mixdog 0.9.147 → 0.9.149

package/src/runtime/agent/orchestrator/tools/shell-exec-output.mjs

@@ -18,13 +18,16 @@ import { join } from 'node:path';
 import { StringDecoder } from 'node:string_decoder';
 import * as nodeUtil from 'node:util';
 import { getPluginData } from '../config.mjs';
+import { TOOL_OUTPUT_MAX_BYTES } from './builtin/tool-output-limit.mjs';
 
-// Inline cap. Output above this size is spilled to disk and the caller
-// renders a path marker instead of pasting the tail. Matches the
-// SHELL_OUTPUT_MAX_CHARS used by the smart-truncate renderer in
-// builtin.mjs so spilled output and inline output share the same boundary.
+// Inline cap, in BYTES. Output at or below this size is pasted whole; above
+// it the rendered body becomes head+tail carrying a "full output at <path>"
+// marker. Bound to the shared model-facing tool-output budget
+// (TOOL_OUTPUT_MAX_BYTES, env MIXDOG_TOOL_OUTPUT_MAX_BYTES) so one shell call
+// costs no more context than one read/list call, and so the spill-file
+// retention rule in shell-command.mjs keys off this exact boundary.
 
-export const SHELL_OUTPUT_INLINE_CAP = 30_000;
+export const SHELL_OUTPUT_INLINE_CAP = TOOL_OUTPUT_MAX_BYTES;
 
 // Hard ceiling on disk-backed output. Past this the SIZE_WATCHDOG (G2)
 // SIGKILLs the child to avoid filling the filesystem. 100 MB is generous
@@ -74,8 +77,10 @@ export function inspectShellTextChunk(value, channel = 'stdout') {
     || unsafeCount > Math.max(8, Math.floor(text.length * 0.1))
     || replacementCount > Math.max(4, Math.floor(text.length * 0.02));
   if (binary) {
+    // Sanitize, never stop: the printable remainder is often the answer the
+    // caller needs (a git protocol banner, a VM boot log, a PDF text run).
     return {
-      text: `[binary output detected on ${channel}; stream stopped after ${bytes} bytes]\n`,
+      text: text.replace(/\u0000/g, '').replace(UNSAFE_TEXT_CONTROL_RE, ''),
       binary: true,
       bytes,
     };
@@ -188,7 +193,7 @@ export function treeKill(child) {
 // 4 B, so a small padding window lets us cut/advance on codepoint boundaries
 // instead of emitting a U+FFFD glyph at the seam.
 function _readHeadTail(filePath, fileSize) {
-  if (fileSize <= SHELL_OUTPUT_INLINE_CAP * 4) {
+  if (fileSize <= SHELL_OUTPUT_INLINE_CAP) {
     return readFileSync(filePath, 'utf-8');
   }
   const padding = 4;
@@ -221,7 +226,7 @@ function _readHeadTail(filePath, fileSize) {
 
 // Owns the captured stdout/stderr buffers for a single command run. Starts
 // fully in memory; once the combined byte total exceeds the spill threshold
-// (SHELL_OUTPUT_INLINE_CAP*4), opens append-only files in
+// (SHELL_OUTPUT_INLINE_CAP), opens append-only files in
 // $PLUGIN_DATA/shell-output/ and from then on writes go straight to disk.
 // On settle, the caller (execShellCommand) decides whether to keep the
 // spilled files based on the final size.
@@ -307,14 +312,14 @@ export class TaskOutput {
     if (this.spilled) return;
     // Threshold is in BYTES — string .length counts UTF-16 units, which
     // understates CJK output by up to 3x against the byte-sized cap.
-    if (this._inlineBytes > SHELL_OUTPUT_INLINE_CAP * 4) {
+    if (this._inlineBytes > SHELL_OUTPUT_INLINE_CAP) {
       this._ensureFileBacking();
     }
   }
 
   // Force the in-memory buffers onto disk-backed files regardless of the
-  // SHELL_OUTPUT_INLINE_CAP*4 threshold. Used by the auto-background
-  // transition: once a foreground command is adopted into a tracked job,
+  // SHELL_OUTPUT_INLINE_CAP threshold. Used by the auto-background
+  // transition: once a foreground command is promoted into a tracked job,
   // every subsequent stdout/stderr chunk must land in the spill files so
   // task wait/read can read it (the caller has already settled and will no
   // longer drain the in-memory buffers). No-op once already spilled.
@@ -352,12 +357,13 @@ export class TaskOutput {
 
   writeStdout(s) {
     if (!s) return;
-    if (this.binaryOutput) return;
     const inspected = inspectShellTextChunk(s, 'stdout');
-    if (inspected.binary) {
+    if (inspected.binary && !this.binaryOutput) {
       this.binaryOutput = { channel: 'stdout', bytes: inspected.bytes };
+      s = `[binary output on stdout sanitized; non-printable bytes removed]\n${inspected.text}`;
+    } else {
+      s = inspected.text;
     }
-    s = inspected.text;
     if (this.spilled) {
       try {
         writeSync(this.stdoutFd, s);
@@ -374,12 +380,13 @@ export class TaskOutput {
 
   writeStderr(s) {
     if (!s) return;
-    if (this.binaryOutput) return;
     const inspected = inspectShellTextChunk(s, 'stderr');
-    if (inspected.binary) {
+    if (inspected.binary && !this.binaryOutput) {
       this.binaryOutput = { channel: 'stderr', bytes: inspected.bytes };
+      s = `[binary output on stderr sanitized; non-printable bytes removed]\n${inspected.text}`;
+    } else {
+      s = inspected.text;
     }
-    s = inspected.text;
     if (this.spilled) {
       try {
         writeSync(this.stderrFd, s);
@@ -423,15 +430,31 @@ export class TaskOutput {
           try { closeSync(fd); } catch {}
         }
       };
-      return merge(
+      const merged = merge(
         readTail(this.stdoutPath, this.stdoutFileSize),
         readTail(this.stderrPath, this.stderrFileSize),
       );
+      // Display-only path: scrub escape codes in direct mode, but never record
+      // a binary verdict from an arbitrary tail slice.
+      return this.direct ? inspectShellTextChunk(merged, 'stdout').text : merged;
     } catch {
       return '';
     }
   }
 
+  // Direct capture has NO JS write path, so the per-chunk ANSI/binary scrub
+  // writeStdout applies never runs. Doing it at read time keeps what the
+  // caller sees identical across both capture modes.
+  _sanitizeDirect(text, channel) {
+    if (!text) return text;
+    const inspected = inspectShellTextChunk(text, channel);
+    if (inspected.binary && !this.binaryOutput) {
+      this.binaryOutput = { channel, bytes: inspected.bytes };
+      return `[binary output on ${channel} sanitized; non-printable bytes removed]\n${inspected.text}`;
+    }
+    return inspected.text;
+  }
+
   async getStdout() {
     if (this.spilled) {
       this._refreshDirectSizes();
@@ -441,7 +464,8 @@ export class TaskOutput {
         this._lastStdoutFsyncMs = now;
       }
       try {
-        return _readHeadTail(this.stdoutPath, this.stdoutFileSize);
+        const text = _readHeadTail(this.stdoutPath, this.stdoutFileSize);
+        return this.direct ? this._sanitizeDirect(text, 'stdout') : text;
       } catch (err) {
         throw new Error(`[shell-command] spilled stdout read failed (${this.stdoutPath}): ${err.message}`);
       }
@@ -458,7 +482,8 @@ export class TaskOutput {
         this._lastStderrFsyncMs = now;
       }
       try {
-        return _readHeadTail(this.stderrPath, this.stderrFileSize);
+        const text = _readHeadTail(this.stderrPath, this.stderrFileSize);
+        return this.direct ? this._sanitizeDirect(text, 'stderr') : text;
       } catch {
         return '';
       }
@@ -535,10 +560,15 @@ export class ExecResult {
     // foreground command outlives autoBackgroundMs the call settles with
     // backgrounded:true + the jobId for manual task control. The
     // child stays owned by the CLI process; stdout/stderr keep flowing to
-    // the spill files now adopted by the shell-jobs registry.
+    // the spill files now owned by the shell-jobs registry.
     this.backgrounded = opts.backgrounded === true;
     this.jobId = opts.jobId || null;
     this.backgroundMessage = opts.backgroundMessage || null;
+    // Survivors observed AFTER the shell process exited (process group on
+    // POSIX, process tree + held stdio on win32). Non-null means the command
+    // finished but left live descendants, which the caller turns into a
+    // tracked, cancellable task. See tools/lib/shell-descendants.mjs.
+    this.descendants = opts.descendants || null;
   }
 }
 

package/src/runtime/agent/orchestrator/tools/shell-exec-policy.mjs

@@ -3,46 +3,62 @@
 import {
   extractHeredocBodies,
   extractShellCInner,
-  getDestructiveCommandWarning,
   stripQuotedAndHeredoc,
 } from './destructive-warning.mjs';
 import { extractPowerShellCommandInner } from './shell-command.mjs';
 import { decodePowerShellEncodedCommand, isBlockedCommand, WRAPPER_NAMES } from './shell-policy.mjs';
 
-/** @typedef {'allow'|'warn-prompt'|'deny'} ExecPolicyDecision */
+/** @typedef {'allow'|'deny'} ExecPolicyDecision */
 
 const EXEC_POLICY_DENY_PATTERNS = [
   /\b(curl|wget|fetch|Invoke-WebRequest|iwr)\b[^\n|&;]*\|[^\n|&;]*\b(sh|bash|zsh|dash|pwsh|powershell)(?:\.exe)?\b/i,
   /\|\s*(sh|bash|zsh|dash|pwsh|powershell)(?:\.exe)?\b/i,
   /\b(?:sh|bash|zsh|dash|pwsh|powershell)(?:\.exe)?\s+<\s*\(/i,
   /\bInvoke-Expression\b/i,
-  /\biex\s+/i,
+  // PowerShell's Invoke-Expression alias. `… | iex` is the actual remote-exec
+  // shape and a bare `iex <expression>` executes text as code, so both deny.
+  // A LAUNCH of the Elixir REPL (`iex -S mix`, `iex script.exs`) is an
+  // ordinary program start and must stay allowed — hence the expression-only
+  // lookahead instead of the previous bare `iex\s+`.
+  /\|\s*iex\b/i,
+  /\biex\s+[$("'@]/i,
   /\bStart-Process\b[^\n]*\s-Verb\s+RunAs\b/i,
 ];
 
+// Verbs with no non-destructive invocation. `dd` is deliberately ABSENT: the
+// disk-destroying form (`of=/dev/<disk>`) is hard-blocked at every command
+// position by shell-policy, while `dd if=/dev/zero of=file` is the ordinary
+// way to create a fixed-size file and blocking it only cost retries.
 const EXEC_POLICY_DENY_COMMANDS = new Set([
-  'dd', 'diskpart', 'shutdown', 'reboot', 'halt', 'poweroff', 'init', 'telinit',
+  'diskpart', 'shutdown', 'reboot', 'halt', 'poweroff', 'init', 'telinit',
   'mkfs', 'mkfs.ext4', 'mkfs.ntfs', 'format', 'fdisk', 'parted',
 ]);
 
-const _POLICY_RANK = { allow: 0, 'warn-prompt': 1, deny: 2 };
+const _POLICY_RANK = { allow: 0, deny: 1 };
 
-function _firstCommandName(command) {
-  const seg = String(command || '').split(/[;&|\n]+/)[0] || '';
-  const tokens = seg.trim().split(/\s+/).filter(Boolean);
-  let i = 0;
-  while (i < tokens.length) {
-    const t = tokens[i];
-    if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(t)) { i++; continue; }
-    if (WRAPPER_NAMES.has(t.toLowerCase())) {
-      i++;
-      while (i < tokens.length && (/^[-+]/.test(tokens[i]) || /^\d+[smhd]?$/.test(tokens[i]))) i++;
-      continue;
+// EVERY command position, not just the first: a deny-listed verb after `&&`,
+// `;`, `|` or a newline is still an execution request, and reading only
+// segment 0 let `true && shutdown /s` through. Callers pass quote-stripped
+// text, so prose inside a string ("graceful shutdown") never reaches here.
+function _commandNamesAtPositions(command) {
+  const names = [];
+  for (const seg of String(command || '').split(/[;&|\n]+/)) {
+    const tokens = seg.trim().split(/\s+/).filter(Boolean);
+    let i = 0;
+    while (i < tokens.length) {
+      const t = tokens[i];
+      if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(t)) { i++; continue; }
+      if (WRAPPER_NAMES.has(t.toLowerCase())) {
+        i++;
+        while (i < tokens.length && (/^[-+]/.test(tokens[i]) || /^\d+[smhd]?$/.test(tokens[i]))) i++;
+        continue;
+      }
+      const base = t.replace(/^.*[\\/]/, '').toLowerCase();
+      names.push(base.replace(/\.(exe|cmd|bat|com)$/i, ''));
+      break;
     }
-    const base = t.replace(/^.*[\\/]/, '').toLowerCase();
-    return base.replace(/\.(exe|cmd|bat|com)$/i, '');
   }
-  return null;
+  return names;
 }
 
 function classifyExecPolicy(command) {
@@ -70,14 +86,15 @@ function classifyExecPolicy(command) {
       return { decision: 'deny', reason: 'high-risk shell invocation (pipe-to-shell, elevated launcher, or remote-exec pattern)' };
     }
   }
-  const name = _firstCommandName(text);
-  if (name && EXEC_POLICY_DENY_COMMANDS.has(name)) {
-    return { decision: 'deny', reason: `command "${name}" is not permitted without sandbox` };
-  }
-  const warn = getDestructiveCommandWarning(text);
-  if (warn) {
-    return { decision: 'warn-prompt', reason: warn };
+  for (const name of _commandNamesAtPositions(executableText)) {
+    if (EXEC_POLICY_DENY_COMMANDS.has(name)) {
+      return { decision: 'deny', reason: `command "${name}" is not permitted` };
+    }
   }
+  // Destructive-but-legitimate commands are NOT judged here. The caller
+  // computes that non-blocking warning once (getDedupedDestructiveWarnings)
+  // and prepends it to the result; deriving it again per scan target only
+  // produced throwaway passes on every shell call.
   return { decision: 'allow', reason: '' };
 }
 
@@ -99,7 +116,7 @@ export function evaluateExecPolicyFromTargets(targets) {
   return worst;
 }
 
-/** Pre-spawn block message — deny only. warn-prompt is non-blocking (see destructive-warning prepend). */
+/** Pre-spawn block message — deny is the only decision this scan produces. */
 export function formatExecPolicyBlockMessage(policyResult) {
   const r = policyResult || { decision: 'allow' };
   if (r.decision === 'deny') {

package/src/runtime/agent/orchestrator/tools/shell-policy.mjs

@@ -63,7 +63,12 @@ const BLOCKED_PATTERNS = [
   /\bformat\s+[a-z]:/i,
   new RegExp(_CMD_START + '(?:shutdown|reboot|halt)\\b', 'i'),
   new RegExp(_CMD_START + 'mkfs(?:\\.|\\b)', 'i'),
-  new RegExp(_CMD_START + 'dd\\s+[^\\n]*\\b(?:if|of)=/dev/', 'i'),
+  // Raw-device WRITES only. `if=/dev/…` is a read (`dd if=/dev/zero of=file`
+  // is the ordinary way to create a fixed-size file), and the standard sinks
+  // below cannot destroy anything, so the block is scoped to a device target
+  // that can actually overwrite a disk. Raw-device READS still surface as a
+  // non-blocking destructive warning.
+  new RegExp(_CMD_START + 'dd\\s+[^\\n]*\\bof=/dev/(?!(?:null|zero|stdout|stderr|full|tty)\\b)', 'i'),
   new RegExp(_CMD_START + 'diskpart\\b[^\\n]*\\bclean\\b', 'i'),
   /:\(\)\s*\{[^}]*:\|:&[^}]*\};\s*:/, // bash fork-bomb signature
 ];

package/src/runtime/agent/orchestrator/tools/spawn-manifest.json

@@ -1,26 +1,26 @@
 {
-  "version": "0.1.4",
+  "version": "0.1.6",
   "_comment": "Synced from immutable spawn-v release assets.",
   "assets": {
     "darwin-arm64": {
-      "url": "https://github.com/tribgames/mixdog/releases/download/spawn-v0.1.4/mixdog-spawn-darwin-arm64",
-      "sha256": "f73d404bc0c96ae00951a7da385556d55c982f540e32c01803515eeace140eb0"
+      "url": "https://github.com/tribgames/mixdog/releases/download/spawn-v0.1.6/mixdog-spawn-darwin-arm64",
+      "sha256": "87a86e53c65911515517fd9e3b0e80a6880bb2062667103c7686b7d44d4a661f"
     },
     "darwin-x64": {
-      "url": "https://github.com/tribgames/mixdog/releases/download/spawn-v0.1.4/mixdog-spawn-darwin-x64",
-      "sha256": "1163c97df9122358826cd92988ac7974559a7dcf5af6058021c0c01ce7c4a73e"
+      "url": "https://github.com/tribgames/mixdog/releases/download/spawn-v0.1.6/mixdog-spawn-darwin-x64",
+      "sha256": "0e927dd76168d7c73327f06b12ce5bb629ca24a819570ce108c2bc46e814e1b0"
     },
     "linux-arm64": {
-      "url": "https://github.com/tribgames/mixdog/releases/download/spawn-v0.1.4/mixdog-spawn-linux-arm64",
-      "sha256": "c1e0aca0110b70805516dc6e185a4987a8fbc0c0c38040a0133586281671163b"
+      "url": "https://github.com/tribgames/mixdog/releases/download/spawn-v0.1.6/mixdog-spawn-linux-arm64",
+      "sha256": "c3832c33a590dc974d0671c8e4305907bec111e0860f8ea90febf2255a7e247c"
     },
     "linux-x64": {
-      "url": "https://github.com/tribgames/mixdog/releases/download/spawn-v0.1.4/mixdog-spawn-linux-x64",
-      "sha256": "020876e4021c6d4e4095f103c55626912c78ca4fe766e5393e24b7af827fc4e1"
+      "url": "https://github.com/tribgames/mixdog/releases/download/spawn-v0.1.6/mixdog-spawn-linux-x64",
+      "sha256": "5578f10626467a4a7be6bb348cdce6398f2eb8bf7391fa1e99b9404315f01d59"
     },
     "win32-x64": {
-      "url": "https://github.com/tribgames/mixdog/releases/download/spawn-v0.1.4/mixdog-spawn-win32-x64.exe",
-      "sha256": "07aa98985587be6c086f97f32dea1273246ca407dde8f7d2a01ecaa87c8146aa"
+      "url": "https://github.com/tribgames/mixdog/releases/download/spawn-v0.1.6/mixdog-spawn-win32-x64.exe",
+      "sha256": "058fd8318b9fad6bc4213ed2255b436e7b78dc868d96dd060d67b806fef4d36e"
     }
   }
 }

package/src/runtime/attachments/store.mjs

@@ -138,10 +138,18 @@ export function readAttachmentBuffer(value) {
   const path = attachmentPath(ref);
   const cached = bufferCache.get(path);
   if (cached) {
-    cacheHits += 1;
+    // The cache hands out the stored Buffer instance itself, so a caller that
+    // mutated an earlier read would poison every later reader with content that
+    // no longer matches the content address. Re-verify the digest on each hit
+    // instead of trusting the instance.
+    if (createHash('sha256').update(cached).digest('hex') === ref) {
+      cacheHits += 1;
+      bufferCache.delete(path);
+      bufferCache.set(path, cached);
+      return cached;
+    }
     bufferCache.delete(path);
-    bufferCache.set(path, cached);
-    return cached;
+    bufferCacheBytes -= cached.length;
   }
   cacheMisses += 1;
   const info = statSync(path);

package/src/runtime/channels/data/voice-runtime-manifest.json

@@ -1,6 +1,6 @@
 {
-  "version": "1.8.4",
-  "source": "ggml-org/whisper.cpp official release",
+  "version": "1.9.2",
+  "source": "ggml-org/whisper.cpp@306c88f4d1286aec1bf96e544632897886af5501",
   "model": {
     "id": "large-v3-turbo-q8_0",
     "filename": "ggml-large-v3-turbo-q8_0.bin",
@@ -15,13 +15,6 @@
       "url": "https://huggingface.co/ggerganov/whisper.cpp/resolve/main/ggml-large-v3-turbo-q8_0.bin",
       "sha256": "317eb69c11673c9de1e1f0d459b253999804ec71ac4c23c17ecf5fbe24e259a1",
       "size": 874188075
-    },
-    "korean": {
-      "id": "large-v3-turbo-korean-q8_0",
-      "filename": "whisper-large-v3-turbo-korean-q8_0.bin",
-      "url": "https://github.com/tribgames/mixdog/releases/download/voice-runtime-v1.8.4/whisper-large-v3-turbo-korean-q8_0.bin",
-      "sha256": "b0590271b17d683aba5bbe4ada0c310d5c9031f4c165400423271e7273d30a90",
-      "size": 874188075
     }
   },
   "ffmpeg": {
@@ -55,6 +48,13 @@
         "size": 29354986,
         "format": "gz",
         "executable": "ffmpeg"
+      },
+      "linux-arm64": {
+        "url": "https://github.com/eugeneware/ffmpeg-static/releases/download/b6.1.1/ffmpeg-linux-arm64.gz",
+        "sha256": "754a678672298bc68156adff58aa7385a592c2b30b1d0ae8750c45c915c4bac0",
+        "size": 25568691,
+        "format": "gz",
+        "executable": "ffmpeg"
       }
     }
   },
@@ -62,93 +62,69 @@
     "win32-x64": {
       "variants": [
         {
-          "id": "cublas-12.4",
-          "requires": { "cudaMajor": 12 },
-          "url": "https://github.com/ggml-org/whisper.cpp/releases/download/v1.8.4/whisper-cublas-12.4.0-bin-x64.zip",
-          "sha256": "b07cff4e59831b227896018facbb6334907bf324a342c84597c44f087823d252",
-          "size": 457024596,
-          "format": "zip",
-          "executable": "Release/whisper-cli.exe"
-        },
-        {
-          "id": "cublas-11.8",
-          "requires": { "cudaMajor": 11 },
-          "url": "https://github.com/ggml-org/whisper.cpp/releases/download/v1.8.4/whisper-cublas-11.8.0-bin-x64.zip",
-          "sha256": "194480dd24606389c4eceb98d48292f37f59138192ae491ed4f38736cdb8888c",
-          "size": 58787783,
-          "format": "zip",
-          "executable": "Release/whisper-cli.exe"
-        },
-        {
-          "id": "cublas-11-bundled",
-          "requires": { "nvidiaDriver": true },
-          "url": "https://github.com/ggml-org/whisper.cpp/releases/download/v1.8.4/whisper-cublas-11.8.0-bin-x64.zip",
-          "sha256": "194480dd24606389c4eceb98d48292f37f59138192ae491ed4f38736cdb8888c",
-          "size": 58787783,
+          "id": "vulkan",
+          "requires": null,
+          "url": "https://github.com/tribgames/mixdog/releases/download/voice-runtime-v1.9.2/whisper-server-win32-x64-vulkan.zip",
+          "sha256": "6ee3718696033ddbc156201eb0c097b778d8aca7388233b54fd3a966cbcb9fee",
+          "size": 16751300,
           "format": "zip",
-          "executable": "Release/whisper-cli.exe",
-          "extras": [
-            {
-              "url": "https://files.pythonhosted.org/packages/0b/1d/7a78cd36fd5e3da4021b3ac2c2c8b2651dd72345b7c3ecc0d3e051884f50/nvidia_cublas_cu11-11.11.3.6-py3-none-win_amd64.whl",
-              "sha256": "6ab12b1302bef8ac1ff4414edd1c059e57f4833abef9151683fb8f4de25900be",
-              "size": 427234740,
-              "format": "zip",
-              "files": [
-                { "from": "nvidia/cublas/bin/cublas64_11.dll", "to": "Release/cublas64_11.dll" },
-                { "from": "nvidia/cublas/bin/cublasLt64_11.dll", "to": "Release/cublasLt64_11.dll" }
-              ]
-            }
-          ]
-        },
+          "executable": "whisper-server.exe"
+        }
+      ]
+    },
+    "linux-x64": {
+      "variants": [
         {
-          "id": "base-cpu",
+          "id": "vulkan",
           "requires": null,
-          "url": "https://github.com/ggml-org/whisper.cpp/releases/download/v1.8.4/whisper-bin-x64.zip",
-          "sha256": "74f973345cb52ef5ba3ec9e7e7af8e48cc8c71722d1528603b80588a11f82e3e",
-          "size": 4078768,
+          "url": "https://github.com/tribgames/mixdog/releases/download/voice-runtime-v1.9.2/whisper-server-linux-x64-vulkan.zip",
+          "sha256": "c3cbf695ebc818546a8ef4d3657ef74378781948b8ff62e7f2bf1da70ccdc639",
+          "size": 14461318,
           "format": "zip",
-          "executable": "Release/whisper-cli.exe"
+          "executable": "whisper-server"
         }
       ]
     },
-    "darwin-arm64": {
+    "linux-arm64": {
       "variants": [
         {
-          "id": "metal",
+          "id": "vulkan",
           "requires": null,
-          "url": "https://github.com/tribgames/mixdog/releases/download/voice-runtime-v1.8.4/whisper-darwin-arm64-metal.zip",
-          "sha256": "6bfbe8e06c07b87c2d7cd9a6541128781752bd2827d9f97ea9605d06c53835d7",
-          "size": 3147446,
+          "url": "https://github.com/tribgames/mixdog/releases/download/voice-runtime-v1.9.2/whisper-server-linux-arm64-vulkan.zip",
+          "sha256": "73fc8ac7fdbc1e68ebb4a2c27faaf3c1145fcf7f4b0f04f32fdeb26bc66b20eb",
+          "size": 14274639,
           "format": "zip",
-          "executable": "Release/whisper-cli"
+          "executable": "whisper-server"
         }
       ]
     },
-    "darwin-x64": {
+    "darwin-arm64": {
       "variants": [
         {
-          "id": "cpu",
+          "id": "metal",
           "requires": null,
-          "url": "https://github.com/tribgames/mixdog/releases/download/voice-runtime-v1.8.4/whisper-darwin-x64-cpu.zip",
-          "sha256": "eed4606e4333dacaafa3ed5a982856db98dcf7d7300200b831c71bedd6fe05e1",
-          "size": 3041846,
+          "url": "https://github.com/tribgames/mixdog/releases/download/voice-runtime-v1.9.2/whisper-server-darwin-arm64-metal.zip",
+          "sha256": "2ebd9eec5b991716c230f9d4dace8db952f99f0faf8ca1ef3b3a5b4a1b106401",
+          "size": 1350283,
           "format": "zip",
-          "executable": "Release/whisper-cli"
+          "executable": "whisper-server"
         }
       ]
     },
-    "linux-x64": {
+    "darwin-x64": {
       "variants": [
         {
-          "id": "vulkan",
+          "id": "cpu",
           "requires": null,
-          "url": "https://github.com/tribgames/mixdog/releases/download/voice-runtime-v1.8.4/whisper-linux-x64-vulkan.zip",
-          "sha256": "f378ad30db89b8bb710210b057539f9b18f4cdecceac093ff189ce7e904fe6de",
-          "size": 54510528,
+          "url": "https://github.com/tribgames/mixdog/releases/download/voice-runtime-v1.9.2/whisper-server-darwin-x64-cpu.zip",
+          "sha256": "4d39a13874c380e28ae25ff922673bf8869e6e756f49e866a67e7a86ec8088a5",
+          "size": 1346377,
           "format": "zip",
-          "executable": "Release/whisper-cli"
+          "executable": "whisper-server"
         }
       ]
     }
-  }
+  },
+  "release_tag": "voice-runtime-v1.9.2",
+  "build_hash": "3705f8c9636467bb1ff9722b409dcc888bd7271e3774f13b0bc3ec64cc3d2822"
 }