alvin-bot 4.18.5 → 4.19.0

package/CHANGELOG.md

@@ -2,6 +2,48 @@
 
 All notable changes to Alvin Bot are documented here.
 
+## [4.19.0] — 2026-04-24
+
+### 🧭 Feature: per-workspace runtime overrides (effort · provider · voice · temperature · toolset)
+
+Workspaces could already override `model` and `cwd`. v4.19.0 extends the YAML frontmatter with five more runtime fields that take effect automatically the moment a user runs `/workspace <name>`.
+
+**New workspace frontmatter fields** (`~/.alvin-bot/workspaces/<name>.md`):
+
+```yaml
+---
+purpose: my-project
+cwd: ~/path/to/workdir
+model: opus              # already existed
+effort: high             # NEW — low | medium | high
+provider: claude-sdk     # NEW — registry key; fallback chain still applies
+voice: iP95p4xoKVk53GoZ742B   # NEW — ElevenLabs voice ID, or Edge-TTS voice name (e.g. "en-US-JennyNeural")
+temperature: 0.3         # NEW — 0–2 sampling temperature
+toolset: research        # NEW — full (default) | readonly | research
+---
+Persona body continues here...
+```
+
+**Toolset presets** (map to concrete `allowedTools` lists via the new exported `toolsetToAllowedTools` helper):
+- `full` — provider default (`Read, Write, Edit, Bash, Glob, Grep, WebSearch, WebFetch, Task` + MCP)
+- `readonly` — `Read, Glob, Grep, WebSearch, WebFetch` (no Write/Edit/Bash)
+- `research` — `Read, WebSearch, WebFetch, Grep` (pure research mode)
+
+**Implementation:**
+
+- `src/services/workspaces.ts` — `Workspace` interface + `parseFrontmatter` extended; numeric parsing + enum validation so a malformed value is silently dropped and the session-default wins.
+- `src/handlers/message.ts` + `src/handlers/platform-message.ts` — at query-assembly time, every workspace-set field overrides the equivalent session/registry default exactly for this one query. Nothing sticky leaks across workspace switches.
+- `src/providers/registry.ts` — `queryWithFallback()` gains optional `providerOverride`. When supplied AND registered, it becomes primary for that query; fallback chain still applies, and the globally active provider joins the chain as a last-resort backup so availability drops still degrade gracefully.
+- `src/providers/claude-sdk-provider.ts` — passes `options.temperature` through to the Agent SDK when set.
+- `src/services/voice.ts` — `textToSpeech(text, voice?)` — optional second arg; picked up from `workspace.voice` in Telegram handler's voice-reply path. Works for both ElevenLabs (Voice ID) and Edge TTS (Voice Name like `de-DE-ConradNeural`).
+
+**Net effect:** Each workspace becomes a self-contained runtime profile. For example:
+- A `prep` workspace with `model: opus · effort: high · temperature: 0.3 · voice: en-US-JennyNeural` for polished long-form work;
+- A `research` workspace with `toolset: research · model: haiku · effort: low · temperature: 0.7` for cheap-and-fast web spelunking;
+- A `sensitive` workspace with `toolset: readonly · provider: claude-sdk` so the agent cannot accidentally `Write` or `Bash` inside the cwd.
+
+No data migration required — existing workspace files without the new fields keep working identically.
+
 ## [4.18.5] — 2026-04-23
 
 ### 🐛 Fix: auto-reset stale SDK sessionId on empty-stream detection

package/dist/handlers/message.js

@@ -381,14 +381,23 @@ export async function handleMessage(ctx) {
                 }
             }
         }
+        // v4.19.0 — Per-workspace runtime overrides. Each is only applied when
+        // the workspace explicitly set it; otherwise the session/provider default
+        // wins. Toolset is mapped to a concrete allowedTools list via
+        // toolsetToAllowedTools(); providers that ignore allowedTools (Ollama etc.)
+        // just drop it.
+        const { toolsetToAllowedTools } = await import("../services/workspaces.js");
+        const wsAllowed = toolsetToAllowedTools(workspace.toolset);
         const queryOpts = {
             prompt: bridgedPrompt,
             systemPrompt,
             workingDir: session.workingDir,
-            effort: session.effort,
+            effort: workspace.effort ?? session.effort,
             // v4.15 — Per-workspace model override (optional YAML `model:` field).
-            // When unset, falls through to the globally active provider's model.
+            // v4.19 — ditto for temperature and toolset-derived allowedTools.
             ...(workspace.model ? { model: workspace.model } : {}),
+            ...(workspace.temperature !== undefined ? { temperature: workspace.temperature } : {}),
+            ...(wsAllowed ? { allowedTools: wsAllowed } : {}),
             abortSignal: session.abortController.signal,
             // User's UI locale — registry uses it to localize failure messages.
             locale: session.language,
@@ -420,7 +429,7 @@ export async function handleMessage(ctx) {
         // readable description (which only appears in the tool_use input,
         // not in the tool_result text). See Fix #17 Stage 2.
         let lastAgentToolUseInput;
-        for await (const chunk of registry.queryWithFallback(queryOpts)) {
+        for await (const chunk of registry.queryWithFallback(queryOpts, workspace.provider)) {
             // v4.12.1 — Update pending-sync-task state FIRST so the timer's
             // next reset picks up the new state. This ordering is load-bearing:
             // reversing it means the timer rearms with stale state. A sync
@@ -608,7 +617,7 @@ export async function handleMessage(ctx) {
         if (session.voiceReply && finalText.trim()) {
             try {
                 await ctx.api.sendChatAction(ctx.chat.id, "upload_voice");
-                const audioPath = await textToSpeech(finalText);
+                const audioPath = await textToSpeech(finalText, workspace.voice);
                 await ctx.replyWithVoice(new InputFile(fs.readFileSync(audioPath), "response.mp3"));
                 fs.unlink(audioPath, () => { });
             }

package/dist/handlers/platform-message.js

@@ -164,14 +164,19 @@ export async function handlePlatformMessage(msg, adapter) {
         // in the system prompt for this query.
         const isFirstSDKTurn = isSDK && session.sessionId === null;
         const systemPrompt = (await buildSmartSystemPrompt(isSDK, session.language, fullText, msg.chatId, isFirstSDKTurn, workspace.systemPromptOverride)) + skillContext;
+        // v4.19.0 — Per-workspace runtime overrides (model/effort/temperature/toolset).
+        const { toolsetToAllowedTools } = await import("../services/workspaces.js");
+        const wsAllowed = toolsetToAllowedTools(workspace.toolset);
         const queryOpts = {
             prompt: fullText,
             systemPrompt,
             workingDir: session.workingDir,
-            effort: session.effort,
+            effort: workspace.effort ?? session.effort,
             // v4.15 — Per-workspace model override (optional YAML `model:` field).
-            // When unset, falls through to the globally active provider's model.
+            // v4.19 — ditto for temperature and toolset-derived allowedTools.
             ...(workspace.model ? { model: workspace.model } : {}),
+            ...(workspace.temperature !== undefined ? { temperature: workspace.temperature } : {}),
+            ...(wsAllowed ? { allowedTools: wsAllowed } : {}),
             sessionId: isSDK ? session.sessionId : null,
             history: !isSDK ? session.history : undefined,
             // v4.14 — Expose alvin_dispatch_agent MCP tool on non-Telegram
@@ -190,7 +195,7 @@ export async function handlePlatformMessage(msg, adapter) {
         if (!isSDK) {
             addToHistory(sessionKey, { role: "user", content: fullText });
         }
-        for await (const chunk of registry.queryWithFallback(queryOpts)) {
+        for await (const chunk of registry.queryWithFallback(queryOpts, workspace.provider)) {
             switch (chunk.type) {
                 case "text":
                     finalText = chunk.text || "";

package/dist/providers/claude-sdk-provider.js

@@ -192,6 +192,9 @@ export class ClaudeSDKProvider {
                     maxTurns: 50,
                     betas: ["context-1m-2025-08-07"],
                     ...(modelOverride ? { model: modelOverride } : {}),
+                    // v4.19.0 — per-workspace temperature override. Passed through to
+                    // the Agent SDK; providers that don't use it just drop it.
+                    ...(typeof options.temperature === "number" ? { temperature: options.temperature } : {}),
                     // Prefer Haiku as fallback on rate-limit/overload — cheap and
                     // fast, keeps the bot responsive when the primary tier is
                     // throttled. Omitted when the primary IS Haiku (SDK requires

package/dist/providers/registry.js

@@ -109,8 +109,18 @@ export class ProviderRegistry {
      *    and asking the user to retry. The failover is only silent when
      *    the failing provider hadn't committed any visible text yet.
      */
-    async *queryWithFallback(options) {
-        const chain = [this.activeKey, ...this.fallbackKeys.filter(k => k !== this.activeKey)];
+    async *queryWithFallback(options, providerOverride) {
+        // v4.19.0 — Per-workspace provider override. If supplied AND registered,
+        // it becomes the primary for this query; fallbacks still apply so the
+        // bot can degrade gracefully if the override provider is unavailable.
+        const primary = providerOverride && this.providers.has(providerOverride)
+            ? providerOverride
+            : this.activeKey;
+        const chain = [primary, ...this.fallbackKeys.filter(k => k !== primary)];
+        // Also include activeKey as a last-resort fallback if override was used
+        if (providerOverride && !chain.includes(this.activeKey)) {
+            chain.push(this.activeKey);
+        }
         const errors = [];
         for (const key of chain) {
             const provider = this.providers.get(key);

package/dist/services/voice.js

@@ -55,7 +55,16 @@ export async function transcribeAudio(audioPath) {
     });
 }
 // ── Text-to-Speech (Edge TTS via node-edge-tts) ────────
-export async function textToSpeech(text) {
+/**
+ * Convert text to speech and return path to the MP3 file.
+ *
+ * @param text   The text to synthesize.
+ * @param voice  Optional voice ID / name override (v4.19.0 — per-workspace).
+ *               For ElevenLabs this is the Voice ID, for Edge TTS the Voice Name
+ *               (e.g. "de-DE-ConradNeural", "en-US-JennyNeural"). When undefined,
+ *               the config default is used.
+ */
+export async function textToSpeech(text, voice) {
     // Strip markdown formatting for cleaner TTS
     let cleanText = text
         .replace(/```[\s\S]*?```/g, " Code block skipped. ")
@@ -77,7 +86,9 @@ export async function textToSpeech(text) {
     if (config.ttsProvider === "elevenlabs" && config.elevenlabs.apiKey) {
         try {
             const { elevenLabsTTS } = await import("./elevenlabs.js");
-            return await elevenLabsTTS(cleanText);
+            // v4.19.0 — per-workspace voice override. When unset, elevenLabsTTS falls
+            // back to config.elevenlabs.voiceId.
+            return await elevenLabsTTS(cleanText, voice);
         }
         catch (err) {
             console.warn("ElevenLabs TTS failed, falling back to Edge TTS:", err instanceof Error ? err.message : err);
@@ -86,8 +97,9 @@ export async function textToSpeech(text) {
     // Edge TTS (default / fallback)
     const outputPath = path.join(TEMP_DIR, `tts_${Date.now()}.mp3`);
     const tts = new EdgeTTS({
-        voice: "de-DE-ConradNeural",
-        lang: "de-DE",
+        // v4.19.0 — allow workspace override; default German male.
+        voice: voice || "de-DE-ConradNeural",
+        lang: voice && voice.match(/^[a-z]{2}-[A-Z]{2}/) ? voice.slice(0, 5) : "de-DE",
         outputFormat: "audio-24khz-48kbitrate-mono-mp3",
     });
     await tts.ttsPromise(cleanText, outputPath);

package/dist/services/workspaces.js

@@ -32,6 +32,16 @@ import os from "os";
 import path from "path";
 import { WORKSPACES_DIR } from "../paths.js";
 import { config } from "../config.js";
+/** Map a toolset preset to the concrete allowedTools list. */
+export function toolsetToAllowedTools(toolset) {
+    if (!toolset || toolset === "full")
+        return undefined; // undefined = use provider default
+    if (toolset === "readonly")
+        return ["Read", "Glob", "Grep", "WebSearch", "WebFetch"];
+    if (toolset === "research")
+        return ["Read", "WebSearch", "WebFetch", "Grep"];
+    return undefined;
+}
 const registry = new Map();
 /** Expand ~ at the start of a path to the user's home directory. */
 function expandHome(p) {
@@ -100,6 +110,18 @@ function readWorkspaceFile(filePath, name) {
         const color = typeof fm.color === "string" ? fm.color : undefined;
         const emoji = typeof fm.emoji === "string" ? fm.emoji : undefined;
         const model = typeof fm.model === "string" && fm.model.trim() ? fm.model.trim() : undefined;
+        // v4.19.0 — per-workspace runtime overrides
+        const effortRaw = typeof fm.effort === "string" ? fm.effort.trim().toLowerCase() : "";
+        const effort = (effortRaw === "low" || effortRaw === "medium" || effortRaw === "high")
+            ? effortRaw : undefined;
+        const provider = typeof fm.provider === "string" && fm.provider.trim() ? fm.provider.trim() : undefined;
+        const voice = typeof fm.voice === "string" && fm.voice.trim() ? fm.voice.trim() : undefined;
+        const temperatureRaw = typeof fm.temperature === "string" ? parseFloat(fm.temperature) : (typeof fm.temperature === "number" ? fm.temperature : NaN);
+        const temperature = Number.isFinite(temperatureRaw) && temperatureRaw >= 0 && temperatureRaw <= 2
+            ? temperatureRaw : undefined;
+        const toolsetRaw = typeof fm.toolset === "string" ? fm.toolset.trim().toLowerCase() : "";
+        const toolset = (toolsetRaw === "full" || toolsetRaw === "readonly" || toolsetRaw === "research")
+            ? toolsetRaw : undefined;
         const channels = Array.isArray(fm.channels)
             ? fm.channels.filter((c) => typeof c === "string")
             : [];
@@ -111,6 +133,11 @@ function readWorkspaceFile(filePath, name) {
             emoji,
             channels,
             model,
+            effort,
+            provider,
+            voice,
+            temperature,
+            toolset,
             systemPromptOverride: body.trim(),
         };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "alvin-bot",
-  "version": "4.18.5",
+  "version": "4.19.0",
   "description": "Alvin Bot \u2014 Your personal AI agent on Telegram, WhatsApp, Discord, Signal, and Web.",
   "type": "module",
   "main": "dist/index.js",