@miadi/stateloom-web 0.2.5 → 0.3.0

package/server/.next/static/chunks/{turbopack-34fc7de1568e2a7f.js → turbopack-b3cae9131ae5086f.js}

@@ -1,4 +1,4 @@
-(globalThis.TURBOPACK||(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,{otherChunks:["static/chunks/662d1b0ce457c16b.js","static/chunks/5e1795a806bd6c51.js","static/chunks/96818f5620f039a1.js"],runtimeModuleIds:[95506]}]),(()=>{let e;if(!Array.isArray(globalThis.TURBOPACK))return;let t="/_next/",r=(self.TURBOPACK_CHUNK_SUFFIX??document?.currentScript?.getAttribute?.("src")?.replace(/^(.*(?=\?)|^.*$)/,""))||"",n=new WeakMap;function o(e,t){this.m=e,this.e=t}let l=o.prototype,i=Object.prototype.hasOwnProperty,s="u">typeof Symbol&&Symbol.toStringTag;function u(e,t,r){i.call(e,t)||Object.defineProperty(e,t,r)}function a(e,t){let r=e[t];return r||(r=c(t),e[t]=r),r}function c(e){return{exports:{},error:void 0,id:e,namespaceObject:void 0}}function f(e,t){u(e,"__esModule",{value:!0}),s&&u(e,s,{value:"Module"});let r=0;for(;r<t.length;){let n=t[r++],o=t[r++];if("number"==typeof o)if(0===o)u(e,n,{value:t[r++],enumerable:!0,writable:!1});else throw Error(`unexpected tag: ${o}`);else"function"==typeof t[r]?u(e,n,{get:o,set:t[r++],enumerable:!0}):u(e,n,{get:o,enumerable:!0})}Object.seal(e)}l.s=function(e,t){let r,n;null!=t?n=(r=a(this.c,t)).exports:(r=this.m,n=this.e),r.namespaceObject=n,f(n,e)},l.j=function(e,t){var r,o;let l,s,u;null!=t?s=(l=a(this.c,t)).exports:(l=this.m,s=this.e);let c=(r=l,o=s,(u=n.get(r))||(n.set(r,u=[]),r.exports=r.namespaceObject=new Proxy(o,{get(e,t){if(i.call(e,t)||"default"===t||"__esModule"===t)return Reflect.get(e,t);for(let e of u){let r=Reflect.get(e,t);if(void 0!==r)return r}},ownKeys(e){let t=Reflect.ownKeys(e);for(let e of u)for(let r of Reflect.ownKeys(e))"default"===r||t.includes(r)||t.push(r);return t}})),u);"object"==typeof e&&null!==e&&c.push(e)},l.v=function(e,t){(null!=t?a(this.c,t):this.m).exports=e},l.n=function(e,t){let r;(r=null!=t?a(this.c,t):this.m).exports=r.namespaceObject=e};let p=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,h=[null,p({}),p([]),p(p)];function d(e,t,r){let n=[],o=-1;for(let t=e;("object"==typeof t||"function"==typeof t)&&!h.includes(t);t=p(t))for(let r of Object.getOwnPropertyNames(t))n.push(r,function(e,t){return()=>e[t]}(e,r)),-1===o&&"default"===r&&(o=n.length-1);return r&&o>=0||(o>=0?n.splice(o,1,0,e):n.push("default",0,e)),f(t,n),t}function m(e){let t=B(e,this.m);if(t.namespaceObject)return t.namespaceObject;let r=t.exports;return t.namespaceObject=d(r,"function"==typeof r?function(...e){return r.apply(this,e)}:Object.create(null),r&&r.__esModule)}function b(e){let t=e.indexOf("#");-1!==t&&(e=e.substring(0,t));let r=e.indexOf("?");return -1!==r&&(e=e.substring(0,r)),e}function y(){let e,t;return{promise:new Promise((r,n)=>{t=n,e=r}),resolve:e,reject:t}}l.i=m,l.A=function(e){return this.r(e)(m.bind(this))},l.t="function"==typeof require?require:function(){throw Error("Unexpected use of runtime require")},l.r=function(e){return B(e,this.m).exports},l.f=function(e){function t(t){if(t=b(t),i.call(e,t))return e[t].module();let r=Error(`Cannot find module '${t}'`);throw r.code="MODULE_NOT_FOUND",r}return t.keys=()=>Object.keys(e),t.resolve=t=>{if(t=b(t),i.call(e,t))return e[t].id();let r=Error(`Cannot find module '${t}'`);throw r.code="MODULE_NOT_FOUND",r},t.import=async e=>await t(e),t};let O=Symbol("turbopack queues"),g=Symbol("turbopack exports"),w=Symbol("turbopack error");function C(e){e&&1!==e.status&&(e.status=1,e.forEach(e=>e.queueCount--),e.forEach(e=>e.queueCount--?e.queueCount++:e()))}l.a=function(e,t){let r=this.m,n=t?Object.assign([],{status:-1}):void 0,o=new Set,{resolve:l,reject:i,promise:s}=y(),u=Object.assign(s,{[g]:r.exports,[O]:e=>{n&&e(n),o.forEach(e),u.catch(()=>{})}}),a={get:()=>u,set(e){e!==u&&(u[g]=e)}};Object.defineProperty(r,"exports",a),Object.defineProperty(r,"namespaceObject",a),e(function(e){let t=e.map(e=>{if(null!==e&&"object"==typeof e){if(O in e)return e;if(null!=e&&"object"==typeof e&&"then"in e&&"function"==typeof e.then){let t=Object.assign([],{status:0}),r={[g]:{},[O]:e=>e(t)};return e.then(e=>{r[g]=e,C(t)},e=>{r[w]=e,C(t)}),r}}return{[g]:e,[O]:()=>{}}}),r=()=>t.map(e=>{if(e[w])throw e[w];return e[g]}),{promise:l,resolve:i}=y(),s=Object.assign(()=>i(r),{queueCount:0});function u(e){e!==n&&!o.has(e)&&(o.add(e),e&&0===e.status&&(s.queueCount++,e.push(s)))}return t.map(e=>e[O](u)),s.queueCount?l:r()},function(e){e?i(u[w]=e):l(u[g]),C(n)}),n&&-1===n.status&&(n.status=0)};let U=function(e){let t=new URL(e,"x:/"),r={};for(let e in t)r[e]=t[e];for(let t in r.href=e,r.pathname=e.replace(/[?#].*/,""),r.origin=r.protocol="",r.toString=r.toJSON=(...t)=>e,r)Object.defineProperty(this,t,{enumerable:!0,configurable:!0,value:r[t]})};function R(e,t){throw Error(`Invariant: ${t(e)}`)}U.prototype=URL.prototype,l.U=U,l.z=function(e){throw Error("dynamic usage of require is not supported")},l.g=globalThis;let j=o.prototype;var _,k=((_=k||{})[_.Runtime=0]="Runtime",_[_.Parent=1]="Parent",_[_.Update=2]="Update",_);let v=new Map;l.M=v;let $=new Map,P=new Map;async function S(e,t,r){let n;if("string"==typeof r)return E(e,t,K(r));let o=r.included||[],l=o.map(e=>!!v.has(e)||$.get(e));if(l.length>0&&l.every(e=>e))return void await Promise.all(l);let i=r.moduleChunks||[],s=i.map(e=>P.get(e)).filter(e=>e);if(s.length>0){if(s.length===i.length)return void await Promise.all(s);let r=new Set;for(let e of i)P.has(e)||r.add(e);for(let n of r){let r=E(e,t,K(n));P.set(n,r),s.push(r)}n=Promise.all(s)}else{for(let o of(n=E(e,t,K(r.path)),i))P.has(o)||P.set(o,n)}for(let e of o)$.has(e)||$.set(e,n);await n}j.l=function(e){return S(1,this.m.id,e)};let T=Promise.resolve(void 0),A=new WeakMap;function E(t,r,n){let o=e.loadChunkCached(t,n),l=A.get(o);if(void 0===l){let e=A.set.bind(A,o,T);l=o.then(e).catch(e=>{let o;switch(t){case 0:o=`as a runtime dependency of chunk ${r}`;break;case 1:o=`from module ${r}`;break;case 2:o="from an HMR update";break;default:R(t,e=>`Unknown source type: ${e}`)}let l=Error(`Failed to load chunk ${n} ${o}${e?`: ${e}`:""}`,e?{cause:e}:void 0);throw l.name="ChunkLoadError",l}),A.set(o,l)}return l}function K(e){return`${t}${e.split("/").map(e=>encodeURIComponent(e)).join("/")}${r}`}j.L=function(e){return E(1,this.m.id,e)},j.R=function(e){let t=this.r(e);return t?.default??t},j.P=function(e){return`/ROOT/${e??""}`},j.b=function(e){let t=new Blob([`self.TURBOPACK_WORKER_LOCATION = ${JSON.stringify(location.origin)};
+(globalThis.TURBOPACK||(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,{otherChunks:["static/chunks/662d1b0ce457c16b.js","static/chunks/d54b3ced5d4f7ae5.js","static/chunks/96818f5620f039a1.js"],runtimeModuleIds:[95506]}]),(()=>{let e;if(!Array.isArray(globalThis.TURBOPACK))return;let t="/_next/",r=(self.TURBOPACK_CHUNK_SUFFIX??document?.currentScript?.getAttribute?.("src")?.replace(/^(.*(?=\?)|^.*$)/,""))||"",n=new WeakMap;function o(e,t){this.m=e,this.e=t}let l=o.prototype,i=Object.prototype.hasOwnProperty,s="u">typeof Symbol&&Symbol.toStringTag;function u(e,t,r){i.call(e,t)||Object.defineProperty(e,t,r)}function a(e,t){let r=e[t];return r||(r=c(t),e[t]=r),r}function c(e){return{exports:{},error:void 0,id:e,namespaceObject:void 0}}function f(e,t){u(e,"__esModule",{value:!0}),s&&u(e,s,{value:"Module"});let r=0;for(;r<t.length;){let n=t[r++],o=t[r++];if("number"==typeof o)if(0===o)u(e,n,{value:t[r++],enumerable:!0,writable:!1});else throw Error(`unexpected tag: ${o}`);else"function"==typeof t[r]?u(e,n,{get:o,set:t[r++],enumerable:!0}):u(e,n,{get:o,enumerable:!0})}Object.seal(e)}l.s=function(e,t){let r,n;null!=t?n=(r=a(this.c,t)).exports:(r=this.m,n=this.e),r.namespaceObject=n,f(n,e)},l.j=function(e,t){var r,o;let l,s,u;null!=t?s=(l=a(this.c,t)).exports:(l=this.m,s=this.e);let c=(r=l,o=s,(u=n.get(r))||(n.set(r,u=[]),r.exports=r.namespaceObject=new Proxy(o,{get(e,t){if(i.call(e,t)||"default"===t||"__esModule"===t)return Reflect.get(e,t);for(let e of u){let r=Reflect.get(e,t);if(void 0!==r)return r}},ownKeys(e){let t=Reflect.ownKeys(e);for(let e of u)for(let r of Reflect.ownKeys(e))"default"===r||t.includes(r)||t.push(r);return t}})),u);"object"==typeof e&&null!==e&&c.push(e)},l.v=function(e,t){(null!=t?a(this.c,t):this.m).exports=e},l.n=function(e,t){let r;(r=null!=t?a(this.c,t):this.m).exports=r.namespaceObject=e};let p=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,h=[null,p({}),p([]),p(p)];function d(e,t,r){let n=[],o=-1;for(let t=e;("object"==typeof t||"function"==typeof t)&&!h.includes(t);t=p(t))for(let r of Object.getOwnPropertyNames(t))n.push(r,function(e,t){return()=>e[t]}(e,r)),-1===o&&"default"===r&&(o=n.length-1);return r&&o>=0||(o>=0?n.splice(o,1,0,e):n.push("default",0,e)),f(t,n),t}function m(e){let t=B(e,this.m);if(t.namespaceObject)return t.namespaceObject;let r=t.exports;return t.namespaceObject=d(r,"function"==typeof r?function(...e){return r.apply(this,e)}:Object.create(null),r&&r.__esModule)}function b(e){let t=e.indexOf("#");-1!==t&&(e=e.substring(0,t));let r=e.indexOf("?");return -1!==r&&(e=e.substring(0,r)),e}function y(){let e,t;return{promise:new Promise((r,n)=>{t=n,e=r}),resolve:e,reject:t}}l.i=m,l.A=function(e){return this.r(e)(m.bind(this))},l.t="function"==typeof require?require:function(){throw Error("Unexpected use of runtime require")},l.r=function(e){return B(e,this.m).exports},l.f=function(e){function t(t){if(t=b(t),i.call(e,t))return e[t].module();let r=Error(`Cannot find module '${t}'`);throw r.code="MODULE_NOT_FOUND",r}return t.keys=()=>Object.keys(e),t.resolve=t=>{if(t=b(t),i.call(e,t))return e[t].id();let r=Error(`Cannot find module '${t}'`);throw r.code="MODULE_NOT_FOUND",r},t.import=async e=>await t(e),t};let O=Symbol("turbopack queues"),g=Symbol("turbopack exports"),w=Symbol("turbopack error");function C(e){e&&1!==e.status&&(e.status=1,e.forEach(e=>e.queueCount--),e.forEach(e=>e.queueCount--?e.queueCount++:e()))}l.a=function(e,t){let r=this.m,n=t?Object.assign([],{status:-1}):void 0,o=new Set,{resolve:l,reject:i,promise:s}=y(),u=Object.assign(s,{[g]:r.exports,[O]:e=>{n&&e(n),o.forEach(e),u.catch(()=>{})}}),a={get:()=>u,set(e){e!==u&&(u[g]=e)}};Object.defineProperty(r,"exports",a),Object.defineProperty(r,"namespaceObject",a),e(function(e){let t=e.map(e=>{if(null!==e&&"object"==typeof e){if(O in e)return e;if(null!=e&&"object"==typeof e&&"then"in e&&"function"==typeof e.then){let t=Object.assign([],{status:0}),r={[g]:{},[O]:e=>e(t)};return e.then(e=>{r[g]=e,C(t)},e=>{r[w]=e,C(t)}),r}}return{[g]:e,[O]:()=>{}}}),r=()=>t.map(e=>{if(e[w])throw e[w];return e[g]}),{promise:l,resolve:i}=y(),s=Object.assign(()=>i(r),{queueCount:0});function u(e){e!==n&&!o.has(e)&&(o.add(e),e&&0===e.status&&(s.queueCount++,e.push(s)))}return t.map(e=>e[O](u)),s.queueCount?l:r()},function(e){e?i(u[w]=e):l(u[g]),C(n)}),n&&-1===n.status&&(n.status=0)};let U=function(e){let t=new URL(e,"x:/"),r={};for(let e in t)r[e]=t[e];for(let t in r.href=e,r.pathname=e.replace(/[?#].*/,""),r.origin=r.protocol="",r.toString=r.toJSON=(...t)=>e,r)Object.defineProperty(this,t,{enumerable:!0,configurable:!0,value:r[t]})};function R(e,t){throw Error(`Invariant: ${t(e)}`)}U.prototype=URL.prototype,l.U=U,l.z=function(e){throw Error("dynamic usage of require is not supported")},l.g=globalThis;let j=o.prototype;var _,k=((_=k||{})[_.Runtime=0]="Runtime",_[_.Parent=1]="Parent",_[_.Update=2]="Update",_);let v=new Map;l.M=v;let $=new Map,P=new Map;async function S(e,t,r){let n;if("string"==typeof r)return E(e,t,K(r));let o=r.included||[],l=o.map(e=>!!v.has(e)||$.get(e));if(l.length>0&&l.every(e=>e))return void await Promise.all(l);let i=r.moduleChunks||[],s=i.map(e=>P.get(e)).filter(e=>e);if(s.length>0){if(s.length===i.length)return void await Promise.all(s);let r=new Set;for(let e of i)P.has(e)||r.add(e);for(let n of r){let r=E(e,t,K(n));P.set(n,r),s.push(r)}n=Promise.all(s)}else{for(let o of(n=E(e,t,K(r.path)),i))P.has(o)||P.set(o,n)}for(let e of o)$.has(e)||$.set(e,n);await n}j.l=function(e){return S(1,this.m.id,e)};let T=Promise.resolve(void 0),A=new WeakMap;function E(t,r,n){let o=e.loadChunkCached(t,n),l=A.get(o);if(void 0===l){let e=A.set.bind(A,o,T);l=o.then(e).catch(e=>{let o;switch(t){case 0:o=`as a runtime dependency of chunk ${r}`;break;case 1:o=`from module ${r}`;break;case 2:o="from an HMR update";break;default:R(t,e=>`Unknown source type: ${e}`)}let l=Error(`Failed to load chunk ${n} ${o}${e?`: ${e}`:""}`,e?{cause:e}:void 0);throw l.name="ChunkLoadError",l}),A.set(o,l)}return l}function K(e){return`${t}${e.split("/").map(e=>encodeURIComponent(e)).join("/")}${r}`}j.L=function(e){return E(1,this.m.id,e)},j.R=function(e){let t=this.r(e);return t?.default??t},j.P=function(e){return`/ROOT/${e??""}`},j.b=function(e){let t=new Blob([`self.TURBOPACK_WORKER_LOCATION = ${JSON.stringify(location.origin)};
 self.TURBOPACK_CHUNK_SUFFIX = ${JSON.stringify(r)};
 self.TURBOPACK_NEXT_CHUNK_URLS = ${JSON.stringify(e.reverse().map(K),null,2)};
 importScripts(...self.TURBOPACK_NEXT_CHUNK_URLS.map(c => self.TURBOPACK_WORKER_LOCATION + c).reverse());`],{type:"text/javascript"});return URL.createObjectURL(t)};let x=/\.js(?:\?[^#]*)?(?:#.*)?$/,N=/\.css(?:\?[^#]*)?(?:#.*)?$/;function M(e){return N.test(e)}l.w=function(t,r,n){return e.loadWebAssembly(1,this.m.id,t,r,n)},l.u=function(t,r){return e.loadWebAssemblyModule(1,this.m.id,t,r)};let L={};l.c=L;let B=(e,t)=>{let r=L[e];if(r){if(r.error)throw r.error;return r}return q(e,k.Parent,t.id)};function q(e,t,r){let n=v.get(e);if("function"!=typeof n)throw Error(function(e,t,r){let n;switch(t){case 0:n=`as a runtime entry of chunk ${r}`;break;case 1:n=`because it was required from module ${r}`;break;case 2:n="because of an HMR update";break;default:R(t,e=>`Unknown source type: ${e}`)}return`Module ${e} was instantiated ${n}, but the module factory is not available.`}(e,t,r));let l=c(e),i=l.exports;L[e]=l;let s=new o(l,i);try{n(s,l,i)}catch(e){throw l.error=e,e}return l.namespaceObject&&l.exports!==l.namespaceObject&&d(l.exports,l.namespaceObject),l}function I(r){let n,o=function(e){if("string"==typeof e)return e;let r=decodeURIComponent(("u">typeof TURBOPACK_NEXT_CHUNK_URLS?TURBOPACK_NEXT_CHUNK_URLS.pop():e.getAttribute("src")).replace(/[?#].*$/,""));return r.startsWith(t)?r.slice(t.length):r}(r[0]);return 2===r.length?n=r[1]:(n=void 0,!function(e,t,r,n){let o=1;for(;o<e.length;){let t=e[o],n=o+1;for(;n<e.length&&"function"!=typeof e[n];)n++;if(n===e.length)throw Error("malformed chunk format, expected a factory function");if(!r.has(t)){let l=e[n];for(Object.defineProperty(l,"name",{value:"module evaluation"});o<n;o++)t=e[o],r.set(t,l)}o=n+1}}(r,0,v)),e.registerChunk(o,n)}let W=new Map;function H(e){let t=W.get(e);if(!t){let r,n;t={resolved:!1,loadingStarted:!1,promise:new Promise((e,t)=>{r=e,n=t}),resolve:()=>{t.resolved=!0,r()},reject:n},W.set(e,t)}return t}e={async registerChunk(e,t){if(H(K(e)).resolve(),null!=t){for(let e of t.otherChunks)H(K("string"==typeof e?e:e.path));if(await Promise.all(t.otherChunks.map(t=>S(0,e,t))),t.runtimeModuleIds.length>0)for(let r of t.runtimeModuleIds)!function(e,t){let r=L[t];if(r){if(r.error)throw r.error;return}q(t,k.Runtime,e)}(e,r)}},loadChunkCached:(e,t)=>(function(e,t){let r=H(t);if(r.loadingStarted)return r.promise;if(e===k.Runtime)return r.loadingStarted=!0,M(t)&&r.resolve(),r.promise;if("function"==typeof importScripts)if(M(t));else if(x.test(t))self.TURBOPACK_NEXT_CHUNK_URLS.push(t),importScripts(TURBOPACK_WORKER_LOCATION+t);else throw Error(`can't infer type of chunk from URL ${t} in worker`);else{let e=decodeURI(t);if(M(t))if(document.querySelectorAll(`link[rel=stylesheet][href="${t}"],link[rel=stylesheet][href^="${t}?"],link[rel=stylesheet][href="${e}"],link[rel=stylesheet][href^="${e}?"]`).length>0)r.resolve();else{let e=document.createElement("link");e.rel="stylesheet",e.href=t,e.onerror=()=>{r.reject()},e.onload=()=>{r.resolve()},document.head.appendChild(e)}else if(x.test(t)){let n=document.querySelectorAll(`script[src="${t}"],script[src^="${t}?"],script[src="${e}"],script[src^="${e}?"]`);if(n.length>0)for(let e of Array.from(n))e.addEventListener("error",()=>{r.reject()});else{let e=document.createElement("script");e.src=t,e.onerror=()=>{r.reject()},document.head.appendChild(e)}}else throw Error(`can't infer type of chunk from URL ${t}`)}return r.loadingStarted=!0,r.promise})(e,t),async loadWebAssembly(e,t,r,n,o){let l=fetch(K(r)),{instance:i}=await WebAssembly.instantiateStreaming(l,o);return i.exports},async loadWebAssemblyModule(e,t,r,n){let o=fetch(K(r));return await WebAssembly.compileStreaming(o)}};let F=globalThis.TURBOPACK;globalThis.TURBOPACK={push:I},F.forEach(I)})();

package/server/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@miadi/stateloom-web-source",
-  "version": "0.2.5",
+  "version": "0.3.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@miadi/stateloom-web-source",
-      "version": "0.2.5",
+      "version": "0.3.0",
       "dependencies": {
         "@miadi/stateloom-canvas": "file:../bridge-canvas",
         "@miadi/stateloom-client": "file:../bridge-client",

package/server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miadi/stateloom-web-source",
-  "version": "0.2.5",
+  "version": "0.3.0",
   "private": true,
   "//": [
     "This is the designer's SOURCE and is never published — hence private: true.",

package/server/src/app/api/companion/[...path]/route.ts

@@ -0,0 +1,112 @@
+/**
+ * /api/companion/* — the companion service, as this page reaches it (Spec 84).
+ *
+ * The Talk dock records takes and reads the conversation of a Mia episode companion
+ * (jgwill/miadi-orchestration-kit `claude/mia-episode-companion/phone-capture`). The
+ * service listens on its own host and port; the browser asks this server, which passes
+ * the request on to `STATELOOM_COMPANION_URL` — the same origin for the page, no CORS
+ * to configure, and the service's address never reaches the bundle.
+ *
+ * Only what the phone page itself does passes: read the thread, the episodes, the
+ * health, the recorder's state and the voices; send a take, its backup parts, a
+ * diagnostic, the recorder's heartbeat, a thumb, a request to voice a reply. A reply is
+ * never posted through here — the service takes replies from its own host only, and
+ * every request this route forwards carries `x-forwarded-for`, which is how the service
+ * tells a forwarded request from its own seat's.
+ *
+ * Bodies and audio stream both ways (a take is minutes of audio; a voice is played by
+ * byte range).
+ */
+import { NextRequest } from "next/server";
+import { envAlias } from "@miadi/stateloom-protocol";
+
+export const dynamic = "force-dynamic";
+export const revalidate = 0;
+
+const ID = "[0-9a-f-]{36}";
+const READ = [
+  /^health$/,
+  /^episodes$/,
+  /^thread$/,
+  /^recorder$/,
+  /^replies$/,
+  new RegExp(`^replies/${ID}/audio$`),
+  new RegExp(`^replies/${ID}/steps/\\d{1,2}/audio$`),
+  /^captures\/audio\/[^/]+$/,
+];
+const WRITE = [
+  /^takes$/,
+  /^takes\/part$/,
+  /^takes\/diagnostic$/,
+  /^recorder$/,
+  new RegExp(`^replies/${ID}/voice$`),
+  new RegExp(`^replies/${ID}/feedback$`),
+];
+
+/** The request headers the service reads. */
+const PASS_IN = ["content-type", "range", "accept"];
+/** The response headers the page needs, for JSON and for ranged audio. */
+const PASS_OUT = ["content-type", "content-range", "accept-ranges", "content-length", "cache-control"];
+
+function refuse(status: number, error: string): Response {
+  return Response.json({ success: false, error }, { status, headers: { "cache-control": "no-store" } });
+}
+
+function allowed(method: string, path: string): boolean {
+  const list = method === "POST" ? WRITE : method === "GET" || method === "HEAD" ? READ : [];
+  return list.some((re) => re.test(path));
+}
+
+async function forward(req: NextRequest, ctx: { params: Promise<{ path?: string[] }> }): Promise<Response> {
+  const base = envAlias("COMPANION_URL");
+  if (!base) return refuse(503, "no companion on this designer: set STATELOOM_COMPANION_URL to the phone-capture service");
+  const { path: parts = [] } = await ctx.params;
+  if (parts.some((p) => p === ".." || p === "." || p.includes("/"))) return refuse(400, "bad path");
+  const path = parts.join("/");
+  if (!allowed(req.method, path)) {
+    return refuse(path === "replies" && req.method === "POST" ? 403 : 404, path === "replies" && req.method === "POST"
+      ? "replies are posted from the companion's own host, not through the canvas"
+      : `not passed to the companion: ${req.method} ${path}`);
+  }
+
+  const target = new URL(`api/${parts.map(encodeURIComponent).join("/")}`, base.endsWith("/") ? base : `${base}/`);
+  target.search = req.nextUrl.search;
+
+  const headers = new Headers();
+  for (const name of PASS_IN) {
+    const value = req.headers.get(name);
+    if (value) headers.set(name, value);
+  }
+  // Never empty: an empty or absent header is what the service reads as its own host.
+  const client = req.headers.get("x-forwarded-for") || req.headers.get("x-real-ip") || "stateloom-web";
+  headers.set("x-forwarded-for", client);
+  const login = req.headers.get("tailscale-user-login");
+  if (login) headers.set("tailscale-user-login", login);
+
+  let upstream: Response;
+  try {
+    upstream = await fetch(target, {
+      method: req.method,
+      headers,
+      body: req.method === "POST" ? req.body : undefined,
+      // A streamed request body (a take as it is sent) needs half duplex in Node's fetch.
+      ...(req.method === "POST" ? { duplex: "half" } : {}),
+      cache: "no-store",
+      redirect: "manual",
+      signal: req.signal,
+    } as RequestInit);
+  } catch (e) {
+    return refuse(502, `the companion did not answer at ${target.origin}: ${e instanceof Error ? e.message : String(e)}`);
+  }
+
+  const out = new Headers({ "cache-control": "no-store" });
+  for (const name of PASS_OUT) {
+    const value = upstream.headers.get(name);
+    if (value) out.set(name, value);
+  }
+  return new Response(req.method === "HEAD" ? null : upstream.body, { status: upstream.status, headers: out });
+}
+
+export const GET = forward;
+export const HEAD = forward;
+export const POST = forward;

package/server/src/app/api/config/route.ts

@@ -23,6 +23,12 @@ export async function GET(): Promise<Response> {
     {
       bridgeUrl: envAlias("BRIDGE_URL") ?? null,
       projectFile: envAlias("PROJECT_FILE") ?? null,
+      // The stage this designer presents on (Spec 83); a page's `?stage=` wins.
+      stage: envAlias("STAGE") ?? null,
+      // Whether a companion answers behind /api/companion (Spec 84), and the episode the
+      // Talk dock speaks in when the page names none. The service's address stays here.
+      companion: !!envAlias("COMPANION_URL"),
+      companionEpisode: envAlias("COMPANION_EPISODE") ?? null,
     },
     { headers: { "cache-control": "no-store" } }
   );

package/server/src/app/api/marks/route.ts

@@ -0,0 +1,146 @@
+/**
+ * /api/marks — a drawing's marks (Spec 83), kept beside it in its sidecar
+ * (`wave.smdf.json` → `wave.smdf.marks.json`).
+ *
+ * GET  `?doc=<drawing>` → `{ doc, path, marks }`. No sidecar yet reads as no marks.
+ * POST `?doc=<drawing>` with one change:
+ *   `{ action: "add", mark: { elements?, region?, level?, text, kind?, author } }`
+ *   `{ action: "reply", id, text, author }`
+ *   `{ action: "resolve" | "reopen" | "remove", id }`
+ *   → `{ doc, path, marks, change: { action, id } }`
+ *
+ * The drawing passes the same root allowlist as the file API, and so does the
+ * sidecar itself — it sits in the same folder, so whatever admits the drawing
+ * admits its marks, and a symlink placed at the sidecar is refused the same
+ * way. The page tells the hub after the write (durable first, as every edit).
+ */
+import { NextRequest, NextResponse } from "next/server";
+import { existsSync, readFileSync } from "fs";
+import { basename } from "path";
+import {
+  addMark,
+  marksPathOf,
+  readMarksFile,
+  removeMark,
+  reopenMark,
+  replyToMark,
+  resolveMark,
+  type MarkAuthor,
+  type MarkInput,
+  type MarksChange,
+  type MarksFile,
+} from "@miadi/stateloom-protocol";
+import { getProjectFilePath, resolveDocPath, writeDocFile } from "@/lib/projectFile";
+
+export const dynamic = "force-dynamic";
+
+type Resolved = { ok: true; doc: string; path: string } | { ok: false; error: string };
+
+function resolveMarks(doc: string | null): Resolved {
+  const drawing = resolveDocPath(doc ?? getProjectFilePath());
+  if (!drawing.ok) return { ok: false, error: drawing.error };
+  const sidecar = resolveDocPath(marksPathOf(drawing.path));
+  if (!sidecar.ok) return { ok: false, error: sidecar.error };
+  return { ok: true, doc: drawing.path, path: sidecar.path };
+}
+
+function read(r: { doc: string; path: string }): MarksFile {
+  if (!existsSync(r.path)) return { doc: basename(r.doc), marks: [] };
+  try {
+    return readMarksFile(JSON.parse(readFileSync(r.path, "utf8")), basename(r.doc));
+  } catch {
+    // A sidecar that does not parse is not overwritten by a reader: it reads as
+    // empty, and the next write says so instead of replacing it silently.
+    return { doc: basename(r.doc), marks: [] };
+  }
+}
+
+const unreadable = (path: string): boolean => {
+  if (!existsSync(path)) return false;
+  try {
+    JSON.parse(readFileSync(path, "utf8"));
+    return false;
+  } catch {
+    return true;
+  }
+};
+
+function author(v: unknown): MarkAuthor {
+  const o = (v && typeof v === "object" ? v : {}) as Record<string, unknown>;
+  const name = typeof o.name === "string" && o.name.trim() ? o.name.trim().slice(0, 80) : "someone";
+  const id = typeof o.id === "string" && o.id.trim() ? o.id.trim().slice(0, 80) : name.toLowerCase().replace(/[^a-z0-9]+/g, "-");
+  // A page speaks for a person. An agent writes through MCP or the CLI.
+  return { id, name, role: "person" };
+}
+
+export async function GET(req: NextRequest) {
+  const r = resolveMarks(req.nextUrl.searchParams.get("doc"));
+  if (!r.ok) return NextResponse.json({ error: r.error }, { status: 403 });
+  return NextResponse.json({ doc: r.doc, path: r.path, marks: read(r).marks }, { headers: { "cache-control": "no-store" } });
+}
+
+export async function POST(req: NextRequest) {
+  const r = resolveMarks(req.nextUrl.searchParams.get("doc"));
+  if (!r.ok) return NextResponse.json({ error: r.error }, { status: 403 });
+  let body: Record<string, unknown>;
+  try {
+    body = (await req.json()) as Record<string, unknown>;
+  } catch {
+    return NextResponse.json({ error: "Body must be JSON: { action, ... }" }, { status: 400 });
+  }
+  if (unreadable(r.path)) {
+    return NextResponse.json({ error: `${r.path} is not readable JSON; fix or move it before marking again` }, { status: 409 });
+  }
+  const at = new Date().toISOString();
+  const file = read(r);
+  const id = typeof body.id === "string" ? body.id : "";
+  let next: MarksFile;
+  let change: { action: MarksChange; id: string };
+  try {
+    switch (body.action) {
+      case "add": {
+        const m = (body.mark && typeof body.mark === "object" ? body.mark : {}) as Partial<MarkInput>;
+        next = addMark(
+          file,
+          {
+            text: typeof m.text === "string" ? m.text.slice(0, 4000) : "",
+            kind: m.kind,
+            elements: Array.isArray(m.elements) ? m.elements.filter((e): e is string => typeof e === "string").slice(0, 50) : undefined,
+            region: m.region,
+            level: typeof m.level === "string" ? m.level : undefined,
+            author: author(m.author),
+          },
+          at,
+        );
+        change = { action: "add", id: next.marks[next.marks.length - 1].id };
+        break;
+      }
+      case "reply":
+        next = replyToMark(file, id, { author: author(body.author), text: typeof body.text === "string" ? body.text.slice(0, 4000) : "" }, at);
+        change = { action: "reply", id };
+        break;
+      case "resolve":
+        next = resolveMark(file, id);
+        change = { action: "resolve", id };
+        break;
+      case "reopen":
+        next = reopenMark(file, id);
+        change = { action: "reopen", id };
+        break;
+      case "remove":
+        next = removeMark(file, id);
+        change = { action: "remove", id };
+        break;
+      default:
+        return NextResponse.json({ error: "action is one of add, reply, resolve, reopen, remove" }, { status: 400 });
+    }
+  } catch (e) {
+    return NextResponse.json({ error: e instanceof Error ? e.message : String(e) }, { status: 400 });
+  }
+  try {
+    writeDocFile(r.path, JSON.stringify(next, null, 2) + "\n");
+  } catch (e) {
+    return NextResponse.json({ error: e instanceof Error ? e.message : String(e) }, { status: 400 });
+  }
+  return NextResponse.json({ doc: r.doc, path: r.path, marks: next.marks, change });
+}

package/server/src/app/globals.css

@@ -268,3 +268,97 @@ body {
    designer and forgewright animate the same way from one source. Nothing in
    this app referenced the old `sm-*` class names outside the canvas, which is
    why they could simply leave. */
+
+/* The stage's caption (Spec 83): a fixed layer the size of the screen that lets
+   every pointer through except on the caption itself, which sits above the
+   phone dock and, from `md` up, at the bottom edge. */
+.stage-caption-host {
+  position: fixed;
+  inset: 0 0 calc(var(--sm-dock-h) + env(safe-area-inset-bottom)) 0;
+  pointer-events: none;
+  z-index: 45;
+}
+
+@media (min-width: 768px) {
+  .stage-caption-host { bottom: 0; }
+}
+
+/* The stage's controls on a board: top-right, clear of the status line (top
+   left), the machine's zoom bar (bottom left) and the view controls (bottom
+   right). */
+.stage-board-controls {
+  position: absolute;
+  right: 0.75rem;
+  top: 0.5rem;
+  z-index: 20;
+  display: flex;
+  gap: 0.375rem;
+  pointer-events: auto;
+}
+
+/* The mark cards open under those controls. */
+.stage-board-card {
+  position: absolute;
+  right: 0.5rem;
+  top: 3.25rem;
+  z-index: 25;
+}
+
+@media (max-width: 767px) {
+  .stage-board-card { left: 0.25rem; right: 0.25rem; }
+  .stage-board-card > * { width: auto; }
+}
+
+/* The Talk dock (Spec 84): bottom-left, above the phone dock and above the
+   machine's zoom bar, clear of the stage's caption (bottom centre) and the
+   board's controls (top right). */
+.stage-talk-host {
+  position: fixed;
+  left: calc(0.75rem + env(safe-area-inset-left));
+  /* On a phone the caption spans the width: the dock stands above it while it shows. */
+  bottom: calc(var(--sm-dock-h) + env(safe-area-inset-bottom) + var(--stage-caption-h, 3rem) + 0.5rem);
+  z-index: 46;
+}
+
+@media (min-width: 768px) {
+  .stage-talk-host { bottom: 3.5rem; }
+  /* Open beside a caption, the conversation stands above it rather than over its edge. */
+  .stage-talk-host:has(.slc-talk--open) { bottom: calc(3.5rem + var(--stage-caption-h, 0px)); }
+  .stage-talk-host .slc-talk-panel { max-height: calc(100dvh - 3.5rem - var(--stage-caption-h, 0px) - 4.5rem); }
+}
+
+/* On a phone the open conversation is a sheet across the bottom, over the caption: one
+   thing at a time on a small screen. A reply that walks the board folds it again. */
+@media (max-width: 767px) {
+  .stage-talk-host:has(.slc-talk--open) {
+    left: calc(0.25rem + env(safe-area-inset-left));
+    right: calc(0.25rem + env(safe-area-inset-right));
+    bottom: calc(var(--sm-dock-h) + env(safe-area-inset-bottom) + 0.25rem);
+    z-index: 47;
+  }
+  .stage-talk-host .slc-talk-panel { width: auto; max-height: min(72dvh, 40rem); }
+}
+
+/* While marking is on: what a tap and a drag do, said on the board itself. */
+.stage-board-hint {
+  position: absolute;
+  left: 50%;
+  top: 0.75rem;
+  z-index: 20;
+  transform: translateX(-50%);
+  max-width: calc(100% - 7.5rem);
+  padding: 0.35rem 0.75rem;
+  border-radius: 999px;
+  border: 1px solid rgb(251 191 36 / 0.45);
+  background: rgb(17 24 39 / 0.92);
+  color: #fcd34d;
+  font-size: 12px;
+  line-height: 1.35;
+  text-align: center;
+  pointer-events: none;
+}
+
+@media (max-width: 767px) {
+  /* Under the board's controls, across the width, so it never covers them. */
+  .stage-board-hint { left: 0.5rem; right: 0.5rem; max-width: none; transform: none; top: 3.4rem; }
+}

package/server/src/app/page.tsx

@@ -17,6 +17,8 @@ import SystemWorkspace from "@/components/system/SystemWorkspace";
 import SystemStrip from "@/components/system/SystemStrip";
 import BoardBoundary from "@/components/BoardBoundary";
 import IssueIcon from "@/components/IssueIcon";
+import StageProvider from "@/components/stage/StageProvider";
+import MachineStageLayer from "@/components/stage/MachineStageLayer";
 import { docKindOfPath, isSysdfPath, type DocKind } from "@miadi/stateloom-protocol";
 import { useRequestedDoc } from "@/lib/docParam";
 import { useMachineFocus } from "@/lib/machineFocus";
@@ -102,12 +104,16 @@ export default function Home() {
       {workspace}
     </BoardBoundary>
   );
-  if (!systemParam || !isSysdfPath(systemParam)) return guarded;
+  // The stage (Spec 83) wraps whichever workspace is open, so a tour that
+  // moves between drawings keeps playing across the switch.
+  if (!systemParam || !isSysdfPath(systemParam)) return <StageProvider>{guarded}</StageProvider>;
   return (
-    <div className="system-frame">
-      <SystemStrip systemPath={systemParam} />
-      {guarded}
-    </div>
+    <StageProvider>
+      <div className="system-frame">
+        <SystemStrip systemPath={systemParam} />
+        {guarded}
+      </div>
+    </StageProvider>
   );
 }
 
@@ -161,10 +167,11 @@ function MachineDesigner() {
       <Toolbar />
       <div className="flex flex-1 min-h-0 overflow-hidden relative">
         {/* Canvas */}
-        <div className="flex-1 overflow-hidden">
+        <div className="relative flex-1 overflow-hidden" id="machine-board">
           <BoardBoundary what="state machine">
             <Canvas />
           </BoardBoundary>
+          <MachineStageLayer />
         </div>
 
         {/* Scrim. Phone only — it is what makes "tap the canvas to dismiss"

package/server/src/components/erd/ErdWorkspace.tsx

@@ -61,7 +61,9 @@ import LockIcon from "@/components/LockIcon";
 import { docQuery, navigateToDoc, useRequestedDoc } from "@/lib/docParam";
 import { loadRuntimeConfig } from "@/lib/runtimeConfig";
 import { useSheetDrag } from "@/lib/useSheetDrag";
-import { urlParam, useFocusRequest, writeFocus } from "@/lib/systemParam";
+import { urlParam, useFocusRequest, useUrlParam, writeFocus } from "@/lib/systemParam";
+import StageLayer from "@/components/stage/StageLayer";
+import { erdElementBoxes } from "@miadi/stateloom-protocol";
 import { safely } from "@/lib/safely";
 
 type Moved = Record<string, { x: number; y: number }>;
@@ -380,6 +382,8 @@ export default function ErdWorkspace() {
   // show it. `attribute:E.a` shows its entity. A person's selection becomes the
   // focus in turn, so the strip can list what it links to.
   const focusRequest = useFocusRequest();
+  const stageFocus = useUrlParam("focus");
+  const stageBoxes = useMemo(() => (def ? safely(() => erdElementBoxes(def, positions, { rows: notation !== "chen" }), []) : []), [def, positions, notation]);
   const appliedFocus = useRef(-1);
   useEffect(() => {
     if (!def || appliedFocus.current === focusRequest.nonce) return;
@@ -533,6 +537,8 @@ export default function ErdWorkspace() {
             />
             </BoardBoundary>
           )}
+          {/* The stage (Spec 83): what an agent lights, and the person's marks. */}
+          {def && <StageLayer docPath={docPath || null} kind="erd" viewport={viewport} setViewport={setViewport} boxes={stageBoxes} boardRef={boardRef} focus={stageFocus} />}
 
           {/* Status costs no layout: it is a line over the board's corner. */}
           <div