[dhruva-vapi]

Problem

Zeals reports that ~40% of web-widget calls end with assistant-did-not-receive-customer-audio (PRISM-1083). Before 3.0.1, @vapi-ai/web created the backend call before it asked for the microphone. client-sdk-web#189 (released in v3.0.1) now acquires the mic first. If that fails, no call is created and the SDK emits call-start-failed and an error of type microphone-preflight-*.

Fix

• Raise the @vapi-ai/web range from ^2.5.0 to ^3.0.1 and update the lockfile.
• Change the CI and publish workflows from Node 18 to Node 22. @vapi-ai/web 3.x and @daily-co/daily-js 0.94 require Node >= 22.14. .nvmrc is already 24.
• No widget source changes. The existing error listener in useVapiCall already sets the status to disconnected and clears the active and speaking state, so a mic preflight failure returns the widget to idle.

Verification

• npm run build:all, npm run lint and npm run type-check pass.
• Playwright tests pass 6/6.
• Checked the SDK's public API from 2.5.2 to 3.0.1 against the widget's usage. Nothing used by the widget changed incompatibly.

Not tested: a live call with a real mic in a browser.

A new widget release (version-bump.yml → GitHub release → publish.yml) is needed after this merges, so the unpkg embed picks it up.

Link to Devin session: https://app.devin.ai/sessions/f0c8f585b41d4cbaa0459bfc8d22e211
Open in Devin Desktop: https://app.devin.ai/desktop/session/f0c8f585b41d4cbaa0459bfc8d22e211?variant=devin
Requested by: @dhruva-vapi

[devin-ai-integration]

I'll fix CI failures and address comments from users with write access that start with 'Devin'.

• Disable automatic comment, CI, and merge conflict monitoring

[devin-ai-integration]

@veltsonbastien @shubham-vapiai could you review this? It bumps the widget to @vapi-ai/web@3.0.1, which adds the mic preflight from VapiAI/client-sdk-web#189 for the Zeals no-customer-audio issue (PRISM-1083).

[dhruva-vapi]

Closing in favor of #41, which bundles the same @vapi-ai/web 3.0.1 upgrade and also keeps the widget from resetting on recoverable SDK errors, with Playwright coverage for blocked and pending mic permission.