dsh-realtime-audio-ws 0.2.3 → 0.2.5

package/lib/client/bundle.js

@@ -231,6 +231,12 @@ window.__ModuleLoader__.load({ id: "dsh-realtime-audio-ws",
             const source = context.createMediaStreamSource(stream);
             const node = context.createScriptProcessor(exports.CAPTURE_BUFFER, 1, 1);
             node.onaudioprocess = (event) => {
+                // Every quantum ships, **silent ones included, and that is load-bearing rather than incidental**: the
+                // provider's session timeline advances with the audio this client sends, and a context append is
+                // placed only while that timeline is advancing — so a client that skipped silent blocks (an
+                // obvious-looking saving) would silently freeze the session and lose every append after it. Measured,
+                // with the mechanism, in `docs/usable-window.md`; guarded by the capture-continuity case in
+                // `tests/client.spec.ts`.
                 const pcm16 = pcm16FromFloat32(event.inputBuffer.getChannelData(0));
                 socket?.send(new Uint8Array(pcm16.buffer));
             };

package/lib/client/index.js

@@ -227,6 +227,12 @@ function createAudioClient(deps) {
         const source = context.createMediaStreamSource(stream);
         const node = context.createScriptProcessor(exports.CAPTURE_BUFFER, 1, 1);
         node.onaudioprocess = (event) => {
+            // Every quantum ships, **silent ones included, and that is load-bearing rather than incidental**: the
+            // provider's session timeline advances with the audio this client sends, and a context append is
+            // placed only while that timeline is advancing — so a client that skipped silent blocks (an
+            // obvious-looking saving) would silently freeze the session and lose every append after it. Measured,
+            // with the mechanism, in `docs/usable-window.md`; guarded by the capture-continuity case in
+            // `tests/client.spec.ts`.
             const pcm16 = pcm16FromFloat32(event.inputBuffer.getChannelData(0));
             socket?.send(new Uint8Array(pcm16.buffer));
         };

package/lib/index.d.ts

@@ -40,12 +40,14 @@ export declare const Config: Schema<Schemastery.ObjectS<NoInfer<{
     maxConnections: Schema<number, number, "defined">;
     openSessionOnConnect: Schema<boolean, boolean, "defined">;
     diagnosticsPath: Schema<string, string, "defined">;
+    journalPath: Schema<string, string, "defined">;
 }>>, Schemastery.ObjectT<NoInfer<{
     path: Schema<string, string, "defined">;
     maxFrameBytes: Schema<number, number, "defined">;
     maxConnections: Schema<number, number, "defined">;
     openSessionOnConnect: Schema<boolean, boolean, "defined">;
     diagnosticsPath: Schema<string, string, "defined">;
+    journalPath: Schema<string, string, "defined">;
 }>>, "plain">;
 export declare function apply(ctx: Context, config: RealtimeAudioWsConfig): void;
 //# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAkBlD,OAAO,EAOL,KAAK,qBAAqB,EAC3B,MAAM,YAAY,CAAA;AAEnB,cAAc,YAAY,CAAA;AAC1B;;;;;;GAMG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAC5F,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,WAAW,GACjB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAA;AACzF,OAAO,EAAE,gBAAgB,EAAE,KAAK,eAAe,EAAE,KAAK,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACzH,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACrF,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAEpE,mBAAmB;AACnB,eAAO,MAAM,IAAI,sBAAsB,CAAA;AAEvC,eAAO,MAAM,MAAM;;;;;;;;;;;;aASjB,CAAA;AAqCF,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAqKvE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAkBlD,OAAO,EAOL,KAAK,qBAAqB,EAC3B,MAAM,YAAY,CAAA;AAEnB,cAAc,YAAY,CAAA;AAC1B;;;;;;GAMG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAC5F,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,WAAW,GACjB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAA;AACzF,OAAO,EAAE,gBAAgB,EAAE,KAAK,eAAe,EAAE,KAAK,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACzH,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACrF,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAIpE,mBAAmB;AACnB,eAAO,MAAM,IAAI,sBAAsB,CAAA;AAEvC,eAAO,MAAM,MAAM;;;;;;;;;;;;;;aAajB,CAAA;AAqCF,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAiMvE"}

package/lib/index.js

@@ -36,6 +36,7 @@ export { createControlHandler, parseControlFrame, } from './control.js';
 export { createUpgradeAcceptor, rejectUpgrade } from './upgrade.js';
 export { diagnosticsRoute } from './diagnostics.js';
 export { STRIP_ELEMENT_ID, stripBootstrap, stripMarkup, stripRows } from './strip.js';
+import { createJournalFileSink } from './journal-file.js';
 /** Plugin name. */
 export const name = 'realtime-audio-ws';
 export const Config = Schema.object({
@@ -47,6 +48,10 @@ export const Config = Schema.object({
     // microphone: a connection takes an explicit action, an authenticated one, and its absence is silence.
     openSessionOnConnect: Schema.boolean().default(DEFAULT_OPEN_SESSION_ON_CONNECT),
     diagnosticsPath: Schema.string().default(DEFAULT_DIAGNOSTICS_PATH),
+    // Empty means no file, and empty is the default: a plugin that writes files because it was installed is a
+    // plugin writing files in somebody else's directory. The deployment that wants a recording is the
+    // deployment that names a path.
+    journalPath: Schema.string().default(''),
 });
 export function apply(ctx, config) {
     ctx.inject(['connection', 'webServer', 'realtime'], (injected) => {
@@ -64,6 +69,24 @@ export function apply(ctx, config) {
         // constructor argument: the plugin that mints the token is the only one that can name it, and it
         // mints it here, after the journal already exists.
         journal.addSecrets([token]);
+        // What this plugin resolved, so the journal can be read without the profile beside it. Values only, and
+        // no field that could carry a secret: `journalPath` names a file, and the token went in on the line above
+        // so that it can never reach a record in the first place.
+        journal.record('config.resolved', {
+            plugin: 'dsh-realtime-audio-ws',
+            path: config.path,
+            openSessionOnConnect: String(config.openSessionOnConnect),
+            maxConnections: String(config.maxConnections),
+            maxFrameBytes: String(config.maxFrameBytes),
+            journalPath: config.journalPath,
+        });
+        // The record leaves the process when a path is named. Registered *after* the token, so that every entry
+        // the file receives has already been through the redaction that knows about it — a sink is handed
+        // entries after `record` has redacted them, and that ordering is the reason this is a sink rather than a
+        // second writer with its own idea of what a secret looks like.
+        if (config.journalPath.length > 0) {
+            journal.onEntry(createJournalFileSink(config.journalPath));
+        }
         // The injection event is declared by `@deepseek-ai/dsh-host-webserver`, which this package deliberately
         // does not import: importing it would augment `Context` with a second declaration of `webServer` and
         // turn the structural dependency above into a compile error. The name is cast at this one boundary.
@@ -82,9 +105,14 @@ export function apply(ctx, config) {
             path: config.path,
             clients: () => clients.size,
             voice: () => ctx.serial('realtime-agent/status'),
-            request: (verb) => verb === 'start'
-                ? ctx.serial('realtime-agent/start')
-                : ctx.serial('realtime-agent/stop'),
+            request: (verb) => {
+                // Only a start asks for a session; a stop is answered by the close entry that already follows it.
+                if (verb === 'start')
+                    journal.record('session.requested', { trigger: 'strip' });
+                return verb === 'start'
+                    ? ctx.serial('realtime-agent/start')
+                    : ctx.serial('realtime-agent/stop');
+            },
         });
         /**
          * The tail of the control-reply queue.
@@ -167,8 +195,13 @@ export function apply(ctx, config) {
                         journal.record('socket.accepted', { clients: String(clients.size), url: target });
                         // Ask for the session before the bridge goes in, so the first frames are written into a session
                         // that is being opened rather than dropped by the mic seam's no-session rule.
-                        if (live.openSessionOnConnect)
+                        if (live.openSessionOnConnect) {
+                            // Recorded on the side that asks. The opener records what came of the request, and the distance
+                            // between the two entries is the only thing that separates a listener which never ran from a
+                            // session nobody asked for — both of which are otherwise the same silence.
+                            journal.record('session.requested', { trigger: 'connect', clients: String(clients.size) });
                             ctx.emit('realtime-agent/start');
+                        }
                         attachAudioSocket(client, {
                             emitMic: (pcm16) => { ctx.emit('realtime-agent/mic', pcm16); },
                             subscribeAudio: (listener) => ctx.on('realtime-agent/audio', listener),

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAM7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,UAAU,GAEX,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACtC,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AACnE,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,uBAAuB,EACvB,+BAA+B,EAC/B,YAAY,GAGb,MAAM,YAAY,CAAA;AAEnB,cAAc,YAAY,CAAA;AAC1B;;;;;;GAMG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAA8B,MAAM,aAAa,CAAA;AAC5F,OAAO,EACL,oBAAoB,EACpB,iBAAiB,GAUlB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAwB,MAAM,cAAc,CAAA;AACzF,OAAO,EAAE,gBAAgB,EAAwE,MAAM,kBAAkB,CAAA;AACzH,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAGrF,mBAAmB;AACnB,MAAM,CAAC,MAAM,IAAI,GAAG,mBAAmB,CAAA;AAEvC,MAAM,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC;IAC3C,aAAa,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC;IAChE,cAAc,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC;IACjE,uGAAuG;IACvG,0GAA0G;IAC1G,uGAAuG;IACvG,oBAAoB,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,+BAA+B,CAAC;IAC/E,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC;CACnE,CAAC,CAAA;AAqCF,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,MAA6B;IAC/D,GAAG,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE;QAC/D,MAAM,QAAQ,GAAG,QAA+E,CAAA;QAChG,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QAC5D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAe,CAAA;QACtC,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAA;QAChC,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAA;QACzC,gGAAgG;QAChG,iGAAiG;QACjG,gFAAgF;QAChF,MAAM,IAAI,GAAG,EAAE,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,EAAE,CAAA;QAClE,qGAAqG;QACrG,qGAAqG;QACrG,iGAAiG;QACjG,mDAAmD;QACnD,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;QAC3B,wGAAwG;QACxG,qGAAqG;QACrG,oGAAoG;QACpG,MAAM,WAAW,GAAG,GAAG,CAAC,EAGZ,CAAA;QAEZ;;;;;;;WAOG;QACH,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ;YACpC,OAAO;YACP,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI;YAC3B,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,uBAAuB,CAAC;YAChD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO;gBACjC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,sBAAsB,CAAC;gBACpC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC;SACtC,CAAC,CAAA;QAEF;;;;;;;WAOG;QACH,IAAI,OAAO,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAA;QAEjD,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YAClB,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;gBACxD;oBACE,KAAK,EAAE,sBAAsB;oBAC7B,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,yEAAyE;oBACnF,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB;oBACpC,GAAG,EAAE,CAAC,KAAc,EAAE,EAAE,GAAG,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAA,CAAC,CAAC;iBAC/D;aACF,CAAC,CAAA;YACF,MAAM,GAAG,EAAE,GAAG,OAAO,EAAE,CAAA,CAAC,CAAC,CAAA;QAC3B,CAAC,EAAE,4BAA4B,CAAC,CAAA;QAEhC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;YACd,sGAAsG;YACtG,kGAAkG;YAClG,4FAA4F;YAC5F,WAAW,CAAC,wBAAwB,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC9C,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAC1B,MAAM,CAAC,IAAI,EACX,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,EAChF,KAAK,CACN,CAAC,CAAA;gBACF,+FAA+F;gBAC/F,uFAAuF;gBACvF,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC,CAAA;YAC5B,CAAC,CAAC,CAAA;YACF,MAAM,qBAAqB,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBACzE,IAAI,EAAE,MAAM,CAAC,eAAe;gBAC5B,KAAK;gBACL,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC;gBACxE,OAAO;aACR,CAAC,CAAC,CAAA;YACH,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,eAAe,CAAC;gBACpD,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;oBAC7B,iGAAiG;oBACjG,4FAA4F;oBAC5F,2FAA2F;oBAC3F,iGAAiG;oBACjG,0CAA0C;oBAC1C,EAAE;oBACF,iGAAiG;oBACjG,qFAAqF;oBACrF,kGAAkG;oBAClG,0CAA0C;oBAC1C,2FAA2F;oBAC3F,gGAAgG;oBAChG,iCAAiC;oBACjC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAA;oBAC5B,MAAM,SAAS,GAAG,UAAU,CAC1B,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,EACzC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EACrB,KAAK,CACN,CAAA;oBACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;wBAC5B,sFAAsF;wBACtF,wFAAwF;wBACxF,6FAA6F;wBAC7F,qCAAqC;wBACrC,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;wBACjE,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;wBAChC,OAAM;oBACR,CAAC;oBACD,QAAQ,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;wBACnD,IAAI,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;4BAC1C,oFAAoF;4BACpF,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;4BACtE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;4BAC1B,OAAM;wBACR,CAAC;wBACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;wBACnB,yFAAyF;wBACzF,uFAAuF;wBACvF,+FAA+F;wBAC/F,0FAA0F;wBAC1F,4DAA4D;wBAC5D,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;wBACjF,gGAAgG;wBAChG,8EAA8E;wBAC9E,IAAI,IAAI,CAAC,oBAAoB;4BAAE,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;wBAC/D,iBAAiB,CAAC,MAAM,EAAE;4BACxB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAA,CAAC,CAAC;4BAC7D,cAAc,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,sBAAsB,EAAE,QAAQ,CAAC;4BACtE,aAAa,EAAE,MAAM,CAAC,aAAa;4BACnC,4FAA4F;4BAC5F,4FAA4F;4BAC5F,uFAAuF;4BACvF,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gCAC1B,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;4BAC1D,CAAC;4BACD,QAAQ,EAAE,GAAG,EAAE;gCACb,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;gCACtB,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gCAClE,2FAA2F;gCAC3F,4FAA4F;gCAC5F,IAAI,IAAI,CAAC,oBAAoB,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;oCAAE,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;4BACtF,CAAC;yBACF,CAAC,CAAA;oBACJ,CAAC,CAAC,CAAA;gBACJ,CAAC;aACF,CAAC,CAAA;YACF,OAAO,KAAK,IAAI,EAAE;gBAChB,UAAU,EAAE,CAAA;gBACZ,qBAAqB,EAAE,CAAA;gBACvB,KAAK,MAAM,MAAM,IAAI,OAAO;oBAAE,MAAM,CAAC,SAAS,EAAE,CAAA;gBAChD,OAAO,CAAC,KAAK,EAAE,CAAA;gBACf,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAA;YACxB,CAAC,CAAA;QACH,CAAC,EAAE,sBAAsB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAM7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,UAAU,GAEX,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACtC,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AACnE,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,uBAAuB,EACvB,+BAA+B,EAC/B,YAAY,GAGb,MAAM,YAAY,CAAA;AAEnB,cAAc,YAAY,CAAA;AAC1B;;;;;;GAMG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAA8B,MAAM,aAAa,CAAA;AAC5F,OAAO,EACL,oBAAoB,EACpB,iBAAiB,GAUlB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAwB,MAAM,cAAc,CAAA;AACzF,OAAO,EAAE,gBAAgB,EAAwE,MAAM,kBAAkB,CAAA;AACzH,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAGrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA;AAEzD,mBAAmB;AACnB,MAAM,CAAC,MAAM,IAAI,GAAG,mBAAmB,CAAA;AAEvC,MAAM,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC;IAC3C,aAAa,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC;IAChE,cAAc,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC;IACjE,uGAAuG;IACvG,0GAA0G;IAC1G,uGAAuG;IACvG,oBAAoB,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,+BAA+B,CAAC;IAC/E,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC;IAClE,0GAA0G;IAC1G,kGAAkG;IAClG,gCAAgC;IAChC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACzC,CAAC,CAAA;AAqCF,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,MAA6B;IAC/D,GAAG,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE;QAC/D,MAAM,QAAQ,GAAG,QAA+E,CAAA;QAChG,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QAC5D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAe,CAAA;QACtC,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAA;QAChC,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAA;QACzC,gGAAgG;QAChG,iGAAiG;QACjG,gFAAgF;QAChF,MAAM,IAAI,GAAG,EAAE,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,EAAE,CAAA;QAClE,qGAAqG;QACrG,qGAAqG;QACrG,iGAAiG;QACjG,mDAAmD;QACnD,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;QAC3B,wGAAwG;QACxG,0GAA0G;QAC1G,0DAA0D;QAC1D,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE;YAChC,MAAM,EAAE,uBAAuB;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC;YACzD,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;YAC7C,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;YAC3C,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC,CAAA;QACF,wGAAwG;QACxG,kGAAkG;QAClG,yGAAyG;QACzG,+DAA+D;QAC/D,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAA;QAC5D,CAAC;QACD,wGAAwG;QACxG,qGAAqG;QACrG,oGAAoG;QACpG,MAAM,WAAW,GAAG,GAAG,CAAC,EAGZ,CAAA;QAEZ;;;;;;;WAOG;QACH,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ;YACpC,OAAO;YACP,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI;YAC3B,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,uBAAuB,CAAC;YAChD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBAChB,kGAAkG;gBAClG,IAAI,IAAI,KAAK,OAAO;oBAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;gBAC/E,OAAO,IAAI,KAAK,OAAO;oBACrB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,sBAAsB,CAAC;oBACpC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAA;YACvC,CAAC;SACF,CAAC,CAAA;QAEF;;;;;;;WAOG;QACH,IAAI,OAAO,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAA;QAEjD,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YAClB,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;gBACxD;oBACE,KAAK,EAAE,sBAAsB;oBAC7B,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,yEAAyE;oBACnF,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB;oBACpC,GAAG,EAAE,CAAC,KAAc,EAAE,EAAE,GAAG,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAA,CAAC,CAAC;iBAC/D;aACF,CAAC,CAAA;YACF,MAAM,GAAG,EAAE,GAAG,OAAO,EAAE,CAAA,CAAC,CAAC,CAAA;QAC3B,CAAC,EAAE,4BAA4B,CAAC,CAAA;QAEhC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;YACd,sGAAsG;YACtG,kGAAkG;YAClG,4FAA4F;YAC5F,WAAW,CAAC,wBAAwB,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC9C,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAC1B,MAAM,CAAC,IAAI,EACX,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,EAChF,KAAK,CACN,CAAC,CAAA;gBACF,+FAA+F;gBAC/F,uFAAuF;gBACvF,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC,CAAA;YAC5B,CAAC,CAAC,CAAA;YACF,MAAM,qBAAqB,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBACzE,IAAI,EAAE,MAAM,CAAC,eAAe;gBAC5B,KAAK;gBACL,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC;gBACxE,OAAO;aACR,CAAC,CAAC,CAAA;YACH,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,eAAe,CAAC;gBACpD,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;oBAC7B,iGAAiG;oBACjG,4FAA4F;oBAC5F,2FAA2F;oBAC3F,iGAAiG;oBACjG,0CAA0C;oBAC1C,EAAE;oBACF,iGAAiG;oBACjG,qFAAqF;oBACrF,kGAAkG;oBAClG,0CAA0C;oBAC1C,2FAA2F;oBAC3F,gGAAgG;oBAChG,iCAAiC;oBACjC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAA;oBAC5B,MAAM,SAAS,GAAG,UAAU,CAC1B,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,EACzC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EACrB,KAAK,CACN,CAAA;oBACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;wBAC5B,sFAAsF;wBACtF,wFAAwF;wBACxF,6FAA6F;wBAC7F,qCAAqC;wBACrC,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;wBACjE,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;wBAChC,OAAM;oBACR,CAAC;oBACD,QAAQ,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;wBACnD,IAAI,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;4BAC1C,oFAAoF;4BACpF,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;4BACtE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;4BAC1B,OAAM;wBACR,CAAC;wBACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;wBACnB,yFAAyF;wBACzF,uFAAuF;wBACvF,+FAA+F;wBAC/F,0FAA0F;wBAC1F,4DAA4D;wBAC5D,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;wBACjF,gGAAgG;wBAChG,8EAA8E;wBAC9E,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;4BAC9B,gGAAgG;4BAChG,6FAA6F;4BAC7F,2EAA2E;4BAC3E,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;4BAC1F,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;wBAClC,CAAC;wBACD,iBAAiB,CAAC,MAAM,EAAE;4BACxB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAA,CAAC,CAAC;4BAC7D,cAAc,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,sBAAsB,EAAE,QAAQ,CAAC;4BACtE,aAAa,EAAE,MAAM,CAAC,aAAa;4BACnC,4FAA4F;4BAC5F,4FAA4F;4BAC5F,uFAAuF;4BACvF,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gCAC1B,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;4BAC1D,CAAC;4BACD,QAAQ,EAAE,GAAG,EAAE;gCACb,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;gCACtB,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gCAClE,2FAA2F;gCAC3F,4FAA4F;gCAC5F,IAAI,IAAI,CAAC,oBAAoB,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;oCAAE,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;4BACtF,CAAC;yBACF,CAAC,CAAA;oBACJ,CAAC,CAAC,CAAA;gBACJ,CAAC;aACF,CAAC,CAAA;YACF,OAAO,KAAK,IAAI,EAAE;gBAChB,UAAU,EAAE,CAAA;gBACZ,qBAAqB,EAAE,CAAA;gBACvB,KAAK,MAAM,MAAM,IAAI,OAAO;oBAAE,MAAM,CAAC,SAAS,EAAE,CAAA;gBAChD,OAAO,CAAC,KAAK,EAAE,CAAA;gBACf,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAA;YACxB,CAAC,CAAA;QACH,CAAC,EAAE,sBAAsB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/lib/journal-file.d.ts

@@ -0,0 +1,39 @@
+/**
+ * A journal sink that appends to a file, so the record outlives the process that made it.
+ *
+ * The journal has always *held* everything worth knowing and has always been unable to hand it over: it is
+ * served over a route that wants a per-boot capability token, which means the record can be read by the page
+ * that holds the token and by nobody else, and it cannot be read after the fact at all. Every failure this
+ * plugin has had was diagnosed by reading somebody else's log — a harness session file off disk, or a
+ * `curl` at a route that answered 401. This is the missing half: the same entries, on disk, readable with
+ * `cat` by whoever is handed the file.
+ *
+ * ## Why `appendFileSync`, deliberately
+ *
+ * The ordering of a diagnostic record is the record. An asynchronous append can interleave two entries or
+ * lose one to a process that exits during the write, and the failure this exists to explain is usually the
+ * last thing that happened. So each line is written synchronously, as one line, and a reader can trust that
+ * the file is ordered and complete up to the last entry it contains.
+ *
+ * ## Redaction already happened
+ *
+ * A sink is handed entries *after* `Journal.record` has redacted them, so the file carries exactly what the
+ * route would have served and never the values named in `redactSecrets`. That ordering is the whole reason
+ * this is a sink and not a second writer with its own copy of the redaction rules — two code paths that must
+ * agree about what a secret looks like are two code paths that eventually disagree.
+ *
+ * @module dsh-realtime-audio-ws/journal-file
+ */
+import type { JournalEntry } from 'dsh-realtime';
+/**
+ * Build a sink that appends each entry to `path` as one JSON object per line.
+ *
+ * The parent directory is created here, at construction, rather than on the first write. That is the one
+ * failure this can have that is worth being loud about — a path that cannot be written — and at construction
+ * it is a startup error a caller can refuse to launch on, instead of a silent nothing that looks exactly
+ * like a quiet session. A *later* write that fails is swallowed by `Journal.onEntry`'s guard, by design.
+ * @param path - absolute or relative file path; the file is appended to, never truncated.
+ * @returns the sink, ready for `Journal.onEntry`.
+ */
+export declare function createJournalFileSink(path: string): (entry: JournalEntry) => void;
+//# sourceMappingURL=journal-file.d.ts.map

package/lib/journal-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal-file.d.ts","sourceRoot":"","sources":["../src/journal-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAEhD;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAKjF"}

package/lib/journal-file.js

@@ -0,0 +1,45 @@
+/**
+ * A journal sink that appends to a file, so the record outlives the process that made it.
+ *
+ * The journal has always *held* everything worth knowing and has always been unable to hand it over: it is
+ * served over a route that wants a per-boot capability token, which means the record can be read by the page
+ * that holds the token and by nobody else, and it cannot be read after the fact at all. Every failure this
+ * plugin has had was diagnosed by reading somebody else's log — a harness session file off disk, or a
+ * `curl` at a route that answered 401. This is the missing half: the same entries, on disk, readable with
+ * `cat` by whoever is handed the file.
+ *
+ * ## Why `appendFileSync`, deliberately
+ *
+ * The ordering of a diagnostic record is the record. An asynchronous append can interleave two entries or
+ * lose one to a process that exits during the write, and the failure this exists to explain is usually the
+ * last thing that happened. So each line is written synchronously, as one line, and a reader can trust that
+ * the file is ordered and complete up to the last entry it contains.
+ *
+ * ## Redaction already happened
+ *
+ * A sink is handed entries *after* `Journal.record` has redacted them, so the file carries exactly what the
+ * route would have served and never the values named in `redactSecrets`. That ordering is the whole reason
+ * this is a sink and not a second writer with its own copy of the redaction rules — two code paths that must
+ * agree about what a secret looks like are two code paths that eventually disagree.
+ *
+ * @module dsh-realtime-audio-ws/journal-file
+ */
+import { appendFileSync, mkdirSync } from 'node:fs';
+import { dirname } from 'node:path';
+/**
+ * Build a sink that appends each entry to `path` as one JSON object per line.
+ *
+ * The parent directory is created here, at construction, rather than on the first write. That is the one
+ * failure this can have that is worth being loud about — a path that cannot be written — and at construction
+ * it is a startup error a caller can refuse to launch on, instead of a silent nothing that looks exactly
+ * like a quiet session. A *later* write that fails is swallowed by `Journal.onEntry`'s guard, by design.
+ * @param path - absolute or relative file path; the file is appended to, never truncated.
+ * @returns the sink, ready for `Journal.onEntry`.
+ */
+export function createJournalFileSink(path) {
+    mkdirSync(dirname(path), { recursive: true });
+    return (entry) => {
+        appendFileSync(path, `${JSON.stringify(entry)}\n`);
+    };
+}
+//# sourceMappingURL=journal-file.js.map

package/lib/journal-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal-file.js","sourceRoot":"","sources":["../src/journal-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAGnC;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7C,OAAO,CAAC,KAAmB,EAAQ,EAAE;QACnC,cAAc,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACpD,CAAC,CAAA;AACH,CAAC"}

package/lib/strip.d.ts

@@ -33,10 +33,17 @@ export declare const STRIP_ELEMENT_ID = "dsh-realtime-strip";
 /**
  * The panel's container, as markup.
  *
- * Fixed to the bottom right and deliberately nearly unstyled: it sits inside the host's own page, so it
- * inherits that page's font and colour rather than inventing a second visual language beside it. A
- * translucent wash rather than a border, because a border here would be visual noise around a strip whose
- * job is to be glanced at.
+ * Fixed to the bottom right, inheriting the host's font and colour rather than inventing a second visual
+ * language beside it — but **opaque**, and that is a correction rather than a taste. This panel sits over
+ * the host's own text, so a translucent wash lets the page show through and the two become unreadable
+ * together: two texts superimposed, neither of them legible. That was reported from a screenshot of the
+ * running app, which is the only way it was ever going to be found — nothing in a DOM test can see what is
+ * *behind* the panel.
+ *
+ * `Canvas` is the theme's own surface colour, so the panel follows light or dark mode without naming a
+ * palette of its own, and the 6% tint of the inherited colour keeps the surface from reading as a hole
+ * punched in the page. The soft shadow says it sits above the page — not a border, which would be visual
+ * noise around a strip whose job is to be glanced at.
  * @returns one `html` row's payload.
  */
 export declare function stripMarkup(): string;

package/lib/strip.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"strip.d.ts","sourceRoot":"","sources":["../src/strip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAEjD,8FAA8F;AAC9F,eAAO,MAAM,gBAAgB,uBAAuB,CAAA;AAEpD;;;;;;;;GAQG;AACH,wBAAgB,WAAW,IAAI,MAAM,CASpC;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAQvC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,IAAI,WAAW,EAAE,CAKzC"}
+{"version":3,"file":"strip.d.ts","sourceRoot":"","sources":["../src/strip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAEjD,8FAA8F;AAC9F,eAAO,MAAM,gBAAgB,uBAAuB,CAAA;AAEpD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAUpC;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAQvC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,IAAI,WAAW,EAAE,CAKzC"}

package/lib/strip.js

@@ -32,10 +32,17 @@ export const STRIP_ELEMENT_ID = 'dsh-realtime-strip';
 /**
  * The panel's container, as markup.
  *
- * Fixed to the bottom right and deliberately nearly unstyled: it sits inside the host's own page, so it
- * inherits that page's font and colour rather than inventing a second visual language beside it. A
- * translucent wash rather than a border, because a border here would be visual noise around a strip whose
- * job is to be glanced at.
+ * Fixed to the bottom right, inheriting the host's font and colour rather than inventing a second visual
+ * language beside it — but **opaque**, and that is a correction rather than a taste. This panel sits over
+ * the host's own text, so a translucent wash lets the page show through and the two become unreadable
+ * together: two texts superimposed, neither of them legible. That was reported from a screenshot of the
+ * running app, which is the only way it was ever going to be found — nothing in a DOM test can see what is
+ * *behind* the panel.
+ *
+ * `Canvas` is the theme's own surface colour, so the panel follows light or dark mode without naming a
+ * palette of its own, and the 6% tint of the inherited colour keeps the surface from reading as a hole
+ * punched in the page. The soft shadow says it sits above the page — not a border, which would be visual
+ * noise around a strip whose job is to be glanced at.
  * @returns one `html` row's payload.
  */
 export function stripMarkup() {
@@ -44,7 +51,8 @@ export function stripMarkup() {
         ' style="position:fixed;right:12px;bottom:12px;z-index:40;',
         'max-width:26rem;max-height:60vh;overflow:auto;padding:10px 12px;',
         'font:inherit;color:inherit;line-height:1.4;',
-        'background:color-mix(in srgb, currentColor 8%, transparent);border-radius:10px">',
+        'background:color-mix(in srgb, Canvas 94%, currentColor);',
+        'box-shadow:0 4px 16px rgb(0 0 0 / 0.18);border-radius:10px">',
         '</div>',
     ].join('');
 }

package/lib/strip.js.map

@@ -1 +1 @@
-{"version":3,"file":"strip.js","sourceRoot":"","sources":["../src/strip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,8FAA8F;AAC9F,MAAM,CAAC,MAAM,gBAAgB,GAAG,oBAAoB,CAAA;AAEpD;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO;QACL,YAAY,gBAAgB,GAAG;QAC/B,2DAA2D;QAC3D,kEAAkE;QAClE,6CAA6C;QAC7C,kFAAkF;QAClF,QAAQ;KACT,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACZ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO;QACL,iBAAiB;QACjB,iHAAiH;QACjH,WAAW;QACX,kIAAkI;QAClI,MAAM;KACP,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO;QACL,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;QACxD,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE;KAC9D,CAAA;AACH,CAAC"}
+{"version":3,"file":"strip.js","sourceRoot":"","sources":["../src/strip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,8FAA8F;AAC9F,MAAM,CAAC,MAAM,gBAAgB,GAAG,oBAAoB,CAAA;AAEpD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO;QACL,YAAY,gBAAgB,GAAG;QAC/B,2DAA2D;QAC3D,kEAAkE;QAClE,6CAA6C;QAC7C,0DAA0D;QAC1D,8DAA8D;QAC9D,QAAQ;KACT,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACZ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO;QACL,iBAAiB;QACjB,iHAAiH;QACjH,WAAW;QACX,kIAAkI;QAClI,MAAM;KACP,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO;QACL,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;QACxD,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE;KAC9D,CAAA;AACH,CAAC"}

package/lib/types.d.ts

@@ -61,6 +61,14 @@ export interface RealtimeAudioWsConfig {
      * more to a stranger than an empty socket.
      */
     readonly diagnosticsPath: string;
+    /**
+     * File the journal is appended to, one JSON object per line. Empty means no file.
+     *
+     * Off by default, and named by the deployment that wants a recording: the journal is held in memory and
+     * served over a route that wants a capability token, so a deployment that needs the record to outlive the
+     * process — or to be handed to somebody else — says so here.
+     */
+    readonly journalPath: string;
 }
 /**
  * The slice of a WebSocket this package uses, described structurally.

package/lib/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,0GAA0G;AAC1G,eAAO,MAAM,YAAY,wBAAwB,CAAA;AAEjD,6FAA6F;AAC7F,eAAO,MAAM,uBAAuB,SAAU,CAAA;AAE9C,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,IAAI,CAAA;AAExC,0GAA0G;AAC1G,eAAO,MAAM,+BAA+B,OAAO,CAAA;AAEnD;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,8BAA8B,CAAA;AAEnE,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B;;;OAGG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B;;;;;;;;OAQG;IACH,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAA;IACtC;;;;;;OAMG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;CACjC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAA;IACrC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3C,SAAS,IAAI,IAAI,CAAA;IACjB,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAA;IACnF,EAAE,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,OAAO,CAAA;CAC9E"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,0GAA0G;AAC1G,eAAO,MAAM,YAAY,wBAAwB,CAAA;AAEjD,6FAA6F;AAC7F,eAAO,MAAM,uBAAuB,SAAU,CAAA;AAE9C,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,IAAI,CAAA;AAExC,0GAA0G;AAC1G,eAAO,MAAM,+BAA+B,OAAO,CAAA;AAEnD;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,8BAA8B,CAAA;AAEnE,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B;;;OAGG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B;;;;;;;;OAQG;IACH,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAA;IACtC;;;;;;OAMG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAA;IACrC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3C,SAAS,IAAI,IAAI,CAAA;IACjB,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAA;IACnF,EAAE,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,OAAO,CAAA;CAC9E"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-realtime-audio-ws",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "description": "The host end of the client half's transport: a WebSocket upgrade route that bridges microphone audio in and agent speech out.",
   "type": "module",
   "main": "lib/index.js",
@@ -52,8 +52,8 @@
   },
   "dependencies": {
     "ws": "^8.22.0",
-    "dsh-realtime": "^0.2.3",
-    "dsh-realtime-agent": "^0.2.7"
+    "dsh-realtime": "^0.2.6",
+    "dsh-realtime-agent": "^0.2.9"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.3",

package/src/client/index.ts

@@ -359,6 +359,12 @@ export function createAudioClient(deps: ClientAudioDeps): ClientAudio {
     const source = context.createMediaStreamSource(stream)
     const node = context.createScriptProcessor(CAPTURE_BUFFER, 1, 1)
     node.onaudioprocess = (event) => {
+      // Every quantum ships, **silent ones included, and that is load-bearing rather than incidental**: the
+      // provider's session timeline advances with the audio this client sends, and a context append is
+      // placed only while that timeline is advancing — so a client that skipped silent blocks (an
+      // obvious-looking saving) would silently freeze the session and lose every append after it. Measured,
+      // with the mechanism, in `docs/usable-window.md`; guarded by the capture-continuity case in
+      // `tests/client.spec.ts`.
       const pcm16 = pcm16FromFloat32(event.inputBuffer.getChannelData(0))
       socket?.send(new Uint8Array(pcm16.buffer))
     }

package/src/index.ts

@@ -72,6 +72,8 @@ export { diagnosticsRoute, type DiagnosticsDeps, type DiagnosticsJournal, type D
 export { STRIP_ELEMENT_ID, stripBootstrap, stripMarkup, stripRows } from './strip.ts'
 export type { InjectedGlobalRow, InjectedRow } from './injection.ts'
 
+import { createJournalFileSink } from './journal-file.ts'
+
 /** Plugin name. */
 export const name = 'realtime-audio-ws'
 
@@ -84,6 +86,10 @@ export const Config = Schema.object({
   // microphone: a connection takes an explicit action, an authenticated one, and its absence is silence.
   openSessionOnConnect: Schema.boolean().default(DEFAULT_OPEN_SESSION_ON_CONNECT),
   diagnosticsPath: Schema.string().default(DEFAULT_DIAGNOSTICS_PATH),
+  // Empty means no file, and empty is the default: a plugin that writes files because it was installed is a
+  // plugin writing files in somebody else's directory. The deployment that wants a recording is the
+  // deployment that names a path.
+  journalPath: Schema.string().default(''),
 })
 
 /**
@@ -137,6 +143,24 @@ export function apply(ctx: Context, config: RealtimeAudioWsConfig): void {
     // constructor argument: the plugin that mints the token is the only one that can name it, and it
     // mints it here, after the journal already exists.
     journal.addSecrets([token])
+    // What this plugin resolved, so the journal can be read without the profile beside it. Values only, and
+    // no field that could carry a secret: `journalPath` names a file, and the token went in on the line above
+    // so that it can never reach a record in the first place.
+    journal.record('config.resolved', {
+      plugin: 'dsh-realtime-audio-ws',
+      path: config.path,
+      openSessionOnConnect: String(config.openSessionOnConnect),
+      maxConnections: String(config.maxConnections),
+      maxFrameBytes: String(config.maxFrameBytes),
+      journalPath: config.journalPath,
+    })
+    // The record leaves the process when a path is named. Registered *after* the token, so that every entry
+    // the file receives has already been through the redaction that knows about it — a sink is handed
+    // entries after `record` has redacted them, and that ordering is the reason this is a sink rather than a
+    // second writer with its own idea of what a secret looks like.
+    if (config.journalPath.length > 0) {
+      journal.onEntry(createJournalFileSink(config.journalPath))
+    }
     // The injection event is declared by `@deepseek-ai/dsh-host-webserver`, which this package deliberately
     // does not import: importing it would augment `Context` with a second declaration of `webServer` and
     // turn the structural dependency above into a compile error. The name is cast at this one boundary.
@@ -159,9 +183,13 @@ export function apply(ctx: Context, config: RealtimeAudioWsConfig): void {
       path: config.path,
       clients: () => clients.size,
       voice: () => ctx.serial('realtime-agent/status'),
-      request: (verb) => verb === 'start'
-        ? ctx.serial('realtime-agent/start')
-        : ctx.serial('realtime-agent/stop'),
+      request: (verb) => {
+        // Only a start asks for a session; a stop is answered by the close entry that already follows it.
+        if (verb === 'start') journal.record('session.requested', { trigger: 'strip' })
+        return verb === 'start'
+          ? ctx.serial('realtime-agent/start')
+          : ctx.serial('realtime-agent/stop')
+      },
     })
 
     /**
@@ -255,7 +283,13 @@ export function apply(ctx: Context, config: RealtimeAudioWsConfig): void {
             journal.record('socket.accepted', { clients: String(clients.size), url: target })
             // Ask for the session before the bridge goes in, so the first frames are written into a session
             // that is being opened rather than dropped by the mic seam's no-session rule.
-            if (live.openSessionOnConnect) ctx.emit('realtime-agent/start')
+            if (live.openSessionOnConnect) {
+              // Recorded on the side that asks. The opener records what came of the request, and the distance
+              // between the two entries is the only thing that separates a listener which never ran from a
+              // session nobody asked for — both of which are otherwise the same silence.
+              journal.record('session.requested', { trigger: 'connect', clients: String(clients.size) })
+              ctx.emit('realtime-agent/start')
+            }
             attachAudioSocket(client, {
               emitMic: (pcm16) => { ctx.emit('realtime-agent/mic', pcm16) },
               subscribeAudio: (listener) => ctx.on('realtime-agent/audio', listener),

package/src/journal-file.ts

@@ -0,0 +1,47 @@
+/**
+ * A journal sink that appends to a file, so the record outlives the process that made it.
+ *
+ * The journal has always *held* everything worth knowing and has always been unable to hand it over: it is
+ * served over a route that wants a per-boot capability token, which means the record can be read by the page
+ * that holds the token and by nobody else, and it cannot be read after the fact at all. Every failure this
+ * plugin has had was diagnosed by reading somebody else's log — a harness session file off disk, or a
+ * `curl` at a route that answered 401. This is the missing half: the same entries, on disk, readable with
+ * `cat` by whoever is handed the file.
+ *
+ * ## Why `appendFileSync`, deliberately
+ *
+ * The ordering of a diagnostic record is the record. An asynchronous append can interleave two entries or
+ * lose one to a process that exits during the write, and the failure this exists to explain is usually the
+ * last thing that happened. So each line is written synchronously, as one line, and a reader can trust that
+ * the file is ordered and complete up to the last entry it contains.
+ *
+ * ## Redaction already happened
+ *
+ * A sink is handed entries *after* `Journal.record` has redacted them, so the file carries exactly what the
+ * route would have served and never the values named in `redactSecrets`. That ordering is the whole reason
+ * this is a sink and not a second writer with its own copy of the redaction rules — two code paths that must
+ * agree about what a secret looks like are two code paths that eventually disagree.
+ *
+ * @module dsh-realtime-audio-ws/journal-file
+ */
+
+import { appendFileSync, mkdirSync } from 'node:fs'
+import { dirname } from 'node:path'
+import type { JournalEntry } from 'dsh-realtime'
+
+/**
+ * Build a sink that appends each entry to `path` as one JSON object per line.
+ *
+ * The parent directory is created here, at construction, rather than on the first write. That is the one
+ * failure this can have that is worth being loud about — a path that cannot be written — and at construction
+ * it is a startup error a caller can refuse to launch on, instead of a silent nothing that looks exactly
+ * like a quiet session. A *later* write that fails is swallowed by `Journal.onEntry`'s guard, by design.
+ * @param path - absolute or relative file path; the file is appended to, never truncated.
+ * @returns the sink, ready for `Journal.onEntry`.
+ */
+export function createJournalFileSink(path: string): (entry: JournalEntry) => void {
+  mkdirSync(dirname(path), { recursive: true })
+  return (entry: JournalEntry): void => {
+    appendFileSync(path, `${JSON.stringify(entry)}\n`)
+  }
+}

package/src/strip.ts

@@ -36,10 +36,17 @@ export const STRIP_ELEMENT_ID = 'dsh-realtime-strip'
 /**
  * The panel's container, as markup.
  *
- * Fixed to the bottom right and deliberately nearly unstyled: it sits inside the host's own page, so it
- * inherits that page's font and colour rather than inventing a second visual language beside it. A
- * translucent wash rather than a border, because a border here would be visual noise around a strip whose
- * job is to be glanced at.
+ * Fixed to the bottom right, inheriting the host's font and colour rather than inventing a second visual
+ * language beside it — but **opaque**, and that is a correction rather than a taste. This panel sits over
+ * the host's own text, so a translucent wash lets the page show through and the two become unreadable
+ * together: two texts superimposed, neither of them legible. That was reported from a screenshot of the
+ * running app, which is the only way it was ever going to be found — nothing in a DOM test can see what is
+ * *behind* the panel.
+ *
+ * `Canvas` is the theme's own surface colour, so the panel follows light or dark mode without naming a
+ * palette of its own, and the 6% tint of the inherited colour keeps the surface from reading as a hole
+ * punched in the page. The soft shadow says it sits above the page — not a border, which would be visual
+ * noise around a strip whose job is to be glanced at.
  * @returns one `html` row's payload.
  */
 export function stripMarkup(): string {
@@ -48,7 +55,8 @@ export function stripMarkup(): string {
     ' style="position:fixed;right:12px;bottom:12px;z-index:40;',
     'max-width:26rem;max-height:60vh;overflow:auto;padding:10px 12px;',
     'font:inherit;color:inherit;line-height:1.4;',
-    'background:color-mix(in srgb, currentColor 8%, transparent);border-radius:10px">',
+    'background:color-mix(in srgb, Canvas 94%, currentColor);',
+    'box-shadow:0 4px 16px rgb(0 0 0 / 0.18);border-radius:10px">',
     '</div>',
   ].join('')
 }

package/src/types.ts

@@ -67,6 +67,14 @@ export interface RealtimeAudioWsConfig {
    * more to a stranger than an empty socket.
    */
   readonly diagnosticsPath: string
+  /**
+   * File the journal is appended to, one JSON object per line. Empty means no file.
+   *
+   * Off by default, and named by the deployment that wants a recording: the journal is held in memory and
+   * served over a route that wants a capability token, so a deployment that needs the record to outlive the
+   * process — or to be handed to somebody else — says so here.
+   */
+  readonly journalPath: string
 }
 
 /**