chore: pin jellyfin to 2026060106

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

CLAUDE.md

@@ -36,7 +36,7 @@ hf-pdocker-01 (23GB RAM, i7-7700T, NVMe, HD 630 GPU) -- RESTORED (2026-03-08, ha
 ├── [COMPOSE] Farm Manager API (:8888) -- dashboard + API server
 ├── [COMPOSE] Farm Agent (:8889)
 ├── [COMPOSE] Rongorongo decipherment engine -- 2 containers (rongorongo-web :8181, rongorongo-api). Server-synced state at /mnt/docker-data/configs/rongorongo/data. Traefik basicAuth on rongorongo.hobbs.farm.
-├── [REMOVED] VoiceCoach -- moved to GPU machine (192.168.86.150) 2026-04-04
+├── [REMOVED] VoiceCoach -- moved to GPU machine (192.168.86.27) 2026-04-04, now Ubuntu
 ├── [COMPOSE] Node-exporter (:9100) -- standalone with pid:host
 ├── [COMPOSE] Telegraf -- metrics collection to InfluxDB
 ├── [CRON] sync-frigate-to-nas (daily 2am), cleanup-frigate-media (weekly Sun 3am), restart-frigate (daily 4am)
@@ -51,8 +51,22 @@ bart (15GB RAM, i5-4570T, HDD)
 ├── [COMPOSE] Telegraf -- metrics collection to InfluxDB
 ├── [COMPOSE] Watchtower
 
+GPU workstation / Jeremy's PC (192.168.86.27, Ubuntu 24.04 — migrated from Windows 2026-05-28)
+├── RTX 3090 (24GB VRAM), i7-13700KF, 32GB RAM
+├── [COMPOSE] Ollama (:11434) -- 21 local models, v0.24.0
+├── [COMPOSE] Open WebUI (:8080) -- AI chat, points to local Ollama
+├── [REMOVED] vLLM-Hermes -- removed 2026-05-29, VRAM freed for Speaches CUDA
+├── [COMPOSE] Speaches (:8000) -- STT/TTS via faster-whisper + Kokoro, CUDA
+├── [COMPOSE] LiveKit (:7880/:7881) -- WebRTC for VoiceCoach, key: devkey
+├── [COMPOSE] Portainer (:9000, :8002)
+├── [COMPOSE] Prometheus (:9090), DCGM-exporter (:9400), node-exporter (:9100)
+├── [COMPOSE] Watchtower (label-enable mode)
+├── Compose file: /home/glyptic/Docker/compose/docker-compose.yml
+├── vLLM compose: /home/glyptic/Docker/vllm-hermes/docker-compose.yml
+└── Model cache: /home/glyptic/Docker/data/models/
+
 hf-pdocker-02 (7.6GB RAM, i7-6700T, HDD)
-├── [COMPOSE] Unifi + unifi-db (MongoDB)
+├── [COMPOSE] UniFi OS Server (:11443 HTTPS, :8080 inform, :3478/udp STUN) -- ghcr.io/lemker/unifi-os-server v5.1.15, replaced legacy linuxserver/unifi 2026-05-31. Data local at /var/lib/unifi-os/, /persistent on NAS.
 ├── [COMPOSE] Gitea + gitea-db (PostgreSQL)
 ├── [COMPOSE] Semaphore + semaphore-db (MySQL)
 ├── [COMPOSE] Wiki.js + wikijs-db (PostgreSQL)
@@ -69,9 +83,11 @@ hf-pdocker-02 (7.6GB RAM, i7-6700T, HDD)
 
 ### Environment Context
 
-You are working in a **WSL 2 environment** on Windows. Docker is NOT directly available in WSL - all Docker operations must be performed by connecting to the remote nodes via SSH.
+You are working on a **native Ubuntu 24.04 workstation** (previously WSL2 on Windows — migrated 2026-05-28). This machine IS the GPU inference box (RTX 3090, 192.168.86.27). Docker is available locally and runs the inference stack. All homelab node operations (hf-pdocker-01, hf-pdocker-02, bart) still require SSH.
 
-**Critical:** Docker is not available locally in WSL. All Docker operations must be performed by connecting to the remote nodes via SSH.
+**Local Docker on this machine** runs: Ollama, Open WebUI, vLLM-Hermes, Speaches, LiveKit, Portainer, Prometheus, DCGM-exporter.
+
+**Critical:** For homelab nodes, use the `docker-swarm-ops` agent via SSH. For local inference services, Docker commands run directly.
 
 ### Storage Architecture
 

compose/bart/media/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   jellyfin:
-    image: jellyfin/jellyfin:latest
+    image: jellyfin/jellyfin:2026060106
     container_name: jellyfin
     restart: unless-stopped
     environment:

compose/hf-pdocker-01/frigate/config.yml

@@ -8,7 +8,7 @@
 #     back_porch        192.168.44.63  kerberos:kerberos
 #     house_south_corner 192.168.44.61  admin:(blank)
 #     house_south_yard  192.168.44.62  admin:(blank)
-#     gate_camera       192.168.86.175 admin:(blank)
+#     gate_camera       192.168.86.175 admin:(blank)  <-- OFFLINE: wrong user/pass RTSP error
 #
 #   Profile cameras (/profile1 + /profile2, H.264):
 #     house_north       192.168.44.51  admin:123456
@@ -166,17 +166,17 @@ ffmpeg:
 
 # =============================================================================
 model:
-  path: /openvino-model/ssdlite_mobilenet_v2.xml
+  width: 320
-  width: 300
+  height: 320
-  height: 300
   input_tensor: nhwc
-  input_pixel_format: bgr
+  input_pixel_format: rgb
   labelmap_path: /openvino-model/coco_91cl_bkgr.txt
 
 detectors:
-  ov:
+  coral:
-    type: openvino
+    type: edgetpu
-    device: GPU
+    device: usb
+
 detect:
   enabled: true
   fps: 3
@@ -229,6 +229,21 @@ birdseye:
   enabled: true
   mode: objects
 
+semantic_search:
+  enabled: true
+  model_size: large
+
+face_recognition:
+  enabled: true
+  model_size: small
+
+lpr:
+  enabled: true
+
+classification:
+  bird:
+    enabled: true
+
 # =============================================================================
 # Camera definitions
 # =============================================================================
@@ -334,8 +349,19 @@ cameras:
           roles:
             - record
 
+  # shop_west: throttled to 2fps + stricter filters to reduce detection load
   shop_west:
     enabled: true
+    detect:
+      fps: 2
+    objects:
+      filters:
+        person:
+          min_area: 8000
+          threshold: 0.8
+        car:
+          min_area: 15000
+          threshold: 0.8
     ffmpeg:
       inputs:
         - path: rtsp://127.0.0.1:8554/shop_west_sub
@@ -374,13 +400,12 @@ cameras:
             - record
 
   # ---------------------------------------------------------------------------
-  # house_east - HEVC, VAAPI disabled (pw: admin)
+  # house_east - HEVC source, go2rtc provides H.264 sub, VAAPI enabled
   # ---------------------------------------------------------------------------
 
   house_east:
     enabled: true
     ffmpeg:
-      hwaccel_args: []
       inputs:
         - path: rtsp://127.0.0.1:8554/house_east_sub
           input_args: preset-rtsp-restream
@@ -459,6 +484,7 @@ cameras:
 
   # ---------------------------------------------------------------------------
   # ASH43-W cameras (HEVC main, H.264 sub - go2rtc transcodes main to H.264)
+  # VAAPI enabled - sub stream is H.264
   # ---------------------------------------------------------------------------
 
   pool_room:

compose/hf-pdocker-01/frigate/docker-compose.yml

@@ -13,10 +13,13 @@ services:
       - /mnt/docker-data/configs/frigate/config:/config
       - /mnt/frigate-recordings:/media/frigate
       - /etc/localtime:/etc/localtime:ro
+    tmpfs:
+      - /tmp/cache:size=8G
     devices:
       - /dev/dri:/dev/dri
+      - /dev/bus/usb:/dev/bus/usb
     mem_limit: 12G
-    memswap_limit: 12G
+    memswap_limit: 16G
     healthcheck:
       test: ["CMD-SHELL", "curl -f http://localhost:5000/api/version || exit 1"]
       interval: 30s

compose/hf-pdocker-01/voicecoach-v2/.env.example

@@ -0,0 +1,6 @@
+LIVEKIT_API_KEY=voicecoach-89a06ad0
+LIVEKIT_API_SECRET=Dn16mQJU5lTCWwXOrUO8LPflODi3LGiMHdxKdQj4/iM
+ANTHROPIC_API_KEY=
+OPENCLAW_TOKEN=f31cc58c47c2aa420901576b4e90a0101d52e9ec0a084186
+HA_TOKEN=
+SSH_PASS=&Rip8a115

compose/hf-pdocker-01/voicecoach-v2/agent/Dockerfile

@@ -0,0 +1,16 @@
+FROM python:3.11-slim
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    curl libsndfile1 ffmpeg \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+
+COPY . .
+
+HEALTHCHECK --interval=30s --timeout=10s --start-period=60s \
+    CMD curl -sf http://localhost:8080/health || exit 1
+
+CMD ["python", "main.py", "start"]

compose/hf-pdocker-01/voicecoach-v2/agent/agent.py

@@ -0,0 +1,185 @@
+"""VoiceCoach v2 — livekit-agents 1.5."""
+import asyncio
+import json
+import logging
+import os
+import uuid
+
+from livekit import rtc
+from livekit.agents import (
+    Agent,
+    AgentSession,
+    AutoSubscribe,
+    JobContext,
+    RoomInputOptions,
+    llm as lk_llm,
+)
+from livekit.plugins import openai as lk_openai
+from livekit.plugins import silero
+
+import store
+from modes import DEFAULT_MODE, MODES, ModeConfig
+from tools import ALL_TOOLS
+from vocal import VocalAnalyzer
+
+logger = logging.getLogger(__name__)
+
+SPEACHES_URL = os.getenv("SPEACHES_URL", "http://192.168.86.27:8000")
+OPENCLAW_URL = os.getenv("OPENCLAW_URL", "http://voicecoach-openclaw:3100")
+OPENCLAW_TOKEN = os.getenv("OPENCLAW_TOKEN", "")
+WHISPER_MODEL = "deepdml/faster-whisper-large-v3-turbo-ct2"
+KOKORO_MODEL = "speaches-ai/Kokoro-82M-v1.0-ONNX-fp16"
+KOKORO_VOICE = os.getenv("KOKORO_VOICE", "af_nova")
+
+
+def _build_instructions(mode: ModeConfig, context: str = "") -> str:
+    if context:
+        return f"{mode.instructions}\n\n{context}"
+    return mode.instructions
+
+
+class VoiceCoachAgent(Agent):
+    def __init__(self, mode_name: str, context: str, session_id: str, room: rtc.Room):
+        mode = MODES[mode_name]
+        super().__init__(
+            instructions=_build_instructions(mode, context),
+            tools=ALL_TOOLS,
+        )
+        self._mode_name = mode_name
+        self._session_id = session_id
+        self._room = room
+        self._vocal = VocalAnalyzer()
+
+    async def on_enter(self):
+        await store.create_session(self._session_id, self._mode_name)
+        self.session.generate_reply(
+            instructions="Greet Jeremy warmly in one sentence. Be natural, not formal."
+        )
+
+    async def on_exit(self):
+        await store.end_session(self._session_id)
+
+    async def on_user_turn_completed(
+        self,
+        turn_ctx: lk_llm.ChatContext,
+        new_message: lk_llm.ChatMessage,
+    ):
+        content = new_message.text_content or ""
+        mode = MODES[self._mode_name]
+
+        # Inject vocal state tag into message if mode uses it
+        if mode.vocal_feedback and content:
+            vocal = self._vocal.current
+            if vocal.energy > 0.02:
+                tag = vocal.to_tag()
+                # Update message content to include vocal context
+                new_message.content = [f"{tag}\n{content}"]
+
+        asyncio.create_task(
+            store.add_message(
+                self._session_id,
+                "user",
+                content,
+                vocal_energy=self._vocal.current.energy,
+                vocal_emotion=self._vocal.current.emotion,
+            )
+        )
+
+        await self._push({
+            "type": "final_transcript",
+            "text": content,
+            "speaker": "user",
+        })
+
+    def switch_mode(self, mode_name: str):
+        if mode_name not in MODES:
+            logger.warning("Unknown mode: %s", mode_name)
+            return
+        self._mode_name = mode_name
+        self.update_instructions(_build_instructions(MODES[mode_name]))
+        asyncio.create_task(self._push({"type": "mode_ack", "mode": mode_name}))
+        logger.info("Mode → %s", mode_name)
+
+    async def _push(self, payload: dict):
+        try:
+            data = json.dumps(payload).encode()
+            await self._room.local_participant.publish_data(data, reliable=True)
+        except Exception as e:
+            logger.debug("Data push failed: %s", e)
+
+
+async def entrypoint(ctx: JobContext):
+    await ctx.connect(auto_subscribe=AutoSubscribe.AUDIO_ONLY)
+
+    session_id = uuid.uuid4().hex[:8]
+    context = await store.get_recent_context(limit=3)
+
+    agent = VoiceCoachAgent(
+        mode_name=DEFAULT_MODE,
+        context=context,
+        session_id=session_id,
+        room=ctx.room,
+    )
+
+    session = AgentSession(
+        stt=lk_openai.STT(
+            base_url=f"{SPEACHES_URL}/v1",
+            model=WHISPER_MODEL,
+            api_key="speaches",
+        ),
+        llm=lk_openai.LLM(
+            base_url=f"{OPENCLAW_URL}/v1",
+            model="openclaw/assistant",
+            api_key=OPENCLAW_TOKEN,
+        ),
+        tts=lk_openai.TTS(
+            base_url=f"{SPEACHES_URL}/v1",
+            model=KOKORO_MODEL,
+            voice=KOKORO_VOICE,
+            api_key="speaches",
+        ),
+        vad=silero.VAD.load(),
+        allow_interruptions=True,
+        min_endpointing_delay=0.4,
+        max_endpointing_delay=2.0,
+    )
+
+    # Data channel → mode switching
+    @ctx.room.on("data_received")
+    def on_data(packet: rtc.DataPacket):
+        try:
+            msg = json.loads(packet.data.decode())
+            if msg.get("type") == "mode_change":
+                agent.switch_mode(msg.get("mode", DEFAULT_MODE))
+        except Exception:
+            pass
+
+    # Session events → browser
+    @session.on("user_input_transcribed")
+    def on_transcribed(ev):
+        asyncio.create_task(agent._push({
+            "type": "partial_transcript" if not ev.is_final else "final_transcript",
+            "text": ev.transcript,
+            "speaker": "user",
+        }))
+
+    @session.on("conversation_item_added")
+    def on_item(ev):
+        item = ev.item
+        if hasattr(item, "role") and item.role == "assistant":
+            text = item.text_content or ""
+            if text:
+                asyncio.create_task(agent._push({
+                    "type": "agent_response",
+                    "text": text,
+                    "speaker": "assistant",
+                }))
+                asyncio.create_task(
+                    store.add_message(session_id, "assistant", text)
+                )
+
+    await session.start(
+        agent,
+        room=ctx.room,
+        room_input_options=RoomInputOptions(),
+    )

compose/hf-pdocker-01/voicecoach-v2/agent/main.py

@@ -0,0 +1,29 @@
+"""VoiceCoach v2 — entry point."""
+import logging
+import os
+import threading
+
+from livekit.agents import WorkerOptions, cli
+
+import server
+from agent import entrypoint
+
+logging.basicConfig(level=logging.INFO)
+
+
+def run_api_server():
+    server.run()
+
+
+if __name__ == "__main__":
+    api_thread = threading.Thread(target=run_api_server, daemon=True)
+    api_thread.start()
+
+    cli.run_app(
+        WorkerOptions(
+            entrypoint_fnc=entrypoint,
+            ws_url=os.getenv("LIVEKIT_URL", "ws://voicecoach-livekit:7880"),
+            api_key=os.getenv("LIVEKIT_API_KEY"),
+            api_secret=os.getenv("LIVEKIT_API_SECRET"),
+        )
+    )

compose/hf-pdocker-01/voicecoach-v2/agent/modes.py

@@ -0,0 +1,61 @@
+from dataclasses import dataclass
+
+
+@dataclass
+class ModeConfig:
+    name: str
+    instructions: str
+    max_tokens: int
+    vocal_feedback: bool
+
+
+MODES: dict[str, ModeConfig] = {
+    "coaching": ModeConfig(
+        name="coaching",
+        instructions="""You are a personal voice coach and communication advisor. You are speaking with Jeremy.
+
+Keep responses conversational and concise (2-4 sentences unless asked for more). You receive a [VOCAL] tag before each message with paralinguistic analysis. Use it to provide feedback on BOTH what Jeremy says AND how he sounds.
+
+Never quote raw numbers from the vocal analysis. Translate them naturally: "I notice some tension in your voice" not "energy=0.8".
+
+Available modes (Jeremy switches by saying the phrase or clicking the UI):
+- "coaching mode" (default) — active feedback on content and delivery
+- "vent mode" — listen and reflect, minimal advice
+- "practice mode" — roleplay a difficult conversation partner
+- "briefing mode" — summarize tasks and context from memory
+
+You have tools to interact with Jeremy's homelab infrastructure. Use them when asked about system status, container health, alerts, or home automation. Be concise about results: "hf-pdocker-01 looks healthy, 38 containers running" not a full list.""",
+        max_tokens=512,
+        vocal_feedback=True,
+    ),
+    "vent": ModeConfig(
+        name="vent",
+        instructions="""You are a warm, non-judgmental listener. Jeremy wants to vent or think something through.
+
+Listen, reflect back what you hear, and ask one gentle follow-up question. Keep responses short (1-3 sentences). No coaching, no advice unless explicitly asked.
+
+Ignore the [VOCAL] tag data — just be present.""",
+        max_tokens=256,
+        vocal_feedback=False,
+    ),
+    "practice": ModeConfig(
+        name="practice",
+        instructions="""You are playing a difficult conversation partner for Jeremy to practice with.
+
+Stay in character as: a skeptical stakeholder, a demanding manager, or whoever Jeremy describes. Be realistic — push back, ask hard questions, don't cave too easily. Only break character if Jeremy says "stop practice".
+
+Keep your responses to 1-3 sentences to keep the conversation moving.""",
+        max_tokens=256,
+        vocal_feedback=False,
+    ),
+    "briefing": ModeConfig(
+        name="briefing",
+        instructions="""You are giving Jeremy a morning briefing. Check infrastructure status, pull any alerts, and summarize what needs attention.
+
+Be concise and actionable. Lead with anything that needs immediate attention, then routine status. Use tools to get current data — don't guess.""",
+        max_tokens=768,
+        vocal_feedback=False,
+    ),
+}
+
+DEFAULT_MODE = "coaching"

compose/hf-pdocker-01/voicecoach-v2/agent/requirements.txt

@@ -0,0 +1,7 @@
+livekit-agents[openai,silero]==1.5.15
+fastapi==0.115.0
+uvicorn[standard]==0.30.0
+aiosqlite==0.20.0
+httpx==0.27.0
+structlog==24.4.0
+python-dotenv==1.0.1

compose/hf-pdocker-01/voicecoach-v2/agent/server.py

@@ -0,0 +1,83 @@
+"""Token server + sessions REST API — FastAPI."""
+import asyncio
+import os
+from datetime import timedelta
+
+import uvicorn
+from fastapi import FastAPI, HTTPException
+from fastapi.middleware.cors import CORSMiddleware
+from livekit import api as livekit_api
+from pydantic import BaseModel
+
+import store
+
+LIVEKIT_API_KEY = os.environ["LIVEKIT_API_KEY"]
+LIVEKIT_API_SECRET = os.environ["LIVEKIT_API_SECRET"]
+LIVEKIT_PUBLIC_URL = os.getenv("LIVEKIT_PUBLIC_URL", "wss://voice.hobbs.farm")
+
+app = FastAPI(title="VoiceCoach API")
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=["*"],
+    allow_methods=["*"],
+    allow_headers=["*"],
+)
+
+
+class TokenRequest(BaseModel):
+    identity: str = "jeremy"
+
+
+@app.on_event("startup")
+async def startup():
+    await store.init_db()
+
+
+@app.get("/health")
+async def health():
+    return {"status": "ok", "version": "2.0"}
+
+
+@app.post("/api/token")
+async def get_token(req: TokenRequest):
+    token = livekit_api.AccessToken(LIVEKIT_API_KEY, LIVEKIT_API_SECRET)
+    token.with_grants(livekit_api.VideoGrants(
+        room_join=True,
+        room="voicecoach",
+        can_publish=True,
+        can_subscribe=True,
+    ))
+    token.identity = req.identity
+    token.ttl = timedelta(hours=8)
+    return {"token": token.to_jwt(), "url": LIVEKIT_PUBLIC_URL}
+
+
+@app.get("/api/sessions")
+async def list_sessions(limit: int = 20):
+    return await store.get_sessions(limit=limit)
+
+
+@app.get("/api/sessions/{session_id}/messages")
+async def get_messages(session_id: str):
+    msgs = await store.get_session_messages(session_id)
+    if not msgs:
+        raise HTTPException(status_code=404, detail="Session not found")
+    return msgs
+
+
+@app.get("/api/profile/{key}")
+async def get_profile(key: str):
+    value = await store.get_profile(key)
+    if value is None:
+        raise HTTPException(status_code=404, detail="Key not found")
+    return {"key": key, "value": value}
+
+
+@app.put("/api/profile/{key}")
+async def set_profile_key(key: str, body: dict):
+    await store.set_profile(key, str(body.get("value", "")))
+    return {"ok": True}
+
+
+def run():
+    uvicorn.run(app, host="0.0.0.0", port=8080, log_level="info")

compose/hf-pdocker-01/voicecoach-v2/agent/store.py

@@ -0,0 +1,140 @@
+"""SQLite session store — WAL mode, aiosqlite."""
+import json
+import os
+import time
+from typing import Optional
+
+import aiosqlite
+
+DB_PATH = os.getenv("DB_PATH", "/data/sessions.db")
+
+
+async def init_db():
+    async with aiosqlite.connect(DB_PATH) as db:
+        await db.execute("PRAGMA journal_mode=WAL")
+        await db.executescript("""
+            CREATE TABLE IF NOT EXISTS sessions (
+                id TEXT PRIMARY KEY,
+                started_at REAL NOT NULL,
+                ended_at REAL,
+                mode TEXT DEFAULT 'coaching',
+                summary TEXT
+            );
+
+            CREATE TABLE IF NOT EXISTS messages (
+                id INTEGER PRIMARY KEY AUTOINCREMENT,
+                session_id TEXT NOT NULL,
+                role TEXT NOT NULL,
+                content TEXT NOT NULL,
+                vocal_energy REAL,
+                vocal_emotion TEXT,
+                ts REAL NOT NULL,
+                FOREIGN KEY(session_id) REFERENCES sessions(id)
+            );
+
+            CREATE TABLE IF NOT EXISTS profile (
+                key TEXT PRIMARY KEY,
+                value TEXT NOT NULL,
+                updated_at REAL NOT NULL
+            );
+        """)
+        await db.commit()
+
+
+async def create_session(session_id: str, mode: str = "coaching"):
+    async with aiosqlite.connect(DB_PATH) as db:
+        await db.execute(
+            "INSERT OR IGNORE INTO sessions (id, started_at, mode) VALUES (?, ?, ?)",
+            (session_id, time.time(), mode),
+        )
+        await db.commit()
+
+
+async def end_session(session_id: str, summary: Optional[str] = None):
+    async with aiosqlite.connect(DB_PATH) as db:
+        await db.execute(
+            "UPDATE sessions SET ended_at=?, summary=? WHERE id=?",
+            (time.time(), summary, session_id),
+        )
+        await db.commit()
+
+
+async def add_message(
+    session_id: str,
+    role: str,
+    content: str,
+    vocal_energy: Optional[float] = None,
+    vocal_emotion: Optional[str] = None,
+):
+    async with aiosqlite.connect(DB_PATH) as db:
+        await db.execute(
+            "INSERT INTO messages (session_id, role, content, vocal_energy, vocal_emotion, ts) VALUES (?,?,?,?,?,?)",
+            (session_id, role, content, vocal_energy, vocal_emotion, time.time()),
+        )
+        await db.commit()
+
+
+async def get_recent_context(limit: int = 3) -> str:
+    """Return a brief context string from the last N sessions for injection into system prompt."""
+    async with aiosqlite.connect(DB_PATH) as db:
+        async with db.execute(
+            "SELECT id, started_at, mode, summary FROM sessions WHERE ended_at IS NOT NULL ORDER BY ended_at DESC LIMIT ?",
+            (limit,),
+        ) as cur:
+            rows = await cur.fetchall()
+
+    if not rows:
+        return ""
+
+    parts = ["Recent session context:"]
+    for session_id, started_at, mode, summary in rows:
+        import datetime
+        dt = datetime.datetime.fromtimestamp(started_at).strftime("%Y-%m-%d")
+        if summary:
+            parts.append(f"- {dt} ({mode}): {summary}")
+    return "\n".join(parts)
+
+
+async def get_sessions(limit: int = 20) -> list[dict]:
+    async with aiosqlite.connect(DB_PATH) as db:
+        async with db.execute(
+            "SELECT id, started_at, ended_at, mode, summary FROM sessions ORDER BY started_at DESC LIMIT ?",
+            (limit,),
+        ) as cur:
+            rows = await cur.fetchall()
+    return [
+        {
+            "id": r[0],
+            "started_at": r[1],
+            "ended_at": r[2],
+            "mode": r[3],
+            "summary": r[4],
+        }
+        for r in rows
+    ]
+
+
+async def get_session_messages(session_id: str) -> list[dict]:
+    async with aiosqlite.connect(DB_PATH) as db:
+        async with db.execute(
+            "SELECT role, content, vocal_emotion, ts FROM messages WHERE session_id=? ORDER BY ts",
+            (session_id,),
+        ) as cur:
+            rows = await cur.fetchall()
+    return [{"role": r[0], "content": r[1], "vocal_emotion": r[2], "ts": r[3]} for r in rows]
+
+
+async def get_profile(key: str) -> Optional[str]:
+    async with aiosqlite.connect(DB_PATH) as db:
+        async with db.execute("SELECT value FROM profile WHERE key=?", (key,)) as cur:
+            row = await cur.fetchone()
+    return row[0] if row else None
+
+
+async def set_profile(key: str, value: str):
+    async with aiosqlite.connect(DB_PATH) as db:
+        await db.execute(
+            "INSERT OR REPLACE INTO profile (key, value, updated_at) VALUES (?,?,?)",
+            (key, value, time.time()),
+        )
+        await db.commit()

compose/hf-pdocker-01/voicecoach-v2/agent/tools.py

@@ -0,0 +1,186 @@
+"""Homelab tools wired into the agent via @function_tool."""
+import asyncio
+import logging
+import os
+from typing import Annotated
+
+import httpx
+from livekit.agents import llm
+
+logger = logging.getLogger(__name__)
+
+# Homelab node config
+NODES = {
+    "hf-pdocker-01": "192.168.86.192",
+    "hf-pdocker-02": "192.168.86.100",
+    "bart": "192.168.86.167",
+    "gpu": "192.168.86.27",
+}
+SSH_USER = "glyptic"
+SSH_PASS = os.getenv("SSH_PASS", "&Rip8a115")
+FARM_MANAGER_URL = "http://192.168.86.192:8888"
+HA_URL = os.getenv("HA_URL", "http://192.168.86.192:8123")
+HA_TOKEN = os.getenv("HA_TOKEN", "")
+ALERTMANAGER_URL = "http://192.168.86.192:9093"
+SEARXNG_URL = "http://192.168.86.100:8888"
+
+
+async def _ssh_exec(host: str, cmd: str, timeout: float = 15.0) -> str:
+    """Run a command on a remote host via sshpass."""
+    proc = await asyncio.create_subprocess_exec(
+        "sshpass", "-p", SSH_PASS,
+        "ssh", "-o", "StrictHostKeyChecking=no", "-o", "ConnectTimeout=5",
+        f"{SSH_USER}@{host}", cmd,
+        stdout=asyncio.subprocess.PIPE,
+        stderr=asyncio.subprocess.PIPE,
+    )
+    try:
+        stdout, stderr = await asyncio.wait_for(proc.communicate(), timeout=timeout)
+    except asyncio.TimeoutError:
+        proc.kill()
+        return f"ERROR: command timed out after {timeout}s"
+    if proc.returncode != 0:
+        return f"ERROR: {stderr.decode().strip()}"
+    return stdout.decode().strip()
+
+
+@llm.function_tool
+async def infra_status(
+    node: Annotated[str, "Node name: hf-pdocker-01, hf-pdocker-02, bart, gpu, or 'all'"],
+) -> str:
+    """Check container health on a homelab node. Returns running container count and any unhealthy containers."""
+    nodes = list(NODES.keys()) if node == "all" else [node]
+    results = []
+    for n in nodes:
+        ip = NODES.get(n)
+        if not ip:
+            results.append(f"{n}: unknown node")
+            continue
+        out = await _ssh_exec(ip, "docker ps --format '{{.Names}}\\t{{.Status}}' | head -50")
+        lines = [l for l in out.splitlines() if l.strip()]
+        unhealthy = [l for l in lines if "unhealthy" in l.lower() or "exited" in l.lower()]
+        results.append(
+            f"{n}: {len(lines)} containers running"
+            + (f", ISSUES: {'; '.join(l.split(chr(9))[0] for l in unhealthy)}" if unhealthy else ", all healthy")
+        )
+    return "\n".join(results)
+
+
+@llm.function_tool
+async def container_action(
+    node: Annotated[str, "Node name: hf-pdocker-01, hf-pdocker-02, bart, gpu"],
+    container: Annotated[str, "Container name"],
+    action: Annotated[str, "Action: restart, stop, or start"],
+) -> str:
+    """Restart, stop, or start a Docker container on a homelab node."""
+    ip = NODES.get(node)
+    if not ip:
+        return f"Unknown node: {node}"
+    if action not in ("restart", "stop", "start"):
+        return f"Invalid action: {action}. Use restart, stop, or start."
+    result = await _ssh_exec(ip, f"docker {action} {container}")
+    return f"{action} {container} on {node}: {'done' if container in result or result == '' else result}"
+
+
+@llm.function_tool
+async def check_logs(
+    node: Annotated[str, "Node name"],
+    container: Annotated[str, "Container name"],
+    lines: Annotated[int, "Number of log lines to return (max 50)"] = 20,
+) -> str:
+    """Get recent logs from a container."""
+    ip = NODES.get(node)
+    if not ip:
+        return f"Unknown node: {node}"
+    lines = min(lines, 50)
+    return await _ssh_exec(ip, f"docker logs --tail {lines} {container} 2>&1")
+
+
+@llm.function_tool
+async def read_alerts() -> str:
+    """Check Prometheus Alertmanager for active alerts."""
+    try:
+        async with httpx.AsyncClient(timeout=5.0) as client:
+            r = await client.get(f"{ALERTMANAGER_URL}/api/v2/alerts?active=true&silenced=false")
+            r.raise_for_status()
+            alerts = r.json()
+        if not alerts:
+            return "No active alerts."
+        parts = []
+        for a in alerts[:10]:
+            name = a.get("labels", {}).get("alertname", "unknown")
+            severity = a.get("labels", {}).get("severity", "")
+            summary = a.get("annotations", {}).get("summary", "")
+            parts.append(f"[{severity}] {name}: {summary}" if summary else f"[{severity}] {name}")
+        return "\n".join(parts)
+    except Exception as e:
+        return f"Could not reach Alertmanager: {e}"
+
+
+@llm.function_tool
+async def home_assistant(
+    action: Annotated[str, "get_states, turn_on, turn_off, or toggle"],
+    entity_id: Annotated[str, "HA entity ID, e.g. light.living_room or 'all' for get_states"] = "all",
+) -> str:
+    """Interact with Home Assistant — check sensor states or control devices."""
+    if not HA_TOKEN:
+        return "HA_TOKEN not configured."
+    headers = {"Authorization": f"Bearer {HA_TOKEN}", "Content-Type": "application/json"}
+    try:
+        async with httpx.AsyncClient(timeout=5.0) as client:
+            if action == "get_states":
+                if entity_id == "all":
+                    r = await client.get(f"{HA_URL}/api/states", headers=headers)
+                    states = r.json()
+                    # Summarize lights/switches/sensors
+                    lights = [s for s in states if s["entity_id"].startswith("light.")]
+                    sensors = [s for s in states if s["entity_id"].startswith("sensor.")]
+                    on_lights = [s["entity_id"].split(".")[1] for s in lights if s["state"] == "on"]
+                    return (
+                        f"{len(lights)} lights ({len(on_lights)} on: {', '.join(on_lights[:5])}), "
+                        f"{len(sensors)} sensors"
+                    )
+                else:
+                    r = await client.get(f"{HA_URL}/api/states/{entity_id}", headers=headers)
+                    s = r.json()
+                    return f"{entity_id}: {s.get('state')} (attrs: {list(s.get('attributes', {}).keys())[:3]})"
+            else:
+                service = action.replace("turn_", "").replace("toggle", "toggle")
+                domain = entity_id.split(".")[0]
+                r = await client.post(
+                    f"{HA_URL}/api/services/{domain}/{action}",
+                    headers=headers,
+                    json={"entity_id": entity_id},
+                )
+                return f"{action} {entity_id}: {'done' if r.status_code in (200, 201) else r.text}"
+    except Exception as e:
+        return f"HA error: {e}"
+
+
+@llm.function_tool
+async def search_web(
+    query: Annotated[str, "Search query"],
+) -> str:
+    """Search the web using the local SearXNG instance."""
+    try:
+        async with httpx.AsyncClient(timeout=8.0) as client:
+            r = await client.get(
+                f"{SEARXNG_URL}/search",
+                params={"q": query, "format": "json", "categories": "general"},
+            )
+            r.raise_for_status()
+            data = r.json()
+        results = data.get("results", [])[:4]
+        if not results:
+            return "No results found."
+        parts = []
+        for res in results:
+            title = res.get("title", "")
+            content = res.get("content", "")[:150]
+            parts.append(f"• {title}: {content}")
+        return "\n".join(parts)
+    except Exception as e:
+        return f"Search failed: {e}"
+
+
+ALL_TOOLS = [infra_status, container_action, check_logs, read_alerts, home_assistant, search_web]

compose/hf-pdocker-01/voicecoach-v2/agent/vocal.py

@@ -0,0 +1,110 @@
+"""Async vocal analysis — runs background, never blocks TTS path."""
+import asyncio
+import io
+import logging
+import math
+import struct
+import wave
+from dataclasses import dataclass
+from typing import Callable, Optional
+
+import httpx
+
+logger = logging.getLogger(__name__)
+
+SPEECHBRAIN_URL = "http://speechbrain-service:8001"
+
+
+@dataclass
+class VocalState:
+    emotion: str = "neutral"
+    confidence: float = 0.0
+    energy: float = 0.0
+    pitch_hz: Optional[float] = None
+    rate: float = 0.0
+
+    def to_tag(self) -> str:
+        parts = [f"emotion={self.emotion}", f"energy={self.energy:.2f}"]
+        if self.pitch_hz:
+            parts.append(f"pitch={self.pitch_hz:.0f}hz")
+        if self.rate:
+            parts.append(f"rate={'fast' if self.rate > 3 else 'slow' if self.rate < 1.5 else 'normal'}")
+        return f"[VOCAL {' '.join(parts)}]"
+
+
+def compute_energy(audio_bytes: bytes) -> float:
+    if len(audio_bytes) < 2:
+        return 0.0
+    samples = struct.unpack_from("<" + "h" * (len(audio_bytes) // 2), audio_bytes)
+    rms = math.sqrt(sum(x * x for x in samples) / len(samples)) / 32768.0
+    return round(min(rms * 10, 1.0), 3)
+
+
+async def analyze_audio(audio_bytes: bytes) -> VocalState:
+    """Call SpeechBrain for emotion/pitch. Falls back to energy-only if unavailable."""
+    energy = compute_energy(audio_bytes)
+    state = VocalState(energy=energy)
+
+    try:
+        buf = io.BytesIO()
+        with wave.open(buf, "wb") as wf:
+            wf.setnchannels(1)
+            wf.setsampwidth(2)
+            wf.setframerate(16000)
+            wf.writeframes(audio_bytes)
+        wav_bytes = buf.getvalue()
+
+        async with httpx.AsyncClient(timeout=3.0) as client:
+            r = await client.post(
+                f"{SPEECHBRAIN_URL}/analyze",
+                files={"audio": ("u.wav", wav_bytes, "audio/wav")},
+            )
+            r.raise_for_status()
+            d = r.json()
+            state.emotion = d.get("emotion", "neutral")
+            state.confidence = d.get("emotion_confidence", 0.0)
+            state.pitch_hz = d.get("pitch_mean_hz")
+            state.rate = d.get("speaking_rate_approx", 0.0)
+    except Exception as e:
+        logger.debug("SpeechBrain unavailable, using energy-only: %s", e)
+
+    return state
+
+
+class VocalAnalyzer:
+    """Holds the last completed vocal state; updates async after each utterance."""
+
+    def __init__(self, on_update: Optional[Callable[[VocalState], None]] = None):
+        self._state = VocalState()
+        self._on_update = on_update
+        self._audio_buffer: list[bytes] = []
+        self._collecting = False
+
+    @property
+    def current(self) -> VocalState:
+        return self._state
+
+    def start_collecting(self):
+        self._collecting = True
+        self._audio_buffer = []
+
+    def feed(self, audio_chunk: bytes):
+        if self._collecting:
+            self._audio_buffer.append(audio_chunk)
+
+    def stop_collecting_and_analyze(self) -> asyncio.Task:
+        self._collecting = False
+        audio = b"".join(self._audio_buffer)
+        self._audio_buffer = []
+        return asyncio.create_task(self._analyze_bg(audio))
+
+    async def _analyze_bg(self, audio_bytes: bytes):
+        if not audio_bytes:
+            return
+        try:
+            state = await analyze_audio(audio_bytes)
+            self._state = state
+            if self._on_update:
+                self._on_update(state)
+        except Exception as e:
+            logger.warning("Vocal analysis failed: %s", e)

compose/hf-pdocker-01/voicecoach-v2/docker-compose.yml

@@ -0,0 +1,141 @@
+services:
+
+  # livekit-agents 1.5 worker + token/API server
+  voicecoach-agent:
+    build:
+      context: ./agent
+    image: voicecoach-agent:latest
+    container_name: voicecoach-agent
+    restart: unless-stopped
+    env_file: .env
+    environment:
+      - LIVEKIT_URL=ws://voicecoach-livekit:7880
+      - LIVEKIT_PUBLIC_URL=wss://voice.hobbs.farm
+      - SPEACHES_URL=http://192.168.86.27:8000
+      - OPENCLAW_URL=http://voicecoach-openclaw:3100
+      - DB_PATH=/data/sessions.db
+      - KOKORO_VOICE=af_nova
+    volumes:
+      - /mnt/docker-data/configs/voicecoach/sessions:/data
+    networks:
+      - voicecoach
+      - voicecoach_v1
+    mem_limit: 1G
+    memswap_limit: 1G
+    labels:
+      - "com.centurylinklabs.watchtower.enable=false"
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "50m"
+        max-file: "3"
+
+  # SvelteKit web client
+  voicecoach-web:
+    build:
+      context: ./web-client
+    image: voicecoach-web-v2:latest
+    container_name: voicecoach-web-v2
+    restart: unless-stopped
+    ports:
+      - "8085:80"
+    depends_on:
+      - voicecoach-agent
+    networks:
+      - voicecoach
+    mem_limit: 128M
+    labels:
+      - "com.centurylinklabs.watchtower.enable=false"
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "10m"
+        max-file: "3"
+
+  # LiveKit server — unchanged from v1
+  livekit-server:
+    image: livekit/livekit-server:latest
+    container_name: voicecoach-livekit
+    restart: unless-stopped
+    command:
+      - --config
+      - /etc/livekit/livekit.yaml
+      - --keys
+      - "${LIVEKIT_API_KEY}: ${LIVEKIT_API_SECRET}"
+    ports:
+      - "7880:7880"
+      - "7881:7881"
+      - "50000-50100:50000-50100/udp"
+    volumes:
+      - ./livekit/livekit.yaml:/etc/livekit/livekit.yaml:ro
+    networks:
+      - voicecoach
+    mem_limit: 512M
+    labels:
+      - "com.centurylinklabs.watchtower.enable=false"
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "50m"
+        max-file: "3"
+
+  # OpenClaw — LLM gateway with memory and tools
+  voicecoach-openclaw:
+    image: margaret-openclaw:latest
+    container_name: voicecoach-openclaw
+    restart: unless-stopped
+    user: "0:0"
+    ports:
+      - "3100:3100"
+    environment:
+      - NODE_ENV=production
+      - HOME=/home/glyptic
+      - USER=glyptic
+      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY}
+      - OPENCLAW_STATE_DIR=/home/glyptic/.voicecoach
+      - OPENCLAW_CONFIG_PATH=/home/glyptic/.voicecoach/openclaw.json
+    volumes:
+      - /mnt/infrastructure/voicecoach:/home/glyptic/.voicecoach
+    command: ["sh", "-c", "mkdir -p /home/glyptic && node --max-old-space-size=1500 /usr/local/lib/node_modules/openclaw/dist/index.js gateway --allow-unconfigured"]
+    networks:
+      - voicecoach
+    mem_limit: 2G
+    memswap_limit: 2G
+    labels:
+      - "com.centurylinklabs.watchtower.enable=false"
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "50m"
+        max-file: "3"
+
+  # SpeechBrain — async vocal/emotion analysis (optional, agent falls back gracefully)
+  speechbrain-service:
+    build:
+      context: ./speechbrain-service
+    image: voicecoach-speechbrain:latest
+    container_name: voicecoach-speechbrain
+    restart: unless-stopped
+    volumes:
+      - /mnt/docker-data/configs/voicecoach/speechbrain-models:/app/models
+    environment:
+      - MODEL_DIR=/app/models
+    networks:
+      - voicecoach
+    mem_limit: 3G
+    memswap_limit: 3G
+    labels:
+      - "com.centurylinklabs.watchtower.enable=false"
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "50m"
+        max-file: "3"
+
+networks:
+  voicecoach:
+    driver: bridge
+  # Join the v1 voicecoach network to reach the shared livekit + openclaw containers
+  voicecoach_v1:
+    external: true
+    name: voicecoach_voicecoach

compose/hf-pdocker-01/voicecoach-v2/livekit/livekit.yaml

@@ -0,0 +1,15 @@
+port: 7880
+rtc:
+  tcp_port: 7881
+  port_range_start: 50000
+  port_range_end: 50100
+  use_external_ip: true
+
+logging:
+  json: false
+  level: info
+
+room:
+  max_participants: 5
+  empty_timeout: 300
+  departure_timeout: 30

compose/hf-pdocker-01/voicecoach-v2/web-client/Dockerfile

@@ -0,0 +1,11 @@
+FROM node:20-alpine AS build
+WORKDIR /app
+COPY package.json .
+RUN npm install --legacy-peer-deps
+COPY . .
+RUN npm run build
+
+FROM nginx:alpine
+COPY --from=build /app/build /usr/share/nginx/html
+COPY nginx.conf /etc/nginx/conf.d/default.conf
+EXPOSE 80

compose/hf-pdocker-01/voicecoach-v2/web-client/nginx.conf

@@ -0,0 +1,16 @@
+server {
+    listen 80;
+    root /usr/share/nginx/html;
+    index index.html;
+
+    # Proxy API calls to the agent's FastAPI server
+    location /api/ {
+        proxy_pass http://voicecoach-agent:8080/api/;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+}

compose/hf-pdocker-01/voicecoach-v2/web-client/package.json

@@ -0,0 +1,21 @@
+{
+  "name": "voicecoach-v2-web",
+  "version": "2.0.0",
+  "private": true,
+  "scripts": {
+    "dev": "vite dev",
+    "build": "vite build",
+    "preview": "vite preview"
+  },
+  "type": "module",
+  "devDependencies": {
+    "@sveltejs/adapter-static": "^3.0.0",
+    "@sveltejs/kit": "^2.0.0",
+    "@sveltejs/vite-plugin-svelte": "^3.0.0",
+    "svelte": "^5.0.0",
+    "vite": "^5.0.0"
+  },
+  "dependencies": {
+    "livekit-client": "^2.5.0"
+  }
+}

compose/hf-pdocker-01/voicecoach-v2/web-client/src/app.css

@@ -0,0 +1,40 @@
+*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+
+:root {
+  --bg: #0f1117;
+  --surface: #1a1d27;
+  --surface2: #22263a;
+  --accent: #6c63ff;
+  --accent2: #4ecdc4;
+  --text: #e8eaf0;
+  --muted: #7b8094;
+  --danger: #ff5252;
+  --success: #4caf50;
+  --warn: #ffc107;
+  --radius: 12px;
+  --font: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
+}
+
+html, body { height: 100%; background: var(--bg); color: var(--text); font-family: var(--font); }
+
+button {
+  cursor: pointer;
+  border: none;
+  font-family: inherit;
+  font-size: 0.875rem;
+  font-weight: 500;
+  border-radius: var(--radius);
+  padding: 0.5rem 1.2rem;
+  transition: opacity 0.15s, transform 0.1s;
+}
+button:active { transform: scale(0.97); }
+button:disabled { opacity: 0.4; cursor: default; }
+
+.btn-primary { background: var(--accent); color: #fff; }
+.btn-primary:hover:not(:disabled) { opacity: 0.85; }
+.btn-danger  { background: var(--danger); color: #fff; }
+.btn-ghost   { background: var(--surface2); color: var(--text); }
+.btn-ghost:hover:not(:disabled) { background: #2d3147; }
+
+a { color: var(--accent2); text-decoration: none; }
+a:hover { text-decoration: underline; }

compose/hf-pdocker-01/voicecoach-v2/web-client/src/app.html

@@ -0,0 +1,12 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" />
+    <title>VoiceCoach</title>
+    %sveltekit.head%
+  </head>
+  <body>
+    <div>%sveltekit.body%</div>
+  </body>
+</html>

compose/hf-pdocker-01/voicecoach-v2/web-client/src/lib/livekit.js

@@ -0,0 +1,66 @@
+import { Room, RoomEvent, Track } from 'livekit-client';
+
+const LIVEKIT_URL = 'wss://voice.hobbs.farm';
+const API_BASE = '/api';
+
+export let room = null;
+
+export async function connect(identity, onEvent) {
+  const res = await fetch(`${API_BASE}/token`, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ identity: identity || `jeremy-${Date.now()}` }),
+  });
+  if (!res.ok) throw new Error(`Token fetch failed: ${res.status}`);
+  const { token, url } = await res.json();
+
+  room = new Room({
+    audioCaptureDefaults: {
+      echoCancellation: true,
+      noiseSuppression: true,
+      autoGainControl: true,
+    },
+  });
+
+  room.on(RoomEvent.Connected, () => onEvent({ type: 'connected' }));
+  room.on(RoomEvent.Disconnected, (reason) => onEvent({ type: 'disconnected', reason }));
+  room.on(RoomEvent.ParticipantConnected, (p) => onEvent({ type: 'participant_joined', identity: p.identity }));
+  room.on(RoomEvent.ParticipantDisconnected, (p) => onEvent({ type: 'participant_left', identity: p.identity }));
+
+  room.on(RoomEvent.TrackSubscribed, (track, _pub, participant) => {
+    if (track.kind === Track.Kind.Audio) {
+      const el = track.attach();
+      el.autoplay = true;
+      document.body.appendChild(el);
+      onEvent({ type: 'audio_attached', identity: participant.identity });
+    }
+  });
+
+  room.on(RoomEvent.TrackUnsubscribed, (track) => {
+    track.detach().forEach(el => el.remove());
+  });
+
+  room.on(RoomEvent.DataReceived, (payload, participant) => {
+    try {
+      const msg = JSON.parse(new TextDecoder().decode(payload));
+      onEvent(msg);
+    } catch (_) {}
+  });
+
+  await room.connect(url || LIVEKIT_URL, token);
+  await room.localParticipant.setMicrophoneEnabled(true);
+  return room;
+}
+
+export async function disconnect() {
+  if (room) {
+    await room.disconnect();
+    room = null;
+  }
+}
+
+export function sendData(payload) {
+  if (!room?.localParticipant) return;
+  const data = new TextEncoder().encode(JSON.stringify(payload));
+  room.localParticipant.publishData(data, { reliable: true });
+}

compose/hf-pdocker-01/voicecoach-v2/web-client/src/routes/+layout.js

@@ -0,0 +1,2 @@
+export const prerender = false;
+export const ssr = false;

compose/hf-pdocker-01/voicecoach-v2/web-client/src/routes/+layout.svelte

@@ -0,0 +1,6 @@
+<script>
+  import '../app.css';
+  let { children } = $props();
+</script>
+
+{@render children()}

compose/hf-pdocker-01/voicecoach-v2/web-client/src/routes/+page.svelte

@@ -0,0 +1,328 @@
+<script>
+  import { connect, disconnect, sendData } from '$lib/livekit.js';
+  import { onDestroy } from 'svelte';
+
+  let status = 'disconnected'; // disconnected | connecting | connected
+  let mode = 'coaching';
+  let transcript = [];    // {role, text, partial, id}
+  let tools = [];         // {action, detail, result, done}
+  let vocal = null;       // {energy, emotion, pitch_hz}
+  let error = '';
+  let nextId = 0;
+
+  const MODES = ['coaching', 'vent', 'practice', 'briefing'];
+
+  function handleEvent(ev) {
+    switch (ev.type) {
+      case 'connected':
+        status = 'connected';
+        error = '';
+        break;
+      case 'disconnected':
+        status = 'disconnected';
+        break;
+      case 'partial_transcript':
+        if (ev.speaker === 'user') {
+          const last = transcript[transcript.length - 1];
+          if (last && last.partial && last.role === 'user') {
+            transcript[transcript.length - 1] = { ...last, text: ev.text };
+          } else {
+            transcript = [...transcript, { role: 'user', text: ev.text, partial: true, id: nextId++ }];
+          }
+        }
+        break;
+      case 'final_transcript':
+        if (ev.speaker === 'user') {
+          // Replace last partial or add new
+          const lastIdx = transcript.findLastIndex(t => t.partial && t.role === 'user');
+          if (lastIdx >= 0) {
+            transcript = transcript.map((t, i) =>
+              i === lastIdx ? { ...t, text: ev.text, partial: false } : t
+            );
+          } else {
+            transcript = [...transcript, { role: 'user', text: ev.text, partial: false, id: nextId++ }];
+          }
+        }
+        break;
+      case 'agent_response':
+        transcript = [...transcript, { role: 'assistant', text: ev.text, partial: false, id: nextId++ }];
+        break;
+      case 'tool_start':
+        tools = [...tools, { action: ev.action, detail: ev.detail || '', result: '', done: false, id: nextId++ }];
+        break;
+      case 'tool_complete':
+        tools = tools.map(t =>
+          !t.done && t.action === ev.action ? { ...t, result: ev.result, done: true } : t
+        );
+        break;
+      case 'vocal_state':
+        vocal = { energy: ev.energy, emotion: ev.emotion, pitch_hz: ev.pitch_hz };
+        break;
+      case 'mode_ack':
+        mode = ev.mode;
+        break;
+    }
+  }
+
+  async function startSession() {
+    status = 'connecting';
+    error = '';
+    transcript = [];
+    tools = [];
+    try {
+      await connect(null, handleEvent);
+    } catch (e) {
+      status = 'disconnected';
+      error = e.message;
+    }
+  }
+
+  async function endSession() {
+    await disconnect();
+    status = 'disconnected';
+  }
+
+  function setMode(m) {
+    mode = m;
+    sendData({ type: 'mode_change', mode: m });
+  }
+
+  onDestroy(() => disconnect());
+
+  $: energyPct = vocal ? Math.round(vocal.energy * 100) : 0;
+  $: vadRing = status === 'connected' && vocal && vocal.energy > 0.1;
+</script>
+
+<main>
+  <header>
+    <div class="logo">
+      <div class="logo-dot" class:connected={status === 'connected'} class:connecting={status === 'connecting'}></div>
+      <span>VoiceCoach</span>
+    </div>
+    <nav>
+      <a href="/history">History</a>
+    </nav>
+  </header>
+
+  <div class="content">
+    <!-- Mode bar -->
+    <div class="mode-bar" class:disabled={status !== 'connected'}>
+      {#each MODES as m}
+        <button
+          class="mode-chip"
+          class:active={mode === m}
+          disabled={status !== 'connected'}
+          on:click={() => setMode(m)}
+        >{m}</button>
+      {/each}
+    </div>
+
+    <!-- Transcript -->
+    <div class="transcript" id="transcript-scroll">
+      {#if transcript.length === 0 && status === 'disconnected'}
+        <p class="hint">Press Start to connect your voice.</p>
+      {:else if transcript.length === 0 && status !== 'disconnected'}
+        <p class="hint">Listening…</p>
+      {/if}
+      {#each transcript as msg (msg.id)}
+        <div class="msg msg-{msg.role}" class:partial={msg.partial}>
+          <span class="msg-label">{msg.role === 'user' ? 'You' : 'Assistant'}</span>
+          <span class="msg-text">{msg.text}</span>
+        </div>
+      {/each}
+    </div>
+
+    <!-- Tool activity feed -->
+    {#if tools.length > 0}
+      <div class="tool-feed">
+        {#each tools.slice(-5) as t (t.id)}
+          <div class="tool-item" class:done={t.done}>
+            <span class="tool-icon">{t.done ? '✓' : '⚙'}</span>
+            <span class="tool-text">{t.action}{t.detail ? ` — ${t.detail}` : ''}</span>
+          </div>
+        {/each}
+      </div>
+    {/if}
+
+    <!-- Vocal meter -->
+    {#if status === 'connected'}
+      <div class="vocal-row">
+        <div class="energy-bar">
+          <div class="energy-fill" style="width: {energyPct}%"></div>
+        </div>
+        {#if vocal && vocal.emotion && vocal.emotion !== 'neutral'}
+          <span class="emotion-tag">{vocal.emotion}</span>
+        {/if}
+      </div>
+    {/if}
+
+    <!-- Error -->
+    {#if error}
+      <p class="error">{error}</p>
+    {/if}
+
+    <!-- Controls -->
+    <div class="controls">
+      {#if status === 'disconnected'}
+        <button class="btn-primary big-btn" on:click={startSession}>Start Session</button>
+      {:else if status === 'connecting'}
+        <button class="btn-ghost big-btn" disabled>Connecting…</button>
+      {:else}
+        <button class="btn-danger big-btn" on:click={endSession}>End Session</button>
+      {/if}
+    </div>
+  </div>
+
+  <!-- VAD ring -->
+  {#if vadRing}
+    <div class="vad-ring" style="opacity: {Math.min(vocal.energy * 3, 1)}"></div>
+  {/if}
+</main>
+
+<style>
+  main {
+    min-height: 100dvh;
+    display: flex;
+    flex-direction: column;
+    max-width: 680px;
+    margin: 0 auto;
+    padding: 0 1rem;
+    position: relative;
+  }
+
+  header {
+    display: flex;
+    align-items: center;
+    justify-content: space-between;
+    padding: 1rem 0;
+    border-bottom: 1px solid #2a2d3e;
+  }
+
+  .logo { display: flex; align-items: center; gap: 0.5rem; font-weight: 600; font-size: 1.1rem; }
+
+  .logo-dot {
+    width: 10px; height: 10px;
+    border-radius: 50%;
+    background: var(--muted);
+    transition: background 0.3s;
+  }
+  .logo-dot.connecting { background: var(--warn); animation: pulse 1s infinite; }
+  .logo-dot.connected  { background: var(--success); }
+
+  nav a { font-size: 0.875rem; color: var(--muted); }
+
+  .content { flex: 1; display: flex; flex-direction: column; padding: 1rem 0; gap: 1rem; }
+
+  .mode-bar {
+    display: flex; gap: 0.5rem; flex-wrap: wrap;
+  }
+  .mode-bar.disabled { opacity: 0.5; }
+
+  .mode-chip {
+    padding: 0.35rem 0.9rem;
+    border-radius: 999px;
+    background: var(--surface2);
+    color: var(--muted);
+    font-size: 0.8rem;
+    text-transform: capitalize;
+    border: 1px solid transparent;
+  }
+  .mode-chip.active {
+    background: var(--accent);
+    color: #fff;
+    border-color: var(--accent);
+  }
+
+  .transcript {
+    flex: 1;
+    min-height: 300px;
+    background: var(--surface);
+    border-radius: var(--radius);
+    padding: 1rem;
+    overflow-y: auto;
+    display: flex;
+    flex-direction: column;
+    gap: 0.75rem;
+  }
+
+  .hint { color: var(--muted); font-size: 0.875rem; text-align: center; margin: auto; }
+
+  .msg { display: flex; flex-direction: column; gap: 0.15rem; }
+
+  .msg-label {
+    font-size: 0.7rem;
+    font-weight: 600;
+    text-transform: uppercase;
+    letter-spacing: 0.05em;
+    color: var(--muted);
+  }
+
+  .msg-user .msg-label  { color: var(--accent2); }
+  .msg-assistant .msg-label { color: var(--accent); }
+
+  .msg-text { font-size: 0.95rem; line-height: 1.5; }
+  .msg.partial .msg-text { opacity: 0.6; font-style: italic; }
+
+  .tool-feed {
+    background: var(--surface);
+    border-radius: var(--radius);
+    padding: 0.75rem 1rem;
+    display: flex;
+    flex-direction: column;
+    gap: 0.3rem;
+  }
+
+  .tool-item {
+    display: flex; align-items: center; gap: 0.5rem;
+    font-size: 0.8rem; color: var(--muted);
+  }
+  .tool-item.done { color: var(--success); }
+  .tool-icon { font-size: 0.9rem; }
+
+  .vocal-row {
+    display: flex; align-items: center; gap: 0.75rem;
+  }
+
+  .energy-bar {
+    flex: 1; height: 6px; border-radius: 3px;
+    background: var(--surface2); overflow: hidden;
+  }
+  .energy-fill {
+    height: 100%; border-radius: 3px;
+    background: linear-gradient(90deg, var(--accent2), var(--accent));
+    transition: width 0.2s;
+  }
+
+  .emotion-tag {
+    font-size: 0.75rem; color: var(--muted);
+    background: var(--surface2);
+    padding: 0.2rem 0.5rem;
+    border-radius: 999px;
+    text-transform: capitalize;
+  }
+
+  .error { color: var(--danger); font-size: 0.85rem; }
+
+  .controls { display: flex; justify-content: center; padding-bottom: 1.5rem; }
+
+  .big-btn {
+    width: 100%; max-width: 320px; padding: 0.85rem;
+    font-size: 1rem; border-radius: var(--radius);
+  }
+
+  .vad-ring {
+    position: fixed; inset: 0; pointer-events: none;
+    border: 3px solid var(--accent2);
+    border-radius: inherit;
+    transition: opacity 0.1s;
+  }
+
+  @keyframes pulse {
+    0%, 100% { opacity: 1; }
+    50% { opacity: 0.4; }
+  }
+
+  @media (max-width: 480px) {
+    .big-btn { max-width: 100%; }
+  }
+</style>

compose/hf-pdocker-01/voicecoach-v2/web-client/src/routes/history/+page.svelte

@@ -0,0 +1,164 @@
+<script>
+  import { onMount } from 'svelte';
+
+  let sessions = [];
+  let expanded = null;
+  let messages = {};
+  let loading = true;
+
+  onMount(async () => {
+    try {
+      const res = await fetch('/api/sessions?limit=30');
+      sessions = await res.json();
+    } catch (e) {
+      console.error(e);
+    } finally {
+      loading = false;
+    }
+  });
+
+  async function toggleSession(id) {
+    if (expanded === id) { expanded = null; return; }
+    expanded = id;
+    if (!messages[id]) {
+      const res = await fetch(`/api/sessions/${id}/messages`);
+      messages[id] = await res.json();
+    }
+  }
+
+  function fmt(ts) {
+    if (!ts) return '';
+    return new Date(ts * 1000).toLocaleString();
+  }
+
+  function duration(s) {
+    if (!s.ended_at || !s.started_at) return '';
+    const mins = Math.round((s.ended_at - s.started_at) / 60);
+    return mins < 1 ? '<1m' : `${mins}m`;
+  }
+</script>
+
+<main>
+  <header>
+    <a href="/" class="back">← Back</a>
+    <h1>Session History</h1>
+  </header>
+
+  {#if loading}
+    <p class="hint">Loading…</p>
+  {:else if sessions.length === 0}
+    <p class="hint">No sessions yet.</p>
+  {:else}
+    <div class="session-list">
+      {#each sessions as s}
+        <div class="session-card" class:open={expanded === s.id}>
+          <button class="session-header" on:click={() => toggleSession(s.id)}>
+            <div class="session-meta">
+              <span class="session-date">{fmt(s.started_at)}</span>
+              <span class="session-chips">
+                <span class="chip mode-chip">{s.mode || 'coaching'}</span>
+                {#if duration(s)}
+                  <span class="chip">{duration(s)}</span>
+                {/if}
+              </span>
+            </div>
+            {#if s.summary}
+              <p class="session-summary">{s.summary}</p>
+            {/if}
+            <span class="toggle-icon">{expanded === s.id ? '▲' : '▼'}</span>
+          </button>
+
+          {#if expanded === s.id && messages[s.id]}
+            <div class="transcript">
+              {#each messages[s.id] as msg}
+                <div class="msg msg-{msg.role}">
+                  <span class="msg-label">
+                    {msg.role === 'user' ? 'You' : 'Assistant'}
+                    {#if msg.vocal_emotion && msg.vocal_emotion !== 'neutral'}
+                      <span class="vocal-badge">{msg.vocal_emotion}</span>
+                    {/if}
+                  </span>
+                  <span class="msg-text">{msg.content}</span>
+                </div>
+              {/each}
+            </div>
+          {/if}
+        </div>
+      {/each}
+    </div>
+  {/if}
+</main>
+
+<style>
+  main {
+    max-width: 680px; margin: 0 auto; padding: 1rem;
+    min-height: 100dvh;
+  }
+
+  header {
+    display: flex; align-items: center; gap: 1rem;
+    padding: 1rem 0; border-bottom: 1px solid #2a2d3e; margin-bottom: 1rem;
+  }
+  header h1 { font-size: 1.1rem; font-weight: 600; }
+  .back { font-size: 0.875rem; color: var(--muted); }
+
+  .hint { color: var(--muted); text-align: center; padding: 2rem; }
+
+  .session-list { display: flex; flex-direction: column; gap: 0.75rem; }
+
+  .session-card {
+    background: var(--surface);
+    border-radius: var(--radius);
+    overflow: hidden;
+    border: 1px solid transparent;
+    transition: border-color 0.2s;
+  }
+  .session-card.open { border-color: var(--accent); }
+
+  .session-header {
+    width: 100%; text-align: left;
+    background: none; padding: 1rem;
+    display: flex; flex-direction: column; gap: 0.4rem;
+    border-radius: 0; color: var(--text);
+    position: relative;
+  }
+
+  .session-meta { display: flex; align-items: center; gap: 0.5rem; flex-wrap: wrap; }
+  .session-date { font-size: 0.8rem; color: var(--muted); }
+
+  .session-chips { display: flex; gap: 0.35rem; }
+  .chip {
+    font-size: 0.7rem; padding: 0.15rem 0.5rem;
+    border-radius: 999px; background: var(--surface2); color: var(--muted);
+  }
+  .mode-chip { color: var(--accent2); }
+
+  .session-summary { font-size: 0.85rem; color: var(--text); line-height: 1.4; }
+
+  .toggle-icon {
+    position: absolute; right: 1rem; top: 1rem;
+    font-size: 0.7rem; color: var(--muted);
+  }
+
+  .transcript {
+    padding: 1rem; border-top: 1px solid #2a2d3e;
+    display: flex; flex-direction: column; gap: 0.75rem;
+  }
+
+  .msg { display: flex; flex-direction: column; gap: 0.1rem; }
+  .msg-label {
+    font-size: 0.7rem; font-weight: 600; text-transform: uppercase;
+    letter-spacing: 0.05em; color: var(--muted);
+    display: flex; align-items: center; gap: 0.4rem;
+  }
+  .msg-user .msg-label { color: var(--accent2); }
+  .msg-assistant .msg-label { color: var(--accent); }
+  .msg-text { font-size: 0.9rem; line-height: 1.5; }
+
+  .vocal-badge {
+    font-size: 0.65rem; background: var(--surface2);
+    padding: 0.1rem 0.4rem; border-radius: 999px;
+    text-transform: capitalize; color: var(--muted);
+    font-weight: 400; letter-spacing: 0;
+  }
+</style>

compose/hf-pdocker-01/voicecoach-v2/web-client/svelte.config.js

@@ -0,0 +1,7 @@
+import adapter from '@sveltejs/adapter-static';
+
+export default {
+  kit: {
+    adapter: adapter({ fallback: 'index.html' }),
+  },
+};

compose/hf-pdocker-01/voicecoach-v2/web-client/vite.config.js

@@ -0,0 +1,8 @@
+import { sveltekit } from '@sveltejs/kit/vite'
+
+/** @type {import('vite').UserConfig} */
+const config = {
+  plugins: [sveltekit()]
+}
+
+export default config

compose/hf-pdocker-02/unifi/docker-compose.yml

@@ -1,67 +1,52 @@
 services:
-  unifi:
+  unifi-os-server:
-    image: lscr.io/linuxserver/unifi-network-application:latest
+    image: ghcr.io/lemker/unifi-os-server:latest
-    container_name: unifi
+    container_name: unifi-os-server
     restart: unless-stopped
+    cgroup: host
+    cap_add:
+      - NET_RAW
+      - NET_ADMIN
+    extra_hosts:
+      host.docker.internal: host-gateway
+    tmpfs:
+      - /run:exec
+      - /run/lock
+      - /tmp:exec
+      - /var/lib/journal
+      - /var/opt/unifi/tmp:size=64m
     environment:
-      - PUID=1000
+      - UOS_SYSTEM_IP=192.168.86.100
-      - PGID=1000
-      - TZ=America/Chicago
-      - MONGO_USER=${UNIFI_MONGO_USER}
-      - MONGO_PASS=${UNIFI_MONGO_PASS}
-      - MONGO_HOST=unifi-db
-      - MONGO_PORT=27017
-      - MONGO_DBNAME=unifi
     volumes:
-      - /mnt/docker-data/configs/unifi/data:/config
+      - /sys/fs/cgroup:/sys/fs/cgroup:rw
+      # /persistent on NAS (config backups, survives reinstall)
+      - /mnt/docker-data/configs/unifi-os/persistent:/persistent
+      # All other dirs local — NFS root_squash blocks the chown calls these services need
+      - /var/lib/unifi-os/var-log:/var/log
+      - /var/lib/unifi-os/data:/data
+      - /var/lib/unifi-os/srv:/srv
+      - /var/lib/unifi-os/var-lib-unifi:/var/lib/unifi
+      - /var/lib/unifi-os/var-lib-mongodb:/var/lib/mongodb
+      - /var/lib/unifi-os/etc-rabbitmq-ssl:/etc/rabbitmq/ssl
     ports:
-      - "8443:8443"
+      - "11443:443"
-      - "3478:3478/udp"
-      - "10001:10001/udp"
       - "8080:8080"
-      - "1900:1900/udp"
+      - "3478:3478/udp"
-      - "8843:8843"
+      - "10003:10003/udp"
-      - "8880:8880"
       - "6789:6789"
+      - "8444:8444"
+      - "8880:8880"
+      - "8881:8881"
+      - "8882:8882"
+      - "5671:5671"
       - "5514:5514/udp"
-    depends_on:
+      - "9543:9543"
-      unifi-db:
+      - "5005:5005"
-        condition: service_healthy
+      - "127.0.0.1:11084:11084"
-    networks:
-      - unifi-internal
-    mem_limit: 1G
-    memswap_limit: 1G
-    logging:
-      driver: "json-file"
-      options:
-        max-size: "50m"
-        max-file: "3"
-
-  unifi-db:
-    image: mongo:7.0
-    container_name: unifi-db
-    restart: unless-stopped
-    user: "1024:100"
-    volumes:
-      - /mnt/docker-data/databases/unifi-db:/data/db
-    networks:
-      - unifi-internal
     labels:
       - "com.centurylinklabs.watchtower.enable=false"
-    mem_limit: 1G
-    memswap_limit: 1G
-    healthcheck:
-      test: ["CMD-SHELL", "mongosh --eval 'db.adminCommand(\"ping\")' --quiet"]
-      interval: 30s
-      timeout: 10s
-      retries: 3
-      start_period: 30s
     logging:
       driver: "json-file"
       options:
-        max-size: "50m"
+        max-size: "100m"
         max-file: "3"
-
-networks:
-  unifi-internal:
-    driver: bridge