📝 Voice recorders as first-class input sources (Inbox) #17875

Why

Voice is becoming a primary way maintainers capture intent: a Plaud recording in the car, a Wispr Flow dictation, a meeting transcript. Today those end up as Knowledge facts (PR #17821) and go no further unless someone on a laptop runs a local agent. The hive should treat voice recorders as first-class input sources: connect once, then triage every recording from the hive UI into real work — an RFC with child issues (spektacular), a dibs idea, or knowledge only — with the hive doing all the execution inside the spoke.

Architecture

 Sources (connect in Knowledge → Integrations)        Inbox (triage)            Destinations
 ┌───────────┐  Source interface                  ┌──────────────────┐        ┌──────────────┐
 │ plaud     │  List() / Fetch(id) / Auth()  ───▶ │ items keyed      │ ─────▶ │ knowledge    │ (always; items ARE facts)
 │ wisprflow │                                    │ (source,item_id) │        │ spek_rfc     │ spektacular voice --publish → RFC + children
 │ file-drop │                                    │ + RouteState per │        │ dibs         │ POST /api/ideas (private draft)
 │ webhook   │                                    │   destination    │        └──────────────┘
 │ …         │                                    └──────────────────┘
 └───────────┘                 routing rules: (source?, title_prefix|tag) → destination[, repo]

• Source — List(), Fetch(id) (title, summary, transcript, provenance URI <source>://recordings/<id>), Auth() (connected/pending/account). Implemented by plaud, wisprflow (✨ knowledge: Wispr Flow dictation history as a knowledge source #17855 lands it as a connector → adapt), file-drop, webhook, and future recorders. First implementation reads the facts the connectors already write (source, source_id, attr_*), so any connector that writes recording facts is a Source with zero Inbox changes.
• Inbox — items keyed (source, item_id), never Plaud-specific. Per-item per-destination RouteState{status: queued|running|filed|delegated|failed, url, children[], error}, persisted next to connector state (connector-state/_inbox.json). Unprocessed = not dismissed and no route.
• Destination — Route(ctx, item, content, req) (Result, error). knowledge (implicit), spek_rfc (spektacular voice --from stdin --title T --publish --repo R, spektacular PR ✨ voice: draft a spec from a Plaud/Wispr/file/stdin voice note and publish it as an RFC for a hive spektacular#123; JSON output when --format json exists, printed-URL parsing otherwise; agent-kick fallback via inbox.spek.agent until a release carries voice), dibs (POST {url}/api/ideas, Bearer inbox.dibs.token_env).
• Routing rules — inbox.rules[] {source?, title_prefix|tag, destination, repo?}, first match wins, applied once per new item after each connector sync; manual triage otherwise.
• Hosted OAuth contract — a Source's Auth() must be completable from the browser against the hive's public URL: POST /api/knowledge/connectors/{name}/auth/connect → auth_url; callback /api/knowledge/connectors/{name}/auth/callback. Limitation: Plaud's OAuth client is hard-wired to http://localhost:8199/auth/callback, so for Plaud the contract is satisfied by POST …/auth/complete (paste the redirect URL the browser landed on, forwarded in-pod while the login is pending; or paste ~/.plaud/tokens-mcp.json). Browser-only redirect for Plaud needs Plaud to allow extra redirect URIs.
• UI — Integrations = connect/disconnect only (card shows state + "Open Inbox"). Inbox = one left-nav entry (Intelligence, badge = unprocessed) listing items with source icon, title, date, duration, excerpt, state pills, actions → RFC (repo picker), → dibs, Knowledge only, Retry, bulk select, ⚙ auto-routing drawer. Settings → Inbox section later (inbox.* parity).
• Hub rollup (later) — hub shows per-spoke unprocessed counts; no hub-side routing.

Future sources (research: API availability)

Two generic sources cover the long tail: webhook (POST transcript JSON to the hive) and file-drop (watch a folder / upload).

Children

• Inbox core + API + nav (pkg/inbox, /api/inbox*, Inbox section, sidebar badge) — ✨ Inbox: Inbox core + API + nav #17876
• Plaud source onto the Source interface (list/fetch/auth adapter over the plaud connector) — ✨ Inbox: Plaud source onto the Source interface #17877
• Wispr Flow source (✨ knowledge: Wispr Flow dictation history as a knowledge source #17855 lands as connector → adapt onto Source) — ✨ Inbox: Wispr Flow source #17878
• spek_rfc destination (spektacular voice --publish, JSON/URL parsing, agent fallback) — ✨ Inbox: spek_rfc destination #17879
• dibs destination (POST /api/ideas, provenance, idea URL) — ✨ Inbox: dibs destination #17880
• Hosted OAuth callback / token-paste (/auth/complete, Plaud localhost limitation) — ✨ Inbox: Hosted OAuth callback / token-paste #17881
• Docs page src/docs/inbox-voice-sources.md + quickstart link from the Integrations card — ✨ Inbox: Docs page + quickstart link #17882
• Settings parity + inbox.* config (Settings → Inbox section) — ✨ Inbox: Settings parity + inbox.* config #17883
• Ship spektacular in the hive image (Dockerfile, pinned release, amd64/arm64) — ✨ Inbox: ship spektacular in the hive image #17888
• Tests / ratchets (state transitions, rules, prompt rendering, publish-output fixture, API handlers) — ✨ Inbox: Tests / ratchets #17884