bosun 0.36.2 → 0.36.4

package/monitor.mjs

@@ -59,7 +59,7 @@ import {
   generateWeeklyAgentWorkReport,
   shouldSendWeeklyReport,
 } from "./agent-work-report.mjs";
-import { PRCleanupDaemon } from "./pr-cleanup-daemon.mjs";
+
 import {
   execPrimaryPrompt,
   initPrimaryAgent,
@@ -96,11 +96,7 @@ import {
 } from "./container-runner.mjs";
 import { ensureCodexConfig, printConfigSummary } from "./codex-config.mjs";
 import { RestartController } from "./restart-controller.mjs";
-import {
-  analyzeMergeStrategy,
-  executeDecision,
-  resetMergeStrategyDedup,
-} from "./merge-strategy.mjs";
+
 import { assessTask, quickAssess } from "./task-assessment.mjs";
 import {
   getBosunCoAuthorTrailer,
@@ -227,10 +223,7 @@ import { createErrorDetector } from "./error-detector.mjs";
 import { createAgentSupervisor } from "./agent-supervisor.mjs";
 import { getSessionTracker } from "./session-tracker.mjs";
 import { pullWorkspaceRepos } from "./workspace-manager.mjs";
-import {
-  startGitHubReconciler,
-  stopGitHubReconciler,
-} from "./github-reconciler.mjs";
+
 import {
   getKanbanBackendName,
   setKanbanBackend,
@@ -1249,6 +1242,8 @@ function isBenignWorkspaceSyncFailure(errorText) {
       let workspaceCount = 0;
       let repoCount = 0;
       let failedRepoCount = 0;
+      let nonBenignFailedRepoCount = 0;
+      let benignFailedRepoCount = 0;
       let workspaceExceptionCount = 0;
       try {
         for (const wsId of workspaceIds) {
@@ -1262,6 +1257,8 @@ function isBenignWorkspaceSyncFailure(errorText) {
             if (failed.length > 0) {
               const benignFailed = failed.filter((r) => isBenignWorkspaceSyncFailure(r?.error));
               const nonBenignFailed = failed.filter((r) => !isBenignWorkspaceSyncFailure(r?.error));
+              benignFailedRepoCount += benignFailed.length;
+              nonBenignFailedRepoCount += nonBenignFailed.length;
               if (nonBenignFailed.length === 0) {
                 clearWorkspaceSyncWarnForWorkspace(wsId);
                 console.log(
@@ -1304,6 +1301,7 @@ function isBenignWorkspaceSyncFailure(errorText) {
             }
           } catch (err) {
             failedRepoCount += 1;
+            nonBenignFailedRepoCount += 1;
             workspaceExceptionCount += 1;
             const errText = formatMonitorError(err).replace(/\s+/g, " ").trim();
             const errSnippet = (errText || "unknown error").slice(0, 180);
@@ -1318,10 +1316,10 @@ function isBenignWorkspaceSyncFailure(errorText) {
         }
       } finally {
         const durationMs = Date.now() - runStartedAt;
-        const summary = `[monitor] workspace sync: cycle complete (${workspaceCount} workspace(s), ${repoCount} repo(s), ${failedRepoCount} failure(s), ${workspaceExceptionCount} exception(s), ${Math.round(durationMs / 1000)}s)`;
-        if (repoCount > 0 && failedRepoCount >= repoCount) {
+        const summary = `[monitor] workspace sync: cycle complete (${workspaceCount} workspace(s), ${repoCount} repo(s), ${failedRepoCount} failure(s), ${nonBenignFailedRepoCount} non-benign, ${benignFailedRepoCount} benign, ${workspaceExceptionCount} exception(s), ${Math.round(durationMs / 1000)}s)`;
+        if (repoCount > 0 && nonBenignFailedRepoCount >= repoCount) {
           console.warn(
-            `[monitor] workspace sync: all repos failed this cycle (${failedRepoCount}/${repoCount})`,
+            `[monitor] workspace sync: all repos failed this cycle (${nonBenignFailedRepoCount}/${repoCount})`,
           );
         }
         if (workspaceExceptionCount > 0) {
@@ -1976,11 +1974,7 @@ if (primaryAgentReady) {
   void initPrimaryAgent(primaryAgentName);
 }
 
-// Merge strategy: Codex-powered merge decision analysis
-// Enabled by default unless CODEX_ANALYZE_MERGE_STRATEGY=false
-const codexAnalyzeMergeStrategy =
-  agentPoolEnabled &&
-  (process.env.CODEX_ANALYZE_MERGE_STRATEGY || "").toLowerCase() !== "false";
+// Merge strategy: now handled by PR_MERGE_STRATEGY workflow template
 const mergeStrategyMode = String(
   process.env.MERGE_STRATEGY_MODE || "smart",
 ).toLowerCase();
@@ -2439,9 +2433,6 @@ function restartSelf(reason) {
     vkLogStream.stop();
     vkLogStream = null;
   }
-  if (prCleanupDaemon) {
-    prCleanupDaemon.stop();
-  }
   const shutdownPromises = [];
   if (agentEndpoint) {
     shutdownPromises.push(
@@ -2515,6 +2506,7 @@ function detectChangedFiles(repoRootPath) {
       cwd: repoRootPath,
       encoding: "utf8",
       timeout: 10_000,
+      stdio: ["pipe", "pipe", "pipe"],
     });
     return output
       .split(/\r?\n/)
@@ -2532,6 +2524,7 @@ function getChangeSummary(repoRootPath, files) {
       cwd: repoRootPath,
       encoding: "utf8",
       timeout: 10_000,
+      stdio: ["pipe", "pipe", "pipe"],
     });
     return diff.trim() || files.join(", ");
   } catch {
@@ -3536,9 +3529,6 @@ function restartVibeKanbanProcess() {
     vkLogStream.stop();
     vkLogStream = null;
   }
-  if (prCleanupDaemon) {
-    prCleanupDaemon.stop();
-  }
   // Just kill the process — the exit handler will auto-restart it
   if (vibeKanbanProcess && !vibeKanbanProcess.killed) {
     try {
@@ -14125,9 +14115,6 @@ function selfRestartForSourceChange(
     vkLogStream.stop();
     vkLogStream = null;
   }
-  if (prCleanupDaemon) {
-    prCleanupDaemon.stop();
-  }
   // ── Agent isolation: by default, do NOT stop internal executor on self-restart ──
   // Task agents run as in-process SDK async iterators. Stopping the executor
   // during a normal restart is unnecessary because process.exit(75) kills them.
@@ -15409,8 +15396,6 @@ let agentEndpoint = null;
 let agentEventBus = null;
 /** @type {import("./review-agent.mjs").ReviewAgent|null} */
 let reviewAgent = null;
-/** @type {Map<string, import("./merge-strategy.mjs").MergeContext>} */
-const pendingMergeStrategyByTask = new Map();
 /** @type {Map<string, { approved: boolean, reviewedAt: string }>} */
 const reviewGateResults = new Map();
 /** @type {import("./sync-engine.mjs").SyncEngine|null} */
@@ -15419,53 +15404,6 @@ let syncEngine = null;
 let errorDetector = null;
 /** @type {import("./agent-supervisor.mjs").AgentSupervisor|null} */
 let agentSupervisor = null;
-/** @type {import("./pr-cleanup-daemon.mjs").PRCleanupDaemon|null} */
-let prCleanupDaemon = null;
-/** @type {import("./github-reconciler.mjs").GitHubReconciler|null} */
-let ghReconciler = null;
-
-function restartGitHubReconciler() {
-  if (isWorkflowReplacingModule("github-reconciler.mjs")) {
-    console.log("[monitor] skipping legacy GitHub reconciler — handled by workflow");
-    return;
-  }
-  try {
-    stopGitHubReconciler();
-    ghReconciler = null;
-  } catch {
-    /* best effort */
-  }
-
-  const activeKanbanBackend = getActiveKanbanBackend();
-  if (activeKanbanBackend !== "github") {
-    return;
-  }
-  if (!githubReconcile?.enabled) {
-    return;
-  }
-  const repo =
-    process.env.GITHUB_REPOSITORY ||
-    (process.env.GITHUB_REPO_OWNER && process.env.GITHUB_REPO_NAME
-      ? `${process.env.GITHUB_REPO_OWNER}/${process.env.GITHUB_REPO_NAME}`
-      : "") ||
-    repoSlug ||
-    "unknown/unknown";
-  if (!repo || repo === "unknown/unknown") {
-    console.warn("[gh-reconciler] disabled — missing repo slug");
-    return;
-  }
-
-  ghReconciler = startGitHubReconciler({
-    repoSlug: repo,
-    intervalMs: githubReconcile.intervalMs,
-    mergedLookbackHours: githubReconcile.mergedLookbackHours,
-    trackingLabels: githubReconcile.trackingLabels,
-    sendTelegram:
-      telegramToken && telegramChatId
-        ? (msg) => void sendTelegramMessage(msg)
-        : null,
-  });
-}
 
 if (!isMonitorTestRuntime) {
 if (workflowAutomationEnabled) {
@@ -16148,7 +16086,6 @@ startAgentWorkAnalyzer();
 startAgentAlertTailer();
 startMonitorMonitorSupervisor();
 startTaskPlannerStatusLoop();
-restartGitHubReconciler();
 
 // ── Two-way Telegram :workflow: primary agent ────────────────────────────────────────
 injectMonitorFunctions({
@@ -16177,7 +16114,7 @@ injectMonitorFunctions({
   getReviewAgentEnabled: () => isReviewAgentEnabled(),
   getSyncEngine: () => syncEngine,
   getErrorDetector: () => errorDetector,
-  getPrCleanupDaemon: () => prCleanupDaemon,
+  getPrCleanupDaemon: () => null,
   getWorkspaceMonitor: () => workspaceMonitor,
   getMonitorMonitorStatus: () => getMonitorMonitorStatusSnapshot(),
   getTaskStoreStats: () => {
@@ -16279,31 +16216,9 @@ if (isContainerEnabled()) {
   }
 }
 
-// ── Start PR Cleanup Daemon ──────────────────────────────────────────────────
-// Automatically resolves PR conflicts and CI failures every 30 minutes
-if (config.prCleanupEnabled !== false) {
-  if (isWorkflowReplacingModule("pr-cleanup-daemon.mjs")) {
-    console.log("[monitor] skipping legacy PR cleanup daemon — handled by workflow");
-  } else {
-    const prRepoRoot = effectiveRepoRoot || repoRoot || process.cwd();
-    const flowGateControlsMerges =
-      isFlowPrimaryEnabled() && isFlowReviewGateEnabled();
-    console.log(`[monitor] Starting PR cleanup daemon (repoRoot: ${prRepoRoot})...`);
-    if (flowGateControlsMerges) {
-      console.log(
-        "[monitor] Flow review gate is active — PR cleanup daemon auto-merge is disabled",
-      );
-    }
-    prCleanupDaemon = new PRCleanupDaemon({
-      intervalMs: 30 * 60 * 1000, // 30 minutes
-      maxConcurrentCleanups: 3,
-      dryRun: false,
-      autoMerge: !flowGateControlsMerges,
-      repoRoot: prRepoRoot,
-    });
-    prCleanupDaemon.start();
-  }
-}
+// ── Start PR Watchdog & Kanban Sync handled by workflow templates ────────────
+// PR conflict resolution, CI repair, and GitHub↔kanban sync are now managed
+// by the BOSUN_PR_WATCHDOG_TEMPLATE and GITHUB_KANBAN_SYNC_TEMPLATE workflows.
 } else {
   console.log(
     "[monitor] test runtime detected (VITEST/NODE_ENV=test) — runtime services disabled",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bosun",
-  "version": "0.36.2",
+  "version": "0.36.4",
   "description": "AI-powered orchestrator supervisor — manages AI agent executors with failover, auto-restarts on failure, analyzes crashes with Codex SDK, creates PRs via Vibe-Kanban API, and sends Telegram notifications. Supports N executors with weighted distribution, multi-repo projects, and auto-setup.",
   "type": "module",
   "license": "Apache 2.0",
@@ -95,9 +95,12 @@
     "build": "node vendor-sync.mjs",
     "build:docs": "node build-docs.mjs",
     "shared-workspaces": "node shared-workspace-cli.mjs",
-    "syntax:check": "node -e \"const fs=require('fs'),path=require('path');const files=fs.readdirSync('.').filter(f=>f.endsWith('.mjs'));let fail=0;for(const f of files){try{require('child_process').execSync('node --check '+f,{stdio:'pipe'});}catch(e){console.error('Syntax error: '+f);console.error(e.stderr.toString());fail=1;}}if(fail)process.exit(1);console.log('Syntax OK: '+files.length+' files checked');\"",
+    "syntax:check": "node --experimental-vm-modules --no-warnings=ExperimentalWarning syntax-check.mjs",
     "pretest": "npm run syntax:check",
     "test": "vitest run --config vitest.config.mjs",
+    "test:vitest": "vitest run --config vitest.config.mjs",
+    "test:node": "node --test tests/*.node.test.mjs",
+    "test:all": "npm run test:vitest && npm run test:node",
     "test:voice-provider-smoke": "vitest run --config vitest.config.mjs tests/voice-provider-smoke.test.mjs",
     "check:native-call-parity": "vitest run --config vitest.config.mjs tests/voice-provider-smoke.test.mjs tests/native-call-parity-checklist.test.mjs",
     "test:watch": "vitest",
@@ -128,6 +131,8 @@
     "agent-prompts.mjs",
     "agent-sdk.mjs",
     "agent-work-report.mjs",
+    "analyze-agent-work-helpers.mjs",
+    "analyze-agent-work.mjs",
     "anomaly-detector.mjs",
     "autofix.mjs",
     "claude-shell.mjs",
@@ -159,11 +164,14 @@
     "github-reconciler.mjs",
     "get-telegram-chat-id.mjs",
     "git-commit-helpers.mjs",
+    "git-editor-fix.mjs",
     "git-safety.mjs",
     "kanban-adapter.mjs",
     "lib/logger.mjs",
     "library-manager.mjs",
     "maintenance.mjs",
+    "mcp-registry.mjs",
+    "meeting-workflow-service.mjs",
     "merge-strategy.mjs",
     "monitor.mjs",
     "opencode-shell.mjs",
@@ -191,6 +199,7 @@
     "sync-engine.mjs",
     "task-archiver.mjs",
     "task-assessment.mjs",
+    "task-cli.mjs",
     "task-complexity.mjs",
     "task-claims.mjs",
     "task-context.mjs",
@@ -213,6 +222,11 @@
     "vibe-kanban-wrapper.mjs",
     "vk-error-resolver.mjs",
     "vk-log-stream.mjs",
+    "voice-auth-manager.mjs",
+    "voice-action-dispatcher.mjs",
+    "voice-agents-sdk.mjs",
+    "voice-relay.mjs",
+    "voice-tools.mjs",
     "workspace-manager.mjs",
     "workspace-monitor.mjs",
     "workspace-reaper.mjs",
@@ -247,12 +261,17 @@
     "@anthropic-ai/claude-agent-sdk": "latest",
     "@github/copilot-sdk": "latest",
     "@google/genai": "latest",
+    "@modelcontextprotocol/sdk": "^1.26.0",
+    "@openai/agents": "^0.5.2",
     "@openai/codex-sdk": "latest",
     "@opencode-ai/sdk": "latest",
     "@preact/signals": "1.3.1",
     "@whiskeysockets/baileys": "^7.0.0-rc.9",
     "ajv": "^8.18.0",
     "es-module-shims": "1.10.0",
+    "express": "^5.1.0",
+    "express-rate-limit": "^8.0.0",
+    "hono": "^4.7.0",
     "htm": "3.1.1",
     "preact": "10.25.4",
     "qrcode-terminal": "^0.12.0",

package/primary-agent.mjs

@@ -148,14 +148,18 @@ const ADAPTERS = {
      * Forward an SDK-native command to the Codex shell.
      * /clear is handled specially as a reset; others are sent as user input.
      */
-    execSdkCommand: async (command, args) => {
+    execSdkCommand: async (command, args, options = {}) => {
       const cmd = command.startsWith("/") ? command : `/${command}`;
       if (cmd === "/clear") {
         await resetThread();
         return "Session cleared.";
       }
       const fullCmd = args ? `${cmd} ${args}` : cmd;
-      return execCodexPrompt(fullCmd, { persistent: true });
+      return execCodexPrompt(fullCmd, {
+        persistent: true,
+        cwd: options.cwd,
+        sessionId: options.sessionId || null,
+      });
     },
   },
   "copilot-sdk": {
@@ -169,14 +173,18 @@ const ADAPTERS = {
     reset: resetCopilotSession,
     init: async () => initCopilotShell(),
     sdkCommands: ["/status", "/model", "/clear"],
-    execSdkCommand: async (command, args) => {
+    execSdkCommand: async (command, args, options = {}) => {
       const cmd = command.startsWith("/") ? command : `/${command}`;
       if (cmd === "/clear") {
         await resetCopilotSession();
         return "Session cleared.";
       }
       const fullCmd = args ? `${cmd} ${args}` : cmd;
-      return execCopilotPrompt(fullCmd, { persistent: true });
+      return execCopilotPrompt(fullCmd, {
+        persistent: true,
+        cwd: options.cwd,
+        sessionId: options.sessionId || null,
+      });
     },
   },
   "claude-sdk": {
@@ -193,14 +201,17 @@ const ADAPTERS = {
       return true;
     },
     sdkCommands: ["/compact", "/status", "/model", "/clear"],
-    execSdkCommand: async (command, args) => {
+    execSdkCommand: async (command, args, options = {}) => {
       const cmd = command.startsWith("/") ? command : `/${command}`;
       if (cmd === "/clear") {
         await resetClaudeSession();
         return "Session cleared.";
       }
       const fullCmd = args ? `${cmd} ${args}` : cmd;
-      return execClaudePrompt(fullCmd, {});
+      return execClaudePrompt(fullCmd, {
+        cwd: options.cwd,
+        sessionId: options.sessionId || null,
+      });
     },
   },
   "gemini-sdk": {
@@ -218,14 +229,18 @@ const ADAPTERS = {
     switchSession: switchGeminiSession,
     createSession: createGeminiSession,
     sdkCommands: ["/status", "/model", "/clear"],
-    execSdkCommand: async (command, args) => {
+    execSdkCommand: async (command, args, options = {}) => {
       const cmd = command.startsWith("/") ? command : `/${command}`;
       if (cmd === "/clear") {
         await resetGeminiSession();
         return "Session cleared.";
       }
       const fullCmd = args ? `${cmd} ${args}` : cmd;
-      return execGeminiPrompt(fullCmd, { persistent: true });
+      return execGeminiPrompt(fullCmd, {
+        persistent: true,
+        cwd: options.cwd,
+        sessionId: options.sessionId || null,
+      });
     },
   },
   "opencode-sdk": {
@@ -246,14 +261,18 @@ const ADAPTERS = {
     switchSession: switchOpencodeSession,
     createSession: createOpencodeSession,
     sdkCommands: ["/status", "/model", "/sessions", "/clear"],
-    execSdkCommand: async (command, args) => {
+    execSdkCommand: async (command, args, options = {}) => {
       const cmd = command.startsWith("/") ? command : `/${command}`;
       if (cmd === "/clear") {
         await resetOpencodeSession();
         return "Session cleared.";
       }
       const fullCmd = args ? `${cmd} ${args}` : cmd;
-      return execOpencodePrompt(fullCmd, { persistent: true });
+      return execOpencodePrompt(fullCmd, {
+        persistent: true,
+        cwd: options.cwd,
+        sessionId: options.sessionId || null,
+      });
     },
   },
 };
@@ -959,9 +978,10 @@ export function getSdkCommands(adapterName) {
  * @param {string} command  — e.g. "/compact", "/model"
  * @param {string} [args]   — optional arguments string
  * @param {string} [adapterName] — target adapter (defaults to active)
+ * @param {object} [options] — execution overrides (e.g. cwd/sessionId)
  * @returns {Promise<string|object>}
  */
-export async function execSdkCommand(command, args = "", adapterName) {
+export async function execSdkCommand(command, args = "", adapterName, options = {}) {
   const adapter = adapterName ? ADAPTERS[adapterName] : activeAdapter;
   if (!adapter) {
     throw new Error(`Unknown adapter: ${adapterName || "(none)"}`);
@@ -973,5 +993,5 @@ export async function execSdkCommand(command, args = "", adapterName) {
   if (typeof adapter.execSdkCommand !== "function") {
     throw new Error(`Adapter ${adapter.name} does not support SDK commands.`);
   }
-  return adapter.execSdkCommand(cmd, args);
+  return adapter.execSdkCommand(cmd, args, options);
 }

package/session-tracker.mjs

@@ -236,6 +236,7 @@ export class SessionTracker {
     // Direct message format (role/content)
     if (event && event.role && event.content !== undefined) {
       const msg = {
+        id: event.id || `msg-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
         role: event.role,
         content: String(event.content).slice(0, MAX_MESSAGE_CHARS),
         timestamp: event.timestamp || new Date().toISOString(),
@@ -577,6 +578,73 @@ export class SessionTracker {
     this.#markDirty(sessionId);
   }
 
+  /**
+   * Edit a previously recorded user message in-place.
+   * @param {string} sessionId
+   * @param {Object} payload
+   * @param {string} [payload.messageId]
+   * @param {string} [payload.timestamp]
+   * @param {string} [payload.previousContent]
+   * @param {string} payload.content
+   * @returns {{ok:boolean,error?:string,message?:object,index?:number}}
+   */
+  editUserMessage(sessionId, payload = {}) {
+    const session = this.#sessions.get(sessionId);
+    if (!session) return { ok: false, error: "Session not found" };
+
+    const nextContent = String(payload?.content || "").trim();
+    if (!nextContent) return { ok: false, error: "content is required" };
+
+    const messageId = String(payload?.messageId || "").trim();
+    const timestamp = String(payload?.timestamp || "").trim();
+    const previousContent = payload?.previousContent != null
+      ? String(payload.previousContent)
+      : "";
+    const messages = Array.isArray(session.messages) ? session.messages : [];
+
+    let idx = -1;
+    if (messageId) {
+      idx = messages.findIndex((msg) => String(msg?.id || "") === messageId);
+    }
+
+    if (idx < 0 && timestamp) {
+      idx = messages.findIndex((msg) => {
+        if (String(msg?.role || "").toLowerCase() !== "user") return false;
+        if (String(msg?.timestamp || "") !== timestamp) return false;
+        if (!previousContent) return true;
+        return String(msg?.content || "") === previousContent;
+      });
+    }
+
+    if (idx < 0 && previousContent) {
+      for (let i = messages.length - 1; i >= 0; i -= 1) {
+        const msg = messages[i];
+        if (String(msg?.role || "").toLowerCase() !== "user") continue;
+        if (String(msg?.content || "") === previousContent) {
+          idx = i;
+          break;
+        }
+      }
+    }
+
+    if (idx < 0) return { ok: false, error: "Message not found" };
+
+    const target = messages[idx];
+    if (String(target?.role || "").toLowerCase() !== "user") {
+      return { ok: false, error: "Only user messages can be edited" };
+    }
+
+    target.id = target.id || `msg-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+    target.content = nextContent.slice(0, MAX_MESSAGE_CHARS);
+    target.edited = true;
+    target.editedAt = new Date().toISOString();
+    session.lastActivityAt = Date.now();
+    session.lastActiveAt = new Date().toISOString();
+    this.#markDirty(sessionId);
+
+    return { ok: true, message: { ...target }, index: idx };
+  }
+
   /**
    * Flush all dirty sessions to disk immediately.
    */

package/setup-web-server.mjs

@@ -436,7 +436,7 @@ function buildStableSetupDefaults({
     workflowMaxConcurrentBranches: 8,
     voiceEnabled: true,
     voiceProvider: "auto",
-    voiceModel: "gpt-4o-realtime-preview-2024-12-17",
+    voiceModel: "gpt-realtime-1.5",
     voiceVisionModel: "gpt-4.1-mini",
     voiceId: "alloy",
     voiceTurnDetection: "server_vad",
@@ -445,7 +445,7 @@ function buildStableSetupDefaults({
     openaiRealtimeApiKey: "",
     azureOpenaiRealtimeEndpoint: "",
     azureOpenaiRealtimeApiKey: "",
-    azureOpenaiRealtimeDeployment: "gpt-4o-realtime-preview",
+    azureOpenaiRealtimeDeployment: "gpt-realtime-1.5",
     copilotEnableAllMcpTools: false,
     // Backward-compatible fields consumed by older setup UI revisions.
     distribution: "primary-only",
@@ -545,17 +545,26 @@ function applyTelegramMiniAppSetupEnv(envMap, env, sourceEnv = process.env) {
   const tunnelRaw =
     env?.telegramUiTunnel ||
     env?.TELEGRAM_UI_TUNNEL ||
-    sourceEnv.TELEGRAM_UI_TUNNEL ||
-    "named";
-  envMap.TELEGRAM_UI_TUNNEL = String(tunnelRaw).trim() || "named";
+    sourceEnv.TELEGRAM_UI_TUNNEL;
+  // Default to "quick" when no named-tunnel credentials are configured so the
+  // UI starts successfully out-of-the-box without --setup.
+  const hasNamedCreds = !!(
+    (env?.CLOUDFLARE_TUNNEL_NAME || sourceEnv.CLOUDFLARE_TUNNEL_NAME) &&
+    (env?.CLOUDFLARE_TUNNEL_CREDENTIALS || sourceEnv.CLOUDFLARE_TUNNEL_CREDENTIALS)
+  );
+  const tunnelDefault = hasNamedCreds ? "named" : "quick";
+  envMap.TELEGRAM_UI_TUNNEL = String(tunnelRaw || tunnelDefault).trim() || tunnelDefault;
 
   const quickFallbackRaw =
     env?.telegramUiAllowQuickTunnelFallback ??
     env?.TELEGRAM_UI_ALLOW_QUICK_TUNNEL_FALLBACK ??
     sourceEnv.TELEGRAM_UI_ALLOW_QUICK_TUNNEL_FALLBACK;
+  // Default true so named-tunnel failures fall back gracefully rather than
+  // silently killing the Web UI. --setup sets this to false when credentials
+  // are provided and the tunnel is known-good.
   envMap.TELEGRAM_UI_ALLOW_QUICK_TUNNEL_FALLBACK = toBooleanEnvString(
     quickFallbackRaw,
-    false,
+    true,
   );
 
   const fallbackAuthRaw =
@@ -855,8 +864,8 @@ function applyNonBlockingSetupEnvDefaults(envMap, env = {}, sourceEnv = process.
       env.VOICE_MODEL,
       envMap.VOICE_MODEL,
       sourceEnv.VOICE_MODEL,
-    ) || "gpt-4o-realtime-preview-2024-12-17",
-  ).trim() || "gpt-4o-realtime-preview-2024-12-17";
+    ) || "gpt-realtime-1.5",
+  ).trim() || "gpt-realtime-1.5";
   envMap.VOICE_VISION_MODEL = String(
     pickNonEmptyValue(
       env.voiceVisionModel,
@@ -944,8 +953,8 @@ function applyNonBlockingSetupEnvDefaults(envMap, env = {}, sourceEnv = process.
       env.AZURE_OPENAI_REALTIME_DEPLOYMENT,
       envMap.AZURE_OPENAI_REALTIME_DEPLOYMENT,
       sourceEnv.AZURE_OPENAI_REALTIME_DEPLOYMENT,
-    ) || "gpt-4o-realtime-preview",
-  ).trim() || "gpt-4o-realtime-preview";
+    ) || "gpt-realtime-1.5",
+  ).trim() || "gpt-realtime-1.5";
 
   envMap.CONTAINER_ENABLED = toBooleanEnvString(
     pickNonEmptyValue(env.containerEnabled, envMap.CONTAINER_ENABLED, sourceEnv.CONTAINER_ENABLED),
@@ -1734,6 +1743,7 @@ function handleApply(body) {
     if (configJson.projectRequirementsProfile) config.projectRequirementsProfile = configJson.projectRequirementsProfile;
     if (configJson.internalReplenish)          config.internalReplenish          = configJson.internalReplenish;
     if (configJson.kanban)                     config.kanban                     = configJson.kanban;
+    if (configJson.voice && typeof configJson.voice === "object") config.voice = configJson.voice;
 
     const workspaceConfig = resolveSetupWorkspaceAndRepoConfig(
       existingConfig,