claude-phone-local 2.3.2 → 2.3.4

package/cli/lib/docker.js

@@ -1,411 +1,411 @@
-import { spawn, execSync } from 'child_process';
-import crypto from 'crypto';
-import fs from 'fs';
-import path from 'path';
-import {
-  getDockerComposePath,
-  getEnvPath,
-  getConfigDir
-} from './config.js';
-import { getLocalIP } from './utils.js';
-
-/**
- * Detect which docker compose command to use
- * Some systems have 'docker compose' (plugin), others have 'docker-compose' (standalone)
- * @returns {{cmd: string, args: string[]}} Command and base args for compose
- */
-function getComposeCommand() {
-  // Try 'docker compose' (plugin) first
-  try {
-    execSync('docker compose version', { stdio: 'pipe' });
-    return { cmd: 'docker', args: ['compose'] };
-  } catch (e) {
-    // Fall back to standalone docker-compose
-    try {
-      execSync('docker-compose --version', { stdio: 'pipe' });
-      return { cmd: 'docker-compose', args: [] };
-    } catch (e2) {
-      // Default to plugin style, let it fail with helpful error
-      return { cmd: 'docker', args: ['compose'] };
-    }
-  }
-}
-
-/**
- * Generate a random secret for Docker services
- * @returns {string} Random 32-character hex string
- */
-function generateSecret() {
-  return crypto.randomBytes(16).toString('hex');
-}
-
-/**
- * Check if Docker is installed and running
- * @returns {Promise<{installed: boolean, running: boolean, error?: string}>}
- */
-export async function checkDocker() {
-  // Check if docker command exists
-  const installed = await new Promise((resolve) => {
-    const check = spawn('docker', ['--version']);
-    check.on('close', (code) => resolve(code === 0));
-    check.on('error', () => resolve(false));
-  });
-
-  if (!installed) {
-    return {
-      installed: false,
-      running: false,
-      error: 'Docker not found. Please install Docker from https://docs.docker.com/engine/install/'
-    };
-  }
-
-  // Check if Docker daemon is running by running a simple command
-  const running = await new Promise((resolve) => {
-    const check = spawn('docker', ['ps', '-q'], {
-      stdio: ['pipe', 'pipe', 'pipe']
-    });
-    check.on('close', (code) => resolve(code === 0));
-    check.on('error', () => resolve(false));
-  });
-
-  if (!running) {
-    return {
-      installed: true,
-      running: false,
-      error: 'Docker is installed but not running. Please start Docker Desktop.'
-    };
-  }
-
-  return {
-    installed: true,
-    running: true
-  };
-}
-
-/**
- * Generate docker-compose.yml from config
- * @param {object} config - Configuration object
- * @returns {string} Docker compose YAML content
- */
-export function generateDockerCompose(config) {
-  const drachtioPort = config.deployment?.pi?.drachtioPort || config.sip?.drachtioSipPort || 5070;
-  const rtpStart = config.server.rtpStart || 30000;
-  const rtpEnd = config.server.rtpEnd || 30100;
-
-  // This file is written to ~/.claude-phone/ (getDockerComposePath()), which
-  // has no Dockerfile or source of its own - those live in the installed npm
-  // package directory (config.paths.voiceApp's parent). `build: .` would try
-  // to build from ~/.claude-phone and fail (or silently reuse a stale cached
-  // image tag from an unrelated build, masking the failure) on any machine
-  // without that image already present.
-  const projectRoot = config.paths?.voiceApp
-    ? path.dirname(config.paths.voiceApp)
-    : '.';
-
-  // Single image: drachtio + FreeSWITCH + voice-app + STT + TTS under supervisord.
-  // They talk over 127.0.0.1, so there is no container DNS to misconfigure.
-  // Everything that must outlive a restart is on the ./data bind mount.
-  //
-  // EXTERNAL_IP is intentionally NOT set under `environment:` here - it comes
-  // from `.env` via env_file below. An explicit `environment:` entry would
-  // override env_file, so editing .env after a network change (a new LAN IP,
-  // a different office) would silently do nothing.
-  return `# Generated by \`claude-phone setup\` - edit .env, not this file.
-services:
-  claude-phone:
-    build: "${projectRoot.replace(/\\/g, '/')}"
-    image: claude-phone-local:latest
-    container_name: claude-phone
-    restart: unless-stopped
-    env_file:
-      - .env
-    environment:
-      - DRACHTIO_HOST=127.0.0.1
-      - FREESWITCH_HOST=127.0.0.1
-      - STT_LOCAL_URL=http://127.0.0.1:9001
-      - TTS_LOCAL_URL=http://127.0.0.1:9002
-      - AUDIO_BASE_URL=http://127.0.0.1:3000
-      - RTP_START=${rtpStart}
-      - RTP_END=${rtpEnd}
-    ports:
-      - "3000:3000"
-      - "${drachtioPort}:${drachtioPort}/udp"
-      - "${drachtioPort}:${drachtioPort}/tcp"
-      - "${rtpStart}-${rtpEnd}:${rtpStart}-${rtpEnd}/udp"
-    volumes:
-      - ./data:/data
-`;
-}
-
-/**
- * Generate .env file from config
- * @param {object} config - Configuration object
- * @returns {string} Environment file content
- */
-export function generateEnvFile(config) {
-  // Ensure secrets exist in config
-  if (!config.secrets) {
-    config.secrets = {
-      drachtio: generateSecret(),
-      freeswitch: generateSecret()
-    };
-  }
-
-  // 'auto' means re-detect the current LAN IP every time this is written
-  // (i.e. every `claude-phone start`), instead of using whatever IP was
-  // current the last time setup ran. A saved concrete IP goes stale the
-  // moment the machine moves networks (home <-> office, DHCP renewal) and
-  // nothing here writes to it again until setup is manually re-run.
-  const resolvedExternalIp = config.server.externalIp === 'auto'
-    ? getLocalIP()
-    : config.server.externalIp;
-
-  // Determine Claude API URL based on deployment mode
-  let claudeApiUrl;
-  if (config.deployment && config.deployment.mode === 'pi-split' && config.deployment.pi && config.deployment.pi.macIp) {
-    // Pi mode: point to remote API server
-    claudeApiUrl = `http://${config.deployment.pi.macIp}:${config.server.claudeApiPort}`;
-  } else if (config.deployment && config.deployment.mode === 'voice-server' && config.deployment.apiServerIp) {
-    // Voice server mode (non-Pi): point to remote API server
-    claudeApiUrl = `http://${config.deployment.apiServerIp}:${config.server.claudeApiPort}`;
-  } else {
-    // Both or api-server mode: local API server runs on the HOST (it shells
-    // out to the `claude` CLI directly), while voice-app runs in Docker on
-    // a bridge network — so it must reach the host via host.docker.internal,
-    // not localhost (which inside the container means the container itself).
-    claudeApiUrl = `http://host.docker.internal:${config.server.claudeApiPort}`;
-  }
-
-  const lines = [
-    '# ====================================',
-    '# WARNING: DO NOT SHARE THIS FILE',
-    '# Contains API keys and passwords',
-    '# ====================================',
-    '# Claude Phone Configuration',
-    '# Generated by claude-phone CLI',
-    '# ====================================',
-    '',
-    '# Network Configuration',
-    `EXTERNAL_IP=${resolvedExternalIp}`,
-    '',
-    '# Drachtio Configuration',
-    'DRACHTIO_HOST=drachtio',
-    'DRACHTIO_PORT=9022',
-    `DRACHTIO_SECRET=${config.secrets.drachtio}`,
-    // SIP port for Contact header (5070 when 3CX SBC is present, 5060 otherwise)
-    `DRACHTIO_SIP_PORT=${config.sip?.drachtioSipPort || config.deployment?.pi?.drachtioPort || 5070}`,
-    '',
-    '# FreeSWITCH Configuration',
-    'FREESWITCH_HOST=freeswitch',
-    'FREESWITCH_PORT=8021',
-    // Note: This is the default ESL password for drachtio/drachtio-freeswitch-mrf
-    'FREESWITCH_SECRET=JambonzR0ck$',
-    '',
-    '# 3CX / SIP Configuration',
-    `SIP_DOMAIN=${config.sip.domain}`,
-    // 'auto' means the 3CX SBC runs on this same PC, so its address is
-    // whatever this machine's current LAN IP is - re-resolved every start,
-    // same reasoning as EXTERNAL_IP above.
-    `SIP_REGISTRAR=${config.sip.registrar === 'auto' ? resolvedExternalIp : config.sip.registrar}`,
-    '',
-    '# Default extension (primary device)',
-    `SIP_EXTENSION=${config.devices[0].extension}`,
-    `SIP_AUTH_ID=${config.devices[0].authId}`,
-    `SIP_PASSWORD=${config.devices[0].password}`,
-    '',
-    '# Claude API Server',
-    `CLAUDE_API_URL=${claudeApiUrl}`,
-    '',
-    ...(config.api.mode === 'local' ? [
-      '# Local STT/TTS (no API keys — faster-whisper + Piper containers)',
-      'STT_MODE=local',
-      'TTS_MODE=local',
-      `STT_LOCAL_URL=${config.api.local?.sttUrl || 'http://stt-local:9001'}`,
-      `TTS_LOCAL_URL=${config.api.local?.ttsUrl || 'http://tts-local:9002'}`,
-      `AUDIO_BASE_URL=${config.api.local?.audioBaseUrl || 'http://voice-app:3000'}`,
-      `PIPER_VOICE=${config.devices[0].voice || config.api.local?.voice || 'en_US-lessac-medium'}`,
-      `WHISPER_MODEL=${config.api.local?.whisperModel || 'small'}`,
-      ''
-    ] : [
-      '# STT/TTS mode',
-      'STT_MODE=cloud',
-      'TTS_MODE=cloud',
-      '',
-      '# ElevenLabs TTS',
-      `ELEVENLABS_API_KEY=${config.api.elevenlabs.apiKey}`,
-      `ELEVENLABS_VOICE_ID=${config.devices[0].voiceId}`,
-      '',
-      '# OpenAI (Whisper STT)',
-      `OPENAI_API_KEY=${config.api.openai.apiKey}`,
-      ''
-    ]),
-    '# Application Settings',
-    `HTTP_PORT=${config.server.httpPort}`,
-    'WS_PORT=3001',
-    'AUDIO_DIR=/app/audio',
-    '',
-    '# Outbound Call Settings',
-    'MAX_CONVERSATION_TURNS=10',
-    'OUTBOUND_RING_TIMEOUT=30',
-    ''
-  ];
-
-  return lines.join('\n');
-}
-
-/**
- * Write Docker configuration files
- * @param {object} config - Configuration object
- * @returns {Promise<void>}
- */
-export async function writeDockerConfig(config) {
-  const dockerComposePath = getDockerComposePath();
-  const envPath = getEnvPath();
-
-  const dockerComposeContent = generateDockerCompose(config);
-  const envContent = generateEnvFile(config);
-
-  await fs.promises.writeFile(dockerComposePath, dockerComposeContent, { mode: 0o644 });
-  await fs.promises.writeFile(envPath, envContent, { mode: 0o600 });
-}
-
-/**
- * Start Docker containers
- * @returns {Promise<void>}
- */
-export async function startContainers() {
-  const configDir = getConfigDir();
-  const dockerComposePath = getDockerComposePath();
-
-  if (!fs.existsSync(dockerComposePath)) {
-    throw new Error('Docker configuration not found. Run "claude-phone setup" first.');
-  }
-
-  const compose = getComposeCommand();
-  const composeArgs = [...compose.args, '-f', dockerComposePath, 'up', '-d'];
-
-  return new Promise((resolve, reject) => {
-    const child = spawn(compose.cmd, composeArgs, {
-      cwd: configDir,
-      stdio: 'pipe'
-    });
-
-    let output = '';
-    child.stdout.on('data', (data) => {
-      output += data.toString();
-    });
-
-    child.stderr.on('data', (data) => {
-      output += data.toString();
-    });
-
-    child.on('close', (code) => {
-      if (code === 0) {
-        resolve();
-      } else {
-        // AC22: Detect ARM64 image pull failure
-        if (output.includes('no matching manifest') ||
-            output.includes('image with reference') && output.includes('arm64')) {
-          const error = new Error(
-            'ARM64 Docker image pull failed.\n\n' +
-            'Try manually pulling images:\n' +
-            '  docker pull drachtio/drachtio-server:latest\n' +
-            '  docker pull drachtio/drachtio-freeswitch-mrf:latest\n\n' +
-            'If images are not available for ARM64, you may need to build them locally.'
-          );
-          reject(error);
-        } else {
-          reject(new Error(`Docker compose failed (exit ${code}): ${output}`));
-        }
-      }
-    });
-  });
-}
-
-/**
- * Stop Docker containers
- * @returns {Promise<void>}
- */
-export async function stopContainers() {
-  const configDir = getConfigDir();
-  const dockerComposePath = getDockerComposePath();
-
-  if (!fs.existsSync(dockerComposePath)) {
-    // No containers to stop
-    return;
-  }
-
-  const compose = getComposeCommand();
-  const composeArgs = [...compose.args, '-f', dockerComposePath, 'down'];
-
-  return new Promise((resolve, reject) => {
-    const child = spawn(compose.cmd, composeArgs, {
-      cwd: configDir,
-      stdio: 'pipe'
-    });
-
-    let output = '';
-    child.stdout.on('data', (data) => {
-      output += data.toString();
-    });
-
-    child.stderr.on('data', (data) => {
-      output += data.toString();
-    });
-
-    child.on('close', (code) => {
-      if (code === 0) {
-        resolve();
-      } else {
-        reject(new Error(`Docker compose down failed (exit ${code}): ${output}`));
-      }
-    });
-  });
-}
-
-/**
- * Get status of Docker containers
- * @returns {Promise<Array<{name: string, status: string}>>}
- */
-export async function getContainerStatus() {
-  const dockerComposePath = getDockerComposePath();
-
-  if (!fs.existsSync(dockerComposePath)) {
-    return [];
-  }
-
-  const compose = getComposeCommand();
-  const composeArgs = [...compose.args, '-f', dockerComposePath, 'ps', '--format', 'json'];
-
-  return new Promise((resolve) => {
-    const child = spawn(compose.cmd, composeArgs, {
-      stdio: 'pipe'
-    });
-
-    let output = '';
-    child.stdout.on('data', (data) => {
-      output += data.toString();
-    });
-
-    child.on('close', (code) => {
-      if (code === 0) {
-        try {
-          // Parse JSON lines (one per container)
-          const lines = output.trim().split('\n').filter(l => l);
-          const containers = lines.map(line => {
-            const data = JSON.parse(line);
-            return {
-              name: data.Name || data.Service,
-              status: data.State || data.Status
-            };
-          });
-          resolve(containers);
-        } catch (error) {
-          resolve([]);
-        }
-      } else {
-        resolve([]);
-      }
-    });
-  });
-}
+import { spawn, execSync } from 'child_process';
+import crypto from 'crypto';
+import fs from 'fs';
+import path from 'path';
+import {
+  getDockerComposePath,
+  getEnvPath,
+  getConfigDir
+} from './config.js';
+import { getLocalIP } from './utils.js';
+
+/**
+ * Detect which docker compose command to use
+ * Some systems have 'docker compose' (plugin), others have 'docker-compose' (standalone)
+ * @returns {{cmd: string, args: string[]}} Command and base args for compose
+ */
+function getComposeCommand() {
+  // Try 'docker compose' (plugin) first
+  try {
+    execSync('docker compose version', { stdio: 'pipe' });
+    return { cmd: 'docker', args: ['compose'] };
+  } catch (e) {
+    // Fall back to standalone docker-compose
+    try {
+      execSync('docker-compose --version', { stdio: 'pipe' });
+      return { cmd: 'docker-compose', args: [] };
+    } catch (e2) {
+      // Default to plugin style, let it fail with helpful error
+      return { cmd: 'docker', args: ['compose'] };
+    }
+  }
+}
+
+/**
+ * Generate a random secret for Docker services
+ * @returns {string} Random 32-character hex string
+ */
+function generateSecret() {
+  return crypto.randomBytes(16).toString('hex');
+}
+
+/**
+ * Check if Docker is installed and running
+ * @returns {Promise<{installed: boolean, running: boolean, error?: string}>}
+ */
+export async function checkDocker() {
+  // Check if docker command exists
+  const installed = await new Promise((resolve) => {
+    const check = spawn('docker', ['--version']);
+    check.on('close', (code) => resolve(code === 0));
+    check.on('error', () => resolve(false));
+  });
+
+  if (!installed) {
+    return {
+      installed: false,
+      running: false,
+      error: 'Docker not found. Please install Docker from https://docs.docker.com/engine/install/'
+    };
+  }
+
+  // Check if Docker daemon is running by running a simple command
+  const running = await new Promise((resolve) => {
+    const check = spawn('docker', ['ps', '-q'], {
+      stdio: ['pipe', 'pipe', 'pipe']
+    });
+    check.on('close', (code) => resolve(code === 0));
+    check.on('error', () => resolve(false));
+  });
+
+  if (!running) {
+    return {
+      installed: true,
+      running: false,
+      error: 'Docker is installed but not running. Please start Docker Desktop.'
+    };
+  }
+
+  return {
+    installed: true,
+    running: true
+  };
+}
+
+/**
+ * Generate docker-compose.yml from config
+ * @param {object} config - Configuration object
+ * @returns {string} Docker compose YAML content
+ */
+export function generateDockerCompose(config) {
+  const drachtioPort = config.deployment?.pi?.drachtioPort || config.sip?.drachtioSipPort || 5070;
+  const rtpStart = config.server.rtpStart || 30000;
+  const rtpEnd = config.server.rtpEnd || 30100;
+
+  // This file is written to ~/.claude-phone/ (getDockerComposePath()), which
+  // has no Dockerfile or source of its own - those live in the installed npm
+  // package directory (config.paths.voiceApp's parent). `build: .` would try
+  // to build from ~/.claude-phone and fail (or silently reuse a stale cached
+  // image tag from an unrelated build, masking the failure) on any machine
+  // without that image already present.
+  const projectRoot = config.paths?.voiceApp
+    ? path.dirname(config.paths.voiceApp)
+    : '.';
+
+  // Single image: drachtio + FreeSWITCH + voice-app + STT + TTS under supervisord.
+  // They talk over 127.0.0.1, so there is no container DNS to misconfigure.
+  // Everything that must outlive a restart is on the ./data bind mount.
+  //
+  // EXTERNAL_IP is intentionally NOT set under `environment:` here - it comes
+  // from `.env` via env_file below. An explicit `environment:` entry would
+  // override env_file, so editing .env after a network change (a new LAN IP,
+  // a different office) would silently do nothing.
+  return `# Generated by \`claude-phone setup\` - edit .env, not this file.
+services:
+  claude-phone:
+    build: "${projectRoot.replace(/\\/g, '/')}"
+    image: claude-phone-local:latest
+    container_name: claude-phone
+    restart: unless-stopped
+    env_file:
+      - .env
+    environment:
+      - DRACHTIO_HOST=127.0.0.1
+      - FREESWITCH_HOST=127.0.0.1
+      - STT_LOCAL_URL=http://127.0.0.1:9001
+      - TTS_LOCAL_URL=http://127.0.0.1:9002
+      - AUDIO_BASE_URL=http://127.0.0.1:3000
+      - RTP_START=${rtpStart}
+      - RTP_END=${rtpEnd}
+    ports:
+      - "3000:3000"
+      - "${drachtioPort}:${drachtioPort}/udp"
+      - "${drachtioPort}:${drachtioPort}/tcp"
+      - "${rtpStart}-${rtpEnd}:${rtpStart}-${rtpEnd}/udp"
+    volumes:
+      - ./data:/data
+`;
+}
+
+/**
+ * Generate .env file from config
+ * @param {object} config - Configuration object
+ * @returns {string} Environment file content
+ */
+export function generateEnvFile(config) {
+  // Ensure secrets exist in config
+  if (!config.secrets) {
+    config.secrets = {
+      drachtio: generateSecret(),
+      freeswitch: generateSecret()
+    };
+  }
+
+  // 'auto' means re-detect the current LAN IP every time this is written
+  // (i.e. every `claude-phone start`), instead of using whatever IP was
+  // current the last time setup ran. A saved concrete IP goes stale the
+  // moment the machine moves networks (home <-> office, DHCP renewal) and
+  // nothing here writes to it again until setup is manually re-run.
+  const resolvedExternalIp = config.server.externalIp === 'auto'
+    ? getLocalIP()
+    : config.server.externalIp;
+
+  // Determine Claude API URL based on deployment mode
+  let claudeApiUrl;
+  if (config.deployment && config.deployment.mode === 'pi-split' && config.deployment.pi && config.deployment.pi.macIp) {
+    // Pi mode: point to remote API server
+    claudeApiUrl = `http://${config.deployment.pi.macIp}:${config.server.claudeApiPort}`;
+  } else if (config.deployment && config.deployment.mode === 'voice-server' && config.deployment.apiServerIp) {
+    // Voice server mode (non-Pi): point to remote API server
+    claudeApiUrl = `http://${config.deployment.apiServerIp}:${config.server.claudeApiPort}`;
+  } else {
+    // Both or api-server mode: local API server runs on the HOST (it shells
+    // out to the `claude` CLI directly), while voice-app runs in Docker on
+    // a bridge network — so it must reach the host via host.docker.internal,
+    // not localhost (which inside the container means the container itself).
+    claudeApiUrl = `http://host.docker.internal:${config.server.claudeApiPort}`;
+  }
+
+  const lines = [
+    '# ====================================',
+    '# WARNING: DO NOT SHARE THIS FILE',
+    '# Contains API keys and passwords',
+    '# ====================================',
+    '# Claude Phone Configuration',
+    '# Generated by claude-phone CLI',
+    '# ====================================',
+    '',
+    '# Network Configuration',
+    `EXTERNAL_IP=${resolvedExternalIp}`,
+    '',
+    '# Drachtio Configuration',
+    'DRACHTIO_HOST=drachtio',
+    'DRACHTIO_PORT=9022',
+    `DRACHTIO_SECRET=${config.secrets.drachtio}`,
+    // SIP port for Contact header (5070 when 3CX SBC is present, 5060 otherwise)
+    `DRACHTIO_SIP_PORT=${config.sip?.drachtioSipPort || config.deployment?.pi?.drachtioPort || 5070}`,
+    '',
+    '# FreeSWITCH Configuration',
+    'FREESWITCH_HOST=freeswitch',
+    'FREESWITCH_PORT=8021',
+    // Note: This is the default ESL password for drachtio/drachtio-freeswitch-mrf
+    'FREESWITCH_SECRET=JambonzR0ck$',
+    '',
+    '# 3CX / SIP Configuration',
+    `SIP_DOMAIN=${config.sip.domain}`,
+    // 'auto' means the 3CX SBC runs on this same PC, so its address is
+    // whatever this machine's current LAN IP is - re-resolved every start,
+    // same reasoning as EXTERNAL_IP above.
+    `SIP_REGISTRAR=${config.sip.registrar === 'auto' ? resolvedExternalIp : config.sip.registrar}`,
+    '',
+    '# Default extension (primary device)',
+    `SIP_EXTENSION=${config.devices[0].extension}`,
+    `SIP_AUTH_ID=${config.devices[0].authId}`,
+    `SIP_PASSWORD=${config.devices[0].password}`,
+    '',
+    '# Claude API Server',
+    `CLAUDE_API_URL=${claudeApiUrl}`,
+    '',
+    ...(config.api.mode === 'local' ? [
+      '# Local STT/TTS (no API keys — faster-whisper + Piper containers)',
+      'STT_MODE=local',
+      'TTS_MODE=local',
+      `STT_LOCAL_URL=${config.api.local?.sttUrl || 'http://stt-local:9001'}`,
+      `TTS_LOCAL_URL=${config.api.local?.ttsUrl || 'http://tts-local:9002'}`,
+      `AUDIO_BASE_URL=${config.api.local?.audioBaseUrl || 'http://voice-app:3000'}`,
+      `PIPER_VOICE=${config.devices[0].voice || config.api.local?.voice || 'en_US-lessac-medium'}`,
+      `WHISPER_MODEL=${config.api.local?.whisperModel || 'small'}`,
+      ''
+    ] : [
+      '# STT/TTS mode',
+      'STT_MODE=cloud',
+      'TTS_MODE=cloud',
+      '',
+      '# ElevenLabs TTS',
+      `ELEVENLABS_API_KEY=${config.api.elevenlabs.apiKey}`,
+      `ELEVENLABS_VOICE_ID=${config.devices[0].voiceId}`,
+      '',
+      '# OpenAI (Whisper STT)',
+      `OPENAI_API_KEY=${config.api.openai.apiKey}`,
+      ''
+    ]),
+    '# Application Settings',
+    `HTTP_PORT=${config.server.httpPort}`,
+    'WS_PORT=3001',
+    'AUDIO_DIR=/app/audio',
+    '',
+    '# Outbound Call Settings',
+    'MAX_CONVERSATION_TURNS=10',
+    'OUTBOUND_RING_TIMEOUT=30',
+    ''
+  ];
+
+  return lines.join('\n');
+}
+
+/**
+ * Write Docker configuration files
+ * @param {object} config - Configuration object
+ * @returns {Promise<void>}
+ */
+export async function writeDockerConfig(config) {
+  const dockerComposePath = getDockerComposePath();
+  const envPath = getEnvPath();
+
+  const dockerComposeContent = generateDockerCompose(config);
+  const envContent = generateEnvFile(config);
+
+  await fs.promises.writeFile(dockerComposePath, dockerComposeContent, { mode: 0o644 });
+  await fs.promises.writeFile(envPath, envContent, { mode: 0o600 });
+}
+
+/**
+ * Start Docker containers
+ * @returns {Promise<void>}
+ */
+export async function startContainers() {
+  const configDir = getConfigDir();
+  const dockerComposePath = getDockerComposePath();
+
+  if (!fs.existsSync(dockerComposePath)) {
+    throw new Error('Docker configuration not found. Run "claude-phone setup" first.');
+  }
+
+  const compose = getComposeCommand();
+  const composeArgs = [...compose.args, '-f', dockerComposePath, 'up', '-d'];
+
+  return new Promise((resolve, reject) => {
+    const child = spawn(compose.cmd, composeArgs, {
+      cwd: configDir,
+      stdio: 'pipe'
+    });
+
+    let output = '';
+    child.stdout.on('data', (data) => {
+      output += data.toString();
+    });
+
+    child.stderr.on('data', (data) => {
+      output += data.toString();
+    });
+
+    child.on('close', (code) => {
+      if (code === 0) {
+        resolve();
+      } else {
+        // AC22: Detect ARM64 image pull failure
+        if (output.includes('no matching manifest') ||
+            output.includes('image with reference') && output.includes('arm64')) {
+          const error = new Error(
+            'ARM64 Docker image pull failed.\n\n' +
+            'Try manually pulling images:\n' +
+            '  docker pull drachtio/drachtio-server:latest\n' +
+            '  docker pull drachtio/drachtio-freeswitch-mrf:latest\n\n' +
+            'If images are not available for ARM64, you may need to build them locally.'
+          );
+          reject(error);
+        } else {
+          reject(new Error(`Docker compose failed (exit ${code}): ${output}`));
+        }
+      }
+    });
+  });
+}
+
+/**
+ * Stop Docker containers
+ * @returns {Promise<void>}
+ */
+export async function stopContainers() {
+  const configDir = getConfigDir();
+  const dockerComposePath = getDockerComposePath();
+
+  if (!fs.existsSync(dockerComposePath)) {
+    // No containers to stop
+    return;
+  }
+
+  const compose = getComposeCommand();
+  const composeArgs = [...compose.args, '-f', dockerComposePath, 'down'];
+
+  return new Promise((resolve, reject) => {
+    const child = spawn(compose.cmd, composeArgs, {
+      cwd: configDir,
+      stdio: 'pipe'
+    });
+
+    let output = '';
+    child.stdout.on('data', (data) => {
+      output += data.toString();
+    });
+
+    child.stderr.on('data', (data) => {
+      output += data.toString();
+    });
+
+    child.on('close', (code) => {
+      if (code === 0) {
+        resolve();
+      } else {
+        reject(new Error(`Docker compose down failed (exit ${code}): ${output}`));
+      }
+    });
+  });
+}
+
+/**
+ * Get status of Docker containers
+ * @returns {Promise<Array<{name: string, status: string}>>}
+ */
+export async function getContainerStatus() {
+  const dockerComposePath = getDockerComposePath();
+
+  if (!fs.existsSync(dockerComposePath)) {
+    return [];
+  }
+
+  const compose = getComposeCommand();
+  const composeArgs = [...compose.args, '-f', dockerComposePath, 'ps', '--format', 'json'];
+
+  return new Promise((resolve) => {
+    const child = spawn(compose.cmd, composeArgs, {
+      stdio: 'pipe'
+    });
+
+    let output = '';
+    child.stdout.on('data', (data) => {
+      output += data.toString();
+    });
+
+    child.on('close', (code) => {
+      if (code === 0) {
+        try {
+          // Parse JSON lines (one per container)
+          const lines = output.trim().split('\n').filter(l => l);
+          const containers = lines.map(line => {
+            const data = JSON.parse(line);
+            return {
+              name: data.Name || data.Service,
+              status: data.State || data.Status
+            };
+          });
+          resolve(containers);
+        } catch (error) {
+          resolve([]);
+        }
+      } else {
+        resolve([]);
+      }
+    });
+  });
+}