textflowkit 0.1.12__tar.gz → 0.1.14__tar.gz

{textflowkit-0.1.12 → textflowkit-0.1.14}/.github/workflows/ci.yml

@@ -45,9 +45,20 @@ jobs:
         if: runner.os == 'Linux'
         run: sudo apt-get update && sudo apt-get install -y ffmpeg
 
-      - name: Install ffmpeg (Windows)
+      - name: Install pinned ffmpeg (Windows)
         if: runner.os == 'Windows'
-        run: choco install ffmpeg --no-progress -y
+        shell: python
+        run: |
+          import os, runpy
+          from pathlib import Path
+          ns = runpy.run_path('scripts/prepare_windows_payload.py')
+          spec = ns['load_asset_lock'](Path('packaging/windows/assets.lock.json'))['assets']['ffmpeg']
+          cache = Path(os.environ['RUNNER_TEMP']) / 'textflowkit-ci-ffmpeg'
+          archive = ns['_download_locked_asset'](cache, spec)
+          destination = cache / 'payload'
+          ns['prepare_ffmpeg_archive'](archive, destination)
+          with open(os.environ['GITHUB_PATH'], 'a', encoding='utf-8') as f:
+              f.write(str(destination / 'bin') + '\n')
 
       - name: Install ffmpeg (macOS)
         if: runner.os == 'macOS'

textflowkit-0.1.14/AGENTS.md

@@ -0,0 +1,27 @@
+# TextFlowKit agent instructions
+
+Scott's current bounded completion contract governs this work. Follow the active task and repository-required CI; preserve unrelated work and credentials. Keep one concise execution record, reuse unaffected evidence, and distinguish prepared, executed, verified and delivered work. A documented blocker remains incomplete. Do not invent adjacent features or weaken checks.
+
+## Roles and delegation
+
+The main assistant coordinates, plans and oversees. A worker invoked for an implementation unit performs that assigned unit directly; it is not another coordinator. Do not launch nested workers or automatic review/fan-out unless the owner or assignment explicitly authorizes it. Default to serial execution and one release candidate.
+
+## Model selection
+
+Follow Scott's active task selection; do not impose a project-wide Ollama default. His normal substantial-work/coordination preference is gpt-6.1-sol at medium, with gpt-6-luna at xhigh for small bounded work when available. Do not spawn a worker merely to switch models or add providers without authorization.
+
+## Required harness for all TextFlowKit DeepSeek coding (owner directive, 2026-10-19)
+
+Whenever DeepSeek is selected for coding work on TextFlowKit, use native **headless Codex exec through Ollama**, model **`deepseek-v4.1-flash:1017-cloud`**, thinking OFF (`model_reasoning_effort = "none"`). This is a standing project instruction, not limited to one release. The observed provider response ID is `deepseek-v4.1-flash:1017`; verify it from transport receipts, not model self-description.
+
+**Do not use `scripts/run_deepseek_worker.py`, another custom agent loop, or Claude Code for this work.** If the approved setup is missing, blocked or broken after restart, inspect/repair it within authorization or report the concrete blocker; never silently fall back, change the model, enable reasoning, or bypass safeguards.
+
+Use the dedicated worker worktree, separate CODEX_HOME/profile/temp directories, allowlisted environment and supported Windows workspace-write sandbox. No personal auth/settings/hooks/MCP configuration copied; no inherited provider/GitHub tokens; no nested workers or publishing. A worktree isolates changes, not all disk reads. Supply a scoped brief through stdin and retain native Codex events, provider model/reasoning evidence and actual tool results.
+
+Read `docs/deepseek-worker.md` before the next DeepSeek unit and after restart. Verified local launcher: `C:\Users\scott\Documents\Codex\2026-09-21\re\outputs\headless-codex-deepseek-20261019\run-codex.ps1`; local state and evidence are alongside it. This selects the harness whenever DeepSeek is used; it does not make DeepSeek the default for unrelated work.
+
+This does not change the application's transcription or AI-cleanup defaults. Whistle remains the default transcription engine.
+
+## Scope and delivery safeguards
+
+Preserve unfinished work. Workers must not push, merge, tag, publish, release, stop unrelated processes, or change global configuration unless that unit is explicitly authorized to do so. The coordinating release task has Scott's push/merge/tag/publication authorization and separately his authorization to complete issue #31. Keep scratch, caches and build outputs outside the checkout. Verify process identity before acting on a PID; record ownership and terminal result for background jobs. Follow enforced controls rather than disguising a rejected action.

{textflowkit-0.1.12 → textflowkit-0.1.14}/CHANGELOG.md

@@ -1,5 +1,49 @@
 # Changelog
 
+## v0.1.14 — 2026-10-19
+
+Documentation-only patch; core 0.1.14, unchanged optional fonts 0.1.6.
+
+- Persist the required native headless Codex workflow for all TextFlowKit DeepSeek coding: exact `deepseek-v4.1-flash:1017-cloud`, thinking off, isolated worktree/configuration/environment, supported Windows sandbox, and no silent fallback to the historical Python runner or Claude Code.
+- Link the workflow from contributor and integration documentation and update current package/manual/website release references.
+- No transcription, cleanup, streaming, dependency, or installer behavior change. The latest verified Windows installer remains v0.1.13 and retains its matching FFmpeg sources/notices. Native/live proof remains explicitly attributed to that earlier release; no new accuracy claim.
+- Math comparison fixtures, local logs, model credentials and machine-local launcher/profile files are not included.
+
+## v0.1.13 — 2026-10-19
+
+Core: 0.1.13; unchanged optional fonts: 0.1.6. Whistle missing-speech fixes and a
+native Windows installer distributed with matching FFmpeg sources and notices.
+
+- Bound native Whistle decode inputs to 15 seconds with 11-second owned cores
+  and up to two seconds of context per side. The former 30-second inputs
+  reproducibly omitted passages recovered by shorter inputs. Window policy is
+  part of resume identity; partial progress from the old plan requires a fresh
+  run. The engine and pinned model remain Whistle.
+- Check short gaps with a bounded, differently framed native decode. Add words
+  only between two matching timed anchors; retain original words/repetitions,
+  skip long pauses, and cap extra calls per core. Record recovery counts.
+- Correct Whistle shared-context assembly when independently estimated word
+  timestamps cause both neighboring cores to keep or discard the same occurrence.
+  Match occurrences one-to-one; preserve real repeated speech and leave ambiguous
+  collapsed repetitions untouched rather than using global text deduplication.
+- Persist raw boundary context in Whistle progress schema 2 so resumed assembly
+  matches uninterrupted output. Old schema-1 partial runs require a fresh start;
+  completed jobs remain unchanged. Default engine remains Whistle.
+- The native 30-second omission cases remain reproducible upstream; shorter
+  input windows and anchored gap checks mitigate them in TextFlowKit without
+  changing the engine or model weights.
+- Verification on one four-hour public meeting (1310 native cores, 18 min 34 s
+  native decode, 34,723 final words): the two long missing passages were
+  restored (2 to 50 and 0 to 47 words), 62 short-gap checks accepted 7 for 53
+  added words, resume after cores 350 and 700 reproduced exact word text and
+  timings, and no invalid bounds or backwards starts remained. Focused suite:
+  113 passed. Full suite: 2,097 passed, 18 skipped; skips are not passes. This is
+  coverage evidence for one recording, not human WER or perfect accuracy; normal
+  spelling errors remain. See
+  [the verification note](docs/verification/whistle-coverage-20261019.md).
+
+- Package matching FFmpeg sources, pinned build recipes, dependency archives and full notices alongside the Windows installer; record source hashes and preserve compatible DLL replacement. See [source verification](docs/verification/windows-sources-20261019.md).
+
 ## v0.1.12 — 2026-10-17
 
 Core: 0.1.12; unchanged optional fonts: 0.1.6. The native Windows installer has been built and tested locally. The installer recipe ships in v0.1.12; the EXE remains local-only until unresolved corresponding-source compliance review is cleared. No public installer download link is available.

{textflowkit-0.1.12 → textflowkit-0.1.14}/CONTRIBUTING.md

@@ -99,3 +99,7 @@ Read [LEGAL.md](LEGAL.md) before adding a source adapter.
 ## Security
 
 Do not open a public issue for a vulnerability. See [SECURITY.md](SECURITY.md).
+
+## DeepSeek coding workers
+
+When DeepSeek is selected for TextFlowKit coding, follow the required [isolated headless Codex workflow](docs/deepseek-worker.md): exact `deepseek-v4.1-flash:1017-cloud`, thinking off. Do not use the historical Python agent loop or Claude Code. This does not change application engines or make DeepSeek the default for unrelated work.

{textflowkit-0.1.12 → textflowkit-0.1.14}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: textflowkit
-Version: 0.1.12
+Version: 0.1.14
 Summary: Cross-platform media transcription toolkit: URL or file in, timestamped transcripts and subtitle files out.
 Project-URL: Homepage, https://www.textflowkit.org/
 Project-URL: Issues, https://github.com/scottconverse/textflowkit/issues
@@ -73,7 +73,7 @@ Cross-platform media transcription toolkit. **One core, one CLI, thin adapters.*
 [User manual](https://github.com/scottconverse/textflowkit/blob/main/docs/user-manual.md) ·
 [Developer and integration manual](https://github.com/scottconverse/textflowkit/blob/main/docs/adapters.md)
 
-**Current release: [v0.1.12](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.12).**
+**Current release: [v0.1.14](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.14).**
 
 The [static site deployment](https://github.com/scottconverse/textflowkit/blob/main/docs/site-deployment.md) is hosted on Cloudflare
 Pages. GitHub remains the source and CI host; the website does not run the
@@ -134,7 +134,7 @@ DOCX and PDF are available through the optional `export` extra.
 
 ## Architecture
 
-![TextFlowKit shared-core architecture: five thin entry points feed one core. The CLI, Python API, MCP, HTTP API, and the local browser UI (a fifth door that mounts the existing HTTP app under /api and shares the same job store, adding transport only, not a new pipeline) sit above one core that acquires and decodes media, transcribes with the default Whistle engine or an explicitly selected openai-whisper, keeps job state and resume checkpoints in an optional SQLite store, adds optional speaker or translation postprocessing, and publishes TXT, SRT, VTT, JSON, Markdown, and optional DOCX/PDF exports.](https://raw.githubusercontent.com/scottconverse/textflowkit/v0.1.12/docs/assets/architecture-overview.svg)
+![TextFlowKit shared-core architecture: five thin entry points feed one core. The CLI, Python API, MCP, HTTP API, and the local browser UI (a fifth door that mounts the existing HTTP app under /api and shares the same job store, adding transport only, not a new pipeline) sit above one core that acquires and decodes media, transcribes with the default Whistle engine or an explicitly selected openai-whisper, keeps job state and resume checkpoints in an optional SQLite store, adds optional speaker or translation postprocessing, and publishes TXT, SRT, VTT, JSON, Markdown, and optional DOCX/PDF exports.](https://raw.githubusercontent.com/scottconverse/textflowkit/v0.1.14/docs/assets/architecture-overview.svg)
 
 The design principle is **one shared core, thin doors**. Everything of substance
 lives in the core; the interfaces are thin — the local browser UI is a fifth door
@@ -158,7 +158,7 @@ see [docs/architecture.md](https://github.com/scottconverse/textflowkit/blob/mai
 
 ## Live microphone streaming (opt-in)
 
-In v0.1.12, live streaming supports **Windows x86_64 only**. When
+In v0.1.14, live streaming supports **Windows x86_64 only**. When
 `TEXTFLOWKIT_STREAMING=1` is set, the developer HTTP app serves a `/stream`
 WebSocket and the local UI serves `/api/stream`, both transcribing a live microphone
 as you speak. A **runnable, self-hosted browser example** ships at
@@ -167,7 +167,7 @@ as you speak. A **runnable, self-hosted browser example** ships at
 No CDN, no analytics, no external fetch. Requires the `streaming` extra:
 
 ```bash
-python -m pip install "textflowkit[streaming]==0.1.12"
+python -m pip install "textflowkit[streaming]==0.1.14"
 ```
 
 It is **off by default** — with the switch unset the endpoint does not exist — and
@@ -233,11 +233,13 @@ installs `textflowkit-fonts` for offline multilingual PDF rendering:
 python -m pip install 'textflowkit[export]'
 ```
 
-## Windows desktop installer (v0.1.12; public EXE pending)
+## Windows desktop installer (latest verified installer: v0.1.13)
 
-An installer for the existing local browser workspace accompanies core v0.1.12. The native Windows installer has been built and tested locally. The installer recipe ships in v0.1.12; the EXE remains local-only until unresolved corresponding-source compliance review is cleared. No public installer download link is available. The Python package remains supported for developers and integrations.
+[Download Windows x64 setup](https://github.com/scottconverse/textflowkit/releases/download/v0.1.13/TextFlowKit-0.1.13-windows-x64-setup.exe) · [Matching sources and notices](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.13)
 
-The candidate is designed to run without a separately installed Python, WSL, or
+An installer for the existing local browser workspace accompanies core v0.1.13. The Windows installer and its matching FFmpeg source and notice bundles are distributed together through the [v0.1.13 release](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.13). The Python package remains supported for developers and integrations.
+
+The installer is designed to run without a separately installed Python, WSL, or
 Docker. Its bundle includes a private embeddable CPython runtime, the
 browser UI and HTTP, export, and streaming dependencies, the pinned Whistle model
 and runtime, and ffmpeg, ffprobe, and Node. The setup installs per user,
@@ -254,16 +256,16 @@ bundled; those features remain documented for the Python package when separately
 installed and configured. Streaming dependencies are bundled, but live streaming
 remains opt-in and physical browser microphone capture has not been verified.
 
-The candidate is designed to keep UI data outside the application install
+The installer is designed to keep UI data outside the application install
 directory and preserve it on upgrades and uninstall. Stop the UI server with
 **Stop server** and wait for it to exit before upgrading or uninstalling; the
 installer will block while it is running rather than force-killing active jobs.
 Cancel a job first if it should not drain to completion. The bundle also
 includes third-party license and notice files, including FFmpeg's LGPL notices
 and corresponding-source information. Check exact notices and source-distribution
-details against the final bundled binaries before publication. The candidate is
+details in the matching source bundles distributed with this release. The installer is
 unsigned, so Windows may show a SmartScreen warning. See the [installer candidate
-notes](docs/install.md#windows-desktop-installer-v0112-public-exe-pending).
+notes](https://github.com/scottconverse/textflowkit/blob/main/docs/install.md#windows-desktop-installer-v0113).
 
 ## Python API
 
@@ -360,7 +362,7 @@ textflowkit export ./transcript.json --format vtt
 needs no PyTorch, so a fresh `pip install textflowkit` stays small and pulls no
 torch; `openai-whisper` is an explicitly selectable opt-in engine.
 
-![Whistle bounded block run and durable resume: a decoded PCM WAV is split into 26-second cores with up to 2 seconds of context (each clip ≤ 30 s), each core runs as one owned child with forced telemetry-off flags, a partial checkpoint is written after each core, and a resume validates the source and decoded-WAV hashes then re-runs only the unfinished cores.](https://raw.githubusercontent.com/scottconverse/textflowkit/v0.1.12/docs/assets/whistle-resume.svg)
+![Whistle bounded block run and durable resume: a decoded PCM WAV is split into 11-second cores with up to 2 seconds of context (each clip ≤ 15 s), each core runs as one owned child with forced telemetry-off flags, a partial checkpoint is written after each core, and a resume validates the source and decoded-WAV hashes then re-runs only the unfinished cores.](https://raw.githubusercontent.com/scottconverse/textflowkit/v0.1.14/docs/assets/whistle-resume.svg)
 
 - **CPU only, no torch.** It runs a pinned native binary and downloads one pinned
   model on first use. Naming a GPU device is refused rather than silently
@@ -373,16 +375,26 @@ torch; `openai-whisper` is an explicitly selectable opt-in engine.
   Apple Silicon. **Intel Macs are not supported**; a request there is refused
   with a message that names the explicit `whisper` engine instead. No WSL layer
   is involved.
-- **How it works:** long audio is split into 26-second cores with up to 2 seconds
-  of context on each side, so every standalone clip is ≤ 30 seconds (the native
-  CLI's limit). Overlap words are selected by core midpoint rather than text
-  deduplication, so repeated spoken phrases are preserved.
+- **How it works:** long audio is split into 11-second cores with up to 2 seconds
+  of context on each side, so every standalone clip is ≤ 15 seconds. This conservative
+  ceiling avoids reproduced omissions on 30-second inputs. Midpoints provide initial ownership; shared-context matching
+  reconciles duplicate or dropped occurrences when neighboring timestamps
+  disagree. This is not global text deduplication: real repetitions and ambiguous
+  recognition are preserved. The 15-second ceiling and this assembly behavior ship
+  in v0.1.13; neither recovers speech the native recognizer never emits.
+- **Speech-gap check (v0.1.13).** Short gaps between recognized words receive a
+  bounded second listen with different clip boundaries. Extra words are accepted
+  only between matching words on both sides at nearby times. Existing words and
+  repetitions stay intact; long pauses do not trigger this check. The model is
+  still Whistle, with the same pinned weights and telemetry settings.
 - **Standalone streaming is not used.** The native `--audio-stream` mode failed its
   coverage and is never passed; only the committed standalone output is parsed.
 - **Durable block resume.** With `TEXTFLOWKIT_DB` set, a long run writes partial
   per-block checkpoints; a resume checks the source and decoded-WAV hashes and the
   config, then re-runs only the blocks that were not finished. The durable store
-  still assumes one owning process.
+  still assumes one owning process. The v0.1.13 assembly policy saves raw
+  boundary context with schema 2; old schema-1 partial runs must be restarted,
+  not resumed under the new assembly policy. Existing completed jobs are unchanged.
 - **Cancellation.** A running Whistle run terminates its exact owned child
   process bounded by a per-clip timeout. A single long `openai-whisper` model call
   is still only cancellable at its next stage boundary, as documented for the
@@ -471,7 +483,7 @@ its own beyond the `http` extra. It ships with the core package as of v0.1.10:
 a regular install of the current release carries it.
 
 ```bash
-python -m pip install 'textflowkit[http,export]==0.1.12'
+python -m pip install 'textflowkit[http,export]==0.1.14'
 textflowkit-ui
 ```
 
@@ -542,9 +554,18 @@ browser interface share the job contract without blocking a request.
 
 ## Status
 
-**v0.1.12 release.** Adds optional UI-only local Ollama proofreading and native
-Windows installer packaging; public EXE distribution remains gated on unresolved
-corresponding-source compliance review, with no public installer download link.
+**v0.1.14 release.** Documentation-only patch: records the required isolated headless Codex workflow for DeepSeek coding contributors. Transcription, AI cleanup and streaming behavior are unchanged from v0.1.13; fonts remain 0.1.6. The latest verified Windows installer remains v0.1.13, with its matching source and notice bundles. No new native transcription proof is claimed for this documentation patch.
+
+**Whistle behavior introduced in v0.1.13.** Fixes reproduced Whistle speech omissions. Native decode
+inputs are now bounded to 15 seconds (11-second owned cores with up to 2 seconds
+of context per side), short interior speech gaps get a bounded second listen that
+accepts words only between matching timed anchors, and shared-context words are
+reconciled one-to-one before durable resume. Whistle remains the default engine
+with the same pinned model and runtime; fonts remain 0.1.6. Progress schema 2
+stores raw boundary context, so an unfinished partial job from the previous
+26-second-core plan (schema 1) must be restarted instead of resumed; completed
+records are unchanged. The native Windows installer is rebuilt at v0.1.13 and
+distributed with matching FFmpeg sources, notices, hashes and build instructions.
 Existing optional live streaming provides a transport-neutral
 `StreamingSession` Python API, incremental transcript events, and authenticated
 loopback WebSockets (`/stream` on the developer HTTP API and `/api/stream` on the
@@ -567,6 +588,22 @@ Linux/macOS, and the six other accepted languages were not verified. The public
 website remains static documentation and serves no streaming endpoint. Local source
 validation does not establish published-package or exact-commit CI results.
 
+**v0.1.12 cleanup (historical).** The opt-in local Ollama proofreading path remains
+as introduced in v0.1.12, covering the local browser UI only; it was not changed by
+v0.1.13. It keeps the published 39-segment cleanup proof from v0.1.12 with no
+audio-accuracy claim: that proof records segment/format handling, not recognition
+accuracy.
+
+**v0.1.13 Whistle coverage, omission, and resume.** The 15-second bound (11-second
+cores plus up to 2 s context per side) fixes reproduced speech omissions on
+30-second inputs; the interior speech-gap second listen accepts extra words only
+between matching timed anchors; shared-context words are reconciled one-to-one
+before durable resume so a partial run rejoins without double ownership. Recognized
+language coverage remains the same accepted set, and nothing here recovers speech
+the native recognizer never emits. See
+[docs/verification/whistle-coverage-20261019.md](https://github.com/scottconverse/textflowkit/blob/main/docs/verification/whistle-coverage-20261019.md)
+for the run-by-run coverage, omission, and resume evidence.
+
 **Verification limit.** The local browser interface is covered by an automated
 suite, and the UI's behavior was proved on a **native Windows** machine in a real
 browser. No live optional-backend (translation/diarization) run through the UI is
@@ -589,7 +626,7 @@ MCP speech, seven-format exports and completed resume; the v0.1.8 runtime fixes
 were independently checked through fresh-process CLI restart probes, real SQLite
 setup-failure tests, and the full Windows test suite. Those checks are not new
 individual-harness receipts. That is the previous releases' record, not evidence
-for v0.1.12.
+for v0.1.13.
 
 The v0.1.6 release was the post-v0.1.5 review repair set: security hardening
 for media acquisition and the HTTP and MCP adapters, safer subtitle wrapping and
@@ -608,7 +645,7 @@ and both [core](https://pypi.org/project/textflowkit/0.1.6/) and
 [fonts](https://pypi.org/project/textflowkit-fonts/0.1.6/) PyPI projects are
 live — that is the v0.1.6 release's evidence, not a receipt for a later release.
 Everything from here to the end of this section is the v0.1.6 release's
-historical record as published: it is not re-verified for v0.1.12, whose separate release evidence is not supplied by these historical paragraphs.
+historical record as published: it is not re-verified for v0.1.13, whose separate release evidence is not supplied by these historical paragraphs.
 Merged-main CI passed 16/16 on the tagged commit; the published wheel and
 sdist digests match the GitHub release assets and their SHA-256 list; and a fresh
 Windows Python 3.12 install of `textflowkit[export,mcp,http]==0.1.6` from PyPI
@@ -647,9 +684,9 @@ Issues and PRs welcome. Please read [LEGAL.md](https://github.com/scottconverse/
 adapter.
 
 
-## Optional local AI transcript cleanup (v0.1.12)
+## Optional local AI transcript cleanup (introduced in v0.1.12)
 
-v0.1.12 adds **opt-in proofreading in the local browser UI only**. After a transcription finishes, choose an
+v0.1.12 adds **opt-in proofreading in the local browser UI only** (introduced in v0.1.12; unchanged in v0.1.13). After a transcription finishes, choose an
 installed local Ollama model and click **Proofread with local AI**. Cleanup never
 runs automatically. Ollama and cleanup models are not bundled in the installer.
 The optional default preference is `qwen3.5:9b` only if already installed; its

{textflowkit-0.1.12 → textflowkit-0.1.14}/README.md

@@ -8,7 +8,7 @@ Cross-platform media transcription toolkit. **One core, one CLI, thin adapters.*
 [User manual](https://github.com/scottconverse/textflowkit/blob/main/docs/user-manual.md) ·
 [Developer and integration manual](https://github.com/scottconverse/textflowkit/blob/main/docs/adapters.md)
 
-**Current release: [v0.1.12](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.12).**
+**Current release: [v0.1.14](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.14).**
 
 The [static site deployment](https://github.com/scottconverse/textflowkit/blob/main/docs/site-deployment.md) is hosted on Cloudflare
 Pages. GitHub remains the source and CI host; the website does not run the
@@ -69,7 +69,7 @@ DOCX and PDF are available through the optional `export` extra.
 
 ## Architecture
 
-![TextFlowKit shared-core architecture: five thin entry points feed one core. The CLI, Python API, MCP, HTTP API, and the local browser UI (a fifth door that mounts the existing HTTP app under /api and shares the same job store, adding transport only, not a new pipeline) sit above one core that acquires and decodes media, transcribes with the default Whistle engine or an explicitly selected openai-whisper, keeps job state and resume checkpoints in an optional SQLite store, adds optional speaker or translation postprocessing, and publishes TXT, SRT, VTT, JSON, Markdown, and optional DOCX/PDF exports.](https://raw.githubusercontent.com/scottconverse/textflowkit/v0.1.12/docs/assets/architecture-overview.svg)
+![TextFlowKit shared-core architecture: five thin entry points feed one core. The CLI, Python API, MCP, HTTP API, and the local browser UI (a fifth door that mounts the existing HTTP app under /api and shares the same job store, adding transport only, not a new pipeline) sit above one core that acquires and decodes media, transcribes with the default Whistle engine or an explicitly selected openai-whisper, keeps job state and resume checkpoints in an optional SQLite store, adds optional speaker or translation postprocessing, and publishes TXT, SRT, VTT, JSON, Markdown, and optional DOCX/PDF exports.](https://raw.githubusercontent.com/scottconverse/textflowkit/v0.1.14/docs/assets/architecture-overview.svg)
 
 The design principle is **one shared core, thin doors**. Everything of substance
 lives in the core; the interfaces are thin — the local browser UI is a fifth door
@@ -93,7 +93,7 @@ see [docs/architecture.md](https://github.com/scottconverse/textflowkit/blob/mai
 
 ## Live microphone streaming (opt-in)
 
-In v0.1.12, live streaming supports **Windows x86_64 only**. When
+In v0.1.14, live streaming supports **Windows x86_64 only**. When
 `TEXTFLOWKIT_STREAMING=1` is set, the developer HTTP app serves a `/stream`
 WebSocket and the local UI serves `/api/stream`, both transcribing a live microphone
 as you speak. A **runnable, self-hosted browser example** ships at
@@ -102,7 +102,7 @@ as you speak. A **runnable, self-hosted browser example** ships at
 No CDN, no analytics, no external fetch. Requires the `streaming` extra:
 
 ```bash
-python -m pip install "textflowkit[streaming]==0.1.12"
+python -m pip install "textflowkit[streaming]==0.1.14"
 ```
 
 It is **off by default** — with the switch unset the endpoint does not exist — and
@@ -168,11 +168,13 @@ installs `textflowkit-fonts` for offline multilingual PDF rendering:
 python -m pip install 'textflowkit[export]'
 ```
 
-## Windows desktop installer (v0.1.12; public EXE pending)
+## Windows desktop installer (latest verified installer: v0.1.13)
 
-An installer for the existing local browser workspace accompanies core v0.1.12. The native Windows installer has been built and tested locally. The installer recipe ships in v0.1.12; the EXE remains local-only until unresolved corresponding-source compliance review is cleared. No public installer download link is available. The Python package remains supported for developers and integrations.
+[Download Windows x64 setup](https://github.com/scottconverse/textflowkit/releases/download/v0.1.13/TextFlowKit-0.1.13-windows-x64-setup.exe) · [Matching sources and notices](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.13)
 
-The candidate is designed to run without a separately installed Python, WSL, or
+An installer for the existing local browser workspace accompanies core v0.1.13. The Windows installer and its matching FFmpeg source and notice bundles are distributed together through the [v0.1.13 release](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.13). The Python package remains supported for developers and integrations.
+
+The installer is designed to run without a separately installed Python, WSL, or
 Docker. Its bundle includes a private embeddable CPython runtime, the
 browser UI and HTTP, export, and streaming dependencies, the pinned Whistle model
 and runtime, and ffmpeg, ffprobe, and Node. The setup installs per user,
@@ -189,16 +191,16 @@ bundled; those features remain documented for the Python package when separately
 installed and configured. Streaming dependencies are bundled, but live streaming
 remains opt-in and physical browser microphone capture has not been verified.
 
-The candidate is designed to keep UI data outside the application install
+The installer is designed to keep UI data outside the application install
 directory and preserve it on upgrades and uninstall. Stop the UI server with
 **Stop server** and wait for it to exit before upgrading or uninstalling; the
 installer will block while it is running rather than force-killing active jobs.
 Cancel a job first if it should not drain to completion. The bundle also
 includes third-party license and notice files, including FFmpeg's LGPL notices
 and corresponding-source information. Check exact notices and source-distribution
-details against the final bundled binaries before publication. The candidate is
+details in the matching source bundles distributed with this release. The installer is
 unsigned, so Windows may show a SmartScreen warning. See the [installer candidate
-notes](docs/install.md#windows-desktop-installer-v0112-public-exe-pending).
+notes](https://github.com/scottconverse/textflowkit/blob/main/docs/install.md#windows-desktop-installer-v0113).
 
 ## Python API
 
@@ -295,7 +297,7 @@ textflowkit export ./transcript.json --format vtt
 needs no PyTorch, so a fresh `pip install textflowkit` stays small and pulls no
 torch; `openai-whisper` is an explicitly selectable opt-in engine.
 
-![Whistle bounded block run and durable resume: a decoded PCM WAV is split into 26-second cores with up to 2 seconds of context (each clip ≤ 30 s), each core runs as one owned child with forced telemetry-off flags, a partial checkpoint is written after each core, and a resume validates the source and decoded-WAV hashes then re-runs only the unfinished cores.](https://raw.githubusercontent.com/scottconverse/textflowkit/v0.1.12/docs/assets/whistle-resume.svg)
+![Whistle bounded block run and durable resume: a decoded PCM WAV is split into 11-second cores with up to 2 seconds of context (each clip ≤ 15 s), each core runs as one owned child with forced telemetry-off flags, a partial checkpoint is written after each core, and a resume validates the source and decoded-WAV hashes then re-runs only the unfinished cores.](https://raw.githubusercontent.com/scottconverse/textflowkit/v0.1.14/docs/assets/whistle-resume.svg)
 
 - **CPU only, no torch.** It runs a pinned native binary and downloads one pinned
   model on first use. Naming a GPU device is refused rather than silently
@@ -308,16 +310,26 @@ torch; `openai-whisper` is an explicitly selectable opt-in engine.
   Apple Silicon. **Intel Macs are not supported**; a request there is refused
   with a message that names the explicit `whisper` engine instead. No WSL layer
   is involved.
-- **How it works:** long audio is split into 26-second cores with up to 2 seconds
-  of context on each side, so every standalone clip is ≤ 30 seconds (the native
-  CLI's limit). Overlap words are selected by core midpoint rather than text
-  deduplication, so repeated spoken phrases are preserved.
+- **How it works:** long audio is split into 11-second cores with up to 2 seconds
+  of context on each side, so every standalone clip is ≤ 15 seconds. This conservative
+  ceiling avoids reproduced omissions on 30-second inputs. Midpoints provide initial ownership; shared-context matching
+  reconciles duplicate or dropped occurrences when neighboring timestamps
+  disagree. This is not global text deduplication: real repetitions and ambiguous
+  recognition are preserved. The 15-second ceiling and this assembly behavior ship
+  in v0.1.13; neither recovers speech the native recognizer never emits.
+- **Speech-gap check (v0.1.13).** Short gaps between recognized words receive a
+  bounded second listen with different clip boundaries. Extra words are accepted
+  only between matching words on both sides at nearby times. Existing words and
+  repetitions stay intact; long pauses do not trigger this check. The model is
+  still Whistle, with the same pinned weights and telemetry settings.
 - **Standalone streaming is not used.** The native `--audio-stream` mode failed its
   coverage and is never passed; only the committed standalone output is parsed.
 - **Durable block resume.** With `TEXTFLOWKIT_DB` set, a long run writes partial
   per-block checkpoints; a resume checks the source and decoded-WAV hashes and the
   config, then re-runs only the blocks that were not finished. The durable store
-  still assumes one owning process.
+  still assumes one owning process. The v0.1.13 assembly policy saves raw
+  boundary context with schema 2; old schema-1 partial runs must be restarted,
+  not resumed under the new assembly policy. Existing completed jobs are unchanged.
 - **Cancellation.** A running Whistle run terminates its exact owned child
   process bounded by a per-clip timeout. A single long `openai-whisper` model call
   is still only cancellable at its next stage boundary, as documented for the
@@ -406,7 +418,7 @@ its own beyond the `http` extra. It ships with the core package as of v0.1.10:
 a regular install of the current release carries it.
 
 ```bash
-python -m pip install 'textflowkit[http,export]==0.1.12'
+python -m pip install 'textflowkit[http,export]==0.1.14'
 textflowkit-ui
 ```
 
@@ -477,9 +489,18 @@ browser interface share the job contract without blocking a request.
 
 ## Status
 
-**v0.1.12 release.** Adds optional UI-only local Ollama proofreading and native
-Windows installer packaging; public EXE distribution remains gated on unresolved
-corresponding-source compliance review, with no public installer download link.
+**v0.1.14 release.** Documentation-only patch: records the required isolated headless Codex workflow for DeepSeek coding contributors. Transcription, AI cleanup and streaming behavior are unchanged from v0.1.13; fonts remain 0.1.6. The latest verified Windows installer remains v0.1.13, with its matching source and notice bundles. No new native transcription proof is claimed for this documentation patch.
+
+**Whistle behavior introduced in v0.1.13.** Fixes reproduced Whistle speech omissions. Native decode
+inputs are now bounded to 15 seconds (11-second owned cores with up to 2 seconds
+of context per side), short interior speech gaps get a bounded second listen that
+accepts words only between matching timed anchors, and shared-context words are
+reconciled one-to-one before durable resume. Whistle remains the default engine
+with the same pinned model and runtime; fonts remain 0.1.6. Progress schema 2
+stores raw boundary context, so an unfinished partial job from the previous
+26-second-core plan (schema 1) must be restarted instead of resumed; completed
+records are unchanged. The native Windows installer is rebuilt at v0.1.13 and
+distributed with matching FFmpeg sources, notices, hashes and build instructions.
 Existing optional live streaming provides a transport-neutral
 `StreamingSession` Python API, incremental transcript events, and authenticated
 loopback WebSockets (`/stream` on the developer HTTP API and `/api/stream` on the
@@ -502,6 +523,22 @@ Linux/macOS, and the six other accepted languages were not verified. The public
 website remains static documentation and serves no streaming endpoint. Local source
 validation does not establish published-package or exact-commit CI results.
 
+**v0.1.12 cleanup (historical).** The opt-in local Ollama proofreading path remains
+as introduced in v0.1.12, covering the local browser UI only; it was not changed by
+v0.1.13. It keeps the published 39-segment cleanup proof from v0.1.12 with no
+audio-accuracy claim: that proof records segment/format handling, not recognition
+accuracy.
+
+**v0.1.13 Whistle coverage, omission, and resume.** The 15-second bound (11-second
+cores plus up to 2 s context per side) fixes reproduced speech omissions on
+30-second inputs; the interior speech-gap second listen accepts extra words only
+between matching timed anchors; shared-context words are reconciled one-to-one
+before durable resume so a partial run rejoins without double ownership. Recognized
+language coverage remains the same accepted set, and nothing here recovers speech
+the native recognizer never emits. See
+[docs/verification/whistle-coverage-20261019.md](https://github.com/scottconverse/textflowkit/blob/main/docs/verification/whistle-coverage-20261019.md)
+for the run-by-run coverage, omission, and resume evidence.
+
 **Verification limit.** The local browser interface is covered by an automated
 suite, and the UI's behavior was proved on a **native Windows** machine in a real
 browser. No live optional-backend (translation/diarization) run through the UI is
@@ -524,7 +561,7 @@ MCP speech, seven-format exports and completed resume; the v0.1.8 runtime fixes
 were independently checked through fresh-process CLI restart probes, real SQLite
 setup-failure tests, and the full Windows test suite. Those checks are not new
 individual-harness receipts. That is the previous releases' record, not evidence
-for v0.1.12.
+for v0.1.13.
 
 The v0.1.6 release was the post-v0.1.5 review repair set: security hardening
 for media acquisition and the HTTP and MCP adapters, safer subtitle wrapping and
@@ -543,7 +580,7 @@ and both [core](https://pypi.org/project/textflowkit/0.1.6/) and
 [fonts](https://pypi.org/project/textflowkit-fonts/0.1.6/) PyPI projects are
 live — that is the v0.1.6 release's evidence, not a receipt for a later release.
 Everything from here to the end of this section is the v0.1.6 release's
-historical record as published: it is not re-verified for v0.1.12, whose separate release evidence is not supplied by these historical paragraphs.
+historical record as published: it is not re-verified for v0.1.13, whose separate release evidence is not supplied by these historical paragraphs.
 Merged-main CI passed 16/16 on the tagged commit; the published wheel and
 sdist digests match the GitHub release assets and their SHA-256 list; and a fresh
 Windows Python 3.12 install of `textflowkit[export,mcp,http]==0.1.6` from PyPI
@@ -582,9 +619,9 @@ Issues and PRs welcome. Please read [LEGAL.md](https://github.com/scottconverse/
 adapter.
 
 
-## Optional local AI transcript cleanup (v0.1.12)
+## Optional local AI transcript cleanup (introduced in v0.1.12)
 
-v0.1.12 adds **opt-in proofreading in the local browser UI only**. After a transcription finishes, choose an
+v0.1.12 adds **opt-in proofreading in the local browser UI only** (introduced in v0.1.12; unchanged in v0.1.13). After a transcription finishes, choose an
 installed local Ollama model and click **Proofread with local AI**. Cleanup never
 runs automatically. Ollama and cleanup models are not bundled in the installer.
 The optional default preference is `qwen3.5:9b` only if already installed; its

{textflowkit-0.1.12 → textflowkit-0.1.14}/docs/adapters.md

@@ -1,6 +1,10 @@
 # Developer and integration manual
 
-Current release: [v0.1.12](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.12).
+Current release: [v0.1.14](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.14).
+
+v0.1.14 updates developer workflow documentation only; runtime behavior is unchanged. The latest verified Windows installer remains v0.1.13 with its matching sources and notices.
+For DeepSeek coding contributions, use the required [headless Codex worker workflow](deepseek-worker.md); this is a development tool, not a transcription-engine setting.
+
 Start with the [user manual](user-manual.md) for everyday use. Harness versions
 in the compatibility table below identify **historical test sessions**, not
 the version of TextFlowKit currently published.
@@ -22,9 +26,11 @@ API and WebSockets are ephemeral and bypass durable job submission.
    HTTP ───────────►└──────────────────────┘
 ```
 
-## Windows desktop installer (v0.1.12; public EXE pending)
+## Windows desktop installer (v0.1.13)
+
+[Download Windows x64 setup](https://github.com/scottconverse/textflowkit/releases/download/v0.1.13/TextFlowKit-0.1.13-windows-x64-setup.exe) · [Matching sources and notices](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.13)
 
-The Windows x86_64 installer packages the existing browser interface for core v0.1.12. The native Windows installer has been built and tested locally. The installer recipe ships in v0.1.12; the EXE remains local-only until unresolved corresponding-source compliance review is cleared. No public installer download link is available. Its bundle includes private embeddable CPython, the UI and HTTP, export, and streaming dependencies, the pinned Whistle model and runtime, and ffmpeg, ffprobe, and Node. It requires no separately installed Python, WSL, or Docker. The Python package remains supported for developers and integrations; Docker remains a separate operator deployment example.
+The Windows x86_64 installer packages the existing browser interface for core v0.1.13. The Windows installer and its matching FFmpeg source and notice bundles are distributed together through the [v0.1.13 release](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.13). Its bundle includes private embeddable CPython, the UI and HTTP, export, and streaming dependencies, the pinned Whistle model and runtime, and ffmpeg, ffprobe, and Node. It requires no separately installed Python, WSL, or Docker. The Python package remains supported for developers and integrations; Docker remains a separate operator deployment example.
 
 The setup installs per user, adds a Start Menu entry, and offers an
 optional desktop shortcut. Launching it will start the local server and open the
@@ -551,7 +557,7 @@ observation rather than forwarding the caller's header, and keep
 
 ## Live microphone streaming (`/stream`, opt-in)
 
-In v0.1.12, native live streaming supports **Windows x86_64 only**. Other live
+In v0.1.14, native live streaming (introduced in v0.1.11) supports **Windows x86_64 only**. Other live
 platforms are unsupported; existing standalone defaults and platform support are
 unchanged. Physical browser microphone capture was not verified. The public site
 is static documentation and serves no streams. Both local server surfaces can
@@ -562,7 +568,7 @@ exist and a connection is refused before any session is allocated - and it needs
 `streaming` extra (`websockets`).
 
 ```powershell
-python -m pip install "textflowkit[streaming]==0.1.12"
+python -m pip install "textflowkit[streaming]==0.1.14"
 # Native Windows PowerShell:
 $env:TEXTFLOWKIT_API_TOKEN="choose-a-long-random-token"
 $env:TEXTFLOWKIT_STREAMING="1"
@@ -602,7 +608,7 @@ supplies FastAPI and uvicorn, and adds no new dependency). It has no public site
 of its own: it is a local app, not a hosted service.
 
 ```bash
-python -m pip install 'textflowkit[http,export]==0.1.12'
+python -m pip install 'textflowkit[http,export]==0.1.14'
 textflowkit-ui                 # serve on 127.0.0.1 and open a browser
 textflowkit-ui --no-browser --port 8901
 ```
@@ -986,7 +992,7 @@ By default the job store is in-memory and bounded (`max_jobs=200`, terminal
 jobs evicted first). Set `TEXTFLOWKIT_DB` to use the durable SQLite store for
 restart-safe jobs and checkpoints. The SQLite store assumes one owning process.
 
-## UI-only proofreading routes (v0.1.12)
+## UI-only proofreading routes (introduced in v0.1.12)
 
 These routes belong to the local UI session gate, not the developer HTTP or MCP
 API. POST requires the existing `x-textflowkit-ui-capability` header. Host, peer