feat(dankvoice): speak the cloned voices in the TUI (Refs #21)

Every speak-aloud path in the harness gates `--voice` against the bundled
Kokoro enum, so the frank-tts cloned voices could only ever produce files.
`agent/extensions/` auto-loads, so one tracked extension adds the missing
transport: `/say <text>`, `/say on|off` (narrate the final answer at
`agent_end`, silent when the harness schedules a continuation),
`/say voice|voices|stop|status` — OpenAI speech POST plus playback through
pw-play/paplay/ffplay. The endpoint and served id come from the
`api: openai-speech` row of `agent/models.yml`, so the file carries no host
and no secret; markdown is stripped, over-long utterances are cut at a
sentence bound, and the temp WAV dir is always removed.

Verified live in a real TUI session on the workstation (roster
narrator1/narrator2/narrator3; 2.08 s and 1.44 s WAVs played; auto-speak
spoke each finished answer, 1.20 s WAV; unknown voice answers with the
roster). Black-box seam `tests/dankvoice.bats` (12 tests) drives the
extension against a fixture speech endpoint and a stub player.

cwd: /home/blank/.omp/wt/feat-21-dankvoice
session: wt-20261017-181502-6d1fc1f

agent/config.yml

@@ -13,7 +13,7 @@ modelRoles:
   default: llamacpp (dankserver)/frank-archon:medium
   smol: llamacpp (dankclaw-3090)/frank-zealot:medium
   web: web/searxng
-  speech: local/kokoro
+  speech: frank-tts (dankclaw)/frank-tts
   judge: openrouter/~typesafe/jev-latest:auto
   dictation: local/parakeet-tdt-0.6b-v3
   memory: llamacpp (dankclaw-3090)/frank-zealot:medium
@@ -206,6 +206,10 @@ speech:
   enabled: true
   mode: yield
   enhanced: true
+  # Kokoro voice for SPEAK-ALOUD only — the enum is Kokoro's, and this block never
+  # reaches an HTTP request. The tts tool forwards `voice_id` and nothing else, so
+  # a frank-tts pack name here would break the vocalizer and still leave a
+  # synthesis call voice-less. Say `voice_id: "narrator1"` in the call.
   voice: am_fenrir
 secrets:
   enabled: true

agent/extensions/dankvoice.ts

@@ -0,0 +1,463 @@
+/**
+ * dankvoice — cloned-voice vocalization for omp, served by frank-tts.
+ *
+ * The built-in speak-aloud feature (`speech.enabled` / `speech.voice`) and the
+ * `omp say` CLI are gated to the bundled Kokoro voice enum, so the cloned
+ * voices on frank-tts (Dankclaw :7772, the `speech` model role in
+ * agent/models.yml) could only ever produce files. This extension adds the
+ * missing path — the TUI speaks with the cloned voices:
+ *
+ *   /say <text>          speak once through the speakers
+ *   /say on | off        auto-speak the assistant's final answer each turn
+ *   /say voice <name>    choose a voice (empty = whatever the server defaults to)
+ *   /say voices          list the voices frank-tts reports
+ *   /say stop            cut off the current utterance
+ *   /say status          voice, endpoint and player in use
+ *
+ * The endpoint comes from agent/models.yml — the provider block carrying
+ * `api: openai-speech`, i.e. the same row the speech role resolves — so this
+ * file carries no host address and no secret. Environment overrides:
+ *
+ *   DANKVOICE_URL      speech base URL (…/v1) instead of models.yml
+ *   DANKVOICE_MODEL    served model id (default: the id in that block)
+ *   DANKVOICE_VOICE    default voice name
+ *   DANKVOICE_AUTO=1   start with auto-speak armed
+ *   DANKVOICE_MAX      spoken-character cap per utterance (default 700)
+ *   DANKVOICE_PLAYER   player binary, skipping detection
+ *   DANKVOICE_MODELS   path to models.yml (default ~/.omp/agent/models.yml)
+ *
+ * Utterances are synthesized to a temp WAV in $TMPDIR; the file is removed
+ * when its player process exits. A new utterance interrupts the previous one
+ * instead of queueing behind it.
+ */
+
+import { spawn, spawnSync, type ChildProcess } from "node:child_process";
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import type { ExtensionAPI, ExtensionContext } from "@earendil-works/pi-coding-agent";
+
+const DEFAULT_MAX_CHARS = 700;
+const SYNTH_TIMEOUT_MS = 60_000;
+const VOICES_TIMEOUT_MS = 15_000;
+/** A voice name the shim must reject; its 400 body carries the real list. */
+const VOICE_PROBE = "_dankvoice_probe_";
+
+// ---------------------------------------------------------------- pure logic
+
+export interface SpeechTarget {
+  /** POST target for OpenAI speech synthesis. */
+  speechUrl: string;
+  /** GET target for the voice roster (frank-tts answers a bare JSON array). */
+  voicesUrl: string;
+  /** GET target for the liveness route of the same host:port. */
+  healthUrl: string;
+  /** Served model id to name in the request body. */
+  model: string;
+}
+
+export interface Player {
+  command: string;
+  args: string[];
+}
+
+export type SayAction =
+  | { kind: "help" }
+  | { kind: "speak"; text: string }
+  | { kind: "on" }
+  | { kind: "off" }
+  | { kind: "stop" }
+  | { kind: "voices" }
+  | { kind: "status" }
+  | { kind: "voice"; name: string };
+
+/** `/say <args>` grammar: subcommands win, anything else is spoken text. */
+export function parseSayArgs(raw: string): SayAction {
+  const args = raw.trim();
+  const lower = args.toLowerCase();
+  if (lower === "" || lower === "help") return { kind: "help" };
+  if (lower === "on") return { kind: "on" };
+  if (lower === "off") return { kind: "off" };
+  if (lower === "stop") return { kind: "stop" };
+  if (lower === "voices") return { kind: "voices" };
+  if (lower === "status") return { kind: "status" };
+  if (lower === "voice" || lower.startsWith("voice ")) return { kind: "voice", name: args.slice(5).trim() };
+  return { kind: "speak", text: args };
+}
+
+/**
+ * Pull the speech endpoint out of agent/models.yml. The runner API lives on
+ * the MODEL row (`api: openai-speech`), the base URL on its provider, so this
+ * scan remembers the last provider base URL and model id seen and returns when
+ * a model row claims the speech runner API. A new provider key (indent two)
+ * resets both.
+ */
+export function resolveSpeechEndpoint(modelsYml: string): SpeechTarget | undefined {
+  let base: string | undefined;
+  let id: string | undefined;
+  for (const line of modelsYml.split(/\r?\n/)) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) continue;
+    if (/^ {2}\S.*:\s*$/.test(line)) {
+      base = undefined;
+      id = undefined;
+      continue;
+    }
+    const providerUrl = trimmed.match(/^baseUrl:\s*(\S+)/);
+    if (providerUrl) {
+      base = providerUrl[1].replace(/\/+$/, "");
+      continue;
+    }
+    const modelId = trimmed.match(/^-\s*id:\s*(\S+)/);
+    if (modelId) {
+      id = modelId[1];
+      continue;
+    }
+    if (/^api:\s*openai-speech\s*$/.test(trimmed) && base) {
+      return {
+        speechUrl: `${base}/audio/speech`,
+        voicesUrl: `${base}/audio/voices`,
+        healthUrl: `${base.replace(/\/v1$/, "")}/health`,
+        model: id ?? "frank-tts",
+      };
+    }
+  }
+  return undefined;
+}
+
+/** OpenAI speech body; `voice` is sent only when named — the shim carries its own default. */
+export function speechBody(model: string, text: string, voice: string): Record<string, string> {
+  const body: Record<string, string> = { model, input: text, response_format: "wav" };
+  if (voice) body.voice = voice;
+  return body;
+}
+
+/** Voice names as frank-tts reports them: the invalid-voice 400 body carries `available_voices`. */
+export function parseVoices(payload: unknown): string[] {
+  // frank-tts answers GET /v1/audio/voices with a bare array and an unknown voice with
+  // {error:{available_voices:[…]}}; a flat body is accepted too.
+  if (typeof payload !== "object" || payload === null) return [];
+  let list: unknown;
+  if (Array.isArray(payload)) {
+    list = payload;
+  } else if ("error" in payload && typeof payload.error === "object" && payload.error !== null && "available_voices" in payload.error) {
+    list = payload.error.available_voices;
+  } else if ("available_voices" in payload) {
+    list = payload.available_voices;
+  } else if ("voices" in payload) {
+    list = payload.voices;
+  } else if ("data" in payload) {
+    list = payload.data;
+  }
+  if (!Array.isArray(list)) return [];
+  const names: string[] = [];
+  for (const entry of list) {
+    if (typeof entry === "string") {
+      names.push(entry);
+    } else if (typeof entry === "object" && entry !== null) {
+      const name = "id" in entry ? entry.id : "name" in entry ? entry.name : undefined;
+      if (typeof name === "string") names.push(name);
+    }
+  }
+  return names.filter((name) => name.length > 0);
+}
+
+/** Player preference: PipeWire first (this fleet runs WirePlumber), then Pulse, then ffmpeg. */
+export function detectPlayer(lookup: (command: string) => string | null): Player | null {
+  const candidates: Player[] = [
+    { command: "pw-play", args: [] },
+    { command: "paplay", args: [] },
+    { command: "ffplay", args: ["-nodisp", "-autoexit", "-loglevel", "quiet"] },
+  ];
+  for (const candidate of candidates) {
+    if (lookup(candidate.command)) return candidate;
+  }
+  return null;
+}
+
+/** What a speech engine should say: prose only, no fences, no markup, bounded. */
+export function stripForSpeech(text: string, maxChars: number = DEFAULT_MAX_CHARS): string {
+  let out = text;
+  out = out.replace(/```[\s\S]*?```/g, " ");
+  out = out.replace(/~~~[\s\S]*?~~~/g, " ");
+  out = out.replace(/`([^`]*)`/g, "$1");
+  out = out.replace(/!\[[^\]]*\]\([^)]*\)/g, " ");
+  out = out.replace(/\[([^\]]*)\]\([^)]*\)/g, "$1");
+  out = out.replace(/^\s{0,3}#{1,6}\s+/gm, "");
+  out = out.replace(/^\s*[-*+]\s+/gm, "");
+  out = out.replace(/^\s*\|[-: |]+\|\s*$/gm, " ");
+  out = out.replace(/\|/g, " ");
+  out = out.replace(/[*_]{1,3}([^*_]+)[*_]{1,3}/g, "$1");
+  out = out.replace(/\s+/g, " ").trim();
+  if (out.length <= maxChars) return out;
+  const window = out.slice(0, maxChars);
+  const cut = Math.max(window.lastIndexOf(". "), window.lastIndexOf("! "), window.lastIndexOf("? "));
+  const clipped = cut > maxChars / 2 ? window.slice(0, cut + 1) : window.replace(/[,;:]\s*\S*$/, "");
+  return `${clipped.trim()} …`;
+}
+
+/** The text the assistant last actually said; tool-only messages do not count. */
+export function lastAssistantText(messages: readonly unknown[]): string {
+  for (let i = messages.length - 1; i >= 0; i--) {
+    const message = messages[i];
+    if (!message || typeof message !== "object" || !("role" in message) || message.role !== "assistant") continue;
+    if (!("content" in message)) continue;
+    const content = message.content;
+    if (typeof content === "string") return content;
+    if (!Array.isArray(content)) continue;
+    const parts: string[] = [];
+    for (const part of content) {
+      if (part && typeof part === "object" && "type" in part && part.type === "text" && "text" in part && typeof part.text === "string") {
+        parts.push(part.text);
+      }
+    }
+    const joined = parts.join("\n").trim();
+    if (joined) return joined;
+  }
+  return "";
+}
+
+// ------------------------------------------------------------- live wiring
+
+interface Config {
+  target?: SpeechTarget;
+  player?: Player;
+  maxChars: number;
+  auto: boolean;
+  voice: string;
+}
+
+function lookupOnPath(command: string): string | null {
+  const found = spawnSync("sh", ["-c", `command -v ${command}`], { encoding: "utf8" });
+  return found.status === 0 && found.stdout.trim() ? found.stdout.trim() : null;
+}
+
+function readModelsYml(): string {
+  const path = process.env.DANKVOICE_MODELS ?? join(process.env.HOME ?? "", ".omp", "agent", "models.yml");
+  try {
+    return readFileSync(path, "utf8");
+  } catch {
+    return "";
+  }
+}
+
+function loadConfig(): Config {
+  const overrideUrl = process.env.DANKVOICE_URL?.trim().replace(/\/+$/, "");
+  const modelOverride = process.env.DANKVOICE_MODEL?.trim();
+  const fromYml = overrideUrl ? undefined : resolveSpeechEndpoint(readModelsYml());
+  const target: SpeechTarget | undefined = overrideUrl
+    ? {
+        speechUrl: `${overrideUrl}/audio/speech`,
+        voicesUrl: `${overrideUrl}/audio/voices`,
+        healthUrl: `${overrideUrl.replace(/\/v1$/, "")}/health`,
+        model: modelOverride || "frank-tts",
+      }
+    : fromYml
+      ? { ...fromYml, model: modelOverride || fromYml.model }
+      : undefined;
+  const playerOverride = process.env.DANKVOICE_PLAYER?.trim();
+  const maxChars = Number(process.env.DANKVOICE_MAX);
+  return {
+    target,
+    player: playerOverride ? { command: playerOverride, args: [] } : (detectPlayer(lookupOnPath) ?? undefined),
+    maxChars: Number.isFinite(maxChars) && maxChars > 0 ? Math.floor(maxChars) : DEFAULT_MAX_CHARS,
+    auto: process.env.DANKVOICE_AUTO === "1",
+    voice: process.env.DANKVOICE_VOICE?.trim() ?? "",
+  };
+}
+
+/** Synthesize one utterance into a WAV inside `dir`; throws with the endpoint's own message. */
+async function synthesize(target: SpeechTarget, body: Record<string, string>, dir: string, timeoutMs: number): Promise<string> {
+  const res = await fetch(target.speechUrl, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify(body),
+    signal: AbortSignal.timeout(timeoutMs),
+  });
+  const contentType = res.headers.get("content-type") ?? "";
+  if (!res.ok || contentType.includes("json")) {
+    let message = `frank-tts HTTP ${res.status}`;
+    try {
+      const payload: unknown = await res.json();
+      if (
+        typeof payload === "object" &&
+        payload !== null &&
+        "error" in payload &&
+        typeof payload.error === "object" &&
+        payload.error !== null &&
+        "message" in payload.error &&
+        typeof payload.error.message === "string"
+      ) {
+        message = payload.error.message;
+      }
+    } catch {
+      // keep the status-line message
+    }
+    throw new Error(message);
+  }
+  const bytes = new Uint8Array(await res.arrayBuffer());
+  if (bytes.byteLength === 0) throw new Error("frank-tts returned no audio");
+  const file = join(dir, `say-${Date.now()}.wav`);
+  writeFileSync(file, bytes);
+  return file;
+}
+
+/** frank-tts's roster route first; if it ever answers nothing, ask with a voice it must reject. */
+async function fetchVoices(target: SpeechTarget): Promise<string[]> {
+  const roster = await fetch(target.voicesUrl, { signal: AbortSignal.timeout(VOICES_TIMEOUT_MS) })
+    .then((res) => res.json())
+    .catch(() => undefined);
+  const listed = parseVoices(roster);
+  if (listed.length > 0) return listed;
+  const probe = await fetch(target.speechUrl, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify(speechBody(target.model, "voice list probe", VOICE_PROBE)),
+    signal: AbortSignal.timeout(VOICES_TIMEOUT_MS),
+  }).catch(() => undefined);
+  if (!probe) return [];
+  return parseVoices(await probe.json().catch(() => undefined));
+}
+
+/** Play a WAV and clean its temp directory up when the player exits. */
+function startPlayback(player: Player, file: string, dir: string): ChildProcess {
+  const child = spawn(player.command, [...player.args, file], { stdio: "ignore" });
+  const clean = () => {
+    try {
+      rmSync(file, { force: true });
+      rmSync(dir, { recursive: true, force: true });
+    } catch {
+      // temp files are not worth a toast
+    }
+  };
+  child.once("exit", clean);
+  child.once("error", clean);
+  return child;
+}
+
+export default function dankvoice(pi: ExtensionAPI) {
+  const cfg = loadConfig();
+  const state: { auto: boolean; voice: string; child?: ChildProcess; lastCtx?: ExtensionContext } = {
+    auto: cfg.auto,
+    voice: cfg.voice,
+  };
+  const voiceLabel = () => state.voice || "server default";
+  const reflectStatus = () => state.lastCtx?.ui.setStatus("dankvoice", state.auto ? `🔊 ${voiceLabel()}` : undefined);
+
+  const stop = () => {
+    if (state.child && state.child.exitCode === null) state.child.kill("SIGTERM");
+    state.child = undefined;
+  };
+
+  const missingTarget = () => "dankvoice: no `api: openai-speech` provider in agent/models.yml (set DANKVOICE_URL)";
+
+  async function speak(ctx: ExtensionContext, text: string) {
+    const spoken = stripForSpeech(text, cfg.maxChars);
+    if (!spoken) return;
+    if (!cfg.target) {
+      ctx.ui.notify(missingTarget(), "error");
+      return;
+    }
+    if (!cfg.player) {
+      ctx.ui.notify("dankvoice: no audio player found (pw-play, paplay or ffplay)", "error");
+      return;
+    }
+    stop();
+    const dir = mkdtempSync(join(tmpdir(), "dankvoice-"));
+    try {
+      const file = await synthesize(cfg.target, speechBody(cfg.target.model, spoken, state.voice), dir, SYNTH_TIMEOUT_MS);
+      state.child = startPlayback(cfg.player, file, dir);
+    } catch (error) {
+      stop();
+      try {
+        rmSync(dir, { recursive: true, force: true });
+      } catch {
+        // ignore
+      }
+      ctx.ui.notify(`dankvoice: ${error instanceof Error ? error.message : String(error)}`, "error");
+    }
+  }
+
+  pi.registerCommand("say", {
+    description:
+      "Speak with the fleet's cloned voices (frank-tts): /say <text> | on | off | voice <name> | voices | stop | status",
+    handler: async (args: string, ctx) => {
+      state.lastCtx = ctx;
+      const action = parseSayArgs(args);
+      switch (action.kind) {
+        case "help":
+          ctx.ui.notify(
+            "dankvoice: /say <text> · /say on|off (auto-speak answers) · /say voice <name> · /say voices · /say stop · /say status",
+            "info",
+          );
+          return;
+        case "on":
+          state.auto = true;
+          reflectStatus();
+          ctx.ui.notify(`dankvoice: auto-speak armed (${voiceLabel()} @ ${cfg.target?.speechUrl ?? "no endpoint"})`, "info");
+          return;
+        case "off":
+          state.auto = false;
+          stop();
+          reflectStatus();
+          ctx.ui.notify("dankvoice: auto-speak off", "info");
+          return;
+        case "stop":
+          stop();
+          return;
+        case "voice":
+          state.voice = action.name;
+          reflectStatus();
+          ctx.ui.notify(
+            action.name ? `dankvoice: voice = ${action.name}` : "dankvoice: voice = whatever frank-tts defaults to",
+            "info",
+          );
+          return;
+        case "voices": {
+          if (!cfg.target) {
+            ctx.ui.notify(missingTarget(), "error");
+            return;
+          }
+          const voices: string[] = [];
+          try {
+            voices.push(...(await fetchVoices(cfg.target)));
+          } catch (error) {
+            ctx.ui.notify(`dankvoice: ${error instanceof Error ? error.message : String(error)}`, "error");
+            return;
+          }
+          ctx.ui.notify(
+            voices.length
+              ? `dankvoice voices: ${voices.join(", ")} — using ${voiceLabel()}`
+              : "dankvoice: frank-tts reported no voice list",
+            voices.length ? "info" : "warning",
+          );
+          return;
+        }
+        case "status":
+          ctx.ui.notify(
+            `dankvoice: voice ${voiceLabel()} · ${cfg.target?.speechUrl ?? "NO ENDPOINT"} · player ${cfg.player ? cfg.player.command : "NONE"} · auto-speak ${state.auto ? "on" : "off"} · cap ${cfg.maxChars} chars`,
+            "info",
+          );
+          return;
+        case "speak":
+          await speak(ctx, action.text);
+          return;
+      }
+    },
+  });
+
+  pi.on("agent_end", async (event, ctx) => {
+    state.lastCtx = ctx;
+    if (!state.auto) return;
+    // `willContinue` means the harness already scheduled a continuation
+    // (auto-retry, empty-stop retry): this is not the user-visible terminal
+    // settle, so narrating it would speak an answer the model is about to redo.
+    if (event.willContinue) return;
+    if (ctx.mode === "print" || ctx.mode === "json") return;
+    await speak(ctx, lastAssistantText(event.messages));
+  });
+
+  pi.on("session_shutdown", () => {
+    stop();
+  });
+}

agent/managed-skills/corpus-voice-skill-rewrite/SKILL.md

@@ -0,0 +1,30 @@
+---
+name: corpus-voice-skill-rewrite
+description: "Rewrite a skill to emulate an author corpus's voice: full read, style-DNA distillation from writing-for-agents levers, positive-phrasing pass, sharpened completion criteria"
+---
+
+# Corpus-voice skill rewrite
+
+Rewrite a skill so it reads as if a chosen author wrote it. Done for `grilling` against the `mattpocock/skills` corpus (2026-10-18, command-center PR #20); behaviour preserved, voice swapped.
+
+## Where the corpus lives
+
+Installed third-party skills: `~/.agents/skills/<name>/SKILL.md` (the skills-CLI global store; `~/.agents/.skill-lock.json` names sources). Whole mattpocock corpus ≈ 2,800 lines — small enough to read inline in ~4 `cat` batches via bash; do NOT delegate the reading, style lives in the exact prose.
+
+Read the author's own meta-skill FIRST if one exists (`writing-for-agents` for mattpocock — it states his levers explicitly), then the corpus practicing them.
+
+## Style DNA checklist (mattpocock; generalise per author)
+
+- **Leading words**: compact pretrained concepts repeated as tokens, never sentences (_red_, _seam_, _fog of war_, _brief_, _frontier_). Define each once, reuse everywhere. Prefer words already in the author's other skills so the corpus shares one language.
+- **Vocabulary-first**: bolded glossary terms, then used exactly; explicit "_Avoid_: component, service".
+- **Positive phrasing**: prohibitions rewritten as target behaviours; keep a prohibition only when no positive form exists (hard guardrails).
+- **Sharpened completion criteria**: fuzzy bounds ("understanding reached") → checkable + exhaustive ("frontier empty and nothing sits blocked", "one artefact per question, counted before sending").
+- **Zero history**: no provenance, attribution, or absorbed-from lineage in the body.
+- **No-op hunting**: delete harness defaults and anything the environment already confesses (formats, rendering, caps). Gotchas the environment CANNOT confess (exclusive dialogs, Esc-abort semantics) stay inline — they're the cache worth keeping.
+
+## Procedure
+
+1. Read entire corpus; tabulate levers with per-skill evidence before writing.
+2. Rewrite preserving settled behaviour 1:1 — voice only; diff the two versions for semantic drift.
+3. Audit pass: grep the new text for history words (extracted/absorbed/from/upstream), machine-specific constants, repo-specific paths.
+4. Run repo checks, commit as `style(<scope>)`, note the lever→instance mapping in the PR comment so the reviewer can grade the emulation.

agent/managed-skills/gitea-api-pr-operations/SKILL.md

@@ -1,31 +1,64 @@
 ---
 name: gitea-api-pr-operations
-description: "Open, list, merge, and diagnose issues/PRs on the Dankclaw Gitea API (192.168.0.143:3000, dank/command-center) with curl + token — merge payload quirk included"
+description: "Open, list, merge, and diagnose issues/PRs on the Dankclaw Gitea API (192.168.0.143:3000, repo dank/command-center) with the token stored in ~/.config/secrets/gitea — incl. the required merge payload and where review comments actually live on 1.27.3."
 ---
 
-# Gitea API PR operations on Dankclaw
+# Gitea API PR operations (Dankclaw `dank/command-center`)
 
-Verified 2026-10-18 on Gitea at `http://192.168.0.143:3000`, repo `dank/command-center` (owner `dank`).
+## Where
+- Token: `~/.config/secrets/gitea` (`http://user:TOKEN@192.168.0.143` single line).
+  Extract WITHOUT echoing:
+  `tok=$(sed -nE 's#^http://[^:/@]+:([^@]+)@192\.168\.0\.143.*#\1#p' ~/.config/secrets/gitea | head -1)`
+- Build a 600-perm temp curl config and use `curl -K`:
+  `cfg=$(mktemp) && chmod 600 "$cfg" && printf 'header = "Authorization: token %s"\n' "$tok" > "$cfg"`
+  Delete `$cfg` after use. NEVER pass `-H "Authorization: token $tok"` (the literal
+  header lands in transcript + logs). NEVER echo the token.
+- Base URL: `http://192.168.0.143:3000/api/v1/repos/dank/command-center`.
 
-## Token handling (never echo)
-```bash
-tok=$(sed -nE 's#^http://[^:/@]+:([^@]+)@192\.168\.0\.143.*#\1#p' ~/.config/secrets/gitea | head -1)
-cfg=$(mktemp) && chmod 600 "$cfg" && printf 'header = "Authorization: token %s"\n' "$tok" > "$cfg"
-# use: curl -sS -K "$cfg" ...   then rm -f "$cfg"
-```
+## Recipes (all verified live 2026-10-18)
+- **Open PR** (token only needed for private repos; this one reads publicly but
+  POST needs auth): `POST /pulls` JSON `{title, head, base:"main", body}`.
+- **PATCH PR title/body**: `PATCH /pulls/<n>` with JSON body `{title}` and/or
+  `{body}`. Returns 201 with the full PR. Use `jq -n --arg` to build JSON; for
+  multi-line bodies write the text to a temp file and `--arg b "$(cat b.txt)"`.
+  (jq CLI: a bare `---` argument after the program is parsed as a flag → error;
+  fold footers into the --arg string instead.)
+- **List open PRs**: `GET /pulls?state=open` → `jq -r '.[] | "#\(.number) \(.head.ref) \(.title)"'`.
+- **Read PR**: `GET /pulls/<n>` (no token; public repo) → `jq -c '{state,merged,mergeable,head:.head.ref}'`.
+- **MERGE**: `POST /pulls/<n>/merge` with `-H 'Content-Type: application/json'`
+  and body **`{"Do":"merge"}`** — this build REQUIRES the `Do` field:
+  `{}` or `{"DoNotMerge":false,...}` → 422; `{"Do":"merge"}` → 200 +
+  `{"state":"closed","merged":true,"merge_commit_sha":"..."}`. Verify with a
+  plain GET /pulls/<n> afterwards (merge endpoint's own stdout may not parse).
+  Merge is the `--no-ff` merge commit on main; then `git -C ~/.omp fetch && git
+  merge --ff-only origin/main` propagates the live deployment.
+- **Issues**: same shape at `/issues` (`POST {title, body}`), `/issues/<n>/comments`
+  (`POST {body}`, `PATCH .../comments/<id>`) — both work with the temp-cfg auth.
 
-## Endpoints that work
-- Open PR: `POST /api/v1/repos/dank/command-center/pulls` with JSON `{title, head, base, body}` (build with `jq -n --arg`; `head` = branch name as-is, slashes included).
-- Patch PR (title/body): `PATCH .../pulls/<N>` — works, returns 201 with full PR JSON (`mergeable` field handy).
-- **Merge PR: `POST .../pulls/<N>/merge` with body `{"Do":"merge"}`** — capital-D `Do` is this Gitea's field (mirrors web UI form). `{}` or `{"DoNotMerge":false,...}` → 422 `[Do]: Required`. Success may return EMPTY body — verify with a separate `GET .../pulls/<N>` for `{state:"closed", merged:true, merge_commit_sha}`.
-- Issues: `POST .../issues` `{title, body}`; patch `PATCH .../issues/<N>`.
-- Issue/PR bodies MUST end with the AGENTS.md footer: `---` line, then `cwd: <wd> · session: <id>`. Embed the footer inside the body string (a bare `---` as a separate shell arg breaks `jq` arg parsing).
-- `xdg-open <url>` lands the PR/issue in Frank's Firefox — do it the moment a PR opens.
+## Review comments: the API lies on 1.27.3 (learned 2026-10-18)
+- `GET /pulls/<n>/comments` (inline review comments) → **404 `not found` on every
+  route** (token or not, `?pull_request_id=` or not) even when a review with
+  comments exists.
+- `GET /pulls/<n>/reviews` works (shows `state`, `comments_count`) but bodies are empty.
+- **The comments are readable from the PR HTML**:
+  `curl -sS http://192.168.0.143:3000/dank/command-center/pulls/<n> -o /tmp/pr.html`
+  then extract `<div class="content comment-content">` blocks
+  (python: `re.finditer(r'comment-content', src)` → widen ±800 chars, strip tags).
+  Duplicates appear (suggested-change UI shows text twice); dedupe mentally.
+- Per-conversation resolve API also 404s — flag resolutions in an issue comment instead.
+
+## Body-footer law (AGENTS.md)
+Every issue/PR body ends with `---` line then `cwd: <wd> · session: <id>`. Keep
+it inside the --arg string (not a `---` CLI arg).
 
 ## Gotchas
-- POST/PATCH need `-H 'Content-Type: application/json'` on the curl command line; `-d @file` alone with a wrong content type yields 422 `"model.assignUsers: Bind is required"`.
-- Merge-with-empty-response is normal; never conclude failure from blank stdout — GET the PR.
-- No `tea` CLI anywhere; API + curl is the only path. GITEA_TOKEN env exists in `~/.omp/.env` (gitignored) as alternative source.
-
-## Post-merge propagation
-The `~/.omp` checkout IS the deployment: `git -C ~/.omp fetch && git merge --ff-only origin/main` (dirty runtime files don't block ff). Never merge a PR at all without Frank's explicit OK.
+- Content-Type: POSTs with `-d @file.json` MUST carry
+  `-H 'Content-Type: application/json'` on the command line. `-H` entries put in
+  the curl config file are ignored for this (header ordering quirk).
+- `xdg-open <pr-url>` lands the PR in Frank's Firefox the moment it is opened —
+  law, not courtesy.
+- `jq: cannot index "not found" with "user"` = endpoint 404'd into an error
+  object; check `-w '%{http_code}'` before blaming jq.
+- The token in `.git/config`'s remote URL is the same secret; the credential
+  file (`~/.config/secrets/gitea`) is the one git actually consults (global
+  credential.helper) and the one to reuse for API calls.

agent/managed-skills/gitea-pr-api-cycle/SKILL.md

@@ -0,0 +1,29 @@
+---
+name: gitea-pr-api-cycle
+description: "Open/update/merge PRs and issues on the Dankclaw Gitea API (192.168.0.143:3000, dank/command-center) with the token-safe curl+jq sequence, including the {\"Do\":\"merge\"} merge payload and post-merge live-checkout fast-forward."
+---
+
+# Gitea PR/issue cycle — dank/command-center
+
+Friction-earned 2026-10-18 across PRs #15–#20 and issue #18: three separate fumbles (jq trailer flag, 422 merge payload, silent -o/-w swallowing) codified once.
+
+## Where
+- API base: `http://192.168.0.143:3000/api/v1/repos/dank/command-center/{pulls,issues}`
+- Token: never inline, never echoed. Extract from the git credential file into a 600-perm temp curl config:
+  `tok=$(sed -nE 's#^http://[^:/@]+:([^@]+)@192\.168\.0\.143.*#\1#p' ~/.config/secrets/gitea | head -1)`
+  `cfg=$(mktemp); chmod 600 "$cfg"; printf 'header = "Authorization: token %s"\n' "$tok" > "$cfg"` → `curl -K "$cfg"`; `rm -f "$cfg"` when done.
+- Unauthenticated GET works for state reads (`GET /pulls/N` → `jq -c '{state,merged,merge_commit_sha}'`).
+
+## Body construction (the two traps)
+- Build JSON with `jq -n --arg t <title> --arg b "$(cat b.txt)" '{title:$t, head:<branch>, base:"main", body:$b}'`; write the body to a temp file first (`printf '%s' … > b.txt`). NEVER pass `---` as a bare jq argument — jq parses it as a flag (`unknown flag: ---`). The AGENTS.md attribution trailer (`---` + `cwd: … · session: …`) goes INSIDE the body string.
+- Always capture status explicitly: `-o r.json -w '%{http_code}'` and print it; a bare `-o` hides failures (a 422 looked like success-with-no-output once).
+
+## Merge (the 422 trap)
+`POST /pulls/N/merge` requires body `{"Do":"merge"}` — `Do` is the Required field on this Gitea. `{}`, `{"DoNotMerge":false}`, `{"merge_style":…}` all return 422 (`"[Do]: Required"`). Success may return an EMPTY body — verify by GET afterwards (`state=closed, merged=true`), not by the POST response.
+- Merge only with Frank's explicit per-PR OK (repo law).
+- Post-merge the live deployment must follow: `git -C ~/.omp fetch -q origin && git -C ~/.omp merge --ff-only origin/main` (the checkout IS the deployment; branch is `main`).
+
+## PR etiquette per AGENTS.md
+- Immediately after opening: `xdg-open <PR-URL>` lands it in Frank's Firefox.
+- Redesign mid-review: amend + `git push -f` the branch, then PATCH the PR body (`/pulls/N`, `{"body":…}`) so title/body match the net diff — verify `{number,state,mergeable}` in the response.
+- Issue creation identical shape: `POST /issues` with `{title, body}`, expect 201; PATCH same endpoint `/issues/N` to fix bodies retroactively, then GET-readback verify.

agent/managed-skills/gitea-review-comment-html-scrape/SKILL.md

@@ -0,0 +1,42 @@
+---
+name: gitea-review-comment-html-scrape
+description: "Read inline review comments on the Dankclaw Gitea when pulls/N/comments 404s (Gitea 1.27.3): scrape comment-content blocks and diff anchors from the PR HTML page"
+---
+
+# Gitea review-comment extraction when the API 404s
+
+On the Dankclaw Gitea (192.168.0.143:3000, Gitea 1.27.3) the review-comment API is dead for inline comments:
+`/api/v1/repos/{owner}/{repo}/pulls/{N}/comments` returns 404 `not found` **even with a valid token**, and `pulls/comments?pull_id=` / `?pull_request_id=` variants 404 too. `/pulls/{N}/reviews` works but its bodies are empty for inline reviews (read `comments_count` for how many exist); `/issues/{N}/comments` shows only conversation comments, never inline ones.
+
+## Procedure
+
+1. Confirm the review exists and how many inline comments it holds:
+   `curl -sS http://192.168.0.143:3000/api/v1/repos/dank/command-center/pulls/{N}/reviews | jq -c '.[] | {id, state, comments_count}'`
+2. Scrape the PR page instead (no token needed for a public repo):
+   `curl -sS http://192.168.0.143:3000/dank/command-center/pulls/{N} -o /tmp/pr.html`
+3. Extract each comment's text — every inline comment renders a `comment-content` block; dedupe (each comment appears twice in the HTML):
+
+```python
+import re, html
+src = open('/tmp/pr.html').read()
+seen = set()
+for m in re.finditer(r'comment-content', src):
+    t = html.unescape(re.sub(r'<[^>]+>', ' ', src[m.start()-100:m.start()+800]))
+    t = re.sub(r'\s+', ' ', t).strip()[:400]
+    if t not in seen:
+        seen.add(t); print('>>', t)
+```
+
+The comment text appears twice back-to-back inside each block ("text text") — read it once. Blocks start after `Copy Link|Copy Source`; ignore those chrome words.
+
+4. **Locate the file/line anchor** (comment-content blocks carry no `data-path`/`data-line` attrs on this build): search the raw HTML for the comment string, walk *backward* ~4–7 KB, strip tags; the nearby `agent/...` path, `@@ -a,b +c,d @@` hunk header, and surrounding diff context lines identify the anchored file and the quoted source line.
+
+## Replying / housekeeping
+
+- Per-conversation resolve API does not exist on this build (404s) — reply to the round as a normal issue comment (`POST /repos/{o}/{r}/issues/{N}/comments`, token via `curl -K` temp cfg, `header = "Authorization: token …"`, 600 perms, `jq -n --arg b "$(cat b.txt)" '{body:$b}'`) listing which note got which fix commit.
+- Edit a posted comment: `PATCH /repos/{o}/{r}/issues/{N}/comments/{id}` with `{"body": ...}` — use to fix your own typos rather than double-posting.
+- Token source on this box: `~/.config/secrets/gitea` (grep the remote-URL pattern); never echo it.
+
+## Why this works
+
+The PR page is server-rendered with full inline comment bodies; Gitea's "Copy Source" UI element guarantees the raw text is present pre-markdown-render.

agent/managed-skills/omp-models-yml-runner-api-placement/SKILL.md

@@ -1,12 +1,14 @@
 ---
 name: omp-models-yml-runner-api-placement
-description: Add or edit a non-chat (tts/image/embedding) model row in ~/.omp/agent/models.yml without disabling every custom provider
+description: "Add or edit a non-chat (tts/image/embedding) model row in ~/.omp/agent/models.yml, wire the speech role, and diagnose a failing speech device without blaming a healthy endpoint"
 ---
 
 # Scope
 
 `~/.omp/agent/models.yml` (or `models.yaml`) on a workstation: adding a **runner**
-model row (TTS / image / embedding / rerank / video) alongside chat providers.
+model row (TTS / image / embedding / rerank / video) alongside chat providers,
+flipping `config.yml` `modelRoles` at it, and diagnosing a speech device that
+refuses to speak.
 
 # The landmine
 
@@ -63,9 +65,52 @@ yielding.
 # Speech transport contract (`openai-speech`)
 
 Body is `{model, input, response_format, voice?, speed?}`; `voice` is forwarded
-only when explicitly set; `sample_rate`/`bit_rate` **throw**
+**only** when the caller passed `voice_id`; `sample_rate`/`bit_rate` **throw**
 (`openai-speech does not support sampleRate`). Codec comes from the
 `output_path` suffix; 15 000-character cap. An unknown `voice` name is a server
 error, not a fallback — and `auth: none` makes a dead endpoint read as
 *available*, so point `modelRoles.speech` at such a provider only after it has
 answered a real synthesis.
+
+# Three speech-role laws (bundle-read + measured 2026-10-18)
+
+1. **No setting carries a voice for `openai-speech`.** The transport builds the
+   body with `voice` from the call's `voice_id` and nothing else.
+   `tts.localVoice` is the *local Kokoro backend's* key; `speech.voice` is the
+   TUI's **speak-aloud** voice, an enum of Kokoro names that never reaches an
+   HTTP request (setting it to a pack name breaks the vocalizer and does nothing
+   for synthesis — read `cfgSpeechVoice` in `dist/cli.js` before believing
+   otherwise). So a voice-less call is the harness's **normal** shape: a
+   voice-required endpoint needs a server-side default (fleet answer:
+   `DEFAULT_VOICE` in `scripts/frank-tts.env`, journal marks the line
+   `(default)`, unknown names still 400 with the list).
+2. **An explicit role has no fallback candidate.** `modelRoles.speech` set to one
+   model yields exactly one candidate, so a dead endpoint or an unresolvable
+   selector fails with *"No available speech model matches the speech role"*
+   instead of degrading to Kokoro. Loud-by-design; do not "fix" it by adding a
+   fallback in the client.
+3. **`models.yml` loads at process start; `config.yml` is read live.** A session
+   older than the new row fails exactly like a dead endpoint while a fresh
+   process succeeds in the same minute.
+
+# Diagnosing "speech device won't speak" — in this order
+
+1. `curl` the endpoint directly with a real voice name. 200 + audio ⇒ the service
+   is fine and the fault is harness-side; stop touching the server.
+2. Control test in the *same* session: point `modelRoles.speech` at
+   `local/kokoro` and call the device. It works ⇒ `config.yml` is live-read and
+   the runner selector or its voice argument is the problem, not the endpoint.
+   Revert the role immediately after.
+3. Distinguish stale registry from dead endpoint with a fresh process:
+   `omp -p --no-session --no-extensions --no-skills --no-rules --tools tts --cwd /tmp
+   'Call the tts tool exactly once with text="…" output_path=/tmp/x.wav
+   voice_id=<name> — then reply with the tool result line.'`
+   Succeeds ⇒ the long-lived session predates the `models.yml` row; restart it.
+4. Cross-check server-side, never trust the client's echo: the façade/access log
+   line and the engine's own ledger must carry the same byte count the tool
+   printed. (`model=…` in a tool result is what the client *requested*; a server
+   line is the fact.)
+5. For harness-behaviour claims, read the bundle rather than reasoning from the
+   tool description: `/home/blank/.bun/install/global/node_modules/@oh-my-pi/pi-coding-agent/dist/cli.js`,
+   e.g. `grep -o -E '.{300}response_format:[a-zA-Z$]+.{250}'` for the speech body
+   builder, `grep -o -E 'cfgSpeechVoice:.{0,400}'` for what a settings key feeds.

agent/managed-skills/one-decision-per-ask-question/SKILL.md

@@ -1,27 +0,0 @@
----
-name: one-decision-per-ask-question
-description: "Use when putting decisions to Frank via the ask tool or a grilling round — exactly one work item per question, rounds may group many single-item questions."
----
-
-# One Decision, One Work Item, One Question
-
-Friction-earned rule (corrected twice on 2026-10-18, during the voice/TTS planning).
-
-## Rules
-
-- Each question addresses **exactly one work item**. A round may contain many questions covering different work items; a question may not.
-- Never merge two artefacts into one option because they share an implementation dependency. Sharing an endpoint, a service, or a build step is NOT grounds for one question. (`frank-tts` serving both a podcast and an audiobook generator produced exactly this bug.)
-- Never offer something Frank did not ask for inside another question's option text. If an idea is mine, it gets its own question or stays out of the plan; it never rides along as "…and also X" in an option label or preview.
-- Do not derive option wording from my own scaffolding (todo text, my table row labels, my runbook headings). Derive it from his stated goal.
-- Mark the recommended option; a bare "yes" must accept it.
-- Facts are mine to fetch (subagent/scout), never a question for him. Only decisions go to him.
-- A question whose answer depends on an unsettled fact or another open question belongs to a **later round**, not this one.
-
-## Anti-patterns that triggered this
-
-- One option: "Audiobook/podcast factory — open-notebook + EPUB→narration builder." Two products, one shared dependency, zero requests for the second one. He answered "I never asked for audiobook generation."
-- One question: "Is the deliverable the podcast, or the platform (harness voice + OpenWebUI + alerts)?" Four work items in one question. Rejected: "You're lumping multiple asks into one question. Ask me per item."
-
-## Check before sending
-
-For each question: can I name the single artefact it decides? If two names come to mind, split it.

agent/memories/sharpshooter/tmp-1tpw73408x3e/state.json

@@ -1,4 +1,4 @@
 {
 	"v": 1,
-	"lastConsolidatedAt": 1792359739617
+	"lastConsolidatedAt": 1792378334862
 }

agent/memories/sharpshooter/wt-20261017-181502-6d1fc1f-1oq2osmoyw03k/architecture.md

@@ -115,4 +115,4 @@ This rule exists because subagent hangs were observed in early deployments (2026
 
 Before declaring a subagent deployed: verify the heartbeat endpoint returns within the timeout window, and confirm the recovery path is wired (retry/fallback/escalation logic exists in the codepath).
 
-A subagent without a heartbeat or recovery path is a gap: wire the heartbeat, add the recovery path, then deploy.
+A subagent without a heartbeat or recovery path is a gap: wire the heartbeat, add the recovery path, then deploy.

agent/memories/sharpshooter/wt-20261017-181502-6d1fc1f-1oq2osmoyw03k/queue/01a14c93-8870-75d9-9900-9a731559feef/00mveljelz-vh49.json

@@ -1 +0,0 @@
-{"v":1,"kind":"product_decision","statement":"merge 15 and deploy","source":"contextual_resolution","evidence":"you can merge 15 and deploy","friction":{"corrective":false,"regression":false,"subtle":false},"sessionId":"01a14c93-8870-75d9-9900-9a731559feef","ts":1792374566327}

agent/memories/sharpshooter/wt-20261017-181502-6d1fc1f-1oq2osmoyw03k/state.json

@@ -1,8 +1,8 @@
 {
 	"v": 1,
-	"lastConsolidatedAt": 1792374446411,
+	"lastConsolidatedAt": 1792378149820,
 	"lastResult": {
-		"at": 1792373460132,
+		"at": 1792374778678,
 		"sessions": 1,
 		"deltas": 1,
 		"model": "frank-zealot"

agent/memories/sharpshooter/wt-20261018-170616-7c8a99d-3bf6g32a51amg/state.json

@@ -1,6 +1,6 @@
 {
 	"v": 1,
-	"lastConsolidatedAt": 1792374676416,
+	"lastConsolidatedAt": 1792378276529,
 	"lastResult": {
 		"at": 1792374324899,
 		"sessions": 1,

agent/models.yml

@@ -269,14 +269,19 @@ providers:
   # when explicitly set, and sampleRate/bitRate are REJECTED outright (the
   # transport throws "openai-speech does not support sampleRate"), so the
   # codec comes from the output_path suffix and the only tunable that matters
-  # is the voice name — which must be a real pack name (narrator1/2/3); an
-  # unknown name is an engine error, not a fallback.
-  # DELIBERATELY NOT WIRED YET: config.yml `modelRoles.speech` still points at
-  # local/kokoro. Flip it to "frank-tts (dankclaw)/frank-tts" only after the
-  # service is deployed and has answered a real synthesis, because `auth: none`
-  # makes the provider read as AVAILABLE even while the container is down — the
-  # role would then fail instead of falling back to Kokoro. The same flip must
-  # re-key `speech.voice` (now am_fenrir, a Kokoro voice) to a pack name.
+  # is the voice name — and it comes from ONE place: the tool's `voice_id`
+  # argument. No setting feeds it (`speech.voice` is the speak-aloud Kokoro enum,
+  # `tts.localVoice` is the local backend's), so a call that omits voice_id arrives
+  # at 7772 with no `voice` key and the endpoint answers 400 "unknown voice None;
+  # available voices: narrator1, narrator2, narrator3". Say the voice in the call.
+  # WIRED 2026-10-18: `config.yml` `modelRoles.speech` is this row, flipped only
+  # after the service was deployed and answered real synthesis (two packs,
+  # different bytes, 24 kHz PCM16, RTF 0.57). Why the gate existed: `auth: none`
+  # makes this provider read as AVAILABLE even while the container is down, and an
+  # explicit speech role has NO fallback candidate, so a dead 7772 fails the device
+  # loudly instead of quietly narrating in Kokoro. Reverting is ONE key:
+  # `modelRoles.speech: local/kokoro`. `speech.voice` stays a Kokoro name either
+  # way — it was never this endpoint's voice.
   # SCHEMA LAW, learned the hard way (2026-10-18): provider-level `api` must be
   # a CHAT transport — the models.yml schema accepts only the chat/judge APIs
   # there, and naming a runner API (`openai-speech`) at provider level fails the

agent/skills/grilling/SKILL.md

@@ -3,30 +3,44 @@ name: grilling
 description: Grill the user relentlessly about a plan, decision, or idea. Use when the user wants to stress-test their thinking, or uses any 'grill' trigger phrases.
 ---
 
-> **Authored override.** Extracted 2026-10-18 from `mattpocock/skills` (identical to upstream at extraction) into the command-center repo so Frank can customize it. Removed from the `skills` CLI global store (`~/.agents/.skill-lock.json` pruned) so `skills update -g` never resurrects a duplicate. Edits to this file are repo prose: branch → PR → Frank OK.
+# Grilling
 
-Interview the user relentlessly until you reach a shared understanding. Map this as a **design tree**: every decision branches into the decisions that hang off it.
+Interview the user relentlessly until nothing is silently assumed and you reach a shared understanding. Map this as a **design tree**: every decision branches into the decisions that hang off it.
 
-Work the tree in **rounds**. The **frontier** is every decision whose prerequisites are already settled: the questions you can ask _now_ without guessing at answers you haven't heard yet. Ask the whole frontier in one round: number each question and give your recommended answer. Then wait for the user's answers before the next round.
+A decision is **frontier** when it can be asked now, without an answer you haven't heard yet. The interview is done when the frontier is empty: every branch of the tree visited.
 
-Format a round like so:
+## Rounds
 
-```
-❓ **Q1** - **<question title>**: <question body, might be multiple paragraphs, including multiple choices>
+Work the tree in **rounds**: ask the whole frontier at once, then wait. A decision whose answer hangs on an open question or an unfetched fact joins a later round.
 
-➡️ <your recommended answer>
+Ask each closed decision - anything expressible as 2–5 options - through the `ask` tool:
 
----
+- **One artefact per question**, counted before sending. Name the artefact each question decides; two names means two questions. Shared plumbing (an endpoint, a service, a build step) still leaves two artefacts.
+- Recommended answer first, marked `recommended: 0`, which labels it "(Recommended)" for one-glance acceptance. Every reply names what was picked, so the record is unambiguous.
+- Options quote the user's goal. Their words, their stated goal, ground the wording; your todo text and table rows stay out of it.
+- Your own idea is welcome: it gets its own recommended question. Attach it to its own question, so it rides there on its merits.
+- `multi: true` for pick-many, `header` for the branch chip, `preview` when the decision needs code or config in front of the user.
 
-❓ **Q2** - **<question title>**: <question body, might be multiple paragraphs, including multiple choices>
+Open narrative - "walk me through the deploy flow" - has no options to offer; ask it as prose in chat. Without an `ask` tool the whole round degrades to text: `❓ **Q1 — title**: body`, then `➡️ recommendation`, phrased so one bare "yes" accepts every recommendation.
 
-➡️ <your recommended answer>
-```
+The dialog is exclusive: dispatch scouts before the `ask` call in the same message, or they wait behind it; their results land between rounds. Esc ends the run outright, with no turn to wrap up, so the ledger is what survives it.
 
-Word each question so "yes" accepts your recommended answer.
+## The ledger
 
-Each round the user answers reshapes the tree: settled decisions push the frontier outward and unblock questions that depended on them. Recompute the frontier and ask the next round. A question whose answer depends on another question still open in this round belongs to a _later_ round, not this one.
+The tree lives in the `todo` list while the interview runs, so the user watches it fall:
 
-Finding _facts_ is your job, never the user's. When a frontier question needs a fact from the environment (filesystem, tools, etc.), dispatch a sub-agent to find it; don't ask the user for anything you could look up yourself. Don't block on it: a running exploration is an unsettled prerequisite, so only the questions downstream of it wait for the sub-agent to report; ask the rest of the frontier now. The _decisions_ are the user's: put each to them and wait.
+- One task per decision, filed under the phase for its branch; `via: <parent decision>` in the task text carries the edge.
+- `pending` is the frontier; `block` with a one-line reason waits on a fact or an open decision; `done` is settled. Unblock the moment the dependency settles.
 
-The session is done when the frontier is empty: every branch of the design tree visited, nothing left silently assumed. Do not act on it until the user confirms you have reached a shared understanding.
+Write `local://grilling-state.md` at the end of every round: the tree, each decision's verdict and one-line rationale. It is the durable copy of the interview; keep it current so an Esc costs one round.
+
+## Facts are yours, decisions are theirs
+
+- Environment facts (filesystem, repo, live config): dispatch a **scout** per fact-cluster, batched into one `task` call, before the round's `ask`. Cluster tightly; doing so keeps each scout more aware of possible adjacencies.
+- Outside-world facts: call `web_search` directly, do not delegate to a subagent.
+- Cheap lookups: `read`/`grep` inline.
+- The main session is where questions happen: every spawn carries the exact facts to return, and comes back into the next round.
+
+## Definition of Done
+
+The frontier is empty and nothing sits blocked. Distil the ledger into a **brief**: one line per decision, verdict plus rationale, grouped by branch. Put it in chat, then one closing `ask`: "Proceed on this brief?" Nothing executes before that yes. After it, fold the brief into the project's knowledge base, or a log markdown file, wherever the project keeps its decisions.

dotfiles/noctalia/.local/state/noctalia/settings.toml

@@ -275,13 +275,13 @@ transition = [ "fade" ]
     interval_seconds = 1200
 
     [wallpaper.default]
-    path = "/home/blank/.local/share/noctalia/wallpapers/wallhaven_1kdgpg.jpg"
+    path = "/home/blank/.local/share/noctalia/wallpapers/wallhaven_odl3r9.jpg"
 
     [wallpaper.last]
-    path = "/home/blank/.local/share/noctalia/wallpapers/wallhaven_1kdgpg.jpg"
+    path = "/home/blank/.local/share/noctalia/wallpapers/wallhaven_odl3r9.jpg"
 
     [wallpaper.monitors.DP-1]
-    path = "/home/blank/.local/share/noctalia/wallpapers/wallhaven_1kdgpg.jpg"
+    path = "/home/blank/.local/share/noctalia/wallpapers/wallhaven_odl3r9.jpg"
 
     [wallpaper.monitors.DP-2]
     path = "/home/blank/.local/share/noctalia/wallpapers/wallhaven_oxex69.jpg"
@@ -290,7 +290,7 @@ transition = [ "fade" ]
     path = "/home/blank/.local/share/noctalia/wallpapers/wallhaven_v9e2w3.jpg"
 
     [wallpaper.monitors.eDP-1]
-    path = "/home/blank/.local/share/noctalia/wallpapers/wallhaven_1kdgpg.jpg"
+    path = "/home/blank/.local/share/noctalia/wallpapers/wallhaven_odl3r9.jpg"
 
 [weather]
 unit = "imperial"

omp-docs/core/dankvoice.md

@@ -0,0 +1,133 @@
+---
+type: reference
+title: dankvoice
+description: omp extension that speaks assistant output with the fleet's cloned voices through frank-tts.
+tags:
+  - omp
+  - extension
+  - tts
+  - voice
+  - frank-tts
+  - dankclaw
+verified: 2026-10-18
+timestamp: 2026-10-18
+---
+
+# dankvoice
+
+`agent/extensions/dankvoice.ts` adds cloned-voice speech to the interactive
+harness: `/say <text>` speaks through the speakers and `/say on` narrates the
+assistant's final answer after every turn, both served by
+**frank-tts** (Dankclaw :7772, the `speech` model role in
+[agent/models.yml](/core/index.md)).
+
+## Why it exists
+
+Nothing built into the harness can pronounce Frank's cloned voices.
+
+| Surface | Engine | Verdict |
+|---|---|---|
+| TUI speak-aloud (`speech.enabled`, `speech.voice`) | bundled Kokoro ONNX worker, `synthesizeStream(voice, speed, signal)` | Kokoro voice enum only; never consults `models.yml` or the speech role |
+| `omp say [TEXT]` | same local backend (`--model` = *local* model key) | `omp say --voice narrator1 "test"` → `error: Expected --voice to be one of: af_heart, af_bella, af_nicole, af_kore, af_sarah, am_michael, am_fenrir, am_puck, bf_emma, bm_george, bm_fable` (verified 2026-10-18) |
+| `tts` tool / `xd://tts` device (`modelRoles.speech`) | frank-tts over OpenAI `/v1/audio/speech` | cloned voices work, but only as a **file** — nothing plays them |
+
+`dankvoice` is not a patch to that vocalizer (harness code, not ours); it is a
+second transport that happens to speak, so Kokoro stays available for quick
+local speech and the cloned voices carry the real narration.
+
+## Commands
+
+| Command | Effect |
+|---|---|
+| `/say <text>` | synthesize once and play; interrupts whatever is playing |
+| `/say on` \| `/say off` | arm/disarm auto-speak of the assistant's final text at `agent_end`; the footer shows `🔊 <voice>` while armed |
+| `/say voice <name>` | pick a voice; an empty name defers to the server's own default |
+| `/say voices` | list what frank-tts reports |
+| `/say stop` | cut the current utterance |
+| `/say status` \| `/say help` | endpoint, voice, player, cap |
+
+Auto-speak is skipped in `print`/`json` mode so benches and pipelines stay
+silent. Markdown is stripped before synthesis — fenced code is dropped, links
+collapse to their label, bullets and table pipes disappear — and the utterance
+is truncated at a sentence boundary inside the cap.
+
+## Endpoint resolution
+
+The base URL is **read from `agent/models.yml`**, from the provider block whose
+model row carries `api: openai-speech` — the same row the `speech` role
+resolves, so no host address and no credential appears in this file. From
+`baseUrl: http://192.168.0.143:7772/v1` it derives
+`POST …/v1/audio/speech`, `GET …/v1/audio/voices` and `GET …/health`.
+
+| Environment | Default | Meaning |
+|---|---|---|
+| `DANKVOICE_URL` | models.yml | speech base URL (`…/v1`), bypasses the YAML read |
+| `DANKVOICE_MODEL` | the id in that block (`frank-tts`) | model named in the request body |
+| `DANKVOICE_VOICE` | empty (server default) | default voice name |
+| `DANKVOICE_AUTO=1` | off | start with auto-speak armed |
+| `DANKVOICE_MAX` | `700` | spoken characters per utterance |
+| `DANKVOICE_PLAYER` | detect | player binary, skipping detection |
+| `DANKVOICE_MODELS` | `~/.omp/agent/models.yml` | YAML to read the endpoint from |
+
+Player detection order is `pw-play` → `paplay` → `ffplay -nodisp -autoexit`
+(PipeWire first: the workstations run WirePlumber). Each utterance is written
+to `$TMPDIR/dankvoice-*/say-<ms>.wav` and the file plus its directory are
+removed when the player process exits.
+
+## Verified facts (2026-10-18)
+
+* **Extension discovery** — any `.ts` file in `~/.omp/agent/extensions/` loads
+  at startup: a probe file there printed `loaded 2026-10-19T02:36:55Z` from a
+  fresh `omp -p` run. `omp --help` documents `--no-extensions` (discovery off,
+  explicit `-e/--extension` and `--hook` still load) and `plugin install|link`.
+* **Endpoint** — resolving the live `agent/models.yml` yields
+  `speechUrl http://192.168.0.143:7772/v1/audio/speech`,
+  `voicesUrl …/v1/audio/voices`, `healthUrl …/health`, `model frank-tts`.
+* **Roster** — `GET /v1/audio/voices` answers the bare JSON array
+  `["narrator1","narrator2","narrator3"]`; `/health` answers
+  `{"status":"ok","backend":"omni-http","voices":[…]}`. `GET /v1/voices` and
+  `GET /v1/models` are **404** on this shim, and an unknown voice answers
+  `400 unknown voice 'zzz'; available voices: …` with `available_voices` in the
+  body — which is the fallback the extension uses if the roster route ever
+  disappears.
+* **Omitting `voice` is legal** — frank-tts fills its `DEFAULT_VOICE` since the
+  2026-10-18 voice-pack work, so an unset voice synthesizes instead of failing.
+* **Speech** — `/say "dankvoice live smoke test"` produced a 99,884 B / 2.08 s
+  WAV and `/say voice narrator2` + `/say "cloned voice check"` a 69,164 B /
+  1.44 s WAV (durations from `ffprobe`), each handed to the player; temp
+  directories were gone afterwards.
+* **Auto-speak** — verified in a real TUI session: `/say on` armed the footer
+  (`🔊 narrator1`), the next finished turn synthesized and played the answer
+  (1.20 s WAV), and an unknown voice name answers with the roster instead of
+  speaking. An `agent_end` carrying `willContinue` (the harness scheduled an
+  auto-retry) is never narrated — only the terminal settle speaks.
+
+## Limits
+
+* The TUI's own speak-aloud feature still narrates in Kokoro: its voice list is
+  a compile-time enum in the harness bundle, and no setting routes it to
+  frank-tts. Cloned voices live only on this file-producing/speaking path and
+  on the `tts` tool. See [Handy](/tools/handy.md) for the STT half.
+* `agent_end` narrates the final message text only — mid-turn tool chatter is
+  never spoken.
+* frank-tts is LAN-only: no Caddy vhost fronts :7772, so this extension is
+  usable on the home network.
+* Deployment, packs and the voice registry are owned by the
+  `serverAppConfigs` repo (`serverAppConfigs-docs/Dankclaw/Frank TTS.md`), not
+  by this one.
+
+## Citations
+
+* Live probes on the workstation, 2026-10-18: `omp say --voice narrator1 …`,
+  `curl http://192.168.0.143:7772/health`, `/v1/audio/voices`,
+  `/v1/audio/…/speech` (invalid voice), `ffprobe` on the produced WAVs.
+* `omp --help` (extension discovery flags, `say`, `plugin`) and
+  `@earendil-works/pi-coding-agent` `dist/core/extensions/types.d.ts`
+  (`ExtensionAPI.on/registerCommand`, `ExtensionMode = "tui" | "rpc" | "json" | "print"`).
+* Gitea issue #21 on `dank/command-center` (the work item this page ships with).
+
+## See Also
+
+* [Core Documentation](/core/index.md) — the live harness configuration.
+* [Handy](/tools/handy.md) — offline speech-to-text, the input half of voice.
+* `serverAppConfigs-docs/Dankclaw/Frank TTS.md` — the frank-tts service runbook.

omp-docs/core/index.md

@@ -13,6 +13,7 @@ These files define the structural conventions that govern the agent system itsel
 * [AGENTS.md Format Specification](agents-md-format.md) — Canonical structure and conventions for the system-level instruction file that governs agent behavior.
 * [AGENTS.md Index](index-doc.md) — Overview of the cached tool documentation system and how to add new entries.
 * [Pi Settings System](settings.md) — pi-era `settings.json` record (archive): providers, models, packages, subagent overrides.
+* [dankvoice](dankvoice.md) — Cloned-voice vocalization extension: `/say` and auto-speak over frank-tts, endpoint read from `agent/models.yml`.
 
 ## Change Tracking
 

omp-docs/log.md

@@ -11,6 +11,10 @@ timestamp: 2026-08-28
 
 # Bundle Change Log
 
+## 2026-10-18 — dankvoice: the cloned voices finally speak in the TUI (Refs #21)
+
+Nothing in the harness could pronounce them: the TUI vocalizer and `omp say` gate `--voice` against the bundled Kokoro enum (`omp say --voice narrator1 "test"` → `error: Expected --voice to be one of: af_heart, …`), so frank-tts was reachable only as a file. Added `agent/extensions/dankvoice.ts` — `/say <text>`, `/say on|off` (narrate the final answer at `agent_end`), `/say voice|voices|stop|status` — synthesizing over the OpenAI speech route and playing through `pw-play`/`paplay`/`ffplay`, with the endpoint read from the `api: openai-speech` row of `agent/models.yml` (no host, no secret in the file). Verified live in a real TUI session on the workstation: roster `GET /v1/audio/voices` → `narrator1, narrator2, narrator3`; `/say` produced 99,884 B / 2.08 s and 69,164 B / 1.44 s WAVs handed to the player, temp dirs cleaned afterwards; `/say on` armed the footer (`🔊 narrator1`) and each following finished turn spoke its answer (1.20 s WAV), an unknown voice name answered with the roster instead of speaking, and an `agent_end` carrying `willContinue` (the harness scheduled an auto-retry) is deliberately never narrated. Extension discovery itself proved with a probe file in `~/.omp/agent/extensions/` loaded by a fresh `omp -p` run. Reference page [dankvoice](core/dankvoice.md), registered in the core index; black-box seam `tests/dankvoice.bats` (12 tests).
+
 ## 2026-10-18 — Noctalia bar layout clobbered by trunk-sync stash, recovered from dangling objects
 
 Frank's months of GUI-built bar customizations (cat/clock/clock-utc/weather start, taskbar center, capsule groups g1–g4, control-cheat-sheet, thickness/font-scale/opacity styling) vanished from the live bar at 16:46. Root cause: the layout existed **only in the working tree** — the repo copy of `settings.toml` carried a stale plain layout because GUI edits hadn't been committed inside the hourly heartbeat window — and a trunk-sync session clearing the dirty tree for `origin/main` stashed it; the stash entry was subsequently destroyed (three `WIP on main` stashes within 60 s, all later dropped). Recovery: `git fsck --lost-found` surfaced the destroyed stash as dangling commit `7fe3ed8` (16:46:09); candidate validated in a sandboxed `XDG_*_HOME` before restore, clobbered file preserved to `.AGENTTRASH/`, layout restored through the symlink target and proven by screenshot, committed as `c87b378` — the durable copy the layout never had. Lessons codified into managed skills: trunk-sync must preservation-**commit** every dirty deployment path (never stash, never `stash clear`), and GUI layout edits get committed the same session they're made.

tests/dankvoice.bats

@@ -0,0 +1,263 @@
+#!/usr/bin/env bats
+# tests/dankvoice.bats — black-box tests for agent/extensions/dankvoice.ts
+#
+# The extension's contract, from outside: it registers a `say` command and an
+# `agent_end` listener; what is observable is (a) the JSON it POSTs to the
+# speech route, (b) the file it hands to the player, and (c) the notification
+# text it prints. A fixture HTTP server stands in for frank-tts (it answers the
+# speech route with a fixed WAV, the roster route with a JSON array, and
+# everything else with 404) and a stub player stands in for pw-play: it records
+# the path it was given and copies the bytes it was told to play.
+#
+# Driven by env: DV_EXT (extension under test), DV_STUB / DV_STUB_LOG / DV_COPY
+# (player fixture), DV_MODELS (models.yml fixture), DV_EMPTY_BIN (a PATH with no
+# players), DV_MODE (the harness mode reported to the extension).
+
+setup() {
+  REPO="$(cd "$BATS_TEST_DIRNAME/.." && pwd)"
+  WORK="$(mktemp -d)"
+
+  export DV_EXT="$REPO/agent/extensions/dankvoice.ts"
+  export DV_STUB="$WORK/player.sh"
+  export DV_STUB_LOG="$WORK/player.log"
+  export DV_COPY="$WORK/played.wav"
+  export DV_EMPTY_BIN="$WORK/emptybin"
+  mkdir -p "$DV_EMPTY_BIN"
+
+  cat > "$DV_STUB" <<'SH'
+#!/usr/bin/env bash
+printf '%s\n' "$1" >> "$DV_STUB_LOG"
+cp "$1" "$DV_COPY"
+sleep 0.1
+SH
+  chmod +x "$DV_STUB"
+
+  # models.yml fixture: a chat provider first, the speech provider second
+  export DV_MODELS="$WORK/models.yml"
+  cat > "$DV_MODELS" <<'YML'
+providers:
+  "chat (box)":
+    baseUrl: http://10.0.0.1:9999/v1
+    models:
+      - id: chatmodel
+        api: openai-completions
+  "speech (box)":
+    baseUrl: http://127.0.0.1:1/v1
+    auth: none
+    models:
+      - id: speechmodel
+        api: openai-speech
+YML
+
+  cat > "$WORK/driver.ts" <<'TS'
+// Black-box driver: stand up the frank-tts fixture, load the extension against
+// it, invoke one scenario, print what the endpoint received and what got played.
+import { createServer } from "node:http";
+import { existsSync, readFileSync, statSync } from "node:fs";
+
+const scenario = process.argv[2] ?? "speak";
+const AUDIO = Buffer.from([0x52, 0x49, 0x46, 0x46, 8, 0, 0, 0, 0x57, 0x41, 0x56, 0x45, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12]);
+const received: Array<{ url: string | undefined; body: string }> = [];
+
+const server = createServer((req, res) => {
+  const chunks: Buffer[] = [];
+  req.on("data", (chunk: Buffer) => chunks.push(chunk));
+  req.on("end", () => {
+    const body = Buffer.concat(chunks).toString("utf8");
+    received.push({ url: req.url, body });
+    if (req.url?.endsWith("/audio/voices")) {
+      res.setHeader("content-type", "application/json");
+      res.end(JSON.stringify(["narrator1", "narrator2"]));
+      return;
+    }
+    if (req.url?.endsWith("/audio/speech")) {
+      res.setHeader("content-type", "audio/wav");
+      res.end(AUDIO);
+      return;
+    }
+    res.statusCode = 404;
+    res.end("{}");
+  });
+});
+await new Promise<void>((resolve) => server.listen(0, "127.0.0.1", resolve));
+const port = (server.address() as { port: number }).port;
+
+if (scenario === "endpoint") {
+  process.env.DANKVOICE_MODELS = process.env.DV_MODELS;
+} else {
+  process.env.DANKVOICE_URL = `http://127.0.0.1:${port}/v1`;
+}
+if (scenario === "noplayer") process.env.PATH = process.env.DV_EMPTY_BIN ?? "/nonexistent-bin";
+process.env.DANKVOICE_PLAYER = scenario === "noplayer" ? "" : process.env.DV_STUB;
+
+const extension = await import(process.env.DV_EXT as string);
+const commands = new Map<string, { handler: (args: string, ctx: unknown) => Promise<void> }>();
+const events = new Map<string, (event: unknown, ctx: unknown) => Promise<void> | void>();
+extension.default({
+  registerCommand: (name: string, options: { handler: (args: string, ctx: unknown) => Promise<void> }) => commands.set(name, options),
+  on: (event: string, handler: (event: unknown, ctx: unknown) => Promise<void> | void) => events.set(event, handler),
+});
+const ctx = {
+  mode: process.env.DV_MODE ?? "tui",
+  ui: {
+    notify: (message: string, level?: string) => console.log(`NOTIFY ${level ?? "info"} ${message}`),
+    setStatus: (key: string, text?: string) => console.log(`STATUS ${key} ${text ?? ""}`),
+  },
+};
+const say = commands.get("say");
+const agentEnd = events.get("agent_end");
+const answer = (text: string) => ({ messages: [{ role: "assistant", content: [{ type: "text", text }] }] });
+const settle = () => new Promise((resolve) => setTimeout(resolve, 800));
+
+if (!say) {
+  console.log("COMMANDS none");
+} else {
+  console.log(`COMMANDS ${[...commands.keys()].join(",")} EVENTS ${[...events.keys()].join(",")}`);
+  switch (scenario) {
+    case "speak":
+      await say.handler("hello world", ctx);
+      break;
+    case "voice":
+      await say.handler("voice narrator2", ctx);
+      await say.handler("good morning", ctx);
+      break;
+    case "auto":
+      await say.handler("on", ctx);
+      await agentEnd?.(answer("the answer"), ctx);
+      await settle();
+      await say.handler("off", ctx);
+      await agentEnd?.(answer("the second answer"), ctx);
+      break;
+    case "continuation":
+      await say.handler("on", ctx);
+      await agentEnd?.({ ...answer("not yet"), willContinue: true }, ctx);
+      await settle();
+      await agentEnd?.(answer("the settled answer"), ctx);
+      break;
+    case "printmode":
+      await say.handler("on", ctx);
+      await agentEnd?.(answer("quiet"), ctx);
+      break;
+    case "voices":
+      await say.handler("voices", ctx);
+      break;
+    case "endpoint":
+      await say.handler("status", ctx);
+      break;
+    case "markdown":
+      await say.handler("## Title\n\nUse `pw-play` here.\n\n```bash\nnpm i x\n```\n\nsee [docs](http://example.test) and **bold**\n- a\n- b", ctx);
+      break;
+    case "truncate":
+      await say.handler("Sentence one is here. ".repeat(40), ctx);
+      break;
+    case "noplayer":
+      await say.handler("speak anyway", ctx);
+      break;
+  }
+  await settle();
+}
+
+for (const call of received) {
+  const parsed: unknown = JSON.parse(call.body === "" ? "{}" : call.body);
+  const field = (key: string): string => {
+    if (parsed && typeof parsed === "object" && key in parsed) {
+      const value = parsed[key];
+      if (typeof value === "string") return value;
+    }
+    return "-";
+  };
+  console.log(`CALL ${call.url} model=${field("model")} format=${field("response_format")} voice=${field("voice")} input=${field("input")}`);
+}
+console.log(`CALLS ${received.length}`);
+const log = process.env.DV_STUB_LOG && existsSync(process.env.DV_STUB_LOG) ? readFileSync(process.env.DV_STUB_LOG, "utf8").trim() : "";
+console.log(`PLAYS ${log === "" ? 0 : log.split("\n").length}`);
+if (process.env.DV_COPY && existsSync(process.env.DV_COPY)) console.log(`COPIED ${statSync(process.env.DV_COPY).size}`);
+server.close();
+TS
+
+  export DV_DRIVER="$WORK/driver.ts"
+}
+
+teardown() {
+  rm -rf "$WORK"
+}
+
+say_run() {
+  run bun "$DV_DRIVER" "$1"
+}
+
+@test "the extension registers the say command and an agent_end listener" {
+  say_run speak
+  [ "$status" -eq 0 ]
+  [[ "$output" == *"COMMANDS say EVENTS agent_end"* ]]
+}
+
+@test "speaking posts the text to the speech route" {
+  say_run speak
+  [ "$status" -eq 0 ]
+  [[ "$output" == *"CALL /v1/audio/speech model=frank-tts format=wav voice=- input=hello world"* ]]
+}
+
+@test "one utterance is played once, as exactly the bytes the endpoint sent" {
+  say_run speak
+  [[ "$output" == *"PLAYS 1"* ]]
+  [[ "$output" == *"COPIED 24"* ]]
+}
+
+@test "the voice is named in the request only when the user chose one" {
+  say_run speak
+  [[ "$output" == *"voice=- input=hello world"* ]]
+  say_run voice
+  [[ "$output" == *"voice=narrator2 input=good morning"* ]]
+  [[ "$output" == *"NOTIFY info dankvoice: voice = narrator2"* ]]
+}
+
+@test "auto-speak narrates the final answer once and stays silent after it is disarmed" {
+  say_run auto
+  [[ "$output" == *"PLAYS 1"* ]]
+  [[ "$output" == *"input=the answer"* ]]
+  [[ "$output" != *"the second answer"* ]]
+  [[ "$output" == *"STATUS dankvoice 🔊"* ]]
+}
+
+@test "auto-speak stays silent outside the interactive modes" {
+  DV_MODE=print say_run printmode
+  [[ "$output" == *"PLAYS 0"* ]]
+  [[ "$output" != *"input=quiet"* ]]
+}
+
+@test "the voice list comes from the endpoint roster route" {
+  say_run voices
+  [[ "$output" == *"CALL /v1/audio/voices"* ]]
+  [[ "$output" == *"dankvoice voices: narrator1, narrator2"* ]]
+}
+
+@test "the endpoint is taken from the speech row of the models file, never the chat provider" {
+  say_run endpoint
+  [[ "$output" == *"http://127.0.0.1:1/v1/audio/speech"* ]]
+  [[ "$output" != *"10.0.0.1"* ]]
+}
+
+@test "markdown never reaches the speech engine" {
+  say_run markdown
+  [[ "$output" == *"input=Title Use pw-play here. see docs and bold a b"* ]]
+}
+
+@test "an over-long utterance is bounded and cut at a sentence boundary" {
+  DANKVOICE_MAX=60 say_run truncate
+  [[ "$output" == *"here. …"* ]]
+  [ "$(grep -o 'Sentence one is here\.' <<<"$output" | wc -l)" -le 4 ]
+}
+
+@test "a missing player is reported, not swallowed" {
+  say_run noplayer
+  [[ "$output" == *"NOTIFY error dankvoice: no audio player found"* ]]
+  [[ "$output" == *"PLAYS 0"* ]]
+}
+
+@test "a scheduled continuation is never narrated as the final answer" {
+ say_run continuation
+ [[ "$output" == *"PLAYS 1"* ]]
+ [[ "$output" == *"input=the settled answer"* ]]
+ [[ "$output" != *"input=not yet"* ]]
+}