refactor(voice): separate Realtime state and resource owners

src/voice/realtimePreferences.js

@@ -0,0 +1,84 @@
+import {
+  DEFAULT_VOICE_TIER,
+  isKnownVoiceTier,
+  normalizeCostLimits,
+  resolveVoiceModel,
+  serializeCostLimits,
+} from './voiceCost.js';
+
+// Voice cost control (repo-wide `godsEyeView.<feature>.<field>` convention;
+// the neighbouring ERROR_STORAGE_KEY predates it).
+export const VOICE_TIER_STORAGE_KEY = 'godsEyeView.voiceCost.tier';
+
+export const VOICE_LIMITS_STORAGE_KEY = 'godsEyeView.voiceCost.limits';
+
+/** Best-effort localStorage handle; absent in tests and locked-down browsers. */
+export function voiceStorage(storage) {
+  if (storage) return storage;
+  try {
+    return typeof localStorage === 'undefined' ? null : localStorage;
+  } catch {
+    return null; // privacy modes throw on mere access
+  }
+}
+
+/**
+ * Read the persisted voice model tier. Unknown/corrupt values resolve to the
+ * default, so a hand-edited localStorage entry can never pick a bad model.
+ */
+export function readStoredVoiceTier(storage) {
+  try {
+    const raw = voiceStorage(storage)?.getItem(VOICE_TIER_STORAGE_KEY);
+    return isKnownVoiceTier(raw)
+      ? resolveVoiceModel(raw).tier
+      : DEFAULT_VOICE_TIER;
+  } catch {
+    return DEFAULT_VOICE_TIER;
+  }
+}
+
+/** Persist the voice model tier. Never throws. */
+export function writeStoredVoiceTier(tier, storage) {
+  const resolved = resolveVoiceModel(tier).tier;
+  try {
+    voiceStorage(storage)?.setItem(VOICE_TIER_STORAGE_KEY, resolved);
+  } catch {
+    /* best effort */
+  }
+  return resolved;
+}
+
+/**
+ * Read the persisted spend thresholds, falling back to the generous defaults.
+ * Stored as `{"warnUsd":2,"capUsd":5}` under one key so both move together.
+ */
+export function readStoredVoiceLimits(storage) {
+  try {
+    const raw = voiceStorage(storage)?.getItem(VOICE_LIMITS_STORAGE_KEY);
+    if (!raw) return normalizeCostLimits(null);
+    return normalizeCostLimits(JSON.parse(raw));
+  } catch {
+    return normalizeCostLimits(null); // corrupt JSON must not disable the cap
+  }
+}
+
+/**
+ * Persist spend thresholds. Never throws.
+ *
+ * Serialized through `serializeCostLimits` because a DISABLED threshold is
+ * Infinity, and `JSON.stringify(Infinity)` is `null` — which reads back as
+ * "absent" and silently restores the default, re-arming a cap the user turned
+ * off. The 'off' sentinel round-trips instead.
+ */
+export function writeStoredVoiceLimits(limits, storage) {
+  const normalized = normalizeCostLimits(limits);
+  try {
+    voiceStorage(storage)?.setItem(
+      VOICE_LIMITS_STORAGE_KEY,
+      JSON.stringify(serializeCostLimits(normalized)),
+    );
+  } catch {
+    /* best effort */
+  }
+  return normalized;
+}