claude-code-session-manager 0.2.6 → 0.3.0

package/dist/assets/{xml-B9aEuD-v.js → xml-EEhcqUb-.js}

@@ -1 +1 @@
-import{l as e}from"./editor.main-DY3GhIm6.js";import"./index-CS33Ey9b.js";const o={comments:{blockComment:["<!--","-->"]},brackets:[["<",">"]],autoClosingPairs:[{open:"<",close:">"},{open:"'",close:"'"},{open:'"',close:'"'}],surroundingPairs:[{open:"<",close:">"},{open:"'",close:"'"},{open:'"',close:'"'}],onEnterRules:[{beforeText:new RegExp("<([_:\\w][_:\\w-.\\d]*)([^/>]*(?!/)>)[^<]*$","i"),afterText:/^<\/([_:\w][_:\w-.\d]*)\s*>$/i,action:{indentAction:e.IndentAction.IndentOutdent}},{beforeText:new RegExp("<(\\w[\\w\\d]*)([^/>]*(?!/)>)[^<]*$","i"),action:{indentAction:e.IndentAction.Indent}}]},i={defaultToken:"",tokenPostfix:".xml",ignoreCase:!0,qualifiedName:/(?:[\w\.\-]+:)?[\w\.\-]+/,tokenizer:{root:[[/[^<&]+/,""],{include:"@whitespace"},[/(<)(@qualifiedName)/,[{token:"delimiter"},{token:"tag",next:"@tag"}]],[/(<\/)(@qualifiedName)(\s*)(>)/,[{token:"delimiter"},{token:"tag"},"",{token:"delimiter"}]],[/(<\?)(@qualifiedName)/,[{token:"delimiter"},{token:"metatag",next:"@tag"}]],[/(<\!)(@qualifiedName)/,[{token:"delimiter"},{token:"metatag",next:"@tag"}]],[/<\!\[CDATA\[/,{token:"delimiter.cdata",next:"@cdata"}],[/&\w+;/,"string.escape"]],cdata:[[/[^\]]+/,""],[/\]\]>/,{token:"delimiter.cdata",next:"@pop"}],[/\]/,""]],tag:[[/[ \t\r\n]+/,""],[/(@qualifiedName)(\s*=\s*)("[^"]*"|'[^']*')/,["attribute.name","","attribute.value"]],[/(@qualifiedName)(\s*=\s*)("[^">?\/]*|'[^'>?\/]*)(?=[\?\/]\>)/,["attribute.name","","attribute.value"]],[/(@qualifiedName)(\s*=\s*)("[^">]*|'[^'>]*)/,["attribute.name","","attribute.value"]],[/@qualifiedName/,"attribute.name"],[/\?>/,{token:"delimiter",next:"@pop"}],[/(\/)(>)/,[{token:"tag"},{token:"delimiter",next:"@pop"}]],[/>/,{token:"delimiter",next:"@pop"}]],whitespace:[[/[ \t\r\n]+/,""],[/<!--/,{token:"comment",next:"@comment"}]],comment:[[/[^<\-]+/,"comment.content"],[/-->/,{token:"comment",next:"@pop"}],[/<!--/,"comment.content.invalid"],[/[<\-]/,"comment.content"]]}};export{o as conf,i as language};
+import{l as e}from"./editor.main-QdhRqSRj.js";import"./index-DIBKIDmx.js";const o={comments:{blockComment:["<!--","-->"]},brackets:[["<",">"]],autoClosingPairs:[{open:"<",close:">"},{open:"'",close:"'"},{open:'"',close:'"'}],surroundingPairs:[{open:"<",close:">"},{open:"'",close:"'"},{open:'"',close:'"'}],onEnterRules:[{beforeText:new RegExp("<([_:\\w][_:\\w-.\\d]*)([^/>]*(?!/)>)[^<]*$","i"),afterText:/^<\/([_:\w][_:\w-.\d]*)\s*>$/i,action:{indentAction:e.IndentAction.IndentOutdent}},{beforeText:new RegExp("<(\\w[\\w\\d]*)([^/>]*(?!/)>)[^<]*$","i"),action:{indentAction:e.IndentAction.Indent}}]},i={defaultToken:"",tokenPostfix:".xml",ignoreCase:!0,qualifiedName:/(?:[\w\.\-]+:)?[\w\.\-]+/,tokenizer:{root:[[/[^<&]+/,""],{include:"@whitespace"},[/(<)(@qualifiedName)/,[{token:"delimiter"},{token:"tag",next:"@tag"}]],[/(<\/)(@qualifiedName)(\s*)(>)/,[{token:"delimiter"},{token:"tag"},"",{token:"delimiter"}]],[/(<\?)(@qualifiedName)/,[{token:"delimiter"},{token:"metatag",next:"@tag"}]],[/(<\!)(@qualifiedName)/,[{token:"delimiter"},{token:"metatag",next:"@tag"}]],[/<\!\[CDATA\[/,{token:"delimiter.cdata",next:"@cdata"}],[/&\w+;/,"string.escape"]],cdata:[[/[^\]]+/,""],[/\]\]>/,{token:"delimiter.cdata",next:"@pop"}],[/\]/,""]],tag:[[/[ \t\r\n]+/,""],[/(@qualifiedName)(\s*=\s*)("[^"]*"|'[^']*')/,["attribute.name","","attribute.value"]],[/(@qualifiedName)(\s*=\s*)("[^">?\/]*|'[^'>?\/]*)(?=[\?\/]\>)/,["attribute.name","","attribute.value"]],[/(@qualifiedName)(\s*=\s*)("[^">]*|'[^'>]*)/,["attribute.name","","attribute.value"]],[/@qualifiedName/,"attribute.name"],[/\?>/,{token:"delimiter",next:"@pop"}],[/(\/)(>)/,[{token:"tag"},{token:"delimiter",next:"@pop"}]],[/>/,{token:"delimiter",next:"@pop"}]],whitespace:[[/[ \t\r\n]+/,""],[/<!--/,{token:"comment",next:"@comment"}]],comment:[[/[^<\-]+/,"comment.content"],[/-->/,{token:"comment",next:"@pop"}],[/<!--/,"comment.content.invalid"],[/[<\-]/,"comment.content"]]}};export{o as conf,i as language};

package/dist/assets/{yaml-jf6LIEfe.js → yaml-B8BKq6X4.js}

@@ -1 +1 @@
-import{l as e}from"./editor.main-DY3GhIm6.js";import"./index-CS33Ey9b.js";const o={comments:{lineComment:"#"},brackets:[["{","}"],["[","]"],["(",")"]],autoClosingPairs:[{open:"{",close:"}"},{open:"[",close:"]"},{open:"(",close:")"},{open:'"',close:'"'},{open:"'",close:"'"}],surroundingPairs:[{open:"{",close:"}"},{open:"[",close:"]"},{open:"(",close:")"},{open:'"',close:'"'},{open:"'",close:"'"}],folding:{offSide:!0},onEnterRules:[{beforeText:/:\s*$/,action:{indentAction:e.IndentAction.Indent}}]},r={tokenPostfix:".yaml",brackets:[{token:"delimiter.bracket",open:"{",close:"}"},{token:"delimiter.square",open:"[",close:"]"}],keywords:["true","True","TRUE","false","False","FALSE","null","Null","Null","~"],numberInteger:/(?:0|[+-]?[0-9]+)/,numberFloat:/(?:0|[+-]?[0-9]+)(?:\.[0-9]+)?(?:e[-+][1-9][0-9]*)?/,numberOctal:/0o[0-7]+/,numberHex:/0x[0-9a-fA-F]+/,numberInfinity:/[+-]?\.(?:inf|Inf|INF)/,numberNaN:/\.(?:nan|Nan|NAN)/,numberDate:/\d{4}-\d\d-\d\d([Tt ]\d\d:\d\d:\d\d(\.\d+)?(( ?[+-]\d\d?(:\d\d)?)|Z)?)?/,escapes:/\\(?:[btnfr\\"']|[0-7][0-7]?|[0-3][0-7]{2})/,tokenizer:{root:[{include:"@whitespace"},{include:"@comment"},[/%[^ ]+.*$/,"meta.directive"],[/---/,"operators.directivesEnd"],[/\.{3}/,"operators.documentEnd"],[/[-?:](?= )/,"operators"],{include:"@anchor"},{include:"@tagHandle"},{include:"@flowCollections"},{include:"@blockStyle"},[/@numberInteger(?![ \t]*\S+)/,"number"],[/@numberFloat(?![ \t]*\S+)/,"number.float"],[/@numberOctal(?![ \t]*\S+)/,"number.octal"],[/@numberHex(?![ \t]*\S+)/,"number.hex"],[/@numberInfinity(?![ \t]*\S+)/,"number.infinity"],[/@numberNaN(?![ \t]*\S+)/,"number.nan"],[/@numberDate(?![ \t]*\S+)/,"number.date"],[/(".*?"|'.*?'|[^#'"]*?)([ \t]*)(:)( |$)/,["type","white","operators","white"]],{include:"@flowScalars"},[/.+?(?=(\s+#|$))/,{cases:{"@keywords":"keyword","@default":"string"}}]],object:[{include:"@whitespace"},{include:"@comment"},[/\}/,"@brackets","@pop"],[/,/,"delimiter.comma"],[/:(?= )/,"operators"],[/(?:".*?"|'.*?'|[^,\{\[]+?)(?=: )/,"type"],{include:"@flowCollections"},{include:"@flowScalars"},{include:"@tagHandle"},{include:"@anchor"},{include:"@flowNumber"},[/[^\},]+/,{cases:{"@keywords":"keyword","@default":"string"}}]],array:[{include:"@whitespace"},{include:"@comment"},[/\]/,"@brackets","@pop"],[/,/,"delimiter.comma"],{include:"@flowCollections"},{include:"@flowScalars"},{include:"@tagHandle"},{include:"@anchor"},{include:"@flowNumber"},[/[^\],]+/,{cases:{"@keywords":"keyword","@default":"string"}}]],multiString:[[/^( +).+$/,"string","@multiStringContinued.$1"]],multiStringContinued:[[/^( *).+$/,{cases:{"$1==$S2":"string","@default":{token:"@rematch",next:"@popall"}}}]],whitespace:[[/[ \t\r\n]+/,"white"]],comment:[[/#.*$/,"comment"]],flowCollections:[[/\[/,"@brackets","@array"],[/\{/,"@brackets","@object"]],flowScalars:[[/"([^"\\]|\\.)*$/,"string.invalid"],[/'([^'\\]|\\.)*$/,"string.invalid"],[/'[^']*'/,"string"],[/"/,"string","@doubleQuotedString"]],doubleQuotedString:[[/[^\\"]+/,"string"],[/@escapes/,"string.escape"],[/\\./,"string.escape.invalid"],[/"/,"string","@pop"]],blockStyle:[[/[>|][0-9]*[+-]?$/,"operators","@multiString"]],flowNumber:[[/@numberInteger(?=[ \t]*[,\]\}])/,"number"],[/@numberFloat(?=[ \t]*[,\]\}])/,"number.float"],[/@numberOctal(?=[ \t]*[,\]\}])/,"number.octal"],[/@numberHex(?=[ \t]*[,\]\}])/,"number.hex"],[/@numberInfinity(?=[ \t]*[,\]\}])/,"number.infinity"],[/@numberNaN(?=[ \t]*[,\]\}])/,"number.nan"],[/@numberDate(?=[ \t]*[,\]\}])/,"number.date"]],tagHandle:[[/\![^ ]*/,"tag"]],anchor:[[/[&*][^ ]+/,"namespace"]]}};export{o as conf,r as language};
+import{l as e}from"./editor.main-QdhRqSRj.js";import"./index-DIBKIDmx.js";const o={comments:{lineComment:"#"},brackets:[["{","}"],["[","]"],["(",")"]],autoClosingPairs:[{open:"{",close:"}"},{open:"[",close:"]"},{open:"(",close:")"},{open:'"',close:'"'},{open:"'",close:"'"}],surroundingPairs:[{open:"{",close:"}"},{open:"[",close:"]"},{open:"(",close:")"},{open:'"',close:'"'},{open:"'",close:"'"}],folding:{offSide:!0},onEnterRules:[{beforeText:/:\s*$/,action:{indentAction:e.IndentAction.Indent}}]},r={tokenPostfix:".yaml",brackets:[{token:"delimiter.bracket",open:"{",close:"}"},{token:"delimiter.square",open:"[",close:"]"}],keywords:["true","True","TRUE","false","False","FALSE","null","Null","Null","~"],numberInteger:/(?:0|[+-]?[0-9]+)/,numberFloat:/(?:0|[+-]?[0-9]+)(?:\.[0-9]+)?(?:e[-+][1-9][0-9]*)?/,numberOctal:/0o[0-7]+/,numberHex:/0x[0-9a-fA-F]+/,numberInfinity:/[+-]?\.(?:inf|Inf|INF)/,numberNaN:/\.(?:nan|Nan|NAN)/,numberDate:/\d{4}-\d\d-\d\d([Tt ]\d\d:\d\d:\d\d(\.\d+)?(( ?[+-]\d\d?(:\d\d)?)|Z)?)?/,escapes:/\\(?:[btnfr\\"']|[0-7][0-7]?|[0-3][0-7]{2})/,tokenizer:{root:[{include:"@whitespace"},{include:"@comment"},[/%[^ ]+.*$/,"meta.directive"],[/---/,"operators.directivesEnd"],[/\.{3}/,"operators.documentEnd"],[/[-?:](?= )/,"operators"],{include:"@anchor"},{include:"@tagHandle"},{include:"@flowCollections"},{include:"@blockStyle"},[/@numberInteger(?![ \t]*\S+)/,"number"],[/@numberFloat(?![ \t]*\S+)/,"number.float"],[/@numberOctal(?![ \t]*\S+)/,"number.octal"],[/@numberHex(?![ \t]*\S+)/,"number.hex"],[/@numberInfinity(?![ \t]*\S+)/,"number.infinity"],[/@numberNaN(?![ \t]*\S+)/,"number.nan"],[/@numberDate(?![ \t]*\S+)/,"number.date"],[/(".*?"|'.*?'|[^#'"]*?)([ \t]*)(:)( |$)/,["type","white","operators","white"]],{include:"@flowScalars"},[/.+?(?=(\s+#|$))/,{cases:{"@keywords":"keyword","@default":"string"}}]],object:[{include:"@whitespace"},{include:"@comment"},[/\}/,"@brackets","@pop"],[/,/,"delimiter.comma"],[/:(?= )/,"operators"],[/(?:".*?"|'.*?'|[^,\{\[]+?)(?=: )/,"type"],{include:"@flowCollections"},{include:"@flowScalars"},{include:"@tagHandle"},{include:"@anchor"},{include:"@flowNumber"},[/[^\},]+/,{cases:{"@keywords":"keyword","@default":"string"}}]],array:[{include:"@whitespace"},{include:"@comment"},[/\]/,"@brackets","@pop"],[/,/,"delimiter.comma"],{include:"@flowCollections"},{include:"@flowScalars"},{include:"@tagHandle"},{include:"@anchor"},{include:"@flowNumber"},[/[^\],]+/,{cases:{"@keywords":"keyword","@default":"string"}}]],multiString:[[/^( +).+$/,"string","@multiStringContinued.$1"]],multiStringContinued:[[/^( *).+$/,{cases:{"$1==$S2":"string","@default":{token:"@rematch",next:"@popall"}}}]],whitespace:[[/[ \t\r\n]+/,"white"]],comment:[[/#.*$/,"comment"]],flowCollections:[[/\[/,"@brackets","@array"],[/\{/,"@brackets","@object"]],flowScalars:[[/"([^"\\]|\\.)*$/,"string.invalid"],[/'([^'\\]|\\.)*$/,"string.invalid"],[/'[^']*'/,"string"],[/"/,"string","@doubleQuotedString"]],doubleQuotedString:[[/[^\\"]+/,"string"],[/@escapes/,"string.escape"],[/\\./,"string.escape.invalid"],[/"/,"string","@pop"]],blockStyle:[[/[>|][0-9]*[+-]?$/,"operators","@multiString"]],flowNumber:[[/@numberInteger(?=[ \t]*[,\]\}])/,"number"],[/@numberFloat(?=[ \t]*[,\]\}])/,"number.float"],[/@numberOctal(?=[ \t]*[,\]\}])/,"number.octal"],[/@numberHex(?=[ \t]*[,\]\}])/,"number.hex"],[/@numberInfinity(?=[ \t]*[,\]\}])/,"number.infinity"],[/@numberNaN(?=[ \t]*[,\]\}])/,"number.nan"],[/@numberDate(?=[ \t]*[,\]\}])/,"number.date"]],tagHandle:[[/\![^ ]*/,"tag"]],anchor:[[/[&*][^ ]+/,"namespace"]]}};export{o as conf,r as language};

package/dist/index.html

@@ -4,8 +4,8 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>Claude Session Manager</title>
-    <script type="module" crossorigin src="./assets/index-CS33Ey9b.js"></script>
-    <link rel="stylesheet" crossorigin href="./assets/index-BYHTuGIu.css">
+    <script type="module" crossorigin src="./assets/index-DIBKIDmx.js"></script>
+    <link rel="stylesheet" crossorigin href="./assets/index-BzbwWnyF.css">
   </head>
   <body class="bg-bg text-fg font-mono antialiased">
     <div id="root"></div>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-code-session-manager",
-  "version": "0.2.6",
+  "version": "0.3.0",
   "description": "Local cockpit for Claude Code CLI sessions — terminal + full config surface.",
   "type": "module",
   "main": "src/main/index.cjs",

package/src/main/index.cjs

@@ -1,4 +1,4 @@
-const { app, BrowserWindow, ipcMain, dialog, Menu, session, systemPreferences } = require('electron');
+const { app, BrowserWindow, ipcMain, dialog, Menu, session, systemPreferences, globalShortcut } = require('electron');
 const { spawn, execFileSync } = require('node:child_process');
 const path = require('node:path');
 const fs = require('node:fs');
@@ -8,6 +8,9 @@ const configMgr = require('./config.cjs');
 const transcripts = require('./transcripts.cjs');
 const sessionsStore = require('./sessionsStore.cjs');
 const billing = require('./usage.cjs');
+const logs = require('./logs.cjs');
+const voiceHotkey = require('./voiceHotkey.cjs');
+const voiceWizard = require('./voiceWizard.cjs');
 
 let mainWindow = null;
 let rebooting = false;
@@ -90,6 +93,9 @@ async function rebootApp() {
     ptyManager.attachWindow(mainWindow);
     configMgr.attachWindow(mainWindow);
     transcripts.attachWindow(mainWindow);
+    voiceHotkey.init(mainWindow).catch((e) => {
+      logs.writeLine({ scope: 'voice-hotkey', level: 'error', message: 'reinit failed', meta: { error: e?.message } });
+    });
     rebooting = false;
     return;
   }
@@ -184,10 +190,44 @@ configMgr.registerConfigHandlers();
 transcripts.registerTranscriptHandlers();
 sessionsStore.registerSessionsHandlers();
 billing.registerBillingHandlers();
+logs.registerLogHandlers();
+voiceHotkey.registerHotkeyHandlers();
+voiceWizard.registerWizardHandlers();
 
 // --- App lifecycle ---
 
+// Single-instance lock (PRD F1 v2 §requestSingleInstanceLock).
+// In dev mode we skip the lock so two-dev-instance workflows still work.
+// E2E tests also skip so playwright.electron.launch can run multiple specs
+// back-to-back without the prior app's lock causing the next launch to quit.
+const isDev = process.env.SM_DEV === '1' || process.env.SM_E2E === '1';
+if (!isDev) {
+  const gotLock = app.requestSingleInstanceLock();
+  if (!gotLock) {
+    app.quit();
+  } else {
+    app.on('second-instance', () => {
+      if (mainWindow && !mainWindow.isDestroyed()) {
+        if (mainWindow.isMinimized()) mainWindow.restore();
+        mainWindow.show();
+        mainWindow.focus();
+      }
+    });
+  }
+}
+
 app.whenReady().then(async () => {
+  logs.pruneOld();
+  logs.writeLine({ scope: 'main', level: 'info', message: 'app start', meta: { version: app.getVersion(), platform: process.platform } });
+
+  process.on('uncaughtException', (err) => {
+    logs.writeLine({ scope: 'main', level: 'error', message: 'uncaughtException', meta: { error: err?.message, stack: err?.stack } });
+  });
+  process.on('unhandledRejection', (reason) => {
+    const r = reason instanceof Error ? { error: reason.message, stack: reason.stack } : { reason: String(reason) };
+    logs.writeLine({ scope: 'main', level: 'error', message: 'unhandledRejection', meta: r });
+  });
+
   // Grant microphone / media permissions so the renderer's getUserMedia
   // (Whisper voice-to-text) resolves instead of being silently denied.
   const MEDIA_PERMS = new Set(['media', 'audioCapture', 'microphone']);
@@ -260,6 +300,15 @@ app.whenReady().then(async () => {
   ptyManager.attachWindow(mainWindow);
   configMgr.attachWindow(mainWindow);
   transcripts.attachWindow(mainWindow);
+  voiceHotkey.init(mainWindow).catch((e) => {
+    logs.writeLine({ scope: 'voice-hotkey', level: 'error', message: 'init failed', meta: { error: e?.message } });
+  });
+});
+
+app.on('will-quit', () => {
+  // PRD F1 v2 §IPC plumbing: must unregisterAll on will-quit.
+  try { globalShortcut.unregisterAll(); } catch { /* */ }
+  voiceHotkey.disposeOnQuit();
 });
 
 app.on('window-all-closed', () => {

package/src/main/lib/voice-hotkey-log.cjs

@@ -0,0 +1,60 @@
+/**
+ * voice-hotkey-log — sanitizing logger wrapper for the voice-hotkey scope.
+ *
+ * Enforces the F1 PRD §Security no-transcript rule: any meta key whose name
+ * matches /transcript|interim|final|text/i is dropped before the line hits
+ * disk. In dev (`!app.isPackaged`), if the dropped value was non-empty we
+ * throw so tests catch a leak immediately.
+ *
+ * This module is intentionally tiny and dependency-free apart from logs.cjs
+ * and electron's `app` for the dev check.
+ */
+
+const { app } = require('electron');
+const logs = require('../logs.cjs');
+
+const SENSITIVE_KEY_RE = /transcript|interim|final|text/i;
+
+function isNonEmpty(value) {
+  if (value === null || value === undefined) return false;
+  if (typeof value === 'string') return value.length > 0;
+  if (Array.isArray(value)) return value.length > 0;
+  if (typeof value === 'object') return Object.keys(value).length > 0;
+  // numbers, booleans → "non-empty" if truthy enough that a leak would matter
+  return Boolean(value);
+}
+
+function sanitize(meta) {
+  if (!meta || typeof meta !== 'object' || Array.isArray(meta)) return meta;
+  const out = {};
+  let leaked = null;
+  for (const [k, v] of Object.entries(meta)) {
+    if (SENSITIVE_KEY_RE.test(k)) {
+      if (isNonEmpty(v) && leaked === null) leaked = k;
+      continue;
+    }
+    out[k] = v;
+  }
+  return { sanitized: out, leakedKey: leaked };
+}
+
+function voiceHotkeyLog(level, event, meta) {
+  let safeMeta = meta;
+  if (meta && typeof meta === 'object' && !Array.isArray(meta)) {
+    const { sanitized, leakedKey } = sanitize(meta);
+    safeMeta = sanitized;
+    // In dev, throw on a non-empty stripped value so a leak crashes tests
+    // instead of silently passing. `app.isPackaged` is the proxy for prod.
+    if (leakedKey !== null) {
+      const isDev = (() => {
+        try { return !app.isPackaged; } catch { return true; }
+      })();
+      if (isDev) {
+        throw new Error(`voice-hotkey log leaked sensitive key: ${leakedKey}`);
+      }
+    }
+  }
+  logs.writeLine({ scope: 'voice-hotkey', level, message: event, meta: safeMeta });
+}
+
+module.exports = { voiceHotkeyLog, SENSITIVE_KEY_RE };

package/src/main/logs.cjs

@@ -0,0 +1,82 @@
+const { app, ipcMain } = require('electron');
+const fs = require('node:fs');
+const path = require('node:path');
+
+// Rolling daily files under <userData>/logs/. Anything mtime'd older than
+// RETENTION_MS is pruned at boot; we never compact mid-session, since the
+// app is short-lived and a once-per-launch sweep is enough.
+const RETENTION_MS = 3 * 24 * 60 * 60 * 1000;
+const LOG_PREFIX = 'session-manager-';
+const LOG_SUFFIX = '.log';
+
+function logDir() {
+  return path.join(app.getPath('userData'), 'logs');
+}
+
+function todayPath() {
+  const d = new Date();
+  const yyyy = d.getFullYear();
+  const mm = String(d.getMonth() + 1).padStart(2, '0');
+  const dd = String(d.getDate()).padStart(2, '0');
+  return path.join(logDir(), `${LOG_PREFIX}${yyyy}-${mm}-${dd}${LOG_SUFFIX}`);
+}
+
+function ensureDir() {
+  try { fs.mkdirSync(logDir(), { recursive: true }); } catch { /* best-effort */ }
+}
+
+function pruneOld() {
+  ensureDir();
+  let entries;
+  try { entries = fs.readdirSync(logDir()); } catch { return; }
+  const cutoff = Date.now() - RETENTION_MS;
+  for (const name of entries) {
+    if (!name.startsWith(LOG_PREFIX) || !name.endsWith(LOG_SUFFIX)) continue;
+    const full = path.join(logDir(), name);
+    try {
+      const st = fs.statSync(full);
+      if (st.mtimeMs < cutoff) fs.unlinkSync(full);
+    } catch { /* skip unreadable entries */ }
+  }
+}
+
+// Sanitize meta keys that look like they might carry transcript or user
+// content. Voice features go to logs and the hotkey wrapper already strips
+// these in main, but renderer-side log calls go through this writer too.
+// Defense in depth: drop and replace with `[redacted]` so leaks are obvious.
+const REDACT_KEY = /^(transcript|interim|final|text|content|partial|userText|message)$/i;
+function sanitizeMeta(meta) {
+  if (!meta || typeof meta !== 'object') return meta;
+  if (Array.isArray(meta)) return meta;
+  const out = {};
+  for (const [k, v] of Object.entries(meta)) {
+    out[k] = REDACT_KEY.test(k) ? '[redacted]' : v;
+  }
+  return out;
+}
+
+function writeLine(payload) {
+  if (!payload || typeof payload !== 'object') return;
+  ensureDir();
+  const ts = new Date().toISOString();
+  const lvl = String(payload.level || 'info').toUpperCase();
+  const scope = String(payload.scope || '-');
+  const message = String(payload.message ?? '');
+  let line = `[${ts}] [${lvl}] [${scope}] ${message}`;
+  if (payload.meta !== undefined) {
+    try { line += ' ' + JSON.stringify(sanitizeMeta(payload.meta)); } catch { line += ' [unserializable meta]'; }
+  }
+  // Open with 0o600 so logs don't leak to other local users; a session
+  // transcript could include device labels or recently-typed terminal text.
+  try {
+    const fd = fs.openSync(todayPath(), 'a', 0o600);
+    try { fs.writeSync(fd, line + '\n'); } finally { fs.closeSync(fd); }
+  } catch { /* best-effort */ }
+}
+
+function registerLogHandlers() {
+  ipcMain.on('log:write', (_e, payload) => writeLine(payload));
+  ipcMain.handle('log:dir', () => logDir());
+}
+
+module.exports = { pruneOld, writeLine, registerLogHandlers, logDir };

package/src/main/voiceHotkey.cjs

@@ -0,0 +1,346 @@
+/**
+ * voiceHotkey — F1 push-to-talk hotkey wiring (main process).
+ *
+ * Two layers per F1 v2 PRD:
+ *   1. Window-local: mainWindow.webContents.on('before-input-event', …) —
+ *      always on, fires before xterm, blocks the terminal via preventDefault.
+ *   2. Global: globalShortcut.register(...) — opt-in via voice.json.global,
+ *      always toggle-only (globalShortcut has no keyup signal).
+ *
+ * Precedence: when window is focused, globalShortcut is unregistered so the
+ * window-local layer owns the chord. On blur we re-register if global=true.
+ *
+ * Wayland: globalShortcut is broken on Wayland in Electron 32–40 (see
+ * electron#45607, #49806). For v1 we just disable global mode if
+ * XDG_SESSION_TYPE=wayland and log a warn. The DBus portal probe is deferred.
+ */
+
+const { app, globalShortcut, ipcMain } = require('electron');
+const voiceSettings = require('./voiceSettings.cjs');
+const { voiceHotkeyLog } = require('./lib/voice-hotkey-log.cjs');
+
+let mainWindow = null;
+let currentConfig = null;
+let beforeInputHandler = null;
+// Per-press state for hold mode: we only care that *some* chord-member is
+// held, then any chord-member keyup ends the press (PRD F1 v2 §Edge Cases #13).
+let holdActive = false;
+let globalRegisteredAccel = null;
+// Suppress the first global callback within 500ms of registration to dodge
+// the "key held during cold start" edge case (PRD §Edge Cases #4).
+let globalRegisteredAt = 0;
+
+/**
+ * Map an Electron Accelerator string to a token set we can compare against
+ * before-input-event Input. Handles CommandOrControl/Cmd/Ctrl/Alt/Option/
+ * Shift/Super and a key (letter, F-key, or named key like Space).
+ *
+ * Complexity: O(p) per call where p = number of '+' segments (≤ 5 in practice).
+ */
+function parseAccelerator(accel) {
+  if (typeof accel !== 'string' || !accel) return null;
+  const parts = accel.split('+').map((s) => s.trim()).filter(Boolean);
+  if (parts.length < 2) return null; // PRD requires ≥1 modifier + 1 key
+  const mods = { ctrl: false, meta: false, alt: false, shift: false };
+  let key = null;
+  for (const raw of parts) {
+    const p = raw.toLowerCase();
+    if (p === 'commandorcontrol') {
+      if (process.platform === 'darwin') mods.meta = true;
+      else mods.ctrl = true;
+    } else if (p === 'cmd' || p === 'command' || p === 'super') {
+      mods.meta = true;
+    } else if (p === 'ctrl' || p === 'control') {
+      mods.ctrl = true;
+    } else if (p === 'alt' || p === 'option') {
+      mods.alt = true;
+    } else if (p === 'shift') {
+      mods.shift = true;
+    } else {
+      key = raw;
+    }
+  }
+  if (!key) return null;
+  return { mods, key };
+}
+
+/** True if the modifier flags on `input` exactly match `mods`. */
+function modsMatch(input, mods) {
+  return (
+    !!input.control === mods.ctrl &&
+    !!input.meta === mods.meta &&
+    !!input.alt === mods.alt &&
+    !!input.shift === mods.shift
+  );
+}
+
+/** True if the input.key matches an accelerator key token. */
+function keyMatches(input, key) {
+  const ik = String(input.key || '').toLowerCase();
+  const ic = String(input.code || '').toLowerCase();
+  const kk = String(key).toLowerCase();
+  if (ik === kk) return true;
+  // Space: input.key may be ' ' (literal space) or 'space'.
+  if (kk === 'space' && (ik === ' ' || ik === 'space' || ic === 'space')) return true;
+  // Letters: input.code is 'KeyV' for V key. This is robust to dead-key
+  // modifier substitutions on macOS (e.g. Option+V → '√' in input.key).
+  if (kk.length === 1 && /[a-z0-9]/.test(kk) && ic === `key${kk}`) return true;
+  // Digit row: input.code is 'Digit1' for '1'.
+  if (/^[0-9]$/.test(kk) && ic === `digit${kk}`) return true;
+  // F-keys: input.code matches 'F1'..'F24', case differs.
+  if (/^f([1-9]|1[0-9]|2[0-4])$/.test(kk) && ic === kk) return true;
+  return false;
+}
+
+/** True if `input.key` is one of the chord's modifier keys (for hold-end). */
+function isChordMemberRelease(input, parsed) {
+  const k = String(input.key || '').toLowerCase();
+  if (parsed.mods.ctrl && (k === 'control')) return true;
+  if (parsed.mods.meta && (k === 'meta' || k === 'cmd' || k === 'command' || k === 'os' || k === 'super')) return true;
+  if (parsed.mods.alt && (k === 'alt' || k === 'option')) return true;
+  if (parsed.mods.shift && (k === 'shift')) return true;
+  return false;
+}
+
+function detachBeforeInput() {
+  if (mainWindow && !mainWindow.isDestroyed() && beforeInputHandler) {
+    try { mainWindow.webContents.removeListener('before-input-event', beforeInputHandler); } catch { /* */ }
+  }
+  beforeInputHandler = null;
+  holdActive = false;
+}
+
+function attachBeforeInput() {
+  if (!mainWindow || mainWindow.isDestroyed()) return;
+  detachBeforeInput();
+  const cfg = currentConfig;
+  if (!cfg) return;
+  const parsed = parseAccelerator(cfg.accelerator);
+  if (!parsed) {
+    voiceHotkeyLog('error', 'register-failed', {
+      accelerator: cfg.accelerator,
+      platform: process.platform,
+      sessionType: process.env.XDG_SESSION_TYPE || null,
+      reason: 'parse',
+    });
+    return;
+  }
+
+  const handler = (event, input) => {
+    if (input.type !== 'keyDown' && input.type !== 'keyUp') return;
+    // PRD F1 v2 §Auto-repeat: discard isAutoRepeat in main.
+    if (input.isAutoRepeat) return;
+
+    if (input.type === 'keyDown') {
+      // For keyDown, both modifiers and the key must match exactly.
+      if (!modsMatch(input, parsed.mods)) return;
+      if (!keyMatches(input, parsed.key)) return;
+      event.preventDefault();
+      if (cfg.mode === 'hold') {
+        if (holdActive) return; // ignore re-press while held
+        holdActive = true;
+        emitHotkey('down', 'window');
+      } else {
+        // Toggle: every fresh keyDown emits 'down'. Renderer state machine
+        // decides whether that means start or stop.
+        emitHotkey('down', 'window');
+      }
+      return;
+    }
+
+    // keyUp: in hold mode, any chord-member release ends the press
+    // (PRD §Edge Cases #13 — modifier release timing).
+    if (cfg.mode === 'hold' && holdActive) {
+      const releaseEndsHold = keyMatches(input, parsed.key) || isChordMemberRelease(input, parsed);
+      if (releaseEndsHold) {
+        event.preventDefault();
+        holdActive = false;
+        emitHotkey('up', 'window');
+      }
+    }
+  };
+
+  mainWindow.webContents.on('before-input-event', handler);
+  beforeInputHandler = handler;
+}
+
+function emitHotkey(phase, source) {
+  if (!mainWindow || mainWindow.isDestroyed()) return;
+  mainWindow.webContents.send('voice:hotkey', { phase, source });
+  voiceHotkeyLog('info', phase === 'down' ? 'down' : 'up', { source });
+}
+
+function unregisterGlobal() {
+  if (globalRegisteredAccel) {
+    try { globalShortcut.unregister(globalRegisteredAccel); } catch { /* */ }
+    globalRegisteredAccel = null;
+  }
+}
+
+function registerGlobalIfWanted() {
+  unregisterGlobal();
+  const cfg = currentConfig;
+  if (!cfg || !cfg.global) return;
+
+  // Wayland: disable global for v1 (PRD §Wayland is experimental).
+  if (process.platform === 'linux' && process.env.XDG_SESSION_TYPE === 'wayland') {
+    voiceHotkeyLog('warn', 'global-disabled-wayland', {
+      accelerator: cfg.accelerator,
+      sessionType: 'wayland',
+    });
+    return;
+    // TODO(F1-followup): DBus probe org.freedesktop.portal.GlobalShortcuts
+    // and enable global mode when present (xdg-desktop-portal ≥ 1.17).
+  }
+
+  let ok = false;
+  try {
+    ok = globalShortcut.register(cfg.accelerator, () => {
+      // Suppress callbacks within 500ms of registration (PRD §Edge Cases #4).
+      if (Date.now() - globalRegisteredAt < 500) return;
+      // Global is toggle-only (no keyup). Renderer state machine handles
+      // arm/disarm regardless of configured mode.
+      emitHotkey('down', 'global');
+    });
+  } catch (err) {
+    voiceHotkeyLog('error', 'register-failed', {
+      accelerator: cfg.accelerator,
+      platform: process.platform,
+      sessionType: process.env.XDG_SESSION_TYPE || null,
+      reason: err && err.message ? err.message : 'unknown',
+    });
+    return;
+  }
+
+  if (ok) {
+    globalRegisteredAccel = cfg.accelerator;
+    globalRegisteredAt = Date.now();
+    voiceHotkeyLog('info', 'register', {
+      accelerator: cfg.accelerator,
+      global: true,
+      mode: cfg.mode,
+      ok: true,
+      sessionType: process.env.XDG_SESSION_TYPE || null,
+    });
+  } else {
+    voiceHotkeyLog('warn', 'collision', {
+      accelerator: cfg.accelerator,
+      platform: process.platform,
+    });
+  }
+}
+
+function applyConfig(cfg) {
+  currentConfig = cfg;
+  attachBeforeInput();
+  // If a focused window owns the chord, keep global unregistered until blur.
+  const focused = mainWindow && !mainWindow.isDestroyed() && mainWindow.isFocused();
+  if (focused) {
+    unregisterGlobal();
+  } else {
+    registerGlobalIfWanted();
+  }
+  // Always log the window-local registration so the e2e test can see it
+  // even if global is off / suppressed.
+  voiceHotkeyLog('info', 'register', {
+    accelerator: cfg.accelerator,
+    global: !!cfg.global,
+    mode: cfg.mode,
+    ok: true,
+    sessionType: process.env.XDG_SESSION_TYPE || null,
+    layer: 'window',
+  });
+}
+
+function attachWindow(win) {
+  mainWindow = win;
+  if (!mainWindow) return;
+  attachBeforeInput();
+
+  // Precedence: window focus → unregister global; blur → re-register.
+  // Debounce focus 50ms so second-instance show()→focus() doesn't race
+  // with a held chord. (PRD §requestSingleInstanceLock).
+  // BrowserWindow emits `focus`/`blur` (not `browser-window-focus`/`-blur`,
+  // which are app-level events). The legacy listener was a no-op.
+  let focusDebounce = null;
+  const onFocus = () => {
+    if (focusDebounce) clearTimeout(focusDebounce);
+    focusDebounce = setTimeout(() => unregisterGlobal(), 50);
+  };
+  const onBlur = () => {
+    if (focusDebounce) { clearTimeout(focusDebounce); focusDebounce = null; }
+    registerGlobalIfWanted();
+  };
+  mainWindow.on('focus', onFocus);
+  mainWindow.on('blur', onBlur);
+  mainWindow.on('closed', () => {
+    if (focusDebounce) { clearTimeout(focusDebounce); focusDebounce = null; }
+    try { mainWindow.removeListener('focus', onFocus); } catch { /* */ }
+    try { mainWindow.removeListener('blur', onBlur); } catch { /* */ }
+    detachBeforeInput();
+    mainWindow = null;
+  });
+}
+
+async function init(win) {
+  attachWindow(win);
+  currentConfig = await voiceSettings.load();
+  applyConfig(currentConfig);
+}
+
+function registerHotkeyHandlers() {
+  ipcMain.handle('voice:get-hotkey-config', async () => {
+    if (!currentConfig) currentConfig = await voiceSettings.load();
+    return currentConfig;
+  });
+
+  ipcMain.handle('voice:set-hotkey', async (_e, cfg) => {
+    if (!voiceSettings.isValidConfig(cfg)) {
+      throw new Error('Invalid voice hotkey config');
+    }
+    await voiceSettings.save(cfg);
+    currentConfig = await voiceSettings.load();
+    applyConfig(currentConfig);
+    if (mainWindow && !mainWindow.isDestroyed()) {
+      mainWindow.webContents.send('voice:hotkey-changed', currentConfig);
+    }
+    return { ok: true, config: currentConfig };
+  });
+
+  ipcMain.handle('voice:get-hotkey-config-path', () => voiceSettings.storePath());
+
+  // F5 — device picker preference (additive subtree on voice.json).
+  ipcMain.handle('voice:get-device-pref', async () => {
+    return await voiceSettings.loadDevice();
+  });
+
+  ipcMain.handle('voice:set-device-pref', async (_e, pref) => {
+    if (!voiceSettings.isValidDevicePref(pref)) {
+      throw new Error('Invalid device pref payload');
+    }
+    await voiceSettings.saveDevice(pref);
+    return { ok: true };
+  });
+
+  // Renderer pings this when isRecording flips so we can prefix the window
+  // title with `● REC — ` (PRD F1 v2 §Security: privacy invariant).
+  ipcMain.on('voice:set-recording', (_e, recording) => {
+    if (!mainWindow || mainWindow.isDestroyed()) return;
+    const baseTitle = 'Claude Session Manager';
+    const next = recording ? `● REC — ${baseTitle}` : baseTitle;
+    try { mainWindow.setTitle(next); } catch { /* */ }
+  });
+}
+
+function disposeOnQuit() {
+  unregisterGlobal();
+  detachBeforeInput();
+}
+
+module.exports = {
+  init,
+  registerHotkeyHandlers,
+  disposeOnQuit,
+  // exported for tests
+  parseAccelerator,
+};