@m8t-stack/cli 0.2.20 → 0.2.22

package/dist/cli.js

@@ -1157,6 +1157,10 @@ async function enableHostedBrain(args) {
     memory: def.memory,
     env,
     metadata: {
+      // Spread the current metadata first so unmanaged keys (a2a, a2aCard, …)
+      // survive the relink version; the managed fields are re-asserted over the
+      // spread, and createCoderVersion applies the `brain` arg last.
+      ...current.metadata,
       source: "m8t-stack-POC",
       kind: "hosted",
       persona: current.metadata?.persona ?? "coding-agent",
@@ -1227,7 +1231,7 @@ var init_enable_hosted_brain = __esm({
 import { Builtins, Cli } from "clipanion";
 
 // src/lib/package-version.ts
-var CLI_VERSION = "0.2.20";
+var CLI_VERSION = "0.2.22";
 
 // src/lib/render-error.ts
 init_errors();
@@ -15649,7 +15653,7 @@ async function awaitDataPlaneReady(opts) {
   const consecutive = opts.consecutive ?? 3;
   const attempts = opts.attempts ?? 60;
   const intervalMs = opts.intervalMs ?? 5e3;
-  const sleep3 = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const sleep4 = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   let streak = 0;
   for (let i = 1; i <= attempts; i++) {
     const r = await opts.probe();
@@ -15671,7 +15675,7 @@ async function awaitDataPlaneReady(opts) {
       streak = 0;
       opts.onProgress?.(`data-plane not ready (${forcedRetryable ? `status ${(r.status ?? 0).toString()}` : cls.category}), waiting\u2026`);
     }
-    if (i < attempts) await sleep3(intervalMs);
+    if (i < attempts) await sleep4(intervalMs);
   }
   return { ready: false, attempts };
 }
@@ -16699,7 +16703,7 @@ init_errors();
 async function deployHostedWorker(args) {
   const onProgress = args.onProgress ?? ((_m) => {
   });
-  const sleep3 = args.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const sleep4 = args.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   const now = args.now ?? (() => Date.now());
   const timeout = args.pollTimeoutMs ?? 8 * 60 * 1e3;
   const interval = args.pollIntervalMs ?? 1e4;
@@ -16751,7 +16755,7 @@ async function deployHostedWorker(args) {
         hint: "Provisioning can take 2\u20135 min; re-run with the same name to resume, or check the version status in the Foundry portal."
       });
     }
-    await sleep3(interval);
+    await sleep4(interval);
   }
 }
 
@@ -22568,7 +22572,7 @@ init_errors();
 // ../../packages/brain/engine/dist/esm/types.js
 var ENGINE_VERSION = "0.1.0";
 var DEFAULT_SAFETY_LAG_SECONDS = 3600;
-var SOURCES = ["webapp", "a2a", "mcp", "telegram"];
+var SOURCES = ["webapp", "a2a", "mcp", "telegram", "voice-relay"];
 var WORKER_ALIASES = { "azure-advisor": "azzy" };
 function canonicalWorker(pk) {
   const lower = pk.toLowerCase();
@@ -22632,9 +22636,11 @@ var TableCursor = class {
       throw e;
     }
     const watermarks = row.watermarks ? JSON.parse(row.watermarks) : {};
+    const fetchFailures = row.fetchFailures ? JSON.parse(row.fetchFailures) : void 0;
     return {
       worker: canonical,
       watermarks,
+      ...fetchFailures && Object.keys(fetchFailures).length > 0 ? { fetchFailures } : {},
       safetyLagSeconds: row.safetyLagSeconds ?? DEFAULT_SAFETY_LAG_SECONDS,
       engineVersion: row.engineVersion ?? ENGINE_VERSION,
       ...row.lastDreamAt ? { lastDreamAt: row.lastDreamAt } : {}
@@ -22657,9 +22663,12 @@ var TableCursor = class {
       safetyLagSeconds: cursor.safetyLagSeconds,
       engineVersion: cursor.engineVersion
     };
+    if (cursor.fetchFailures && Object.keys(cursor.fetchFailures).length > 0) {
+      entity.fetchFailures = JSON.stringify(cursor.fetchFailures);
+    }
     if (cursor.lastDreamAt)
       entity.lastDreamAt = cursor.lastDreamAt;
-    await this.client.upsertEntity(entity);
+    await this.client.upsertEntity(entity, "Replace");
   }
   async ensureTable() {
     try {
@@ -22695,9 +22704,22 @@ function computeWatermark(rows, now, safetyLagSeconds) {
 }
 async function commitCursorAdvance(plan, cursor) {
   const prior = await cursor.read(plan.worker);
+  const watermarks = {};
+  for (const [pk, watermark] of Object.entries(plan.watermarks)) {
+    const priorWatermark = Object.hasOwn(prior.watermarks, pk) ? prior.watermarks[pk] : void 0;
+    if (priorWatermark && watermark.ts <= priorWatermark.ts) {
+      watermarks[pk] = {
+        ts: watermark.ts,
+        consumedRowKeys: [.../* @__PURE__ */ new Set([...priorWatermark.consumedRowKeys, ...watermark.consumedRowKeys])]
+      };
+    } else {
+      watermarks[pk] = watermark;
+    }
+  }
   const next = {
     worker: plan.worker,
-    watermarks: plan.watermarks,
+    watermarks,
+    ...plan.fetchFailures && Object.keys(plan.fetchFailures).length > 0 ? { fetchFailures: plan.fetchFailures } : {},
     safetyLagSeconds: prior.safetyLagSeconds || DEFAULT_SAFETY_LAG_SECONDS,
     engineVersion: ENGINE_VERSION,
     lastDreamAt: (/* @__PURE__ */ new Date()).toISOString()
@@ -22783,7 +22805,7 @@ function mapItems(raw) {
   return acc.reverse();
 }
 function makeConversationSource(client, opts = {}) {
-  const sleep3 = opts.sleep ?? defaultSleep;
+  const sleep4 = opts.sleep ?? defaultSleep;
   return {
     async items(conversationId) {
       for (let attempt = 0; attempt < MAX_ATTEMPTS; attempt++) {
@@ -22801,7 +22823,7 @@ function makeConversationSource(client, opts = {}) {
             throw new ConvFetchError("auth", `auth failed reading ${conversationId}`);
           const retryable = status === void 0 || status === TRANSIENT;
           if (retryable && attempt < MAX_ATTEMPTS - 1) {
-            await sleep3(attempt);
+            await sleep4(attempt);
             continue;
           }
           throw new ConvFetchError("terminal", `exhausted ${String(MAX_ATTEMPTS)} retries reading ${conversationId}: ${e?.message ?? String(e)}`);
@@ -22951,6 +22973,7 @@ function normalize(group, items, enrichment) {
 
 // ../../packages/brain/engine/dist/esm/pipeline.js
 var isKnownSource = (s) => SOURCES.includes(s);
+var MAX_CONV_FETCH_ATTEMPTS = 3;
 async function runPipeline(args) {
   const { worker, sources, now, since, reset } = args;
   const monotonicNow = args.monotonicNow ?? Date.now;
@@ -22977,6 +23000,7 @@ async function runPipeline(args) {
   let recovered = 0;
   const consumedRowsByPk = {};
   const failedTsByPk = {};
+  const newFailures = {};
   const window2 = windowFor(rows, now, since);
   for (const g of groups) {
     const pk = g.worker;
@@ -23067,8 +23091,17 @@ async function runPipeline(args) {
       else
         recovered += 1;
     } else {
-      skips.addSkip(outcome, sampleId(g), fetchError?.message);
-      if (outcome === "conv-fetch-failed" || outcome === "auth-failed") {
+      let lastError = fetchError?.message;
+      if (outcome === "conv-fetch-failed") {
+        const id = conversationId ?? "";
+        const next = (cursor.fetchFailures?.[id] ?? 0) + 1;
+        newFailures[id] = next;
+        if (next >= MAX_CONV_FETCH_ATTEMPTS) {
+          lastError = `terminal after ${String(next)} cycles \u2014 watermark released`;
+        }
+      }
+      skips.addSkip(outcome, sampleId(g), lastError);
+      if (outcome === "auth-failed" || outcome === "conv-fetch-failed" && conversationId && newFailures[conversationId] < MAX_CONV_FETCH_ATTEMPTS) {
         const cur = failedTsByPk[pk];
         if (!cur || g.startedAt < cur)
           failedTsByPk[pk] = g.startedAt;
@@ -23088,7 +23121,7 @@ async function runPipeline(args) {
     latencyMs: Math.round(monotonicNow() - t0)
   };
   assertInvariant(stats, groups.length);
-  const advance = buildAdvancePlan(target, cursor, physicalPks, consumedRowsByPk, failedTsByPk, now, safetyLag);
+  const advance = buildAdvancePlan(target, cursor, physicalPks, consumedRowsByPk, failedTsByPk, newFailures, now, safetyLag);
   const out = {
     worker: target,
     window: window2,
@@ -23167,7 +23200,7 @@ function windowFor(rows, now, since) {
       from = r.eventTimestamp;
   return { from, to };
 }
-function buildAdvancePlan(worker, cursor, physicalPks, consumedRowsByPk, failedTsByPk, now, safetyLagSeconds) {
+function buildAdvancePlan(worker, cursor, physicalPks, consumedRowsByPk, failedTsByPk, fetchFailures, now, safetyLagSeconds) {
   const watermarks = {};
   const consumedKeysByPk = {};
   const priorTsByPk = {};
@@ -23191,6 +23224,7 @@ function buildAdvancePlan(worker, cursor, physicalPks, consumedRowsByPk, failedT
     watermarks,
     consumedRowsByPk: consumedKeysByPk,
     failedTsByPk,
+    ...Object.keys(fetchFailures).length > 0 ? { fetchFailures } : {},
     now: now.toISOString(),
     safetyLagSeconds,
     priorTsByPk
@@ -23591,7 +23625,7 @@ function extractJson(text) {
   return JSON.parse(candidate2.slice(start, end + 1));
 }
 async function propose(model, system, user, opts = {}) {
-  const sleep3 = opts.sleep ?? defaultSleep2;
+  const sleep4 = opts.sleep ?? defaultSleep2;
   const modelName = opts.model ?? MODEL_NAME_FALLBACK;
   let inputTokens = 0;
   let outputTokens = 0;
@@ -23607,7 +23641,7 @@ async function propose(model, system, user, opts = {}) {
     } catch (e) {
       lastErr = `parse: ${e.message}`;
       if (attempt < MAX_MODEL_ATTEMPTS - 1) {
-        await sleep3(attempt);
+        await sleep4(attempt);
         continue;
       }
       break;
@@ -23616,7 +23650,7 @@ async function propose(model, system, user, opts = {}) {
     if (!Array.isArray(rawDeltas)) {
       lastErr = "schema: top-level { deltas: [] } missing";
       if (attempt < MAX_MODEL_ATTEMPTS - 1) {
-        await sleep3(attempt);
+        await sleep4(attempt);
         continue;
       }
       break;
@@ -24183,6 +24217,7 @@ function narrowAdvance(src, kept) {
     watermarks,
     consumedRowsByPk,
     failedTsByPk: src.failedTsByPk,
+    ...src.fetchFailures ? { fetchFailures: src.fetchFailures } : {},
     now,
     safetyLagSeconds,
     priorTsByPk
@@ -24200,7 +24235,13 @@ function filterAdvance(src, keptRowsByPk) {
     consumedRowsByPk[pk] = (src.consumedRowsByPk[pk] ?? []).filter((rk) => keep.has(rk));
     watermarks[pk] = { ts: wm.ts, consumedRowKeys: wm.consumedRowKeys.filter((rk) => keep.has(rk)) };
   }
-  return { worker: src.worker, watermarks, consumedRowsByPk, failedTsByPk: src.failedTsByPk };
+  return {
+    worker: src.worker,
+    watermarks,
+    consumedRowsByPk,
+    failedTsByPk: src.failedTsByPk,
+    ...src.fetchFailures ? { fetchFailures: src.fetchFailures } : {}
+  };
 }
 
 // ../../packages/brain/engine/dist/esm/dream/index.js
@@ -24218,6 +24259,18 @@ async function runDream(input, deps, seams = defaultDreamSeams()) {
     });
   }
   input = capped;
+  if (input.conversations.length === 0) {
+    await commitCursorAdvance(input.advance, deps.cursor);
+    deps.logger.info({
+      at: "runDream",
+      worker: input.worker,
+      terminal: "no-corpus",
+      skipped: input.stats.skipped,
+      advanced: true,
+      skipLedger: input.skipLedger.map((s) => `${s.reason}:${String(s.count)}`)
+    });
+    return { worker: input.worker, applied: [], digest, advanced: true };
+  }
   const proposed = await seams.propose(input, deps);
   digest.push({ kind: "cost", model: proposed.cost.model, inputTokens: proposed.cost.inputTokens, outputTokens: proposed.cost.outputTokens, ms: proposed.cost.ms });
   if (!proposed.deltas) {
@@ -25722,7 +25775,7 @@ var BootstrapStatusCommand = class extends M8tCommand {
       typeof this.output === "string" ? this.output : void 0,
       this.context.stdout
     );
-    const sleep3 = (ms) => new Promise((r) => setTimeout(r, ms));
+    const sleep4 = (ms) => new Promise((r) => setTimeout(r, ms));
     const watch = this.watch === true;
     for (; ; ) {
       let doc;
@@ -25732,7 +25785,7 @@ var BootstrapStatusCommand = class extends M8tCommand {
         if (watch && e instanceof LocalCliError && e.code === "BOOTSTRAP_STATUS_UNREADABLE") {
           if (mode === "pretty") this.context.stderr.write(`  ${colors.dim("waiting for the installer to start\u2026")}
 `);
-          await sleep3(1e4);
+          await sleep4(1e4);
           continue;
         }
         throw e;
@@ -25757,7 +25810,7 @@ var BootstrapStatusCommand = class extends M8tCommand {
         );
         return 1;
       }
-      await sleep3(1e4);
+      await sleep4(1e4);
     }
   }
 };
@@ -26366,11 +26419,108 @@ import * as path35 from "path";
 import { spawn as spawn7 } from "child_process";
 init_errors();
 init_rbac();
+
+// src/lib/simple-stacey.ts
+var SIMPLE_STACEY_PERSONA = "startup-advisor-intake";
+var SIMPLE_STACEY_AGENT = "stacey-intake";
+async function deploySimpleStacey(args) {
+  try {
+    return await deployPromptAdvisor({
+      credential: args.credential,
+      endpoint: args.endpoint,
+      repoRoot: args.repoRoot,
+      persona: SIMPLE_STACEY_PERSONA,
+      agentName: SIMPLE_STACEY_AGENT,
+      fieldOverrides: args.fieldOverrides
+    });
+  } catch (e) {
+    if (e && typeof e === "object" && "code" in e) {
+      const err = e;
+      if (err.code === "ADVISOR_PERSONA_MISSING") {
+        const { LocalCliError: LocalCliError2 } = await Promise.resolve().then(() => (init_errors(), errors_exports));
+        throw new LocalCliError2({
+          code: "SIMPLE_STACEY_PERSONA_MISSING",
+          message: err.message,
+          hint: err.hint,
+          cause: err.cause
+        });
+      }
+      if (err.code === "ADVISOR_NO_MODEL") {
+        const { LocalCliError: LocalCliError2 } = await Promise.resolve().then(() => (init_errors(), errors_exports));
+        throw new LocalCliError2({
+          code: "SIMPLE_STACEY_NO_MODEL",
+          message: err.message,
+          hint: err.hint,
+          cause: err.cause
+        });
+      }
+      if (err.code === "ADVISOR_BAD_EFFORT") {
+        const { LocalCliError: LocalCliError2 } = await Promise.resolve().then(() => (init_errors(), errors_exports));
+        throw new LocalCliError2({
+          code: "SIMPLE_STACEY_BAD_EFFORT",
+          message: err.message,
+          hint: err.hint,
+          cause: err.cause
+        });
+      }
+    }
+    throw e;
+  }
+}
+
+// src/lib/bootstrap-ui.ts
+function sleep3(ms) {
+  return new Promise((resolve3) => setTimeout(resolve3, ms));
+}
+function isAuthorizationShapedError(error) {
+  const seen = /* @__PURE__ */ new Set();
+  let current = error;
+  while (current != null && !seen.has(current)) {
+    seen.add(current);
+    if (typeof current === "object") {
+      const record = current;
+      if (record.statusCode === 403) return true;
+      if (typeof record.message === "string" && /403|Forbidden|PermissionDenied|not authorized/i.test(record.message)) return true;
+      current = record.cause;
+      continue;
+    }
+    if (typeof current === "string" && /403|Forbidden|PermissionDenied|not authorized/i.test(current)) return true;
+    break;
+  }
+  return false;
+}
+async function deploySimpleStaceyWithRetry(args) {
+  const maxWaitMs = args.maxWaitMs ?? 3e5;
+  const intervalMs = args.intervalMs ?? 1e4;
+  const deadline = Date.now() + maxWaitMs;
+  for (; ; ) {
+    try {
+      return await deploySimpleStacey({
+        credential: args.credential,
+        endpoint: args.endpoint,
+        repoRoot: args.repoRoot,
+        fieldOverrides: args.fieldOverrides
+      });
+    } catch (error) {
+      if (!isAuthorizationShapedError(error)) throw error;
+      const remainingMs = deadline - Date.now();
+      if (remainingMs <= 0) {
+        throw new LocalCliError({
+          code: "BOOTSTRAP_UI_ROLE_PROPAGATION_TIMEOUT",
+          message: "Timed out waiting for Azure role propagation before deploying Simple Stacey.",
+          hint: "Azure role propagation can take a few minutes - re-run 'm8t bootstrap ui' (idempotent).",
+          cause: error
+        });
+      }
+      args.onWait?.("waiting for Azure role propagation...");
+      await sleep3(Math.min(intervalMs, remainingMs));
+    }
+  }
+}
 async function resolveFoundryEndpointWithWait(args, opts = {}) {
   const pollMs = opts.pollMs ?? 1e4;
   const timeoutMs = opts.timeoutMs ?? 15 * 6e4;
   const deadline = Date.now() + timeoutMs;
-  const sleep3 = (ms) => new Promise((r) => setTimeout(r, ms));
   for (; ; ) {
     try {
       const p = await resolveFoundryProject({
@@ -26439,6 +26589,7 @@ function writeWebEnvLocal(args) {
     `AZURE_TENANT_ID=${args.tenantId}`,
     `AZURE_CLIENT_ID=${args.clientId}`,
     `FOUNDRY_PROJECT_ENDPOINT=${args.foundryEndpoint}`,
+    "VOICE_RELAY_PUBLIC_URL=ws://localhost:8790",
     "STORAGE_ACCOUNT_NAME=",
     "M8T_DISABLE_WORKER=1",
     "M8T_ONBOARDING=1",
@@ -26493,11 +26644,16 @@ function onboardingUiPaths(home = os17.homedir()) {
     pidPath: path35.join(dir, "onboarding-ui.pid")
   };
 }
-async function serveOnboardingUiDetached(args) {
-  const { logPath, pidPath } = onboardingUiPaths();
-  const portNum = Number(args.port);
-  const isPortOpen = () => new Promise((resolve3) => {
-    const s = net.createConnection({ host: "127.0.0.1", port: portNum });
+function onboardingRelayPaths(home = os17.homedir()) {
+  const dir = path35.join(home, ".m8t-stack");
+  return {
+    logPath: path35.join(dir, "onboarding-relay.log"),
+    pidPath: path35.join(dir, "onboarding-relay.pid")
+  };
+}
+function isLocalPortOpen(port) {
+  return new Promise((resolve3) => {
+    const s = net.createConnection({ host: "127.0.0.1", port });
     s.setTimeout(1e3);
     s.on("connect", () => {
       s.destroy();
@@ -26511,6 +26667,11 @@ async function serveOnboardingUiDetached(args) {
       resolve3(false);
     });
   });
+}
+async function serveOnboardingUiDetached(args) {
+  const { logPath, pidPath } = onboardingUiPaths();
+  const portNum = Number(args.port);
+  const isPortOpen = () => isLocalPortOpen(portNum);
   if (await isPortOpen()) {
     return { alreadyRunning: true, logPath };
   }
@@ -26534,13 +26695,53 @@ async function serveOnboardingUiDetached(args) {
   child.unref();
   fs32.writeFileSync(pidPath, String(child.pid), "utf8");
   const deadline = Date.now() + 45e3;
-  const sleep3 = (ms) => new Promise((r) => setTimeout(r, ms));
+  const sleep4 = (ms) => new Promise((r) => setTimeout(r, ms));
   while (Date.now() < deadline) {
-    await sleep3(500);
+    await sleep4(500);
     if (await isPortOpen()) break;
   }
   return { alreadyRunning: false, logPath };
 }
+async function serveOnboardingRelayDetached(args) {
+  const { logPath, pidPath } = onboardingRelayPaths();
+  const portNum = 8790;
+  if (await isLocalPortOpen(portNum)) {
+    return { alreadyRunning: true, logPath };
+  }
+  fs32.mkdirSync(path35.dirname(logPath), { recursive: true });
+  const fd = fs32.openSync(logPath, "a");
+  const child = spawn7("pnpm", ["--filter", "web", "exec", "tsx", "voice-relay-entry.ts"], {
+    cwd: args.repoRoot,
+    detached: true,
+    stdio: ["ignore", fd, fd],
+    env: {
+      ...process.env,
+      FOUNDRY_PROJECT_ENDPOINT: args.foundryEndpoint,
+      AZURE_TENANT_ID: args.tenantId,
+      AZURE_CLIENT_ID: args.clientId,
+      RELAY_ALLOWED_ORIGINS: "http://localhost:3000",
+      RELAY_PORT: "8790"
+    },
+    shell: false
+  });
+  fs32.closeSync(fd);
+  if (child.pid == null) {
+    throw new LocalCliError({
+      code: "BOOTSTRAP_UI_RELAY_SPAWN_FAILED",
+      message: "Could not start the voice relay (pnpm did not spawn).",
+      hint: "Check that pnpm + Node 20+ are installed; see the log at " + logPath + "."
+    });
+  }
+  child.unref();
+  fs32.writeFileSync(pidPath, String(child.pid), "utf8");
+  const deadline = Date.now() + 45e3;
+  const sleep4 = (ms) => new Promise((r) => setTimeout(r, ms));
+  while (Date.now() < deadline) {
+    await sleep4(500);
+    if (await isLocalPortOpen(portNum)) break;
+  }
+  return { alreadyRunning: false, logPath };
+}
 function autoOpenOnboardingUi(url, open = tryOpenUrl) {
   try {
     const result = open(url);
@@ -26551,8 +26752,7 @@ function autoOpenOnboardingUi(url, open = tryOpenUrl) {
   } catch {
   }
 }
-function stopOnboardingUi(home = os17.homedir()) {
-  const { pidPath } = onboardingUiPaths(home);
+function stopPidFile(pidPath) {
   let pidStr;
   try {
     pidStr = fs32.readFileSync(pidPath, "utf8").trim();
@@ -26573,56 +26773,27 @@ function stopOnboardingUi(home = os17.homedir()) {
   }
   return true;
 }
-
-// src/lib/simple-stacey.ts
-var SIMPLE_STACEY_PERSONA = "startup-advisor-intake";
-var SIMPLE_STACEY_AGENT = "stacey-intake";
-async function deploySimpleStacey(args) {
-  try {
-    return await deployPromptAdvisor({
-      credential: args.credential,
-      endpoint: args.endpoint,
-      repoRoot: args.repoRoot,
-      persona: SIMPLE_STACEY_PERSONA,
-      agentName: SIMPLE_STACEY_AGENT,
-      fieldOverrides: args.fieldOverrides
-    });
-  } catch (e) {
-    if (e && typeof e === "object" && "code" in e) {
-      const err = e;
-      if (err.code === "ADVISOR_PERSONA_MISSING") {
-        const { LocalCliError: LocalCliError2 } = await Promise.resolve().then(() => (init_errors(), errors_exports));
-        throw new LocalCliError2({
-          code: "SIMPLE_STACEY_PERSONA_MISSING",
-          message: err.message,
-          hint: err.hint,
-          cause: err.cause
-        });
-      }
-      if (err.code === "ADVISOR_NO_MODEL") {
-        const { LocalCliError: LocalCliError2 } = await Promise.resolve().then(() => (init_errors(), errors_exports));
-        throw new LocalCliError2({
-          code: "SIMPLE_STACEY_NO_MODEL",
-          message: err.message,
-          hint: err.hint,
-          cause: err.cause
-        });
-      }
-      if (err.code === "ADVISOR_BAD_EFFORT") {
-        const { LocalCliError: LocalCliError2 } = await Promise.resolve().then(() => (init_errors(), errors_exports));
-        throw new LocalCliError2({
-          code: "SIMPLE_STACEY_BAD_EFFORT",
-          message: err.message,
-          hint: err.hint,
-          cause: err.cause
-        });
-      }
-    }
-    throw e;
-  }
+function stopOnboardingUi(home = os17.homedir()) {
+  const uiStopped = stopPidFile(onboardingUiPaths(home).pidPath);
+  const relayStopped = stopPidFile(onboardingRelayPaths(home).pidPath);
+  return uiStopped || relayStopped;
 }
 
 // src/commands/bootstrap/ui.ts
+function renderDeploySuccess(version, envPath) {
+  return `${colors.success("\u2713")} Simple Stacey is live (stacey-intake v${version}).
+  env: ${envPath}
+  Opening ${colors.field("http://localhost:3000")} in your browser \u2192 Sign in with Microsoft \u2192 chat with Stacey.
+  ${colors.dim("(If it doesn't open, browse to http://localhost:3000 yourself.)")}
+  ${colors.dim("First turn may say 'warming up' for a few minutes while access propagates \u2014 that's expected.")}
+`;
+}
+function renderDeployFailure(error) {
+  const hint = error instanceof LocalCliError && error.hint ? error.hint : "Re-run 'm8t bootstrap ui' (idempotent).";
+  return `${colors.error("\u2717")} Simple Stacey deploy failed: ${error.message}
+  ${colors.hint(hint)}
+`;
+}
 var BootstrapUiCommand = class extends M8tCommand {
   static paths = [["bootstrap", "ui"]];
   static usage = Command53.Usage({
@@ -26702,14 +26873,18 @@ var BootstrapUiCommand = class extends M8tCommand {
     out("granting you Foundry data-plane access\u2026");
     const oid = await getSignedInUserOid();
     await ensureFounderFoundryRole({ credential: credential2, subscriptionId: state.subscriptionId, principalId: oid, accountScope });
-    out("deploying Simple Stacey (stacey-intake)\u2026");
     const identity = await getSignedInUserIdentity();
-    const version = await deploySimpleStacey({
+    out("deploying Simple Stacey (stacey-intake) in the background...");
+    const deployOutcome = deploySimpleStaceyWithRetry({
       credential: credential2,
       endpoint,
       repoRoot,
-      fieldOverrides: { founder_identity_note: composeFounderIdentityNote(identity) }
-    });
+      fieldOverrides: { founder_identity_note: composeFounderIdentityNote(identity) },
+      onWait: out
+    }).then(
+      (version) => ({ ok: true, version }),
+      (error) => ({ ok: false, error: error instanceof Error ? error : new Error(String(error)) })
+    );
     const envPath = writeWebEnvLocal({
       repoRoot,
       tenantId: account.tenantId,
@@ -26720,24 +26895,41 @@ var BootstrapUiCommand = class extends M8tCommand {
       out("installing apps/web dependencies (pnpm)\u2026");
       await installWebDeps(repoRoot);
     }
-    this.context.stdout.write(
-      `${colors.success("\u2713")} Simple Stacey is live (stacey-intake v${version}).
-  env: ${envPath}
-  Opening ${colors.field("http://localhost:3000")} in your browser \u2192 Sign in with Microsoft \u2192 chat with Stacey.
-  ${colors.dim("(If it doesn't open, browse to http://localhost:3000 yourself.)")}
-  ${colors.dim("First turn may say 'warming up' for a few minutes while access propagates \u2014 that's expected.")}
-`
-    );
     if (this.prepOnly === true) {
+      const outcome2 = await deployOutcome;
+      if (!outcome2.ok) throw outcome2.error;
+      this.context.stdout.write(renderDeploySuccess(outcome2.version, envPath));
       this.context.stdout.write(`  ${colors.hint("serve it yourself:")} pnpm --filter web dev
 `);
       return 0;
     }
     if (this.foreground === true) {
+      out("starting the voice relay on :8790 in the background\u2026");
+      await serveOnboardingRelayDetached({
+        repoRoot,
+        foundryEndpoint: endpoint,
+        tenantId: account.tenantId,
+        clientId: state.appRegClientId
+      });
+      out("voice relay on :8790");
+      const outcome2 = await deployOutcome;
+      if (!outcome2.ok) {
+        this.context.stderr.write(renderDeployFailure(outcome2.error));
+        return 1;
+      }
+      this.context.stdout.write(renderDeploySuccess(outcome2.version, envPath));
       out("starting the webapp on :3000 (Ctrl-C to stop)\u2026");
       await runInherit("pnpm", ["--filter", "web", "dev"], repoRoot, "BOOTSTRAP_UI_DEV_FAILED");
       return 0;
     }
+    out("starting the voice relay on :8790 in the background\u2026");
+    await serveOnboardingRelayDetached({
+      repoRoot,
+      foundryEndpoint: endpoint,
+      tenantId: account.tenantId,
+      clientId: state.appRegClientId
+    });
+    out("voice relay on :8790");
     out("starting the webapp on :3000 in the background\u2026");
     const { alreadyRunning, logPath } = await serveOnboardingUiDetached({ repoRoot, port: this.port });
     if (alreadyRunning) {
@@ -26753,6 +26945,12 @@ var BootstrapUiCommand = class extends M8tCommand {
       );
     }
     autoOpenOnboardingUi(`http://localhost:${this.port}`);
+    const outcome = await deployOutcome;
+    if (!outcome.ok) {
+      this.context.stderr.write(renderDeployFailure(outcome.error));
+      return 1;
+    }
+    this.context.stdout.write(renderDeploySuccess(outcome.version, envPath));
     return 0;
   }
 };
@@ -26790,7 +26988,7 @@ var BootstrapSeedProfileCommand = class extends M8tCommand {
     const parsedTimeout = Number(rawTimeout);
     const timeoutMin = rawTimeout !== "" && Number.isFinite(parsedTimeout) ? parsedTimeout : 20;
     const deadline = Date.now() + timeoutMin * 6e4;
-    const sleep3 = (ms) => new Promise((r) => setTimeout(r, ms));
+    const sleep4 = (ms) => new Promise((r) => setTimeout(r, ms));
     for (; ; ) {
       const token = await getFoundryToken();
       const { hadIntake, block } = await findOnboardingProfile({ endpoint: ctx.endpoint, token });
@@ -26813,7 +27011,7 @@ var BootstrapSeedProfileCommand = class extends M8tCommand {
       }
       this.context.stderr.write(`  ${colors.dim("waiting for the questionnaire to complete\u2026")}
 `);
-      await sleep3(2e4);
+      await sleep4(2e4);
     }
   }
 };