feat(dankvoice): /say options menu with output-device routing (Refs #23)

Bare /say and /say menu open a ctx.ui.select settings surface: auto-speak
toggle, voice from the frank-tts roster, PipeWire output device
(pw-play --target / paplay --device=), player binary, spoken cap, and a
test phrase. Choices persist to ~/.omp/cache/dankvoice.json (env wins
over file); detectPlayer becomes availablePlayers + playerFor. Fixes
the silent-route failure mode where synthesized audio played into an
offline Bluetooth sink. 15/15 dankvoice bats, 51/51 suite, live pty
TUI smoke armed the footer and wrote the settings file.

omp-docs/core/dankvoice.md

@@ -16,10 +16,10 @@ timestamp: 2026-10-18
 # dankvoice
 
 `agent/extensions/dankvoice.ts` adds cloned-voice speech to the interactive
-harness: `/say <text>` speaks through the speakers and `/say on` narrates the
-assistant's final answer after every turn, both served by
-**frank-tts** (Dankclaw :7772, the `speech` model role in
-[agent/models.yml](/core/index.md)).
+harness: `/say` opens the options menu, `/say <text>` speaks through the
+speakers and `/say on` narrates the assistant's final answer after every
+turn, all served by **frank-tts** (Dankclaw :7772, the `speech` model role
+in [agent/models.yml](/core/index.md)).
 
 ## Why it exists
 
@@ -39,12 +39,19 @@ local speech and the cloned voices carry the real narration.
 
 | Command | Effect |
 |---|---|
+| `/say` \| `/say menu` | options menu (`ctx.ui.select`): auto-speak toggle, voice, output device, player, spoken cap, test phrase |
 | `/say <text>` | synthesize once and play; interrupts whatever is playing |
 | `/say on` \| `/say off` | arm/disarm auto-speak of the assistant's final text at `agent_end`; the footer shows `🔊 <voice>` while armed |
 | `/say voice <name>` | pick a voice; an empty name defers to the server's own default |
 | `/say voices` | list what frank-tts reports |
 | `/say stop` | cut the current utterance |
-| `/say status` \| `/say help` | endpoint, voice, player, cap |
+| `/say status` \| `/say help` | endpoint, voice, player, device, cap |
+
+Menu choices persist to `~/.omp/cache/dankvoice.json` (runtime state, never
+tracked); the environment overrides the file, the file overrides defaults.
+"Speak a test phrase" synthesizes a short line through the current voice,
+player and device — the audible proof whenever a session "has say on" but
+stays silent.
 
 Auto-speak is skipped in `print`/`json` mode so benches and pipelines stay
 silent. Markdown is stripped before synthesis — fenced code is dropped, links
@@ -63,16 +70,21 @@ resolves, so no host address and no credential appears in this file. From
 |---|---|---|
 | `DANKVOICE_URL` | models.yml | speech base URL (`…/v1`), bypasses the YAML read |
 | `DANKVOICE_MODEL` | the id in that block (`frank-tts`) | model named in the request body |
+| `DANKVOICE_CONFIG` | `~/.omp/cache/dankvoice.json` | persisted menu choices (voice, player, sink, cap, auto) |
 | `DANKVOICE_VOICE` | empty (server default) | default voice name |
 | `DANKVOICE_AUTO=1` | off | start with auto-speak armed |
 | `DANKVOICE_MAX` | `700` | spoken characters per utterance |
 | `DANKVOICE_PLAYER` | detect | player binary, skipping detection |
 | `DANKVOICE_MODELS` | `~/.omp/agent/models.yml` | YAML to read the endpoint from |
 
-Player detection order is `pw-play` → `paplay` → `ffplay -nodisp -autoexit`
-(PipeWire first: the workstations run WirePlumber). Each utterance is written
-to `$TMPDIR/dankvoice-*/say-<ms>.wav` and the file plus its directory are
-removed when the player process exits.
+Player detection order is `pw-play` → `paplay` → `ffplay` (PipeWire first:
+the workstations run WirePlumber). A saved output device routes the player
+explicitly — `pw-play --target <sink>` or `paplay --device=<sink>`; ffplay
+has no device concept and ignores it — while an unset device leaves the
+player's own default. Sinks are enumerated with `wpctl list audio sinks`;
+if wireplumber is unreachable the menu offers only "system default". Each
+utterance is written to `$TMPDIR/dankvoice-*/say-<ms>.wav` and the file plus
+its directory are removed when the player process exits.
 
 ## Verified facts (2026-10-18)
 
@@ -101,6 +113,11 @@ removed when the player process exits.
   (1.20 s WAV), and an unknown voice name answers with the roster instead of
   speaking. An `agent_end` carrying `willContinue` (the harness scheduled an
   auto-retry) is never narrated — only the terminal settle speaks.
+* **Menu** — verified via driver scenarios 2026-10-18 (Refs #23): the menu
+  lists auto-speak/voice/device/player/cap/test-phrase; a voice chosen in the
+  menu is used by later utterances and survives a fresh load via the settings
+  file; a device chosen in the menu appears in the player invocation as
+  `--target <sink>`.
 
 ## Limits
 
@@ -125,6 +142,7 @@ removed when the player process exits.
   `@earendil-works/pi-coding-agent` `dist/core/extensions/types.d.ts`
   (`ExtensionAPI.on/registerCommand`, `ExtensionMode = "tui" | "rpc" | "json" | "print"`).
 * Gitea issue #21 on `dank/command-center` (the work item this page ships with).
+* Gitea issue #23 on `dank/command-center` (the options-menu work item).
 
 ## See Also