meeticulous/native
lakshit verma 03244fa783
fix(all): apply full-codebase review fixes
Security (summary/CLI):
- Delimit untrusted transcript as data in all prompts; add data-hardening
- agy: --sandbox + --disable-slash-commands; isolate cwd for all CLIs
- claude: prompt via stdin (no argv leak); agy argv capped below E2BIG
- non-zero CLI exit is now an error; process groups killed on timeout/quit
- executable check in which(); stop stripping json code fences
- 0600 temp prompt file; atomic prefs writes; truncate stderr in errors

Data loss (recording/system-audio):
- stop_recording now real-joins the STT worker and re-drains the queue,
  so the final ~3-10s of speech is persisted
- non-destructive STT queue drain on DB error
- periodic WAV flush for crash safety
- RAII kill+wait for the Swift helper on all error paths
- non-blocking READY wait (no frozen TUI); mic callback moved off the
  audio thread and skipped when system audio is up
- f32 carryover, tap-death diagnostics, actual stream-rate reporting,
  capped STT feed, wall-clock timestamps, transactional import

STT/model:
- poisoned-mutex locks can no longer kill the STT worker
- decoder tensors are metadata-driven with loud shape/dtype validation
- non-overlapping STT windows; tail flushed on stop
- intra_threads=1, scratch reuse, FIR anti-alias resampler,
  vocab-size mismatch check, tightened model discovery

TUI/terminal:
- RAII terminal guard + panic hook (no more bricked terminal)
- handler errors surface in status instead of killing the TUI
- Ctrl-C / q / Esc cancel an in-flight summary
- wrapped-line scroll reaches the bottom; dead code removed
- markdown checkboxes render; db cleanup on TUI exit

DB/paths:
- index on transcripts(meeting_id); ALTER errors no longer swallowed
- atomic summary store + segment append; transactional import helper
- safe sqlite filename connect; lowercase statuses; absolute fallbacks
2026-07-31 18:08:32 +05:30
..
system_audio_capture.swift fix(all): apply full-codebase review fixes 2026-07-31 18:08:32 +05:30