mac-voice-mcp 0.1.0 → 0.1.1

package/CHANGELOG.md

@@ -0,0 +1,18 @@
+# Changelog
+
+## 0.1.1
+
+### Changed
+- **Node.js 22 or newer is now required.** Node 18 and 20 no longer receive security fixes. CI tests on Node 22, 24 and 26.
+
+### Fixed
+- **"It's on screen" when it isn't** ([#3](https://github.com/jeet0007/mac-voice-mcp/issues/3)). When the spoken text sends you to look at something, the model gets a reminder that only its own message text reaches your screen, not the speech and not Bash/tool output. The speaking rules now say the same. Thanks to Copilot for the first version ([#4](https://github.com/jeet0007/mac-voice-mcp/pull/4)). The trigger phrases were then narrowed so that ordinary sentences like "above thirty degrees" or "see the doctor" don't set it off.
+
+### Docs and tooling
+- README: one-click install buttons for Cursor and VS Code, and install steps for the Claude Code plugin marketplace and the official MCP Registry.
+- Security: TruffleHog secret scanning, CodeQL, dependency review, `npm audit` in CI, and Dependabot.
+- Releases publish through npm trusted publishing, with provenance.
+
+## 0.1.0
+
+First release: `speak_and_listen` (natural turn-taking, on-device whisper.cpp with a warm server), `voice_setup` (check first, install only what's missing, only after you agree), and the `setup` and `voice_mode` prompts.

package/README.md

@@ -16,7 +16,7 @@
 <p align="center">
   <img alt="Platform: macOS, Apple Silicon" src="https://img.shields.io/badge/platform-macOS%20%C2%B7%20Apple%20Silicon-000000?logo=apple">
   <a href="https://modelcontextprotocol.io"><img alt="MCP server" src="https://img.shields.io/badge/MCP-server-6f42c1"></a>
-  <img alt="Node.js 18+" src="https://img.shields.io/node/v/mac-voice-mcp?logo=node.js&color=339933">
+  <img alt="Node.js 22+" src="https://img.shields.io/node/v/mac-voice-mcp?logo=node.js&color=339933">
   <a href="LICENSE"><img alt="License: MIT" src="https://img.shields.io/badge/license-MIT-blue"></a>
   <a href="SECURITY.md"><img alt="Dependabot enabled" src="https://img.shields.io/badge/Dependabot-enabled-025e8c?logo=dependabot"></a>
   <a href="#-vibe-coded"><img alt="Vibe-coded with Claude" src="https://img.shields.io/badge/vibe--coded-with%20Claude-d97757"></a>
@@ -59,7 +59,26 @@ The server has **two tools and two prompts**:
 
 ## Install
 
-**1. Add the server to your client.** You need Node.js 18.17 or newer.
+You need **Node.js 22 or newer**. Whichever way you install, run setup once afterwards (see *Then*, below).
+
+### One click
+
+<p>
+  <a href="https://cursor.com/en/install-mcp?name=voice-mcp&config=eyJjb21tYW5kIjoibnB4IiwiYXJncyI6WyIteSIsIm1hYy12b2ljZS1tY3AiXX0%3D"><img alt="Add to Cursor" src="https://cursor.com/deeplink/mcp-install-dark.svg" height="32"></a>
+  <a href="https://insiders.vscode.dev/redirect/mcp/install?name=voice-mcp&config=%7B%22type%22%3A%22stdio%22%2C%22command%22%3A%22npx%22%2C%22args%22%3A%5B%22-y%22%2C%22mac-voice-mcp%22%5D%7D"><img alt="Install in VS Code" src="https://img.shields.io/badge/VS_Code-Install_Server-0098FF?style=for-the-badge&logo=visualstudiocode&logoColor=white" height="32"></a>
+  <a href="https://insiders.vscode.dev/redirect/mcp/install?name=voice-mcp&config=%7B%22type%22%3A%22stdio%22%2C%22command%22%3A%22npx%22%2C%22args%22%3A%5B%22-y%22%2C%22mac-voice-mcp%22%5D%7D&quality=insiders"><img alt="Install in VS Code Insiders" src="https://img.shields.io/badge/VS_Code_Insiders-Install_Server-24bfa5?style=for-the-badge&logo=visualstudiocode&logoColor=white" height="32"></a>
+</p>
+
+### From a marketplace
+
+- **Claude Code plugin marketplace.** This repo is its own marketplace:
+  ```
+  /plugin marketplace add jeet0007/mac-voice-mcp
+  /plugin install mac-voice-mcp@mac-voice-mcp
+  ```
+- **The official MCP Registry.** It's listed as [`io.github.jeet0007/mac-voice-mcp`](https://registry.modelcontextprotocol.io/v0.1/servers?search=io.github.jeet0007/mac-voice-mcp). Apps and directories that read the registry pick it up from there. In VS Code, open the Extensions view (⇧⌘X), search `@mcp mac-voice`, and click **Install**. Smithery, Glama, PulseMCP and mcp.so copy the registry, so it shows up there too.
+
+### By hand
 
 **Claude Code**
 
@@ -67,13 +86,6 @@ The server has **two tools and two prompts**:
 claude mcp add voice-mcp -s user -- npx -y mac-voice-mcp
 ```
 
-Or install it as a Claude Code plugin:
-
-```
-/plugin marketplace add jeet0007/mac-voice-mcp
-/plugin install mac-voice-mcp@mac-voice-mcp
-```
-
 **Claude Desktop.** Add this to `~/Library/Application Support/Claude/claude_desktop_config.json`, then quit (⌘Q) and reopen the app:
 
 ```json
@@ -89,13 +101,19 @@ Or install it as a Claude Code plugin:
 
 If you get `spawn npx ENOENT`, use the full path from `which npx`, e.g. `"command": "/opt/homebrew/bin/npx"`.
 
-**Cursor.** Add the same `mcpServers` block to `~/.cursor/mcp.json`, or use the one-click link:
+**Cursor.** Add the same `mcpServers` block to `~/.cursor/mcp.json`.
 
+**VS Code.** Run **MCP: Add Server** from the Command Palette, or:
+
+```bash
+code --add-mcp '{"name":"voice-mcp","command":"npx","args":["-y","mac-voice-mcp"]}'
 ```
-cursor://anysphere.cursor-deeplink/mcp/install?name=voice-mcp&config=eyJjb21tYW5kIjoibnB4IiwiYXJncyI6WyIteSIsIm1hYy12b2ljZS1tY3AiXX0=
-```
 
-**2. Run setup once.** Ask Claude to *"set up voice"*. In Claude Code you can also run `/mcp__voice-mcp__setup`, or from a terminal run `npx -y mac-voice-mcp setup`.
+**Any other MCP client.** Run `npx -y mac-voice-mcp` as a stdio server.
+
+### Then: set up and allow the mic
+
+**Run setup once.** Ask Claude to *"set up voice"*. In Claude Code you can also run `/mcp__voice-mcp__setup`, or from a terminal run `npx -y mac-voice-mcp setup`.
 
 Setup checks what's already there before it changes anything:
 
@@ -110,7 +128,7 @@ Setup checks what's already there before it changes anything:
 - **Nothing happens without your OK.** Claude calls `voice_setup` to check first, shows you the checklist, and asks before calling it with `install=true`.
 - **Slow installs don't time out.** If `brew install whisper-cpp` takes a while, setup reports INSTALLING. The install carries on in the background, and the next check picks up the result.
 
-**3. Allow the microphone.** The first time Claude listens, macOS asks whether Claude (or Cursor, or your terminal) can use the microphone. Click Allow.
+**Allow the microphone.** The first time Claude listens, macOS asks whether Claude (or Cursor, or your terminal) can use the microphone. Click Allow.
 
 ### Installing from a clone
 

package/dist/speech-text.js

@@ -3,6 +3,18 @@
  *   - prepareSpeech: turn "screen text" into "ear text" before it's spoken
  *   - cleanTranscript: strip whisper.cpp's non-speech markers from a transcript
  */
+/**
+ * Phrases that send the user to look at something. Deliberately specific: bare words like
+ * "above", "below" or "see the" also occur in ordinary speech ("above thirty degrees",
+ * "see the doctor") and must not trigger the reminder.
+ */
+const ON_SCREEN_PATTERN = new RegExp([
+    String.raw `\bon[\s-]?screen\b`,
+    String.raw `\bI(?:['’]ve| have)\s+(?:printed|pasted|put|posted|listed|written|shown|added)\b`,
+    String.raw `\b(?:printed|pasted|posted|listed|shown|written)\s+(?:it\s+|them\s+)?(?:below|above|here)\b`,
+    String.raw `\b(?:see|check|look at|scroll to)\s+(?:the\s+)?(?:screen|chat|reply|message|details|output|table|diff|log)\b`,
+    String.raw `\bin (?:the|my) (?:reply|message|chat)\b`,
+].join("|"), "i");
 /**
  * Safety net for speakability. The model is asked (tool description, server
  * instructions, voice_mode prompt) to send plain spoken sentences; this catches
@@ -89,6 +101,14 @@ export function prepareSpeech(input, opts = {}) {
                 "Next time send only short, plain spoken sentences — keep code, paths, links and tables in your on-screen reply.",
         ]
         : [];
+    // When the spoken text points the user at something to look at, remind the model that only
+    // its own assistant message renders — not the speech, and not Bash/tool output (issue #3).
+    // Checked on the original input, so the "The rest is on screen." added above doesn't count.
+    if (ON_SCREEN_PATTERN.test(input)) {
+        noteList.push("voice-mcp reminder: you told the user to look at something. Spoken text and Bash/tool output are " +
+            "NOT visible to them — only your own assistant message is. Make sure those details are written in " +
+            "your reply for this turn.");
+    }
     return { text: s, notes: noteList };
 }
 /** Remove timestamps and non-speech markers like [BLANK_AUDIO] from whisper output. */

package/dist/stt.js

@@ -71,7 +71,7 @@ function freePort() {
         });
     });
 }
-/** fetch() with a timeout that also honours the caller's abort signal (Node 18 compatible). */
+/** fetch() with a timeout that also honours the caller's abort signal (works without AbortSignal.any). */
 async function fetchWithin(url, init, timeoutMs, signal) {
     const ctl = new AbortController();
     const timer = setTimeout(() => ctl.abort(), timeoutMs);

package/dist/texts.js

@@ -12,6 +12,8 @@ export const SPEECH_RULES = [
     '  not paths ("in index.ts"), round numbers ("about two hundred ms"), spell out symbols.',
     '- Ask one question at a time, answerable in a few words ("Should I deploy it — yes or no?").',
     "- Put the details (diffs, logs, links) in your normal on-screen reply, and say so out loud.",
+    "- Tool output (Bash stdout, file writes) is NOT the on-screen reply. Only your own assistant message text renders.",
+    "- A spoken turn with no assistant message text shows the user nothing — never skip the on-screen reply.",
 ].join("\n");
 /** Claude Code reads these (truncated at 2 KB) — keep under that. */
 export const SERVER_INSTRUCTIONS = [

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "mac-voice-mcp",
   "mcpName": "io.github.jeet0007/mac-voice-mcp",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Talk with Claude out loud on your Mac: speaks with macOS `say`, listens for one natural conversational turn, and transcribes on-device with whisper.cpp. An MCP server.",
   "type": "module",
   "bin": {
@@ -13,7 +13,8 @@
     "dist",
     "examples",
     "README.md",
-    "LICENSE"
+    "LICENSE",
+    "CHANGELOG.md"
   ],
   "scripts": {
     "build": "tsc && node -e \"require('fs').chmodSync('dist/index.js', 0o755)\"",
@@ -36,7 +37,7 @@
     "typescript": "^7.0.2"
   },
   "engines": {
-    "node": ">=18.17"
+    "node": ">=22"
   },
   "keywords": [
     "mcp",