Bring the workshop up on macOS: Metal voice, dylib provisioning, webview mic capture

.github/workflows/ci.yml

@@ -26,20 +26,20 @@ jobs:
         run: cargo fmt --all --check
 
       - name: Clippy
-        run: cargo clippy --workspace --exclude promptforge-wb --exclude promptforge-wb-server --all-targets --all-features -- -D warnings
+        run: cargo clippy --workspace --exclude promptforge-ws --exclude promptforge-ws-server --all-targets --all-features -- -D warnings
 
       - name: Test
-        run: cargo test --locked --workspace --exclude promptforge-wb --exclude promptforge-wb-server --all-features
+        run: cargo test --locked --workspace --exclude promptforge-ws --exclude promptforge-ws-server --all-features
 
       - name: Doctests
-        run: cargo test --workspace --exclude promptforge-wb --exclude promptforge-wb-server --doc
+        run: cargo test --workspace --exclude promptforge-ws --exclude promptforge-ws-server --doc
 
       - name: Docs
         env:
           RUSTDOCFLAGS: -D warnings
-        run: cargo doc --workspace --no-deps --all-features --exclude promptforge-wb --exclude promptforge-wb-server
+        run: cargo doc --workspace --no-deps --all-features --exclude promptforge-ws --exclude promptforge-ws-server
 
-  check-workbench:
+  check-workshop:
     runs-on: windows-latest
     steps:
       - uses: actions/checkout@v4
@@ -56,14 +56,17 @@ jobs:
           node-version: 22
 
       - name: Install UI dependencies
-        working-directory: crates/promptforge-wb-server/ui
+        working-directory: crates/promptforge-ws-server/ui
         run: npm ci
 
-      - name: Clippy (workbench)
-        run: cargo clippy -p promptforge-wb -p promptforge-wb-server --all-targets -- -D warnings
+      # --no-default-features: the desktop crate defaults to the cuda
+      # feature, and windows-latest has no CUDA toolkit; CI builds the
+      # CPU-only whisper path instead.
+      - name: Clippy (workshop)
+        run: cargo clippy -p promptforge-ws -p promptforge-ws-server --all-targets --no-default-features -- -D warnings
 
-      - name: Test (workbench)
-        run: cargo test --locked -p promptforge-wb -p promptforge-wb-server
+      - name: Test (workshop)
+        run: cargo test --locked -p promptforge-ws -p promptforge-ws-server --no-default-features
 
   msrv:
     runs-on: ubuntu-latest
@@ -77,8 +80,8 @@ jobs:
 
       - name: Build and test on MSRV
         run: |
-          cargo build --locked --workspace --exclude promptforge-wb --exclude promptforge-wb-server --all-features
-          cargo test --locked --workspace --exclude promptforge-wb --exclude promptforge-wb-server --all-features
+          cargo build --locked --workspace --exclude promptforge-ws --exclude promptforge-ws-server --all-features
+          cargo test --locked --workspace --exclude promptforge-ws --exclude promptforge-ws-server --all-features
 
   supply-chain:
     runs-on: ubuntu-latest

.gitignore

@@ -5,10 +5,10 @@
 /local/
 /guide/book/
 *.env
-# Voice test fixtures, downloaded out of band (see design-promptforge-wb-1.md).
-/crates/promptforge-wb-server/tests/fixtures/
+# Voice test fixtures, downloaded out of band (see design-promptforge-ws-1.md).
+/crates/promptforge-ws-server/tests/fixtures/
 # UI build pipeline: npm install target and esbuild output (rebuilt by build.rs).
-/crates/promptforge-wb-server/ui/node_modules/
-/crates/promptforge-wb-server/ui/dist/
-# Workbench tape, written to the cwd when the server runs from the repo root.
+/crates/promptforge-ws-server/ui/node_modules/
+/crates/promptforge-ws-server/ui/dist/
+# Workshop tape, written to the cwd when the server runs from the repo root.
 /tape.jsonl

AGENTS.md

@@ -10,5 +10,24 @@ This rule outranks every other rule here. Before you add a frontmatter field, a
 
 - After completing work (compiles + tests pass), update README.md if the public surface changed.
 - Every public type, function, and module must have a `///` doc comment. `cargo doc` is the project documentation.
+- Each crate's own AGENTS.md binds its subtree. Read the ones governing the paths you touch before writing or reviewing code.
+- The existing test suite stays green and intact during refactors: fix forward; never rewrite a test to make it pass.
+- Library and serve paths never call `process::exit` or install process-global state; failures return through the spawn handshake.
 - Do NOT look at files outside this repo for reference.
 - The plan is the spec. Work from the plan and AGENTS.md only.
+
+## Comments
+
+`///` doc comments on public items are mandatory (above) and are not what this section governs. Any other comment earns its place by exactly four things: a non-obvious why, an invisible constraint no type or test enforces, an external-bug workaround, or a subtle ordering requirement. Comments that narrate what the code already says are deleted on sight. A module doc earns its place by documenting the domain, not by restating the file name.
+
+Every platform or external-bug workaround carries its upstream issue URL inline, in the comment that explains it. When the workaround dies, the URL says when it can be buried.
+
+```rust
+// wry's drag-drop handler suppresses HTML5 drag events on Windows
+// (https://github.com/tauri-apps/tauri/issues/15138), so ...
+```
+
+## Verify
+
+- Rust: `cargo test` at the workspace root.
+- UI: `npm run typecheck && npm test` in `crates/promptforge-ws-server/ui`.

CHANGELOG.md

@@ -5,6 +5,17 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+### Added
+
+- promptforge-ws / promptforge-gateway / promptforge-ws-server: `metal` / `workshop-metal` / `metal` feature chain building the whisper voice engine with Metal acceleration, making workshop voice available on macOS (`cargo build -p promptforge-ws --no-default-features --features metal`)
+
+### Fixed
+
+- promptforge-gateway: the archive extractor now materializes tar symlink entries as regular-file copies of their targets (confined, chain-following, cycle-rejecting), so the macOS llama.cpp release tarballs, which ship dylibs behind versioned symlink chains, provision instead of failing with an unsafe-entry error
+- promptforge-ws: microphone capture works in the macOS webview; the shell builds the webview configuration itself to allow capture on the plain-http loopback origin, and embeds an Info.plist with `NSMicrophoneUsageDescription` in the executable so WKWebView exposes `navigator.mediaDevices`
+
 ## [0.1.0] - 2026-08-12
 
 ### Added

Cargo.toml

@@ -11,10 +11,11 @@ repository = "https://github.com/cppalliance/promptforge"
 
 [workspace.dependencies]
 promptforge-core = { path = "crates/promptforge-core", version = "0.1.0" }
+promptforge-gateway = { path = "crates/promptforge-gateway", version = "0.1.0" }
 promptforge-gateway-config = { path = "crates/promptforge-gateway-config", version = "0.1.0" }
 promptforge-webfetch = { path = "crates/promptforge-webfetch", version = "0.1.0" }
 promptforge-tool-picker = { path = "crates/promptforge-tool-picker", version = "0.1.0" }
-promptforge-wb-server = { path = "crates/promptforge-wb-server", version = "0.1.0" }
+promptforge-ws-server = { path = "crates/promptforge-ws-server", version = "0.1.0" }
 pulldown-cmark = "0.12"
 serde = { version = "1", features = ["derive"] }
 serde_yaml_ng = "0.10"
@@ -27,7 +28,10 @@ htmd = "0.5"
 mime = "0.3"
 encoding_rs = "0.8"
 url = "2"
+# Percent-decoding for path parameters; already in the tree as url's own core.
+percent-encoding = "2"
 ipnet = "2"
+dunce = "1"
 tokio = { version = "1", features = ["macros", "rt-multi-thread", "net", "time", "sync"] }
 thiserror = "2"
 anyhow = "1"
@@ -54,7 +58,7 @@ rmcp = { version = "3.1.0", features = [
 ] }
 tower = { version = "0.5", features = ["util"] }
 arc-swap = "1"
-# Serves the workbench UI: reads ui/dist from disk in debug builds, embeds it
+# Serves the workshop UI: reads ui/dist from disk in debug builds, embeds it
 # into the binary in release builds.
 rust-embed = "8"
 glob = "0.3"
@@ -93,6 +97,8 @@ wry = "0.56"
 tao = "0.36"
 # Opens a URL in the system browser for the windowless server frame.
 open = "5"
+# Decodes the bundled program-icon PNG into RGBA for the tao window icon.
+png = "0.18"
 
 [workspace.lints.rust]
 unsafe_code = "forbid"

README.md

@@ -7,7 +7,7 @@
 
 A runtime that executes AI prompt pipelines defined in a single markdown file. The markdown is the program, the model is the CPU. YAML frontmatter for metadata, embedded Lua for logic, prose blocks for model instructions, and a credential-holding gateway that keeps vendor keys off the prompt process. Write a prompt, run it, get a result.
 
-![Workbench](images/banner-01.png)
+![Workshop](images/banner-01.png)
 
 ## What you get
 
@@ -112,8 +112,8 @@ flowchart LR
 | [promptforge-tool-picker](crates/promptforge-tool-picker) | Semantic tool resolution via sentence embeddings | [![Crates.io](https://img.shields.io/crates/v/promptforge-tool-picker.svg)](https://crates.io/crates/promptforge-tool-picker) |
 | [promptforge-webfetch](crates/promptforge-webfetch) | SSRF-safe web fetch tool for model-supplied URLs | [![Crates.io](https://img.shields.io/crates/v/promptforge-webfetch.svg)](https://crates.io/crates/promptforge-webfetch) |
 | [promptforge-dev](crates/promptforge-dev) | Interactive prompt development with watch mode | [![Crates.io](https://img.shields.io/crates/v/promptforge-dev.svg)](https://crates.io/crates/promptforge-dev) |
-| [promptforge-wb-server](crates/promptforge-wb-server) | Workbench HTTP server: chat relay, session tape, voice transcription | not published |
-| [promptforge-wb](crates/promptforge-wb) | Workbench desktop window shell (wry/tao) | not published |
+| [promptforge-ws-server](crates/promptforge-ws-server) | Workshop HTTP server: chat relay, session tape, voice transcription | not published |
+| [promptforge-ws](crates/promptforge-ws) | Workshop desktop window shell (wry/tao) | not published |
 
 ## Documentation
 

crates/promptforge-gateway-config/README.md

@@ -14,6 +14,13 @@ What it provides:
   including file, with cycle detection), keyed-array merging by `id`/`name`,
   and the [`ProfileName`](src/profile/name.rs) confinement type that keeps a
   profile selection inside the profiles directory.
+- The boot-only `[workshop]` section ([`WorkshopConfig`](src/config/workshop.rs)):
+  the hosted workshop UI's bind and optional voice/tape sub-tables, with
+  tape-path anchoring against the boot-config directory, a loopback-adjusted
+  client URL derived from `[server]` (`ServerConfig::client_url`), and
+  `load_workshop` for reading the section without full validation.
+  `load_boot_sections` reads `[server]` and `[workshop]` together in a
+  single include-resolution pass.
 - [`Secret`](src/config.rs): a credential wrapper that redacts in `Debug` and
   `Display` and never serializes.
 - [`ConfigError`](src/api_error.rs): an opaque, source-preserving error type;