textflowkit 0.1.12__tar.gz → 0.1.13__tar.gz

{textflowkit-0.1.12 → textflowkit-0.1.13}/.github/workflows/ci.yml

@@ -45,9 +45,20 @@ jobs:
         if: runner.os == 'Linux'
         run: sudo apt-get update && sudo apt-get install -y ffmpeg
 
-      - name: Install ffmpeg (Windows)
+      - name: Install pinned ffmpeg (Windows)
         if: runner.os == 'Windows'
-        run: choco install ffmpeg --no-progress -y
+        shell: python
+        run: |
+          import os, runpy
+          from pathlib import Path
+          ns = runpy.run_path('scripts/prepare_windows_payload.py')
+          spec = ns['load_asset_lock'](Path('packaging/windows/assets.lock.json'))['assets']['ffmpeg']
+          cache = Path(os.environ['RUNNER_TEMP']) / 'textflowkit-ci-ffmpeg'
+          archive = ns['_download_locked_asset'](cache, spec)
+          destination = cache / 'payload'
+          ns['prepare_ffmpeg_archive'](archive, destination)
+          with open(os.environ['GITHUB_PATH'], 'a', encoding='utf-8') as f:
+              f.write(str(destination / 'bin') + '\n')
 
       - name: Install ffmpeg (macOS)
         if: runner.os == 'macOS'

textflowkit-0.1.13/AGENTS.md

@@ -0,0 +1,19 @@
+# TextFlowKit agent instructions
+
+Scott's current bounded completion contract governs this work. Follow the active task and repository-required CI; preserve unrelated work and credentials. Keep one concise execution record, reuse unaffected evidence, and distinguish prepared, executed, verified and delivered work. A documented blocker remains incomplete. Do not invent adjacent features or weaken checks.
+
+## Roles and delegation
+
+The main assistant coordinates, plans and oversees. A worker invoked for an implementation unit performs that assigned unit directly; it is not another coordinator. Do not launch nested workers or automatic review/fan-out unless the owner or assignment explicitly authorizes it. Default to serial execution and one release candidate.
+
+## Model selection
+
+Follow Scott's active task selection; do not impose a project-wide Ollama default. His normal substantial-work/coordination preference is gpt-6.1-sol at medium, with gpt-6-luna at xhigh for small bounded work when available. Do not spawn a worker merely to switch models or add providers without authorization.
+
+For the explicitly authorized current Whistle release and issue #31 source-recovery work, Scott requested Ollama `deepseek-v4.1-flash:1017-cloud`, reasoning OFF. `scripts/run_deepseek_worker.py` is an explicit opt-in runner for those assigned DeepSeek units: it sends `think: false`, allows no model fallback, and records the actual response model. Ollama currently returns canonical ID `deepseek-v4.1-flash:1017` without the `-cloud` transport suffix. Do not confuse a worker's self-description with the transport receipts. Preserve existing DeepSeek integrations with reasoning off, but do not turn this task-specific instruction into the default for unrelated future work.
+
+This does not change the application's transcription or AI-cleanup defaults. Whistle remains the default transcription engine.
+
+## Scope and delivery safeguards
+
+Preserve unfinished work. Workers must not push, merge, tag, publish, release, stop unrelated processes, or change global configuration unless that unit is explicitly authorized to do so. The coordinating release task has Scott's push/merge/tag/publication authorization and separately his authorization to complete issue #31. Keep scratch, caches and build outputs outside the checkout. Verify process identity before acting on a PID; record ownership and terminal result for background jobs. Follow enforced controls rather than disguising a rejected action.

{textflowkit-0.1.12 → textflowkit-0.1.13}/CHANGELOG.md

@@ -1,5 +1,40 @@
 # Changelog
 
+## v0.1.13 — 2026-10-19
+
+Core: 0.1.13; unchanged optional fonts: 0.1.6. Whistle missing-speech fixes and a
+native Windows installer distributed with matching FFmpeg sources and notices.
+
+- Bound native Whistle decode inputs to 15 seconds with 11-second owned cores
+  and up to two seconds of context per side. The former 30-second inputs
+  reproducibly omitted passages recovered by shorter inputs. Window policy is
+  part of resume identity; partial progress from the old plan requires a fresh
+  run. The engine and pinned model remain Whistle.
+- Check short gaps with a bounded, differently framed native decode. Add words
+  only between two matching timed anchors; retain original words/repetitions,
+  skip long pauses, and cap extra calls per core. Record recovery counts.
+- Correct Whistle shared-context assembly when independently estimated word
+  timestamps cause both neighboring cores to keep or discard the same occurrence.
+  Match occurrences one-to-one; preserve real repeated speech and leave ambiguous
+  collapsed repetitions untouched rather than using global text deduplication.
+- Persist raw boundary context in Whistle progress schema 2 so resumed assembly
+  matches uninterrupted output. Old schema-1 partial runs require a fresh start;
+  completed jobs remain unchanged. Default engine remains Whistle.
+- The native 30-second omission cases remain reproducible upstream; shorter
+  input windows and anchored gap checks mitigate them in TextFlowKit without
+  changing the engine or model weights.
+- Verification on one four-hour public meeting (1310 native cores, 18 min 34 s
+  native decode, 34,723 final words): the two long missing passages were
+  restored (2 to 50 and 0 to 47 words), 62 short-gap checks accepted 7 for 53
+  added words, resume after cores 350 and 700 reproduced exact word text and
+  timings, and no invalid bounds or backwards starts remained. Focused suite:
+  113 passed. Full suite: 2,097 passed, 18 skipped; skips are not passes. This is
+  coverage evidence for one recording, not human WER or perfect accuracy; normal
+  spelling errors remain. See
+  [the verification note](docs/verification/whistle-coverage-20261019.md).
+
+- Package matching FFmpeg sources, pinned build recipes, dependency archives and full notices alongside the Windows installer; record source hashes and preserve compatible DLL replacement. See [source verification](docs/verification/windows-sources-20261019.md).
+
 ## v0.1.12 — 2026-10-17
 
 Core: 0.1.12; unchanged optional fonts: 0.1.6. The native Windows installer has been built and tested locally. The installer recipe ships in v0.1.12; the EXE remains local-only until unresolved corresponding-source compliance review is cleared. No public installer download link is available.

{textflowkit-0.1.12 → textflowkit-0.1.13}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: textflowkit
-Version: 0.1.12
+Version: 0.1.13
 Summary: Cross-platform media transcription toolkit: URL or file in, timestamped transcripts and subtitle files out.
 Project-URL: Homepage, https://www.textflowkit.org/
 Project-URL: Issues, https://github.com/scottconverse/textflowkit/issues
@@ -73,7 +73,7 @@ Cross-platform media transcription toolkit. **One core, one CLI, thin adapters.*
 [User manual](https://github.com/scottconverse/textflowkit/blob/main/docs/user-manual.md) ·
 [Developer and integration manual](https://github.com/scottconverse/textflowkit/blob/main/docs/adapters.md)
 
-**Current release: [v0.1.12](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.12).**
+**Current release: [v0.1.13](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.13).**
 
 The [static site deployment](https://github.com/scottconverse/textflowkit/blob/main/docs/site-deployment.md) is hosted on Cloudflare
 Pages. GitHub remains the source and CI host; the website does not run the
@@ -134,7 +134,7 @@ DOCX and PDF are available through the optional `export` extra.
 
 ## Architecture
 
-![TextFlowKit shared-core architecture: five thin entry points feed one core. The CLI, Python API, MCP, HTTP API, and the local browser UI (a fifth door that mounts the existing HTTP app under /api and shares the same job store, adding transport only, not a new pipeline) sit above one core that acquires and decodes media, transcribes with the default Whistle engine or an explicitly selected openai-whisper, keeps job state and resume checkpoints in an optional SQLite store, adds optional speaker or translation postprocessing, and publishes TXT, SRT, VTT, JSON, Markdown, and optional DOCX/PDF exports.](https://raw.githubusercontent.com/scottconverse/textflowkit/v0.1.12/docs/assets/architecture-overview.svg)
+![TextFlowKit shared-core architecture: five thin entry points feed one core. The CLI, Python API, MCP, HTTP API, and the local browser UI (a fifth door that mounts the existing HTTP app under /api and shares the same job store, adding transport only, not a new pipeline) sit above one core that acquires and decodes media, transcribes with the default Whistle engine or an explicitly selected openai-whisper, keeps job state and resume checkpoints in an optional SQLite store, adds optional speaker or translation postprocessing, and publishes TXT, SRT, VTT, JSON, Markdown, and optional DOCX/PDF exports.](https://raw.githubusercontent.com/scottconverse/textflowkit/v0.1.13/docs/assets/architecture-overview.svg)
 
 The design principle is **one shared core, thin doors**. Everything of substance
 lives in the core; the interfaces are thin — the local browser UI is a fifth door
@@ -158,7 +158,7 @@ see [docs/architecture.md](https://github.com/scottconverse/textflowkit/blob/mai
 
 ## Live microphone streaming (opt-in)
 
-In v0.1.12, live streaming supports **Windows x86_64 only**. When
+In v0.1.13, live streaming supports **Windows x86_64 only**. When
 `TEXTFLOWKIT_STREAMING=1` is set, the developer HTTP app serves a `/stream`
 WebSocket and the local UI serves `/api/stream`, both transcribing a live microphone
 as you speak. A **runnable, self-hosted browser example** ships at
@@ -167,7 +167,7 @@ as you speak. A **runnable, self-hosted browser example** ships at
 No CDN, no analytics, no external fetch. Requires the `streaming` extra:
 
 ```bash
-python -m pip install "textflowkit[streaming]==0.1.12"
+python -m pip install "textflowkit[streaming]==0.1.13"
 ```
 
 It is **off by default** — with the switch unset the endpoint does not exist — and
@@ -233,11 +233,13 @@ installs `textflowkit-fonts` for offline multilingual PDF rendering:
 python -m pip install 'textflowkit[export]'
 ```
 
-## Windows desktop installer (v0.1.12; public EXE pending)
+## Windows desktop installer (v0.1.13)
 
-An installer for the existing local browser workspace accompanies core v0.1.12. The native Windows installer has been built and tested locally. The installer recipe ships in v0.1.12; the EXE remains local-only until unresolved corresponding-source compliance review is cleared. No public installer download link is available. The Python package remains supported for developers and integrations.
+[Download Windows x64 setup](https://github.com/scottconverse/textflowkit/releases/download/v0.1.13/TextFlowKit-0.1.13-windows-x64-setup.exe) · [Matching sources and notices](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.13)
 
-The candidate is designed to run without a separately installed Python, WSL, or
+An installer for the existing local browser workspace accompanies core v0.1.13. The Windows installer and its matching FFmpeg source and notice bundles are distributed together through the [v0.1.13 release](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.13). The Python package remains supported for developers and integrations.
+
+The installer is designed to run without a separately installed Python, WSL, or
 Docker. Its bundle includes a private embeddable CPython runtime, the
 browser UI and HTTP, export, and streaming dependencies, the pinned Whistle model
 and runtime, and ffmpeg, ffprobe, and Node. The setup installs per user,
@@ -254,16 +256,16 @@ bundled; those features remain documented for the Python package when separately
 installed and configured. Streaming dependencies are bundled, but live streaming
 remains opt-in and physical browser microphone capture has not been verified.
 
-The candidate is designed to keep UI data outside the application install
+The installer is designed to keep UI data outside the application install
 directory and preserve it on upgrades and uninstall. Stop the UI server with
 **Stop server** and wait for it to exit before upgrading or uninstalling; the
 installer will block while it is running rather than force-killing active jobs.
 Cancel a job first if it should not drain to completion. The bundle also
 includes third-party license and notice files, including FFmpeg's LGPL notices
 and corresponding-source information. Check exact notices and source-distribution
-details against the final bundled binaries before publication. The candidate is
+details in the matching source bundles distributed with this release. The installer is
 unsigned, so Windows may show a SmartScreen warning. See the [installer candidate
-notes](docs/install.md#windows-desktop-installer-v0112-public-exe-pending).
+notes](https://github.com/scottconverse/textflowkit/blob/main/docs/install.md#windows-desktop-installer-v0113).
 
 ## Python API
 
@@ -360,7 +362,7 @@ textflowkit export ./transcript.json --format vtt
 needs no PyTorch, so a fresh `pip install textflowkit` stays small and pulls no
 torch; `openai-whisper` is an explicitly selectable opt-in engine.
 
-![Whistle bounded block run and durable resume: a decoded PCM WAV is split into 26-second cores with up to 2 seconds of context (each clip ≤ 30 s), each core runs as one owned child with forced telemetry-off flags, a partial checkpoint is written after each core, and a resume validates the source and decoded-WAV hashes then re-runs only the unfinished cores.](https://raw.githubusercontent.com/scottconverse/textflowkit/v0.1.12/docs/assets/whistle-resume.svg)
+![Whistle bounded block run and durable resume: a decoded PCM WAV is split into 11-second cores with up to 2 seconds of context (each clip ≤ 15 s), each core runs as one owned child with forced telemetry-off flags, a partial checkpoint is written after each core, and a resume validates the source and decoded-WAV hashes then re-runs only the unfinished cores.](https://raw.githubusercontent.com/scottconverse/textflowkit/v0.1.13/docs/assets/whistle-resume.svg)
 
 - **CPU only, no torch.** It runs a pinned native binary and downloads one pinned
   model on first use. Naming a GPU device is refused rather than silently
@@ -373,16 +375,26 @@ torch; `openai-whisper` is an explicitly selectable opt-in engine.
   Apple Silicon. **Intel Macs are not supported**; a request there is refused
   with a message that names the explicit `whisper` engine instead. No WSL layer
   is involved.
-- **How it works:** long audio is split into 26-second cores with up to 2 seconds
-  of context on each side, so every standalone clip is ≤ 30 seconds (the native
-  CLI's limit). Overlap words are selected by core midpoint rather than text
-  deduplication, so repeated spoken phrases are preserved.
+- **How it works:** long audio is split into 11-second cores with up to 2 seconds
+  of context on each side, so every standalone clip is ≤ 15 seconds. This conservative
+  ceiling avoids reproduced omissions on 30-second inputs. Midpoints provide initial ownership; shared-context matching
+  reconciles duplicate or dropped occurrences when neighboring timestamps
+  disagree. This is not global text deduplication: real repetitions and ambiguous
+  recognition are preserved. The 15-second ceiling and this assembly behavior ship
+  in v0.1.13; neither recovers speech the native recognizer never emits.
+- **Speech-gap check (v0.1.13).** Short gaps between recognized words receive a
+  bounded second listen with different clip boundaries. Extra words are accepted
+  only between matching words on both sides at nearby times. Existing words and
+  repetitions stay intact; long pauses do not trigger this check. The model is
+  still Whistle, with the same pinned weights and telemetry settings.
 - **Standalone streaming is not used.** The native `--audio-stream` mode failed its
   coverage and is never passed; only the committed standalone output is parsed.
 - **Durable block resume.** With `TEXTFLOWKIT_DB` set, a long run writes partial
   per-block checkpoints; a resume checks the source and decoded-WAV hashes and the
   config, then re-runs only the blocks that were not finished. The durable store
-  still assumes one owning process.
+  still assumes one owning process. The v0.1.13 assembly policy saves raw
+  boundary context with schema 2; old schema-1 partial runs must be restarted,
+  not resumed under the new assembly policy. Existing completed jobs are unchanged.
 - **Cancellation.** A running Whistle run terminates its exact owned child
   process bounded by a per-clip timeout. A single long `openai-whisper` model call
   is still only cancellable at its next stage boundary, as documented for the
@@ -471,7 +483,7 @@ its own beyond the `http` extra. It ships with the core package as of v0.1.10:
 a regular install of the current release carries it.
 
 ```bash
-python -m pip install 'textflowkit[http,export]==0.1.12'
+python -m pip install 'textflowkit[http,export]==0.1.13'
 textflowkit-ui
 ```
 
@@ -542,9 +554,16 @@ browser interface share the job contract without blocking a request.
 
 ## Status
 
-**v0.1.12 release.** Adds optional UI-only local Ollama proofreading and native
-Windows installer packaging; public EXE distribution remains gated on unresolved
-corresponding-source compliance review, with no public installer download link.
+**v0.1.13 release.** Fixes reproduced Whistle speech omissions. Native decode
+inputs are now bounded to 15 seconds (11-second owned cores with up to 2 seconds
+of context per side), short interior speech gaps get a bounded second listen that
+accepts words only between matching timed anchors, and shared-context words are
+reconciled one-to-one before durable resume. Whistle remains the default engine
+with the same pinned model and runtime; fonts remain 0.1.6. Progress schema 2
+stores raw boundary context, so an unfinished partial job from the previous
+26-second-core plan (schema 1) must be restarted instead of resumed; completed
+records are unchanged. The native Windows installer is rebuilt at v0.1.13 and
+distributed with matching FFmpeg sources, notices, hashes and build instructions.
 Existing optional live streaming provides a transport-neutral
 `StreamingSession` Python API, incremental transcript events, and authenticated
 loopback WebSockets (`/stream` on the developer HTTP API and `/api/stream` on the
@@ -567,6 +586,22 @@ Linux/macOS, and the six other accepted languages were not verified. The public
 website remains static documentation and serves no streaming endpoint. Local source
 validation does not establish published-package or exact-commit CI results.
 
+**v0.1.12 cleanup (historical).** The opt-in local Ollama proofreading path remains
+as introduced in v0.1.12, covering the local browser UI only; it was not changed by
+v0.1.13. It keeps the published 39-segment cleanup proof from v0.1.12 with no
+audio-accuracy claim: that proof records segment/format handling, not recognition
+accuracy.
+
+**v0.1.13 Whistle coverage, omission, and resume.** The 15-second bound (11-second
+cores plus up to 2 s context per side) fixes reproduced speech omissions on
+30-second inputs; the interior speech-gap second listen accepts extra words only
+between matching timed anchors; shared-context words are reconciled one-to-one
+before durable resume so a partial run rejoins without double ownership. Recognized
+language coverage remains the same accepted set, and nothing here recovers speech
+the native recognizer never emits. See
+[docs/verification/whistle-coverage-20261019.md](https://github.com/scottconverse/textflowkit/blob/main/docs/verification/whistle-coverage-20261019.md)
+for the run-by-run coverage, omission, and resume evidence.
+
 **Verification limit.** The local browser interface is covered by an automated
 suite, and the UI's behavior was proved on a **native Windows** machine in a real
 browser. No live optional-backend (translation/diarization) run through the UI is
@@ -589,7 +624,7 @@ MCP speech, seven-format exports and completed resume; the v0.1.8 runtime fixes
 were independently checked through fresh-process CLI restart probes, real SQLite
 setup-failure tests, and the full Windows test suite. Those checks are not new
 individual-harness receipts. That is the previous releases' record, not evidence
-for v0.1.12.
+for v0.1.13.
 
 The v0.1.6 release was the post-v0.1.5 review repair set: security hardening
 for media acquisition and the HTTP and MCP adapters, safer subtitle wrapping and
@@ -608,7 +643,7 @@ and both [core](https://pypi.org/project/textflowkit/0.1.6/) and
 [fonts](https://pypi.org/project/textflowkit-fonts/0.1.6/) PyPI projects are
 live — that is the v0.1.6 release's evidence, not a receipt for a later release.
 Everything from here to the end of this section is the v0.1.6 release's
-historical record as published: it is not re-verified for v0.1.12, whose separate release evidence is not supplied by these historical paragraphs.
+historical record as published: it is not re-verified for v0.1.13, whose separate release evidence is not supplied by these historical paragraphs.
 Merged-main CI passed 16/16 on the tagged commit; the published wheel and
 sdist digests match the GitHub release assets and their SHA-256 list; and a fresh
 Windows Python 3.12 install of `textflowkit[export,mcp,http]==0.1.6` from PyPI
@@ -647,9 +682,9 @@ Issues and PRs welcome. Please read [LEGAL.md](https://github.com/scottconverse/
 adapter.
 
 
-## Optional local AI transcript cleanup (v0.1.12)
+## Optional local AI transcript cleanup (introduced in v0.1.12)
 
-v0.1.12 adds **opt-in proofreading in the local browser UI only**. After a transcription finishes, choose an
+v0.1.12 adds **opt-in proofreading in the local browser UI only** (introduced in v0.1.12; unchanged in v0.1.13). After a transcription finishes, choose an
 installed local Ollama model and click **Proofread with local AI**. Cleanup never
 runs automatically. Ollama and cleanup models are not bundled in the installer.
 The optional default preference is `qwen3.5:9b` only if already installed; its

{textflowkit-0.1.12 → textflowkit-0.1.13}/README.md

@@ -8,7 +8,7 @@ Cross-platform media transcription toolkit. **One core, one CLI, thin adapters.*
 [User manual](https://github.com/scottconverse/textflowkit/blob/main/docs/user-manual.md) ·
 [Developer and integration manual](https://github.com/scottconverse/textflowkit/blob/main/docs/adapters.md)
 
-**Current release: [v0.1.12](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.12).**
+**Current release: [v0.1.13](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.13).**
 
 The [static site deployment](https://github.com/scottconverse/textflowkit/blob/main/docs/site-deployment.md) is hosted on Cloudflare
 Pages. GitHub remains the source and CI host; the website does not run the
@@ -69,7 +69,7 @@ DOCX and PDF are available through the optional `export` extra.
 
 ## Architecture
 
-![TextFlowKit shared-core architecture: five thin entry points feed one core. The CLI, Python API, MCP, HTTP API, and the local browser UI (a fifth door that mounts the existing HTTP app under /api and shares the same job store, adding transport only, not a new pipeline) sit above one core that acquires and decodes media, transcribes with the default Whistle engine or an explicitly selected openai-whisper, keeps job state and resume checkpoints in an optional SQLite store, adds optional speaker or translation postprocessing, and publishes TXT, SRT, VTT, JSON, Markdown, and optional DOCX/PDF exports.](https://raw.githubusercontent.com/scottconverse/textflowkit/v0.1.12/docs/assets/architecture-overview.svg)
+![TextFlowKit shared-core architecture: five thin entry points feed one core. The CLI, Python API, MCP, HTTP API, and the local browser UI (a fifth door that mounts the existing HTTP app under /api and shares the same job store, adding transport only, not a new pipeline) sit above one core that acquires and decodes media, transcribes with the default Whistle engine or an explicitly selected openai-whisper, keeps job state and resume checkpoints in an optional SQLite store, adds optional speaker or translation postprocessing, and publishes TXT, SRT, VTT, JSON, Markdown, and optional DOCX/PDF exports.](https://raw.githubusercontent.com/scottconverse/textflowkit/v0.1.13/docs/assets/architecture-overview.svg)
 
 The design principle is **one shared core, thin doors**. Everything of substance
 lives in the core; the interfaces are thin — the local browser UI is a fifth door
@@ -93,7 +93,7 @@ see [docs/architecture.md](https://github.com/scottconverse/textflowkit/blob/mai
 
 ## Live microphone streaming (opt-in)
 
-In v0.1.12, live streaming supports **Windows x86_64 only**. When
+In v0.1.13, live streaming supports **Windows x86_64 only**. When
 `TEXTFLOWKIT_STREAMING=1` is set, the developer HTTP app serves a `/stream`
 WebSocket and the local UI serves `/api/stream`, both transcribing a live microphone
 as you speak. A **runnable, self-hosted browser example** ships at
@@ -102,7 +102,7 @@ as you speak. A **runnable, self-hosted browser example** ships at
 No CDN, no analytics, no external fetch. Requires the `streaming` extra:
 
 ```bash
-python -m pip install "textflowkit[streaming]==0.1.12"
+python -m pip install "textflowkit[streaming]==0.1.13"
 ```
 
 It is **off by default** — with the switch unset the endpoint does not exist — and
@@ -168,11 +168,13 @@ installs `textflowkit-fonts` for offline multilingual PDF rendering:
 python -m pip install 'textflowkit[export]'
 ```
 
-## Windows desktop installer (v0.1.12; public EXE pending)
+## Windows desktop installer (v0.1.13)
 
-An installer for the existing local browser workspace accompanies core v0.1.12. The native Windows installer has been built and tested locally. The installer recipe ships in v0.1.12; the EXE remains local-only until unresolved corresponding-source compliance review is cleared. No public installer download link is available. The Python package remains supported for developers and integrations.
+[Download Windows x64 setup](https://github.com/scottconverse/textflowkit/releases/download/v0.1.13/TextFlowKit-0.1.13-windows-x64-setup.exe) · [Matching sources and notices](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.13)
 
-The candidate is designed to run without a separately installed Python, WSL, or
+An installer for the existing local browser workspace accompanies core v0.1.13. The Windows installer and its matching FFmpeg source and notice bundles are distributed together through the [v0.1.13 release](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.13). The Python package remains supported for developers and integrations.
+
+The installer is designed to run without a separately installed Python, WSL, or
 Docker. Its bundle includes a private embeddable CPython runtime, the
 browser UI and HTTP, export, and streaming dependencies, the pinned Whistle model
 and runtime, and ffmpeg, ffprobe, and Node. The setup installs per user,
@@ -189,16 +191,16 @@ bundled; those features remain documented for the Python package when separately
 installed and configured. Streaming dependencies are bundled, but live streaming
 remains opt-in and physical browser microphone capture has not been verified.
 
-The candidate is designed to keep UI data outside the application install
+The installer is designed to keep UI data outside the application install
 directory and preserve it on upgrades and uninstall. Stop the UI server with
 **Stop server** and wait for it to exit before upgrading or uninstalling; the
 installer will block while it is running rather than force-killing active jobs.
 Cancel a job first if it should not drain to completion. The bundle also
 includes third-party license and notice files, including FFmpeg's LGPL notices
 and corresponding-source information. Check exact notices and source-distribution
-details against the final bundled binaries before publication. The candidate is
+details in the matching source bundles distributed with this release. The installer is
 unsigned, so Windows may show a SmartScreen warning. See the [installer candidate
-notes](docs/install.md#windows-desktop-installer-v0112-public-exe-pending).
+notes](https://github.com/scottconverse/textflowkit/blob/main/docs/install.md#windows-desktop-installer-v0113).
 
 ## Python API
 
@@ -295,7 +297,7 @@ textflowkit export ./transcript.json --format vtt
 needs no PyTorch, so a fresh `pip install textflowkit` stays small and pulls no
 torch; `openai-whisper` is an explicitly selectable opt-in engine.
 
-![Whistle bounded block run and durable resume: a decoded PCM WAV is split into 26-second cores with up to 2 seconds of context (each clip ≤ 30 s), each core runs as one owned child with forced telemetry-off flags, a partial checkpoint is written after each core, and a resume validates the source and decoded-WAV hashes then re-runs only the unfinished cores.](https://raw.githubusercontent.com/scottconverse/textflowkit/v0.1.12/docs/assets/whistle-resume.svg)
+![Whistle bounded block run and durable resume: a decoded PCM WAV is split into 11-second cores with up to 2 seconds of context (each clip ≤ 15 s), each core runs as one owned child with forced telemetry-off flags, a partial checkpoint is written after each core, and a resume validates the source and decoded-WAV hashes then re-runs only the unfinished cores.](https://raw.githubusercontent.com/scottconverse/textflowkit/v0.1.13/docs/assets/whistle-resume.svg)
 
 - **CPU only, no torch.** It runs a pinned native binary and downloads one pinned
   model on first use. Naming a GPU device is refused rather than silently
@@ -308,16 +310,26 @@ torch; `openai-whisper` is an explicitly selectable opt-in engine.
   Apple Silicon. **Intel Macs are not supported**; a request there is refused
   with a message that names the explicit `whisper` engine instead. No WSL layer
   is involved.
-- **How it works:** long audio is split into 26-second cores with up to 2 seconds
-  of context on each side, so every standalone clip is ≤ 30 seconds (the native
-  CLI's limit). Overlap words are selected by core midpoint rather than text
-  deduplication, so repeated spoken phrases are preserved.
+- **How it works:** long audio is split into 11-second cores with up to 2 seconds
+  of context on each side, so every standalone clip is ≤ 15 seconds. This conservative
+  ceiling avoids reproduced omissions on 30-second inputs. Midpoints provide initial ownership; shared-context matching
+  reconciles duplicate or dropped occurrences when neighboring timestamps
+  disagree. This is not global text deduplication: real repetitions and ambiguous
+  recognition are preserved. The 15-second ceiling and this assembly behavior ship
+  in v0.1.13; neither recovers speech the native recognizer never emits.
+- **Speech-gap check (v0.1.13).** Short gaps between recognized words receive a
+  bounded second listen with different clip boundaries. Extra words are accepted
+  only between matching words on both sides at nearby times. Existing words and
+  repetitions stay intact; long pauses do not trigger this check. The model is
+  still Whistle, with the same pinned weights and telemetry settings.
 - **Standalone streaming is not used.** The native `--audio-stream` mode failed its
   coverage and is never passed; only the committed standalone output is parsed.
 - **Durable block resume.** With `TEXTFLOWKIT_DB` set, a long run writes partial
   per-block checkpoints; a resume checks the source and decoded-WAV hashes and the
   config, then re-runs only the blocks that were not finished. The durable store
-  still assumes one owning process.
+  still assumes one owning process. The v0.1.13 assembly policy saves raw
+  boundary context with schema 2; old schema-1 partial runs must be restarted,
+  not resumed under the new assembly policy. Existing completed jobs are unchanged.
 - **Cancellation.** A running Whistle run terminates its exact owned child
   process bounded by a per-clip timeout. A single long `openai-whisper` model call
   is still only cancellable at its next stage boundary, as documented for the
@@ -406,7 +418,7 @@ its own beyond the `http` extra. It ships with the core package as of v0.1.10:
 a regular install of the current release carries it.
 
 ```bash
-python -m pip install 'textflowkit[http,export]==0.1.12'
+python -m pip install 'textflowkit[http,export]==0.1.13'
 textflowkit-ui
 ```
 
@@ -477,9 +489,16 @@ browser interface share the job contract without blocking a request.
 
 ## Status
 
-**v0.1.12 release.** Adds optional UI-only local Ollama proofreading and native
-Windows installer packaging; public EXE distribution remains gated on unresolved
-corresponding-source compliance review, with no public installer download link.
+**v0.1.13 release.** Fixes reproduced Whistle speech omissions. Native decode
+inputs are now bounded to 15 seconds (11-second owned cores with up to 2 seconds
+of context per side), short interior speech gaps get a bounded second listen that
+accepts words only between matching timed anchors, and shared-context words are
+reconciled one-to-one before durable resume. Whistle remains the default engine
+with the same pinned model and runtime; fonts remain 0.1.6. Progress schema 2
+stores raw boundary context, so an unfinished partial job from the previous
+26-second-core plan (schema 1) must be restarted instead of resumed; completed
+records are unchanged. The native Windows installer is rebuilt at v0.1.13 and
+distributed with matching FFmpeg sources, notices, hashes and build instructions.
 Existing optional live streaming provides a transport-neutral
 `StreamingSession` Python API, incremental transcript events, and authenticated
 loopback WebSockets (`/stream` on the developer HTTP API and `/api/stream` on the
@@ -502,6 +521,22 @@ Linux/macOS, and the six other accepted languages were not verified. The public
 website remains static documentation and serves no streaming endpoint. Local source
 validation does not establish published-package or exact-commit CI results.
 
+**v0.1.12 cleanup (historical).** The opt-in local Ollama proofreading path remains
+as introduced in v0.1.12, covering the local browser UI only; it was not changed by
+v0.1.13. It keeps the published 39-segment cleanup proof from v0.1.12 with no
+audio-accuracy claim: that proof records segment/format handling, not recognition
+accuracy.
+
+**v0.1.13 Whistle coverage, omission, and resume.** The 15-second bound (11-second
+cores plus up to 2 s context per side) fixes reproduced speech omissions on
+30-second inputs; the interior speech-gap second listen accepts extra words only
+between matching timed anchors; shared-context words are reconciled one-to-one
+before durable resume so a partial run rejoins without double ownership. Recognized
+language coverage remains the same accepted set, and nothing here recovers speech
+the native recognizer never emits. See
+[docs/verification/whistle-coverage-20261019.md](https://github.com/scottconverse/textflowkit/blob/main/docs/verification/whistle-coverage-20261019.md)
+for the run-by-run coverage, omission, and resume evidence.
+
 **Verification limit.** The local browser interface is covered by an automated
 suite, and the UI's behavior was proved on a **native Windows** machine in a real
 browser. No live optional-backend (translation/diarization) run through the UI is
@@ -524,7 +559,7 @@ MCP speech, seven-format exports and completed resume; the v0.1.8 runtime fixes
 were independently checked through fresh-process CLI restart probes, real SQLite
 setup-failure tests, and the full Windows test suite. Those checks are not new
 individual-harness receipts. That is the previous releases' record, not evidence
-for v0.1.12.
+for v0.1.13.
 
 The v0.1.6 release was the post-v0.1.5 review repair set: security hardening
 for media acquisition and the HTTP and MCP adapters, safer subtitle wrapping and
@@ -543,7 +578,7 @@ and both [core](https://pypi.org/project/textflowkit/0.1.6/) and
 [fonts](https://pypi.org/project/textflowkit-fonts/0.1.6/) PyPI projects are
 live — that is the v0.1.6 release's evidence, not a receipt for a later release.
 Everything from here to the end of this section is the v0.1.6 release's
-historical record as published: it is not re-verified for v0.1.12, whose separate release evidence is not supplied by these historical paragraphs.
+historical record as published: it is not re-verified for v0.1.13, whose separate release evidence is not supplied by these historical paragraphs.
 Merged-main CI passed 16/16 on the tagged commit; the published wheel and
 sdist digests match the GitHub release assets and their SHA-256 list; and a fresh
 Windows Python 3.12 install of `textflowkit[export,mcp,http]==0.1.6` from PyPI
@@ -582,9 +617,9 @@ Issues and PRs welcome. Please read [LEGAL.md](https://github.com/scottconverse/
 adapter.
 
 
-## Optional local AI transcript cleanup (v0.1.12)
+## Optional local AI transcript cleanup (introduced in v0.1.12)
 
-v0.1.12 adds **opt-in proofreading in the local browser UI only**. After a transcription finishes, choose an
+v0.1.12 adds **opt-in proofreading in the local browser UI only** (introduced in v0.1.12; unchanged in v0.1.13). After a transcription finishes, choose an
 installed local Ollama model and click **Proofread with local AI**. Cleanup never
 runs automatically. Ollama and cleanup models are not bundled in the installer.
 The optional default preference is `qwen3.5:9b` only if already installed; its

{textflowkit-0.1.12 → textflowkit-0.1.13}/docs/adapters.md

@@ -1,6 +1,6 @@
 # Developer and integration manual
 
-Current release: [v0.1.12](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.12).
+Current release: [v0.1.13](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.13).
 Start with the [user manual](user-manual.md) for everyday use. Harness versions
 in the compatibility table below identify **historical test sessions**, not
 the version of TextFlowKit currently published.
@@ -22,9 +22,11 @@ API and WebSockets are ephemeral and bypass durable job submission.
    HTTP ───────────►└──────────────────────┘
 ```
 
-## Windows desktop installer (v0.1.12; public EXE pending)
+## Windows desktop installer (v0.1.13)
 
-The Windows x86_64 installer packages the existing browser interface for core v0.1.12. The native Windows installer has been built and tested locally. The installer recipe ships in v0.1.12; the EXE remains local-only until unresolved corresponding-source compliance review is cleared. No public installer download link is available. Its bundle includes private embeddable CPython, the UI and HTTP, export, and streaming dependencies, the pinned Whistle model and runtime, and ffmpeg, ffprobe, and Node. It requires no separately installed Python, WSL, or Docker. The Python package remains supported for developers and integrations; Docker remains a separate operator deployment example.
+[Download Windows x64 setup](https://github.com/scottconverse/textflowkit/releases/download/v0.1.13/TextFlowKit-0.1.13-windows-x64-setup.exe) · [Matching sources and notices](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.13)
+
+The Windows x86_64 installer packages the existing browser interface for core v0.1.13. The Windows installer and its matching FFmpeg source and notice bundles are distributed together through the [v0.1.13 release](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.13). Its bundle includes private embeddable CPython, the UI and HTTP, export, and streaming dependencies, the pinned Whistle model and runtime, and ffmpeg, ffprobe, and Node. It requires no separately installed Python, WSL, or Docker. The Python package remains supported for developers and integrations; Docker remains a separate operator deployment example.
 
 The setup installs per user, adds a Start Menu entry, and offers an
 optional desktop shortcut. Launching it will start the local server and open the
@@ -551,7 +553,7 @@ observation rather than forwarding the caller's header, and keep
 
 ## Live microphone streaming (`/stream`, opt-in)
 
-In v0.1.12, native live streaming supports **Windows x86_64 only**. Other live
+In v0.1.13, native live streaming (introduced in v0.1.11) supports **Windows x86_64 only**. Other live
 platforms are unsupported; existing standalone defaults and platform support are
 unchanged. Physical browser microphone capture was not verified. The public site
 is static documentation and serves no streams. Both local server surfaces can
@@ -562,7 +564,7 @@ exist and a connection is refused before any session is allocated - and it needs
 `streaming` extra (`websockets`).
 
 ```powershell
-python -m pip install "textflowkit[streaming]==0.1.12"
+python -m pip install "textflowkit[streaming]==0.1.13"
 # Native Windows PowerShell:
 $env:TEXTFLOWKIT_API_TOKEN="choose-a-long-random-token"
 $env:TEXTFLOWKIT_STREAMING="1"
@@ -602,7 +604,7 @@ supplies FastAPI and uvicorn, and adds no new dependency). It has no public site
 of its own: it is a local app, not a hosted service.
 
 ```bash
-python -m pip install 'textflowkit[http,export]==0.1.12'
+python -m pip install 'textflowkit[http,export]==0.1.13'
 textflowkit-ui                 # serve on 127.0.0.1 and open a browser
 textflowkit-ui --no-browser --port 8901
 ```
@@ -986,7 +988,7 @@ By default the job store is in-memory and bounded (`max_jobs=200`, terminal
 jobs evicted first). Set `TEXTFLOWKIT_DB` to use the durable SQLite store for
 restart-safe jobs and checkpoints. The SQLite store assumes one owning process.
 
-## UI-only proofreading routes (v0.1.12)
+## UI-only proofreading routes (introduced in v0.1.12)
 
 These routes belong to the local UI session gate, not the developer HTTP or MCP
 API. POST requires the existing `x-textflowkit-ui-capability` header. Host, peer

{textflowkit-0.1.12 → textflowkit-0.1.13}/docs/architecture.md

@@ -1,4 +1,4 @@
-# Architecture and job lifecycle — v0.1.12
+# Architecture and job lifecycle — v0.1.13
 
 This guide describes how textflowkit is put together and how a job moves through
 it. It is orientation for maintainers and integrators; it is not a deployment
@@ -26,9 +26,9 @@ a streamed upload, and a capability endpoint. It **ships in the core package as
 of v0.1.10** and adds no new dependency beyond the `http` extra. It is a local
 app: the published website is static documentation and never runs the pipeline.
 
-### Windows desktop installer (v0.1.12; public EXE pending)
+### Windows desktop installer (v0.1.13)
 
-The Windows x86_64 installer for core v0.1.12 provisions this same browser door without adding a second pipeline or hosted service. The native Windows installer has been built and tested locally. The installer recipe ships in v0.1.12; the EXE remains local-only until unresolved corresponding-source compliance review is cleared. No public installer download link is available. The bundle contains private embeddable CPython, the existing UI and HTTP, export, and streaming dependencies, the pinned Whistle model and runtime, and ffmpeg, ffprobe, and Node. Per-user setup creates a Start Menu entry and offers an optional desktop shortcut. Launching it starts the loopback server and opens the browser at localhost. Normal use needs no administrator rights or global PATH changes; there is no automatic update mechanism.
+The Windows x86_64 installer for core v0.1.13 provisions this same browser door without adding a second pipeline or hosted service. The Windows installer and its matching FFmpeg source and notice bundles are distributed together through the [v0.1.13 release](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.13). The bundle contains private embeddable CPython, the existing UI and HTTP, export, and streaming dependencies, the pinned Whistle model and runtime, and ffmpeg, ffprobe, and Node. Per-user setup creates a Start Menu entry and offers an optional desktop shortcut. Launching it starts the loopback server and opens the browser at localhost. Normal use needs no administrator rights or global PATH changes; there is no automatic update mechanism.
 
 ```mermaid
 flowchart LR
@@ -297,7 +297,7 @@ saved transcript for the same URL/options and does **not** prove the remote byte
 are unchanged.
 
 **Whistle block resume.** The Whistle engine's long-audio run emits a
-serializable progress snapshot after each 26-second core; the runner persists it as
+serializable progress snapshot after each 11-second core; the runner persists it as
 a **partial** checkpoint body (no transcript yet). Resuming validates that body
 against the requested configuration — schema, window policy, duration, the
 full-content decoded-WAV SHA-256, and the model/binary/language identity — and then
@@ -307,6 +307,21 @@ engine cannot carry partial block progress. This reuses the existing single
 persistence mechanism and the one-owning-process store model; it adds no second
 store and no new process-sharing model.
 
+The v0.1.13 seam-reconciliation policy records progress schema 2, including
+the previous native window's raw tail words. The next core uses one-to-one
+time/text alignment to retain a matched occurrence once even if its two midpoint
+estimates disagree. Collapsed repeated-token ambiguity is preserved, not globally
+deduplicated. Schema-1 partial progress is rejected by the engine and requires a
+fresh run; the checkpoint envelope can still parse historical records. Existing
+completed transcripts are not rewritten. This does not recover speech absent
+from the native model output.
+
+The window policy is a 15-second decode ceiling: 11-second owned cores with at most 2 seconds
+of context each side, so no native call exceeds 15 seconds. A short-gap check after a core
+may reframe an interior gap once, but only when both a left and a right timed anchor match,
+and it adds at most two extra native calls per core; long pauses, missing anchors and empty
+retries add no words.
+
 **Ownership.** The reopen of a terminal row for resume is an atomic claim
 (`JobStore.claim` / `prepare_resume`), pinned to the attempt the caller observed.
 Two callers racing the same job id cannot both reopen it; one transitions the row
@@ -477,7 +492,7 @@ an isolated environment and inspect a real local job's status and outputs. Live
 gated providers, ROCm execution, and platform URLs each need separate evidence;
 see the [release checklist](release-checklist.md) for those boundaries.
 
-## Local UI cleanup sidecar (v0.1.12)
+## Local UI cleanup sidecar (introduced in v0.1.12)
 
 `ui.cleanup` owns the optional proofreading worker and separate SQLite sidecar
 next to the effective job database. The UI shell's existing loopback peer/Host,
@@ -503,4 +518,4 @@ three chunks at 2026-10-16 17:39:52 UTC, with four changed segments. The canonic
 SQLite JSON/source and segment IDs/timestamps matched, and the browser comparison
 and TXT save were verified. This confirms the local persistence/export path for
 that run only, not correction accuracy; human audio review remains required.
-The optional UI-only cleanup ships with core v0.1.12; models are not bundled.
+The optional UI-only cleanup ships with core v0.1.12 (introduced in v0.1.12; unchanged in v0.1.13); models are not bundled.