ok: false, error: { code: 'body', message: 'body must be a JSON object' } })
@@ -88,21 +100,35 @@ export function registerConfigRoutes(ctx, {
       try {
         let saved = false
         if (settingsService) {
-          let rev
+          let currentRev
           try {
-            rev = settingsService.describe?.()?.find?.((r) => r.ns === NS)?.revision
+            currentRev = settingsService.describe?.()?.find?.((r) => r.ns === NS)?.revision
           } catch { /* ignore revision lookup errors */ }
 
+          if (typeof expectedRevision === 'number' && typeof currentRev === 'number' && expectedRevision !== currentRev) {
+            writeJson(res, 409, {
+              ok: false,
+              error: {
+                code: 'conflict',
+                message: `Settings revision conflict: expected ${expectedRevision}, current is ${currentRev}`,
+                currentRevision: currentRev,
+              },
+            })
+            return
+          }
+
+          const targetRev = (typeof expectedRevision === 'number') ? expectedRevision : currentRev
+
           if (typeof settingsService.replace === 'function') {
-            await settingsService.replace(NS, merged, rev)
+            await settingsService.replace(NS, merged, targetRev)
             saved = true
           } else if (typeof settingsService.update === 'function') {
-            await settingsService.update(NS, merged, rev)
+            await settingsService.update(NS, merged, targetRev)
             saved = true
           }
         }
 
-        if (scope) {
+        if (!saved && scope) {
           if (typeof scope.replace === 'function') {
             await scope.replace(merged)
             saved = true
@@ -110,10 +136,11 @@ export function registerConfigRoutes(ctx, {
             await scope.patch(merged)
             saved = true
           } else if (typeof scope.set === 'function') {
-            for (const [k, v] of Object.entries(merged)) {
-              await scope.set(k, v).catch(() => {})
+            const entries = Object.entries(merged)
+            for (const [k, v] of entries) {
+              await scope.set(k, v)
             }
-            saved = true
+            if (entries.length > 0) saved = true
           }
         }
 
@@ -126,7 +153,11 @@ export function registerConfigRoutes(ctx, {
           triggerAutostart()
         }
 
-        writeJson(res, 200, { ok: true, config: live() })
+        let newRev
+        try {
+          newRev = settingsService?.describe?.()?.find?.((r) => r.ns === NS)?.revision
+        } catch {}
+        writeJson(res, 200, { ok: true, config: live(), revision: newRev })
       } catch (err) {
         writeJson(res, 500, { ok: false, error: { code: 'save', message: String(err?.message || err) } })
       }

package/lib/http-util.js

@@ -1,9 +1,30 @@
 // Pure HTTP helpers shared by host routes. No cordis, no network.
 
+export class BodyTooLargeError extends Error {
+  constructor(message = 'body too large') {
+    super(message)
+    this.name = 'BodyTooLargeError'
+    this.statusCode = 413
+    this.code = 'ERR_BODY_TOO_LARGE'
+  }
+}
+
 export function writeJson(res, code, body) {
   try {
-    res.writeHead(code, { 'Content-Type': 'application/json', 'Cache-Control': 'no-store' })
+    const headers = { 'Content-Type': 'application/json', 'Cache-Control': 'no-store' }
+    if (code === 413) {
+      headers['Connection'] = 'close'
+    }
+    res.writeHead(code, headers)
     res.end(JSON.stringify(body))
+    if (code === 413 && res && typeof res.on === 'function') {
+      res.on('finish', () => {
+        const sock = res.socket || (res.req && res.req.socket)
+        if (sock && !sock.destroyed && typeof sock.destroy === 'function') {
+          sock.destroy()
+        }
+      })
+    }
   } catch { /* socket may already be closed */ }
 }
 
@@ -17,13 +38,30 @@ export function readBody(req, maxBytes) {
   return new Promise((resolve, reject) => {
     const chunks = []
     let size = 0
-    req.on('data', (c) => {
+    let exceeded = false
+    const onData = (c) => {
+      if (exceeded) return
       size += c.length
-      if (size > maxBytes) { reject(new Error('body too large')); req.destroy(); return }
+      if (size > maxBytes) {
+        exceeded = true
+        if (typeof req.removeListener === 'function') {
+          req.removeListener('data', onData)
+        }
+        if (typeof req.resume === 'function') {
+          req.resume()
+        }
+        reject(new BodyTooLargeError('body too large'))
+        return
+      }
       chunks.push(c)
+    }
+    req.on('data', onData)
+    req.on('end', () => {
+      if (!exceeded) resolve(Buffer.concat(chunks))
+    })
+    req.on('error', (err) => {
+      if (!exceeded) reject(err)
     })
-    req.on('end', () => resolve(Buffer.concat(chunks)))
-    req.on('error', reject)
   })
 }
 

package/lib/index.js

@@ -421,7 +421,14 @@ export function apply(ctx, baseConfig) {
       if (!isTrustedCaller(req)) { writeJson(res, 403, { ok: false, error: { code: 'forbidden', message: 'forbidden source origin' } }); return }
       const cfg = live()
       let raw
-      try { raw = await readBody(req, 1024 * 1024) } catch (e) { writeJson(res, 400, { ok: false, error: { code: 'body', message: e.message } }); return }
+      try { raw = await readBody(req, 1024 * 1024) } catch (e) {
+        if (e && (e.statusCode === 413 || e.message === 'body too large')) {
+          writeJson(res, 413, { ok: false, error: { code: 'too-large', message: 'body exceeds limit of 1MB' } })
+          return
+        }
+        writeJson(res, 400, { ok: false, error: { code: 'body', message: e.message } })
+        return
+      }
       let payload = {}
       try { payload = JSON.parse(raw.toString('utf8') || '{}') } catch { /* empty */ }
       const text = typeof payload.text === 'string' ? payload.text.trim() : ''

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-voice",
-  "version": "0.9.11",
+  "version": "0.9.13",
   "description": "Voice input for DeepSeek Harness: dictation chunked by pauses and voice messages, each with its own provider fallback chain (Deepgram, Groq, HuggingFace, local whisper.cpp, plus any OpenAI-compatible API of your own).",
   "license": "MIT",
   "type": "module",
@@ -44,8 +44,8 @@
     "test": "node --test test/*.test.mjs",
     "build:client": "node scripts/build-client.mjs",
     "build:check": "node scripts/build-client.mjs --check",
-    "pretest": "node scripts/build-client.mjs",
-    "lint": "node --check lib/*.js scripts/*.mjs",
+    "pretest": "node scripts/build-client.mjs && node scripts/lint.mjs && node scripts/pack-check.mjs",
+    "lint": "node scripts/lint.mjs",
     "pack:check": "node scripts/pack-check.mjs"
   },
   "dsh": {