Harden ExecuWhisper for internal release

Add production-readiness fixes for audio routing, formatter validation, helper signing, release verification, and support diagnostics. This keeps the existing app PR focused while making the DMG safer to dogfood across different Mac audio setups.

Made-with: Cursor

Author: seyeong-han

ExecuWhisper/CHANGELOG.md

@@ -0,0 +1,7 @@
+# ExecuWhisper Changelog
+
+## Internal DMG - 2026-04-30
+
+- Added production-readiness hardening for audio capture, smart formatter validation, release signing, and internal DMG verification.
+- Lightweight DMG SHA256:
+  `e01401325119cd76df3d32c172a78b610bd814244cb07dc42431bd64af862dfc`

ExecuWhisper/ExecuWhisper/Models/TranscriptStore.swift

@@ -55,9 +55,12 @@ final class TranscriptStore {
     private let sessionsURL: URL
     private let textPipeline: TextPipeline?
     private let audioDecoder: any ImportedAudioDecoding
+    private let maxRecordingDuration: TimeInterval
     private var recordingStartDate: Date?
     private var initialized = false
     private var warmupTask: Task<Void, Never>?
+    private var recordingLimitTask: Task<Void, Never>?
+    private var explicitlyUnloaded = false
 
     init(
         preferences: Preferences,
@@ -66,7 +69,8 @@ final class TranscriptStore {
         textPipeline: TextPipeline? = nil,
         audioDecoder: any ImportedAudioDecoding = ImportedAudioDecoder(),
         recorder: AudioRecorder = AudioRecorder(),
-        runner: any RunnerBridgeClient = RunnerBridge()
+        runner: any RunnerBridgeClient = RunnerBridge(),
+        maxRecordingDuration: TimeInterval = 30 * 60
     ) {
         self.recorder = recorder
         self.runner = runner
@@ -75,6 +79,7 @@ final class TranscriptStore {
         self.sessionsURL = sessionsURL
         self.textPipeline = textPipeline
         self.audioDecoder = audioDecoder
+        self.maxRecordingDuration = maxRecordingDuration
         loadSessions()
     }
 
@@ -230,10 +235,12 @@ final class TranscriptStore {
     }
 
     func preloadModel() async {
+        explicitlyUnloaded = false
         await performHelperWarmupIfNeeded(updateStatusMessage: true)
     }
 
     func unloadModel() async {
+        explicitlyUnloaded = true
         warmupTask?.cancel()
         warmupTask = nil
         await runner.shutdown()
@@ -279,6 +286,9 @@ final class TranscriptStore {
         currentError = nil
         sessionState = .recording
         recordingStartDate = .now
+        scheduleRecordingLimit {
+            await self.stopRecordingAndTranscribe()
+        }
 
         do {
             try await recorder.startRecording(selectedMicrophoneID: preferences.selectedMicrophoneID) { [weak self] level in
@@ -288,9 +298,11 @@ final class TranscriptStore {
             }
             startBackgroundWarmupIfNeeded()
         } catch let error as RunnerError {
+            cancelRecordingLimit()
             currentError = error
             sessionState = .idle
         } catch {
+            cancelRecordingLimit()
             currentError = .launchFailed(description: error.localizedDescription)
             sessionState = .idle
         }
@@ -344,11 +356,13 @@ final class TranscriptStore {
             storeLog.info("Dictation capture started")
             return true
         } catch let error as RunnerError {
+            cancelRecordingLimit()
             storeLog.error("Dictation capture failed to start: \(error.localizedDescription, privacy: .public)")
             currentError = error
             resetLiveState(status: "Ready")
             return false
         } catch {
+            cancelRecordingLimit()
             storeLog.error("Dictation capture failed with unexpected error: \(error.localizedDescription, privacy: .public)")
             currentError = .launchFailed(description: error.localizedDescription)
             resetLiveState(status: "Ready")
@@ -365,6 +379,7 @@ final class TranscriptStore {
         sessionState = .transcribing
         statusMessage = "Transcribing..."
         audioLevel = 0
+        cancelRecordingLimit()
         storeLog.info("Dictation capture stopping after duration=\(duration, format: .fixed(precision: 3))s")
 
         do {
@@ -388,6 +403,7 @@ final class TranscriptStore {
         sessionState = .transcribing
         statusMessage = "Finalizing recording..."
         audioLevel = 0
+        cancelRecordingLimit()
 
         do {
             let pcmData = try await recorder.stopRecording()
@@ -634,7 +650,11 @@ final class TranscriptStore {
             case .completed(let result):
                 finalResult = result
                 storeLog.info("Runner completed event textLength=\(result.text.count) stdoutLength=\(result.stdout.count) stderrLength=\(result.stderr.count)")
-                storeLog.info("Parakeet transcript: \(result.text, privacy: .public)")
+                if DiagnosticLogging.shouldLogTranscriptsPublicly {
+                    storeLog.info("Parakeet transcript: \(result.text, privacy: .public)")
+                } else {
+                    storeLog.info("Parakeet transcript: \(result.text, privacy: .private)")
+                }
                 if let runtimeProfile = result.runtimeProfile {
                     storeLog.info("Runner runtime profile: \(runtimeProfile, privacy: .public)")
                 }
@@ -659,6 +679,7 @@ final class TranscriptStore {
     }
 
     private func autoPreloadModelIfReady() async {
+        guard !explicitlyUnloaded else { return }
         guard resourcesReady else { return }
         guard helperState == .unloaded || helperState == .failed else { return }
         await performHelperWarmupIfNeeded(updateStatusMessage: false)
@@ -691,6 +712,7 @@ final class TranscriptStore {
             )
             helperState = .warm
             helperStatusMessage = "Model preloaded"
+            logResidentMemory(context: "Parakeet helper preloaded")
             if updateStatusMessage && !hasActiveSession {
                 statusMessage = "Ready"
             }
@@ -728,6 +750,15 @@ final class TranscriptStore {
         }
     }
 
+    private func logResidentMemory(context: String) {
+        guard UserDefaults.standard.bool(forKey: DiagnosticLogging.transcriptDebugKey),
+              let bytes = DiagnosticLogging.residentMemoryBytes()
+        else {
+            return
+        }
+        storeLog.info("\(context, privacy: .public) residentMemoryBytes=\(bytes)")
+    }
+
     @discardableResult
     private func processCompletedTranscription(
         rawText: String,
@@ -764,12 +795,30 @@ final class TranscriptStore {
     }
 
     private func resetLiveState(status: String = "Ready") {
+        cancelRecordingLimit()
         audioLevel = 0
         sessionState = .idle
         recordingStartDate = nil
         statusMessage = status
     }
 
+    private func scheduleRecordingLimit(onLimit: @escaping @MainActor () async -> Void) {
+        cancelRecordingLimit()
+        guard maxRecordingDuration > 0 else { return }
+        recordingLimitTask = Task { @MainActor [weak self] in
+            try? await Task.sleep(for: .seconds(maxRecordingDuration))
+            guard let self, self.sessionState == .recording else { return }
+            self.statusMessage = "Maximum recording duration reached"
+            self.currentError = .transcriptionFailed(description: "Maximum recording duration reached.")
+            await onLimit()
+        }
+    }
+
+    private func cancelRecordingLimit() {
+        recordingLimitTask?.cancel()
+        recordingLimitTask = nil
+    }
+
     private var formatterAssetsReady: Bool {
         let fm = FileManager.default
         return fm.fileExists(atPath: preferences.formatterModelPath)

ExecuWhisper/ExecuWhisper/Resources/model_manifest.json

@@ -0,0 +1,29 @@
+{
+  "version": 1,
+  "repositories": {
+    "asr": "younghan-meta/Parakeet-TDT-ExecuTorch-Metal",
+    "formatter": "younghan-meta/LFM2.5-ExecuTorch-MLX"
+  },
+  "assets": {
+    "model.pte": {
+      "bytes": 822365760,
+      "sha256": "406c7625094faefd019932cceba317954c1fc60de068b0be372570bfe5509ef2"
+    },
+    "tokenizer.model": {
+      "bytes": 360916,
+      "sha256": "eacec2b0a77f336d4a2ca4a25a7047575d3c2b74de47e997f4c205126ed3135e"
+    },
+    "lfm2_5_350m_mlx_4w.pte": {
+      "bytes": 322767616,
+      "sha256": "a22641ff8364b813bc5808428bf13ca7525df9995b1721b58b414a35da8312c9"
+    },
+    "tokenizer.json": {
+      "bytes": 4733383,
+      "sha256": "2221c71b5dce048a8abae62843b92bd7deec13cc153f95fa6e3327a47b79a7da"
+    },
+    "tokenizer_config.json": {
+      "bytes": 595,
+      "sha256": "3701f370c70034d06e28947ff51c1063983393319f429e3ce58f06a45fae67cc"
+    }
+  }
+}