insonicinsonic

insonic · v1.0.1 · released

All versionsCurrent documentation

Changelog

All notable changes to this project will be documented here. The format follows Keep a Changelog, and releases use Semantic Versioning.

Unreleased

1.0.1 - 2026-10-15

  • Resolve contextual CLI help before effects and preserve literal arguments, atomic option values, scalar/Boolean arity, repeatable speaker selectors and early invalid-command diagnostics. Include operation-specific JSON-file templates and contracts.

  • Repair shared settings dispatch, initial speaker-model listing and protected vault deletion against live or stopped runtimes.

  • Preserve exact signed integer values and distinguish captured local timezone policy from explicit timezone selections across prepared/replayed date inputs.

  • Preserve classified durable failures through show/results/wait, reload and portable proofs, including acquisition checksum, limit and timeout causes.

  • Normalize all machine output to runtime-response envelopes with success on stdout and failure on stderr; failed waits retain both result and error. Consumers of formerly bare local/maintenance output must unwrap result. Output delivery failures return a nonzero status.

  • Retain read compatibility for persisted 1.0.0 workspace/tool/document contracts without rewriting historical bytes, profile identities or generic failure receipts. Current transport/package versions remain exact.

  • Add readable bounded CLI results, exact document/page and lease actions, interactive work progress, partial-date warnings, truthful credential state and generated operation-specific corrections.

  • Report hidden runtime startup failures promptly and support verbose/debug/quiet controls with explicitly elected private bounded diagnostic logs.

  • Retain incompatible model inspection identity, acquisition/verification readiness, manifest file roles and dataset preparation readiness. Model materialization now returns an object containing named files and readiness instead of a bare positional array; consumers must read result.files. Execution eligibility and frozen identities remain unchanged.

  • Add revisioned workspace import presets shared by the CLI and desktop, with applied filesystem/S3 destinations, date policy and optional frozen pipeline elections. Reject unresolved selections before enqueue and retain effective choices and deterministic processing children across retries.

  • Replace unsupported current documentation commands with executable input files, observed ID/revision steps and extracted-package qualification. Clarify mapping concurrency, admitted partial-date results and current manual setup capabilities; preserve immutable historical documentation.

  • Withdraw macOS support in 1.0.1. Windows/Linux x86-64 retain CLI-only and Desktop + CLI packages; this release requires four variants. Historical 1.0.0 packages, documentation and six-variant record validation remain unchanged.

  • Explain package inclusion, prerequisites and complete Windows ZIP installation/update/removal; copy through alias-aware owned attempts with atomic promotion, and preserve existing/substituted directories on failure.

  • Add complete shared CLI/desktop backend plans, non-mutating readiness preflight and explicit fresh provisioning with protected credentials before catalog connection.

  • Add native Ollama query assistance, metadata-only service/model discovery, explicit inference-route election, synthetic task receipts and cancellation of underlying desktop operations.

  • Reject remote PostgreSQL profiles mislabeled local; retain verified TLS by default and provide explicitly named insecure remote transport.

  • Qualify cache/restore 6.1.0, artifact upload 7.0.2/download 8.0.2, setup-node 7.1.0, Next.js 16.4.0 and the Go runtime dependency group. Require explicit archived artifact uploads, extracted downloads and digest failure, with repository checks rejecting mutable artifact pins and missing attempt fences regardless of action-name case. Retain controlled qualification output on timeout after terminating its process tree.

  • Derive Go package notices from the modules linked into each shipped executable, reject missing or mismatched upstream source/license evidence, and independently check candidate inventory membership. Exclude unused tooling modules without downloading their graph.

  • Update x/net to 0.61.0 and the docs renderer to Mermaid 12.2.0 with KaTeX 0.18.2, covering inherited trust-option handling and actual public/offline SVG theme rendering.

  • Add shared managed CPU worker setup, exact builtin model acquisition/local reuse, protected token registration and five-task readiness across CLI and desktop Settings. Preserve frozen environments, devices, destinations and settings revisions; package complete optional acquisition metadata and hash locks.

  • Add optional, resumable first-run setup across CLI and desktop, with editable library location, backend selection before fresh provisioning, five saved stages and explicit task readiness. Preserve accepted settings and durable work on skip/defer, reconcile repeated saves and reject stale progress writes.

  • Add an unsigned per-user Windows MSI with selectable Desktop/CLI clients, optional branded integrations, transactional maintenance and a useful selected-client launcher. Preserve the four archive choices and add independent MSI payload/source qualification.

  • Preserve explicitly selected program locations during upgrades, check active work in both installation roots and refuse unrelated exact-name shortcut replacement.

  • Keep desktop grid content aligned to the start of its viewport so tall windows do not stretch setup and form rows into blank gaps.

  • Add version-matched unsigned Windows installation guidance and repeatable headless application/native installer capture tooling with explicit renderer, fixture and exact-source receipts.

  • Restore deterministic real-backend lease-fencing qualification and allow eleven minutes for active CI/release jobs. Preserve operation-specific timeouts and all security/integrity gates.

  • Add manifest-elected current documentation routes and explicit archives, with shared mobile disclosures, readable reference pages and keyboard/reflow improvements across public and offline help. Link the README company attribution.

  • Finalize the 1.0.1 release cut, correct historical release labels and require publication-target site, diagram and browser qualification before documentation archival.

Fixed

  • Read every page of exact-source GitHub checks before publication, retaining required checks, external failure/pending rejection and verified current-workflow suite exclusion. Reject incomplete, duplicate or changing inventories before release writes.

Decisions

  • 2026-10-11: Correct the publication verifier's first-page limit after complete qualification and launch together exceeded 100 checks. Keep the qualified immutable v1.0.0 source/tag unchanged and execute the corrected verifier from reviewed protected-main tooling against that ancestor.

  • 2026-10-11: Keep startup transport separate from detached lifetime: one bounded report, one child wait owner and one ten-second deadline cover the client handshake. Log only generated context, using three bounded data files and a private empty coordination lock; diagnostic input/tool/provider payloads are excluded. Model readiness remains response-only and named file roles come from immutable manifests.

  • 2026-10-11: Save import choices in a bounded typed catalog registry; publish/read by immutable storage profile revision. Preset values precede manifest defaults/items and explicit CLI overrides; capture local timezone only after resolution. Elect existing processing contracts and reconcile child identity after admission. Current documentation examples qualify extracted binaries using deterministic adapter fixtures without inference.

  • 2026-10-12: Execute documented post-install processing/training against owned loopback fixtures in a separate disposable workspace. Retain CI refusal in the main runtime and all guard tests; permit the established detached runtime owner to restart between package qualification journeys.

  • 2026-10-13: Keep first-run orchestration metadata separate from accepted configuration/work. Persist normalized bootstrap identities before provisioning and qualify setup retry/readback plus ordinary import after deferral in native package checks.

  • 2026-10-13: Constitution 3.0.0 implements the owner-directed removal of the macOS platform obligation. Remove owned Darwin runtime/build/signing paths and macOS CI/release dependencies while retaining every Windows/Linux/backend integrity lane. Read historical version schemas as data under trusted current validation rather than changing published records.

  • 2026-10-13: Windows copy attempts are created and held through native directory handles. Resolve source/parent aliases, create a unique absent attempt atomically, preserve locks through no-replace promotion and delete failed owned objects by handle without following reparse points. Program files and persistent user data remain separate; current runtime shutdown uses existing idle exit.

  • 2026-10-13: Keep backend preflight outside mutating owner startup; fresh provisioning publishes configuration after selected catalog/storage preparation and retains identical generated-plan and credential-backend retry identity before mutations and on completed retries. Observe selected S3 bucket access and initialize graph schema/owner before success. Native Ollama translates into the existing validated query contract and separates endpoint location from actual model routing. Preserve cloud support without assuming upstream structured-output support.

  • 2026-10-13: Add initial credential/bootstrap and read-only PostgreSQL qualification to the existing bounded adapter CI lane. Explicit insecure transport preserves elected remote plaintext while removing the misleading local label.

  • 2026-10-13: Consolidate seven dependency updates into one complete Windows/Linux qualification boundary. Preserve verified cache keys, source/attempt identities, four-package candidate completeness and frozen historical documentation; retain the original bot PRs until consolidation merge. Runtime updates include the required text/sync closure without changing Go or native library pins. Preserve flat and nested historical Next segment URLs only through exact verified counterparts beside the same page. Keep the 180-second qualification child and ten-minute job bounds; retain controlled timeout checkpoints after terminating owned descendants.

  • 2026-10-13: Resolve shipped Go membership from executable build metadata, check selective source identities against the canonical module cache, and record effective versioned replacement sources without changing inventory fields. Pin Mermaid's KaTeX resolution to the elected patched 0.18.2 rather than silently taking a later range match. Render exported diagram sources with a bounded hidden browser and private temporary profile; final qualification retains all native/backend/source and publication boundaries.

  • 2026-10-13: Authenticate selected cached module files against the executable's Go h1 sum and copy the notice bytes captured by that verification. Recorded cache metadata and copy equality alone cannot establish upstream evidence; do not reread mutable source notices afterward.

  • 2026-10-13: Prepare local engines through private isolated CPython/uv environments and complete platform wheel hashes. Record and revalidate runtime/dependency bytes before frozen work; reuse unchanged accepted environments. Model preparation retains immutable builtin roles and first-elected storage/credentials, strips cross-origin tokens on official CDN redirects and reports prerequisite readiness separately from inference. Request Windows ownership transfer only when the directory owner changes; retain private protected ACL verification.

  • 2026-10-13: Author Windows Installer tables/cabinets through native Windows APIs, retain shared runtime bytes for Desktop-only and omit global PATH/prerequisite acquisition. Model MSI separately from the four archive receipts; maintain strict payload/source/help/license identity and transactional ownership.

  • 2026-10-13: Retire native installer UI probing on the owner host after an isolation/cleanup failure affected unrelated windows. Local captures use verified headless Chromium and real shared runtime fixtures; native installer UI/lifecycle run only on disposable CI runners. Cleanup targets owned process trees and never desktop-wide windows. Launcher label proposals require explicit owner signoff before shipping.

  • 2026-10-13: Separate MSI qualification from independently verified same-run archive assembly. Use exact owned native API workers with checked logging and bounded diagnostics, retain unchecked shortcut elections through upgrades, and publish screenshots only after clean-source validation and verified fixture/browser cleanup.

  • 2026-10-14: Constitution 3.0.1 applies the owner-approved additional minute to the active CI policy (660 seconds). Test real lease authority against guarded durable fixture states rather than wall-clock sleeps; production lease duration remains unchanged. Render full current-documentation aliases statically so no-script readers, fragments and offline files retain content, while explicit version URLs preserve historical identity. Use native disclosures and governed semantic styles for shared documentation navigation; automated standards evidence states its assistive-technology limits.

  • 2026-10-15: Finalize the existing unpublished 1.0.1 cut without weakening newer-version/no-overwrite preparation guards. Correct known historical release status through current metadata and render-only overlays, qualify publication-target site/diagram/browser output before archival, and publish/promote only a fresh reviewed squash-main candidate after owner merge.

1.0.0 - 2026-10-11

Compatibility

  • Current insonic workspace/runtime envelopes and master JSON contracts identify version 1.0.0. The preserved 0.0.0 tree remains a specification baseline, not a deployed product data migration. Cueson transcript versions and catalog schema revisions retain their separate compatibility rules.
  • Native packages have no configured publisher signing identity or notarization. macOS ARM64 retains platform-required ad-hoc loader signatures. Required qualification does not establish acoustic prediction or speaker-identification accuracy.

Decisions

  • 2026-10-09: Constitution 2.2.1 removes a hypothetical pre-v1 bulk audio-migration obligation where no deployed data requires it. Explicit replacement, normal catalog/schema evolution and transcript-version interoperability retain their independent integrity contracts.

  • 2026-10-09: Freeze model aliases and configured catalog selectors into exact complete bundle identities before durable acquisition. Shared acquisitions precede dependent processing without occupying waiting worker slots. Explicit manifest catalogs preserve configured transport rules; direct provider downloads are not advertised without their own qualified adapter.

  • 2026-10-09: Extend cross-process CLI and source/relocated native WebView qualification with synthetic model catalogs and tiny verified bundles. Required package receipts include the model-reference journey; acoustic engine loading and real weights remain excluded.

  • 2026-10-09: Implement S013 for speaker-model training/retrieval and roster-constrained matching. Catalog schema 9 freezes schema-8 migration bytes, adds receipt-validated immutable outputs/checkpoints and revisioned current profiles, and distinguishes manual from automatic mappings. Current-reference preparation and frozen admission prevent stale evidence publication; retained outputs preserve their originating identity.

  • 2026-10-09: Add elected pinned local and configured HTTP speaker-training adapters, saved exact training profiles and bounded batch embedding reuse. Required checks use deterministic adapters and synthetic vectors; real acoustic quality remains separately measured. Include the new desktop speaker-model entry point in the frontend fixture build.

  • 2026-10-09: Implement S014 portable backups and release readiness. Preserve receipt-backed catalog authority during destination relocation, retain only current/durable byte assets, pin explicit reference-only backup dependencies and rebuild graph materialization from accepted evidence.

  • 2026-10-09: Replace incomplete third-party media binary source accounting with owned pinned source builds and package corresponding sources/build inputs. Add CLI-only native variants, configured signing before final hashes, exact-version release candidates and verified draft-first publication before documentation promotion. Product release publication remains a separate maintainer action.

  • 2026-10-09: Include the pending setup-go 7.0.0 and runtime Wails 2.16.0, x/crypto 0.57.0 and x/net 0.59.0 dependency changes in the same native/backend qualification boundary. Preserve edited issue history while applying canonical taxonomy to new planned outcomes.

  • 2026-10-09: Separate the optional local credential namespace from portable catalog workspace identity. Restore retains independently configured destination native/vault credentials without rebinding secret values or exporting them.

  • 2026-10-09: Admit portable local-input sanitization with new proof receipts in a disposable catalog while preserving captured-source authority. Fence committed restores with a durable pending activation receipt until exact destination configuration is installed, including after operational lease expiry.

  • 2026-10-09: Split source dependency compilation, FFmpeg compilation and native package qualification into verified cached stages. Same-run transfers bind source revision, compiler, recipe and original archive hashes, retaining the complete decoder set and all qualification checks within bounded jobs.

  • 2026-10-09: Resolve bare Windows qualification executables against the selected child PATH before hidden creation, so compiler identity and build commands use the same configured toolchain without parent-PATH fallback.

  • 2026-10-09: Initialize the native graph before measuring aggregate query phases in the assistance timeout fixture, separating first-open initialization variance from query-budget behavior without changing product timeouts.

  • 2026-10-09: Verify complete source caches before scheduling compilation and use independent platform source chains. Qualify CLI-only and desktop packages on separate native runners, retaining all existing checks and avoiding shared library-isolation races.

  • 2026-10-09: Preserve originating absolute path semantics in cross-platform backup proofs and require native backup lifecycle ownership before pin/release mutations. Reject manual-reference collisions, released-ID reuse and partial release before writes.

  • 2026-10-09: Bind hosted Windows builds to the installed MSYS2 action output and normalize only completely validated internal dependency file aliases for portable transfers. Preflight explicit documentation deployment configuration before publication and allow promotion-only runs without implicit release publication.

  • 2026-10-09: Cache original media sources independently of build recipes, retain exact archive verification and bound transient downloads. Give dav1d available compilation cores and run shared runtime acceptance independently of the six package journeys. Publication excludes only its verified same-revision release run's own unfinished suite while requiring every other check.

  • 2026-10-09: Prepare the sibling CLI before fresh release desktop qualification. Promotion-only runs retrieve and revalidate the original published candidate, avoiding nondeterministic package rebuilds; authenticated downloads strip credentials before official CDN redirects. Platform qualification still requires verified same-run artifacts when a different source platform fails.

  • 2026-10-09: Share verified portable source archives across native platforms while retaining platform-specific binary/compiler caches. Supply Linux's required static math linkage for game-music decoding and preserve bounded source/link failure diagnostics without interpreting them as workflow commands.

  • 2026-10-09: Run publication verifiers from protected main and accept only source revisions in its history. Separate documentation preflight/promotion credentials from repository-write publication, enforce a main-only deployment environment and reject automation credential forwarding without adding mandatory human reviewers.

  • 2026-10-09: Bind libxml2 to the same private iconv header and static archive. Move macOS package resources out of the executable directory and discover verified companions from relocated application resources.

  • 2026-10-09: Remove source-local processing/training tool paths and transient context from portable job authority. Resume elected work automatically with ephemeral destination tool bindings and rebuilt accepted context while retaining exact model identities, settings and completed lineage.

  • 2026-10-09: Compile independent media dependency groups on separate runners, merge exact prefixes and original archives transactionally, and retain each group's receipt in the complete source proof. Start qualification independently per platform and overlap core checks with source compilation; keep full runtime, package and alternative-backend acceptance.

  • 2026-10-09: Bind new speaker-training checkpoints to exact pinned adapter bytes and settings independently of invocation paths, so checkpoints produced after restore remain resumable after another move. Retain existing checkpoint compatibility and reject changed elected adapter settings.

  • 2026-10-10: Prepare the first 1.0.0 release candidate with synchronized software, documentation and JSON contracts while preserving the 0.0.0 baseline. Candidate preparation and qualification do not publish product downloads or deploy documentation.

  • 2026-10-10: Collect all six native package variants and documentation from one CI source revision and workflow attempt using read-only credentials. Verify corresponding source recipes, pins, helpers and all dependency groups against the selected checkout before candidate acceptance.

  • 2026-10-10: Add an elected disposable connected CLI qualification journey, including independent speaker enrollment, cross-clip matching and self-contained restore after the original workspace becomes unavailable. Keep actual CPU acoustic measurements separate from deterministic required checks.

  • 2026-10-10: Integrate go-winio 0.6.3 and x/sys 0.49.0 with the complete native/runtime qualification boundary.

  • 2026-10-10: Diagnose pinned Whisper final timestamp overruns and intersect only endpoints extending at most 250 milliseconds beyond decoded media. Preserve strict generic adapter validation and reject larger excursions; do not extend source audio or claim prediction accuracy.

  • 2026-10-10: Render an elected release-target public/offline artifact before publication, record that target with source identity and reject candidate snapshots from publication/promotion. Keep ordinary builds and source history explicit about candidate status; released landing pages expose all six exact-tag package links.

  • 2026-10-10: Prepare current contract examples with the selected version's native package names and platform archive formats, updating owned common-type descriptions while preserving immutable baseline and upstream identities.

  • 2026-10-10: Separate native Go build caches from the immutable core cache, allowing CLI and desktop/runtime qualification to retain their tagged build artifacts while preserving every integrity check.

  • 2026-10-10: Qualify the packaged CLI and actual LadybugDB graph with the selected native compiler/loader on native lanes, retaining the generic CLI path on lightweight lanes and every cross-process scenario.

  • 2026-10-10: Implement S016 release workflow hardening and launch preparation. Measure complete warm PR and publication-disabled release runs, separate product package identity from harness identity, and preserve explicit signing/deployment/acoustic limitations. Product tagging, official publication and live documentation promotion remain a subsequent owner-authorized launch.

  • 2026-10-11: Stage complete Windows codec compilation before final FFmpeg linking after an independent release cold build exceeded its compile bound. Preserve all decoders and unchanged timeouts; verify configured source/dependency identities, integer timestamps and reuse of compiled objects.

  • 2026-10-11: Preserve older nested Next.js segment URLs as aliases to their exact verified flat-file replacements during Pages preparation. Continue rejecting missing historical pages/schemas, unmatched segments, case collisions and excessive payloads before writes.

  • 2026-10-11: Publish the first official 1.0.0 release and matching documentation through the existing exact-source qualification, verified asset publication and original-archive Pages promotion. Provide concise release highlights with a full changelog link; publisher-signing setup and acoustic accuracy checks are excluded.

Changed

  • Share independent engine, desktop/credential and package lanes between PR and release qualification, with separate runtime caches and standalone native CLI preparation for desktop checks. Keep all acceptance, source and inventory checks.
  • Add verified original-release promotion to the existing insonic.io GitHub Pages source, with read-only preflight, nonforced parented ref updates and exact-commit build completion. Retain separately configured generic hosting.
  • Include the processing worker in both native package inventories and qualify connected Windows CPU journeys from an elected extracted archive with package-only companion resolution.

Added

  • Unpublished 1.0.0 candidate preparation, immutable baseline routes, a connected import/process/enrollment/matching/query/recovery harness and read-only six-variant exact-source CI collection.

  • Nanosecond import timestamp validation, valid embedding batch provenance and explicitly diagnosed bounded pinned-Whisper endpoint intersections.

  • Complete portable artifact bundles, reference-only retention lifecycle and verified empty-target restore through advanced shared CLI maintenance contracts. Source-complete native CLI/desktop variants, version preparation, immutable release manifests/checksums and configured publication/documentation promotion tooling.

  • Complete current independent speaker datasets, elected local/hosted training and local embedding enrollment, exact output discovery/fetch, profile CAS selection and matching-only roster attribution across shared CLI/runtime/desktop contracts. Unknown and ambiguous outcomes remain visible, manual corrections take precedence, and automatic matches do not become their own training evidence.

  • Workspace model aliases, configured discovery, non-loading compatibility inspection and acquire-on-demand processing/import elections through shared CLI/runtime/desktop contracts. Portable reference state preserves base, trained-version and hosted-handle distinctions; full speaker matching and training remain separate work.

  • Explicit stable-ID canonical audio replacement with keep/clear/replace transcript policies and source-bound evidence retirement. Declared speaker rosters support atomic initial import, independent CAS edits, portable current proofs and separate graph context through shared CLI/runtime/desktop operations.

  • Canonical audio admission with stereo/multitrack FLAC, eligible mono MP3 V0, preserved source clocks and captured metadata. Shared local/remote/embedded transcript import preserves annotated Cue JSON, upgrades validated historical versions and converts legacy managed sidecars through atomic current acceptance.

  • Optional local/hosted query assistance with revisioned settings, complete editable proposals and elected validated current execution in CLI and desktop Explore. Deterministic provider fixtures qualify ordinary backend and native package journeys without model inference.

  • Current source-backed evidence extraction, real LadybugDB/ArcadeDB reference publication and portable/native queries, with whole-library calendars, recording timelines, versioned saved definitions and separate force-graph layouts in CLI and desktop Explore.

  • Native desktop Library, Jobs, Pipelines, Speakers, Terms, Models and Settings controls over the shared runtime, including current recording actions, exact raw capture display, scoped ranged audio/video playback, bounded previews and original-time cue seeking.

  • Installation-relative verified companion discovery and Windows x86-64, Linux x86-64 and macOS ARM64 package builders with relocated CLI/native-webview qualification, offline help, inventories, notices and source/build records. Required checks use committed media and deterministic supplied subtitles/turns without recognition or diarization execution.

  • Revisioned Local, Connected and Custom processing pipelines with immutable queued elections, explicit local/hosted worker contracts and configurable automatic quality checks.

  • Stable canonical speaker names and aliases, current library-wide speaker evidence selection and scoped terminology with deterministic bounded recognition hints, through shared CLI/runtime/desktop bridge operations.

  • Current master recordings with one embedded Cueson v1.2.0 document, recording-local speaker UUIDs, external known-speaker mappings and reference-only downstream evidence.

  • Shared local mapped-audio/subtitle processing, independent reruns, fenced current replacement, recoverable physical retirement and diagnosed Cue JSON/native export.

  • Explicit local-worker, decoder and Cueson child environments exclude unrelated credential/configuration variables while retaining selected native-library/device paths.

  • Committed CC BY 3.0 real speech audio and dialogue video with hashes, license/provenance and supplied reference subtitles; separate opt-in maintainer engine qualification outside CI.

  • Workspace-scoped native credentials, authenticated Argon2id/AES-GCM vault and explicit session credentials with protected-input bootstrap and status-only display.

  • Exact multi-file downloaded base-model manifests, resumable verified acquisition and leased materialization through filesystem/S3 storage.

  • Unified copied/referenced/remote media admission, CSV/JSON batches, qualified raw metadata and stream capture, nullable measured duration, exact timing and explicit historical timezone/DST/date choices.

  • Durable real-work recovery/cancellation/retry and current metadata refresh with physical superseded-report removal while retaining original media and supplied subtitles.

  • Managed filesystem and generic S3 artifact storage with streamed SHA-256 verification, resumable multipart receipts, durable publication recovery, leased materialization and reference-aware retirement through the shared CLI/runtime.

  • Additive catalog schema 2 with schema-1 upgrade/restore compatibility and receipt-validated artifact lifecycle snapshots.

  • Workspace/profile-scoped object keys, final-link metadata durability and pending reconciliation for uncertain S3 completion/abort; retirement updates typed location availability alongside preserved admission receipts.

  • Portable SQLite/PostgreSQL catalogs with atomic revision/receipt admission, exact metadata/date provenance, scoped speaker/training/model records, durable job history/recovery and ordered fenced graph outbox.

  • CLI job history, catalog status, explicit migration and consistent logical export/restore with imported ownership expired.

  • Change-aware native/backend CI and qualification pin consistency checks.

  • Source-buildable Go workspace CLI, one current-user local runtime, shared desktop bridge, generation-fenced session attempts and hidden bounded child supervision.

  • Checksum-pinned three-OS native qualification for Cueson, Ladybug/SQLite, Wails/offline help and isolated PostgreSQL/S3/ArcadeDB fixture operations.

  • v0.0.0 system specification covering cross-platform CLI/GUI orchestration, media/subtitle correlation, metadata/date provenance, configurable adapters, speaker/term catalogs, graph exploration and optional speaker-model training/retrieval.

  • Upstream insonic 1.0.0 brand kit built with BrandBuilder 3.0.1, with a manually triggered checksum-verified update process.

  • Versioned Markdown documentation and a static Next.js renderer with a public product landing page and separate documentation-only offline export for installed GUI help.

  • Spec Kit infrastructure and a staged, issue-oriented delivery plan.

  • Public repository contribution, security, issue and pull request templates, efficient foundation CI and local GitHub setup tooling.

  • Version-matched master JSON Schema and rendered JSON contracts, with the master changelog included in the documentation site.

  • Expanded technical glossary with primary learning references and links to the pages using each term.

  • Source-linked interactive archive illustration, a glacial-blue landing gradient and a platform download section that reports package availability.

  • Sun/moon documentation toggle with an operating-system default, remembered light/dark choice and matching logos and diagram colors in offline help.

Changed

  • 2026-10-04: Adopt Apache 2.0 for original source/documentation and Go for CLI-first shared orchestration, with Wails as the desktop baseline subject to native packaging qualification. Require the official Cueson executable/schema boundary and a rebuildable LadybugDB graph projection.
  • 2026-10-04: Amend constitution to 2.0.0 for GUI core parity with documented advanced/experimental lag, early metadata/date provenance, full filesystem/S3, SQLite/PostgreSQL and LadybugDB/ArcadeDB support, and configured automation without mandatory per-item review. Add optional speaker-model delivery under S015/M5.
  • 2026-10-05: Amend constitution to 2.1.0 for synchronized software, documentation and JSON Schema versions, practical compatibility, concise breaking-change notes and major-release glossary reviews. Keep numbered plans internal and one specification-status statement in the documentation index.
  • 2026-10-05: Amend constitution to 2.1.1 for numbered linear procedures; replace four sequential diagrams while retaining branching, relationship and feedback diagrams.
  • 2026-10-05: Implement the shared runtime foundation using Go 1.27.1, Wails 2.14.0, private Unix sockets and current-user Windows pipe/directory ACLs. Keep attempts session-scoped until portable durable catalogs arrive; retain supported backend boundaries and separate native artifact availability from executed platform evidence.
  • 2026-10-05: Remove mandatory human PR approvals at the owner's direction. Bootstrap preserves zero required approvals while retaining CI and resolved-conversation gates; constitution 2.1.2 separates optional PR approval from merge authorization.
  • 2026-10-05: Implement S002 catalog authority using shared typed portable SQL, short workspace transactions, expiring ownership and atomic receipts. Keep qualified dependency pins; separate migration permissions from runtime data permissions. Restore only empty authority, expire imported claims and keep native/encrypted credential persistence and media/graph execution in their subsequent slices.
  • 2026-10-06: Implement S003 for issue #4 using dedicated renewable artifact claims, unique nonreused keys, exact-version readback/deletion and atomic catalog retirement barriers. Preserve immutable domain evidence and existing dependency pins; encrypted credential persistence and the model registry remain subsequent work. Extend the affected pinned backend fixture job with shared artifact acceptance.
  • 2026-10-07: Implement S004 for issues #5 and #6. Freeze historical migration definitions and add catalog schema 3 for current library/model/work records. Keep unknown duration separate from zero; replace superseded computed metadata under issue #21. Full Cueson document assembly remains subsequent work.
  • 2026-10-07: Qualify the macOS arm64 native operations on macOS 15 ahead of the announced macOS 14 runner retirement, preserving the pinned tool architecture and ten-minute CI budget.
  • 2026-10-07: Resolve review findings with logical model-version identity, bounded 8 MiB normalized import ingress, shared desktop/runtime operation deadlines and fenced cleanup of unused admission candidates. Preserve retryable partial batch results and require the latest accepted current-state proofs in portable snapshots.
  • 2026-10-07: Require encrypted remote credential acquisition with an explicit loopback HTTP exception. Add configurable remote byte/time budgets and reject common query-authentication aliases before durable enqueue while retaining ordinary noncredential source selectors.
  • 2026-10-07: Implement S005 for issues #21 and #7. Replace the obsolete transcript/assignment retention contract with one current embedded Cueson v1.2.0 document and reference-only consumers. Invalidate affected corpus/evidence preparation, physically retire superseded managed results, and preserve original media/subtitles plus noncontent model/run lineage. Catalog schema 4 freezes prior migration definitions and reconciles legacy copied assignments without reviving them.
  • 2026-10-07: Record explicit Windows CPU maintainer qualification separately from CI: speech recognition has 4 word errors across 33 reference words and dialogue recognition has 2 across 31. Diarization yields two voices for the speech fixture and one for the two-character dialogue reference. These results demonstrate actual engine execution and model split/merge limitations; editorial caption windows are not sample-accurate acoustic ground truth.
  • 2026-10-07: Exclude transcription/diarization invocation, model initialization/loading, weight downloads and engine-result requirements from every CI path and merge check. Allow deterministic stage injection, committed media probing/extraction and real pinned Cueson qualification; record real engine behavior only in explicit maintainer runs.
  • 2026-10-07: Address review findings with byte-preserving BOM WebVTT detection, exact canonical engine-role casing and explicit allowlisted environments for new local processing children. Preserve existing process-helper inheritance only for callers that elect it; session/provider credential variables are excluded from the new local adapters.
  • 2026-10-07: Implement S006 for issues #8 and #9. Catalog schema 5 preserves frozen earlier migrations and adds saved worker definitions, speaker state/aliases and scoped terminology. Replace the unused generic stage-DAG pipeline interchange shape with the implemented recognition/diarization configuration envelope; dedicated GUI controls, general graph capabilities and training remain separate delivery outcomes.
  • 2026-10-07: Freeze local model manifest digests and resolved tools alongside pipeline/context elections. Revalidate digests before model materialization and reject changed audio mappings before diarization reuse. Recompute reused quality from current embedded millisecond assignments with an explicit basis. Context preview and execution share configured hints/language; correlation analysis can be disabled while current-reference integrity remains mandatory.
  • 2026-10-07: Resolve review findings by normalizing the local English recognition default before context election and by comparing speaker selection against all earlier current source evidence across cursor pages. Bind comparisons to the selected evidence epoch and keep assignment arrays solely in current embedded Cue JSON.
  • 2026-10-07: Implement S007 for issue #10 with dedicated desktop controls, current-authority playback tickets and section-scoped revision-checked settings. Preserve advanced CLI access for catalog transfer, profile migration and detailed artifact operations. Packages remain unsigned and unpublished pending release promotion; retain complete corresponding-source distribution as a prerequisite for GPL-enabled binary publication.
  • 2026-10-07: Replace the nonredistributable macOS media artifact with exact-source FFmpeg/ffprobe builds using system VideoToolbox and no GPL/nonfree external libraries. Record executed OS/architecture qualification separately from artifact availability and release readiness.
  • Bind landing hero and page metadata to approved upstream slogan and description fields; expand syntax highlighting for JSON and CLI examples.
  • Support optional validated read-only AI query execution through the configured assistance mode.
  • Subdivide workspace/runtime, catalog/jobs, artifact storage and secrets/model-registry development into four focused slices; renumber the remaining application slices through S015.
  • Define each backend configuration once and reuse it in adapter-selection validation without changing its fields or constraints.
  • Include backend/query alternatives and shared timestamp descriptions/examples in the generated JSON contract reference.
  • Load a small shared theme/tab script and confine the Mermaid runtime to documentation routes.
  • Keep specification status in the documentation index, replace generic landing copy with concrete outcomes, and remove conversation-specific instructions from public prose.

Fixed

  • Preserve accepted speaker-dataset retries after evidence invalidation, enforce inline hosted model/checkpoint outputs, send declared hosted cancellation after adapter deadlines and use one complete-corpus reference limit. Retry elected playback seeks when native decoder data becomes ready without rewinding subsequent playback.

  • Reset Library playback media state for each verified ticket before seeking newly loaded source metadata.

  • Preserve large generated integer parameters through desktop JSON with exact decimal-string transport and real native integer binding. Legacy numeric parameter inputs remain supported.

  • Reconcile durable acknowledgement receipts after ownership expires; validate restored checkpoints against accepted acknowledgements, reject scalar coercion, and restore large catalog exports without an asymmetric file-size limit.

  • Reject common credential-key aliases in persisted options while retaining opaque references, preserve shutdown evidence, and keep replayed requests from detaching newer work or blocking at runtime capacity.

  • Keep the landing archive widget at the tallest tab's natural height so switching views leaves following content in place.

  • Align audit-instant schemas, examples and documentation on Cueson's {iso, unix_ns} representation, including lossless nanosecond-integer handling.

  • Preserve closed GitHub Projects when rerunning repository setup.

  • Cover root schema-validation dependencies in grouped Dependabot updates and correct contributor installation guidance.

Decisions (2026-10-08)

  • Freeze catalog schema 5 and migrate to schema 6 for current extraction, immutable query versions and layouts. Graph events retain references, while current catalog hydration supplies text and clocks. Saved views no longer offer pinned processing-result snapshots.

  • Prepare real graph adapters in native packages and required backend/UI qualification. Inference, model initialization and weight downloads remain excluded from required CI.

  • Windows native graph DLLs reside beside the CLI and GUI so the operating-system loader resolves them before runtime startup, without development PATH dependencies.

  • Pin Windows OpenSSL 3.5.9 loader companions and their Apache 2.0 notice, with a pinned archive decoder; native preparation and relocated checks no longer depend on ambient OpenSSL installations.

  • Query assistance uses an explicitly elected versioned HTTP provider, portable catalog settings and the shared current query path. Suggestions are the default; auto-run requires ordinary read validation and selected-engine EXPLAIN. Required checks use injected deterministic provider replies and refuse production provider calls under CI markers.

Decisions (2026-10-09)

  • Amend constitution to 2.2.0 for canonical managed audio and one current embedded document. New reference admission is unsupported; existing legacy references remain readable. Imported local speaker tokens retain exact upstream-valid values. Original owner inputs stay untouched, while accepted work and captured metadata omit original local locators.