aicodeman 1.16.2 → 1.16.4

package/dist/web/session-history-index.js

@@ -0,0 +1,118 @@
+/**
+ * @fileoverview Bounded in-memory index of PAST sessions, harvested by `GET /api/search`.
+ *
+ * `GET /api/search` used to build its session corpus from the live in-memory
+ * session map alone, so a folder sitting in the home screen's "Resume
+ * Conversation" list matched nothing (issue #261). The corpus that list renders
+ * comes from `GET /api/sessions/unified`, which reads the lifecycle log and every
+ * Claude transcript file: disk I/O the search path deliberately does not do (its
+ * no-fs property is what keeps a per-keystroke query cheap and traversal-free).
+ *
+ * This module is the seam between the two: a capped snapshot of the unified list
+ * that the search route reads synchronously, refreshed OUT of the request path.
+ * Two things fill it:
+ *   1. `/api/sessions/unified` writes it as a side effect (free, it just merged
+ *      that list). The home screen calls that endpoint whenever it opens, which
+ *      is the same screen the search box lives on, so it is warm in practice.
+ *   2. `ensureHistorySessionIndexFresh()`, fire-and-forget, single-flight,
+ *      TTL-guarded, kicks the registered refresher when a search finds the
+ *      snapshot stale. The caller never awaits it: the current query answers from
+ *      the existing snapshot and the next one sees fresh data.
+ *
+ * OWNERSHIP: each item carries the `owner` of the session it came from, and rows
+ * not tied to any live/persisted session (host-wide transcript history) carry
+ * `owner: undefined`. `canAccessOwned()` then reproduces the unified route's rule
+ * exactly, in multi-user mode a non-admin sees neither other users' sessions nor
+ * unowned host-wide history, and in single-user mode every check short-circuits
+ * true. The snapshot is written UNSCOPED, so it must never be returned unfiltered.
+ *
+ * Key exports:
+ * - setHistorySessionIndex / getHistorySessionIndex: the snapshot accessors.
+ * - buildHistorySessionIndexItems: pure merged-list → index-item projection.
+ * - setHistoryIndexRefresher / ensureHistorySessionIndexFresh: the refresh hook.
+ */
+/** Hard cap on snapshot size, so a host with thousands of transcripts stays bounded. */
+export const HISTORY_INDEX_MAX_ITEMS = 400;
+/** How long a snapshot is considered fresh before a search triggers a background refresh. */
+export const HISTORY_INDEX_TTL_MS = 60_000;
+let snapshot = { items: [], updatedAt: 0 };
+let refresher = null;
+let refreshInFlight = false;
+/**
+ * Project a merged unified list into index items. PURE, the caller supplies the
+ * owner lookup and the live-id set it already has in hand.
+ *
+ * Rows with no working directory AND no name are dropped: they can never match a
+ * query in a useful way and would only consume the cap.
+ *
+ * @param merged unified-list items, newest-first (the order the merge returns)
+ * @param ownerById owner of a session id, for rows tied to a live/persisted session
+ * @param liveIds session ids currently in the live map
+ */
+export function buildHistorySessionIndexItems(merged, ownerById, liveIds) {
+    const items = [];
+    for (const m of merged) {
+        if (items.length >= HISTORY_INDEX_MAX_ITEMS)
+            break;
+        const name = m.name ?? '';
+        const workingDir = m.workingDir ?? '';
+        if (!name && !workingDir)
+            continue;
+        items.push({
+            sessionId: m.sessionId,
+            name,
+            workingDir,
+            claudeSessionId: m.claudeSessionId,
+            timestamp: m.lastActivityAt ?? m.createdAt ?? 0,
+            owner: ownerById.get(m.sessionId),
+            live: liveIds.has(m.sessionId),
+        });
+    }
+    return items;
+}
+/** Replace the snapshot. Items are capped defensively even if the caller already did. */
+export function setHistorySessionIndex(items, now = Date.now()) {
+    snapshot = { items: items.slice(0, HISTORY_INDEX_MAX_ITEMS), updatedAt: now };
+}
+/**
+ * Read the snapshot. The returned array is UNSCOPED, callers must apply the
+ * per-item ownership check before exposing any of it.
+ */
+export function getHistorySessionIndex() {
+    return snapshot;
+}
+/** True when the snapshot has never been written, or is older than the TTL. */
+export function isHistorySessionIndexStale(now = Date.now(), ttlMs = HISTORY_INDEX_TTL_MS) {
+    return snapshot.updatedAt === 0 || now - snapshot.updatedAt > ttlMs;
+}
+/**
+ * Register the rebuild function. Called once by the session routes, which own the
+ * transcript scanner and the stores the unified list is merged from.
+ */
+export function setHistoryIndexRefresher(fn) {
+    refresher = fn;
+}
+/**
+ * Kick a background rebuild if the snapshot is stale. Returns immediately,
+ * NEVER await this from a request handler, that is the whole point: the search
+ * path answers from the current snapshot and stays free of disk I/O.
+ */
+export function ensureHistorySessionIndexFresh(now = Date.now()) {
+    if (refreshInFlight || !refresher || !isHistorySessionIndexStale(now))
+        return;
+    refreshInFlight = true;
+    void refresher()
+        .catch(() => {
+        // A failed rebuild leaves the previous snapshot in place; the next search retries.
+    })
+        .finally(() => {
+        refreshInFlight = false;
+    });
+}
+/** Test hook: drop the snapshot and any registered refresher. */
+export function resetHistorySessionIndex() {
+    snapshot = { items: [], updatedAt: 0 };
+    refresher = null;
+    refreshInFlight = false;
+}
+//# sourceMappingURL=session-history-index.js.map

package/dist/web/session-history-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-history-index.js","sourceRoot":"","sources":["../../src/web/session-history-index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAwBH,wFAAwF;AACxF,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAE3C,6FAA6F;AAC7F,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAQ3C,IAAI,QAAQ,GAAgC,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;AACxE,IAAI,SAAS,GAAiC,IAAI,CAAC;AACnD,IAAI,eAAe,GAAG,KAAK,CAAC;AAY5B;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAA2B,EAC3B,SAA0C,EAC1C,OAAoB;IAEpB,MAAM,KAAK,GAA8B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,KAAK,CAAC,MAAM,IAAI,uBAAuB;YAAE,MAAM;QACnD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU;YAAE,SAAS;QACnC,KAAK,CAAC,IAAI,CAAC;YACT,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,IAAI;YACJ,UAAU;YACV,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,SAAS,EAAE,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC;YAC/C,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACjC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,sBAAsB,CAAC,KAAgC,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACvF,QAAQ,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;AAChF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,0BAA0B,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,GAAG,oBAAoB;IACvF,OAAO,QAAQ,CAAC,SAAS,KAAK,CAAC,IAAI,GAAG,GAAG,QAAQ,CAAC,SAAS,GAAG,KAAK,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,EAAgC;IACvE,SAAS,GAAG,EAAE,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC7D,IAAI,eAAe,IAAI,CAAC,SAAS,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC;QAAE,OAAO;IAC9E,eAAe,GAAG,IAAI,CAAC;IACvB,KAAK,SAAS,EAAE;SACb,KAAK,CAAC,GAAG,EAAE;QACV,mFAAmF;IACrF,CAAC,CAAC;SACD,OAAO,CAAC,GAAG,EAAE;QACZ,eAAe,GAAG,KAAK,CAAC;IAC1B,CAAC,CAAC,CAAC;AACP,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,wBAAwB;IACtC,QAAQ,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACvC,SAAS,GAAG,IAAI,CAAC;IACjB,eAAe,GAAG,KAAK,CAAC;AAC1B,CAAC"}

package/dist/web/voice-stream.d.ts

@@ -0,0 +1,96 @@
+/**
+ * @fileoverview Upstream half of Claude voice dictation: one browser recording
+ * relayed to the speech-to-text service Claude Code's own `/voice` mode uses.
+ *
+ * The browser cannot talk to that service directly — it would need the Claude
+ * OAuth bearer token in page JavaScript, and the endpoint is not CORS-open — so
+ * Codeman sits in the middle and is the only thing that ever holds the token.
+ * See `docs/claude-voice-plan.md` for the protocol table this implements.
+ *
+ * Wire contract (mirrors the CLI's `connectVoiceStream`):
+ * - Query pins the audio format: linear16 PCM, 16 kHz, mono. The browser worklet
+ *   produces exactly that; a mismatch transcribes as silence or noise, never an error.
+ * - `{"type":"KeepAlive"}` on open and every 8s, or upstream drops the socket
+ *   between utterances.
+ * - Audio frames go up as raw binary.
+ * - Downstream, `TranscriptText`/`TranscriptInterim` carry the RUNNING transcript
+ *   (each frame supersedes the previous one — they are not deltas to concatenate),
+ *   and `TranscriptEndpoint` promotes the pending interim to final.
+ * - `{"type":"CloseStream"}` finalizes; the endpoint frame that follows is the
+ *   last transcript, so `finalize()` waits briefly for it rather than closing.
+ *
+ * The pure builders at the top are unit-tested; `VoiceStreamRelay` owns the socket,
+ * the keepalive timer and the lifetime cap.
+ */
+export interface VoiceStreamParams {
+    /** BCP-47-ish language hint. Anything unusable falls back to 'en'. */
+    language?: string;
+    /** Domain vocabulary sent as a recognition hint. */
+    keyterms?: string[];
+}
+/**
+ * Collapse keyterms into the single ASCII header value upstream accepts.
+ *
+ * Commas separate terms, so a comma INSIDE a term would silently split it; it is
+ * replaced with a space rather than dropped. Non-ASCII is stripped because the
+ * value travels as an HTTP header, where anything outside the visible ASCII range
+ * is not portable. Deduped and truncated on a term boundary so a long list degrades
+ * to a shorter list instead of a mangled final term.
+ */
+export declare function sanitizeKeyterms(terms: string[]): string;
+/** Normalize a language hint to what the endpoint expects, defaulting to English. */
+export declare function normalizeVoiceLanguage(language: string | undefined): string;
+/** Full upstream URL with the audio format pinned. */
+export declare function buildVoiceStreamUrl(params?: VoiceStreamParams, env?: NodeJS.ProcessEnv): string;
+/**
+ * Upstream headers. Codeman identifies itself honestly (it is not the CLI), which
+ * the endpoint accepts; the bearer token is the only thing that authenticates.
+ */
+export declare function buildVoiceStreamHeaders(accessToken: string, appVersion: string, keyterms?: string[]): Record<string, string>;
+export interface VoiceStreamRelayOptions extends VoiceStreamParams {
+    accessToken: string;
+    appVersion: string;
+    /** Called once the upstream socket is open and audio may flow. */
+    onReady: () => void;
+    /** Running transcript. `final` marks the utterance as complete. */
+    onTranscript: (text: string, final: boolean) => void;
+    /** Human-readable failure. The relay is dead (or dying) by the time this fires. */
+    onError: (message: string) => void;
+    /** Terminal: the relay released its socket and timers. Fires exactly once. */
+    onClose: () => void;
+}
+/**
+ * One dictation, upstream. Owns exactly one WebSocket and dies with it: every
+ * exit path (error, upstream close, lifetime cap, caller close) funnels through
+ * `_teardown()`, which fires `onClose` once and clears both timers.
+ */
+export declare class VoiceStreamRelay {
+    private readonly opts;
+    private ws;
+    private keepAlive;
+    private lifetimeTimer;
+    private finalizeTimer;
+    private closed;
+    private finalizing;
+    /** Latest interim, held so a close/finalize can promote it to final. */
+    private pendingTranscript;
+    constructor(opts: VoiceStreamRelayOptions);
+    /** Open the upstream socket. Safe to call once; a second call is a no-op. */
+    connect(): void;
+    /** Relay one raw PCM16 frame upstream. Dropped after finalize, as upstream ignores it. */
+    sendAudio(chunk: Buffer): void;
+    /**
+     * Ask upstream for the final transcript. The endpoint frame usually follows
+     * within a few hundred ms; the timer is the backstop so a silent upstream still
+     * yields whatever interim we already have instead of hanging the caller.
+     */
+    finalize(): void;
+    /** Terminal shutdown. Idempotent. */
+    close(): void;
+    private handleMessage;
+    /** Emit the held interim as final, exactly once per utterance. */
+    private promotePending;
+    private safeSend;
+    private teardown;
+}
+//# sourceMappingURL=voice-stream.d.ts.map

package/dist/web/voice-stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"voice-stream.d.ts","sourceRoot":"","sources":["../../src/web/voice-stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAiBH,MAAM,WAAW,iBAAiB;IAChC,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAkBxD;AAED,qFAAqF;AACrF,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAI3E;AAED,sDAAsD;AACtD,wBAAgB,mBAAmB,CAAC,MAAM,GAAE,iBAAsB,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAYhH;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,QAAQ,GAAE,MAAM,EAAO,GACtB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUxB;AAED,MAAM,WAAW,uBAAwB,SAAQ,iBAAiB;IAChE,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,mEAAmE;IACnE,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACrD,mFAAmF;IACnF,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,8EAA8E;IAC9E,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED;;;;GAIG;AACH,qBAAa,gBAAgB;IAUf,OAAO,CAAC,QAAQ,CAAC,IAAI;IATjC,OAAO,CAAC,EAAE,CAA0B;IACpC,OAAO,CAAC,SAAS,CAA+C;IAChE,OAAO,CAAC,aAAa,CAA8C;IACnE,OAAO,CAAC,aAAa,CAA8C;IACnE,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,UAAU,CAAS;IAC3B,wEAAwE;IACxE,OAAO,CAAC,iBAAiB,CAAM;gBAEF,IAAI,EAAE,uBAAuB;IAE1D,6EAA6E;IAC7E,OAAO,IAAI,IAAI;IA8Cf,0FAA0F;IAC1F,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAM9B;;;;OAIG;IACH,QAAQ,IAAI,IAAI;IAehB,qCAAqC;IACrC,KAAK,IAAI,IAAI;IAab,OAAO,CAAC,aAAa;IAmCrB,kEAAkE;IAClE,OAAO,CAAC,cAAc;IAOtB,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,QAAQ;CAWjB"}

package/dist/web/voice-stream.js

@@ -0,0 +1,268 @@
+/**
+ * @fileoverview Upstream half of Claude voice dictation: one browser recording
+ * relayed to the speech-to-text service Claude Code's own `/voice` mode uses.
+ *
+ * The browser cannot talk to that service directly — it would need the Claude
+ * OAuth bearer token in page JavaScript, and the endpoint is not CORS-open — so
+ * Codeman sits in the middle and is the only thing that ever holds the token.
+ * See `docs/claude-voice-plan.md` for the protocol table this implements.
+ *
+ * Wire contract (mirrors the CLI's `connectVoiceStream`):
+ * - Query pins the audio format: linear16 PCM, 16 kHz, mono. The browser worklet
+ *   produces exactly that; a mismatch transcribes as silence or noise, never an error.
+ * - `{"type":"KeepAlive"}` on open and every 8s, or upstream drops the socket
+ *   between utterances.
+ * - Audio frames go up as raw binary.
+ * - Downstream, `TranscriptText`/`TranscriptInterim` carry the RUNNING transcript
+ *   (each frame supersedes the previous one — they are not deltas to concatenate),
+ *   and `TranscriptEndpoint` promotes the pending interim to final.
+ * - `{"type":"CloseStream"}` finalizes; the endpoint frame that follows is the
+ *   last transcript, so `finalize()` waits briefly for it rather than closing.
+ *
+ * The pure builders at the top are unit-tested; `VoiceStreamRelay` owns the socket,
+ * the keepalive timer and the lifetime cap.
+ */
+import WebSocket from 'ws';
+import { AUDIO_CHANNELS, AUDIO_SAMPLE_RATE, FINALIZE_TIMEOUT_MS, KEEPALIVE_INTERVAL_MS, MAX_KEYTERMS_HEADER_CHARS, MAX_STREAM_MS, VOICE_STREAM_PATH, voiceStreamBase, } from '../config/voice.js';
+const KEEPALIVE_FRAME = '{"type":"KeepAlive"}';
+const CLOSE_STREAM_FRAME = '{"type":"CloseStream"}';
+/**
+ * Collapse keyterms into the single ASCII header value upstream accepts.
+ *
+ * Commas separate terms, so a comma INSIDE a term would silently split it; it is
+ * replaced with a space rather than dropped. Non-ASCII is stripped because the
+ * value travels as an HTTP header, where anything outside the visible ASCII range
+ * is not portable. Deduped and truncated on a term boundary so a long list degrades
+ * to a shorter list instead of a mangled final term.
+ */
+export function sanitizeKeyterms(terms) {
+    const seen = new Set();
+    const out = [];
+    let length = 0;
+    for (const term of terms) {
+        const cleaned = term
+            .replace(/,/g, ' ')
+            .replace(/[^\x20-\x7E]/g, '')
+            .replace(/\s+/g, ' ')
+            .trim();
+        if (!cleaned || seen.has(cleaned))
+            continue;
+        const cost = cleaned.length + (out.length > 0 ? 1 : 0);
+        if (length + cost > MAX_KEYTERMS_HEADER_CHARS)
+            break;
+        seen.add(cleaned);
+        out.push(cleaned);
+        length += cost;
+    }
+    return out.join(',');
+}
+/** Normalize a language hint to what the endpoint expects, defaulting to English. */
+export function normalizeVoiceLanguage(language) {
+    const trimmed = (language ?? '').trim();
+    if (!trimmed || !/^[a-zA-Z]{2,3}(-[a-zA-Z0-9]{2,8})?$|^multi$/.test(trimmed))
+        return 'en';
+    return trimmed;
+}
+/** Full upstream URL with the audio format pinned. */
+export function buildVoiceStreamUrl(params = {}, env = process.env) {
+    const query = new URLSearchParams({
+        encoding: 'linear16',
+        sample_rate: String(AUDIO_SAMPLE_RATE),
+        channels: String(AUDIO_CHANNELS),
+        endpointing_ms: '300',
+        utterance_end_ms: '1000',
+        language: normalizeVoiceLanguage(params.language),
+        use_conversation_engine: 'true',
+        stt_provider: 'deepgram-nova3',
+    });
+    return `${voiceStreamBase(env)}${VOICE_STREAM_PATH}?${query.toString()}`;
+}
+/**
+ * Upstream headers. Codeman identifies itself honestly (it is not the CLI), which
+ * the endpoint accepts; the bearer token is the only thing that authenticates.
+ */
+export function buildVoiceStreamHeaders(accessToken, appVersion, keyterms = []) {
+    const headers = {
+        Authorization: `Bearer ${accessToken}`,
+        'User-Agent': `codeman/${appVersion} (voice-bridge)`,
+        'x-app': 'codeman',
+        'anthropic-client-platform': 'codeman_web',
+    };
+    const sanitized = sanitizeKeyterms(keyterms);
+    if (sanitized)
+        headers['x-config-keyterms'] = sanitized;
+    return headers;
+}
+/**
+ * One dictation, upstream. Owns exactly one WebSocket and dies with it: every
+ * exit path (error, upstream close, lifetime cap, caller close) funnels through
+ * `_teardown()`, which fires `onClose` once and clears both timers.
+ */
+export class VoiceStreamRelay {
+    opts;
+    ws = null;
+    keepAlive = null;
+    lifetimeTimer = null;
+    finalizeTimer = null;
+    closed = false;
+    finalizing = false;
+    /** Latest interim, held so a close/finalize can promote it to final. */
+    pendingTranscript = '';
+    constructor(opts) {
+        this.opts = opts;
+    }
+    /** Open the upstream socket. Safe to call once; a second call is a no-op. */
+    connect() {
+        if (this.ws || this.closed)
+            return;
+        const url = buildVoiceStreamUrl({ language: this.opts.language, keyterms: this.opts.keyterms });
+        const ws = new WebSocket(url, {
+            headers: buildVoiceStreamHeaders(this.opts.accessToken, this.opts.appVersion, this.opts.keyterms ?? []),
+        });
+        this.ws = ws;
+        ws.on('open', () => {
+            // Ping immediately: the gap between upgrade and the browser's first audio
+            // frame is long enough (mic permission, worklet boot) for upstream to drop us.
+            this.safeSend(KEEPALIVE_FRAME);
+            this.keepAlive = setInterval(() => this.safeSend(KEEPALIVE_FRAME), KEEPALIVE_INTERVAL_MS);
+            this.lifetimeTimer = setTimeout(() => {
+                this.opts.onError('Voice stream reached its maximum length');
+                this.close();
+            }, MAX_STREAM_MS);
+            this.opts.onReady();
+        });
+        ws.on('message', (raw) => this.handleMessage(String(raw)));
+        // An upgrade rejection never reaches 'open', so its status is the only signal
+        // that the token was refused rather than the network being down.
+        ws.on('unexpected-response', (_req, res) => {
+            const status = res.statusCode ?? 0;
+            res.resume();
+            this.opts.onError(status === 401 || status === 403
+                ? 'Claude rejected the voice credentials. Run a Claude session to refresh your login.'
+                : `Voice service refused the connection (HTTP ${status})`);
+            this.teardown();
+        });
+        ws.on('error', (err) => {
+            if (this.closed)
+                return;
+            this.opts.onError(`Voice stream error: ${err.message}`);
+        });
+        ws.on('close', () => {
+            this.promotePending();
+            this.teardown();
+        });
+    }
+    /** Relay one raw PCM16 frame upstream. Dropped after finalize, as upstream ignores it. */
+    sendAudio(chunk) {
+        if (this.finalizing || this.closed)
+            return;
+        if (this.ws?.readyState !== WebSocket.OPEN)
+            return;
+        this.ws.send(chunk);
+    }
+    /**
+     * Ask upstream for the final transcript. The endpoint frame usually follows
+     * within a few hundred ms; the timer is the backstop so a silent upstream still
+     * yields whatever interim we already have instead of hanging the caller.
+     */
+    finalize() {
+        if (this.finalizing || this.closed)
+            return;
+        this.finalizing = true;
+        if (this.ws?.readyState !== WebSocket.OPEN) {
+            this.promotePending();
+            this.close();
+            return;
+        }
+        this.safeSend(CLOSE_STREAM_FRAME);
+        this.finalizeTimer = setTimeout(() => {
+            this.promotePending();
+            this.close();
+        }, FINALIZE_TIMEOUT_MS);
+    }
+    /** Terminal shutdown. Idempotent. */
+    close() {
+        if (this.closed)
+            return;
+        const ws = this.ws;
+        this.teardown();
+        if (ws && (ws.readyState === WebSocket.OPEN || ws.readyState === WebSocket.CONNECTING)) {
+            try {
+                ws.close();
+            }
+            catch {
+                /* already closing */
+            }
+        }
+    }
+    handleMessage(raw) {
+        let msg;
+        try {
+            msg = JSON.parse(raw);
+        }
+        catch {
+            return;
+        }
+        switch (msg.type) {
+            case 'TranscriptText':
+            case 'TranscriptInterim': {
+                // Each frame is the whole running transcript, not a delta.
+                if (typeof msg.data === 'string' && msg.data) {
+                    this.pendingTranscript = msg.data;
+                    this.opts.onTranscript(msg.data, false);
+                }
+                break;
+            }
+            case 'TranscriptEndpoint': {
+                this.promotePending();
+                if (this.finalizing)
+                    this.close();
+                break;
+            }
+            case 'TranscriptError': {
+                this.opts.onError(msg.description || msg.error_code || 'Transcription failed');
+                break;
+            }
+            case 'error': {
+                this.opts.onError(msg.message || 'Voice service error');
+                break;
+            }
+            default:
+                break;
+        }
+    }
+    /** Emit the held interim as final, exactly once per utterance. */
+    promotePending() {
+        if (!this.pendingTranscript)
+            return;
+        const text = this.pendingTranscript;
+        this.pendingTranscript = '';
+        this.opts.onTranscript(text, true);
+    }
+    safeSend(frame) {
+        if (this.ws?.readyState !== WebSocket.OPEN)
+            return;
+        try {
+            this.ws.send(frame);
+        }
+        catch {
+            /* socket died between the check and the send */
+        }
+    }
+    teardown() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        if (this.keepAlive)
+            clearInterval(this.keepAlive);
+        if (this.lifetimeTimer)
+            clearTimeout(this.lifetimeTimer);
+        if (this.finalizeTimer)
+            clearTimeout(this.finalizeTimer);
+        this.keepAlive = null;
+        this.lifetimeTimer = null;
+        this.finalizeTimer = null;
+        this.opts.onClose();
+    }
+}
+//# sourceMappingURL=voice-stream.js.map

package/dist/web/voice-stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"voice-stream.js","sourceRoot":"","sources":["../../src/web/voice-stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,SAAS,MAAM,IAAI,CAAC;AAC3B,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,yBAAyB,EACzB,aAAa,EACb,iBAAiB,EACjB,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAC/C,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AASpD;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAe;IAC9C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI;aACjB,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;aAClB,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;aAC5B,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;aACpB,IAAI,EAAE,CAAC;QACV,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,MAAM,GAAG,IAAI,GAAG,yBAAyB;YAAE,MAAM;QACrD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClB,MAAM,IAAI,IAAI,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,sBAAsB,CAAC,QAA4B;IACjE,MAAM,OAAO,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,OAAO,IAAI,CAAC,6CAA6C,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1F,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,mBAAmB,CAAC,SAA4B,EAAE,EAAE,MAAyB,OAAO,CAAC,GAAG;IACtG,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC;QAChC,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,MAAM,CAAC,iBAAiB,CAAC;QACtC,QAAQ,EAAE,MAAM,CAAC,cAAc,CAAC;QAChC,cAAc,EAAE,KAAK;QACrB,gBAAgB,EAAE,MAAM;QACxB,QAAQ,EAAE,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjD,uBAAuB,EAAE,MAAM;QAC/B,YAAY,EAAE,gBAAgB;KAC/B,CAAC,CAAC;IACH,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,iBAAiB,IAAI,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,WAAmB,EACnB,UAAkB,EAClB,WAAqB,EAAE;IAEvB,MAAM,OAAO,GAA2B;QACtC,aAAa,EAAE,UAAU,WAAW,EAAE;QACtC,YAAY,EAAE,WAAW,UAAU,iBAAiB;QACpD,OAAO,EAAE,SAAS;QAClB,2BAA2B,EAAE,aAAa;KAC3C,CAAC;IACF,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,SAAS;QAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC;IACxD,OAAO,OAAO,CAAC;AACjB,CAAC;AAeD;;;;GAIG;AACH,MAAM,OAAO,gBAAgB;IAUE;IATrB,EAAE,GAAqB,IAAI,CAAC;IAC5B,SAAS,GAA0C,IAAI,CAAC;IACxD,aAAa,GAAyC,IAAI,CAAC;IAC3D,aAAa,GAAyC,IAAI,CAAC;IAC3D,MAAM,GAAG,KAAK,CAAC;IACf,UAAU,GAAG,KAAK,CAAC;IAC3B,wEAAwE;IAChE,iBAAiB,GAAG,EAAE,CAAC;IAE/B,YAA6B,IAA6B;QAA7B,SAAI,GAAJ,IAAI,CAAyB;IAAG,CAAC;IAE9D,6EAA6E;IAC7E,OAAO;QACL,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACnC,MAAM,GAAG,GAAG,mBAAmB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChG,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,GAAG,EAAE;YAC5B,OAAO,EAAE,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;SACxG,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QAEb,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACjB,0EAA0E;YAC1E,+EAA+E;YAC/E,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;YAC/B,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,qBAAqB,CAAC,CAAC;YAC1F,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;gBACnC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC;gBAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,CAAC,EAAE,aAAa,CAAC,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAE3D,8EAA8E;QAC9E,iEAAiE;QACjE,EAAE,CAAC,EAAE,CAAC,qBAAqB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACzC,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;YACnC,GAAG,CAAC,MAAM,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,OAAO,CACf,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;gBAC9B,CAAC,CAAC,oFAAoF;gBACtF,CAAC,CAAC,8CAA8C,MAAM,GAAG,CAC5D,CAAC;YACF,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAC5B,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO;YACxB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClB,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,0FAA0F;IAC1F,SAAS,CAAC,KAAa;QACrB,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QAC3C,IAAI,IAAI,CAAC,EAAE,EAAE,UAAU,KAAK,SAAS,CAAC,IAAI;YAAE,OAAO;QACnD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACH,QAAQ;QACN,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QAC3C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,IAAI,CAAC,EAAE,EAAE,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAClC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;YACnC,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC1B,CAAC;IAED,qCAAqC;IACrC,KAAK;QACH,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;YACvF,IAAI,CAAC;gBACH,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,qBAAqB;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,GAAW;QAC/B,IAAI,GAAkG,CAAC;QACvG,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,KAAK,gBAAgB,CAAC;YACtB,KAAK,mBAAmB,CAAC,CAAC,CAAC;gBACzB,2DAA2D;gBAC3D,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;oBAC7C,IAAI,CAAC,iBAAiB,GAAG,GAAG,CAAC,IAAI,CAAC;oBAClC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC1C,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,oBAAoB,CAAC,CAAC,CAAC;gBAC1B,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,IAAI,IAAI,CAAC,UAAU;oBAAE,IAAI,CAAC,KAAK,EAAE,CAAC;gBAClC,MAAM;YACR,CAAC;YACD,KAAK,iBAAiB,CAAC,CAAC,CAAC;gBACvB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,UAAU,IAAI,sBAAsB,CAAC,CAAC;gBAC/E,MAAM;YACR,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,qBAAqB,CAAC,CAAC;gBACxD,MAAM;YACR,CAAC;YACD;gBACE,MAAM;QACV,CAAC;IACH,CAAC;IAED,kEAAkE;IAC1D,cAAc;QACpB,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAAE,OAAO;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC;QACpC,IAAI,CAAC,iBAAiB,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAEO,QAAQ,CAAC,KAAa;QAC5B,IAAI,IAAI,CAAC,EAAE,EAAE,UAAU,KAAK,SAAS,CAAC,IAAI;YAAE,OAAO;QACnD,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;IACH,CAAC;IAEO,QAAQ;QACd,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,IAAI,CAAC,SAAS;YAAE,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,aAAa;YAAE,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,aAAa;YAAE,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aicodeman",
-  "version": "1.16.2",
+  "version": "1.16.4",
   "description": "Mission control for AI coding agents - run 20 autonomous agents with real-time monitoring and session persistence",
   "type": "module",
   "main": "dist/index.js",