textflowkit 0.1.8__tar.gz → 0.1.10__tar.gz

{textflowkit-0.1.8 → textflowkit-0.1.10}/.github/workflows/ci.yml

@@ -58,7 +58,11 @@ jobs:
         run: |
           python -m pip install --upgrade pip
           python -m pip install ./packages/textflowkit-fonts
-          python -m pip install -e ".[dev,mcp,http,export]"
+          # `whisper` is installed here because the existing engine tests
+          # (openai-whisper's verbose/quiet contract, model-name validation)
+          # genuinely need the openai-whisper package present. It is an optional
+          # extra now that Whistle is the default engine, so it must be named.
+          python -m pip install -e ".[dev,mcp,http,export,whisper]"
 
       - name: Show ffmpeg version
         shell: bash
@@ -86,6 +90,6 @@ jobs:
           python -m pip install "setuptools>=83" "build>=1.2"
           python -m build --wheel
           python -m build --wheel --outdir dist packages/textflowkit-fonts
-      - name: Smoke all three installed entry points
+      - name: Smoke all four installed entry points (CLI, MCP, HTTP, served UI)
         shell: bash
         run: python scripts/smoke_installed_wheel.py dist/textflowkit-*.whl dist/textflowkit_fonts-*.whl

{textflowkit-0.1.8 → textflowkit-0.1.10}/CHANGELOG.md

@@ -1,5 +1,128 @@
 # Changelog
 
+## v0.1.10 — 2026-10-06
+
+**The local browser interface ships.** The loopback-only browser workspace
+(`textflowkit-ui`) is now part of the core package rather than source-only, so a
+regular install of this release carries the command. Core version: 0.1.10;
+unchanged optional fonts: 0.1.6.
+
+### Added
+
+- **Local browser interface in the core package.** `textflowkit-ui` serves a
+  point-and-click workspace on **this machine only**: it binds `127.0.0.1` (never
+  off the machine, whatever `TEXTFLOWKIT_ALLOW_REMOTE` is set to) and opens a
+  browser once serving. It mounts the existing developer HTTP app under `/api`
+  **unchanged** — the same routes, submission contract, and job store — and adds
+  only transport: a loopback session layer, a streamed upload, a fixed-format
+  download, in-workspace playback, and a capability endpoint. It adds **no new
+  dependency** beyond the existing `http` extra (FastAPI + uvicorn).
+- **Durable jobs, cancel and resume in the workspace.** Jobs and checkpoints are
+  stored durably under the per-user data directory unless
+  `TEXTFLOWKIT_DB` / `TEXTFLOWKIT_WORK_ROOT` / `TEXTFLOWKIT_OUTPUT_ROOT` is set.
+  A dropped file is streamed and capped at **2 GiB** by default
+  (`TEXTFLOWKIT_UI_MAX_UPLOAD_BYTES` overrides it). A running job can be
+  cancelled, and a durable job resumed.
+- **Windows desktop shortcut.** `textflowkit-ui --create-shortcut` creates a Start
+  Menu entry that launches with `pythonw` (no console) and needs no `pywin32`.
+  Under `pythonw` a startup failure is logged under the per-user data directory
+  and shown in a message box rather than failing silently.
+- **Controlled shutdown that drains.** **Stop server** asks this process's own
+  uvicorn server to exit through its supported `should_exit` flag; the normal
+  lifespan teardown **waits for current jobs to finish** before draining the
+  worker pool rather than interrupting them, so a running job's saved progress
+  survives and is resumable. It never sends a signal to a pid.
+
+### Changed
+
+- **Documentation surfaces.** README, user manual, install notes, developer
+  manual, architecture guide, roadmap, release checklist, site deployment, the
+  landing page, and the checked-in SVG diagrams now describe the local browser
+  interface as a shipped feature and a fifth door, and remove the earlier
+  "unreleased candidate / install from source only" wording.
+- **No endpoint-breaking change.** The CLI, Python API, MCP server, and JSON HTTP
+  adapter are unchanged in this release; the optional engines, diarization, and
+  translation keep their documented dependency requirements.
+
+### Verification boundary
+
+Automated coverage runs the UI's routes, packaging, ownership/shutdown, and
+security boundaries. A **native Windows** machine, in a real browser, proved the
+workspace end to end (drop a file, submit, download, stop). That is one platform's
+browser proof, **not** a live Linux or macOS UI run — those platforms are covered
+by automated tests only, and cross-platform CI (Windows/Linux/macOS) is a separate
+step run by the coordinator. **No live optional-backend (translation or
+diarization) run through the UI is claimed.** The engine and packaging changes of
+v0.1.9 are unchanged by this release.
+
+## v0.1.9 — 2026-10-05
+
+**Whistle is now the default engine.** This release ships the Whistle integration
+prepared on the `feat/whistle-primary` branch.
+
+### Changed
+
+- **Whistle is the default engine; openai-whisper becomes an explicit opt-in.**
+  Whistle is a CPU-only native CLI that needs no PyTorch, so a fresh
+  `pip install textflowkit` no longer pulls the torch stack. `openai-whisper`
+  moves to a new optional `whisper` extra and is selected with `--engine whisper`
+  (or `engine="whisper"` on the Python/MCP/HTTP surfaces); the `all` extra still
+  includes it. A saved request or checkpoint from before this change keeps running
+  on the engine it names, so legacy Whisper work is never silently migrated, and
+  legacy engine aliases are preserved so older decoders keep working.
+- **Engine selection is never silent.** An unknown engine name, an unsupported
+  language, or a non-CPU device for Whistle is refused at request construction —
+  before any media is fetched — and the message names `--engine whisper` as the
+  GPU alternative. The engine is not switched to satisfy a request.
+
+### Added
+
+- **Whistle engine.** Seven advertised languages (`en`, `de`, `fr`, `es`, `it`,
+  `nl`, `pl`); native Windows x86-64/arm64, Linux x86-64/arm64, and Apple Silicon
+  (an Intel Mac is refused and pointed at the explicit Whisper engine); no WSL.
+  One pinned native binary and one pinned model are downloaded and hash-verified
+  on first use, outside the package. Long audio is split into 26-second cores with
+  up to 2 seconds of context (each clip ≤ 30 s); a word is owned by the clip whose
+  core contains its midpoint, so repeated phrases are preserved. Native
+  `--audio-stream` is never used.
+- **Durable per-block resume for Whistle.** A long run persists a partial
+  checkpoint after each core; a resume validates the source and decoded-WAV
+  hashes and the configuration, then re-runs only the unfinished blocks and adopts
+  the rest. A partial body is Whistle-only. Reuses the existing single SQLite
+  store and its one-owning-process model.
+- **Prompt, bounded cancellation.** A running Whistle run polls for cancellation
+  between clips and terminates its exact owned child process, bounded by a
+  per-clip timeout and a bounded stdout cap. A single long `openai-whisper` model
+  call is still cancellable only at its next stage boundary.
+- **Telemetry off, unconditionally.** Every Whistle child process forces
+  `NEEDLE_TELEMETRY=0`, `DO_NOT_TRACK=1`, and `CI=1`, overriding a parent that
+  opted in, and there is no opt-in setting. The product adds no analytics, usage
+  SDK, anonymous ids, or events. `TEXTFLOWKIT_OFFLINE` refuses downloads and
+  `TEXTFLOWKIT_MODELS_DIR` chooses the asset directory; the pinned first-use
+  asset/model download is not telemetry.
+
+### Documentation
+
+- README, user manual, install/adapter/architecture/roadmap/release docs and the
+  website source now describe Whistle as the shipped default. ROCm (and the
+  torch-pinning caveat) is scoped to the explicit `whisper` engine and
+  diarization, never to Whistle.
+- Self-contained checked-in SVG architecture drawings were added under
+  `docs/assets` and embedded in the README, both manuals (`user-manual.md` and the
+  renamed **Developer and integration manual**, `adapters.md`), the architecture
+  guide, and the landing page.
+- The live YouTube release smoke pins `--engine whisper --model tiny` so its
+  measured default-clip word stays reproducible across the default-engine change.
+
+### Verification boundary
+
+Local evidence only: a 4-hour (14,407-second) CPU run produced 555
+clips / 34,596 words / 2,875 segments in 731 seconds, offline with telemetry
+forced off, and a separate two-process run proved durable block resume. These are
+first local test numbers on one machine — not a universal performance claim, and
+not a claim that Whistle's accuracy equals Whisper's. No human-scored
+word-error rate is claimed.
+
 ## v0.1.8 — 2026-10-02
 
 The 2026-10-02 audit-lite repair release. Core version: 0.1.8; unchanged optional fonts: 0.1.6. It carries the four fixes for the post-release audit-lite of 2026-10-01 (findings AL-001 – AL-004). Release artifacts and publication status are recorded on [GitHub Releases](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.8). Local source-candidate verification does not establish installed-package or individual harness compatibility.

{textflowkit-0.1.8 → textflowkit-0.1.10}/Dockerfile

@@ -77,11 +77,13 @@ RUN set -eux; \
 WORKDIR /app
 COPY pyproject.toml README.md LICENSE ./
 COPY src ./src
-# The base dependencies are yt-dlp and openai-whisper, so this image is large:
-# openai-whisper pulls a torch build. That is the product's own requirement, not
-# something this file adds.
+# The base dependencies are yt-dlp alone: the default engine (Whistle) is a
+# native CPU binary fetched on first use, so this image does not pull a torch
+# build. Selecting the openai-whisper engine needs the `whisper` extra named
+# here; the image installs it because the container is meant to serve the
+# Whisper stack too, and openai-whisper is what pulls the torch build.
 RUN python -m pip install --no-cache-dir --upgrade pip \
- && python -m pip install --no-cache-dir ".[http]"
+ && python -m pip install --no-cache-dir ".[http,whisper]"
 
 # Non-secret defaults only. The roots are the directories created above; Compose
 # repeats them so the volumes it mounts land on the paths the service reads.

{textflowkit-0.1.8 → textflowkit-0.1.10}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: textflowkit
-Version: 0.1.8
+Version: 0.1.10
 Summary: Cross-platform media transcription toolkit: URL or file in, timestamped transcripts and subtitle files out.
 Project-URL: Homepage, https://www.textflowkit.org/
 Project-URL: Issues, https://github.com/scottconverse/textflowkit/issues
@@ -21,11 +21,11 @@ Classifier: Programming Language :: Python :: 3.13
 Classifier: Topic :: Multimedia :: Sound/Audio :: Speech
 Classifier: Topic :: Text Processing
 Requires-Python: >=3.10
-Requires-Dist: openai-whisper>=20240930
 Requires-Dist: yt-dlp>=2025.1.1
 Provides-Extra: all
 Requires-Dist: fastapi>=0.115; extra == 'all'
 Requires-Dist: mcp>=2.0; extra == 'all'
+Requires-Dist: openai-whisper>=20240930; extra == 'all'
 Requires-Dist: pyannote-audio>=4.0; extra == 'all'
 Requires-Dist: pydantic>=2.7; extra == 'all'
 Requires-Dist: python-docx>=1.1; extra == 'all'
@@ -53,6 +53,8 @@ Requires-Dist: pydantic>=2.7; extra == 'http'
 Requires-Dist: uvicorn>=0.30; extra == 'http'
 Provides-Extra: mcp
 Requires-Dist: mcp>=2.0; extra == 'mcp'
+Provides-Extra: whisper
+Requires-Dist: openai-whisper>=20240930; extra == 'whisper'
 Description-Content-Type: text/markdown
 
 # textflowkit
@@ -62,9 +64,10 @@ Cross-platform media transcription toolkit. **One core, one CLI, thin adapters.*
 [Project landing page](https://www.textflowkit.org/) ·
 [PyPI package](https://pypi.org/project/textflowkit/) ·
 [GitHub releases](https://github.com/scottconverse/textflowkit/releases) ·
-[User manual](https://github.com/scottconverse/textflowkit/blob/main/docs/user-manual.md)
+[User manual](https://github.com/scottconverse/textflowkit/blob/main/docs/user-manual.md) ·
+[Developer and integration manual](https://github.com/scottconverse/textflowkit/blob/main/docs/adapters.md)
 
-**Current release: [v0.1.8](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.8).**
+**Current release: [v0.1.10](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.10).**
 
 The [static site deployment](https://github.com/scottconverse/textflowkit/blob/main/docs/site-deployment.md) is hosted on Cloudflare
 Pages. GitHub remains the source and CI host; the website does not run the
@@ -111,7 +114,7 @@ URL or file  ─►  detect platform  ─►  acquire media  ─►  ffmpeg
                                                           │
                               ┌───────────────────────────┘
                               ▼
-                    speech-to-text (Whisper)
+              speech-to-text (Whistle default; Whisper on request)
                               │
                               ▼
                  canonical transcript (JSON)
@@ -125,8 +128,11 @@ DOCX and PDF are available through the optional `export` extra.
 
 ## Architecture
 
-The design principle is **one engine, three doors**. Everything of substance lives in
-the core; the interfaces are thin.
+![TextFlowKit shared-core architecture: five thin entry points feed one core. The CLI, Python API, MCP, HTTP API, and the local browser UI (a fifth door that mounts the existing HTTP app under /api and shares the same job store, adding transport only, not a new pipeline) sit above one core that acquires and decodes media, transcribes with the default Whistle engine or an explicitly selected openai-whisper, keeps job state and resume checkpoints in an optional SQLite store, adds optional speaker or translation postprocessing, and publishes TXT, SRT, VTT, JSON, Markdown, and optional DOCX/PDF exports.](https://raw.githubusercontent.com/scottconverse/textflowkit/v0.1.10/docs/assets/architecture-overview.svg)
+
+The design principle is **one shared core, thin doors**. Everything of substance
+lives in the core; the interfaces are thin — the local browser UI is a fifth door
+that adds only transport over the existing HTTP app and shared job store.
 
 | Layer | Path | Responsibility |
 |---|---|---|
@@ -136,6 +142,7 @@ the core; the interfaces are thin.
 | **CLI** | `src/textflowkit/cli.py` | Reference interface (subprocess-friendly) |
 | **MCP** | `src/textflowkit/adapters/mcp_server.py` | stdio + Streamable HTTP, for AI harnesses |
 | **HTTP** | `src/textflowkit/adapters/http_server.py` | JSON API, for software products and web frontends |
+| **Local UI** | `src/textflowkit/ui` | Loopback-only browser workspace over the same HTTP app and job store |
 
 Because the core owns the pipeline, adding a door is cheap — and adding a platform
 means writing one source adapter, not another tool.
@@ -164,6 +171,22 @@ python -m pip install textflowkit
 textflowkit doctor
 ```
 
+The default engine is **Whistle**: a native CPU-only transcription CLI that
+needs no PyTorch. It downloads one pinned model (about 17 MB) and a small pinned
+binary on first use; a fresh default install therefore stays small and pulls no
+torch. To use the `openai-whisper` engine instead — the ROCm/CUDA/CPU torch
+stack — install the `whisper` extra and name it explicitly:
+
+```bash
+python -m pip install 'textflowkit[whisper]'
+textflowkit transcribe meeting.mp4 --engine whisper --model small
+```
+
+See [Whistle (default engine)](#whistle-default-engine) for platform and
+language coverage, and the [install guide](https://github.com/scottconverse/textflowkit/blob/main/docs/install.md)
+for the AMD ROCm path, which applies to the explicit `whisper` engine and
+diarization.
+
 For MCP or the JSON HTTP adapter, install the matching extra:
 
 ```bash
@@ -187,7 +210,6 @@ from textflowkit import transcribe
 
 result = transcribe(
     "meeting.mp4",            # also accepts supported URLs
-    model="small",
     formats=["json", "srt", "txt"],
     output_dir="transcripts", # omit to return the transcript without writing files
 )
@@ -200,6 +222,10 @@ for segment in result.transcript.segments:
         print("  ", word.start, word.end, word.text)
 ```
 
+`engine` defaults to the product default (Whistle) and `model=None` resolves to
+that engine's own model. To use the Whisper-family engines, name one and its
+model explicitly: `transcribe("meeting.mp4", engine="whisper", model="small")`.
+
 `transcribe()` returns `TranscribeResult` with a canonical `Transcript` and
 written output paths. `Transcript.to_dict()` / `.to_json()` preserve segment and
 word timing; older transcript JSON without `words` remains readable. Pass
@@ -264,6 +290,60 @@ does **not** assert that the remote bytes are still identical.
 textflowkit export ./transcript.json --format vtt
 ```
 
+## Whistle (default engine)
+
+**Whistle is the default engine** as of v0.1.9. It is a native CPU-only CLI that
+needs no PyTorch, so a fresh `pip install textflowkit` stays small and pulls no
+torch; `openai-whisper` is an explicitly selectable opt-in engine.
+
+![Whistle bounded block run and durable resume: a decoded PCM WAV is split into 26-second cores with up to 2 seconds of context (each clip ≤ 30 s), each core runs as one owned child with forced telemetry-off flags, a partial checkpoint is written after each core, and a resume validates the source and decoded-WAV hashes then re-runs only the unfinished cores.](https://raw.githubusercontent.com/scottconverse/textflowkit/v0.1.10/docs/assets/whistle-resume.svg)
+
+- **CPU only, no torch.** It runs a pinned native binary and downloads one pinned
+  model on first use. Naming a GPU device is refused rather than silently
+  ignored: a GPU request names the explicit `whisper` engine as the alternative,
+  and the engine is never switched for you.
+- **Seven advertised languages:** `en`, `de`, `fr`, `es`, `it`, `nl`, `pl`. A
+  request for another language is refused at request construction, before any
+  media is fetched.
+- **Native platforms:** Windows x86-64 and arm64, Linux x86-64 and arm64, and
+  Apple Silicon. **Intel Macs are not supported**; a request there is refused
+  with a message that names the explicit `whisper` engine instead. No WSL layer
+  is involved.
+- **How it works:** long audio is split into 26-second cores with up to 2 seconds
+  of context on each side, so every standalone clip is ≤ 30 seconds (the native
+  CLI's limit). Overlap words are selected by core midpoint rather than text
+  deduplication, so repeated spoken phrases are preserved.
+- **Streaming is not used.** The native `--audio-stream` mode failed its
+  coverage and is never passed; only the committed standalone output is parsed.
+- **Durable block resume.** With `TEXTFLOWKIT_DB` set, a long run writes partial
+  per-block checkpoints; a resume checks the source and decoded-WAV hashes and the
+  config, then re-runs only the blocks that were not finished. The durable store
+  still assumes one owning process.
+- **Cancellation.** A running Whistle run terminates its exact owned child
+  process bounded by a per-clip timeout. A single long `openai-whisper` model call
+  is still only cancellable at its next stage boundary, as documented for the
+  Whisper engine.
+- **Telemetry is off, unconditionally.** Every Whistle child process forces
+  `NEEDLE_TELEMETRY=0`, `DO_NOT_TRACK=1`, and `CI=1`, overriding a parent that
+  opted in. The product ships no analytics, usage SDK, anonymous ids, or events,
+  and there is no opt-in setting. This applies the upstream documented gate; it
+  is **not** a claim that the upstream binary's tracking code is physically
+  removed.
+- **Offline and downloads.** Set `TEXTFLOWKIT_OFFLINE` to refuse any download, and
+  `TEXTFLOWKIT_MODELS_DIR` to choose the asset directory. The Whistle asset helper
+  downloads only pinned runtime/model assets; media acquisition and optional
+  translation may independently use the network. These downloads are not
+  telemetry.
+
+**Verification boundary.** A local run transcribed a 4-hour (14,407 s)
+recording on CPU into 555 clips / 34,596 words / 2,875 segments in 731 s, with
+telemetry forced off and offline mode on; a separate run proved durable block
+resume across two processes. These are **first local test numbers**, not a
+promise of universal performance or of accuracy equal to Whisper — no
+human-scored word-error rate is claimed. See the
+[user manual](https://github.com/scottconverse/textflowkit/blob/main/docs/user-manual.md)
+and [install guide](https://github.com/scottconverse/textflowkit/blob/main/docs/install.md).
+
 ## Use as an MCP server
 
 ```bash
@@ -319,11 +399,71 @@ contract checks cover it, and running an actual build is deliberately out of
 scope here, so no image is claimed to build or start. See
 [the container example](https://github.com/scottconverse/textflowkit/blob/main/docs/adapters.md#container-example-dockerfile-and-compose).
 
+## Local browser interface
+
+For point-and-click use there is a local browser workspace that runs on **this
+machine only**, reuses the same pipeline and job store, and adds no dependency of
+its own beyond the `http` extra. It ships with the core package as of v0.1.10:
+a regular install of the current release carries it.
+
+```bash
+python -m pip install 'textflowkit[http,export]==0.1.10'
+textflowkit-ui
+```
+
+On Windows you can create a desktop shortcut when you want one:
+
+```powershell
+textflowkit-ui --create-shortcut                 # Start Menu entry (pythonw, no console)
+textflowkit-ui --create-shortcut --shortcut-dir 'C:\path\to\folder'
+```
+
+The shortcut is created only on request and needs no `pywin32`. Under `pythonw`
+there is no console, so a startup failure is written to a log file under the
+per-user data directory and shown in a message box rather than failing silently.
+The normal operator path is to launch from that shortcut; the console command
+above is equivalent.
+
+**This is a local app, not a public website.** The [landing page](https://www.textflowkit.org/)
+is static documentation served by Cloudflare Pages; it does **not** run the
+transcription engine and offers no upload form. The browser workspace exists only
+on the machine that installed it.
+
+- **Loopback only.** It binds `127.0.0.1` (never off the machine, whatever
+  `TEXTFLOWKIT_ALLOW_REMOTE` is set to) and opens a browser once it is serving.
+- **One owner per database.** A second launch against the same database opens the
+  UI already running rather than starting a competing server. **Stop server** in
+  the workspace shuts the local server down without a terminal, waiting for the
+  current jobs to finish rather than interrupting them. Shutdown **drains** — it
+  lets in-flight jobs complete; it does **not** auto-cancel them. Cancel a job
+  first to stop it early.
+- **Durable jobs with cancel and resume.** Jobs and checkpoints are stored
+  durably under the per-user data directory unless you set `TEXTFLOWKIT_DB` /
+  `TEXTFLOWKIT_WORK_ROOT` / `TEXTFLOWKIT_OUTPUT_ROOT`. A dropped file is capped
+  at **2 GiB** by default (`TEXTFLOWKIT_UI_MAX_UPLOAD_BYTES` overrides it).
+  In-workspace playback uses the browser's native player on the **currently
+  selected** media, so it depends on what that browser can decode; it is a
+  convenience preview, not a format guarantee.
+- **No UI analytics.** The page loads no CDN asset and no analytics, and the
+  session token lives only in the page — never in a URL, cookie, or log line.
+- **What uses the network.** The page itself loads nothing remote. A **URL
+  source** is downloaded from the internet; an engine's **model** may be
+  downloaded on first use; and **remote or cloud translation** (an advanced
+  option) sends transcript text to that backend. With local media and a local
+  translation model, no transcript leaves the machine.
+- `--port`, `--no-browser`, and `--version` are available.
+
+The other doors are unchanged: the CLI, Python API, MCP, and HTTP adapters keep
+their existing behavior, and the optional engines, diarization, and translation
+retain their documented dependency requirements. See the
+[user manual](https://github.com/scottconverse/textflowkit/blob/main/docs/user-manual.md#7-local-browser-interface)
+and [architecture guide](https://github.com/scottconverse/textflowkit/blob/main/docs/architecture.md#one-owner-per-database).
+
 ## Durable, bounded, cancellable
 
 ```bash
 TEXTFLOWKIT_DB=./jobs.db            # job state survives restart (SQLite)
-TEXTFLOWKIT_MAX_CONCURRENCY=1        # default; Whisper saturates a GPU alone
+TEXTFLOWKIT_MAX_CONCURRENCY=1        # default; bounded job worker pool
 ```
 
 `cancel_job` stops a queued job immediately, or a running job at its next stage
@@ -333,19 +473,51 @@ boundary. See [docs/adapters.md](https://github.com/scottconverse/textflowkit/bl
 
 The MCP and HTTP adapters are **job-based**: submission returns a job id
 immediately and clients poll for completion. The CLI uses the same core but
-waits for the result. This lets AI harnesses, software products, and a future
-web frontend share the job contract without blocking a request.
+waits for the result. This lets AI harnesses, software products, and the local
+browser interface share the job contract without blocking a request.
 
 ## Status
 
-**v0.1.8 release.** Core, CLI, MCP, and HTTP have automated
-coverage. This release carries the four fixes for the 2026-10-01 post-release
-audit-lite (findings AL-001 – AL-004): CLI owning-process startup recovery so an
-interrupted run's saved work can be resumed instead of being refused as
-"already active", preservation of the completed transcript across resume setup
-failures, a correction to the MCP batch cookie capability, and corrected roadmap
-evidence receipts. It builds on the v0.1.7 audit repair set and the v0.1.6
-review repairs that precede it. The preceding v0.1.7 source candidate was verified with real CLI, HTTP and MCP speech, seven-format exports and completed resume. The v0.1.8 runtime fixes were independently checked through fresh-process CLI restart probes, real SQLite setup-failure tests, and the full Windows test suite; those checks are not new individual-harness receipts. Release publication uses the tag workflow, which requires successful exact-commit main CI before PyPI uploads and creates the public GitHub release only afterward. Check the linked release for artifacts and workflow status; local source verification is not a fresh PyPI-install or individual-harness receipt.
+**v0.1.10 release.** Core, CLI, MCP, HTTP, and the local browser interface have
+automated coverage. This release **ships the local browser interface**
+(`textflowkit-ui`) in the core package: a loopback-only workspace that reuses the
+same pipeline, submission contract, and job store, with a durable store, cancel
+and resume, and a Windows desktop shortcut (`textflowkit-ui --create-shortcut`).
+It adds **no new dependency** beyond the existing `http` extra, so a regular
+`pip install 'textflowkit[http,export]==0.1.10'` carries it. The engine, CLI,
+Python, MCP, and HTTP surfaces are unchanged and there is **no endpoint-breaking
+change**. It builds on v0.1.9, which made **Whistle the default engine** — a
+native CPU-only transcriber that needs no PyTorch — and moved `openai-whisper` to
+the optional `whisper` extra, selected explicitly with `--engine whisper` or
+`engine="whisper"`. Legacy engine aliases are preserved, so older saved jobs and
+`transcribe()` calls still decode. Whistle refuses an unsupported platform,
+language, or GPU request instead of silently falling back; its engine's
+verification boundary is in [Whistle (default engine)](#whistle-default-engine)
+above.
+
+**Verification limit.** The local browser interface is covered by an automated
+suite, and the UI's behavior was proved on a **native Windows** machine in a real
+browser. No live optional-backend (translation/diarization) run through the UI is
+claimed, and **no live Linux or macOS UI run was performed here** — those
+platforms are covered by automated tests only, and CI across Windows, Linux, and
+macOS is the coordinator's separate step. Release publication uses the tag
+workflow, which requires successful exact-commit main CI before PyPI uploads and
+creates the public GitHub release only afterward. Check the linked release for
+artifacts and workflow status; local source verification is not a fresh
+PyPI-install or individual-harness receipt.
+
+The v0.1.8 release carried four fixes for the 2026-10-01 post-release audit-lite
+(findings AL-001 – AL-004): CLI owning-process startup recovery so an interrupted
+run's saved work can be resumed instead of being refused as "already active",
+preservation of the completed transcript across resume setup failures, a
+correction to the MCP batch cookie capability, and corrected roadmap evidence
+receipts. It built on the v0.1.7 audit repair set and the v0.1.6 review repairs
+that precede it. The v0.1.7 source candidate was verified with real CLI, HTTP and
+MCP speech, seven-format exports and completed resume; the v0.1.8 runtime fixes
+were independently checked through fresh-process CLI restart probes, real SQLite
+setup-failure tests, and the full Windows test suite. Those checks are not new
+individual-harness receipts. That is the previous releases' record, not evidence
+for v0.1.10.
 
 The v0.1.6 release was the post-v0.1.5 review repair set: security hardening
 for media acquisition and the HTTP and MCP adapters, safer subtitle wrapping and
@@ -362,9 +534,9 @@ The v0.1.6 release is public: the
 [v0.1.6 GitHub release](https://github.com/scottconverse/textflowkit/releases/tag/v0.1.6)
 and both [core](https://pypi.org/project/textflowkit/0.1.6/) and
 [fonts](https://pypi.org/project/textflowkit-fonts/0.1.6/) PyPI projects are
-live — that is the previous release's evidence, not a receipt for v0.1.8.
+live — that is the v0.1.6 release's evidence, not a receipt for a later release.
 Everything from here to the end of this section is the v0.1.6 release's
-historical record as published: it is not re-verified for v0.1.8, whose separate release evidence is not supplied by these historical paragraphs.
+historical record as published: it is not re-verified for v0.1.10, whose separate release evidence is not supplied by these historical paragraphs.
 Merged-main CI passed 16/16 on the tagged commit; the published wheel and
 sdist digests match the GitHub release assets and their SHA-256 list; and a fresh
 Windows Python 3.12 install of `textflowkit[export,mcp,http]==0.1.6` from PyPI