symbiot 0.58.0 → 0.58.2

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 What each Symbiot release brought, newest first. When Approve bumps the version, it writes that release here from the tasks it approved, worded as release notes by your connected AI (or in the tasks' own words without one). The app shows the releases newer than yours under "What's new" when it offers an update, and once more after you update.
 
+## 0.58.2
+
+- **A voice that doesn't sound robotic, picked for you.** When Symbiot reads a reply out, it uses your computer's own voice only when that's a modern, natural one (Edge's Natural voices on Windows, Apple's Premium and Enhanced voices, a phone's own). Otherwise, as on Linux, where Chrome only has its older Google voices and espeak, Symbiot speaks with its own voice: Piper, a small open-source speech engine that runs on your computer. The accent follows where you are (British English for South Africa, the UK, Australia and the rest; American for the US and Canada), and both voices are public domain. Nothing to choose, no account, nothing leaves your computer. It downloads once (about 85 MB) the first time it's needed, while the system voice covers that first reply, and then answers sentence by sentence, the first in under a second.
+
+## 0.58.1
+
+- **No more "couldn't reach the model" after an update.** An update restarted Symbiot in whatever folder had started it, and when that folder was later deleted, Claude Code refused to run there: Symbiot thought you'd signed out of Claude and fell back to an old API key that no longer worked. Symbiot now always runs, and asks Claude Code, from your home folder.
+- **Setup installs Claude Code and signs you in.** If Claude Code isn't on your computer, setup's "Your AI" step has an **Install Claude Code** button (Anthropic's own installer, for Windows, Mac or Linux) and then **Sign in with Claude**, which opens the sign-in page and ticks itself once you've signed in. No terminal at any point. If the page shows a code instead, setup has a box to paste it in. Symbiot also finds Claude Code in `~/.local/bin`, where that installer puts it.
+- **Ready for the desktop app.** Running inside Symbiot's installed app, Symbiot doesn't offer npm updates (the app updates itself) or make shortcuts of its own (the installer made them), and "Start at login" starts the app.
+
 ## 0.58.0
 
 - **Talk to Symbiot instead of typing.** A mic on the talk bar: click it and speak. Your words appear as you say them, and a pause sends them, as Enter would. When you spoke, Symbiot reads its answer out too, in the most natural voice your computer has (typed questions stay quiet), and talking again cuts it off. It uses the speech recognition built into Chrome and Edge: no key, nothing to pay. If the microphone is blocked or missing, it says what to do.

package/ai.mjs

@@ -26,6 +26,10 @@ const PROVIDERS = {
 // agents. Whether it's there and signed in: `claude auth status` (a quarter of a
 // second), kept 5 minutes. SYMBIOT_CLAUDE_CMD replaces the command (the tests' stand-in).
 const CLAUDE_BIN = () => process.env.SYMBIOT_CLAUDE_CMD || "claude";
+// Claude Code's own installer puts it in ~/.local/bin, which a desktop session (and
+// Windows) often doesn't have on PATH yet: Symbiot, and the agents it starts, look there too.
+{ const dir = join(homedir(), ".local", "bin"), sep = process.platform === "win32" ? ";" : ":";
+  if (existsSync(dir) && !String(process.env.PATH || "").split(sep).includes(dir)) process.env.PATH = dir + sep + (process.env.PATH || ""); }
 // How to run it. Windows: npm installs `claude` as claude.cmd, which Node can only
 // start through cmd.exe (a .exe, from Claude's own installer, it starts directly), so
 // it's found with `where` and its arguments are quoted for cmd.exe.
@@ -52,7 +56,8 @@ function claudeState(fresh = false) {
   let installed = !!process.env.SYMBIOT_CLAUDE_CMD || hasCmd("claude"), signedIn = false;
   if (installed) {
     try {
-      const r = claudeSpawn(["auth", "status"], { encoding: "utf8", timeout: 8000, env: process.env }, true);
+      // from home: Claude Code refuses to run in a folder that has since been deleted
+      const r = claudeSpawn(["auth", "status"], { cwd: homedir(), encoding: "utf8", timeout: 8000, env: process.env }, true);
       if (r.error && r.error.code === "ENOENT") installed = false;
       else { const j = JSON.parse(String(r.stdout || "").trim() || "{}"); signedIn = !!j.loggedIn && j.authMethod !== "apiKey"; }
     } catch {}
@@ -308,4 +313,4 @@ async function connectProvider(b) {
   return saveConfig(cfg) ? { ok: true, message: `Connected: ${PROVIDERS[provider].label} · ${model}` } : { ok: false, message: "Couldn't write the config file." };
 }
 
-export { PROVIDERS, AI_UI, resolveProvider, write, validate, connectProvider, detectHardware, recommendModels, hasOllama, ollamaInstall, ensureOllama, useOllamaModel , claudeState, claudeReady, claudeHelp , claudeCommand };
+export { PROVIDERS, AI_UI, resolveProvider, write, validate, connectProvider, detectHardware, recommendModels, hasOllama, ollamaInstall, ensureOllama, useOllamaModel , claudeState, claudeReady, claudeHelp , claudeCommand , claudeSpawn };

package/claudesetup.mjs

@@ -0,0 +1,56 @@
+// symbiot — Claude Code, set up from Symbiot's own setup, for someone who has never
+// opened a terminal: Anthropic's installer (Windows: install.ps1 in PowerShell; Mac
+// and Linux: install.sh), then `claude auth login --claudeai`, which opens the
+// sign-in page in the browser and finishes by itself once they've signed in. If the
+// page shows a code instead (the browser couldn't hand it back), setup has a box for
+// it, which goes to the sign-in that's waiting. SYMBIOT_CLAUDE_INSTALL_CMD replaces
+// the installer (tests).
+import { spawn } from "node:child_process";
+import { homedir } from "node:os";
+import { claudeState, claudeSpawn } from "./ai.mjs";
+
+const S = { installing: false, installError: "", signingIn: false, signinError: "", log: "", child: null };
+const tail = (s) => String(s || "").replace(/\x1b\[[0-9;]*[A-Za-z]/g, "").slice(-1500);
+
+function installCmd(platform = process.platform) {
+  if (process.env.SYMBIOT_CLAUDE_INSTALL_CMD) return { cmd: process.env.SYMBIOT_CLAUDE_INSTALL_CMD, args: [], shell: true };
+  if (platform === "win32") return { cmd: "powershell", args: ["-NoProfile", "-ExecutionPolicy", "Bypass", "-Command", "irm https://claude.ai/install.ps1 | iex"], shell: false };
+  return { cmd: "bash", args: ["-c", "curl -fsSL https://claude.ai/install.sh | bash"], shell: false };
+}
+function installClaude() {
+  if (S.installing) return claudeSetup();
+  S.installing = true; S.installError = ""; S.log = "";
+  const c = installCmd();
+  let ch; try { ch = spawn(c.cmd, c.args, { cwd: homedir(), shell: c.shell, windowsHide: true, env: process.env }); } catch (e) { S.installing = false; S.installError = String((e && e.message) || e); return claudeSetup(); }
+  ch.stdout.on("data", (d) => { S.log = tail(S.log + d); }); ch.stderr.on("data", (d) => { S.log = tail(S.log + d); });
+  ch.on("error", (e) => { S.installing = false; S.installError = String((e && e.message) || e); });
+  ch.on("close", (code) => {
+    S.installing = false;
+    const st = claudeState(true);
+    if (code !== 0 || !st.installed) S.installError = `The installer didn't finish (${code === 0 ? "Claude Code wasn't found after it" : "exit " + code}). ${S.log.trim().split("\n").pop() || ""}`.trim();
+  });
+  return claudeSetup();
+}
+function signInClaude() {
+  if (S.signingIn) return claudeSetup();
+  S.signingIn = true; S.signinError = "";
+  let ch; try { ch = claudeSpawn(["auth", "login", "--claudeai"], { cwd: homedir(), stdio: ["pipe", "pipe", "pipe"], env: process.env }); } catch (e) { S.signingIn = false; S.signinError = String((e && e.message) || e); return claudeSetup(); }
+  S.child = ch;
+  let out = ""; ch.stdout.on("data", (d) => { out = tail(out + d); }); ch.stderr.on("data", (d) => { out = tail(out + d); });
+  ch.on("error", (e) => { S.signingIn = false; S.child = null; S.signinError = String((e && e.message) || e); });
+  ch.on("close", () => { S.signingIn = false; S.child = null; if (!claudeState(true).signedIn) S.signinError = "Signing in didn't finish. Try again, and sign in on the page that opens."; });
+  return claudeSetup();
+}
+// the code the sign-in page shows, when the browser couldn't hand it back
+function sendClaudeCode(code) {
+  const c = String(code || "").trim();
+  if (!c || !S.child || !S.child.stdin) return { error: "There's no sign-in waiting for a code. Click Sign in with Claude first." };
+  try { S.child.stdin.write(c + "\n"); } catch (e) { return { error: String((e && e.message) || e) }; }
+  return claudeSetup();
+}
+function claudeSetup(fresh = false) {
+  const st = claudeState(fresh);
+  return { installed: st.installed, signedIn: st.signedIn, installing: S.installing, signingIn: S.signingIn, ...(S.installError ? { installError: S.installError } : {}), ...(S.signinError ? { signinError: S.signinError } : {}) };
+}
+
+export { installCmd, installClaude, signInClaude, sendClaudeCode, claudeSetup };

package/desktop.mjs

@@ -119,7 +119,13 @@ function autostartFile(platform = OS, home = homedir()) {
   if (platform === "android") return join(home, ".termux", "boot", "symbiot");
   return join(home, ".config", "autostart", "symbiot.desktop");
 }
-function autostartContent(node, script, platform = OS, path = process.env.PATH || "") {
+function autostartContent(node, script, platform = OS, path = process.env.PATH || "", exe = process.env.SYMBIOT_DESKTOP_EXE || "") {
+  if (exe) { // the installed app: it starts its tray and Symbiot itself
+    const q = (s) => '"' + String(s).replace(/(["`$\\])/g, "\\$1") + '"';
+    if (platform === "win32") return ["@echo off", `start "" "${exe}"`, ""].join("\r\n");
+    if (platform === "darwin") return `<?xml version="1.0" encoding="UTF-8"?>\n<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">\n<plist version="1.0"><dict><key>Label</key><string>co.symbiot.app</string><key>ProgramArguments</key><array><string>${String(exe).replace(/&/g, "&amp;").replace(/</g, "&lt;")}</string></array><key>RunAtLoad</key><true/></dict></plist>\n`;
+    return ["[Desktop Entry]", "Type=Application", "Name=Symbiot", `Exec=${q(exe)}`, "Terminal=false", "NoDisplay=true", "X-GNOME-Autostart-enabled=true", ""].join("\n");
+  }
   if (platform === "android-app") return "While this file exists, Symbiot's Android app starts itself when the phone starts.\n";
   if (platform === "darwin") {
     const x = (s) => String(s).replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");

package/home.mjs

@@ -9,6 +9,7 @@
 // The app's sections (Map, Tasks, Agents, Week…) are shaped by adapt.mjs from
 // how you use them; this is the live data around them. Home's talk goes to the
 // same Symbiot as every chat (mind.mjs converse), told what home shows.
+import { claudeSetup } from "./claudesetup.mjs";
 import { join } from "node:path";
 import { homedir } from "node:os";
 import { readFileSync, writeFileSync, mkdirSync } from "node:fs";
@@ -734,7 +735,7 @@ function onboarding({ fresh = false } = {}) {
   const det = tryOr(() => detectHandoffs(), { agents: [] }), cmd = tryOr(() => handoffCmd(), "");
   return {
     pending: !!o.pending, step: ONB_STEPS.includes(o.step) ? o.step : "welcome", steps: ONB_STEPS,
-    ai: { connected: !!r, provider: r ? r.provider : "", line: r ? `${PROVIDERS[r.provider].label}${r.model ? " · " + r.model : ""}` : "", claude: st ? { installed: st.installed, signedIn: st.signedIn } : null },
+    ai: { connected: !!r, provider: r ? r.provider : "", line: r ? `${PROVIDERS[r.provider].label}${r.model ? " · " + r.model : ""}` : "", claude: tryOr(() => claudeSetup(), st ? { installed: st.installed, signedIn: st.signedIn } : null) },
     work: { searching: reps.searching, at: reps.at || 0, done: reps.done || 0, total: reps.total || 0, count: reps.list.length, repos: reps.list.slice(0, 60).map((x) => ({ name: x.name, path: x.path })), roots: tryOr(() => scanRoots(), []).map((r) => (r === homedir() ? "~" : r.startsWith(homedir() + "/") ? "~" + r.slice(homedir().length) : r)) },
     agent: { cmd, pick: tryOr(() => pickAgent(), null), agents: (det.agents || []).map((a) => ({ label: a.label, tmpl: a.tmpl })) },
     apps, groups: links.groups || [], decided: apps.every((a) => a.skipped || a.state !== "off"),

package/index.mjs

@@ -870,7 +870,9 @@ async function main() {
   if (cmd === "login" || cmd === "auth") return cmdLogin();
   if (cmd === "logout") return cmdLogout();
   if (cmd === "whoami" || cmd === "status") return cmdWhoami();
-  if (cmd === "app" || cmd === "ui") return cmdApp();
+  // the app runs from home: whatever folder started it may be deleted later (a worktree,
+  // an old copy npm replaced), and Claude Code won't run from a deleted folder
+  if (cmd === "app" || cmd === "ui") { try { process.chdir(homedir()); } catch {} return cmdApp(); }
   if (cmd === "away") return cmdAway();
   if (cmd === "open") return cmdOpen();
   if (cmd === "uninstall") return cmdUninstall();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "symbiot",
-  "version": "0.58.0",
+  "version": "0.58.2",
   "description": "Your week, written from your real work. Reads your local git and writes it up with the AI of your choice \u2014 Claude, OpenAI, Gemini, or a local model.",
   "type": "module",
   "bin": {
@@ -49,7 +49,9 @@
     "icon.svg",
     "scanworker.mjs",
     "estimate.mjs",
-    "icon.ico"
+    "icon.ico",
+    "claudesetup.mjs",
+    "voice.mjs"
   ],
   "engines": {
     "node": ">=18"
@@ -82,7 +84,7 @@
     "@anthropic-ai/sdk": "^0.128.0"
   },
   "scripts": {
-    "test": "node test/load.mjs && node test/fixtures.mjs && node test/links.mjs && node test/post.mjs && node test/peek.mjs && node test/mind.mjs && node test/knowledge.mjs && node test/checks.mjs &&node test/lanes.mjs && node test/handback.mjs && node test/autoallow.mjs && node test/guard.mjs && node test/reports.mjs && node test/sandbox.mjs && node test/adapt.mjs && node test/urgent.mjs && node test/work.mjs && node test/mapknn.mjs && node test/away.mjs && node test/subscription.mjs && node test/launcher.mjs && node test/onboarding.mjs && node test/windows.mjs && node test/marketing.mjs && node test/paths.mjs && node test/smoke.mjs && node test/app.mjs && node test/install.mjs",
+    "test": "node test/load.mjs && node test/fixtures.mjs && node test/links.mjs && node test/post.mjs && node test/peek.mjs && node test/mind.mjs && node test/knowledge.mjs && node test/checks.mjs &&node test/lanes.mjs && node test/handback.mjs && node test/autoallow.mjs && node test/guard.mjs && node test/reports.mjs && node test/sandbox.mjs && node test/adapt.mjs && node test/urgent.mjs && node test/work.mjs && node test/mapknn.mjs && node test/away.mjs && node test/voice.mjs && node test/subscription.mjs && node test/claudesetup.mjs && node test/launcher.mjs && node test/onboarding.mjs && node test/windows.mjs && node test/marketing.mjs && node test/paths.mjs && node test/smoke.mjs && node test/app.mjs && node test/install.mjs",
     "lint": "eslint .",
     "postinstall": "node postinstall.mjs"
   },

package/server.mjs

@@ -2,6 +2,8 @@
 // (ui.mjs) and its /api routes, each a thin call into the module that does the
 // work, on 127.0.0.1 only and behind the per-install token. (Watch on your phone
 // listens on your network separately, only for that: phone.mjs.)
+import { claudeSetup, installClaude, signInClaude, sendClaudeCode } from "./claudesetup.mjs";
+import { voiceState, prepareVoice, speak, stopVoices } from "./voice.mjs";
 import { spawn, spawnSync } from "node:child_process";
 import { toggleAway, closeAway } from "./away.mjs";
 import { homedir } from "node:os";
@@ -146,7 +148,9 @@ function readBytes(req, max) {
 function appLink(url) { return url.replace(/^http:\/\//, "symbiot://"); }
 // Symbiot running in Termux (not the Android app's own)
 const IN_TERMUX = process.platform === "android" && process.env.SYMBIOT_ANDROID_APP !== "1";
-const SANDBOX = !!process.env.SYMBIOT_SANDBOX; // symbiot app --fresh (sandbox.mjs)
+const SANDBOX = !!process.env.SYMBIOT_SANDBOX;
+// the installed app (symbiot-desktop): it updates itself and made its own shortcuts
+const DESKTOP = process.env.SYMBIOT_DESKTOP === "1"; // symbiot app --fresh (sandbox.mjs)
 const FIRST_RUN = !existsSync(CONFIG_PATH); // no config yet when Symbiot started: a brand-new install
 function openApp(url) {
   try {
@@ -228,7 +232,7 @@ async function startApp({ bin, since = 7, all = false, c = PLAIN_COLOURS } = {})
   const screenOut =(s) => (s && s.id ? { ...s, blueprint: blueprint(s), ...(s.page ? { trusted: isTrusted(s.page.url) } : {}) } : s && s.screens ? { ...s, screens: s.screens.map(screenOut) } : s);
   // an installed Symbiot keeps its app-menu entry pointing at itself (a new Node, a moved
   // install); not a copy run from a checkout or a test
-  if (/[\\/]node_modules[\\/]symbiot[\\/]/.test(bin || "") && !SANDBOX) { try { installLauncher({ script: bin }); } catch {} }
+  if (/[\\/]node_modules[\\/]symbiot[\\/]/.test(bin || "") && !SANDBOX && !process.env.SYMBIOT_NO_LAUNCHER) { try { installLauncher({ script: bin }); } catch {} }
   if (FRESH) { try { const cf = loadConfig(); if (!cf.onboarding) { cf.onboarding = { pending: true, step: "welcome", skipped: [] }; saveConfig(cf); } } catch {} }
   // your projects: kept, and found again off the main thread, so nothing waits on a search
   setScanOptions({ cache: true }); REPO_STATE.onChange = () => { try { homeState({ fresh: true }); } catch {} };
@@ -427,6 +431,14 @@ async function startApp({ bin, since = 7, all = false, c = PLAIN_COLOURS } = {})
       if (u.pathname === "/api/home/answer" && req.method === "POST") { const b = await readBody(req); return json(res, homeAnswer(b.id, { pick: b.pick, text: b.text })); }
       if (u.pathname === "/api/away" && req.method === "POST") { const b = await readBody(req); return json(res, toggleAway(`http://127.0.0.1:${server.address().port}/?t=${TOKEN}`, b.open)); }
       if (u.pathname === "/api/home/next" && req.method === "POST") { const b = await readBody(req); return json(res, homeNext(b.id)); }
+      // Symbiot's own voice (voice.mjs), for computers without a natural one: the page asks
+      if (u.pathname === "/api/voice") return json(res, voiceState(u.searchParams.get("lang") || ""));
+      if (u.pathname === "/api/voice/prepare" && req.method === "POST") { const b = await readBody(req); return json(res, prepareVoice(b.lang || "")); }
+      if (u.pathname === "/api/voice/say" && req.method === "POST") {
+        const b = await readBody(req);
+        try { const wav = await speak(b.text, b.lang || ""); res.writeHead(200, { "content-type": "audio/wav", "cache-control": "no-store", "content-length": wav.length }); return res.end(wav); }
+        catch (e) { return json(res, { error: String((e && e.message) || e) }); }
+      }
       if (u.pathname === "/api/home/ask" && req.method === "POST") { const b = await readBody(req); return json(res, await homeAsk(b.question, { images: saveShots(b.images) })); }
       if (u.pathname === "/api/adapt") return json(res, adaptState({ from: String(u.searchParams.get("from") || ""), commit: u.searchParams.get("commit") === "1", ...(u.searchParams.has("touch") ? { touch: u.searchParams.get("touch") === "1" } : {}) }));
       if (u.pathname === "/api/adapt/use" && req.method === "POST") { const b = await readBody(req); return json(res, noteUse(b)); }
@@ -473,7 +485,7 @@ async function startApp({ bin, since = 7, all = false, c = PLAIN_COLOURS } = {})
       // a sandbox (symbiot app --fresh) never offers an update: it would replace your real install.
       // A headless browser (an agent's screenshot of Home) never becomes the newest window:
       // that closed the user's real one, again and again (2026-10-08, "symbiot keeps crashing").
-      if (u.pathname === "/api/ping") { if (u.searchParams.get("fresh") === "1" && !SANDBOX) await checkLatest(); const w = u.searchParams.get("w") || ""; if (/^[a-z0-9]{6,20}$/.test(w) && u.searchParams.get("new") === "1" && !headlessAgent(req.headers["user-agent"])) NEWEST_WIN = w; return json(res, { ...(NEWEST_WIN ? { window: NEWEST_WIN } : {}), version: VERSION, started: SERVER_STARTED, latest: LATEST_VERSION, newer: !SANDBOX && semverGt(LATEST_VERSION, VERSION), ...(UPDATING && UPDATING.retrying ? { retrying: UPDATING } : {}), ...(IN_TERMUX ? { termux: true } : {}), ...(SANDBOX ? { sandbox: true } : {}) }); }
+      if (u.pathname === "/api/ping") { if (u.searchParams.get("fresh") === "1" && !SANDBOX) await checkLatest(); const w = u.searchParams.get("w") || ""; if (/^[a-z0-9]{6,20}$/.test(w) && u.searchParams.get("new") === "1" && !headlessAgent(req.headers["user-agent"])) NEWEST_WIN = w; return json(res, { ...(NEWEST_WIN ? { window: NEWEST_WIN } : {}), version: VERSION, started: SERVER_STARTED, latest: LATEST_VERSION, newer: !SANDBOX && !DESKTOP && semverGt(LATEST_VERSION, VERSION), ...(DESKTOP ? { desktop: true } : {}), ...(UPDATING && UPDATING.retrying ? { retrying: UPDATING } : {}), ...(IN_TERMUX ? { termux: true } : {}), ...(SANDBOX ? { sandbox: true } : {}) }); }
       // What's new: after an update, since the version you last saw (until you click Got it);
       // ?latest=1, what the update on offer brings, from its package on npm
       if (u.pathname === "/api/whatsnew") {
@@ -485,6 +497,11 @@ async function startApp({ bin, since = 7, all = false, c = PLAIN_COLOURS } = {})
         return json(res, { version: to, changes: changesSince(md, VERSION, to), ...(md ? {} : { error: `Couldn't read ${to}'s changelog from npm.` }) });
       }
       if (u.pathname === "/api/whatsnew/seen" && req.method === "POST") { const cfg = loadConfig(); cfg.seenVersion = VERSION; return json(res, saveConfig(cfg) ? { ok: true } : { error: "Couldn't write the config file." }); }
+      if (u.pathname === "/api/claude/setup") return json(res, claudeSetup(u.searchParams.get("fresh") === "1"));
+      if (u.pathname === "/api/claude/install" && req.method === "POST") return json(res, installClaude());
+      if (u.pathname === "/api/claude/signin" && req.method === "POST") return json(res, signInClaude());
+      if (u.pathname === "/api/claude/code" && req.method === "POST") { const b = await readBody(req); return json(res, sendClaudeCode(b.code)); }
+      if (u.pathname === "/api/update" && req.method === "POST" && DESKTOP) return json(res, { error: "This Symbiot updates with its app." });
       if (u.pathname === "/api/update" && req.method === "POST") {
         // Install the exact newest version (see updateCmd), then relaunch this
         // same app (same port+token => same URL) and exit. The page's heartbeat
@@ -505,14 +522,14 @@ async function startApp({ bin, since = 7, all = false, c = PLAIN_COLOURS } = {})
             return;
           }
           server.close(); if (server.closeAllConnections) server.closeAllConnections();
-          try { const ch = spawn(process.execPath, process.argv.slice(1), { detached: true, stdio: "ignore", env: { ...process.env, SYMBIOT_RELAUNCH: "1" } }); ch.unref(); } catch {}
+          try { const ch = spawn(process.execPath, process.argv.slice(1), { detached: true, stdio: "ignore", env: { ...process.env, SYMBIOT_RELAUNCH: "1" }, cwd: homedir() }); ch.unref(); } catch {}
           setTimeout(() => process.exit(0), 1200);
         });
         UPDATING = { target, attempt: 1, at: Date.now() };
         const e = attempt(1);
         return json(res, { started: true, id: e ? e.id : "", target });
       }
-      if (u.pathname === "/api/quit") { res.writeHead(200); res.end("bye"); setTimeout(() => process.exit(0), 150); return; }
+      if (u.pathname === "/api/quit") { stopVoices(); res.writeHead(200); res.end("bye"); setTimeout(() => process.exit(0), 150); return; }
     } catch (e) { res.writeHead(500, { "content-type": "application/json" }); res.end(JSON.stringify({ error: String((e && e.message) || e) })); return; }
     res.writeHead(404); res.end("not found");
   });

package/ui.mjs

@@ -3026,7 +3026,7 @@ function voiceSay(t){LQ.talkMin=false;lqTalkMode(true);LQ.talk.push({me:false,te
 var VOICE_WHY={'not-allowed':'Symbiot couldn’t use your microphone. Allow it for this window (the icon at the top of the window, or your system’s privacy settings), then click the mic again.','service-not-allowed':'Symbiot couldn’t use your microphone. Allow it for this window, then click the mic again.','audio-capture':'No microphone was found. Plug one in, or check it’s switched on, then try again.','network':'Talking needs an internet connection: your browser turns speech into text online.'};
 function voiceToggle(){
 if(VOICE.on){try{VOICE.rec.stop();}catch(e){}return;}
-try{if(window.speechSynthesis)window.speechSynthesis.cancel();}catch(e){}
+voiceStop();
 var R=window.SpeechRecognition||window.webkitSpeechRecognition;if(!R)return;
 var r;try{r=new R();}catch(e){return;}
 var ask=$('lqask');VOICE.rec=r;VOICE.final='';VOICE.err='';VOICE.base=((ask&&ask.value)||'').trim();
@@ -3039,13 +3039,41 @@ r.onend=function(){VOICE.on=false;voiceMic(false);VOICE.rec=null;var said=((ask&
 if(why){voiceSay(why);return;}
 if(VOICE.final.trim()&&said){VOICE.spoke=true;lqSay();}};
 try{r.start();}catch(e){VOICE.on=false;voiceMic(false);}}
-// read out: plain words (no markdown marks), up to a few sentences; a voice in your language, a natural one if there is
-function voiceSpeak(t){if(!window.speechSynthesis||!t)return;
-var clean=String(t).replace(/[*_#>|]+/g,' ').replace(new RegExp(String.fromCharCode(96),'g'),'').replace(/https?:[^ ]+/g,'a link').replace(/ +/g,' ').trim();
+// Speaking, with no voice to choose: the system's own when it has a natural one
+// (Edge on Windows, Macs with Apple's better voices, phones), in your region's accent if it has that too;
+// otherwise Symbiot's own (voice.mjs: Piper on this computer), fetched once in the
+// background the first time, with the system's voice meanwhile. Plain words only.
+var SPEAK={audio:null,n:0,own:null,asked:false};
+function voiceLang(){return navigator.language||'en-US';}
+function voiceTag(v){return String((v&&v.lang)||'').toLowerCase().split('_').join('-');}
+function voiceNatural(){if(!window.speechSynthesis)return null;var tag=voiceLang().toLowerCase().split('_').join('-'),lang=tag.slice(0,2);
+var vs=window.speechSynthesis.getVoices().filter(function(v){return voiceTag(v).indexOf(lang)===0;});
+// modern voices only: Edge's Natural ones, Apple's Premium and Enhanced. Chrome's Google voices and espeak sound robotic.
+var good=vs.filter(function(v){return /natural|neural|enhanced|premium|siri/i.test(v.name||'')&&!/espeak|google/i.test(v.name||'');});
+if(!good.length&&/android|iphone|ipad/i.test(navigator.userAgent||''))good=vs; // a phone's own voices are good ones
+good.sort(function(a,b){return (voiceTag(b)===tag)-(voiceTag(a)===tag);});
+return {best:good[0]||null,any:good[0]||vs[0]||null};}
+function voiceStop(){SPEAK.n++;try{if(window.speechSynthesis)window.speechSynthesis.cancel();}catch(e){}if(SPEAK.audio){try{SPEAK.audio.pause();}catch(e){}SPEAK.audio=null;}}
+function voiceClean(t){var clean=String(t||'').replace(/[*_#>|]+/g,' ').replace(new RegExp(String.fromCharCode(96),'g'),'').replace(/https?:[^ ]+/g,'a link').replace(/ +/g,' ').trim();
 if(clean.length>700){var cut=clean.slice(0,700),at=Math.max(cut.lastIndexOf('. '),cut.lastIndexOf('? '),cut.lastIndexOf('! '));clean=(at>200?cut.slice(0,at+1):cut)+' The rest is on screen.';}
-try{var u=new SpeechSynthesisUtterance(clean),lang=(navigator.language||'en').slice(0,2).toLowerCase(),vs=window.speechSynthesis.getVoices().filter(function(v){return (v.lang||'').toLowerCase().indexOf(lang)===0;});
-var best=vs.filter(function(v){return /natural|neural|google|online/i.test(v.name);})[0]||vs[0];if(best)u.voice=best;u.lang=navigator.language||'en-US';u.rate=1.02;
-window.speechSynthesis.cancel();window.speechSynthesis.speak(u);}catch(e){}}
+return clean;}
+function voiceSystem(text,v){if(!window.speechSynthesis||!text)return;try{var u=new SpeechSynthesisUtterance(text);if(v)u.voice=v;u.lang=voiceLang();u.rate=1.02;window.speechSynthesis.cancel();window.speechSynthesis.speak(u);}catch(e){}}
+// a sentence at a time, so the first is heard while the next is made
+function voiceSentences(t){var out=[],cur='';t.split(' ').forEach(function(w){cur+=(cur?' ':'')+w;var e=w.charAt(w.length-1);if((e==='.'||e==='?'||e==='!')&&cur.length>24){out.push(cur);cur='';}});if(cur)out.push(cur);return out;}
+function voiceOwn(text,lang){var my=SPEAK.n,parts=voiceSentences(text),got=[];
+var make=function(i){if(i>=parts.length||got[i])return;got[i]=fetch('/api/voice/say',{method:'POST',headers:{'x-symbiot-token':T,'content-type':'application/json'},body:JSON.stringify({text:parts[i],lang:lang})}).then(function(r){if((r.headers.get('content-type')||'').indexOf('audio')<0)throw new Error('no audio');return r.blob();});};
+var play=function(i){if(my!==SPEAK.n||i>=parts.length)return;make(i);make(i+1);
+got[i].then(function(b){if(my!==SPEAK.n)return;var a=new Audio(URL.createObjectURL(b));SPEAK.audio=a;a.onended=function(){try{URL.revokeObjectURL(a.src);}catch(e){}play(i+1);};var pl=a.play();if(pl&&pl.catch)pl.catch(function(){});})
+.catch(function(){if(my!==SPEAK.n)return;SPEAK.own=null;var nat=voiceNatural();voiceSystem(parts.slice(i).join(' '),nat&&nat.any);});};
+play(0);}
+function voiceSpeak(t){if(!t)return;voiceStop();var clean=voiceClean(t);if(!clean)return;var nat=voiceNatural();
+if(nat&&nat.best){voiceSystem(clean,nat.best);return;}
+var lang=voiceLang(),go=function(st){if(st&&st.state==='ready'){voiceOwn(clean,lang);return;}
+if(st&&(st.state==='missing'||st.state==='failed')&&!SPEAK.asked){SPEAK.asked=true;api('/api/voice/prepare',{lang:lang}).catch(function(){});}
+voiceSystem(clean,nat&&nat.any);};
+if(SPEAK.own&&SPEAK.own.state==='ready')go(SPEAK.own);else api('/api/voice?lang='+encodeURIComponent(lang)).then(function(st){SPEAK.own=st;go(st);}).catch(function(){go(null);});}
+// Chrome lists its voices only after a first ask
+try{if(window.speechSynthesis)window.speechSynthesis.getVoices();}catch(e){}
 function lqSay(){var spoke=VOICE.spoke;VOICE.spoke=false;var i=$('lqask');var q=((i&&i.value)||'').trim(),shots=LQ.atts.slice();if(!q&&!shots.length)return;if(!q)q='Take a look at this screenshot.';i.value='';lqGrowAsk();LQ.atts=[];lqAttsShow();lqAct();
 var low=q.toLowerCase().replace(/^(please |can you |could you )/,''),hit='';
 Object.keys(LQNAMES).forEach(function(k){var nm=LQNAMES[k].toLowerCase();if(hit)return;['open ','show ','go to ','take me to '].forEach(function(v){if(low.indexOf(v+nm)===0||low.indexOf(v+'my '+nm)===0)hit=k;});if(low===nm)hit=k;});
@@ -3231,7 +3259,12 @@ h="<img class='onborb' src='/favicon.svg?look="+encodeURIComponent(lqLookGet()||
 else if(o.step==='ai'){var a=o.ai||{},c=a.claude||{};
 h="<h2 id='onbt'>Your AI</h2><p class='onbl'>Symbiot thinks with an AI: it reads what comes in, talks with you and writes for you.</p>";
 if(a.connected)h+="<div class='onbok'><i>✓</i><div>Symbiot is using <b>"+esc(a.line)+"</b>"+(a.provider==='claude'?". It’s the Claude account you’re signed in with in Claude Code: no key, nothing extra to pay.":".")+"</div></div>";
-else h+="<div class='onbbox'><h3>Your Claude subscription (recommended)</h3><p>"+(c.installed?"Claude Code is on this computer but not signed in. Open a terminal, run <code>claude</code> once and sign in with your Claude account.":"Install Claude Code (<code>npm install -g @anthropic-ai/claude-code</code>), run <code>claude</code> once and sign in with your Claude account.")+" No key, and nothing extra to pay.</p><button class='ghost' id='onbrecheck'>I’ve signed in: check again</button></div>"+
+else h+="<div class='onbbox'><h3>Your Claude subscription (recommended)</h3><p>Symbiot thinks through Claude Code, Anthropic’s own app, with your Claude account: no key, and nothing extra to pay.</p>"+
+(c.installing?"<p><span class='onbspin'></span>Installing Claude Code… this takes about a minute.</p>":
+ !c.installed?"<button class='act' id='onbccinst'>Install Claude Code</button>"+(c.installError?"<p class='onbnote' style='margin-top:10px'>"+esc(c.installError)+"</p>":""):
+ c.signingIn?"<p><span class='onbspin'></span>Sign in on the page that opened in your browser. This ticks itself when you’re done.</p><div class='onbrow'><input id='onbcccode' placeholder='If the page shows a code, paste it here'><button class='ghost' id='onbccsend'>Send</button></div>":
+ "<p>Claude Code is installed. Now sign in with your Claude account.</p><button class='act' id='onbccsign'>Sign in with Claude</button>"+(c.signinError?"<p class='onbnote' style='margin-top:10px'>"+esc(c.signinError)+"</p>":""))+
+"<p class='onbnote' style='margin:12px 0 0'>Already done it yourself? <button class='back' id='onbrecheck' style='padding:0'>Check again</button></p></div>"+
 "<div class='onbbox'><h3>Or an API key, or a free local model</h3><div class='onbrow'><select id='onbprov'><option value='anthropic'>Claude (Anthropic) API key</option><option value='openai'>OpenAI API key</option><option value='gemini'>Gemini API key</option><option value='ollama'>Local model (Ollama), no key</option></select><input id='onbkey' type='password' placeholder='paste your key'><button class='ghost' id='onbconnect'>Connect</button></div><p id='onbaimsg' style='margin:8px 0 0'></p></div>";
 h+=onbNav('welcome','work','Continue',!!a.connected);}
 else if(o.step==='work'){var w=o.work||{};
@@ -3269,6 +3302,9 @@ b.innerHTML=h;
 b.querySelectorAll('[data-go]').forEach(function(x){x.addEventListener('click',function(){onbGo(x.getAttribute('data-go'));});});
 var on=function(id,f){var x=$(id);if(x)x.addEventListener('click',f);};
 on('onbrecheck',function(){onbLoad(true);});
+on('onbccinst',function(){api('/api/claude/install',{}).then(function(){onbLoad(true);});});
+on('onbccsign',function(){api('/api/claude/signin',{}).then(function(){onbLoad(true);});});
+on('onbccsend',function(){var v=$('onbcccode').value.trim();if(!v)return;api('/api/claude/code',{code:v}).then(function(){onbLoad(true);});});
 on('onbconnect',function(){var pv=$('onbprov').value,m=$('onbaimsg');m.textContent='Checking…';api('/api/connect',{provider:pv,key:$('onbkey').value.trim(),model:''}).then(function(r){m.textContent=r.message||'';onbLoad(true);});});
 var pvs=$('onbprov');if(pvs)pvs.addEventListener('change',function(){$('onbkey').style.display=pvs.value==='ollama'?'none':'';});
 on('onbaddroot',function(){var v=$('onbroot').value.trim();if(!v)return;api('/api/scanroots/add',{path:v}).then(function(){onbLoad();});});

package/voice.mjs

@@ -0,0 +1,113 @@
+// symbiot — Symbiot's own voice, for computers whose built-in voices sound robotic.
+// The page picks the voice itself: a natural voice the system already has (Windows
+// and Edge, Macs, phones) is used as it is. Where there's none (Linux, mostly: only
+// espeak), Symbiot speaks with Piper, a small open-source speech engine that runs on
+// the computer, with a public-domain voice picked from where you are: British English
+// (Cori) for the UK, South Africa, Australia and the rest, American (LJSpeech) for the
+// US, Canada and the Philippines. Nothing to choose, no account, nothing leaves the
+// computer. Downloaded once, the first time it's needed (~25 MB engine, ~60 MB voice),
+// into ~/.config/symbiot/voice/. Kept warm while you talk, closed after 5 quiet minutes.
+// SYMBIOT_VOICE_DIR / SYMBIOT_PIPER_URL / SYMBIOT_VOICES_URL point elsewhere (tests).
+import { spawn, spawnSync } from "node:child_process";
+import { existsSync, mkdirSync, createWriteStream, readFileSync, rmSync, renameSync } from "node:fs";
+import { join } from "node:path";
+import { CONFIG_DIR } from "./core.mjs";
+
+const PIPER_REL = "2023.11.14-2";
+const PIPER_ASSET = { "linux-x64": "piper_linux_x86_64.tar.gz", "linux-arm64": "piper_linux_aarch64.tar.gz", "linux-arm": "piper_linux_armv7l.tar.gz", "darwin-x64": "piper_macos_x64.tar.gz", "darwin-arm64": "piper_macos_aarch64.tar.gz", "win32-x64": "piper_windows_amd64.zip" };
+// public-domain voices only: free to use in Symbiot, commercially, with no conditions
+const VOICES = {
+  gb: { id: "en_GB-cori-medium", path: "en/en_GB/cori/medium", who: "British English" },
+  us: { id: "en_US-ljspeech-medium", path: "en/en_US/ljspeech/medium", who: "American English" },
+};
+const US_LIKE = new Set(["us", "ca", "ph", "lr", "pr", "um", "as", "gu", "vi"]);
+const IDLE_MS = 5 * 60 * 1000;
+
+const vdir = () => process.env.SYMBIOT_VOICE_DIR || join(CONFIG_DIR, "voice");
+const piperUrl = (asset) => (process.env.SYMBIOT_PIPER_URL || `https://github.com/rhasspy/piper/releases/download/${PIPER_REL}`) + "/" + asset;
+const voiceUrl = (v, ext) => (process.env.SYMBIOT_VOICES_URL || "https://huggingface.co/rhasspy/piper-voices/resolve/v1.0.0") + `/${v.path}/${v.id}${ext}`;
+
+// Which voice for this language ("en-ZA", "en_US", "en"): null when Piper has none we use.
+function voiceFor(lang = "") {
+  const [l, r = ""] = String(lang).toLowerCase().replace("_", "-").split("-");
+  if (l !== "en") return null;
+  return US_LIKE.has(r) ? VOICES.us : VOICES.gb;
+}
+function assetFor(platform = process.platform, arch = process.arch) { return PIPER_ASSET[`${platform}-${arch}`] || null; }
+function piperBin(platform = process.platform) { return join(vdir(), "piper", platform === "win32" ? "piper.exe" : "piper"); }
+const modelPath = (v) => join(vdir(), "voices", v.id + ".onnx");
+const haveVoice = (v) => existsSync(modelPath(v)) && existsSync(modelPath(v) + ".json");
+
+const S = { busy: null, error: "", got: 0, total: 0 };
+function voiceState(lang = "") {
+  const v = voiceFor(lang);
+  if (!v) return { state: "none", why: "no voice for this language" };
+  if (!assetFor()) return { state: "none", why: "not on this kind of computer" };
+  if (existsSync(piperBin()) && haveVoice(v)) return { state: "ready", voice: v.who };
+  if (S.busy) return { state: "downloading", voice: v.who, ...(S.total ? { percent: Math.min(99, Math.round((S.got / S.total) * 100)) } : {}) };
+  return { state: S.error ? "failed" : "missing", voice: v.who, ...(S.error ? { error: S.error } : {}) };
+}
+
+async function download(url, to) {
+  const r = await fetch(url, { redirect: "follow" });
+  if (!r.ok || !r.body) throw new Error(`couldn't download ${url.split("/").pop()} (${r.status})`);
+  S.total += Number(r.headers.get("content-length")) || 0;
+  const part = to + ".part", out = createWriteStream(part);
+  for await (const chunk of r.body) { S.got += chunk.length; if (!out.write(chunk)) await new Promise((ok) => out.once("drain", ok)); }
+  await new Promise((ok, bad) => out.end((e) => (e ? bad(e) : ok())));
+  renameSync(part, to);
+}
+// The engine and this language's voice, once. Safe to call again: it only fetches what's missing.
+function prepareVoice(lang = "") {
+  const v = voiceFor(lang), asset = assetFor();
+  if (!v || !asset) return voiceState(lang);
+  if (S.busy) return voiceState(lang);
+  if (existsSync(piperBin()) && haveVoice(v)) return voiceState(lang);
+  S.error = ""; S.got = 0; S.total = 0;
+  S.busy = (async () => {
+    const dir = vdir(); mkdirSync(join(dir, "voices"), { recursive: true });
+    if (!existsSync(piperBin())) {
+      const arc = join(dir, asset);
+      await download(piperUrl(asset), arc);
+      // tar unpacks both: .tar.gz everywhere, and .zip on Windows 10+ (bsdtar)
+      const t = spawnSync("tar", [asset.endsWith(".zip") ? "-xf" : "-xzf", arc, "-C", dir], { encoding: "utf8", windowsHide: true });
+      rmSync(arc, { force: true });
+      if (t.status !== 0 || !existsSync(piperBin())) throw new Error("couldn't unpack the speech engine" + (t.stderr ? ": " + String(t.stderr).trim().split("\n").pop() : ""));
+    }
+    if (!haveVoice(v)) { await download(voiceUrl(v, ".onnx.json"), modelPath(v) + ".json"); await download(voiceUrl(v, ".onnx"), modelPath(v)); }
+  })().catch((e) => { S.error = String((e && e.message) || e); }).finally(() => { S.busy = null; });
+  return voiceState(lang);
+}
+
+// One warm engine per voice: a line of text in, the path of its .wav out, in order.
+const WARM = new Map();
+function engine(v) {
+  let w = WARM.get(v.id);
+  if (w && !w.dead) { clearTimeout(w.idle); w.idle = setTimeout(() => stopEngine(v.id), IDLE_MS); return w; }
+  const out = join(vdir(), "out"); mkdirSync(out, { recursive: true });
+  const ch = spawn(piperBin(), ["--model", modelPath(v), "--output_dir", out], { cwd: vdir(), stdio: ["pipe", "pipe", "ignore"], windowsHide: true });
+  w = { ch, wait: [], buf: "", dead: false, idle: setTimeout(() => stopEngine(v.id), IDLE_MS) };
+  ch.stdout.on("data", (d) => {
+    w.buf += d; let i;
+    while ((i = w.buf.indexOf("\n")) >= 0) { const line = w.buf.slice(0, i).trim(); w.buf = w.buf.slice(i + 1); if (line) { const p = w.wait.shift(); if (p) p.ok(line); } }
+  });
+  const fail = (e) => { w.dead = true; clearTimeout(w.idle); for (const p of w.wait.splice(0)) p.bad(e); WARM.delete(v.id); };
+  ch.on("error", fail); ch.on("exit", () => fail(new Error("the speech engine stopped")));
+  WARM.set(v.id, w);
+  return w;
+}
+function stopEngine(id) { const w = WARM.get(id); if (!w) return; WARM.delete(id); w.dead = true; clearTimeout(w.idle); try { w.ch.stdin.end(); w.ch.kill(); } catch {} }
+function stopVoices() { for (const id of [...WARM.keys()]) stopEngine(id); }
+
+// Speak one piece of text (a sentence or two): the WAV's bytes.
+async function speak(text, lang = "") {
+  const v = voiceFor(lang);
+  if (!v || voiceState(lang).state !== "ready") throw new Error("Symbiot's voice isn't ready yet");
+  const line = String(text || "").replace(/\s+/g, " ").trim().slice(0, 600);
+  if (!line) throw new Error("nothing to say");
+  const w = engine(v);
+  const file = await new Promise((ok, bad) => { w.wait.push({ ok, bad }); w.ch.stdin.write(line + "\n"); });
+  try { return readFileSync(file); } finally { rmSync(file, { force: true }); }
+}
+
+export { voiceFor, assetFor, voiceState, prepareVoice, speak, stopVoices, VOICES, PIPER_REL };