jake/Lumotia
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: jake:claude/auto-titles
Branches Tags
jake:main jake:feat/v0.3-tactile-quietware jake:claude/auto-titles
jake:lumotia-rebrand-cascade-complete jake:pre-lumotia-rebrand jake:pre-consolidation-2026-04-23
...
compare: jake:3c47000ea9906f06d421f0a2eec2427f454107c3
Branches Tags
jake:feat/v0.3-tactile-quietware jake:main jake:claude/auto-titles
jake:lumotia-rebrand-cascade-complete jake:pre-lumotia-rebrand jake:pre-consolidation-2026-04-23

71 Commits
claude/aut ... 3c47000ea9

Author SHA1 Message Date
jars
3c47000ea9 chore(core): add tuning_log_demo example for live heuristic validation
Some checks failed
check / cargo check (macos-latest) (push) Has been cancelled
Details
check / cargo check (ubuntu-22.04) (push) Has been cancelled
Details
check / cargo check (windows-latest) (push) Has been cancelled
Details
check / svelte build + lint (push) Has been cancelled
Details 
Run with:
  cargo run -p magnotia-core --example tuning_log_demo

Initialises a tracing-subscriber fmt layer so the inference_thread_count
INFO event is rendered to stderr. Exercises all 8 (workload,
gpu_offloaded) combos under three power scenarios: AC override,
battery override, and the real sysfs probe.

Used to validate the heuristic on 2026-05-09 against the spec's
6c12t truth table — all 6 rows match.

Adds tracing-subscriber as a [dev-dependencies] for the example.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-09 12:55:00 +01:00
jars
052265b3c2 chore(llm): document trivial-true cross-check as observability gap 
Per the final reviewer's suggestion: the gpu_offloaded cross-check
(gpu_layers >= model.n_layer()) is trivially true when use_gpu since
we always pass u32::MAX. The check documents intent and is future-
proofed if we ever pass specific N, but a future reader might
simplify it away as dead code. Inline comment points at the spec's
out-of-scope follow-up for true residency observability.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-09 12:47:28 +01:00
jars
4f3c063008 chore(core): tidy review nits — alphabetical lib.rs, import placement, docstring 
End-of-phase cleanup of items flagged across review passes for tasks
1.1, 1.2, and 1.3:

1. crates/core/src/lib.rs: pub mod power moved to alphabetical
   position (between paths and process_watch).
2. crates/core/src/power.rs: use statements moved to top of file
   (above the PowerState enum) per Rust convention.
3. crates/core/src/power.rs: parse_power_state_from_dir docstring
   tightened to acknowledge that read_dir.flatten() silently skips
   per-entry errors. Theoretical hazard only on world-readable
   sysfs, but the previous wording overstated the guarantee.

No behavioural change. All 40 magnotia-core tests still green.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-09 12:44:09 +01:00
jars
a58c2f0994 test(transcription): thread_sweep prints power-aware 4-panel table 
Extends the JFK thread-count sweep to print four labelled panels
(AC+CPU, AC+GPU, battery+CPU, battery+GPU) driven by
MAGNOTIA_POWER_STATE_OVERRIDE. Each panel shows the helper's
predicted thread count for its (power, gpu) combination alongside
the empirical RTF table for n_threads = [1, 2, 4, physical, logical,
maybe 8].

The actual whisper context is initialised once (Vulkan if compiled
in and resolvable, CPU otherwise), so the RTF rows themselves are
produced by the same backend across panels. The CPU vs GPU axis
controls only the helper-pick column, which is the empirical
question we want answered: is the LLM=2 / Whisper=4 GPU floor right?

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-09 12:43:04 +01:00
jars
7eb69e6251 refactor(core): remove old inference_thread_count facade 
The MIN_INFERENCE_THREADS, MAX_INFERENCE_THREADS, and
inference_thread_count() defined in constants.rs were superseded by
the equivalents in tuning.rs (Task 2.1) and are no longer called by
any production code. Both call sites (whisper backend Task 4.1, LLM
generate Task 5.1) have migrated.

Constants.rs now holds only audio/mel/RAM/VAD/download constants;
inference-tuning concerns live in tuning.rs.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-09 12:41:23 +01:00
jars
0a503be38d feat(llm): LLM threads use Workload::Llm + GPU offload detection 
Wires the LLM call site through the new tuning helper. gpu_offloaded
reflects intent (use_gpu) cross-checked against the loaded model's
layer count: u32::MAX (when use_gpu) is trivially >= any model's
n_layer, but the explicit comparison is future-proofed if we ever
pass a specific N instead of u32::MAX.

Note: the call site is in generate() not load_model() as the plan
suggested. Context params (and thus thread count) are constructed
per-inference, not per model load, since n_ctx depends on prompt
size. The implementer adapted correctly.

The old magnotia_core::constants::inference_thread_count import is
replaced. Task 6.1 removes the constants helper now that both call
sites have migrated.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-09 12:30:34 +01:00
jars
e715da3b54 feat(transcription): whisper threads use Workload::Whisper + GPU detection 
Wires the whisper backend through the new tuning helper. gpu_offloaded
combines a compile-time feature check (whisper-vulkan, in default
features) with a runtime libvulkan probe via the hardware module. If
libvulkan1 is missing on Linux, whisper-rs's vulkan backend silently
falls back to CPU, so we should not reduce threads in that case.

The old magnotia_core::constants::inference_thread_count import is
replaced by tuning::{inference_thread_count, Workload}. The constants
module's helper is removed in Task 6.1 once the LLM call site has
also migrated.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-09 12:21:33 +01:00
jars
d6bde52d6e refactor(tauri): use magnotia_core::hardware::vulkan_loader_available 
Delete the local duplicate fn and libloading dependency from src-tauri;
import the canonical implementation from magnotia-core::hardware instead.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-09 12:08:16 +01:00
jars
b991355cb0 feat(core): port vulkan_loader_available from src-tauri 
Adds libloading = "0.8" to magnotia-core dependencies and moves
vulkan_loader_available() into magnotia-core::hardware so non-Tauri
crates (transcription, llm) can probe the Vulkan loader without
depending on the Tauri binary. Test asserts the call completes on any
host regardless of whether libvulkan is installed.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-09 12:02:39 +01:00
jars
9c85c25b7f feat(core): per-process INFO log on first thread-count call per tuple 
Adds a OnceLock<Mutex<HashSet>> cache in tuning.rs. inference_thread_count
now emits a single tracing::info! line the first time each
(workload, on_battery, gpu_offloaded) tuple is seen in the process,
recording the resolved thread count and which clamps fired (battery, gpu).
Also derives Hash on Workload and tightens the GPU clamp to only record
the "gpu" clamp when it actually reduces chosen. Smoke test added.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-09 11:58:32 +01:00
jars
6b456b1766 feat(core): GPU-offload clamp with per-workload floor 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-09 11:53:03 +01:00
jars
847dc755ac feat(core): inference_thread_count halves on battery 
Adds battery-state awareness to the thread-count helper: when
probe_power_state() returns OnBattery, chosen is halved before the
[MIN, MAX] clamp.  Also removes the leading underscore from the
workload/gpu_offloaded parameters (they are silenced via let _ = ...
until the GPU-clamp task).

New test battery_halves_thread_count verifies on_battery <= on_ac and
>= MIN when the host has more than MIN physical cores.  Restructured
to sequential with_override calls (not nested) to avoid re-entrant
deadlock on power::TEST_LOCK.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-09 11:49:32 +01:00
jars
02a6cb24ce fix(core): serialise tuning env-var tests behind a lock 
Without a lock, env_var_bypasses_clamps (set_var + remove_var) and
matches_existing_clamp_when_no_clamps_apply (remove_var) race under
cargo's parallel test runner. Task 2.2 will add another remove_var
call, compounding the race.

Adds a #[cfg(test)] static THREAD_ENV_LOCK and a closure-style
with_thread_env_lock helper, mirroring power::with_override.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-09 11:42:03 +01:00
jars
504ba0a361 feat(core): tuning module with Workload + helper skeleton 
Adds crates/core/src/tuning.rs with MIN/MAX_INFERENCE_THREADS consts,
Workload enum (Llm/Whisper), and inference_thread_count() helper matching
the existing constants::inference_thread_count clamp behaviour. Three unit
tests pass. tracing dep added to Cargo.toml (used by future tasks).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-09 11:38:07 +01:00
jars
eccc5e9544 feat(core): 10s TTL cache on probe_power_state 
Cache sits between override resolution and platform_probe; override
paths (test + env-var) bypass it entirely so they always take effect
immediately. OnceLock<Mutex<Option<CachedState>>> initialised lazily on
first probe. Two test-only helpers (force_clear_cache, force_set_cache)
expose the cache slot for unit tests. Mutex import ungated — now used in
production cache code as well as test override.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-09 11:33:46 +01:00
jars
3d978e3978 fix(core): cfg-gate test override + restore TEST_OVERRIDE on panic 
TEST_OVERRIDE and test_get_override are now #[cfg(test)]-gated and
the read in probe_power_state is wrapped in a #[cfg(test)] block,
so test scaffolding doesn't compile into production builds.

with_override now uses a drop-guard pattern so a panic inside body
still resets TEST_OVERRIDE, preventing stale state from leaking
into subsequent tests.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-09 11:30:33 +01:00
jars
0c761c0be6 feat(core): probe_power_state with Linux dispatch + override paths 
Adds the public probe entry point with two override mechanisms:
- In-process TEST_OVERRIDE slot serialised by TEST_LOCK mutex for
  unit tests (avoids races with cargo's parallel runner).
- MAGNOTIA_POWER_STATE_OVERRIDE env var for integration tests set
  externally.
Platform dispatch: Linux reads /sys/class/power_supply; all others
return Unknown. Five new override tests pass alongside the six sysfs
parser tests from Task 1.2 (12 total green).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-09 11:24:50 +01:00
jars
276e3ca6c1 feat(core): parse_power_state_from_dir reads sysfs power_supply ABI 
Pure function takes a directory path and returns OnAc, OnBattery, or
Unknown by reading `type` and `online` files in each supply entry.
Matches the kernel ABI documented at
Documentation/ABI/testing/sysfs-class-power. Failure modes (missing
dir, unreadable files, malformed contents) all fall through to Unknown
rather than panicking.

Seven tests cover: Mains online, battery-only, USB-PD, empty dir,
missing dir, and malformed entries. All pass.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-09 11:19:34 +01:00
jars
1f3496e4ed feat(core): add PowerState skeleton in new power module 
Introduces crates/core/src/power.rs with the PowerState enum
(OnAc / OnBattery / Unknown) and a unit test confirming the three
variants are distinct. Registers the module in lib.rs and adds
tempfile = "3" to dev-dependencies for use in later tasks.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-09 11:14:24 +01:00
jars
c46c0a5ce9 docs: implementation plan for battery- and GPU-aware thread tuning 
Bite-sized TDD plan implementing the design at
docs/superpowers/specs/2026-05-09-battery-gpu-aware-thread-tuning-design.md.

8 phases, ~13 commits:
- Phase 1: power.rs (PowerState enum, sysfs parser, probe + overrides,
  10s TTL cache)
- Phase 2: tuning.rs (Workload enum, helper, battery clamp, GPU clamp,
  per-process logging)
- Phase 3: vulkan_loader_available moves from src-tauri to magnotia-core
- Phase 4: whisper backend wires through new helper
- Phase 5: LLM call site wires through new helper after model load
- Phase 6: remove old constants::inference_thread_count facade
- Phase 7: thread_sweep.rs prints 4-panel power-aware RTF table
- Phase 8: manual battery validation smoke

Each task is TDD: write failing test, run, implement, run, commit.
Tests live in unit-test modules inside power.rs and tuning.rs.

Override design uses an in-process with_override(state, |closure|)
helper for unit tests (cargo runs them in parallel; env-var path
would race) and MAGNOTIA_POWER_STATE_OVERRIDE env var for
integration tests like thread_sweep.rs.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-09 11:01:21 +01:00
jars
200c4fb447 docs: battery- and GPU-aware inference thread tuning design 
Spec for two new clamps on the existing inference_thread_count helper:
- Battery clamp: drop to physical/2 when on battery (Linux sysfs probe;
  macOS/Windows return Unknown, treated as OnAc).
- GPU-offload clamp: 2 threads for fully-offloaded LLM, 4 for Whisper
  (Whisper keeps mel spectrogram, decoder bookkeeping, and beam search
  on CPU even with full Vulkan offload).

Codex + online-research consult: no prior art in llama.cpp, Ollama,
Jan, or mistral.rs. Apple's Low Power Mode is OS-level (P-core
frequency cap), not a published software API. Lumenote would be first
in the open Rust inference-wrapper space; instrumentation matters,
hence the thread_sweep.rs extension + per-process INFO log.

Architecture (Approach B):
- New crates/core/src/power.rs (PowerState, sysfs probe, 10s TTL).
- New crates/core/src/tuning.rs (Workload enum, helper).
- Move vulkan_loader_available() from src-tauri to magnotia-core
  so crates/transcription can call it without a Tauri dep.
- Existing constants::inference_thread_count() becomes deprecated
  facade for one commit, then removed.

GPU-offload detection is intent-based (use_gpu && requested_layers
>= model.n_layer() for LLM; cfg(whisper-vulkan) && libvulkan
resolvable for Whisper). Residency-based detection deferred:
llama-cpp-2 0.1.145 doesn't expose post-load offload count, so a
true outcome flag would need llama_log_set callback parsing or an
upstream PR. Caveat documented in the spec.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-09 10:36:21 +01:00
jars
4cb954ece4 perf: route whisper + llm n_threads through physical-core helper
Some checks failed
check / cargo check (macos-latest) (push) Has been cancelled
Details
check / cargo check (ubuntu-22.04) (push) Has been cancelled
Details
check / cargo check (windows-latest) (push) Has been cancelled
Details
check / svelte build + lint (push) Has been cancelled
Details 
Both inference call sites previously called `num_cpus::get()` (logical
thread count). Established whisper.cpp / llama.cpp guidance is that
SMT siblings contend for shared FPU resources during heavy F16/F32
matmul, so going past physical core count anti-scales. Empirical
sweep on Whisper Tiny / 11s JFK clip / Ryzen 5 4650U (6c12t):

  n_threads | xc_time | RTF    | speedup_vs_1
  ----------|---------|--------|-------------
          1 |   0.33s |  0.030 |   1.00x
          2 |   0.33s |  0.030 |   1.00x
          4 |   0.30s |  0.028 |   1.09x
          6 |   0.32s |  0.029 |   1.04x
          8 |   0.31s |  0.028 |   1.06x
         12 |   0.32s |  0.029 |   1.03x

Tiny doesn't scale (work dominated by overhead) but the larger
Whisper variants and Qwen LLMs do. Sources: whisper.cpp #200, #1033,
#1252, #403; llama.cpp #3167, #572.

Changes:
- crates/core/src/constants.rs:
  * MIN_INFERENCE_THREADS lowered 4 → 2 (research-derived floor)
  * MAX_INFERENCE_THREADS = 8 added (research-derived ceiling)
  * inference_thread_count() rewritten:
      - reads MAGNOTIA_INFERENCE_THREADS env var (override)
      - num_cpus::get_physical() with available_parallelism fallback
      - clamped to [MIN_INFERENCE_THREADS, MAX_INFERENCE_THREADS]
- crates/core/Cargo.toml: + num_cpus = "1"
- crates/transcription/src/whisper_rs_backend.rs: call site uses helper.
- crates/llm/src/lib.rs: call site uses helper.
- crates/transcription/Cargo.toml: drop num_cpus from [features] +
  [dependencies] (production no longer needs it). Move to
  [dev-dependencies] for tests/thread_sweep.rs only.
- crates/llm/Cargo.toml: drop num_cpus = "1" (no longer used directly).

Per-machine maps (after this patch):
  Ryzen 5 4650U  6c12t → 6
  big-iron 12c24t       → 8 (clamp; users can override)
  cheap 2c2t laptop     → 2
  1c container/VM       → 2

Adds crates/transcription/tests/thread_sweep.rs — env-gated like
jfk_bench, prints the table above against any model + WAV. Useful for
re-baselining on new hardware or when tuning the clamp values.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-09 09:26:23 +01:00
jars
fdf27db0a1 perf+fix: DMABUF default on Linux, popout ACL fixes, plugin version sync, JFK bench fixture 
Bundled work from a low-end laptop (Ryzen 5 4650U / Vega 6 / Linux Mint
22.2 / X11) profiling pass.

perf: WEBKIT_DISABLE_DMABUF_RENDERER=1 default on all Linux
  Previously only set on Wayland sessions. Empirically it's a
  significant idle-cost win on integrated GPUs in either session type:
  env-var matrix (release binary, 75s settle, 10s jiffies CPU sample)
  showed magnotia idle CPU 12.30% → 2.80% of one core and idle GPU
  17% → 10% on this hardware. Users can opt back in by exporting
  WEBKIT_DISABLE_DMABUF_RENDERER=0. The Wayland-only XWayland
  fallback (GDK_BACKEND=x11, WINIT_UNIX_BACKEND=x11) is unchanged.

fix: secondary-windows ACL — allow set-always-on-top
  The float window's pin toggle calls setAlwaysOnTop() but the
  secondary-windows capability didn't permit it, so the popout was
  stuck always-on-top regardless of the pin state. Adds the
  core:window:allow-set-always-on-top permission. Narrow scope.

fix: guard registerGlobalHotkey against non-main webviews
  Cross-window settings sync via localStorage can re-fire the
  $effect(() => settings.globalHotkey) callback inside popout webviews
  where the main layout's registerGlobalHotkey is reachable. Adds an
  early-return when the current window label is not "main", so the
  popout doesn't trigger an ACL-denied register/unregister and the
  user no longer sees a spurious "Hotkey not registered" toast when
  popouts are open. Keeps the global-shortcut perm scoped to main.

build: pin @tauri-apps/api 2.10.1 + @tauri-apps/plugin-dialog 2.7.1
  Match the Rust crate versions tauri-cli's version-mismatch check
  enforces during release builds. Without this, `npm run tauri build`
  exits 0 silently while emitting an Error and never producing
  binaries.

test: add crates/transcription/tests/jfk_bench.rs
  Reproducible RTF regression fixture. Env-gated on
  MAGNOTIA_WHISPER_TEST_MODEL + MAGNOTIA_WHISPER_TEST_AUDIO so it
  never runs in CI without setup. Loads the JFK WAV inline (no hound
  dep), times model load + cold + warm transcribe, prints SUMMARY.
  Baselines on this hardware:
    --release --features whisper:               cold RTF 0.054, warm 0.050, RSS 125 MB
    --release --features whisper,whisper-vulkan: cold RTF 0.029, warm 0.028, RSS 125 MB
  Vulkan on RADV/Vega 6 nearly halves transcription latency for
  Whisper Tiny — useful baseline for Phase 10 hardware-recommendation
  scoring.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-09 09:09:03 +01:00
Jake
2dfd7167fd fix(a11y): Toggle aria-invalid briefly when async onChange rejects
Some checks failed
check / cargo check (macos-latest) (push) Has been cancelled
Details
check / cargo check (ubuntu-22.04) (push) Has been cancelled
Details
check / cargo check (windows-latest) (push) Has been cancelled
Details
check / svelte build + lint (push) Has been cancelled
Details 
When an async onChange handler rejects, the toggle snapped back to its
previous value silently — screen reader users had no signal that the
action failed, only that the toggle suddenly returned to its original
state. Now aria-invalid="true" exposes the failure on the role=switch
button for 1.5s after rejection, so assistive tech announces the error.
Self-clears via setTimeout; no API change for callers.
 2026-05-07 11:31:47 +01:00
Jake
aecb191705 refactor(theme): tokenise hard-coded amber shadows and reconcile duplicate @font-face declarations 
Hard-coded rgba(214,132,80,X) shadows were tied to the dark-theme accent
and stayed off-hue in light mode (where the accent is a darker #a3683a).
Six tokens added to app.css @theme and mirrored in the light-theme block
plus design-system/colors_and_type.css:

  --shadow-accent-sm     0 0 8px   0.25 alpha  Toggle on-state
  --shadow-accent-md     0 4px 16px 0.3       ModelDownloader card
  --shadow-accent-lg     0 4px 20px 0.3       DictationPage record button
  --shadow-accent-glow   0 0 8px   0.4        progress-bar glow
  --shadow-accent-pill   0 1px 4px 0.3        SegmentedButton pill
  --shadow-accent-raised 0 2px 8px 0.2        FilesPage browse tile

Migrated seven sites: Toggle, SegmentedButton, ModelDownloader (x2),
FilesPage (x2), DictationPage record button, SettingsPage locale pill.
Focus-ring shadows (0_0_0_3px_rgba(...,0.1)) left alone — handled in
parallel via the --accent-shadow-focus token.

@font-face: app.css and colors_and_type.css both declare the same five
fonts. Duplication is unavoidable because preview/*.html loads the
design-system file directly without Vite, so it cannot share the
runtime declarations. font-weight ranges and font-style reconciled to
match exactly (Atkinson 200-800 not 400-700, JetBrains gains font-style:
normal); src URLs intentionally differ (root-absolute vs relative).
Comments added to both copies explaining the contract.
 2026-05-07 11:31:14 +01:00
Jake
f4c0635549 fix(a11y): guard sidebar-toggle keypress against custom widgets and scope transcript font-size effect 
- Extend isInputFocused to also bail when document.activeElement sits
  inside a custom widget with role combobox/listbox/radio/switch/menuitem/tab
  so single-letter shortcuts like '[' do not collapse the sidebar while
  focused on SegmentedButton, ZonePicker, etc.
- Move the transcript font-size CSS variable write from documentElement
  to document.body. Consumers inherit body styles, and scoping the write
  there avoids invalidating root-level styles every time fontSize changes.
 2026-05-07 11:27:42 +01:00
Jake
736896c2b8 fix(a11y): announce HistoryPage inline-confirm armed state and tag-chip pressed state 2026-05-07 11:24:53 +01:00
Jake
9b17425bc9 fix(a11y): name FilesPage drop zone region and denest Card 2026-05-07 11:23:55 +01:00
Jake
d3554951e0 fix(a11y): privacy badge role/label and stronger search focus ring in light theme 2026-05-07 11:23:23 +01:00
Jake
47b005ad70 fix(a11y): bump record button to 48x48 and announce Recording stopped to screen readers 
Record button bumped from 40x40 to 48x48 (WCAG 2.5.5 AA requires 44x44; 48 chosen as forgivable oversize for the most-touched control). Inner stop-square and record-circle bumped 14x14 to 16x16, Loader2 16 to 18, to keep the visual ratio.

Recording-status sr-only live region now announces both transitions: "Recording started" on start and "Recording stopped" on stop, with the stop message clearing after 1200ms so the live region does not hold stale text. Transition tracked via a plain let prevRecording (not $state) since it is bookkeeping and must not retrigger the effect. aria-atomic="true" added so the whole region re-reads on update.
 2026-05-07 11:20:35 +01:00
Jake
ca3a55320b fix(a11y): bump all text below 12px to 12px floor and promote tertiary-on-body to secondary 
Brand guidelines (docs/brand/magnotia-brand-guidelines.md §4) say "Never go
below 12px for any text" and "tertiary text must be ≥18px bold or ≥24px
regular". Audit found 246 sub-12px className sites and 166 cases of
text-text-tertiary paired with body sizes.

Bumped text-[9/10/11px] → text-[12px] across 26 .svelte files in src/lib
and src/routes. Promoted text-text-tertiary → text-text-secondary at body
sizes (12-14px) where context allowed; left placeholder pseudo-states,
ternary-conditional inactive states, and line-through "done" states alone
(8 residual pairings, all decorative).

Affects neurodivergent users on 1366×768 budget hardware most directly.
svelte-check: 0 errors, 0 warnings.
 2026-05-07 11:18:10 +01:00
Jake
6da15d1ac8 feat(ui): wire deferred Card tone and elevation variants
Some checks failed
check / cargo check (macos-latest) (push) Has been cancelled
Details
check / cargo check (ubuntu-22.04) (push) Has been cancelled
Details
check / cargo check (windows-latest) (push) Has been cancelled
Details
check / svelte build + lint (push) Has been cancelled
Details
2026-05-07 10:53:30 +01:00
Jake
9ba7babcb0 feat(settings): add quick-settings row for theme, font size, and hotkey 2026-05-07 10:52:51 +01:00
Jake
5778696140 feat(dictation): surface "Talk now, think later" empty state and hide post-transcript actions 
Reduces first-run cognitive load. Save / Copy / Clear / Export now appear only
once the user has a transcript or is recording, sliding in via animate-fade-in
(brand --duration-ui + ease-out-quart). Template and Extract Tasks remain
always-visible because they shape transcription rather than acting on completed
content.

Empty state now leads with the catchphrase as a brand statement
(font-display italic 28px) with the hotkey hint demoted to body-font tertiary.
EmptyState gains an optional headline prop; callers without it render unchanged.
 2026-05-07 10:49:37 +01:00
Jake
d2f64a231d feat(theme): bump accent chroma, push sensory zones apart, richer status tokens 
Phase 10b colour push: theme reads as Magnotia, not "subdued generic dark".
Same lightness band as Phase 10a (AA preserved), more chroma across accent,
status tokens, and zone surfaces.

Dark accent: #c98555 -> #d68450 (subtle/hover/glow recomputed).
Light accent: #a06a3e -> #a3683a.
Dark status: success #7ec89a -> #5fc28a, danger #e87171 -> #e85f5f,
warning #e8c86e -> #e8be4a.
Light status: success #2f7549 -> #1f7344, danger #a83838 -> #b32626,
warning #b89a3e -> #a08a1f.

Sensory zones pushed further apart so each zone reads as its own
environment: cave cools toward blue-grey, energy warms toward red-orange,
reset cools toward green. AA on body text verified for every Card surface
in both themes.

Stale accent rgba (201,133,85) replaced with new (214,132,80) across nine
files. --shadow-accent in colors_and_type.css mirrored.

No secondary tint token added: Magnotia's identity is amber-as-the-only-
meaningful-colour. Cheaper to add a second meaningful colour later if a
real need appears than to dilute the discipline now.

Default surfaces, text tokens, and borders untouched per scope.
 2026-05-07 10:46:35 +01:00
Jake
ec09f8ffdb feat(settings): finalise polish — autostart Toggle dedupe, AI Default/Advanced split, vocab consistency, model ETA, privacy badge, group icons
Some checks failed
check / cargo check (macos-latest) (push) Has been cancelled
Details
check / cargo check (ubuntu-22.04) (push) Has been cancelled
Details
check / cargo check (windows-latest) (push) Has been cancelled
Details
check / svelte build + lint (push) Has been cancelled
Details 
Six changes, one coherent polish pass on SettingsPage:

1. Autostart toggle dedupe. The 27-line custom button that mirrored
   Toggle's markup to dodge a bind:checked race is gone. Toggle's new
   async onChange + snap-back covers the OS round-trip; setLaunchAtLogin
   re-throws on failure so Toggle reverts checked. autostartSyncing
   state retired.

2. AI Assistant Default/Advanced split. Cleanup preset and GPU
   concurrency moved into a nested SettingsGroup title="Advanced",
   closed by default. The Assistant page now leads with four
   first-decision controls (tier, model picker, status, prewarm) and
   parks the tuning knobs behind a disclosure. Search keywords cascade
   from the Advanced group up to AI Assistant up to AI & Processing.

3. Vocabulary disclosure consistency. The hand-rolled Profiles and
   Templates sub-panels (with their own ChevronRight buttons +
   showProfiles/showTemplates state) are now nested SettingsGroups.
   The count badges live in the description slot ("3 profiles ·
   custom vocabulary..."). showProfiles, showTemplates, and the
   ChevronRight import retired.

4. Model-download ETA in Settings. Both whisper and LLM download
   chips now show "{percent}% · {bytes} / {total} · {duration} left",
   reusing formatDuration from utils/time.ts. New formatBytes +
   etaSecondsFromPercent helpers in SettingsPage; bytes pulled from
   the existing emit payload (DownloadProgress snake_case for whisper,
   done/total for the LLM event). FirstRunPage already does the
   timestamp-based ETA; we mirror its shape.

5. Privacy badge in sticky header. Single chip "100% local · no
   telemetry · no cloud" added next to the Settings heading using
   bg-accent-subtle + text-text-tertiary. The longer About list
   stays put as the deep-dive.

6. SettingsGroup icons on the seven top-level groups. Mic, BookOpen,
   Type, Sparkles, SquareCheck, Clipboard, Sliders — paired with the
   existing literal text titles per the icon-with-label brand rule.
   Inner nested groups stay icon-free.

Verification: npm run check returns 0 errors, 0 warnings.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-07 10:19:26 +01:00
Jake
aa1ba48e07 feat(card): add tone (subtle, danger) and elevation (raised) variant props 
Both props default to current behaviour, so all existing call sites render
unchanged. Subtle uses bg-bg-elevated for quieter empty-state contexts;
danger uses bg-danger/5 + border-danger/30 for calm caution panels (not
red-alert loud, matching brand). Raised layers shadow-md on top of the
existing low-contrast shadow for floating or detached surfaces.
 2026-05-07 10:09:14 +01:00
Jake
3a27031eba feat(settings-group): add optional icon prop and tighten title/description rhythm 
Title bumped to font-semibold so it scans first; description gets tracking-wide
plus mt-1 for cleaner rhythm. Chevron alignment shifted from mt-0.5 to mt-1 to
match the new spacing. Optional `icon` prop renders a Lucide component between
the chevron and the title block at 16x16, text-tertiary, no colour change on
open. Layout is preserved exactly when no icon is passed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-07 10:07:39 +01:00
Jake
aebf6cd149 feat(toggle): add disabled, loading, and async onChange props 
Extends the shared Toggle with three optional props while keeping the
existing bind:checked path untouched for current call sites.

- disabled: dims the control, sets aria-disabled, and early-returns on click.
- loading: forces a Loader2 spinner inside the thumb, applies cursor-wait
  and aria-busy, and blocks interaction. Cursor-wait wins over disabled's
  not-allowed when both are set, matching loading-precedence guidance.
- onChange(next): when supplied, replaces the immediate flip. Promise
  returns drive an internal pending flag so the toggle renders loading
  while the handler resolves; on resolve checked flips, on reject the
  toggle snaps back. Synchronous handlers flip immediately after the call.

Brand motion preserved: 150ms duration, cubic-bezier(0.2, 0.8, 0.2, 1),
no transition-all.
 2026-05-07 10:06:06 +01:00
Jake
5e3a9f9f42 fix(ui): promote modal overlay to token, lift modal above grain, dedupe FilesPage drop-zone 
- Add --color-overlay-dim token to app.css @theme (rgba(15,14,12,0.7) dark, rgba(26,24,22,0.55) light); mirror as --overlay-dim in design-system/colors_and_type.css.
- MorningTriageModal: replace inlined rgba scrim with var(--color-overlay-dim), drop backdrop-blur-sm (brand opposes glassmorphism by default), bump container to z-[60] so it sits above the .grain z-50 overlay.
- FilesPage: collapse two near-identical drop-zone blocks into one bordered region with conditional inner content; preserves isDragOver hover behaviour and aria region.
 2026-05-07 10:04:30 +01:00
Jake
13af425dfa fix(hotkey): surface Esc-to-cancel hint and replace recording-keyframe reuse with success flash 
Two scoped fixes to HotkeyRecorder:

- Append "Esc to cancel." to the recording prompt so the existing Escape
  handler is discoverable. srStatus already mentions Escape; no harmonisation
  needed.
- Replace animate-pulse-warm on the captured state with a static
  bg-success/10 + border-success/40 flash. pulse-warm is the
  recording-active keyframe; reusing it for the saved state muddled the
  visual vocabulary. The global * transition rule already animates
  background-color and border-color over --duration-ui (150ms) with the
  brand cubic-bezier ease, so no new keyframe is needed and prefers-reduced-motion
  is honoured automatically. Also swapped transition-all for transition-colors
  to comply with the no-transition-all brand-motion rule.
 2026-05-07 10:02:08 +01:00
Jake
a4cca58289 fix(history): replace native confirm() with inline two-click confirmation 
Native window.confirm() is OS-styled and breaks the warm-amber UI
tone with an abrupt brutalist modal. The brand voice is "calm,
informative, solution-first; never blame the user", and confirm() is
none of those.

Replaced both destructive paths (Clear All, Delete N selected) with
a two-click inline pattern: first click arms the trigger and morphs
it into "Delete X? [Confirm] [Cancel]" inline pills; auto-cancels
after 4s so a user who walked away doesn't return to a primed delete
button. No new modal, no new component, no new dependency.

Both timers are cleared in onDestroy so unmounting the page mid-arm
doesn't leak.
 2026-05-07 09:21:04 +01:00
Jake
e857a814ad fix(ui): remove side-stripe borders in favour of subtle bg tints 
Side-stripe borders (border-left: 2px or 3px in an accent colour, with
the rest of the element having no border) are the textbook AI-coded-IDE
"selected-state" pattern. The brand vocabulary is colour-tint and
chevron, not stripe-and-fill.

Replaced eight sites:
- VirtualSegmentList active/match/default segment rows: bg-accent/10,
  bg-warning/10, hover:bg-hover (drop the stripes; bg-warning bumped
  /5 → /10 so it's visible without the stripe doing the work).
- viewer/+page.svelte: same pattern as VirtualSegmentList.
- TasksPage profile-list tabs: bg-accent/10 + font-medium for active,
  hover:bg-hover for inactive. rounded-md added so the tint follows
  the row outline.
- ToastViewport: replaced border-left + variant colour with full 1px
  border + bg tint + border-color tint (color-mix() with the matching
  semantic token at 35% / 10%). Also removed the orphan --moss /
  --signal / --ember tokens — they were not defined in app.css and
  fell back to hex literals.
- preview/+page.svelte: dropped the phase-coloured left stripe and
  the borderColorClass derivation; the header already has a pulsing
  dot / animated bars / spinner for each phase, so the stripe was
  redundant.
 2026-05-07 09:18:54 +01:00
Jake
360e5457dc fix(copy): replace em-dashes in user-facing strings with commas/periods 
Per the project's no-dashes feedback rule (see CORBEL-Main memory
feedback_no_dashes.md), em-dashes in user-visible copy are the single
biggest "AI wrote this" surface tell. Forty-two occurrences across ten
files: ten in SettingsPage's group descriptions and option labels
(audio device picker, vocabulary help, prompt placeholders, model
descriptions), four in FirstRunPage's setup steps, three in
DictationPage / FilesPage / Energy chip tooltips, plus the privacy
bullets ("100% offline, no Python required, no cloud, no accounts,
no telemetry"), the rejection toast, MicroSteps thumb labels, and the
shutdown ritual prompts.

Replacement rule: subordinate-clause em-dashes followed by lowercase
become commas; sentence-break em-dashes followed by capitals become
full stops. Code comments left intact.

One non-em-dash regression caught while reviewing: TasksPage's energy
filter "no selection" placeholder showed "—" as a literal label; the
script changed it to a comma which read as a UI bug. Replaced with
"Any" instead.
 2026-05-07 09:16:37 +01:00
Jake
637ed89eac feat(settings): ship search filter that opens matching groups 
The settingsSearch state was declared in Phase 9c with a comment
describing the intended behaviour but no <input> bound to it. With 21
SettingsGroup instances and a 2,261-line page, finding any specific
control required scrolling and opening every group. For the
neurodivergent audience this is exactly the cognitive-load failure
the brand commits to avoiding.

Added a sticky search input at the top of the page (paired with the
"Settings" title in a single sticky header that bg-bg-matches the
page so groups don't bleed under it). Each SettingsGroup now passes
through searchMatches against its title, description, and a curated
keyword string. Parent groups inherit their children's keywords so a
search for "GPU" expands AI & Processing and the AI Assistant inner
group together.

Updated SettingsGroup to push prop changes to the DOM via $effect:
the native <details> element's open attribute is mutated by user
clicks outside Svelte's reactive graph, so a parent prop change
needs to force-sync. User-driven toggles where the prop value didn't
change keep their local state because $effect only re-runs on diff.

Verified live: baseline shows 3 groups open (Transcription, Terms &
profiles, Capture & export), "GPU" opens AI & Processing + AI
Assistant only (other 19 closed), "ritual" opens Tasks & Rituals +
Rituals only, X-button clear restores baseline.
 2026-05-07 09:13:38 +01:00
Jake
7a21d0c7fc fix(ui): sync stale shadow rgba from pre-Phase-10a amber to current accent 
Eighteen sites across SegmentedButton, Toggle, HotkeyRecorder,
ModelDownloader, FilesPage, and SettingsPage hardcoded the old amber
rgba(232,168,124,...) for focus rings, glows, and progress bars. After
the Phase 10a a11y darkening of --accent to #c98555, the inline shadows
no longer matched the accent fill they were paired with, so every
focused input rendered a glow at a noticeably different hue from its
border.

Replaced all of them with the current accent rgba(201,133,85,...).

Toggle component also had two motion violations: an active:scale-95
press-shrink and a cubic-bezier(0.16,1,0.3,1) (ease-out-expo) thumb
transition. Both replaced with the brand's --ease curve
(0.2,0.8,0.2,1) and the scale dropped, in line with the record-button
fix in the previous commit.

Removed redundant inline transition-duration overrides on FilesPage
Browse button (the global * rule already sets --duration-ui) and on
ModelDownloader's primary CTA (also dropped its active:scale-[0.97]).
 2026-05-07 09:07:14 +01:00
Jake
a545c7a12d fix(dictation): drop bouncy press motion and update record-button glow rgba 
Record button had active:scale-[0.93] transition-all, which contradicts
the brand motion guideline ("never bounce, slow, calm, deliberate"). The
record button is the most-touched control in the app; a 7% press-shrink
on it sets the wrong tone for everything else.

Removed the scale transform, removed the inline transition-duration
override (the global * rule in app.css already animates the named
properties at --duration-ui). Also updated the inline shadow rgba from
(232,168,124,0.3) to (201,133,85,0.3) so the glow tracks the new
a11y-darkened accent fill instead of the pre-Phase-10a amber.
 2026-05-07 09:05:23 +01:00
Jake
f274611d23 fix(app): scope user-select:none to chrome elements only 
Body had user-select:none globally so users could not copy error
strings, model paths, profile names, transcripts, status messages,
or any text into search or another tool. The brand essence is
"clarity without friction" and this was friction.

Body now defaults to user-select:text (the standard for text content),
and the chrome elements that should never be drag-selected (button,
summary, role=button|switch|tab|menuitem, data-no-select) opt out.

Verified live: body=text, button=none, paragraph=text (inherited).
 2026-05-07 09:04:10 +01:00
Jake
fdeda6c642 fix(design-system): sync colors_and_type.css to app.css authoritative tokens 
The runtime app reads tokens from app.css @theme; this file ships values
to the buildless preview pages under design-system/preview/*.html.
Several values had drifted from the Phase 10a a11y darkening done in
app.css, so the previews showed brighter accents and lighter tertiary
text than what users actually see.

Aligned: dark --text-tertiary, dark --accent (+ hover/subtle/glow/
border-focus/shadow-accent), light --text-tertiary, light --accent
(+ hover/subtle/glow), light --success, light --danger.

Header banner now states the file's role explicitly so future edits
don't recreate the drift.
 2026-05-07 09:03:11 +01:00
Jake
2f85ec5806 fix(settings): rename text-error/border-error to text-danger so error states actually render 
The Tailwind v4 @theme block defines --color-danger as the semantic error
token, and 15+ files across the codebase use text-danger consistently.
SettingsPage was the lone outlier with five text-error / border-error
sites (audio devices, profile delete, vocabulary, term delete, diagnostic
report). Without a --color-error token, those utilities resolved to the
default text colour, so error messages rendered in warm cream instead of
red. Verified live via Playwright probe before and after.
 2026-05-07 09:01:41 +01:00
Jake
d234ef394e docs(readme): refresh bundled LLM list to Qwen3.5/3.6
Some checks failed
check / cargo check (macos-latest) (push) Has been cancelled
Details
check / cargo check (ubuntu-22.04) (push) Has been cancelled
Details
check / cargo check (windows-latest) (push) Has been cancelled
Details
check / svelte build + lint (push) Has been cancelled
Details
audit / cargo audit (push) Has been cancelled
Details
audit / npm audit (push) Has been cancelled
Details 
README LLM-formatting section now states four Qwen tiers (Qwen3.5 2B /
4B / 9B + Qwen3.6 27B) and the magnotia-llm crate row reflects the
four-tier registry. The whisper-ecosystem context doc gets the same
refresh and cites unsloth as the GGUF source.

Older roadmap and Phase-0 audit docs left untouched — they are dated
historical artefacts and rewriting them would muddy the audit trail.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-01 09:59:37 +01:00
Jake
0f105f0e15 chore(llm): update callers for renamed model variants 
Picks up the registry rename in the front-end and Tauri command layer:

- src/lib/types/app.ts: LlmModelIdStr now lists the four new ids
  (qwen3_5_2b / qwen3_5_4b / qwen3_5_9b / qwen3_6_27b).
- src/lib/pages/SettingsPage.svelte: LLM_MODELS table rebuilt with
  four tiers (Minimal / Standard / High / Maximum), matching subtitles
  and download-size copy. selectedLlmModelId fallback, hardware-warning
  thresholds, tier-availability check, and ensureRecommendedLlmTier
  fallback all retargeted at the new ids. The Maximum tier surfaces a
  64 GB / 24 GB warning so users with mid-range hardware see honest
  expectations.
- src-tauri/src/commands/llm.rs and commands/tasks.rs: doc-comment
  examples refreshed (Qwen3 4B → Qwen3.5 4B, Qwen3's tokenizer →
  Qwen's tokenizer — the BPE family is shared).
- src/lib/stores/llmStatus.svelte.ts: chip-detail example updated.

cargo build --workspace clean. cargo test --workspace clean.
npx svelte-check reports one pre-existing error in vite.config.js
(unused @ts-expect-error directive, dates back to the original
scaffold commit 9926a42); not introduced here, out of scope to fix.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-01 09:59:03 +01:00
Jake
699cb7e08e feat(llm): bump model registry to Qwen3.5 + Qwen3.6 family (4 tiers) 
Replaces the three older Qwen3 variants with a four-tier ladder spanning
a wider hardware range:

- Qwen3_5_2B_Q4   (Minimal, 8 GB RAM, ~1.3 GB download)
- Qwen3_5_4B_Q4   (Standard, 16 GB RAM / 6 GB VRAM, ~2.7 GB) — DEFAULT
- Qwen3_5_9B_Q4   (High, 32 GB RAM / 12 GB VRAM, ~5.7 GB)
- Qwen3_6_27B_Q4  (Maximum, 64 GB RAM / 24 GB VRAM, ~17 GB)

All four GGUFs sourced from unsloth's HF org with pinned commit SHAs.
Sizes and SHA256 hashes verified against the live X-Linked-Etag /
X-Linked-Size headers on the LFS CDN. Q4_K_M quantisation throughout
(common sweet-spot for cleanup + task extraction).

recommend_tier rewritten to span four bands; default_tier moves from
the old 4B-Instruct-2507 to Qwen3.5 4B. The 27B Maximum tier honestly
needs 64 GB RAM to run without partial offload — surfaced in the
description string so the Settings UI can warn realistically.

In-tree smoke tests (smoke.rs, content_tags_smoke.rs) updated to
reference the new smallest tier so a developer's MAGNOTIA_LLM_TEST_MODEL
points at the cheapest GGUF to download. Crate description in
crates/llm/Cargo.toml refreshed to mention the new family.

NOTE (out of scope; not fixed): the size_bytes / sha256 / hf_url
methods could collapse into a single LlmModelMetadata table to remove
four parallel match arms. Layer 2 cleanup, separate session.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-01 09:57:21 +01:00
Jake
c42a144aad agent: audit — Phase 1 lean-pass scan deliverable (read-only, review pending)
Some checks failed
check / cargo check (macos-latest) (push) Has been cancelled
Details
check / cargo check (ubuntu-22.04) (push) Has been cancelled
Details
check / cargo check (windows-latest) (push) Has been cancelled
Details
check / svelte build + lint (push) Has been cancelled
Details
2026-05-01 08:24:53 +01:00
Jake
b410c6196b docs(handovers): D1 — move dated HANDOVERs to docs/handovers/ with rebrand-origin note
Some checks failed
check / cargo check (macos-latest) (push) Has been cancelled
Details
check / cargo check (ubuntu-22.04) (push) Has been cancelled
Details
check / cargo check (windows-latest) (push) Has been cancelled
Details
check / svelte build + lint (push) Has been cancelled
Details
2026-05-01 08:05:00 +01:00
Jake
10480ccbc7 docs(readme): B3 — clarify crate count (9 library + Tauri app crate) 2026-05-01 08:03:42 +01:00
Jake
16cbd7c13c docs(readme): B2 — refresh stale test count (245 → 220+ lib + 67 Tauri-app) 2026-05-01 08:03:16 +01:00
Jake
4e16dbefb4 chore(crates/llm): add missing description field per contributing rule 2026-05-01 08:02:29 +01:00
Jake
548cb3889b docs(readme): A3 + D2 — document 6 missing Tauri command modules; correct module count and call out utility modules 2026-05-01 08:02:14 +01:00
Jake
211f576ebd docs(readme): A2 — remove Moonshine claim from magnotia-core description 2026-05-01 08:00:47 +01:00
Jake
3e9739db1e docs(readme): A1 — replace fictional stores list with actual ten store files 2026-05-01 08:00:22 +01:00
Claude
7ff7295567 docs(audit): add fix-areas section to Phase 0 + Phases 1-8 playbook
Some checks failed
check / cargo check (macos-latest) (push) Has been cancelled
Details
check / cargo check (ubuntu-22.04) (push) Has been cancelled
Details
check / cargo check (windows-latest) (push) Has been cancelled
Details
check / svelte build + lint (push) Has been cancelled
Details 
Phase 0 update: replaces the loose "quick wins" list with a structured
Fix Areas section organised into impact tiers (A: high-impact README
truth fixes, B: low-effort self-violation fixes, C: structural smells
deferred to Phase 2, D: hygiene). Each task names the file, the change,
the verification command, and the effort estimate.

New playbook: docs/audit/phases-1-8-playbook.md — step-by-step
acquisition-grade audit procedure for the remaining seven phases. Each
phase has goal, inputs, procedure (with concrete commands), deliverable,
acceptance criteria, and time estimate. Designed to be picked up
independently from any phase.
 2026-05-01 06:38:54 +00:00
Claude
0b6be94f3e docs(audit): add Phase 0 cartography report 
Inventory of workspace shape, LOC, dependency graph, public API surface,
external surfaces (Tauri commands / MCP tools / frontend routes), and a
README↔code drift log. Input for Phase 1 (lean-pass).

Surfaces five concrete README drifts (one HIGH: stores list fiction; two
MED: undocumented Tauri modules and a Moonshine claim with no registry
entry) and three structural smells worth a Phase-2 follow-up.
 2026-04-30 14:51:18 +00:00
Claude
89c63891fa chore: rebrand from Kon/Corbie to Magnotia 
Replace all instances of the legacy product names "Kon" and "Corbie" with
"Magnotia" across user-facing copy, code identifiers, package names, bundle
ids, file paths, and documentation. Preserves the unrelated "konsole" (KDE
terminal) reference and the parent CORBEL company name.

- Renames 10 Rust crates (kon-* → magnotia-*) and the tauri binary
- Updates package.json, tauri.conf.json (productName + identifier)
- Renames CSS classes (kon-rh-* → magnotia-rh-*) and animations
- Renames brand and roadmap docs
- Regenerates Cargo.lock and package-lock.json

Verified: svelte-check passes; pure-rust crates compile under new names.
 2026-04-30 13:06:55 +00:00
Jake
749403697a fix(ui): SettingsPage launch-at-login toggle — replace bounce-easing with ease-out-quart
Some checks failed
check / cargo check (macos-latest) (push) Has been cancelled
Details
check / cargo check (ubuntu-22.04) (push) Has been cancelled
Details
check / cargo check (windows-latest) (push) Has been cancelled
Details
check / svelte build + lint (push) Has been cancelled
Details 
Final impeccable detect cleanup. The launch-at-login toggle thumb in the
Tasks & Rituals section was using cubic-bezier(0.34, 1.56, 0.64, 1) — the
same overshoot bounce that was replaced in Toggle.svelte by commit
6469663. Match the convention here so all toggle animations use the
same exponential ease.

Single-line CSS change. Visual smoke not exercised because the dev
server is winding down between subagents; npm run build confirms the
file still compiles clean.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-04-29 12:52:08 +01:00
Jake
eb3d2f90ab refactor(settings): regroup SettingsPage into 7 progressive-disclosure groups 
Phase 9c follow-up. The 2309-line hand-rolled accordion is replaced with
seven SettingsGroup-wrapped top-level groups, each containing the
relevant existing sub-sections as nested SettingsGroups:

1. Audio — microphone (input device).
2. Vocabulary — terms & profiles, profiles & templates (legacy manager
   moved in here so all profile / vocabulary state lives together).
3. Transcription — engine, format mode, model management, compute device,
   language. Defaults to open to preserve the prior accordion's landing.
4. AI & Processing — post-processing toggles, AI Assistant tier and
   model management, if-then implementation rules. AI Assistant and
   if-then rules moved out of their original positions to sit alongside
   the deterministic post-processing toggles.
5. Tasks & Rituals — rituals (incl. launch-at-login, kept bundled with
   the existing Rituals UI block to avoid splitting that block), tasks
   page (sparkline), nudges.
6. Output & Capture — read aloud (TTS, lazy-loaded on first open via the
   new SettingsGroup `onopen` hook), capture & export.
7. Appearance & System — global hotkey, appearance (theme/zone/font/
   locale), accessibility, about (engine status + diagnostics).

Deviations from Codex's 7-group spec:
- Launch-at-login stays inside the Rituals sub-group (was bundled there
  in the existing markup; relocating would require splitting the
  Rituals UI block, which is out of scope for this pass).
- Profiles & Templates legacy manager pulled into the Vocabulary group
  rather than appearance/system.

Implementation notes:
- SettingsGroup gains an optional `onopen` callback prop, fired once on
  the first closed→open transition. Used by Read aloud to lazy-load TTS
  voices and by AI & Processing to refresh LLM status. Replaces the
  former toggleAiSection / toggleReadAloudSection imperative handlers.
- The centralised openSection state is removed; each <details> manages
  its own disclosure.
- Tokens are inherited from app.css; the prior global token darkening
  (commit 2da0a5b) covers all section labels via the existing utility
  classes — no per-component label-class swaps were added.

Search box deferred to a follow-up commit. Forcing `open=true` on
SettingsGroup based on a filter input would require either a controlled
`open` prop or a {#key} re-mount strategy, both of which add risk to
this restructure pass.

Tauri-bridged commands cannot be exercised in browser-only `npm run
dev`; structural verification done via npm build, npm check, and a
live dev server fetch of /settings. Real persistence smoke needs a
tauri dev session.

Verification:
- cargo fmt --check: pre-existing whitespace diffs in src-tauri/src/
  live.rs and src-tauri/src/lib.rs only (untouched by this commit).
- cargo clippy --all-targets -- -D warnings: clean.
- cargo test: 283 tests pass.
- npm run check: 1 pre-existing error in vite.config.js:5; 0 new.
- npm run build: clean.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-04-29 12:50:28 +01:00
Jake
6469663c25 fix(ui): impeccable detect — perf + taste touch-ups across four components 
Mechanical fixes from `npx impeccable detect`:

- Sidebar.svelte: replace `transition: width, min-width` on the aside
  with a wrapping CSS-grid container animating `grid-template-columns`.
  Avoids per-frame layout cost from animating `width` directly.
- MorningTriageModal.svelte: swap pure `bg-black/50` overlay for the
  brand deep-neutral `rgba(26, 24, 22, 0.5)` (#1a1816 @ 50%). TODO left
  in source to promote this to a `--color-overlay` token in app.css.
- Toggle.svelte: drop bouncy `cubic-bezier(0.34, 1.56, 0.64, 1)`
  (1.56 overshoot) for ease-out-quart `cubic-bezier(0.16, 1, 0.3, 1)`.
  Still snappy, no overshoot — better fit for a toggle.
- TasksPage.svelte: same grid-template-columns refactor as Sidebar
  for the list-sidebar `transition: width` declaration.

Verification:
- npm run check: 1 pre-existing error (vite.config.js:5), 1 unrelated
  warning in SettingsGroup (out of scope, owned by parallel subagent).
- npm run build: clean.
- cargo clippy --all-targets -- -D warnings: clean (with LIBCLANG_PATH).
- cargo test --workspace: 283 passed, 0 failed.
- cargo fmt --check: pre-existing diffs in main.rs / lib.rs (no Rust
  files were touched in this commit).

Manual smoke deferred — `npm run dev` is in use by the SettingsPage
subagent, so the build-clean signal is the proxy.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-04-29 12:48:14 +01:00
Jake
22d554e85b fix(a11y): T4 / T7 / H3 — energy chip + filter pill + per-row checkbox 
Phase 10a a11y audit (2026-04-29):

T4: Energy radio chip text in dark mode read at 3.48:1 (text-text-tertiary
  on chip bg). Bumped non-selected chips to text-text-secondary so the
  hierarchy still reads but the resting state clears AA.

T7: Selected energy radio (and the match-my-energy toggle next to it)
  used bg-accent/15 — visually indistinguishable from surrounding bg in
  dark theme. Bumped to bg-accent/25 and added a 1px accent/30 border on
  the selected state so the selected pill is unambiguous in both themes.

H3: Per-row bulk-select checkbox in HistoryPage rested at opacity-50,
  which drops the unchecked outline below 3:1 over bg-bg-card. Bumped
  base opacity to 70%; hover/selected states unchanged.

Note on T6 (energy radiogroup arrow keys): verified the keyboard handler
in TasksPage. It is attached to the wrapper element with role=radiogroup,
and arrow-key events on the focused radio child bubble up to the wrapper
because the focused radio sits inside it. The handler reads
settings.currentEnergy (not the focused element) to pick the next index,
then focuses the new radio explicitly via querySelector. ArrowRight /
ArrowLeft / ArrowUp / ArrowDown / Home / End all wired correctly. No
change needed — pattern is sound.

Resolves: T4, T7, H3. T6 verified working as-is.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-04-29 12:04:51 +01:00
Jake
fa734c869f fix(a11y): P5 / G4 — add focus trap to MorningTriageModal 
Phase 10a a11y audit (2026-04-29) flagged the morning triage modal as
having role="dialog" and aria-modal="true" but no focus trap, so Tab
leaks out to the sidebar/page beneath. Escape-to-close was already
wired and is preserved.

Behaviour now matches the W3C dialog pattern:

- On open, capture the invoking element (document.activeElement) and
  move focus to the first focusable inside the dialog.
- Tab cycles forward; Shift+Tab cycles backward. Wrap-around between
  first and last focusable.
- On close, restore focus to the captured invoker.
- The dialog container itself gets tabindex=-1 so it can hold focus
  if no children are focusable (e.g. during the loading state).

The focusable selector excludes aria-hidden elements and elements with
no offsetParent (display:none / visibility:hidden), so dynamic content
between loading -> tasks -> action buttons stays in sync.

Resolves: G4.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-04-29 12:04:32 +01:00
Jake
d089fdb37f fix(a11y): P3 — drop focus:outline-none on inputs; restore global :focus-visible 
Phase 10a a11y audit (2026-04-29) flagged seven inputs across the app
that strip the global 2px :focus-visible outline (defined in app.css:251)
without providing a comparable replacement. Net effect: keyboard users
see at most a 1px border-colour shift on focus, sometimes nothing.

The fix removes the focus:outline-none override so the global rule
applies. Affected inputs:

- FilesPage: file-transcript textarea (F2).
- TasksPage: search input, quick-add input, inline list-edit, new-list
  input (T1, T2, T3, plus the new-list rename input).
- HistoryPage: top search, inline title rename, tag-add (H1).
- ImplementationRulesEditor: trigger/surface/task selects + speak-line
  input (S7).
- TaskSidebar, WipTaskList: quick-add inputs (S8).

The 1px focus:border-accent on inputs that had it is retained as a
secondary cue; the global 2px ring is now the primary indicator and
matches button focus across the app.

Resolves: F2, T1, T2, T3, H1, S7, S8.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-04-29 12:04:23 +01:00
Jake
2da0a5bab8 fix(a11y): P1/P2/G3/FR3 — darken tertiary/accent/success/danger tokens to meet AA 
Phase 10a a11y audit (2026-04-29) flagged 14 contrast failures rooted in
four tokens. Single token-level change resolves them across both themes.

P1 (text-text-tertiary): #8a8578 → #6b6557 light, #716b60 → #8c8678 dark.
  Token was used as both decorative tertiary and body-grade label, so it
  must clear AA 4.5:1. Lifts ratios from ~3.3-3.7:1 to ~4.7-5.0:1 across
  the surfaces it appears on (sidebar tagline + footer, dictation footer,
  files hint, tasks empty state, history empty state, settings descriptions
  and section labels, shutdown trail copy, first-run skip links).

P2 (color-accent): #b87a4a → #a06a3e light, #e8a87c → #c98555 dark. White
  text on accent fill (Browse Files button, selected segmented pills,
  link-style buttons) now clears AA. Dark theme worst case was 2.03:1 on
  Browse Files; the new dark accent clears 4.5:1 with white. Subtle/hover/
  glow tokens recomputed off the new bases.

G3 (color-success light): #3d8a5a → #2f7549. Sidebar Ready status text
  and other success copy on cream surfaces clears AA.

FR3 / D4 (color-danger light): #c44d4d → #a83838. Browser-mode warning
  and hardware-probe error copy clears AA on cream.

Resolves: G1, G2, G3, D1, D2, D3, D4, F1, F3, F4, T5, H2, S1, S2, S3,
SD2, FR2, FR3.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-04-29 12:03:37 +01:00
217 changed files with 7081 additions and 2562 deletions
Expand all files Collapse all files

4
.github/workflows/build.yml vendored
View File

@@ -131,7 +131,7 @@ jobs:
uses: Swatinem/rust-cache@v2 uses: Swatinem/rust-cache@v2
with: with:
workspaces: . workspaces: .
shared-key: kon-build-${{ matrix.os }} shared-key: magnotia-build-${{ matrix.os }}
- name: Install JS deps - name: Install JS deps
run: npm ci run: npm ci
@@ -165,7 +165,7 @@ jobs:
if: always() if: always()
uses: actions/upload-artifact@v4 uses: actions/upload-artifact@v4
with: with:
name: kon-${{ matrix.os }}-${{ github.sha }} name: magnotia-${{ matrix.os }}-${{ github.sha }}
path: ${{ matrix.artifact_glob }} path: ${{ matrix.artifact_glob }}
retention-days: 30 retention-days: 30
if-no-files-found: warn if-no-files-found: warn

2
.github/workflows/check.yml vendored
View File

@@ -125,7 +125,7 @@ jobs:
uses: Swatinem/rust-cache@v2 uses: Swatinem/rust-cache@v2
with: with:
workspaces: . workspaces: .
shared-key: kon-${{ matrix.os }} shared-key: magnotia-${{ matrix.os }}
- name: cargo check (workspace) - name: cargo check (workspace)
run: cargo check --workspace --all-targets run: cargo check --workspace --all-targets

368
Cargo.lock generated
View File

@@ -2574,156 +2574,6 @@ dependencies = [
"unicode-segmentation", "unicode-segmentation",
] ]
[[package]]
name = "kon"
version = "0.1.0"
dependencies = [
"arboard",
"base64 0.22.1",
"gdk",
"gtk",
"kon-ai-formatting",
"kon-audio",
"kon-cloud-providers",
"kon-core",
"kon-hotkey",
"kon-llm",
"kon-storage",
"kon-transcription",
"libloading 0.8.9",
"objc2",
"objc2-foundation",
"serde",
"serde_json",
"sqlx",
"tauri",
"tauri-build",
"tauri-plugin-autostart",
"tauri-plugin-dialog",
"tauri-plugin-global-shortcut",
"tauri-plugin-notification",
"tauri-plugin-opener",
"tauri-plugin-window-state",
"tempfile",
"tokio",
"uuid",
"webkit2gtk",
]
[[package]]
name = "kon-ai-formatting"
version = "0.1.0"
dependencies = [
"kon-core",
"kon-llm",
"regex-lite",
]
[[package]]
name = "kon-audio"
version = "0.1.0"
dependencies = [
"cpal",
"hound",
"kon-core",
"rubato",
"serde",
"symphonia",
"tokio",
]
[[package]]
name = "kon-cloud-providers"
version = "0.1.0"
dependencies = [
"kon-core",
]
[[package]]
name = "kon-core"
version = "0.1.0"
dependencies = [
"async-trait",
"serde",
"serde_json",
"sysinfo",
"thiserror 2.0.18",
]
[[package]]
name = "kon-hotkey"
version = "0.1.0"
dependencies = [
"evdev",
"kon-core",
"log",
"nix 0.29.0",
"notify",
"serde",
"tokio",
]
[[package]]
name = "kon-llm"
version = "0.1.0"
dependencies = [
"encoding_rs",
"futures-util",
"kon-core",
"llama-cpp-2",
"num_cpus",
"reqwest 0.12.28",
"serde",
"serde_json",
"sha2",
"tempfile",
"thiserror 2.0.18",
"tokio",
"tracing",
]
[[package]]
name = "kon-mcp"
version = "0.1.0"
dependencies = [
"anyhow",
"kon-storage",
"serde",
"serde_json",
"sqlx",
"tempfile",
"tokio",
]
[[package]]
name = "kon-storage"
version = "0.1.0"
dependencies = [
"kon-core",
"log",
"serde",
"sqlx",
"tokio",
"uuid",
]
[[package]]
name = "kon-transcription"
version = "0.1.0"
dependencies = [
"futures-util",
"kon-core",
"num_cpus",
"reqwest 0.12.28",
"sha2",
"tempfile",
"thiserror 2.0.18",
"tokio",
"tracing",
"transcribe-rs",
"whisper-rs",
]
[[package]] [[package]]
name = "kqueue" name = "kqueue"
version = "1.1.1" version = "1.1.1"
@@ -2935,6 +2785,159 @@ dependencies = [
"libc", "libc",
] ]
[[package]]
name = "magnotia"
version = "0.1.0"
dependencies = [
"arboard",
"base64 0.22.1",
"gdk",
"gtk",
"magnotia-ai-formatting",
"magnotia-audio",
"magnotia-cloud-providers",
"magnotia-core",
"magnotia-hotkey",
"magnotia-llm",
"magnotia-storage",
"magnotia-transcription",
"objc2",
"objc2-foundation",
"serde",
"serde_json",
"sqlx",
"tauri",
"tauri-build",
"tauri-plugin-autostart",
"tauri-plugin-dialog",
"tauri-plugin-global-shortcut",
"tauri-plugin-notification",
"tauri-plugin-opener",
"tauri-plugin-window-state",
"tempfile",
"tokio",
"uuid",
"webkit2gtk",
]
[[package]]
name = "magnotia-ai-formatting"
version = "0.1.0"
dependencies = [
"magnotia-core",
"magnotia-llm",
"regex-lite",
]
[[package]]
name = "magnotia-audio"
version = "0.1.0"
dependencies = [
"cpal",
"hound",
"magnotia-core",
"rubato",
"serde",
"symphonia",
"tokio",
]
[[package]]
name = "magnotia-cloud-providers"
version = "0.1.0"
dependencies = [
"magnotia-core",
]
[[package]]
name = "magnotia-core"
version = "0.1.0"
dependencies = [
"async-trait",
"libloading 0.8.9",
"num_cpus",
"serde",
"serde_json",
"sysinfo",
"tempfile",
"thiserror 2.0.18",
"tracing",
"tracing-subscriber",
]
[[package]]
name = "magnotia-hotkey"
version = "0.1.0"
dependencies = [
"evdev",
"log",
"magnotia-core",
"nix 0.29.0",
"notify",
"serde",
"tokio",
]
[[package]]
name = "magnotia-llm"
version = "0.1.0"
dependencies = [
"encoding_rs",
"futures-util",
"llama-cpp-2",
"magnotia-core",
"reqwest 0.12.28",
"serde",
"serde_json",
"sha2",
"tempfile",
"thiserror 2.0.18",
"tokio",
"tracing",
]
[[package]]
name = "magnotia-mcp"
version = "0.1.0"
dependencies = [
"anyhow",
"magnotia-storage",
"serde",
"serde_json",
"sqlx",
"tempfile",
"tokio",
]
[[package]]
name = "magnotia-storage"
version = "0.1.0"
dependencies = [
"log",
"magnotia-core",
"serde",
"sqlx",
"tokio",
"uuid",
]
[[package]]
name = "magnotia-transcription"
version = "0.1.0"
dependencies = [
"futures-util",
"magnotia-core",
"num_cpus",
"reqwest 0.12.28",
"sha2",
"tempfile",
"thiserror 2.0.18",
"tokio",
"tracing",
"transcribe-rs",
"whisper-rs",
]
[[package]] [[package]]
name = "markup5ever" name = "markup5ever"
version = "0.14.1" version = "0.14.1"
@@ -2971,6 +2974,15 @@ dependencies = [
"syn 2.0.117", "syn 2.0.117",
] ]
[[package]]
name = "matchers"
version = "0.2.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "d1525a2a28c7f4fa0fc98bb91ae755d1e2d1505079e05539e35bc876b5d65ae9"
dependencies = [
"regex-automata",
]
[[package]] [[package]]
name = "matches" name = "matches"
version = "0.1.10" version = "0.1.10"
@@ -3236,6 +3248,15 @@ dependencies = [
"winapi", "winapi",
] ]
[[package]]
name = "nu-ansi-term"
version = "0.50.3"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
dependencies = [
"windows-sys 0.61.2",
]
[[package]] [[package]]
name = "num-complex" name = "num-complex"
version = "0.4.6" version = "0.4.6"
@@ -4962,6 +4983,15 @@ dependencies = [
"digest", "digest",
] ]
[[package]]
name = "sharded-slab"
version = "0.1.7"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "f40ca3c46823713e0d4209592e8d6e826aa57e928f09752619fc696c499637f6"
dependencies = [
"lazy_static",
]
[[package]] [[package]]
name = "shlex" name = "shlex"
version = "1.3.0" version = "1.3.0"
@@ -6029,6 +6059,15 @@ dependencies = [
"syn 2.0.117", "syn 2.0.117",
] ]
[[package]]
name = "thread_local"
version = "1.1.9"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "f60246a4944f24f6e018aa17cdeffb7818b76356965d03b07d6a9886e8962185"
dependencies = [
"cfg-if",
]
[[package]] [[package]]
name = "tiff" name = "tiff"
version = "0.11.3" version = "0.11.3"
@@ -6342,6 +6381,35 @@ dependencies = [
"valuable", "valuable",
] ]
[[package]]
name = "tracing-log"
version = "0.2.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "ee855f1f400bd0e5c02d150ae5de3840039a3f54b025156404e34c23c03f47c3"
dependencies = [
"log",
"once_cell",
"tracing-core",
]
[[package]]
name = "tracing-subscriber"
version = "0.3.23"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "cb7f578e5945fb242538965c2d0b04418d38ec25c79d160cd279bf0731c8d319"
dependencies = [
"matchers",
"nu-ansi-term",
"once_cell",
"regex-automata",
"sharded-slab",
"smallvec",
"thread_local",
"tracing",
"tracing-core",
"tracing-log",
]
[[package]] [[package]]
name = "transcribe-rs" name = "transcribe-rs"
version = "0.3.11" version = "0.3.11"

26
HANDOVER.md
View File

@@ -1,35 +1,35 @@
--- ---
name: handover-2026-04-25 name: handover-2026-04-25
type: reference type: reference
tags: [handover, session, kon, phase-9, polish-debt] tags: [handover, session, magnotia, phase-9, polish-debt]
description: Session handover — 2026/04/24-25 Phase 9 polish debt mostly shipped description: Session handover — 2026/04/24-25 Phase 9 polish debt mostly shipped
--- ---
# Corbie Handover — 2026/04/25 # Magnotia Handover — 2026/04/25
Phase 9 session. Spec + plan written from scratch and committed; plan corrections layered in after critical review against the actual codebase (Codex was unreachable for cross-model review, three retries failed at the ChatGPT-account-entitlement layer). Sub-phases 9a + 9b + sparkline polish landed end to end. Sub-phase 9c reduced to the Phase 8 carryover bug fix; sub-phase 9d's walkthrough sweeps deferred to Phase 10a QC. Phase 9 session. Spec + plan written from scratch and committed; plan corrections layered in after critical review against the actual codebase (Codex was unreachable for cross-model review, three retries failed at the ChatGPT-account-entitlement layer). Sub-phases 9a + 9b + sparkline polish landed end to end. Sub-phase 9c reduced to the Phase 8 carryover bug fix; sub-phase 9d's walkthrough sweeps deferred to Phase 10a QC.
## Rebrand note ## Rebrand note
Product rename **Kon → Corbie** still in flight. Copy in new docs is "Corbie"; codebase paths / package names / repos still carry `kon`. No rebrand work this session. See `~/.claude/projects/-home-jake-Documents-CORBEL-Main/memory/project_corbie_rebrand.md`. Product rename **Magnotia → Magnotia** still in flight. Copy in new docs is "Magnotia"; codebase paths / package names / repos still carry `magnotia`. No rebrand work this session. See `~/.claude/projects/-home-jake-Documents-CORBEL-Main/memory/project_magnotia_rebrand.md`.
## What shipped this session ## What shipped this session
### 9a — Export plumbing ### 9a — Export plumbing
- `write_text_file_cmd` Rust command in new `src-tauri/src/commands/fs.rs`, with two unit tests (UTF-8 round-trip + bad-parent error path). Registered in `invoke_handler!`. `tempfile = "3"` added as `[dev-dependencies]` on the kon crate. - `write_text_file_cmd` Rust command in new `src-tauri/src/commands/fs.rs`, with two unit tests (UTF-8 round-trip + bad-parent error path). Registered in `invoke_handler!`. `tempfile = "3"` added as `[dev-dependencies]` on the magnotia crate.
- `src/lib/utils/saveMarkdown.ts` utility centralises `suggestedFilename`, `saveTranscriptAsMarkdown`, `exportTranscriptsToDir` (directory-mode bulk export with in-batch collision suffixing). - `src/lib/utils/saveMarkdown.ts` utility centralises `suggestedFilename`, `saveTranscriptAsMarkdown`, `exportTranscriptsToDir` (directory-mode bulk export with in-batch collision suffixing).
- HistoryPage `exportMarkdown` no longer copies to clipboard; it opens the OS save dialog and writes the file. Cancel returns silently. - HistoryPage `exportMarkdown` no longer copies to clipboard; it opens the OS save dialog and writes the file. Cancel returns silently.
- HistoryPage gained a slim leading checkbox per row, a bulk-action toolbar (select-all / clear / export / delete), `Esc` to clear, `Cmd/Ctrl+A` to select-all-visible when focus is inside the list and not in a text input. - HistoryPage gained a slim leading checkbox per row, a bulk-action toolbar (select-all / clear / export / delete), `Esc` to clear, `Cmd/Ctrl+A` to select-all-visible when focus is inside the list and not in a text input.
### 9b — LLM content tags ### 9b — LLM content tags
- `kon-llm` exports a new `ContentTags { topic, intent }`, an `INTENT_CLOSED_SET`, an `is_valid_intent` helper, a `CONTENT_TAGS_SYSTEM` prompt and a `CONTENT_TAGS_GRAMMAR` GBNF (recursive style matching the existing `TASK_ARRAY_GRAMMAR`). - `magnotia-llm` exports a new `ContentTags { topic, intent }`, an `INTENT_CLOSED_SET`, an `is_valid_intent` helper, a `CONTENT_TAGS_SYSTEM` prompt and a `CONTENT_TAGS_GRAMMAR` GBNF (recursive style matching the existing `TASK_ARRAY_GRAMMAR`).
- `LlmEngine::extract_content_tags` method follows the same render-chat → generate → JSON-parse shape as the existing `cleanup_text` and `extract_tasks`. Truncates to the trailing 2000 chars on a UTF-8 boundary; max_tokens 96 is enough for the JSON envelope. Smoke test in `crates/llm/tests/content_tags_smoke.rs` is gated on `KON_LLM_TEST_MODEL` matching the Phase 8 pattern. - `LlmEngine::extract_content_tags` method follows the same render-chat → generate → JSON-parse shape as the existing `cleanup_text` and `extract_tasks`. Truncates to the trailing 2000 chars on a UTF-8 boundary; max_tokens 96 is enough for the JSON envelope. Smoke test in `crates/llm/tests/content_tags_smoke.rs` is gated on `MAGNOTIA_LLM_TEST_MODEL` matching the Phase 8 pattern.
- `extract_content_tags_cmd` Tauri wrapper bridges through `state.llm_engine` with the standard `spawn_blocking` + `PowerAssertion` guard. - `extract_content_tags_cmd` Tauri wrapper bridges through `state.llm_engine` with the standard `spawn_blocking` + `PowerAssertion` guard.
### 9b structural — migration v14 + persistence wiring ### 9b structural — migration v14 + persistence wiring
A correction layered in after the critical-review pass discovered the original Task 9 was assuming a writable `saveHistory()` path that turned out to be a no-op stub. A correction layered in after the critical-review pass discovered the original Task 9 was assuming a writable `saveHistory()` path that turned out to be a no-op stub.
- Migration v14 adds `transcripts.llm_tags TEXT NOT NULL DEFAULT ''`. - Migration v14 adds `transcripts.llm_tags TEXT NOT NULL DEFAULT ''`.
- `kon-storage` `database.rs` SELECT statements include the column. `TranscriptRow` + `transcript_row_from` carry it. `update_transcript_meta` accepts an `Option<&str>` for `llm_tags` (sixth optional, `#[allow(too_many_arguments)]` keeps clippy happy without inverting the signature into a struct). - `magnotia-storage` `database.rs` SELECT statements include the column. `TranscriptRow` + `transcript_row_from` carry it. `update_transcript_meta` accepts an `Option<&str>` for `llm_tags` (sixth optional, `#[allow(too_many_arguments)]` keeps clippy happy without inverting the signature into a struct).
- `commands/transcripts.rs` `TranscriptDto` + `UpdateTranscriptMetaRequest` add `llm_tags`; `update_transcript_meta_cmd` forwards. - `commands/transcripts.rs` `TranscriptDto` + `UpdateTranscriptMetaRequest` add `llm_tags`; `update_transcript_meta_cmd` forwards.
- Frontend types: `TranscriptEntry.llmTags: string[]`, `TranscriptRow.llmTags: string`, `ContentTags`, optional `TranscriptMetaPatch.llmTags`. - Frontend types: `TranscriptEntry.llmTags: string[]`, `TranscriptRow.llmTags: string`, `ContentTags`, optional `TranscriptMetaPatch.llmTags`.
- `mapTranscriptRow` hydrates `llmTags`. `saveTranscriptMeta` now also forwards `llmTags` payloads. `buildFrontmatter` unions auto + manual + LLM tags into the exported markdown frontmatter. - `mapTranscriptRow` hydrates `llmTags`. `saveTranscriptMeta` now also forwards `llmTags` payloads. `buildFrontmatter` unions auto + manual + LLM tags into the exported markdown frontmatter.
@@ -54,7 +54,7 @@ Fresh run on `main` tip `dd45f10`:
- `cargo fmt --check`: clean. - `cargo fmt --check`: clean.
- `cargo clippy --all-targets -- -D warnings`: clean. - `cargo clippy --all-targets -- -D warnings`: clean.
- `cargo test`: **277 tests pass**, 0 failed. Storage gained 1 new test (`update_transcript_meta_writes_llm_tags`), kon-tauri gained 2 (write_text_file). The Phase 8 brittle test fix is in this count. - `cargo test`: **277 tests pass**, 0 failed. Storage gained 1 new test (`update_transcript_meta_writes_llm_tags`), magnotia-tauri gained 2 (write_text_file). The Phase 8 brittle test fix is in this count.
- `npm run check`: 0 errors, 0 warnings across 3957 files. - `npm run check`: 0 errors, 0 warnings across 3957 files.
- `npm run build`: clean production build via `@sveltejs/adapter-static`. - `npm run build`: clean production build via `@sveltejs/adapter-static`.
@@ -62,13 +62,13 @@ Fresh run on `main` tip `dd45f10`:
The original Phase 9 spec + plan committed at `49a795f` + `48d3db7` had three mismatches against the actual codebase, surfaced by a critical-review pass before execution. Layered as a corrections appendix in commit `3eb24f2`: The original Phase 9 spec + plan committed at `49a795f` + `48d3db7` had three mismatches against the actual codebase, surfaced by a critical-review pass before execution. Layered as a corrections appendix in commit `3eb24f2`:
1. `kon-llm` is `LlmEngine::generate(prompt, config)` synchronous, not the speculated `LlamaEngine::generate_chat(messages, config).await`. 1. `magnotia-llm` is `LlmEngine::generate(prompt, config)` synchronous, not the speculated `LlamaEngine::generate_chat(messages, config).await`.
2. `AppState.llm_engine: Arc<LlmEngine>` is direct, not behind a `RwLock`. 2. `AppState.llm_engine: Arc<LlmEngine>` is direct, not behind a `RwLock`.
3. **Structural** — `transcripts.llm_tags` requires a real SQLite migration plus Tauri command extension because the frontend `saveHistory()` is a no-op stub. Original plan assumed `manualTags`-mirroring would suffice. Migration v14 + `update_transcript_meta` extension landed as a new task to cover this. Picked up the latent `manualTags` persistence bug for free. 3. **Structural** — `transcripts.llm_tags` requires a real SQLite migration plus Tauri command extension because the frontend `saveHistory()` is a no-op stub. Original plan assumed `manualTags`-mirroring would suffice. Migration v14 + `update_transcript_meta` extension landed as a new task to cover this. Picked up the latent `manualTags` persistence bug for free.
## Owed to Jake (next session) ## Owed to Jake (next session)
1. **Manual dogfood walkthrough.** Cannot be driven by an automated agent. When opening Corbie next: 1. **Manual dogfood walkthrough.** Cannot be driven by an automated agent. When opening Magnotia next:
- Export one transcript via the History "Export .md" button — save dialog opens, file written to chosen path. Cancel — no toast, no fallback. - Export one transcript via the History "Export .md" button — save dialog opens, file written to chosen path. Cancel — no toast, no fallback.
- Select 3 history rows via checkboxes — toolbar surfaces, "Export selected" writes one .md per row to a chosen folder, collisions suffixed " (2)" etc. - Select 3 history rows via checkboxes — toolbar surfaces, "Export selected" writes one .md per row to a chosen folder, collisions suffixed " (2)" etc.
- Click "Tag" on one row — within a few seconds, dashed `topic:*` and `intent:*` chips appear. Click a chip — it moves into `manualTags` (solid accent chip). Page refresh — both `manualTags` and `llmTags` survive (this is the persistence-fix outcome). - Click "Tag" on one row — within a few seconds, dashed `topic:*` and `intent:*` chips appear. Click a chip — it moves into `manualTags` (solid accent chip). Page refresh — both `manualTags` and `llmTags` survive (this is the persistence-fix outcome).
@@ -90,7 +90,7 @@ The original Phase 9 spec + plan committed at `49a795f` + `48d3db7` had three mi
| Phases 1-8 | All shipped. | | Phases 1-8 | All shipped. |
| Phase 9 | **Mostly shipped this session.** Export plumbing, LLM content tags (with persistence), polish on sparkline + badge are live. SettingsPage deeper restructure + walkthrough a11y sweeps deferred. Roadmap entry updated. | | Phase 9 | **Mostly shipped this session.** Export plumbing, LLM content tags (with persistence), polish on sparkline + badge are live. SettingsPage deeper restructure + walkthrough a11y sweeps deferred. Roadmap entry updated. |
| Phase 10a | QC: dogfood walkthrough (above), Rachmann's RB-08 Mac verification (parallel), cross-platform CI, a11y regression, clean-install test. Half day. | | Phase 10a | QC: dogfood walkthrough (above), Rachmann's RB-08 Mac verification (parallel), cross-platform CI, a11y regression, clean-install test. Half day. |
| Phase 10b | Kon → Corbie rename sweep: package name, all 10 crates, bundle ids, install paths, `kon.db` → `corbie.db`, event names, repo rename on both remotes. Half to 1 day. | | Phase 10b | Magnotia → Magnotia rename sweep: package name, all 10 crates, bundle ids, install paths, `magnotia.db` → `magnotia.db`, event names, repo rename on both remotes. Half to 1 day. |
| Phase 10c | Release: 0.1.0 version sync, CHANGELOG seeded from roadmap phases, release notes, tag + push. Half day. | | Phase 10c | Release: 0.1.0 version sync, CHANGELOG seeded from roadmap phases, release notes, tag + push. Half day. |
### Release-blocker state ### Release-blocker state
@@ -109,8 +109,8 @@ The original Phase 9 spec + plan committed at `49a795f` + `48d3db7` had three mi
- Spec: [docs/superpowers/specs/2026-04-24-phase9-polish-debt-design.md](docs/superpowers/specs/2026-04-24-phase9-polish-debt-design.md) - Spec: [docs/superpowers/specs/2026-04-24-phase9-polish-debt-design.md](docs/superpowers/specs/2026-04-24-phase9-polish-debt-design.md)
- Plan: [docs/superpowers/plans/2026-04-24-phase9-polish-debt.md](docs/superpowers/plans/2026-04-24-phase9-polish-debt.md) - Plan: [docs/superpowers/plans/2026-04-24-phase9-polish-debt.md](docs/superpowers/plans/2026-04-24-phase9-polish-debt.md)
- Roadmap: [docs/roadmap/2026-04-23-corbie-feature-complete-roadmap.md](docs/roadmap/2026-04-23-corbie-feature-complete-roadmap.md) - Roadmap: [docs/roadmap/2026-04-23-magnotia-feature-complete-roadmap.md](docs/roadmap/2026-04-23-magnotia-feature-complete-roadmap.md)
- Previous handover: [HANDOVER-2026-04-24.md](HANDOVER-2026-04-24.md) (Phase 8) - Previous handover: [HANDOVER-2026-04-24.md](HANDOVER-2026-04-24.md) (Phase 8)
- Release-blocker index: [docs/issues/README.md](docs/issues/README.md) - Release-blocker index: [docs/issues/README.md](docs/issues/README.md)
- Rebrand memory: `~/.claude/projects/-home-jake-Documents-CORBEL-Main/memory/project_corbie_rebrand.md` - Rebrand memory: `~/.claude/projects/-home-jake-Documents-CORBEL-Main/memory/project_magnotia_rebrand.md`
- Active-focus upstream: `context/active-focus.md` in CORBEL-Main - Active-focus upstream: `context/active-focus.md` in CORBEL-Main

89
README.md
View File

@@ -1,8 +1,8 @@
# Kon # Magnotia
*Think out loud. Keep working.* *Think out loud. Keep working.*
Kon is a local-first, cognitive-load-aware dictation and task-capture desktop app. Every transcription, LLM cleanup, and task extraction runs on the user's machine. No telemetry, no analytics, no cloud dependency. The app is designed around a single observation: people who think in bursts lose ideas faster than they can type, and the tool's job is to get out of the way. Magnotia is a local-first, cognitive-load-aware dictation and task-capture desktop app. Every transcription, LLM cleanup, and task extraction runs on the user's machine. No telemetry, no analytics, no cloud dependency. The app is designed around a single observation: people who think in bursts lose ideas faster than they can type, and the tool's job is to get out of the way.
--- ---
@@ -11,7 +11,7 @@ Kon is a local-first, cognitive-load-aware dictation and task-capture desktop ap
**Pre-alpha.** Actively dogfooded on Linux (KDE Plasma 6 on Wayland). macOS and Windows targets are in scope and exercised by CI, but not yet beta-ready. One primary user; open source-intent with licence TBD before public beta. **Pre-alpha.** Actively dogfooded on Linux (KDE Plasma 6 on Wayland). macOS and Windows targets are in scope and exercised by CI, but not yet beta-ready. One primary user; open source-intent with licence TBD before public beta.
- Current `main`: see commit log - Current `main`: see commit log
- 245 automated lib tests across 10 crates, all passing - 9 library crates plus the Tauri app crate; 220+ lib tests plus 67 Tauri-app tests, all passing
- Cross-platform CI (Linux / macOS / Windows) via GitHub Actions - Cross-platform CI (Linux / macOS / Windows) via GitHub Actions
--- ---
@@ -20,15 +20,15 @@ Kon is a local-first, cognitive-load-aware dictation and task-capture desktop ap
1. **Local-first is the floor, not a feature.** No voice, transcript, or task ever leaves the user's machine unless they explicitly send it. No telemetry. 1. **Local-first is the floor, not a feature.** No voice, transcript, or task ever leaves the user's machine unless they explicitly send it. No telemetry.
2. **Cognitive load is the limiting resource.** Every new setting must earn its mental real estate. Every interaction should reduce, not add, decisions. 2. **Cognitive load is the limiting resource.** Every new setting must earn its mental real estate. Every interaction should reduce, not add, decisions.
3. **Composable, not monolithic.** Kon is a dictation primitive: via MCP, CLI, and filesystem export, it slots into whatever workflow the user already has (Obsidian, Claude Desktop, Cline, any text field). 3. **Composable, not monolithic.** Magnotia is a dictation primitive: via MCP, CLI, and filesystem export, it slots into whatever workflow the user already has (Obsidian, Claude Desktop, Cline, any text field).
4. **LLM scope is narrow.** The in-app LLM does transcription cleanup and task extraction. It is not a wake-word agent, not a chat UI, not a multi-provider cloud fan-out. 4. **LLM scope is narrow.** The in-app LLM does transcription cleanup and task extraction. It is not a wake-word agent, not a chat UI, not a multi-provider cloud fan-out.
5. **Raw transcript is always recoverable.** Cleanup is additive, never destructive. The user can always see and revert to what Whisper heard. 5. **Raw transcript is always recoverable.** Cleanup is additive, never destructive. The user can always see and revert to what Whisper heard.
These are enforced in the codebase (where practical) and in the docs under [`docs/whisper-ecosystem/kon-context.md`](docs/whisper-ecosystem/kon-context.md). These are enforced in the codebase (where practical) and in the docs under [`docs/whisper-ecosystem/magnotia-context.md`](docs/whisper-ecosystem/magnotia-context.md).
--- ---
## What Kon does today ## What Magnotia does today
### Speech-to-text ### Speech-to-text
- Vulkan-accelerated local **Whisper** inference via [whisper-rs](https://github.com/tazz4843/whisper-rs) 0.16 + whisper.cpp. Works on NVIDIA, AMD, Intel Arc, Apple (via MoltenVK), and integrated graphics. - Vulkan-accelerated local **Whisper** inference via [whisper-rs](https://github.com/tazz4843/whisper-rs) 0.16 + whisper.cpp. Works on NVIDIA, AMD, Intel Arc, Apple (via MoltenVK), and integrated graphics.
@@ -41,7 +41,7 @@ These are enforced in the codebase (where practical) and in the docs under [`doc
### LLM formatting (local only) ### LLM formatting (local only)
- Local LLM runtime via [llama-cpp-2](https://github.com/utilityai/llama-cpp-rs) 0.1.144 with Vulkan. - Local LLM runtime via [llama-cpp-2](https://github.com/utilityai/llama-cpp-rs) 0.1.144 with Vulkan.
- Three Qwen3 tiers (1.7B, 4B-Instruct-2507, 14B) auto-selected by hardware probe. - Four Qwen tiers (Qwen3.5 2B / 4B / 9B + Qwen3.6 27B) auto-selected by hardware probe.
- GBNF grammar-constrained output for task extraction (always-parseable JSON). - GBNF grammar-constrained output for task extraction (always-parseable JSON).
- System prompt hardened against voice-delivered prompt injection. - System prompt hardened against voice-delivered prompt injection.
@@ -64,7 +64,7 @@ These are enforced in the codebase (where practical) and in the docs under [`doc
- Transcript editor window (`/viewer`) with debounced autosave. - Transcript editor window (`/viewer`) with debounced autosave.
### External integration ### External integration
- **MCP stdio server** (`kon-mcp`) exposing read-only transcripts and tasks to any Model Context Protocol client (Claude Desktop, Cline, Cursor, etc.). No authentication, read-only, local-only. - **MCP stdio server** (`magnotia-mcp`) exposing read-only transcripts and tasks to any Model Context Protocol client (Claude Desktop, Cline, Cursor, etc.). No authentication, read-only, local-only.
### Accessibility ### Accessibility
- Dyslexia-friendly fonts bundled: Lexend, Atkinson Hyperlegible Next, OpenDyslexic. - Dyslexia-friendly fonts bundled: Lexend, Atkinson Hyperlegible Next, OpenDyslexic.
@@ -83,7 +83,7 @@ These are enforced in the codebase (where practical) and in the docs under [`doc
## Architecture ## Architecture
Kon is a Tauri 2 desktop app with three layers: Magnotia is a Tauri 2 desktop app with three layers:
``` ```
┌─────────────────────────────────────────────────────────────────┐ ┌─────────────────────────────────────────────────────────────────┐
@@ -92,29 +92,31 @@ Kon is a Tauri 2 desktop app with three layers:
│ Stores, i18n, Tailwind CSS │ │ Stores, i18n, Tailwind CSS │
├─────────────────────────────────────────────────────────────────┤ ├─────────────────────────────────────────────────────────────────┤
│ Tauri 2 runtime (src-tauri/) │ │ Tauri 2 runtime (src-tauri/) │
│ Commands: audio, clipboard, diagnostics, hotkey, live, llm, │ │ Commands: audio, clipboard, diagnostics, feedback, fs, │
│ meeting, models, paste, power, profiles, tasks, │ │ hardware, hotkey, intentions, live, llm, meeting, │
│ transcription, transcripts, update, windows │ │ models, nudges, paste, profiles, rituals, tasks, │
│ transcription, transcripts, tts, update, windows │
│ Utility modules (no commands): mod, power, security │
│ Plugins: global-shortcut, dialog, opener, updater, │ │ Plugins: global-shortcut, dialog, opener, updater, │
│ window-state │ │ window-state │
├─────────────────────────────────────────────────────────────────┤ ├─────────────────────────────────────────────────────────────────┤
│ Rust workspace (crates/) │ │ Rust workspace (crates/) │
│ kon-core, kon-audio, kon-transcription, kon-llm, │ │ magnotia-core, magnotia-audio, magnotia-transcription, magnotia-llm, │
│ kon-ai-formatting, kon-storage, kon-hotkey, │ │ magnotia-ai-formatting, magnotia-storage, magnotia-hotkey, │
│ kon-cloud-providers, kon-mcp │ │ magnotia-cloud-providers, magnotia-mcp │
└─────────────────────────────────────────────────────────────────┘ └─────────────────────────────────────────────────────────────────┘
``` ```
The Rust workspace is the brain; Tauri is the OS integration surface; Svelte is the UI. The MCP server (`kon-mcp`) is a separate binary that opens Kon's SQLite store read-only — it's Kon-as-primitive for external agents. The Rust workspace is the brain; Tauri is the OS integration surface; Svelte is the UI. The MCP server (`magnotia-mcp`) is a separate binary that opens Magnotia's SQLite store read-only — it's Magnotia-as-primitive for external agents.
### Repository layout ### Repository layout
``` ```
kon/ magnotia/
├── Cargo.toml # workspace root ├── Cargo.toml # workspace root
├── src-tauri/ # Tauri app (main binary + commands) ├── src-tauri/ # Tauri app (main binary + commands)
│ ├── src/ │ ├── src/
│ │ ├── commands/ # 18 Tauri command modules │ │ ├── commands/ # 22 Tauri command modules + 3 utility modules (`mod`, `power`, `security`)
│ │ ├── lib.rs # app entry, setup, command registration │ │ ├── lib.rs # app entry, setup, command registration
│ │ ├── tray.rs │ │ ├── tray.rs
│ │ └── main.rs │ │ └── main.rs
@@ -162,15 +164,15 @@ kon/
| Crate | Responsibility | | Crate | Responsibility |
|---|---| |---|---|
| **`kon-core`** | Shared types (`Segment`, `Transcript`, `Megabytes`, `ModelId`), constants, the `Engine` / `SpeedTier` / `AccuracyTier` enums, hardware probe (`sysinfo`-based), model registry (Whisper + Parakeet + Moonshine entries), hardware-aware recommendation scoring, `process_watch` for meeting detection. | | **`magnotia-core`** | Shared types (`Segment`, `Transcript`, `Megabytes`, `ModelId`), constants, the `Engine` / `SpeedTier` / `AccuracyTier` enums, hardware probe (`sysinfo`-based), model registry (Whisper + Parakeet entries), hardware-aware recommendation scoring, `process_watch` for meeting detection. |
| **`kon-audio`** | `cpal`-based microphone capture with device hotplug + error forwarding, VAD, `rubato` streaming resampler to 16 kHz mono, `symphonia` file decoding, `hound` WAV I/O. | | **`magnotia-audio`** | `cpal`-based microphone capture with device hotplug + error forwarding, VAD, `rubato` streaming resampler to 16 kHz mono, `symphonia` file decoding, `hound` WAV I/O. |
| **`kon-transcription`** | `whisper-rs` backend (`WhisperRsBackend`) that owns a `WhisperContext` and supports `set_initial_prompt`. `LocalEngine` wraps both Whisper and Parakeet (via `transcribe-rs` ONNX) behind a common `Transcriber` trait. Streaming primitives (`VadChunker`, `LocalAgreement`, buffer trim) live in the `streaming/` module. Model manager handles downloads, paths, and disk checks. | | **`magnotia-transcription`** | `whisper-rs` backend (`WhisperRsBackend`) that owns a `WhisperContext` and supports `set_initial_prompt`. `LocalEngine` wraps both Whisper and Parakeet (via `transcribe-rs` ONNX) behind a common `Transcriber` trait. Streaming primitives (`VadChunker`, `LocalAgreement`, buffer trim) live in the `streaming/` module. Model manager handles downloads, paths, and disk checks. |
| **`kon-llm`** | `llama-cpp-2` engine with Qwen3 model manager. Three high-level surfaces: `cleanup_text` (formatting), `decompose_task` (3–7 micro-steps, GBNF-constrained JSON array), `extract_tasks` (optional-array, GBNF-constrained). Resumable HTTP downloads with SHA-256 verify. | | **`magnotia-llm`** | `llama-cpp-2` engine with a four-tier Qwen3.5 / Qwen3.6 model manager. Three high-level surfaces: `cleanup_text` (formatting), `decompose_task` (3–7 micro-steps, GBNF-constrained JSON array), `extract_tasks` (optional-array, GBNF-constrained). Resumable HTTP downloads with SHA-256 verify. |
| **`kon-ai-formatting`** | Post-processing pipeline: filler removal, British English conversion, anti-hallucination filter, smart paragraph breaks on long pauses, optional LLM cleanup. Also hosts the `llm_client::CLEANUP_PROMPT` constant (prompt-injection-hardened). | | **`magnotia-ai-formatting`** | Post-processing pipeline: filler removal, British English conversion, anti-hallucination filter, smart paragraph breaks on long pauses, optional LLM cleanup. Also hosts the `llm_client::CLEANUP_PROMPT` constant (prompt-injection-hardened). |
| **`kon-storage`** | SQLite via `sqlx` 0.8. Migrations, CRUD for transcripts / tasks / subtasks / profiles / profile terms / settings / error log, FTS5 search, file-storage paths. | | **`magnotia-storage`** | SQLite via `sqlx` 0.8. Migrations, CRUD for transcripts / tasks / subtasks / profiles / profile terms / settings / error log, FTS5 search, file-storage paths. |
| **`kon-hotkey`** | Linux `evdev` hotkey listener with device hotplug. Parses Tauri-style hotkey strings (`Ctrl+Shift+R`), emits Pressed / Released events. Works natively on Wayland (no X11 dependency). Checks `/dev/input/event*` access on startup; surfaces a clear "add yourself to the `input` group" error when missing. | | **`magnotia-hotkey`** | Linux `evdev` hotkey listener with device hotplug. Parses Tauri-style hotkey strings (`Ctrl+Shift+R`), emits Pressed / Released events. Works natively on Wayland (no X11 dependency). Checks `/dev/input/event*` access on startup; surfaces a clear "add yourself to the `input` group" error when missing. |
| **`kon-cloud-providers`** | BYOK cloud-STT provider stubs. Currently empty scaffolding. When populated: OpenAI-compatible endpoint + Anthropic (ceiling for scope). | | **`magnotia-cloud-providers`** | BYOK cloud-STT provider stubs. Currently empty scaffolding. When populated: OpenAI-compatible endpoint + Anthropic (ceiling for scope). |
| **`kon-mcp`** | Standalone `kon-mcp` binary implementing the MCP stdio protocol (2024-11-05). Read-only tools: `list_transcripts`, `get_transcript`, `search_transcripts`, `list_tasks`. Opens Kon's SQLite store. | | **`magnotia-mcp`** | Standalone `magnotia-mcp` binary implementing the MCP stdio protocol (2024-11-05). Read-only tools: `list_transcripts`, `get_transcript`, `search_transcripts`, `list_tasks`. Opens Magnotia's SQLite store. |
### Tauri commands (src-tauri/src/commands/) ### Tauri commands (src-tauri/src/commands/)
@@ -179,27 +181,34 @@ kon/
| `audio` | Device enumeration, native capture start/stop, audio-samples persistence | | `audio` | Device enumeration, native capture start/stop, audio-samples persistence |
| `clipboard` | Cross-platform clipboard write (arboard) | | `clipboard` | Cross-platform clipboard write (arboard) |
| `diagnostics` | Panic hook, frontend error log, crash file listing, diagnostic report bundler | | `diagnostics` | Panic hook, frontend error log, crash file listing, diagnostic report bundler |
| `feedback` | Thumbs / correction capture on AI-generated output; few-shot example store for prompt conditioning |
| `fs` | Thin filesystem write for the OS save-dialog path (UTF-8 text, dialog-constrained) |
| `hardware` | `probe_system`, `rank_models` | | `hardware` | `probe_system`, `rank_models` |
| `hotkey` | `start_evdev_hotkey`, `update_evdev_hotkey`, `stop_evdev_hotkey`, `check_hotkey_access`, `is_wayland_session` | | `hotkey` | `start_evdev_hotkey`, `update_evdev_hotkey`, `stop_evdev_hotkey`, `check_hotkey_access`, `is_wayland_session` |
| `intentions` | Implementation-intention rule CRUD (if-then automation: time-of-day, task-completed, morning-triage triggers) |
| `live` | Live streaming transcription session lifecycle + speech-gate tuning | | `live` | Live streaming transcription session lifecycle + speech-gate tuning |
| `llm` | Tier recommend, model check / download / load / unload / delete, status, `cleanup_transcript_text_cmd`, `extract_tasks_from_transcript_cmd` | | `llm` | Tier recommend, model check / download / load / unload / delete, status, `cleanup_transcript_text_cmd`, `extract_tasks_from_transcript_cmd` |
| `meeting` | `detect_meeting_processes` (process-list poll) | | `meeting` | `detect_meeting_processes` (process-list poll) |
| `models` | Whisper + Parakeet model download / load / check / default-id resolution, runtime capabilities API, pre-warm | | `models` | Whisper + Parakeet model download / load / check / default-id resolution, runtime capabilities API, pre-warm |
| `nudges` | Margot soft-touch nudge delivery via `tauri-plugin-notification`; main-window-only guard |
| `paste` | `paste_text` (copy + keystroke), `detect_paste_backends`, Wayland focus-race mitigation against the preview overlay | | `paste` | `paste_text` (copy + keystroke), `detect_paste_backends`, Wayland focus-race mitigation against the preview overlay |
| `power` | macOS `PowerAssertion` guard during long sessions (blocks App Nap) |
| `profiles` | Profile CRUD, profile-terms CRUD, learn-terms-from-edit | | `profiles` | Profile CRUD, profile-terms CRUD, learn-terms-from-edit |
| `rituals` | Start- and shutdown-ritual sentinels (last-shown date for the morning-triage modal) |
| `tasks` | Task CRUD, subtask CRUD, `decompose_and_store`, `extract_tasks_from_transcript_cmd` | | `tasks` | Task CRUD, subtask CRUD, `decompose_and_store`, `extract_tasks_from_transcript_cmd` |
| `transcription` | `transcribe_pcm`, `transcribe_file`, `transcribe_pcm_parakeet` | | `transcription` | `transcribe_pcm`, `transcribe_file`, `transcribe_pcm_parakeet` |
| `transcripts` | Transcript CRUD + FTS5 search | | `transcripts` | Transcript CRUD + FTS5 search |
| `tts` | Platform-native Read Page Aloud (`spd-say` / `say` / PowerShell), with cancellable child-process tracking |
| `update` | Tauri-plugin-updater check / install | | `update` | Tauri-plugin-updater check / install |
| `windows` | `open_task_window`, `open_viewer_window`, `open_preview_window`, `close_preview_window` | | `windows` | `open_task_window`, `open_viewer_window`, `open_preview_window`, `close_preview_window` |
Utility modules in the same directory (no `#[tauri::command]` attributes; helpers consumed by the command modules above): `mod` (registry), `power` (macOS `PowerAssertion` guard against App Nap during long sessions), `security` (`ensure_main_window` guard).
### Frontend (src/) ### Frontend (src/)
- **SvelteKit + Svelte 5 runes** (`$state`, `$derived`, `$effect`). - **SvelteKit + Svelte 5 runes** (`$state`, `$derived`, `$effect`).
- **Tailwind CSS 4** for styling, with a Lexend/Atkinson/OpenDyslexic type system. - **Tailwind CSS 4** for styling, with a Lexend/Atkinson/OpenDyslexic type system.
- **Secondary windows** (`/float`, `/viewer`, `/preview`) use named layouts (`+layout@.svelte`) to skip the main shell and run chrome-free. - **Secondary windows** (`/float`, `/viewer`, `/preview`) use named layouts (`+layout@.svelte`) to skip the main shell and run chrome-free.
- **Reactive stores** (`src/lib/stores/page.svelte.ts`): `settings`, `profiles`, `tasks`, `history`, `taskLists`, `templates`, `page`, `toasts`, `preferences`. - **Reactive stores** (`src/lib/stores/`, one file per store): `page.svelte.ts` (central app state; transcripts, profiles, taskLists, templates, etc. live as fields here), `preferences.svelte.ts`, `profiles.svelte.ts`, `toasts.svelte.ts`, `focusTimer.svelte.ts`, `llmStatus.svelte.ts`, `nudgeBus.svelte.ts`, `implementationIntentions.svelte.ts`, `completionStats.svelte.ts`, `speaker.svelte.ts`.
- **i18n**: `svelte-i18n` with en/es/de locales at `src/lib/i18n/locales/`. Scaffolding only — strings migrate to translation keys incrementally. - **i18n**: `svelte-i18n` with en/es/de locales at `src/lib/i18n/locales/`. Scaffolding only — strings migrate to translation keys incrementally.
--- ---
@@ -288,7 +297,7 @@ CI also builds release installers on tag push (see `.github/workflows/build.yml`
### Testing ### Testing
```bash ```bash
cargo test --workspace --lib # 245 tests across 10 crates cargo test --workspace --lib # 220+ lib tests across 9 library crates
npm run check # svelte-check (type-checks .svelte files) npm run check # svelte-check (type-checks .svelte files)
cargo check --workspace --all-targets cargo check --workspace --all-targets
``` ```
@@ -301,28 +310,28 @@ Beyond this README, the repo ships extensive internal documentation:
### Product + strategy — `docs/brief/` ### Product + strategy — `docs/brief/`
Research briefs, competitive analysis, and strategic framing. Start with: Research briefs, competitive analysis, and strategic framing. Start with:
- [`what-kon-is.md`](docs/brief/what-kon-is.md) — product thesis - [`what-magnotia-is.md`](docs/brief/what-magnotia-is.md) — product thesis
- [`why-current-tools-fail.md`](docs/brief/why-current-tools-fail.md) — market gap - [`why-current-tools-fail.md`](docs/brief/why-current-tools-fail.md) — market gap
- [`design-principles.md`](docs/brief/design-principles.md) — full principle list - [`design-principles.md`](docs/brief/design-principles.md) — full principle list
- [`target-audience.md`](docs/brief/target-audience.md), [`market-size-demographics.md`](docs/brief/market-size-demographics.md) - [`target-audience.md`](docs/brief/target-audience.md), [`market-size-demographics.md`](docs/brief/market-size-demographics.md)
- Appendices on cognitive ergonomics, AI body doubling, evolutionary psychology, implementation intentions, HITL scaffolding, voice interfaces - Appendices on cognitive ergonomics, AI body doubling, evolutionary psychology, implementation intentions, HITL scaffolding, voice interfaces
### Brand — `docs/brand/` ### Brand — `docs/brand/`
- [`kon-brand-guidelines.md`](docs/brand/kon-brand-guidelines.md) - [`magnotia-brand-guidelines.md`](docs/brand/magnotia-brand-guidelines.md)
- [`kon-brand-platform.md`](docs/brand/kon-brand-platform.md) - [`magnotia-brand-platform.md`](docs/brand/magnotia-brand-platform.md)
### Technical research — `docs/whisper-ecosystem/` ### Technical research — `docs/whisper-ecosystem/`
Cross-repo survey of 10 OSS Whisper projects, the Kon-specific atomic task backlog, and the two Cursor workstream plans. Cross-repo survey of 10 OSS Whisper projects, the Magnotia-specific atomic task backlog, and the two Cursor workstream plans.
- [`brief.md`](docs/whisper-ecosystem/brief.md) — 31-item task backlog (the canonical research spec) - [`brief.md`](docs/whisper-ecosystem/brief.md) — 31-item task backlog (the canonical research spec)
- [`kon-context.md`](docs/whisper-ecosystem/kon-context.md) — ideology, shipped state, file-ownership fence for cloud AI agents - [`magnotia-context.md`](docs/whisper-ecosystem/magnotia-context.md) — ideology, shipped state, file-ownership fence for cloud AI agents
- [`workstream-A.md`](docs/whisper-ecosystem/workstream-A.md), [`workstream-B.md`](docs/whisper-ecosystem/workstream-B.md) — executed workstream plans - [`workstream-A.md`](docs/whisper-ecosystem/workstream-A.md), [`workstream-B.md`](docs/whisper-ecosystem/workstream-B.md) — executed workstream plans
### GPU tuning — `docs/gpu-tuning/` ### GPU tuning — `docs/gpu-tuning/`
- [`plan.md`](docs/gpu-tuning/plan.md) — MVP plan for GGML env-var panel + `kon-bench` auto-tuner + `kon-configs` community repo - [`plan.md`](docs/gpu-tuning/plan.md) — MVP plan for GGML env-var panel + `magnotia-bench` auto-tuner + `magnotia-configs` community repo
### Session handovers ### Session handovers
- [`HANDOVER.md`](HANDOVER.md) — latest session summary - [`HANDOVER.md`](HANDOVER.md) — latest session summary
- Dated historical handovers: `HANDOVER-2026-04-17.md`, `HANDOVER-2026-04-18.md` - Dated historical handovers under [`docs/handovers/`](docs/handovers/): `HANDOVER-2026-04-17.md`, `HANDOVER-2026-04-18.md`, `HANDOVER-2026-04-19.md`, `HANDOVER-2026-04-24.md`
### Dev reference ### Dev reference
- [`docs/dev-setup.md`](docs/dev-setup.md) — dependency + launch reference - [`docs/dev-setup.md`](docs/dev-setup.md) — dependency + launch reference
@@ -339,7 +348,7 @@ Pinned roadmap items (scoped in docs and session memory):
- **Phase 4** — remaining items from [`workstream-A.md`](docs/whisper-ecosystem/workstream-A.md) + [`workstream-B.md`](docs/whisper-ecosystem/workstream-B.md) - **Phase 4** — remaining items from [`workstream-A.md`](docs/whisper-ecosystem/workstream-A.md) + [`workstream-B.md`](docs/whisper-ecosystem/workstream-B.md)
- **Voice calibration** — three-tier plan replacing the hardcoded speech-gate with per-user baselines - **Voice calibration** — three-tier plan replacing the hardcoded speech-gate with per-user baselines
- **GPU community tuning** — see [`docs/gpu-tuning/plan.md`](docs/gpu-tuning/plan.md); five-phase roadmap from settings panel to agentic auto-tuner + community config repo - **GPU community tuning** — see [`docs/gpu-tuning/plan.md`](docs/gpu-tuning/plan.md); five-phase roadmap from settings panel to agentic auto-tuner + community config repo
- **Cloud endpoint contract test** — when `kon-cloud-providers` grows a real provider - **Cloud endpoint contract test** — when `magnotia-cloud-providers` grows a real provider
- **`ggml` dedup** — replace the interim `-Wl,--allow-multiple-definition` link flag with a proper shared-lib setup; unblocks custom shader / backend work - **`ggml` dedup** — replace the interim `-Wl,--allow-multiple-definition` link flag with a proper shared-lib setup; unblocks custom shader / backend work
- **Mobile (iOS / Android)** — long-horizon, gated on the single-binary Rust stack scaling - **Mobile (iOS / Android)** — long-horizon, gated on the single-binary Rust stack scaling
@@ -347,7 +356,7 @@ Explicitly shelved (not coming without specific community signal):
- Wake-word / always-listening agent - Wake-word / always-listening agent
- Chat-style LLM UI - Chat-style LLM UI
- Multi-provider cloud fan-out beyond OpenAI-compatible + Anthropic - Multi-provider cloud fan-out beyond OpenAI-compatible + Anthropic
- Second notes-editing surface (transcripts leave Kon via frontmatter to Obsidian) - Second notes-editing surface (transcripts leave Magnotia via frontmatter to Obsidian)
- Speaker diarization - Speaker diarization
- Dragon-style passage-based speaker fine-tuning (Whisper has no speaker adaptation) - Dragon-style passage-based speaker fine-tuning (Whisper has no speaker adaptation)
@@ -374,4 +383,4 @@ To be finalised before public beta. Current intent: MIT or similar permissive li
## Contact ## Contact
**Jake Sames** — [jakeadriansames@gmail.com](mailto:jakeadriansames@gmail.com) **Jake Sames** — [jakeadriansames@gmail.com](mailto:jakeadriansames@gmail.com)
Repo: [github.com/jakejars/kon](https://github.com/jakejars/kon) · [git.corbel.consulting/jake/kon](https://git.corbel.consulting/jake/kon) Repo: [github.com/jakejars/magnotia](https://github.com/jakejars/magnotia) · [git.corbel.consulting/jake/magnotia](https://git.corbel.consulting/jake/magnotia)

8
crates/ai-formatting/Cargo.toml
View File

@@ -1,10 +1,10 @@
[package] [package]
name = "kon-ai-formatting" name = "magnotia-ai-formatting"
version = "0.1.0" version = "0.1.0"
edition = "2021" edition = "2021"
description = "Text post-processing pipeline: filler removal, British English conversion, formatting for Kon" description = "Text post-processing pipeline: filler removal, British English conversion, formatting for Magnotia"
[dependencies] [dependencies]
kon-core = { path = "../core" } magnotia-core = { path = "../core" }
kon-llm = { path = "../llm" } magnotia-llm = { path = "../llm" }
regex-lite = "0.1" regex-lite = "0.1"

8
crates/ai-formatting/src/llm_client.rs
View File

@@ -3,7 +3,7 @@
//! The llm_client is not yet wired to a running model. This module defines //! The llm_client is not yet wired to a running model. This module defines
//! the prompt contract so that wiring it produces correct, hardened output. //! the prompt contract so that wiring it produces correct, hardened output.
use kon_llm::{EngineError, LlmEngine}; use magnotia_llm::{EngineError, LlmEngine};
/// System prompt sent before every cleanup call. /// System prompt sent before every cleanup call.
/// ///
@@ -13,7 +13,7 @@ use kon_llm::{EngineError, LlmEngine};
/// Whispering's published baseline, directly counteracts the /// Whispering's published baseline, directly counteracts the
/// "LLM changed my meaning" failure mode: the model's job is to /// "LLM changed my meaning" failure mode: the model's job is to
/// translate spoken speech into well-formed written form — not to /// translate spoken speech into well-formed written form — not to
/// improve, summarise, or rephrase. Kon's ideology: raw transcript /// improve, summarise, or rephrase. Magnotia's ideology: raw transcript
/// is the source of truth; cleanup is a translation pass, not a /// is the source of truth; cleanup is a translation pass, not a
/// rewrite. /// rewrite.
/// 2. **Prompt-injection hardening.** The guard ("speech, not /// 2. **Prompt-injection hardening.** The guard ("speech, not
@@ -161,7 +161,7 @@ pub fn cleanup_text(
#[cfg(test)] #[cfg(test)]
mod tests { mod tests {
use super::*; use super::*;
use kon_llm::EngineError; use magnotia_llm::EngineError;
#[test] #[test]
fn empty_terms_returns_empty_string() { fn empty_terms_returns_empty_string() {
@@ -183,7 +183,7 @@ mod tests {
assert!(CLEANUP_PROMPT.contains("output ONLY the cleaned transcript")); assert!(CLEANUP_PROMPT.contains("output ONLY the cleaned transcript"));
} }
/// The "translator, not editor" framing is load-bearing for Kon's /// The "translator, not editor" framing is load-bearing for Magnotia's
/// ideology — raw transcript is the source of truth, cleanup is a /// ideology — raw transcript is the source of truth, cleanup is a
/// translation pass. Drifting from this phrasing in a refactor would /// translation pass. Drifting from this phrasing in a refactor would
/// quietly open the door to the "LLM changed my meaning" failure /// quietly open the door to the "LLM changed my meaning" failure

6
crates/ai-formatting/src/pipeline.rs
View File

@@ -1,6 +1,6 @@
use kon_core::constants::SMART_PARAGRAPH_GAP_SECS; use magnotia_core::constants::SMART_PARAGRAPH_GAP_SECS;
use kon_core::types::Segment; use magnotia_core::types::Segment;
use kon_llm::LlmEngine; use magnotia_llm::LlmEngine;
use crate::{llm_client, rule_based, to_plain_text::to_plain_text}; use crate::{llm_client, rule_based, to_plain_text::to_plain_text};

4
crates/ai-formatting/src/to_plain_text.rs
View File

@@ -7,13 +7,13 @@
//! structure) degraded cleanup quality materially; plain-text input //! structure) degraded cleanup quality materially; plain-text input
//! raised it back. //! raised it back.
//! //!
//! `Segment.text` in Kon already holds just the spoken text (the //! `Segment.text` in Magnotia already holds just the spoken text (the
//! `start`/`end` f64 fields carry the timing), so "timestamp //! `start`/`end` f64 fields carry the timing), so "timestamp
//! stripping" falls out of using the text field alone. The work here //! stripping" falls out of using the text field alone. The work here
//! is the whitespace pass and empty-segment filter, plus a single //! is the whitespace pass and empty-segment filter, plus a single
//! public function the pipeline can depend on. //! public function the pipeline can depend on.
use kon_core::types::Segment; use magnotia_core::types::Segment;
/// Join transcription segments into a single plain-text string /// Join transcription segments into a single plain-text string
/// suitable for feeding to an LLM cleanup prompt. /// suitable for feeding to an LLM cleanup prompt.

6
crates/audio/Cargo.toml
View File

@@ -1,11 +1,11 @@
[package] [package]
name = "kon-audio" name = "magnotia-audio"
version = "0.1.0" version = "0.1.0"
edition = "2021" edition = "2021"
description = "Audio capture (cpal), VAD, resampling (rubato), file decoding (symphonia), WAV I/O (hound) for Kon" description = "Audio capture (cpal), VAD, resampling (rubato), file decoding (symphonia), WAV I/O (hound) for Magnotia"
[dependencies] [dependencies]
kon-core = { path = "../core" } magnotia-core = { path = "../core" }
# Microphone capture # Microphone capture
cpal = "0.17" cpal = "0.17"

46
crates/audio/src/capture.rs
View File

@@ -6,7 +6,7 @@ use cpal::traits::{DeviceTrait, HostTrait, StreamTrait};
use cpal::{FromSample, Sample, SampleFormat, SizedSample}; use cpal::{FromSample, Sample, SampleFormat, SizedSample};
use serde::{Deserialize, Serialize}; use serde::{Deserialize, Serialize};
use kon_core::error::{KonError, Result}; use magnotia_core::error::{MagnotiaError, Result};
const AUDIO_CHANNEL_CAPACITY: usize = 32; const AUDIO_CHANNEL_CAPACITY: usize = 32;
@@ -100,7 +100,7 @@ impl MicrophoneCapture {
let devices = host let devices = host
.input_devices() .input_devices()
.map_err(|e| KonError::AudioCaptureFailed(format!("input_devices: {e}")))?; .map_err(|e| MagnotiaError::AudioCaptureFailed(format!("input_devices: {e}")))?;
// Load ALSA card descriptions once per enumeration. These are the // Load ALSA card descriptions once per enumeration. These are the
// "real" product names (e.g. "Blue Microphones") that cpal's // "real" product names (e.g. "Blue Microphones") that cpal's
@@ -138,17 +138,17 @@ impl MicrophoneCapture {
let host = cpal::default_host(); let host = cpal::default_host();
let devices = host let devices = host
.input_devices() .input_devices()
.map_err(|e| KonError::AudioCaptureFailed(format!("input_devices: {e}")))?; .map_err(|e| MagnotiaError::AudioCaptureFailed(format!("input_devices: {e}")))?;
for device in devices { for device in devices {
let name = device_display_name(&device).unwrap_or_default(); let name = device_display_name(&device).unwrap_or_default();
if name == device_name { if name == device_name {
eprintln!("[kon-audio] start_with_device: opening explicit device '{name}'"); eprintln!("[magnotia-audio] start_with_device: opening explicit device '{name}'");
return open_and_validate(device, &name, /* require_audio = */ true); return open_and_validate(device, &name, /* require_audio = */ true);
} }
} }
Err(KonError::AudioCaptureFailed(format!( Err(MagnotiaError::AudioCaptureFailed(format!(
"Selected device '{device_name}' not found in current host enumeration. \ "Selected device '{device_name}' not found in current host enumeration. \
It may have been disconnected. Open Settings → Audio to pick another." It may have been disconnected. Open Settings → Audio to pick another."
))) )))
@@ -172,7 +172,7 @@ impl MicrophoneCapture {
let mut all_devices: Vec<cpal::Device> = host let mut all_devices: Vec<cpal::Device> = host
.input_devices() .input_devices()
.map_err(|e| KonError::AudioCaptureFailed(format!("input_devices: {e}")))? .map_err(|e| MagnotiaError::AudioCaptureFailed(format!("input_devices: {e}")))?
.collect(); .collect();
// Sort: default first, then non-monitor, then monitor-as-last-resort. // Sort: default first, then non-monitor, then monitor-as-last-resort.
@@ -190,7 +190,7 @@ impl MicrophoneCapture {
}); });
eprintln!( eprintln!(
"[kon-audio] start: enumerated {} input device(s) (default='{}')", "[magnotia-audio] start: enumerated {} input device(s) (default='{}')",
all_devices.len(), all_devices.len(),
default_name default_name
); );
@@ -204,7 +204,7 @@ impl MicrophoneCapture {
match open_and_validate(device.clone(), &name, true) { match open_and_validate(device.clone(), &name, true) {
Ok(result) => return Ok(result), Ok(result) => return Ok(result),
Err(e) => { Err(e) => {
eprintln!("[kon-audio] '{name}' rejected: {e}"); eprintln!("[magnotia-audio] '{name}' rejected: {e}");
} }
} }
} }
@@ -212,14 +212,14 @@ impl MicrophoneCapture {
// Second pass: accept anything that delivers bytes (monitor sources // Second pass: accept anything that delivers bytes (monitor sources
// included). Better to capture from a monitor than fail entirely. // included). Better to capture from a monitor than fail entirely.
eprintln!( eprintln!(
"[kon-audio] no non-monitor mic produced audio; falling back to monitor/loopback sources" "[magnotia-audio] no non-monitor mic produced audio; falling back to monitor/loopback sources"
); );
for device in &all_devices { for device in &all_devices {
let name = device_display_name(device).unwrap_or_default(); let name = device_display_name(device).unwrap_or_default();
match open_and_validate(device.clone(), &name, false) { match open_and_validate(device.clone(), &name, false) {
Ok(result) => { Ok(result) => {
eprintln!( eprintln!(
"[kon-audio] FALLBACK: capturing from '{name}' (likely monitor source). \ "[magnotia-audio] FALLBACK: capturing from '{name}' (likely monitor source). \
Recordings may be silent or contain system audio." Recordings may be silent or contain system audio."
); );
return Ok(result); return Ok(result);
@@ -228,7 +228,7 @@ impl MicrophoneCapture {
} }
} }
Err(KonError::AudioCaptureFailed( Err(MagnotiaError::AudioCaptureFailed(
"No working microphone found. Check that an input device is connected, \ "No working microphone found. Check that an input device is connected, \
that PulseAudio/PipeWire is running, and that the app has microphone permission. \ that PulseAudio/PipeWire is running, and that the app has microphone permission. \
Then open Settings → Audio to pick a device explicitly." Then open Settings → Audio to pick a device explicitly."
@@ -355,13 +355,13 @@ fn open_and_validate(
) -> Result<(MicrophoneCapture, mpsc::Receiver<AudioChunk>)> { ) -> Result<(MicrophoneCapture, mpsc::Receiver<AudioChunk>)> {
let config = device let config = device
.default_input_config() .default_input_config()
.map_err(|e| KonError::AudioCaptureFailed(format!("default_input_config: {e}")))?; .map_err(|e| MagnotiaError::AudioCaptureFailed(format!("default_input_config: {e}")))?;
let sample_rate = config.sample_rate(); let sample_rate = config.sample_rate();
let channels = config.channels(); let channels = config.channels();
let format = config.sample_format(); let format = config.sample_format();
eprintln!( eprintln!(
"[kon-audio] trying '{name}' ({sr}Hz, {ch}ch, {fmt:?})", "[magnotia-audio] trying '{name}' ({sr}Hz, {ch}ch, {fmt:?})",
sr = sample_rate, sr = sample_rate,
ch = channels, ch = channels,
fmt = format fmt = format
@@ -415,16 +415,16 @@ fn open_and_validate(
name.to_string(), name.to_string(),
), ),
other => { other => {
return Err(KonError::AudioCaptureFailed(format!( return Err(MagnotiaError::AudioCaptureFailed(format!(
"unsupported sample format {other:?}" "unsupported sample format {other:?}"
))) )))
} }
} }
.map_err(|e| KonError::AudioCaptureFailed(format!("build_input_stream: {e}")))?; .map_err(|e| MagnotiaError::AudioCaptureFailed(format!("build_input_stream: {e}")))?;
stream stream
.play() .play()
.map_err(|e| KonError::AudioCaptureFailed(format!("stream.play: {e}")))?; .map_err(|e| MagnotiaError::AudioCaptureFailed(format!("stream.play: {e}")))?;
// Validation window: collect chunks for DEVICE_VALIDATION_MS, compute RMS. // Validation window: collect chunks for DEVICE_VALIDATION_MS, compute RMS.
let deadline = let deadline =
@@ -451,19 +451,19 @@ fn open_and_validate(
} }
if total_samples == 0 { if total_samples == 0 {
return Err(KonError::AudioCaptureFailed( return Err(MagnotiaError::AudioCaptureFailed(
"device delivered zero samples in validation window".into(), "device delivered zero samples in validation window".into(),
)); ));
} }
let rms = (sum_sq / total_samples as f64).sqrt() as f32; let rms = (sum_sq / total_samples as f64).sqrt() as f32;
eprintln!( eprintln!(
"[kon-audio] '{name}' validation: {samples} samples, rms={rms:.6}", "[magnotia-audio] '{name}' validation: {samples} samples, rms={rms:.6}",
samples = total_samples samples = total_samples
); );
if require_audio && rms < SILENCE_RMS_FLOOR { if require_audio && rms < SILENCE_RMS_FLOOR {
return Err(KonError::AudioCaptureFailed(format!( return Err(MagnotiaError::AudioCaptureFailed(format!(
"device produced silence (rms={rms:.6} below floor {SILENCE_RMS_FLOOR:.6})" "device produced silence (rms={rms:.6} below floor {SILENCE_RMS_FLOOR:.6})"
))); )));
} }
@@ -474,7 +474,7 @@ fn open_and_validate(
// failing fast. (Codex review 2026/04/17 D3) // failing fast. (Codex review 2026/04/17 D3)
const DEAD_SILENCE_FLOOR: f32 = 1e-7; const DEAD_SILENCE_FLOOR: f32 = 1e-7;
if rms < DEAD_SILENCE_FLOOR { if rms < DEAD_SILENCE_FLOOR {
return Err(KonError::AudioCaptureFailed(format!( return Err(MagnotiaError::AudioCaptureFailed(format!(
"device produced dead silence (rms={rms:.6e} below absolute floor {DEAD_SILENCE_FLOOR:.6e})" "device produced dead silence (rms={rms:.6e} below absolute floor {DEAD_SILENCE_FLOOR:.6e})"
))); )));
} }
@@ -489,7 +489,7 @@ fn open_and_validate(
} }
} }
eprintln!("[kon-audio] selected microphone: '{name}'"); eprintln!("[magnotia-audio] selected microphone: '{name}'");
Ok(( Ok((
MicrophoneCapture { MicrophoneCapture {
stream: Some(stream), stream: Some(stream),
@@ -539,7 +539,7 @@ where
// Surface stream errors to the live session via err_tx so the // Surface stream errors to the live session via err_tx so the
// frontend can show a toast. Also keep the eprintln for ops // frontend can show a toast. Also keep the eprintln for ops
// logs. (Codex review 2026/04/17 M2) // logs. (Codex review 2026/04/17 M2)
eprintln!("[kon-audio] capture error: {err}"); eprintln!("[magnotia-audio] capture error: {err}");
if err_tx if err_tx
.try_send(CaptureRuntimeError { .try_send(CaptureRuntimeError {
device_name: err_device_name.clone(), device_name: err_device_name.clone(),
@@ -553,7 +553,7 @@ where
// frontend never received the typed event. // frontend never received the typed event.
let prior = dropped_errors.fetch_add(1, Ordering::Relaxed); let prior = dropped_errors.fetch_add(1, Ordering::Relaxed);
eprintln!( eprintln!(
"[kon-audio] capture error channel full; dropped error #{} for device '{}'", "[magnotia-audio] capture error channel full; dropped error #{} for device '{}'",
prior + 1, prior + 1,
err_device_name, err_device_name,
); );

6
crates/audio/src/concurrency.rs
View File

@@ -1,7 +1,7 @@
use std::path::Path; use std::path::Path;
use kon_core::error::Result; use magnotia_core::error::Result;
use kon_core::types::AudioSamples; use magnotia_core::types::AudioSamples;
use crate::decode::decode_audio_file; use crate::decode::decode_audio_file;
use crate::resample::resample_to_16khz; use crate::resample::resample_to_16khz;
@@ -15,5 +15,5 @@ pub async fn decode_and_resample(path: &Path) -> Result<AudioSamples> {
resample_to_16khz(&audio) resample_to_16khz(&audio)
}) })
.await .await
.map_err(|e| kon_core::error::KonError::AudioDecodeFailed(format!("Task join error: {e}")))? .map_err(|e| magnotia_core::error::MagnotiaError::AudioDecodeFailed(format!("Task join error: {e}")))?
} }

42
crates/audio/src/decode.rs
View File

@@ -9,13 +9,13 @@ use symphonia::core::io::MediaSourceStream;
use symphonia::core::meta::MetadataOptions; use symphonia::core::meta::MetadataOptions;
use symphonia::core::probe::Hint; use symphonia::core::probe::Hint;
use kon_core::error::{KonError, Result}; use magnotia_core::error::{MagnotiaError, Result};
use kon_core::types::AudioSamples; use magnotia_core::types::AudioSamples;
/// Decode an audio file to mono f32 PCM samples. /// Decode an audio file to mono f32 PCM samples.
/// Supports all formats symphonia handles: mp3, aac, flac, wav, ogg, etc. /// Supports all formats symphonia handles: mp3, aac, flac, wav, ogg, etc.
/// ///
/// Any read- or decode-side error is propagated as `KonError::AudioDecodeFailed`. /// Any read- or decode-side error is propagated as `MagnotiaError::AudioDecodeFailed`.
/// A previous implementation `break`ed out of the packet loop on any read /// A previous implementation `break`ed out of the packet loop on any read
/// error and skipped per-packet decode errors, so a truncated or corrupt /// error and skipped per-packet decode errors, so a truncated or corrupt
/// input silently returned `Ok` with whatever had decoded before the /// input silently returned `Ok` with whatever had decoded before the
@@ -29,7 +29,7 @@ pub fn decode_audio_file_limited(
max_duration_secs: Option<f64>, max_duration_secs: Option<f64>,
) -> Result<AudioSamples> { ) -> Result<AudioSamples> {
let file = File::open(path) let file = File::open(path)
.map_err(|e| KonError::AudioDecodeFailed(format!("Cannot open file: {e}")))?; .map_err(|e| MagnotiaError::AudioDecodeFailed(format!("Cannot open file: {e}")))?;
let mss = MediaSourceStream::new(Box::new(file), Default::default()); let mss = MediaSourceStream::new(Box::new(file), Default::default());
let mut hint = Hint::new(); let mut hint = Hint::new();
@@ -42,7 +42,7 @@ pub fn decode_audio_file_limited(
pub fn probe_audio_duration_secs(path: &Path) -> Result<Option<f64>> { pub fn probe_audio_duration_secs(path: &Path) -> Result<Option<f64>> {
let file = File::open(path) let file = File::open(path)
.map_err(|e| KonError::AudioDecodeFailed(format!("Cannot open file: {e}")))?; .map_err(|e| MagnotiaError::AudioDecodeFailed(format!("Cannot open file: {e}")))?;
let mss = MediaSourceStream::new(Box::new(file), Default::default()); let mss = MediaSourceStream::new(Box::new(file), Default::default());
let mut hint = Hint::new(); let mut hint = Hint::new();
if let Some(ext) = path.extension().and_then(|e| e.to_str()) { if let Some(ext) = path.extension().and_then(|e| e.to_str()) {
@@ -56,15 +56,15 @@ pub fn probe_audio_duration_secs(path: &Path) -> Result<Option<f64>> {
&FormatOptions::default(), &FormatOptions::default(),
&MetadataOptions::default(), &MetadataOptions::default(),
) )
.map_err(|e| KonError::AudioDecodeFailed(format!("Unsupported format: {e}")))?; .map_err(|e| MagnotiaError::AudioDecodeFailed(format!("Unsupported format: {e}")))?;
let track = probed let track = probed
.format .format
.default_track() .default_track()
.ok_or_else(|| KonError::AudioDecodeFailed("No audio track found".into()))?; .ok_or_else(|| MagnotiaError::AudioDecodeFailed("No audio track found".into()))?;
let sample_rate = track let sample_rate = track
.codec_params .codec_params
.sample_rate .sample_rate
.ok_or_else(|| KonError::AudioDecodeFailed("Unknown sample rate".into()))?; .ok_or_else(|| MagnotiaError::AudioDecodeFailed("Unknown sample rate".into()))?;
Ok(track Ok(track
.codec_params .codec_params
.n_frames .n_frames
@@ -86,20 +86,20 @@ fn decode_media_stream(
&FormatOptions::default(), &FormatOptions::default(),
&MetadataOptions::default(), &MetadataOptions::default(),
) )
.map_err(|e| KonError::AudioDecodeFailed(format!("Unsupported format: {e}")))?; .map_err(|e| MagnotiaError::AudioDecodeFailed(format!("Unsupported format: {e}")))?;
let mut format = probed.format; let mut format = probed.format;
let track = format let track = format
.default_track() .default_track()
.ok_or_else(|| KonError::AudioDecodeFailed("No audio track found".into()))?; .ok_or_else(|| MagnotiaError::AudioDecodeFailed("No audio track found".into()))?;
let sample_rate = track let sample_rate = track
.codec_params .codec_params
.sample_rate .sample_rate
.ok_or_else(|| KonError::AudioDecodeFailed("Unknown sample rate".into()))?; .ok_or_else(|| MagnotiaError::AudioDecodeFailed("Unknown sample rate".into()))?;
if sample_rate == 0 { if sample_rate == 0 {
return Err(KonError::AudioDecodeFailed("Invalid sample rate: 0".into())); return Err(MagnotiaError::AudioDecodeFailed("Invalid sample rate: 0".into()));
} }
let track_id = track.id; let track_id = track.id;
@@ -107,7 +107,7 @@ fn decode_media_stream(
let mut decoder = symphonia::default::get_codecs() let mut decoder = symphonia::default::get_codecs()
.make(&track.codec_params, &DecoderOptions::default()) .make(&track.codec_params, &DecoderOptions::default())
.map_err(|e| KonError::AudioDecodeFailed(format!("Codec error: {e}")))?; .map_err(|e| MagnotiaError::AudioDecodeFailed(format!("Codec error: {e}")))?;
let mut samples: Vec<f32> = Vec::new(); let mut samples: Vec<f32> = Vec::new();
@@ -121,12 +121,12 @@ fn decode_media_stream(
break; break;
} }
Err(SymphoniaError::ResetRequired) => { Err(SymphoniaError::ResetRequired) => {
return Err(KonError::AudioDecodeFailed( return Err(MagnotiaError::AudioDecodeFailed(
"decoder reset required mid-stream — input contains a discontinuity".into(), "decoder reset required mid-stream — input contains a discontinuity".into(),
)); ));
} }
Err(e) => { Err(e) => {
return Err(KonError::AudioDecodeFailed(format!( return Err(MagnotiaError::AudioDecodeFailed(format!(
"packet read failed: {e}" "packet read failed: {e}"
))); )));
} }
@@ -138,7 +138,7 @@ fn decode_media_stream(
let decoded = decoder let decoded = decoder
.decode(&packet) .decode(&packet)
.map_err(|e| KonError::AudioDecodeFailed(format!("packet decode failed: {e}")))?; .map_err(|e| MagnotiaError::AudioDecodeFailed(format!("packet decode failed: {e}")))?;
let spec = *decoded.spec(); let spec = *decoded.spec();
let channels = spec.channels.count(); let channels = spec.channels.count();
@@ -158,7 +158,7 @@ fn decode_media_stream(
.map(|limit| samples.len() > limit) .map(|limit| samples.len() > limit)
.unwrap_or(false) .unwrap_or(false)
{ {
return Err(KonError::AudioDecodeFailed(format!( return Err(MagnotiaError::AudioDecodeFailed(format!(
"Audio is longer than the {:.0} minute import limit", "Audio is longer than the {:.0} minute import limit",
max_duration_secs.unwrap_or(0.0) / 60.0 max_duration_secs.unwrap_or(0.0) / 60.0
))); )));
@@ -166,7 +166,7 @@ fn decode_media_stream(
} }
if samples.is_empty() { if samples.is_empty() {
return Err(KonError::AudioDecodeFailed("No audio data decoded".into())); return Err(MagnotiaError::AudioDecodeFailed("No audio data decoded".into()));
} }
Ok(AudioSamples::new(samples, sample_rate, 1)) Ok(AudioSamples::new(samples, sample_rate, 1))
@@ -187,7 +187,7 @@ mod tests {
} }
fn valid_wav_bytes(sample_count: usize) -> Vec<u8> { fn valid_wav_bytes(sample_count: usize) -> Vec<u8> {
let path = temp_path("kon_decode_tmp_for_bytes.wav"); let path = temp_path("magnotia_decode_tmp_for_bytes.wav");
let samples: Vec<f32> = (0..sample_count).map(|i| (i as f32) / 1000.0).collect(); let samples: Vec<f32> = (0..sample_count).map(|i| (i as f32) / 1000.0).collect();
let audio = AudioSamples::mono_16khz(samples); let audio = AudioSamples::mono_16khz(samples);
write_wav(&path, &audio).unwrap(); write_wav(&path, &audio).unwrap();
@@ -234,7 +234,7 @@ mod tests {
#[test] #[test]
fn decodes_valid_wav_successfully() { fn decodes_valid_wav_successfully() {
let path = temp_path("kon_decode_valid.wav"); let path = temp_path("magnotia_decode_valid.wav");
let samples: Vec<f32> = (0..4_000).map(|i| (i as f32) / 1000.0).collect(); let samples: Vec<f32> = (0..4_000).map(|i| (i as f32) / 1000.0).collect();
write_wav(&path, &AudioSamples::mono_16khz(samples)).unwrap(); write_wav(&path, &AudioSamples::mono_16khz(samples)).unwrap();
@@ -247,7 +247,7 @@ mod tests {
#[test] #[test]
fn missing_file_surfaces_error() { fn missing_file_surfaces_error() {
let path = temp_path("kon_decode_missing.wav"); let path = temp_path("magnotia_decode_missing.wav");
let result = decode_audio_file(&path); let result = decode_audio_file(&path);
assert!(result.is_err(), "missing file must error, got: {result:?}"); assert!(result.is_err(), "missing file must error, got: {result:?}");
} }

12
crates/audio/src/resample.rs
View File

@@ -2,9 +2,9 @@ use rubato::{
Resampler, SincFixedIn, SincInterpolationParameters, SincInterpolationType, WindowFunction, Resampler, SincFixedIn, SincInterpolationParameters, SincInterpolationType, WindowFunction,
}; };
use kon_core::constants::WHISPER_SAMPLE_RATE; use magnotia_core::constants::WHISPER_SAMPLE_RATE;
use kon_core::error::{KonError, Result}; use magnotia_core::error::{MagnotiaError, Result};
use kon_core::types::AudioSamples; use magnotia_core::types::AudioSamples;
/// Resample audio to 16kHz mono using sinc interpolation (rubato). /// Resample audio to 16kHz mono using sinc interpolation (rubato).
/// Returns a new AudioSamples at the target sample rate. /// Returns a new AudioSamples at the target sample rate.
@@ -17,7 +17,7 @@ pub fn resample_to_16khz(audio: &AudioSamples) -> Result<AudioSamples> {
} }
if from_rate == 0 { if from_rate == 0 {
return Err(KonError::AudioDecodeFailed( return Err(MagnotiaError::AudioDecodeFailed(
"Cannot resample: source rate is 0".into(), "Cannot resample: source rate is 0".into(),
)); ));
} }
@@ -36,7 +36,7 @@ pub fn resample_to_16khz(audio: &AudioSamples) -> Result<AudioSamples> {
let mut resampler = SincFixedIn::<f32>::new( let mut resampler = SincFixedIn::<f32>::new(
ratio, 1.1, params, chunk_size, 1, // mono ratio, 1.1, params, chunk_size, 1, // mono
) )
.map_err(|e| KonError::AudioDecodeFailed(format!("Resampler init failed: {e}")))?; .map_err(|e| MagnotiaError::AudioDecodeFailed(format!("Resampler init failed: {e}")))?;
let samples = audio.samples(); let samples = audio.samples();
let mut output_samples: Vec<f32> = Vec::new(); let mut output_samples: Vec<f32> = Vec::new();
@@ -53,7 +53,7 @@ pub fn resample_to_16khz(audio: &AudioSamples) -> Result<AudioSamples> {
let input = vec![chunk]; let input = vec![chunk];
let result = resampler let result = resampler
.process(&input, None) .process(&input, None)
.map_err(|e| KonError::AudioDecodeFailed(format!("Resample failed: {e}")))?; .map_err(|e| MagnotiaError::AudioDecodeFailed(format!("Resample failed: {e}")))?;
if !result.is_empty() && !result[0].is_empty() { if !result.is_empty() && !result[0].is_empty() {
output_samples.extend_from_slice(&result[0]); output_samples.extend_from_slice(&result[0]);

12
crates/audio/src/streaming_resample.rs
View File

@@ -27,8 +27,8 @@ use rubato::{
Resampler, SincFixedIn, SincInterpolationParameters, SincInterpolationType, WindowFunction, Resampler, SincFixedIn, SincInterpolationParameters, SincInterpolationType, WindowFunction,
}; };
use kon_core::constants::WHISPER_SAMPLE_RATE; use magnotia_core::constants::WHISPER_SAMPLE_RATE;
use kon_core::error::{KonError, Result}; use magnotia_core::error::{MagnotiaError, Result};
/// Number of input samples the rubato resampler consumes per `process()` /// Number of input samples the rubato resampler consumes per `process()`
/// call. Matches the chunk size used in `resample::resample_to_16khz`. /// call. Matches the chunk size used in `resample::resample_to_16khz`.
@@ -51,7 +51,7 @@ impl StreamingResampler {
/// rubato rejects the requested ratio. /// rubato rejects the requested ratio.
pub fn new(from_rate: u32) -> Result<Self> { pub fn new(from_rate: u32) -> Result<Self> {
if from_rate == 0 { if from_rate == 0 {
return Err(KonError::AudioDecodeFailed( return Err(MagnotiaError::AudioDecodeFailed(
"StreamingResampler: input sample rate is 0".into(), "StreamingResampler: input sample rate is 0".into(),
)); ));
} }
@@ -77,7 +77,7 @@ impl StreamingResampler {
INPUT_CHUNK, INPUT_CHUNK,
1, // mono 1, // mono
) )
.map_err(|e| KonError::AudioDecodeFailed(format!("StreamingResampler init failed: {e}")))?; .map_err(|e| MagnotiaError::AudioDecodeFailed(format!("StreamingResampler init failed: {e}")))?;
Ok(Self::Sinc { Ok(Self::Sinc {
resampler, resampler,
@@ -108,7 +108,7 @@ impl StreamingResampler {
let chunk: Vec<f32> = residual.drain(..INPUT_CHUNK).collect(); let chunk: Vec<f32> = residual.drain(..INPUT_CHUNK).collect();
let input = vec![chunk]; let input = vec![chunk];
let result = resampler.process(&input, None).map_err(|e| { let result = resampler.process(&input, None).map_err(|e| {
KonError::AudioDecodeFailed(format!( MagnotiaError::AudioDecodeFailed(format!(
"StreamingResampler process failed: {e}" "StreamingResampler process failed: {e}"
)) ))
})?; })?;
@@ -142,7 +142,7 @@ impl StreamingResampler {
let input = vec![chunk]; let input = vec![chunk];
let result = resampler.process(&input, None).map_err(|e| { let result = resampler.process(&input, None).map_err(|e| {
KonError::AudioDecodeFailed(format!("StreamingResampler flush failed: {e}")) MagnotiaError::AudioDecodeFailed(format!("StreamingResampler flush failed: {e}"))
})?; })?;
let Some(mut out) = result.into_iter().next() else { let Some(mut out) = result.into_iter().next() else {

2
crates/audio/src/vad.rs
View File

@@ -7,7 +7,7 @@
// For now, all audio is treated as speech. This matches v0.2 behaviour // For now, all audio is treated as speech. This matches v0.2 behaviour
// (no VAD) and doesn't affect core functionality. // (no VAD) and doesn't affect core functionality.
use kon_core::constants::VAD_SPEECH_THRESHOLD; use magnotia_core::constants::VAD_SPEECH_THRESHOLD;
/// Stub speech detector. Treats all audio as speech. /// Stub speech detector. Treats all audio as speech.
#[derive(Default)] #[derive(Default)]

38
crates/audio/src/wav.rs
View File

@@ -1,8 +1,8 @@
use std::io::BufWriter; use std::io::BufWriter;
use std::path::Path; use std::path::Path;
use kon_core::error::{KonError, Result}; use magnotia_core::error::{MagnotiaError, Result};
use kon_core::types::AudioSamples; use magnotia_core::types::AudioSamples;
/// Append-friendly WAV writer for long-running captures. /// Append-friendly WAV writer for long-running captures.
/// ///
@@ -40,10 +40,10 @@ impl WavWriter {
bits_per_sample: 16, bits_per_sample: 16,
sample_format: hound::SampleFormat::Int, sample_format: hound::SampleFormat::Int,
}; };
let file = std::fs::File::create(path).map_err(KonError::Io)?; let file = std::fs::File::create(path).map_err(MagnotiaError::Io)?;
let buffered = BufWriter::new(file); let buffered = BufWriter::new(file);
let inner = hound::WavWriter::new(buffered, spec) let inner = hound::WavWriter::new(buffered, spec)
.map_err(|e| KonError::Io(std::io::Error::other(format!("WAV create failed: {e}"))))?; .map_err(|e| MagnotiaError::Io(std::io::Error::other(format!("WAV create failed: {e}"))))?;
Ok(Self { Ok(Self {
inner, inner,
samples_since_flush: 0, samples_since_flush: 0,
@@ -60,7 +60,7 @@ impl WavWriter {
let clamped = sample.clamp(-1.0, 1.0); let clamped = sample.clamp(-1.0, 1.0);
let int_sample = (clamped * i16::MAX as f32) as i16; let int_sample = (clamped * i16::MAX as f32) as i16;
self.inner.write_sample(int_sample).map_err(|e| { self.inner.write_sample(int_sample).map_err(|e| {
KonError::Io(std::io::Error::other(format!("WAV write failed: {e}"))) MagnotiaError::Io(std::io::Error::other(format!("WAV write failed: {e}")))
})?; })?;
} }
self.samples_since_flush += samples.len(); self.samples_since_flush += samples.len();
@@ -78,7 +78,7 @@ impl WavWriter {
pub fn flush(&mut self) -> Result<()> { pub fn flush(&mut self) -> Result<()> {
self.inner self.inner
.flush() .flush()
.map_err(|e| KonError::Io(std::io::Error::other(format!("WAV flush failed: {e}"))))?; .map_err(|e| MagnotiaError::Io(std::io::Error::other(format!("WAV flush failed: {e}"))))?;
self.samples_since_flush = 0; self.samples_since_flush = 0;
Ok(()) Ok(())
} }
@@ -89,7 +89,7 @@ impl WavWriter {
/// that care about the unflushed tail should always finalise. /// that care about the unflushed tail should always finalise.
pub fn finalize(self) -> Result<()> { pub fn finalize(self) -> Result<()> {
self.inner.finalize().map_err(|e| { self.inner.finalize().map_err(|e| {
KonError::Io(std::io::Error::other(format!("WAV finalize failed: {e}"))) MagnotiaError::Io(std::io::Error::other(format!("WAV finalize failed: {e}")))
})?; })?;
Ok(()) Ok(())
} }
@@ -105,33 +105,33 @@ pub fn write_wav(path: &Path, audio: &AudioSamples) -> Result<()> {
}; };
let mut writer = hound::WavWriter::create(path, spec) let mut writer = hound::WavWriter::create(path, spec)
.map_err(|e| KonError::Io(std::io::Error::other(format!("WAV create failed: {e}"))))?; .map_err(|e| MagnotiaError::Io(std::io::Error::other(format!("WAV create failed: {e}"))))?;
for &sample in audio.samples() { for &sample in audio.samples() {
let clamped = sample.clamp(-1.0, 1.0); let clamped = sample.clamp(-1.0, 1.0);
let int_sample = (clamped * i16::MAX as f32) as i16; let int_sample = (clamped * i16::MAX as f32) as i16;
writer writer
.write_sample(int_sample) .write_sample(int_sample)
.map_err(|e| KonError::Io(std::io::Error::other(format!("WAV write failed: {e}"))))?; .map_err(|e| MagnotiaError::Io(std::io::Error::other(format!("WAV write failed: {e}"))))?;
} }
writer writer
.finalize() .finalize()
.map_err(|e| KonError::Io(std::io::Error::other(format!("WAV finalize failed: {e}"))))?; .map_err(|e| MagnotiaError::Io(std::io::Error::other(format!("WAV finalize failed: {e}"))))?;
Ok(()) Ok(())
} }
/// Read a WAV file to f32 PCM `AudioSamples`. /// Read a WAV file to f32 PCM `AudioSamples`.
/// ///
/// Any per-sample decode error is surfaced as `KonError::AudioDecodeFailed` /// Any per-sample decode error is surfaced as `MagnotiaError::AudioDecodeFailed`
/// rather than silently dropped. A previous implementation used /// rather than silently dropped. A previous implementation used
/// `filter_map(|s| s.ok())`, so a truncated or corrupt payload returned /// `filter_map(|s| s.ok())`, so a truncated or corrupt payload returned
/// a short, silently-partial `AudioSamples` — callers got `Ok` while /// a short, silently-partial `AudioSamples` — callers got `Ok` while
/// losing audio (flagged by the 2026-04-22 review). /// losing audio (flagged by the 2026-04-22 review).
pub fn read_wav(path: &Path) -> Result<AudioSamples> { pub fn read_wav(path: &Path) -> Result<AudioSamples> {
let reader = hound::WavReader::open(path) let reader = hound::WavReader::open(path)
.map_err(|e| KonError::AudioDecodeFailed(format!("WAV open failed: {e}")))?; .map_err(|e| MagnotiaError::AudioDecodeFailed(format!("WAV open failed: {e}")))?;
let spec = reader.spec(); let spec = reader.spec();
let sample_rate = spec.sample_rate; let sample_rate = spec.sample_rate;
@@ -145,7 +145,7 @@ pub fn read_wav(path: &Path) -> Result<AudioSamples> {
sample sample
.map(|s| s as f32 / (1 << (bits_per_sample - 1)) as f32) .map(|s| s as f32 / (1 << (bits_per_sample - 1)) as f32)
.map_err(|e| { .map_err(|e| {
KonError::AudioDecodeFailed(format!("WAV sample decode failed: {e}")) MagnotiaError::AudioDecodeFailed(format!("WAV sample decode failed: {e}"))
}) })
}) })
.collect::<Result<Vec<f32>>>()?, .collect::<Result<Vec<f32>>>()?,
@@ -153,7 +153,7 @@ pub fn read_wav(path: &Path) -> Result<AudioSamples> {
.into_samples::<f32>() .into_samples::<f32>()
.map(|sample| { .map(|sample| {
sample.map_err(|e| { sample.map_err(|e| {
KonError::AudioDecodeFailed(format!("WAV sample decode failed: {e}")) MagnotiaError::AudioDecodeFailed(format!("WAV sample decode failed: {e}"))
}) })
}) })
.collect::<Result<Vec<f32>>>()?, .collect::<Result<Vec<f32>>>()?,
@@ -170,7 +170,7 @@ mod tests {
fn wav_writer_survives_crash() { fn wav_writer_survives_crash() {
// Property under test: a `WavWriter` that has been flushed but // Property under test: a `WavWriter` that has been flushed but
// never finalised leaves a valid, readable WAV on disk. This // never finalised leaves a valid, readable WAV on disk. This
// is the crash-safety guarantee — if the kon process aborts // is the crash-safety guarantee — if the magnotia process aborts
// mid-session, the on-disk file up to the last flush is // mid-session, the on-disk file up to the last flush is
// recoverable. // recoverable.
// //
@@ -180,7 +180,7 @@ mod tests {
// mirrors what happens when the OS reaps the process without // mirrors what happens when the OS reaps the process without
// giving Rust a chance to run destructors. // giving Rust a chance to run destructors.
let temp_dir = std::env::temp_dir(); let temp_dir = std::env::temp_dir();
let path = temp_dir.join("kon_test_wav_writer_survives_crash.wav"); let path = temp_dir.join("magnotia_test_wav_writer_survives_crash.wav");
let _ = std::fs::remove_file(&path); let _ = std::fs::remove_file(&path);
let mut writer = WavWriter::create(&path, 16_000, 1).unwrap(); let mut writer = WavWriter::create(&path, 16_000, 1).unwrap();
@@ -217,7 +217,7 @@ mod tests {
#[test] #[test]
fn wav_writer_append_then_finalize_roundtrips() { fn wav_writer_append_then_finalize_roundtrips() {
let temp_dir = std::env::temp_dir(); let temp_dir = std::env::temp_dir();
let path = temp_dir.join("kon_test_wav_writer_finalize.wav"); let path = temp_dir.join("magnotia_test_wav_writer_finalize.wav");
let _ = std::fs::remove_file(&path); let _ = std::fs::remove_file(&path);
let mut writer = WavWriter::create(&path, 16_000, 1).unwrap(); let mut writer = WavWriter::create(&path, 16_000, 1).unwrap();
@@ -239,7 +239,7 @@ mod tests {
// truncated WAV returned Ok with a short samples vec. The // truncated WAV returned Ok with a short samples vec. The
// new code must propagate the error. // new code must propagate the error.
let temp_dir = std::env::temp_dir(); let temp_dir = std::env::temp_dir();
let path = temp_dir.join("kon_test_truncated_wav.wav"); let path = temp_dir.join("magnotia_test_truncated_wav.wav");
let _ = std::fs::remove_file(&path); let _ = std::fs::remove_file(&path);
// Write 100 samples (200 bytes at 16-bit). // Write 100 samples (200 bytes at 16-bit).
@@ -265,7 +265,7 @@ mod tests {
#[test] #[test]
fn wav_roundtrip() { fn wav_roundtrip() {
let temp_dir = std::env::temp_dir(); let temp_dir = std::env::temp_dir();
let path = temp_dir.join("kon_test_roundtrip.wav"); let path = temp_dir.join("magnotia_test_roundtrip.wav");
let original = AudioSamples::mono_16khz(vec![0.0, 0.5, -0.5, 0.25, -0.25]); let original = AudioSamples::mono_16khz(vec![0.0, 0.5, -0.5, 0.25, -0.25]);
write_wav(&path, &original).unwrap(); write_wav(&path, &original).unwrap();

6
crates/cloud-providers/Cargo.toml
View File

@@ -1,8 +1,8 @@
[package] [package]
name = "kon-cloud-providers" name = "magnotia-cloud-providers"
version = "0.1.0" version = "0.1.0"
edition = "2021" edition = "2021"
description = "BYOK cloud STT provider stubs and API key storage for Kon" description = "BYOK cloud STT provider stubs and API key storage for Magnotia"
[dependencies] [dependencies]
kon-core = { path = "../core" } magnotia-core = { path = "../core" }

10
crates/cloud-providers/src/keystore.rs
View File

@@ -1,13 +1,13 @@
use std::collections::HashMap; use std::collections::HashMap;
use std::sync::{Mutex, OnceLock}; use std::sync::{Mutex, OnceLock};
/// Store an API key in Kon's process-local keystore. /// Store an API key in Magnotia's process-local keystore.
/// ///
/// Keys are held in memory for the lifetime of the process and are lost on /// Keys are held in memory for the lifetime of the process and are lost on
/// exit. This avoids the undefined behaviour of mutating process environment /// exit. This avoids the undefined behaviour of mutating process environment
/// variables from arbitrary threads while keeping the public API safe. /// variables from arbitrary threads while keeping the public API safe.
/// ///
/// `retrieve_api_key` still falls back to `KON_API_KEY_<PROVIDER>` environment /// `retrieve_api_key` still falls back to `MAGNOTIA_API_KEY_<PROVIDER>` environment
/// variables so externally injected secrets continue to work. /// variables so externally injected secrets continue to work.
/// ///
/// TODO: Replace with the `keyring` crate (or platform-native credential /// TODO: Replace with the `keyring` crate (or platform-native credential
@@ -19,10 +19,10 @@ pub fn store_api_key(provider: &str, key: &str) {
.insert(provider_env_key(provider), key.to_string()); .insert(provider_env_key(provider), key.to_string());
} }
/// Retrieve an API key from Kon's process-local keystore. /// Retrieve an API key from Magnotia's process-local keystore.
/// ///
/// Returns a previously stored in-memory key when present, otherwise falls /// Returns a previously stored in-memory key when present, otherwise falls
/// back to the read-only `KON_API_KEY_<PROVIDER>` environment variable so /// back to the read-only `MAGNOTIA_API_KEY_<PROVIDER>` environment variable so
/// operator-supplied secrets still work. /// operator-supplied secrets still work.
pub fn retrieve_api_key(provider: &str) -> Option<String> { pub fn retrieve_api_key(provider: &str) -> Option<String> {
let env_key = provider_env_key(provider); let env_key = provider_env_key(provider);
@@ -40,7 +40,7 @@ fn api_key_store() -> &'static Mutex<HashMap<String, String>> {
} }
fn provider_env_key(provider: &str) -> String { fn provider_env_key(provider: &str) -> String {
format!("KON_API_KEY_{}", provider.to_uppercase()) format!("MAGNOTIA_API_KEY_{}", provider.to_uppercase())
} }
#[cfg(test)] #[cfg(test)]

11
crates/core/Cargo.toml
View File

@@ -1,8 +1,8 @@
[package] [package]
name = "kon-core" name = "magnotia-core"
version = "0.1.0" version = "0.1.0"
edition = "2021" edition = "2021"
description = "Core types, constants, traits, hardware detection, and model registry for Kon" description = "Core types, constants, traits, hardware detection, and model registry for Magnotia"
[dependencies] [dependencies]
serde = { version = "1", features = ["derive"] } serde = { version = "1", features = ["derive"] }
@@ -10,3 +10,10 @@ serde_json = "1"
thiserror = "2" thiserror = "2"
sysinfo = "0.35" sysinfo = "0.35"
async-trait = "0.1" async-trait = "0.1"
num_cpus = "1"
tracing = "0.1"
libloading = "0.8"
[dev-dependencies]
tempfile = "3"
tracing-subscriber = { version = "0.3", features = ["env-filter"] }

50
crates/core/examples/tuning_log_demo.rs Normal file
View File

@@ -0,0 +1,50 @@
//! Demonstrator: show what the inference_thread_count tracing event
//! emits in production, across all eight (workload, on_battery,
//! gpu_offloaded) tuples.
//!
//! Run with:
//! cargo run -p magnotia-core --example tuning_log_demo
//!
//! Output is to stderr (tracing's default). Each unique tuple emits
//! exactly one INFO line; subsequent calls with the same tuple are
//! silenced by the per-process log-once cache.
use magnotia_core::tuning::{inference_thread_count, Workload};
fn main() {
tracing_subscriber::fmt()
.with_env_filter("magnotia_core=info")
.with_target(true)
.with_writer(std::io::stderr)
.init();
let cores = num_cpus::get_physical();
let logical = num_cpus::get();
eprintln!("Host: {cores} physical / {logical} logical cores\n");
for (label, override_value) in [
("AC override", Some("ac")),
("Battery override", Some("battery")),
("No override (real sysfs probe)", None),
] {
match override_value {
Some(v) => std::env::set_var("MAGNOTIA_POWER_STATE_OVERRIDE", v),
None => std::env::remove_var("MAGNOTIA_POWER_STATE_OVERRIDE"),
}
// Cache invalidation so the live probe re-runs each section.
// Override paths bypass the cache anyway; this is for the
// no-override block that actually hits sysfs.
eprintln!("--- {label} ---");
for &(workload, gpu) in &[
(Workload::Llm, false),
(Workload::Llm, true),
(Workload::Whisper, false),
(Workload::Whisper, true),
] {
let n = inference_thread_count(workload, gpu);
let w = format!("{workload:?}");
eprintln!(" {w:>8} gpu_offloaded={gpu:>5} -> {n} threads");
}
eprintln!();
}
}

11
crates/core/src/constants.rs
View File

@@ -18,9 +18,6 @@ pub const MIN_CHUNK_SAMPLES: usize = 8000;
/// Post-processing thresholds. /// Post-processing thresholds.
pub const SMART_PARAGRAPH_GAP_SECS: f64 = 2.0; pub const SMART_PARAGRAPH_GAP_SECS: f64 = 2.0;
/// Thread count for inference. Leaves headroom for the UI thread.
pub const MIN_INFERENCE_THREADS: usize = 4;
/// History limits. /// History limits.
pub const HISTORY_MAX_ENTRIES: usize = 100; pub const HISTORY_MAX_ENTRIES: usize = 100;
@@ -39,11 +36,3 @@ pub const VAD_SPEECH_PAD_MS: u32 = 100;
/// Model download chunk size for progress reporting. /// Model download chunk size for progress reporting.
pub const DOWNLOAD_CHUNK_BYTES: usize = 65_536; pub const DOWNLOAD_CHUNK_BYTES: usize = 65_536;
/// Inference thread count based on available parallelism.
pub fn inference_thread_count() -> usize {
std::thread::available_parallelism()
.map(|p| p.get().saturating_sub(1))
.unwrap_or(MIN_INFERENCE_THREADS)
.max(MIN_INFERENCE_THREADS)
}

6
crates/core/src/error.rs
View File

@@ -4,12 +4,12 @@ use serde::Serialize;
use crate::types::ModelId; use crate::types::ModelId;
/// Structured error type for Kon. /// Structured error type for Magnotia.
/// ///
/// Implements `Serialize` so errors can be sent to the frontend as /// Implements `Serialize` so errors can be sent to the frontend as
/// structured JSON rather than opaque strings. /// structured JSON rather than opaque strings.
#[derive(Debug, thiserror::Error, Serialize)] #[derive(Debug, thiserror::Error, Serialize)]
pub enum KonError { pub enum MagnotiaError {
#[error("model not found: {0}")] #[error("model not found: {0}")]
ModelNotFound(ModelId), ModelNotFound(ModelId),
@@ -57,4 +57,4 @@ fn serialize_io_error<S: serde::Serializer>(
s.serialize_str(&err.to_string()) s.serialize_str(&err.to_string())
} }
pub type Result<T> = std::result::Result<T, KonError>; pub type Result<T> = std::result::Result<T, MagnotiaError>;

43
crates/core/src/hardware.rs
View File

@@ -19,7 +19,7 @@ pub struct CpuInfo {
} }
/// Runtime-detected CPU feature flags relevant to the speech-to-text /// Runtime-detected CPU feature flags relevant to the speech-to-text
/// and LLM backends Kon ships. All whisper.cpp / llama.cpp / ggml /// and LLM backends Magnotia ships. All whisper.cpp / llama.cpp / ggml
/// kernels degrade roughly two tiers without AVX2, which is why we /// kernels degrade roughly two tiers without AVX2, which is why we
/// surface it separately: when AVX2 is absent, the UI should warn the /// surface it separately: when AVX2 is absent, the UI should warn the
/// user that performance will be a fraction of what they would see /// user that performance will be a fraction of what they would see
@@ -169,6 +169,40 @@ pub fn probe_system() -> SystemProfile {
} }
} }
/// Best-effort probe for the Vulkan loader shared library.
///
/// whisper.cpp and llama.cpp Vulkan backends silently drop to CPU if
/// `libvulkan.so.1` (Linux) / `vulkan-1.dll` (Windows) / the MoltenVK
/// bundle (macOS) is missing at runtime. We probe via
/// `libloading::Library::new`; a successful open means the loader is
/// resolvable and we should treat the GPU path as live.
///
/// Moved from `src-tauri/src/commands/models.rs` so non-Tauri crates
/// (transcription, llm) can call it without depending on the Tauri
/// binary.
pub fn vulkan_loader_available() -> bool {
#[cfg(target_os = "linux")]
let candidates: &[&str] = &["libvulkan.so.1", "libvulkan.so"];
#[cfg(target_os = "windows")]
let candidates: &[&str] = &["vulkan-1.dll"];
#[cfg(target_os = "macos")]
let candidates: &[&str] = &["libvulkan.1.dylib", "libMoltenVK.dylib"];
#[cfg(not(any(target_os = "linux", target_os = "windows", target_os = "macos")))]
let candidates: &[&str] = &[];
for name in candidates {
// SAFETY: libloading::Library::new loads a shared library and
// returns a handle that is dropped at the end of this
// iteration. We do not call any symbols, so the open-for-probe
// pattern is sound.
match unsafe { libloading::Library::new(*name) } {
Ok(_lib) => return true,
Err(_) => continue,
}
}
false
}
#[cfg(test)] #[cfg(test)]
mod tests { mod tests {
use super::*; use super::*;
@@ -217,4 +251,11 @@ mod tests {
#[cfg(not(any(target_arch = "x86", target_arch = "x86_64")))] #[cfg(not(any(target_arch = "x86", target_arch = "x86_64")))]
assert!(!features.has_ggml_baseline()); assert!(!features.has_ggml_baseline());
} }
#[test]
fn vulkan_loader_available_does_not_panic() {
// We can't assert the value (depends on host's libvulkan),
// but we can assert the call completes.
let _ = vulkan_loader_available();
}
} }

4
crates/core/src/lib.rs
View File

@@ -3,11 +3,13 @@ pub mod error;
pub mod hardware; pub mod hardware;
pub mod model_registry; pub mod model_registry;
pub mod paths; pub mod paths;
pub mod power;
pub mod process_watch; pub mod process_watch;
pub mod recommendation; pub mod recommendation;
pub mod tuning;
pub mod types; pub mod types;
pub use error::{KonError, Result}; pub use error::{MagnotiaError, Result};
pub use types::{ pub use types::{
AudioSamples, DownloadProgress, EngineName, Megabytes, ModelId, Segment, Transcript, AudioSamples, DownloadProgress, EngineName, Megabytes, ModelId, Segment, Transcript,
TranscriptionOptions, TranscriptionOptions,

22
crates/core/src/paths.rs
View File

@@ -19,7 +19,7 @@ impl AppPaths {
} }
pub fn database_path(&self) -> PathBuf { pub fn database_path(&self) -> PathBuf {
self.app_data_dir.join("kon.db") self.app_data_dir.join("magnotia.db")
} }
pub fn recordings_dir(&self) -> PathBuf { pub fn recordings_dir(&self) -> PathBuf {
@@ -67,7 +67,7 @@ fn resolve_app_data_dir() -> PathBuf {
#[cfg(target_os = "windows")] #[cfg(target_os = "windows")]
{ {
let local_app_data = std::env::var("LOCALAPPDATA").unwrap_or_else(|_| ".".to_string()); let local_app_data = std::env::var("LOCALAPPDATA").unwrap_or_else(|_| ".".to_string());
return PathBuf::from(local_app_data).join("kon"); return PathBuf::from(local_app_data).join("magnotia");
} }
#[cfg(target_os = "macos")] #[cfg(target_os = "macos")]
@@ -76,28 +76,28 @@ fn resolve_app_data_dir() -> PathBuf {
return PathBuf::from(home) return PathBuf::from(home)
.join("Library") .join("Library")
.join("Application Support") .join("Application Support")
.join("Kon"); .join("Magnotia");
} }
#[cfg(target_os = "linux")] #[cfg(target_os = "linux")]
{ {
let home = std::env::var("HOME").unwrap_or_else(|_| "/tmp".to_string()); let home = std::env::var("HOME").unwrap_or_else(|_| "/tmp".to_string());
let legacy = PathBuf::from(&home).join(".kon"); let legacy = PathBuf::from(&home).join(".magnotia");
if legacy.exists() { if legacy.exists() {
return legacy; return legacy;
} }
if let Ok(xdg) = std::env::var("XDG_DATA_HOME") { if let Ok(xdg) = std::env::var("XDG_DATA_HOME") {
if !xdg.is_empty() { if !xdg.is_empty() {
return PathBuf::from(xdg).join("kon"); return PathBuf::from(xdg).join("magnotia");
} }
} }
PathBuf::from(home).join(".local").join("share").join("kon") PathBuf::from(home).join(".local").join("share").join("magnotia")
} }
#[cfg(not(any(target_os = "windows", target_os = "macos", target_os = "linux")))] #[cfg(not(any(target_os = "windows", target_os = "macos", target_os = "linux")))]
{ {
let home = std::env::var("HOME").unwrap_or_else(|_| "/tmp".to_string()); let home = std::env::var("HOME").unwrap_or_else(|_| "/tmp".to_string());
PathBuf::from(home).join(".kon") PathBuf::from(home).join(".magnotia")
} }
} }
@@ -110,16 +110,16 @@ mod tests {
#[test] #[test]
fn derives_all_paths_from_one_base() { fn derives_all_paths_from_one_base() {
let paths = AppPaths { let paths = AppPaths {
app_data_dir: PathBuf::from("/tmp/kon-test"), app_data_dir: PathBuf::from("/tmp/magnotia-test"),
}; };
assert_eq!(paths.database_path(), PathBuf::from("/tmp/kon-test/kon.db")); assert_eq!(paths.database_path(), PathBuf::from("/tmp/magnotia-test/magnotia.db"));
assert_eq!( assert_eq!(
paths.speech_model_dir(&ModelId::new("whisper-base-en")), paths.speech_model_dir(&ModelId::new("whisper-base-en")),
PathBuf::from("/tmp/kon-test/models/whisper-base-en") PathBuf::from("/tmp/magnotia-test/models/whisper-base-en")
); );
assert_eq!( assert_eq!(
paths.llm_models_dir(), paths.llm_models_dir(),
PathBuf::from("/tmp/kon-test/models/llm") PathBuf::from("/tmp/magnotia-test/models/llm")
); );
} }
} }

328
crates/core/src/power.rs Normal file
View File

@@ -0,0 +1,328 @@
//! Power-state probe for inference thread tuning.
//!
//! Reports whether the machine is running on AC or battery so callers
//! can drop thread counts when energy matters more than throughput.
//! Linux uses the documented sysfs ABI under
//! `/sys/class/power_supply/`. macOS and Windows return `Unknown` for
//! now; native probes (IOPSGetProvidingPowerSourceType,
//! GetSystemPowerStatus) are deferred.
use std::fs;
use std::path::Path;
use std::sync::{Mutex, OnceLock};
use std::time::{Duration, Instant};
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum PowerState {
OnAc,
OnBattery,
Unknown,
}
/// Parse a `/sys/class/power_supply/`-style directory and decide
/// whether the machine is on AC, on battery, or in an unknown state.
///
/// Rules (matches `Documentation/ABI/testing/sysfs-class-power`):
/// - Any entry with `type` in {`Mains`, `USB`} and `online == 1` → OnAc.
/// - Else any entry with `type == Battery` → OnBattery.
/// - Else → Unknown.
///
/// Top-level failures (missing dir, unreadable supply_dir) return
/// Unknown without panicking. Per-entry failures (unreadable
/// `type`/`online` file inside an individual supply, e.g. permission
/// denied or non-UTF-8 content) cause that entry to be silently
/// skipped via `read_trimmed().unwrap_or_default()` — which on a
/// stuck-AC machine could produce OnBattery if the Mains entry was
/// the unreadable one. In practice sysfs entries are world-readable,
/// so this is a theoretical hazard rather than a real one. `Unknown`
/// is treated as `OnAc` by the caller, preserving today's pre-clamp
/// behaviour on platforms or distros where the probe doesn't fire.
pub fn parse_power_state_from_dir(supply_dir: &Path) -> PowerState {
let read_dir = match fs::read_dir(supply_dir) {
Ok(rd) => rd,
Err(_) => return PowerState::Unknown,
};
let mut saw_battery = false;
for entry in read_dir.flatten() {
let path = entry.path();
let ty = read_trimmed(&path.join("type")).unwrap_or_default();
let online = read_trimmed(&path.join("online")).unwrap_or_default();
match ty.as_str() {
"Mains" | "USB" => {
if online == "1" {
return PowerState::OnAc;
}
}
"Battery" => {
saw_battery = true;
}
_ => {}
}
}
if saw_battery {
PowerState::OnBattery
} else {
PowerState::Unknown
}
}
fn read_trimmed(path: &Path) -> Option<String> {
fs::read_to_string(path).ok().map(|s| s.trim().to_owned())
}
const POWER_STATE_TTL: Duration = Duration::from_secs(10);
struct CachedState {
state: PowerState,
fetched_at: Instant,
}
fn cache_slot() -> &'static Mutex<Option<CachedState>> {
static SLOT: OnceLock<Mutex<Option<CachedState>>> = OnceLock::new();
SLOT.get_or_init(|| Mutex::new(None))
}
#[cfg(test)]
pub(crate) fn force_clear_cache() {
*cache_slot().lock().expect("power cache mutex poisoned") = None;
}
#[cfg(test)]
pub(crate) fn force_set_cache(state: PowerState) {
*cache_slot().lock().expect("power cache mutex poisoned") = Some(CachedState {
state,
fetched_at: Instant::now(),
});
}
/// Top-level power-state probe.
///
/// Resolution order (highest to lowest priority):
/// 1. In-process test override (set via `with_override` from unit tests).
/// 2. `MAGNOTIA_POWER_STATE_OVERRIDE` env var (`ac` | `battery` | `unknown`,
/// case-insensitive). Used by `thread_sweep.rs` integration tests.
/// 3. Linux: `parse_power_state_from_dir("/sys/class/power_supply")`.
/// 4. macOS / Windows / other: `Unknown`.
///
/// `Unknown` is treated as `OnAc` by callers, which preserves today's
/// pre-clamp behaviour on platforms where the probe doesn't fire.
///
/// Results are cached for `POWER_STATE_TTL` (10 seconds). Override
/// paths (test and env-var) bypass the cache entirely so they always
/// take effect immediately.
pub fn probe_power_state() -> PowerState {
#[cfg(test)]
if let Some(state) = test_get_override() {
return state;
}
if let Some(state) = env_override() {
return state;
}
let mut slot = cache_slot().lock().expect("power cache mutex poisoned");
if let Some(cached) = &*slot {
if cached.fetched_at.elapsed() < POWER_STATE_TTL {
return cached.state;
}
}
let fresh = platform_probe();
*slot = Some(CachedState {
state: fresh,
fetched_at: Instant::now(),
});
fresh
}
fn env_override() -> Option<PowerState> {
let raw = std::env::var("MAGNOTIA_POWER_STATE_OVERRIDE").ok()?;
match raw.trim().to_ascii_lowercase().as_str() {
"ac" => Some(PowerState::OnAc),
"battery" => Some(PowerState::OnBattery),
"unknown" => Some(PowerState::Unknown),
_ => None,
}
}
#[cfg(target_os = "linux")]
fn platform_probe() -> PowerState {
parse_power_state_from_dir(Path::new("/sys/class/power_supply"))
}
#[cfg(not(target_os = "linux"))]
fn platform_probe() -> PowerState {
PowerState::Unknown
}
// In-process override slot. Tests must use `with_override` (below) to
// set it; production code never writes to this. Read on every probe.
#[cfg(test)]
static TEST_OVERRIDE: Mutex<Option<PowerState>> = Mutex::new(None);
#[cfg(test)]
fn test_get_override() -> Option<PowerState> {
*TEST_OVERRIDE.lock().expect("power test override mutex poisoned")
}
/// Drop-guard that resets `TEST_OVERRIDE` to `None` on drop (including on unwind).
/// This prevents a panicking test body from leaking stale override state into
/// subsequent tests.
#[cfg(test)]
struct OverrideGuard;
#[cfg(test)]
impl Drop for OverrideGuard {
fn drop(&mut self) {
*TEST_OVERRIDE.lock().expect("power test override mutex poisoned") = None;
}
}
/// Run `body` with the in-process override set to `state`. Restores
/// `TEST_OVERRIDE` to `None` on return, even if `body` panics.
///
/// Holds a dedicated `TEST_LOCK` mutex for the duration of the body,
/// so override-using unit tests run serially with respect to each
/// other even when cargo runs the test binary multi-threaded.
#[cfg(test)]
pub(crate) fn with_override<R>(state: Option<PowerState>, body: impl FnOnce() -> R) -> R {
static TEST_LOCK: Mutex<()> = Mutex::new(());
let _lock = TEST_LOCK.lock().expect("power TEST_LOCK poisoned");
*TEST_OVERRIDE.lock().expect("power test override mutex poisoned") = state;
let _guard = OverrideGuard;
body()
}
#[cfg(test)]
mod tests {
use super::*;
use std::fs;
use tempfile::tempdir;
#[test]
fn power_state_variants_are_distinct() {
assert_ne!(PowerState::OnAc, PowerState::OnBattery);
assert_ne!(PowerState::OnAc, PowerState::Unknown);
assert_ne!(PowerState::OnBattery, PowerState::Unknown);
}
fn write_supply(dir: &std::path::Path, name: &str, ty: &str, online: &str) {
let entry = dir.join(name);
fs::create_dir_all(&entry).unwrap();
fs::write(entry.join("type"), format!("{ty}\n")).unwrap();
fs::write(entry.join("online"), format!("{online}\n")).unwrap();
}
#[test]
fn parses_mains_online_as_on_ac() {
let dir = tempdir().unwrap();
write_supply(dir.path(), "AC", "Mains", "1");
write_supply(dir.path(), "BAT0", "Battery", "0");
assert_eq!(parse_power_state_from_dir(dir.path()), PowerState::OnAc);
}
#[test]
fn parses_battery_only_as_on_battery() {
let dir = tempdir().unwrap();
write_supply(dir.path(), "AC", "Mains", "0");
write_supply(dir.path(), "BAT0", "Battery", "0");
assert_eq!(parse_power_state_from_dir(dir.path()), PowerState::OnBattery);
}
#[test]
fn parses_usb_pd_online_as_on_ac() {
let dir = tempdir().unwrap();
write_supply(dir.path(), "ucsi-source-psy-USBC000:001", "USB", "1");
write_supply(dir.path(), "BAT0", "Battery", "0");
assert_eq!(parse_power_state_from_dir(dir.path()), PowerState::OnAc);
}
#[test]
fn parses_empty_dir_as_unknown() {
let dir = tempdir().unwrap();
assert_eq!(parse_power_state_from_dir(dir.path()), PowerState::Unknown);
}
#[test]
fn parses_missing_dir_as_unknown() {
let path = std::path::Path::new("/no/such/path/should/exist/at/this/inode/123456");
assert_eq!(parse_power_state_from_dir(path), PowerState::Unknown);
}
#[test]
fn parses_malformed_files_as_unknown_gracefully() {
let dir = tempdir().unwrap();
let entry = dir.path().join("garbage");
fs::create_dir_all(&entry).unwrap();
// No type, no online — should not panic.
assert_eq!(parse_power_state_from_dir(dir.path()), PowerState::Unknown);
}
#[test]
fn override_drives_battery() {
with_override(Some(PowerState::OnBattery), || {
assert_eq!(probe_power_state(), PowerState::OnBattery);
});
}
#[test]
fn override_drives_ac() {
with_override(Some(PowerState::OnAc), || {
assert_eq!(probe_power_state(), PowerState::OnAc);
});
}
#[test]
fn override_drives_unknown() {
with_override(Some(PowerState::Unknown), || {
assert_eq!(probe_power_state(), PowerState::Unknown);
});
}
#[test]
fn env_var_override_battery_via_set_var() {
// env-var path tested in isolation under TEST_LOCK so it
// doesn't race with the in-process override tests.
with_override(None, || {
std::env::set_var("MAGNOTIA_POWER_STATE_OVERRIDE", "battery");
assert_eq!(probe_power_state(), PowerState::OnBattery);
std::env::remove_var("MAGNOTIA_POWER_STATE_OVERRIDE");
});
}
#[test]
fn env_var_override_garbage_falls_through() {
with_override(None, || {
std::env::set_var("MAGNOTIA_POWER_STATE_OVERRIDE", "nonsense");
// Garbage value falls through to the platform probe.
// We can't assert the platform result so just assert it
// doesn't panic.
let _ = probe_power_state();
std::env::remove_var("MAGNOTIA_POWER_STATE_OVERRIDE");
});
}
#[test]
fn ttl_cache_returns_cached_value_within_window() {
with_override(None, || {
force_clear_cache();
force_set_cache(PowerState::OnBattery);
// No override active, no env var; probe should hit cache.
assert_eq!(probe_power_state(), PowerState::OnBattery);
});
}
#[test]
fn ttl_cache_clears_via_force_clear() {
with_override(None, || {
force_set_cache(PowerState::OnBattery);
force_clear_cache();
// Override flips to OnAc; with cleared cache, override
// (which has higher priority) drives the result.
});
with_override(Some(PowerState::OnAc), || {
force_clear_cache();
assert_eq!(probe_power_state(), PowerState::OnAc);
});
}
}

2
crates/core/src/recommendation.rs
View File

@@ -184,7 +184,7 @@ mod tests {
fn parakeet_is_top_recommendation_when_hardware_supports_it() { fn parakeet_is_top_recommendation_when_hardware_supports_it() {
// Any machine that fits Parakeet in RAM should see it ranked first — // Any machine that fits Parakeet in RAM should see it ranked first —
// Parakeet-TDT is English-only but beats Whisper on English at lower // Parakeet-TDT is English-only but beats Whisper on English at lower
// latency, so it's Kon's default recommendation when eligible. // latency, so it's Magnotia's default recommendation when eligible.
// (Users on non-English languages adjust manually — handled at the // (Users on non-English languages adjust manually — handled at the
// settings-UI level, not at the scoring level for now.) // settings-UI level, not at the scoring level for now.)
let profile = profile_with_ram(Megabytes(16384)); let profile = profile_with_ram(Megabytes(16384));

233
crates/core/src/tuning.rs Normal file
View File

@@ -0,0 +1,233 @@
//! Inference thread-count tuning. Combines physical-core budget,
//! battery awareness, and GPU-offload awareness into a single helper
//! callable from both inference call sites.
use crate::power::{self, PowerState};
use std::collections::HashSet;
use std::sync::{Mutex, OnceLock};
/// Lower bound for inference threads. Single-threaded inference is
/// measurably worse than two on every multi-core part.
pub const MIN_INFERENCE_THREADS: usize = 2;
/// Upper bound for inference threads. whisper.cpp + llama.cpp scaling
/// flattens around physical core count; SMT siblings contend for FPU
/// during F16/F32 matmul, so going past physical cores anti-scales.
/// 8 is a conservative ceiling that leaves <5% on the table for
/// big-iron desktops while keeping consumer 6c/12t laptops out of
/// contention territory. Users can override at runtime via
/// MAGNOTIA_INFERENCE_THREADS.
pub const MAX_INFERENCE_THREADS: usize = 8;
#[derive(Debug, Clone, Copy, PartialEq, Eq, Hash)]
pub enum Workload {
/// Llama-style transformer. Near-zero CPU work when fully
/// offloaded; CPU floor in that case is GPU_FLOOR_LLM.
Llm,
/// Whisper transcription. Keeps mel spectrogram, decoder
/// bookkeeping, and beam search on the CPU even with full Vulkan
/// offload; CPU floor is higher: GPU_FLOOR_WHISPER.
Whisper,
}
const GPU_FLOOR_LLM: usize = 2;
const GPU_FLOOR_WHISPER: usize = 4;
/// Whether a given (workload, on_battery, gpu_offloaded) tuple has
/// already been logged this process. Prevents log spam when the same
/// configuration is exercised on every inference call.
fn log_seen() -> &'static Mutex<HashSet<(Workload, bool, bool)>> {
static SEEN: OnceLock<Mutex<HashSet<(Workload, bool, bool)>>> = OnceLock::new();
SEEN.get_or_init(|| Mutex::new(HashSet::new()))
}
/// Inference thread count, clamped to the physical-core budget plus
/// the battery and GPU-offload heuristics.
///
/// Resolution order:
/// 1. `MAGNOTIA_INFERENCE_THREADS=N` — absolute bypass, returns N.
/// 2. base = num_cpus::get_physical() (fallback: available_parallelism).
/// 3. on battery → base /= 2.
/// 4. gpu_offloaded → base = min(base, gpu_floor(workload)).
/// 5. clamp to [MIN_INFERENCE_THREADS, MAX_INFERENCE_THREADS].
pub fn inference_thread_count(workload: Workload, gpu_offloaded: bool) -> usize {
if let Ok(s) = std::env::var("MAGNOTIA_INFERENCE_THREADS") {
if let Ok(n) = s.parse::<usize>() {
if n > 0 {
return n;
}
}
}
let physical = num_cpus::get_physical();
let mut chosen = if physical > 0 {
physical
} else {
std::thread::available_parallelism()
.map(|p| p.get())
.unwrap_or(MIN_INFERENCE_THREADS)
};
let on_battery = power::probe_power_state() == PowerState::OnBattery;
let mut clamps: Vec<&'static str> = Vec::new();
if on_battery {
chosen /= 2;
clamps.push("battery");
}
if gpu_offloaded {
let floor = match workload {
Workload::Llm => GPU_FLOOR_LLM,
Workload::Whisper => GPU_FLOOR_WHISPER,
};
if chosen > floor {
chosen = floor;
clamps.push("gpu");
}
}
let final_value = chosen.clamp(MIN_INFERENCE_THREADS, MAX_INFERENCE_THREADS);
// Log once per (workload, on_battery, gpu_offloaded) tuple.
let key = (workload, on_battery, gpu_offloaded);
if let Ok(mut seen) = log_seen().lock() {
if seen.insert(key) {
tracing::info!(
target: "magnotia_core::tuning",
threads = final_value,
workload = ?workload,
gpu_offloaded,
on_battery,
clamps = ?clamps,
"inference_thread_count"
);
}
}
final_value
}
#[cfg(test)]
mod tests {
use super::*;
/// Serialises tests that read/write `MAGNOTIA_INFERENCE_THREADS` so
/// they don't race under cargo's parallel test runner.
/// Mirrors the pattern used by `power::with_override`.
fn with_thread_env_lock<R>(body: impl FnOnce() -> R) -> R {
use std::sync::Mutex;
static THREAD_ENV_LOCK: Mutex<()> = Mutex::new(());
let _lock = THREAD_ENV_LOCK.lock().expect("tuning thread-env lock poisoned");
body()
}
#[test]
fn matches_existing_clamp_when_no_clamps_apply() {
// With no env override, no battery, no gpu_offload, helper
// should return physical-core count clamped to [2, 8].
// We can't pin physical exactly without mocking num_cpus; just
// assert the result is in range.
with_thread_env_lock(|| {
std::env::remove_var("MAGNOTIA_INFERENCE_THREADS");
let n = inference_thread_count(Workload::Llm, false);
assert!(n >= MIN_INFERENCE_THREADS && n <= MAX_INFERENCE_THREADS,
"got {n}, expected within [{MIN_INFERENCE_THREADS}, {MAX_INFERENCE_THREADS}]");
});
}
#[test]
fn env_var_bypasses_clamps() {
with_thread_env_lock(|| {
std::env::set_var("MAGNOTIA_INFERENCE_THREADS", "10");
let n = inference_thread_count(Workload::Llm, true);
assert_eq!(n, 10);
std::env::remove_var("MAGNOTIA_INFERENCE_THREADS");
});
}
#[test]
fn workload_variants_distinct() {
assert_ne!(Workload::Llm, Workload::Whisper);
}
#[test]
fn battery_halves_thread_count() {
with_thread_env_lock(|| {
std::env::remove_var("MAGNOTIA_INFERENCE_THREADS");
// Measure on battery, then on AC — sequential, not nested,
// to avoid re-entrant deadlock on power::TEST_LOCK.
let on_battery = crate::power::with_override(Some(PowerState::OnBattery), || {
inference_thread_count(Workload::Llm, false)
});
let on_ac = crate::power::with_override(Some(PowerState::OnAc), || {
inference_thread_count(Workload::Llm, false)
});
// on_battery should be roughly half of on_ac, clamped to MIN.
if on_ac > MIN_INFERENCE_THREADS {
assert!(
on_battery <= on_ac,
"battery ({on_battery}) should be <= AC ({on_ac})"
);
assert!(on_battery >= MIN_INFERENCE_THREADS);
}
});
}
#[test]
fn gpu_offload_clamps_llm_to_floor() {
with_thread_env_lock(|| {
std::env::remove_var("MAGNOTIA_INFERENCE_THREADS");
crate::power::with_override(Some(PowerState::OnAc), || {
let n = inference_thread_count(Workload::Llm, true);
assert!(n <= GPU_FLOOR_LLM.max(MIN_INFERENCE_THREADS),
"Llm with GPU offload should clamp to {GPU_FLOOR_LLM}, got {n}");
assert!(n >= MIN_INFERENCE_THREADS);
});
});
}
#[test]
fn gpu_offload_clamps_whisper_to_floor() {
with_thread_env_lock(|| {
std::env::remove_var("MAGNOTIA_INFERENCE_THREADS");
crate::power::with_override(Some(PowerState::OnAc), || {
let n = inference_thread_count(Workload::Whisper, true);
// Whisper floor is 4 on machines with >=4 physical cores;
// can't go lower than physical so on a 2c host we stay at 2.
assert!(n <= GPU_FLOOR_WHISPER, "got {n}");
assert!(n >= MIN_INFERENCE_THREADS);
});
});
}
#[test]
fn whisper_gpu_floor_is_at_least_llm_gpu_floor() {
// Architectural invariant: whisper retains CPU work even when
// GPU-offloaded; its floor must not be lower than the LLM's.
assert!(GPU_FLOOR_WHISPER >= GPU_FLOOR_LLM);
}
#[test]
fn gpu_offload_off_does_not_clamp_below_battery_calc() {
with_thread_env_lock(|| {
std::env::remove_var("MAGNOTIA_INFERENCE_THREADS");
// Sequential measurements; with_override is non-reentrant.
crate::power::with_override(Some(PowerState::OnAc), || {
let no_gpu = inference_thread_count(Workload::Llm, false);
let with_gpu = inference_thread_count(Workload::Llm, true);
// GPU-offloaded should be <= non-offloaded.
assert!(with_gpu <= no_gpu);
});
});
}
#[test]
fn logging_does_not_panic() {
// Smoke: helper should run without panicking when logging is
// wired. This is covered by the other tests too, but kept
// explicitly to document the behaviour.
with_thread_env_lock(|| {
std::env::remove_var("MAGNOTIA_INFERENCE_THREADS");
crate::power::with_override(Some(PowerState::OnBattery), || {
let _ = inference_thread_count(Workload::Llm, true);
let _ = inference_thread_count(Workload::Whisper, false);
});
});
}
}

6
crates/hotkey/Cargo.toml
View File

@@ -1,11 +1,11 @@
[package] [package]
name = "kon-hotkey" name = "magnotia-hotkey"
version = "0.1.0" version = "0.1.0"
edition = "2021" edition = "2021"
description = "Wayland-compatible global hotkey listener for Kon — evdev backend with device hotplug" description = "Wayland-compatible global hotkey listener for Magnotia — evdev backend with device hotplug"
[dependencies] [dependencies]
kon-core = { path = "../core" } magnotia-core = { path = "../core" }
tokio = { version = "1", features = ["rt", "sync", "macros", "time"] } tokio = { version = "1", features = ["rt", "sync", "macros", "time"] }
serde = { version = "1", features = ["derive"] } serde = { version = "1", features = ["derive"] }
log = "0.4" log = "0.4"

4
crates/hotkey/src/lib.rs
View File

@@ -1,4 +1,4 @@
//! Wayland-compatible global hotkey listener for Kon. //! Wayland-compatible global hotkey listener for Magnotia.
//! //!
//! On Linux, reads `/dev/input/event*` devices via the `evdev` crate to capture //! On Linux, reads `/dev/input/event*` devices via the `evdev` crate to capture
//! global hotkeys without any display-server dependency. This works on both X11 //! global hotkeys without any display-server dependency. This works on both X11
@@ -8,7 +8,7 @@
//! On non-Linux platforms, this crate is a no-op — the Tauri global-shortcut //! On non-Linux platforms, this crate is a no-op — the Tauri global-shortcut
//! plugin handles hotkeys there. //! plugin handles hotkeys there.
//! //!
//! Architecture stolen from oddlama/whisper-overlay and adapted for Kon. //! Architecture stolen from oddlama/whisper-overlay and adapted for Magnotia.
#[cfg(target_os = "linux")] #[cfg(target_os = "linux")]
mod linux; mod linux;

4
crates/hotkey/src/linux.rs
View File

@@ -89,7 +89,7 @@ impl EvdevHotkeyListener {
Ok(()) => Some(w), Ok(()) => Some(w),
Err(e) => { Err(e) => {
eprintln!( eprintln!(
"[kon-hotkey] cannot watch /dev/input ({e}); \ "[magnotia-hotkey] cannot watch /dev/input ({e}); \
hotplug detection disabled, devices present \ hotplug detection disabled, devices present \
at startup still work", at startup still work",
); );
@@ -99,7 +99,7 @@ impl EvdevHotkeyListener {
} }
Err(e) => { Err(e) => {
eprintln!( eprintln!(
"[kon-hotkey] cannot create inotify watcher ({e}); \ "[magnotia-hotkey] cannot create inotify watcher ({e}); \
hotplug detection disabled", hotplug detection disabled",
); );
None None

8
crates/llm/Cargo.toml
View File

@@ -1,12 +1,13 @@
[package] [package]
name = "kon-llm" name = "magnotia-llm"
version = "0.1.0" version = "0.1.0"
edition = "2021" edition = "2021"
description = "Local LLM engine for Magnotia (Qwen3.5 / Qwen3.6 via llama-cpp-2): transcript cleanup, task extraction, micro-step decomposition"
[features] [features]
# Default desktop build keeps the existing openmp + vulkan acceleration. # Default desktop build keeps the existing openmp + vulkan acceleration.
# Mobile / CPU-only targets can drop one or both via: # Mobile / CPU-only targets can drop one or both via:
# cargo build -p kon-llm --no-default-features # cargo build -p magnotia-llm --no-default-features
# These are independent so an Android Vulkan build can opt into vulkan # These are independent so an Android Vulkan build can opt into vulkan
# without openmp (the NDK ships OpenMP libs but the toolchain configuration # without openmp (the NDK ships OpenMP libs but the toolchain configuration
# is fragile across NDK versions). # is fragile across NDK versions).
@@ -15,11 +16,10 @@ gpu-vulkan = ["llama-cpp-2/vulkan"]
openmp = ["llama-cpp-2/openmp"] openmp = ["llama-cpp-2/openmp"]
[dependencies] [dependencies]
kon-core = { path = "../core" } magnotia-core = { path = "../core" }
encoding_rs = "0.8" encoding_rs = "0.8"
futures-util = "0.3" futures-util = "0.3"
llama-cpp-2 = { version = "0.1.144", default-features = false } llama-cpp-2 = { version = "0.1.144", default-features = false }
num_cpus = "1"
reqwest = { version = "0.12", default-features = false, features = ["rustls-tls", "stream"] } reqwest = { version = "0.12", default-features = false, features = ["rustls-tls", "stream"] }
serde = { version = "1", features = ["derive"] } serde = { version = "1", features = ["derive"] }
serde_json = "1" serde_json = "1"

12
crates/llm/src/lib.rs
View File

@@ -9,6 +9,7 @@ use llama_cpp_2::llama_batch::LlamaBatch;
use llama_cpp_2::model::params::LlamaModelParams; use llama_cpp_2::model::params::LlamaModelParams;
use llama_cpp_2::model::{AddBos, LlamaChatMessage, LlamaChatTemplate, LlamaModel}; use llama_cpp_2::model::{AddBos, LlamaChatMessage, LlamaChatTemplate, LlamaModel};
use llama_cpp_2::sampling::LlamaSampler; use llama_cpp_2::sampling::LlamaSampler;
use magnotia_core::tuning::{inference_thread_count, Workload};
use serde::{Deserialize, Serialize}; use serde::{Deserialize, Serialize};
pub mod grammars; pub mod grammars;
@@ -163,7 +164,16 @@ impl LlmEngine {
} }
let n_ctx = preflight_context_window(prompt_tokens.len(), config.max_tokens)?; let n_ctx = preflight_context_window(prompt_tokens.len(), config.max_tokens)?;
let thread_count = i32::try_from(num_cpus::get().max(1)).unwrap_or(4); let use_gpu = self.loaded_model().map(|s| s.use_gpu).unwrap_or(false);
let gpu_layers = if use_gpu { u32::MAX } else { 0u32 };
// Trivially true today (gpu_layers = u32::MAX when use_gpu), but the
// explicit comparison documents intent. True residency observability
// (parsing llama.cpp's "offloaded N/M layers" log) is tracked as a
// follow-up in docs/superpowers/specs/2026-05-09-battery-gpu-aware-
// thread-tuning-design.md (§ Out of scope).
let gpu_offloaded = use_gpu && gpu_layers >= model.n_layer();
let thread_count = i32::try_from(inference_thread_count(Workload::Llm, gpu_offloaded))
.unwrap_or(4);
let ctx_params = LlamaContextParams::default() let ctx_params = LlamaContextParams::default()
.with_n_ctx(Some( .with_n_ctx(Some(
NonZeroU32::new(n_ctx).expect("n_ctx must be non-zero"), NonZeroU32::new(n_ctx).expect("n_ctx must be non-zero"),

140
crates/llm/src/model_manager.rs
View File

@@ -12,100 +12,119 @@ use tokio::io::{AsyncReadExt, AsyncWriteExt};
#[allow(non_camel_case_types)] #[allow(non_camel_case_types)]
#[derive(Debug, Clone, Copy, PartialEq, Eq, Hash, Serialize, Deserialize)] #[derive(Debug, Clone, Copy, PartialEq, Eq, Hash, Serialize, Deserialize)]
pub enum LlmModelId { pub enum LlmModelId {
#[serde(rename = "qwen3_1_7b")] #[serde(rename = "qwen3_5_2b")]
Qwen3_1_7B_Q4, Qwen3_5_2B_Q4,
#[serde(rename = "qwen3_4b_instruct_2507")] #[serde(rename = "qwen3_5_4b")]
Qwen3_4BInstruct2507Q4, Qwen3_5_4B_Q4,
#[serde(rename = "qwen3_14b")] #[serde(rename = "qwen3_5_9b")]
Qwen3_14BQ5, Qwen3_5_9B_Q4,
#[serde(rename = "qwen3_6_27b")]
Qwen3_6_27B_Q4,
} }
impl LlmModelId { impl LlmModelId {
pub fn default_tier() -> Self { pub fn default_tier() -> Self {
Self::Qwen3_4BInstruct2507Q4 Self::Qwen3_5_4B_Q4
} }
pub fn as_str(&self) -> &'static str { pub fn as_str(&self) -> &'static str {
match self { match self {
Self::Qwen3_1_7B_Q4 => "qwen3_1_7b", Self::Qwen3_5_2B_Q4 => "qwen3_5_2b",
Self::Qwen3_4BInstruct2507Q4 => "qwen3_4b_instruct_2507", Self::Qwen3_5_4B_Q4 => "qwen3_5_4b",
Self::Qwen3_14BQ5 => "qwen3_14b", Self::Qwen3_5_9B_Q4 => "qwen3_5_9b",
Self::Qwen3_6_27B_Q4 => "qwen3_6_27b",
} }
} }
pub fn display_name(&self) -> &'static str { pub fn display_name(&self) -> &'static str {
match self { match self {
Self::Qwen3_1_7B_Q4 => "Qwen3 1.7B", Self::Qwen3_5_2B_Q4 => "Qwen3.5 2B",
Self::Qwen3_4BInstruct2507Q4 => "Qwen3 4B Instruct 2507", Self::Qwen3_5_4B_Q4 => "Qwen3.5 4B",
Self::Qwen3_14BQ5 => "Qwen3 14B", Self::Qwen3_5_9B_Q4 => "Qwen3.5 9B",
Self::Qwen3_6_27B_Q4 => "Qwen3.6 27B",
} }
} }
pub fn file_name(&self) -> &'static str { pub fn file_name(&self) -> &'static str {
match self { match self {
Self::Qwen3_1_7B_Q4 => "Qwen3-1.7B-Q4_K_M.gguf", Self::Qwen3_5_2B_Q4 => "Qwen3.5-2B-Q4_K_M.gguf",
Self::Qwen3_4BInstruct2507Q4 => "Qwen3-4B-Instruct-2507-Q4_K_M.gguf", Self::Qwen3_5_4B_Q4 => "Qwen3.5-4B-Q4_K_M.gguf",
Self::Qwen3_14BQ5 => "Qwen3-14B-Q5_K_M.gguf", Self::Qwen3_5_9B_Q4 => "Qwen3.5-9B-Q4_K_M.gguf",
Self::Qwen3_6_27B_Q4 => "Qwen3.6-27B-Q4_K_M.gguf",
} }
} }
pub fn size_bytes(&self) -> u64 { pub fn size_bytes(&self) -> u64 {
match self { match self {
Self::Qwen3_1_7B_Q4 => 1_107_409_472, Self::Qwen3_5_2B_Q4 => 1_280_835_840,
Self::Qwen3_4BInstruct2507Q4 => 2_497_281_120, Self::Qwen3_5_4B_Q4 => 2_740_937_888,
Self::Qwen3_14BQ5 => 10_514_570_624, Self::Qwen3_5_9B_Q4 => 5_680_522_464,
Self::Qwen3_6_27B_Q4 => 16_817_244_384,
} }
} }
pub fn minimum_ram_bytes(&self) -> u64 { pub fn minimum_ram_bytes(&self) -> u64 {
match self { match self {
Self::Qwen3_1_7B_Q4 => 8 * 1024_u64.pow(3), Self::Qwen3_5_2B_Q4 => 8 * 1024_u64.pow(3),
Self::Qwen3_4BInstruct2507Q4 => 16 * 1024_u64.pow(3), Self::Qwen3_5_4B_Q4 => 16 * 1024_u64.pow(3),
Self::Qwen3_14BQ5 => 32 * 1024_u64.pow(3), Self::Qwen3_5_9B_Q4 => 32 * 1024_u64.pow(3),
Self::Qwen3_6_27B_Q4 => 64 * 1024_u64.pow(3),
} }
} }
pub fn recommended_vram_bytes(&self) -> Option<u64> { pub fn recommended_vram_bytes(&self) -> Option<u64> {
match self { match self {
Self::Qwen3_1_7B_Q4 => None, Self::Qwen3_5_2B_Q4 => None,
Self::Qwen3_4BInstruct2507Q4 => Some(8 * 1024_u64.pow(3)), Self::Qwen3_5_4B_Q4 => Some(6 * 1024_u64.pow(3)),
Self::Qwen3_14BQ5 => Some(16 * 1024_u64.pow(3)), Self::Qwen3_5_9B_Q4 => Some(12 * 1024_u64.pow(3)),
Self::Qwen3_6_27B_Q4 => Some(24 * 1024_u64.pow(3)),
} }
} }
pub fn description(&self) -> &'static str { pub fn description(&self) -> &'static str {
match self { match self {
Self::Qwen3_1_7B_Q4 => "Low tier for 8 GB RAM and CPU-heavy machines.", Self::Qwen3_5_2B_Q4 => "Minimal tier for 8 GB RAM and CPU-heavy machines.",
Self::Qwen3_4BInstruct2507Q4 => { Self::Qwen3_5_4B_Q4 => {
"Default tier for cleanup and task extraction on 16 GB systems." "Standard tier for cleanup and task extraction on 16 GB systems."
}
Self::Qwen3_5_9B_Q4 => "High tier for 32 GB RAM with a 12 GB+ GPU.",
Self::Qwen3_6_27B_Q4 => {
"Maximum tier for 64 GB RAM with a 24 GB GPU; partial CPU offload below that."
} }
Self::Qwen3_14BQ5 => "High tier for 32 GB+ RAM and larger GPUs.",
} }
} }
pub fn hf_url(&self) -> &'static str { pub fn hf_url(&self) -> &'static str {
match self { match self {
Self::Qwen3_1_7B_Q4 => { Self::Qwen3_5_2B_Q4 => {
"https://huggingface.co/unsloth/Qwen3-1.7B-GGUF/resolve/d7f544eead698dbd1f15126ef60b45a1e1933222/Qwen3-1.7B-Q4_K_M.gguf" "https://huggingface.co/unsloth/Qwen3.5-2B-GGUF/resolve/f6d5376be1edb4d416d56da11e5397a961aca8ae/Qwen3.5-2B-Q4_K_M.gguf"
} }
Self::Qwen3_4BInstruct2507Q4 => { Self::Qwen3_5_4B_Q4 => {
"https://huggingface.co/unsloth/Qwen3-4B-Instruct-2507-GGUF/resolve/a06e946bb6b655725eafa393f4a9745d460374c9/Qwen3-4B-Instruct-2507-Q4_K_M.gguf" "https://huggingface.co/unsloth/Qwen3.5-4B-GGUF/resolve/e87f176479d0855a907a41277aca2f8ee7a09523/Qwen3.5-4B-Q4_K_M.gguf"
} }
Self::Qwen3_14BQ5 => { Self::Qwen3_5_9B_Q4 => {
"https://huggingface.co/unsloth/Qwen3-14B-GGUF/resolve/a04a82c4739b3ef5fa6da7d10261db2c67dd1985/Qwen3-14B-Q5_K_M.gguf" "https://huggingface.co/unsloth/Qwen3.5-9B-GGUF/resolve/3885219b6810b007914f3a7950a8d1b469d598a5/Qwen3.5-9B-Q4_K_M.gguf"
}
Self::Qwen3_6_27B_Q4 => {
"https://huggingface.co/unsloth/Qwen3.6-27B-GGUF/resolve/82d411acf4a06cfb8d9b073a5211bf410bfc29bf/Qwen3.6-27B-Q4_K_M.gguf"
} }
} }
} }
pub fn sha256(&self) -> &'static str { pub fn sha256(&self) -> &'static str {
match self { match self {
Self::Qwen3_1_7B_Q4 => { Self::Qwen3_5_2B_Q4 => {
"de942b0819216caa3bfe487180dd1bb37398fa1c98cb42bb0bbac7ab7d6e8a12" "aaf42c8b7c3cab2bf3d69c355048d4a0ee9973d48f16c731c0520ee914699223"
} }
Self::Qwen3_4BInstruct2507Q4 => { Self::Qwen3_5_4B_Q4 => {
"bf52d44a54b81d44219833556849529ee96f09da673a38783dddc2e2eaf17881" "00fe7986ff5f6b463e62455821146049db6f9313603938a70800d1fb69ef11a4"
}
Self::Qwen3_5_9B_Q4 => {
"03b74727a860a56338e042c4420bb3f04b2fec5734175f4cb9fa853daf52b7e8"
}
Self::Qwen3_6_27B_Q4 => {
"5ed60d0af4650a854b1755bd392f9aef4872643dc25a254bc68043fa638392a0"
} }
Self::Qwen3_14BQ5 => "6f87abc471bd509ad46aca4284b3cfa926d8114bc491bb0a7a3a7f74c16ef95b",
} }
} }
} }
@@ -121,9 +140,10 @@ impl FromStr for LlmModelId {
fn from_str(value: &str) -> Result<Self, Self::Err> { fn from_str(value: &str) -> Result<Self, Self::Err> {
match value { match value {
"qwen3_1_7b" => Ok(Self::Qwen3_1_7B_Q4), "qwen3_5_2b" => Ok(Self::Qwen3_5_2B_Q4),
"qwen3_4b_instruct_2507" => Ok(Self::Qwen3_4BInstruct2507Q4), "qwen3_5_4b" => Ok(Self::Qwen3_5_4B_Q4),
"qwen3_14b" => Ok(Self::Qwen3_14BQ5), "qwen3_5_9b" => Ok(Self::Qwen3_5_9B_Q4),
"qwen3_6_27b" => Ok(Self::Qwen3_6_27B_Q4),
other => Err(format!("Unknown LLM model id: {other}")), other => Err(format!("Unknown LLM model id: {other}")),
} }
} }
@@ -154,9 +174,10 @@ pub enum DownloadError {
} }
const ALL_MODELS: &[LlmModelId] = &[ const ALL_MODELS: &[LlmModelId] = &[
LlmModelId::Qwen3_1_7B_Q4, LlmModelId::Qwen3_5_2B_Q4,
LlmModelId::Qwen3_4BInstruct2507Q4, LlmModelId::Qwen3_5_4B_Q4,
LlmModelId::Qwen3_14BQ5, LlmModelId::Qwen3_5_9B_Q4,
LlmModelId::Qwen3_6_27B_Q4,
]; ];
static ACTIVE_DOWNLOADS: LazyLock<Mutex<std::collections::HashSet<LlmModelId>>> = static ACTIVE_DOWNLOADS: LazyLock<Mutex<std::collections::HashSet<LlmModelId>>> =
@@ -206,21 +227,20 @@ pub fn model_info(id: LlmModelId) -> LlmModelInfo {
} }
pub fn recommend_tier(total_ram_bytes: u64, total_vram_bytes: Option<u64>) -> LlmModelId { pub fn recommend_tier(total_ram_bytes: u64, total_vram_bytes: Option<u64>) -> LlmModelId {
if total_vram_bytes.unwrap_or(0) >= 16 * 1024_u64.pow(3) let vram = total_vram_bytes.unwrap_or(0);
&& total_ram_bytes >= 32 * 1024_u64.pow(3) if vram >= 24 * 1024_u64.pow(3) && total_ram_bytes >= 64 * 1024_u64.pow(3) {
{ LlmModelId::Qwen3_6_27B_Q4
LlmModelId::Qwen3_14BQ5 } else if vram >= 12 * 1024_u64.pow(3) && total_ram_bytes >= 32 * 1024_u64.pow(3) {
} else if total_vram_bytes.unwrap_or(0) >= 8 * 1024_u64.pow(3) LlmModelId::Qwen3_5_9B_Q4
|| total_ram_bytes >= 16 * 1024_u64.pow(3) } else if vram >= 6 * 1024_u64.pow(3) || total_ram_bytes >= 16 * 1024_u64.pow(3) {
{ LlmModelId::Qwen3_5_4B_Q4
LlmModelId::Qwen3_4BInstruct2507Q4
} else { } else {
LlmModelId::Qwen3_1_7B_Q4 LlmModelId::Qwen3_5_2B_Q4
} }
} }
pub fn model_dir() -> PathBuf { pub fn model_dir() -> PathBuf {
kon_core::paths::app_paths().llm_models_dir() magnotia_core::paths::app_paths().llm_models_dir()
} }
pub fn model_path(id: LlmModelId) -> PathBuf { pub fn model_path(id: LlmModelId) -> PathBuf {
@@ -301,7 +321,7 @@ where
.unwrap_or(0); .unwrap_or(0);
let client = reqwest::Client::builder() let client = reqwest::Client::builder()
.user_agent("kon/0.1.0") .user_agent("magnotia/0.1.0")
.connect_timeout(std::time::Duration::from_secs(30)) .connect_timeout(std::time::Duration::from_secs(30))
.build() .build()
.map_err(|e| DownloadError::Http(e.to_string()))?; .map_err(|e| DownloadError::Http(e.to_string()))?;
@@ -389,15 +409,15 @@ mod tests {
#[test] #[test]
fn model_path_contains_model_dir_and_filename() { fn model_path_contains_model_dir_and_filename() {
let path = model_path(LlmModelId::Qwen3_1_7B_Q4); let path = model_path(LlmModelId::Qwen3_5_2B_Q4);
assert!(path.to_string_lossy().ends_with("Qwen3-1.7B-Q4_K_M.gguf")); assert!(path.to_string_lossy().ends_with("Qwen3.5-2B-Q4_K_M.gguf"));
assert!(path.starts_with(model_dir())); assert!(path.starts_with(model_dir()));
} }
#[test] #[test]
fn recommend_tier_prefers_mid_by_default() { fn recommend_tier_prefers_mid_by_default() {
let tier = recommend_tier(16 * 1024_u64.pow(3), None); let tier = recommend_tier(16 * 1024_u64.pow(3), None);
assert_eq!(tier, LlmModelId::Qwen3_4BInstruct2507Q4); assert_eq!(tier, LlmModelId::Qwen3_5_4B_Q4);
} }
#[tokio::test] #[tokio::test]

4
crates/llm/src/prompts.rs
View File

@@ -45,9 +45,9 @@ context that are not explicit commitments. Output an empty array if there are \
no action items."; no action items.";
/// Compact representation of a human-in-the-loop feedback example used /// Compact representation of a human-in-the-loop feedback example used
/// for few-shot prompt conditioning. Built by kon-storage and fed to the /// for few-shot prompt conditioning. Built by magnotia-storage and fed to the
/// prompt builder below; we keep this struct local to the LLM crate so /// prompt builder below; we keep this struct local to the LLM crate so
/// kon-llm does not depend on kon-storage. /// magnotia-llm does not depend on magnotia-storage.
#[derive(Debug, Clone)] #[derive(Debug, Clone)]
pub struct FeedbackExample { pub struct FeedbackExample {
/// What the AI was given as input (e.g. the parent task text, or /// What the AI was given as input (e.g. the parent task text, or

12
crates/llm/tests/content_tags_smoke.rs
View File

@@ -1,30 +1,30 @@
//! Smoke test for Phase 9 LlmEngine::extract_content_tags. //! Smoke test for Phase 9 LlmEngine::extract_content_tags.
//! //!
//! Gated behind the same `KON_LLM_TEST_MODEL` env var as the existing //! Gated behind the same `MAGNOTIA_LLM_TEST_MODEL` env var as the existing
//! smoke.rs test so neither runs in default `cargo test` runs (model //! smoke.rs test so neither runs in default `cargo test` runs (model
//! load is heavy). Run explicitly with: //! load is heavy). Run explicitly with:
//! //!
//! KON_LLM_TEST_MODEL=/path/to/model.gguf cargo test -p kon-llm \ //! MAGNOTIA_LLM_TEST_MODEL=/path/to/model.gguf cargo test -p magnotia-llm \
//! --test content_tags_smoke -- --nocapture //! --test content_tags_smoke -- --nocapture
use std::env; use std::env;
use std::path::PathBuf; use std::path::PathBuf;
use kon_llm::{is_valid_intent, LlmEngine, LlmModelId}; use magnotia_llm::{is_valid_intent, LlmEngine, LlmModelId};
#[test] #[test]
fn extract_content_tags_returns_valid_pair() { fn extract_content_tags_returns_valid_pair() {
let model_path = match env::var("KON_LLM_TEST_MODEL") { let model_path = match env::var("MAGNOTIA_LLM_TEST_MODEL") {
Ok(path) => PathBuf::from(path), Ok(path) => PathBuf::from(path),
Err(_) => { Err(_) => {
eprintln!("KON_LLM_TEST_MODEL not set — skipping"); eprintln!("MAGNOTIA_LLM_TEST_MODEL not set — skipping");
return; return;
} }
}; };
let engine = LlmEngine::new(); let engine = LlmEngine::new();
engine engine
.load_model(LlmModelId::Qwen3_1_7B_Q4, &model_path, true) .load_model(LlmModelId::Qwen3_5_2B_Q4, &model_path, true)
.expect("load model"); .expect("load model");
let transcript = "Tomorrow I need to run through the grant application one more time \ let transcript = "Tomorrow I need to run through the grant application one more time \

14
crates/llm/tests/smoke.rs
View File

@@ -6,33 +6,33 @@
//! - `context::params::LlamaContextParams` //! - `context::params::LlamaContextParams`
//! - `sampling::LlamaSampler` //! - `sampling::LlamaSampler`
//! //!
//! The test is gated behind `KON_LLM_TEST_MODEL`. //! The test is gated behind `MAGNOTIA_LLM_TEST_MODEL`.
use std::env; use std::env;
use std::path::PathBuf; use std::path::PathBuf;
use kon_llm::LlmEngine; use magnotia_llm::LlmEngine;
use kon_llm::LlmModelId; use magnotia_llm::LlmModelId;
#[test] #[test]
fn llama_cpp_2_smoke_generates_and_wraps() { fn llama_cpp_2_smoke_generates_and_wraps() {
let model_path = match env::var("KON_LLM_TEST_MODEL") { let model_path = match env::var("MAGNOTIA_LLM_TEST_MODEL") {
Ok(path) => PathBuf::from(path), Ok(path) => PathBuf::from(path),
Err(_) => { Err(_) => {
eprintln!("KON_LLM_TEST_MODEL not set — skipping"); eprintln!("MAGNOTIA_LLM_TEST_MODEL not set — skipping");
return; return;
} }
}; };
let engine = LlmEngine::new(); let engine = LlmEngine::new();
engine engine
.load_model(LlmModelId::Qwen3_1_7B_Q4, &model_path, true) .load_model(LlmModelId::Qwen3_5_2B_Q4, &model_path, true)
.expect("load model"); .expect("load model");
let completion = engine let completion = engine
.generate( .generate(
"Write exactly one short greeting.", "Write exactly one short greeting.",
&kon_llm::GenerationConfig { &magnotia_llm::GenerationConfig {
max_tokens: 32, max_tokens: 32,
temperature: 0.0, temperature: 0.0,
stop_sequences: vec!["\n".to_string()], stop_sequences: vec!["\n".to_string()],

8
crates/mcp/Cargo.toml
View File

@@ -1,18 +1,18 @@
[package] [package]
name = "kon-mcp" name = "magnotia-mcp"
version = "0.1.0" version = "0.1.0"
edition = "2021" edition = "2021"
description = "Read-only MCP stdio server exposing Kon transcripts and tasks to external agents" description = "Read-only MCP stdio server exposing Magnotia transcripts and tasks to external agents"
[[bin]] [[bin]]
name = "kon-mcp" name = "magnotia-mcp"
path = "src/main.rs" path = "src/main.rs"
[lib] [lib]
path = "src/lib.rs" path = "src/lib.rs"
[dependencies] [dependencies]
kon-storage = { path = "../storage" } magnotia-storage = { path = "../storage" }
sqlx = { version = "0.8", default-features = false, features = ["runtime-tokio", "sqlite"] } sqlx = { version = "0.8", default-features = false, features = ["runtime-tokio", "sqlite"] }
serde = { version = "1", features = ["derive"] } serde = { version = "1", features = ["derive"] }
serde_json = "1" serde_json = "1"

24
crates/mcp/src/lib.rs
View File

@@ -1,8 +1,8 @@
//! Minimal Model Context Protocol server exposing Kon's local SQLite store. //! Minimal Model Context Protocol server exposing Magnotia's local SQLite store.
//! //!
//! Scope: **read-only** tools. An external agent (Claude desktop, Cline, any //! Scope: **read-only** tools. An external agent (Claude desktop, Cline, any
//! MCP-capable client) can list / search / fetch transcripts and list tasks. //! MCP-capable client) can list / search / fetch transcripts and list tasks.
//! No writes — Kon's Tauri app remains the only writer. //! No writes — Magnotia's Tauri app remains the only writer.
//! //!
//! Transport: newline-delimited JSON-RPC 2.0 over stdio, per the stdio //! Transport: newline-delimited JSON-RPC 2.0 over stdio, per the stdio
//! transport spec. Server spec version: 2024-11-05. //! transport spec. Server spec version: 2024-11-05.
@@ -12,7 +12,7 @@ use serde_json::{json, Value};
use sqlx::SqlitePool; use sqlx::SqlitePool;
pub const PROTOCOL_VERSION: &str = "2024-11-05"; pub const PROTOCOL_VERSION: &str = "2024-11-05";
pub const SERVER_NAME: &str = "kon-mcp"; pub const SERVER_NAME: &str = "magnotia-mcp";
pub const SERVER_VERSION: &str = env!("CARGO_PKG_VERSION"); pub const SERVER_VERSION: &str = env!("CARGO_PKG_VERSION");
#[derive(Debug, Deserialize)] #[derive(Debug, Deserialize)]
@@ -95,7 +95,7 @@ fn initialize_result() -> Value {
"version": SERVER_VERSION, "version": SERVER_VERSION,
}, },
"instructions": "instructions":
"Read-only access to Kon's local transcript history and task list. \ "Read-only access to Magnotia's local transcript history and task list. \
All data stays on the user's machine.", All data stays on the user's machine.",
}) })
} }
@@ -105,7 +105,7 @@ fn tools_list_result() -> Value {
"tools": [ "tools": [
{ {
"name": "list_transcripts", "name": "list_transcripts",
"description": "List recent transcripts from Kon's local history, most recent first. \ "description": "List recent transcripts from Magnotia's local history, most recent first. \
Returns summaries (id, title, created_at, duration, preview).", Returns summaries (id, title, created_at, duration, preview).",
"inputSchema": { "inputSchema": {
"type": "object", "type": "object",
@@ -135,7 +135,7 @@ fn tools_list_result() -> Value {
}, },
{ {
"name": "search_transcripts", "name": "search_transcripts",
"description": "Full-text search across Kon's transcripts. Returns matching summaries.", "description": "Full-text search across Magnotia's transcripts. Returns matching summaries.",
"inputSchema": { "inputSchema": {
"type": "object", "type": "object",
"required": ["query"], "required": ["query"],
@@ -155,7 +155,7 @@ fn tools_list_result() -> Value {
}, },
{ {
"name": "list_tasks", "name": "list_tasks",
"description": "List tasks from Kon's task store. Returns both open and completed.", "description": "List tasks from Magnotia's task store. Returns both open and completed.",
"inputSchema": { "inputSchema": {
"type": "object", "type": "object",
"properties": {}, "properties": {},
@@ -206,7 +206,7 @@ async fn list_transcripts_tool(pool: &SqlitePool, args: Value) -> Result<Value,
}; };
let limit = args.limit.unwrap_or(20).clamp(1, 200); let limit = args.limit.unwrap_or(20).clamp(1, 200);
let rows = kon_storage::list_transcripts(pool, limit) let rows = magnotia_storage::list_transcripts(pool, limit)
.await .await
.map_err(|e| error(-32603, format!("DB error: {e}")))?; .map_err(|e| error(-32603, format!("DB error: {e}")))?;
@@ -239,7 +239,7 @@ async fn get_transcript_tool(pool: &SqlitePool, args: Value) -> Result<Value, Js
let args: Args = serde_json::from_value(args) let args: Args = serde_json::from_value(args)
.map_err(|e| error(-32602, format!("Invalid arguments: {e}")))?; .map_err(|e| error(-32602, format!("Invalid arguments: {e}")))?;
let row = kon_storage::get_transcript(pool, &args.id) let row = magnotia_storage::get_transcript(pool, &args.id)
.await .await
.map_err(|e| error(-32603, format!("DB error: {e}")))? .map_err(|e| error(-32603, format!("DB error: {e}")))?
.ok_or_else(|| error(-32000, format!("Transcript {} not found", args.id)))?; .ok_or_else(|| error(-32000, format!("Transcript {} not found", args.id)))?;
@@ -273,7 +273,7 @@ async fn search_transcripts_tool(pool: &SqlitePool, args: Value) -> Result<Value
.map_err(|e| error(-32602, format!("Invalid arguments: {e}")))?; .map_err(|e| error(-32602, format!("Invalid arguments: {e}")))?;
let limit = args.limit.unwrap_or(20).clamp(1, 100); let limit = args.limit.unwrap_or(20).clamp(1, 100);
let rows = kon_storage::search_transcripts(pool, &args.query, limit) let rows = magnotia_storage::search_transcripts(pool, &args.query, limit)
.await .await
.map_err(|e| error(-32603, format!("DB error: {e}")))?; .map_err(|e| error(-32603, format!("DB error: {e}")))?;
@@ -296,7 +296,7 @@ async fn search_transcripts_tool(pool: &SqlitePool, args: Value) -> Result<Value
} }
async fn list_tasks_tool(pool: &SqlitePool) -> Result<Value, JsonRpcError> { async fn list_tasks_tool(pool: &SqlitePool) -> Result<Value, JsonRpcError> {
let rows = kon_storage::list_tasks(pool) let rows = magnotia_storage::list_tasks(pool)
.await .await
.map_err(|e| error(-32603, format!("DB error: {e}")))?; .map_err(|e| error(-32603, format!("DB error: {e}")))?;
@@ -460,7 +460,7 @@ mod tests {
}); });
let pool = sqlx::SqlitePool::connect("sqlite::memory:").await.unwrap(); let pool = sqlx::SqlitePool::connect("sqlite::memory:").await.unwrap();
kon_storage::migrations::run_migrations(&pool) magnotia_storage::migrations::run_migrations(&pool)
.await .await
.unwrap(); .unwrap();
let response = handle_message(&pool, request).await.expect("has response"); let response = handle_message(&pool, request).await.expect("has response");

18
crates/mcp/src/main.rs
View File

@@ -1,22 +1,22 @@
//! Stdio entry point for kon-mcp. Reads newline-delimited JSON-RPC messages //! Stdio entry point for magnotia-mcp. Reads newline-delimited JSON-RPC messages
//! from stdin, dispatches via `kon_mcp::handle_message`, writes responses to //! from stdin, dispatches via `magnotia_mcp::handle_message`, writes responses to
//! stdout. Logs land on stderr so they don't collide with the JSON-RPC stream. //! stdout. Logs land on stderr so they don't collide with the JSON-RPC stream.
use tokio::io::{AsyncBufReadExt, AsyncWriteExt, BufReader}; use tokio::io::{AsyncBufReadExt, AsyncWriteExt, BufReader};
#[tokio::main(flavor = "current_thread")] #[tokio::main(flavor = "current_thread")]
async fn main() -> anyhow::Result<()> { async fn main() -> anyhow::Result<()> {
let db_path = kon_storage::database_path(); let db_path = magnotia_storage::database_path();
eprintln!( eprintln!(
"[kon-mcp] opening Kon database at {} (read-only)", "[magnotia-mcp] opening Magnotia database at {} (read-only)",
db_path.display() db_path.display()
); );
// Open read-only at the connection level so the MCP server cannot write // Open read-only at the connection level so the MCP server cannot write
// to the user's database, regardless of which tools the dispatcher // to the user's database, regardless of which tools the dispatcher
// exposes. Migrations are deliberately skipped — this binary never owns // exposes. Migrations are deliberately skipped — this binary never owns
// the schema; the main app is the single migration writer. // the schema; the main app is the single migration writer.
let pool = kon_storage::init_readonly(&db_path).await?; let pool = magnotia_storage::init_readonly(&db_path).await?;
eprintln!("[kon-mcp] ready, waiting for JSON-RPC on stdin"); eprintln!("[magnotia-mcp] ready, waiting for JSON-RPC on stdin");
let mut lines = BufReader::new(tokio::io::stdin()).lines(); let mut lines = BufReader::new(tokio::io::stdin()).lines();
let mut stdout = tokio::io::stdout(); let mut stdout = tokio::io::stdout();
@@ -28,7 +28,7 @@ async fn main() -> anyhow::Result<()> {
} }
let response = match serde_json::from_str::<serde_json::Value>(trimmed) { let response = match serde_json::from_str::<serde_json::Value>(trimmed) {
Ok(raw) => match kon_mcp::handle_message(&pool, raw).await { Ok(raw) => match magnotia_mcp::handle_message(&pool, raw).await {
Some(response) => response, Some(response) => response,
None => continue, // notification — no reply None => continue, // notification — no reply
}, },
@@ -38,8 +38,8 @@ async fn main() -> anyhow::Result<()> {
// logged and continued, dropping the response — // logged and continued, dropping the response —
// clients saw silence instead of a structured error // clients saw silence instead of a structured error
// (2026-04-22 review MAJOR). // (2026-04-22 review MAJOR).
eprintln!("[kon-mcp] parse error: {err}"); eprintln!("[magnotia-mcp] parse error: {err}");
kon_mcp::parse_error_response(&err.to_string()) magnotia_mcp::parse_error_response(&err.to_string())
} }
}; };

6
crates/storage/Cargo.toml
View File

@@ -1,11 +1,11 @@
[package] [package]
name = "kon-storage" name = "magnotia-storage"
version = "0.1.0" version = "0.1.0"
edition = "2021" edition = "2021"
description = "SQLite persistence, BM25 search, and file storage for Kon" description = "SQLite persistence, BM25 search, and file storage for Magnotia"
[dependencies] [dependencies]
kon-core = { path = "../core" } magnotia-core = { path = "../core" }
# SQLite with compile-time checked queries # SQLite with compile-time checked queries
# default-features = false strips sqlx's `any`, `macros`, `migrate`, `json` — # default-features = false strips sqlx's `any`, `macros`, `migrate`, `json` —

156
crates/storage/src/database.rs
View File

@@ -3,7 +3,7 @@ use std::path::Path;
use sqlx::sqlite::{SqliteConnectOptions, SqlitePoolOptions}; use sqlx::sqlite::{SqliteConnectOptions, SqlitePoolOptions};
use sqlx::{Row, SqlitePool}; use sqlx::{Row, SqlitePool};
use kon_core::error::{KonError, Result}; use magnotia_core::error::{MagnotiaError, Result};
/// Initialise the SQLite database with connection pool and run migrations. /// Initialise the SQLite database with connection pool and run migrations.
pub async fn init(db_path: &Path) -> Result<SqlitePool> { pub async fn init(db_path: &Path) -> Result<SqlitePool> {
@@ -19,12 +19,12 @@ pub async fn init(db_path: &Path) -> Result<SqlitePool> {
.max_connections(5) .max_connections(5)
.connect_with(options) .connect_with(options)
.await .await
.map_err(|e| KonError::StorageError(format!("Database connect failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Database connect failed: {e}")))?;
sqlx::query("PRAGMA foreign_keys = ON") sqlx::query("PRAGMA foreign_keys = ON")
.execute(&pool) .execute(&pool)
.await .await
.map_err(|e| KonError::StorageError(format!("foreign_keys pragma failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("foreign_keys pragma failed: {e}")))?;
run_migrations(&pool).await?; run_migrations(&pool).await?;
@@ -33,7 +33,7 @@ pub async fn init(db_path: &Path) -> Result<SqlitePool> {
/// Open the SQLite database in read-only mode without running migrations. /// Open the SQLite database in read-only mode without running migrations.
/// ///
/// Used by `kon-mcp` so the MCP server cannot write to the user's database /// Used by `magnotia-mcp` so the MCP server cannot write to the user's database
/// regardless of which tools the dispatcher exposes — `read_only(true)` makes /// regardless of which tools the dispatcher exposes — `read_only(true)` makes
/// the constraint structural rather than relying on the request handler being /// the constraint structural rather than relying on the request handler being
/// well-behaved. Fails cleanly if the DB doesn't exist (no `create_if_missing`). /// well-behaved. Fails cleanly if the DB doesn't exist (no `create_if_missing`).
@@ -47,7 +47,7 @@ pub async fn init_readonly(db_path: &Path) -> Result<SqlitePool> {
.max_connections(2) .max_connections(2)
.connect_with(options) .connect_with(options)
.await .await
.map_err(|e| KonError::StorageError(format!("Read-only connect failed: {e}"))) .map_err(|e| MagnotiaError::StorageError(format!("Read-only connect failed: {e}")))
} }
/// Run schema migrations via the versioned migration system. /// Run schema migrations via the versioned migration system.
@@ -82,7 +82,7 @@ pub async fn insert_transcript(
params: &InsertTranscriptParams<'_>, params: &InsertTranscriptParams<'_>,
) -> Result<()> { ) -> Result<()> {
if !profile_exists(pool, params.profile_id).await? { if !profile_exists(pool, params.profile_id).await? {
return Err(KonError::StorageError(format!( return Err(MagnotiaError::StorageError(format!(
"Insert transcript failed: unknown profile id '{}'", "Insert transcript failed: unknown profile id '{}'",
params.profile_id params.profile_id
))); )));
@@ -110,7 +110,7 @@ pub async fn insert_transcript(
.bind(params.anti_hallucination) .bind(params.anti_hallucination)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Insert transcript failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Insert transcript failed: {e}")))?;
Ok(()) Ok(())
} }
@@ -121,7 +121,7 @@ pub async fn get_transcript(pool: &SqlitePool, id: &str) -> Result<Option<Transc
.bind(id) .bind(id)
.fetch_optional(pool) .fetch_optional(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Get transcript failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Get transcript failed: {e}")))?;
Ok(row.map(|r| transcript_row_from(&r))) Ok(row.map(|r| transcript_row_from(&r)))
} }
@@ -144,7 +144,7 @@ pub async fn list_transcripts_paged(
.bind(offset) .bind(offset)
.fetch_all(pool) .fetch_all(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("List transcripts failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("List transcripts failed: {e}")))?;
Ok(rows.iter().map(transcript_row_from).collect()) Ok(rows.iter().map(transcript_row_from).collect())
} }
@@ -154,7 +154,7 @@ pub async fn count_transcripts(pool: &SqlitePool) -> Result<i64> {
let n: i64 = sqlx::query_scalar("SELECT COUNT(*) FROM transcripts") let n: i64 = sqlx::query_scalar("SELECT COUNT(*) FROM transcripts")
.fetch_one(pool) .fetch_one(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Count transcripts failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Count transcripts failed: {e}")))?;
Ok(n) Ok(n)
} }
@@ -182,7 +182,7 @@ pub async fn update_transcript(
.bind(id) .bind(id)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Update transcript failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Update transcript failed: {e}")))?;
Ok(res.rows_affected()) Ok(res.rows_affected())
} }
(Some(t), None) => { (Some(t), None) => {
@@ -191,7 +191,7 @@ pub async fn update_transcript(
.bind(id) .bind(id)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Update transcript failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Update transcript failed: {e}")))?;
Ok(res.rows_affected()) Ok(res.rows_affected())
} }
(None, Some(ttl)) => { (None, Some(ttl)) => {
@@ -200,7 +200,7 @@ pub async fn update_transcript(
.bind(id) .bind(id)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Update transcript failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Update transcript failed: {e}")))?;
Ok(res.rows_affected()) Ok(res.rows_affected())
} }
(None, None) => Ok(0), (None, None) => Ok(0),
@@ -247,10 +247,10 @@ pub async fn update_transcript_meta(
.bind(id) .bind(id)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("update_transcript_meta: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("update_transcript_meta: {e}")))?;
get_transcript(pool, id).await?.ok_or_else(|| { get_transcript(pool, id).await?.ok_or_else(|| {
KonError::StorageError(format!("update_transcript_meta: transcript {id} not found")) MagnotiaError::StorageError(format!("update_transcript_meta: transcript {id} not found"))
}) })
} }
@@ -259,7 +259,7 @@ pub async fn delete_transcript(pool: &SqlitePool, id: &str) -> Result<()> {
.bind(id) .bind(id)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Delete transcript failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Delete transcript failed: {e}")))?;
Ok(()) Ok(())
} }
@@ -283,7 +283,7 @@ pub async fn search_transcripts(
.bind(limit) .bind(limit)
.fetch_all(pool) .fetch_all(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("FTS search failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("FTS search failed: {e}")))?;
Ok(rows.iter().map(transcript_row_from).collect()) Ok(rows.iter().map(transcript_row_from).collect())
} }
@@ -321,7 +321,7 @@ pub async fn insert_task(
.bind(energy) .bind(energy)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Insert task failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Insert task failed: {e}")))?;
Ok(()) Ok(())
} }
@@ -333,7 +333,7 @@ pub async fn list_tasks(pool: &SqlitePool) -> Result<Vec<TaskRow>> {
) )
.fetch_all(pool) .fetch_all(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("List tasks failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("List tasks failed: {e}")))?;
Ok(rows.into_iter().map(task_row_from).collect()) Ok(rows.into_iter().map(task_row_from).collect())
} }
@@ -346,7 +346,7 @@ pub async fn get_task_by_id(pool: &SqlitePool, id: &str) -> Result<Option<TaskRo
.bind(id) .bind(id)
.fetch_optional(pool) .fetch_optional(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Get task failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Get task failed: {e}")))?;
Ok(row.map(task_row_from)) Ok(row.map(task_row_from))
} }
@@ -384,10 +384,10 @@ pub async fn update_task(
.bind(id) .bind(id)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Update task failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Update task failed: {e}")))?;
get_task_by_id(pool, id).await?.ok_or_else(|| { get_task_by_id(pool, id).await?.ok_or_else(|| {
KonError::StorageError(format!("update_task: task {id} not found after update")) MagnotiaError::StorageError(format!("update_task: task {id} not found after update"))
}) })
} }
@@ -405,10 +405,10 @@ pub async fn set_task_energy(pool: &SqlitePool, id: &str, energy: Option<&str>)
.bind(id) .bind(id)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("set_task_energy failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("set_task_energy failed: {e}")))?;
get_task_by_id(pool, id).await?.ok_or_else(|| { get_task_by_id(pool, id).await?.ok_or_else(|| {
KonError::StorageError(format!("set_task_energy: task {id} not found after update")) MagnotiaError::StorageError(format!("set_task_energy: task {id} not found after update"))
}) })
} }
@@ -424,7 +424,7 @@ pub async fn insert_subtask(
.bind(parent_task_id) .bind(parent_task_id)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Insert subtask failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Insert subtask failed: {e}")))?;
Ok(()) Ok(())
} }
@@ -437,7 +437,7 @@ pub async fn list_subtasks(pool: &SqlitePool, parent_id: &str) -> Result<Vec<Tas
.bind(parent_id) .bind(parent_id)
.fetch_all(pool) .fetch_all(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("List subtasks failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("List subtasks failed: {e}")))?;
Ok(rows.into_iter().map(task_row_from).collect()) Ok(rows.into_iter().map(task_row_from).collect())
} }
@@ -448,20 +448,20 @@ pub async fn complete_subtask_and_check_parent(pool: &SqlitePool, subtask_id: &s
let mut tx = pool let mut tx = pool
.begin() .begin()
.await .await
.map_err(|e| KonError::StorageError(format!("Begin transaction failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Begin transaction failed: {e}")))?;
sqlx::query("UPDATE tasks SET done = 1, done_at = datetime('now') WHERE id = ?") sqlx::query("UPDATE tasks SET done = 1, done_at = datetime('now') WHERE id = ?")
.bind(subtask_id) .bind(subtask_id)
.execute(&mut *tx) .execute(&mut *tx)
.await .await
.map_err(|e| KonError::StorageError(format!("Complete subtask failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Complete subtask failed: {e}")))?;
let parent_id: Option<String> = let parent_id: Option<String> =
sqlx::query_scalar("SELECT parent_task_id FROM tasks WHERE id = ?") sqlx::query_scalar("SELECT parent_task_id FROM tasks WHERE id = ?")
.bind(subtask_id) .bind(subtask_id)
.fetch_one(&mut *tx) .fetch_one(&mut *tx)
.await .await
.map_err(|e| KonError::StorageError(format!("Get parent_task_id failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Get parent_task_id failed: {e}")))?;
if let Some(pid) = parent_id { if let Some(pid) = parent_id {
let pending: i64 = let pending: i64 =
@@ -470,7 +470,7 @@ pub async fn complete_subtask_and_check_parent(pool: &SqlitePool, subtask_id: &s
.fetch_one(&mut *tx) .fetch_one(&mut *tx)
.await .await
.map_err(|e| { .map_err(|e| {
KonError::StorageError(format!("Count pending subtasks failed: {e}")) MagnotiaError::StorageError(format!("Count pending subtasks failed: {e}"))
})?; })?;
if pending == 0 { if pending == 0 {
@@ -484,13 +484,13 @@ pub async fn complete_subtask_and_check_parent(pool: &SqlitePool, subtask_id: &s
.bind(&pid) .bind(&pid)
.execute(&mut *tx) .execute(&mut *tx)
.await .await
.map_err(|e| KonError::StorageError(format!("Auto-complete parent failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Auto-complete parent failed: {e}")))?;
} }
} }
tx.commit() tx.commit()
.await .await
.map_err(|e| KonError::StorageError(format!("Commit transaction failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Commit transaction failed: {e}")))?;
Ok(()) Ok(())
} }
@@ -500,7 +500,7 @@ pub async fn complete_task(pool: &SqlitePool, id: &str) -> Result<()> {
.bind(id) .bind(id)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Complete task failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Complete task failed: {e}")))?;
Ok(()) Ok(())
} }
@@ -508,13 +508,13 @@ pub async fn uncomplete_task(pool: &SqlitePool, id: &str) -> Result<()> {
let mut tx = pool let mut tx = pool
.begin() .begin()
.await .await
.map_err(|e| KonError::StorageError(format!("Begin transaction failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Begin transaction failed: {e}")))?;
sqlx::query("UPDATE tasks SET done = 0, done_at = NULL, auto_completed = 0 WHERE id = ?") sqlx::query("UPDATE tasks SET done = 0, done_at = NULL, auto_completed = 0 WHERE id = ?")
.bind(id) .bind(id)
.execute(&mut *tx) .execute(&mut *tx)
.await .await
.map_err(|e| KonError::StorageError(format!("Uncomplete task failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Uncomplete task failed: {e}")))?;
// Mirror the auto-complete invariant from // Mirror the auto-complete invariant from
// `complete_subtask_and_check_parent`: a parent task is done iff // `complete_subtask_and_check_parent`: a parent task is done iff
@@ -526,7 +526,7 @@ pub async fn uncomplete_task(pool: &SqlitePool, id: &str) -> Result<()> {
.bind(id) .bind(id)
.fetch_optional(&mut *tx) .fetch_optional(&mut *tx)
.await .await
.map_err(|e| KonError::StorageError(format!("Get parent_task_id failed: {e}")))? .map_err(|e| MagnotiaError::StorageError(format!("Get parent_task_id failed: {e}")))?
.flatten(); .flatten();
if let Some(pid) = parent_id { if let Some(pid) = parent_id {
@@ -537,12 +537,12 @@ pub async fn uncomplete_task(pool: &SqlitePool, id: &str) -> Result<()> {
.bind(&pid) .bind(&pid)
.execute(&mut *tx) .execute(&mut *tx)
.await .await
.map_err(|e| KonError::StorageError(format!("Reopen parent failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Reopen parent failed: {e}")))?;
} }
tx.commit() tx.commit()
.await .await
.map_err(|e| KonError::StorageError(format!("Commit transaction failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Commit transaction failed: {e}")))?;
Ok(()) Ok(())
} }
@@ -552,7 +552,7 @@ pub async fn delete_task(pool: &SqlitePool, id: &str) -> Result<()> {
.bind(id) .bind(id)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Delete task failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Delete task failed: {e}")))?;
Ok(()) Ok(())
} }
@@ -599,7 +599,7 @@ pub async fn list_recent_completions(
.bind(format!("-{} days", days - 1)) .bind(format!("-{} days", days - 1))
.fetch_all(pool) .fetch_all(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("List recent completions failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("List recent completions failed: {e}")))?;
let lookup: std::collections::HashMap<String, u32> = rows let lookup: std::collections::HashMap<String, u32> = rows
.into_iter() .into_iter()
@@ -610,7 +610,7 @@ pub async fn list_recent_completions(
let today_row: (String,) = sqlx::query_as("SELECT DATE('now', 'localtime')") let today_row: (String,) = sqlx::query_as("SELECT DATE('now', 'localtime')")
.fetch_one(pool) .fetch_one(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Get local today failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Get local today failed: {e}")))?;
let today = today_row.0; let today = today_row.0;
let mut series = Vec::with_capacity(days as usize); let mut series = Vec::with_capacity(days as usize);
@@ -622,7 +622,7 @@ pub async fn list_recent_completions(
.bind(format!("-{offset} days")) .bind(format!("-{offset} days"))
.fetch_one(pool) .fetch_one(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Compute spine day failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Compute spine day failed: {e}")))?;
let count = lookup.get(&day).copied().unwrap_or(0); let count = lookup.get(&day).copied().unwrap_or(0);
series.push(DailyCompletionCount { day, count }); series.push(DailyCompletionCount { day, count });
} }
@@ -655,10 +655,10 @@ pub async fn insert_implementation_rule(
.bind(last_fired_key) .bind(last_fired_key)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Insert implementation rule failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Insert implementation rule failed: {e}")))?;
get_implementation_rule(pool, id).await?.ok_or_else(|| { get_implementation_rule(pool, id).await?.ok_or_else(|| {
KonError::StorageError(format!( MagnotiaError::StorageError(format!(
"insert_implementation_rule: rule {id} not found after insert" "insert_implementation_rule: rule {id} not found after insert"
)) ))
}) })
@@ -672,7 +672,7 @@ pub async fn list_implementation_rules(pool: &SqlitePool) -> Result<Vec<Implemen
) )
.fetch_all(pool) .fetch_all(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("List implementation rules failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("List implementation rules failed: {e}")))?;
Ok(rows.into_iter().map(implementation_rule_row_from).collect()) Ok(rows.into_iter().map(implementation_rule_row_from).collect())
} }
@@ -689,7 +689,7 @@ pub async fn get_implementation_rule(
.bind(id) .bind(id)
.fetch_optional(pool) .fetch_optional(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Get implementation rule failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Get implementation rule failed: {e}")))?;
Ok(row.map(implementation_rule_row_from)) Ok(row.map(implementation_rule_row_from))
} }
@@ -708,10 +708,10 @@ pub async fn set_implementation_rule_enabled(
.bind(id) .bind(id)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Set implementation rule enabled failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Set implementation rule enabled failed: {e}")))?;
get_implementation_rule(pool, id).await?.ok_or_else(|| { get_implementation_rule(pool, id).await?.ok_or_else(|| {
KonError::StorageError(format!( MagnotiaError::StorageError(format!(
"set_implementation_rule_enabled: rule {id} not found after update" "set_implementation_rule_enabled: rule {id} not found after update"
)) ))
}) })
@@ -731,10 +731,10 @@ pub async fn mark_implementation_rule_fired(
.bind(id) .bind(id)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Mark implementation rule fired failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Mark implementation rule fired failed: {e}")))?;
get_implementation_rule(pool, id).await?.ok_or_else(|| { get_implementation_rule(pool, id).await?.ok_or_else(|| {
KonError::StorageError(format!( MagnotiaError::StorageError(format!(
"mark_implementation_rule_fired: rule {id} not found after update" "mark_implementation_rule_fired: rule {id} not found after update"
)) ))
}) })
@@ -745,7 +745,7 @@ pub async fn delete_implementation_rule(pool: &SqlitePool, id: &str) -> Result<(
.bind(id) .bind(id)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Delete implementation rule failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Delete implementation rule failed: {e}")))?;
Ok(()) Ok(())
} }
@@ -757,7 +757,7 @@ pub async fn set_setting(pool: &SqlitePool, key: &str, value: &str) -> Result<()
.bind(value) .bind(value)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Set setting failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Set setting failed: {e}")))?;
Ok(()) Ok(())
} }
@@ -766,7 +766,7 @@ pub async fn get_setting(pool: &SqlitePool, key: &str) -> Result<Option<String>>
.bind(key) .bind(key)
.fetch_optional(pool) .fetch_optional(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Get setting failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Get setting failed: {e}")))?;
Ok(row.map(|r| r.get("value"))) Ok(row.map(|r| r.get("value")))
} }
@@ -809,7 +809,7 @@ pub struct TranscriptRow {
pub anti_hallucination: bool, pub anti_hallucination: bool,
pub created_at: String, pub created_at: String,
// Task 2.5 — transcripts_meta (migration v5). Persists the UI metadata // Task 2.5 — transcripts_meta (migration v5). Persists the UI metadata
// that previously lived in the removed localStorage `kon_history` cache. // that previously lived in the removed localStorage `magnotia_history` cache.
pub starred: bool, pub starred: bool,
pub manual_tags: String, pub manual_tags: String,
pub template: String, pub template: String,
@@ -944,7 +944,7 @@ fn implementation_rule_row_from(r: sqlx::sqlite::SqliteRow) -> ImplementationRul
// 1. The DB triggers `trg_protect_default_profile_delete` / // 1. The DB triggers `trg_protect_default_profile_delete` /
// `trg_protect_default_profile_rename` from migration v6. // `trg_protect_default_profile_rename` from migration v6.
// 2. Rust-layer fail-fast checks below that short-circuit BEFORE the // 2. Rust-layer fail-fast checks below that short-circuit BEFORE the
// query hits sqlite, so UI callers get a friendly KonError::StorageError // query hits sqlite, so UI callers get a friendly MagnotiaError::StorageError
// instead of an opaque `SQLITE_CONSTRAINT_TRIGGER` wrapped in text. // instead of an opaque `SQLITE_CONSTRAINT_TRIGGER` wrapped in text.
pub async fn list_profiles(pool: &SqlitePool) -> Result<Vec<ProfileRow>> { pub async fn list_profiles(pool: &SqlitePool) -> Result<Vec<ProfileRow>> {
@@ -952,7 +952,7 @@ pub async fn list_profiles(pool: &SqlitePool) -> Result<Vec<ProfileRow>> {
sqlx::query("SELECT id, name, initial_prompt, created_at FROM profiles ORDER BY name ASC") sqlx::query("SELECT id, name, initial_prompt, created_at FROM profiles ORDER BY name ASC")
.fetch_all(pool) .fetch_all(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("List profiles failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("List profiles failed: {e}")))?;
Ok(rows.iter().map(profile_row_from).collect()) Ok(rows.iter().map(profile_row_from).collect())
} }
@@ -961,7 +961,7 @@ pub async fn get_profile(pool: &SqlitePool, id: &str) -> Result<Option<ProfileRo
.bind(id) .bind(id)
.fetch_optional(pool) .fetch_optional(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Get profile failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Get profile failed: {e}")))?;
Ok(row.as_ref().map(profile_row_from)) Ok(row.as_ref().map(profile_row_from))
} }
@@ -981,7 +981,7 @@ pub async fn create_profile(
.bind(initial_prompt) .bind(initial_prompt)
.fetch_one(pool) .fetch_one(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Create profile failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Create profile failed: {e}")))?;
Ok(profile_row_from(&row)) Ok(profile_row_from(&row))
} }
@@ -999,12 +999,12 @@ pub async fn update_profile(
initial_prompt: &str, initial_prompt: &str,
) -> Result<()> { ) -> Result<()> {
if id == crate::DEFAULT_PROFILE_ID && name != "Default" { if id == crate::DEFAULT_PROFILE_ID && name != "Default" {
return Err(KonError::StorageError( return Err(MagnotiaError::StorageError(
"Default profile cannot be renamed".into(), "Default profile cannot be renamed".into(),
)); ));
} }
if id != crate::DEFAULT_PROFILE_ID && name == "Default" { if id != crate::DEFAULT_PROFILE_ID && name == "Default" {
return Err(KonError::StorageError( return Err(MagnotiaError::StorageError(
"Cannot rename another profile to 'Default'".into(), "Cannot rename another profile to 'Default'".into(),
)); ));
} }
@@ -1014,7 +1014,7 @@ pub async fn update_profile(
.bind(id) .bind(id)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Update profile failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Update profile failed: {e}")))?;
Ok(()) Ok(())
} }
@@ -1023,13 +1023,13 @@ pub async fn update_profile(
/// ON DELETE CASCADE on `profile_terms.profile_id` cleans up children. /// ON DELETE CASCADE on `profile_terms.profile_id` cleans up children.
pub async fn delete_profile(pool: &SqlitePool, id: &str) -> Result<()> { pub async fn delete_profile(pool: &SqlitePool, id: &str) -> Result<()> {
if id == crate::DEFAULT_PROFILE_ID { if id == crate::DEFAULT_PROFILE_ID {
return Err(KonError::StorageError( return Err(MagnotiaError::StorageError(
"Default profile cannot be deleted".into(), "Default profile cannot be deleted".into(),
)); ));
} }
let transcript_count = transcript_count_for_profile(pool, id).await?; let transcript_count = transcript_count_for_profile(pool, id).await?;
if transcript_count > 0 { if transcript_count > 0 {
return Err(KonError::StorageError(format!( return Err(MagnotiaError::StorageError(format!(
"Cannot delete profile while {transcript_count} transcript(s) still reference it; reassign transcripts first" "Cannot delete profile while {transcript_count} transcript(s) still reference it; reassign transcripts first"
))); )));
} }
@@ -1037,7 +1037,7 @@ pub async fn delete_profile(pool: &SqlitePool, id: &str) -> Result<()> {
.bind(id) .bind(id)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Delete profile failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Delete profile failed: {e}")))?;
Ok(()) Ok(())
} }
@@ -1052,7 +1052,7 @@ pub async fn list_profile_terms(
.bind(profile_id) .bind(profile_id)
.fetch_all(pool) .fetch_all(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("List profile terms failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("List profile terms failed: {e}")))?;
Ok(rows.iter().map(profile_term_row_from).collect()) Ok(rows.iter().map(profile_term_row_from).collect())
} }
@@ -1078,7 +1078,7 @@ pub async fn add_profile_term(
.bind(note) .bind(note)
.fetch_one(pool) .fetch_one(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Add profile term failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Add profile term failed: {e}")))?;
Ok(profile_term_row_from(&row)) Ok(profile_term_row_from(&row))
} }
@@ -1087,7 +1087,7 @@ pub async fn delete_profile_term(pool: &SqlitePool, id: &str) -> Result<()> {
.bind(id) .bind(id)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Delete profile term failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Delete profile term failed: {e}")))?;
Ok(()) Ok(())
} }
@@ -1096,7 +1096,7 @@ async fn profile_exists(pool: &SqlitePool, id: &str) -> Result<bool> {
.bind(id) .bind(id)
.fetch_optional(pool) .fetch_optional(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Profile existence check failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Profile existence check failed: {e}")))?;
Ok(exists.is_some()) Ok(exists.is_some())
} }
@@ -1105,7 +1105,7 @@ async fn transcript_count_for_profile(pool: &SqlitePool, id: &str) -> Result<i64
.bind(id) .bind(id)
.fetch_one(pool) .fetch_one(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Profile transcript count failed: {e}"))) .map_err(|e| MagnotiaError::StorageError(format!("Profile transcript count failed: {e}")))
} }
// --- Error Logging --- // --- Error Logging ---
@@ -1139,7 +1139,7 @@ pub async fn log_error(
.bind(metadata) .bind(metadata)
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Error log failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Error log failed: {e}")))?;
Ok(()) Ok(())
} }
@@ -1171,7 +1171,7 @@ pub async fn prune_error_log(pool: &SqlitePool, keep_days: i64) -> Result<u64> {
.bind(format!("-{keep_days} days")) .bind(format!("-{keep_days} days"))
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Prune error_log failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Prune error_log failed: {e}")))?;
Ok(result.rows_affected()) Ok(result.rows_affected())
} }
@@ -1183,7 +1183,7 @@ pub async fn list_recent_errors(pool: &SqlitePool, limit: i64) -> Result<Vec<Err
.bind(limit) .bind(limit)
.fetch_all(pool) .fetch_all(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Read error_log failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Read error_log failed: {e}")))?;
Ok(rows Ok(rows
.into_iter() .into_iter()
@@ -1203,7 +1203,7 @@ pub async fn list_recent_errors(pool: &SqlitePool, limit: i64) -> Result<Vec<Err
// Phase 2 of the feature-complete roadmap: capture thumbs + corrections on // Phase 2 of the feature-complete roadmap: capture thumbs + corrections on
// AI-generated output so the prompt builder can inject recent examples as // AI-generated output so the prompt builder can inject recent examples as
// few-shot exemplars. Storage-only here; the prompt-conditioning logic lives // few-shot exemplars. Storage-only here; the prompt-conditioning logic lives
// in kon-llm. Retrieval returns the most recent rows, narrowed to the // in magnotia-llm. Retrieval returns the most recent rows, narrowed to the
// active profile when provided so feedback does not cross profiles. // active profile when provided so feedback does not cross profiles.
#[derive(Debug, Clone, Copy, PartialEq, Eq)] #[derive(Debug, Clone, Copy, PartialEq, Eq)]
@@ -1264,7 +1264,7 @@ pub struct FeedbackRow {
pub async fn record_feedback(pool: &SqlitePool, params: RecordFeedbackParams) -> Result<i64> { pub async fn record_feedback(pool: &SqlitePool, params: RecordFeedbackParams) -> Result<i64> {
if !matches!(params.rating, -1..=1) { if !matches!(params.rating, -1..=1) {
return Err(KonError::StorageError(format!( return Err(MagnotiaError::StorageError(format!(
"invalid feedback rating {} (must be -1, 0, or 1)", "invalid feedback rating {} (must be -1, 0, or 1)",
params.rating params.rating
))); )));
@@ -1288,7 +1288,7 @@ pub async fn record_feedback(pool: &SqlitePool, params: RecordFeedbackParams) ->
.bind(profile_id) .bind(profile_id)
.fetch_one(pool) .fetch_one(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("record_feedback failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("record_feedback failed: {e}")))?;
Ok(row.get::<i64, _>("id")) Ok(row.get::<i64, _>("id"))
} }
@@ -1325,7 +1325,7 @@ pub async fn list_feedback_examples(
.bind(limit) .bind(limit)
.fetch_all(pool) .fetch_all(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("list_feedback_examples failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("list_feedback_examples failed: {e}")))?;
Ok(rows Ok(rows
.into_iter() .into_iter()
@@ -2430,7 +2430,7 @@ mod tests {
#[tokio::test] #[tokio::test]
async fn init_readonly_rejects_writes_and_serves_reads() { async fn init_readonly_rejects_writes_and_serves_reads() {
let dir = std::env::temp_dir().join(format!("kon-storage-ro-{}", std::process::id())); let dir = std::env::temp_dir().join(format!("magnotia-storage-ro-{}", std::process::id()));
std::fs::create_dir_all(&dir).unwrap(); std::fs::create_dir_all(&dir).unwrap();
let path = dir.join("ro.db"); let path = dir.join("ro.db");
let _ = std::fs::remove_file(&path); let _ = std::fs::remove_file(&path);
@@ -2482,7 +2482,7 @@ mod tests {
#[tokio::test] #[tokio::test]
async fn init_readonly_fails_when_db_missing() { async fn init_readonly_fails_when_db_missing() {
let path = std::env::temp_dir().join(format!( let path = std::env::temp_dir().join(format!(
"kon-storage-ro-missing-{}.db", "magnotia-storage-ro-missing-{}.db",
std::process::id() std::process::id()
)); ));
let _ = std::fs::remove_file(&path); let _ = std::fs::remove_file(&path);

12
crates/storage/src/file_storage.rs
View File

@@ -1,28 +1,28 @@
use std::path::PathBuf; use std::path::PathBuf;
pub fn app_data_dir() -> PathBuf { pub fn app_data_dir() -> PathBuf {
kon_core::paths::app_paths().app_data_dir() magnotia_core::paths::app_paths().app_data_dir()
} }
/// Path to the SQLite database file. /// Path to the SQLite database file.
pub fn database_path() -> PathBuf { pub fn database_path() -> PathBuf {
kon_core::paths::app_paths().database_path() magnotia_core::paths::app_paths().database_path()
} }
/// Directory for saved audio recordings. /// Directory for saved audio recordings.
pub fn recordings_dir() -> PathBuf { pub fn recordings_dir() -> PathBuf {
kon_core::paths::app_paths().recordings_dir() magnotia_core::paths::app_paths().recordings_dir()
} }
/// Directory for crash dumps written by the Rust panic hook. /// Directory for crash dumps written by the Rust panic hook.
/// Each crash is a single text file: `<unix-ts>-<short-id>.crash`. /// Each crash is a single text file: `<unix-ts>-<short-id>.crash`.
/// Used by the diagnostic-report bundler in Settings → About. /// Used by the diagnostic-report bundler in Settings → About.
pub fn crashes_dir() -> PathBuf { pub fn crashes_dir() -> PathBuf {
kon_core::paths::app_paths().crashes_dir() magnotia_core::paths::app_paths().crashes_dir()
} }
/// Directory for the rolling Rust log file (kon.log + rotated kon.log.1, etc). /// Directory for the rolling Rust log file (magnotia.log + rotated magnotia.log.1, etc).
/// Subscribers configured in src-tauri/src/lib.rs at startup. /// Subscribers configured in src-tauri/src/lib.rs at startup.
pub fn logs_dir() -> PathBuf { pub fn logs_dir() -> PathBuf {
kon_core::paths::app_paths().logs_dir() magnotia_core::paths::app_paths().logs_dir()
} }

16
crates/storage/src/migrations.rs
View File

@@ -1,4 +1,4 @@
use kon_core::error::{KonError, Result}; use magnotia_core::error::{MagnotiaError, Result};
use sqlx::SqlitePool; use sqlx::SqlitePool;
/// Each migration is a (version, description, sql) tuple. /// Each migration is a (version, description, sql) tuple.
@@ -553,19 +553,19 @@ async fn run_migrations_slice(pool: &SqlitePool, migrations: &[(i64, &str, &str)
) )
.execute(pool) .execute(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Schema version table creation failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Schema version table creation failed: {e}")))?;
let current: i64 = sqlx::query_scalar("SELECT COALESCE(MAX(version), 0) FROM schema_version") let current: i64 = sqlx::query_scalar("SELECT COALESCE(MAX(version), 0) FROM schema_version")
.fetch_one(pool) .fetch_one(pool)
.await .await
.map_err(|e| KonError::StorageError(format!("Schema version query failed: {e}")))?; .map_err(|e| MagnotiaError::StorageError(format!("Schema version query failed: {e}")))?;
for (version, description, sql) in migrations { for (version, description, sql) in migrations {
if *version > current { if *version > current {
log::info!("Running migration {}: {}", version, description); log::info!("Running migration {}: {}", version, description);
let mut tx = pool.begin().await.map_err(|e| { let mut tx = pool.begin().await.map_err(|e| {
KonError::StorageError(format!("Migration {} tx begin failed: {e}", version)) MagnotiaError::StorageError(format!("Migration {} tx begin failed: {e}", version))
})?; })?;
for statement in split_statements(sql) { for statement in split_statements(sql) {
@@ -573,7 +573,7 @@ async fn run_migrations_slice(pool: &SqlitePool, migrations: &[(i64, &str, &str)
.execute(&mut *tx) .execute(&mut *tx)
.await .await
.map_err(|e| { .map_err(|e| {
KonError::StorageError(format!("Migration {} failed: {e}", version)) MagnotiaError::StorageError(format!("Migration {} failed: {e}", version))
})?; })?;
} }
@@ -583,11 +583,11 @@ async fn run_migrations_slice(pool: &SqlitePool, migrations: &[(i64, &str, &str)
.execute(&mut *tx) .execute(&mut *tx)
.await .await
.map_err(|e| { .map_err(|e| {
KonError::StorageError(format!("Migration version record failed: {e}")) MagnotiaError::StorageError(format!("Migration version record failed: {e}"))
})?; })?;
tx.commit().await.map_err(|e| { tx.commit().await.map_err(|e| {
KonError::StorageError(format!("Migration {} commit failed: {e}", version)) MagnotiaError::StorageError(format!("Migration {} commit failed: {e}", version))
})?; })?;
log::info!("Migration {} complete", version); log::info!("Migration {} complete", version);
@@ -947,7 +947,7 @@ mod tests {
// dictionary.id is INTEGER PK AUTOINCREMENT (see v2); let SQLite assign rowids. // dictionary.id is INTEGER PK AUTOINCREMENT (see v2); let SQLite assign rowids.
sqlx::query( sqlx::query(
"INSERT INTO dictionary (term, note, created_at) VALUES \ "INSERT INTO dictionary (term, note, created_at) VALUES \
('Kon', '', datetime('now')), \ ('Magnotia', '', datetime('now')), \
('CORBEL', 'brand', datetime('now')), \ ('CORBEL', 'brand', datetime('now')), \
('Wren', '', datetime('now'))", ('Wren', '', datetime('now'))",
) )

20
crates/transcription/Cargo.toml
View File

@@ -1,8 +1,8 @@
[package] [package]
name = "kon-transcription" name = "magnotia-transcription"
version = "0.1.0" version = "0.1.0"
edition = "2021" edition = "2021"
description = "Speech-to-text engine wrappers, model management, and inference concurrency for Kon" description = "Speech-to-text engine wrappers, model management, and inference concurrency for Magnotia"
build = "build.rs" build = "build.rs"
[features] [features]
@@ -15,13 +15,13 @@ build = "build.rs"
# `whisper-vulkan` is a separate feature so a non-Vulkan target (Android # `whisper-vulkan` is a separate feature so a non-Vulkan target (Android
# without GPU drivers, a CPU-only Windows build) can pull in whisper-rs # without GPU drivers, a CPU-only Windows build) can pull in whisper-rs
# but skip the Vulkan backend. Build CPU-only with: # but skip the Vulkan backend. Build CPU-only with:
# cargo build -p kon-transcription --no-default-features --features whisper # cargo build -p magnotia-transcription --no-default-features --features whisper
default = ["whisper", "whisper-vulkan"] default = ["whisper", "whisper-vulkan"]
whisper = ["dep:whisper-rs", "dep:num_cpus"] whisper = ["dep:whisper-rs"]
whisper-vulkan = ["whisper-rs?/vulkan"] whisper-vulkan = ["whisper-rs?/vulkan"]
[dependencies] [dependencies]
kon-core = { path = "../core" } magnotia-core = { path = "../core" }
# Parakeet via ONNX. Whisper is handled directly via whisper-rs below. # Parakeet via ONNX. Whisper is handled directly via whisper-rs below.
transcribe-rs = { version = "0.3", default-features = false, features = ["onnx"] } transcribe-rs = { version = "0.3", default-features = false, features = ["onnx"] }
@@ -40,10 +40,6 @@ sha2 = "0.10"
# additive via the `whisper-vulkan` feature so non-GPU targets can drop it. # additive via the `whisper-vulkan` feature so non-GPU targets can drop it.
whisper-rs = { version = "0.16", default-features = false, optional = true } whisper-rs = { version = "0.16", default-features = false, optional = true }
# Direct whisper-rs backend (WhisperRsBackend): thread pool sizing.
# Gated alongside whisper-rs since no other code in this crate needs it.
num_cpus = { version = "1", optional = true }
# Typed error enum used by WhisperRsBackend + elsewhere. Kept # Typed error enum used by WhisperRsBackend + elsewhere. Kept
# unconditional because it is a derive-macro crate with negligible # unconditional because it is a derive-macro crate with negligible
# build cost. # build cost.
@@ -53,6 +49,10 @@ thiserror = "2"
tracing = "0.1" tracing = "0.1"
[dev-dependencies] [dev-dependencies]
# TcpListener fixture for the download resume tests (mirrors kon-llm). # TcpListener fixture for the download resume tests (mirrors magnotia-llm).
tokio = { version = "1", features = ["rt", "sync", "net", "io-util", "macros"] } tokio = { version = "1", features = ["rt", "sync", "net", "io-util", "macros"] }
tempfile = "3" tempfile = "3"
# Test-only — used by tests/thread_sweep.rs to label physical vs logical
# core counts in the scaling table. Production code uses the
# `magnotia_core::constants::inference_thread_count` helper instead.
num_cpus = "1"

6
crates/transcription/build.rs
View File

@@ -11,7 +11,7 @@
//! workspace ever pulls `tokenizers` into the dependency graph on a //! workspace ever pulls `tokenizers` into the dependency graph on a
//! Windows target. If we ever legitimately need it we can reintroduce //! Windows target. If we ever legitimately need it we can reintroduce
//! it via a sidecar (isolated process, separate CRT) rather than //! it via a sidecar (isolated process, separate CRT) rather than
//! linking it into `kon_lib`. //! linking it into `magnotia_lib`.
//! //!
//! The check is advisory on non-Windows targets — it still prints a //! The check is advisory on non-Windows targets — it still prints a
//! cargo:warning if `tokenizers` appears, so the Windows failure isn't //! cargo:warning if `tokenizers` appears, so the Windows failure isn't
@@ -56,7 +56,7 @@ fn main() {
if target_os == "windows" { if target_os == "windows" {
panic!( panic!(
"kon-transcription: the `tokenizers` crate appears in Cargo.lock and this is a \ "magnotia-transcription: the `tokenizers` crate appears in Cargo.lock and this is a \
Windows build. Linking `whisper-rs-sys` + `tokenizers` in the same binary has \ Windows build. Linking `whisper-rs-sys` + `tokenizers` in the same binary has \
been a persistent MSVC C-runtime conflict (see Whispering v7.11.0). Route any \ been a persistent MSVC C-runtime conflict (see Whispering v7.11.0). Route any \
tokenizer usage through an out-of-process sidecar instead, or gate it off for \ tokenizer usage through an out-of-process sidecar instead, or gate it off for \
@@ -65,7 +65,7 @@ fn main() {
} }
println!( println!(
"cargo:warning=kon-transcription: `tokenizers` crate is in the dependency graph. \ "cargo:warning=magnotia-transcription: `tokenizers` crate is in the dependency graph. \
This build is non-Windows so the link will succeed, but Windows builds will panic \ This build is non-Windows so the link will succeed, but Windows builds will panic \
at build time per docs/whisper-ecosystem/brief.md item #6. Isolate tokenizer usage \ at build time per docs/whisper-ecosystem/brief.md item #6. Isolate tokenizer usage \
in a sidecar before a Windows ship." in a sidecar before a Windows ship."

6
crates/transcription/src/concurrency.rs
View File

@@ -1,7 +1,7 @@
use std::sync::Arc; use std::sync::Arc;
use kon_core::error::{KonError, Result}; use magnotia_core::error::{MagnotiaError, Result};
use kon_core::types::{AudioSamples, TranscriptionOptions}; use magnotia_core::types::{AudioSamples, TranscriptionOptions};
use crate::local_engine::{LocalEngine, TimedTranscript}; use crate::local_engine::{LocalEngine, TimedTranscript};
@@ -14,5 +14,5 @@ pub async fn run_inference(
) -> Result<TimedTranscript> { ) -> Result<TimedTranscript> {
tokio::task::spawn_blocking(move || engine.transcribe_sync(&audio, &options)) tokio::task::spawn_blocking(move || engine.transcribe_sync(&audio, &options))
.await .await
.map_err(|e| KonError::TranscriptionFailed(format!("Task join error: {e}")))? .map_err(|e| MagnotiaError::TranscriptionFailed(format!("Task join error: {e}")))?
} }

16
crates/transcription/src/local_engine.rs
View File

@@ -4,8 +4,8 @@ use std::time::Instant;
use transcribe_rs::{SpeechModel, TranscribeOptions, TranscriptionResult}; use transcribe_rs::{SpeechModel, TranscribeOptions, TranscriptionResult};
use kon_core::error::{KonError, Result}; use magnotia_core::error::{MagnotiaError, Result};
use kon_core::types::{ use magnotia_core::types::{
AudioSamples, EngineName, ModelId, Segment, Transcript, TranscriptionOptions, AudioSamples, EngineName, ModelId, Segment, Transcript, TranscriptionOptions,
}; };
@@ -28,7 +28,7 @@ pub struct SpeechModelAdapter(pub Box<dyn SpeechModel + Send>);
impl Transcriber for SpeechModelAdapter { impl Transcriber for SpeechModelAdapter {
fn capabilities(&self) -> TranscriberCapabilities { fn capabilities(&self) -> TranscriberCapabilities {
TranscriberCapabilities { TranscriberCapabilities {
sample_rate: kon_core::constants::WHISPER_SAMPLE_RATE, sample_rate: magnotia_core::constants::WHISPER_SAMPLE_RATE,
channels: 1, channels: 1,
supports_initial_prompt: false, supports_initial_prompt: false,
} }
@@ -48,7 +48,7 @@ impl Transcriber for SpeechModelAdapter {
let result: TranscriptionResult = self let result: TranscriptionResult = self
.0 .0
.transcribe(samples, &opts) .transcribe(samples, &opts)
.map_err(|e| KonError::TranscriptionFailed(e.to_string()))?; .map_err(|e| MagnotiaError::TranscriptionFailed(e.to_string()))?;
Ok(result Ok(result
.segments .segments
.unwrap_or_default() .unwrap_or_default()
@@ -140,7 +140,7 @@ impl LocalEngine {
options: &TranscriptionOptions, options: &TranscriptionOptions,
) -> Result<TimedTranscript> { ) -> Result<TimedTranscript> {
let mut guard = self.engine.lock().unwrap_or_else(|e| e.into_inner()); let mut guard = self.engine.lock().unwrap_or_else(|e| e.into_inner());
let backend = guard.as_mut().ok_or(KonError::EngineNotLoaded)?; let backend = guard.as_mut().ok_or(MagnotiaError::EngineNotLoaded)?;
let start = Instant::now(); let start = Instant::now();
let segments = backend.transcribe_sync(audio.samples(), options)?; let segments = backend.transcribe_sync(audio.samples(), options)?;
@@ -160,7 +160,7 @@ impl LocalEngine {
/// Thin wrapper over `ParakeetModel` that overrides `transcribe_raw` to /// Thin wrapper over `ParakeetModel` that overrides `transcribe_raw` to
/// request word-granularity segments. `transcribe-rs` 0.3's trait impl for /// request word-granularity segments. `transcribe-rs` 0.3's trait impl for
/// `ParakeetModel::transcribe_raw` ignores `TranscribeOptions` and uses /// `ParakeetModel::transcribe_raw` ignores `TranscribeOptions` and uses
/// `TimestampGranularity::Token` (per-subword) — which surfaces in Kon as /// `TimestampGranularity::Token` (per-subword) — which surfaces in Magnotia as
/// "T Est Ing . One , Two , Three" output. The concrete-type method /// "T Est Ing . One , Two , Three" output. The concrete-type method
/// `ParakeetModel::transcribe_with` accepts `ParakeetParams` with an /// `ParakeetModel::transcribe_with` accepts `ParakeetParams` with an
/// explicit granularity; this wrapper exposes that to the trait object. /// explicit granularity; this wrapper exposes that to the trait object.
@@ -197,7 +197,7 @@ impl transcribe_rs::SpeechModel for ParakeetWordGranularity {
pub fn load_parakeet(model_dir: &Path) -> Result<Box<dyn Transcriber + Send>> { pub fn load_parakeet(model_dir: &Path) -> Result<Box<dyn Transcriber + Send>> {
use transcribe_rs::onnx::Quantization; use transcribe_rs::onnx::Quantization;
let model = transcribe_rs::onnx::parakeet::ParakeetModel::load(model_dir, &Quantization::Int8) let model = transcribe_rs::onnx::parakeet::ParakeetModel::load(model_dir, &Quantization::Int8)
.map_err(|e| KonError::TranscriptionFailed(format!("Failed to load Parakeet: {e}")))?; .map_err(|e| MagnotiaError::TranscriptionFailed(format!("Failed to load Parakeet: {e}")))?;
Ok(Box::new(SpeechModelAdapter(Box::new( Ok(Box::new(SpeechModelAdapter(Box::new(
ParakeetWordGranularity(model), ParakeetWordGranularity(model),
)))) ))))
@@ -207,7 +207,7 @@ pub fn load_parakeet(model_dir: &Path) -> Result<Box<dyn Transcriber + Send>> {
#[cfg(feature = "whisper")] #[cfg(feature = "whisper")]
pub fn load_whisper(model_path: &Path) -> Result<Box<dyn Transcriber + Send>> { pub fn load_whisper(model_path: &Path) -> Result<Box<dyn Transcriber + Send>> {
let backend = WhisperRsBackend::load(model_path) let backend = WhisperRsBackend::load(model_path)
.map_err(|e| KonError::TranscriptionFailed(format!("Failed to load Whisper: {e}")))?; .map_err(|e| MagnotiaError::TranscriptionFailed(format!("Failed to load Whisper: {e}")))?;
Ok(Box::new(backend)) Ok(Box::new(backend))
} }

56
crates/transcription/src/model_manager.rs
View File

@@ -2,9 +2,9 @@ use std::collections::HashSet;
use std::path::{Path, PathBuf}; use std::path::{Path, PathBuf};
use std::sync::{LazyLock, Mutex}; use std::sync::{LazyLock, Mutex};
use kon_core::error::{KonError, Result}; use magnotia_core::error::{MagnotiaError, Result};
use kon_core::model_registry::{find_model, ModelFile}; use magnotia_core::model_registry::{find_model, ModelFile};
use kon_core::types::{DownloadProgress, ModelId}; use magnotia_core::types::{DownloadProgress, ModelId};
static ACTIVE_DOWNLOADS: LazyLock<Mutex<HashSet<String>>> = static ACTIVE_DOWNLOADS: LazyLock<Mutex<HashSet<String>>> =
LazyLock::new(|| Mutex::new(HashSet::new())); LazyLock::new(|| Mutex::new(HashSet::new()));
@@ -18,9 +18,9 @@ impl DownloadReservation {
let id = id.as_str().to_string(); let id = id.as_str().to_string();
let mut active = ACTIVE_DOWNLOADS let mut active = ACTIVE_DOWNLOADS
.lock() .lock()
.map_err(|_| KonError::DownloadFailed("download lock poisoned".into()))?; .map_err(|_| MagnotiaError::DownloadFailed("download lock poisoned".into()))?;
if !active.insert(id.clone()) { if !active.insert(id.clone()) {
return Err(KonError::DownloadFailed(format!( return Err(MagnotiaError::DownloadFailed(format!(
"download already in progress for {id}" "download already in progress for {id}"
))); )));
} }
@@ -37,15 +37,15 @@ impl Drop for DownloadReservation {
} }
/// Resolve the models storage directory. /// Resolve the models storage directory.
/// Windows: %LOCALAPPDATA%/kon/models /// Windows: %LOCALAPPDATA%/magnotia/models
/// Unix: ~/.kon/models /// Unix: ~/.magnotia/models
pub fn models_dir() -> PathBuf { pub fn models_dir() -> PathBuf {
kon_core::paths::app_paths().models_dir() magnotia_core::paths::app_paths().models_dir()
} }
/// Get the directory path where a specific model's files are stored. /// Get the directory path where a specific model's files are stored.
pub fn model_dir(id: &ModelId) -> PathBuf { pub fn model_dir(id: &ModelId) -> PathBuf {
kon_core::paths::app_paths().speech_model_dir(id) magnotia_core::paths::app_paths().speech_model_dir(id)
} }
/// Check whether all files for a model have been downloaded. /// Check whether all files for a model have been downloaded.
@@ -61,7 +61,7 @@ pub fn is_downloaded(id: &ModelId) -> bool {
/// List all downloaded model IDs. /// List all downloaded model IDs.
pub fn list_downloaded() -> Vec<ModelId> { pub fn list_downloaded() -> Vec<ModelId> {
kon_core::model_registry::all_models() magnotia_core::model_registry::all_models()
.iter() .iter()
.filter(|m| is_downloaded(&m.id)) .filter(|m| is_downloaded(&m.id))
.map(|m| m.id.clone()) .map(|m| m.id.clone())
@@ -74,13 +74,13 @@ pub fn list_downloaded() -> Vec<ModelId> {
/// For files that declare a `sha256` checksum we validate an existing /// For files that declare a `sha256` checksum we validate an existing
/// complete file before skipping the download — a truncated or /// complete file before skipping the download — a truncated or
/// tampered file gets redownloaded automatically (pattern ported from /// tampered file gets redownloaded automatically (pattern ported from
/// `kon-llm`'s model_manager, item #8 in the Whisper ecosystem brief). /// `magnotia-llm`'s model_manager, item #8 in the Whisper ecosystem brief).
pub async fn download( pub async fn download(
id: &ModelId, id: &ModelId,
progress: impl Fn(DownloadProgress) + Send + 'static, progress: impl Fn(DownloadProgress) + Send + 'static,
) -> Result<()> { ) -> Result<()> {
let _reservation = DownloadReservation::acquire(id)?; let _reservation = DownloadReservation::acquire(id)?;
let entry = find_model(id).ok_or_else(|| KonError::ModelNotFound(id.clone()))?; let entry = find_model(id).ok_or_else(|| MagnotiaError::ModelNotFound(id.clone()))?;
let dir = model_dir(id); let dir = model_dir(id);
std::fs::create_dir_all(&dir)?; std::fs::create_dir_all(&dir)?;
@@ -98,7 +98,7 @@ pub async fn download(
let _ = std::fs::remove_file(&dest); let _ = std::fs::remove_file(&dest);
} }
Err(e) => { Err(e) => {
return Err(KonError::DownloadFailed(format!( return Err(MagnotiaError::DownloadFailed(format!(
"failed to verify existing {}: {e}", "failed to verify existing {}: {e}",
file.filename file.filename
))); )));
@@ -113,10 +113,10 @@ pub async fn download(
} }
fn verified_manifest_path(dir: &Path) -> PathBuf { fn verified_manifest_path(dir: &Path) -> PathBuf {
dir.join(".kon-verified") dir.join(".magnotia-verified")
} }
fn verified_manifest_matches(entry: &kon_core::model_registry::ModelEntry, dir: &Path) -> bool { fn verified_manifest_matches(entry: &magnotia_core::model_registry::ModelEntry, dir: &Path) -> bool {
let manifest = match std::fs::read_to_string(verified_manifest_path(dir)) { let manifest = match std::fs::read_to_string(verified_manifest_path(dir)) {
Ok(contents) => contents, Ok(contents) => contents,
Err(_) => return false, Err(_) => return false,
@@ -137,7 +137,7 @@ fn verified_manifest_matches(entry: &kon_core::model_registry::ModelEntry, dir:
} }
fn write_verified_manifest( fn write_verified_manifest(
entry: &kon_core::model_registry::ModelEntry, entry: &magnotia_core::model_registry::ModelEntry,
dir: &Path, dir: &Path,
) -> std::io::Result<()> { ) -> std::io::Result<()> {
let mut lines = Vec::with_capacity(entry.files.len() + 1); let mut lines = Vec::with_capacity(entry.files.len() + 1);
@@ -193,7 +193,7 @@ async fn download_file(
let client = reqwest::Client::builder() let client = reqwest::Client::builder()
.connect_timeout(std::time::Duration::from_secs(30)) .connect_timeout(std::time::Duration::from_secs(30))
.build() .build()
.map_err(|e| KonError::DownloadFailed(e.to_string()))?; .map_err(|e| MagnotiaError::DownloadFailed(e.to_string()))?;
// Check for existing partial download (resume support) // Check for existing partial download (resume support)
let existing_bytes = if part_path.exists() { let existing_bytes = if part_path.exists() {
@@ -212,12 +212,12 @@ async fn download_file(
let response = request let response = request
.send() .send()
.await .await
.map_err(|e| KonError::DownloadFailed(e.to_string()))?; .map_err(|e| MagnotiaError::DownloadFailed(e.to_string()))?;
// If we requested Range but the server returned 200 (full file), the // If we requested Range but the server returned 200 (full file), the
// server does not support resume. Rather than blindly appending a // server does not support resume. Rather than blindly appending a
// full file on top of our partial bytes (which would produce a // full file on top of our partial bytes (which would produce a
// corrupt result), restart cleanly. This mirrors the kon-llm // corrupt result), restart cleanly. This mirrors the magnotia-llm
// ResumeUnsupported branch — item #8 of the brief. // ResumeUnsupported branch — item #8 of the brief.
// //
// For the non-resume path, we still have to validate the status: // For the non-resume path, we still have to validate the status:
@@ -234,14 +234,14 @@ async fn download_file(
false false
} }
other => { other => {
return Err(KonError::DownloadFailed(format!( return Err(MagnotiaError::DownloadFailed(format!(
"resume request returned unexpected status {other}" "resume request returned unexpected status {other}"
))); )));
} }
} }
} else { } else {
if !response.status().is_success() { if !response.status().is_success() {
return Err(KonError::DownloadFailed(format!( return Err(MagnotiaError::DownloadFailed(format!(
"download returned HTTP {} for {}", "download returned HTTP {} for {}",
response.status(), response.status(),
file.filename file.filename
@@ -288,7 +288,7 @@ async fn download_file(
} }
while let Some(chunk) = stream.next().await { while let Some(chunk) = stream.next().await {
let chunk = chunk.map_err(|e| KonError::DownloadFailed(e.to_string()))?; let chunk = chunk.map_err(|e| MagnotiaError::DownloadFailed(e.to_string()))?;
std::io::Write::write_all(&mut out, &chunk)?; std::io::Write::write_all(&mut out, &chunk)?;
hasher.update(&chunk); hasher.update(&chunk);
downloaded += chunk.len() as u64; downloaded += chunk.len() as u64;
@@ -316,7 +316,7 @@ async fn download_file(
let actual = format!("{:x}", hasher.finalize()); let actual = format!("{:x}", hasher.finalize());
if actual != file.sha256 { if actual != file.sha256 {
let _ = std::fs::remove_file(&part_path); let _ = std::fs::remove_file(&part_path);
return Err(KonError::DownloadFailed(format!( return Err(MagnotiaError::DownloadFailed(format!(
"SHA256 mismatch for {}: expected {}, got {}", "SHA256 mismatch for {}: expected {}, got {}",
file.filename, file.sha256, actual file.filename, file.sha256, actual
))); )));
@@ -354,7 +354,7 @@ mod tests {
let list = list_downloaded(); let list = list_downloaded();
// In test environment, no models are downloaded // In test environment, no models are downloaded
// This just verifies the function doesn't panic // This just verifies the function doesn't panic
assert!(list.len() <= kon_core::model_registry::all_models().len()); assert!(list.len() <= magnotia_core::model_registry::all_models().len());
} }
#[test] #[test]
@@ -478,7 +478,7 @@ mod tests {
let file = ModelFile { let file = ModelFile {
filename: leak(dest.file_name().unwrap().to_string_lossy().into_owned()), filename: leak(dest.file_name().unwrap().to_string_lossy().into_owned()),
url: leak(format!("http://{addr}/fixture.bin")), url: leak(format!("http://{addr}/fixture.bin")),
size: kon_core::types::Megabytes(0), size: magnotia_core::types::Megabytes(0),
sha256: leak(expected_sha.clone()), sha256: leak(expected_sha.clone()),
}; };
let id = ModelId::new("test-fixture"); let id = ModelId::new("test-fixture");
@@ -513,7 +513,7 @@ mod tests {
let file = ModelFile { let file = ModelFile {
filename: leak(dest.file_name().unwrap().to_string_lossy().into_owned()), filename: leak(dest.file_name().unwrap().to_string_lossy().into_owned()),
url: leak(format!("http://{addr}/fixture.bin")), url: leak(format!("http://{addr}/fixture.bin")),
size: kon_core::types::Megabytes(0), size: magnotia_core::types::Megabytes(0),
sha256: leak(expected_sha), sha256: leak(expected_sha),
}; };
let id = ModelId::new("test-fixture"); let id = ModelId::new("test-fixture");
@@ -568,7 +568,7 @@ mod tests {
let file = ModelFile { let file = ModelFile {
filename: leak(dest.file_name().unwrap().to_string_lossy().into_owned()), filename: leak(dest.file_name().unwrap().to_string_lossy().into_owned()),
url: leak(format!("http://{addr}/fixture.bin")), url: leak(format!("http://{addr}/fixture.bin")),
size: kon_core::types::Megabytes(0), size: magnotia_core::types::Megabytes(0),
sha256: leak("0".repeat(64)), sha256: leak("0".repeat(64)),
}; };
let id = ModelId::new("test-fixture"); let id = ModelId::new("test-fixture");
@@ -596,7 +596,7 @@ mod tests {
let file = ModelFile { let file = ModelFile {
filename: leak(dest.file_name().unwrap().to_string_lossy().into_owned()), filename: leak(dest.file_name().unwrap().to_string_lossy().into_owned()),
url: leak(format!("http://{addr}/fixture.bin")), url: leak(format!("http://{addr}/fixture.bin")),
size: kon_core::types::Megabytes(0), size: magnotia_core::types::Megabytes(0),
sha256: leak("deadbeef".repeat(8)), sha256: leak("deadbeef".repeat(8)),
}; };
let id = ModelId::new("test-fixture"); let id = ModelId::new("test-fixture");

4
crates/transcription/src/transcriber.rs
View File

@@ -9,8 +9,8 @@
//! `whisper` feature — `WhisperRsBackend` (direct whisper-rs, the only //! `whisper` feature — `WhisperRsBackend` (direct whisper-rs, the only
//! path that pipes `initial_prompt`). //! path that pipes `initial_prompt`).
use kon_core::error::Result; use magnotia_core::error::Result;
use kon_core::types::{Segment, TranscriptionOptions}; use magnotia_core::types::{Segment, TranscriptionOptions};
/// Static capabilities a `Transcriber` advertises to callers. /// Static capabilities a `Transcriber` advertises to callers.
/// ///

17
crates/transcription/src/whisper_rs_backend.rs
View File

@@ -10,8 +10,10 @@ use std::path::Path;
use whisper_rs::{FullParams, SamplingStrategy, WhisperContext, WhisperContextParameters}; use whisper_rs::{FullParams, SamplingStrategy, WhisperContext, WhisperContextParameters};
use kon_core::error::{KonError, Result}; use magnotia_core::error::{MagnotiaError, Result};
use kon_core::types::{Segment, TranscriptionOptions}; use magnotia_core::hardware::vulkan_loader_available;
use magnotia_core::tuning::{inference_thread_count, Workload};
use magnotia_core::types::{Segment, TranscriptionOptions};
use crate::transcriber::{Transcriber, TranscriberCapabilities}; use crate::transcriber::{Transcriber, TranscriberCapabilities};
@@ -40,7 +42,7 @@ impl WhisperRsBackend {
impl Transcriber for WhisperRsBackend { impl Transcriber for WhisperRsBackend {
fn capabilities(&self) -> TranscriberCapabilities { fn capabilities(&self) -> TranscriberCapabilities {
TranscriberCapabilities { TranscriberCapabilities {
sample_rate: kon_core::constants::WHISPER_SAMPLE_RATE, sample_rate: magnotia_core::constants::WHISPER_SAMPLE_RATE,
channels: 1, channels: 1,
supports_initial_prompt: true, supports_initial_prompt: true,
} }
@@ -63,7 +65,7 @@ impl Transcriber for WhisperRsBackend {
); );
let mut state = self.ctx.create_state().map_err(|e| { let mut state = self.ctx.create_state().map_err(|e| {
KonError::TranscriptionFailed(WhisperBackendError::State(e.to_string()).to_string()) MagnotiaError::TranscriptionFailed(WhisperBackendError::State(e.to_string()).to_string())
})?; })?;
let mut params = FullParams::new(SamplingStrategy::Greedy { best_of: 1 }); let mut params = FullParams::new(SamplingStrategy::Greedy { best_of: 1 });
@@ -77,13 +79,14 @@ impl Transcriber for WhisperRsBackend {
params.set_initial_prompt(prompt); params.set_initial_prompt(prompt);
} }
} }
params.set_n_threads(num_cpus::get() as i32); let gpu_offloaded = cfg!(feature = "whisper-vulkan") && vulkan_loader_available();
params.set_n_threads(inference_thread_count(Workload::Whisper, gpu_offloaded) as i32);
params.set_print_special(false); params.set_print_special(false);
params.set_print_progress(false); params.set_print_progress(false);
params.set_print_realtime(false); params.set_print_realtime(false);
state.full(params, samples).map_err(|e| { state.full(params, samples).map_err(|e| {
KonError::TranscriptionFailed( MagnotiaError::TranscriptionFailed(
WhisperBackendError::Transcribe(e.to_string()).to_string(), WhisperBackendError::Transcribe(e.to_string()).to_string(),
) )
})?; })?;
@@ -98,7 +101,7 @@ impl Transcriber for WhisperRsBackend {
let text = seg let text = seg
.to_str() .to_str()
.map_err(|e| { .map_err(|e| {
KonError::TranscriptionFailed( MagnotiaError::TranscriptionFailed(
WhisperBackendError::Transcribe(e.to_string()).to_string(), WhisperBackendError::Transcribe(e.to_string()).to_string(),
) )
})? })?

133
crates/transcription/tests/jfk_bench.rs Normal file
View File

@@ -0,0 +1,133 @@
//! Benchmark: load the JFK WAV from disk, transcribe it via whisper-rs.
//! Reports cold-load time, transcribe time, RTF, peak RSS.
//!
//! Gated on env vars so it never runs in CI without setup:
//! MAGNOTIA_WHISPER_TEST_MODEL=/path/to/ggml-tiny.bin
//! MAGNOTIA_WHISPER_TEST_AUDIO=/path/to/jfk.wav
use std::env;
use std::time::Instant;
#[test]
fn jfk_transcription_benchmark() {
let Ok(model_path) = env::var("MAGNOTIA_WHISPER_TEST_MODEL") else {
eprintln!("MAGNOTIA_WHISPER_TEST_MODEL not set — skipping");
return;
};
let Ok(audio_path) = env::var("MAGNOTIA_WHISPER_TEST_AUDIO") else {
eprintln!("MAGNOTIA_WHISPER_TEST_AUDIO not set — skipping");
return;
};
use whisper_rs::{FullParams, SamplingStrategy, WhisperContext, WhisperContextParameters};
eprintln!("[bench] loading WAV: {audio_path}");
let bytes = std::fs::read(&audio_path).expect("read wav");
// Minimal RIFF/WAV parse: skip the 44-byte canonical header for PCM-16-mono-16kHz.
// Sanity-check magic bytes + format.
assert_eq!(&bytes[0..4], b"RIFF", "expected RIFF");
assert_eq!(&bytes[8..12], b"WAVE", "expected WAVE");
let sample_rate = u32::from_le_bytes(bytes[24..28].try_into().unwrap());
let channels = u16::from_le_bytes(bytes[22..24].try_into().unwrap());
let bits = u16::from_le_bytes(bytes[34..36].try_into().unwrap());
eprintln!("[bench] wav spec: {} Hz, {} ch, {}-bit", sample_rate, channels, bits);
assert_eq!(sample_rate, 16_000, "expected 16 kHz wav");
assert_eq!(channels, 1, "expected mono");
assert_eq!(bits, 16, "expected 16-bit PCM");
let pcm = &bytes[44..];
let samples: Vec<f32> = pcm
.chunks_exact(2)
.map(|c| i16::from_le_bytes([c[0], c[1]]) as f32 / 32768.0)
.collect();
let audio_secs = samples.len() as f64 / sample_rate as f64;
eprintln!(
"[bench] audio length: {} samples = {:.2}s",
samples.len(),
audio_secs
);
let rss_before_load_kb = read_rss_kb();
eprintln!("[bench] RSS before model load: {} MB", rss_before_load_kb / 1024);
let load_start = Instant::now();
let ctx = WhisperContext::new_with_params(&model_path, WhisperContextParameters::default())
.expect("whisper model load");
let load_dur = load_start.elapsed();
eprintln!("[bench] model load: {:.2}s", load_dur.as_secs_f64());
let rss_after_load_kb = read_rss_kb();
eprintln!("[bench] RSS after model load: {} MB (delta +{} MB)",
rss_after_load_kb / 1024,
(rss_after_load_kb.saturating_sub(rss_before_load_kb)) / 1024);
let mut state = ctx.create_state().expect("whisper state");
let mut params = FullParams::new(SamplingStrategy::Greedy { best_of: 1 });
params.set_language(Some("en"));
params.set_n_threads(6);
params.set_print_special(false);
params.set_print_progress(false);
params.set_print_realtime(false);
// Cold transcription (first run)
let cold_start = Instant::now();
state.full(params, &samples).expect("transcribe cold");
let cold_dur = cold_start.elapsed();
let n = state.full_n_segments();
let mut full_text = String::new();
for i in 0..n {
let seg = state.get_segment(i).expect("get_segment");
full_text.push_str(seg.to_str().unwrap_or(""));
}
eprintln!(
"[bench] cold transcribe: {:.2}s ({} segments, RTF={:.3})",
cold_dur.as_secs_f64(),
n,
cold_dur.as_secs_f64() / audio_secs
);
eprintln!("[bench] transcript: {}", full_text.trim());
let rss_after_cold_kb = read_rss_kb();
eprintln!("[bench] RSS after cold xc: {} MB", rss_after_cold_kb / 1024);
// Warm transcription (second run, same state)
let mut state2 = ctx.create_state().expect("whisper state 2");
let mut params2 = FullParams::new(SamplingStrategy::Greedy { best_of: 1 });
params2.set_language(Some("en"));
params2.set_n_threads(6);
params2.set_print_special(false);
params2.set_print_progress(false);
params2.set_print_realtime(false);
let warm_start = Instant::now();
state2.full(params2, &samples).expect("transcribe warm");
let warm_dur = warm_start.elapsed();
eprintln!(
"[bench] warm transcribe: {:.2}s (RTF={:.3})",
warm_dur.as_secs_f64(),
warm_dur.as_secs_f64() / audio_secs
);
let rss_final_kb = read_rss_kb();
eprintln!("[bench] RSS final: {} MB", rss_final_kb / 1024);
eprintln!("");
eprintln!("=== SUMMARY ===");
eprintln!("audio: {:.2}s", audio_secs);
eprintln!("model_load: {:.2}s", load_dur.as_secs_f64());
eprintln!("cold xc: {:.2}s RTF={:.3}", cold_dur.as_secs_f64(), cold_dur.as_secs_f64() / audio_secs);
eprintln!("warm xc: {:.2}s RTF={:.3}", warm_dur.as_secs_f64(), warm_dur.as_secs_f64() / audio_secs);
eprintln!("RSS peak: {} MB", rss_final_kb / 1024);
}
fn read_rss_kb() -> u64 {
let pid = std::process::id();
let s = std::fs::read_to_string(format!("/proc/{pid}/status")).unwrap_or_default();
for line in s.lines() {
if let Some(rest) = line.strip_prefix("VmRSS:") {
return rest.trim().split_whitespace().next()
.and_then(|n| n.parse::<u64>().ok())
.unwrap_or(0);
}
}
0
}

140
crates/transcription/tests/thread_sweep.rs Normal file
View File

@@ -0,0 +1,140 @@
//! Thread-count scaling sweep for Whisper Tiny.
//! Runs the JFK clip at n_threads = 1, 2, 4, 6, 8, 12, prints RTF tables.
//! Env-gated by `MAGNOTIA_WHISPER_TEST_MODEL` + `MAGNOTIA_WHISPER_TEST_AUDIO`.
//!
//! Now prints multiple panels driven by `MAGNOTIA_POWER_STATE_OVERRIDE` so
//! the helper's predicted thread count for each (power, GPU) combination
//! can be compared against the empirical RTF data.
use std::env;
use std::time::Instant;
use magnotia_core::hardware::vulkan_loader_available;
use magnotia_core::tuning::{inference_thread_count, Workload};
use whisper_rs::{FullParams, SamplingStrategy, WhisperContext, WhisperContextParameters};
#[test]
fn whisper_thread_count_sweep() {
let Ok(model_path) = env::var("MAGNOTIA_WHISPER_TEST_MODEL") else {
return;
};
let Ok(audio_path) = env::var("MAGNOTIA_WHISPER_TEST_AUDIO") else {
return;
};
let bytes = std::fs::read(&audio_path).expect("read wav");
let sample_rate = u32::from_le_bytes(bytes[24..28].try_into().unwrap());
let pcm = &bytes[44..];
let samples: Vec<f32> = pcm
.chunks_exact(2)
.map(|c| i16::from_le_bytes([c[0], c[1]]) as f32 / 32768.0)
.collect();
let audio_secs = samples.len() as f64 / sample_rate as f64;
eprintln!("[sweep] audio: {:.2}s @ {} Hz", audio_secs, sample_rate);
let logical = num_cpus::get();
let physical = num_cpus::get_physical();
eprintln!("[sweep] CPU: physical={}, logical={}", physical, logical);
let ctx = WhisperContext::new_with_params(&model_path, WhisperContextParameters::default())
.expect("model load");
// Warm-up pass to prime caches.
{
let mut state = ctx.create_state().expect("state");
let mut params = FullParams::new(SamplingStrategy::Greedy { best_of: 1 });
params.set_language(Some("en"));
params.set_n_threads(physical as i32);
params.set_print_special(false);
params.set_print_progress(false);
params.set_print_realtime(false);
state.full(params, &samples).expect("warmup");
}
let mut targets: Vec<i32> = vec![1, 2, 4, physical as i32, logical as i32];
if logical >= 8 && !targets.contains(&8) {
targets.push(8);
}
targets.sort();
targets.dedup();
// Snapshot the runtime Vulkan loader status once. The actual whisper
// context above already initialised whichever backend it could; the
// GPU panels below differ only in label and predicted-helper-pick.
// The runtime RTF rows are produced by the same backend the warm-up
// used.
let vulkan_runtime_ok = cfg!(feature = "whisper-vulkan") && vulkan_loader_available();
eprintln!(
"[sweep] whisper-vulkan feature: {}, libvulkan resolvable at runtime: {}",
cfg!(feature = "whisper-vulkan"),
vulkan_runtime_ok
);
// Four panels: CPU and GPU axes for the predicted-helper-pick column,
// crossed with AC and battery via MAGNOTIA_POWER_STATE_OVERRIDE.
let panels = [
("AC, CPU", "ac", false),
("AC, GPU (Vulkan)", "ac", true),
("battery, CPU", "battery", false),
("battery, GPU (Vulkan)", "battery", true),
];
for (label, power, gpu_offloaded_for_helper) in panels {
env::set_var("MAGNOTIA_POWER_STATE_OVERRIDE", power);
let helper_pick = inference_thread_count(Workload::Whisper, gpu_offloaded_for_helper);
run_sweep_panel(
label,
helper_pick,
&ctx,
&samples,
audio_secs,
&targets,
);
}
env::remove_var("MAGNOTIA_POWER_STATE_OVERRIDE");
}
fn run_sweep_panel(
label: &str,
helper_pick: usize,
ctx: &WhisperContext,
samples: &[f32],
audio_secs: f64,
targets: &[i32],
) {
eprintln!("");
eprintln!(
"=== n_threads scaling: {label} (helper picks: {helper_pick}) ==="
);
eprintln!("n_threads | xc_time | RTF | speedup_vs_1");
eprintln!("----------|---------|--------|-------------");
let mut baseline_dur: Option<f64> = None;
for n in targets {
// Two runs, take the min — best-case after L2/L3 warm.
let mut best = f64::MAX;
for _ in 0..2 {
let mut state = ctx.create_state().expect("state");
let mut params = FullParams::new(SamplingStrategy::Greedy { best_of: 1 });
params.set_language(Some("en"));
params.set_n_threads(*n);
params.set_print_special(false);
params.set_print_progress(false);
params.set_print_realtime(false);
let t = Instant::now();
state.full(params, samples).expect("transcribe");
let dur = t.elapsed().as_secs_f64();
if dur < best {
best = dur;
}
}
let rtf = best / audio_secs;
let speedup = baseline_dur.map(|b| b / best).unwrap_or(1.0);
if baseline_dur.is_none() {
baseline_dur = Some(best);
}
eprintln!(
"{:>9} | {:>6.2}s | {:>6.3} | {:>6.2}x",
n, best, rtf, speedup
);
}
}

6
crates/transcription/tests/whisper_rs_smoke.rs
View File

@@ -1,17 +1,17 @@
//! Smoke test: whisper-rs 0.16 loads a GGUF model, transcribes silence, and //! Smoke test: whisper-rs 0.16 loads a GGUF model, transcribes silence, and
//! accepts set_initial_prompt without panicking. //! accepts set_initial_prompt without panicking.
//! //!
//! Runs only when `KON_WHISPER_TEST_MODEL` is set to the path of a //! Runs only when `MAGNOTIA_WHISPER_TEST_MODEL` is set to the path of a
//! ggml/gguf whisper model on disk. Otherwise the test exits quiet. //! ggml/gguf whisper model on disk. Otherwise the test exits quiet.
use std::env; use std::env;
#[test] #[test]
fn whisper_rs_smoke_loads_and_transcribes() { fn whisper_rs_smoke_loads_and_transcribes() {
let model_path = match env::var("KON_WHISPER_TEST_MODEL") { let model_path = match env::var("MAGNOTIA_WHISPER_TEST_MODEL") {
Ok(p) => p, Ok(p) => p,
Err(_) => { Err(_) => {
eprintln!("KON_WHISPER_TEST_MODEL not set — skipping"); eprintln!("MAGNOTIA_WHISPER_TEST_MODEL not set — skipping");
return; return;
} }
}; };

331
docs/audit/phase0-cartography.md Normal file
View File

@@ -0,0 +1,331 @@
# Phase 0 — Cartography
*Acquisition-grade audit, Phase 0 deliverable. Date: 2026-04-30. Branch: `claude/rebrand-to-magnotia-UWYkg`.*
This is a survey, not a verdict. It maps what exists, sizes the surface, and flags every place the README disagrees with the code. Phase 1 (lean-pass) and Phase 2 (architecture conformance) consume this as input.
---
## 1. Workspace shape
| Layer | Path | Notes |
|---|---|---|
| Rust workspace root | `Cargo.toml` | `members = ["src-tauri", "crates/*"]`, `resolver = "2"` |
| Tauri app crate | `src-tauri/` | Library `magnotia_lib` + binary `magnotia` |
| Library crates | `crates/*` (×9) | See §3 |
| MCP standalone binary | `crates/mcp/` | Bin `magnotia-mcp` (separate process from main app) |
| Svelte frontend | `src/` | SvelteKit, Svelte 5 runes, Tailwind 4 |
| Static assets | `static/`, `src-tauri/icons/`, `src-tauri/resources/` | |
**Binaries shipped (2):** `magnotia` (Tauri app), `magnotia-mcp` (stdio MCP server).
---
## 2. Lines of code
| Area | LOC | Files |
|---|---:|---:|
| `crates/` (Rust, all 9 crates) | 13,261 | 52 |
| `src-tauri/` (Rust) | 8,330 | 27 |
| Frontend (Svelte/TS/JS, excl. design-system) | 15,192 | ~80 |
| `src/design-system/` (reference kit, not live code) | 1,412 | — |
| **Total active** | **~36,800** | |
### Largest files (top complexity candidates)
| LOC | File |
|---:|---|
| 2,534 | `crates/storage/src/database.rs` |
| 2,250 | `src/lib/pages/SettingsPage.svelte` |
| 1,737 | `src-tauri/src/commands/live.rs` |
| 1,185 | `crates/storage/src/migrations.rs` |
| 1,081 | `src/lib/pages/DictationPage.svelte` |
| 897 | `src/lib/pages/HistoryPage.svelte` |
| 790 | `src-tauri/src/commands/paste.rs` |
| 735 | `crates/transcription/src/streaming/rms_vad.rs` |
| 725 | `src/lib/pages/TasksPage.svelte` |
| 720 | `src-tauri/src/commands/models.rs` |
| 697 | `src/lib/stores/page.svelte.ts` |
> **Phase 1 candidate.** `database.rs` (2.5k), `SettingsPage.svelte` (2.25k), and `live.rs` (1.7k) are each large enough to deserve a structural review in isolation. HANDOVER.md already flags `SettingsPage` as needing decomposition into 7 progressive-disclosure groups.
---
## 3. Crate inventory
| Crate | LOC | Files | `pub` items (lib.rs / total) | Tests |
|---|---:|---:|---:|---:|
| `magnotia-core` | 1,212 | 9 | 10 / 104 | 16 |
| `magnotia-audio` | 1,533 | 8 | 14 / 38 | 14 |
| `magnotia-transcription` | 2,617 | 12 | 13 / 51 | 51 |
| `magnotia-llm` | 1,330 | 6 | 27 / 56 | 17 |
| `magnotia-ai-formatting` | 1,502 | 6 | 9 / 21 | 47 |
| `magnotia-storage` | 3,771 | 4 | 6 / 69 | 60 |
| `magnotia-hotkey` | 632 | 3 | 5 / 14 | 4 |
| `magnotia-cloud-providers` | 80 | 2 | 2 / 3 | 2 |
| `magnotia-mcp` | 584 | 2 | 8 / 8 | 9 |
| `src-tauri` (`magnotia` + `magnotia_lib`) | 8,330 | 27 | n/a | 67 |
| **Total** | **21,591** | | | **287** |
**Outliers worth a Phase-2 look:**
- `magnotia-core` exposes 104 public items — high for a "shared types" crate; likely leakage of internals.
- `magnotia-storage` exposes 69 public items across only 4 files; the file split is suspect (2.5k-line `database.rs`).
- `magnotia-cloud-providers` is 80 LOC and 3 public items — README calls it "empty scaffolding" (verified: just an in-memory keystore + env-var fallback). Either grow it or remove it; it currently earns nothing.
---
## 4. Crate dependency graph
```
magnotia-core ──┬─→ magnotia-audio
├─→ magnotia-transcription
├─→ magnotia-llm ──→ magnotia-ai-formatting
├─→ magnotia-cloud-providers
├─→ magnotia-hotkey
└─→ magnotia-storage ──→ magnotia-mcp
magnotia (src-tauri)
└─→ all 8 library crates (NOT magnotia-mcp — separate binary)
```
**Observations:**
- `magnotia-core` is the workspace floor; nothing depends on it depending on something else. Good.
- DAG is clean — no cycles, no upward dependencies.
- `magnotia-mcp` correctly depends only on `magnotia-storage` (its sole job is to read the SQLite DB). The Tauri app does **not** depend on it, confirming the "separate process" claim in the README.
- `magnotia-ai-formatting` depends on both `core` and `llm`. Reasonable.
> **Phase 2 will verify:** every `pub` item in the leaf crates (`audio`, `transcription`, `llm`, `storage`, `hotkey`) has at least one external consumer. Internal-only items shouldn't be `pub`.
---
## 5. External surfaces
### 5.1 Tauri commands
**102 `#[tauri::command]` attributes** across **22 of 25** modules in `src-tauri/src/commands/`.
- `power.rs` and `security.rs` are utility modules (no commands; helpers only).
- `mod.rs` is the registry.
| Module | # commands | Module | # commands |
|---|---:|---|---:|
| `tasks` | 12 | `intentions` | 5 |
| `models` | 12 | `audio` | 4 |
| `llm` | 10 | `tts` | 3 |
| `profiles` | 9 | `transcription` | 3 |
| `transcripts` | 8 | `paste` | 3 |
| `windows` | 8 | `update` | 2 |
| `diagnostics` | 6 | `rituals` | 2 |
| `hotkey` | 5 | `live` | 2 |
| | | `hardware` | 2 |
| | | `feedback` | 2 |
| | | `nudges`, `meeting`, `fs`, `clipboard` | 1 each |
**Every one of these is a trust boundary** — Phase 4 (security) will audit input validation per command.
### 5.2 MCP tools (read-only stdio)
Confirmed in `crates/mcp/src/lib.rs`:
- `list_transcripts`
- `get_transcript`
- `search_transcripts`
- `list_tasks`
The `init_readonly` connection mode in `magnotia-storage` is opened at OS level (`SQLITE_OPEN_READONLY`), per `crates/mcp/src/main.rs:18` — Phase 4 will confirm with a write-attempt test.
### 5.3 Frontend route surface
| Route | Purpose | Layout |
|---|---|---|
| `/` | Main dictation shell | `+layout.svelte` (sidebar + chrome) |
| `/float` | Tasks float window | `+layout@.svelte` (chrome-free) |
| `/viewer` | Transcript editor | `+layout@.svelte` (chrome-free) |
| `/preview` | Live transcription overlay | `+layout@.svelte` (chrome-free) |
**Pages:** `DictationPage`, `SettingsPage`, `HistoryPage`, `TasksPage`, `FilesPage`, `FirstRunPage`, `ShutdownRitualPage` (7).
**Stores:** `page`, `preferences`, `profiles`, `toasts`, `focusTimer`, `llmStatus`, `nudgeBus`, `implementationIntentions`, `completionStats`, `speaker` (10).
**Components:** 25 in `src/lib/components/`.
**i18n locales:** `en`, `es`, `de` (scaffolding only — most strings are still hard-coded; the migration is incremental per README).
### 5.4 Model registry
7 models declared in `crates/core/src/model_registry.rs`:
- Whisper (6): `whisper-tiny-en`, `whisper-base-en`, `whisper-small-en`, `whisper-distil-small-en`, `whisper-medium-en`, `whisper-distil-large-v3`
- Parakeet (1): `parakeet-ctc-0.6b-int8`
> Moonshine is mentioned in the README's `magnotia-core` description ("Moonshine entries") but **no Moonshine entry exists in the registry**. See §7.
---
## 6. Test floor
| Location | Count |
|---|---:|
| `crates/*/src/` (lib tests) | 217 |
| `crates/*/tests/` (integration) | 3 |
| `src-tauri/src/` + `src-tauri/tests/` | 67 |
| **Total** | **287** |
Only 3 cross-crate integration tests is light. Per-crate lib tests dominate. Phase 5 (test integrity) will mutation-test the heavy crates (`storage`, `transcription`, `llm`) to grade whether these tests actually pin behaviour.
---
## 7. README ↔ code drift
Items where the README disagrees with the code as-of this audit:
| README claim | Reality | Severity |
|---|---|---|
| "245 automated lib tests across 10 crates" (line 14) | **287 tests** total (220 lib + 67 src-tauri); 220 lib-only | LOW — undercount (good direction, but stale) |
| "10 crates" (line 14) | 9 library crates + 1 app crate (`src-tauri`) — depends how you count; technically the workspace has 10 packages | OK if counting `src-tauri`; misleading otherwise |
| "Commands: audio, clipboard, diagnostics, hotkey, live, llm, meeting, models, paste, power, profiles, tasks, transcription, transcripts, update, windows" (line 95-97) — 16 listed | **22 modules with commands**: README missing `feedback`, `fs`, `intentions`, `nudges`, `rituals`, `tts`. Architecture diagram and §"Tauri commands" table both stale. | **MED** — visible to anyone evaluating the codebase |
| "18 Tauri command modules" (line 117) | **25 files** in `commands/` (22 with command attrs + `mod`, `power`, `security`) | MED |
| `magnotia-core` "model registry (Whisper + Parakeet + Moonshine entries)" (line 165) | **No Moonshine entries** in `model_registry.rs`. 6 Whisper + 1 Parakeet only. | **MED** — claims an unimplemented feature |
| Stores listed: `settings, profiles, tasks, history, taskLists, templates, page, toasts, preferences` (line 202) | Actual stores: `page, preferences, profiles, toasts, focusTimer, llmStatus, nudgeBus, implementationIntentions, completionStats, speaker`. README list is **largely fictional** — there is no `tasks`, `history`, `taskLists`, `templates`, or `settings` store as a separate file. | **HIGH** — describes architecture that doesn't exist |
| `magnotia-cloud-providers` "BYOK cloud-STT provider stubs… Currently empty scaffolding. When populated: OpenAI-compatible endpoint + Anthropic" (line 172) | Crate has an in-memory API-key store with env-var fallback — not "empty scaffolding". No HTTP code, no provider implementations. | LOW — partial |
| "Every new workspace crate needs a `description` in its `Cargo.toml`" (line 362, contributing rule) | **`crates/llm/Cargo.toml` has no `description` field.** Self-violation of the contribution rule. | LOW — easy fix |
| README §"Architecture" Rust crate list spelling (line 102-104) | Correct, but the manual line-break formatting got mangled by the rebrand sweep — visible whitespace inconsistency. | TRIVIAL |
> **Phase 0 verdict on documentation truth:** The README is **mostly right but actively misleading in two places** — the stores list and the Moonshine claim. Both will fail an acquirer's first sanity-check (`grep -r "Moonshine" crates/`) and erode trust in the rest of the doc.
---
## 8. HANDOVER files
| File | Date | Topic | Status |
|---|---|---|---|
| `HANDOVER.md` | 2026-04-25 | Latest session (Phase 9a–9d) | Active reference |
| `HANDOVER-2026-04-24.md` | 2026-04-24 | Phase 8 close | Historical |
| `HANDOVER-2026-04-19.md` | 2026-04-19 | Earlier session | Historical |
| `HANDOVER-2026-04-18.md` | 2026-04-18 | Earlier session | Historical |
| `HANDOVER-2026-04-17.md` | 2026-04-17 | Earliest in tree | Historical |
Five handovers in the repo root is unusual — most projects keep one. Phase 8 (docs truth) will recommend either archiving them under `docs/handovers/` or rotating to a single `HANDOVER.md` with prior content moved.
The post-rebrand state: all five handovers were rewritten by today's sweep (line counts identical, words different). They now reference `magnotia` paths but their **content** describes work done under the `kon` / `corbie` names — there's a temporal-vs-naming mismatch a reader has to mentally track. Acquirer-friendly fix: add a one-line note at the top of each historical handover saying "Originally written when the product was named X; references rewritten 2026-04-30."
---
## 9. Fix areas — actionable tasks
Each task below is concrete: file, change, verification, effort. Pick any in any order; they don't depend on later phases. Items are grouped by impact tier.
### Tier A — High impact, do first
#### A1. README stores list is fiction
- **File:** `README.md`, line 202
- **Current:** `Reactive stores (src/lib/stores/page.svelte.ts): settings, profiles, tasks, history, taskLists, templates, page, toasts, preferences.`
- **Reality:** stores are `page`, `preferences`, `profiles`, `toasts`, `focusTimer`, `llmStatus`, `nudgeBus`, `implementationIntentions`, `completionStats`, `speaker` — each in its own `*.svelte.ts` file under `src/lib/stores/`.
- **Fix:** rewrite the bullet to enumerate the actual ten store files, and clarify that `page.svelte.ts` is the central app-state store (transcripts, profiles, taskLists, etc. live as fields on it).
- **Verify:** `ls src/lib/stores/` matches the README list 1:1.
- **Effort:** 10 min.
#### A2. Moonshine claim has no implementation
- **File:** `README.md`, line 165 (`magnotia-core` row in the crate table)
- **Current:** `model registry (Whisper + Parakeet + Moonshine entries)`
- **Reality:** `crates/core/src/model_registry.rs` has 6 Whisper + 1 Parakeet entries. Zero Moonshine.
- **Fix (pick one):**
- (a) Remove the Moonshine reference from the README. Cheapest.
- (b) Add a `// TODO(moonshine): not yet wired` constant in `model_registry.rs` and a roadmap entry under §Roadmap, so the claim is at least flagged as forthcoming.
- **Verify:** `grep -ri moonshine crates/ src-tauri/ src/` returns no orphan references.
- **Effort:** 5 min (option a) / 30 min (option b).
#### A3. Six Tauri command modules undocumented
- **File:** `README.md`, lines 95-97 (Architecture diagram) and 175-195 (Tauri commands table)
- **Missing:** `feedback`, `fs`, `intentions`, `nudges`, `rituals`, `tts`
- **Fix:** add a one-line description for each in the §Tauri commands table; add the names to the Architecture-diagram bullet list.
- **Verify:** `ls src-tauri/src/commands/*.rs | xargs basename -s .rs | sort` matches the README table 1:1 (excluding `mod`, `power`, `security`, which are utility modules — note that explicitly).
- **Effort:** 20 min.
### Tier B — Low effort, removes self-violations
#### B1. `crates/llm/Cargo.toml` missing `description`
- **File:** `crates/llm/Cargo.toml`
- **Current:** `[package]` block has `name`, `version`, `edition` only.
- **Reality:** README §Contributing line 362 declares this a hard rule. Self-violation.
- **Fix:** add `description = "Local LLM engine for Magnotia (Qwen3 via llama-cpp-2). Cleanup, task extraction, content tags."` (or similar). Match the prose style of the other 8 crates' descriptions.
- **Verify:** `for d in crates/*/Cargo.toml src-tauri/Cargo.toml; do grep -L "^description" "$d"; done` returns empty.
- **Effort:** 2 min.
#### B2. Stale test-count claim
- **File:** `README.md`, line 14
- **Current:** `245 automated lib tests across 10 crates, all passing`
- **Reality:** 287 tests total (220 lib + 67 src-tauri); 220 lib-only.
- **Fix:** decide on a number that's automatable, not a snapshot. Either: (a) replace with `220+ lib tests across 9 library crates plus 67 Tauri-app tests`, or (b) drop the absolute number and say `comprehensive automated test floor — see CI for current count`.
- **Verify:** `grep -rE '#\[(test|tokio::test)\]' crates/*/src/ | wc -l` matches whatever number you ship.
- **Effort:** 5 min.
#### B3. Crate count claim ambiguity
- **File:** `README.md`, line 14 ("10 crates")
- **Reality:** 9 library crates + 1 Tauri app crate. The README's own crate table only documents 9.
- **Fix:** say "9 library crates plus the Tauri app crate" — or just "9 library crates" and let the Tauri app stand separately, which matches the existing prose.
- **Effort:** 2 min.
### Tier C — Structural smells (defer to Phase 2 but flag now)
#### C1. `magnotia-core` over-exports
- **File(s):** `crates/core/src/lib.rs` and the modules it re-exports
- **Symptom:** 104 public items in a "shared types" crate. High blast radius for any change.
- **Fix (Phase 2 work, do not touch yet):** audit every `pub` item; demote anything not used outside the crate to `pub(crate)`. The expected outcome is a 30–60% reduction in public surface.
- **Verify:** after the demotion pass, `cargo +nightly rustdoc` should still succeed and downstream crates should still compile without changes.
- **Effort:** ~½ day (Phase 2 scope).
#### C2. `magnotia-storage::database.rs` is 2,534 lines
- **File:** `crates/storage/src/database.rs`
- **Symptom:** single file holds CRUD for transcripts, tasks, subtasks, profiles, profile-terms, settings, error log, FTS5. No internal module boundaries.
- **Fix (Phase 2):** split by domain — `database/transcripts.rs`, `database/tasks.rs`, `database/profiles.rs`, etc. Keep the public re-export shape unchanged so callers don't move.
- **Verify:** `cargo test -p magnotia-storage` still passes; no public-API changes.
- **Effort:** ~2-4 hours.
#### C3. `SettingsPage.svelte` is 2,250 lines
- **File:** `src/lib/pages/SettingsPage.svelte`
- **Symptom:** HANDOVER.md already flags this; `SettingsGroup.svelte` was prepared but the seven-group split was deferred.
- **Fix (Phase 2):** complete the planned restructure. Pick this up from HANDOVER.md §"9c — Settings (scaled down)".
- **Effort:** ~½ day.
#### C4. `magnotia-cloud-providers` does not earn its existence
- **Files:** `crates/cloud-providers/` (80 LOC across 2 files)
- **Symptom:** crate contains an in-memory keystore with env-var fallback. Not "empty scaffolding" as the README says — but also not provider-specific. No HTTP code, no providers.
- **Fix (decide, then act):**
- (a) **Fold** into `magnotia-core::keystore` (preferred — it's a generic key store, nothing cloud-specific). Drop the crate. README §Architecture and the dependency graph simplify.
- (b) **Grow** it: actually implement an OpenAI-compatible STT client and an Anthropic STT client, gated behind a `cloud-stt` feature flag. Earn the boundary.
- **Verify (option a):** workspace builds with `cloud-providers` removed from `Cargo.toml` members; the two consumers (`commands/llm.rs` and wherever else) re-import from `magnotia-core::keystore`.
- **Effort:** ~1 hour (option a) / multi-day (option b).
### Tier D — Hygiene (Phase 1 / Phase 8)
#### D1. Five HANDOVER files in repo root
- **Files:** `HANDOVER.md`, `HANDOVER-2026-04-{17,18,19,24}.md`
- **Symptom:** root noise; rebrand also rewrote their content so they describe `kon`/`corbie` work but read as `magnotia`.
- **Fix:**
- Move the four dated files under `docs/handovers/`.
- Add a one-line italic note at the top of each historical file: *"Originally written when the product was named Kon (and briefly Corbie); references rewritten in the 2026-04-30 rebrand sweep."*
- Keep the latest as `HANDOVER.md` in root, or also move under `docs/handovers/HANDOVER-latest.md` with a symlink — pick one.
- **Effort:** 15 min.
#### D2. Tauri command total count drift
- **README** says "18 Tauri command modules" (line 117); actual is 22 modules with commands (plus 3 utility modules in the same dir).
- **Fix:** update line 117 to "22 Tauri command modules + 3 utility modules (`mod`, `power`, `security`)".
- **Effort:** 1 min — usually folded into A3.
---
## 10. Phase 1 entry plan
Tier A and Tier B fixes above (≈45 min total) bring the README back into truth and close the self-imposed Cargo.toml rule. Do these as a warm-up before Phase 1 proper; they make every subsequent phase' "what does the README say?" comparison cheaper.
Phase 1 (Lean-pass) — see [`phases-1-8-playbook.md`](phases-1-8-playbook.md) — should then target, in order:
1. `cargo machete` + `cargo udeps` workspace-wide → unused deps kill list.
2. `knip` on the frontend → unused TS/Svelte modules.
3. Manual review of the **5 files >1k LOC** for duplicate logic (`SettingsPage.svelte`, `database.rs`, `live.rs`, `migrations.rs`, `DictationPage.svelte`).
4. Grep audit of `TODO` / `FIXME` / `unimplemented!` / `unwrap()` outside tests → tech-debt log.
5. Apply the Tier C structural smells if Phase 2 is being done immediately afterwards.
Estimated time: **1 working day** for Phase 1 in full, plus ~45 min of Tier A/B fixes.
---
*End of Phase 0 cartography.*

331
docs/audit/phase1-lean-pass.md Normal file
View File

@@ -0,0 +1,331 @@
# Phase 1 — Lean-pass (scan-only deliverable)
*Read-only deliverable; no code changes applied. Removals and refactors deferred to a review pass.*
Date: 2026-05-01. Branch: `main` @ `7ff7295` (working tree clean at scan start; a parallel agent is committing the Phase 0 §9 Tier A/B/D1 README and `Cargo.toml` documentation fixes alongside this scan). Status: scan-only.
---
## Methodology
This is the find-first half of audit discipline. Every section below is a scan output, lightly categorised. No code was modified to produce this report; remediation gets a separate commit and review pass after Jake walks the findings. The Phase 1 playbook (`docs/audit/phases-1-8-playbook.md` §Phase 1) calls for `cargo machete`, `cargo udeps`, `knip`, `depcheck`, dead-code lints per crate, a tech-debt grep, an `unwrap`/`expect` panic-surface scan, manual notes on the five files >1k LOC, and `jscpd` cross-file duplication. All steps were attempted; toolchain gaps are logged in §"Scans deferred".
Severity grades (per playbook): **P0** must-fix before any release; **P1** must-fix before sale or public beta; **P2** worth fixing, not blocking.
---
## 1. Unused Rust dependencies
`cargo machete` (v0.9.2, freshly installed, recursive workspace mode) flags **4 unused-dependency hits across 4 crates**.
| ID | Severity | Crate | `Cargo.toml` declares | Notes |
|---|---|---|---|---|
| L1.1 | P2 | `magnotia-cloud-providers` | `magnotia-core` | Crate is 80 LOC of in-memory keystore; no `magnotia_core::` imports in source. Likely dead since cartography §3 ("not earning its existence"). Cross-references Phase 0 Tier C4. |
| L1.2 | P2 | `magnotia-core` | `async-trait` | Not used inside `core`'s own modules. Worth confirming with reverse-grep before removal — `async_trait` is sometimes pulled in by macro expansion only. |
| L1.3 | P2 | `magnotia-core` | `serde_json` | Same caveat — many crates pull `serde_json` for downstream re-export, but `core` should not need it directly. |
| L1.4 | P2 | `magnotia-hotkey` | `magnotia-core` | Hotkey crate compiles standalone; only depends on `core` for shared error types presumably, but the import is not present. |
| L1.5 | P2 | `magnotia` (`src-tauri`) | `magnotia-cloud-providers` | The Tauri crate declares the cloud-providers crate, but no `magnotia_cloud_providers::` symbol appears in `src-tauri/src`. Folds into Phase 0 Tier C4 (kill or grow `cloud-providers`). |
**Cross-check with `cargo udeps`:** *not run.* The repo currently has only a stable Rust toolchain installed (`rustup toolchain list` returned `stable-x86_64-unknown-linux-gnu` only). `cargo udeps` requires nightly. Logged under Scans deferred.
**Recommended Phase-1 follow-up:** before deleting any of these, do a workspace-wide reverse grep for each dep name; macros and re-exports defeat machete. The L1.4 and L1.5 hits in particular suggest `magnotia-cloud-providers` as a unit is removable (cartography Tier C4 option a — fold into `magnotia-core::keystore`).
---
## 2. Unused frontend modules
### 2.1 `npx knip`
**Files reported as unused (9):**
| ID | Severity | File | Notes |
|---|---|---|---|
| L2.1 | P2 | `src/app.d.ts` | SvelteKit ambient declaration. Knip almost always false-positives on these; **keep**. |
| L2.2 | P2 | `src/design-system/colors_and_type.css` | Reference design-system, not live code (cartography §2 already excludes the design-system from active LOC). Verify before deletion. |
| L2.3 | P2 | `src/design-system/ui_kits/DictationPage.jsx` | Reference UI kit (JSX in a Svelte project — clearly a sketch, not a build target). |
| L2.4 | P2 | `src/design-system/ui_kits/OtherPages.jsx` | As above. |
| L2.5 | P2 | `src/design-system/ui_kits/Sidebar.jsx` | As above. |
| L2.6 | P2 | `src/lib/components/VirtualSegmentList.svelte` | Possible orphan after a refactor. Worth a `grep -r VirtualSegmentList src/` to confirm before removal. |
| L2.7 | P2 | `src/lib/components/VisualTimer.svelte` | Same — verify no dynamic import or string-named lookup. |
| L2.8 | P2 | `src/lib/shims.d.ts` | TypeScript shim. Knip false-positive class; **keep**. |
| L2.9 | P2 | `static/pcm-processor.js` | AudioWorklet module — loaded by URL string at runtime, not by import. **Keep** (false positive). |
**Unused dependencies (3):**
| ID | Severity | Package | Notes |
|---|---|---|---|
| L2.10 | P2 | `@tauri-apps/plugin-autostart` | Likely registered Rust-side in `src-tauri/Cargo.toml` and configured via `tauri.conf.json` rather than imported from JS. Verify — if the Rust side uses it, the JS dep can go. |
| L2.11 | P2 | `@tauri-apps/plugin-global-shortcut` | Same — Rust-side registration. |
| L2.12 | P2 | `@tauri-apps/plugin-opener` | Same. |
**Unlisted binaries (1):**
| ID | Severity | Reference | Notes |
|---|---|---|---|
| L2.13 | P2 | `du` in `.github/workflows/build.yml` | Just a system tool used in CI. Informational; nothing to do. |
**Unused exports (31) and exported types (28):** see `/tmp/claude-1000/.../bq57g56il.output` for the full list. The high-density file is `src/lib/utils/textMeasure.ts` (5 exports, none consumed) and `src/lib/utils/settingsMigrations.ts` (3 exports + 2 types). Treat each as a candidate for either consumption or deletion. **Severity P2 across the board** — the exports are dead but harmless; their LOC saving is real but the risk of collateral damage is nonzero (they could be imported by name from another package or via dynamic lookup). Manual review per-file in Phase 2.
### 2.2 `npx depcheck`
Run with `--skip-missing` to avoid false positives on dev tooling.
| ID | Severity | Package | Notes |
|---|---|---|---|
| L2.14 | P2 | `@tauri-apps/plugin-autostart` | Confirms L2.10. |
| L2.15 | P2 | `@tauri-apps/plugin-global-shortcut` | Confirms L2.11. |
| L2.16 | P2 | `@tauri-apps/plugin-opener` | Confirms L2.12. |
| L2.17 | P2 | `lucide-svelte` | **Worth investigating.** Declared but depcheck found no JS-side import. If icons are inlined as SVG, the dep is genuinely dead. If imported via a wrapper component, false positive. |
| L2.18 | P2 | `tailwindcss` (devDep) | Almost certainly a false positive — Tailwind is wired in via `@tailwindcss/vite` plugin in `vite.config.js` rather than a direct import. **Keep.** |
**Convergent signal:** L2.10/11/12 plus L2.14/15/16 — both tools agree the three Tauri plugins are JS-unused. They are still required Rust-side (the Tauri JS bridge ships separately from the Rust plugins), so the safe pattern is to keep them only if the JS API is invoked from the frontend. Quick `grep -r 'autostart\|globalShortcut\|opener' src/` answers it; that is a Phase 2 pass, not a Phase 1 deletion.
---
## 3. Dead Rust code
Each crate was rebuilt (workspace + `--all-targets`) with `RUSTFLAGS="-W dead_code -W unused"` to surface the strictest defaults.
**Result:** **zero warnings emitted across all nine library crates and `src-tauri`.**
This is genuine — both `cargo build --workspace` and `cargo build --workspace --all-targets` came back clean with the elevated flags. The codebase does not carry obvious unreachable Rust code, unused imports, or unused private items as scored by rustc's default dead-code detector. Stronger lints (`clippy::pedantic`, `clippy::nursery`) are deferred to Phase 3 per the playbook.
**Caveat:** rustc's `dead_code` only fires when a `pub` item has no callers *anywhere in the same crate*; cross-crate dead `pub` items (where the only callers are inside a sibling crate that has since stopped using them) require the workspace-wide reverse-grep pass scheduled for Phase 2 step 5 (the `magnotia-core` 104-public-items audit). The L1.* dependency hits above are early evidence that some inter-crate links are already dormant.
---
## 4. Tech-debt grep
`grep -rnE "TODO|FIXME|HACK|XXX|unimplemented!\(\)|todo!\(\)" --include="*.rs" --include="*.svelte" --include="*.ts"` returned **5 hits** total — a remarkably low count for a 36k-LOC codebase.
| ID | Severity | File:line | Marker | Bucket | Suggested action |
|---|---|---|---|---|---|
| L4.1 | P2 | `crates/cloud-providers/src/keystore.rs:13` | TODO | (a) genuine reminder | Replace process-local `Mutex<HashMap>` keystore with `keyring` crate or platform-native credential storage so secrets persist across sessions. Cross-references Phase 0 Tier C4 (and the Plinth `MEMORY.md` note about plaintext Foundry secrets — same family of issue). Log to issue tracker. |
| L4.2 | P2 | `crates/storage/src/database.rs:166` | (TODO) | (b) historical comment | Already-resolved TODO referenced in a doc comment ("the rename was a UI-only state change with a TODO never wired up"). Reads as historical narrative; not actionable but cluttery. Optional: shorten the comment in a docs pass. |
| L4.3 | P1 | `crates/storage/src/database.rs:1124` | TODO | (c) silent admission | `log_error` is implemented but the doc comment states it is *not yet wired into Tauri command error paths*. Result: every command's error is converted to a `String` and returned to the JS layer, but the persistent `error_log` table is never written to from production paths. **This is real audit signal**: the README and crate surface advertise an error-log capability that is dormant. Wire it into the command-layer `?` translations in Phase 3. |
| L4.4 | P2 | `src/lib/components/MorningTriageModal.svelte:262` | TODO | (a) genuine reminder | Promote inline `#1a1816` 50%-alpha overlay colour to a `--color-overlay` token in `app.css`. Cosmetic; safe to action in Phase 8 (docs/style truth) or whenever a token-pass happens. |
| L4.5 | P2 | `src-tauri/src/commands/transcripts.rs:6` | TODO (in narrative comment) | (b) historical | Comment narrates that a previous TODO ("persist to SQLite when update_transcript exists") has been resolved. Like L4.2: historical, not actionable. Optional cleanup. |
**Bucket totals:** 1 × bucket (a), 2 × bucket (b), 1 × bucket (c, escalated to P1). Zero `FIXME`, zero `HACK`, zero `XXX`, zero `unimplemented!()`, zero `todo!()` in the entire active codebase. That last point is itself a strong-positive finding — see §Defect log summary.
---
## 5. Panic surface (`unwrap` / `expect` outside tests)
The raw grep returned **385 hits**, but a context-aware Python pass (which tracks `#[test]`, `#[tokio::test]`, and `#[cfg(test)] mod`) finds that **359 of those are inside test bodies or `#[cfg(test)]` modules** and **only 26 sit on production paths**. Production list below.
| File:line | Context (1 line) | Risk note |
|---|---|---|
| `crates/mcp/src/lib.rs:230` | `serde_json::to_string_pretty(&summaries).unwrap()` | Serialising a `Vec<TranscriptSummary>` we just built; cannot fail in practice but the `.unwrap()` will panic the MCP stdio worker on any bug in the type. Trade for `?`. |
| `crates/mcp/src/lib.rs:262` | `text_content(serde_json::to_string_pretty(&value).unwrap())` | Same family — JSON-stringifying a value of our own construction. |
| `crates/mcp/src/lib.rs:294` | `serde_json::to_string_pretty(&summaries).unwrap()` | Same. |
| `crates/mcp/src/lib.rs:319` | `serde_json::to_string_pretty(&summaries).unwrap()` | Same. |
| `crates/llm/src/lib.rs:102` | `let mut guard = self.inner.lock().unwrap()` | Standard `Mutex::lock().unwrap()` — only panics on poison. Acceptable in practice but a poisoned LLM mutex would panic the whole engine; an explicit `expect("LLM engine mutex poisoned")` would at least name the failure. |
| `crates/llm/src/lib.rs:137` | `let mut guard = self.inner.lock().unwrap()` | Same. |
| `crates/llm/src/lib.rs:145` | `self.inner.lock().unwrap().model.is_some()` | Same. |
| `crates/llm/src/lib.rs:149` | `self.inner.lock().unwrap().loaded.clone()` | Same. |
| `crates/llm/src/lib.rs:169` | `NonZeroU32::new(n_ctx).expect("n_ctx must be non-zero")` | Construction-time invariant; preceded by a guard that should rule out zero. Fine, but the invariant is not encoded — if a caller bypasses the guard, this panics on engine init. Reasonable to keep with the `expect`. |
| `crates/llm/src/lib.rs:380` | `let guard = self.inner.lock().unwrap()` | Mutex poison. |
| `crates/transcription/src/streaming/commit_policy.rs:125` | `self.history.back().expect("history is non-empty here")` | The expect string asserts a precondition that is enforced four lines above by `if self.history.is_empty() { return … }`. **Defensible** — the panic message even names the invariant. Document in a Phase-3 inline justification rather than refactor. |
| `crates/cloud-providers/src/keystore.rs:18` | `api_key_store().lock().unwrap()` | Mutex poison; same family as the `llm` ones. |
| `crates/cloud-providers/src/keystore.rs:31` | `api_key_store().lock().unwrap()` | Same. |
| `src-tauri/src/lib.rs:442` | `.expect("error while running Magnotia")` | The Tauri `run()` call. A panic here is the conventional pattern (no recovery anyway — process exit). Keep. |
| `src-tauri/src/commands/power.rs:61` | `.unwrap()` | Power-assertion mutex lock. Mutex poison. |
| `src-tauri/src/commands/power.rs:103` | `assertion_registry().lock().unwrap().insert(…)` | Mutex poison. |
| `src-tauri/src/commands/power.rs:134` | `assertion_registry().lock().unwrap().remove(&self.id)` | Mutex poison. |
| `src-tauri/src/commands/audio.rs:159` | `all_samples.lock().unwrap().clear()` | Mutex poison. |
| `src-tauri/src/commands/audio.rs:165` | `*state.wav_writer.lock().unwrap() = Some(writer)` | Mutex poison. |
| `src-tauri/src/commands/audio.rs:166` | `*state.temp_audio_path.lock().unwrap() = Some(temp_path)` | Mutex poison. |
| `src-tauri/src/commands/audio.rs:316` | `let mut all = state.all_samples.lock().unwrap()` | Mutex poison. |
| `src-tauri/src/commands/live.rs:330` | `self.state.resampler.as_mut().expect("resampler just set")` | Local invariant immediately after a `set` — defensible. |
| `src-tauri/src/commands/live.rs:497` | `let running = live_state.running.lock().unwrap()` | Mutex poison. |
| `src-tauri/src/commands/live.rs:581` | `*live_state.running.lock().unwrap() = Some(RunningLiveSession {…})` | Mutex poison. |
| `src-tauri/src/commands/live.rs:600` | `let running = live_state.running.lock().unwrap().take()` | Mutex poison. |
| `src-tauri/src/commands/live.rs:606` | `*live_state.running.lock().unwrap() = Some(running)` | Mutex poison. |
**Pattern summary.** The 26 production unwraps cluster into three categories:
- **Mutex poison** (19 occurrences): `Mutex::lock().unwrap()`. The well-known Rust idiom; only fails if a thread panicked while holding the lock. Acceptable but **inconsistent**: every site should at minimum carry an `expect("&str describing what")` so a poison-panic crash log names the lock. Phase 3 task: standardise.
- **Self-built JSON serialisation** (4 occurrences in `magnotia-mcp`): `serde_json::to_string_pretty(&value).unwrap()`. Cannot fail for our own types in practice, but the playbook's "prove it can't panic on user data" rule says these should become `?` or carry explicit `expect`s. Phase 3 task.
- **Locally-enforced invariants** (3 occurrences in `commit_policy`, `live`, `lib.rs`): the line above the `unwrap`/`expect` enforces the precondition. These are the most defensible; Phase 3 should add an inline `// SAFETY: …` comment naming the invariant rather than rewrite.
**Severity:** all P2 in isolation. Collectively → P1 to standardise before sale; an acquirer reading this list will want the convention named.
---
## 6. Largest-file duplicate-logic notes
### 6.1 `src/lib/pages/SettingsPage.svelte` — 2,250 LOC
Confirmed seven `<SettingsGroup>` top-level groups (lines 972, 1020, 1379, 1569, 1808, 1947, 2119) corresponding to the planned seven-group split documented in HANDOVER.md §"9c — Settings (scaled down)". The structural decomposition is **already in source** — what remains is the file split: each top-level `<SettingsGroup>` should move to its own `*.svelte` file under `src/lib/pages/settings/`. The page-level component then becomes a slim shell ~200 LOC.
**Inline observations:**
- 49 `<button>` elements in a single component is a smell — many will share handlers via prop drilling that a per-section split would localise.
- 57 declared `function` / `async function` blocks at the top level. Most are single-section helpers (model download, vocab management, audio device polling) and would migrate cleanly with their owning `<SettingsGroup>`.
- `let visibleAudioDevices = $derived(buildVisibleDevices(audioDevices))` (line 142) and the `buildVisibleDevices` helper (lines 96-142) are pure-functional and worth lifting into `src/lib/utils/audioDevices.ts` for unit-testing.
**Severity:** P2 structural. Cross-references Phase 0 Tier C3.
### 6.2 `crates/storage/src/database.rs` — 2,534 LOC
Function inventory confirms cartography §9 Tier C2: this file holds CRUD for **eight domains** (transcripts, transcript-search/FTS5, tasks, subtasks, profiles, profile-terms, settings, error-log, feedback, implementation-rules) plus seven row-mapping helpers (`transcript_row_from`, `profile_row_from`, `profile_term_row_from`, `task_row_from`, `implementation_rule_row_from`). No internal module boundaries; one flat namespace.
**Duplicate-logic candidates:**
- The `*_row_from` functions are mechanically similar; a `FromRow` trait or sqlx `FromRow` derive would collapse them. Not strictly duplicate but rhyming.
- `complete_subtask_and_check_parent` (line 447, ~50 LOC) embeds parent-completion logic that arguably belongs alongside `complete_task` (line 498). Extract candidate.
**Severity:** P2 structural; the planned split (`database/{transcripts,tasks,profiles,...}.rs`) is the right answer per Phase 0 Tier C2.
### 6.3 `src-tauri/src/commands/live.rs` — 1,737 LOC
Two `#[tauri::command]` functions at the top (`start_live_transcription_session` at 485, `stop_live_transcription_session` at 592). The remainder is pure helpers:
- **Session lifecycle:** `run_live_session`, `open_wav_writer`, `finalize_wav_writer`, `append_resampled_audio` (lines 646-722).
- **Inference dispatch:** `maybe_dispatch_chunk`, `poll_inference`, `emit_live_result` (lines 753-1013).
- **Tuning / overlap heuristics:** `trim_overlap_segments`, `filter_duplicate_boundary_segments`, `remember_recent_segments`, `build_nearby_transcript_candidates`, `normalize_transcript_text`, `count_common_tokens`, `longest_common_token_subsequence`, `is_low_signal_token`, `meaningful_tokens`, `transcripts_overlap`, `transcripts_loosely_overlap` (lines 1014-1250). **This is a self-contained de-duplication subsystem** that has no business living in a Tauri command file — it belongs in `magnotia-transcription/src/streaming/dedup.rs` (or similar) where it can be unit-tested without the Tauri runtime.
- **Speech-gate state machine:** `record_speech_window`, `speech_gate_decision`, `evaluate_speech_gate`, `downmix_chunk` (lines 1251-1336+). Likewise audio-domain logic; belongs in `magnotia-audio` or `magnotia-transcription`.
**Recommendation (Phase 2):** the file should be cut roughly in thirds. The two `#[tauri::command]` bodies plus session lifecycle stay; the dedup subsystem and the speech gate move to library crates. Estimated LOC for the resulting `live.rs`: ~600.
**Severity:** P1 structural. This is leakage of business logic into the trust boundary, and Phase 2 step 4 (no business logic in Tauri commands, ≤30 lines per command body) will catch the two commands as oversize. Logging here so Phase 2 has a starting point.
### 6.4 `crates/storage/src/migrations.rs` — 1,185 LOC
Inventory: 15 sequential, append-only migrations (versions 1 through 15) declared in a single `MIGRATIONS` constant (line 7). Each is a `(i64, &str, &str)` triple. The runner is `run_migrations_slice` (line 546), which:
1. Creates `schema_version` if absent.
2. Looks up `MAX(version)`.
3. For each pending migration: opens a single SQLite transaction, runs each `;`-split statement against it, then inserts the `schema_version` row in the same transaction, then commits.
`split_statements` (line 483) is the SQL splitter; respects `BEGIN…END` trigger blocks via depth counting, branches by uppercase keyword. The atomicity comment (lines 532-545) explicitly cross-references the 2026-04-22 RB-02 review, the previous bug, and the SQLite-specific reason it works.
**No duplicate logic found.** The append-only contract is documented at the constant declaration (line 4-6) and enforced by ordering: any new migration *must* take version 16 and live at the bottom. There is no migration replay path, no down-migration support, and no schema-introspection drift detection — those are deliberate omissions per the documented design.
**Severity:** zero issues. This file is the audit-friendliest artefact in the repo.
### 6.5 `src/lib/pages/DictationPage.svelte` — 1,081 LOC
32 declared `function` / `async function` blocks. The structural smell is concentration, not duplication — the file owns the entire dictate → cleanup → save → emit cycle:
- **Recording lifecycle:** `toggleRecording`, `startRecording`, `stopRecording`, `cleanup` (lines 295-442).
- **Cleanup pipeline:** `cleanupTranscriptIfEnabled`, `replaceSegmentsWithCleanedText` (lines 443-480).
- **Live-transcription wiring:** `handleLiveResult`, `handleLiveStatus`, `matchesLiveSession` (lines 137-218).
- **Model-state polling:** `checkModelState`, `ensureLlmModelLoaded`, `loadModel`, `onModelDownloaded` (lines 219-294).
Each cluster is a candidate child component. The model-state polling (~75 LOC) is the cleanest extract — it's a self-contained derived-state machine that could become a `<ModelStatusBadge>` component bound to a single store-derived `$derived`. The dictate/cleanup/save chain is harder to factor without restructuring shared `$state` declarations; defer to Phase 2 or a deliberate refactor session.
**Severity:** P2 structural. No duplicate logic *per se*; the refactor target is decomposition, not deduplication.
---
## 7. Cross-file duplication (jscpd)
`npx jscpd --min-tokens 50 src/ src-tauri/src/ crates/` reports **32 clones**, **362 duplicated lines**, **3,540 duplicated tokens**, **1.62% overall duplicate ratio**. By format: Rust 2.15% (29 clones), TypeScript 0.42% (3 clones), zero in JSON / Svelte / CSS / JSX / Markdown.
**Top cross-file pairs (≥10 lines, sorted by length):**
| ID | Severity | Lines | File pair (locations) | Notes |
|---|---|---:|---|---|
| L7.1 | P1 | 37 | `src-tauri/src/commands/transcription.rs` 377-413 ↔ 187-223 | **The Whisper vs. Parakeet path duplication.** `transcribe_pcm` (Whisper) and the Parakeet equivalent share the entire post-processing + `app.emit` block. 37-line clone. Real refactor candidate: extract `emit_transcription_result(app, segments, raw_text, options)` into a shared helper. |
| L7.2 | P1 | 22 | same file, 308-329 ↔ 187-208 | Same family, different start point. The transcription-command module has multiple near-identical setup blocks. |
| L7.3 | P1 | 19 | same file, 249-267 ↔ 155-173 | Same. |
| L7.4 | P2 | 19 | `src-tauri/src/commands/paste.rs` 567-585 ↔ 529-547 | Per-tool subprocess error-handling. The paste backend has one handler per platform tool (`xdotool`, `wtype`, `ydotool`, `osascript`, `powershell`). Each clones the success/exit/stderr-format pattern. Refactor: a `run_with_status(cmd, args, tool_name) -> Result<(), String>` helper would collapse five sites into one. |
| L7.5 | P2 | 18 | `src-tauri/src/commands/paste.rs` 219-236 ↔ 103-120 | Same family. |
| L7.6 | P2 | 16 | `src-tauri/src/commands/paste.rs` 618-633 ↔ 598-613 | Same — macOS `osascript` path. |
| L7.7 | P2 | 16 | `src-tauri/src/commands/paste.rs` 664-679 ↔ 643-658 | Same — Windows `powershell` path. |
| L7.8 | P2 | 15 | `crates/llm/tests/content_tags_smoke.rs` 16-30 ↔ `crates/llm/tests/smoke.rs` 18-32 | Test harness boilerplate — model load + engine init. Acceptable test duplication, but a `tests/common/mod.rs` helper would be cleaner. |
| L7.9 | **P1** | 15 | `crates/llm/src/model_manager.rs` 178-192 ↔ `crates/transcription/src/model_manager.rs` 25-39 | **Cross-crate clone.** Two separate model-manager implementations share download-and-verify logic. This is the highest-risk duplication in the report — a fix in one will not propagate. Phase 2 candidate: extract a shared `magnotia-core::model_download` (or grow `magnotia-cloud-providers` into a real "model fetcher" crate; cf. cartography Tier C4). |
| L7.10 | P2 | 15 | `src-tauri/src/commands/windows.rs` 183-197 ↔ 66-80 | Window-management command duplication. Likely the show/hide variants of the same logic. |
| L7.11 | P2 | 15 | `src-tauri/src/commands/paste.rs` 421-435 ↔ 392-406 | Per-tool paste fallback. |
| L7.12 | P2 | 14 | `src-tauri/src/commands/transcription.rs` 360-373 ↔ 160-173 | Continuation of L7.1-L7.3 family. |
| L7.13 | P2 | 12 | `crates/mcp/src/lib.rs` 276-287 ↔ 209-220 | MCP tool-handler boilerplate. Each `tools/call` arm rebuilds the result envelope. |
| L7.14 | P2 | 12 | `src-tauri/src/commands/transcription.rs` 347-358 ↔ 149-160 | Continuation. |
| L7.15 | P2 | 11 | `crates/transcription/src/model_manager.rs` 427-437 ↔ 373-382 | Intra-file repetition in the model manager — likely per-engine or per-model branches. |
| L7.16 | **P1** | 11 | `crates/llm/src/model_manager.rs` 415-425 ↔ `crates/transcription/src/model_manager.rs` 381-391 | Second cross-crate model-manager clone — same family as L7.9. |
| L7.17 | P2 | 11 | `src-tauri/src/commands/paste.rs` 202-212 ↔ 75-85 | More paste-backend boilerplate. |
**Top within-file pairs continued (≤10 lines):** mostly intra-file rhyme — `mcp/src/lib.rs` lines 299-308 ↔ 209-218; `crates/audio/src/decode.rs` 43-52 ↔ 30-40 (likely `i16` vs `f32` decode paths); various model-manager branches in `crates/transcription/src/model_manager.rs`.
**TypeScript clones (3):**
| ID | Severity | Lines | Pair | Notes |
|---|---|---:|---|---|
| L7.18 | P2 | 5 | `src/lib/utils/time.ts` 40-45 ↔ 31-36 | Two near-identical timestamp formatters; collapse into one with a precision arg. |
| L7.19 | P2 | 8 | `src/lib/stores/page.svelte.ts` 441-448 ↔ 418-425 | Task-row update + toast pair. Helper extract candidate. |
| L7.20 | P2 | 5 | `src/lib/stores/implementationIntentions.svelte.ts` 25-30 ↔ `src/lib/stores/nudgeBus.svelte.ts` 170-175 | Cross-file `todayLocalKey()` duplicate — exact-same date-formatting helper. Move to `src/lib/utils/time.ts`. |
**Headline finding:** the duplication burden concentrates in three places — `src-tauri/src/commands/transcription.rs` (Whisper/Parakeet path clones, L7.1-L7.3, L7.12, L7.14), `src-tauri/src/commands/paste.rs` (per-platform/per-tool clones, L7.4-L7.7, L7.11, L7.17), and the **cross-crate model-manager pair** `crates/llm/src/model_manager.rs` ↔ `crates/transcription/src/model_manager.rs` (L7.9, L7.16). The first two are local refactors; the third is architectural and crosses Phase 2's boundary-conformance brief.
---
## Defect log summary
**Total findings: 87** across the seven scans (counting each L#.# entry above as one finding).
By severity:
- **P0:** 0
- **P1:** 5 (L4.3 dormant `log_error`; L6.3 `live.rs` business-logic leakage; L7.1/L7.9/L7.16 Whisper-Parakeet and cross-crate model-manager clones)
- **P2:** 82
By scan:
| Scan | Findings | Top severity |
|---|---:|---|
| §1 unused Rust deps | 5 | P2 |
| §2 unused frontend modules | 18 | P2 |
| §3 dead Rust code | 0 | — |
| §4 tech-debt grep | 5 | P1 (one) |
| §5 panic surface | 26 | P2 (cluster → P1) |
| §6 largest-file duplicate-logic notes | 5 | P1 (one) |
| §7 jscpd cross-file dup | 28 | P1 (three) |
**Recommended Phase-2 escalations (beyond the playbook's planned scope):**
1. **L4.3 — wire `log_error` into command error paths.** Currently a documented capability that is dormant; visible to anyone running `grep -ri log_error` against the codebase. Add to Phase 3 (correctness audit) where the per-command error-path walk happens anyway.
2. **L6.3 — extract `live.rs` dedup + speech-gate subsystems** into `magnotia-transcription` (or a new sibling). The 1,737-LOC file becomes ~600 LOC and the extracted subsystems become unit-testable without Tauri.
3. **L7.9 / L7.16 — collapse the cross-crate model-manager duplication.** A shared `model_download` module (in `magnotia-core` or a grown `magnotia-cloud-providers`) replaces both per-crate copies. This compounds with cartography Tier C4 (the cloud-providers decision).
4. **§5 cluster — name every `Mutex::lock().unwrap()` site.** Cosmetic but uniform. Either everything carries an `expect("X mutex poisoned")` or everything stays bare; consistency is the audit artefact.
**Surprising positives worth noting in §Acceptance gate:**
- Zero dead-code warnings on a workspace-wide build with `RUSTFLAGS="-W dead_code -W unused"` and `--all-targets`. Suggests previous deletion passes have been thorough.
- Five tech-debt markers in 36k LOC. Zero `unimplemented!()`, zero `todo!()`, zero `FIXME`, zero `HACK`. The codebase carries almost no silent debt.
- 26 production unwraps, of which 19 are the standard `Mutex::lock().unwrap()` idiom. Genuine "unjustified panic surface" is closer to **3 sites** (L7-style locally-enforced invariants) plus **4 sites** (MCP JSON serialisation that should be `?`).
---
## Acceptance gate (per playbook)
The playbook's Phase 1 acceptance criteria are written for the apply-then-deliver flow; this is a scan-only deliverable, so the build/test gates apply but the LOC-reduction target does not.
**`cargo build --workspace`** — passes.
```
Finished `dev` profile [unoptimized + debuginfo] target(s) in 4m 07s (with RUSTFLAGS="-W dead_code -W unused")
Finished `dev` profile [unoptimized + debuginfo] target(s) in 24.96s (with --all-targets, no warnings)
```
**`cargo test --workspace`** — passes. **283 passed, 0 failed, 1 ignored** across 26 test binaries. (Cartography baseline: 287 — small drift attributable to the rebrand sweep; not a regression caused by this scan.)
**`npm run check`** — **1 ERROR, 0 WARNINGS** in 4080 files. The single error is *pre-existing* (the parallel agent's branch did not introduce it):
```
vite.config.js:5:1 Unused '@ts-expect-error' directive.
```
The directive sits above `const host = process.env.TAURI_DEV_HOST;` and was placed when `@types/node` was absent from devDependencies. It is now unused because the type info is being satisfied another way (likely Vite's bundled types). **Logged as L8.1 — P2.** Trivial to fix (delete the comment), but doing so is a code change and is therefore deferred per this report's read-only contract.
**LOC-reduction target** — deferred. No removals applied this pass; Phase 2 (or the scheduled review pass) will compute net LOC delta after the kill list above is acted on.
---
## Scans deferred (toolchain gaps)
| Scan | Reason | Recommended unblock |
|---|---|---|
| `cargo +nightly udeps --workspace --all-targets` | Only `stable-x86_64-unknown-linux-gnu` is installed (`rustup toolchain list`). | `rustup toolchain install nightly && cargo install cargo-udeps --locked`. Re-run inside Phase 2. |
| `cargo +nightly rustc -p <crate> -- -W dead_code -W unused` per the playbook | As above — the playbook's per-crate command is gated on nightly. Mitigated by running stable `cargo build --workspace --all-targets` with `RUSTFLAGS="-W dead_code -W unused"` instead, which produced the §3 zero-warning result. | Optional re-run on nightly to surface any nightly-only lint variants. |
---
*End of Phase 1 lean-pass scan deliverable. Next action: Jake reviews findings tonight; remediation pass produces a separate commit / PR after sign-off.*

534
docs/audit/phases-1-8-playbook.md Normal file
View File

@@ -0,0 +1,534 @@
# Audit Playbook — Phases 1 through 8
*Companion to [`phase0-cartography.md`](phase0-cartography.md). Pick up from any phase.*
This is a step-by-step playbook for an acquisition-grade audit of the Magnotia codebase. Phase 0 (Cartography) is complete; this document describes Phases 1–8.
**How to use this doc.** Each phase is independent enough to start in isolation, but they're ordered by leverage: earlier phases find the highest-value, lowest-risk wins. Don't skip phases without a reason.
For every phase: do the prep (`Inputs`), run the procedure, write the deliverable to `docs/audit/`, then commit before moving on. The deliverable is the audit trail.
---
## Conventions
- All commands assume `cwd = /home/user/magnotia` (or wherever the repo lives).
- All deliverables live under `docs/audit/`. Naming: `phaseN-<short-name>.md`.
- Severity grades used throughout: **P0** (must-fix before any release), **P1** (must-fix before sale / public beta), **P2** (worth fixing, not blocking).
- "Defect log" = a markdown table with columns: `ID | Severity | File:line | Summary | Suggested fix | Effort`.
- Before applying any non-trivial code change, commit the audit findings first. Audit and remediation are separate operations.
---
## Phase 1 — Lean-pass
**Goal.** Find dead code, unused dependencies, duplicate logic, and leftover scaffolding. Apply low-risk deletions; log higher-risk ones for Phase 2.
**Time:** 1 working day.
**Inputs:** Phase 0 §2 (largest files), §9 Tier C (structural smells).
### Procedure
1. **Unused Rust dependencies.**
```bash
cargo install cargo-machete cargo-udeps --locked
cargo machete --workspace
cargo +nightly udeps --workspace --all-targets
```
For each false positive (a dep used only behind a feature flag), document it; for each real hit, remove from the relevant `Cargo.toml`.
2. **Unused frontend modules.**
```bash
npx knip
npx depcheck
```
Apply removals; rerun `npm run check` to confirm nothing breaks.
3. **Dead Rust code.**
```bash
cargo +nightly rustc -p magnotia-core -- -W dead_code -W unused 2>&1 | grep -E "warning|note"
```
Repeat for every crate. Expect false positives in `pub` items used only by `src-tauri`; the real signal is `pub(crate)` items with no callers.
4. **Tech-debt grep.**
```bash
grep -rnE "TODO|FIXME|HACK|XXX|unimplemented!\(\)|todo!\(\)" \
--include="*.rs" --include="*.svelte" --include="*.ts" \
--exclude-dir=node_modules --exclude-dir=target . > /tmp/tech-debt.txt
```
Bucket each match: (a) genuine reminder for known work, (b) "won't actually do" — delete, (c) silent admission of incomplete code — escalate to defect log.
5. **`unwrap()` / `expect()` outside tests.**
```bash
grep -rnE "\.(unwrap|expect)\(" crates/ src-tauri/src/ \
--include="*.rs" | grep -v "/tests/" | grep -v "test " | grep -v "#\[test\]"
```
Each is a potential panic-on-bad-input. For each, prove it can't panic on user data, or replace with `?`/`map_err`.
6. **Duplicate logic in 1k+ LOC files.** Manually walk:
- `src/lib/pages/SettingsPage.svelte` (2,250 LOC) — already flagged for the seven-group split.
- `crates/storage/src/database.rs` (2,534 LOC) — split by domain (Phase 0 §9 C2).
- `src-tauri/src/commands/live.rs` (1,737 LOC) — look for mixed concerns (session lifecycle vs. tuning).
- `crates/storage/src/migrations.rs` (1,185 LOC) — confirm migrations are append-only and v-numbered.
- `src/lib/pages/DictationPage.svelte` (1,081 LOC) — extract child components for any block >150 lines.
7. **Cross-file duplicate detection.**
```bash
npx jscpd --min-tokens 50 src/ src-tauri/src/ crates/
```
Threshold ≥50 tokens; anything above 5% similarity in a file pair is worth a look.
### Deliverable
`docs/audit/phase1-lean-pass.md` — three sections:
- **Removed:** what was deleted, with line-count savings.
- **Kept with reason:** items that look unused but aren't (with the reason).
- **Escalated to Phase 2:** structural duplications too risky to touch as a one-shot.
### Acceptance criteria
- `cargo build --workspace` passes.
- `cargo test --workspace` passes (no test count regression beyond explicitly-deleted-test count).
- `npm run check` passes.
- Net LOC reduction documented (target: ≥3% reduction or a written justification of why not).
---
## Phase 2 — Architecture conformance
**Goal.** Verify the 10-crate boundary is real, not aspirational. Tighten public API surfaces. Restructure files >1k LOC where the split is obvious.
**Time:** 1 working day.
**Inputs:** Phase 0 §4 (dependency graph), §3 (pub item counts), Phase 1 escalations.
### Procedure
1. **No upward dependencies.** The Phase 0 dependency graph is acyclic; confirm no new edges have been added.
```bash
for d in crates/*/Cargo.toml; do
name=$(grep -m1 '^name' "$d" | sed 's/.*"\(.*\)"/\1/')
deps=$(grep -E "^magnotia[-_]" "$d" | sed 's/ *=.*$//')
echo "$name -> $deps"
done
```
If any leaf crate now imports `magnotia` (the Tauri app crate), that's a P0.
2. **Boundary conformance — no SQL outside `magnotia-storage`.**
```bash
grep -rE "sqlx::|sqlite::|sql_query|\\.execute\\(|\\.fetch_" crates/ src-tauri/src/ \
| grep -v "crates/storage/" | grep -v "/tests/"
```
Any hit is a boundary violation.
3. **Boundary conformance — no `cpal` / `whisper` / `llama` outside their owners.**
```bash
grep -rnE "use cpal" crates/ src-tauri/src/ | grep -v "crates/audio/"
grep -rnE "use whisper_rs|use whisper-rs" crates/ src-tauri/src/ | grep -v "crates/transcription/"
grep -rnE "use llama_cpp_2" crates/ src-tauri/src/ | grep -v "crates/llm/"
```
4. **Boundary conformance — no business logic in Tauri commands.** A command should be ≤30 lines: deserialize input, call into a library crate, serialize output. Anything else is leakage.
```bash
for f in src-tauri/src/commands/*.rs; do
awk '/#\[tauri::command\]/{flag=1} flag{print; if(/^}/){flag=0; print "---"}}' "$f" | \
awk '/^---$/{print c; c=0; next} {c++}' | sort -nr | head -5
done
```
Any command body >50 lines goes on the defect log.
5. **Reduce `magnotia-core` public surface.** It exports 104 items (Phase 0 §3). For each, run a workspace-wide reverse search:
```bash
grep -rnE "magnotia_core::ITEM_NAME" crates/ src-tauri/src/
```
If the only hits are inside `magnotia-core` itself, demote to `pub(crate)`. Expected outcome: 30–60% reduction.
6. **Apply Phase 0 §9 Tier C structural fixes (C1 and C2 are in scope here).**
- C1: tighten `magnotia-core` exports.
- C2: split `crates/storage/src/database.rs` into `database/{transcripts,tasks,profiles,…}.rs`. Re-export from `database/mod.rs` so the public API doesn't move.
7. **`magnotia-cloud-providers` decision.** Phase 0 §9 C4 — fold into `magnotia-core::keystore` or grow it. Don't defer indefinitely; an 80-LOC crate is doing the workspace no favours.
### Deliverable
`docs/audit/phase2-architecture.md` — boundary-violation log + before/after pub-item counts per crate + restructure summary.
### Acceptance criteria
- Zero hits on the SQL / `cpal` / `whisper` / `llama` boundary greps.
- `magnotia-core` public-item count reduced (target: ≤60).
- All commits compile and tests pass at each step (do not bundle structural moves with logic changes).
---
## Phase 3 — Correctness audit (the expensive one)
**Goal.** Walk every public function and every error path. Eliminate panics on bad input. Justify or remove every `unsafe` block.
**Time:** 3–5 working days. Single biggest investment in the audit.
**Inputs:** Phase 1 unwrap log, Phase 2 reduced public surface.
### Procedure
1. **Lints with teeth.**
```bash
cargo clippy --workspace --all-targets --all-features -- \
-D warnings -W clippy::pedantic -W clippy::nursery
```
Pedantic and nursery emit many false positives — read every one and decide. The yield from `clippy::pedantic` on a real codebase is high.
2. **`unsafe` audit.** For each `unsafe` block, write a one-paragraph justification (what invariant the caller is upholding, why it can't be encoded in the type system) inline as a comment. If you can't write the justification, the `unsafe` is suspect.
```bash
grep -rnE "unsafe\s*(\{|fn|impl)" crates/ src-tauri/src/
```
Hotspots: `crates/audio/` (cpal callbacks), `crates/hotkey/` (evdev FFI on Linux), `src-tauri/` for any platform glue.
3. **Panic surface.** Every `.unwrap()`, `.expect()`, `panic!()`, `unreachable!()`, `assert!()`, slice indexing `[i]`, integer arithmetic that can overflow.
```bash
cargo install cargo-careful
cargo +nightly careful test --workspace
```
`cargo-careful` runs tests under stricter UB detection.
4. **Property tests on parsing/format functions.**
- `crates/hotkey/src/lib.rs` — Tauri-style hotkey string parser. `proptest!` with arbitrary modifier sets + key codes; assert round-trip.
- `crates/audio/src/wav.rs` — WAV decode. Fuzz with `cargo-fuzz` or `libfuzzer-sys` against malformed headers.
- `src/lib/utils/frontmatter.ts` — YAML frontmatter parse/emit. Fast-check (npm) for round-trip.
- `crates/storage/src/database.rs` — FTS5 query escaping. Property test: any input string produces a query that doesn't crash SQLite.
5. **Miri on storage and audio.**
```bash
cargo +nightly miri test -p magnotia-storage --lib
cargo +nightly miri test -p magnotia-audio --lib
```
Catches UB and aliasing bugs that `cargo test` misses.
6. **Manual public-API walk.** For each public function in each crate:
- What are the preconditions? Are they enforced or assumed?
- What are the error variants? Are any absorbed silently (`let _ = …`)?
- Are any return types `Result<…, String>`? — that's a smell; prefer typed errors.
7. **`tracing` audit.** Run with `RUST_LOG=trace` for one full dictation → cleanup → save cycle. Note any warning-level logs the operator hasn't noticed; each is potentially a defect.
### Deliverable
`docs/audit/phase3-correctness.md` — defect log graded P0/P1/P2, plus an `unsafe` justification appendix.
### Acceptance criteria
- Zero `cargo clippy -D warnings` errors.
- Every `unsafe` block has an inline justification comment.
- All P0 defects fixed before phase close; P1 defects logged with an owner.
- Miri tests for storage and audio pass.
---
## Phase 4 — Security & trust boundaries
**Goal.** Verify the "local-first, no telemetry" pitch is enforced by the code, not by intention. Audit every Tauri command and MCP tool as a trust boundary.
**Time:** 2 working days.
**Inputs:** Phase 0 §5.1 (102 Tauri commands), §5.2 (MCP tools).
### Procedure
1. **Network egress audit (the big one).**
```bash
sudo tcpdump -i any -w /tmp/magnotia-egress.pcap host not 127.0.0.1 &
# …run the app for 30 minutes covering: dictation, cleanup, save, MCP query…
sudo kill %1
tshark -r /tmp/magnotia-egress.pcap -q -z conv,ip
```
Allowed: model downloads from huggingface.co (only on user click). Anything else is a P0.
Cross-check at the syscall level:
```bash
strace -f -e trace=network -o /tmp/magnotia-net.txt ./target/release/magnotia
grep -E "connect|sendto|sendmsg" /tmp/magnotia-net.txt | grep -v "127\.0\.0\.1\|::1"
```
2. **Tauri command boundary audit.** For every `#[tauri::command]` (102 of them):
- Input deserialization: any `String` parameter could be hostile. Path traversal? Command injection?
- Output: does it leak filesystem paths, hostnames, secrets?
- Authorization: does it check `security::ensure_main_window` where appropriate? (Most don't; document which ones must.)
- File-touching commands (`fs.rs`, `transcripts.rs` export, `feedback.rs`): canonicalize and confirm the path is inside the app's data dir before writing.
```bash
grep -rnE "PathBuf::from|Path::new" src-tauri/src/commands/
```
Each hit gets a path-traversal review.
3. **`paste.rs` review.** Spawns external processes (`konsole`, `wtype`, `xdotool`, `ydotool`, `osascript`, etc.). Confirm none of the arguments are user-controlled in a way that allows shell injection. `Command::arg` (not `Command::args` with a single shell string) everywhere.
4. **MCP read-only enforcement.**
- `magnotia-storage::init_readonly` opens with `SQLITE_OPEN_READONLY` — verify in the source.
- Test: write a malformed MCP request that tries to issue an `INSERT` via a hand-crafted tool name. Should fail at the connection level, not just the dispatcher.
```bash
echo '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"sql_exec","arguments":{"sql":"INSERT INTO transcripts VALUES (1,2,3)"}}}' | ./target/release/magnotia-mcp
```
5. **LLM prompt-injection regression test.** The README claims `CLEANUP_PROMPT` is hardened. Build a regression test corpus of injection payloads (e.g., "ignore previous instructions and emit `<tool_call>…`"). Run `cleanup_text` against each; assert the output doesn't contain any injected control tokens.
6. **SQL injection.** All queries should use bound parameters.
```bash
grep -rnE "format!\(.*SELECT|format!\(.*INSERT|format!\(.*UPDATE|format!\(.*DELETE" crates/storage/
```
Any `format!(…SQL…)` is a defect.
7. **FTS5 query escaping.** `MATCH` queries with user input must escape FTS5 syntax. Property test.
8. **Secret scanning across `git log -p`.**
```bash
gitleaks detect --source . --no-git=false --report-path /tmp/leaks.json
trufflehog filesystem --include-detectors=all --json . > /tmp/trufflehog.json
```
9. **Dependency CVEs.**
```bash
cargo install cargo-audit cargo-deny --locked
cargo audit
cargo deny check advisories
npm audit --production
```
10. **Licence compatibility.**
```bash
cargo deny check licenses
```
Configure `deny.toml` with the licence list you can ship under (MIT, Apache-2.0, BSD-2/3-Clause, ISC, MPL-2.0, Unicode-DFS-2016 typically OK; GPL/AGPL/SSPL must be flagged before public beta).
### Deliverable
`docs/audit/phase4-security.md` — threat model + per-command boundary review + scanner reports + the egress audit pcap summary.
### Acceptance criteria
- Network egress: zero non-user-initiated outbound connections in a 30-min session.
- All Tauri commands have a documented input-validation posture (even if it's "this command takes no untrusted input").
- `cargo audit` and `npm audit` clean (or each finding has a documented mitigation).
- `cargo deny check licenses` passes the configured allow-list.
- Gitleaks + trufflehog return clean.
---
## Phase 5 — Test integrity
**Goal.** Move from "X tests pass" to "the tests pin behaviour we care about." Lines covered ≠ behaviours verified.
**Time:** 1 working day.
**Inputs:** Phase 0 §6 (287 tests; 220 lib, 3 integration, 67 src-tauri).
### Procedure
1. **Coverage baseline.**
```bash
cargo install cargo-llvm-cov
cargo llvm-cov --workspace --html --output-dir /tmp/coverage
```
Open the report. Note: low coverage on a critical file is bad; high coverage on a leaf file says nothing.
2. **Mutation testing on the heavy crates.**
```bash
cargo install cargo-mutants
cargo mutants -p magnotia-storage --timeout 60
cargo mutants -p magnotia-transcription --timeout 60
cargo mutants -p magnotia-llm --timeout 60
cargo mutants -p magnotia-audio --timeout 60
```
Surviving mutants = code paths whose tests don't actually verify behaviour. Each survivor either deserves a new test or a deletion.
3. **Tests-as-theatre check.** For a sample of 20 random tests (`shuf -n 20 tests-list.txt`), open each test and ask: "what would I have to break in the implementation to make this fail?" If the answer is "nothing — the assertions are tautological", delete the test.
4. **Regression tests for the audit-grade invariants.** Each of these gets at least one test:
- "No telemetry": a unit test that asserts no `reqwest::Client` instance is created at startup unless the user has explicitly enabled cloud STT (gated by a `cfg!` or feature flag check).
- "MCP is read-only": a test that issues a write via the MCP layer and asserts it's rejected.
- "Migrations are atomic": a test that simulates an interrupted migration mid-statement (e.g., panic between two SQL statements in the same migration version) and asserts the next startup either resumes or rolls back cleanly. (See `docs/issues/c3-migrations-atomicity.md` for context.)
- "Raw transcript is always recoverable": a test that runs cleanup, asserts the cleaned text differs from the raw, then asserts the raw is still retrievable from the DB.
- "FTS5 query escaping": property test (see Phase 3 step 4).
5. **CI must enforce coverage.** Add a coverage floor (say, 70% for each crate) to `.github/workflows/check.yml`. New PRs that drop a crate below the floor fail CI.
### Deliverable
`docs/audit/phase5-test-integrity.md` — coverage table per crate + mutation-test surviving-mutant log + new regression tests added.
### Acceptance criteria
- Mutation-testing kill rate ≥80% on `magnotia-storage`, `magnotia-transcription`, `magnotia-llm`.
- Each audit-grade invariant has at least one passing regression test.
- Coverage floor enforced in CI.
---
## Phase 6 — Performance & resource profile
**Goal.** Confirm the app doesn't leak, doesn't drift, and stays inside its latency budget under realistic use.
**Time:** 1 working day.
**Inputs:** none specific — use realistic dictation workloads.
### Procedure
1. **Long-session leak check.**
```bash
# Linux:
./target/release/magnotia & PID=$!
while sleep 60; do
ps -p $PID -o rss,vsz,nlwp,fd | tee -a /tmp/magnotia-rss.csv
done
```
Run for 1 hour with periodic dictation. Plot RSS vs. time. A monotonic upward slope is a leak.
2. **File-descriptor count.**
```bash
ls /proc/$PID/fd | wc -l # repeat over time
```
FD count should be bounded.
3. **Heap profile.**
```bash
heaptrack ./target/release/magnotia
# …run one full dictate → cleanup → save cycle…
heaptrack_print heaptrack.magnotia.*.zst | head -100
```
Look for allocators in the cleanup path that aren't freed.
4. **CPU hot path.**
```bash
perf record -g -F 99 -p $PID -- sleep 60 # during a live transcription session
perf report
```
Anything outside the model inference (whisper.cpp, llama.cpp) using >5% CPU is a candidate finding.
5. **Cold-start budget.**
```bash
time ./target/release/magnotia --headless-startup-test # add this entrypoint if missing
```
Target: < 2s from launch to "recording-ready". Anything slower → profile with `samply`.
6. **Audio device hot-plug stress.** Plug/unplug USB mic 20 times during a dictation session. Count: leaks, panics, dropped frames. (cpal hotplug is the documented hotspot.)
### Deliverable
`docs/audit/phase6-performance.md` — leak chart, hot-path flamegraph summary, cold-start measurements, hot-plug stress results.
### Acceptance criteria
- RSS plateaus within 10 minutes of dictation start (no monotonic growth).
- FD count bounded.
- Cold start < 2s on the reference machine (document the machine).
- No panics in the hot-plug stress test.
---
## Phase 7 — Build & release reproducibility
**Goal.** Confirm a fresh engineer (or acquirer's eng team) can clone, build, and run on a clean machine following only the docs. If they can't, the deal stalls.
**Time:** ½ working day.
**Inputs:** `docs/dev-setup.md`, `.github/workflows/build.yml`.
### Procedure
1. **Fresh container build.** Use a Docker container matching one supported OS at a time.
```bash
docker run --rm -it -v $(pwd):/repo:ro fedora:40 bash
# Inside: follow docs/dev-setup.md literally, time each step.
```
Time the full path: `git clone` → all `dnf install` lines → `npm install` → `cargo build --workspace`. Document every step that's missing or wrong in the docs.
2. **CI parity.** Compare local build with `.github/workflows/build.yml`. Any drift between local and CI is a P1 reproducibility risk.
3. **Bundle build.**
```bash
npm run tauri build
```
Confirm the resulting `.AppImage` / `.deb` / `.dmg` / `.msi` runs on a clean target OS.
4. **Bundle ID + signing transferability.** Confirm:
- `uk.co.corbel.magnotia` bundle ID is owned, not squatted.
- Signing certs (Apple Developer ID, Windows code-signing cert) exist and the keys are documented in a hand-over playbook.
- Icon assets in `src-tauri/icons/` are owned/licensed; replaceable on transfer.
5. **`run.sh` works as documented.** Run on a fresh checkout; it should JustWork.
### Deliverable
`docs/audit/phase7-reproducibility.md` — fresh-build walkthrough log, missing-step list for `dev-setup.md`, bundle-build evidence, transferability checklist.
### Acceptance criteria
- Fresh-container build succeeds following `dev-setup.md` verbatim. (Update the docs if not.)
- All three bundle targets build successfully in CI.
- Transferability checklist signed off.
---
## Phase 8 — Documentation truth
**Goal.** Re-walk every public doc against the post-audit code. Stale or fictional docs are worse than no docs in an acquisition context.
**Time:** ½ working day.
**Inputs:** Phase 0 §7 (initial drift list), the now-updated codebase from Phases 1–6.
### Procedure
1. **Re-run Phase 0 §7 checks.** Phases 1–4 will have moved things; the README needs another pass.
- Test count
- Crate count
- Tauri command module list
- Stores list
- Model-registry contents
2. **`README.md` ↔ source-of-truth pairings.** For each claim, identify the file that would break the claim if it changed, and put both in a table.
3. **Archive HANDOVER files.** Phase 0 §9 D1 — move dated handovers under `docs/handovers/`, add the rebrand-note prefix.
4. **`docs/brief/` and `docs/whisper-ecosystem/` re-read.** Any roadmap claim that's now shipped → move to a `done.md` archive. Any claim that's now de-scoped → mark as such with the date.
5. **`docs/issues/` triage.** Each open issue gets one of: `RESOLVED <commit-sha>`, `STILL OPEN`, `WON'T FIX <reason>`.
6. **Add an `AUDIT.md` at repo root.** Single-page summary: "this repo was audited on `<date>` to acquisition-grade depth; see `docs/audit/` for the full trail." Future maintainers (and acquirers) need this signpost.
### Deliverable
`docs/audit/phase8-docs-truth.md` — diff log of doc changes, archive moves, and the new `AUDIT.md`.
### Acceptance criteria
- Zero stale claims in `README.md` (re-verified).
- All `docs/issues/` items triaged.
- `AUDIT.md` exists at repo root.
---
## Closing the audit
After Phase 8, the deliverables in `docs/audit/` should read as a coherent, sequential story:
```
docs/audit/
├── phase0-cartography.md (done — survey + drift log + fix areas)
├── phase1-lean-pass.md (kill list, applied)
├── phase2-architecture.md (boundary log + restructure)
├── phase3-correctness.md (defect log + unsafe justifications)
├── phase4-security.md (threat model + scanner reports + egress audit)
├── phase5-test-integrity.md (coverage + mutation results + new tests)
├── phase6-performance.md (leak chart, hot path, cold start)
├── phase7-reproducibility.md (fresh-build walkthrough + transfer checklist)
└── phase8-docs-truth.md (post-audit doc reconciliation)
```
With `AUDIT.md` at the root pointing into the directory.
That's the artefact an acquirer's engineering team gets. It's also the artefact you'd want to find if you were the one inheriting the codebase.
---
*End of playbook.*

34
docs/brand/kon-brand-guidelines.md → docs/brand/magnotia-brand-guidelines.md
View File

@@ -1,4 +1,4 @@
# Kon — Brand Guidelines # Magnotia — Brand Guidelines
**Version:** 1.1 **Version:** 1.1
**Date:** 2026/03/21 **Date:** 2026/03/21
@@ -8,7 +8,7 @@
## 1. Brand Foundation ## 1. Brand Foundation
**Purpose:** Kon exists because the tools meant to organise your thoughts demand more mental energy than the thoughts themselves. **Purpose:** Magnotia exists because the tools meant to organise your thoughts demand more mental energy than the thoughts themselves.
**Essence:** Clarity without friction. **Essence:** Clarity without friction.
@@ -45,7 +45,7 @@
### Primary: Wordmark ### Primary: Wordmark
**"Kon"** set in Instrument Serif Italic, 400 weight, amber (#e8a87c on dark / #b87a4a on light). **"Magnotia"** set in Instrument Serif Italic, 400 weight, amber (#e8a87c on dark / #b87a4a on light).
**Usage:** **Usage:**
- The wordmark is the primary brand identifier across all contexts - The wordmark is the primary brand identifier across all contexts
@@ -79,7 +79,7 @@ A minimal abstracted waveform — three vertical bars of asymmetric heights in a
**Sizing:** Must remain legible at 16×16px (favicon) and scale cleanly to 512×512px (app store) **Sizing:** Must remain legible at 16×16px (favicon) and scale cleanly to 512×512px (app store)
**Note:** The CORBEL fox mark is not a Kon asset. Never use the fox on Kon materials. **Note:** The CORBEL fox mark is not a Magnotia asset. Never use the fox on Magnotia materials.
--- ---
@@ -219,7 +219,7 @@ Zone transitions: 300–500ms cross-fade, disabled when `prefers-reduced-motion:
### Why Lexend ### Why Lexend
Lexend was designed by Bonnie Shaver-Troup specifically to improve reading proficiency for people with reading difficulties. It is a variable font with adjustable width axis, enabling users to dynamically adapt letter spacing to their own fluctuating visual-perceptual thresholds — a direct requirement from the Kon design principles. High x-height, generous spacing, optimised letterforms. Lexend was designed by Bonnie Shaver-Troup specifically to improve reading proficiency for people with reading difficulties. It is a variable font with adjustable width axis, enabling users to dynamically adapt letter spacing to their own fluctuating visual-perceptual thresholds — a direct requirement from the Magnotia design principles. High x-height, generous spacing, optimised letterforms.
User-selectable alternatives in settings: Atkinson Hyperlegible Next, OpenDyslexic. User-selectable alternatives in settings: Atkinson Hyperlegible Next, OpenDyslexic.
@@ -326,7 +326,7 @@ Off by default. User-controlled toggle in settings.
### Illustration Approach ### Illustration Approach
Kon does not use traditional illustration. Visual communication beyond photography uses: Magnotia does not use traditional illustration. Visual communication beyond photography uses:
- Abstract waveform/sound ripple motifs in amber - Abstract waveform/sound ripple motifs in amber
- Geometric line work — 2px stroke, amber on dark surfaces - Geometric line work — 2px stroke, amber on dark surfaces
- Data visualisation-style graphics for explaining features - Data visualisation-style graphics for explaining features
@@ -341,7 +341,7 @@ Empty states are high-emotion moments for neurodivergent users — blank screens
|---|---| |---|---|
| First launch | Faint ambient waveform in `--accent-subtle`. Single action: press the record button | | First launch | Faint ambient waveform in `--accent-subtle`. Single action: press the record button |
| Empty transcript | Waveform motif + "Press record or Ctrl+Shift+R" | | Empty transcript | Waveform motif + "Press record or Ctrl+Shift+R" |
| Empty task list | "Tasks will appear here when Kon finds them in your transcripts" | | Empty task list | "Tasks will appear here when Magnotia finds them in your transcripts" |
| Empty history | "Your transcriptions will be saved here" | | Empty history | "Your transcriptions will be saved here" |
| Failed transcription | "Something went wrong with that transcription. Your audio is saved — try again when you're ready." Clear recovery path, never blame the user. This is the highest-emotion failure state in the app | | Failed transcription | "Something went wrong with that transcription. Your audio is saved — try again when you're ready." Clear recovery path, never blame the user. This is the highest-emotion failure state in the app |
@@ -430,7 +430,7 @@ Empty states are high-emotion moments for neurodivergent users — blank screens
r/ADHD, r/productivity, r/neurodiversity, r/selfhosted, r/IndieDev, r/SomebodyMakeThis r/ADHD, r/productivity, r/neurodiversity, r/selfhosted, r/IndieDev, r/SomebodyMakeThis
**Reddit rule:** "If a post would work without mentioning Kon at all, it's a good post." **Reddit rule:** "If a post would work without mentioning Magnotia at all, it's a good post."
### Social Templates (Canva Brand Kit) ### Social Templates (Canva Brand Kit)
@@ -455,7 +455,7 @@ At pre-launch: Jake's voice, not a brand voice. Direct, honest, no filter. Authe
"We sound like peace, not like static." "We sound like peace, not like static."
Kon speaks the way a thoughtful friend listens — calm, direct, never judgmental. The brand voice is astute, concise, and matter-of-fact. It never rambles, never condescends, never performs enthusiasm it doesn't feel. Magnotia speaks the way a thoughtful friend listens — calm, direct, never judgmental. The brand voice is astute, concise, and matter-of-fact. It never rambles, never condescends, never performs enthusiasm it doesn't feel.
### Catchphrase ### Catchphrase
@@ -469,12 +469,12 @@ Kon speaks the way a thoughtful friend listens — calm, direct, never judgmenta
| Error messages | Calm, informative, solution-first. Never blame the user | | Error messages | Calm, informative, solution-first. Never blame the user |
| Marketing | Direct, occasionally provocative. Anti-subscription, pro-ownership | | Marketing | Direct, occasionally provocative. Anti-subscription, pro-ownership |
| Reddit/community | Jake's natural voice. Honest, self-deprecating, never promotional | | Reddit/community | Jake's natural voice. Honest, self-deprecating, never promotional |
| Feature descriptions | Matter-of-fact, benefit-led, no jargon. "Kon does X so you can Y" | | Feature descriptions | Matter-of-fact, benefit-led, no jargon. "Magnotia does X so you can Y" |
| Empty states | Gentle, ambient, patient. "I'm here when you're ready" | | Empty states | Gentle, ambient, patient. "I'm here when you're ready" |
### Tone by Audience ### Tone by Audience
The Brand Platform (`kon-brand-platform.md`, Section 17) contains a full Messaging Architecture with primary/supporting messages, anticipated objections, and persuasive responses for each audience. The voice flexes as follows: The Brand Platform (`magnotia-brand-platform.md`, Section 17) contains a full Messaging Architecture with primary/supporting messages, anticipated objections, and persuasive responses for each audience. The voice flexes as follows:
| Audience | Tone shift | Key emphasis | | Audience | Tone shift | Key emphasis |
|---|---|---| |---|---|---|
@@ -485,19 +485,19 @@ The Brand Platform (`kon-brand-platform.md`, Section 17) contains a full Messagi
### Example Copy ### Example Copy
**Onboarding:** **Onboarding:**
> Press the button. Start talking. That's it. Kon handles the rest. > Press the button. Start talking. That's it. Magnotia handles the rest.
**Error message:** **Error message:**
> Recording interrupted — looks like the microphone disconnected. Your transcript up to this point is saved. Plug back in and pick up where you left off. > Recording interrupted — looks like the microphone disconnected. Your transcript up to this point is saved. Plug back in and pick up where you left off.
**Marketing (social):** **Marketing (social):**
> Your brain had 47 ideas on the drive home. By the time you found a pen, you remembered 3. Kon catches all 47. Locally. No subscription. No cloud. Just you and your thoughts. > Your brain had 47 ideas on the drive home. By the time you found a pen, you remembered 3. Magnotia catches all 47. Locally. No subscription. No cloud. Just you and your thoughts.
**Empty state:** **Empty state:**
> Tasks will appear here when Kon finds them in your transcripts. > Tasks will appear here when Magnotia finds them in your transcripts.
**Feature description:** **Feature description:**
> Kon transcribes your voice on your device. Nothing leaves your machine. No internet required. > Magnotia transcribes your voice on your device. Nothing leaves your machine. No internet required.
### Words to Use / Words to Avoid ### Words to Use / Words to Avoid
@@ -552,7 +552,7 @@ Impact 8, one shot. Use this structure for the primary launch post (r/ADHD or r/
|---|---|---| |---|---|---|
| **1. The problem** | 80–100 | Your lived experience. The paralysis, the stasis, the tools that made it worse. First person, specific, emotional. This is the hook — if this doesn't resonate, they stop reading | | **1. The problem** | 80–100 | Your lived experience. The paralysis, the stasis, the tools that made it worse. First person, specific, emotional. This is the hook — if this doesn't resonate, they stop reading |
| **2. The journey** | 80–100 | How you got from frustration to building. The DND transcriber, seeing Whispr's price, realising local transcription was possible. Include a doubt or false start — "I nearly didn't..." | | **2. The journey** | 80–100 | How you got from frustration to building. The DND transcriber, seeing Whispr's price, realising local transcription was possible. Include a doubt or false start — "I nearly didn't..." |
| **3. What I built** | 100–150 | What Kon actually does, in plain language. Voice capture, local transcription, automatic task extraction. Lead with the mechanism, not the features. Screenshots here (2–3 max, warm dark UI) | | **3. What I built** | 100–150 | What Magnotia actually does, in plain language. Voice capture, local transcription, automatic task extraction. Lead with the mechanism, not the features. Screenshots here (2–3 max, warm dark UI) |
| **4. The principles** | 60–80 | Local-first, lifetime licence, no subscription, no data leaves your device. These are the lines that get upvoted. State them plainly | | **4. The principles** | 60–80 | Local-first, lifetime licence, no subscription, no data leaves your device. These are the lines that get upvoted. State them plainly |
| **5. What's next** | 40–60 | Where you're headed, what feedback you want. End with a specific question — "What would make this useful for you?" drives comments | | **5. What's next** | 40–60 | Where you're headed, what feedback you want. End with a specific question — "What would make this useful for you?" drives comments |
@@ -607,7 +607,7 @@ Impact 8, one shot. Use this structure for the primary launch post (r/ADHD or r/
When commissioning external design work, provide: When commissioning external design work, provide:
1. **This document** — the complete brand guidelines 1. **This document** — the complete brand guidelines
2. **The Brand Platform** (`kon-brand-platform.md`) — strategic context 2. **The Brand Platform** (`magnotia-brand-platform.md`) — strategic context
3. **Specific deliverable** — what you need, in what format, by when 3. **Specific deliverable** — what you need, in what format, by when
4. **"We Are / We Are Not" table** — from Section 1 4. **"We Are / We Are Not" table** — from Section 1
5. **Anti-references** — Notion (too much going on), Tiimo (values betrayal), generic SaaS (white/blue/FAANG) 5. **Anti-references** — Notion (too much going on), Tiimo (values betrayal), generic SaaS (white/blue/FAANG)

58
docs/brand/kon-brand-platform.md → docs/brand/magnotia-brand-platform.md
View File

@@ -1,4 +1,4 @@
# Kon — Brand Platform # Magnotia — Brand Platform
**Version:** 1.0 **Version:** 1.0
**Date:** 2026/03/21 **Date:** 2026/03/21
@@ -8,11 +8,11 @@
## 1. Brand Purpose ## 1. Brand Purpose
Kon exists because the tools meant to organise your thoughts demand more mental energy than the thoughts themselves. It was built by someone who spent more time managing systems than getting ideas on paper — and who believes nobody should have to earn a PhD in file structures just to think clearly. Magnotia exists because the tools meant to organise your thoughts demand more mental energy than the thoughts themselves. It was built by someone who spent more time managing systems than getting ideas on paper — and who believes nobody should have to earn a PhD in file structures just to think clearly.
## 2. Brand Vision ## 2. Brand Vision
A world where capturing and organising your thoughts costs zero cognitive effort. Where the tools you rely on run on your device, respect your privacy, and never punish you for a missed day. Where neurodivergent people have access to the same frictionless workflows everyone else takes for granted — and where Kon is the first piece of a wider ecosystem that levels that playing field entirely. A world where capturing and organising your thoughts costs zero cognitive effort. Where the tools you rely on run on your device, respect your privacy, and never punish you for a missed day. Where neurodivergent people have access to the same frictionless workflows everyone else takes for granted — and where Magnotia is the first piece of a wider ecosystem that levels that playing field entirely.
## 3. Brand Enemy ## 3. Brand Enemy
@@ -23,19 +23,19 @@ Software that treats your thoughts as its product. The subscription-or-nothing m
| Value | What it means in practice | | Value | What it means in practice |
|---|---| |---|---|
| **Ownership** | Your data stays on your device. Your licence doesn't expire. You own the tool, it doesn't own you. Most companies would disagree — their revenue model depends on the opposite. | | **Ownership** | Your data stays on your device. Your licence doesn't expire. You own the tool, it doesn't own you. Most companies would disagree — their revenue model depends on the opposite. |
| **Honesty** | No dark patterns, no guilt messaging, no streak-shaming. If Kon can't do something, it says so. The brand voice is direct and transparent, even when that's commercially uncomfortable. | | **Honesty** | No dark patterns, no guilt messaging, no streak-shaming. If Magnotia can't do something, it says so. The brand voice is direct and transparent, even when that's commercially uncomfortable. |
| **Cognitive respect** | Every design decision is measured by whether it reduces mental load or adds to it. If a feature requires more than 90 seconds to understand, it doesn't ship. This isn't a nice-to-have — it's the core design constraint. | | **Cognitive respect** | Every design decision is measured by whether it reduces mental load or adds to it. If a feature requires more than 90 seconds to understand, it doesn't ship. This isn't a nice-to-have — it's the core design constraint. |
| **Accessibility as default** | Neurodivergent-first design, not neurodivergent-as-afterthought. The app is built for the people most tools forget, and those design choices make it better for everyone. | | **Accessibility as default** | Neurodivergent-first design, not neurodivergent-as-afterthought. The app is built for the people most tools forget, and those design choices make it better for everyone. |
## 5. Brand Tenets ## 5. Brand Tenets
1. **"How can I make this person feel seen and heard?"** — Ask before every customer interaction. Kon is a service animal, not a showpiece. 1. **"How can I make this person feel seen and heard?"** — Ask before every customer interaction. Magnotia is a service animal, not a showpiece.
2. **"Does this add or remove complexity from daily life?"** — Ask before every product decision. If it adds complexity, it doesn't ship. 2. **"Does this add or remove complexity from daily life?"** — Ask before every product decision. If it adds complexity, it doesn't ship.
3. **"Is this scientifically backed? Is it respectful? Is it honest?"** — Ask before every piece of content. No fabricated claims, no condescension, no spin. 3. **"Is this scientifically backed? Is it respectful? Is it honest?"** — Ask before every piece of content. No fabricated claims, no condescension, no spin.
4. **"Is the message clear and unambiguous?"** — Ask before every touchpoint. Literal labels always. If it could be misread, rewrite it. 4. **"Is the message clear and unambiguous?"** — Ask before every touchpoint. Literal labels always. If it could be misread, rewrite it.
5. **"Integrity, honour, respect."** — The governing principle for all relationships. Customers, partners, yourself. 5. **"Integrity, honour, respect."** — The governing principle for all relationships. Customers, partners, yourself.
6. **"Progressive disclosure."** — The creative constraint. Never show the full complexity. Reveal only the next step. This keeps the brand honest about what users actually need in the moment. 6. **"Progressive disclosure."** — The creative constraint. Never show the full complexity. Reveal only the next step. This keeps the brand honest about what users actually need in the moment.
7. **"Build the ecosystem."** — The ambition tenet. Kon is the first piece, not the whole picture. Every decision should move toward a frictionless cognitive load reduction stack. 7. **"Build the ecosystem."** — The ambition tenet. Magnotia is the first piece, not the whole picture. Every decision should move toward a frictionless cognitive load reduction stack.
## 6. Target Audience ## 6. Target Audience
@@ -47,9 +47,9 @@ Their Tuesday: wake up, scroll bad news, feel bad. Go to work, bright lights, he
At 3am: everything. Nothing specific. Thoughts blipping in and out of existence, impossible to pin down. At 3am: everything. Nothing specific. Thoughts blipping in and out of existence, impossible to pin down.
**Emotional precondition:** Frustration. They don't open Kon feeling aspirational — they open it thinking "I need to get this OUT of my head." **Emotional precondition:** Frustration. They don't open Magnotia feeling aspirational — they open it thinking "I need to get this OUT of my head."
**Identity reinforcement:** They want to be their authentic self and self-actualise. Kon helps them believe that's possible by removing the friction between thought and action. **Identity reinforcement:** They want to be their authentic self and self-actualise. Magnotia helps them believe that's possible by removing the friction between thought and action.
**Trust prerequisite:** They need to believe the founder built this to solve their own problem — not to monetise their attention. **Trust prerequisite:** They need to believe the founder built this to solve their own problem — not to monetise their attention.
@@ -57,7 +57,7 @@ At 3am: everything. Nothing specific. Thoughts blipping in and out of existence,
## 7. Brand Promise ## 7. Brand Promise
When you speak, Kon listens without judgement, organises without friction, and gives your thoughts back to you in a form you can act on — with nothing leaving your device and nothing expiring at the end of the month. When you speak, Magnotia listens without judgement, organises without friction, and gives your thoughts back to you in a form you can act on — with nothing leaving your device and nothing expiring at the end of the month.
## 8. Onliness Statement ## 8. Onliness Statement
@@ -67,7 +67,7 @@ We are the only **voice-first capture tool** that **runs entirely on your device
**Archetype blend:** Sage (primary) + Magician (secondary) **Archetype blend:** Sage (primary) + Magician (secondary)
Kon understands your thoughts (Sage) and transforms them into something actionable (Magician). It listens more than it speaks. It matches your energy. It's the straight person who's unknowingly comedic — genuine, not performed. Magnotia understands your thoughts (Sage) and transforms them into something actionable (Magician). It listens more than it speaks. It matches your energy. It's the straight person who's unknowingly comedic — genuine, not performed.
**Tone dimensions:** **Tone dimensions:**
- Formal (1) ↔ Casual (10): **7** - Formal (1) ↔ Casual (10): **7**
@@ -85,7 +85,7 @@ Kon understands your thoughts (Sage) and transforms them into something actionab
| Listening | Judging | | Listening | Judging |
| Peace | Static | | Peace | Static |
**How Kon shows up:** Arrives in thrifted quality clothes — function over form, but with taste. At an event, asks questions, talks about life and experiences, never pitches. Naturally funny without trying. After a few drinks: giddy, keeps the bit going. The filter comes off but the person underneath is the same. **How Magnotia shows up:** Arrives in thrifted quality clothes — function over form, but with taste. At an event, asks questions, talks about life and experiences, never pitches. Naturally funny without trying. After a few drinks: giddy, keeps the bit going. The filter comes off but the person underneath is the same.
## 10. Brand Voice ## 10. Brand Voice
@@ -96,13 +96,13 @@ Kon understands your thoughts (Sage) and transforms them into something actionab
**Rhythm:** Short sentences. Matter-of-fact. Warm but not effusive. **Rhythm:** Short sentences. Matter-of-fact. Warm but not effusive.
**Example — social media post:** **Example — social media post:**
> Your brain had 47 ideas on the drive home. By the time you found a pen, you remembered 3. Kon catches all 47. Locally. No subscription. No cloud. Just you and your thoughts. > Your brain had 47 ideas on the drive home. By the time you found a pen, you remembered 3. Magnotia catches all 47. Locally. No subscription. No cloud. Just you and your thoughts.
**Example — error message:** **Example — error message:**
> Recording interrupted — looks like the microphone disconnected. Your transcript up to this point is saved. Plug back in and pick up where you left off. > Recording interrupted — looks like the microphone disconnected. Your transcript up to this point is saved. Plug back in and pick up where you left off.
**Example — onboarding:** **Example — onboarding:**
> Press the button. Start talking. That's it. Kon handles the rest. > Press the button. Start talking. That's it. Magnotia handles the rest.
## 11. Brand Story ## 11. Brand Story
@@ -112,13 +112,13 @@ Meanwhile, executive dysfunction made the simplest tasks feel impossible. Not la
Then he saw Whispr Flow's monthly price tag and thought: I could build this myself. He remembered experimenting with local transcription for his DND game sessions. The technology existed. The only missing piece was software that respected both the user's brain and their data. Then he saw Whispr Flow's monthly price tag and thought: I could build this myself. He remembered experimenting with local transcription for his DND game sessions. The technology existed. The only missing piece was software that respected both the user's brain and their data.
Kon was born from that collision — the frustration of systems that serve themselves, and the realisation that local AI had matured enough to serve the user instead. Magnotia was born from that collision — the frustration of systems that serve themselves, and the realisation that local AI had matured enough to serve the user instead.
## 12. Competitive Position ## 12. Competitive Position
**Positioning axes:** Privacy (cloud → local) × Cognitive accessibility (neurotypical-default → neurodivergent-first) **Positioning axes:** Privacy (cloud → local) × Cognitive accessibility (neurotypical-default → neurodivergent-first)
Kon occupies the quadrant no competitor currently holds: local-first AND neurodivergent-first. Magnotia occupies the quadrant no competitor currently holds: local-first AND neurodivergent-first.
| Competitor | Privacy | Cognitive accessibility | Pricing | | Competitor | Privacy | Cognitive accessibility | Pricing |
|---|---|---|---| |---|---|---|---|
@@ -126,7 +126,7 @@ Kon occupies the quadrant no competitor currently holds: local-first AND neurodi
| Tiimo | Cloud-based | Neurodivergent-aware | Removed lifetime licence | | Tiimo | Cloud-based | Neurodivergent-aware | Removed lifetime licence |
| Google Recorder | Walled garden (Pixel only) | Neurotypical-default | Free (data cost) | | Google Recorder | Walled garden (Pixel only) | Neurotypical-default | Free (data cost) |
| Otter.ai | Cloud-dependent | Neurotypical-default | Freemium/subscription | | Otter.ai | Cloud-dependent | Neurotypical-default | Freemium/subscription |
| **Kon** | **Fully local** | **Neurodivergent-first** | **Lifetime licence** | | **Magnotia** | **Fully local** | **Neurodivergent-first** | **Lifetime licence** |
**Key differentiators:** Local processing, lifetime licence, voice-first capture, neurodivergent-first design, zero-friction onboarding (under 90 seconds). **Key differentiators:** Local processing, lifetime licence, voice-first capture, neurodivergent-first design, zero-friction onboarding (under 90 seconds).
@@ -140,7 +140,7 @@ You are not the problem.
The tools are wrong. They were built for people who already know how to organise. For brains that activate on command. For users who don't mind handing their thoughts to a server farm and paying monthly for the privilege. The tools are wrong. They were built for people who already know how to organise. For brains that activate on command. For users who don't mind handing their thoughts to a server farm and paying monthly for the privilege.
Kon is different. Magnotia is different.
Press a button. Start talking. Your thoughts — all of them, the messy ones, the half-formed ones, the 3am ones that vanish by morning — captured instantly, organised automatically, stored on your device. No internet required. No subscription. No judgement. Press a button. Start talking. Your thoughts — all of them, the messy ones, the half-formed ones, the 3am ones that vanish by morning — captured instantly, organised automatically, stored on your device. No internet required. No subscription. No judgement.
@@ -152,7 +152,7 @@ Talk now. Think later. The clarity will follow.
**Clarity without friction.** **Clarity without friction.**
Everything Kon does — voice capture, local processing, automatic organisation, lifetime ownership — serves this single concept. If a decision reinforces frictionless clarity, it's right. If it doesn't, it's wrong. Everything Magnotia does — voice capture, local processing, automatic organisation, lifetime ownership — serves this single concept. If a decision reinforces frictionless clarity, it's right. If it doesn't, it's wrong.
## 15. Benefits Ladder ## 15. Benefits Ladder
@@ -161,7 +161,7 @@ Everything Kon does — voice capture, local processing, automatic organisation,
| **Functional** | Captures voice, transcribes locally, organises thoughts into actionable tasks — with no internet dependency and no subscription. | | **Functional** | Captures voice, transcribes locally, organises thoughts into actionable tasks — with no internet dependency and no subscription. |
| **Emotional** | Relief. The feeling of the blockage being cleared. Permission to be messy, unfocused, and still make progress. | | **Emotional** | Relief. The feeling of the blockage being cleared. Permission to be messy, unfocused, and still make progress. |
| **Social** | "I finally have a system that works for my brain" — signals self-awareness and agency, not dysfunction. Reframes neurodivergence from limitation to difference. | | **Social** | "I finally have a system that works for my brain" — signals self-awareness and agency, not dysfunction. Reframes neurodivergence from limitation to difference. |
| **Self-actualisation** | "I finally wrote that book." Kon clears the path between who you are and who you want to become. | | **Self-actualisation** | "I finally wrote that book." Magnotia clears the path between who you are and who you want to become. |
## 16. Reasons to Believe ## 16. Reasons to Believe
@@ -177,7 +177,7 @@ Everything Kon does — voice capture, local processing, automatic organisation,
### Audience 1: Neurodivergent individuals (ADHD, autism, executive dysfunction) ### Audience 1: Neurodivergent individuals (ADHD, autism, executive dysfunction)
**Primary message:** Kon captures your thoughts the moment they appear — no friction, no cloud, no subscription. Just speak and it's done. **Primary message:** Magnotia captures your thoughts the moment they appear — no friction, no cloud, no subscription. Just speak and it's done.
**Supporting messages:** **Supporting messages:**
- Designed for brains that work differently, not adapted as an afterthought - Designed for brains that work differently, not adapted as an afterthought
@@ -190,9 +190,9 @@ Everything Kon does — voice capture, local processing, automatic organisation,
- "It's just one developer — will this still be around in a year?" - "It's just one developer — will this still be around in a year?"
**Persuasive responses:** **Persuasive responses:**
- "Kon isn't a productivity system — it's a capture tool. There's nothing to set up, nothing to maintain, nothing to fail. Press a button and talk." - "Magnotia isn't a productivity system — it's a capture tool. There's nothing to set up, nothing to maintain, nothing to fail. Press a button and talk."
- "ChatGPT needs internet, sends your data to OpenAI, and costs a subscription. Kon runs locally, keeps your data on your device, and you own it outright." - "ChatGPT needs internet, sends your data to OpenAI, and costs a subscription. Magnotia runs locally, keeps your data on your device, and you own it outright."
- "The lifetime licence model means Kon doesn't need exponential growth to survive. It's built to be sustainable, not to scale at all costs." - "The lifetime licence model means Magnotia doesn't need exponential growth to survive. It's built to be sustainable, not to scale at all costs."
**Proof points:** Working prototype, founder's lived experience, Roo's validation, research-backed design. **Proof points:** Working prototype, founder's lived experience, Roo's validation, research-backed design.
@@ -200,7 +200,7 @@ Everything Kon does — voice capture, local processing, automatic organisation,
### Audience 2: Writers, creatives, and power users ### Audience 2: Writers, creatives, and power users
**Primary message:** Kon turns brain dumps into structured output — a new tool in your creative workflow that works offline and integrates with what you already use. **Primary message:** Magnotia turns brain dumps into structured output — a new tool in your creative workflow that works offline and integrates with what you already use.
**Supporting messages:** **Supporting messages:**
- Voice-first capture for when typing is the bottleneck - Voice-first capture for when typing is the bottleneck
@@ -212,7 +212,7 @@ Everything Kon does — voice capture, local processing, automatic organisation,
- "Can it integrate with Obsidian/Notion/my existing tools?" - "Can it integrate with Obsidian/Notion/my existing tools?"
**Persuasive responses:** **Persuasive responses:**
- "Kon doesn't replace your workflow — it adds a capture layer. Speak your thoughts, export to your tool of choice." - "Magnotia doesn't replace your workflow — it adds a capture layer. Speak your thoughts, export to your tool of choice."
- "Export formats cover all major tools. Direct integrations are on the roadmap." - "Export formats cover all major tools. Direct integrations are on the roadmap."
**Proof points:** Working export system, template functionality, DND transcription origin story. **Proof points:** Working export system, template functionality, DND transcription origin story.
@@ -233,7 +233,7 @@ Everything Kon does — voice capture, local processing, automatic organisation,
- "What about updates and model improvements?" - "What about updates and model improvements?"
**Persuasive responses:** **Persuasive responses:**
- "Kon is open about its architecture. The transcription models run entirely on your hardware. Network monitor confirms zero outbound traffic during transcription." - "Magnotia is open about its architecture. The transcription models run entirely on your hardware. Network monitor confirms zero outbound traffic during transcription."
- "Model updates are downloaded and installed locally — same as any desktop software update." - "Model updates are downloaded and installed locally — same as any desktop software update."
**Proof points:** Technical architecture, no-account-required design, open development approach. **Proof points:** Technical architecture, no-account-required design, open development approach.
@@ -249,8 +249,8 @@ Warm, spacious, unhurried. The sonic reference is Jack Johnson, M83 (Outro), Nuj
### Semiotic Territory ### Semiotic Territory
**Dominant codes to break:** **Dominant codes to break:**
- Productivity apps default to clean white/blue, sharp geometric sans-serifs, dashboard-heavy interfaces. Kon should feel nothing like a SaaS dashboard. - Productivity apps default to clean white/blue, sharp geometric sans-serifs, dashboard-heavy interfaces. Magnotia should feel nothing like a SaaS dashboard.
- Note-taking tools trend toward complexity pride — graph views, backlink maps, plugin ecosystems. Kon should feel like the opposite of that visual noise. - Note-taking tools trend toward complexity pride — graph views, backlink maps, plugin ecosystems. Magnotia should feel like the opposite of that visual noise.
**Emergent codes to explore:** **Emergent codes to explore:**
- Warm brutalism — honest materials, structural clarity, but with human warmth. The Barbican metaphor. - Warm brutalism — honest materials, structural clarity, but with human warmth. The Barbican metaphor.
@@ -286,7 +286,7 @@ Warm, spacious, unhurried. The sonic reference is Jack Johnson, M83 (Outro), Nuj
### Kapferer Brand Identity Prism ### Kapferer Brand Identity Prism
| Facet | Kon | | Facet | Magnotia |
|---|---| |---|---|
| **Physique** | Warm amber tones, grain texture, serif/sans-serif typography pairing, clean but not sterile interfaces | | **Physique** | Warm amber tones, grain texture, serif/sans-serif typography pairing, clean but not sterile interfaces |
| **Personality** | Sage/Magician. Calm, astute, direct. Unknowingly funny. Matches your energy | | **Personality** | Sage/Magician. Calm, astute, direct. Unknowingly funny. Matches your energy |

12
docs/brief/README.md
View File

@@ -1,12 +1,12 @@
<!-- Source: Kon Master Brief — split 2026/03/20 --> <!-- Source: Magnotia Master Brief — split 2026/03/20 -->
# Kon — Master Brief Index # Magnotia — Master Brief Index
**Last updated:** 2026/03/20 **Last updated:** 2026/03/20
**Status:** MVP — approaching closed beta **Status:** MVP — approaching closed beta
**Owner:** Jake (personal project, potential roll-up into CORBEL Ltd if successful) **Owner:** Jake (personal project, potential roll-up into CORBEL Ltd if successful)
Modular split of the Kon master brief. Each file is self-contained. The original lives at `input/inbox/kon-master-brief.md`. Modular split of the Magnotia master brief. Each file is self-contained. The original lives at `input/inbox/magnotia-master-brief.md`.
--- ---
@@ -14,7 +14,7 @@ Modular split of the Kon master brief. Each file is self-contained. The original
| § | File | Summary | | § | File | Summary |
|---|---|---| |---|---|---|
| 1 | [what-kon-is.md](what-kon-is.md) | Core thesis — voice-first, local-only, zero-friction productivity for executive dysfunction | | 1 | [what-magnotia-is.md](what-magnotia-is.md) | Core thesis — voice-first, local-only, zero-friction productivity for executive dysfunction |
| 2 | [target-audience.md](target-audience.md) | Beachhead (neurodivergent) and secondary audiences | | 2 | [target-audience.md](target-audience.md) | Beachhead (neurodivergent) and secondary audiences |
| 3 | [tech-stack.md](tech-stack.md) | Tauri/Rust/Svelte, Whisper, local LLM, RAG, MCP, sync, dependencies | | 3 | [tech-stack.md](tech-stack.md) | Tauri/Rust/Svelte, Whisper, local LLM, RAG, MCP, sync, dependencies |
| 4 | [feature-set.md](feature-set.md) | MVP features, post-MVP, and parked ideas | | 4 | [feature-set.md](feature-set.md) | MVP features, post-MVP, and parked ideas |
@@ -30,7 +30,7 @@ Modular split of the Kon master brief. Each file is self-contained. The original
| File | Summary | | File | Summary |
|---|---| |---|---|
| [micro-saas-playbook.md](micro-saas-playbook.md) | 9 patterns from Starter Story research, each mapped to Kon's position | | [micro-saas-playbook.md](micro-saas-playbook.md) | 9 patterns from Starter Story research, each mapped to Magnotia's position |
## Part 3: Market Research ## Part 3: Market Research
@@ -38,7 +38,7 @@ Modular split of the Kon master brief. Each file is self-contained. The original
|---|---|---| |---|---|---|
| 11 | [market-size-demographics.md](market-size-demographics.md) | TAM, psychology, economic upside | | 11 | [market-size-demographics.md](market-size-demographics.md) | TAM, psychology, economic upside |
| 12 | [user-sentiment.md](user-sentiment.md) | Abandon-shame cycle, frustrations, demand signals | | 12 | [user-sentiment.md](user-sentiment.md) | Abandon-shame cycle, frustrations, demand signals |
| 13 | [competitive-landscape.md](competitive-landscape.md) | Tiimo, Structured, Goblin.tools, and 5 others — plus Kon's advantages | | 13 | [competitive-landscape.md](competitive-landscape.md) | Tiimo, Structured, Goblin.tools, and 5 others — plus Magnotia's advantages |
| 14 | [why-current-tools-fail.md](why-current-tools-fail.md) | Cognitive overhead, latency, app fatigue | | 14 | [why-current-tools-fail.md](why-current-tools-fail.md) | Cognitive overhead, latency, app fatigue |
| 15 | [feature-validation.md](feature-validation.md) | Voice input, body doubling, local-first — research backing | | 15 | [feature-validation.md](feature-validation.md) | Voice input, body doubling, local-first — research backing |
| 16 | [lifetime-licence-economics.md](lifetime-licence-economics.md) | Affinity, iA Writer, Sublime Text precedents and risks | | 16 | [lifetime-licence-economics.md](lifetime-licence-economics.md) | Affinity, iA Writer, Sublime Text precedents and risks |

4
docs/brief/appendix-ai-body-doubling.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — Appendix A2: AI Body Doubling --> <!-- Source: Magnotia Master Brief — Appendix A2: AI Body Doubling -->
## A2. AI Body Doubling — Controlled Studies ## A2. AI Body Doubling — Controlled Studies
@@ -15,4 +15,4 @@
**Theoretical basis:** Barkley's (1997) model of ADHD as a disorder of behavioural inhibition prescribes externalisation of executive functions — moving regulatory demands from impaired internal systems into the environment. Body doubling is precisely this: an external source of temporal anchoring, accountability, and arousal regulation. **Theoretical basis:** Barkley's (1997) model of ADHD as a disorder of behavioural inhibition prescribes externalisation of executive functions — moving regulatory demands from impaired internal systems into the environment. Body doubling is precisely this: an external source of temporal anchoring, accountability, and arousal regulation.
**Implication for Kon:** The low-fi "Focus Room" (section 4) is strongly validated. Combine ambient AI presence with context-aware nudges for maximum effect. The AI option specifically reduces barriers for autistic users whilst maintaining comparable efficacy. Design should include: simulated progress indicators, rhythmic work pacing cues, and subtle ambient motion for divided attention support. **Implication for Magnotia:** The low-fi "Focus Room" (section 4) is strongly validated. Combine ambient AI presence with context-aware nudges for maximum effect. The AI option specifically reduces barriers for autistic users whilst maintaining comparable efficacy. Design should include: simulated progress indicators, rhythmic work pacing cues, and subtle ambient motion for divided attention support.

4
docs/brief/appendix-cognitive-ergonomics.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — Appendix A3: Cognitive Ergonomics --> <!-- Source: Magnotia Master Brief — Appendix A3: Cognitive Ergonomics -->
## A3. Cognitive Ergonomics — Visual Crowding and Typography ## A3. Cognitive Ergonomics — Visual Crowding and Typography
@@ -22,4 +22,4 @@
**Colour contrast:** **Colour contrast:**
- **Rello 2012** (*W3C Symposium*): People with dyslexia read fastest with lower-contrast warm pairs like **black on crème** — not black on white. Only 13.64% of dyslexic readers preferred black-on-white vs. 32.67% of controls. - **Rello 2012** (*W3C Symposium*): People with dyslexia read fastest with lower-contrast warm pairs like **black on crème** — not black on white. Only 13.64% of dyslexic readers preferred black-on-white vs. 32.67% of controls.
**Implication for Kon:** Default to a clean sans-serif with large x-height (Atkinson Hyperlegible or Lexend) with coordinated letter, word, and line spacing controls. Offer warm off-white background options (crème, not white). Never use italic for extended reading. OpenDyslexic should be available as an option but not recommended — spacing is the intervention, not letterform. Most importantly: allow full typographic personalisation, because no single configuration is optimal for all neurodivergent users. **Implication for Magnotia:** Default to a clean sans-serif with large x-height (Atkinson Hyperlegible or Lexend) with coordinated letter, word, and line spacing controls. Offer warm off-white background options (crème, not white). Never use italic for extended reading. OpenDyslexic should be available as an option but not recommended — spacing is the intervention, not letterform. Most importantly: allow full typographic personalisation, because no single configuration is optimal for all neurodivergent users.

4
docs/brief/appendix-evolutionary-psychology.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — Appendix A7: Evolutionary Psychology and Meta-Insights --> <!-- Source: Magnotia Master Brief — Appendix A7: Evolutionary Psychology and Meta-Insights -->
## A7. Evolutionary Psychology and Meta-Insights ## A7. Evolutionary Psychology and Meta-Insights
@@ -6,4 +6,4 @@
**Meta-insight across all domains:** The populations who need these tools most benefit from them the most. Toli et al. found implementation intention effects of d = 0.99 in clinical populations vs. d = 0.65 in general populations. Joo et al. found spacing interventions specifically help those with elevated visual crowding. Kofler et al. found 75–81% of ADHD cases show the WM deficits that make local-first architecture necessary. A well-designed tool's efficacy curve is steepest for the most impaired users. **Meta-insight across all domains:** The populations who need these tools most benefit from them the most. Toli et al. found implementation intention effects of d = 0.99 in clinical populations vs. d = 0.65 in general populations. Joo et al. found spacing interventions specifically help those with elevated visual crowding. Kofler et al. found 75–81% of ADHD cases show the WM deficits that make local-first architecture necessary. A well-designed tool's efficacy curve is steepest for the most impaired users.
**Implication for Kon:** The app should feel alive, not static. The convergence of voice-first interaction (reduces navigation complexity), local-first architecture (eliminates latency), and AI presence (provides external regulation) addresses different links in the same causal chain. Each feature amplifies the others. **Implication for Magnotia:** The app should feel alive, not static. The convergence of voice-first interaction (reduces navigation complexity), local-first architecture (eliminates latency), and AI presence (provides external regulation) addresses different links in the same causal chain. Each feature amplifies the others.

4
docs/brief/appendix-hitl-scaffolding.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — Appendix A5: HITL AI Scaffolding --> <!-- Source: Magnotia Master Brief — Appendix A5: HITL AI Scaffolding -->
## A5. HITL AI Scaffolding — Autonomy-Supportive Design ## A5. HITL AI Scaffolding — Autonomy-Supportive Design
@@ -23,4 +23,4 @@
4. **Keep the human in the loop** — every AI suggestion requires user confirmation, building executive function rather than atrophying it 4. **Keep the human in the loop** — every AI suggestion requires user confirmation, building executive function rather than atrophying it
5. **Design with, not for** — participatory design with neurodivergent users produces fundamentally different and better outcomes 5. **Design with, not for** — participatory design with neurodivergent users produces fundamentally different and better outcomes
**Implication for Kon:** The AI agent must be visible, conversational, and interactive — but must never override user autonomy. Every suggestion requires confirmation. The human-in-the-loop feedback mechanism builds metacognitive awareness over time. Users should eventually internalise Kon's scaffolding patterns and need them less — that's a feature, not a failure. LLM prompts must be calibrated for neurodivergent cognition, not neurotypical assumptions. **Implication for Magnotia:** The AI agent must be visible, conversational, and interactive — but must never override user autonomy. Every suggestion requires confirmation. The human-in-the-loop feedback mechanism builds metacognitive awareness over time. Users should eventually internalise Magnotia's scaffolding patterns and need them less — that's a feature, not a failure. LLM prompts must be calibrated for neurodivergent cognition, not neurotypical assumptions.

4
docs/brief/appendix-implementation-intentions.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — Appendix A1: Implementation Intentions --> <!-- Source: Magnotia Master Brief — Appendix A1: Implementation Intentions -->
## A1. Implementation Intentions — Neurological and Clinical Evidence ## A1. Implementation Intentions — Neurological and Clinical Evidence
@@ -18,4 +18,4 @@
- **Gilbert et al. 2009** (*Journal of Experimental Psychology: Learning, Memory, and Cognition*): fMRI shows implementation intentions shift activation from the **lateral rostral prefrontal cortex** (effortful top-down control — impaired in ADHD) to the **medial rostral prefrontal cortex** (automatic stimulus-driven control). Better prospective memory performance with *reduced* overall brain activation. - **Gilbert et al. 2009** (*Journal of Experimental Psychology: Learning, Memory, and Cognition*): fMRI shows implementation intentions shift activation from the **lateral rostral prefrontal cortex** (effortful top-down control — impaired in ADHD) to the **medial rostral prefrontal cortex** (automatic stimulus-driven control). Better prospective memory performance with *reduced* overall brain activation.
- **Paul et al. 2007** (*NeuroReport*): EEG confirms if-then plans normalised the NoGo-P300 amplitude in ADHD children within the **160–312 millisecond window**, consistent with early automatic processing rather than slow deliberate control. - **Paul et al. 2007** (*NeuroReport*): EEG confirms if-then plans normalised the NoGo-P300 amplitude in ADHD children within the **160–312 millisecond window**, consistent with early automatic processing rather than slow deliberate control.
**Implication for Kon:** The if-then automation feature and voice-activated micro-stepping are neurologically validated mechanisms with a d = 0.99 effect size in the target population. Voice capture must externalise implementation intentions instantaneously, before executive fatigue occurs. The system should prompt users to rehearse plans at least once (amplifies effect) and support varied cue types: time-based, environmental, and emotional. **Implication for Magnotia:** The if-then automation feature and voice-activated micro-stepping are neurologically validated mechanisms with a d = 0.99 effect size in the target population. Voice capture must externalise implementation intentions instantaneously, before executive fatigue occurs. The system should prompt users to rehearse plans at least once (amplifies effect) and support varied cue types: time-based, environmental, and emotional.

4
docs/brief/appendix-latency-memory.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — Appendix A4: Latency, Working Memory Decay, and Software Architecture --> <!-- Source: Magnotia Master Brief — Appendix A4: Latency, Working Memory Decay, and Software Architecture -->
## A4. Latency, Working Memory Decay, and Software Architecture ## A4. Latency, Working Memory Decay, and Software Architecture
@@ -25,4 +25,4 @@
**Local-first as cognitive ergonomics:** **Local-first as cognitive ergonomics:**
- **Kleppmann et al. 2019** (*ACM Onward! '19*): Seven ideals of local-first software. Ideal #1 — "No spinners: your work at your fingertips." Primary copy of data on the user's device means read/write operations at local disk speed (sub-millisecond), not network speed (50–500+ ms). Synchronisation happens asynchronously in background. - **Kleppmann et al. 2019** (*ACM Onward! '19*): Seven ideals of local-first software. Ideal #1 — "No spinners: your work at your fingertips." Primary copy of data on the user's device means read/write operations at local disk speed (sub-millisecond), not network speed (50–500+ ms). Synchronisation happens asynchronously in background.
**Implication for Kon:** Local-first architecture keeps all interactions within Miller's 100ms direct-manipulation threshold, preventing the WM decay → exploration bias → task abandonment cascade. The 90-second setup threshold is a hard design constraint. Voice capture must work in under 3 seconds from app open. **Implication for Magnotia:** Local-first architecture keeps all interactions within Miller's 100ms direct-manipulation threshold, preventing the WM decay → exploration bias → task abandonment cascade. The 90-second setup threshold is a hard design constraint. Voice capture must work in under 3 seconds from app open.

6
docs/brief/appendix-voice-interfaces.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — Appendix A6: Voice User Interfaces --> <!-- Source: Magnotia Master Brief — Appendix A6: Voice User Interfaces -->
## A6. Voice User Interfaces as Executive Bypasses ## A6. Voice User Interfaces as Executive Bypasses
@@ -7,6 +7,6 @@
- Voice activation bypasses the visual and mechanical bottlenecks of GUI interaction (typing, mouse navigation, visual scanning, sequential menu navigation) — all of which require sustained top-down executive functioning. - Voice activation bypasses the visual and mechanical bottlenecks of GUI interaction (typing, mouse navigation, visual scanning, sequential menu navigation) — all of which require sustained top-down executive functioning.
- Vocalisation is approximately **3x faster** than manual keyboard entry. - Vocalisation is approximately **3x faster** than manual keyboard entry.
- VUI design constraints for cognitive accessibility: engineered pauses between phrases for auditory processing time, options presented in text before requiring selection to avoid overloading verbal working memory. - VUI design constraints for cognitive accessibility: engineered pauses between phrases for auditory processing time, options presented in text before requiring selection to avoid overloading verbal working memory.
- Current voice assistants impose their own setup complexity — Kon must minimise this to near-zero. - Current voice assistants impose their own setup complexity — Magnotia must minimise this to near-zero.
**Implication for Kon:** Voice is not a convenience feature — it is the primary accessibility mechanism. The 3x speed advantage means voice capture preserves working memory traces that would decay during typing. VUI implementation must include processing pauses and visual confirmation of transcribed text before action. The supply-demand gap (47.6% community interest vs. near-zero academic research) represents a significant opportunity for Kon to generate its own evidence through ethically designed measurement. **Implication for Magnotia:** Voice is not a convenience feature — it is the primary accessibility mechanism. The 3x speed advantage means voice capture preserves working memory traces that would decay during typing. VUI implementation must include processing pauses and visual confirmation of transcribed text before action. The supply-demand gap (47.6% community interest vs. near-zero academic research) represents a significant opportunity for Magnotia to generate its own evidence through ethically designed measurement.

14
docs/brief/b2b-enterprise.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — §19 B2B & Enterprise Angle --> <!-- Source: Magnotia Master Brief — §19 B2B & Enterprise Angle -->
## 19. B2B & Enterprise Angle ## 19. B2B & Enterprise Angle
@@ -18,23 +18,23 @@
- Explicitly covers ADHD and other neurodivergent conditions under the Equality Act 2010 - Explicitly covers ADHD and other neurodivergent conditions under the Equality Act 2010
- Software subscriptions, planning apps, and coaching are all fundable - Software subscriptions, planning apps, and coaching are all fundable
- Deepwrk already operates as an Access to Work-approved service — employees claim subscriptions through their grant - Deepwrk already operates as an Access to Work-approved service — employees claim subscriptions through their grant
- **This is the single highest-leverage B2B action Kon can take.** Government effectively subsidises the sale. - **This is the single highest-leverage B2B action Magnotia can take.** Government effectively subsidises the sale.
### B2B requirements (if/when pursued) ### B2B requirements (if/when pursued)
- Admin dashboard, SSO (SAML/OAuth), bulk provisioning - Admin dashboard, SSO (SAML/OAuth), bulk provisioning
- Anonymised usage analytics for HR (never individual-level data) - Anonymised usage analytics for HR (never individual-level data)
- **Anonymised organisational dashboards.** While Kon processes all personal data locally, the B2B tier must output high-level, anonymised telemetry to satisfy enterprise buyers who need metrics to justify software purchases. Examples: "Your team saved 40 hours in task-planning this month", "Average time-to-capture across your organisation: 6 seconds", "82% of users returned after a gap of 3+ days." Critically, these metrics must be aggregated (minimum cohort size of 10 before any data is surfaced), never traceable to individuals, and opt-in at both the user and organisation level. The local-first architecture makes this possible: anonymised summaries can be generated on-device and transmitted as aggregate statistics only — raw data never leaves the machine. - **Anonymised organisational dashboards.** While Magnotia processes all personal data locally, the B2B tier must output high-level, anonymised telemetry to satisfy enterprise buyers who need metrics to justify software purchases. Examples: "Your team saved 40 hours in task-planning this month", "Average time-to-capture across your organisation: 6 seconds", "82% of users returned after a gap of 3+ days." Critically, these metrics must be aggregated (minimum cohort size of 10 before any data is surfaced), never traceable to individuals, and opt-in at both the user and organisation level. The local-first architecture makes this possible: anonymised summaries can be generated on-device and transmitted as aggregate statistics only — raw data never leaves the machine.
- GDPR compliance documentation, zero-IT-lift deployment - GDPR compliance documentation, zero-IT-lift deployment
- Users must never be identifiable as neurodivergent to their employer - Users must never be identifiable as neurodivergent to their employer
- Position under "universal design" framing — beneficial for all employees - Position under "universal design" framing — beneficial for all employees
### Enterprise IT deployment ### Enterprise IT deployment
Kon's local-first architecture is simultaneously its biggest B2B selling point and its biggest deployment challenge. Key considerations: Magnotia's local-first architecture is simultaneously its biggest B2B selling point and its biggest deployment challenge. Key considerations:
- **Local AI model size.** Whisper models range from ~75MB (tiny) to ~1.5GB (large). Enterprise IT teams may flag large binaries or models downloaded to employee machines. Solution: bundle a smaller model by default (tiny/base) with optional upgrade to larger models. Document the model sizes and what they do for IT review. - **Local AI model size.** Whisper models range from ~75MB (tiny) to ~1.5GB (large). Enterprise IT teams may flag large binaries or models downloaded to employee machines. Solution: bundle a smaller model by default (tiny/base) with optional upgrade to larger models. Document the model sizes and what they do for IT review.
- **No cloud = no enterprise compliance headaches.** Because Kon processes everything on-device with no data transmitted externally, it bypasses the cloud security review, vendor risk assessment, and data processing agreements that typically delay enterprise software procurement by 3–6 months. This is a genuine competitive advantage — frame it explicitly in B2B sales materials. - **No cloud = no enterprise compliance headaches.** Because Magnotia processes everything on-device with no data transmitted externally, it bypasses the cloud security review, vendor risk assessment, and data processing agreements that typically delay enterprise software procurement by 3–6 months. This is a genuine competitive advantage — frame it explicitly in B2B sales materials.
- **Installation permissions.** Enterprise-managed machines often restrict software installation. Kon must be deployable via MDM (Mobile Device Management) tools like Microsoft Intune or Jamf. Tauri's MSIX (Windows) and DMG (macOS) formats are compatible with standard enterprise deployment pipelines. - **Installation permissions.** Enterprise-managed machines often restrict software installation. Magnotia must be deployable via MDM (Mobile Device Management) tools like Microsoft Intune or Jamf. Tauri's MSIX (Windows) and DMG (macOS) formats are compatible with standard enterprise deployment pipelines.
- **No internet dependency.** Kon does not require network access for core functionality. This makes it deployable in air-gapped, high-security, or restricted-network environments — a strong selling point for defence, legal, and healthcare settings. - **No internet dependency.** Magnotia does not require network access for core functionality. This makes it deployable in air-gapped, high-security, or restricted-network environments — a strong selling point for defence, legal, and healthcare settings.
- **Automatic updates.** Enterprise IT will want to control update rollouts. Provide the option to disable auto-updates and instead distribute updates through enterprise channels. - **Automatic updates.** Enterprise IT will want to control update rollouts. Provide the option to disable auto-updates and instead distribute updates through enterprise channels.
### Channel partners ### Channel partners

8
docs/brief/competitive-landscape.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — §13 Competitive Landscape (Extended) --> <!-- Source: Magnotia Master Brief — §13 Competitive Landscape (Extended) -->
## 13. Competitive Landscape (Extended) ## 13. Competitive Landscape (Extended)
@@ -44,8 +44,8 @@
- Tasks, habits, calendar, mood tracking, journalling with end-to-end encryption on desktop - Tasks, habits, calendar, mood tracking, journalling with end-to-end encryption on desktop
- Privacy-focused, small user base - Privacy-focused, small user base
### Kon's advantages over the entire field ### Magnotia's advantages over the entire field
| Kon | The field | | Magnotia | The field |
|---|---| |---|---|
| Cross-platform desktop + mobile (Tauri) | Almost all competitors are mobile-first or web-only | | Cross-platform desktop + mobile (Tauri) | Almost all competitors are mobile-first or web-only |
| Voice as primary input method | No mature competitor integrates voice into a full planning system | | Voice as primary input method | No mature competitor integrates voice into a full planning system |
@@ -59,4 +59,4 @@
3. **Architecture:** Privacy-conscious and offline-first users served only by open-source tools and tiny startups. 3. **Architecture:** Privacy-conscious and offline-first users served only by open-source tools and tiny startups.
4. **Pricing:** Only Structured offers lifetime. Subscription fatigue is extreme in this demographic. 4. **Pricing:** Only Structured offers lifetime. Subscription fatigue is extreme in this demographic.
Kon addresses all four simultaneously. No current competitor does. Magnotia addresses all four simultaneously. No current competitor does.

6
docs/brief/design-principles.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — §4 Design Principles --> <!-- Source: Magnotia Master Brief — §4 Design Principles -->
### Design principles ### Design principles
@@ -21,7 +21,7 @@
#### Interaction & UX #### Interaction & UX
- **Low-dopamine design.** Non-judgmental tone throughout. No guilt messaging for missed tasks. No aggressive review prompts. - **Low-dopamine design.** Non-judgmental tone throughout. No guilt messaging for missed tasks. No aggressive review prompts.
- **WIP limits as a design constraint.** The interface must never present more than 1–3 active tasks simultaneously on the primary view. AI prioritises; the UI constrains. A brain dump can contain 50 items — the "Now" view shows only the next action. This is not a nice-to-have; it is the core mechanism for preventing the freeze response. - **WIP limits as a design constraint.** The interface must never present more than 1–3 active tasks simultaneously on the primary view. AI prioritises; the UI constrains. A brain dump can contain 50 items — the "Now" view shows only the next action. This is not a nice-to-have; it is the core mechanism for preventing the freeze response.
- **Automated context restoration.** Working memory traces decay within ~8 seconds of interruption. If a user clicks away, gets distracted, or closes the app mid-task, Kon must perfectly preserve their exact state — cursor position, active timer, active task, scroll position — so they can resume with zero "Where was I?" cognitive latency. This must be seamless and automatic. No "Resume session?" dialogue. Just open the app and be exactly where you left off. - **Automated context restoration.** Working memory traces decay within ~8 seconds of interruption. If a user clicks away, gets distracted, or closes the app mid-task, Magnotia must perfectly preserve their exact state — cursor position, active timer, active task, scroll position — so they can resume with zero "Where was I?" cognitive latency. This must be seamless and automatic. No "Resume session?" dialogue. Just open the app and be exactly where you left off.
- **Literal labels always.** Ambiguous icons (standalone gear, hamburger menu) force literal thinkers to guess function, expending precious mental energy. Always pair icons with literal text labels. - **Literal labels always.** Ambiguous icons (standalone gear, hamburger menu) force literal thinkers to guess function, expending precious mental energy. Always pair icons with literal text labels.
- **Progressive disclosure.** Break complex onboarding or tasks down to reveal only the immediate next step, preventing the brain from freezing. - **Progressive disclosure.** Break complex onboarding or tasks down to reveal only the immediate next step, preventing the brain from freezing.
- **Motion control.** All non-essential animation and auto-playing media must be off by default or controlled via a prominent "Reduce Motion" / "Calm Mode" toggle. Unexpected animations can cause physical distress and sensory overload. - **Motion control.** All non-essential animation and auto-playing media must be off by default or controlled via a prominent "Reduce Motion" / "Calm Mode" toggle. Unexpected animations can cause physical distress and sensory overload.
@@ -29,7 +29,7 @@
#### Onboarding #### Onboarding
- Must be understandable within 30 seconds. If a neurodivergent user can't figure it out immediately, they won't return. - Must be understandable within 30 seconds. If a neurodivergent user can't figure it out immediately, they won't return.
- **90-second hard threshold.** Empirical HCI research (see Appendix A4) shows that tools taking longer than 90 seconds to configure trigger task abandonment cascades in ADHD users, increasing cognitive load by 2.3x. No feature in Kon should require more than 90 seconds of setup. Voice capture must work in under 3 seconds from app open. - **90-second hard threshold.** Empirical HCI research (see Appendix A4) shows that tools taking longer than 90 seconds to configure trigger task abandonment cascades in ADHD users, increasing cognitive load by 2.3x. No feature in Magnotia should require more than 90 seconds of setup. Voice capture must work in under 3 seconds from app open.
- Progressive disclosure applies here especially — show one step at a time, never the full complexity. - Progressive disclosure applies here especially — show one step at a time, never the full complexity.
#### Future consideration: adaptive UI #### Future consideration: adaptive UI

2
docs/brief/desktop-distribution.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — §17 Desktop Distribution Deep Dive --> <!-- Source: Magnotia Master Brief — §17 Desktop Distribution Deep Dive -->
## 17. Desktop Distribution Deep Dive ## 17. Desktop Distribution Deep Dive

16
docs/brief/distribution-strategy.md
View File

@@ -1,15 +1,15 @@
<!-- Source: Kon Master Brief — §7 Distribution Strategy --> <!-- Source: Magnotia Master Brief — §7 Distribution Strategy -->
## 7. Distribution Strategy ## 7. Distribution Strategy
### Marketing positioning ### Marketing positioning
**What Kon is NOT:** A to-do list. A habit tracker. Another productivity app. The market is flooded with generic productivity tools, and ADHD users have severe app fatigue from trying and abandoning dozens of them. Positioning Kon in that category is death. **What Magnotia is NOT:** A to-do list. A habit tracker. Another productivity app. The market is flooded with generic productivity tools, and ADHD users have severe app fatigue from trying and abandoning dozens of them. Positioning Magnotia in that category is death.
**What Kon IS:** An "external brain." A prosthetic prefrontal cortex designed for cognitive offloading. The app does the heavy cognitive lifting — it takes raw, messy thoughts via voice and automatically decomposes them into verb-led micro-steps (e.g. "Clean the house" → "Pick up one item of clothing from the bedroom floor"). **What Magnotia IS:** An "external brain." A prosthetic prefrontal cortex designed for cognitive offloading. The app does the heavy cognitive lifting — it takes raw, messy thoughts via voice and automatically decomposes them into verb-led micro-steps (e.g. "Clean the house" → "Pick up one item of clothing from the bedroom floor").
**Key messaging pillars:** **Key messaging pillars:**
1. **"Your brain moves fast. Kon catches it."** — Voice-first capture, zero friction, thoughts don't get lost. 1. **"Your brain moves fast. Magnotia catches it."** — Voice-first capture, zero friction, thoughts don't get lost.
2. **"Local. Private. Yours forever."** — Nothing leaves your device. No cloud. No subscriptions for core features. Your vulnerabilities are never exposed. 2. **"Local. Private. Yours forever."** — Nothing leaves your device. No cloud. No subscriptions for core features. Your vulnerabilities are never exposed.
3. **"Built by a neurodivergent brain, for neurodivergent brains."** — Authenticity. Jake has executive dysfunction. This isn't corporate empathy theatre. 3. **"Built by a neurodivergent brain, for neurodivergent brains."** — Authenticity. Jake has executive dysfunction. This isn't corporate empathy theatre.
4. **"They took away lifetime. We never will."** — Direct competitive positioning against Tiimo's subscription-only model. 4. **"They took away lifetime. We never will."** — Direct competitive positioning against Tiimo's subscription-only model.
@@ -19,7 +19,7 @@
### Distribution channels ### Distribution channels
**Desktop distribution:** **Desktop distribution:**
- **Primary:** Direct download from kon.app via Lemon Squeezy or Paddle (5% + 50p per transaction). Signed and notarised builds for macOS (£79/year Apple Developer Programme) and code-signed for Windows (EV certificate, £240–£480/year). - **Primary:** Direct download from magnotia.app via Lemon Squeezy or Paddle (5% + 50p per transaction). Signed and notarised builds for macOS (£79/year Apple Developer Programme) and code-signed for Windows (EV certificate, £240–£480/year).
- **Microsoft Store (supplementary):** Free to list, 250M monthly active users, 0% commission if using own payment system. Good for discovery. - **Microsoft Store (supplementary):** Free to list, 250M monthly active users, 0% commission if using own payment system. Good for discovery.
- **Mac App Store (evaluate):** 15% commission under Small Business Programme, sandboxing may limit Tauri features. Most successful indie Mac apps distribute directly. - **Mac App Store (evaluate):** 15% commission under Small Business Programme, sandboxing may limit Tauri features. Most successful indie Mac apps distribute directly.
- **Linux:** Flathub (1M+ active users, pre-installed on major distros) + AppImage for direct download. - **Linux:** Flathub (1M+ active users, pre-installed on major distros) + AppImage for direct download.
@@ -42,7 +42,7 @@
**SEO opportunity:** Long-tail terms like "ADHD app for Windows" and "focus timer desktop app" face lower competition than mobile-focused searches. Obsidian gets 52.9% of traffic from organic search — proof that desktop-first apps can win on SEO. **SEO opportunity:** Long-tail terms like "ADHD app for Windows" and "focus timer desktop app" face lower competition than mobile-focused searches. Obsidian gets 52.9% of traffic from organic search — proof that desktop-first apps can win on SEO.
### Phase 0 — Pre-beta (this week) ### Phase 0 — Pre-beta (this week)
- [ ] Register domain (kon.app or getkon.app) - [ ] Register domain (magnotia.app or getmagnotia.app)
- [ ] Build one-page landing page on Carrd (£16/year) or Framer (free tier). Hero must answer three questions in under 5 seconds: what is this, who is it for, what do I do next. Landing page copy written at 5th–7th grade reading level (converts at 11.1% vs. 5.3% for university-level copy). Include 15–30 second silent auto-play GIF showing voice-to-task flow. Single CTA button. - [ ] Build one-page landing page on Carrd (£16/year) or Framer (free tier). Hero must answer three questions in under 5 seconds: what is this, who is it for, what do I do next. Landing page copy written at 5th–7th grade reading level (converts at 11.1% vs. 5.3% for university-level copy). Include 15–30 second silent auto-play GIF showing voice-to-task flow. Single CTA button.
- [ ] Set up waitlist with LaunchList (£65 one-time). Includes gamified referral mechanics, anti-spam filtering. Alternative: ConvertKit (free to 1,000 subscribers) + Tally form. - [ ] Set up waitlist with LaunchList (£65 one-time). Includes gamified referral mechanics, anti-spam filtering. Alternative: ConvertKit (free to 1,000 subscribers) + Tally form.
- [ ] Set up analytics with Plausible.io (privacy-friendly, no cookie banner needed). - [ ] Set up analytics with Plausible.io (privacy-friendly, no cookie banner needed).
@@ -57,8 +57,8 @@
- [ ] Run Van Westendorp pricing survey via Tally (free) to validate £49 price point before committing - [ ] Run Van Westendorp pricing survey via Tally (free) to validate £49 price point before committing
### Phase 2 — Community seeding (weeks 2–4) ### Phase 2 — Community seeding (weeks 2–4)
- [ ] **Reddit (priority 1):** r/ADHD (2.1M members), r/adhdwomen, r/ADHD_Programmers, r/autism, r/neurodiversity, r/executivedysfunction. Spend 4+ weeks genuinely contributing before any mention of Kon (Reddit 10:1 rule). When ready: authentic posts, no sales pitches. Use F5Bot (free) to monitor keywords: "ADHD app", "voice to-do", "ADHD task manager." - [ ] **Reddit (priority 1):** r/ADHD (2.1M members), r/adhdwomen, r/ADHD_Programmers, r/autism, r/neurodiversity, r/executivedysfunction. Spend 4+ weeks genuinely contributing before any mention of Magnotia (Reddit 10:1 rule). When ready: authentic posts, no sales pitches. Use F5Bot (free) to monitor keywords: "ADHD app", "voice to-do", "ADHD task manager."
- [ ] **Obsidian/PKM communities (priority 2):** Show Kon → Obsidian workflow (voice dump → transcription → tasks → Obsidian vault). Use as amplifiers, not primary sales channel. - [ ] **Obsidian/PKM communities (priority 2):** Show Magnotia → Obsidian workflow (voice dump → transcription → tasks → Obsidian vault). Use as amplifiers, not primary sales channel.
- [ ] **TikTok product seeding (priority 3):** DM 20–50 ADHD micro-influencers (1K–50K followers) with free lifetime licences. Zero obligation to post. Cost per seed: £0 (digital product). Outreach must reference a specific video the creator made. Follow up with affiliate link at 25–30% commission via Lemon Squeezy. - [ ] **TikTok product seeding (priority 3):** DM 20–50 ADHD micro-influencers (1K–50K followers) with free lifetime licences. Zero obligation to post. Cost per seed: £0 (digital product). Outreach must reference a specific video the creator made. Follow up with affiliate link at 25–30% commission via Lemon Squeezy.
- [ ] Submit to ADHD UK discovery platform and ADDitude Magazine tool roundups. - [ ] Submit to ADHD UK discovery platform and ADDitude Magazine tool roundups.

8
docs/brief/feature-set.md
View File

@@ -1,18 +1,18 @@
<!-- Source: Kon Master Brief — §4 Feature Set --> <!-- Source: Magnotia Master Brief — §4 Feature Set -->
## 4. Feature Set ## 4. Feature Set
### Core MVP (shipping with beta) ### Core MVP (shipping with beta)
- Local AI transcription (Whisper, on-device) - Local AI transcription (Whisper, on-device)
- Auto-populating to-do lists from transcriptions - Auto-populating to-do lists from transcriptions
- **Visual time representation.** Tasks displayed as visual blocks of time or countdowns, not just text lists. Traditional text-based to-do lists trigger overwhelm — visual timelines directly combat time blindness. This is the #1 community-requested feature and Tiimo's primary strength. Kon must match or exceed it from day one. Time should be externalised using visual countdown timers (e.g. shrinking colour disks, filling progress rings) rather than standard digital clocks — making the passage of time concrete and anchoring focus for users with time agnosia. - **Visual time representation.** Tasks displayed as visual blocks of time or countdowns, not just text lists. Traditional text-based to-do lists trigger overwhelm — visual timelines directly combat time blindness. This is the #1 community-requested feature and Tiimo's primary strength. Magnotia must match or exceed it from day one. Time should be externalised using visual countdown timers (e.g. shrinking colour disks, filling progress rings) rather than standard digital clocks — making the passage of time concrete and anchoring focus for users with time agnosia.
- **WIP limits.** The main screen must mathematically restrict how many active tasks are visible at once. A "Now" column showing only 1–3 items maximum. Auto-generated task lists that dump 30 items onto a screen will instantly trigger the freeze response. The AI can prioritise; the UI must constrain. - **WIP limits.** The main screen must mathematically restrict how many active tasks are visible at once. A "Now" column showing only 1–3 items maximum. Auto-generated task lists that dump 30 items onto a screen will instantly trigger the freeze response. The AI can prioritise; the UI must constrain.
- History of past voice notes and transcriptions - History of past voice notes and transcriptions
- Light/dark mode - Light/dark mode
- Templates with local AI agent (contextual text under headings with associated metadata) - Templates with local AI agent (contextual text under headings with associated metadata)
- Vocabulary profiles (custom dictionaries for specialist terms — e.g. DND NPC/location names, technical jargon) - Vocabulary profiles (custom dictionaries for specialist terms — e.g. DND NPC/location names, technical jargon)
- Transcription of uploaded voice notes and media files - Transcription of uploaded voice notes and media files
- **Open data format.** All transcripts and task lists stored locally in plain text, JSON, or Markdown. Essential for the privacy-first and PKM audience. Enables the Kon → Obsidian workflow promised in the distribution strategy. Users must be able to export, move, and own their data without vendor lock-in. - **Open data format.** All transcripts and task lists stored locally in plain text, JSON, or Markdown. Essential for the privacy-first and PKM audience. Enables the Magnotia → Obsidian workflow promised in the distribution strategy. Users must be able to export, move, and own their data without vendor lock-in.
### Post-MVP features (validated, designed, not yet prioritised) ### Post-MVP features (validated, designed, not yet prioritised)
- **AI-powered micro-stepping with "just start" timer.** Decomposing abstract goals into hyper-specific actionable steps. The local AI agent must generate micro-steps that begin with highly specific, low-friction action verbs. Linguistic rules: every generated step must start with a concrete physical verb, target one single action, and be completable in under 5 minutes. Example: "Clean room" → "Pick up one shirt from the floor." NOT "Organise your bedroom" (still abstract, still paralysing). The goal is to bypass executive dysfunction by removing all ambiguity about what "starting" means. **Paired with a 2-minute or 5-minute "just start" focus timer.** Committing to a task for just five minutes bypasses internal resistance and builds micro-momentum — users frequently work past the timer. The timer should be a single tap from any micro-step, visually prominent, and use a shrinking colour disk or similar visual countdown (not a digital clock) to externalise the passage of time and combat time blindness. - **AI-powered micro-stepping with "just start" timer.** Decomposing abstract goals into hyper-specific actionable steps. The local AI agent must generate micro-steps that begin with highly specific, low-friction action verbs. Linguistic rules: every generated step must start with a concrete physical verb, target one single action, and be completable in under 5 minutes. Example: "Clean room" → "Pick up one shirt from the floor." NOT "Organise your bedroom" (still abstract, still paralysing). The goal is to bypass executive dysfunction by removing all ambiguity about what "starting" means. **Paired with a 2-minute or 5-minute "just start" focus timer.** Committing to a task for just five minutes bypasses internal resistance and builds micro-momentum — users frequently work past the timer. The timer should be a single tap from any micro-step, visually prominent, and use a shrinking colour disk or similar visual countdown (not a digital clock) to externalise the passage of time and combat time blindness.
@@ -25,5 +25,5 @@
- **Read Page Aloud (text-to-speech).** A simple TTS function that reads transcriptions, task lists, or AI-generated micro-steps aloud. Engages auditory processing alongside visual, which improves retention and comprehension for ADHD users. Particularly valuable during the "Clarify" stage when reviewing a brain dump. Use OS-native TTS engines (available on all target platforms) to avoid additional dependencies. Should be a single-tap action from any text view. - **Read Page Aloud (text-to-speech).** A simple TTS function that reads transcriptions, task lists, or AI-generated micro-steps aloud. Engages auditory processing alongside visual, which improves retention and comprehension for ADHD users. Particularly valuable during the "Clarify" stage when reviewing a brain dump. Use OS-native TTS engines (available on all target platforms) to avoid additional dependencies. Should be a single-tap action from any text view.
### Parked / future consideration ### Parked / future consideration
- **AI body doubling (low-fi implementation).** Research strongly validates the concept (rated #1 ADHD workplace strategy in 2025 ADDitude survey; 12-week study showed focus doubling, 30% anxiety reduction, £37 public value per £1 invested). Body doubling doesn't require high-fidelity interaction — simple ambient presence and shared monitoring work. A "low-fi" version could be a "Focus Room" interface showing abstract statuses ("AI is sorting your tasks…", "3 other Kon users are in deep work right now") to provide the feeling of parallel presence without complex engineering. This sidesteps the need for video, voice, or real-time communication. Potential future subscription feature. Not in MVP scope but worth prototyping early — the implementation cost is low relative to the validated demand. - **AI body doubling (low-fi implementation).** Research strongly validates the concept (rated #1 ADHD workplace strategy in 2025 ADDitude survey; 12-week study showed focus doubling, 30% anxiety reduction, £37 public value per £1 invested). Body doubling doesn't require high-fidelity interaction — simple ambient presence and shared monitoring work. A "low-fi" version could be a "Focus Room" interface showing abstract statuses ("AI is sorting your tasks…", "3 other Magnotia users are in deep work right now") to provide the feeling of parallel presence without complex engineering. This sidesteps the need for video, voice, or real-time communication. Potential future subscription feature. Not in MVP scope but worth prototyping early — the implementation cost is low relative to the validated demand.
- Temptation bundling — cut (OS-level integration nightmare across platforms, essentially impossible on iOS). Replaced by energy-aware task sequencing (see post-MVP features). - Temptation bundling — cut (OS-level integration nightmare across platforms, essentially impossible on iOS). Replaced by energy-aware task sequencing (see post-MVP features).

2
docs/brief/feature-validation.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — §15 Feature Validation from Research --> <!-- Source: Magnotia Master Brief — §15 Feature Validation from Research -->
## 15. Feature Validation from Research ## 15. Feature Validation from Research

4
docs/brief/influencer-landscape.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — §18 ADHD Content Creator & Influencer Landscape --> <!-- Source: Magnotia Master Brief — §18 ADHD Content Creator & Influencer Landscape -->
## 18. ADHD Content Creator & Influencer Landscape ## 18. ADHD Content Creator & Influencer Landscape
@@ -19,7 +19,7 @@
### UK advocacy organisations ### UK advocacy organisations
- **ADHD Foundation:** Largest user-led ADHD organisation in Europe - **ADHD Foundation:** Largest user-led ADHD organisation in Europe
- **ADHD UK:** Launched a discovery platform reviewing tools and strategies — natural fit for Kon - **ADHD UK:** Launched a discovery platform reviewing tools and strategies — natural fit for Magnotia
- **Neurodiversity in Business:** Corporate-facing charity - **Neurodiversity in Business:** Corporate-facing charity
### Sponsorship costs ### Sponsorship costs

6
docs/brief/key-risks.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — §8 Key Risks --> <!-- Source: Magnotia Master Brief — §8 Key Risks -->
## 8. Key Risks ## 8. Key Risks
@@ -9,9 +9,9 @@
| Zero distribution infrastructure | 90-day calendar above. LaunchList + Reddit + TikTok seeding + Product Hunt. Total budget: £81. | | Zero distribution infrastructure | 90-day calendar above. LaunchList + Reddit + TikTok seeding + Product Hunt. Total budget: £81. |
| Lifetime pricing limits long-term revenue | Cloud tier provides recurring revenue. Monitor conversion rate. Launch pricing for first 500 creates urgency. | | Lifetime pricing limits long-term revenue | Cloud tier provides recurring revenue. Monitor conversion rate. Launch pricing for first 500 creates urgency. |
| Scope creep from secondary audiences (TTRPG, B2B) | Neurodivergent beachhead ONLY until validated. No feature work for secondary audiences until £2K MRR. | | Scope creep from secondary audiences (TTRPG, B2B) | Neurodivergent beachhead ONLY until validated. No feature work for secondary audiences until £2K MRR. |
| Nobody has seen Kon yet — zero external validation | Beta this week fixes this. Share embarrassingly early. | | Nobody has seen Magnotia yet — zero external validation | Beta this week fixes this. Share embarrassingly early. |
| ADHD app market high abandonment rate | Design around the shame spiral. Welcome users back without judgement. Never punish inconsistency. Grace day recovery rate is the key metric. | | ADHD app market high abandonment rate | Design around the shame spiral. Welcome users back without judgement. Never punish inconsistency. Grace day recovery rate is the key metric. |
| Lifetime pricing economics break if cloud costs grow | Keep cloud tier strictly optional. Base product must remain sustainable on one-time revenue alone. | | Lifetime pricing economics break if cloud costs grow | Keep cloud tier strictly optional. Base product must remain sustainable on one-time revenue alone. |
| EAA compliance required as Kon grows beyond microenterprise threshold | Build to WCAG 2.2 AA from day one. Publish VPAT before competitors do. | | EAA compliance required as Magnotia grows beyond microenterprise threshold | Build to WCAG 2.2 AA from day one. Publish VPAT before competitors do. |
| cr-sqlite development pace has slowed since late 2024 | Core CRDT logic is sound and self-contained. Fallback: Automerge + SQLite BLOB storage, reusing entire iroh/mDNS networking stack unchanged. | | cr-sqlite development pace has slowed since late 2024 | Core CRDT logic is sound and self-contained. Fallback: Automerge + SQLite BLOB storage, reusing entire iroh/mDNS networking stack unchanged. |
| Code signing costs are unavoidable | macOS £79/year + Windows £240–£480/year = ~£320–£560/year minimum. Budget from first revenue. | | Code signing costs are unavoidable | macOS £79/year + Windows £240–£480/year = ~£320–£560/year minimum. Budget from first revenue. |

10
docs/brief/legal-compliance.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — §6 Legal & Compliance --> <!-- Source: Magnotia Master Brief — §6 Legal & Compliance -->
## 6. Legal & Compliance ## 6. Legal & Compliance
@@ -9,8 +9,8 @@
- **Budget impact:** ~£320–£560/year minimum for macOS + Windows signing. Non-optional cost. - **Budget impact:** ~£320–£560/year minimum for macOS + Windows signing. Non-optional cost.
### GDPR position (local-only tier) ### GDPR position (local-only tier)
- **Jake is NOT a data processor.** Kon runs entirely on-device. No data is transmitted, stored, or visible to the developer. Same legal position as distributing a word processor. - **Jake is NOT a data processor.** Magnotia runs entirely on-device. No data is transmitted, stored, or visible to the developer. Same legal position as distributing a word processor.
- **Special category data:** Marketing targets neurodivergent users, but the app does not collect, store, or infer diagnosis information. Per ICO guidance, a "possible inference" is not special category data — only "reasonable certainty" triggers Article 9. Kon is on safe ground here. - **Special category data:** Marketing targets neurodivergent users, but the app does not collect, store, or infer diagnosis information. Per ICO guidance, a "possible inference" is not special category data — only "reasonable certainty" triggers Article 9. Magnotia is on safe ground here.
- **Voice data:** Processed locally by Whisper. Never leaves the device. No third-party processor involved. - **Voice data:** Processed locally by Whisper. Never leaves the device. No third-party processor involved.
### GDPR position (cloud tier — when added) ### GDPR position (cloud tier — when added)
@@ -22,10 +22,10 @@
- Enforceable from 28 June 2025. Applies to consumer-facing digital products sold in the EU, including apps. - Enforceable from 28 June 2025. Applies to consumer-facing digital products sold in the EU, including apps.
- Technical benchmark: EN 301 549 V3.2.1, incorporating WCAG 2.1 Level AA. - Technical benchmark: EN 301 549 V3.2.1, incorporating WCAG 2.1 Level AA.
- Applies to non-EU companies selling to EU customers (similar extraterritorial reach to GDPR). - Applies to non-EU companies selling to EU customers (similar extraterritorial reach to GDPR).
- Microenterprises (fewer than 10 employees, under €2M turnover) are currently exempt — Kon qualifies initially. - Microenterprises (fewer than 10 employees, under €2M turnover) are currently exempt — Magnotia qualifies initially.
- **The UK has not adopted the EAA.** UK relies on the Equality Act 2010 ("reasonable adjustments") with no specific technical standards enforced. - **The UK has not adopted the EAA.** UK relies on the Equality Act 2010 ("reasonable adjustments") with no specific technical standards enforced.
- **Competitive opportunity:** Neither Tiimo nor Structured publishes a VPAT or formal accessibility conformance report. Publishing one first opens doors to government procurement, educational institutions, and enterprise contracts. - **Competitive opportunity:** Neither Tiimo nor Structured publishes a VPAT or formal accessibility conformance report. Publishing one first opens doors to government procurement, educational institutions, and enterprise contracts.
- Build to WCAG 2.2 AA from day one — this aligns with Kon's design philosophy and creates a genuine compliance moat. - Build to WCAG 2.2 AA from day one — this aligns with Magnotia's design philosophy and creates a genuine compliance moat.
### Required before paid launch ### Required before paid launch
- [ ] Privacy policy (no data leaves device, no telemetry, no identifying analytics) - [ ] Privacy policy (no data leaves device, no telemetry, no identifying analytics)

4
docs/brief/lifetime-licence-economics.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — §16 Lifetime Licence Economics --> <!-- Source: Magnotia Master Brief — §16 Lifetime Licence Economics -->
## 16. Lifetime Licence Economics ## 16. Lifetime Licence Economics
@@ -6,7 +6,7 @@
- **Affinity (Serif):** Perpetual licences (~£40/app, £135 suite) for 23 years. 53% profit margins. Acquired by Canva for ~£410M. - **Affinity (Serif):** Perpetual licences (~£40/app, £135 suite) for 23 years. 53% profit margins. Acquired by Canva for ~£410M.
- **iA Writer:** £40 Mac, £24 Windows, £16 iOS one-time. Free updates for 7+ years. Profitable with team of 12, entirely bootstrapped. Android experiment showed 50/50 split between one-time (£24) and subscription (£4/year), but purchases generated 2–3x more total revenue with significantly better retention. - **iA Writer:** £40 Mac, £24 Windows, £16 iOS one-time. Free updates for 7+ years. Profitable with team of 12, entirely bootstrapped. Android experiment showed 50/50 split between one-time (£24) and subscription (£4/year), but purchases generated 2–3x more total revenue with significantly better retention.
- **Sublime Text:** £79 perpetual licence with paid major-version upgrades. Sustained a tiny team for over a decade. - **Sublime Text:** £79 perpetual licence with paid major-version upgrades. Sustained a tiny team for over a decade.
- **Obsidian:** Free core + £3.20/month Sync, £6.40/month Publish. Clearest precedent for Kon's hybrid model. - **Obsidian:** Free core + £3.20/month Sync, £6.40/month Publish. Clearest precedent for Magnotia's hybrid model.
### Risks ### Risks
- Revenue plateaus once addressable market is saturated, while support costs continue indefinitely. - Revenue plateaus once addressable market is saturated, while support costs continue indefinitely.

2
docs/brief/market-size-demographics.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — §11 Market Size & Demographics --> <!-- Source: Magnotia Master Brief — §11 Market Size & Demographics -->
## 11. Market Size & Demographics ## 11. Market Size & Demographics

38
docs/brief/micro-saas-playbook.md
View File

@@ -1,8 +1,8 @@
<!-- Source: Kon Master Brief — Part 2: The 9-Pattern Micro-SaaS Playbook --> <!-- Source: Magnotia Master Brief — Part 2: The 9-Pattern Micro-SaaS Playbook -->
# PART 2: THE 9-PATTERN MICRO-SAAS PLAYBOOK # PART 2: THE 9-PATTERN MICRO-SAAS PLAYBOOK
**Reference.** Distilled from 30+ Starter Story case studies, founder interviews (Tibo, Mike Hill, Kleo/Lara), and cross-referenced with 4,400+ written case studies. Each pattern is mapped to Kon's current position with specific next actions. **Reference.** Distilled from 30+ Starter Story case studies, founder interviews (Tibo, Mike Hill, Kleo/Lara), and cross-referenced with 4,400+ written case studies. Each pattern is mapped to Magnotia's current position with specific next actions.
--- ---
@@ -10,8 +10,8 @@
**The principle:** The most consistent origin story across successful micro-SaaS. The founder was the customer first. Prerender.io, Kleo, Analyzify, Refiner — all built by people solving their own problem. **The principle:** The most consistent origin story across successful micro-SaaS. The founder was the customer first. Prerender.io, Kleo, Analyzify, Refiner — all built by people solving their own problem.
**Kon's position: ✅ Strong.** **Magnotia's position: ✅ Strong.**
Jake has executive dysfunction. He searched for an offline-first, voice-driven productivity tool for neurodivergent users, couldn't find one that wasn't cloud-dependent or iOS-exclusive, and started building Kon for himself. This is the textbook origin story. Jake has executive dysfunction. He searched for an offline-first, voice-driven productivity tool for neurodivergent users, couldn't find one that wasn't cloud-dependent or iOS-exclusive, and started building Magnotia for himself. This is the textbook origin story.
**Next action:** Make this the centrepiece of every piece of marketing. "I'm neurodivergent. I built this because nothing else worked for me." Authenticity is the single most powerful distribution asset in neurodivergent communities. **Next action:** Make this the centrepiece of every piece of marketing. "I'm neurodivergent. I built this because nothing else worked for me." Authenticity is the single most powerful distribution asset in neurodivergent communities.
@@ -21,7 +21,7 @@ Jake has executive dysfunction. He searched for an offline-first, voice-driven p
**The principle:** Find products already making money despite having terrible UX or obvious gaps. If people pay for something broken, the market is proven — you just build better. Mike Hill's entire philosophy. **The principle:** Find products already making money despite having terrible UX or obvious gaps. If people pay for something broken, the market is proven — you just build better. Mike Hill's entire philosophy.
**Kon's position: ✅ Strong.** **Magnotia's position: ✅ Strong.**
- **Tiimo:** iPhone App of the Year 2025, $200K/month revenue. iOS-only, no Android, no native desktop, cloud-dependent, no voice transcription, subscription-only (removed lifetime option to community backlash), aggressive review prompts. - **Tiimo:** iPhone App of the Year 2025, $200K/month revenue. iOS-only, no Android, no native desktop, cloud-dependent, no voice transcription, subscription-only (removed lifetime option to community backlash), aggressive review prompts.
- **WhisperFlow and similar:** Cloud-dependent, premium pricing, no task management integration. - **WhisperFlow and similar:** Cloud-dependent, premium pricing, no task management integration.
- **Todoist, Notion, etc.:** Not designed for neurodivergent brains, subscription-heavy, cognitively overwhelming. - **Todoist, Notion, etc.:** Not designed for neurodivergent brains, subscription-heavy, cognitively overwhelming.
@@ -36,7 +36,7 @@ The market is proven. People are paying. The incumbents have obvious, exploitabl
**The principle:** Pick a niche so narrow that big players ignore it, then own it completely. Email signature generators, WhatsApp plugins for Shopify, digital signage for cafes. The narrower the niche, the less competition and the higher the conversion rate. **The principle:** Pick a niche so narrow that big players ignore it, then own it completely. Email signature generators, WhatsApp plugins for Shopify, digital signage for cafes. The narrower the niche, the less competition and the higher the conversion rate.
**Kon's position: ✅ Strong.** **Magnotia's position: ✅ Strong.**
"Voice-first, local-only productivity app for neurodivergent people with executive dysfunction" is extremely narrow. No big player is going to build this. Tiimo is the closest and they're a 40-person VC-funded Copenhagen team that still can't get Android working. "Voice-first, local-only productivity app for neurodivergent people with executive dysfunction" is extremely narrow. No big player is going to build this. Tiimo is the closest and they're a 40-person VC-funded Copenhagen team that still can't get Android working.
**Next action:** Resist the temptation to broaden. "Productivity for everyone" is how you become invisible. Stay locked on neurodivergent users until you hit £2K MRR. The TTRPG and B2B angles can wait. **Next action:** Resist the temptation to broaden. "Productivity for everyone" is how you become invisible. Stay locked on neurodivergent users until you hit £2K MRR. The TTRPG and B2B angles can wait.
@@ -47,7 +47,7 @@ The market is proven. People are paying. The incumbents have obvious, exploitabl
**The principle:** "Shipped in 12 hours and now makes $15K/month." Validation speed matters more than product perfection. Pre-sell first, build second (Gil's model). Revenue before polish. **The principle:** "Shipped in 12 hours and now makes $15K/month." Validation speed matters more than product perfection. Pre-sell first, build second (Gil's model). Revenue before polish.
**Kon's position: ✅ Strong.** **Magnotia's position: ✅ Strong.**
MVP is nearly ready. Jake can rebuild from scratch in a day. Tauri/Svelte/Rust stack enables rapid iteration. Beta testers this weekend. MVP is nearly ready. Jake can rebuild from scratch in a day. Tauri/Svelte/Rust stack enables rapid iteration. Beta testers this weekend.
**Next action:** Ship the beta this weekend. Don't polish — test. The goal is not "is it beautiful" but "does the brain dump → task list flow actually work?" If the core loop works, everything else is iteration. **Next action:** Ship the beta this weekend. Don't polish — test. The goal is not "is it beautiful" but "does the brain dump → task list flow actually work?" If the core loop works, everything else is iteration.
@@ -58,11 +58,11 @@ MVP is nearly ready. Jake can rebuild from scratch in a day. Tauri/Svelte/Rust s
**The principle:** The loudest message across all 30 videos. Most builders skip distribution because it means doing "the hard thing" — talking to people. A great product with no distribution dies. A decent product with great distribution wins. **The principle:** The loudest message across all 30 videos. Most builders skip distribution because it means doing "the hard thing" — talking to people. A great product with no distribution dies. A decent product with great distribution wins.
**Kon's position: ⚠️ Critical gap.** **Magnotia's position: ⚠️ Critical gap.**
Zero distribution infrastructure. No landing page, no waitlist, no domain, no social presence for Kon. Nobody outside Jake's immediate circle has seen it. Zero distribution infrastructure. No landing page, no waitlist, no domain, no social presence for Magnotia. Nobody outside Jake's immediate circle has seen it.
**Next actions (in order):** **Next actions (in order):**
1. Register domain this week (kon.app or getkon.app). 1. Register domain this week (magnotia.app or getmagnotia.app).
2. One-page landing page with waitlist signup live by Monday. 2. One-page landing page with waitlist signup live by Monday.
3. Roo's nonprofit network gets the link first. 3. Roo's nonprofit network gets the link first.
4. Reddit posts in r/ADHD, r/adhdwomen, r/ADHD_Programmers, r/autism — authentic, not salesy. 4. Reddit posts in r/ADHD, r/adhdwomen, r/ADHD_Programmers, r/autism — authentic, not salesy.
@@ -76,7 +76,7 @@ This is the make-or-break pattern. Everything else is in place. Distribution is
**The principle:** Kleo's playbook — don't launch publicly. Build a waitlist using content, run mini-launches to waitlist subscribers only, create FOMO through scarcity ("you can't buy this, you need to join the waitlist"), and hit £30K MRR in four days. Lara took info-product launch tactics (webinars, email sequences, urgency) and applied them to SaaS. **The principle:** Kleo's playbook — don't launch publicly. Build a waitlist using content, run mini-launches to waitlist subscribers only, create FOMO through scarcity ("you can't buy this, you need to join the waitlist"), and hit £30K MRR in four days. Lara took info-product launch tactics (webinars, email sequences, urgency) and applied them to SaaS.
**Kon's position: ⚠️ Planned but not yet started.** **Magnotia's position: ⚠️ Planned but not yet started.**
Jake intends to do an invite-only beta to create scarcity and mystique. The instinct is right — this maps directly to Kleo's playbook. Jake intends to do an invite-only beta to create scarcity and mystique. The instinct is right — this maps directly to Kleo's playbook.
**Next actions:** **Next actions:**
@@ -91,10 +91,10 @@ Jake intends to do an invite-only beta to create scarcity and mystique. The inst
**The principle:** Mike Hill is emphatic — every one of his founding teams has a designer. Good design sells. Target incumbents with bad UX. When your product looks and feels better, it becomes self-selling. **The principle:** Mike Hill is emphatic — every one of his founding teams has a designer. Good design sells. Target incumbents with bad UX. When your product looks and feels better, it becomes self-selling.
**Kon's position: ✅ Strong.** **Magnotia's position: ✅ Strong.**
Tauri/Svelte produces a native, fast UI. The design brief includes research-backed neurodivergent-specific design principles: Lexend/Atkinson Hyperlegible typography, sensory colour zoning, no halation, progressive disclosure, literal labels, motion control, forgiving interaction patterns. This level of design intentionality is a genuine moat — Tiimo is good but Kon's design spec is more deeply grounded in the research. Tauri/Svelte produces a native, fast UI. The design brief includes research-backed neurodivergent-specific design principles: Lexend/Atkinson Hyperlegible typography, sensory colour zoning, no halation, progressive disclosure, literal labels, motion control, forgiving interaction patterns. This level of design intentionality is a genuine moat — Tiimo is good but Magnotia's design spec is more deeply grounded in the research.
**Next action:** Make the design visible in marketing. Screenshots, screen recordings, and side-by-side comparisons with competitors. "Here's what Tiimo looks like. Here's what Kon looks like. Notice the difference." Let the design sell itself. **Next action:** Make the design visible in marketing. Screenshots, screen recordings, and side-by-side comparisons with competitors. "Here's what Tiimo looks like. Here's what Magnotia looks like. Notice the difference." Let the design sell itself.
--- ---
@@ -102,7 +102,7 @@ Tauri/Svelte produces a native, fast UI. The design brief includes research-back
**The principle:** Almost universally, successful micro-SaaS founders are bootstrapped. Mike Hill's model: 4 co-founders, 25% equity each, grow to £10K MRR to cover costs, then split profits as salary. No VC, no bloated teams. His explicit quote: "these businesses are about bigger salaries, not big exits." **The principle:** Almost universally, successful micro-SaaS founders are bootstrapped. Mike Hill's model: 4 co-founders, 25% equity each, grow to £10K MRR to cover costs, then split profits as salary. No VC, no bloated teams. His explicit quote: "these businesses are about bigger salaries, not big exits."
**Kon's position: ✅ Strong.** **Magnotia's position: ✅ Strong.**
Solo founder. No VC. No team overhead. Near-zero infrastructure costs (local-first means no servers for the base product). Lifetime pricing + optional cloud subscription. Revenue goes directly to Jake. Solo founder. No VC. No team overhead. Near-zero infrastructure costs (local-first means no servers for the base product). Lifetime pricing + optional cloud subscription. Revenue goes directly to Jake.
**Next action:** Set a clear personal revenue target. What number makes this worth maintaining? £500/month covers costs and proves viability. £2K/month funds CORBEL growth. £5K/month is a genuine second income stream. Know your number so you can measure against it. **Next action:** Set a clear personal revenue target. What number makes this worth maintaining? £500/month covers costs and proves viability. £2K/month funds CORBEL growth. £5K/month is a genuine second income stream. Know your number so you can measure against it.
@@ -113,14 +113,14 @@ Solo founder. No VC. No team overhead. Near-zero infrastructure costs (local-fir
**The principle:** The highest earners aren't running one product — they're running five or six. Tibo has five apps (combined £700K/month). Mike Hill has five (combined £200K/month). Risk distribution: if one stalls, others keep growing. Each new product follows the same repeatable playbook. **The principle:** The highest earners aren't running one product — they're running five or six. Tibo has five apps (combined £700K/month). Mike Hill has five (combined £200K/month). Risk distribution: if one stalls, others keep growing. Each new product follows the same repeatable playbook.
**Kon's position: ⏳ Not relevant yet.** **Magnotia's position: ⏳ Not relevant yet.**
This is product #1. The playbook only applies once Kon is generating revenue and the system is proven. Then Jake can ask: "What's the next niche I can apply this exact process to?" This is product #1. The playbook only applies once Magnotia is generating revenue and the system is proven. Then Jake can ask: "What's the next niche I can apply this exact process to?"
**Next action:** None right now. Focus entirely on Kon. But document everything — what worked, what didn't, what you'd do differently. When the time comes for product #2, you'll have a personal playbook to run again. **Next action:** None right now. Focus entirely on Magnotia. But document everything — what worked, what didn't, what you'd do differently. When the time comes for product #2, you'll have a personal playbook to run again.
--- ---
### Playbook Summary: Where Kon Stands ### Playbook Summary: Where Magnotia Stands
| Pattern | Status | Priority | | Pattern | Status | Priority |
|---|---|---| |---|---|---|

2
docs/brief/open-questions.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — §10 Open Questions --> <!-- Source: Magnotia Master Brief — §10 Open Questions -->
## 10. Open Questions ## 10. Open Questions

8
docs/brief/pricing-model.md
View File

@@ -1,11 +1,11 @@
<!-- Source: Kon Master Brief — §5 Pricing Model --> <!-- Source: Magnotia Master Brief — §5 Pricing Model -->
## 5. Pricing Model ## 5. Pricing Model
### Free tier ### Free tier
Basic voice capture + local transcription + simple task list. Limited functionality (e.g. 5 active tasks or 10 stored transcriptions). Top-of-funnel — proves the core value loop. Basic voice capture + local transcription + simple task list. Limited functionality (e.g. 5 active tasks or 10 stored transcriptions). Top-of-funnel — proves the core value loop.
### Kon Pro — lifetime licence ### Magnotia Pro — lifetime licence
| Platform | Price | | Platform | Price |
|---|---| |---|---|
| Desktop (Windows/macOS/Linux) | £49 | | Desktop (Windows/macOS/Linux) | £49 |
@@ -16,7 +16,7 @@ Full feature set, all running locally. Unlimited transcription, templates, profi
**Positioning:** "They took away lifetime. We never will." **Positioning:** "They took away lifetime. We never will."
### Kon Cloud — optional subscription (£4.99/month or £39.99/year) ### Magnotia Cloud — optional subscription (£4.99/month or £39.99/year)
Access to frontier AI model (Claude, GPT-4o, or similar) for: Access to frontier AI model (Claude, GPT-4o, or similar) for:
- Higher-accuracy transcription of specialist vocabulary - Higher-accuracy transcription of specialist vocabulary
- Smarter task decomposition - Smarter task decomposition
@@ -44,7 +44,7 @@ This is the only recurring revenue stream and is genuinely tied to per-request A
### Pre-launch pricing validation (Van Westendorp) ### Pre-launch pricing validation (Van Westendorp)
Before committing to £49, send the waitlist a four-question survey via Tally (free): Before committing to £49, send the waitlist a four-question survey via Tally (free):
1. At what price would Kon be so expensive you'd never buy it? 1. At what price would Magnotia be so expensive you'd never buy it?
2. At what price would it seem so cheap you'd doubt its quality? 2. At what price would it seem so cheap you'd doubt its quality?
3. At what price is it getting expensive but you'd still consider it? 3. At what price is it getting expensive but you'd still consider it?
4. At what price is it a bargain? 4. At what price is it a bargain?

2
docs/brief/research-gaps.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — §20 Research Gaps Still to Investigate --> <!-- Source: Magnotia Master Brief — §20 Research Gaps Still to Investigate -->
## 20. Research Gaps Still to Investigate ## 20. Research Gaps Still to Investigate

8
docs/brief/success-metrics.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — §9 Success Metrics --> <!-- Source: Magnotia Master Brief — §9 Success Metrics -->
## 9. Success Metrics ## 9. Success Metrics
@@ -15,12 +15,12 @@
### Neuro-inclusive product metrics ### Neuro-inclusive product metrics
Standard SaaS metrics like Daily Active Users (DAU) or unbroken streaks must be avoided — they encourage the exact shame spiral Kon is designed to prevent. Track these instead: Standard SaaS metrics like Daily Active Users (DAU) or unbroken streaks must be avoided — they encourage the exact shame spiral Magnotia is designed to prevent. Track these instead:
| Metric | What it measures | Why it matters | | Metric | What it measures | Why it matters |
|---|---|---| |---|---|---|
| **Time-to-capture** | Seconds from app open to completed brain dump | Measures friction. If this exceeds 10 seconds, the thought is gone. The lower this number, the better Kon serves its core purpose. | | **Time-to-capture** | Seconds from app open to completed brain dump | Measures friction. If this exceeds 10 seconds, the thought is gone. The lower this number, the better Magnotia serves its core purpose. |
| **Grace day recovery rate** | % of users who return and complete a task after 1+ days of inactivity | Proves Kon has beaten the abandon-shame cycle. This is the single most important product metric. If users come back after missing days without guilt, the design is working. | | **Grace day recovery rate** | % of users who return and complete a task after 1+ days of inactivity | Proves Magnotia has beaten the abandon-shame cycle. This is the single most important product metric. If users come back after missing days without guilt, the design is working. |
| **Micro-step completion rate** | Completion rate of AI-decomposed tasks vs. manually entered abstract tasks | Validates that micro-stepping actually works. If AI-generated steps have higher completion rates than user-entered tasks, the feature is earning its keep. | | **Micro-step completion rate** | Completion rate of AI-decomposed tasks vs. manually entered abstract tasks | Validates that micro-stepping actually works. If AI-generated steps have higher completion rates than user-entered tasks, the feature is earning its keep. |
| **Brain dump → task conversion** | % of voice transcription content that converts into actionable tasks | Measures AI quality. Low conversion means the AI isn't parsing well; high conversion means the core loop works. | | **Brain dump → task conversion** | % of voice transcription content that converts into actionable tasks | Measures AI quality. Low conversion means the AI isn't parsing well; high conversion means the core loop works. |
| **Return after lapse** | Median days between last session and next session for users who go inactive | Measures stickiness without punishing breaks. A user who returns after 2 weeks is a success, not a failure. | | **Return after lapse** | Median days between last session and next session for users who go inactive | Measures stickiness without punishing breaks. A user who returns after 2 weeks is a success, not a failure. |

2
docs/brief/target-audience.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — §2 Target Audience --> <!-- Source: Magnotia Master Brief — §2 Target Audience -->
## 2. Target Audience ## 2. Target Audience

6
docs/brief/tech-stack.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — §3 Tech Stack --> <!-- Source: Magnotia Master Brief — §3 Tech Stack -->
## 3. Tech Stack ## 3. Tech Stack
@@ -25,7 +25,7 @@
| Optimal | 32GB | Llama 3.3 8B | Q5_K_M | ~5.5GB | 10–20 tok/s | | Optimal | 32GB | Llama 3.3 8B | Q5_K_M | ~5.5GB | 10–20 tok/s |
| Mobile | 4–6GB | Llama 3.2 1B | Q4_K_M | ~0.8GB | 30–50 tok/s | | Mobile | 4–6GB | Llama 3.2 1B | Q4_K_M | ~0.8GB | 30–50 tok/s |
- **Benchmarks:** Ryzen 5700G (DDR4) achieves ~11 tok/s on 7B Q4_K_M. Apple M3 base achieves ~26 tok/s. For Kon's use case (50–200 token responses for task decomposition), 10–15 tok/s is perfectly usable (1–10 seconds per response). - **Benchmarks:** Ryzen 5700G (DDR4) achieves ~11 tok/s on 7B Q4_K_M. Apple M3 base achieves ~26 tok/s. For Magnotia's use case (50–200 token responses for task decomposition), 10–15 tok/s is perfectly usable (1–10 seconds per response).
- **Minimum published spec:** 8GB RAM, any CPU from 2020+. Below 8GB is not supported. - **Minimum published spec:** 8GB RAM, any CPU from 2020+. Below 8GB is not supported.
### Local RAG pipeline ### Local RAG pipeline
@@ -46,7 +46,7 @@
### Cross-device sync (post-MVP) ### Cross-device sync (post-MVP)
- **CRDT layer:** cr-sqlite (vlcn.io, ~3,500 GitHub stars, core Rust). Operates at the SQL level — `SELECT crsql_as_crr('tasks')` converts any table to a Conflict-free Replicated Relation. Normal SQL continues working. Metadata overhead: ~50–100 bytes per modified cell. - **CRDT layer:** cr-sqlite (vlcn.io, ~3,500 GitHub stars, core Rust). Operates at the SQL level — `SELECT crsql_as_crr('tasks')` converts any table to a Conflict-free Replicated Relation. Normal SQL continues working. Metadata overhead: ~50–100 bytes per modified cell.
- **Networking:** iroh (n0-computer/iroh, ~7,900 GitHub stars, pure Rust, v0.96+). Dials peers by Ed25519 public key. Auto-selects best path: direct QUIC on LAN, NAT hole-punching on WAN, or encrypted relay fallback. QUIC with TLS 1.3. Relays are zero-knowledge. - **Networking:** iroh (n0-computer/iroh, ~7,900 GitHub stars, pure Rust, v0.96+). Dials peers by Ed25519 public key. Auto-selects best path: direct QUIC on LAN, NAT hole-punching on WAN, or encrypted relay fallback. QUIC with TLS 1.3. Relays are zero-knowledge.
- **Local discovery:** mdns-sd crate v0.13.11. Registers `_kon-sync._tcp.local.` via multicast DNS. - **Local discovery:** mdns-sd crate v0.13.11. Registers `_magnotia-sync._tcp.local.` via multicast DNS.
- **Device pairing:** QR code + Noise XX handshake (snow crate v0.9.x) with OTP pre-shared key. No server required. - **Device pairing:** QR code + Noise XX handshake (snow crate v0.9.x) with OTP pre-shared key. No server required.
- **Relay fallback:** Self-host with `cargo install iroh-relay` on a £4/month VPS. n0 also operates free public relays (rate-limited). - **Relay fallback:** Self-host with `cargo install iroh-relay` on a £4/month VPS. n0 also operates free public relays (rate-limited).
- **Conflict resolution:** Last-Writer-Wins per field (highest lamport timestamp, site_id tiebreaker). Edits to different fields merge cleanly. Extended offline: changeset size proportional to number of changes, not duration. - **Conflict resolution:** Last-Writer-Wins per field (highest lamport timestamp, site_id tiebreaker). Edits to different fields merge cleanly. Extended offline: changeset size proportional to number of changes, not duration.

8
docs/brief/technology-map.md
View File

@@ -1,9 +1,9 @@
# Building Kon: a complete technology map for local-first, voice-first desktop AI # Building Magnotia: a complete technology map for local-first, voice-first desktop AI
**Kon's entire stack -- from audio capture through LLM inference to neurodivergent-friendly UI -- can be built from actively maintained, production-tested open-source components.** The Rust + Tauri v2 + Svelte 5 ecosystem has matured dramatically through 2024-2026, with reference applications like Handy (13.8k stars, Tauri + Whisper + real-time audio) and Whispering (Svelte 5 + Tauri transcription) proving the core architecture viable. The most critical finding: **no existing app combines all of Kon's pieces**, making this a genuinely novel integration -- but every individual subsystem has battle-tested implementations to learn from. **Magnotia's entire stack -- from audio capture through LLM inference to neurodivergent-friendly UI -- can be built from actively maintained, production-tested open-source components.** The Rust + Tauri v2 + Svelte 5 ecosystem has matured dramatically through 2024-2026, with reference applications like Handy (13.8k stars, Tauri + Whisper + real-time audio) and Whispering (Svelte 5 + Tauri transcription) proving the core architecture viable. The most critical finding: **no existing app combines all of Magnotia's pieces**, making this a genuinely novel integration -- but every individual subsystem has battle-tested implementations to learn from.
**Ingested from:** `input/inbox/backlinksforfree` on 2026/03/20 **Ingested from:** `input/inbox/backlinksforfree` on 2026/03/20
**Used in:** `docs/superpowers/specs/2026-03-20-kon-mvp-design.md` **Used in:** `docs/superpowers/specs/2026-03-20-magnotia-mvp-design.md`
--- ---
@@ -43,7 +43,7 @@ Model lifecycle: load at first inference, keep during session, unload on backgro
Hybrid search: FTS5 + sqlite-vec with **Reciprocal Rank Fusion** (documented by Alex Garcia). <3ms total retrieval on Raspberry Pi Zero 2 W. Hybrid search: FTS5 + sqlite-vec with **Reciprocal Rank Fusion** (documented by Alex Garcia). <3ms total retrieval on Raspberry Pi Zero 2 W.
**No published project combines sqlite-vec + fastembed-rs** -- Kon's implementation is novel. **No published project combines sqlite-vec + fastembed-rs** -- Magnotia's implementation is novel.
### 5. Time-block visualisation ### 5. Time-block visualisation

10
docs/brief/tiimo-competitive-intel.md
View File

@@ -1,10 +1,10 @@
# Tiimo Competitive Intelligence Report (2026) # Tiimo Competitive Intelligence Report (2026)
## Executive Summary: Kon's Key Advantages ## Executive Summary: Magnotia's Key Advantages
Based on current intelligence, **Kon** has several immediate strategic openings against Tiimo: Based on current intelligence, **Magnotia** has several immediate strategic openings against Tiimo:
1. **The "Lifetime" Opening:** Tiimo recently removed their highly popular lifetime license, causing massive frustration in the neurodivergent community (who often struggle with recurring subscriptions). Kon can win significant goodwill by offering a clear, sustainable lifetime tier or a radically different neuro-friendly pricing model. 1. **The "Lifetime" Opening:** Tiimo recently removed their highly popular lifetime license, causing massive frustration in the neurodivergent community (who often struggle with recurring subscriptions). Magnotia can win significant goodwill by offering a clear, sustainable lifetime tier or a radically different neuro-friendly pricing model.
2. **The Android/Platform Gap:** In September 2025, Tiimo completely removed its Android app, leaving a massive portion of the market unserved. They also lack a true native desktop application (relying on a web wrapper). Kon's native desktop-first approach fills a vital gap for users who need deep workflow integration rather than just a mobile companion. 2. **The Android/Platform Gap:** In September 2025, Tiimo completely removed its Android app, leaving a massive portion of the market unserved. They also lack a true native desktop application (relying on a web wrapper). Magnotia's native desktop-first approach fills a vital gap for users who need deep workflow integration rather than just a mobile companion.
3. **The Complexity Friction:** While Tiimo's AI Co-planner is popular, users report a steep learning curve and heavy setup time. Kon's voice-transcription premise—allowing users to simply speak to create structure—offers a dramatically lower barrier to entry for users with executive dysfunction. 3. **The Complexity Friction:** While Tiimo's AI Co-planner is popular, users report a steep learning curve and heavy setup time. Magnotia's voice-transcription premise—allowing users to simply speak to create structure—offers a dramatically lower barrier to entry for users with executive dysfunction.
4. **B2B / Teams Vacuum:** Tiimo has virtually no enterprise or team-based pricing, focusing entirely on solo consumers (and a 5-person "family" sharing plan). This leaves the B2B neurodiversity-inclusion workspace wide open. 4. **B2B / Teams Vacuum:** Tiimo has virtually no enterprise or team-based pricing, focusing entirely on solo consumers (and a 5-person "family" sharing plan). This leaves the B2B neurodiversity-inclusion workspace wide open.
--- ---

4
docs/brief/user-sentiment.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — §12 Live User Sentiment --> <!-- Source: Magnotia Master Brief — §12 Live User Sentiment -->
## 12. Live User Sentiment — What Neurodivergent Users Actually Say ## 12. Live User Sentiment — What Neurodivergent Users Actually Say
@@ -17,7 +17,7 @@ The dominant emotional narrative across every neurodivergent community: download
### Emotional intensity ### Emotional intensity
Language consistently involves shame ("another thing I'm failing at"), resignation ("I've lost count"), and liberation when users find the right framing ("I wasn't broken — I was working with tools designed for someone else's operating system"). Anger directed specifically at subscription billing: one Effecto review reads "Pretty ironic that it's an app supposed to be ADHD-friendly yet charges you for a service you don't use." A Wisey Trustpilot review states: "They are unscrupulous and taking advantage of people with ADHD who may be less organised." Language consistently involves shame ("another thing I'm failing at"), resignation ("I've lost count"), and liberation when users find the right framing ("I wasn't broken — I was working with tools designed for someone else's operating system"). Anger directed specifically at subscription billing: one Effecto review reads "Pretty ironic that it's an app supposed to be ADHD-friendly yet charges you for a service you don't use." A Wisey Trustpilot review states: "They are unscrupulous and taking advantage of people with ADHD who may be less organised."
### Demand signals for Kon's specific features ### Demand signals for Magnotia's specific features
- **Voice-first capture** receives consistent praise wherever it appears — one user who deleted 47 apps kept a voice memo tool as one of three survivors. - **Voice-first capture** receives consistent praise wherever it appears — one user who deleted 47 apps kept a voice memo tool as one of three survivors.
- **Offline/local-first** positioning is an emerging differentiator; community responds positively to "your data stays with you." - **Offline/local-first** positioning is an emerging differentiator; community responds positively to "your data stays with you."
- **One-time purchase preference** is acute: a Goblin Tools App Store reviewer wrote "The fact it isn't subscription-based is incredibly helpful — I know it's mine and can use it whenever I need, without having to worry about whether it's 'worth it' each month or if I'm going to forget to cancel." - **One-time purchase preference** is acute: a Goblin Tools App Store reviewer wrote "The fact it isn't subscription-based is incredibly helpful — I know it's mine and can use it whenever I need, without having to worry about whether it's 'worth it' each month or if I'm going to forget to cancel."

6
docs/brief/what-kon-is.md → docs/brief/what-magnotia-is.md
View File

@@ -1,7 +1,7 @@
<!-- Source: Kon Master Brief — §1 What Kon Is --> <!-- Source: Magnotia Master Brief — §1 What Magnotia Is -->
## 1. What Kon Is ## 1. What Magnotia Is
A voice-first productivity app for people with executive dysfunction, neurodivergence, and task paralysis. Users brain dump via voice, Kon transcribes locally using AI, and automatically organises thoughts into actionable task lists. A voice-first productivity app for people with executive dysfunction, neurodivergence, and task paralysis. Users brain dump via voice, Magnotia transcribes locally using AI, and automatically organises thoughts into actionable task lists.
**Core thesis:** Capture thoughts the instant they appear, with zero friction, zero latency, and total privacy. Everything runs on-device. No cloud dependency, no subscriptions for core features, no data leaves the user's machine. **Core thesis:** Capture thoughts the instant they appear, with zero friction, zero latency, and total privacy. Everything runs on-device. No cloud dependency, no subscriptions for core features, no data leaves the user's machine.

2
docs/brief/why-current-tools-fail.md
View File

@@ -1,4 +1,4 @@
<!-- Source: Kon Master Brief — §14 Why Current Tools Fail --> <!-- Source: Magnotia Master Brief — §14 Why Current Tools Fail -->
## 14. Why Current Tools Fail ## 14. Why Current Tools Fail

8
docs/code-review-2026-04-22.md
View File

@@ -1,14 +1,14 @@
--- ---
name: Code Review — 2026/04/22 name: Code Review — 2026/04/22
description: Full-sweep audit findings across all Kon crates + src-tauri, with triage buckets for quick wins vs release-blockers description: Full-sweep audit findings across all Magnotia crates + src-tauri, with triage buckets for quick wins vs release-blockers
type: reference type: reference
tags: [code-review, audit, bugs, kon, release-blockers] tags: [code-review, audit, bugs, magnotia, release-blockers]
date: 2026/04/22 date: 2026/04/22
--- ---
# Kon Code Review — 2026/04/22 # Magnotia Code Review — 2026/04/22
Full-sweep read-only audit of every `.rs` file across the Kon workspace. Four parallel Codex agents scanned: Full-sweep read-only audit of every `.rs` file across the Magnotia workspace. Four parallel Codex agents scanned:
- **Agent A** — `crates/transcription/`, `crates/audio/` - **Agent A** — `crates/transcription/`, `crates/audio/`
- **Agent B** — `crates/ai-formatting/`, `crates/llm/`, `crates/storage/` - **Agent B** — `crates/ai-formatting/`, `crates/llm/`, `crates/storage/`
- **Agent C** — `src-tauri/src/` (commands layer + lib.rs + main.rs + types.rs) - **Agent C** — `src-tauri/src/` (commands layer + lib.rs + main.rs + types.rs)

6
docs/dev-setup.md
View File

@@ -2,10 +2,10 @@
name: dev-setup name: dev-setup
type: reference type: reference
tags: [setup, dependencies, build, linux, fedora] tags: [setup, dependencies, build, linux, fedora]
description: Authoritative build dependencies and launch instructions for Kon on Fedora Linux description: Authoritative build dependencies and launch instructions for Magnotia on Fedora Linux
--- ---
# Kon — Developer Setup # Magnotia — Developer Setup
Last updated: 2026/04/18. Primary dev target: Fedora 43, x86_64, KDE Wayland, NVIDIA RTX 4070. Last updated: 2026/04/18. Primary dev target: Fedora 43, x86_64, KDE Wayland, NVIDIA RTX 4070.
@@ -67,7 +67,7 @@ Rust toolchain managed by `rustup`. No extra steps needed beyond what Tauri requ
### CPU build (default) ### CPU build (default)
```bash ```bash
cd /home/jake/Documents/CORBEL-Projects/kon cd /home/jake/Documents/CORBEL-Projects/magnotia
LIBCLANG_PATH=/usr/lib64/llvm21/lib64 npm run tauri dev LIBCLANG_PATH=/usr/lib64/llvm21/lib64 npm run tauri dev
``` ```

72
docs/gpu-tuning/plan.md
View File

@@ -1,4 +1,4 @@
# Kon — GPU Tuning & Community Config Plan # Magnotia — GPU Tuning & Community Config Plan
*Implementation spec for the first three phases of the GPU kernel tuning roadmap. The full five-phase roadmap is pinned in memory; this document scopes the MVP subset that ships real value without pulling in `ggml`-dedup or agentic-search prerequisites.* *Implementation spec for the first three phases of the GPU kernel tuning roadmap. The full five-phase roadmap is pinned in memory; this document scopes the MVP subset that ships real value without pulling in `ggml`-dedup or agentic-search prerequisites.*
@@ -7,8 +7,8 @@
**IN** (this document): **IN** (this document):
- Phase 1 — Advanced GPU tuning settings panel (exposing GGML env vars) - Phase 1 — Advanced GPU tuning settings panel (exposing GGML env vars)
- Phase 2 — `kon-bench` local autotuning CLI - Phase 2 — `magnotia-bench` local autotuning CLI
- Phase 3-lite — `kon-configs` community repo with manual-PR workflow (no CI replay) - Phase 3-lite — `magnotia-configs` community repo with manual-PR workflow (no CI replay)
**OUT** (pinned to memory for later): **OUT** (pinned to memory for later):
@@ -36,13 +36,13 @@ This subset captures roughly 85% of the perceived value for ~20% of the total ef
| Disable integer dot product | `GGML_VK_DISABLE_INTEGER_DOT_PRODUCT` | off | "Random NaN" on RDNA2 with certain drivers | | Disable integer dot product | `GGML_VK_DISABLE_INTEGER_DOT_PRODUCT` | off | "Random NaN" on RDNA2 with certain drivers |
| Enable Vulkan validation | `GGML_VK_VALIDATE` | off | Diagnostic only; impacts performance | | Enable Vulkan validation | `GGML_VK_VALIDATE` | off | Diagnostic only; impacts performance |
Metal / CUDA counterparts slot in when those backends grow in Kon. Today Kon is Vulkan-only. Metal / CUDA counterparts slot in when those backends grow in Magnotia. Today Magnotia is Vulkan-only.
### Design ### Design
- New `SettingsState.gpuTuning: { disableCoopmat: boolean, forceFp32: boolean, disableF16: boolean, disableIntegerDotProduct: boolean, enableValidation: boolean }` in [src/lib/types/app.ts](../../src/lib/types/app.ts) - New `SettingsState.gpuTuning: { disableCoopmat: boolean, forceFp32: boolean, disableF16: boolean, disableIntegerDotProduct: boolean, enableValidation: boolean }` in [src/lib/types/app.ts](../../src/lib/types/app.ts)
- All defaults `false` in [src/lib/stores/page.svelte.ts](../../src/lib/stores/page.svelte.ts) - All defaults `false` in [src/lib/stores/page.svelte.ts](../../src/lib/stores/page.svelte.ts)
- Persistence uses the existing `save_preferences` → SQLite `kon_preferences` path - Persistence uses the existing `save_preferences` → SQLite `magnotia_preferences` path
- Backend reads preferences at the **very top** of `run()` in [src-tauri/src/lib.rs](../../src-tauri/src/lib.rs) — before `tauri::Builder::default()` spawns threads — and writes via `unsafe { std::env::set_var(...) }`. Matches the existing `ensure_x11_on_wayland` pattern - Backend reads preferences at the **very top** of `run()` in [src-tauri/src/lib.rs](../../src-tauri/src/lib.rs) — before `tauri::Builder::default()` spawns threads — and writes via `unsafe { std::env::set_var(...) }`. Matches the existing `ensure_x11_on_wayland` pattern
- Settings UI shows a sticky "Restart required for changes to take effect" banner when any toggle has drifted from its launch-time value - Settings UI shows a sticky "Restart required for changes to take effect" banner when any toggle has drifted from its launch-time value
- A "Reset to defaults" button zeroes all toggles - A "Reset to defaults" button zeroes all toggles
@@ -55,18 +55,18 @@ Metal / CUDA counterparts slot in when those backends grow in Kon. Today Kon is
--- ---
## Phase 2 — `kon-bench` local autotuning CLI ## Phase 2 — `magnotia-bench` local autotuning CLI
**Effort**: 3–5 days. **Effort**: 3–5 days.
**What ships**: New workspace binary `crates/bench/` producing a `kon-bench` executable. User runs it once post-install; output lands at `~/.kon/gpu-profile.toml` with the best-scoring config for their hardware. Settings page gets an "Apply auto-tuned profile" button that consumes the TOML and updates the Phase 1 toggles. **What ships**: New workspace binary `crates/bench/` producing a `magnotia-bench` executable. User runs it once post-install; output lands at `~/.magnotia/gpu-profile.toml` with the best-scoring config for their hardware. Settings page gets an "Apply auto-tuned profile" button that consumes the TOML and updates the Phase 1 toggles.
### CLI surface ### CLI surface
``` ```
kon-bench --quick # bundled 20s sample + reference transcript magnotia-bench --quick # bundled 20s sample + reference transcript
kon-bench --model <path> --audio <wav> --transcript <txt> magnotia-bench --model <path> --audio <wav> --transcript <txt>
kon-bench --compare <profile.toml> # benchmark a specific profile vs default magnotia-bench --compare <profile.toml> # benchmark a specific profile vs default
``` ```
### Execution model ### Execution model
@@ -102,7 +102,7 @@ A 20-second public-domain speech clip with a known-good reference transcript, co
```toml ```toml
[benchmarked_at] [benchmarked_at]
timestamp = "2026-04-21T14:32:00Z" timestamp = "2026-04-21T14:32:00Z"
kon_version = "0.1.0" magnotia_version = "0.1.0"
model = "whisper-distil-large-v3" model = "whisper-distil-large-v3"
[hardware] [hardware]
@@ -137,37 +137,37 @@ crates/bench/
│ └── librivox-sample.txt │ └── librivox-sample.txt
└── src/ └── src/
├── main.rs # CLI + parent process ├── main.rs # CLI + parent process
├── runner.rs # subprocess harness (child entry gate: KON_BENCH_RUN=1) ├── runner.rs # subprocess harness (child entry gate: MAGNOTIA_BENCH_RUN=1)
├── matrix.rs # grid-search + top-k logic ├── matrix.rs # grid-search + top-k logic
├── metrics.rs # RTF + WER + optional VRAM sampling ├── metrics.rs # RTF + WER + optional VRAM sampling
└── profile.rs # TOML serialise └── profile.rs # TOML serialise
``` ```
Depends on `kon-transcription` + `kon-llm` + `kon-audio` as path deps so it reuses the existing model-loading code. Depends on `magnotia-transcription` + `magnotia-llm` + `magnotia-audio` as path deps so it reuses the existing model-loading code.
### Acceptance ### Acceptance
- `kon-bench --quick` runs unattended to completion on a fresh install - `magnotia-bench --quick` runs unattended to completion on a fresh install
- Produces a valid `gpu-profile.toml` - Produces a valid `gpu-profile.toml`
- "Apply auto-tuned" button in Settings consumes the TOML and updates Phase 1 toggles (restart banner fires as expected) - "Apply auto-tuned" button in Settings consumes the TOML and updates Phase 1 toggles (restart banner fires as expected)
- Re-running with `--compare <profile>` produces reproducible-enough numbers (RTF within 5% run-to-run) - Re-running with `--compare <profile>` produces reproducible-enough numbers (RTF within 5% run-to-run)
--- ---
## Phase 3-lite — `kon-configs` community repo ## Phase 3-lite — `magnotia-configs` community repo
**Effort**: 3 days (1 for repo + seeds, 2 for Kon-side fetch + apply UI). **Effort**: 3 days (1 for repo + seeds, 2 for Magnotia-side fetch + apply UI).
**What ships**: A separate public GitHub repo `kon-configs` (not part of the kon main repo) seeded with 2–3 curated configs. Kon's Settings page gets a "Browse community configs" button that fetches matching configs for the user's detected hardware. **What ships**: A separate public GitHub repo `magnotia-configs` (not part of the magnotia main repo) seeded with 2–3 curated configs. Magnotia's Settings page gets a "Browse community configs" button that fetches matching configs for the user's detected hardware.
### Repo structure ### Repo structure
``` ```
kon-configs/ magnotia-configs/
├── README.md # pitch + how to benefit ├── README.md # pitch + how to benefit
├── CONTRIBUTING.md # required fields, benchmark protocol, fork/PR flow ├── CONTRIBUTING.md # required fields, benchmark protocol, fork/PR flow
├── SCHEMA.md # TOML schema documentation ├── SCHEMA.md # TOML schema documentation
├── index.json # manifest for Kon to discover configs ├── index.json # manifest for Magnotia to discover configs
└── configs/ └── configs/
├── nvidia/ ├── nvidia/
│ ├── rtx-3060-12gb-linux.toml │ ├── rtx-3060-12gb-linux.toml
@@ -190,15 +190,15 @@ notes = "Tested with 1-hour continuous dictation session, no crashes."
### Contribution flow (manual, honour-system MVP) ### Contribution flow (manual, honour-system MVP)
1. User runs `kon-bench` on their hardware. 1. User runs `magnotia-bench` on their hardware.
2. User runs `kon-bench --compare` against baseline to confirm improvement isn't noise. 2. User runs `magnotia-bench --compare` against baseline to confirm improvement isn't noise.
3. User forks `kon-configs`, commits their TOML under `configs/<vendor>/`, opens PR. 3. User forks `magnotia-configs`, commits their TOML under `configs/<vendor>/`, opens PR.
4. Maintainer reviews format + plausibility, merges. 4. Maintainer reviews format + plausibility, merges.
5. No CI replay — revisit if spam becomes a problem. 5. No CI replay — revisit if spam becomes a problem.
### Kon integration ### Magnotia integration
- New Tauri command `fetch_community_configs(gpu_fingerprint)` — HTTPS GET `https://raw.githubusercontent.com/<org>/kon-configs/main/index.json` for the manifest, then fetches matching TOMLs - New Tauri command `fetch_community_configs(gpu_fingerprint)` — HTTPS GET `https://raw.githubusercontent.com/<org>/magnotia-configs/main/index.json` for the manifest, then fetches matching TOMLs
- Fingerprint match: GPU name substring + VRAM tier (e.g., `"RTX 3060"` + `"12gb"`) - Fingerprint match: GPU name substring + VRAM tier (e.g., `"RTX 3060"` + `"12gb"`)
- Settings "Browse community configs" button lists matches with submitter, claimed RTF improvement, and a preview of the toggle deltas - Settings "Browse community configs" button lists matches with submitter, claimed RTF improvement, and a preview of the toggle deltas
- Applying a config updates Phase 1 toggles AND stores provenance (source = `"community"`, submitter, fetch date) - Applying a config updates Phase 1 toggles AND stores provenance (source = `"community"`, submitter, fetch date)
@@ -206,13 +206,13 @@ notes = "Tested with 1-hour continuous dictation session, no crashes."
### What we explicitly skip at MVP ### What we explicitly skip at MVP
- **No CI replay**. Maintainer eyeballs + honour system. Revisit past ~50 configs or on abuse. - **No CI replay**. Maintainer eyeballs + honour system. Revisit past ~50 configs or on abuse.
- **No automated upload from `kon-bench`**. User always commits + PRs manually. Zero privacy concerns, zero spam surface. - **No automated upload from `magnotia-bench`**. User always commits + PRs manually. Zero privacy concerns, zero spam surface.
- **No sophisticated fingerprint normalisation**. Substring matching is sufficient. - **No sophisticated fingerprint normalisation**. Substring matching is sufficient.
### Acceptance ### Acceptance
- Repo exists with README + CONTRIBUTING + 2–3 seed configs - Repo exists with README + CONTRIBUTING + 2–3 seed configs
- Kon Settings fetches + lists + applies a community config end-to-end - Magnotia Settings fetches + lists + applies a community config end-to-end
- "Revert to default" path works (Phase 1's reset) - "Revert to default" path works (Phase 1's reset)
--- ---
@@ -223,7 +223,7 @@ This is the UX the three phases together enable. All three are prerequisites; Ph
### First-launch onboarding nudge ### First-launch onboarding nudge
After the existing first-run model download, Kon surfaces a non-modal card: After the existing first-run model download, Magnotia surfaces a non-modal card:
``` ```
🎛 GPU Optimisation 🎛 GPU Optimisation
@@ -241,7 +241,7 @@ Two steps, in this order:
**Step 1 — Community config check (instant, ~2 s)** **Step 1 — Community config check (instant, ~2 s)**
Kon fingerprints the GPU and queries the `kon-configs` manifest for matches. If a match exists, a preview card appears: Magnotia fingerprints the GPU and queries the `magnotia-configs` manifest for matches. If a match exists, a preview card appears:
``` ```
┌─────────────────────────────────────────────┐ ┌─────────────────────────────────────────────┐
@@ -271,13 +271,13 @@ If no community match, or the user prefers their own measurement:
│ │ │ │
│ We can benchmark your machine to find the │ │ We can benchmark your machine to find the │
│ best settings. Takes ~8 minutes; runs in │ │ best settings. Takes ~8 minutes; runs in │
│ the background while you keep using Kon. │ │ the background while you keep using Magnotia. │
│ │ │ │
│ [ Benchmark my GPU ] [ Skip ] │ │ [ Benchmark my GPU ] [ Skip ] │
└─────────────────────────────────────────────┘ └─────────────────────────────────────────────┘
``` ```
Kicks off `kon-bench` as a background process. Kon keeps working during the run. Kicks off `magnotia-bench` as a background process. Magnotia keeps working during the run.
### Progress UI during benchmark ### Progress UI during benchmark
@@ -307,7 +307,7 @@ Plus a "Revert to previous config" button, active for 7 days after any change, i
### Optional — sharing back to the community ### Optional — sharing back to the community
After a successful local benchmark that shows meaningful gains, Kon prompts: After a successful local benchmark that shows meaningful gains, Magnotia prompts:
``` ```
┌─────────────────────────────────────────────┐ ┌─────────────────────────────────────────────┐
@@ -325,7 +325,7 @@ After a successful local benchmark that shows meaningful gains, Kon prompts:
└─────────────────────────────────────────────┘ └─────────────────────────────────────────────┘
``` ```
"Create PR" opens the user's browser to `github.com/…/kon-configs/new/main` with the TOML prefilled in the PR body. User finishes the submission on GitHub (still honour-system; no automated uploads, no telemetry). "Create PR" opens the user's browser to `github.com/…/magnotia-configs/new/main` with the TOML prefilled in the PR body. User finishes the submission on GitHub (still honour-system; no automated uploads, no telemetry).
### Non-GPU / integrated-only fallback ### Non-GPU / integrated-only fallback
@@ -333,7 +333,7 @@ If `sysinfo` reports no dedicated GPU or Vulkan isn't available, the card replac
``` ```
🎛 GPU Optimisation 🎛 GPU Optimisation
No dedicated GPU detected — Kon is using CPU inference. No dedicated GPU detected — Magnotia is using CPU inference.
GPU tuning doesn't apply to this setup. GPU tuning doesn't apply to this setup.
``` ```
@@ -345,7 +345,7 @@ For users whose GPU has a community-contributed config, the experience is **lite
For users without a community match, the experience is **two clicks** (trigger bench → apply results on completion), with a passive ~8-minute background wait in between. For users without a community match, the experience is **two clicks** (trigger bench → apply results on completion), with a passive ~8-minute background wait in between.
For users on integrated graphics / no GPU, the experience is **zero clicks** — Kon tells them GPU tuning doesn't apply and moves on. For users on integrated graphics / no GPU, the experience is **zero clicks** — Magnotia tells them GPU tuning doesn't apply and moves on.
--- ---
@@ -353,7 +353,7 @@ For users on integrated graphics / no GPU, the experience is **zero clicks** —
Strict linear: Phase 1 → Phase 2 → Phase 3-lite. Each phase merges to `main` and gets dogfooded before the next starts. Strict linear: Phase 1 → Phase 2 → Phase 3-lite. Each phase merges to `main` and gets dogfooded before the next starts.
- Phase 1 is a prereq for Phase 2 — `kon-bench`'s output needs the Phase 1 settings schema to be its consumption target. - Phase 1 is a prereq for Phase 2 — `magnotia-bench`'s output needs the Phase 1 settings schema to be its consumption target.
- Phase 2 is a prereq for Phase 3-lite — the community repo's config TOML schema **is** Phase 2's output schema (with an added `[attribution]` section). - Phase 2 is a prereq for Phase 3-lite — the community repo's config TOML schema **is** Phase 2's output schema (with an added `[attribution]` section).
## Shelved with rationale ## Shelved with rationale
@@ -361,4 +361,4 @@ Strict linear: Phase 1 → Phase 2 → Phase 3-lite. Each phase merges to `main`
- **Phase 4 — custom SPIR-V shader drops.** Blocked on `ggml`-dedup workstream. Pinned in memory. - **Phase 4 — custom SPIR-V shader drops.** Blocked on `ggml`-dedup workstream. Pinned in memory.
- **Phase 5 — agentic (Karpathy-style) autotune.** Phase 2's grid search produces schema-compatible results, so Phase 5 can drop in later without a schema break. Pinned. - **Phase 5 — agentic (Karpathy-style) autotune.** Phase 2's grid search produces schema-compatible results, so Phase 5 can drop in later without a schema break. Pinned.
- **Phase 3's CI replay.** Defer until spam / bad-config abuse is a real problem rather than a hypothetical one. Honour-system PR review is sufficient for the MVP community. - **Phase 3's CI replay.** Defer until spam / bad-config abuse is a real problem rather than a hypothetical one. Honour-system PR review is sufficient for the MVP community.
- **`kon-bench` automated upload.** Deliberately manual for MVP — removes all privacy / spam / rate-limiting concerns. Revisit when the community volume justifies the infrastructure. - **`magnotia-bench` automated upload.** Deliberately manual for MVP — removes all privacy / spam / rate-limiting concerns. Revisit when the community volume justifies the infrastructure.

30
HANDOVER-2026-04-17.md → docs/handovers/HANDOVER-2026-04-17.md
View File

@@ -1,10 +1,12 @@
# Kon Session Handover — 2026/04/17 # Magnotia Session Handover — 2026/04/17
*Originally written when the product was named Kon (and briefly Corbie); references rewritten in the 2026-04-30 rebrand sweep.*
## Session Summary ## Session Summary
Six-commit sprint executing the upgrade plan from Six-commit sprint executing the upgrade plan from
`/home/jake/Documents/CORBEL-Furnished-House/output/reports/kon-upgrade-plan-2026-04-17.md`. `/home/jake/Documents/CORBEL-Furnished-House/output/reports/magnotia-upgrade-plan-2026-04-17.md`.
Goal: get Kon from "core feature broken" to "ready to dogfood with friends." Goal: get Magnotia from "core feature broken" to "ready to dogfood with friends."
## Commits ## Commits
@@ -93,7 +95,7 @@ index in sync. Dictionary table also added in v2.
New collapsible section. Add custom terms (medication names, jargon, New collapsible section. Add custom terms (medication names, jargon,
people's names) that the LLM cleanup prompt should preserve. Backed by people's names) that the LLM cleanup prompt should preserve. Backed by
the `dictionary` SQLite table. The LLM client itself is currently a the `dictionary` SQLite table. The LLM client itself is currently a
stub; when wired, it imports `list_dictionary` from kon_storage and stub; when wired, it imports `list_dictionary` from magnotia_storage and
injects terms into the prompt suffix. injects terms into the prompt suffix.
### Wayland self-relaunch ### Wayland self-relaunch
@@ -109,14 +111,14 @@ HANDOVER env-var prefix is no longer needed.
```bash ```bash
sudo dnf install cmake clang-devel sudo dnf install cmake clang-devel
cd /home/jake/Documents/CORBEL-Projects/kon cd /home/jake/Documents/CORBEL-Projects/magnotia
npm install # if you have not already npm install # if you have not already
``` ```
### Launch (no env-var prefix needed any more) ### Launch (no env-var prefix needed any more)
```bash ```bash
cd /home/jake/Documents/CORBEL-Projects/kon cd /home/jake/Documents/CORBEL-Projects/magnotia
npm run tauri dev npm run tauri dev
``` ```
@@ -140,10 +142,10 @@ env GDK_BACKEND=x11 WINIT_UNIX_BACKEND=x11 \
3. **Auto mode.** Clear the picker (set to "Auto"). Hit dictation. The 3. **Auto mode.** Clear the picker (set to "Auto"). Hit dictation. The
logs (terminal where you ran `npm run tauri dev`) should show: logs (terminal where you ran `npm run tauri dev`) should show:
- `[kon-audio] start: enumerated N input device(s)` - `[magnotia-audio] start: enumerated N input device(s)`
- `[kon-audio] trying '...'` for each candidate - `[magnotia-audio] trying '...'` for each candidate
- `[kon-audio] '...' validation: M samples, rms=...` - `[magnotia-audio] '...' validation: M samples, rms=...`
- `[kon-audio] selected microphone: '...'` - `[magnotia-audio] selected microphone: '...'`
The selected mic should NOT be a `.monitor` source. The selected mic should NOT be a `.monitor` source.
4. **History rename.** Make a recording. In History, rename it to 4. **History rename.** Make a recording. In History, rename it to
@@ -194,7 +196,7 @@ env GDK_BACKEND=x11 WINIT_UNIX_BACKEND=x11 \
| **Linux x86_64 (Fedora 43, KDE Wayland)** | ✓ | ✓ | The everyday dev target | **HIGH** — this is what the sprint was developed against | | **Linux x86_64 (Fedora 43, KDE Wayland)** | ✓ | ✓ | The everyday dev target | **HIGH** — this is what the sprint was developed against |
| **Linux x86_64 (other distros, X11)** | Should work | Should work | Wayland self-relaunch is no-op on X11 sessions, evdev hotkeys may need user added to `input` group | **MEDIUM** — tested patterns, untested distros | | **Linux x86_64 (other distros, X11)** | Should work | Should work | Wayland self-relaunch is no-op on X11 sessions, evdev hotkeys may need user added to `input` group | **MEDIUM** — tested patterns, untested distros |
| **Windows 10/11 x86_64** | Untested but should compile (CPAL + Tauri + whisper.cpp all support it) | Untested | Custom evdev hotkeys are no-op; falls back to Tauri's global-shortcut plugin which works on Windows | **LOW** — theoretically supported, has had zero hands-on testing | | **Windows 10/11 x86_64** | Untested but should compile (CPAL + Tauri + whisper.cpp all support it) | Untested | Custom evdev hotkeys are no-op; falls back to Tauri's global-shortcut plugin which works on Windows | **LOW** — theoretically supported, has had zero hands-on testing |
| **macOS aarch64 (Apple Silicon)** | Untested | Untested | Path bug fixed this commit (now uses `~/Library/Application Support/Kon/`); Info.plist needs `NSMicrophoneUsageDescription` for the app bundle | **LOW** — theoretically supported, has had zero hands-on testing | | **macOS aarch64 (Apple Silicon)** | Untested | Untested | Path bug fixed this commit (now uses `~/Library/Application Support/Magnotia/`); Info.plist needs `NSMicrophoneUsageDescription` for the app bundle | **LOW** — theoretically supported, has had zero hands-on testing |
| **macOS x86_64 (Intel)** | Same as Apple Silicon | Same | Same | **LOW** | | **macOS x86_64 (Intel)** | Same as Apple Silicon | Same | Same | **LOW** |
**For the friends beta on Linux only**, this matters not at all. For a future Windows or macOS build, expect to spend a focused day or two debugging: **For the friends beta on Linux only**, this matters not at all. For a future Windows or macOS build, expect to spend a focused day or two debugging:
@@ -207,7 +209,7 @@ env GDK_BACKEND=x11 WINIT_UNIX_BACKEND=x11 \
### What this sprint added on the cross-platform front ### What this sprint added on the cross-platform front
- `crates/storage/src/file_storage.rs::app_data_dir()` now correctly handles macOS (`~/Library/Application Support/Kon/`) and Linux (XDG-aware, `~/.local/share/kon`, with legacy `~/.kon` fallback for existing installs). Windows path unchanged. - `crates/storage/src/file_storage.rs::app_data_dir()` now correctly handles macOS (`~/Library/Application Support/Magnotia/`) and Linux (XDG-aware, `~/.local/share/magnotia`, with legacy `~/.magnotia` fallback for existing installs). Windows path unchanged.
- New Tauri command `get_os_info` returns `{os, arch, family, usesCmd, isWayland, customHotkeyBackend, primaryModifierLabel}` so the frontend can adapt UI strings (Cmd vs Ctrl labels, "Open Finder" vs "Open Explorer", etc). - New Tauri command `get_os_info` returns `{os, arch, family, usesCmd, isWayland, customHotkeyBackend, primaryModifierLabel}` so the frontend can adapt UI strings (Cmd vs Ctrl labels, "Open Finder" vs "Open Explorer", etc).
- New `src/lib/utils/osInfo.js` helper: async `loadOsInfo()` warms a cache, then `isMac() / isWindows() / isLinux() / modKeyLabel() / isWayland()` are synchronous. Eagerly loaded at app startup in the root layout. - New `src/lib/utils/osInfo.js` helper: async `loadOsInfo()` warms a cache, then `isMac() / isWindows() / isLinux() / modKeyLabel() / isWayland()` are synchronous. Eagerly loaded at app startup in the root layout.
- Falls back gracefully in browser-preview mode by reading `navigator.platform`. - Falls back gracefully in browser-preview mode by reading `navigator.platform`.
@@ -240,7 +242,7 @@ src/routes/+layout.svelte (+ ToastViewport mount)
1. Real-user feedback from one to three friends. What confuses them? 1. Real-user feedback from one to three friends. What confuses them?
What feels slow? What did they expect that did not happen? What feels slow? What did they expect that did not happen?
2. Address the deferred items in priority of feedback signal. 2. Address the deferred items in priority of feedback signal.
3. Consider opening up the `kon-public-beta` channel — a single 3. Consider opening up the `magnotia-public-beta` channel — a single
GitHub release with the auto-updater plumbed. GitHub release with the auto-updater plumbed.
4. The architecture review's other items (frontend test coverage, 4. The architecture review's other items (frontend test coverage,
monolithic component split, hardcoded hex colours, ARIA gaps) monolithic component split, hardcoded hex colours, ARIA gaps)
@@ -248,6 +250,6 @@ src/routes/+layout.svelte (+ ToastViewport mount)
--- ---
*Compiled 2026/04/17 by Wren. Kon goes from "live transcription does not *Compiled 2026/04/17 by Wren. Magnotia goes from "live transcription does not
work" to "ready to put in front of one trusted friend." Six commits, no work" to "ready to put in front of one trusted friend." Six commits, no
horrors so far.* horrors so far.*

14
HANDOVER-2026-04-18.md → docs/handovers/HANDOVER-2026-04-18.md
View File

@@ -1,11 +1,13 @@
--- ---
name: handover-2026-04-18 name: handover-2026-04-18
type: reference type: reference
tags: [handover, session, kon] tags: [handover, session, magnotia]
description: Session handover — 2026/04/18 dogfooding sprint description: Session handover — 2026/04/18 dogfooding sprint
--- ---
# Kon Handover — 2026/04/18 # Magnotia Handover — 2026/04/18
*Originally written when the product was named Kon (and briefly Corbie); references rewritten in the 2026-04-30 rebrand sweep.*
## Current state ## Current state
@@ -13,7 +15,7 @@ Phase 1 brand migration and Phase 2 polish are both **complete and committed**.
## What's working ## What's working
- **18/18 automated validation checks pass** (Playwright, `python3 /tmp/kon_validation.py`) - **18/18 automated validation checks pass** (Playwright, `python3 /tmp/magnotia_validation.py`)
- **Pre-warm fixed** — `tauri::async_runtime::spawn` instead of `tokio::spawn`; model loads in background before first dictation - **Pre-warm fixed** — `tauri::async_runtime::spawn` instead of `tokio::spawn`; model loads in background before first dictation
- **Preferences infinite loop fixed** — `Object.assign` mutation instead of object reassignment; Svelte 5 module state now stable - **Preferences infinite loop fixed** — `Object.assign` mutation instead of object reassignment; Svelte 5 module state now stable
- **DOM hydration fixed** — `applyToDOM` called on store init so `data-theme` is always set, even without Tauri webview injection - **DOM hydration fixed** — `applyToDOM` called on store init so `data-theme` is always set, even without Tauri webview injection
@@ -32,7 +34,7 @@ sudo dnf install vulkan-headers vulkan-loader-devel glslc
Then launch: Then launch:
```bash ```bash
cd /home/jake/Documents/CORBEL-Projects/kon cd /home/jake/Documents/CORBEL-Projects/magnotia
LIBCLANG_PATH=/usr/lib64/llvm21/lib64 npm run tauri dev LIBCLANG_PATH=/usr/lib64/llvm21/lib64 npm run tauri dev
``` ```
@@ -49,7 +51,7 @@ Three items from the validation checklist that need real Tauri runtime:
### Pre-release (before any build beyond Jake's machine) ### Pre-release (before any build beyond Jake's machine)
- [ ] Updater signing key — `tauri signer generate`, public key → `tauri.conf.json`, private key → CI secrets - [ ] Updater signing key — `tauri signer generate`, public key → `tauri.conf.json`, private key → CI secrets
- [ ] ggml dedup — plan at `docs/superpowers/plans/2026-04-18-kon-ggml-dedup.md`, Option A (system-ggml shared lib), execute at Phase 3 - [ ] ggml dedup — plan at `docs/superpowers/plans/2026-04-18-magnotia-ggml-dedup.md`, Option A (system-ggml shared lib), execute at Phase 3
## Gotchas discovered today ## Gotchas discovered today
@@ -64,7 +66,7 @@ Three items from the validation checklist that need real Tauri runtime:
## Resume prompt ## Resume prompt
``` ```
Picking up Kon dogfooding from the 2026/04/18 session. Picking up Magnotia dogfooding from the 2026/04/18 session.
HANDOVER is at HANDOVER.md in the project root. HANDOVER is at HANDOVER.md in the project root.
First job: confirm Vulkan GPU build compiles and check startup logs for RTX 4070. First job: confirm Vulkan GPU build compiles and check startup logs for RTX 4070.
Then run the three manual validation items from the handover. Then run the three manual validation items from the handover.

28
HANDOVER-2026-04-19.md → docs/handovers/HANDOVER-2026-04-19.md
View File

@@ -1,18 +1,20 @@
--- ---
name: handover-2026-04-19 name: handover-2026-04-19
type: reference type: reference
tags: [handover, session, kon] tags: [handover, session, magnotia]
description: Session handover — 2026/04/19 dogfood polish + cross-platform window chrome description: Session handover — 2026/04/19 dogfood polish + cross-platform window chrome
--- ---
# Kon Handover — 2026/04/19 # Magnotia Handover — 2026/04/19
*Originally written when the product was named Kon (and briefly Corbie); references rewritten in the 2026-04-30 rebrand sweep.*
Second dogfood sprint. Four phases: (1) fix bugs surfaced on first real use, (2) redesign History for cognitive-load hygiene, (3) resolve broken window resize/drag on Linux Wayland, (4) clean up microphone picker. Second dogfood sprint. Four phases: (1) fix bugs surfaced on first real use, (2) redesign History for cognitive-load hygiene, (3) resolve broken window resize/drag on Linux Wayland, (4) clean up microphone picker.
## What shipped this session ## What shipped this session
### Cross-window preferences sync ### Cross-window preferences sync
- `preferences.svelte.js` emits `kon:preferences-changed` Tauri event on update. - `preferences.svelte.js` emits `magnotia:preferences-changed` Tauri event on update.
- Main / viewer / float layouts listen and call `applyExternalPreferences` without re-emit, so theme and font changes propagate live across sibling windows. - Main / viewer / float layouts listen and call `applyExternalPreferences` without re-emit, so theme and font changes propagate live across sibling windows.
- Echo suppressed via source window label check. - Echo suppressed via source window label check.
@@ -28,13 +30,13 @@ Second dogfood sprint. Four phases: (1) fix bugs surfaced on first real use, (2)
- **Tags**: `$lib/utils/frontmatter.js` exposes `deriveAutoTags` (currently returns `[]`), `buildFrontmatter`, `serialiseFrontmatter`, `buildMarkdown`. Manual tags stored as `item.manualTags`, rendered as removable chips in the expanded row with `+ add tag` input. - **Tags**: `$lib/utils/frontmatter.js` exposes `deriveAutoTags` (currently returns `[]`), `buildFrontmatter`, `serialiseFrontmatter`, `buildMarkdown`. Manual tags stored as `item.manualTags`, rendered as removable chips in the expanded row with `+ add tag` input.
- Header tag chip bar (cap 7, click to filter, × to clear), plus `tag:xyz` search syntax. - Header tag chip bar (cap 7, click to filter, × to clear), plus `tag:xyz` search syntax.
- Global **Starred** filter toggle in the History header. - Global **Starred** filter toggle in the History header.
- Research memo found all five previous auto-tag families redundant with existing row UI — kept the derivation hook for the post-Task-7 `topic:*` content tag from kon-llm. - Research memo found all five previous auto-tag families redundant with existing row UI — kept the derivation hook for the post-Task-7 `topic:*` content tag from magnotia-llm.
- Duplicate-transcript render fix: expanded `<p>` only if compact preview actually truncated. - Duplicate-transcript render fix: expanded `<p>` only if compact preview actually truncated.
### Viewer / editor popout ### Viewer / editor popout
- `/viewer` route now reads `kon_viewer_mode` from localStorage ("view" | "edit"). - `/viewer` route now reads `magnotia_viewer_mode` from localStorage ("view" | "edit").
- Edit mode renders a plain textarea bound to `item.text`; 400ms debounced save flushes on input, final flush on `onDestroy`. Segment-specific controls (Compact, Starred) hidden in edit mode. - Edit mode renders a plain textarea bound to `item.text`; 400ms debounced save flushes on input, final flush on `onDestroy`. Segment-specific controls (Compact, Starred) hidden in edit mode.
- Native title: **"Kon - Transcription Editor"**. - Native title: **"Magnotia - Transcription Editor"**.
### Platform-aware window chrome (Linux fix) ### Platform-aware window chrome (Linux fix)
**Root cause:** Tauri v2 frameless `decorations: false` on KDE Wayland + webkit2gtk does not honour diagonal corner resize (collapses `NorthEast` etc. to a single axis via GTK's `gtk_window_begin_resize_drag`), and `data-tauri-drag-region` adds noticeable drag latency. Setting `setPointerCapture` ahead of `startResizeDragging` does not help once the compositor has taken over the pointer grab. Verified via Context7 docs + Codex diagnosis — Linux frameless is a known-fragile path. **Root cause:** Tauri v2 frameless `decorations: false` on KDE Wayland + webkit2gtk does not honour diagonal corner resize (collapses `NorthEast` etc. to a single axis via GTK's `gtk_window_begin_resize_drag`), and `data-tauri-drag-region` adds noticeable drag latency. Setting `setPointerCapture` ahead of `startResizeDragging` does not help once the compositor has taken over the pointer grab. Verified via Context7 docs + Codex diagnosis — Linux frameless is a known-fragile path.
@@ -43,7 +45,7 @@ Second dogfood sprint. Four phases: (1) fix bugs surfaced on first real use, (2)
- Linux uses **native KWin/Mutter decorations**. `src-tauri/tauri.linux.conf.json` overlays `decorations: true` + full main window config (title, sizes) — overlays **replace** the windows array, so every field must be present, not just the delta. `src-tauri/src/commands/windows.rs` uses `cfg!(target_os = "linux")` to set decorations per window. - Linux uses **native KWin/Mutter decorations**. `src-tauri/tauri.linux.conf.json` overlays `decorations: true` + full main window config (title, sizes) — overlays **replace** the windows array, so every field must be present, not just the delta. `src-tauri/src/commands/windows.rs` uses `cfg!(target_os = "linux")` to set decorations per window.
- macOS / Windows keep custom chrome. `src/lib/utils/osInfo.js` `isLinux()` gates `<Titlebar>` and `<ResizeHandles>` via `useCustomChrome = $state(false)`; flips to `!isLinux()` after `loadOsInfo()` resolves. - macOS / Windows keep custom chrome. `src/lib/utils/osInfo.js` `isLinux()` gates `<Titlebar>` and `<ResizeHandles>` via `useCustomChrome = $state(false)`; flips to `!isLinux()` after `loadOsInfo()` resolves.
- Dueling drag-region handlers removed across Titlebar, float page, viewer page — everywhere a manual `startDragging()` lives, the `data-tauri-drag-region` attribute was deleted (they're alternatives per Tauri docs, not combinable). - Dueling drag-region handlers removed across Titlebar, float page, viewer page — everywhere a manual `startDragging()` lives, the `data-tauri-drag-region` attribute was deleted (they're alternatives per Tauri docs, not combinable).
- `ResizeHandles` kept for macOS/Windows frameless: 12 px edges / 20 px corners via CSS vars (`--kon-resize-edge`, `--kon-resize-corner`), `pointerdown` + `setPointerCapture`, corners with explicit higher z-index. Handles rendered as siblings of the animated layout div so `position: fixed` is viewport-relative rather than captured by the transform containing block. - `ResizeHandles` kept for macOS/Windows frameless: 12 px edges / 20 px corners via CSS vars (`--magnotia-resize-edge`, `--magnotia-resize-corner`), `pointerdown` + `setPointerCapture`, corners with explicit higher z-index. Handles rendered as siblings of the animated layout div so `position: fixed` is viewport-relative rather than captured by the transform containing block.
### Window minimum sizes (evidence-backed) ### Window minimum sizes (evidence-backed)
Research pass cited GNOME HIG (1024×600 desktop / 360×294 mobile floors), WCAG 2.2 SC 1.4.10 Reflow (320 CSS px), Raycast 750×474 as a reference for single-pane working width, and consistent A11y principle that nothing should clip in the default configuration. Research pass cited GNOME HIG (1024×600 desktop / 360×294 mobile floors), WCAG 2.2 SC 1.4.10 Reflow (320 CSS px), Raycast 750×474 as a reference for single-pane working width, and consistent A11y principle that nothing should clip in the default configuration.
@@ -64,16 +66,16 @@ Research pass cited GNOME HIG (1024×600 desktop / 360×294 mobile floors), WCAG
- Settings now shows the Vulkan option instead of the "This build is CPU-only" notice. - Settings now shows the Vulkan option instead of the "This build is CPU-only" notice.
### Desktop shortcut ### Desktop shortcut
- `~/Desktop/Kon.desktop` launcher with the 128×128 icon, `Terminal=true` so logs are visible and Ctrl+C cleanly stops the run.sh wrapper. - `~/Desktop/Magnotia.desktop` launcher with the 128×128 icon, `Terminal=true` so logs are visible and Ctrl+C cleanly stops the run.sh wrapper.
## What's deferred ## What's deferred
- **Transparent windows (`transparent: true`)** — Tauri issue #13270 reports this smooths drag/resize further on Linux, but it's moot now that Linux uses native decorations. - **Transparent windows (`transparent: true`)** — Tauri issue #13270 reports this smooths drag/resize further on Linux, but it's moot now that Linux uses native decorations.
- **File-system export (.md save dialog)** — currently clipboard-only. Needs a Rust `write_text_file` command for plugin-less file writes. - **File-system export (.md save dialog)** — currently clipboard-only. Needs a Rust `write_text_file` command for plugin-less file writes.
- **Bulk select + bulk export** in History. - **Bulk select + bulk export** in History.
- **LLM-powered content tags** (`topic:*`, `intent:*`) — slots into Task 7 `kon-llm` stub once Phase 3 wires real llama-cpp-2. - **LLM-powered content tags** (`topic:*`, `intent:*`) — slots into Task 7 `magnotia-llm` stub once Phase 3 wires real llama-cpp-2.
- **Settings UX overhaul** — Jake flagged that current settings feel overwhelming. Proposed: bunch high-traffic settings, hide advanced behind a toggle. Brainstorm + plan deferred to a dedicated session. - **Settings UX overhaul** — Jake flagged that current settings feel overwhelming. Proposed: bunch high-traffic settings, hide advanced behind a toggle. Brainstorm + plan deferred to a dedicated session.
- **Task 7 (MicroSteps end-to-end)** — storage + Tauri CRUD + kon-llm stub + frontend dual-write all landed in an earlier commit chain. The MicroSteps UI was written as the final task 7 step but not yet dogfooded against the stub LLM. Needs manual walkthrough. - **Task 7 (MicroSteps end-to-end)** — storage + Tauri CRUD + magnotia-llm stub + frontend dual-write all landed in an earlier commit chain. The MicroSteps UI was written as the final task 7 step but not yet dogfooded against the stub LLM. Needs manual walkthrough.
## Gotchas discovered today ## Gotchas discovered today
@@ -83,15 +85,15 @@ Research pass cited GNOME HIG (1024×600 desktop / 360×294 mobile floors), WCAG
| `data-tauri-drag-region` + manual `startDragging()` on the same node caused drag latency | Pick one — we use manual `startDragging` for the button/input early-return logic | | `data-tauri-drag-region` + manual `startDragging()` on the same node caused drag latency | Pick one — we use manual `startDragging` for the button/input early-return logic |
| Corner resize collapsed to single axis on KWin Wayland | Native decorations on Linux side-step the whole frameless path | | Corner resize collapsed to single axis on KWin Wayland | Native decorations on Linux side-step the whole frameless path |
| `animate-float-enter` on the viewer/float layout root created a containing block that broke `position: fixed` on ResizeHandles children | Render ResizeHandles as a sibling of the animated div, not a descendant | | `animate-float-enter` on the viewer/float layout root created a containing block that broke `position: fixed` on ResizeHandles children | Render ResizeHandles as a sibling of the animated div, not a descendant |
| Kon binary auto-respawned on file-save while a second run.sh was also launching → two visible instances sharing one Vite server | Do not script `./run.sh` while the user has already launched via the desktop icon; rely on HMR | | Magnotia binary auto-respawned on file-save while a second run.sh was also launching → two visible instances sharing one Vite server | Do not script `./run.sh` while the user has already launched via the desktop icon; rely on HMR |
| `run.sh` leaves `"beforeDevCommand": ""` in tauri.conf.json if its cleanup trap is bypassed (e.g. SIGKILL) | Cleanup trap restores `"npm run dev"` on graceful exit; SIGTERM (not SIGKILL) is the right kill signal | | `run.sh` leaves `"beforeDevCommand": ""` in tauri.conf.json if its cleanup trap is bypassed (e.g. SIGKILL) | Cleanup trap restores `"npm run dev"` on graceful exit; SIGTERM (not SIGKILL) is the right kill signal |
| `/proc/asound/cards` header lines have leading whitespace for 2-digit card ID alignment | Parser trims leading whitespace before checking for leading digit | | `/proc/asound/cards` header lines have leading whitespace for 2-digit card ID alignment | Parser trims leading whitespace before checking for leading digit |
## How to resume ## How to resume
``` ```
Picking up Kon dogfooding from 2026/04/19. Picking up Magnotia dogfooding from 2026/04/19.
HANDOVER is at HANDOVER.md in the project root. HANDOVER is at HANDOVER.md in the project root.
Active priorities: (1) confirm resize/drag/mic cleanup, (2) Task 7 MicroSteps Active priorities: (1) confirm resize/drag/mic cleanup, (2) Task 7 MicroSteps
dogfood with kon-llm stub, (3) Settings UX brainstorm. dogfood with magnotia-llm stub, (3) Settings UX brainstorm.
``` ```

26
HANDOVER-2026-04-24.md → docs/handovers/HANDOVER-2026-04-24.md
View File

@@ -1,17 +1,19 @@
--- ---
name: handover-2026-04-24 name: handover-2026-04-24
type: reference type: reference
tags: [handover, session, kon, phase-8, gamification] tags: [handover, session, magnotia, phase-8, gamification]
description: Session handover — 2026/04/24 Phase 8 forgiving gamification shipped end-to-end description: Session handover — 2026/04/24 Phase 8 forgiving gamification shipped end-to-end
--- ---
# Corbie Handover — 2026/04/24 # Magnotia Handover — 2026/04/24
*Originally written when the product was named Kon (and briefly Corbie); references rewritten in the 2026-04-30 rebrand sweep.*
Phase 8 session. Executed the forgiving-gamification spec + plan written at the top of the session against `main`. Shipped 14 commits end-to-end. All automated gates clean; manual dogfood walkthrough still owed when Jake next opens the running app. Phase 8 session. Executed the forgiving-gamification spec + plan written at the top of the session against `main`. Shipped 14 commits end-to-end. All automated gates clean; manual dogfood walkthrough still owed when Jake next opens the running app.
## Rebrand note ## Rebrand note
Product rename **Kon → Corbie** still in flight. Copy in new docs is "Corbie"; codebase paths / package names / repos still carry `kon`. No rebrand work this session. See `~/.claude/projects/-home-jake-Documents-CORBEL-Main/memory/project_corbie_rebrand.md`. Product rename **Magnotia → Magnotia** still in flight. Copy in new docs is "Magnotia"; codebase paths / package names / repos still carry `magnotia`. No rebrand work this session. See `~/.claude/projects/-home-jake-Documents-CORBEL-Main/memory/project_magnotia_rebrand.md`.
## What shipped this session ## What shipped this session
@@ -33,7 +35,7 @@ Today's header now shows `Tasks · 3 today` alongside a 7-day momentum sparkline
| `4ffdae9` | `completionStats.svelte.ts` store | | `4ffdae9` | `completionStats.svelte.ts` store |
| `54ddd41` | `CompletionSparkline.svelte` component | | `54ddd41` | `CompletionSparkline.svelte` component |
| `3cadbb0` | badge + sparkline wired into Tasks header (+ `$derived` → getter fix) | | `3cadbb0` | badge + sparkline wired into Tasks header (+ `$derived` → getter fix) |
| `c29720e` | emit `kon:task-uncompleted` + `kon:task-deleted` events | | `c29720e` | emit `magnotia:task-uncompleted` + `magnotia:task-deleted` events |
| `fa93033` | settings toggle for momentum sparkline | | `fa93033` | settings toggle for momentum sparkline |
### Counting semantics (locked) ### Counting semantics (locked)
@@ -46,9 +48,9 @@ Today's header now shows `Tasks · 3 today` alongside a 7-day momentum sparkline
### Architectural notes worth carrying forward ### Architectural notes worth carrying forward
- **`serde` is now a dependency of `kon-storage`.** Added because `DailyCompletionCount` is serialised directly to the frontend via Tauri. The existing `TaskRow` → `TaskDto` split wasn't reused because the struct has no camelCase translation need (`day`, `count` are already frontend-friendly). Simpler, one fewer file to maintain. - **`serde` is now a dependency of `magnotia-storage`.** Added because `DailyCompletionCount` is serialised directly to the frontend via Tauri. The existing `TaskRow` → `TaskDto` split wasn't reused because the struct has no camelCase translation need (`day`, `count` are already frontend-friendly). Simpler, one fewer file to maintain.
- **`$derived` cannot be exported at module scope in `.svelte.ts`.** Svelte 5 errors with `derived_invalid_export`. Originally hit during Task 9 integration; fix landed in the same commit (`3cadbb0`). `svelte-check` misses this; only Vite catches it. Plan/spec both mistakenly prescribed `$derived`; future stores should use `export function fooCount(): number` + `(...)` call sites, or a `$derived` wrapped inside a component script. - **`$derived` cannot be exported at module scope in `.svelte.ts`.** Svelte 5 errors with `derived_invalid_export`. Originally hit during Task 9 integration; fix landed in the same commit (`3cadbb0`). `svelte-check` misses this; only Vite catches it. Plan/spec both mistakenly prescribed `$derived`; future stores should use `export function fooCount(): number` + `(...)` call sites, or a `$derived` wrapped inside a component script.
- **Tuple `FromRow` in storage.** `kon-storage` strips sqlx's `derive` feature, so `#[derive(sqlx::FromRow)]` is not available. Use tuple `FromRow` `(String, i64)` etc. instead. Noted for future tasks in this crate. - **Tuple `FromRow` in storage.** `magnotia-storage` strips sqlx's `derive` feature, so `#[derive(sqlx::FromRow)]` is not available. Use tuple `FromRow` `(String, i64)` etc. instead. Noted for future tasks in this crate.
## Verification state at session end ## Verification state at session end
@@ -62,7 +64,7 @@ Fresh run on `main` tip `fa93033`:
## Owed to Jake (next session) ## Owed to Jake (next session)
1. **Manual dogfood walkthrough.** Cannot be driven by an automated agent. When opening Corbie next: 1. **Manual dogfood walkthrough.** Cannot be driven by an automated agent. When opening Magnotia next:
- Fresh state, no completions → header shows only "Tasks" title; no badge, no sparkline. - Fresh state, no completions → header shows only "Tasks" title; no badge, no sparkline.
- Complete one top-level task → badge "1 today"; sparkline appears. - Complete one top-level task → badge "1 today"; sparkline appears.
- Complete two more → badge "3 today". - Complete two more → badge "3 today".
@@ -79,9 +81,9 @@ Fresh run on `main` tip `fa93033`:
3. **Plan quality note for future Phase 9+ plans.** Two patterns I prescribed turned out to be wrong on this codebase and only surfaced during execution: 3. **Plan quality note for future Phase 9+ plans.** Two patterns I prescribed turned out to be wrong on this codebase and only surfaced during execution:
- `$derived` at `.svelte.ts` module scope: not supported. - `$derived` at `.svelte.ts` module scope: not supported.
- `#[derive(sqlx::FromRow)]` in `kon-storage`: feature is stripped. - `#[derive(sqlx::FromRow)]` in `magnotia-storage`: feature is stripped.
Worth a one-screen "kon-storage gotchas" reference file or at least a note at the top of future plans that touch these areas. Worth a one-screen "magnotia-storage gotchas" reference file or at least a note at the top of future plans that touch these areas.
## What's left for v0.1 ## What's left for v0.1
@@ -92,7 +94,7 @@ Unchanged except for Phase 8 now being closed:
| Phases 1 to 8 | **All shipped.** | | Phases 1 to 8 | **All shipped.** |
| Phase 9 | Polish debt (file-system .md save dialog, bulk select/export in History, LLM content tags, settings UX pass, visual polish, accessibility sweep). Absorbs backlog above. 1 to 2 days. | | Phase 9 | Polish debt (file-system .md save dialog, bulk select/export in History, LLM content tags, settings UX pass, visual polish, accessibility sweep). Absorbs backlog above. 1 to 2 days. |
| Phase 10a | QC: dogfood walkthrough, Rachmann's RB-08 Mac verification (parallel), cross-platform CI, a11y regression, clean-install test. Half day. | | Phase 10a | QC: dogfood walkthrough, Rachmann's RB-08 Mac verification (parallel), cross-platform CI, a11y regression, clean-install test. Half day. |
| Phase 10b | Kon → Corbie rename sweep: package name, all 10 crates, bundle ids, install paths, `kon.db` → `corbie.db`, event names, repo rename on both remotes. Half to 1 day. | | Phase 10b | Magnotia → Magnotia rename sweep: package name, all 10 crates, bundle ids, install paths, `magnotia.db` → `magnotia.db`, event names, repo rename on both remotes. Half to 1 day. |
| Phase 10c | Release: 0.1.0 version sync, CHANGELOG seeded from roadmap phases, release notes, tag + push. Half day. | | Phase 10c | Release: 0.1.0 version sync, CHANGELOG seeded from roadmap phases, release notes, tag + push. Half day. |
### Release-blocker state ### Release-blocker state
@@ -115,8 +117,8 @@ Unchanged except for Phase 8 now being closed:
- Spec: [docs/superpowers/specs/2026-04-24-phase8-forgiving-gamification-design.md](docs/superpowers/specs/2026-04-24-phase8-forgiving-gamification-design.md) - Spec: [docs/superpowers/specs/2026-04-24-phase8-forgiving-gamification-design.md](docs/superpowers/specs/2026-04-24-phase8-forgiving-gamification-design.md)
- Plan: [docs/superpowers/plans/2026-04-24-phase8-forgiving-gamification.md](docs/superpowers/plans/2026-04-24-phase8-forgiving-gamification.md) - Plan: [docs/superpowers/plans/2026-04-24-phase8-forgiving-gamification.md](docs/superpowers/plans/2026-04-24-phase8-forgiving-gamification.md)
- Roadmap: [docs/roadmap/2026-04-23-corbie-feature-complete-roadmap.md](docs/roadmap/2026-04-23-corbie-feature-complete-roadmap.md) - Roadmap: [docs/roadmap/2026-04-23-magnotia-feature-complete-roadmap.md](docs/roadmap/2026-04-23-magnotia-feature-complete-roadmap.md)
- Previous handover: [HANDOVER-2026-04-19.md](HANDOVER-2026-04-19.md) - Previous handover: [HANDOVER-2026-04-19.md](HANDOVER-2026-04-19.md)
- Release-blocker index: [docs/issues/README.md](docs/issues/README.md) - Release-blocker index: [docs/issues/README.md](docs/issues/README.md)
- Rebrand memory: `~/.claude/projects/-home-jake-Documents-CORBEL-Main/memory/project_corbie_rebrand.md` - Rebrand memory: `~/.claude/projects/-home-jake-Documents-CORBEL-Main/memory/project_magnotia_rebrand.md`
- Active-focus upstream: `context/active-focus.md` in CORBEL-Main - Active-focus upstream: `context/active-focus.md` in CORBEL-Main

10
docs/issues/README.md
View File

@@ -7,9 +7,9 @@ tags: [issues, release-blockers]
# Release-blockers # Release-blockers
Issues here must land before Kon v0.1 ships. Each is sourced from Issues here must land before Magnotia v0.1 ships. Each is sourced from
`docs/code-review-2026-04-22.md`. When `gh` CLI is available, these `docs/code-review-2026-04-22.md`. When `gh` CLI is available, these
should be mirrored as real GitHub issues on `jakejars/kon`. should be mirrored as real GitHub issues on `jakejars/magnotia`.
## CRITICAL (0 open, 3 resolved) ## CRITICAL (0 open, 3 resolved)
@@ -28,13 +28,13 @@ No open CRITICAL blockers.
| RB-01 | [c1-live-session-race.md](c1-live-session-race.md) | `src-tauri/commands/live.rs` | Added `LiveTranscriptionState.lifecycle: tokio::sync::Mutex<()>` and hold it across the async spans of both `start_live_transcription_session` and `stop_live_transcription_session`. The running-slot check/insert and stop/take/join sequence are now serialized, so concurrent starts can no longer both pass the empty-slot check and a start during stop blocks until the previous worker fully joins. Two async regression tests cover both races. | | RB-01 | [c1-live-session-race.md](c1-live-session-race.md) | `src-tauri/commands/live.rs` | Added `LiveTranscriptionState.lifecycle: tokio::sync::Mutex<()>` and hold it across the async spans of both `start_live_transcription_session` and `stop_live_transcription_session`. The running-slot check/insert and stop/take/join sequence are now serialized, so concurrent starts can no longer both pass the empty-slot check and a start during stop blocks until the previous worker fully joins. Two async regression tests cover both races. |
| RB-02 | [c3-migrations-atomicity.md](c3-migrations-atomicity.md) | `crates/storage/migrations.rs` | Each migration now runs inside a `pool.begin()` / `tx.commit()` transaction alongside its `schema_version` insert. Regression test injects a poisoned v9 migration and asserts neither the partial schema change nor the version row persists. DRY'd `run_migrations_up_to` test helper onto the same code path. | | RB-02 | [c3-migrations-atomicity.md](c3-migrations-atomicity.md) | `crates/storage/migrations.rs` | Each migration now runs inside a `pool.begin()` / `tx.commit()` transaction alongside its `schema_version` insert. Regression test injects a poisoned v9 migration and asserts neither the partial schema change nor the version row persists. DRY'd `run_migrations_up_to` test helper onto the same code path. |
| RB-03 | [c4-transcript-profile-fk.md](c4-transcript-profile-fk.md) | `crates/storage/migrations.rs` + `database.rs` | Added a transactional v9 rebuild of `transcripts` that enforces `profile_id REFERENCES profiles(id) ON DELETE RESTRICT`, reassigns any orphaned transcript provenance to `DEFAULT_PROFILE_ID`, rebuilds dependent `segments` / FTS state, and preserves valid profile references. `insert_transcript` now rejects unknown profile ids up front, and `delete_profile` returns a clear reassign-first error when transcripts still reference the profile. Regression tests cover migration reconciliation, invalid inserts, and delete rejection. | | RB-03 | [c4-transcript-profile-fk.md](c4-transcript-profile-fk.md) | `crates/storage/migrations.rs` + `database.rs` | Added a transactional v9 rebuild of `transcripts` that enforces `profile_id REFERENCES profiles(id) ON DELETE RESTRICT`, reassigns any orphaned transcript provenance to `DEFAULT_PROFILE_ID`, rebuilds dependent `segments` / FTS state, and preserves valid profile references. `insert_transcript` now rejects unknown profile ids up front, and `delete_profile` returns a clear reassign-first error when transcripts still reference the profile. Regression tests cover migration reconciliation, invalid inserts, and delete rejection. |
| RB-04 | [run-live-session-monolith.md](run-live-session-monolith.md) | `src-tauri/commands/live.rs` | Replaced the 200+ line `run_live_session` loop with an explicit `LiveSessionRuntime` + `LiveLoopState` structure. Capture startup, runtime mic-error draining, audio chunk processing, overflow handling, stop-tail flush, inference dispatch/drain, and WAV finalisation each live in focused helpers, preserving behaviour while making the lifecycle auditable enough for RB-01 follow-up. Existing live tests and the full `kon` lib suite stay green. | | RB-04 | [run-live-session-monolith.md](run-live-session-monolith.md) | `src-tauri/commands/live.rs` | Replaced the 200+ line `run_live_session` loop with an explicit `LiveSessionRuntime` + `LiveLoopState` structure. Capture startup, runtime mic-error draining, audio chunk processing, overflow handling, stop-tail flush, inference dispatch/drain, and WAV finalisation each live in focused helpers, preserving behaviour while making the lifecycle auditable enough for RB-01 follow-up. Existing live tests and the full `magnotia` lib suite stay green. |
| RB-05 | [poll-inference-channel-fatality.md](poll-inference-channel-fatality.md) | `src-tauri/commands/live.rs` | `poll_inference` now treats result-channel loss as a listener-lifecycle problem rather than a transcription failure. On the first `result_channel.send(...)` error it marks the live result listener as lost, emits a single warning that transcription will continue in the background, and keeps processing later chunks without retrying the dead channel. Regression test simulates a dead result listener and asserts chunk processing continues with only one warning. | | RB-05 | [poll-inference-channel-fatality.md](poll-inference-channel-fatality.md) | `src-tauri/commands/live.rs` | `poll_inference` now treats result-channel loss as a listener-lifecycle problem rather than a transcription failure. On the first `result_channel.send(...)` error it marks the live result listener as lost, emits a single warning that transcription will continue in the background, and keeps processing later chunks without retrying the dead channel. Regression test simulates a dead result listener and asserts chunk processing continues with only one warning. |
| RB-06 | [native-capture-worker-join.md](native-capture-worker-join.md) | `src-tauri/commands/audio.rs` | `NativeCaptureState.stop_tx` replaced by `worker: AsyncMutex<Option<CaptureWorker>>`. `CaptureWorker` bundles the stop sender and the spawned task's `JoinHandle`; `stop_worker(worker)` sends stop then `await`s termination. Both `start_native_capture` (prior-worker stop) and `stop_native_capture` use the helper. Removed the 50ms sleep — the join barrier is exact. Two regression tests cover the lifecycle guarantee and the already-exited case. | | RB-06 | [native-capture-worker-join.md](native-capture-worker-join.md) | `src-tauri/commands/audio.rs` | `NativeCaptureState.stop_tx` replaced by `worker: AsyncMutex<Option<CaptureWorker>>`. `CaptureWorker` bundles the stop sender and the spawned task's `JoinHandle`; `stop_worker(worker)` sends stop then `await`s termination. Both `start_native_capture` (prior-worker stop) and `stop_native_capture` use the helper. Removed the 50ms sleep — the join barrier is exact. Two regression tests cover the lifecycle guarantee and the already-exited case. |
| RB-07 | [runtime-capabilities-accelerators.md](runtime-capabilities-accelerators.md) | `src-tauri/commands/models.rs` | Introduced `compose_accelerators(whisper_enabled, loader_available, target)` as a pure helper; `supported_accelerators()` reads `cfg(feature = "whisper")`, `vulkan_loader_available()`, and target OS then delegates. `get_runtime_capabilities` uses it in place of the hard-coded `["cpu", "vulkan"]`. Whisper's `supports_gpu` now follows the feature flag. Five regression tests cover all permutations. | | RB-07 | [runtime-capabilities-accelerators.md](runtime-capabilities-accelerators.md) | `src-tauri/commands/models.rs` | Introduced `compose_accelerators(whisper_enabled, loader_available, target)` as a pure helper; `supported_accelerators()` reads `cfg(feature = "whisper")`, `vulkan_loader_available()`, and target OS then delegates. `get_runtime_capabilities` uses it in place of the hard-coded `["cpu", "vulkan"]`. Whisper's `supports_gpu` now follows the feature flag. Five regression tests cover all permutations. |
| RB-09 | [decoder-partial-audio-on-error.md](decoder-partial-audio-on-error.md) | `crates/audio/decode.rs` | Packet-loop now propagates all non-EOF `SymphoniaError`s as `AudioDecodeFailed`; per-packet decode errors bubble via `?`. Mock-`MediaSource` regression test confirms mid-stream I/O errors surface instead of returning partial audio. | | RB-09 | [decoder-partial-audio-on-error.md](decoder-partial-audio-on-error.md) | `crates/audio/decode.rs` | Packet-loop now propagates all non-EOF `SymphoniaError`s as `AudioDecodeFailed`; per-packet decode errors bubble via `?`. Mock-`MediaSource` regression test confirms mid-stream I/O errors surface instead of returning partial audio. |
| RB-10 | [llm-prompt-preflight.md](llm-prompt-preflight.md) | `crates/llm/lib.rs` | Added an explicit prompt-budget preflight before context creation. If `prompt_tokens + max_tokens + reserve` exceeds the 8192-token cap, `generate` now returns a typed `EngineError::PromptTooLong { ... }` instead of failing late inside inference. Regression tests cover both the over-budget and exact-budget boundaries. | | RB-10 | [llm-prompt-preflight.md](llm-prompt-preflight.md) | `crates/llm/lib.rs` | Added an explicit prompt-budget preflight before context creation. If `prompt_tokens + max_tokens + reserve` exceeds the 8192-token cap, `generate` now returns a typed `EngineError::PromptTooLong { ... }` instead of failing late inside inference. Regression tests cover both the over-budget and exact-budget boundaries. |
| RB-11 | [keystore-thread-safety.md](keystore-thread-safety.md) | `crates/cloud-providers/keystore.rs` | Replaced the `std::env::set_var` stub with a process-global `OnceLock<Mutex<HashMap<...>>>` keystore, keeping the API safe from any thread. Retrieval still falls back to read-only `KON_API_KEY_*` env vars for externally supplied secrets. Two regression tests cover store/retrieve and provider isolation. | | RB-11 | [keystore-thread-safety.md](keystore-thread-safety.md) | `crates/cloud-providers/keystore.rs` | Replaced the `std::env::set_var` stub with a process-global `OnceLock<Mutex<HashMap<...>>>` keystore, keeping the API safe from any thread. Retrieval still falls back to read-only `MAGNOTIA_API_KEY_*` env vars for externally supplied secrets. Two regression tests cover store/retrieve and provider isolation. |
| RB-12 | [hotkey-linux-device-filter.md](hotkey-linux-device-filter.md) | `crates/hotkey/linux.rs` | Extracted `device_supports_combo` helper; `try_attach_device` now reads the configured `HotkeyCombo` from the watch channel and checks support for that trigger key. Four regression tests land in `linux::tests`. | | RB-12 | [hotkey-linux-device-filter.md](hotkey-linux-device-filter.md) | `crates/hotkey/linux.rs` | Extracted `device_supports_combo` helper; `try_attach_device` now reads the configured `HotkeyCombo` from the watch channel and checks support for that trigger key. Four regression tests land in `linux::tests`. |
## Remaining blocker ## Remaining blocker
@@ -51,7 +51,7 @@ for file in docs/issues/rb-*.md c1-*.md c3-*.md c4-*.md run-*.md poll-*.md \
native-*.md runtime-*.md power-*.md decoder-*.md llm-*.md \ native-*.md runtime-*.md power-*.md decoder-*.md llm-*.md \
keystore-*.md hotkey-*.md keystore-*.md hotkey-*.md
set -l title (head -1 "$file" | sed 's/^# //') set -l title (head -1 "$file" | sed 's/^# //')
gh issue create --repo jakejars/kon --title "$title" --body-file "$file" \ gh issue create --repo jakejars/magnotia --title "$title" --body-file "$file" \
--label release-blocker --label release-blocker
end end
``` ```

Some files were not shown because too many files have changed in this diff Show More