build: make go mod tidy runnable, and drop two dead requirements (V-454)

The vendored toolchain lives inside the module tree, so `go mod tidy` walked
Go's own compiler-error fixtures and died on files that are malformed on
purpose ("unicode//utf8": double slash). A nested module is not part of its
parent, so deps/go.mod ends the walk in three lines. deps/ is gitignored, so
the sentinel is generated by `make deps-sentinel`, which deps-go and deps now
depend on.

The tidy it makes possible drops github.com/kami/praxis, which no file
imports — Praxis is reached over HTTP, by contract. Its replace directive and
the unused nexus one went with it, so a build no longer expects two sibling
checkouts that nothing reads. vendor/ is committed, so `make tidy` re-vendors
in the same breath: a tidy alone leaves the next build failing on
"inconsistent vendoring".

Not wired into `make test`. A build target that rewrites go.mod is a surprise.

Verified: `make build` produces all 9 binaries and `make test` is green.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Makefile

@@ -16,7 +16,7 @@ PIPER_BIN     := $(shell pwd)/deps/piper/piper
 PIPER_MODEL   := $(shell pwd)/models/tts/ru_RU-irina-medium.onnx
 PIPER_ESPEAK  := $(shell pwd)/deps/piper/espeak-ng-data
 
-.PHONY: simulate stt-fixtures test-stt-golden all build build-stt build-tts build-daemon build-client build-waked build-web build-poll build-caldav clean test fmt-check vet run-stt run-tts run-web download-embedder deps-go eval-router eval-recall eval-phrasing eval-models build-gpud
+.PHONY: simulate stt-fixtures test-stt-golden all build build-stt build-tts build-daemon build-client build-waked build-web build-poll build-caldav clean test fmt-check vet run-stt run-tts run-web download-embedder deps-go deps-sentinel tidy eval-router eval-recall eval-phrasing eval-models build-gpud
 
 all: build
 
@@ -74,7 +74,7 @@ run-web: build-web
 # base.Tool(), which only stats pkg/tool and exits. So build them in once here.
 GO_TARBALL := go$(GO_VERSION).linux-amd64.tar.gz
 GO_SHA256  := 9e9b755d63b36acf30c12a9a3fc379243714c1c6d3dd72861da637f336ebb35b
-deps-go:
+deps-go: deps-sentinel
 	@mkdir -p deps/go
 	cd deps/go && curl -fLO 'https://go.dev/dl/$(GO_TARBALL)'
 	cd deps/go && echo '$(GO_SHA256)  $(GO_TARBALL)' | sha256sum -c -
@@ -84,6 +84,25 @@ deps-go:
 	done
 	$(GO) version
 
+# deps/go.mod — the sentinel that stops the module walk at deps/ (Vikunja #454).
+# The vendored toolchain lives inside the module tree, so `go mod tidy` walked
+# Go's own compiler-error fixtures and died on files that are malformed on
+# purpose ("unicode//utf8": double slash). A nested module is not part of the
+# parent, so one three-line file ends the walk. deps/ is gitignored, so it is
+# generated here rather than committed, and every target that populates deps/
+# writes it.
+deps-sentinel:
+	@mkdir -p deps
+	@printf 'module github.com/kami/maven/deps\n\ngo 1.21\n' > deps/go.mod
+
+# Run the tidy the sentinel makes possible. Not part of `test`: it rewrites
+# go.mod, and a build target that edits the module file is a surprise.
+# vendor/ is committed, so a tidy that drops a requirement must be followed by
+# a re-vendor or the next build fails on "inconsistent vendoring".
+tidy: deps-sentinel
+	GOTOOLCHAIN=local GOFLAGS=-mod=mod $(GO) mod tidy
+	GOTOOLCHAIN=local GOFLAGS=-mod=mod $(GO) mod vendor
+
 # fmt-check fails if any file needs gofmt. docs/design.md has always said `make
 # test` gates on gofmt and vet; it did not, so nine files quietly drifted.
 # Run `gofmt -w` on whatever this prints.
@@ -178,7 +197,7 @@ run-tts: build-tts
 		./mavttsd -socket /tmp/maven/tts.sock \
 			-piper $(PIPER_BIN) -model $(PIPER_MODEL) -espeak_data $(PIPER_ESPEAK)
 
-deps: deps-whisper deps-piper
+deps: deps-sentinel deps-whisper deps-piper
 
 deps-whisper:
 	cd deps/whisper.cpp && cmake -B build -DCMAKE_BUILD_TYPE=Release \

cmd/mavttsd/main.go

@@ -23,6 +23,7 @@ import (
 	"syscall"
 
 	"github.com/kami/maven/internal/audio"
+	"github.com/kami/maven/internal/tts"
 	"github.com/kami/maven/internal/worker"
 )
 
@@ -39,15 +40,27 @@ func run(args []string) error {
 	model := flag.String("model", "", "path to piper onnx model file")
 	espeakData := flag.String("espeak_data", "", "path to espeak-ng data directory")
 	tashkeelModel := flag.String("tashkeel_model", "", "path to libtashkeel onnx model")
+	lexiconPath := flag.String("lexicon", "", "path to the pronunciation dictionary (json, name to spelling)")
 
 	flag.CommandLine.Parse(args)
 
 	ctx, stop := signal.NotifyContext(context.Background(), syscall.SIGINT, syscall.SIGTERM, syscall.SIGHUP)
 	defer stop()
 
+	// Read before the handler is built: a dictionary he asked for and that
+	// cannot be read is a startup failure, not a warning. Saying names wrong
+	// in silence is the thing it exists to stop.
+	lex, err := tts.LoadLexicon(*lexiconPath)
+	if err != nil {
+		return err
+	}
+	if lex.Size() > 0 {
+		log.Printf("mavttsd: pronunciation dictionary: %d names from %s", lex.Size(), *lexiconPath)
+	}
+
 	var s worker.Synthesizer
 	if *piperBin != "" && *model != "" {
-		s = newPiperHandler(*piperBin, *model, *espeakData, *tashkeelModel)
+		s = newPiperHandler(*piperBin, *model, *espeakData, *tashkeelModel, lex)
 		log.Printf("mavttsd: using piper tts (%s, model=%s)", *piperBin, *model)
 	} else {
 		log.Printf("mavttsd: no piper/model specified, using stub handler")

cmd/mavttsd/main_test.go

@@ -7,6 +7,7 @@ import (
 	"testing"
 
 	"github.com/kami/maven/internal/audio"
+	"github.com/kami/maven/internal/tts"
 	"github.com/kami/maven/internal/worker"
 )
 
@@ -117,3 +118,18 @@ func abs(n int) int {
 	}
 	return n
 }
+
+// The dictionary that ships in deploy/ must parse and must be non-empty. It is
+// data, so nothing else would catch a trailing comma before the voice did.
+func TestShippedLexiconLoads(t *testing.T) {
+	lex, err := tts.LoadLexicon(filepath.Join("..", "..", "deploy", "tts-lexicon.json"))
+	if err != nil {
+		t.Fatalf("deploy/tts-lexicon.json: %v", err)
+	}
+	if lex.Size() < 10 {
+		t.Errorf("shipped dictionary holds %d names, want the full list", lex.Size())
+	}
+	if got := lex.Apply("задача в Vikunja"); got == "задача в Vikunja" {
+		t.Error("the shipped dictionary did not rewrite a name it lists")
+	}
+}

cmd/mavttsd/piper_handler.go

@@ -9,6 +9,7 @@ import (
 	"os/exec"
 
 	"github.com/kami/maven/internal/audio"
+	"github.com/kami/maven/internal/tts"
 	"github.com/kami/maven/internal/worker"
 )
 
@@ -18,15 +19,20 @@ type piperHandler struct {
 	configPath    string
 	espeakData    string
 	tashkeelModel string
+	// lexicon rewrites service ids and Latin names into the spelling the
+	// Russian voice reads correctly (Vikunja #458). Nil-safe: an unconfigured
+	// dictionary rewrites nothing.
+	lexicon *tts.Lexicon
 }
 
-func newPiperHandler(piperPath, modelPath, espeakData, tashkeelModel string) *piperHandler {
+func newPiperHandler(piperPath, modelPath, espeakData, tashkeelModel string, lexicon *tts.Lexicon) *piperHandler {
 	return &piperHandler{
 		piperPath:     piperPath,
 		modelPath:     modelPath,
 		configPath:    modelPath + ".json",
 		espeakData:    espeakData,
 		tashkeelModel: tashkeelModel,
+		lexicon:       lexicon,
 	}
 }
 
@@ -66,7 +72,14 @@ func (h *piperHandler) Synthesize(ctx context.Context, req worker.SynthesizeReq)
 		return worker.SynthesizeResp{}, fmt.Errorf("piper: start: %w", err)
 	}
 
-	if _, err := io.WriteString(stdin, req.Text); err != nil {
+	// The dictionary is applied here, at the last edge before the voice: every
+	// caller's text passes through this one point, and nothing upstream has to
+	// know how a name is spelled out loud.
+	text := req.Text
+	if h.lexicon != nil {
+		text = h.lexicon.Apply(text)
+	}
+	if _, err := io.WriteString(stdin, text); err != nil {
 		stdin.Close()
 		stdout.Close()
 		_ = cmd.Wait()

deploy/tts-lexicon.json

@@ -0,0 +1,30 @@
+{
+  "Maven": "Мэйвен",
+  "Nexus": "Нексус",
+  "Praxis": "Праксис",
+  "Hexis": "Хексис",
+  "Vikunja": "Викунья",
+  "SearXNG": "сёрчиксэнджи",
+  "Kiwix": "Кивикс",
+  "Gitea": "Гитея",
+  "Home Assistant": "Хоум Ассистент",
+  "Docker": "Докер",
+  "Telegram": "Телеграм",
+  "ntfy": "энтифай",
+  "homesrv": "хоумсёрв",
+  "workpc": "воркписи",
+  "whisper": "виспер",
+  "piper": "пайпер",
+  "llama-server": "лама сервер",
+  "Qwen": "Квен",
+  "CalDAV": "калдав",
+  "IMAP": "аймап",
+  "API": "эй-пи-ай",
+  "CPU": "си-пи-ю",
+  "GPU": "джи-пи-ю",
+  "RAM": "оперативная память",
+  "SSD": "эс-эс-ди",
+  "uptime": "аптайм",
+  "backup": "бэкап",
+  "deploy": "деплой"
+}

docs/operations.md

@@ -90,6 +90,13 @@ export LD_LIBRARY_PATH="$ROOT/deps/piper"
 
 Without `-piper` it runs as a stub.
 
+`-lexicon deploy/tts-lexicon.json` adds the pronunciation dictionary: a flat
+JSON object of name to Russian spelling, applied to the text just before piper
+reads it. It is how `Vikunja` is said as a word rather than spelled out, and how
+`SearXNG` and `homesrv` are said at all. Off unless the flag is set; a path that
+is set and unreadable stops mavttsd rather than letting it say names wrong in
+silence. Adding a name needs a restart of mavttsd and nothing else.
+
 ## mavweb — PWA voice bridge (WebSocket ↔ TCP)
 
 No CGo, no deps; builds with stock Go.

go.mod

@@ -15,7 +15,6 @@ require github.com/kami/hexis v0.0.0
 require (
 	github.com/dustin/go-humanize v1.0.1 // indirect
 	github.com/google/uuid v1.6.0 // indirect
-	github.com/kami/praxis v0.0.0
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/ncruces/go-strftime v1.0.0 // indirect
 	github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
@@ -25,8 +24,4 @@ require (
 	modernc.org/memory v1.11.0 // indirect
 )
 
-replace github.com/kami/praxis v0.0.0 => /home/kami/apps/praxis
-
-replace github.com/kami/nexus v0.0.0 => /home/kami/apps/nexus
-
 replace github.com/kami/hexis v0.0.0 => /home/kami/apps/hexis

internal/tts/lexicon.go

@@ -0,0 +1,128 @@
+package tts
+
+import (
+	"encoding/json"
+	"fmt"
+	"os"
+	"regexp"
+	"sort"
+	"strings"
+)
+
+// Pronunciation dictionary (Vikunja #458).
+//
+// piper reads a Russian sentence with a Russian voice, and a Latin service id
+// inside that sentence comes out as letters or as noise: "Vikunja" is spelled
+// out, "SearXNG" is unreadable, and "homesrv" is read as if it were a word. The
+// fix is not a code change per name — it is a file of replacements applied to
+// the text before piper sees it.
+//
+// Spelling, not phonemes. piper has no lexicon input of its own here, so the
+// only lever is the text, and the entry for a name is how it should be spelled
+// in Russian for the voice to say it right. That also means a wrong entry is
+// visible: it is a word, and it is read out loud.
+//
+// The dictionary is data, so it ships as a file rather than a table in Go. A
+// name added to it needs no rebuild and no deploy of the daemon that owns the
+// text — only a restart of mavttsd, which is the process that reads it.
+
+// Lexicon rewrites names into the spelling the voice reads correctly.
+//
+// The zero value is usable and rewrites nothing, so a daemon with no dictionary
+// configured behaves exactly as it did before this existed.
+type Lexicon struct {
+	// Rules are held in one alternation rather than as a map, so a text is
+	// scanned once however many entries there are, and the longest name wins
+	// where two overlap ("Home Assistant" before "Home").
+	re *regexp.Regexp
+	// by lower-cased name, because the match is case-insensitive and the
+	// replacement is not derived from what was matched.
+	by map[string]string
+}
+
+// LoadLexicon reads a dictionary file: a flat JSON object of name to spelling.
+//
+//	{"Vikunja": "Викунья", "SearXNG": "сёрчиксэнджи"}
+//
+// An empty path returns an empty Lexicon and no error — the dictionary is off
+// unless configured, like every other optional capability. A path that is set
+// and unreadable IS an error: he asked for it, and silently saying names wrong
+// is the failure this exists to remove.
+func LoadLexicon(path string) (*Lexicon, error) {
+	if strings.TrimSpace(path) == "" {
+		return &Lexicon{}, nil
+	}
+	raw, err := os.ReadFile(path)
+	if err != nil {
+		return nil, fmt.Errorf("tts: lexicon %s: %w", path, err)
+	}
+	var entries map[string]string
+	if err := json.Unmarshal(raw, &entries); err != nil {
+		return nil, fmt.Errorf("tts: lexicon %s: %w", path, err)
+	}
+	return NewLexicon(entries), nil
+}
+
+// NewLexicon builds a lexicon from entries already in memory.
+func NewLexicon(entries map[string]string) *Lexicon {
+	names := make([]string, 0, len(entries))
+	by := make(map[string]string, len(entries))
+	for name, say := range entries {
+		name = strings.TrimSpace(name)
+		if name == "" || strings.TrimSpace(say) == "" {
+			continue
+		}
+		names = append(names, name)
+		by[strings.ToLower(name)] = say
+	}
+	if len(names) == 0 {
+		return &Lexicon{}
+	}
+	// Longest first: "Home Assistant" must match before "Home" does, and Go's
+	// regexp alternation is leftmost-first, not longest-match.
+	sort.Slice(names, func(i, j int) bool { return len(names[i]) > len(names[j]) })
+	quoted := make([]string, len(names))
+	for i, n := range names {
+		quoted[i] = regexp.QuoteMeta(n)
+	}
+	// The boundaries are written out rather than left to \b, which is ASCII-only
+	// and never fires next to a Cyrillic letter — so "в Vikunja," would not
+	// match with \b on the left in a Russian sentence.
+	pattern := `(?i)(^|[^\p{L}\p{N}_])(` + strings.Join(quoted, "|") + `)($|[^\p{L}\p{N}_])`
+	return &Lexicon{re: regexp.MustCompile(pattern), by: by}
+}
+
+// Apply rewrites every name in the text. Text with no name in it comes back
+// unchanged and untouched.
+func (l *Lexicon) Apply(text string) string {
+	if l == nil || l.re == nil || text == "" {
+		return text
+	}
+	// Twice, because two names separated by a single space share the character
+	// between them and one pass consumes it: "Nexus Praxis" would leave the
+	// second name alone otherwise.
+	out := l.replaceOnce(text)
+	return l.replaceOnce(out)
+}
+
+func (l *Lexicon) replaceOnce(text string) string {
+	return l.re.ReplaceAllStringFunc(text, func(m string) string {
+		groups := l.re.FindStringSubmatch(m)
+		if groups == nil {
+			return m
+		}
+		say, ok := l.by[strings.ToLower(groups[2])]
+		if !ok {
+			return m
+		}
+		return groups[1] + say + groups[3]
+	})
+}
+
+// Size reports how many names are loaded, for the startup log line.
+func (l *Lexicon) Size() int {
+	if l == nil {
+		return 0
+	}
+	return len(l.by)
+}

internal/tts/lexicon_test.go

@@ -0,0 +1,85 @@
+package tts
+
+import (
+	"os"
+	"path/filepath"
+	"testing"
+)
+
+func TestLexiconRewritesNames(t *testing.T) {
+	lex := NewLexicon(map[string]string{
+		"Vikunja":        "Викунья",
+		"Home Assistant": "Хоум Ассистент",
+		"Home":           "Хоум",
+		"GPU":            "джи-пи-ю",
+	})
+	for _, tc := range []struct{ in, want string }{
+		{"задача в Vikunja готова", "задача в Викунья готова"},
+		// Case-insensitive: the router and the model both change the case of a
+		// name on the way through.
+		{"открой vikunja.", "открой Викунья."},
+		// Longest first, or "Home Assistant" is read as "Хоум Assistant".
+		{"Home Assistant не отвечает", "Хоум Ассистент не отвечает"},
+		// Two names in a row share the space between them, which one pass
+		// would consume.
+		{"GPU GPU", "джи-пи-ю джи-пи-ю"},
+		// Not a word boundary: a name inside a longer token is left alone.
+		{"vikunjaless", "vikunjaless"},
+		{"ничего не совпало", "ничего не совпало"},
+		{"", ""},
+	} {
+		if got := lex.Apply(tc.in); got != tc.want {
+			t.Errorf("Apply(%q) = %q, want %q", tc.in, got, tc.want)
+		}
+	}
+}
+
+// The zero value and an unconfigured path rewrite nothing, so a daemon with no
+// dictionary behaves as it did before this existed.
+func TestLexiconOffByDefault(t *testing.T) {
+	var zero *Lexicon
+	if got := zero.Apply("Vikunja"); got != "Vikunja" {
+		t.Errorf("nil lexicon rewrote %q", got)
+	}
+	lex, err := LoadLexicon("")
+	if err != nil {
+		t.Fatalf("LoadLexicon(\"\"): %v", err)
+	}
+	if lex.Size() != 0 || lex.Apply("Vikunja") != "Vikunja" {
+		t.Errorf("empty path produced a live lexicon of %d names", lex.Size())
+	}
+}
+
+// A path he set and that cannot be read is a startup failure. Saying names
+// wrong in silence is what the dictionary exists to stop.
+func TestLexiconLoadErrors(t *testing.T) {
+	if _, err := LoadLexicon(filepath.Join(t.TempDir(), "nope.json")); err == nil {
+		t.Error("a missing dictionary must be an error")
+	}
+	bad := filepath.Join(t.TempDir(), "bad.json")
+	if err := os.WriteFile(bad, []byte("{not json"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	if _, err := LoadLexicon(bad); err == nil {
+		t.Error("an unparseable dictionary must be an error")
+	}
+}
+
+func TestLexiconRoundTripsAFile(t *testing.T) {
+	path := filepath.Join(t.TempDir(), "lex.json")
+	if err := os.WriteFile(path, []byte(`{"Praxis":"Праксис","  ":"skipped","Nexus":""}`), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	lex, err := LoadLexicon(path)
+	if err != nil {
+		t.Fatalf("LoadLexicon: %v", err)
+	}
+	// Blank names and blank spellings are dropped: an entry that says nothing
+	// would delete the word it matched.
+	if lex.Size() != 1 {
+		t.Fatalf("Size = %d, want 1", lex.Size())
+	}
+	if got := lex.Apply("Praxis молчит"); got != "Праксис молчит" {
+		t.Errorf("Apply = %q", got)
+	}
+}

vendor/modules.txt

@@ -15,8 +15,6 @@ github.com/google/uuid
 # github.com/kami/hexis v0.0.0 => /home/kami/apps/hexis
 ## explicit; go 1.25.5
 github.com/kami/hexis/pkg/client
-# github.com/kami/praxis v0.0.0 => /home/kami/apps/praxis
-## explicit; go 1.23
 # github.com/mattn/go-isatty v0.0.20
 ## explicit; go 1.15
 github.com/mattn/go-isatty
@@ -79,4 +77,3 @@ modernc.org/memory
 modernc.org/sqlite
 modernc.org/sqlite/lib
 modernc.org/sqlite/vtab
-# github.com/kami/nexus v0.0.0 => /home/kami/apps/nexus