[zxcodes]

Summary

• replace the ElevenLabs realtime/webhook path with a Cloudflare Voice Agent backed by Workers AI
• add scoped WebSocket capability authorization, server-owned transcript finalization, reconnect history, and account-erasure cleanup
• make assessment start transactional, establish seven-day Agent-history retention before transcription, and prevent duplicate duration-limit farewells
• update the candidate voice UI, Worker bindings, deployment configuration, architecture/privacy documentation, and migration plan

Why

The previous provider flow depended on browser/provider session state and webhook delivery. This migration keeps authorization, conversation history, lifecycle transitions, and finalization server-owned while consolidating voice infrastructure on Cloudflare.

Reliability and security

• serializes call start against cancellation, withdrawal, rejection, and finalization
• rejects alternate/default Agent routes and scopes short-lived capabilities to the candidate and interview
• never accepts browser transcript data for persistence
• purges secondary Agent SQLite history after seven days and supports immediate account-erasure cleanup
• keeps prompt context and candidate summaries server-side

Validation

• bun run check
• commit hooks: Oxfmt, Oxlint, TypeScript, and Knip
• voice-focused tests: 36 passed across 5 files
• full test suite: 739 passed across 79 files
• git diff --check